<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="566">
<package pkgid="2f66bd9fcffc6c4a8c95bcc96895d80b8752e5b0a34ecdc93e2e466dbb2c3da9" name="NetworkManager" arch="x86_64">
  <version epoch="1" ver="1.40.0" rel="2.el8_7"/>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.39.6-1" date="1654084800">- Update to 1.39.6 release (development)
- Implement ACD (address conflict detection) for DHCPv4 (rh #1713380)</changelog>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1:1.39.7-1" date="1655294400">- Update to 1.39.7 release (development)
- core: cancel the IP check on deactivation (rh #2080928)
- core: ensure DHCP is restarted every time the link goes up (rh #2079406)
- core: fix a leak of L3 configuration memory (rh #2083453)
- ppp: fix a race with pppd when removing addresses (rh #2085382)
- wifi: fix a crash when checking WEP supplicant capability (rh #2092782)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.39.7-2" date="1655380800">- fix priority of IPv6 addresses to prefer manual over DHCPv6 over SLAAC (rh #2097270)</changelog>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1:1.39.8-1" date="1656590400">- Update to 1.39.8 release (development)
- core: make ipv6.addr-gen-mode default configurable (rh #1743161) (rh #2082682)
- dhcpv6: finish DAD before considering a lease to be good (rh #2096386)
- core: add connection.wait-activation-delay property (rh #2008337)</changelog>
  <changelog author="Vojtech Bubela &lt;vbubela@redhat.com&gt; - 1:1.39.10-1" date="1657800000">- Update to 1.39.10 release (development)
- initrd: set a default carrier timeout of 10 seconds in initrd (rh #2079277)
- dhcp: wait DAD completion for DHCPv6 addresses (rh #2096386)
- libnm: support wait-activation-delay property (rh #2008337)
- veth: fix veth activation on booting (rh #2105956)
- support a ipv6.addr-gen-mode knob in the global config (rh #208268)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.39.11-1" date="1659009600">- Update to 1.39.11 release (development)
- dhcp: fix EXTENDED DHCP event to accept lease for dhclient plugin (rh #2109285)
- ovs: honor unmanaged setting also for interfaces that fail (rh #2077950)</changelog>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1:1.39.12-1" date="1659096000">- Update to 1.39.12 release (development)
- bridge: fix reapply support (rh #2092762)</changelog>
  <changelog author="Ana Cabral &lt;acabral@redhat.com&gt; - 1:1.39.90-1" date="1660651200">- Update to 1.39.90 release (release candidate)
- bridge: fix reapply of non-bridge properties (rh #2092762)
- bridge: fix wired.mtu reapply (rh #2076131)</changelog>
  <changelog author="Ana Cabral &lt;acabral@redhat.com&gt; - 1:1.40.0-1" date="1661515200">- Update to 1.40.0 release</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.40.0-2" date="1666267200">- Don't restart DHCP when MAC changes, to avoid that the IP changes (rh #2124443)</changelog>
</package>
<package pkgid="3f6a12d4cdc7c24161772117172df1cebf5ad3034df93f93211d7b5c637e78a6" name="NetworkManager" arch="x86_64">
  <version epoch="1" ver="1.40.0" rel="5.el8_7"/>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1:1.39.8-1" date="1656590400">- Update to 1.39.8 release (development)
- core: make ipv6.addr-gen-mode default configurable (rh #1743161) (rh #2082682)
- dhcpv6: finish DAD before considering a lease to be good (rh #2096386)
- core: add connection.wait-activation-delay property (rh #2008337)</changelog>
  <changelog author="Vojtech Bubela &lt;vbubela@redhat.com&gt; - 1:1.39.10-1" date="1657800000">- Update to 1.39.10 release (development)
- initrd: set a default carrier timeout of 10 seconds in initrd (rh #2079277)
- dhcp: wait DAD completion for DHCPv6 addresses (rh #2096386)
- libnm: support wait-activation-delay property (rh #2008337)
- veth: fix veth activation on booting (rh #2105956)
- support a ipv6.addr-gen-mode knob in the global config (rh #208268)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.39.11-1" date="1659009600">- Update to 1.39.11 release (development)
- dhcp: fix EXTENDED DHCP event to accept lease for dhclient plugin (rh #2109285)
- ovs: honor unmanaged setting also for interfaces that fail (rh #2077950)</changelog>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1:1.39.12-1" date="1659096000">- Update to 1.39.12 release (development)
- bridge: fix reapply support (rh #2092762)</changelog>
  <changelog author="Ana Cabral &lt;acabral@redhat.com&gt; - 1:1.39.90-1" date="1660651200">- Update to 1.39.90 release (release candidate)
- bridge: fix reapply of non-bridge properties (rh #2092762)
- bridge: fix wired.mtu reapply (rh #2076131)</changelog>
  <changelog author="Ana Cabral &lt;acabral@redhat.com&gt; - 1:1.40.0-1" date="1661515200">- Update to 1.40.0 release</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.40.0-2" date="1666267200">- Don't restart DHCP when MAC changes, to avoid that the IP changes (rh #2124443)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.40.0-3" date="1667908800">- dns: ensure that nameservers are sorted according to priority (rh #2134563)</changelog>
  <changelog author="Fernando Fernandez Mancera &lt;ferferna@redhat.com&gt; 1:1.40.0-4" date="1669636800">- dhcp: decline IPv6 lease if all addresses fail DAD (rh #2132281)</changelog>
  <changelog author="Fernando Fernandez Mancera &lt;ferferna@redhat.com&gt; 1:1.40.0-5" date="1671192000">- ovs: wait that links disappear during initial cleanup (rh #2153429)
- core: wait for carrier before resolving hostname via DNS (rh #2152891)</changelog>
</package>
<package pkgid="966e5245c98040632c78938af5da7dbeaac2a2e0d374d9ebed22a38aaf799362" name="NetworkManager" arch="x86_64">
  <version epoch="1" ver="1.40.0" rel="6.el8_7"/>
  <changelog author="Vojtech Bubela &lt;vbubela@redhat.com&gt; - 1:1.39.10-1" date="1657800000">- Update to 1.39.10 release (development)
- initrd: set a default carrier timeout of 10 seconds in initrd (rh #2079277)
- dhcp: wait DAD completion for DHCPv6 addresses (rh #2096386)
- libnm: support wait-activation-delay property (rh #2008337)
- veth: fix veth activation on booting (rh #2105956)
- support a ipv6.addr-gen-mode knob in the global config (rh #208268)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.39.11-1" date="1659009600">- Update to 1.39.11 release (development)
- dhcp: fix EXTENDED DHCP event to accept lease for dhclient plugin (rh #2109285)
- ovs: honor unmanaged setting also for interfaces that fail (rh #2077950)</changelog>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1:1.39.12-1" date="1659096000">- Update to 1.39.12 release (development)
- bridge: fix reapply support (rh #2092762)</changelog>
  <changelog author="Ana Cabral &lt;acabral@redhat.com&gt; - 1:1.39.90-1" date="1660651200">- Update to 1.39.90 release (release candidate)
- bridge: fix reapply of non-bridge properties (rh #2092762)
- bridge: fix wired.mtu reapply (rh #2076131)</changelog>
  <changelog author="Ana Cabral &lt;acabral@redhat.com&gt; - 1:1.40.0-1" date="1661515200">- Update to 1.40.0 release</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.40.0-2" date="1666267200">- Don't restart DHCP when MAC changes, to avoid that the IP changes (rh #2124443)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.40.0-3" date="1667908800">- dns: ensure that nameservers are sorted according to priority (rh #2134563)</changelog>
  <changelog author="Fernando Fernandez Mancera &lt;ferferna@redhat.com&gt; - 1:1.40.0-4" date="1669636800">- dhcp: decline IPv6 lease if all addresses fail DAD (rh #2132281)</changelog>
  <changelog author="Fernando Fernandez Mancera &lt;ferferna@redhat.com&gt; - 1:1.40.0-5" date="1671192000">- ovs: wait that links disappear during initial cleanup (rh #2153429)
- core: wait for carrier before resolving hostname via DNS (rh #2152891)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.40.0-6" date="1677672000">- Fix hostname resolution from tentative IPv6 addresses (rh #2166711)</changelog>
</package>
<package pkgid="cacd6942acdb5e57472fddee7689565755f8c0d9061e0d645c704240f9e3e30d" name="NetworkManager-adsl" arch="x86_64">
  <version epoch="1" ver="1.40.0" rel="2.el8_7"/>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.39.6-1" date="1654084800">- Update to 1.39.6 release (development)
- Implement ACD (address conflict detection) for DHCPv4 (rh #1713380)</changelog>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1:1.39.7-1" date="1655294400">- Update to 1.39.7 release (development)
- core: cancel the IP check on deactivation (rh #2080928)
- core: ensure DHCP is restarted every time the link goes up (rh #2079406)
- core: fix a leak of L3 configuration memory (rh #2083453)
- ppp: fix a race with pppd when removing addresses (rh #2085382)
- wifi: fix a crash when checking WEP supplicant capability (rh #2092782)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.39.7-2" date="1655380800">- fix priority of IPv6 addresses to prefer manual over DHCPv6 over SLAAC (rh #2097270)</changelog>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1:1.39.8-1" date="1656590400">- Update to 1.39.8 release (development)
- core: make ipv6.addr-gen-mode default configurable (rh #1743161) (rh #2082682)
- dhcpv6: finish DAD before considering a lease to be good (rh #2096386)
- core: add connection.wait-activation-delay property (rh #2008337)</changelog>
  <changelog author="Vojtech Bubela &lt;vbubela@redhat.com&gt; - 1:1.39.10-1" date="1657800000">- Update to 1.39.10 release (development)
- initrd: set a default carrier timeout of 10 seconds in initrd (rh #2079277)
- dhcp: wait DAD completion for DHCPv6 addresses (rh #2096386)
- libnm: support wait-activation-delay property (rh #2008337)
- veth: fix veth activation on booting (rh #2105956)
- support a ipv6.addr-gen-mode knob in the global config (rh #208268)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.39.11-1" date="1659009600">- Update to 1.39.11 release (development)
- dhcp: fix EXTENDED DHCP event to accept lease for dhclient plugin (rh #2109285)
- ovs: honor unmanaged setting also for interfaces that fail (rh #2077950)</changelog>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1:1.39.12-1" date="1659096000">- Update to 1.39.12 release (development)
- bridge: fix reapply support (rh #2092762)</changelog>
  <changelog author="Ana Cabral &lt;acabral@redhat.com&gt; - 1:1.39.90-1" date="1660651200">- Update to 1.39.90 release (release candidate)
- bridge: fix reapply of non-bridge properties (rh #2092762)
- bridge: fix wired.mtu reapply (rh #2076131)</changelog>
  <changelog author="Ana Cabral &lt;acabral@redhat.com&gt; - 1:1.40.0-1" date="1661515200">- Update to 1.40.0 release</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.40.0-2" date="1666267200">- Don't restart DHCP when MAC changes, to avoid that the IP changes (rh #2124443)</changelog>
</package>
<package pkgid="b4a6b5b048c30b1c5c40b6c34b69e112d1dd976524d6d4296e66f8ff2523f78a" name="NetworkManager-adsl" arch="x86_64">
  <version epoch="1" ver="1.40.0" rel="5.el8_7"/>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1:1.39.8-1" date="1656590400">- Update to 1.39.8 release (development)
- core: make ipv6.addr-gen-mode default configurable (rh #1743161) (rh #2082682)
- dhcpv6: finish DAD before considering a lease to be good (rh #2096386)
- core: add connection.wait-activation-delay property (rh #2008337)</changelog>
  <changelog author="Vojtech Bubela &lt;vbubela@redhat.com&gt; - 1:1.39.10-1" date="1657800000">- Update to 1.39.10 release (development)
- initrd: set a default carrier timeout of 10 seconds in initrd (rh #2079277)
- dhcp: wait DAD completion for DHCPv6 addresses (rh #2096386)
- libnm: support wait-activation-delay property (rh #2008337)
- veth: fix veth activation on booting (rh #2105956)
- support a ipv6.addr-gen-mode knob in the global config (rh #208268)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.39.11-1" date="1659009600">- Update to 1.39.11 release (development)
- dhcp: fix EXTENDED DHCP event to accept lease for dhclient plugin (rh #2109285)
- ovs: honor unmanaged setting also for interfaces that fail (rh #2077950)</changelog>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1:1.39.12-1" date="1659096000">- Update to 1.39.12 release (development)
- bridge: fix reapply support (rh #2092762)</changelog>
  <changelog author="Ana Cabral &lt;acabral@redhat.com&gt; - 1:1.39.90-1" date="1660651200">- Update to 1.39.90 release (release candidate)
- bridge: fix reapply of non-bridge properties (rh #2092762)
- bridge: fix wired.mtu reapply (rh #2076131)</changelog>
  <changelog author="Ana Cabral &lt;acabral@redhat.com&gt; - 1:1.40.0-1" date="1661515200">- Update to 1.40.0 release</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.40.0-2" date="1666267200">- Don't restart DHCP when MAC changes, to avoid that the IP changes (rh #2124443)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.40.0-3" date="1667908800">- dns: ensure that nameservers are sorted according to priority (rh #2134563)</changelog>
  <changelog author="Fernando Fernandez Mancera &lt;ferferna@redhat.com&gt; 1:1.40.0-4" date="1669636800">- dhcp: decline IPv6 lease if all addresses fail DAD (rh #2132281)</changelog>
  <changelog author="Fernando Fernandez Mancera &lt;ferferna@redhat.com&gt; 1:1.40.0-5" date="1671192000">- ovs: wait that links disappear during initial cleanup (rh #2153429)
- core: wait for carrier before resolving hostname via DNS (rh #2152891)</changelog>
</package>
<package pkgid="e82ce94cabd4600015c3a631f917813ffa7eff44700b7c70367f1df24041c9ef" name="NetworkManager-adsl" arch="x86_64">
  <version epoch="1" ver="1.40.0" rel="6.el8_7"/>
  <changelog author="Vojtech Bubela &lt;vbubela@redhat.com&gt; - 1:1.39.10-1" date="1657800000">- Update to 1.39.10 release (development)
- initrd: set a default carrier timeout of 10 seconds in initrd (rh #2079277)
- dhcp: wait DAD completion for DHCPv6 addresses (rh #2096386)
- libnm: support wait-activation-delay property (rh #2008337)
- veth: fix veth activation on booting (rh #2105956)
- support a ipv6.addr-gen-mode knob in the global config (rh #208268)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.39.11-1" date="1659009600">- Update to 1.39.11 release (development)
- dhcp: fix EXTENDED DHCP event to accept lease for dhclient plugin (rh #2109285)
- ovs: honor unmanaged setting also for interfaces that fail (rh #2077950)</changelog>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1:1.39.12-1" date="1659096000">- Update to 1.39.12 release (development)
- bridge: fix reapply support (rh #2092762)</changelog>
  <changelog author="Ana Cabral &lt;acabral@redhat.com&gt; - 1:1.39.90-1" date="1660651200">- Update to 1.39.90 release (release candidate)
- bridge: fix reapply of non-bridge properties (rh #2092762)
- bridge: fix wired.mtu reapply (rh #2076131)</changelog>
  <changelog author="Ana Cabral &lt;acabral@redhat.com&gt; - 1:1.40.0-1" date="1661515200">- Update to 1.40.0 release</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.40.0-2" date="1666267200">- Don't restart DHCP when MAC changes, to avoid that the IP changes (rh #2124443)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.40.0-3" date="1667908800">- dns: ensure that nameservers are sorted according to priority (rh #2134563)</changelog>
  <changelog author="Fernando Fernandez Mancera &lt;ferferna@redhat.com&gt; - 1:1.40.0-4" date="1669636800">- dhcp: decline IPv6 lease if all addresses fail DAD (rh #2132281)</changelog>
  <changelog author="Fernando Fernandez Mancera &lt;ferferna@redhat.com&gt; - 1:1.40.0-5" date="1671192000">- ovs: wait that links disappear during initial cleanup (rh #2153429)
- core: wait for carrier before resolving hostname via DNS (rh #2152891)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.40.0-6" date="1677672000">- Fix hostname resolution from tentative IPv6 addresses (rh #2166711)</changelog>
</package>
<package pkgid="bd1498da08778a5f18521fd83d03f4abbbcf040ebac04a7488ad24fa1596d3b2" name="NetworkManager-bluetooth" arch="x86_64">
  <version epoch="1" ver="1.40.0" rel="2.el8_7"/>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.39.6-1" date="1654084800">- Update to 1.39.6 release (development)
- Implement ACD (address conflict detection) for DHCPv4 (rh #1713380)</changelog>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1:1.39.7-1" date="1655294400">- Update to 1.39.7 release (development)
- core: cancel the IP check on deactivation (rh #2080928)
- core: ensure DHCP is restarted every time the link goes up (rh #2079406)
- core: fix a leak of L3 configuration memory (rh #2083453)
- ppp: fix a race with pppd when removing addresses (rh #2085382)
- wifi: fix a crash when checking WEP supplicant capability (rh #2092782)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.39.7-2" date="1655380800">- fix priority of IPv6 addresses to prefer manual over DHCPv6 over SLAAC (rh #2097270)</changelog>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1:1.39.8-1" date="1656590400">- Update to 1.39.8 release (development)
- core: make ipv6.addr-gen-mode default configurable (rh #1743161) (rh #2082682)
- dhcpv6: finish DAD before considering a lease to be good (rh #2096386)
- core: add connection.wait-activation-delay property (rh #2008337)</changelog>
  <changelog author="Vojtech Bubela &lt;vbubela@redhat.com&gt; - 1:1.39.10-1" date="1657800000">- Update to 1.39.10 release (development)
- initrd: set a default carrier timeout of 10 seconds in initrd (rh #2079277)
- dhcp: wait DAD completion for DHCPv6 addresses (rh #2096386)
- libnm: support wait-activation-delay property (rh #2008337)
- veth: fix veth activation on booting (rh #2105956)
- support a ipv6.addr-gen-mode knob in the global config (rh #208268)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.39.11-1" date="1659009600">- Update to 1.39.11 release (development)
- dhcp: fix EXTENDED DHCP event to accept lease for dhclient plugin (rh #2109285)
- ovs: honor unmanaged setting also for interfaces that fail (rh #2077950)</changelog>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1:1.39.12-1" date="1659096000">- Update to 1.39.12 release (development)
- bridge: fix reapply support (rh #2092762)</changelog>
  <changelog author="Ana Cabral &lt;acabral@redhat.com&gt; - 1:1.39.90-1" date="1660651200">- Update to 1.39.90 release (release candidate)
- bridge: fix reapply of non-bridge properties (rh #2092762)
- bridge: fix wired.mtu reapply (rh #2076131)</changelog>
  <changelog author="Ana Cabral &lt;acabral@redhat.com&gt; - 1:1.40.0-1" date="1661515200">- Update to 1.40.0 release</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.40.0-2" date="1666267200">- Don't restart DHCP when MAC changes, to avoid that the IP changes (rh #2124443)</changelog>
</package>
<package pkgid="6aeafce839de98e595412388022f82b06476f1252343a25baa80698e6cce8baa" name="NetworkManager-bluetooth" arch="x86_64">
  <version epoch="1" ver="1.40.0" rel="5.el8_7"/>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1:1.39.8-1" date="1656590400">- Update to 1.39.8 release (development)
- core: make ipv6.addr-gen-mode default configurable (rh #1743161) (rh #2082682)
- dhcpv6: finish DAD before considering a lease to be good (rh #2096386)
- core: add connection.wait-activation-delay property (rh #2008337)</changelog>
  <changelog author="Vojtech Bubela &lt;vbubela@redhat.com&gt; - 1:1.39.10-1" date="1657800000">- Update to 1.39.10 release (development)
- initrd: set a default carrier timeout of 10 seconds in initrd (rh #2079277)
- dhcp: wait DAD completion for DHCPv6 addresses (rh #2096386)
- libnm: support wait-activation-delay property (rh #2008337)
- veth: fix veth activation on booting (rh #2105956)
- support a ipv6.addr-gen-mode knob in the global config (rh #208268)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.39.11-1" date="1659009600">- Update to 1.39.11 release (development)
- dhcp: fix EXTENDED DHCP event to accept lease for dhclient plugin (rh #2109285)
- ovs: honor unmanaged setting also for interfaces that fail (rh #2077950)</changelog>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1:1.39.12-1" date="1659096000">- Update to 1.39.12 release (development)
- bridge: fix reapply support (rh #2092762)</changelog>
  <changelog author="Ana Cabral &lt;acabral@redhat.com&gt; - 1:1.39.90-1" date="1660651200">- Update to 1.39.90 release (release candidate)
- bridge: fix reapply of non-bridge properties (rh #2092762)
- bridge: fix wired.mtu reapply (rh #2076131)</changelog>
  <changelog author="Ana Cabral &lt;acabral@redhat.com&gt; - 1:1.40.0-1" date="1661515200">- Update to 1.40.0 release</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.40.0-2" date="1666267200">- Don't restart DHCP when MAC changes, to avoid that the IP changes (rh #2124443)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.40.0-3" date="1667908800">- dns: ensure that nameservers are sorted according to priority (rh #2134563)</changelog>
  <changelog author="Fernando Fernandez Mancera &lt;ferferna@redhat.com&gt; 1:1.40.0-4" date="1669636800">- dhcp: decline IPv6 lease if all addresses fail DAD (rh #2132281)</changelog>
  <changelog author="Fernando Fernandez Mancera &lt;ferferna@redhat.com&gt; 1:1.40.0-5" date="1671192000">- ovs: wait that links disappear during initial cleanup (rh #2153429)
- core: wait for carrier before resolving hostname via DNS (rh #2152891)</changelog>
</package>
<package pkgid="288c697b2b78c06d56c300f76fcfb6f8db8b2ed55af0eb729a0d68a12f26c08f" name="NetworkManager-bluetooth" arch="x86_64">
  <version epoch="1" ver="1.40.0" rel="6.el8_7"/>
  <changelog author="Vojtech Bubela &lt;vbubela@redhat.com&gt; - 1:1.39.10-1" date="1657800000">- Update to 1.39.10 release (development)
- initrd: set a default carrier timeout of 10 seconds in initrd (rh #2079277)
- dhcp: wait DAD completion for DHCPv6 addresses (rh #2096386)
- libnm: support wait-activation-delay property (rh #2008337)
- veth: fix veth activation on booting (rh #2105956)
- support a ipv6.addr-gen-mode knob in the global config (rh #208268)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.39.11-1" date="1659009600">- Update to 1.39.11 release (development)
- dhcp: fix EXTENDED DHCP event to accept lease for dhclient plugin (rh #2109285)
- ovs: honor unmanaged setting also for interfaces that fail (rh #2077950)</changelog>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1:1.39.12-1" date="1659096000">- Update to 1.39.12 release (development)
- bridge: fix reapply support (rh #2092762)</changelog>
  <changelog author="Ana Cabral &lt;acabral@redhat.com&gt; - 1:1.39.90-1" date="1660651200">- Update to 1.39.90 release (release candidate)
- bridge: fix reapply of non-bridge properties (rh #2092762)
- bridge: fix wired.mtu reapply (rh #2076131)</changelog>
  <changelog author="Ana Cabral &lt;acabral@redhat.com&gt; - 1:1.40.0-1" date="1661515200">- Update to 1.40.0 release</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.40.0-2" date="1666267200">- Don't restart DHCP when MAC changes, to avoid that the IP changes (rh #2124443)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.40.0-3" date="1667908800">- dns: ensure that nameservers are sorted according to priority (rh #2134563)</changelog>
  <changelog author="Fernando Fernandez Mancera &lt;ferferna@redhat.com&gt; - 1:1.40.0-4" date="1669636800">- dhcp: decline IPv6 lease if all addresses fail DAD (rh #2132281)</changelog>
  <changelog author="Fernando Fernandez Mancera &lt;ferferna@redhat.com&gt; - 1:1.40.0-5" date="1671192000">- ovs: wait that links disappear during initial cleanup (rh #2153429)
- core: wait for carrier before resolving hostname via DNS (rh #2152891)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.40.0-6" date="1677672000">- Fix hostname resolution from tentative IPv6 addresses (rh #2166711)</changelog>
</package>
<package pkgid="e837a3ef1dd3d2a0c7aee9e8c25d0aa5adec65202bb382ed3b54c23b664ebcbe" name="NetworkManager-config-connectivity-redhat" arch="noarch">
  <version epoch="1" ver="1.40.0" rel="2.el8_7"/>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.39.6-1" date="1654084800">- Update to 1.39.6 release (development)
- Implement ACD (address conflict detection) for DHCPv4 (rh #1713380)</changelog>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1:1.39.7-1" date="1655294400">- Update to 1.39.7 release (development)
- core: cancel the IP check on deactivation (rh #2080928)
- core: ensure DHCP is restarted every time the link goes up (rh #2079406)
- core: fix a leak of L3 configuration memory (rh #2083453)
- ppp: fix a race with pppd when removing addresses (rh #2085382)
- wifi: fix a crash when checking WEP supplicant capability (rh #2092782)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.39.7-2" date="1655380800">- fix priority of IPv6 addresses to prefer manual over DHCPv6 over SLAAC (rh #2097270)</changelog>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1:1.39.8-1" date="1656590400">- Update to 1.39.8 release (development)
- core: make ipv6.addr-gen-mode default configurable (rh #1743161) (rh #2082682)
- dhcpv6: finish DAD before considering a lease to be good (rh #2096386)
- core: add connection.wait-activation-delay property (rh #2008337)</changelog>
  <changelog author="Vojtech Bubela &lt;vbubela@redhat.com&gt; - 1:1.39.10-1" date="1657800000">- Update to 1.39.10 release (development)
- initrd: set a default carrier timeout of 10 seconds in initrd (rh #2079277)
- dhcp: wait DAD completion for DHCPv6 addresses (rh #2096386)
- libnm: support wait-activation-delay property (rh #2008337)
- veth: fix veth activation on booting (rh #2105956)
- support a ipv6.addr-gen-mode knob in the global config (rh #208268)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.39.11-1" date="1659009600">- Update to 1.39.11 release (development)
- dhcp: fix EXTENDED DHCP event to accept lease for dhclient plugin (rh #2109285)
- ovs: honor unmanaged setting also for interfaces that fail (rh #2077950)</changelog>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1:1.39.12-1" date="1659096000">- Update to 1.39.12 release (development)
- bridge: fix reapply support (rh #2092762)</changelog>
  <changelog author="Ana Cabral &lt;acabral@redhat.com&gt; - 1:1.39.90-1" date="1660651200">- Update to 1.39.90 release (release candidate)
- bridge: fix reapply of non-bridge properties (rh #2092762)
- bridge: fix wired.mtu reapply (rh #2076131)</changelog>
  <changelog author="Ana Cabral &lt;acabral@redhat.com&gt; - 1:1.40.0-1" date="1661515200">- Update to 1.40.0 release</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.40.0-2" date="1666267200">- Don't restart DHCP when MAC changes, to avoid that the IP changes (rh #2124443)</changelog>
</package>
<package pkgid="db12057c12a76041be996dc106735fe2b27db0a7ae71fd7e7884858a97d5fae0" name="NetworkManager-config-connectivity-redhat" arch="noarch">
  <version epoch="1" ver="1.40.0" rel="5.el8_7"/>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1:1.39.8-1" date="1656590400">- Update to 1.39.8 release (development)
- core: make ipv6.addr-gen-mode default configurable (rh #1743161) (rh #2082682)
- dhcpv6: finish DAD before considering a lease to be good (rh #2096386)
- core: add connection.wait-activation-delay property (rh #2008337)</changelog>
  <changelog author="Vojtech Bubela &lt;vbubela@redhat.com&gt; - 1:1.39.10-1" date="1657800000">- Update to 1.39.10 release (development)
- initrd: set a default carrier timeout of 10 seconds in initrd (rh #2079277)
- dhcp: wait DAD completion for DHCPv6 addresses (rh #2096386)
- libnm: support wait-activation-delay property (rh #2008337)
- veth: fix veth activation on booting (rh #2105956)
- support a ipv6.addr-gen-mode knob in the global config (rh #208268)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.39.11-1" date="1659009600">- Update to 1.39.11 release (development)
- dhcp: fix EXTENDED DHCP event to accept lease for dhclient plugin (rh #2109285)
- ovs: honor unmanaged setting also for interfaces that fail (rh #2077950)</changelog>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1:1.39.12-1" date="1659096000">- Update to 1.39.12 release (development)
- bridge: fix reapply support (rh #2092762)</changelog>
  <changelog author="Ana Cabral &lt;acabral@redhat.com&gt; - 1:1.39.90-1" date="1660651200">- Update to 1.39.90 release (release candidate)
- bridge: fix reapply of non-bridge properties (rh #2092762)
- bridge: fix wired.mtu reapply (rh #2076131)</changelog>
  <changelog author="Ana Cabral &lt;acabral@redhat.com&gt; - 1:1.40.0-1" date="1661515200">- Update to 1.40.0 release</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.40.0-2" date="1666267200">- Don't restart DHCP when MAC changes, to avoid that the IP changes (rh #2124443)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.40.0-3" date="1667908800">- dns: ensure that nameservers are sorted according to priority (rh #2134563)</changelog>
  <changelog author="Fernando Fernandez Mancera &lt;ferferna@redhat.com&gt; 1:1.40.0-4" date="1669636800">- dhcp: decline IPv6 lease if all addresses fail DAD (rh #2132281)</changelog>
  <changelog author="Fernando Fernandez Mancera &lt;ferferna@redhat.com&gt; 1:1.40.0-5" date="1671192000">- ovs: wait that links disappear during initial cleanup (rh #2153429)
- core: wait for carrier before resolving hostname via DNS (rh #2152891)</changelog>
</package>
<package pkgid="be0d77efdcb1d8c3b9f086eb4fb7c45d67fdc08d41ef537536a422a63ead20de" name="NetworkManager-config-connectivity-redhat" arch="noarch">
  <version epoch="1" ver="1.40.0" rel="6.el8_7"/>
  <changelog author="Vojtech Bubela &lt;vbubela@redhat.com&gt; - 1:1.39.10-1" date="1657800000">- Update to 1.39.10 release (development)
- initrd: set a default carrier timeout of 10 seconds in initrd (rh #2079277)
- dhcp: wait DAD completion for DHCPv6 addresses (rh #2096386)
- libnm: support wait-activation-delay property (rh #2008337)
- veth: fix veth activation on booting (rh #2105956)
- support a ipv6.addr-gen-mode knob in the global config (rh #208268)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.39.11-1" date="1659009600">- Update to 1.39.11 release (development)
- dhcp: fix EXTENDED DHCP event to accept lease for dhclient plugin (rh #2109285)
- ovs: honor unmanaged setting also for interfaces that fail (rh #2077950)</changelog>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1:1.39.12-1" date="1659096000">- Update to 1.39.12 release (development)
- bridge: fix reapply support (rh #2092762)</changelog>
  <changelog author="Ana Cabral &lt;acabral@redhat.com&gt; - 1:1.39.90-1" date="1660651200">- Update to 1.39.90 release (release candidate)
- bridge: fix reapply of non-bridge properties (rh #2092762)
- bridge: fix wired.mtu reapply (rh #2076131)</changelog>
  <changelog author="Ana Cabral &lt;acabral@redhat.com&gt; - 1:1.40.0-1" date="1661515200">- Update to 1.40.0 release</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.40.0-2" date="1666267200">- Don't restart DHCP when MAC changes, to avoid that the IP changes (rh #2124443)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.40.0-3" date="1667908800">- dns: ensure that nameservers are sorted according to priority (rh #2134563)</changelog>
  <changelog author="Fernando Fernandez Mancera &lt;ferferna@redhat.com&gt; - 1:1.40.0-4" date="1669636800">- dhcp: decline IPv6 lease if all addresses fail DAD (rh #2132281)</changelog>
  <changelog author="Fernando Fernandez Mancera &lt;ferferna@redhat.com&gt; - 1:1.40.0-5" date="1671192000">- ovs: wait that links disappear during initial cleanup (rh #2153429)
- core: wait for carrier before resolving hostname via DNS (rh #2152891)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.40.0-6" date="1677672000">- Fix hostname resolution from tentative IPv6 addresses (rh #2166711)</changelog>
</package>
<package pkgid="84a00294ed7f8509023430e0013d387bc5b38c89a2e083f88905001a9ade915f" name="NetworkManager-config-server" arch="noarch">
  <version epoch="1" ver="1.40.0" rel="2.el8_7"/>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.39.6-1" date="1654084800">- Update to 1.39.6 release (development)
- Implement ACD (address conflict detection) for DHCPv4 (rh #1713380)</changelog>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1:1.39.7-1" date="1655294400">- Update to 1.39.7 release (development)
- core: cancel the IP check on deactivation (rh #2080928)
- core: ensure DHCP is restarted every time the link goes up (rh #2079406)
- core: fix a leak of L3 configuration memory (rh #2083453)
- ppp: fix a race with pppd when removing addresses (rh #2085382)
- wifi: fix a crash when checking WEP supplicant capability (rh #2092782)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.39.7-2" date="1655380800">- fix priority of IPv6 addresses to prefer manual over DHCPv6 over SLAAC (rh #2097270)</changelog>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1:1.39.8-1" date="1656590400">- Update to 1.39.8 release (development)
- core: make ipv6.addr-gen-mode default configurable (rh #1743161) (rh #2082682)
- dhcpv6: finish DAD before considering a lease to be good (rh #2096386)
- core: add connection.wait-activation-delay property (rh #2008337)</changelog>
  <changelog author="Vojtech Bubela &lt;vbubela@redhat.com&gt; - 1:1.39.10-1" date="1657800000">- Update to 1.39.10 release (development)
- initrd: set a default carrier timeout of 10 seconds in initrd (rh #2079277)
- dhcp: wait DAD completion for DHCPv6 addresses (rh #2096386)
- libnm: support wait-activation-delay property (rh #2008337)
- veth: fix veth activation on booting (rh #2105956)
- support a ipv6.addr-gen-mode knob in the global config (rh #208268)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.39.11-1" date="1659009600">- Update to 1.39.11 release (development)
- dhcp: fix EXTENDED DHCP event to accept lease for dhclient plugin (rh #2109285)
- ovs: honor unmanaged setting also for interfaces that fail (rh #2077950)</changelog>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1:1.39.12-1" date="1659096000">- Update to 1.39.12 release (development)
- bridge: fix reapply support (rh #2092762)</changelog>
  <changelog author="Ana Cabral &lt;acabral@redhat.com&gt; - 1:1.39.90-1" date="1660651200">- Update to 1.39.90 release (release candidate)
- bridge: fix reapply of non-bridge properties (rh #2092762)
- bridge: fix wired.mtu reapply (rh #2076131)</changelog>
  <changelog author="Ana Cabral &lt;acabral@redhat.com&gt; - 1:1.40.0-1" date="1661515200">- Update to 1.40.0 release</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.40.0-2" date="1666267200">- Don't restart DHCP when MAC changes, to avoid that the IP changes (rh #2124443)</changelog>
</package>
<package pkgid="5cf6c3764557c37b082bb9fe85b3a0bfcc494b31f9bbadd06b2a92624a0f4292" name="NetworkManager-config-server" arch="noarch">
  <version epoch="1" ver="1.40.0" rel="5.el8_7"/>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1:1.39.8-1" date="1656590400">- Update to 1.39.8 release (development)
- core: make ipv6.addr-gen-mode default configurable (rh #1743161) (rh #2082682)
- dhcpv6: finish DAD before considering a lease to be good (rh #2096386)
- core: add connection.wait-activation-delay property (rh #2008337)</changelog>
  <changelog author="Vojtech Bubela &lt;vbubela@redhat.com&gt; - 1:1.39.10-1" date="1657800000">- Update to 1.39.10 release (development)
- initrd: set a default carrier timeout of 10 seconds in initrd (rh #2079277)
- dhcp: wait DAD completion for DHCPv6 addresses (rh #2096386)
- libnm: support wait-activation-delay property (rh #2008337)
- veth: fix veth activation on booting (rh #2105956)
- support a ipv6.addr-gen-mode knob in the global config (rh #208268)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.39.11-1" date="1659009600">- Update to 1.39.11 release (development)
- dhcp: fix EXTENDED DHCP event to accept lease for dhclient plugin (rh #2109285)
- ovs: honor unmanaged setting also for interfaces that fail (rh #2077950)</changelog>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1:1.39.12-1" date="1659096000">- Update to 1.39.12 release (development)
- bridge: fix reapply support (rh #2092762)</changelog>
  <changelog author="Ana Cabral &lt;acabral@redhat.com&gt; - 1:1.39.90-1" date="1660651200">- Update to 1.39.90 release (release candidate)
- bridge: fix reapply of non-bridge properties (rh #2092762)
- bridge: fix wired.mtu reapply (rh #2076131)</changelog>
  <changelog author="Ana Cabral &lt;acabral@redhat.com&gt; - 1:1.40.0-1" date="1661515200">- Update to 1.40.0 release</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.40.0-2" date="1666267200">- Don't restart DHCP when MAC changes, to avoid that the IP changes (rh #2124443)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.40.0-3" date="1667908800">- dns: ensure that nameservers are sorted according to priority (rh #2134563)</changelog>
  <changelog author="Fernando Fernandez Mancera &lt;ferferna@redhat.com&gt; 1:1.40.0-4" date="1669636800">- dhcp: decline IPv6 lease if all addresses fail DAD (rh #2132281)</changelog>
  <changelog author="Fernando Fernandez Mancera &lt;ferferna@redhat.com&gt; 1:1.40.0-5" date="1671192000">- ovs: wait that links disappear during initial cleanup (rh #2153429)
- core: wait for carrier before resolving hostname via DNS (rh #2152891)</changelog>
</package>
<package pkgid="9b475b7145eb746bbcd2e5b83c5c59e177d5c186be7dbd4e9b2316982b102960" name="NetworkManager-config-server" arch="noarch">
  <version epoch="1" ver="1.40.0" rel="6.el8_7"/>
  <changelog author="Vojtech Bubela &lt;vbubela@redhat.com&gt; - 1:1.39.10-1" date="1657800000">- Update to 1.39.10 release (development)
- initrd: set a default carrier timeout of 10 seconds in initrd (rh #2079277)
- dhcp: wait DAD completion for DHCPv6 addresses (rh #2096386)
- libnm: support wait-activation-delay property (rh #2008337)
- veth: fix veth activation on booting (rh #2105956)
- support a ipv6.addr-gen-mode knob in the global config (rh #208268)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.39.11-1" date="1659009600">- Update to 1.39.11 release (development)
- dhcp: fix EXTENDED DHCP event to accept lease for dhclient plugin (rh #2109285)
- ovs: honor unmanaged setting also for interfaces that fail (rh #2077950)</changelog>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1:1.39.12-1" date="1659096000">- Update to 1.39.12 release (development)
- bridge: fix reapply support (rh #2092762)</changelog>
  <changelog author="Ana Cabral &lt;acabral@redhat.com&gt; - 1:1.39.90-1" date="1660651200">- Update to 1.39.90 release (release candidate)
- bridge: fix reapply of non-bridge properties (rh #2092762)
- bridge: fix wired.mtu reapply (rh #2076131)</changelog>
  <changelog author="Ana Cabral &lt;acabral@redhat.com&gt; - 1:1.40.0-1" date="1661515200">- Update to 1.40.0 release</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.40.0-2" date="1666267200">- Don't restart DHCP when MAC changes, to avoid that the IP changes (rh #2124443)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.40.0-3" date="1667908800">- dns: ensure that nameservers are sorted according to priority (rh #2134563)</changelog>
  <changelog author="Fernando Fernandez Mancera &lt;ferferna@redhat.com&gt; - 1:1.40.0-4" date="1669636800">- dhcp: decline IPv6 lease if all addresses fail DAD (rh #2132281)</changelog>
  <changelog author="Fernando Fernandez Mancera &lt;ferferna@redhat.com&gt; - 1:1.40.0-5" date="1671192000">- ovs: wait that links disappear during initial cleanup (rh #2153429)
- core: wait for carrier before resolving hostname via DNS (rh #2152891)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.40.0-6" date="1677672000">- Fix hostname resolution from tentative IPv6 addresses (rh #2166711)</changelog>
</package>
<package pkgid="fa7352c28e9a310d62bcaab9a3c26e857b775806d0ee0d1eecaf9a42d5d467ff" name="NetworkManager-dispatcher-routing-rules" arch="noarch">
  <version epoch="1" ver="1.40.0" rel="2.el8_7"/>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.39.6-1" date="1654084800">- Update to 1.39.6 release (development)
- Implement ACD (address conflict detection) for DHCPv4 (rh #1713380)</changelog>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1:1.39.7-1" date="1655294400">- Update to 1.39.7 release (development)
- core: cancel the IP check on deactivation (rh #2080928)
- core: ensure DHCP is restarted every time the link goes up (rh #2079406)
- core: fix a leak of L3 configuration memory (rh #2083453)
- ppp: fix a race with pppd when removing addresses (rh #2085382)
- wifi: fix a crash when checking WEP supplicant capability (rh #2092782)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.39.7-2" date="1655380800">- fix priority of IPv6 addresses to prefer manual over DHCPv6 over SLAAC (rh #2097270)</changelog>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1:1.39.8-1" date="1656590400">- Update to 1.39.8 release (development)
- core: make ipv6.addr-gen-mode default configurable (rh #1743161) (rh #2082682)
- dhcpv6: finish DAD before considering a lease to be good (rh #2096386)
- core: add connection.wait-activation-delay property (rh #2008337)</changelog>
  <changelog author="Vojtech Bubela &lt;vbubela@redhat.com&gt; - 1:1.39.10-1" date="1657800000">- Update to 1.39.10 release (development)
- initrd: set a default carrier timeout of 10 seconds in initrd (rh #2079277)
- dhcp: wait DAD completion for DHCPv6 addresses (rh #2096386)
- libnm: support wait-activation-delay property (rh #2008337)
- veth: fix veth activation on booting (rh #2105956)
- support a ipv6.addr-gen-mode knob in the global config (rh #208268)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.39.11-1" date="1659009600">- Update to 1.39.11 release (development)
- dhcp: fix EXTENDED DHCP event to accept lease for dhclient plugin (rh #2109285)
- ovs: honor unmanaged setting also for interfaces that fail (rh #2077950)</changelog>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1:1.39.12-1" date="1659096000">- Update to 1.39.12 release (development)
- bridge: fix reapply support (rh #2092762)</changelog>
  <changelog author="Ana Cabral &lt;acabral@redhat.com&gt; - 1:1.39.90-1" date="1660651200">- Update to 1.39.90 release (release candidate)
- bridge: fix reapply of non-bridge properties (rh #2092762)
- bridge: fix wired.mtu reapply (rh #2076131)</changelog>
  <changelog author="Ana Cabral &lt;acabral@redhat.com&gt; - 1:1.40.0-1" date="1661515200">- Update to 1.40.0 release</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.40.0-2" date="1666267200">- Don't restart DHCP when MAC changes, to avoid that the IP changes (rh #2124443)</changelog>
</package>
<package pkgid="ee1bb000b684d5c16b9e8b39430143a5319776f85d576c72930c7a6f17949ba1" name="NetworkManager-dispatcher-routing-rules" arch="noarch">
  <version epoch="1" ver="1.40.0" rel="5.el8_7"/>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1:1.39.8-1" date="1656590400">- Update to 1.39.8 release (development)
- core: make ipv6.addr-gen-mode default configurable (rh #1743161) (rh #2082682)
- dhcpv6: finish DAD before considering a lease to be good (rh #2096386)
- core: add connection.wait-activation-delay property (rh #2008337)</changelog>
  <changelog author="Vojtech Bubela &lt;vbubela@redhat.com&gt; - 1:1.39.10-1" date="1657800000">- Update to 1.39.10 release (development)
- initrd: set a default carrier timeout of 10 seconds in initrd (rh #2079277)
- dhcp: wait DAD completion for DHCPv6 addresses (rh #2096386)
- libnm: support wait-activation-delay property (rh #2008337)
- veth: fix veth activation on booting (rh #2105956)
- support a ipv6.addr-gen-mode knob in the global config (rh #208268)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.39.11-1" date="1659009600">- Update to 1.39.11 release (development)
- dhcp: fix EXTENDED DHCP event to accept lease for dhclient plugin (rh #2109285)
- ovs: honor unmanaged setting also for interfaces that fail (rh #2077950)</changelog>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1:1.39.12-1" date="1659096000">- Update to 1.39.12 release (development)
- bridge: fix reapply support (rh #2092762)</changelog>
  <changelog author="Ana Cabral &lt;acabral@redhat.com&gt; - 1:1.39.90-1" date="1660651200">- Update to 1.39.90 release (release candidate)
- bridge: fix reapply of non-bridge properties (rh #2092762)
- bridge: fix wired.mtu reapply (rh #2076131)</changelog>
  <changelog author="Ana Cabral &lt;acabral@redhat.com&gt; - 1:1.40.0-1" date="1661515200">- Update to 1.40.0 release</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.40.0-2" date="1666267200">- Don't restart DHCP when MAC changes, to avoid that the IP changes (rh #2124443)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.40.0-3" date="1667908800">- dns: ensure that nameservers are sorted according to priority (rh #2134563)</changelog>
  <changelog author="Fernando Fernandez Mancera &lt;ferferna@redhat.com&gt; 1:1.40.0-4" date="1669636800">- dhcp: decline IPv6 lease if all addresses fail DAD (rh #2132281)</changelog>
  <changelog author="Fernando Fernandez Mancera &lt;ferferna@redhat.com&gt; 1:1.40.0-5" date="1671192000">- ovs: wait that links disappear during initial cleanup (rh #2153429)
- core: wait for carrier before resolving hostname via DNS (rh #2152891)</changelog>
</package>
<package pkgid="6cd703bd37855e7c9eab95c6bd6e6969f665649914f79bb480a318768727125e" name="NetworkManager-dispatcher-routing-rules" arch="noarch">
  <version epoch="1" ver="1.40.0" rel="6.el8_7"/>
  <changelog author="Vojtech Bubela &lt;vbubela@redhat.com&gt; - 1:1.39.10-1" date="1657800000">- Update to 1.39.10 release (development)
- initrd: set a default carrier timeout of 10 seconds in initrd (rh #2079277)
- dhcp: wait DAD completion for DHCPv6 addresses (rh #2096386)
- libnm: support wait-activation-delay property (rh #2008337)
- veth: fix veth activation on booting (rh #2105956)
- support a ipv6.addr-gen-mode knob in the global config (rh #208268)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.39.11-1" date="1659009600">- Update to 1.39.11 release (development)
- dhcp: fix EXTENDED DHCP event to accept lease for dhclient plugin (rh #2109285)
- ovs: honor unmanaged setting also for interfaces that fail (rh #2077950)</changelog>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1:1.39.12-1" date="1659096000">- Update to 1.39.12 release (development)
- bridge: fix reapply support (rh #2092762)</changelog>
  <changelog author="Ana Cabral &lt;acabral@redhat.com&gt; - 1:1.39.90-1" date="1660651200">- Update to 1.39.90 release (release candidate)
- bridge: fix reapply of non-bridge properties (rh #2092762)
- bridge: fix wired.mtu reapply (rh #2076131)</changelog>
  <changelog author="Ana Cabral &lt;acabral@redhat.com&gt; - 1:1.40.0-1" date="1661515200">- Update to 1.40.0 release</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.40.0-2" date="1666267200">- Don't restart DHCP when MAC changes, to avoid that the IP changes (rh #2124443)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.40.0-3" date="1667908800">- dns: ensure that nameservers are sorted according to priority (rh #2134563)</changelog>
  <changelog author="Fernando Fernandez Mancera &lt;ferferna@redhat.com&gt; - 1:1.40.0-4" date="1669636800">- dhcp: decline IPv6 lease if all addresses fail DAD (rh #2132281)</changelog>
  <changelog author="Fernando Fernandez Mancera &lt;ferferna@redhat.com&gt; - 1:1.40.0-5" date="1671192000">- ovs: wait that links disappear during initial cleanup (rh #2153429)
- core: wait for carrier before resolving hostname via DNS (rh #2152891)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.40.0-6" date="1677672000">- Fix hostname resolution from tentative IPv6 addresses (rh #2166711)</changelog>
</package>
<package pkgid="d3edbe078f9564da1431281563f3cb47c89c7207f2f158fa34c867ed39a38c4f" name="NetworkManager-initscripts-updown" arch="noarch">
  <version epoch="1" ver="1.40.0" rel="2.el8_7"/>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.39.6-1" date="1654084800">- Update to 1.39.6 release (development)
- Implement ACD (address conflict detection) for DHCPv4 (rh #1713380)</changelog>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1:1.39.7-1" date="1655294400">- Update to 1.39.7 release (development)
- core: cancel the IP check on deactivation (rh #2080928)
- core: ensure DHCP is restarted every time the link goes up (rh #2079406)
- core: fix a leak of L3 configuration memory (rh #2083453)
- ppp: fix a race with pppd when removing addresses (rh #2085382)
- wifi: fix a crash when checking WEP supplicant capability (rh #2092782)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.39.7-2" date="1655380800">- fix priority of IPv6 addresses to prefer manual over DHCPv6 over SLAAC (rh #2097270)</changelog>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1:1.39.8-1" date="1656590400">- Update to 1.39.8 release (development)
- core: make ipv6.addr-gen-mode default configurable (rh #1743161) (rh #2082682)
- dhcpv6: finish DAD before considering a lease to be good (rh #2096386)
- core: add connection.wait-activation-delay property (rh #2008337)</changelog>
  <changelog author="Vojtech Bubela &lt;vbubela@redhat.com&gt; - 1:1.39.10-1" date="1657800000">- Update to 1.39.10 release (development)
- initrd: set a default carrier timeout of 10 seconds in initrd (rh #2079277)
- dhcp: wait DAD completion for DHCPv6 addresses (rh #2096386)
- libnm: support wait-activation-delay property (rh #2008337)
- veth: fix veth activation on booting (rh #2105956)
- support a ipv6.addr-gen-mode knob in the global config (rh #208268)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.39.11-1" date="1659009600">- Update to 1.39.11 release (development)
- dhcp: fix EXTENDED DHCP event to accept lease for dhclient plugin (rh #2109285)
- ovs: honor unmanaged setting also for interfaces that fail (rh #2077950)</changelog>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1:1.39.12-1" date="1659096000">- Update to 1.39.12 release (development)
- bridge: fix reapply support (rh #2092762)</changelog>
  <changelog author="Ana Cabral &lt;acabral@redhat.com&gt; - 1:1.39.90-1" date="1660651200">- Update to 1.39.90 release (release candidate)
- bridge: fix reapply of non-bridge properties (rh #2092762)
- bridge: fix wired.mtu reapply (rh #2076131)</changelog>
  <changelog author="Ana Cabral &lt;acabral@redhat.com&gt; - 1:1.40.0-1" date="1661515200">- Update to 1.40.0 release</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.40.0-2" date="1666267200">- Don't restart DHCP when MAC changes, to avoid that the IP changes (rh #2124443)</changelog>
</package>
<package pkgid="ba313debf25d96e4bd4f9b6fa4cc247d0ac7c7e446d0a158cba0ceb8bb070102" name="NetworkManager-initscripts-updown" arch="noarch">
  <version epoch="1" ver="1.40.0" rel="5.el8_7"/>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1:1.39.8-1" date="1656590400">- Update to 1.39.8 release (development)
- core: make ipv6.addr-gen-mode default configurable (rh #1743161) (rh #2082682)
- dhcpv6: finish DAD before considering a lease to be good (rh #2096386)
- core: add connection.wait-activation-delay property (rh #2008337)</changelog>
  <changelog author="Vojtech Bubela &lt;vbubela@redhat.com&gt; - 1:1.39.10-1" date="1657800000">- Update to 1.39.10 release (development)
- initrd: set a default carrier timeout of 10 seconds in initrd (rh #2079277)
- dhcp: wait DAD completion for DHCPv6 addresses (rh #2096386)
- libnm: support wait-activation-delay property (rh #2008337)
- veth: fix veth activation on booting (rh #2105956)
- support a ipv6.addr-gen-mode knob in the global config (rh #208268)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.39.11-1" date="1659009600">- Update to 1.39.11 release (development)
- dhcp: fix EXTENDED DHCP event to accept lease for dhclient plugin (rh #2109285)
- ovs: honor unmanaged setting also for interfaces that fail (rh #2077950)</changelog>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1:1.39.12-1" date="1659096000">- Update to 1.39.12 release (development)
- bridge: fix reapply support (rh #2092762)</changelog>
  <changelog author="Ana Cabral &lt;acabral@redhat.com&gt; - 1:1.39.90-1" date="1660651200">- Update to 1.39.90 release (release candidate)
- bridge: fix reapply of non-bridge properties (rh #2092762)
- bridge: fix wired.mtu reapply (rh #2076131)</changelog>
  <changelog author="Ana Cabral &lt;acabral@redhat.com&gt; - 1:1.40.0-1" date="1661515200">- Update to 1.40.0 release</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.40.0-2" date="1666267200">- Don't restart DHCP when MAC changes, to avoid that the IP changes (rh #2124443)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.40.0-3" date="1667908800">- dns: ensure that nameservers are sorted according to priority (rh #2134563)</changelog>
  <changelog author="Fernando Fernandez Mancera &lt;ferferna@redhat.com&gt; 1:1.40.0-4" date="1669636800">- dhcp: decline IPv6 lease if all addresses fail DAD (rh #2132281)</changelog>
  <changelog author="Fernando Fernandez Mancera &lt;ferferna@redhat.com&gt; 1:1.40.0-5" date="1671192000">- ovs: wait that links disappear during initial cleanup (rh #2153429)
- core: wait for carrier before resolving hostname via DNS (rh #2152891)</changelog>
</package>
<package pkgid="0cfbf4e9db2ef61fc1727479cd70c91248a5ad6a17ee5a8c3a4b9db05441eef8" name="NetworkManager-initscripts-updown" arch="noarch">
  <version epoch="1" ver="1.40.0" rel="6.el8_7"/>
  <changelog author="Vojtech Bubela &lt;vbubela@redhat.com&gt; - 1:1.39.10-1" date="1657800000">- Update to 1.39.10 release (development)
- initrd: set a default carrier timeout of 10 seconds in initrd (rh #2079277)
- dhcp: wait DAD completion for DHCPv6 addresses (rh #2096386)
- libnm: support wait-activation-delay property (rh #2008337)
- veth: fix veth activation on booting (rh #2105956)
- support a ipv6.addr-gen-mode knob in the global config (rh #208268)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.39.11-1" date="1659009600">- Update to 1.39.11 release (development)
- dhcp: fix EXTENDED DHCP event to accept lease for dhclient plugin (rh #2109285)
- ovs: honor unmanaged setting also for interfaces that fail (rh #2077950)</changelog>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1:1.39.12-1" date="1659096000">- Update to 1.39.12 release (development)
- bridge: fix reapply support (rh #2092762)</changelog>
  <changelog author="Ana Cabral &lt;acabral@redhat.com&gt; - 1:1.39.90-1" date="1660651200">- Update to 1.39.90 release (release candidate)
- bridge: fix reapply of non-bridge properties (rh #2092762)
- bridge: fix wired.mtu reapply (rh #2076131)</changelog>
  <changelog author="Ana Cabral &lt;acabral@redhat.com&gt; - 1:1.40.0-1" date="1661515200">- Update to 1.40.0 release</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.40.0-2" date="1666267200">- Don't restart DHCP when MAC changes, to avoid that the IP changes (rh #2124443)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.40.0-3" date="1667908800">- dns: ensure that nameservers are sorted according to priority (rh #2134563)</changelog>
  <changelog author="Fernando Fernandez Mancera &lt;ferferna@redhat.com&gt; - 1:1.40.0-4" date="1669636800">- dhcp: decline IPv6 lease if all addresses fail DAD (rh #2132281)</changelog>
  <changelog author="Fernando Fernandez Mancera &lt;ferferna@redhat.com&gt; - 1:1.40.0-5" date="1671192000">- ovs: wait that links disappear during initial cleanup (rh #2153429)
- core: wait for carrier before resolving hostname via DNS (rh #2152891)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.40.0-6" date="1677672000">- Fix hostname resolution from tentative IPv6 addresses (rh #2166711)</changelog>
</package>
<package pkgid="b2ca8452171e2dbb4c69f5ac217aa1a0978663f43d30ea6260523f04e207da7b" name="NetworkManager-libnm" arch="i686">
  <version epoch="1" ver="1.40.0" rel="2.el8_7"/>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.39.6-1" date="1654084800">- Update to 1.39.6 release (development)
- Implement ACD (address conflict detection) for DHCPv4 (rh #1713380)</changelog>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1:1.39.7-1" date="1655294400">- Update to 1.39.7 release (development)
- core: cancel the IP check on deactivation (rh #2080928)
- core: ensure DHCP is restarted every time the link goes up (rh #2079406)
- core: fix a leak of L3 configuration memory (rh #2083453)
- ppp: fix a race with pppd when removing addresses (rh #2085382)
- wifi: fix a crash when checking WEP supplicant capability (rh #2092782)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.39.7-2" date="1655380800">- fix priority of IPv6 addresses to prefer manual over DHCPv6 over SLAAC (rh #2097270)</changelog>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1:1.39.8-1" date="1656590400">- Update to 1.39.8 release (development)
- core: make ipv6.addr-gen-mode default configurable (rh #1743161) (rh #2082682)
- dhcpv6: finish DAD before considering a lease to be good (rh #2096386)
- core: add connection.wait-activation-delay property (rh #2008337)</changelog>
  <changelog author="Vojtech Bubela &lt;vbubela@redhat.com&gt; - 1:1.39.10-1" date="1657800000">- Update to 1.39.10 release (development)
- initrd: set a default carrier timeout of 10 seconds in initrd (rh #2079277)
- dhcp: wait DAD completion for DHCPv6 addresses (rh #2096386)
- libnm: support wait-activation-delay property (rh #2008337)
- veth: fix veth activation on booting (rh #2105956)
- support a ipv6.addr-gen-mode knob in the global config (rh #208268)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.39.11-1" date="1659009600">- Update to 1.39.11 release (development)
- dhcp: fix EXTENDED DHCP event to accept lease for dhclient plugin (rh #2109285)
- ovs: honor unmanaged setting also for interfaces that fail (rh #2077950)</changelog>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1:1.39.12-1" date="1659096000">- Update to 1.39.12 release (development)
- bridge: fix reapply support (rh #2092762)</changelog>
  <changelog author="Ana Cabral &lt;acabral@redhat.com&gt; - 1:1.39.90-1" date="1660651200">- Update to 1.39.90 release (release candidate)
- bridge: fix reapply of non-bridge properties (rh #2092762)
- bridge: fix wired.mtu reapply (rh #2076131)</changelog>
  <changelog author="Ana Cabral &lt;acabral@redhat.com&gt; - 1:1.40.0-1" date="1661515200">- Update to 1.40.0 release</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.40.0-2" date="1666267200">- Don't restart DHCP when MAC changes, to avoid that the IP changes (rh #2124443)</changelog>
</package>
<package pkgid="a71f41c0a7d8f124b564dbae038c36d22cdfa05fa7980a3b4fb8391081561ba4" name="NetworkManager-libnm" arch="x86_64">
  <version epoch="1" ver="1.40.0" rel="2.el8_7"/>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.39.6-1" date="1654084800">- Update to 1.39.6 release (development)
- Implement ACD (address conflict detection) for DHCPv4 (rh #1713380)</changelog>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1:1.39.7-1" date="1655294400">- Update to 1.39.7 release (development)
- core: cancel the IP check on deactivation (rh #2080928)
- core: ensure DHCP is restarted every time the link goes up (rh #2079406)
- core: fix a leak of L3 configuration memory (rh #2083453)
- ppp: fix a race with pppd when removing addresses (rh #2085382)
- wifi: fix a crash when checking WEP supplicant capability (rh #2092782)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.39.7-2" date="1655380800">- fix priority of IPv6 addresses to prefer manual over DHCPv6 over SLAAC (rh #2097270)</changelog>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1:1.39.8-1" date="1656590400">- Update to 1.39.8 release (development)
- core: make ipv6.addr-gen-mode default configurable (rh #1743161) (rh #2082682)
- dhcpv6: finish DAD before considering a lease to be good (rh #2096386)
- core: add connection.wait-activation-delay property (rh #2008337)</changelog>
  <changelog author="Vojtech Bubela &lt;vbubela@redhat.com&gt; - 1:1.39.10-1" date="1657800000">- Update to 1.39.10 release (development)
- initrd: set a default carrier timeout of 10 seconds in initrd (rh #2079277)
- dhcp: wait DAD completion for DHCPv6 addresses (rh #2096386)
- libnm: support wait-activation-delay property (rh #2008337)
- veth: fix veth activation on booting (rh #2105956)
- support a ipv6.addr-gen-mode knob in the global config (rh #208268)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.39.11-1" date="1659009600">- Update to 1.39.11 release (development)
- dhcp: fix EXTENDED DHCP event to accept lease for dhclient plugin (rh #2109285)
- ovs: honor unmanaged setting also for interfaces that fail (rh #2077950)</changelog>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1:1.39.12-1" date="1659096000">- Update to 1.39.12 release (development)
- bridge: fix reapply support (rh #2092762)</changelog>
  <changelog author="Ana Cabral &lt;acabral@redhat.com&gt; - 1:1.39.90-1" date="1660651200">- Update to 1.39.90 release (release candidate)
- bridge: fix reapply of non-bridge properties (rh #2092762)
- bridge: fix wired.mtu reapply (rh #2076131)</changelog>
  <changelog author="Ana Cabral &lt;acabral@redhat.com&gt; - 1:1.40.0-1" date="1661515200">- Update to 1.40.0 release</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.40.0-2" date="1666267200">- Don't restart DHCP when MAC changes, to avoid that the IP changes (rh #2124443)</changelog>
</package>
<package pkgid="b372782f9e19b0a5f385cca2fbb1e535c68498b1d5f546567220b70ce9dfcd4c" name="NetworkManager-libnm" arch="i686">
  <version epoch="1" ver="1.40.0" rel="5.el8_7"/>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1:1.39.8-1" date="1656590400">- Update to 1.39.8 release (development)
- core: make ipv6.addr-gen-mode default configurable (rh #1743161) (rh #2082682)
- dhcpv6: finish DAD before considering a lease to be good (rh #2096386)
- core: add connection.wait-activation-delay property (rh #2008337)</changelog>
  <changelog author="Vojtech Bubela &lt;vbubela@redhat.com&gt; - 1:1.39.10-1" date="1657800000">- Update to 1.39.10 release (development)
- initrd: set a default carrier timeout of 10 seconds in initrd (rh #2079277)
- dhcp: wait DAD completion for DHCPv6 addresses (rh #2096386)
- libnm: support wait-activation-delay property (rh #2008337)
- veth: fix veth activation on booting (rh #2105956)
- support a ipv6.addr-gen-mode knob in the global config (rh #208268)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.39.11-1" date="1659009600">- Update to 1.39.11 release (development)
- dhcp: fix EXTENDED DHCP event to accept lease for dhclient plugin (rh #2109285)
- ovs: honor unmanaged setting also for interfaces that fail (rh #2077950)</changelog>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1:1.39.12-1" date="1659096000">- Update to 1.39.12 release (development)
- bridge: fix reapply support (rh #2092762)</changelog>
  <changelog author="Ana Cabral &lt;acabral@redhat.com&gt; - 1:1.39.90-1" date="1660651200">- Update to 1.39.90 release (release candidate)
- bridge: fix reapply of non-bridge properties (rh #2092762)
- bridge: fix wired.mtu reapply (rh #2076131)</changelog>
  <changelog author="Ana Cabral &lt;acabral@redhat.com&gt; - 1:1.40.0-1" date="1661515200">- Update to 1.40.0 release</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.40.0-2" date="1666267200">- Don't restart DHCP when MAC changes, to avoid that the IP changes (rh #2124443)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.40.0-3" date="1667908800">- dns: ensure that nameservers are sorted according to priority (rh #2134563)</changelog>
  <changelog author="Fernando Fernandez Mancera &lt;ferferna@redhat.com&gt; 1:1.40.0-4" date="1669636800">- dhcp: decline IPv6 lease if all addresses fail DAD (rh #2132281)</changelog>
  <changelog author="Fernando Fernandez Mancera &lt;ferferna@redhat.com&gt; 1:1.40.0-5" date="1671192000">- ovs: wait that links disappear during initial cleanup (rh #2153429)
- core: wait for carrier before resolving hostname via DNS (rh #2152891)</changelog>
</package>
<package pkgid="3d28d625740610eadd4cb247c30bb844df85c4caa27cfbb04cfe10a3bf956946" name="NetworkManager-libnm" arch="x86_64">
  <version epoch="1" ver="1.40.0" rel="5.el8_7"/>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1:1.39.8-1" date="1656590400">- Update to 1.39.8 release (development)
- core: make ipv6.addr-gen-mode default configurable (rh #1743161) (rh #2082682)
- dhcpv6: finish DAD before considering a lease to be good (rh #2096386)
- core: add connection.wait-activation-delay property (rh #2008337)</changelog>
  <changelog author="Vojtech Bubela &lt;vbubela@redhat.com&gt; - 1:1.39.10-1" date="1657800000">- Update to 1.39.10 release (development)
- initrd: set a default carrier timeout of 10 seconds in initrd (rh #2079277)
- dhcp: wait DAD completion for DHCPv6 addresses (rh #2096386)
- libnm: support wait-activation-delay property (rh #2008337)
- veth: fix veth activation on booting (rh #2105956)
- support a ipv6.addr-gen-mode knob in the global config (rh #208268)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.39.11-1" date="1659009600">- Update to 1.39.11 release (development)
- dhcp: fix EXTENDED DHCP event to accept lease for dhclient plugin (rh #2109285)
- ovs: honor unmanaged setting also for interfaces that fail (rh #2077950)</changelog>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1:1.39.12-1" date="1659096000">- Update to 1.39.12 release (development)
- bridge: fix reapply support (rh #2092762)</changelog>
  <changelog author="Ana Cabral &lt;acabral@redhat.com&gt; - 1:1.39.90-1" date="1660651200">- Update to 1.39.90 release (release candidate)
- bridge: fix reapply of non-bridge properties (rh #2092762)
- bridge: fix wired.mtu reapply (rh #2076131)</changelog>
  <changelog author="Ana Cabral &lt;acabral@redhat.com&gt; - 1:1.40.0-1" date="1661515200">- Update to 1.40.0 release</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.40.0-2" date="1666267200">- Don't restart DHCP when MAC changes, to avoid that the IP changes (rh #2124443)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.40.0-3" date="1667908800">- dns: ensure that nameservers are sorted according to priority (rh #2134563)</changelog>
  <changelog author="Fernando Fernandez Mancera &lt;ferferna@redhat.com&gt; 1:1.40.0-4" date="1669636800">- dhcp: decline IPv6 lease if all addresses fail DAD (rh #2132281)</changelog>
  <changelog author="Fernando Fernandez Mancera &lt;ferferna@redhat.com&gt; 1:1.40.0-5" date="1671192000">- ovs: wait that links disappear during initial cleanup (rh #2153429)
- core: wait for carrier before resolving hostname via DNS (rh #2152891)</changelog>
</package>
<package pkgid="fd49c6195992611c608cbfa8d6373956df74a42961352c50944f5b6a1474c096" name="NetworkManager-libnm" arch="i686">
  <version epoch="1" ver="1.40.0" rel="6.el8_7"/>
  <changelog author="Vojtech Bubela &lt;vbubela@redhat.com&gt; - 1:1.39.10-1" date="1657800000">- Update to 1.39.10 release (development)
- initrd: set a default carrier timeout of 10 seconds in initrd (rh #2079277)
- dhcp: wait DAD completion for DHCPv6 addresses (rh #2096386)
- libnm: support wait-activation-delay property (rh #2008337)
- veth: fix veth activation on booting (rh #2105956)
- support a ipv6.addr-gen-mode knob in the global config (rh #208268)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.39.11-1" date="1659009600">- Update to 1.39.11 release (development)
- dhcp: fix EXTENDED DHCP event to accept lease for dhclient plugin (rh #2109285)
- ovs: honor unmanaged setting also for interfaces that fail (rh #2077950)</changelog>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1:1.39.12-1" date="1659096000">- Update to 1.39.12 release (development)
- bridge: fix reapply support (rh #2092762)</changelog>
  <changelog author="Ana Cabral &lt;acabral@redhat.com&gt; - 1:1.39.90-1" date="1660651200">- Update to 1.39.90 release (release candidate)
- bridge: fix reapply of non-bridge properties (rh #2092762)
- bridge: fix wired.mtu reapply (rh #2076131)</changelog>
  <changelog author="Ana Cabral &lt;acabral@redhat.com&gt; - 1:1.40.0-1" date="1661515200">- Update to 1.40.0 release</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.40.0-2" date="1666267200">- Don't restart DHCP when MAC changes, to avoid that the IP changes (rh #2124443)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.40.0-3" date="1667908800">- dns: ensure that nameservers are sorted according to priority (rh #2134563)</changelog>
  <changelog author="Fernando Fernandez Mancera &lt;ferferna@redhat.com&gt; - 1:1.40.0-4" date="1669636800">- dhcp: decline IPv6 lease if all addresses fail DAD (rh #2132281)</changelog>
  <changelog author="Fernando Fernandez Mancera &lt;ferferna@redhat.com&gt; - 1:1.40.0-5" date="1671192000">- ovs: wait that links disappear during initial cleanup (rh #2153429)
- core: wait for carrier before resolving hostname via DNS (rh #2152891)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.40.0-6" date="1677672000">- Fix hostname resolution from tentative IPv6 addresses (rh #2166711)</changelog>
</package>
<package pkgid="a5959399628361702c3003c1f88e40ff5574d285df5028ec0d427d2c1f35dbef" name="NetworkManager-libnm" arch="x86_64">
  <version epoch="1" ver="1.40.0" rel="6.el8_7"/>
  <changelog author="Vojtech Bubela &lt;vbubela@redhat.com&gt; - 1:1.39.10-1" date="1657800000">- Update to 1.39.10 release (development)
- initrd: set a default carrier timeout of 10 seconds in initrd (rh #2079277)
- dhcp: wait DAD completion for DHCPv6 addresses (rh #2096386)
- libnm: support wait-activation-delay property (rh #2008337)
- veth: fix veth activation on booting (rh #2105956)
- support a ipv6.addr-gen-mode knob in the global config (rh #208268)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.39.11-1" date="1659009600">- Update to 1.39.11 release (development)
- dhcp: fix EXTENDED DHCP event to accept lease for dhclient plugin (rh #2109285)
- ovs: honor unmanaged setting also for interfaces that fail (rh #2077950)</changelog>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1:1.39.12-1" date="1659096000">- Update to 1.39.12 release (development)
- bridge: fix reapply support (rh #2092762)</changelog>
  <changelog author="Ana Cabral &lt;acabral@redhat.com&gt; - 1:1.39.90-1" date="1660651200">- Update to 1.39.90 release (release candidate)
- bridge: fix reapply of non-bridge properties (rh #2092762)
- bridge: fix wired.mtu reapply (rh #2076131)</changelog>
  <changelog author="Ana Cabral &lt;acabral@redhat.com&gt; - 1:1.40.0-1" date="1661515200">- Update to 1.40.0 release</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.40.0-2" date="1666267200">- Don't restart DHCP when MAC changes, to avoid that the IP changes (rh #2124443)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.40.0-3" date="1667908800">- dns: ensure that nameservers are sorted according to priority (rh #2134563)</changelog>
  <changelog author="Fernando Fernandez Mancera &lt;ferferna@redhat.com&gt; - 1:1.40.0-4" date="1669636800">- dhcp: decline IPv6 lease if all addresses fail DAD (rh #2132281)</changelog>
  <changelog author="Fernando Fernandez Mancera &lt;ferferna@redhat.com&gt; - 1:1.40.0-5" date="1671192000">- ovs: wait that links disappear during initial cleanup (rh #2153429)
- core: wait for carrier before resolving hostname via DNS (rh #2152891)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.40.0-6" date="1677672000">- Fix hostname resolution from tentative IPv6 addresses (rh #2166711)</changelog>
</package>
<package pkgid="3fbeb5a354e9da8da856468849bfb4c39e17882a08c85defb4e4def93dfc9975" name="NetworkManager-ovs" arch="x86_64">
  <version epoch="1" ver="1.40.0" rel="2.el8_7"/>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.39.6-1" date="1654084800">- Update to 1.39.6 release (development)
- Implement ACD (address conflict detection) for DHCPv4 (rh #1713380)</changelog>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1:1.39.7-1" date="1655294400">- Update to 1.39.7 release (development)
- core: cancel the IP check on deactivation (rh #2080928)
- core: ensure DHCP is restarted every time the link goes up (rh #2079406)
- core: fix a leak of L3 configuration memory (rh #2083453)
- ppp: fix a race with pppd when removing addresses (rh #2085382)
- wifi: fix a crash when checking WEP supplicant capability (rh #2092782)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.39.7-2" date="1655380800">- fix priority of IPv6 addresses to prefer manual over DHCPv6 over SLAAC (rh #2097270)</changelog>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1:1.39.8-1" date="1656590400">- Update to 1.39.8 release (development)
- core: make ipv6.addr-gen-mode default configurable (rh #1743161) (rh #2082682)
- dhcpv6: finish DAD before considering a lease to be good (rh #2096386)
- core: add connection.wait-activation-delay property (rh #2008337)</changelog>
  <changelog author="Vojtech Bubela &lt;vbubela@redhat.com&gt; - 1:1.39.10-1" date="1657800000">- Update to 1.39.10 release (development)
- initrd: set a default carrier timeout of 10 seconds in initrd (rh #2079277)
- dhcp: wait DAD completion for DHCPv6 addresses (rh #2096386)
- libnm: support wait-activation-delay property (rh #2008337)
- veth: fix veth activation on booting (rh #2105956)
- support a ipv6.addr-gen-mode knob in the global config (rh #208268)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.39.11-1" date="1659009600">- Update to 1.39.11 release (development)
- dhcp: fix EXTENDED DHCP event to accept lease for dhclient plugin (rh #2109285)
- ovs: honor unmanaged setting also for interfaces that fail (rh #2077950)</changelog>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1:1.39.12-1" date="1659096000">- Update to 1.39.12 release (development)
- bridge: fix reapply support (rh #2092762)</changelog>
  <changelog author="Ana Cabral &lt;acabral@redhat.com&gt; - 1:1.39.90-1" date="1660651200">- Update to 1.39.90 release (release candidate)
- bridge: fix reapply of non-bridge properties (rh #2092762)
- bridge: fix wired.mtu reapply (rh #2076131)</changelog>
  <changelog author="Ana Cabral &lt;acabral@redhat.com&gt; - 1:1.40.0-1" date="1661515200">- Update to 1.40.0 release</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.40.0-2" date="1666267200">- Don't restart DHCP when MAC changes, to avoid that the IP changes (rh #2124443)</changelog>
</package>
<package pkgid="da42fdca5fc02ac90a4d7ff338e0de7272d5a9776f6edd78cd1466c4183c7b0a" name="NetworkManager-ovs" arch="x86_64">
  <version epoch="1" ver="1.40.0" rel="5.el8_7"/>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1:1.39.8-1" date="1656590400">- Update to 1.39.8 release (development)
- core: make ipv6.addr-gen-mode default configurable (rh #1743161) (rh #2082682)
- dhcpv6: finish DAD before considering a lease to be good (rh #2096386)
- core: add connection.wait-activation-delay property (rh #2008337)</changelog>
  <changelog author="Vojtech Bubela &lt;vbubela@redhat.com&gt; - 1:1.39.10-1" date="1657800000">- Update to 1.39.10 release (development)
- initrd: set a default carrier timeout of 10 seconds in initrd (rh #2079277)
- dhcp: wait DAD completion for DHCPv6 addresses (rh #2096386)
- libnm: support wait-activation-delay property (rh #2008337)
- veth: fix veth activation on booting (rh #2105956)
- support a ipv6.addr-gen-mode knob in the global config (rh #208268)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.39.11-1" date="1659009600">- Update to 1.39.11 release (development)
- dhcp: fix EXTENDED DHCP event to accept lease for dhclient plugin (rh #2109285)
- ovs: honor unmanaged setting also for interfaces that fail (rh #2077950)</changelog>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1:1.39.12-1" date="1659096000">- Update to 1.39.12 release (development)
- bridge: fix reapply support (rh #2092762)</changelog>
  <changelog author="Ana Cabral &lt;acabral@redhat.com&gt; - 1:1.39.90-1" date="1660651200">- Update to 1.39.90 release (release candidate)
- bridge: fix reapply of non-bridge properties (rh #2092762)
- bridge: fix wired.mtu reapply (rh #2076131)</changelog>
  <changelog author="Ana Cabral &lt;acabral@redhat.com&gt; - 1:1.40.0-1" date="1661515200">- Update to 1.40.0 release</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.40.0-2" date="1666267200">- Don't restart DHCP when MAC changes, to avoid that the IP changes (rh #2124443)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.40.0-3" date="1667908800">- dns: ensure that nameservers are sorted according to priority (rh #2134563)</changelog>
  <changelog author="Fernando Fernandez Mancera &lt;ferferna@redhat.com&gt; 1:1.40.0-4" date="1669636800">- dhcp: decline IPv6 lease if all addresses fail DAD (rh #2132281)</changelog>
  <changelog author="Fernando Fernandez Mancera &lt;ferferna@redhat.com&gt; 1:1.40.0-5" date="1671192000">- ovs: wait that links disappear during initial cleanup (rh #2153429)
- core: wait for carrier before resolving hostname via DNS (rh #2152891)</changelog>
</package>
<package pkgid="e85a3a61da80f825ebd3b1a22fbf222e12fcde267a8f3ba46862c8beeb146f24" name="NetworkManager-ovs" arch="x86_64">
  <version epoch="1" ver="1.40.0" rel="6.el8_7"/>
  <changelog author="Vojtech Bubela &lt;vbubela@redhat.com&gt; - 1:1.39.10-1" date="1657800000">- Update to 1.39.10 release (development)
- initrd: set a default carrier timeout of 10 seconds in initrd (rh #2079277)
- dhcp: wait DAD completion for DHCPv6 addresses (rh #2096386)
- libnm: support wait-activation-delay property (rh #2008337)
- veth: fix veth activation on booting (rh #2105956)
- support a ipv6.addr-gen-mode knob in the global config (rh #208268)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.39.11-1" date="1659009600">- Update to 1.39.11 release (development)
- dhcp: fix EXTENDED DHCP event to accept lease for dhclient plugin (rh #2109285)
- ovs: honor unmanaged setting also for interfaces that fail (rh #2077950)</changelog>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1:1.39.12-1" date="1659096000">- Update to 1.39.12 release (development)
- bridge: fix reapply support (rh #2092762)</changelog>
  <changelog author="Ana Cabral &lt;acabral@redhat.com&gt; - 1:1.39.90-1" date="1660651200">- Update to 1.39.90 release (release candidate)
- bridge: fix reapply of non-bridge properties (rh #2092762)
- bridge: fix wired.mtu reapply (rh #2076131)</changelog>
  <changelog author="Ana Cabral &lt;acabral@redhat.com&gt; - 1:1.40.0-1" date="1661515200">- Update to 1.40.0 release</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.40.0-2" date="1666267200">- Don't restart DHCP when MAC changes, to avoid that the IP changes (rh #2124443)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.40.0-3" date="1667908800">- dns: ensure that nameservers are sorted according to priority (rh #2134563)</changelog>
  <changelog author="Fernando Fernandez Mancera &lt;ferferna@redhat.com&gt; - 1:1.40.0-4" date="1669636800">- dhcp: decline IPv6 lease if all addresses fail DAD (rh #2132281)</changelog>
  <changelog author="Fernando Fernandez Mancera &lt;ferferna@redhat.com&gt; - 1:1.40.0-5" date="1671192000">- ovs: wait that links disappear during initial cleanup (rh #2153429)
- core: wait for carrier before resolving hostname via DNS (rh #2152891)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.40.0-6" date="1677672000">- Fix hostname resolution from tentative IPv6 addresses (rh #2166711)</changelog>
</package>
<package pkgid="2de4ca9d991d6d4f5ba746342df2134c6a718350bcaf41b39ba955862ad7cd09" name="NetworkManager-ppp" arch="x86_64">
  <version epoch="1" ver="1.40.0" rel="2.el8_7"/>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.39.6-1" date="1654084800">- Update to 1.39.6 release (development)
- Implement ACD (address conflict detection) for DHCPv4 (rh #1713380)</changelog>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1:1.39.7-1" date="1655294400">- Update to 1.39.7 release (development)
- core: cancel the IP check on deactivation (rh #2080928)
- core: ensure DHCP is restarted every time the link goes up (rh #2079406)
- core: fix a leak of L3 configuration memory (rh #2083453)
- ppp: fix a race with pppd when removing addresses (rh #2085382)
- wifi: fix a crash when checking WEP supplicant capability (rh #2092782)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.39.7-2" date="1655380800">- fix priority of IPv6 addresses to prefer manual over DHCPv6 over SLAAC (rh #2097270)</changelog>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1:1.39.8-1" date="1656590400">- Update to 1.39.8 release (development)
- core: make ipv6.addr-gen-mode default configurable (rh #1743161) (rh #2082682)
- dhcpv6: finish DAD before considering a lease to be good (rh #2096386)
- core: add connection.wait-activation-delay property (rh #2008337)</changelog>
  <changelog author="Vojtech Bubela &lt;vbubela@redhat.com&gt; - 1:1.39.10-1" date="1657800000">- Update to 1.39.10 release (development)
- initrd: set a default carrier timeout of 10 seconds in initrd (rh #2079277)
- dhcp: wait DAD completion for DHCPv6 addresses (rh #2096386)
- libnm: support wait-activation-delay property (rh #2008337)
- veth: fix veth activation on booting (rh #2105956)
- support a ipv6.addr-gen-mode knob in the global config (rh #208268)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.39.11-1" date="1659009600">- Update to 1.39.11 release (development)
- dhcp: fix EXTENDED DHCP event to accept lease for dhclient plugin (rh #2109285)
- ovs: honor unmanaged setting also for interfaces that fail (rh #2077950)</changelog>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1:1.39.12-1" date="1659096000">- Update to 1.39.12 release (development)
- bridge: fix reapply support (rh #2092762)</changelog>
  <changelog author="Ana Cabral &lt;acabral@redhat.com&gt; - 1:1.39.90-1" date="1660651200">- Update to 1.39.90 release (release candidate)
- bridge: fix reapply of non-bridge properties (rh #2092762)
- bridge: fix wired.mtu reapply (rh #2076131)</changelog>
  <changelog author="Ana Cabral &lt;acabral@redhat.com&gt; - 1:1.40.0-1" date="1661515200">- Update to 1.40.0 release</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.40.0-2" date="1666267200">- Don't restart DHCP when MAC changes, to avoid that the IP changes (rh #2124443)</changelog>
</package>
<package pkgid="d3bee49eabebf127b430705ca46982ce218c0f31d286d636f67d1664e00c1ab9" name="NetworkManager-ppp" arch="x86_64">
  <version epoch="1" ver="1.40.0" rel="5.el8_7"/>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1:1.39.8-1" date="1656590400">- Update to 1.39.8 release (development)
- core: make ipv6.addr-gen-mode default configurable (rh #1743161) (rh #2082682)
- dhcpv6: finish DAD before considering a lease to be good (rh #2096386)
- core: add connection.wait-activation-delay property (rh #2008337)</changelog>
  <changelog author="Vojtech Bubela &lt;vbubela@redhat.com&gt; - 1:1.39.10-1" date="1657800000">- Update to 1.39.10 release (development)
- initrd: set a default carrier timeout of 10 seconds in initrd (rh #2079277)
- dhcp: wait DAD completion for DHCPv6 addresses (rh #2096386)
- libnm: support wait-activation-delay property (rh #2008337)
- veth: fix veth activation on booting (rh #2105956)
- support a ipv6.addr-gen-mode knob in the global config (rh #208268)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.39.11-1" date="1659009600">- Update to 1.39.11 release (development)
- dhcp: fix EXTENDED DHCP event to accept lease for dhclient plugin (rh #2109285)
- ovs: honor unmanaged setting also for interfaces that fail (rh #2077950)</changelog>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1:1.39.12-1" date="1659096000">- Update to 1.39.12 release (development)
- bridge: fix reapply support (rh #2092762)</changelog>
  <changelog author="Ana Cabral &lt;acabral@redhat.com&gt; - 1:1.39.90-1" date="1660651200">- Update to 1.39.90 release (release candidate)
- bridge: fix reapply of non-bridge properties (rh #2092762)
- bridge: fix wired.mtu reapply (rh #2076131)</changelog>
  <changelog author="Ana Cabral &lt;acabral@redhat.com&gt; - 1:1.40.0-1" date="1661515200">- Update to 1.40.0 release</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.40.0-2" date="1666267200">- Don't restart DHCP when MAC changes, to avoid that the IP changes (rh #2124443)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.40.0-3" date="1667908800">- dns: ensure that nameservers are sorted according to priority (rh #2134563)</changelog>
  <changelog author="Fernando Fernandez Mancera &lt;ferferna@redhat.com&gt; 1:1.40.0-4" date="1669636800">- dhcp: decline IPv6 lease if all addresses fail DAD (rh #2132281)</changelog>
  <changelog author="Fernando Fernandez Mancera &lt;ferferna@redhat.com&gt; 1:1.40.0-5" date="1671192000">- ovs: wait that links disappear during initial cleanup (rh #2153429)
- core: wait for carrier before resolving hostname via DNS (rh #2152891)</changelog>
</package>
<package pkgid="7b15dda74778d22131a7b995f3497db6e8ad81e7070366ec5e2b3cf46c2a2817" name="NetworkManager-ppp" arch="x86_64">
  <version epoch="1" ver="1.40.0" rel="6.el8_7"/>
  <changelog author="Vojtech Bubela &lt;vbubela@redhat.com&gt; - 1:1.39.10-1" date="1657800000">- Update to 1.39.10 release (development)
- initrd: set a default carrier timeout of 10 seconds in initrd (rh #2079277)
- dhcp: wait DAD completion for DHCPv6 addresses (rh #2096386)
- libnm: support wait-activation-delay property (rh #2008337)
- veth: fix veth activation on booting (rh #2105956)
- support a ipv6.addr-gen-mode knob in the global config (rh #208268)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.39.11-1" date="1659009600">- Update to 1.39.11 release (development)
- dhcp: fix EXTENDED DHCP event to accept lease for dhclient plugin (rh #2109285)
- ovs: honor unmanaged setting also for interfaces that fail (rh #2077950)</changelog>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1:1.39.12-1" date="1659096000">- Update to 1.39.12 release (development)
- bridge: fix reapply support (rh #2092762)</changelog>
  <changelog author="Ana Cabral &lt;acabral@redhat.com&gt; - 1:1.39.90-1" date="1660651200">- Update to 1.39.90 release (release candidate)
- bridge: fix reapply of non-bridge properties (rh #2092762)
- bridge: fix wired.mtu reapply (rh #2076131)</changelog>
  <changelog author="Ana Cabral &lt;acabral@redhat.com&gt; - 1:1.40.0-1" date="1661515200">- Update to 1.40.0 release</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.40.0-2" date="1666267200">- Don't restart DHCP when MAC changes, to avoid that the IP changes (rh #2124443)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.40.0-3" date="1667908800">- dns: ensure that nameservers are sorted according to priority (rh #2134563)</changelog>
  <changelog author="Fernando Fernandez Mancera &lt;ferferna@redhat.com&gt; - 1:1.40.0-4" date="1669636800">- dhcp: decline IPv6 lease if all addresses fail DAD (rh #2132281)</changelog>
  <changelog author="Fernando Fernandez Mancera &lt;ferferna@redhat.com&gt; - 1:1.40.0-5" date="1671192000">- ovs: wait that links disappear during initial cleanup (rh #2153429)
- core: wait for carrier before resolving hostname via DNS (rh #2152891)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.40.0-6" date="1677672000">- Fix hostname resolution from tentative IPv6 addresses (rh #2166711)</changelog>
</package>
<package pkgid="7a3818f57f306792e22fc9228bdb58409ba766cb5f4037293554f23be44f8edd" name="NetworkManager-team" arch="x86_64">
  <version epoch="1" ver="1.40.0" rel="2.el8_7"/>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.39.6-1" date="1654084800">- Update to 1.39.6 release (development)
- Implement ACD (address conflict detection) for DHCPv4 (rh #1713380)</changelog>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1:1.39.7-1" date="1655294400">- Update to 1.39.7 release (development)
- core: cancel the IP check on deactivation (rh #2080928)
- core: ensure DHCP is restarted every time the link goes up (rh #2079406)
- core: fix a leak of L3 configuration memory (rh #2083453)
- ppp: fix a race with pppd when removing addresses (rh #2085382)
- wifi: fix a crash when checking WEP supplicant capability (rh #2092782)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.39.7-2" date="1655380800">- fix priority of IPv6 addresses to prefer manual over DHCPv6 over SLAAC (rh #2097270)</changelog>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1:1.39.8-1" date="1656590400">- Update to 1.39.8 release (development)
- core: make ipv6.addr-gen-mode default configurable (rh #1743161) (rh #2082682)
- dhcpv6: finish DAD before considering a lease to be good (rh #2096386)
- core: add connection.wait-activation-delay property (rh #2008337)</changelog>
  <changelog author="Vojtech Bubela &lt;vbubela@redhat.com&gt; - 1:1.39.10-1" date="1657800000">- Update to 1.39.10 release (development)
- initrd: set a default carrier timeout of 10 seconds in initrd (rh #2079277)
- dhcp: wait DAD completion for DHCPv6 addresses (rh #2096386)
- libnm: support wait-activation-delay property (rh #2008337)
- veth: fix veth activation on booting (rh #2105956)
- support a ipv6.addr-gen-mode knob in the global config (rh #208268)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.39.11-1" date="1659009600">- Update to 1.39.11 release (development)
- dhcp: fix EXTENDED DHCP event to accept lease for dhclient plugin (rh #2109285)
- ovs: honor unmanaged setting also for interfaces that fail (rh #2077950)</changelog>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1:1.39.12-1" date="1659096000">- Update to 1.39.12 release (development)
- bridge: fix reapply support (rh #2092762)</changelog>
  <changelog author="Ana Cabral &lt;acabral@redhat.com&gt; - 1:1.39.90-1" date="1660651200">- Update to 1.39.90 release (release candidate)
- bridge: fix reapply of non-bridge properties (rh #2092762)
- bridge: fix wired.mtu reapply (rh #2076131)</changelog>
  <changelog author="Ana Cabral &lt;acabral@redhat.com&gt; - 1:1.40.0-1" date="1661515200">- Update to 1.40.0 release</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.40.0-2" date="1666267200">- Don't restart DHCP when MAC changes, to avoid that the IP changes (rh #2124443)</changelog>
</package>
<package pkgid="e364dff6fa6e32e99b7ab17d5d525281f860261613a956cf287a3dd376813543" name="NetworkManager-team" arch="x86_64">
  <version epoch="1" ver="1.40.0" rel="5.el8_7"/>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1:1.39.8-1" date="1656590400">- Update to 1.39.8 release (development)
- core: make ipv6.addr-gen-mode default configurable (rh #1743161) (rh #2082682)
- dhcpv6: finish DAD before considering a lease to be good (rh #2096386)
- core: add connection.wait-activation-delay property (rh #2008337)</changelog>
  <changelog author="Vojtech Bubela &lt;vbubela@redhat.com&gt; - 1:1.39.10-1" date="1657800000">- Update to 1.39.10 release (development)
- initrd: set a default carrier timeout of 10 seconds in initrd (rh #2079277)
- dhcp: wait DAD completion for DHCPv6 addresses (rh #2096386)
- libnm: support wait-activation-delay property (rh #2008337)
- veth: fix veth activation on booting (rh #2105956)
- support a ipv6.addr-gen-mode knob in the global config (rh #208268)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.39.11-1" date="1659009600">- Update to 1.39.11 release (development)
- dhcp: fix EXTENDED DHCP event to accept lease for dhclient plugin (rh #2109285)
- ovs: honor unmanaged setting also for interfaces that fail (rh #2077950)</changelog>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1:1.39.12-1" date="1659096000">- Update to 1.39.12 release (development)
- bridge: fix reapply support (rh #2092762)</changelog>
  <changelog author="Ana Cabral &lt;acabral@redhat.com&gt; - 1:1.39.90-1" date="1660651200">- Update to 1.39.90 release (release candidate)
- bridge: fix reapply of non-bridge properties (rh #2092762)
- bridge: fix wired.mtu reapply (rh #2076131)</changelog>
  <changelog author="Ana Cabral &lt;acabral@redhat.com&gt; - 1:1.40.0-1" date="1661515200">- Update to 1.40.0 release</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.40.0-2" date="1666267200">- Don't restart DHCP when MAC changes, to avoid that the IP changes (rh #2124443)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.40.0-3" date="1667908800">- dns: ensure that nameservers are sorted according to priority (rh #2134563)</changelog>
  <changelog author="Fernando Fernandez Mancera &lt;ferferna@redhat.com&gt; 1:1.40.0-4" date="1669636800">- dhcp: decline IPv6 lease if all addresses fail DAD (rh #2132281)</changelog>
  <changelog author="Fernando Fernandez Mancera &lt;ferferna@redhat.com&gt; 1:1.40.0-5" date="1671192000">- ovs: wait that links disappear during initial cleanup (rh #2153429)
- core: wait for carrier before resolving hostname via DNS (rh #2152891)</changelog>
</package>
<package pkgid="08e9175d16dbd4487b5f23d65fa6595b55706eba816b6a8b3dac49dd62eeb4ae" name="NetworkManager-team" arch="x86_64">
  <version epoch="1" ver="1.40.0" rel="6.el8_7"/>
  <changelog author="Vojtech Bubela &lt;vbubela@redhat.com&gt; - 1:1.39.10-1" date="1657800000">- Update to 1.39.10 release (development)
- initrd: set a default carrier timeout of 10 seconds in initrd (rh #2079277)
- dhcp: wait DAD completion for DHCPv6 addresses (rh #2096386)
- libnm: support wait-activation-delay property (rh #2008337)
- veth: fix veth activation on booting (rh #2105956)
- support a ipv6.addr-gen-mode knob in the global config (rh #208268)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.39.11-1" date="1659009600">- Update to 1.39.11 release (development)
- dhcp: fix EXTENDED DHCP event to accept lease for dhclient plugin (rh #2109285)
- ovs: honor unmanaged setting also for interfaces that fail (rh #2077950)</changelog>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1:1.39.12-1" date="1659096000">- Update to 1.39.12 release (development)
- bridge: fix reapply support (rh #2092762)</changelog>
  <changelog author="Ana Cabral &lt;acabral@redhat.com&gt; - 1:1.39.90-1" date="1660651200">- Update to 1.39.90 release (release candidate)
- bridge: fix reapply of non-bridge properties (rh #2092762)
- bridge: fix wired.mtu reapply (rh #2076131)</changelog>
  <changelog author="Ana Cabral &lt;acabral@redhat.com&gt; - 1:1.40.0-1" date="1661515200">- Update to 1.40.0 release</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.40.0-2" date="1666267200">- Don't restart DHCP when MAC changes, to avoid that the IP changes (rh #2124443)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.40.0-3" date="1667908800">- dns: ensure that nameservers are sorted according to priority (rh #2134563)</changelog>
  <changelog author="Fernando Fernandez Mancera &lt;ferferna@redhat.com&gt; - 1:1.40.0-4" date="1669636800">- dhcp: decline IPv6 lease if all addresses fail DAD (rh #2132281)</changelog>
  <changelog author="Fernando Fernandez Mancera &lt;ferferna@redhat.com&gt; - 1:1.40.0-5" date="1671192000">- ovs: wait that links disappear during initial cleanup (rh #2153429)
- core: wait for carrier before resolving hostname via DNS (rh #2152891)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.40.0-6" date="1677672000">- Fix hostname resolution from tentative IPv6 addresses (rh #2166711)</changelog>
</package>
<package pkgid="be0bfe62997230329802e5d23cba05afb909d9edac3b24675f141cf052556387" name="NetworkManager-tui" arch="x86_64">
  <version epoch="1" ver="1.40.0" rel="2.el8_7"/>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.39.6-1" date="1654084800">- Update to 1.39.6 release (development)
- Implement ACD (address conflict detection) for DHCPv4 (rh #1713380)</changelog>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1:1.39.7-1" date="1655294400">- Update to 1.39.7 release (development)
- core: cancel the IP check on deactivation (rh #2080928)
- core: ensure DHCP is restarted every time the link goes up (rh #2079406)
- core: fix a leak of L3 configuration memory (rh #2083453)
- ppp: fix a race with pppd when removing addresses (rh #2085382)
- wifi: fix a crash when checking WEP supplicant capability (rh #2092782)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.39.7-2" date="1655380800">- fix priority of IPv6 addresses to prefer manual over DHCPv6 over SLAAC (rh #2097270)</changelog>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1:1.39.8-1" date="1656590400">- Update to 1.39.8 release (development)
- core: make ipv6.addr-gen-mode default configurable (rh #1743161) (rh #2082682)
- dhcpv6: finish DAD before considering a lease to be good (rh #2096386)
- core: add connection.wait-activation-delay property (rh #2008337)</changelog>
  <changelog author="Vojtech Bubela &lt;vbubela@redhat.com&gt; - 1:1.39.10-1" date="1657800000">- Update to 1.39.10 release (development)
- initrd: set a default carrier timeout of 10 seconds in initrd (rh #2079277)
- dhcp: wait DAD completion for DHCPv6 addresses (rh #2096386)
- libnm: support wait-activation-delay property (rh #2008337)
- veth: fix veth activation on booting (rh #2105956)
- support a ipv6.addr-gen-mode knob in the global config (rh #208268)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.39.11-1" date="1659009600">- Update to 1.39.11 release (development)
- dhcp: fix EXTENDED DHCP event to accept lease for dhclient plugin (rh #2109285)
- ovs: honor unmanaged setting also for interfaces that fail (rh #2077950)</changelog>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1:1.39.12-1" date="1659096000">- Update to 1.39.12 release (development)
- bridge: fix reapply support (rh #2092762)</changelog>
  <changelog author="Ana Cabral &lt;acabral@redhat.com&gt; - 1:1.39.90-1" date="1660651200">- Update to 1.39.90 release (release candidate)
- bridge: fix reapply of non-bridge properties (rh #2092762)
- bridge: fix wired.mtu reapply (rh #2076131)</changelog>
  <changelog author="Ana Cabral &lt;acabral@redhat.com&gt; - 1:1.40.0-1" date="1661515200">- Update to 1.40.0 release</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.40.0-2" date="1666267200">- Don't restart DHCP when MAC changes, to avoid that the IP changes (rh #2124443)</changelog>
</package>
<package pkgid="d29d8efc7595cc5224742b09ba0bf03b549d309257ef4774c99f541ec6cc265d" name="NetworkManager-tui" arch="x86_64">
  <version epoch="1" ver="1.40.0" rel="5.el8_7"/>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1:1.39.8-1" date="1656590400">- Update to 1.39.8 release (development)
- core: make ipv6.addr-gen-mode default configurable (rh #1743161) (rh #2082682)
- dhcpv6: finish DAD before considering a lease to be good (rh #2096386)
- core: add connection.wait-activation-delay property (rh #2008337)</changelog>
  <changelog author="Vojtech Bubela &lt;vbubela@redhat.com&gt; - 1:1.39.10-1" date="1657800000">- Update to 1.39.10 release (development)
- initrd: set a default carrier timeout of 10 seconds in initrd (rh #2079277)
- dhcp: wait DAD completion for DHCPv6 addresses (rh #2096386)
- libnm: support wait-activation-delay property (rh #2008337)
- veth: fix veth activation on booting (rh #2105956)
- support a ipv6.addr-gen-mode knob in the global config (rh #208268)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.39.11-1" date="1659009600">- Update to 1.39.11 release (development)
- dhcp: fix EXTENDED DHCP event to accept lease for dhclient plugin (rh #2109285)
- ovs: honor unmanaged setting also for interfaces that fail (rh #2077950)</changelog>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1:1.39.12-1" date="1659096000">- Update to 1.39.12 release (development)
- bridge: fix reapply support (rh #2092762)</changelog>
  <changelog author="Ana Cabral &lt;acabral@redhat.com&gt; - 1:1.39.90-1" date="1660651200">- Update to 1.39.90 release (release candidate)
- bridge: fix reapply of non-bridge properties (rh #2092762)
- bridge: fix wired.mtu reapply (rh #2076131)</changelog>
  <changelog author="Ana Cabral &lt;acabral@redhat.com&gt; - 1:1.40.0-1" date="1661515200">- Update to 1.40.0 release</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.40.0-2" date="1666267200">- Don't restart DHCP when MAC changes, to avoid that the IP changes (rh #2124443)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.40.0-3" date="1667908800">- dns: ensure that nameservers are sorted according to priority (rh #2134563)</changelog>
  <changelog author="Fernando Fernandez Mancera &lt;ferferna@redhat.com&gt; 1:1.40.0-4" date="1669636800">- dhcp: decline IPv6 lease if all addresses fail DAD (rh #2132281)</changelog>
  <changelog author="Fernando Fernandez Mancera &lt;ferferna@redhat.com&gt; 1:1.40.0-5" date="1671192000">- ovs: wait that links disappear during initial cleanup (rh #2153429)
- core: wait for carrier before resolving hostname via DNS (rh #2152891)</changelog>
</package>
<package pkgid="11796d07912e6bc76db79b5a4c5aea3f0367e05c7ce50333dbcc3d8908c366be" name="NetworkManager-tui" arch="x86_64">
  <version epoch="1" ver="1.40.0" rel="6.el8_7"/>
  <changelog author="Vojtech Bubela &lt;vbubela@redhat.com&gt; - 1:1.39.10-1" date="1657800000">- Update to 1.39.10 release (development)
- initrd: set a default carrier timeout of 10 seconds in initrd (rh #2079277)
- dhcp: wait DAD completion for DHCPv6 addresses (rh #2096386)
- libnm: support wait-activation-delay property (rh #2008337)
- veth: fix veth activation on booting (rh #2105956)
- support a ipv6.addr-gen-mode knob in the global config (rh #208268)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.39.11-1" date="1659009600">- Update to 1.39.11 release (development)
- dhcp: fix EXTENDED DHCP event to accept lease for dhclient plugin (rh #2109285)
- ovs: honor unmanaged setting also for interfaces that fail (rh #2077950)</changelog>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1:1.39.12-1" date="1659096000">- Update to 1.39.12 release (development)
- bridge: fix reapply support (rh #2092762)</changelog>
  <changelog author="Ana Cabral &lt;acabral@redhat.com&gt; - 1:1.39.90-1" date="1660651200">- Update to 1.39.90 release (release candidate)
- bridge: fix reapply of non-bridge properties (rh #2092762)
- bridge: fix wired.mtu reapply (rh #2076131)</changelog>
  <changelog author="Ana Cabral &lt;acabral@redhat.com&gt; - 1:1.40.0-1" date="1661515200">- Update to 1.40.0 release</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.40.0-2" date="1666267200">- Don't restart DHCP when MAC changes, to avoid that the IP changes (rh #2124443)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.40.0-3" date="1667908800">- dns: ensure that nameservers are sorted according to priority (rh #2134563)</changelog>
  <changelog author="Fernando Fernandez Mancera &lt;ferferna@redhat.com&gt; - 1:1.40.0-4" date="1669636800">- dhcp: decline IPv6 lease if all addresses fail DAD (rh #2132281)</changelog>
  <changelog author="Fernando Fernandez Mancera &lt;ferferna@redhat.com&gt; - 1:1.40.0-5" date="1671192000">- ovs: wait that links disappear during initial cleanup (rh #2153429)
- core: wait for carrier before resolving hostname via DNS (rh #2152891)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.40.0-6" date="1677672000">- Fix hostname resolution from tentative IPv6 addresses (rh #2166711)</changelog>
</package>
<package pkgid="f90b9e7432a4829cf0f400c79fa9075d6fb7d81858ebe58e87d5f1f2d449abf2" name="NetworkManager-wifi" arch="x86_64">
  <version epoch="1" ver="1.40.0" rel="2.el8_7"/>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.39.6-1" date="1654084800">- Update to 1.39.6 release (development)
- Implement ACD (address conflict detection) for DHCPv4 (rh #1713380)</changelog>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1:1.39.7-1" date="1655294400">- Update to 1.39.7 release (development)
- core: cancel the IP check on deactivation (rh #2080928)
- core: ensure DHCP is restarted every time the link goes up (rh #2079406)
- core: fix a leak of L3 configuration memory (rh #2083453)
- ppp: fix a race with pppd when removing addresses (rh #2085382)
- wifi: fix a crash when checking WEP supplicant capability (rh #2092782)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.39.7-2" date="1655380800">- fix priority of IPv6 addresses to prefer manual over DHCPv6 over SLAAC (rh #2097270)</changelog>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1:1.39.8-1" date="1656590400">- Update to 1.39.8 release (development)
- core: make ipv6.addr-gen-mode default configurable (rh #1743161) (rh #2082682)
- dhcpv6: finish DAD before considering a lease to be good (rh #2096386)
- core: add connection.wait-activation-delay property (rh #2008337)</changelog>
  <changelog author="Vojtech Bubela &lt;vbubela@redhat.com&gt; - 1:1.39.10-1" date="1657800000">- Update to 1.39.10 release (development)
- initrd: set a default carrier timeout of 10 seconds in initrd (rh #2079277)
- dhcp: wait DAD completion for DHCPv6 addresses (rh #2096386)
- libnm: support wait-activation-delay property (rh #2008337)
- veth: fix veth activation on booting (rh #2105956)
- support a ipv6.addr-gen-mode knob in the global config (rh #208268)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.39.11-1" date="1659009600">- Update to 1.39.11 release (development)
- dhcp: fix EXTENDED DHCP event to accept lease for dhclient plugin (rh #2109285)
- ovs: honor unmanaged setting also for interfaces that fail (rh #2077950)</changelog>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1:1.39.12-1" date="1659096000">- Update to 1.39.12 release (development)
- bridge: fix reapply support (rh #2092762)</changelog>
  <changelog author="Ana Cabral &lt;acabral@redhat.com&gt; - 1:1.39.90-1" date="1660651200">- Update to 1.39.90 release (release candidate)
- bridge: fix reapply of non-bridge properties (rh #2092762)
- bridge: fix wired.mtu reapply (rh #2076131)</changelog>
  <changelog author="Ana Cabral &lt;acabral@redhat.com&gt; - 1:1.40.0-1" date="1661515200">- Update to 1.40.0 release</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.40.0-2" date="1666267200">- Don't restart DHCP when MAC changes, to avoid that the IP changes (rh #2124443)</changelog>
</package>
<package pkgid="28550d119ddae676eb549d09838fb3db0c9fa85110534ac5b1616cd3dd1c9cff" name="NetworkManager-wifi" arch="x86_64">
  <version epoch="1" ver="1.40.0" rel="5.el8_7"/>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1:1.39.8-1" date="1656590400">- Update to 1.39.8 release (development)
- core: make ipv6.addr-gen-mode default configurable (rh #1743161) (rh #2082682)
- dhcpv6: finish DAD before considering a lease to be good (rh #2096386)
- core: add connection.wait-activation-delay property (rh #2008337)</changelog>
  <changelog author="Vojtech Bubela &lt;vbubela@redhat.com&gt; - 1:1.39.10-1" date="1657800000">- Update to 1.39.10 release (development)
- initrd: set a default carrier timeout of 10 seconds in initrd (rh #2079277)
- dhcp: wait DAD completion for DHCPv6 addresses (rh #2096386)
- libnm: support wait-activation-delay property (rh #2008337)
- veth: fix veth activation on booting (rh #2105956)
- support a ipv6.addr-gen-mode knob in the global config (rh #208268)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.39.11-1" date="1659009600">- Update to 1.39.11 release (development)
- dhcp: fix EXTENDED DHCP event to accept lease for dhclient plugin (rh #2109285)
- ovs: honor unmanaged setting also for interfaces that fail (rh #2077950)</changelog>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1:1.39.12-1" date="1659096000">- Update to 1.39.12 release (development)
- bridge: fix reapply support (rh #2092762)</changelog>
  <changelog author="Ana Cabral &lt;acabral@redhat.com&gt; - 1:1.39.90-1" date="1660651200">- Update to 1.39.90 release (release candidate)
- bridge: fix reapply of non-bridge properties (rh #2092762)
- bridge: fix wired.mtu reapply (rh #2076131)</changelog>
  <changelog author="Ana Cabral &lt;acabral@redhat.com&gt; - 1:1.40.0-1" date="1661515200">- Update to 1.40.0 release</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.40.0-2" date="1666267200">- Don't restart DHCP when MAC changes, to avoid that the IP changes (rh #2124443)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.40.0-3" date="1667908800">- dns: ensure that nameservers are sorted according to priority (rh #2134563)</changelog>
  <changelog author="Fernando Fernandez Mancera &lt;ferferna@redhat.com&gt; 1:1.40.0-4" date="1669636800">- dhcp: decline IPv6 lease if all addresses fail DAD (rh #2132281)</changelog>
  <changelog author="Fernando Fernandez Mancera &lt;ferferna@redhat.com&gt; 1:1.40.0-5" date="1671192000">- ovs: wait that links disappear during initial cleanup (rh #2153429)
- core: wait for carrier before resolving hostname via DNS (rh #2152891)</changelog>
</package>
<package pkgid="c05555726967b9a1945704ed9c05f3d72980dfdc8b84873b75e2ec6b1f2a88b2" name="NetworkManager-wifi" arch="x86_64">
  <version epoch="1" ver="1.40.0" rel="6.el8_7"/>
  <changelog author="Vojtech Bubela &lt;vbubela@redhat.com&gt; - 1:1.39.10-1" date="1657800000">- Update to 1.39.10 release (development)
- initrd: set a default carrier timeout of 10 seconds in initrd (rh #2079277)
- dhcp: wait DAD completion for DHCPv6 addresses (rh #2096386)
- libnm: support wait-activation-delay property (rh #2008337)
- veth: fix veth activation on booting (rh #2105956)
- support a ipv6.addr-gen-mode knob in the global config (rh #208268)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.39.11-1" date="1659009600">- Update to 1.39.11 release (development)
- dhcp: fix EXTENDED DHCP event to accept lease for dhclient plugin (rh #2109285)
- ovs: honor unmanaged setting also for interfaces that fail (rh #2077950)</changelog>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1:1.39.12-1" date="1659096000">- Update to 1.39.12 release (development)
- bridge: fix reapply support (rh #2092762)</changelog>
  <changelog author="Ana Cabral &lt;acabral@redhat.com&gt; - 1:1.39.90-1" date="1660651200">- Update to 1.39.90 release (release candidate)
- bridge: fix reapply of non-bridge properties (rh #2092762)
- bridge: fix wired.mtu reapply (rh #2076131)</changelog>
  <changelog author="Ana Cabral &lt;acabral@redhat.com&gt; - 1:1.40.0-1" date="1661515200">- Update to 1.40.0 release</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.40.0-2" date="1666267200">- Don't restart DHCP when MAC changes, to avoid that the IP changes (rh #2124443)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.40.0-3" date="1667908800">- dns: ensure that nameservers are sorted according to priority (rh #2134563)</changelog>
  <changelog author="Fernando Fernandez Mancera &lt;ferferna@redhat.com&gt; - 1:1.40.0-4" date="1669636800">- dhcp: decline IPv6 lease if all addresses fail DAD (rh #2132281)</changelog>
  <changelog author="Fernando Fernandez Mancera &lt;ferferna@redhat.com&gt; - 1:1.40.0-5" date="1671192000">- ovs: wait that links disappear during initial cleanup (rh #2153429)
- core: wait for carrier before resolving hostname via DNS (rh #2152891)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.40.0-6" date="1677672000">- Fix hostname resolution from tentative IPv6 addresses (rh #2166711)</changelog>
</package>
<package pkgid="52a82bc918d02d1c9be09b48bbb7ad1f7df068be97f8b3af51fdf7b2af2d8e2f" name="NetworkManager-wwan" arch="x86_64">
  <version epoch="1" ver="1.40.0" rel="2.el8_7"/>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.39.6-1" date="1654084800">- Update to 1.39.6 release (development)
- Implement ACD (address conflict detection) for DHCPv4 (rh #1713380)</changelog>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1:1.39.7-1" date="1655294400">- Update to 1.39.7 release (development)
- core: cancel the IP check on deactivation (rh #2080928)
- core: ensure DHCP is restarted every time the link goes up (rh #2079406)
- core: fix a leak of L3 configuration memory (rh #2083453)
- ppp: fix a race with pppd when removing addresses (rh #2085382)
- wifi: fix a crash when checking WEP supplicant capability (rh #2092782)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.39.7-2" date="1655380800">- fix priority of IPv6 addresses to prefer manual over DHCPv6 over SLAAC (rh #2097270)</changelog>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1:1.39.8-1" date="1656590400">- Update to 1.39.8 release (development)
- core: make ipv6.addr-gen-mode default configurable (rh #1743161) (rh #2082682)
- dhcpv6: finish DAD before considering a lease to be good (rh #2096386)
- core: add connection.wait-activation-delay property (rh #2008337)</changelog>
  <changelog author="Vojtech Bubela &lt;vbubela@redhat.com&gt; - 1:1.39.10-1" date="1657800000">- Update to 1.39.10 release (development)
- initrd: set a default carrier timeout of 10 seconds in initrd (rh #2079277)
- dhcp: wait DAD completion for DHCPv6 addresses (rh #2096386)
- libnm: support wait-activation-delay property (rh #2008337)
- veth: fix veth activation on booting (rh #2105956)
- support a ipv6.addr-gen-mode knob in the global config (rh #208268)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.39.11-1" date="1659009600">- Update to 1.39.11 release (development)
- dhcp: fix EXTENDED DHCP event to accept lease for dhclient plugin (rh #2109285)
- ovs: honor unmanaged setting also for interfaces that fail (rh #2077950)</changelog>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1:1.39.12-1" date="1659096000">- Update to 1.39.12 release (development)
- bridge: fix reapply support (rh #2092762)</changelog>
  <changelog author="Ana Cabral &lt;acabral@redhat.com&gt; - 1:1.39.90-1" date="1660651200">- Update to 1.39.90 release (release candidate)
- bridge: fix reapply of non-bridge properties (rh #2092762)
- bridge: fix wired.mtu reapply (rh #2076131)</changelog>
  <changelog author="Ana Cabral &lt;acabral@redhat.com&gt; - 1:1.40.0-1" date="1661515200">- Update to 1.40.0 release</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.40.0-2" date="1666267200">- Don't restart DHCP when MAC changes, to avoid that the IP changes (rh #2124443)</changelog>
</package>
<package pkgid="21ddc66fa0ff56ba3d5960430cae1d84c6a71b04b1fe41de50532e54df6fe46b" name="NetworkManager-wwan" arch="x86_64">
  <version epoch="1" ver="1.40.0" rel="5.el8_7"/>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1:1.39.8-1" date="1656590400">- Update to 1.39.8 release (development)
- core: make ipv6.addr-gen-mode default configurable (rh #1743161) (rh #2082682)
- dhcpv6: finish DAD before considering a lease to be good (rh #2096386)
- core: add connection.wait-activation-delay property (rh #2008337)</changelog>
  <changelog author="Vojtech Bubela &lt;vbubela@redhat.com&gt; - 1:1.39.10-1" date="1657800000">- Update to 1.39.10 release (development)
- initrd: set a default carrier timeout of 10 seconds in initrd (rh #2079277)
- dhcp: wait DAD completion for DHCPv6 addresses (rh #2096386)
- libnm: support wait-activation-delay property (rh #2008337)
- veth: fix veth activation on booting (rh #2105956)
- support a ipv6.addr-gen-mode knob in the global config (rh #208268)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.39.11-1" date="1659009600">- Update to 1.39.11 release (development)
- dhcp: fix EXTENDED DHCP event to accept lease for dhclient plugin (rh #2109285)
- ovs: honor unmanaged setting also for interfaces that fail (rh #2077950)</changelog>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1:1.39.12-1" date="1659096000">- Update to 1.39.12 release (development)
- bridge: fix reapply support (rh #2092762)</changelog>
  <changelog author="Ana Cabral &lt;acabral@redhat.com&gt; - 1:1.39.90-1" date="1660651200">- Update to 1.39.90 release (release candidate)
- bridge: fix reapply of non-bridge properties (rh #2092762)
- bridge: fix wired.mtu reapply (rh #2076131)</changelog>
  <changelog author="Ana Cabral &lt;acabral@redhat.com&gt; - 1:1.40.0-1" date="1661515200">- Update to 1.40.0 release</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.40.0-2" date="1666267200">- Don't restart DHCP when MAC changes, to avoid that the IP changes (rh #2124443)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.40.0-3" date="1667908800">- dns: ensure that nameservers are sorted according to priority (rh #2134563)</changelog>
  <changelog author="Fernando Fernandez Mancera &lt;ferferna@redhat.com&gt; 1:1.40.0-4" date="1669636800">- dhcp: decline IPv6 lease if all addresses fail DAD (rh #2132281)</changelog>
  <changelog author="Fernando Fernandez Mancera &lt;ferferna@redhat.com&gt; 1:1.40.0-5" date="1671192000">- ovs: wait that links disappear during initial cleanup (rh #2153429)
- core: wait for carrier before resolving hostname via DNS (rh #2152891)</changelog>
</package>
<package pkgid="423e6898c494972df7ca78855311731ed4f14cacfdb61e90c4c838adc3719f84" name="NetworkManager-wwan" arch="x86_64">
  <version epoch="1" ver="1.40.0" rel="6.el8_7"/>
  <changelog author="Vojtech Bubela &lt;vbubela@redhat.com&gt; - 1:1.39.10-1" date="1657800000">- Update to 1.39.10 release (development)
- initrd: set a default carrier timeout of 10 seconds in initrd (rh #2079277)
- dhcp: wait DAD completion for DHCPv6 addresses (rh #2096386)
- libnm: support wait-activation-delay property (rh #2008337)
- veth: fix veth activation on booting (rh #2105956)
- support a ipv6.addr-gen-mode knob in the global config (rh #208268)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.39.11-1" date="1659009600">- Update to 1.39.11 release (development)
- dhcp: fix EXTENDED DHCP event to accept lease for dhclient plugin (rh #2109285)
- ovs: honor unmanaged setting also for interfaces that fail (rh #2077950)</changelog>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1:1.39.12-1" date="1659096000">- Update to 1.39.12 release (development)
- bridge: fix reapply support (rh #2092762)</changelog>
  <changelog author="Ana Cabral &lt;acabral@redhat.com&gt; - 1:1.39.90-1" date="1660651200">- Update to 1.39.90 release (release candidate)
- bridge: fix reapply of non-bridge properties (rh #2092762)
- bridge: fix wired.mtu reapply (rh #2076131)</changelog>
  <changelog author="Ana Cabral &lt;acabral@redhat.com&gt; - 1:1.40.0-1" date="1661515200">- Update to 1.40.0 release</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.40.0-2" date="1666267200">- Don't restart DHCP when MAC changes, to avoid that the IP changes (rh #2124443)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.40.0-3" date="1667908800">- dns: ensure that nameservers are sorted according to priority (rh #2134563)</changelog>
  <changelog author="Fernando Fernandez Mancera &lt;ferferna@redhat.com&gt; - 1:1.40.0-4" date="1669636800">- dhcp: decline IPv6 lease if all addresses fail DAD (rh #2132281)</changelog>
  <changelog author="Fernando Fernandez Mancera &lt;ferferna@redhat.com&gt; - 1:1.40.0-5" date="1671192000">- ovs: wait that links disappear during initial cleanup (rh #2153429)
- core: wait for carrier before resolving hostname via DNS (rh #2152891)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.40.0-6" date="1677672000">- Fix hostname resolution from tentative IPv6 addresses (rh #2166711)</changelog>
</package>
<package pkgid="6cf56899076f7f39728d7b6d5f4013e65c94ea389eb7ea590fcae0d27e636c21" name="authselect" arch="x86_64">
  <version epoch="0" ver="1.2.5" rel="2.el8_7"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.0-13" date="1551096000">- Revert pam_systemd.so to be optional
- Resolves: #rhbz1643928 - pam_systemd shouldn't be optional in system-auth</changelog>
  <changelog author="Pavel B&#x159;ezina &lt;pbrezina@redhat.com&gt; - 1.1-1" date="1560168000">- Rebase to authselect-1.1 (RHBZ #1685516)
- Notify that oddjob-mkhomedir needs to be enabled manually (RHBZ #1694103)
- Ask for smartcard insertion when smartcard authentication is required (RHBZ #1674397)
- Update translations (RHBZ #1689973)</changelog>
  <changelog author="Pavel B&#x159;ezina &lt;pbrezina@redhat.com&gt; - 1.1-2" date="1562241600">- Update translations (RHBZ #1689973)</changelog>
  <changelog author="Pavel B&#x159;ezina &lt;pbrezina@redhat.com&gt; - 1.2.1-1" date="1589284800">- Rebase to authselect-1.2.1 (RHBZ #1810471)
- CLI commands are now correctly translated (RHBZ #1816009)
- Remove unsupported features from sssd profile description (RHBZ #1830251)
- add `with-files-access-provider` to sssd profile (RHBZ #1734094)
- switch to pam_usertype module (RHBZ #1773567)
- fix typo in sssd profile description (RHBZ #1787638)
- add minimal profile (RHBZ #1654018)</changelog>
  <changelog author="Pavel B&#x159;ezina &lt;pbrezina@redhat.com&gt; - 1.2.1-2" date="1592568000">- Update translations (RHBZ #1820533)</changelog>
  <changelog author="Pavel B&#x159;ezina &lt;pbrezina@redhat.com&gt; - 1.2.2-1" date="1606305600">- Rebase to authselect-1.2.2 (RHBZ #1892761)</changelog>
  <changelog author="Pavel B&#x159;ezina &lt;pbrezina@redhat.com&gt; - 1.2.2-2" date="1626264000">- try_first_pass option no longer works on some PAM modules in RHEL8 (RHBZ #1949070)
- Need to localize the description of --debug option in authselect show (RHBZ #1970408)</changelog>
  <changelog author="Pavel B&#x159;ezina &lt;pbrezina@redhat.com&gt; - 1.2.2-3" date="1626264001">- Update translations (RHBZ #1961625)</changelog>
  <changelog author="Pavel B&#x159;ezina &lt;pbrezina@redhat.com&gt; - 1.2.5-1" date="1651752000">- Rebase to 1.2.5 (RHBZ #2080238)
- sssd profile with-smartcard no longer prevents local users from accessing cron (RHBZ #2070325)
- backup-restore now works correctly (RHBZ #2066535)
- add with-subid to sssd profile (RHBZ #2063750)</changelog>
  <changelog author="Pavel B&#x159;ezina &lt;pbrezina@redhat.com&gt; - 1.2.5-2" date="1670414400">- Change password hashing algorithm from yescrypt back to sha512 (RHBZ #2151229)</changelog>
</package>
<package pkgid="8fa60c5c98dda4d184cb01be9642c117e82d028fe2a8e0e534fdb564c6fbeea2" name="authselect-libs" arch="i686">
  <version epoch="0" ver="1.2.5" rel="2.el8_7"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.0-13" date="1551096000">- Revert pam_systemd.so to be optional
- Resolves: #rhbz1643928 - pam_systemd shouldn't be optional in system-auth</changelog>
  <changelog author="Pavel B&#x159;ezina &lt;pbrezina@redhat.com&gt; - 1.1-1" date="1560168000">- Rebase to authselect-1.1 (RHBZ #1685516)
- Notify that oddjob-mkhomedir needs to be enabled manually (RHBZ #1694103)
- Ask for smartcard insertion when smartcard authentication is required (RHBZ #1674397)
- Update translations (RHBZ #1689973)</changelog>
  <changelog author="Pavel B&#x159;ezina &lt;pbrezina@redhat.com&gt; - 1.1-2" date="1562241600">- Update translations (RHBZ #1689973)</changelog>
  <changelog author="Pavel B&#x159;ezina &lt;pbrezina@redhat.com&gt; - 1.2.1-1" date="1589284800">- Rebase to authselect-1.2.1 (RHBZ #1810471)
- CLI commands are now correctly translated (RHBZ #1816009)
- Remove unsupported features from sssd profile description (RHBZ #1830251)
- add `with-files-access-provider` to sssd profile (RHBZ #1734094)
- switch to pam_usertype module (RHBZ #1773567)
- fix typo in sssd profile description (RHBZ #1787638)
- add minimal profile (RHBZ #1654018)</changelog>
  <changelog author="Pavel B&#x159;ezina &lt;pbrezina@redhat.com&gt; - 1.2.1-2" date="1592568000">- Update translations (RHBZ #1820533)</changelog>
  <changelog author="Pavel B&#x159;ezina &lt;pbrezina@redhat.com&gt; - 1.2.2-1" date="1606305600">- Rebase to authselect-1.2.2 (RHBZ #1892761)</changelog>
  <changelog author="Pavel B&#x159;ezina &lt;pbrezina@redhat.com&gt; - 1.2.2-2" date="1626264000">- try_first_pass option no longer works on some PAM modules in RHEL8 (RHBZ #1949070)
- Need to localize the description of --debug option in authselect show (RHBZ #1970408)</changelog>
  <changelog author="Pavel B&#x159;ezina &lt;pbrezina@redhat.com&gt; - 1.2.2-3" date="1626264001">- Update translations (RHBZ #1961625)</changelog>
  <changelog author="Pavel B&#x159;ezina &lt;pbrezina@redhat.com&gt; - 1.2.5-1" date="1651752000">- Rebase to 1.2.5 (RHBZ #2080238)
- sssd profile with-smartcard no longer prevents local users from accessing cron (RHBZ #2070325)
- backup-restore now works correctly (RHBZ #2066535)
- add with-subid to sssd profile (RHBZ #2063750)</changelog>
  <changelog author="Pavel B&#x159;ezina &lt;pbrezina@redhat.com&gt; - 1.2.5-2" date="1670414400">- Change password hashing algorithm from yescrypt back to sha512 (RHBZ #2151229)</changelog>
</package>
<package pkgid="50645517a5b3f88687acc0543fad4e102519163ead30a46169c7d483a8c32158" name="authselect-libs" arch="x86_64">
  <version epoch="0" ver="1.2.5" rel="2.el8_7"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.0-13" date="1551096000">- Revert pam_systemd.so to be optional
- Resolves: #rhbz1643928 - pam_systemd shouldn't be optional in system-auth</changelog>
  <changelog author="Pavel B&#x159;ezina &lt;pbrezina@redhat.com&gt; - 1.1-1" date="1560168000">- Rebase to authselect-1.1 (RHBZ #1685516)
- Notify that oddjob-mkhomedir needs to be enabled manually (RHBZ #1694103)
- Ask for smartcard insertion when smartcard authentication is required (RHBZ #1674397)
- Update translations (RHBZ #1689973)</changelog>
  <changelog author="Pavel B&#x159;ezina &lt;pbrezina@redhat.com&gt; - 1.1-2" date="1562241600">- Update translations (RHBZ #1689973)</changelog>
  <changelog author="Pavel B&#x159;ezina &lt;pbrezina@redhat.com&gt; - 1.2.1-1" date="1589284800">- Rebase to authselect-1.2.1 (RHBZ #1810471)
- CLI commands are now correctly translated (RHBZ #1816009)
- Remove unsupported features from sssd profile description (RHBZ #1830251)
- add `with-files-access-provider` to sssd profile (RHBZ #1734094)
- switch to pam_usertype module (RHBZ #1773567)
- fix typo in sssd profile description (RHBZ #1787638)
- add minimal profile (RHBZ #1654018)</changelog>
  <changelog author="Pavel B&#x159;ezina &lt;pbrezina@redhat.com&gt; - 1.2.1-2" date="1592568000">- Update translations (RHBZ #1820533)</changelog>
  <changelog author="Pavel B&#x159;ezina &lt;pbrezina@redhat.com&gt; - 1.2.2-1" date="1606305600">- Rebase to authselect-1.2.2 (RHBZ #1892761)</changelog>
  <changelog author="Pavel B&#x159;ezina &lt;pbrezina@redhat.com&gt; - 1.2.2-2" date="1626264000">- try_first_pass option no longer works on some PAM modules in RHEL8 (RHBZ #1949070)
- Need to localize the description of --debug option in authselect show (RHBZ #1970408)</changelog>
  <changelog author="Pavel B&#x159;ezina &lt;pbrezina@redhat.com&gt; - 1.2.2-3" date="1626264001">- Update translations (RHBZ #1961625)</changelog>
  <changelog author="Pavel B&#x159;ezina &lt;pbrezina@redhat.com&gt; - 1.2.5-1" date="1651752000">- Rebase to 1.2.5 (RHBZ #2080238)
- sssd profile with-smartcard no longer prevents local users from accessing cron (RHBZ #2070325)
- backup-restore now works correctly (RHBZ #2066535)
- add with-subid to sssd profile (RHBZ #2063750)</changelog>
  <changelog author="Pavel B&#x159;ezina &lt;pbrezina@redhat.com&gt; - 1.2.5-2" date="1670414400">- Change password hashing algorithm from yescrypt back to sha512 (RHBZ #2151229)</changelog>
</package>
<package pkgid="44212526876172cf1cbe0c84474c34accce4a005d6b05448105192fde9c714cd" name="bind-export-devel" arch="i686">
  <version epoch="32" ver="9.11.36" rel="5.el8_7.2"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.26-7" date="1629806400">- Do not request softhsm from bind-pkcs11, it is only in modular build
  (#1934035)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.26-8" date="1634126400">- Propagate ephemeral port ranges to chroot (#1950714)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.26-9" date="1635768000">- Correct tsig system test</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.36-1" date="1635768001">- Update to 9.11.36</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.36-2" date="1640088000">- Rebuilt on a new side-tag (#2013993)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.36-2" date="1644494400">- Reduce memory used per-view on machine with few processors (#2030239)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.36-4" date="1649851200">- Tighten cache protection against record from forwarders (CVE-2021-25220)
- Include test of forwarders</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.36-5" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.36-5.1" date="1663848001">- Prevent freeing zone during statistics rendering (#2130272)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.36-5.2" date="1665662400">- Correct regression preventing bind-dyndb-ldap build (#2130272)</changelog>
</package>
<package pkgid="cdd0f74819ca1059e5ddda37b6e429a38e960c77c1f8dbbe3f13d75274c5726c" name="bind-export-devel" arch="x86_64">
  <version epoch="32" ver="9.11.36" rel="5.el8_7.2"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.26-7" date="1629806400">- Do not request softhsm from bind-pkcs11, it is only in modular build
  (#1934035)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.26-8" date="1634126400">- Propagate ephemeral port ranges to chroot (#1950714)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.26-9" date="1635768000">- Correct tsig system test</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.36-1" date="1635768001">- Update to 9.11.36</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.36-2" date="1640088000">- Rebuilt on a new side-tag (#2013993)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.36-2" date="1644494400">- Reduce memory used per-view on machine with few processors (#2030239)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.36-4" date="1649851200">- Tighten cache protection against record from forwarders (CVE-2021-25220)
- Include test of forwarders</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.36-5" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.36-5.1" date="1663848001">- Prevent freeing zone during statistics rendering (#2130272)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.36-5.2" date="1665662400">- Correct regression preventing bind-dyndb-ldap build (#2130272)</changelog>
</package>
<package pkgid="f49639657d09af38144b686376cb67bdf297b7d7062b613f28947806ba82c8af" name="bind-export-libs" arch="i686">
  <version epoch="32" ver="9.11.36" rel="5.el8_7.2"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.26-7" date="1629806400">- Do not request softhsm from bind-pkcs11, it is only in modular build
  (#1934035)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.26-8" date="1634126400">- Propagate ephemeral port ranges to chroot (#1950714)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.26-9" date="1635768000">- Correct tsig system test</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.36-1" date="1635768001">- Update to 9.11.36</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.36-2" date="1640088000">- Rebuilt on a new side-tag (#2013993)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.36-2" date="1644494400">- Reduce memory used per-view on machine with few processors (#2030239)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.36-4" date="1649851200">- Tighten cache protection against record from forwarders (CVE-2021-25220)
- Include test of forwarders</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.36-5" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.36-5.1" date="1663848001">- Prevent freeing zone during statistics rendering (#2130272)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.36-5.2" date="1665662400">- Correct regression preventing bind-dyndb-ldap build (#2130272)</changelog>
</package>
<package pkgid="c6f3841af149c86f87734438ae6213c6ca15bcbb017088cbc70d0ca0e5f26d16" name="bind-export-libs" arch="x86_64">
  <version epoch="32" ver="9.11.36" rel="5.el8_7.2"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.26-7" date="1629806400">- Do not request softhsm from bind-pkcs11, it is only in modular build
  (#1934035)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.26-8" date="1634126400">- Propagate ephemeral port ranges to chroot (#1950714)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.26-9" date="1635768000">- Correct tsig system test</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.36-1" date="1635768001">- Update to 9.11.36</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.36-2" date="1640088000">- Rebuilt on a new side-tag (#2013993)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.36-2" date="1644494400">- Reduce memory used per-view on machine with few processors (#2030239)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.36-4" date="1649851200">- Tighten cache protection against record from forwarders (CVE-2021-25220)
- Include test of forwarders</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.36-5" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.36-5.1" date="1663848001">- Prevent freeing zone during statistics rendering (#2130272)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.36-5.2" date="1665662400">- Correct regression preventing bind-dyndb-ldap build (#2130272)</changelog>
</package>
<package pkgid="2c7857e58a981ec8bd195a15cbe5f534eb93e40d80b34b855b167c109fd1b663" name="bpftool" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="425.10.1.el8_7"/>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.1.1.el8]" date="1663588800">- i40e: Fix kernel crash during module removal (Ivan Vecera) [2091489]
- redhat: enable zstream release numbering for rhel 8.7 (Jarod Wilson)
- ice: Allow operation with reduced device MSI-X (Petr Oros) [2102844]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.2.1.el8]" date="1664193600">- EDAC/ghes: Set the DIMM label unconditionally (Aristeu Rozanski) [2109712]
- configs: enable CONFIG_HP_ILO for aarch64 (Mark Salter) [2123508]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.3.1.el8]" date="1664539200">- iwlwifi: limit fw version for AC9560 to avoid fw crash (Íñigo Huguet) [2129297]
- sfc: fix null pointer dereference in efx_hard_start_xmit (Íñigo Huguet) [2119638]
- sfc: fix TX channel offset when using legacy interrupts (Íñigo Huguet) [2119638]
- netfilter: conntrack: reduce timeout when receiving out-of-window fin or rst (Florian Westphal) [2047366]
- netfilter: conntrack: remove unneeded indent level (Florian Westphal) [2047366]
- netfilter: conntrack: ignore overly delayed tcp packets (Florian Westphal) [2047366]
- netfilter: conntrack: prepare tcp_in_window for ternary return value (Florian Westphal) [2047366]
- netfilter: conntrack: remove pr_debug callsites from tcp tracker (Florian Westphal) [2047366]
- netfilter: conntrack: work around exceeded receive window (Florian Westphal) [2047366]
- netfilter: conntrack: improve RST handling when tuple is re-used (Florian Westphal) [2047366]
- netfilter: conntrack: avoid misleading 'invalid' in log message (Florian Westphal) [2047366]
- netfilter: remove BUG_ON() after skb_header_pointer() (Florian Westphal) [2047366]
- iavf: Detach device during reset task (Petr Oros) [2069206]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.4.1.el8]" date="1665144000">- random: allow reseeding DRBG with getrandom (Daiki Ueno) [2121766]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.5.1.el8_7]" date="1667476800">- ice: Fix interface being down after reset with link-down-on-close flag on (Petr Oros) [2136216 2024110]
- ice: Fix crash by keep old cfg when update TCs more than queues (Petr Oros) [2130992 2129902]
- ice: Fix tunnel checksum offload with fragmented traffic (Petr Oros) [2130992 2129902]
- ice: handle E822 generic device ID in PLDM header (Petr Oros) [2130992 2129902]
- ice: ethtool: Prohibit improper channel config for DCB (Petr Oros) [2130992 2129902]
- ice: ethtool: advertise 1000M speeds properly (Petr Oros) [2130992 2129902]
- ice: Fix switchdev rules book keeping (Petr Oros) [2130992 2129902]
- ice: fix access-beyond-end in the switch code (Petr Oros) [2130992 2129902]
- eth: ice: silence the GCC 12 array-bounds warning (Petr Oros) [2130992 2129902]
- ice: Expose RSS indirection tables for queue groups via ethtool (Petr Oros) [2130992 2129902]
- Revert "ice: Hide bus-info in ethtool for PRs in switchdev mode" (Petr Oros) [2130992 2129902]
- ice: remove period on argument description in ice_for_each_vf (Petr Oros) [2130992 2129902]
- ice: add a function comment for ice_cfg_mac_antispoof (Petr Oros) [2130992 2129902]
- ice: fix wording in comment for ice_reset_vf (Petr Oros) [2130992 2129902]
- ice: remove return value comment for ice_reset_all_vfs (Petr Oros) [2130992 2129902]
- ice: always check VF VSI pointer values (Petr Oros) [2130992 2129902]
- ice: add newline to dev_dbg in ice_vf_fdir_dump_info (Petr Oros) [2130992 2129902]
- ice: get switch id on switchdev devices (Petr Oros) [2130992 2129902]
- ice: return ENOSPC when exceeding ICE_MAX_CHAIN_WORDS (Petr Oros) [2130992 2129902]
- ice: introduce common helper for retrieving VSI by vsi_num (Petr Oros) [2130992 2129902]
- ice: use min_t() to make code cleaner in ice_gnss (Petr Oros) [2130992 2129902]
- ice: Add mpls+tso support (Petr Oros) [2130992 2129902]
- ice: switch: convert packet template match code to rodata (Petr Oros) [2130992 2129902]
- ice: switch: use convenience macros to declare dummy pkt templates (Petr Oros) [2130992 2129902]
- ice: switch: use a struct to pass packet template params (Petr Oros) [2130992 2129902]
- ice: switch: unobscurify bitops loop in ice_fill_adv_dummy_packet() (Petr Oros) [2130992 2129902]
- ice: switch: add and use u16[] aliases to ice_adv_lkup_elem::{h, m}_u (Petr Oros) [2130992 2129902]
- ice: Support GTP-U and GTP-C offload in switchdev (Petr Oros) [2130992 2129902]
- ice: Remove useless DMA-32 fallback configuration (Petr Oros) [2130992 2129902]
- ice: switch to napi_build_skb() (Petr Oros) [2130992 2129902]
- redhat: switch to z-stream dist tag and build targets (Jarod Wilson)
- block: avoid sign extend problem with default queue flags mask (Nico Pache) [2135813]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.6.1.el8_7]" date="1668168000">- ice: Add low latency Tx timestamp read (Petr Oros) [2136036 2092425]
- ice: introduce ice_ptp_reset_cached_phctime function (Petr Oros) [2136036 2092425]
- ice: re-arrange some static functions in ice_ptp.c (Petr Oros) [2136036 2092425]
- ice: track and warn when PHC update is late (Petr Oros) [2136036 2092425]
- ice: track Tx timestamp stats similar to other Intel drivers (Petr Oros) [2136036 2092425]
- ice: implement adjfine with mul_u64_u64_div_u64 (Petr Oros) [2136036 2092425]
- ice: Add EXTTS feature to the feature bitmap (Petr Oros) [2136036 2092425]
- math: Export mul_u64_u64_div_u64 (Petr Oros) [2136036 2092425]
- vfio/type1: Unpin zero pages (Alex Williamson) [2128515 2123015]
- net: atlantic: remove aq_nic_deinit() when resume (Íñigo Huguet) [2131935 2130839]
- net: atlantic: remove deep parameter on suspend/resume functions (Íñigo Huguet) [2131935 2130839]
- CI: Use zstream builder container (Veronika Kabatova)
- CI: Add disttag override for 8.7 (Veronika Kabatova)</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.7.1.el8_7]" date="1669723200">- ice: Add additional CSR registers to ETHTOOL_GREGS (Petr Oros) [2136513 2131024]
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps (Petr Oros) [2137270 2106964]
- i40e: Fix VF set max MTU size (Petr Oros) [2137270 2106964]
- iavf: Fix set max MTU size with port VLAN and jumbo frames (Petr Oros) [2137270 2106964]
- iavf: Fix bad page state (Petr Oros) [2137270 2106964]
- Revert "scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels" (Jarod Wilson)
- scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels (Tomas Henzl) [2139216]
- Revert "ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems" (Jarod Wilson)
- ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems (Wei Huang) [2142170 2130653]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.8.1.el8_7]" date="1669982400">- scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels (Tomas Henzl) [2139216 2134535]
- RDMA/mlx5: Set local port to one when accessing counters (Mohammad Kabat) [2141957 2077119]
- drm/mgag200: Fix PLL setup for G200_SE_A rev &gt;=4 (Jocelyn Falempe) [2140152 2130159]
- iavf: Do not restart Tx queues after reset task failure (Petr Oros) [2149081 2134005]
- iavf: Fix a crash during reset task (Petr Oros) [2149081 2134005]
- scsi: core: Allow the ALUA transitioning state enough time (Tomas Henzl) [2147374 2084250]
- scsi: core: Return BLK_STS_TRANSPORT for ALUA transitioning (Tomas Henzl) [2147374 2084250]
- i40e: Fix DMA mappings leak (Ivan Vecera) [2138205 2077847]
- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2142724 2142725] {CVE-2022-2964}
- net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2142724 2142725] {CVE-2022-2964}</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.9.1.el8_7]" date="1670587200">- Documentation/admin-guide: Document nomodeset kernel parameter (Jocelyn Falempe) [2145218 2143952]
- drm: Move nomodeset kernel parameter to the DRM subsystem (Jocelyn Falempe) [2145218 2143952]
- wait: Fix __wait_event_hrtimeout for RT/DL tasks (Derek Barbosa) [2138953 2125233]
- scsi: zfcp: Fix missing auto port scan and thus missing target ports (Tobias Huschle) [2127849 2121089]
- net: Fix return value of qdisc ingress handling on success (Ivan Vecera) [2141878 2131361]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.10.1.el8_7]" date="1671019200">- scsi: target: loop: Fix handling of aborted TMRs (Maurizio Lombardi) [2144583 2141713]
- ice: virtchnl rss hena support (Petr Oros) [2148130]
- ice: Fix configuring VIRTCHNL_OP_CONFIG_VSI_QUEUES with unbalanced queues (Michal Schmidt) [2142017 2137378]
- ice: Add support Flex RXD (Michal Schmidt) [2138157 2131310]
- netfilter: flowtable: fix stuck flows on cleanup due to pending work (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: add function to invoke garbage collection immediately (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: pass flowtable to nf_flow_table_iterate() (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: separate replace, destroy and stats to different workqueues (Phil Sutter) [2134084 2131370]
- x86/paravirt: Add a dummy __x86_paravirt_patch_template() function (Waiman Long) [2152206 2144161]
- x86/paravirt: Fix kABI breakage in struct pv_mmu_ops (Waiman Long) [2152206 2144161]
- drm/i915: fix TLB invalidation for Gen12 video and compute engines (Wander Lairson Costa) [2148149 2148150] {CVE-2022-4139}
- PCI: hv: Do not set PCI_COMMAND_MEMORY to reduce VM boot time (Emanuele Giuseppe Esposito) [2150912 2082836]
- iavf: Fix cached head and tail value for iavf_get_tx_pending (Stefan Assmann) [2149742 2103944]
- iavf: Fix change VF's mac address (Stefan Assmann) [2149742 2103944]
- iavf: Fix race between iavf_close and iavf_reset_task (Stefan Assmann) [2149742 2103944]
- net: ethernet: move from strlcpy with unused retval to strscpy (Stefan Assmann) [2149742 2103944]
- iavf: Fix 'tc qdisc show' listing too many queues (Stefan Assmann) [2149742 2103944]
- iavf: Fix max_rate limiting (Stefan Assmann) [2149742 2103944]
- iavf: Check for duplicate TC flower filter before parsing (Stefan Assmann) [2149742 2103944]
- iavf: Fix handling of dummy receive descriptors (Stefan Assmann) [2149742 2103944]
- iavf: Disallow changing rx/tx-frames and rx/tx-frames-irq (Stefan Assmann) [2149742 2103944]
- intel/iavf:fix repeated words in comments (Stefan Assmann) [2149742 2103944]
- intel: remove unused macros (Stefan Assmann) [2149742 2103944]
- iavf: Add waiting for response from PF in set mac (Stefan Assmann) [2149742 2103944]</changelog>
</package>
<package pkgid="62b2aec69ace6a1efc356b1d6bb5b317216574d74e61eaeac6596c4338c17123" name="bpftool" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="425.13.1.el8_7"/>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.4.1.el8]" date="1665144000">- random: allow reseeding DRBG with getrandom (Daiki Ueno) [2121766]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.5.1.el8_7]" date="1667476800">- ice: Fix interface being down after reset with link-down-on-close flag on (Petr Oros) [2136216 2024110]
- ice: Fix crash by keep old cfg when update TCs more than queues (Petr Oros) [2130992 2129902]
- ice: Fix tunnel checksum offload with fragmented traffic (Petr Oros) [2130992 2129902]
- ice: handle E822 generic device ID in PLDM header (Petr Oros) [2130992 2129902]
- ice: ethtool: Prohibit improper channel config for DCB (Petr Oros) [2130992 2129902]
- ice: ethtool: advertise 1000M speeds properly (Petr Oros) [2130992 2129902]
- ice: Fix switchdev rules book keeping (Petr Oros) [2130992 2129902]
- ice: fix access-beyond-end in the switch code (Petr Oros) [2130992 2129902]
- eth: ice: silence the GCC 12 array-bounds warning (Petr Oros) [2130992 2129902]
- ice: Expose RSS indirection tables for queue groups via ethtool (Petr Oros) [2130992 2129902]
- Revert "ice: Hide bus-info in ethtool for PRs in switchdev mode" (Petr Oros) [2130992 2129902]
- ice: remove period on argument description in ice_for_each_vf (Petr Oros) [2130992 2129902]
- ice: add a function comment for ice_cfg_mac_antispoof (Petr Oros) [2130992 2129902]
- ice: fix wording in comment for ice_reset_vf (Petr Oros) [2130992 2129902]
- ice: remove return value comment for ice_reset_all_vfs (Petr Oros) [2130992 2129902]
- ice: always check VF VSI pointer values (Petr Oros) [2130992 2129902]
- ice: add newline to dev_dbg in ice_vf_fdir_dump_info (Petr Oros) [2130992 2129902]
- ice: get switch id on switchdev devices (Petr Oros) [2130992 2129902]
- ice: return ENOSPC when exceeding ICE_MAX_CHAIN_WORDS (Petr Oros) [2130992 2129902]
- ice: introduce common helper for retrieving VSI by vsi_num (Petr Oros) [2130992 2129902]
- ice: use min_t() to make code cleaner in ice_gnss (Petr Oros) [2130992 2129902]
- ice: Add mpls+tso support (Petr Oros) [2130992 2129902]
- ice: switch: convert packet template match code to rodata (Petr Oros) [2130992 2129902]
- ice: switch: use convenience macros to declare dummy pkt templates (Petr Oros) [2130992 2129902]
- ice: switch: use a struct to pass packet template params (Petr Oros) [2130992 2129902]
- ice: switch: unobscurify bitops loop in ice_fill_adv_dummy_packet() (Petr Oros) [2130992 2129902]
- ice: switch: add and use u16[] aliases to ice_adv_lkup_elem::{h, m}_u (Petr Oros) [2130992 2129902]
- ice: Support GTP-U and GTP-C offload in switchdev (Petr Oros) [2130992 2129902]
- ice: Remove useless DMA-32 fallback configuration (Petr Oros) [2130992 2129902]
- ice: switch to napi_build_skb() (Petr Oros) [2130992 2129902]
- redhat: switch to z-stream dist tag and build targets (Jarod Wilson)
- block: avoid sign extend problem with default queue flags mask (Nico Pache) [2135813]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.6.1.el8_7]" date="1668168000">- ice: Add low latency Tx timestamp read (Petr Oros) [2136036 2092425]
- ice: introduce ice_ptp_reset_cached_phctime function (Petr Oros) [2136036 2092425]
- ice: re-arrange some static functions in ice_ptp.c (Petr Oros) [2136036 2092425]
- ice: track and warn when PHC update is late (Petr Oros) [2136036 2092425]
- ice: track Tx timestamp stats similar to other Intel drivers (Petr Oros) [2136036 2092425]
- ice: implement adjfine with mul_u64_u64_div_u64 (Petr Oros) [2136036 2092425]
- ice: Add EXTTS feature to the feature bitmap (Petr Oros) [2136036 2092425]
- math: Export mul_u64_u64_div_u64 (Petr Oros) [2136036 2092425]
- vfio/type1: Unpin zero pages (Alex Williamson) [2128515 2123015]
- net: atlantic: remove aq_nic_deinit() when resume (Íñigo Huguet) [2131935 2130839]
- net: atlantic: remove deep parameter on suspend/resume functions (Íñigo Huguet) [2131935 2130839]
- CI: Use zstream builder container (Veronika Kabatova)
- CI: Add disttag override for 8.7 (Veronika Kabatova)</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.7.1.el8_7]" date="1669723200">- ice: Add additional CSR registers to ETHTOOL_GREGS (Petr Oros) [2136513 2131024]
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps (Petr Oros) [2137270 2106964]
- i40e: Fix VF set max MTU size (Petr Oros) [2137270 2106964]
- iavf: Fix set max MTU size with port VLAN and jumbo frames (Petr Oros) [2137270 2106964]
- iavf: Fix bad page state (Petr Oros) [2137270 2106964]
- Revert "scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels" (Jarod Wilson)
- scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels (Tomas Henzl) [2139216]
- Revert "ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems" (Jarod Wilson)
- ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems (Wei Huang) [2142170 2130653]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.8.1.el8_7]" date="1669982400">- scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels (Tomas Henzl) [2139216 2134535]
- RDMA/mlx5: Set local port to one when accessing counters (Mohammad Kabat) [2141957 2077119]
- drm/mgag200: Fix PLL setup for G200_SE_A rev &gt;=4 (Jocelyn Falempe) [2140152 2130159]
- iavf: Do not restart Tx queues after reset task failure (Petr Oros) [2149081 2134005]
- iavf: Fix a crash during reset task (Petr Oros) [2149081 2134005]
- scsi: core: Allow the ALUA transitioning state enough time (Tomas Henzl) [2147374 2084250]
- scsi: core: Return BLK_STS_TRANSPORT for ALUA transitioning (Tomas Henzl) [2147374 2084250]
- i40e: Fix DMA mappings leak (Ivan Vecera) [2138205 2077847]
- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2142724 2142725] {CVE-2022-2964}
- net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2142724 2142725] {CVE-2022-2964}</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.9.1.el8_7]" date="1670587200">- Documentation/admin-guide: Document nomodeset kernel parameter (Jocelyn Falempe) [2145218 2143952]
- drm: Move nomodeset kernel parameter to the DRM subsystem (Jocelyn Falempe) [2145218 2143952]
- wait: Fix __wait_event_hrtimeout for RT/DL tasks (Derek Barbosa) [2138953 2125233]
- scsi: zfcp: Fix missing auto port scan and thus missing target ports (Tobias Huschle) [2127849 2121089]
- net: Fix return value of qdisc ingress handling on success (Ivan Vecera) [2141878 2131361]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.10.1.el8_7]" date="1671019200">- scsi: target: loop: Fix handling of aborted TMRs (Maurizio Lombardi) [2144583 2141713]
- ice: virtchnl rss hena support (Petr Oros) [2148130]
- ice: Fix configuring VIRTCHNL_OP_CONFIG_VSI_QUEUES with unbalanced queues (Michal Schmidt) [2142017 2137378]
- ice: Add support Flex RXD (Michal Schmidt) [2138157 2131310]
- netfilter: flowtable: fix stuck flows on cleanup due to pending work (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: add function to invoke garbage collection immediately (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: pass flowtable to nf_flow_table_iterate() (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: separate replace, destroy and stats to different workqueues (Phil Sutter) [2134084 2131370]
- x86/paravirt: Add a dummy __x86_paravirt_patch_template() function (Waiman Long) [2152206 2144161]
- x86/paravirt: Fix kABI breakage in struct pv_mmu_ops (Waiman Long) [2152206 2144161]
- drm/i915: fix TLB invalidation for Gen12 video and compute engines (Wander Lairson Costa) [2148149 2148150] {CVE-2022-4139}
- PCI: hv: Do not set PCI_COMMAND_MEMORY to reduce VM boot time (Emanuele Giuseppe Esposito) [2150912 2082836]
- iavf: Fix cached head and tail value for iavf_get_tx_pending (Stefan Assmann) [2149742 2103944]
- iavf: Fix change VF's mac address (Stefan Assmann) [2149742 2103944]
- iavf: Fix race between iavf_close and iavf_reset_task (Stefan Assmann) [2149742 2103944]
- net: ethernet: move from strlcpy with unused retval to strscpy (Stefan Assmann) [2149742 2103944]
- iavf: Fix 'tc qdisc show' listing too many queues (Stefan Assmann) [2149742 2103944]
- iavf: Fix max_rate limiting (Stefan Assmann) [2149742 2103944]
- iavf: Check for duplicate TC flower filter before parsing (Stefan Assmann) [2149742 2103944]
- iavf: Fix handling of dummy receive descriptors (Stefan Assmann) [2149742 2103944]
- iavf: Disallow changing rx/tx-frames and rx/tx-frames-irq (Stefan Assmann) [2149742 2103944]
- intel/iavf:fix repeated words in comments (Stefan Assmann) [2149742 2103944]
- intel: remove unused macros (Stefan Assmann) [2149742 2103944]
- iavf: Add waiting for response from PF in set mac (Stefan Assmann) [2149742 2103944]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.11.1.el8_7]" date="1673006400">- NFSD: Protect against send buffer overflow in NFSv3 READ (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv2 READ (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv3 READDIR (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv2 READDIR (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- SUNRPC: Fix svcxdr_init_encode's buflen calculation (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- SUNRPC: Fix svcxdr_init_decode's end-of-buffer calculation (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- panic, kexec: make __crash_kexec() NMI safe (Valentin Schneider) [2139580 2134126]
- kexec: turn all kexec_mutex acquisitions into trylocks (Valentin Schneider) [2139580 2134126]
- kexec: move locking into do_kexec_load (Valentin Schneider) [2139580 2134126]
- vdpa/mlx5: re-create forwarding rules after mac modified (Laurent Vivier) [2152912 2145136]
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry (Waiman Long) [2153653 2108387]
- irq: Call tick_irq_enter() inside HARDIRQ_OFFSET (Waiman Long) [2153653 2108387]
- irqtime: Move irqtime entry accounting after irq offset incrementation (Waiman Long) [2153653 2108387]
- sched/vtime: Consolidate IRQ time accounting (Waiman Long) [2153653 2108387]
- s390/vtime: Use the generic IRQ entry accounting (Waiman Long) [2153653 2108387]
- sched/cputime: Remove symbol exports from IRQ time accounting (Waiman Long) [2153653 2108387]
- genirq/irqdomain: Don't try to free an interrupt that has no mapping (Waiman Long) [2153653 2108387]
- genirq: Provide __irq_enter/exit_raw() (Waiman Long) [2153653 2108387]
- powerpc/time: Only set CONFIG_ARCH_HAS_SCALED_CPUTIME on PPC64 (Waiman Long) [2153653 2108387]
- powerpc/time: isolate scaled cputime accounting in dedicated functions. (Waiman Long) [2153653 2108387]
- PCI: hv: Fix synchronization between channel callback and hv_pci_bus_exit() (Mohammed Gamal) [2155280 2144708]
- PCI: hv: Fix synchronization between channel callback and hv_compose_msi_msg() (Mohammed Gamal) [2155280 2144708]
- PCI: hv: Use vmbus_requestor to generate transaction IDs for VMbus hardening (Mohammed Gamal) [2155280 2144708]
- net/mlx5e: TC, Reject forwarding from internal port to internal port (Mohammad Kabat) [2141959 2131345]
- hv_netvsc: Fix race between VF offering and VF association message from host (Mohammed Gamal) [2155272 2149279]
- x86/mce: Reduce number of machine checks taken during recovery (Prarit Bhargava) [2137592 2104388]
- cgroup/cpuset: Reduce cpuset_rwsem writer latency (Waiman Long) [2153108 2149031]
- rcu/exp: Mark current CPU as exp-QS in IPI loop second pass (Waiman Long) [2153108 2149031]
- rcu: Always inline rcu_dynticks_task*_{enter,exit}() (Waiman Long) [2153108 2149031]
- rcu: Fix existing exp request check in sync_sched_exp_online_cleanup() (Waiman Long) [2153108 2149031]
- rcu: Fix macro name CONFIG_TASKS_RCU_TRACE (Waiman Long) [2153108 2149031]
- rcu: Fix stall-warning deadlock due to non-release of rcu_node -&gt;lock (Waiman Long) [2153108 2149031]
- rcu: Fix to include first blocked task in stall warning (Waiman Long) [2153108 2149031]
- cgroup: Use cgroup_attach_{lock,unlock}() from cgroup_attach_task_all() (Waiman Long) [2153108 2149031]
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all() (Waiman Long) [2153108 2149031]
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock (Waiman Long) [2153108 2149031]
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree (Waiman Long) [2153108 2149031]
- cgroup/cpuset: Fix a race between cpuset_attach() and cpu hotplug (Waiman Long) [2153108 2149031]
- cgroup: reduce dependency on cgroup_mutex (Waiman Long) [2153108 2149031]
- sunrpc: Set sk_allocation to GFP_NOFS to avoid using current-&gt;task_frag. (Guillaume Nault) [2153230 2089660]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.12.1.el8_7]" date="1674129600">- x86/fpu: Prevent FPU state corruption (Oleksandr Natalenko) [2134586 2130890]
- x86/fpu: Drop fpregs lock before inheriting FPU permissions (Eder Zulian) [2154460 2153549]
- kernel-doc: fix undefined args variable (Jan Stancek) [2157905 2134954]
- mm: memcontrol: fix potential oom_lock recursion deadlock (Waiman Long) [2157922 2138886]
- memcg: prohibit unconditional exceeding the limit of dying tasks (Waiman Long) [2157922 2138886]
- mm, oom: do not trigger out_of_memory from the #PF (Waiman Long) [2157922 2138886]
- mm, oom: pagefault_out_of_memory: don't force global OOM for dying tasks (Waiman Long) [2157922 2138886]
- mm: memcontrol: don't count limit-setting reclaim as memory pressure (Waiman Long) [2157922 2138886]
- KVM: s390: vsie: Fix the initialization of the epoch extension (epdx) field (Thomas Huth) [2158813 2151854]
- net: mana: Fix race on per-CQ variable napi work_done (Emanuele Giuseppe Esposito) [2155437 2151722]
- mei: me: add adler lake point S DID (Prarit Bhargava) [2141783 2141602]
- PCI: hv: Only reuse existing IRTE allocation for Multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix the definition of vector in hv_compose_msi_msg() (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix interrupt mapping for multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Reuse existing IRTE allocation in compose_msi_msg() (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix hv_arch_irq_unmask() for multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix multi-MSI to allow more than one MSI vector (Emanuele Giuseppe Esposito) [2155289 2100275]
- drm/ast: Support multiple outputs (Jarod Wilson) [2149287 2147553]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.13.1.el8_7]" date="1675339200">- mm/cgroup/reclaim: fix dirty pages throttling on cgroup v1 (Waiman Long) [2160221]
- mm: vmscan: remove deadlock due to throttling failing to make progress (Waiman Long) [2160221]
- mm: vmscan: reduce throttling due to a failure to make progress -fix (Waiman Long) [2160221]
- mm: vmscan: Reduce throttling due to a failure to make progress (Waiman Long) [2160221]
- mm/vmscan: delay waking of tasks throttled on NOPROGRESS (Waiman Long) [2160221]
- mm/vmscan: increase the timeout if page reclaim is not making progress (Waiman Long) [2160221]
- mm/vmscan: centralise timeout values for reclaim_throttle (Waiman Long) [2160221]
- mm/page_alloc: remove the throttling logic from the page allocator (Waiman Long) [2160221]
- mm/writeback: throttle based on page writeback instead of congestion (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim when no progress is being made (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim and compaction when too may pages are isolated (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim until some writeback completes if congested (Waiman Long) [2160221]
- mm/vmscan.c: delete or fix duplicated words (Waiman Long) [2160221]
- mm,page_alloc: PF_WQ_WORKER threads must sleep at should_reclaim_retry() (Nico Pache) [2160221]
- ceph: avoid putting the realm twice when decoding snaps fails (Xiubo Li) [2155797 2139881]
- mm/mremap: hold the rmap lock in write mode when moving page table entries. (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: use pmd/pud_poplulate to update page table entries (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: don't enable optimized PUD move if page table levels is 2 (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: convert huge PUD move to separate helper (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: fix BUILD_BUG_ON() error in get_extent (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap.c: fix extent calculation (Waiman Long) [2140944] {CVE-2022-41222}
- x86: mremap speedup - Enable HAVE_MOVE_PUD (Waiman Long) [2140944] {CVE-2022-41222}
- mm: speedup mremap on 1GB or larger regions (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: start addresses are properly aligned (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: calculate extent in one place (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: it is sure to have enough space when extent meets requirement (Waiman Long) [2140944] {CVE-2022-41222}
- s390/boot: add secure boot trailer (Tobias Huschle) [2151530 2141967]
- i40e: Fix VF hang when reset is triggered on another VF (Ivan Vecera) [2160460 2103801]
- i2c: ismt: Fix an out-of-bounds bug in ismt_access() (Prarit Bhargava) [2154388 2119066] {CVE-2022-2873}
- iavf: schedule watchdog immediately when changing primary MAC (Michal Schmidt) [2163257 2152493]
- iavf: Move netdev_update_features() into watchdog task (Michal Schmidt) [2163257 2152493]
- iavf: fix temporary deadlock and failure to set MAC address (Michal Schmidt) [2163257 2152493]
- iavf: Fix error handling in iavf_init_module() (Michal Schmidt) [2163257 2152493]
- iommu/vt-d: Clean up si_domain in the init_dmars() error path (Jerry Snitselaar) [2149474 2118428]
- x86/pci/xen: Use msi_msg shadow structs (Jerry Snitselaar) [2149474 2118428]
- iommu/intel: Use msi_msg shadow structs (Jerry Snitselaar) [2149474 2118428]
- PCI: MSI: Fix Kconfig dependencies for PCI_MSI_ARCH_FALLBACKS (Jerry Snitselaar) [2149474 2118428]
- x86/apic/msi: Unbreak DMAR and HPET MSI (Jerry Snitselaar) [2149474 2118428]
- iommu/amd: Remove domain search for PCI/MSI (Jerry Snitselaar) [2149474 2118428]
- iommu/vt-d: Remove domain search for PCI/MSI[X] (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Make most MSI ops XEN private (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Cleanup the arch_*_msi_irqs() leftovers (Jerry Snitselaar) [2149474 2118428]
- PCI/MSI: Make arch_.*_msi_irq[s] fallbacks selectable (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Wrap XEN MSI management into irqdomain (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Consolidate XEN-MSI init (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Rework MSI teardown (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Make xen_msi_init() static and rename it to xen_hvm_msi_init() (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Move apic_post_init() invocation to one place (Jerry Snitselaar) [2149474 2118428]
- x86/msi: Use generic MSI domain ops (Jerry Snitselaar) [2149474 2118428]
- x86/msi: Remove pointless vcpu_affinity callback (Jerry Snitselaar) [2149474 2118428]
- iommu/vt-d: Fix compile error with CONFIG_PCI_ATS not set (Myron Stowe) [2149474 2118428]
- iommu/vt-d: Cure VF irqdomain hickup (Myron Stowe) [2149474 2118428]
- x86/pci: Set default irq domain in pcibios_add_device() (Myron Stowe) [2149474 2118428]
- iommm/amd: Store irq domain in struct device (Myron Stowe) [2149474 2118428]
- iommm/vt-d: Store irq domain in struct device (Myron Stowe) [2149474 2118428]
- PCI/MSI: Provide pci_dev_has_special_msi_domain() helper (Myron Stowe) [2149474 2118428]
- x86/msi: Consolidate MSI allocation (Myron Stowe) [2149474 2118428]
- PCI/MSI: Rework pci_msi_domain_calc_hwirq() (Myron Stowe) [2149474 2118428]
- x86/irq: Consolidate UV domain allocation (Myron Stowe) [2149474 2118428]
- x86/irq: Consolidate DMAR irq allocation (Myron Stowe) [2149474 2118428]
- x86_ioapic_Consolidate_IOAPIC_allocation (Myron Stowe) [2149474 2118428]
- x86/msi: Consolidate HPET allocation (Myron Stowe) [2149474 2118428]
- iommu/irq_remapping: Consolidate irq domain lookup (Myron Stowe) [2149474 2118428]
- iommu/amd: Consolidate irq domain getter (Myron Stowe) [2149474 2118428]
- iommu/vt-d: Consolidate irq domain getter (Myron Stowe) [2149474 2118428]
- x86/irq: Add allocation type for parent domain retrieval (Myron Stowe) [2149474 2118428]
- irqdomain: Export irq_domain_update_bus_token (Myron Stowe) [2149474 2118428]
- gitlab-ci: use CI templates from production branch (Michael Hofmann)
- iavf: remove INITIAL_MAC_SET to allow gARP to work properly (Stefan Assmann) [2149745 1938635]
- Revert "scsi: iscsi: ql4xxx: Use per-session workqueue for unbinding" (Chris Leech) [2152734 2122624]
- Revert "scsi: iscsi: Use the session workqueue for recovery" (Chris Leech) [2152734 2122624]
- arm64/bpf: Remove 128MB limit for BPF JIT programs (Yauheni Kaliuta) [2152138 2140163]
- bpf: Define bpf_jit_alloc_exec_limit for arm64 JIT (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: add `type` and `data` fields (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: use `ex` for `exception_table_entry` (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: make fixup_exception() return bool (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: consolidate definitions (Yauheni Kaliuta) [2152138 2140163]
- arm64: kvm: use kvm_exception_table_entry (Yauheni Kaliuta) [2152138 2140163]
- be2net: Fix buffer overflow in be_get_module_eeprom (Josef Oskera) [2160182 2126917]</changelog>
</package>
<package pkgid="901315dd131c7a5b9005135df9bd7e321f12480fcbad47c430099d32cb8597c6" name="bpftool" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="425.19.2.el8_7"/>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.11.1.el8_7]" date="1673006400">- NFSD: Protect against send buffer overflow in NFSv3 READ (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv2 READ (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv3 READDIR (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv2 READDIR (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- SUNRPC: Fix svcxdr_init_encode's buflen calculation (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- SUNRPC: Fix svcxdr_init_decode's end-of-buffer calculation (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- panic, kexec: make __crash_kexec() NMI safe (Valentin Schneider) [2139580 2134126]
- kexec: turn all kexec_mutex acquisitions into trylocks (Valentin Schneider) [2139580 2134126]
- kexec: move locking into do_kexec_load (Valentin Schneider) [2139580 2134126]
- vdpa/mlx5: re-create forwarding rules after mac modified (Laurent Vivier) [2152912 2145136]
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry (Waiman Long) [2153653 2108387]
- irq: Call tick_irq_enter() inside HARDIRQ_OFFSET (Waiman Long) [2153653 2108387]
- irqtime: Move irqtime entry accounting after irq offset incrementation (Waiman Long) [2153653 2108387]
- sched/vtime: Consolidate IRQ time accounting (Waiman Long) [2153653 2108387]
- s390/vtime: Use the generic IRQ entry accounting (Waiman Long) [2153653 2108387]
- sched/cputime: Remove symbol exports from IRQ time accounting (Waiman Long) [2153653 2108387]
- genirq/irqdomain: Don't try to free an interrupt that has no mapping (Waiman Long) [2153653 2108387]
- genirq: Provide __irq_enter/exit_raw() (Waiman Long) [2153653 2108387]
- powerpc/time: Only set CONFIG_ARCH_HAS_SCALED_CPUTIME on PPC64 (Waiman Long) [2153653 2108387]
- powerpc/time: isolate scaled cputime accounting in dedicated functions. (Waiman Long) [2153653 2108387]
- PCI: hv: Fix synchronization between channel callback and hv_pci_bus_exit() (Mohammed Gamal) [2155280 2144708]
- PCI: hv: Fix synchronization between channel callback and hv_compose_msi_msg() (Mohammed Gamal) [2155280 2144708]
- PCI: hv: Use vmbus_requestor to generate transaction IDs for VMbus hardening (Mohammed Gamal) [2155280 2144708]
- net/mlx5e: TC, Reject forwarding from internal port to internal port (Mohammad Kabat) [2141959 2131345]
- hv_netvsc: Fix race between VF offering and VF association message from host (Mohammed Gamal) [2155272 2149279]
- x86/mce: Reduce number of machine checks taken during recovery (Prarit Bhargava) [2137592 2104388]
- cgroup/cpuset: Reduce cpuset_rwsem writer latency (Waiman Long) [2153108 2149031]
- rcu/exp: Mark current CPU as exp-QS in IPI loop second pass (Waiman Long) [2153108 2149031]
- rcu: Always inline rcu_dynticks_task*_{enter,exit}() (Waiman Long) [2153108 2149031]
- rcu: Fix existing exp request check in sync_sched_exp_online_cleanup() (Waiman Long) [2153108 2149031]
- rcu: Fix macro name CONFIG_TASKS_RCU_TRACE (Waiman Long) [2153108 2149031]
- rcu: Fix stall-warning deadlock due to non-release of rcu_node -&gt;lock (Waiman Long) [2153108 2149031]
- rcu: Fix to include first blocked task in stall warning (Waiman Long) [2153108 2149031]
- cgroup: Use cgroup_attach_{lock,unlock}() from cgroup_attach_task_all() (Waiman Long) [2153108 2149031]
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all() (Waiman Long) [2153108 2149031]
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock (Waiman Long) [2153108 2149031]
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree (Waiman Long) [2153108 2149031]
- cgroup/cpuset: Fix a race between cpuset_attach() and cpu hotplug (Waiman Long) [2153108 2149031]
- cgroup: reduce dependency on cgroup_mutex (Waiman Long) [2153108 2149031]
- sunrpc: Set sk_allocation to GFP_NOFS to avoid using current-&gt;task_frag. (Guillaume Nault) [2153230 2089660]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.12.1.el8_7]" date="1674129600">- x86/fpu: Prevent FPU state corruption (Oleksandr Natalenko) [2134586 2130890]
- x86/fpu: Drop fpregs lock before inheriting FPU permissions (Eder Zulian) [2154460 2153549]
- kernel-doc: fix undefined args variable (Jan Stancek) [2157905 2134954]
- mm: memcontrol: fix potential oom_lock recursion deadlock (Waiman Long) [2157922 2138886]
- memcg: prohibit unconditional exceeding the limit of dying tasks (Waiman Long) [2157922 2138886]
- mm, oom: do not trigger out_of_memory from the #PF (Waiman Long) [2157922 2138886]
- mm, oom: pagefault_out_of_memory: don't force global OOM for dying tasks (Waiman Long) [2157922 2138886]
- mm: memcontrol: don't count limit-setting reclaim as memory pressure (Waiman Long) [2157922 2138886]
- KVM: s390: vsie: Fix the initialization of the epoch extension (epdx) field (Thomas Huth) [2158813 2151854]
- net: mana: Fix race on per-CQ variable napi work_done (Emanuele Giuseppe Esposito) [2155437 2151722]
- mei: me: add adler lake point S DID (Prarit Bhargava) [2141783 2141602]
- PCI: hv: Only reuse existing IRTE allocation for Multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix the definition of vector in hv_compose_msi_msg() (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix interrupt mapping for multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Reuse existing IRTE allocation in compose_msi_msg() (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix hv_arch_irq_unmask() for multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix multi-MSI to allow more than one MSI vector (Emanuele Giuseppe Esposito) [2155289 2100275]
- drm/ast: Support multiple outputs (Jarod Wilson) [2149287 2147553]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.13.1.el8_7]" date="1675339200">- mm/cgroup/reclaim: fix dirty pages throttling on cgroup v1 (Waiman Long) [2160221]
- mm: vmscan: remove deadlock due to throttling failing to make progress (Waiman Long) [2160221]
- mm: vmscan: reduce throttling due to a failure to make progress -fix (Waiman Long) [2160221]
- mm: vmscan: Reduce throttling due to a failure to make progress (Waiman Long) [2160221]
- mm/vmscan: delay waking of tasks throttled on NOPROGRESS (Waiman Long) [2160221]
- mm/vmscan: increase the timeout if page reclaim is not making progress (Waiman Long) [2160221]
- mm/vmscan: centralise timeout values for reclaim_throttle (Waiman Long) [2160221]
- mm/page_alloc: remove the throttling logic from the page allocator (Waiman Long) [2160221]
- mm/writeback: throttle based on page writeback instead of congestion (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim when no progress is being made (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim and compaction when too may pages are isolated (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim until some writeback completes if congested (Waiman Long) [2160221]
- mm/vmscan.c: delete or fix duplicated words (Waiman Long) [2160221]
- mm,page_alloc: PF_WQ_WORKER threads must sleep at should_reclaim_retry() (Nico Pache) [2160221]
- ceph: avoid putting the realm twice when decoding snaps fails (Xiubo Li) [2155797 2139881]
- mm/mremap: hold the rmap lock in write mode when moving page table entries. (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: use pmd/pud_poplulate to update page table entries (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: don't enable optimized PUD move if page table levels is 2 (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: convert huge PUD move to separate helper (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: fix BUILD_BUG_ON() error in get_extent (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap.c: fix extent calculation (Waiman Long) [2140944] {CVE-2022-41222}
- x86: mremap speedup - Enable HAVE_MOVE_PUD (Waiman Long) [2140944] {CVE-2022-41222}
- mm: speedup mremap on 1GB or larger regions (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: start addresses are properly aligned (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: calculate extent in one place (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: it is sure to have enough space when extent meets requirement (Waiman Long) [2140944] {CVE-2022-41222}
- s390/boot: add secure boot trailer (Tobias Huschle) [2151530 2141967]
- i40e: Fix VF hang when reset is triggered on another VF (Ivan Vecera) [2160460 2103801]
- i2c: ismt: Fix an out-of-bounds bug in ismt_access() (Prarit Bhargava) [2154388 2119066] {CVE-2022-2873}
- iavf: schedule watchdog immediately when changing primary MAC (Michal Schmidt) [2163257 2152493]
- iavf: Move netdev_update_features() into watchdog task (Michal Schmidt) [2163257 2152493]
- iavf: fix temporary deadlock and failure to set MAC address (Michal Schmidt) [2163257 2152493]
- iavf: Fix error handling in iavf_init_module() (Michal Schmidt) [2163257 2152493]
- iommu/vt-d: Clean up si_domain in the init_dmars() error path (Jerry Snitselaar) [2149474 2118428]
- x86/pci/xen: Use msi_msg shadow structs (Jerry Snitselaar) [2149474 2118428]
- iommu/intel: Use msi_msg shadow structs (Jerry Snitselaar) [2149474 2118428]
- PCI: MSI: Fix Kconfig dependencies for PCI_MSI_ARCH_FALLBACKS (Jerry Snitselaar) [2149474 2118428]
- x86/apic/msi: Unbreak DMAR and HPET MSI (Jerry Snitselaar) [2149474 2118428]
- iommu/amd: Remove domain search for PCI/MSI (Jerry Snitselaar) [2149474 2118428]
- iommu/vt-d: Remove domain search for PCI/MSI[X] (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Make most MSI ops XEN private (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Cleanup the arch_*_msi_irqs() leftovers (Jerry Snitselaar) [2149474 2118428]
- PCI/MSI: Make arch_.*_msi_irq[s] fallbacks selectable (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Wrap XEN MSI management into irqdomain (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Consolidate XEN-MSI init (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Rework MSI teardown (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Make xen_msi_init() static and rename it to xen_hvm_msi_init() (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Move apic_post_init() invocation to one place (Jerry Snitselaar) [2149474 2118428]
- x86/msi: Use generic MSI domain ops (Jerry Snitselaar) [2149474 2118428]
- x86/msi: Remove pointless vcpu_affinity callback (Jerry Snitselaar) [2149474 2118428]
- iommu/vt-d: Fix compile error with CONFIG_PCI_ATS not set (Myron Stowe) [2149474 2118428]
- iommu/vt-d: Cure VF irqdomain hickup (Myron Stowe) [2149474 2118428]
- x86/pci: Set default irq domain in pcibios_add_device() (Myron Stowe) [2149474 2118428]
- iommm/amd: Store irq domain in struct device (Myron Stowe) [2149474 2118428]
- iommm/vt-d: Store irq domain in struct device (Myron Stowe) [2149474 2118428]
- PCI/MSI: Provide pci_dev_has_special_msi_domain() helper (Myron Stowe) [2149474 2118428]
- x86/msi: Consolidate MSI allocation (Myron Stowe) [2149474 2118428]
- PCI/MSI: Rework pci_msi_domain_calc_hwirq() (Myron Stowe) [2149474 2118428]
- x86/irq: Consolidate UV domain allocation (Myron Stowe) [2149474 2118428]
- x86/irq: Consolidate DMAR irq allocation (Myron Stowe) [2149474 2118428]
- x86_ioapic_Consolidate_IOAPIC_allocation (Myron Stowe) [2149474 2118428]
- x86/msi: Consolidate HPET allocation (Myron Stowe) [2149474 2118428]
- iommu/irq_remapping: Consolidate irq domain lookup (Myron Stowe) [2149474 2118428]
- iommu/amd: Consolidate irq domain getter (Myron Stowe) [2149474 2118428]
- iommu/vt-d: Consolidate irq domain getter (Myron Stowe) [2149474 2118428]
- x86/irq: Add allocation type for parent domain retrieval (Myron Stowe) [2149474 2118428]
- irqdomain: Export irq_domain_update_bus_token (Myron Stowe) [2149474 2118428]
- gitlab-ci: use CI templates from production branch (Michael Hofmann)
- iavf: remove INITIAL_MAC_SET to allow gARP to work properly (Stefan Assmann) [2149745 1938635]
- Revert "scsi: iscsi: ql4xxx: Use per-session workqueue for unbinding" (Chris Leech) [2152734 2122624]
- Revert "scsi: iscsi: Use the session workqueue for recovery" (Chris Leech) [2152734 2122624]
- arm64/bpf: Remove 128MB limit for BPF JIT programs (Yauheni Kaliuta) [2152138 2140163]
- bpf: Define bpf_jit_alloc_exec_limit for arm64 JIT (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: add `type` and `data` fields (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: use `ex` for `exception_table_entry` (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: make fixup_exception() return bool (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: consolidate definitions (Yauheni Kaliuta) [2152138 2140163]
- arm64: kvm: use kvm_exception_table_entry (Yauheni Kaliuta) [2152138 2140163]
- be2net: Fix buffer overflow in be_get_module_eeprom (Josef Oskera) [2160182 2126917]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.14.1.el8_7]" date="1676030400">- ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems (Wei Huang) [2142170 2130653]
- KVM: x86: nSVM: implement nested LBR virtualization (Emanuele Giuseppe Esposito) [2166362 2155149]
- KVM: x86: nSVM: correctly virtualize LBR msrs when L2 is running (Emanuele Giuseppe Esposito) [2166362 2155149]
- kvm: x86: SVM: use vmcb* instead of svm-&gt;vmcb where it makes sense (Emanuele Giuseppe Esposito) [2166362 2155149]
- KVM: x86: nSVM: implement nested VMLOAD/VMSAVE (Emanuele Giuseppe Esposito) [2166362 2155149]
- IB/iser: Fix login with authentication (Kamal Heib) [2161750 2120676]
- act_mirred: use the backlog for nested calls to mirred ingress (Davide Caratti) [2164648 2131339] {CVE-2022-4269}
- net/sched: act_mirred: better wording on protection against excessive stack growth (Davide Caratti) [2164648 2131339] {CVE-2022-4269}
- redhat/configs: Set CONFIG_X86_AMD_PSTATE to 'm' (Prarit Bhargava) [2151275 2145246]
- KVM: x86: smm: preserve interrupt shadow in SMRAM (Maxim Levitsky) [2166368 2097144]
- KVM: x86: SVM: don't save SVM state to SMRAM when VM is not long mode capable (Maxim Levitsky) [2166368 2097144]
- KVM: x86: SVM: use smram structs (Maxim Levitsky) [2166368 2097144]
- KVM: svm: drop explicit return value of kvm_vcpu_map (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: use smram struct for 64 bit smram load/restore (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: use smram struct for 32 bit smram load/restore (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: use smram structs in the common code (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: add structs for KVM's smram layout (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: check for failures on smm entry (Maxim Levitsky) [2166368 2097144]
- KVM: x86: do not go through ctxt-&gt;ops when emulating rsm (Maxim Levitsky) [2166368 2097144]
- KVM: x86: move SMM exit to a new file (Maxim Levitsky) [2166368 2097144]
- KVM: x86: move SMM entry to a new file (Maxim Levitsky) [2166368 2097144]
- KVM: x86: start moving SMM-related functions to new files (Maxim Levitsky) [2166368 2097144]
- bug: introduce ASSERT_STRUCT_OFFSET (Maxim Levitsky) [2166368 2097144]
- KVM: x86: Rename and expose helper to detect if INIT/SIPI are allowed (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: number of GPRs in the SMRAM image depends on the image format (Maxim Levitsky) [2166368 2097144]
- KVM: x86: emulator: update the emulation mode after CR0 write (Maxim Levitsky) [2166368 2097144]
- KVM: x86: emulator: update the emulation mode after rsm (Maxim Levitsky) [2166368 2097144]
- KVM: x86: emulator: introduce emulator_recalc_and_set_mode (Maxim Levitsky) [2166368 2097144]
- KVM: x86: emulator: em_sysexit should update ctxt-&gt;mode (Maxim Levitsky) [2166368 2097144]
- KVM: x86: Bug the VM if the emulator accesses a non-existent GPR (Maxim Levitsky) [2166368 2097144]
- \KVM: x86: Reduce the number of emulator GPRs to '8' for 32-bit KVM (Maxim Levitsky) [2166368 2097144]
- KVM: x86: Use 16-bit fields to track dirty/valid emulator GPRs (Maxim Levitsky) [2166368 2097144]
- KVM: x86: Omit VCPU_REGS_RIP from emulator's _regs array (Maxim Levitsky) [2166368 2097144]
- \KVM: x86: Harden _regs accesses to guard against buggy input (Maxim Levitsky) [2166368 2097144]
- KVM: x86: Grab regs_dirty in local 'unsigned long' (Maxim Levitsky) [2166368 2097144]
- proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152571 2152572] {CVE-2022-4378}
- proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152571 2152572] {CVE-2022-4378}</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.15.1.el8_7]" date="1676548800">- net/mlx5e: Fix use-after-free when reverting termination table (Amir Tzin) [2167640 2112927]
- net/mlx5: Do not query pci info while pci disabled (Amir Tzin) [2167645 2129249]
- x86/fpu: Fix copy_xstate_to_uabi() to copy init states correctly (Dean Nelson) [2168384 2122850]
- x86/fpu: Exclude dynamic states from init_fpstate (Dean Nelson) [2168384 2122850]
- x86/fpu: Fix the init_fpstate size check with the actual size (Dean Nelson) [2168384 2122850]
- x86/fpu: Configure init_fpstate attributes orderly (Dean Nelson) [2168384 2122850]
- x86/fpu/xstate: Fix the ARCH_REQ_XCOMP_PERM implementation (Dean Nelson) [2168384 2122850]
- net/mlx5: E-Switch, properly handle ingress tagged packets on VST (Amir Tzin) [2166665 2096109]
- cpuhotplug: Fix KABI breakage (Prarit Bhargava) [2162763 2156529]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.16.1.el8_7]" date="1677153600">- ipv6: fix panic when fib_lookup_arg-&gt;result is fib6_info (Jiri Benc) [2167602 2140599]
- ceph: blocklist the kclient when receiving corrupted snap trace (Xiubo Li) [2168896 2162414]
- ceph: move mount state enum to super.h (Xiubo Li) [2168896 2162414]
- s390/kexec: fix ipl report address for kdump (Tobias Huschle) [2166296 2161328]
- mm, compaction: fix fast_isolate_around() to stay within boundaries (Daniel Vacek) [2170576 2149309]
- scsi: storvsc: Fix swiotlb bounce buffer leak in confidential VM (Emanuele Giuseppe Esposito) [2170228 2150659]
- netfilter: conntrack: handle tcp challenge acks during connection reuse (Florian Westphal) [2165587 2158726]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.17.1.el8_7]" date="1677844800">- net: mana: Add rmb after checking owner bits (Mohammed Gamal) [2173103 2139462]
- net: mana: Add support of XDP_REDIRECT action (Mohammed Gamal) [2173103 2139462]
- net: mana: Add the Linux MANA PF driver (Mohammed Gamal) [2173103 2139462]
- ice: fix lost multicast packets in promisc mode (Ken Cox) [2172550 2138215]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.18.0-425.18.1.el8_7]" date="1678449600">- futex: Resend potentially swallowed owner death notification (Rafael Aquini) [2170054 2161526]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.19.1.el8_7]" date="1678968000">- s390/dasd: fix no record found for raw_track_access (Tobias Huschle) [2167776 2161270]
- locking/rwsem: Disable preemption in all down_read*() and up_read() code paths (Waiman Long) [2170939 2162139]
- locking/rwsem: Prevent non-first waiter from spinning in down_write() slowpath (Waiman Long) [2170939 2162139]
- locking/rwsem: Allow slowpath writer to ignore handoff bit if not set by first waiter (Waiman Long) [2170939 2162139]
- locking/rwsem: Always try to wake waiters in out_nolock path (Waiman Long) [2170939 2162139]
- locking/rwsem: No need to check for handoff bit if wait queue empty (Waiman Long) [2170939 2162139]
- locking/rwsem: Make handoff bit handling more consistent (Waiman Long) [2170939 2162139]
- locking/rwsem: Disable preemption while trying for rwsem lock (Waiman Long) [2170939 2162139]
- locking/rwsem: Conditionally wake waiters in reader/writer slowpaths (Waiman Long) [2170939 2162139]
- locking: Make owner_on_cpu() into &lt;linux/sched.h&gt; (Waiman Long) [2170939 2162139]
- locking/rwsem: Optimize down_read_trylock() under highly contended case (Waiman Long) [2170939 2162139]
- locking/rwsem: Fix comments about reader optimistic lock stealing conditions (Waiman Long) [2170939 2162139]
- locking/rwsem: Disable preemption for spinning region (Waiman Long) [2170939 2162139]
- locking: Remove rcu_read_{,un}lock() for preempt_{dis,en}able() (Waiman Long) [2170939 2162139]
- watchdog: fix UAF in reboot notifier handling in watchdog core code (Wander Lairson Costa) [2139770 2131308]
- netfilter: nf_conntrack_irc: Tighten matching on DCC message (Wander Lairson Costa) [2139770 2131308]
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF (Jaroslav Kysela) [2163400 2163401] {CVE-2023-0266}
- net/mlx5e: Fix enabling sriov while tc nic rules are offloaded (Amir Tzin) [2167647 2112925]
- net/mlx5: E-Switch, pair only capable devices (Amir Tzin) [2167647 2112925]
- net/mlx5: Fix mlx5_get_next_dev() peer device matching (Amir Tzin) [2167647 2112925]
- net/mlx5: Lag, filter non compatible devices (Amir Tzin) [2167647 2112925]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.19.2.el8_7.gf5e8]" date="1678968001">- ovl: fail on invalid uid/gid mapping at copy up (Miklos Szeredi) [2165341 2165342] {CVE-2023-0386}</changelog>
</package>
<package pkgid="9a124f749ef42bd08789700b4fa0128c11578cc0181c0fd28f5b13452ae7bba5" name="ctdb" arch="x86_64">
  <version epoch="0" ver="4.16.4" rel="4.el8_7"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.15.5-7" date="1650456000">- resolves: rhbz#2076505 - PAM Kerberos authentication fails with a clock skew error</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.15.5-8" date="1651060800">- resolves: rhbz#2070522 - Fix UPNs handling in lookup_name*() calls</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.1-0" date="1651492800">- Update to Samba 4.16.1
- resolves: rhbz#2077468 Rebase Samba to the the latest 4.16.x release</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.2-0" date="1655121600">- Fix rpminspect abidiff
- related: rhbz#2077468 - Rebase Samba to 4.16.2</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.2-1" date="1655208000">- resolves: rhbz#2084162 - Fix printer displays only after 300 seconds timeout</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.3-0" date="1658145600">- related: rhbz#2077468 - Rebase Samba to 4.16.3
- resolves: rhbz#2106672 - The pcap background queue process should not be stopped
- resolves: rhbz#2106263 - Fix crash in rpcd_classic
- resolves: rhbz#2100093 - Fix net ads info returns LDAP server and LDAP server name</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-1" date="1659009600">- Rebase to version 4.16.4
- resolves: rhbz#2108331 - Fix CVE-2022-32742</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-2" date="1661428800">- resolves: rhbz#2120956 - Do not require samba package in python3-samba</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-3" date="1671537600">- resolves: rhbz#2154369 - Fix CVE-2022-38023</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-4" date="1673870400">- related: rhbz#2154369 - Add additional patch for CVE-2022-38023</changelog>
</package>
<package pkgid="7530eed2fe243a934228ffd23d3aa750f6c94c5e8d99df844b0e2019fa27d113" name="ctdb" arch="x86_64">
  <version epoch="0" ver="4.16.4" rel="6.el8_7"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.1-0" date="1651492800">- Update to Samba 4.16.1
- resolves: rhbz#2077468 Rebase Samba to the the latest 4.16.x release</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.2-0" date="1655121600">- Fix rpminspect abidiff
- related: rhbz#2077468 - Rebase Samba to 4.16.2</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.2-1" date="1655208000">- resolves: rhbz#2084162 - Fix printer displays only after 300 seconds timeout</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.3-0" date="1658145600">- related: rhbz#2077468 - Rebase Samba to 4.16.3
- resolves: rhbz#2106672 - The pcap background queue process should not be stopped
- resolves: rhbz#2106263 - Fix crash in rpcd_classic
- resolves: rhbz#2100093 - Fix net ads info returns LDAP server and LDAP server name</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-1" date="1659009600">- Rebase to version 4.16.4
- resolves: rhbz#2108331 - Fix CVE-2022-32742</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-2" date="1661428800">- resolves: rhbz#2120956 - Do not require samba package in python3-samba</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-3" date="1671537600">- resolves: rhbz#2154369 - Fix CVE-2022-38023</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-4" date="1673870400">- related: rhbz#2154369 - Add additional patch for CVE-2022-38023</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.4-5" date="1676548800">- resolves: rhbz#2170394 - Fix share enum
- resolves: rhbz#2170467 - Add to package ctdb dependency for package samba-winbind-clients
- resolves: rhbz#2170468 - Add package dcerpc - fix winbind to retrieve user groups from AD
- resolves: rhbz#2170469 - Create package samba-tools</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.4-6" date="1676548801">- resolves: rhbz#2170468 - Remove libnetapi dependency from dcerpc</changelog>
</package>
<package pkgid="a72b26c0a0912794b9bd194f5b5ce421e8b20434bdc09d2d554e1801228027b7" name="curl" arch="x86_64">
  <version epoch="0" ver="7.61.1" rel="25.el8_7.1"/>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-17" date="1605182400">- validate an ssl connection using an intermediate certificate (#1895355)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-18" date="1611835200">- http: send payload when (proxy) authentication is done (#1918692)
- curl: Inferior OCSP verification (CVE-2020-8286)
- libcurl: FTP wildcard stack overflow (CVE-2020-8285)
- curl: trusting FTP PASV responses (CVE-2020-8284)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-19" date="1619179200">- make `curl --head file://` work as expected (#1947493)
- prevent automatic referer from leaking credentials (CVE-2021-22876)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-20" date="1619179201">- fix a cppcheck's false positive in 0029-curl-7.61.1-CVE-2021-22876.patch</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-21" date="1628164800">- fix TELNET stack contents disclosure again (CVE-2021-22925)
- fix TELNET stack contents disclosure (CVE-2021-22898)
- fix bad connection reuse due to flawed path name checks (CVE-2021-22924)
- disable metalink support to fix the following vulnerabilities
    CVE-2021-22923 - metalink download sends credentials
    CVE-2021-22922 - wrong content via metalink not discarded</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-22" date="1631880000">- fix STARTTLS protocol injection via MITM (CVE-2021-22947)
- fix protocol downgrade required TLS bypass (CVE-2021-22946)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-23" date="1651147200">- fix credential leak on redirect (CVE-2022-27774)
- fix auth/cookie leak on redirect (CVE-2022-27776)
- fix OAUTH2 bearer bypass in connection re-use (CVE-2022-22576)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-24" date="1652270400">- fix too eager reuse of TLS and SSH connections (CVE-2022-27782)
- fix invalid type in printf() argument detected by Coverity</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-25" date="1656504000">- setopt: enable CURLOPT_SSH_KNOWNHOSTS and CURLOPT_SSH_KEYFUNCTION (#2063703)
- fix HTTP compression denial of service (CVE-2022-32206)
- fix FTP-KRB bad message verification (CVE-2022-32208)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-25.el8_7.1" date="1668772800">- upon HTTP_1_1_REQUIRED, retry the request with HTTP/1.1 (#2139337)</changelog>
</package>
<package pkgid="02964b43317189e670f693c63777eb36aff552ad935a41ffef13fa5c36af1808" name="curl" arch="x86_64">
  <version epoch="0" ver="7.61.1" rel="25.el8_7.2"/>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-18" date="1611835200">- http: send payload when (proxy) authentication is done (#1918692)
- curl: Inferior OCSP verification (CVE-2020-8286)
- libcurl: FTP wildcard stack overflow (CVE-2020-8285)
- curl: trusting FTP PASV responses (CVE-2020-8284)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-19" date="1619179200">- make `curl --head file://` work as expected (#1947493)
- prevent automatic referer from leaking credentials (CVE-2021-22876)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-20" date="1619179201">- fix a cppcheck's false positive in 0029-curl-7.61.1-CVE-2021-22876.patch</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-21" date="1628164800">- fix TELNET stack contents disclosure again (CVE-2021-22925)
- fix TELNET stack contents disclosure (CVE-2021-22898)
- fix bad connection reuse due to flawed path name checks (CVE-2021-22924)
- disable metalink support to fix the following vulnerabilities
    CVE-2021-22923 - metalink download sends credentials
    CVE-2021-22922 - wrong content via metalink not discarded</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-22" date="1631880000">- fix STARTTLS protocol injection via MITM (CVE-2021-22947)
- fix protocol downgrade required TLS bypass (CVE-2021-22946)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-23" date="1651147200">- fix credential leak on redirect (CVE-2022-27774)
- fix auth/cookie leak on redirect (CVE-2022-27776)
- fix OAUTH2 bearer bypass in connection re-use (CVE-2022-22576)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-24" date="1652270400">- fix too eager reuse of TLS and SSH connections (CVE-2022-27782)
- fix invalid type in printf() argument detected by Coverity</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-25" date="1656504000">- setopt: enable CURLOPT_SSH_KNOWNHOSTS and CURLOPT_SSH_KEYFUNCTION (#2063703)
- fix HTTP compression denial of service (CVE-2022-32206)
- fix FTP-KRB bad message verification (CVE-2022-32208)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-25.el8_7.1" date="1668772800">- upon HTTP_1_1_REQUIRED, retry the request with HTTP/1.1 (#2139337)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-25.el8_7.2" date="1675771200">- h2: lower initial window size to 32 MiB (#2166254)</changelog>
</package>
<package pkgid="f6b9698d4361264492a3b7b71277761b596b872e81f2e4e3900ce3540e963aae" name="curl" arch="x86_64">
  <version epoch="0" ver="7.61.1" rel="25.el8_7.3"/>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-19" date="1619179200">- make `curl --head file://` work as expected (#1947493)
- prevent automatic referer from leaking credentials (CVE-2021-22876)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-20" date="1619179201">- fix a cppcheck's false positive in 0029-curl-7.61.1-CVE-2021-22876.patch</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-21" date="1628164800">- fix TELNET stack contents disclosure again (CVE-2021-22925)
- fix TELNET stack contents disclosure (CVE-2021-22898)
- fix bad connection reuse due to flawed path name checks (CVE-2021-22924)
- disable metalink support to fix the following vulnerabilities
    CVE-2021-22923 - metalink download sends credentials
    CVE-2021-22922 - wrong content via metalink not discarded</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-22" date="1631880000">- fix STARTTLS protocol injection via MITM (CVE-2021-22947)
- fix protocol downgrade required TLS bypass (CVE-2021-22946)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-23" date="1651147200">- fix credential leak on redirect (CVE-2022-27774)
- fix auth/cookie leak on redirect (CVE-2022-27776)
- fix OAUTH2 bearer bypass in connection re-use (CVE-2022-22576)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-24" date="1652270400">- fix too eager reuse of TLS and SSH connections (CVE-2022-27782)
- fix invalid type in printf() argument detected by Coverity</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-25" date="1656504000">- setopt: enable CURLOPT_SSH_KNOWNHOSTS and CURLOPT_SSH_KEYFUNCTION (#2063703)
- fix HTTP compression denial of service (CVE-2022-32206)
- fix FTP-KRB bad message verification (CVE-2022-32208)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-25.el8_7.1" date="1668772800">- upon HTTP_1_1_REQUIRED, retry the request with HTTP/1.1 (#2139337)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-25.el8_7.2" date="1675771200">- h2: lower initial window size to 32 MiB (#2166254)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-25.el8_7.3" date="1676462400">- fix HTTP multi-header compression denial of service (CVE-2023-23916)</changelog>
</package>
<package pkgid="d5bfca8fa04161d282aea8320ddadafb0de4d408b154699204bbc78696316ff5" name="dbus" arch="x86_64">
  <version epoch="1" ver="1.12.8" rel="23.el8_7.1"/>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1:1.12.8-14" date="1619524800">- Fix dbus-launch call in sh snippet (#1940348)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1:1.12.8-15" date="1622030400">- Packaging updates from Fedora (#1941642)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1:1.12.8-16" date="1623326400">- Add Conflicts on older redhat-release versions (#1941642)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1:1.12.8-17" date="1636372800">- Improve SSH session bus starting (#1940067)</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 1.12.8-18" date="1638792000">- Ensure session bus started for SSH sessions gets used by those
  sessions.
  Related: #1940067</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 1:1.12.8-19" date="1655380800">- Ensure SSH session monitoring script is cleaned up when the
  session exits.
  Resolves: #2089362</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1:1.12.8-20" date="1659960000">- Override sysusers configuration (#2090397)</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 1:1.12.8-22" date="1660046400">- Use hangup signal instead of termination signal to
  kill sesssion monitoring script to appeach tcsh.
  Related: #2089362</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 1:1.12.8-23" date="1662465600">- Address race for very short running sessions in SSH
  session monitoring script.
  Related: #2089362</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1:1.12.8-23.1" date="1666180800">- Fix CVE-2022-42010 (#2133644)
- Fix CVE-2022-42011 (#2133638)
- Fix CVE-2022-42012 (#2133632)</changelog>
</package>
<package pkgid="9b72f0fe0e90b8d3e6427a8e13fdec7904e1cb8d11933222cc48e1510a71f605" name="dbus-common" arch="noarch">
  <version epoch="1" ver="1.12.8" rel="23.el8_7.1"/>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1:1.12.8-14" date="1619524800">- Fix dbus-launch call in sh snippet (#1940348)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1:1.12.8-15" date="1622030400">- Packaging updates from Fedora (#1941642)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1:1.12.8-16" date="1623326400">- Add Conflicts on older redhat-release versions (#1941642)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1:1.12.8-17" date="1636372800">- Improve SSH session bus starting (#1940067)</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 1.12.8-18" date="1638792000">- Ensure session bus started for SSH sessions gets used by those
  sessions.
  Related: #1940067</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 1:1.12.8-19" date="1655380800">- Ensure SSH session monitoring script is cleaned up when the
  session exits.
  Resolves: #2089362</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1:1.12.8-20" date="1659960000">- Override sysusers configuration (#2090397)</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 1:1.12.8-22" date="1660046400">- Use hangup signal instead of termination signal to
  kill sesssion monitoring script to appeach tcsh.
  Related: #2089362</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 1:1.12.8-23" date="1662465600">- Address race for very short running sessions in SSH
  session monitoring script.
  Related: #2089362</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1:1.12.8-23.1" date="1666180800">- Fix CVE-2022-42010 (#2133644)
- Fix CVE-2022-42011 (#2133638)
- Fix CVE-2022-42012 (#2133632)</changelog>
</package>
<package pkgid="6708ceb7f59226725dfbcaa6ce70f741bf1b2e1b3e49f0ac98d2d2a7ad8ffd0a" name="dbus-daemon" arch="x86_64">
  <version epoch="1" ver="1.12.8" rel="23.el8_7.1"/>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1:1.12.8-14" date="1619524800">- Fix dbus-launch call in sh snippet (#1940348)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1:1.12.8-15" date="1622030400">- Packaging updates from Fedora (#1941642)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1:1.12.8-16" date="1623326400">- Add Conflicts on older redhat-release versions (#1941642)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1:1.12.8-17" date="1636372800">- Improve SSH session bus starting (#1940067)</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 1.12.8-18" date="1638792000">- Ensure session bus started for SSH sessions gets used by those
  sessions.
  Related: #1940067</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 1:1.12.8-19" date="1655380800">- Ensure SSH session monitoring script is cleaned up when the
  session exits.
  Resolves: #2089362</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1:1.12.8-20" date="1659960000">- Override sysusers configuration (#2090397)</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 1:1.12.8-22" date="1660046400">- Use hangup signal instead of termination signal to
  kill sesssion monitoring script to appeach tcsh.
  Related: #2089362</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 1:1.12.8-23" date="1662465600">- Address race for very short running sessions in SSH
  session monitoring script.
  Related: #2089362</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1:1.12.8-23.1" date="1666180800">- Fix CVE-2022-42010 (#2133644)
- Fix CVE-2022-42011 (#2133638)
- Fix CVE-2022-42012 (#2133632)</changelog>
</package>
<package pkgid="c989c0234982045af857797cb63b1054b032c1cbcc2d6e98373ea74756c24028" name="dbus-libs" arch="i686">
  <version epoch="1" ver="1.12.8" rel="23.el8_7.1"/>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1:1.12.8-14" date="1619524800">- Fix dbus-launch call in sh snippet (#1940348)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1:1.12.8-15" date="1622030400">- Packaging updates from Fedora (#1941642)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1:1.12.8-16" date="1623326400">- Add Conflicts on older redhat-release versions (#1941642)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1:1.12.8-17" date="1636372800">- Improve SSH session bus starting (#1940067)</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 1.12.8-18" date="1638792000">- Ensure session bus started for SSH sessions gets used by those
  sessions.
  Related: #1940067</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 1:1.12.8-19" date="1655380800">- Ensure SSH session monitoring script is cleaned up when the
  session exits.
  Resolves: #2089362</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1:1.12.8-20" date="1659960000">- Override sysusers configuration (#2090397)</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 1:1.12.8-22" date="1660046400">- Use hangup signal instead of termination signal to
  kill sesssion monitoring script to appeach tcsh.
  Related: #2089362</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 1:1.12.8-23" date="1662465600">- Address race for very short running sessions in SSH
  session monitoring script.
  Related: #2089362</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1:1.12.8-23.1" date="1666180800">- Fix CVE-2022-42010 (#2133644)
- Fix CVE-2022-42011 (#2133638)
- Fix CVE-2022-42012 (#2133632)</changelog>
</package>
<package pkgid="85234ee9efcee80370a88f0cb2ed2d0448a1a7a88cda4abed322fc917a153545" name="dbus-libs" arch="x86_64">
  <version epoch="1" ver="1.12.8" rel="23.el8_7.1"/>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1:1.12.8-14" date="1619524800">- Fix dbus-launch call in sh snippet (#1940348)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1:1.12.8-15" date="1622030400">- Packaging updates from Fedora (#1941642)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1:1.12.8-16" date="1623326400">- Add Conflicts on older redhat-release versions (#1941642)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1:1.12.8-17" date="1636372800">- Improve SSH session bus starting (#1940067)</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 1.12.8-18" date="1638792000">- Ensure session bus started for SSH sessions gets used by those
  sessions.
  Related: #1940067</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 1:1.12.8-19" date="1655380800">- Ensure SSH session monitoring script is cleaned up when the
  session exits.
  Resolves: #2089362</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1:1.12.8-20" date="1659960000">- Override sysusers configuration (#2090397)</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 1:1.12.8-22" date="1660046400">- Use hangup signal instead of termination signal to
  kill sesssion monitoring script to appeach tcsh.
  Related: #2089362</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 1:1.12.8-23" date="1662465600">- Address race for very short running sessions in SSH
  session monitoring script.
  Related: #2089362</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1:1.12.8-23.1" date="1666180800">- Fix CVE-2022-42010 (#2133644)
- Fix CVE-2022-42011 (#2133638)
- Fix CVE-2022-42012 (#2133632)</changelog>
</package>
<package pkgid="97c51ea0ef7f7b9ac99568b0830613bbfabc41826b17c20f989ffeef35f13233" name="dbus-tools" arch="x86_64">
  <version epoch="1" ver="1.12.8" rel="23.el8_7.1"/>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1:1.12.8-14" date="1619524800">- Fix dbus-launch call in sh snippet (#1940348)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1:1.12.8-15" date="1622030400">- Packaging updates from Fedora (#1941642)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1:1.12.8-16" date="1623326400">- Add Conflicts on older redhat-release versions (#1941642)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1:1.12.8-17" date="1636372800">- Improve SSH session bus starting (#1940067)</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 1.12.8-18" date="1638792000">- Ensure session bus started for SSH sessions gets used by those
  sessions.
  Related: #1940067</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 1:1.12.8-19" date="1655380800">- Ensure SSH session monitoring script is cleaned up when the
  session exits.
  Resolves: #2089362</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1:1.12.8-20" date="1659960000">- Override sysusers configuration (#2090397)</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 1:1.12.8-22" date="1660046400">- Use hangup signal instead of termination signal to
  kill sesssion monitoring script to appeach tcsh.
  Related: #2089362</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 1:1.12.8-23" date="1662465600">- Address race for very short running sessions in SSH
  session monitoring script.
  Related: #2089362</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1:1.12.8-23.1" date="1666180800">- Fix CVE-2022-42010 (#2133644)
- Fix CVE-2022-42011 (#2133638)
- Fix CVE-2022-42012 (#2133632)</changelog>
</package>
<package pkgid="9fd22449416b1a412844eabebafd21edef404f08343ab0282e179b74569c29a1" name="device-mapper-multipath" arch="x86_64">
  <version epoch="0" ver="0.8.4" rel="28.el8_7.1"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-20" date="1637236800">- Add 0079-libmultipath-use-typedef-for-keyword-handler-and-pri.patch
- Add 0080-libmultipath-print-the-correct-file-when-parsing-fai.patch
- Add 0081-libmultipath-pass-file-and-line-number-to-keyword-ha.patch
- Add 0082-libmultipath-make-set_int-take-a-range-for-valid-val.patch
- Add 0083-libmultipath-improve-checks-for-set_str.patch
- Add 0084-libmultipath-split-set_int-to-enable-reuse.patch
- Add 0085-libmultipath-cleanup-invalid-config-handling.patch
- Add 0086-libmultipath-don-t-return-error-on-invalid-values.patch
  * Above 8 patches fix bz #1900595
- Add 0087-multipathd-avoid-unnecessary-path-read-only-reloads.patch
  * Fixes bz #2009624
- Resolves: bz #1900595, #2009624, #2021823</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-21" date="1642507200">- Add 0088-libmultipath-make-helper-function-to-trigger-path-ue.patch
- Add 0089-multipathd-trigger-udev-change-on-path-addition.patch
- Resolves: bz #1862032</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-22" date="1644235200">- Add 0090-RH-add-support-to-mpathconf-for-setting-arbitrary-de.patch
- Resolves: bz #1981240</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-23" date="1652184000">- Add 0091-multipath-tools-add-HPE-MSA-1060-2060-to-hwtable.patch
  * Partial fix for bz #2058222
- Add 0092-multipath-tools-update-mpp-force_readonly-in-ev_add_.patch
  * Fixes bz #2065468
- Add 0093-updated-HPE-MSA-builtin-config.patch
  * Fixes bz #2058222
- Resolves bz #2065468, #2058222</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-24" date="1652702400">- Add 0094-multipath-return-failure-on-an-invalid-remove-comman.patch
  * Fixes bz #2052054
- Add 0095-libmultipath-steal-the-src-string-pointer-in-merge_s.patch
- Add 0096-libmultipath-enable-linear-ordering-of-bus-proto-tup.patch
- Add 0097-libmultipath-use-bus_protocol_id-in-snprint_path_pro.patch
- Add 0098-libmultipath-make-protocol_name-global.patch
- Add 0099-libmultipath-add-a-protocol-subsection-to-multipath..patch
- Add 0100-libmultipath-Set-the-scsi-timeout-parameters-by-path.patch
- Add 0101-libmultipath-check-the-overrides-pctable-for-path-va.patch
- Add 0102-libmultipath-fix-eh_deadline-documentation.patch
- Add 0103-libmultipath-Add-documentation-for-the-protocol-subs.patch
- Add 0104-libmultipath-use-symbolic-value-for-invalid-pcentry.patch
  * The above 10 patches implement feature from bz #2065477
- Resolves: bz #2052054, #2065477</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-25" date="1652788800">- Add 0105-multipathd-handle-fpin-events.patch
- Add 0106-multipathd-disallow-changing-to-from-fpin-marginal-p.patch
- Resolves: bz #2083077</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-26" date="1654689600">- Add 0107-libmultipath-unset-detect_checker-for-clariion-Unity.patch
- Resolves: bz #2082205</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-27" date="1660910400">- Add 0108-multipathd-Add-missing-ctype-include.patch
- Add 0109-multipathd-replace-libreadline-with-libedit.patch
  * replace readline with libedit, to avoid license conflicts
- Resolves: bz #2119887</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-28" date="1661342400">- Add 0110-multipath-fix-systemd-timers-in-the-initramfs.patch
- Resolves: bz #1916168</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-28.1" date="1665662400">- Add 0111-multipathd-ignore-duplicated-multipathd-command-keys.patch
- Resolves: bz #2133995</changelog>
</package>
<package pkgid="2b378757dde684c3562d4f4ddd44ffa1c5c15ac274b12580bdcf8fce36783f1b" name="device-mapper-multipath" arch="x86_64">
  <version epoch="0" ver="0.8.4" rel="28.el8_7.3"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-22" date="1644235200">- Add 0090-RH-add-support-to-mpathconf-for-setting-arbitrary-de.patch
- Resolves: bz #1981240</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-23" date="1652184000">- Add 0091-multipath-tools-add-HPE-MSA-1060-2060-to-hwtable.patch
  * Partial fix for bz #2058222
- Add 0092-multipath-tools-update-mpp-force_readonly-in-ev_add_.patch
  * Fixes bz #2065468
- Add 0093-updated-HPE-MSA-builtin-config.patch
  * Fixes bz #2058222
- Resolves bz #2065468, #2058222</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-24" date="1652702400">- Add 0094-multipath-return-failure-on-an-invalid-remove-comman.patch
  * Fixes bz #2052054
- Add 0095-libmultipath-steal-the-src-string-pointer-in-merge_s.patch
- Add 0096-libmultipath-enable-linear-ordering-of-bus-proto-tup.patch
- Add 0097-libmultipath-use-bus_protocol_id-in-snprint_path_pro.patch
- Add 0098-libmultipath-make-protocol_name-global.patch
- Add 0099-libmultipath-add-a-protocol-subsection-to-multipath..patch
- Add 0100-libmultipath-Set-the-scsi-timeout-parameters-by-path.patch
- Add 0101-libmultipath-check-the-overrides-pctable-for-path-va.patch
- Add 0102-libmultipath-fix-eh_deadline-documentation.patch
- Add 0103-libmultipath-Add-documentation-for-the-protocol-subs.patch
- Add 0104-libmultipath-use-symbolic-value-for-invalid-pcentry.patch
  * The above 10 patches implement feature from bz #2065477
- Resolves: bz #2052054, #2065477</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-25" date="1652788800">- Add 0105-multipathd-handle-fpin-events.patch
- Add 0106-multipathd-disallow-changing-to-from-fpin-marginal-p.patch
- Resolves: bz #2083077</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-26" date="1654689600">- Add 0107-libmultipath-unset-detect_checker-for-clariion-Unity.patch
- Resolves: bz #2082205</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-27" date="1660910400">- Add 0108-multipathd-Add-missing-ctype-include.patch
- Add 0109-multipathd-replace-libreadline-with-libedit.patch
  * replace readline with libedit, to avoid license conflicts
- Resolves: bz #2119887</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-28" date="1661342400">- Add 0110-multipath-fix-systemd-timers-in-the-initramfs.patch
- Resolves: bz #1916168</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-28.1" date="1665662400">- Add 0111-multipathd-ignore-duplicated-multipathd-command-keys.patch
- Resolves: bz #2133995</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-28.2" date="1666267200">- Rebuild for rhel-8.7.0
- Related: bz #2133995</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-28.3" date="1673956800">- Add 0112-libmultipath-copy-mpp-hwe-from-pp-hwe.patch
- Resolves: bz #2161393</changelog>
</package>
<package pkgid="17f4ed75711a6daa4a9b461b8aa397bb942929b13724a5cbec028212ca187cc1" name="device-mapper-multipath-libs" arch="i686">
  <version epoch="0" ver="0.8.4" rel="28.el8_7.1"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-20" date="1637236800">- Add 0079-libmultipath-use-typedef-for-keyword-handler-and-pri.patch
- Add 0080-libmultipath-print-the-correct-file-when-parsing-fai.patch
- Add 0081-libmultipath-pass-file-and-line-number-to-keyword-ha.patch
- Add 0082-libmultipath-make-set_int-take-a-range-for-valid-val.patch
- Add 0083-libmultipath-improve-checks-for-set_str.patch
- Add 0084-libmultipath-split-set_int-to-enable-reuse.patch
- Add 0085-libmultipath-cleanup-invalid-config-handling.patch
- Add 0086-libmultipath-don-t-return-error-on-invalid-values.patch
  * Above 8 patches fix bz #1900595
- Add 0087-multipathd-avoid-unnecessary-path-read-only-reloads.patch
  * Fixes bz #2009624
- Resolves: bz #1900595, #2009624, #2021823</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-21" date="1642507200">- Add 0088-libmultipath-make-helper-function-to-trigger-path-ue.patch
- Add 0089-multipathd-trigger-udev-change-on-path-addition.patch
- Resolves: bz #1862032</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-22" date="1644235200">- Add 0090-RH-add-support-to-mpathconf-for-setting-arbitrary-de.patch
- Resolves: bz #1981240</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-23" date="1652184000">- Add 0091-multipath-tools-add-HPE-MSA-1060-2060-to-hwtable.patch
  * Partial fix for bz #2058222
- Add 0092-multipath-tools-update-mpp-force_readonly-in-ev_add_.patch
  * Fixes bz #2065468
- Add 0093-updated-HPE-MSA-builtin-config.patch
  * Fixes bz #2058222
- Resolves bz #2065468, #2058222</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-24" date="1652702400">- Add 0094-multipath-return-failure-on-an-invalid-remove-comman.patch
  * Fixes bz #2052054
- Add 0095-libmultipath-steal-the-src-string-pointer-in-merge_s.patch
- Add 0096-libmultipath-enable-linear-ordering-of-bus-proto-tup.patch
- Add 0097-libmultipath-use-bus_protocol_id-in-snprint_path_pro.patch
- Add 0098-libmultipath-make-protocol_name-global.patch
- Add 0099-libmultipath-add-a-protocol-subsection-to-multipath..patch
- Add 0100-libmultipath-Set-the-scsi-timeout-parameters-by-path.patch
- Add 0101-libmultipath-check-the-overrides-pctable-for-path-va.patch
- Add 0102-libmultipath-fix-eh_deadline-documentation.patch
- Add 0103-libmultipath-Add-documentation-for-the-protocol-subs.patch
- Add 0104-libmultipath-use-symbolic-value-for-invalid-pcentry.patch
  * The above 10 patches implement feature from bz #2065477
- Resolves: bz #2052054, #2065477</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-25" date="1652788800">- Add 0105-multipathd-handle-fpin-events.patch
- Add 0106-multipathd-disallow-changing-to-from-fpin-marginal-p.patch
- Resolves: bz #2083077</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-26" date="1654689600">- Add 0107-libmultipath-unset-detect_checker-for-clariion-Unity.patch
- Resolves: bz #2082205</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-27" date="1660910400">- Add 0108-multipathd-Add-missing-ctype-include.patch
- Add 0109-multipathd-replace-libreadline-with-libedit.patch
  * replace readline with libedit, to avoid license conflicts
- Resolves: bz #2119887</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-28" date="1661342400">- Add 0110-multipath-fix-systemd-timers-in-the-initramfs.patch
- Resolves: bz #1916168</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-28.1" date="1665662400">- Add 0111-multipathd-ignore-duplicated-multipathd-command-keys.patch
- Resolves: bz #2133995</changelog>
</package>
<package pkgid="02a8eb53d08b9ced0c3fa4d64607d05901c5bf8e76e1be2af72a2641a7e5f18b" name="device-mapper-multipath-libs" arch="x86_64">
  <version epoch="0" ver="0.8.4" rel="28.el8_7.1"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-20" date="1637236800">- Add 0079-libmultipath-use-typedef-for-keyword-handler-and-pri.patch
- Add 0080-libmultipath-print-the-correct-file-when-parsing-fai.patch
- Add 0081-libmultipath-pass-file-and-line-number-to-keyword-ha.patch
- Add 0082-libmultipath-make-set_int-take-a-range-for-valid-val.patch
- Add 0083-libmultipath-improve-checks-for-set_str.patch
- Add 0084-libmultipath-split-set_int-to-enable-reuse.patch
- Add 0085-libmultipath-cleanup-invalid-config-handling.patch
- Add 0086-libmultipath-don-t-return-error-on-invalid-values.patch
  * Above 8 patches fix bz #1900595
- Add 0087-multipathd-avoid-unnecessary-path-read-only-reloads.patch
  * Fixes bz #2009624
- Resolves: bz #1900595, #2009624, #2021823</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-21" date="1642507200">- Add 0088-libmultipath-make-helper-function-to-trigger-path-ue.patch
- Add 0089-multipathd-trigger-udev-change-on-path-addition.patch
- Resolves: bz #1862032</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-22" date="1644235200">- Add 0090-RH-add-support-to-mpathconf-for-setting-arbitrary-de.patch
- Resolves: bz #1981240</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-23" date="1652184000">- Add 0091-multipath-tools-add-HPE-MSA-1060-2060-to-hwtable.patch
  * Partial fix for bz #2058222
- Add 0092-multipath-tools-update-mpp-force_readonly-in-ev_add_.patch
  * Fixes bz #2065468
- Add 0093-updated-HPE-MSA-builtin-config.patch
  * Fixes bz #2058222
- Resolves bz #2065468, #2058222</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-24" date="1652702400">- Add 0094-multipath-return-failure-on-an-invalid-remove-comman.patch
  * Fixes bz #2052054
- Add 0095-libmultipath-steal-the-src-string-pointer-in-merge_s.patch
- Add 0096-libmultipath-enable-linear-ordering-of-bus-proto-tup.patch
- Add 0097-libmultipath-use-bus_protocol_id-in-snprint_path_pro.patch
- Add 0098-libmultipath-make-protocol_name-global.patch
- Add 0099-libmultipath-add-a-protocol-subsection-to-multipath..patch
- Add 0100-libmultipath-Set-the-scsi-timeout-parameters-by-path.patch
- Add 0101-libmultipath-check-the-overrides-pctable-for-path-va.patch
- Add 0102-libmultipath-fix-eh_deadline-documentation.patch
- Add 0103-libmultipath-Add-documentation-for-the-protocol-subs.patch
- Add 0104-libmultipath-use-symbolic-value-for-invalid-pcentry.patch
  * The above 10 patches implement feature from bz #2065477
- Resolves: bz #2052054, #2065477</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-25" date="1652788800">- Add 0105-multipathd-handle-fpin-events.patch
- Add 0106-multipathd-disallow-changing-to-from-fpin-marginal-p.patch
- Resolves: bz #2083077</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-26" date="1654689600">- Add 0107-libmultipath-unset-detect_checker-for-clariion-Unity.patch
- Resolves: bz #2082205</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-27" date="1660910400">- Add 0108-multipathd-Add-missing-ctype-include.patch
- Add 0109-multipathd-replace-libreadline-with-libedit.patch
  * replace readline with libedit, to avoid license conflicts
- Resolves: bz #2119887</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-28" date="1661342400">- Add 0110-multipath-fix-systemd-timers-in-the-initramfs.patch
- Resolves: bz #1916168</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-28.1" date="1665662400">- Add 0111-multipathd-ignore-duplicated-multipathd-command-keys.patch
- Resolves: bz #2133995</changelog>
</package>
<package pkgid="cae56fd060d397ace6c6b3941d4ede7169586c11c4a4582fb8239fab89431385" name="device-mapper-multipath-libs" arch="i686">
  <version epoch="0" ver="0.8.4" rel="28.el8_7.3"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-22" date="1644235200">- Add 0090-RH-add-support-to-mpathconf-for-setting-arbitrary-de.patch
- Resolves: bz #1981240</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-23" date="1652184000">- Add 0091-multipath-tools-add-HPE-MSA-1060-2060-to-hwtable.patch
  * Partial fix for bz #2058222
- Add 0092-multipath-tools-update-mpp-force_readonly-in-ev_add_.patch
  * Fixes bz #2065468
- Add 0093-updated-HPE-MSA-builtin-config.patch
  * Fixes bz #2058222
- Resolves bz #2065468, #2058222</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-24" date="1652702400">- Add 0094-multipath-return-failure-on-an-invalid-remove-comman.patch
  * Fixes bz #2052054
- Add 0095-libmultipath-steal-the-src-string-pointer-in-merge_s.patch
- Add 0096-libmultipath-enable-linear-ordering-of-bus-proto-tup.patch
- Add 0097-libmultipath-use-bus_protocol_id-in-snprint_path_pro.patch
- Add 0098-libmultipath-make-protocol_name-global.patch
- Add 0099-libmultipath-add-a-protocol-subsection-to-multipath..patch
- Add 0100-libmultipath-Set-the-scsi-timeout-parameters-by-path.patch
- Add 0101-libmultipath-check-the-overrides-pctable-for-path-va.patch
- Add 0102-libmultipath-fix-eh_deadline-documentation.patch
- Add 0103-libmultipath-Add-documentation-for-the-protocol-subs.patch
- Add 0104-libmultipath-use-symbolic-value-for-invalid-pcentry.patch
  * The above 10 patches implement feature from bz #2065477
- Resolves: bz #2052054, #2065477</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-25" date="1652788800">- Add 0105-multipathd-handle-fpin-events.patch
- Add 0106-multipathd-disallow-changing-to-from-fpin-marginal-p.patch
- Resolves: bz #2083077</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-26" date="1654689600">- Add 0107-libmultipath-unset-detect_checker-for-clariion-Unity.patch
- Resolves: bz #2082205</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-27" date="1660910400">- Add 0108-multipathd-Add-missing-ctype-include.patch
- Add 0109-multipathd-replace-libreadline-with-libedit.patch
  * replace readline with libedit, to avoid license conflicts
- Resolves: bz #2119887</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-28" date="1661342400">- Add 0110-multipath-fix-systemd-timers-in-the-initramfs.patch
- Resolves: bz #1916168</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-28.1" date="1665662400">- Add 0111-multipathd-ignore-duplicated-multipathd-command-keys.patch
- Resolves: bz #2133995</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-28.2" date="1666267200">- Rebuild for rhel-8.7.0
- Related: bz #2133995</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-28.3" date="1673956800">- Add 0112-libmultipath-copy-mpp-hwe-from-pp-hwe.patch
- Resolves: bz #2161393</changelog>
</package>
<package pkgid="6335815f81bd6f9f1afb4a174eae2334b6c8a01ff53ab676698cb563a1f3e425" name="device-mapper-multipath-libs" arch="x86_64">
  <version epoch="0" ver="0.8.4" rel="28.el8_7.3"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-22" date="1644235200">- Add 0090-RH-add-support-to-mpathconf-for-setting-arbitrary-de.patch
- Resolves: bz #1981240</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-23" date="1652184000">- Add 0091-multipath-tools-add-HPE-MSA-1060-2060-to-hwtable.patch
  * Partial fix for bz #2058222
- Add 0092-multipath-tools-update-mpp-force_readonly-in-ev_add_.patch
  * Fixes bz #2065468
- Add 0093-updated-HPE-MSA-builtin-config.patch
  * Fixes bz #2058222
- Resolves bz #2065468, #2058222</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-24" date="1652702400">- Add 0094-multipath-return-failure-on-an-invalid-remove-comman.patch
  * Fixes bz #2052054
- Add 0095-libmultipath-steal-the-src-string-pointer-in-merge_s.patch
- Add 0096-libmultipath-enable-linear-ordering-of-bus-proto-tup.patch
- Add 0097-libmultipath-use-bus_protocol_id-in-snprint_path_pro.patch
- Add 0098-libmultipath-make-protocol_name-global.patch
- Add 0099-libmultipath-add-a-protocol-subsection-to-multipath..patch
- Add 0100-libmultipath-Set-the-scsi-timeout-parameters-by-path.patch
- Add 0101-libmultipath-check-the-overrides-pctable-for-path-va.patch
- Add 0102-libmultipath-fix-eh_deadline-documentation.patch
- Add 0103-libmultipath-Add-documentation-for-the-protocol-subs.patch
- Add 0104-libmultipath-use-symbolic-value-for-invalid-pcentry.patch
  * The above 10 patches implement feature from bz #2065477
- Resolves: bz #2052054, #2065477</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-25" date="1652788800">- Add 0105-multipathd-handle-fpin-events.patch
- Add 0106-multipathd-disallow-changing-to-from-fpin-marginal-p.patch
- Resolves: bz #2083077</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-26" date="1654689600">- Add 0107-libmultipath-unset-detect_checker-for-clariion-Unity.patch
- Resolves: bz #2082205</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-27" date="1660910400">- Add 0108-multipathd-Add-missing-ctype-include.patch
- Add 0109-multipathd-replace-libreadline-with-libedit.patch
  * replace readline with libedit, to avoid license conflicts
- Resolves: bz #2119887</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-28" date="1661342400">- Add 0110-multipath-fix-systemd-timers-in-the-initramfs.patch
- Resolves: bz #1916168</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-28.1" date="1665662400">- Add 0111-multipathd-ignore-duplicated-multipathd-command-keys.patch
- Resolves: bz #2133995</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-28.2" date="1666267200">- Rebuild for rhel-8.7.0
- Related: bz #2133995</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-28.3" date="1673956800">- Add 0112-libmultipath-copy-mpp-hwe-from-pp-hwe.patch
- Resolves: bz #2161393</changelog>
</package>
<package pkgid="ca701cdaa63b5c64b1369e7c8b72a57395ffeaf844e3a861527d9348fdb957f3" name="dhcp-client" arch="x86_64">
  <version epoch="12" ver="4.3.6" rel="48.el8_7.1"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 12:4.3.6-40" date="1574769600">- Rebuild with bind-9.11.13 again</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 12:4.3.6-41" date="1587384000">- Rebuild with bind-9.11.18</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.3.6-42" date="1603195200">- Add key-algorithm support.
- Resolves: rhbz#1883999</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.3.6-43" date="1606305600">- Drop 12-dhcp NM dispatchers script (#1898423)</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.3.6-44" date="1607688000">- Rebuild with new bind (#1904613)</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.3.6-45" date="1622116800">- Fix for  CVE-2021-25217</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 12:4.3.6-46" date="1639656000">- Rebuild with new bind (#2022715)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 12:4.3.6-47" date="1640088000">- Rebuilt on a new side-tag (#2022715)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 12:4.3.6-48" date="1652184000">- omshell: add support for hmac-sha512 algorithm (#2016248)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 12:4.3.6-48.1" date="1668945600">- send back dhcp6.vendor-opts again (#2142025)</changelog>
</package>
<package pkgid="101700c55201ee8bb1ead815dda483c2a56ad3f7a0abab718bfd1bae8a1d3f97" name="dhcp-common" arch="noarch">
  <version epoch="12" ver="4.3.6" rel="48.el8_7.1"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 12:4.3.6-40" date="1574769600">- Rebuild with bind-9.11.13 again</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 12:4.3.6-41" date="1587384000">- Rebuild with bind-9.11.18</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.3.6-42" date="1603195200">- Add key-algorithm support.
- Resolves: rhbz#1883999</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.3.6-43" date="1606305600">- Drop 12-dhcp NM dispatchers script (#1898423)</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.3.6-44" date="1607688000">- Rebuild with new bind (#1904613)</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.3.6-45" date="1622116800">- Fix for  CVE-2021-25217</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 12:4.3.6-46" date="1639656000">- Rebuild with new bind (#2022715)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 12:4.3.6-47" date="1640088000">- Rebuilt on a new side-tag (#2022715)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 12:4.3.6-48" date="1652184000">- omshell: add support for hmac-sha512 algorithm (#2016248)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 12:4.3.6-48.1" date="1668945600">- send back dhcp6.vendor-opts again (#2142025)</changelog>
</package>
<package pkgid="9a3a6fccb3ea4ca7803f8989d80e40d8fdbe144b37e9c994e185d3610b1ee3ac" name="dhcp-libs" arch="i686">
  <version epoch="12" ver="4.3.6" rel="48.el8_7.1"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 12:4.3.6-40" date="1574769600">- Rebuild with bind-9.11.13 again</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 12:4.3.6-41" date="1587384000">- Rebuild with bind-9.11.18</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.3.6-42" date="1603195200">- Add key-algorithm support.
- Resolves: rhbz#1883999</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.3.6-43" date="1606305600">- Drop 12-dhcp NM dispatchers script (#1898423)</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.3.6-44" date="1607688000">- Rebuild with new bind (#1904613)</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.3.6-45" date="1622116800">- Fix for  CVE-2021-25217</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 12:4.3.6-46" date="1639656000">- Rebuild with new bind (#2022715)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 12:4.3.6-47" date="1640088000">- Rebuilt on a new side-tag (#2022715)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 12:4.3.6-48" date="1652184000">- omshell: add support for hmac-sha512 algorithm (#2016248)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 12:4.3.6-48.1" date="1668945600">- send back dhcp6.vendor-opts again (#2142025)</changelog>
</package>
<package pkgid="205a7c60124e25c83df7a2d9eaf6d21b86f6710e89460132a6acfa29aea3b110" name="dhcp-libs" arch="x86_64">
  <version epoch="12" ver="4.3.6" rel="48.el8_7.1"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 12:4.3.6-40" date="1574769600">- Rebuild with bind-9.11.13 again</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 12:4.3.6-41" date="1587384000">- Rebuild with bind-9.11.18</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.3.6-42" date="1603195200">- Add key-algorithm support.
- Resolves: rhbz#1883999</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.3.6-43" date="1606305600">- Drop 12-dhcp NM dispatchers script (#1898423)</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.3.6-44" date="1607688000">- Rebuild with new bind (#1904613)</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.3.6-45" date="1622116800">- Fix for  CVE-2021-25217</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 12:4.3.6-46" date="1639656000">- Rebuild with new bind (#2022715)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 12:4.3.6-47" date="1640088000">- Rebuilt on a new side-tag (#2022715)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 12:4.3.6-48" date="1652184000">- omshell: add support for hmac-sha512 algorithm (#2016248)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 12:4.3.6-48.1" date="1668945600">- send back dhcp6.vendor-opts again (#2142025)</changelog>
</package>
<package pkgid="be33598c604d5f6082bbc418a2a99db1316e7abe252fd44e7504bef309280459" name="dhcp-relay" arch="x86_64">
  <version epoch="12" ver="4.3.6" rel="48.el8_7.1"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 12:4.3.6-40" date="1574769600">- Rebuild with bind-9.11.13 again</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 12:4.3.6-41" date="1587384000">- Rebuild with bind-9.11.18</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.3.6-42" date="1603195200">- Add key-algorithm support.
- Resolves: rhbz#1883999</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.3.6-43" date="1606305600">- Drop 12-dhcp NM dispatchers script (#1898423)</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.3.6-44" date="1607688000">- Rebuild with new bind (#1904613)</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.3.6-45" date="1622116800">- Fix for  CVE-2021-25217</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 12:4.3.6-46" date="1639656000">- Rebuild with new bind (#2022715)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 12:4.3.6-47" date="1640088000">- Rebuilt on a new side-tag (#2022715)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 12:4.3.6-48" date="1652184000">- omshell: add support for hmac-sha512 algorithm (#2016248)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 12:4.3.6-48.1" date="1668945600">- send back dhcp6.vendor-opts again (#2142025)</changelog>
</package>
<package pkgid="267d34c4b3dfde91771f26c381d338693306b49325a48b12e89f44bd1f35b04a" name="dhcp-server" arch="x86_64">
  <version epoch="12" ver="4.3.6" rel="48.el8_7.1"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 12:4.3.6-40" date="1574769600">- Rebuild with bind-9.11.13 again</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 12:4.3.6-41" date="1587384000">- Rebuild with bind-9.11.18</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.3.6-42" date="1603195200">- Add key-algorithm support.
- Resolves: rhbz#1883999</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.3.6-43" date="1606305600">- Drop 12-dhcp NM dispatchers script (#1898423)</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.3.6-44" date="1607688000">- Rebuild with new bind (#1904613)</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.3.6-45" date="1622116800">- Fix for  CVE-2021-25217</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 12:4.3.6-46" date="1639656000">- Rebuild with new bind (#2022715)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 12:4.3.6-47" date="1640088000">- Rebuilt on a new side-tag (#2022715)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 12:4.3.6-48" date="1652184000">- omshell: add support for hmac-sha512 algorithm (#2016248)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 12:4.3.6-48.1" date="1668945600">- send back dhcp6.vendor-opts again (#2142025)</changelog>
</package>
<package pkgid="5269846f6a38f4c14715794ab1581c65bb05742e1ea66f153a458464e2a16c37" name="dracut" arch="x86_64">
  <version epoch="0" ver="049" rel="218.git20221019.el8_7"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 049-135.git20210121" date="1611230400">- 95fcoe: default rd.nofcoe to false</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 049-136.git20210426" date="1619438400">- Remove stratis module</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 049-151.git20210719" date="1626696000">- Drop 51-dracut-rescue-postinst.sh entirely
- fix(fips): add dh and ecdh ciphers
- 35network-legacy: discard pointless RTNETLINK message
- 95fcoe: don't install if there is no FCoE hostonly devices
- 95nfs: set correct ownership and permissions for statd 
- fix(dracut.sh): harden dracut against GZIP environment
- fix(multipath): stop multipath before udev db cleanup
- fix(dracut-functions): implement a cache for get_maj_min
- fix(dracut-functions): get_maj_min without
- fix(fcoe): rd.nofcoe=0 should disable fcoe
- fix(fcoe): rename rd.nofcoe to rd.fcoe
- fix(mdraid): remove offroot
- fix(mdraid): add grow continue service
- net-lib.sh: support infiniband network mac addresses
- 95nvmf: add nvmf-autoconnect script</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 049-188.git20210802" date="1627905600">- dracut-functions: fix botched backport
- squash: unsquash the root image instead of mounting it on
- 99squash: fail early if can't install require modules in
- 99squash: Don't hardcode the squash sub directories
- 99squash: improve pre-requirements check
- Fixed some SUSE specific typos and outputs
- 99squash: simplify the code
- 99squash: Check require module earlier, and properly
- fix(99squash): use kernel config instead of modprobe to check
- kill bogus comment
- busybox: simplify listing of supported utilities
- fix: use find_binary
- fix: shellcheck for modules.d/99squash/setup-squash.sh
- fix: shellcheck for modules.d/99squash/clear-squash.sh
- fix: shellcheck for modules.d/99squash/module-setup.sh
- fix(squash): this module shouldn't depend on bash
- refactor(squash): move the post install scripts into the
- fix: revise squash module checks
- fix(squash): post install should be the last step before
- refactor(squash): move all setup code to init-squash.sh
- feat(squash): install and depmod modules seperately
- refactor(squash): don't record mount points in text file
- lsinitrd: list squash content as well
- refactor(squash): structure in a cleaner way
- feat(squash): use busybox for early setup if available
- feat: squash module follow --compress option
- perf: disable initrd compression when squash module is
- fix(squash): shellcheck for modules.d/99squash
- fix(squash): don't mount the mount points if already mounted
- feat(squash): install umount util
- fix(squash): create relative symlinks
- fix(dracut.sh): handle '-i' option to include files beginning
- fix(dracut.sh): handle symlinks appropriately while using
- fix(squash): keep ld cache under initdir
- dracut-functions: backport block_is_* functions
- fix(squash): fixes related to squash module rebase
- fix(squash): remove tailing '/' when installing ld.so.conf.d</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 049-190.git20210811" date="1628683200">- fix(lsinitrd): TMP_DIR doesn't exist in RHEL8
- fix(squash): apply FIPS and libpthread workaround</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 049-191.git20210920" date="1632139200">- fix(install): extend hwcaps library handling to libraries</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 049-201.git20220131" date="1643630400">- ci: introduce C8S based GHA CI
- ci: backport TEST-21-NFS-NM
- dracut.sh: fix early microcode detection logic
- fix(url-lib): make pre-pivot hook separetely per nfs mount
- fix(watchdog): replace return with echo
- fix(network): add errors and warnings when network interface
- dracut.sh: add check for invalid configuration files
- fips: removed false-positive 'FATAL: Module xxx not found'
- fix(shutdown): be robust against forced shutdown
- fix(fips): handle s390x OSTree systems</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 049-202.git20220511" date="1652270400">- fix(fips): start iterating from 0 over BOOT_IMAGE entries</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 049-209.git20220815" date="1660564800">- fix(95iscsi): Fix network setup
- fix(dracut-systemd): correct service dependencies
- feat(lvm): add new module lvmthinpool-monitor
- fix(dracut-shutdown): add cleanup handler on failure</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 049-218.git20221019" date="1666267200">- Dracut: only login to one target at a time
- iscsi: don't continue waiting if the root device is present
- network: stop waiting for interfaces if root device is
- iscsiroot: parse_iscsi_root overwrites command line args
- iscsiroot: there's never more than one target per call
- iscsiroot: try targets only once
- iscsiroot: remove bashisms
- fixup "Dracut: only login to one target at a time"
- 35network-legacy: only skip waiting for interfaces if netroot</changelog>
</package>
<package pkgid="fa56ac6d34c8b012db4e459479858356484199bc57d48927f66c82123887ae38" name="dracut-caps" arch="x86_64">
  <version epoch="0" ver="049" rel="218.git20221019.el8_7"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 049-135.git20210121" date="1611230400">- 95fcoe: default rd.nofcoe to false</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 049-136.git20210426" date="1619438400">- Remove stratis module</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 049-151.git20210719" date="1626696000">- Drop 51-dracut-rescue-postinst.sh entirely
- fix(fips): add dh and ecdh ciphers
- 35network-legacy: discard pointless RTNETLINK message
- 95fcoe: don't install if there is no FCoE hostonly devices
- 95nfs: set correct ownership and permissions for statd 
- fix(dracut.sh): harden dracut against GZIP environment
- fix(multipath): stop multipath before udev db cleanup
- fix(dracut-functions): implement a cache for get_maj_min
- fix(dracut-functions): get_maj_min without
- fix(fcoe): rd.nofcoe=0 should disable fcoe
- fix(fcoe): rename rd.nofcoe to rd.fcoe
- fix(mdraid): remove offroot
- fix(mdraid): add grow continue service
- net-lib.sh: support infiniband network mac addresses
- 95nvmf: add nvmf-autoconnect script</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 049-188.git20210802" date="1627905600">- dracut-functions: fix botched backport
- squash: unsquash the root image instead of mounting it on
- 99squash: fail early if can't install require modules in
- 99squash: Don't hardcode the squash sub directories
- 99squash: improve pre-requirements check
- Fixed some SUSE specific typos and outputs
- 99squash: simplify the code
- 99squash: Check require module earlier, and properly
- fix(99squash): use kernel config instead of modprobe to check
- kill bogus comment
- busybox: simplify listing of supported utilities
- fix: use find_binary
- fix: shellcheck for modules.d/99squash/setup-squash.sh
- fix: shellcheck for modules.d/99squash/clear-squash.sh
- fix: shellcheck for modules.d/99squash/module-setup.sh
- fix(squash): this module shouldn't depend on bash
- refactor(squash): move the post install scripts into the
- fix: revise squash module checks
- fix(squash): post install should be the last step before
- refactor(squash): move all setup code to init-squash.sh
- feat(squash): install and depmod modules seperately
- refactor(squash): don't record mount points in text file
- lsinitrd: list squash content as well
- refactor(squash): structure in a cleaner way
- feat(squash): use busybox for early setup if available
- feat: squash module follow --compress option
- perf: disable initrd compression when squash module is
- fix(squash): shellcheck for modules.d/99squash
- fix(squash): don't mount the mount points if already mounted
- feat(squash): install umount util
- fix(squash): create relative symlinks
- fix(dracut.sh): handle '-i' option to include files beginning
- fix(dracut.sh): handle symlinks appropriately while using
- fix(squash): keep ld cache under initdir
- dracut-functions: backport block_is_* functions
- fix(squash): fixes related to squash module rebase
- fix(squash): remove tailing '/' when installing ld.so.conf.d</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 049-190.git20210811" date="1628683200">- fix(lsinitrd): TMP_DIR doesn't exist in RHEL8
- fix(squash): apply FIPS and libpthread workaround</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 049-191.git20210920" date="1632139200">- fix(install): extend hwcaps library handling to libraries</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 049-201.git20220131" date="1643630400">- ci: introduce C8S based GHA CI
- ci: backport TEST-21-NFS-NM
- dracut.sh: fix early microcode detection logic
- fix(url-lib): make pre-pivot hook separetely per nfs mount
- fix(watchdog): replace return with echo
- fix(network): add errors and warnings when network interface
- dracut.sh: add check for invalid configuration files
- fips: removed false-positive 'FATAL: Module xxx not found'
- fix(shutdown): be robust against forced shutdown
- fix(fips): handle s390x OSTree systems</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 049-202.git20220511" date="1652270400">- fix(fips): start iterating from 0 over BOOT_IMAGE entries</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 049-209.git20220815" date="1660564800">- fix(95iscsi): Fix network setup
- fix(dracut-systemd): correct service dependencies
- feat(lvm): add new module lvmthinpool-monitor
- fix(dracut-shutdown): add cleanup handler on failure</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 049-218.git20221019" date="1666267200">- Dracut: only login to one target at a time
- iscsi: don't continue waiting if the root device is present
- network: stop waiting for interfaces if root device is
- iscsiroot: parse_iscsi_root overwrites command line args
- iscsiroot: there's never more than one target per call
- iscsiroot: try targets only once
- iscsiroot: remove bashisms
- fixup "Dracut: only login to one target at a time"
- 35network-legacy: only skip waiting for interfaces if netroot</changelog>
</package>
<package pkgid="d3563d55f9fe0190943ff34d4aaf6f6dfc3e5f464097578189bbeac8cd55cfc1" name="dracut-config-generic" arch="x86_64">
  <version epoch="0" ver="049" rel="218.git20221019.el8_7"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 049-135.git20210121" date="1611230400">- 95fcoe: default rd.nofcoe to false</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 049-136.git20210426" date="1619438400">- Remove stratis module</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 049-151.git20210719" date="1626696000">- Drop 51-dracut-rescue-postinst.sh entirely
- fix(fips): add dh and ecdh ciphers
- 35network-legacy: discard pointless RTNETLINK message
- 95fcoe: don't install if there is no FCoE hostonly devices
- 95nfs: set correct ownership and permissions for statd 
- fix(dracut.sh): harden dracut against GZIP environment
- fix(multipath): stop multipath before udev db cleanup
- fix(dracut-functions): implement a cache for get_maj_min
- fix(dracut-functions): get_maj_min without
- fix(fcoe): rd.nofcoe=0 should disable fcoe
- fix(fcoe): rename rd.nofcoe to rd.fcoe
- fix(mdraid): remove offroot
- fix(mdraid): add grow continue service
- net-lib.sh: support infiniband network mac addresses
- 95nvmf: add nvmf-autoconnect script</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 049-188.git20210802" date="1627905600">- dracut-functions: fix botched backport
- squash: unsquash the root image instead of mounting it on
- 99squash: fail early if can't install require modules in
- 99squash: Don't hardcode the squash sub directories
- 99squash: improve pre-requirements check
- Fixed some SUSE specific typos and outputs
- 99squash: simplify the code
- 99squash: Check require module earlier, and properly
- fix(99squash): use kernel config instead of modprobe to check
- kill bogus comment
- busybox: simplify listing of supported utilities
- fix: use find_binary
- fix: shellcheck for modules.d/99squash/setup-squash.sh
- fix: shellcheck for modules.d/99squash/clear-squash.sh
- fix: shellcheck for modules.d/99squash/module-setup.sh
- fix(squash): this module shouldn't depend on bash
- refactor(squash): move the post install scripts into the
- fix: revise squash module checks
- fix(squash): post install should be the last step before
- refactor(squash): move all setup code to init-squash.sh
- feat(squash): install and depmod modules seperately
- refactor(squash): don't record mount points in text file
- lsinitrd: list squash content as well
- refactor(squash): structure in a cleaner way
- feat(squash): use busybox for early setup if available
- feat: squash module follow --compress option
- perf: disable initrd compression when squash module is
- fix(squash): shellcheck for modules.d/99squash
- fix(squash): don't mount the mount points if already mounted
- feat(squash): install umount util
- fix(squash): create relative symlinks
- fix(dracut.sh): handle '-i' option to include files beginning
- fix(dracut.sh): handle symlinks appropriately while using
- fix(squash): keep ld cache under initdir
- dracut-functions: backport block_is_* functions
- fix(squash): fixes related to squash module rebase
- fix(squash): remove tailing '/' when installing ld.so.conf.d</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 049-190.git20210811" date="1628683200">- fix(lsinitrd): TMP_DIR doesn't exist in RHEL8
- fix(squash): apply FIPS and libpthread workaround</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 049-191.git20210920" date="1632139200">- fix(install): extend hwcaps library handling to libraries</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 049-201.git20220131" date="1643630400">- ci: introduce C8S based GHA CI
- ci: backport TEST-21-NFS-NM
- dracut.sh: fix early microcode detection logic
- fix(url-lib): make pre-pivot hook separetely per nfs mount
- fix(watchdog): replace return with echo
- fix(network): add errors and warnings when network interface
- dracut.sh: add check for invalid configuration files
- fips: removed false-positive 'FATAL: Module xxx not found'
- fix(shutdown): be robust against forced shutdown
- fix(fips): handle s390x OSTree systems</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 049-202.git20220511" date="1652270400">- fix(fips): start iterating from 0 over BOOT_IMAGE entries</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 049-209.git20220815" date="1660564800">- fix(95iscsi): Fix network setup
- fix(dracut-systemd): correct service dependencies
- feat(lvm): add new module lvmthinpool-monitor
- fix(dracut-shutdown): add cleanup handler on failure</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 049-218.git20221019" date="1666267200">- Dracut: only login to one target at a time
- iscsi: don't continue waiting if the root device is present
- network: stop waiting for interfaces if root device is
- iscsiroot: parse_iscsi_root overwrites command line args
- iscsiroot: there's never more than one target per call
- iscsiroot: try targets only once
- iscsiroot: remove bashisms
- fixup "Dracut: only login to one target at a time"
- 35network-legacy: only skip waiting for interfaces if netroot</changelog>
</package>
<package pkgid="92e1c1a579474b4d9cabdc38bb765b26e1db46dcdb53924fcc55e80a22552748" name="dracut-config-rescue" arch="x86_64">
  <version epoch="0" ver="049" rel="218.git20221019.el8_7"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 049-135.git20210121" date="1611230400">- 95fcoe: default rd.nofcoe to false</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 049-136.git20210426" date="1619438400">- Remove stratis module</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 049-151.git20210719" date="1626696000">- Drop 51-dracut-rescue-postinst.sh entirely
- fix(fips): add dh and ecdh ciphers
- 35network-legacy: discard pointless RTNETLINK message
- 95fcoe: don't install if there is no FCoE hostonly devices
- 95nfs: set correct ownership and permissions for statd 
- fix(dracut.sh): harden dracut against GZIP environment
- fix(multipath): stop multipath before udev db cleanup
- fix(dracut-functions): implement a cache for get_maj_min
- fix(dracut-functions): get_maj_min without
- fix(fcoe): rd.nofcoe=0 should disable fcoe
- fix(fcoe): rename rd.nofcoe to rd.fcoe
- fix(mdraid): remove offroot
- fix(mdraid): add grow continue service
- net-lib.sh: support infiniband network mac addresses
- 95nvmf: add nvmf-autoconnect script</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 049-188.git20210802" date="1627905600">- dracut-functions: fix botched backport
- squash: unsquash the root image instead of mounting it on
- 99squash: fail early if can't install require modules in
- 99squash: Don't hardcode the squash sub directories
- 99squash: improve pre-requirements check
- Fixed some SUSE specific typos and outputs
- 99squash: simplify the code
- 99squash: Check require module earlier, and properly
- fix(99squash): use kernel config instead of modprobe to check
- kill bogus comment
- busybox: simplify listing of supported utilities
- fix: use find_binary
- fix: shellcheck for modules.d/99squash/setup-squash.sh
- fix: shellcheck for modules.d/99squash/clear-squash.sh
- fix: shellcheck for modules.d/99squash/module-setup.sh
- fix(squash): this module shouldn't depend on bash
- refactor(squash): move the post install scripts into the
- fix: revise squash module checks
- fix(squash): post install should be the last step before
- refactor(squash): move all setup code to init-squash.sh
- feat(squash): install and depmod modules seperately
- refactor(squash): don't record mount points in text file
- lsinitrd: list squash content as well
- refactor(squash): structure in a cleaner way
- feat(squash): use busybox for early setup if available
- feat: squash module follow --compress option
- perf: disable initrd compression when squash module is
- fix(squash): shellcheck for modules.d/99squash
- fix(squash): don't mount the mount points if already mounted
- feat(squash): install umount util
- fix(squash): create relative symlinks
- fix(dracut.sh): handle '-i' option to include files beginning
- fix(dracut.sh): handle symlinks appropriately while using
- fix(squash): keep ld cache under initdir
- dracut-functions: backport block_is_* functions
- fix(squash): fixes related to squash module rebase
- fix(squash): remove tailing '/' when installing ld.so.conf.d</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 049-190.git20210811" date="1628683200">- fix(lsinitrd): TMP_DIR doesn't exist in RHEL8
- fix(squash): apply FIPS and libpthread workaround</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 049-191.git20210920" date="1632139200">- fix(install): extend hwcaps library handling to libraries</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 049-201.git20220131" date="1643630400">- ci: introduce C8S based GHA CI
- ci: backport TEST-21-NFS-NM
- dracut.sh: fix early microcode detection logic
- fix(url-lib): make pre-pivot hook separetely per nfs mount
- fix(watchdog): replace return with echo
- fix(network): add errors and warnings when network interface
- dracut.sh: add check for invalid configuration files
- fips: removed false-positive 'FATAL: Module xxx not found'
- fix(shutdown): be robust against forced shutdown
- fix(fips): handle s390x OSTree systems</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 049-202.git20220511" date="1652270400">- fix(fips): start iterating from 0 over BOOT_IMAGE entries</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 049-209.git20220815" date="1660564800">- fix(95iscsi): Fix network setup
- fix(dracut-systemd): correct service dependencies
- feat(lvm): add new module lvmthinpool-monitor
- fix(dracut-shutdown): add cleanup handler on failure</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 049-218.git20221019" date="1666267200">- Dracut: only login to one target at a time
- iscsi: don't continue waiting if the root device is present
- network: stop waiting for interfaces if root device is
- iscsiroot: parse_iscsi_root overwrites command line args
- iscsiroot: there's never more than one target per call
- iscsiroot: try targets only once
- iscsiroot: remove bashisms
- fixup "Dracut: only login to one target at a time"
- 35network-legacy: only skip waiting for interfaces if netroot</changelog>
</package>
<package pkgid="9605a7cce811f7d25b5643f582d43eec87aeff1f423f56ca5bde16d49aefb004" name="dracut-live" arch="x86_64">
  <version epoch="0" ver="049" rel="218.git20221019.el8_7"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 049-135.git20210121" date="1611230400">- 95fcoe: default rd.nofcoe to false</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 049-136.git20210426" date="1619438400">- Remove stratis module</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 049-151.git20210719" date="1626696000">- Drop 51-dracut-rescue-postinst.sh entirely
- fix(fips): add dh and ecdh ciphers
- 35network-legacy: discard pointless RTNETLINK message
- 95fcoe: don't install if there is no FCoE hostonly devices
- 95nfs: set correct ownership and permissions for statd 
- fix(dracut.sh): harden dracut against GZIP environment
- fix(multipath): stop multipath before udev db cleanup
- fix(dracut-functions): implement a cache for get_maj_min
- fix(dracut-functions): get_maj_min without
- fix(fcoe): rd.nofcoe=0 should disable fcoe
- fix(fcoe): rename rd.nofcoe to rd.fcoe
- fix(mdraid): remove offroot
- fix(mdraid): add grow continue service
- net-lib.sh: support infiniband network mac addresses
- 95nvmf: add nvmf-autoconnect script</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 049-188.git20210802" date="1627905600">- dracut-functions: fix botched backport
- squash: unsquash the root image instead of mounting it on
- 99squash: fail early if can't install require modules in
- 99squash: Don't hardcode the squash sub directories
- 99squash: improve pre-requirements check
- Fixed some SUSE specific typos and outputs
- 99squash: simplify the code
- 99squash: Check require module earlier, and properly
- fix(99squash): use kernel config instead of modprobe to check
- kill bogus comment
- busybox: simplify listing of supported utilities
- fix: use find_binary
- fix: shellcheck for modules.d/99squash/setup-squash.sh
- fix: shellcheck for modules.d/99squash/clear-squash.sh
- fix: shellcheck for modules.d/99squash/module-setup.sh
- fix(squash): this module shouldn't depend on bash
- refactor(squash): move the post install scripts into the
- fix: revise squash module checks
- fix(squash): post install should be the last step before
- refactor(squash): move all setup code to init-squash.sh
- feat(squash): install and depmod modules seperately
- refactor(squash): don't record mount points in text file
- lsinitrd: list squash content as well
- refactor(squash): structure in a cleaner way
- feat(squash): use busybox for early setup if available
- feat: squash module follow --compress option
- perf: disable initrd compression when squash module is
- fix(squash): shellcheck for modules.d/99squash
- fix(squash): don't mount the mount points if already mounted
- feat(squash): install umount util
- fix(squash): create relative symlinks
- fix(dracut.sh): handle '-i' option to include files beginning
- fix(dracut.sh): handle symlinks appropriately while using
- fix(squash): keep ld cache under initdir
- dracut-functions: backport block_is_* functions
- fix(squash): fixes related to squash module rebase
- fix(squash): remove tailing '/' when installing ld.so.conf.d</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 049-190.git20210811" date="1628683200">- fix(lsinitrd): TMP_DIR doesn't exist in RHEL8
- fix(squash): apply FIPS and libpthread workaround</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 049-191.git20210920" date="1632139200">- fix(install): extend hwcaps library handling to libraries</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 049-201.git20220131" date="1643630400">- ci: introduce C8S based GHA CI
- ci: backport TEST-21-NFS-NM
- dracut.sh: fix early microcode detection logic
- fix(url-lib): make pre-pivot hook separetely per nfs mount
- fix(watchdog): replace return with echo
- fix(network): add errors and warnings when network interface
- dracut.sh: add check for invalid configuration files
- fips: removed false-positive 'FATAL: Module xxx not found'
- fix(shutdown): be robust against forced shutdown
- fix(fips): handle s390x OSTree systems</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 049-202.git20220511" date="1652270400">- fix(fips): start iterating from 0 over BOOT_IMAGE entries</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 049-209.git20220815" date="1660564800">- fix(95iscsi): Fix network setup
- fix(dracut-systemd): correct service dependencies
- feat(lvm): add new module lvmthinpool-monitor
- fix(dracut-shutdown): add cleanup handler on failure</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 049-218.git20221019" date="1666267200">- Dracut: only login to one target at a time
- iscsi: don't continue waiting if the root device is present
- network: stop waiting for interfaces if root device is
- iscsiroot: parse_iscsi_root overwrites command line args
- iscsiroot: there's never more than one target per call
- iscsiroot: try targets only once
- iscsiroot: remove bashisms
- fixup "Dracut: only login to one target at a time"
- 35network-legacy: only skip waiting for interfaces if netroot</changelog>
</package>
<package pkgid="3d8c5c9e7f2185e38b0e5687c9b4665f5c7c6afbc7676df7dd2ad7439d5b65a0" name="dracut-network" arch="x86_64">
  <version epoch="0" ver="049" rel="218.git20221019.el8_7"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 049-135.git20210121" date="1611230400">- 95fcoe: default rd.nofcoe to false</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 049-136.git20210426" date="1619438400">- Remove stratis module</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 049-151.git20210719" date="1626696000">- Drop 51-dracut-rescue-postinst.sh entirely
- fix(fips): add dh and ecdh ciphers
- 35network-legacy: discard pointless RTNETLINK message
- 95fcoe: don't install if there is no FCoE hostonly devices
- 95nfs: set correct ownership and permissions for statd 
- fix(dracut.sh): harden dracut against GZIP environment
- fix(multipath): stop multipath before udev db cleanup
- fix(dracut-functions): implement a cache for get_maj_min
- fix(dracut-functions): get_maj_min without
- fix(fcoe): rd.nofcoe=0 should disable fcoe
- fix(fcoe): rename rd.nofcoe to rd.fcoe
- fix(mdraid): remove offroot
- fix(mdraid): add grow continue service
- net-lib.sh: support infiniband network mac addresses
- 95nvmf: add nvmf-autoconnect script</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 049-188.git20210802" date="1627905600">- dracut-functions: fix botched backport
- squash: unsquash the root image instead of mounting it on
- 99squash: fail early if can't install require modules in
- 99squash: Don't hardcode the squash sub directories
- 99squash: improve pre-requirements check
- Fixed some SUSE specific typos and outputs
- 99squash: simplify the code
- 99squash: Check require module earlier, and properly
- fix(99squash): use kernel config instead of modprobe to check
- kill bogus comment
- busybox: simplify listing of supported utilities
- fix: use find_binary
- fix: shellcheck for modules.d/99squash/setup-squash.sh
- fix: shellcheck for modules.d/99squash/clear-squash.sh
- fix: shellcheck for modules.d/99squash/module-setup.sh
- fix(squash): this module shouldn't depend on bash
- refactor(squash): move the post install scripts into the
- fix: revise squash module checks
- fix(squash): post install should be the last step before
- refactor(squash): move all setup code to init-squash.sh
- feat(squash): install and depmod modules seperately
- refactor(squash): don't record mount points in text file
- lsinitrd: list squash content as well
- refactor(squash): structure in a cleaner way
- feat(squash): use busybox for early setup if available
- feat: squash module follow --compress option
- perf: disable initrd compression when squash module is
- fix(squash): shellcheck for modules.d/99squash
- fix(squash): don't mount the mount points if already mounted
- feat(squash): install umount util
- fix(squash): create relative symlinks
- fix(dracut.sh): handle '-i' option to include files beginning
- fix(dracut.sh): handle symlinks appropriately while using
- fix(squash): keep ld cache under initdir
- dracut-functions: backport block_is_* functions
- fix(squash): fixes related to squash module rebase
- fix(squash): remove tailing '/' when installing ld.so.conf.d</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 049-190.git20210811" date="1628683200">- fix(lsinitrd): TMP_DIR doesn't exist in RHEL8
- fix(squash): apply FIPS and libpthread workaround</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 049-191.git20210920" date="1632139200">- fix(install): extend hwcaps library handling to libraries</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 049-201.git20220131" date="1643630400">- ci: introduce C8S based GHA CI
- ci: backport TEST-21-NFS-NM
- dracut.sh: fix early microcode detection logic
- fix(url-lib): make pre-pivot hook separetely per nfs mount
- fix(watchdog): replace return with echo
- fix(network): add errors and warnings when network interface
- dracut.sh: add check for invalid configuration files
- fips: removed false-positive 'FATAL: Module xxx not found'
- fix(shutdown): be robust against forced shutdown
- fix(fips): handle s390x OSTree systems</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 049-202.git20220511" date="1652270400">- fix(fips): start iterating from 0 over BOOT_IMAGE entries</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 049-209.git20220815" date="1660564800">- fix(95iscsi): Fix network setup
- fix(dracut-systemd): correct service dependencies
- feat(lvm): add new module lvmthinpool-monitor
- fix(dracut-shutdown): add cleanup handler on failure</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 049-218.git20221019" date="1666267200">- Dracut: only login to one target at a time
- iscsi: don't continue waiting if the root device is present
- network: stop waiting for interfaces if root device is
- iscsiroot: parse_iscsi_root overwrites command line args
- iscsiroot: there's never more than one target per call
- iscsiroot: try targets only once
- iscsiroot: remove bashisms
- fixup "Dracut: only login to one target at a time"
- 35network-legacy: only skip waiting for interfaces if netroot</changelog>
</package>
<package pkgid="802b554346db55ad3febd2212f47903705b0d24975ff030fbe90c99f83a18db0" name="dracut-squash" arch="x86_64">
  <version epoch="0" ver="049" rel="218.git20221019.el8_7"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 049-135.git20210121" date="1611230400">- 95fcoe: default rd.nofcoe to false</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 049-136.git20210426" date="1619438400">- Remove stratis module</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 049-151.git20210719" date="1626696000">- Drop 51-dracut-rescue-postinst.sh entirely
- fix(fips): add dh and ecdh ciphers
- 35network-legacy: discard pointless RTNETLINK message
- 95fcoe: don't install if there is no FCoE hostonly devices
- 95nfs: set correct ownership and permissions for statd 
- fix(dracut.sh): harden dracut against GZIP environment
- fix(multipath): stop multipath before udev db cleanup
- fix(dracut-functions): implement a cache for get_maj_min
- fix(dracut-functions): get_maj_min without
- fix(fcoe): rd.nofcoe=0 should disable fcoe
- fix(fcoe): rename rd.nofcoe to rd.fcoe
- fix(mdraid): remove offroot
- fix(mdraid): add grow continue service
- net-lib.sh: support infiniband network mac addresses
- 95nvmf: add nvmf-autoconnect script</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 049-188.git20210802" date="1627905600">- dracut-functions: fix botched backport
- squash: unsquash the root image instead of mounting it on
- 99squash: fail early if can't install require modules in
- 99squash: Don't hardcode the squash sub directories
- 99squash: improve pre-requirements check
- Fixed some SUSE specific typos and outputs
- 99squash: simplify the code
- 99squash: Check require module earlier, and properly
- fix(99squash): use kernel config instead of modprobe to check
- kill bogus comment
- busybox: simplify listing of supported utilities
- fix: use find_binary
- fix: shellcheck for modules.d/99squash/setup-squash.sh
- fix: shellcheck for modules.d/99squash/clear-squash.sh
- fix: shellcheck for modules.d/99squash/module-setup.sh
- fix(squash): this module shouldn't depend on bash
- refactor(squash): move the post install scripts into the
- fix: revise squash module checks
- fix(squash): post install should be the last step before
- refactor(squash): move all setup code to init-squash.sh
- feat(squash): install and depmod modules seperately
- refactor(squash): don't record mount points in text file
- lsinitrd: list squash content as well
- refactor(squash): structure in a cleaner way
- feat(squash): use busybox for early setup if available
- feat: squash module follow --compress option
- perf: disable initrd compression when squash module is
- fix(squash): shellcheck for modules.d/99squash
- fix(squash): don't mount the mount points if already mounted
- feat(squash): install umount util
- fix(squash): create relative symlinks
- fix(dracut.sh): handle '-i' option to include files beginning
- fix(dracut.sh): handle symlinks appropriately while using
- fix(squash): keep ld cache under initdir
- dracut-functions: backport block_is_* functions
- fix(squash): fixes related to squash module rebase
- fix(squash): remove tailing '/' when installing ld.so.conf.d</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 049-190.git20210811" date="1628683200">- fix(lsinitrd): TMP_DIR doesn't exist in RHEL8
- fix(squash): apply FIPS and libpthread workaround</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 049-191.git20210920" date="1632139200">- fix(install): extend hwcaps library handling to libraries</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 049-201.git20220131" date="1643630400">- ci: introduce C8S based GHA CI
- ci: backport TEST-21-NFS-NM
- dracut.sh: fix early microcode detection logic
- fix(url-lib): make pre-pivot hook separetely per nfs mount
- fix(watchdog): replace return with echo
- fix(network): add errors and warnings when network interface
- dracut.sh: add check for invalid configuration files
- fips: removed false-positive 'FATAL: Module xxx not found'
- fix(shutdown): be robust against forced shutdown
- fix(fips): handle s390x OSTree systems</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 049-202.git20220511" date="1652270400">- fix(fips): start iterating from 0 over BOOT_IMAGE entries</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 049-209.git20220815" date="1660564800">- fix(95iscsi): Fix network setup
- fix(dracut-systemd): correct service dependencies
- feat(lvm): add new module lvmthinpool-monitor
- fix(dracut-shutdown): add cleanup handler on failure</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 049-218.git20221019" date="1666267200">- Dracut: only login to one target at a time
- iscsi: don't continue waiting if the root device is present
- network: stop waiting for interfaces if root device is
- iscsiroot: parse_iscsi_root overwrites command line args
- iscsiroot: there's never more than one target per call
- iscsiroot: try targets only once
- iscsiroot: remove bashisms
- fixup "Dracut: only login to one target at a time"
- 35network-legacy: only skip waiting for interfaces if netroot</changelog>
</package>
<package pkgid="25dd7ae2f7cae8caa0c1ca661c860cc23575ba8aaf75a09abc5d48c234d3afe9" name="dracut-tools" arch="x86_64">
  <version epoch="0" ver="049" rel="218.git20221019.el8_7"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 049-135.git20210121" date="1611230400">- 95fcoe: default rd.nofcoe to false</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 049-136.git20210426" date="1619438400">- Remove stratis module</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 049-151.git20210719" date="1626696000">- Drop 51-dracut-rescue-postinst.sh entirely
- fix(fips): add dh and ecdh ciphers
- 35network-legacy: discard pointless RTNETLINK message
- 95fcoe: don't install if there is no FCoE hostonly devices
- 95nfs: set correct ownership and permissions for statd 
- fix(dracut.sh): harden dracut against GZIP environment
- fix(multipath): stop multipath before udev db cleanup
- fix(dracut-functions): implement a cache for get_maj_min
- fix(dracut-functions): get_maj_min without
- fix(fcoe): rd.nofcoe=0 should disable fcoe
- fix(fcoe): rename rd.nofcoe to rd.fcoe
- fix(mdraid): remove offroot
- fix(mdraid): add grow continue service
- net-lib.sh: support infiniband network mac addresses
- 95nvmf: add nvmf-autoconnect script</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 049-188.git20210802" date="1627905600">- dracut-functions: fix botched backport
- squash: unsquash the root image instead of mounting it on
- 99squash: fail early if can't install require modules in
- 99squash: Don't hardcode the squash sub directories
- 99squash: improve pre-requirements check
- Fixed some SUSE specific typos and outputs
- 99squash: simplify the code
- 99squash: Check require module earlier, and properly
- fix(99squash): use kernel config instead of modprobe to check
- kill bogus comment
- busybox: simplify listing of supported utilities
- fix: use find_binary
- fix: shellcheck for modules.d/99squash/setup-squash.sh
- fix: shellcheck for modules.d/99squash/clear-squash.sh
- fix: shellcheck for modules.d/99squash/module-setup.sh
- fix(squash): this module shouldn't depend on bash
- refactor(squash): move the post install scripts into the
- fix: revise squash module checks
- fix(squash): post install should be the last step before
- refactor(squash): move all setup code to init-squash.sh
- feat(squash): install and depmod modules seperately
- refactor(squash): don't record mount points in text file
- lsinitrd: list squash content as well
- refactor(squash): structure in a cleaner way
- feat(squash): use busybox for early setup if available
- feat: squash module follow --compress option
- perf: disable initrd compression when squash module is
- fix(squash): shellcheck for modules.d/99squash
- fix(squash): don't mount the mount points if already mounted
- feat(squash): install umount util
- fix(squash): create relative symlinks
- fix(dracut.sh): handle '-i' option to include files beginning
- fix(dracut.sh): handle symlinks appropriately while using
- fix(squash): keep ld cache under initdir
- dracut-functions: backport block_is_* functions
- fix(squash): fixes related to squash module rebase
- fix(squash): remove tailing '/' when installing ld.so.conf.d</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 049-190.git20210811" date="1628683200">- fix(lsinitrd): TMP_DIR doesn't exist in RHEL8
- fix(squash): apply FIPS and libpthread workaround</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 049-191.git20210920" date="1632139200">- fix(install): extend hwcaps library handling to libraries</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 049-201.git20220131" date="1643630400">- ci: introduce C8S based GHA CI
- ci: backport TEST-21-NFS-NM
- dracut.sh: fix early microcode detection logic
- fix(url-lib): make pre-pivot hook separetely per nfs mount
- fix(watchdog): replace return with echo
- fix(network): add errors and warnings when network interface
- dracut.sh: add check for invalid configuration files
- fips: removed false-positive 'FATAL: Module xxx not found'
- fix(shutdown): be robust against forced shutdown
- fix(fips): handle s390x OSTree systems</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 049-202.git20220511" date="1652270400">- fix(fips): start iterating from 0 over BOOT_IMAGE entries</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 049-209.git20220815" date="1660564800">- fix(95iscsi): Fix network setup
- fix(dracut-systemd): correct service dependencies
- feat(lvm): add new module lvmthinpool-monitor
- fix(dracut-shutdown): add cleanup handler on failure</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 049-218.git20221019" date="1666267200">- Dracut: only login to one target at a time
- iscsi: don't continue waiting if the root device is present
- network: stop waiting for interfaces if root device is
- iscsiroot: parse_iscsi_root overwrites command line args
- iscsiroot: there's never more than one target per call
- iscsiroot: try targets only once
- iscsiroot: remove bashisms
- fixup "Dracut: only login to one target at a time"
- 35network-legacy: only skip waiting for interfaces if netroot</changelog>
</package>
<package pkgid="3e282d3ef5c090502f7706906693956f1ddfe983e35c875d0a9578b1ee2ecba0" name="emacs-filesystem" arch="noarch">
  <version epoch="1" ver="26.1" rel="7.el8_7.1"/>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 1:25.3-8" date="1518350400">- Rebuild (giflib)</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 1:25.3-9" date="1522843200">- Emacs crashes when loading color fonts (#1519038)</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 1:26.1-1" date="1527681600">- emacs-26.1 is available (#1583433)</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 1:26.1-2" date="1529323200">- remove build dependency on python2 (#1591707)</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 1:26.1-3" date="1534161600">- remove python dependencies, emacs*.py have not been there for a while</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 1:26.1-4" date="1534248000">- remove ImageMagick dependency (#1564992)</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 1:26.1-5" date="1536580800">- review annocheck distro flag failures (#1624109)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 1:26.1-6" date="1626696000">- a new GPG key for GNU ELPA packages (#1810729)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 1:26.1-7" date="1628164800">- provide gating.yaml for CI</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 1:26.1-7.1" date="1680782400">- Fix ob-latex.el command injection vulnerability (#2180585)</changelog>
</package>
<package pkgid="2f0bb5eeca4d00bdf8d461c826d73d88481116b46bd075da5a032b3594e034e3" name="expat" arch="i686">
  <version epoch="0" ver="2.2.5" rel="10.el8_7.1"/>
  <changelog author="Igor Gnatenko &lt;ignatenkobrain@fedoraproject.org&gt; - 2.2.5-2" date="1517659200">- Switch to %ldconfig_scriptlets</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.2.5-3" date="1518004800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.2.5-4" date="1587729600">- add security fixes for CVE-2018-20843, CVE-2019-15903</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; -  2.2.5-5" date="1644840000">- Fix multiple CVEs
- CVE-2022-23852 expat: integer overflow in function XML_GetBuffer
- CVE-2021-45960 expat: Large number of prefixed XML attributes on a single tag can crash libexpat
- CVE-2021-46143 expat: Integer overflow in doProlog in xmlparse.c
- CVE-2022-22827 Integer overflow in storeAtts in xmlparse.c
- CVE-2022-22826 Integer overflow in nextScaffoldPart in xmlparse.c
- CVE-2022-22825 Integer overflow in lookup in xmlparse.c
- CVE-2022-22824 Integer overflow in defineAttribute in xmlparse.c
- CVE-2022-22823 Integer overflow in build_model in xmlparse.c
- CVE-2022-22822 Integer overflow in addBinding in xmlparse.c
- Resolves: CVE-2022-23852
- Resolves: CVE-2021-45960
- Resolves: CVE-2021-46143
- Resolves: CVE-2022-22827
- Resolves: CVE-2022-22826
- Resolves: CVE-2022-22825
- Resolves: CVE-2022-22824
- Resolves: CVE-2022-22823
- Resolves: CVE-2022-22822</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.2.5-6" date="1646308800">- Fix multiple CVEs
- CVE-2022-25236 expat: namespace-separator characters in "xmlns[:prefix]" attribute values can lead to arbitrary code execution
- CVE-2022-25235 expat: malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution
- CVE-2022-25315 expat: integer overflow in storeRawNames()
- Resolves: CVE-2022-25236
- Resolves: CVE-2022-25235
- Resolves: CVE-2022-25315</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.2.5-7" date="1646395200">- Fix patch for CVE-2022-25235
- Resolves: CVE-2022-25235</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.2.5-8" date="1647259200">- Improve patch for CVE-2022-25236
- Related: CVE-2022-25236</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.2.5-9" date="1651838400">- Fix multiple CVEs
- Resolves: CVE-2022-25314
- Resolves: CVE-2022-25313</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.2.5-10" date="1664539200">- Ensure raw tagnames are safe exiting internalEntityParser
- Resolves: CVE-2022-40674</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.2.5-10.1" date="1668427200">- CVE-2022-43680 expat: use-after free caused by overeager destruction of a shared DTD in XML_ExternalEntityParserCreate
- Resolves: CVE-2022-43680</changelog>
</package>
<package pkgid="a3cf5a666953e890818b07876d980a28978a25cde91008ff96cba9f9f204d1e4" name="expat" arch="x86_64">
  <version epoch="0" ver="2.2.5" rel="10.el8_7.1"/>
  <changelog author="Igor Gnatenko &lt;ignatenkobrain@fedoraproject.org&gt; - 2.2.5-2" date="1517659200">- Switch to %ldconfig_scriptlets</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.2.5-3" date="1518004800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.2.5-4" date="1587729600">- add security fixes for CVE-2018-20843, CVE-2019-15903</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; -  2.2.5-5" date="1644840000">- Fix multiple CVEs
- CVE-2022-23852 expat: integer overflow in function XML_GetBuffer
- CVE-2021-45960 expat: Large number of prefixed XML attributes on a single tag can crash libexpat
- CVE-2021-46143 expat: Integer overflow in doProlog in xmlparse.c
- CVE-2022-22827 Integer overflow in storeAtts in xmlparse.c
- CVE-2022-22826 Integer overflow in nextScaffoldPart in xmlparse.c
- CVE-2022-22825 Integer overflow in lookup in xmlparse.c
- CVE-2022-22824 Integer overflow in defineAttribute in xmlparse.c
- CVE-2022-22823 Integer overflow in build_model in xmlparse.c
- CVE-2022-22822 Integer overflow in addBinding in xmlparse.c
- Resolves: CVE-2022-23852
- Resolves: CVE-2021-45960
- Resolves: CVE-2021-46143
- Resolves: CVE-2022-22827
- Resolves: CVE-2022-22826
- Resolves: CVE-2022-22825
- Resolves: CVE-2022-22824
- Resolves: CVE-2022-22823
- Resolves: CVE-2022-22822</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.2.5-6" date="1646308800">- Fix multiple CVEs
- CVE-2022-25236 expat: namespace-separator characters in "xmlns[:prefix]" attribute values can lead to arbitrary code execution
- CVE-2022-25235 expat: malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution
- CVE-2022-25315 expat: integer overflow in storeRawNames()
- Resolves: CVE-2022-25236
- Resolves: CVE-2022-25235
- Resolves: CVE-2022-25315</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.2.5-7" date="1646395200">- Fix patch for CVE-2022-25235
- Resolves: CVE-2022-25235</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.2.5-8" date="1647259200">- Improve patch for CVE-2022-25236
- Related: CVE-2022-25236</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.2.5-9" date="1651838400">- Fix multiple CVEs
- Resolves: CVE-2022-25314
- Resolves: CVE-2022-25313</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.2.5-10" date="1664539200">- Ensure raw tagnames are safe exiting internalEntityParser
- Resolves: CVE-2022-40674</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.2.5-10.1" date="1668427200">- CVE-2022-43680 expat: use-after free caused by overeager destruction of a shared DTD in XML_ExternalEntityParserCreate
- Resolves: CVE-2022-43680</changelog>
</package>
<package pkgid="82e5f68cbb1f57e054c46a91834261121fc22bd1550edeca118fb1e7c7341597" name="expat-devel" arch="i686">
  <version epoch="0" ver="2.2.5" rel="10.el8_7.1"/>
  <changelog author="Igor Gnatenko &lt;ignatenkobrain@fedoraproject.org&gt; - 2.2.5-2" date="1517659200">- Switch to %ldconfig_scriptlets</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.2.5-3" date="1518004800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.2.5-4" date="1587729600">- add security fixes for CVE-2018-20843, CVE-2019-15903</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; -  2.2.5-5" date="1644840000">- Fix multiple CVEs
- CVE-2022-23852 expat: integer overflow in function XML_GetBuffer
- CVE-2021-45960 expat: Large number of prefixed XML attributes on a single tag can crash libexpat
- CVE-2021-46143 expat: Integer overflow in doProlog in xmlparse.c
- CVE-2022-22827 Integer overflow in storeAtts in xmlparse.c
- CVE-2022-22826 Integer overflow in nextScaffoldPart in xmlparse.c
- CVE-2022-22825 Integer overflow in lookup in xmlparse.c
- CVE-2022-22824 Integer overflow in defineAttribute in xmlparse.c
- CVE-2022-22823 Integer overflow in build_model in xmlparse.c
- CVE-2022-22822 Integer overflow in addBinding in xmlparse.c
- Resolves: CVE-2022-23852
- Resolves: CVE-2021-45960
- Resolves: CVE-2021-46143
- Resolves: CVE-2022-22827
- Resolves: CVE-2022-22826
- Resolves: CVE-2022-22825
- Resolves: CVE-2022-22824
- Resolves: CVE-2022-22823
- Resolves: CVE-2022-22822</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.2.5-6" date="1646308800">- Fix multiple CVEs
- CVE-2022-25236 expat: namespace-separator characters in "xmlns[:prefix]" attribute values can lead to arbitrary code execution
- CVE-2022-25235 expat: malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution
- CVE-2022-25315 expat: integer overflow in storeRawNames()
- Resolves: CVE-2022-25236
- Resolves: CVE-2022-25235
- Resolves: CVE-2022-25315</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.2.5-7" date="1646395200">- Fix patch for CVE-2022-25235
- Resolves: CVE-2022-25235</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.2.5-8" date="1647259200">- Improve patch for CVE-2022-25236
- Related: CVE-2022-25236</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.2.5-9" date="1651838400">- Fix multiple CVEs
- Resolves: CVE-2022-25314
- Resolves: CVE-2022-25313</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.2.5-10" date="1664539200">- Ensure raw tagnames are safe exiting internalEntityParser
- Resolves: CVE-2022-40674</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.2.5-10.1" date="1668427200">- CVE-2022-43680 expat: use-after free caused by overeager destruction of a shared DTD in XML_ExternalEntityParserCreate
- Resolves: CVE-2022-43680</changelog>
</package>
<package pkgid="12b215f94a0d664f6b0ce21cbb7bd75f1bda643d24bdc8d2135d6a3e77238fea" name="expat-devel" arch="x86_64">
  <version epoch="0" ver="2.2.5" rel="10.el8_7.1"/>
  <changelog author="Igor Gnatenko &lt;ignatenkobrain@fedoraproject.org&gt; - 2.2.5-2" date="1517659200">- Switch to %ldconfig_scriptlets</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.2.5-3" date="1518004800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.2.5-4" date="1587729600">- add security fixes for CVE-2018-20843, CVE-2019-15903</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; -  2.2.5-5" date="1644840000">- Fix multiple CVEs
- CVE-2022-23852 expat: integer overflow in function XML_GetBuffer
- CVE-2021-45960 expat: Large number of prefixed XML attributes on a single tag can crash libexpat
- CVE-2021-46143 expat: Integer overflow in doProlog in xmlparse.c
- CVE-2022-22827 Integer overflow in storeAtts in xmlparse.c
- CVE-2022-22826 Integer overflow in nextScaffoldPart in xmlparse.c
- CVE-2022-22825 Integer overflow in lookup in xmlparse.c
- CVE-2022-22824 Integer overflow in defineAttribute in xmlparse.c
- CVE-2022-22823 Integer overflow in build_model in xmlparse.c
- CVE-2022-22822 Integer overflow in addBinding in xmlparse.c
- Resolves: CVE-2022-23852
- Resolves: CVE-2021-45960
- Resolves: CVE-2021-46143
- Resolves: CVE-2022-22827
- Resolves: CVE-2022-22826
- Resolves: CVE-2022-22825
- Resolves: CVE-2022-22824
- Resolves: CVE-2022-22823
- Resolves: CVE-2022-22822</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.2.5-6" date="1646308800">- Fix multiple CVEs
- CVE-2022-25236 expat: namespace-separator characters in "xmlns[:prefix]" attribute values can lead to arbitrary code execution
- CVE-2022-25235 expat: malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution
- CVE-2022-25315 expat: integer overflow in storeRawNames()
- Resolves: CVE-2022-25236
- Resolves: CVE-2022-25235
- Resolves: CVE-2022-25315</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.2.5-7" date="1646395200">- Fix patch for CVE-2022-25235
- Resolves: CVE-2022-25235</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.2.5-8" date="1647259200">- Improve patch for CVE-2022-25236
- Related: CVE-2022-25236</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.2.5-9" date="1651838400">- Fix multiple CVEs
- Resolves: CVE-2022-25314
- Resolves: CVE-2022-25313</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.2.5-10" date="1664539200">- Ensure raw tagnames are safe exiting internalEntityParser
- Resolves: CVE-2022-40674</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.2.5-10.1" date="1668427200">- CVE-2022-43680 expat: use-after free caused by overeager destruction of a shared DTD in XML_ExternalEntityParserCreate
- Resolves: CVE-2022-43680</changelog>
</package>
<package pkgid="cf5c6cad30e73099b74f67b7c7276b48642dab45f338c5f4f8176c1c7cd1e984" name="gnutls" arch="i686">
  <version epoch="0" ver="3.6.16" rel="6.el8_7"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.14-7" date="1604404800">- Increase DH key bits to &gt;= 2048 in self-tests (#1879506)
- Implement self-tests for KDF and CMAC (#1890870)
- Fix CVE-2020-24659: heap buffer-overflow when "no_renegotiation" alert is received (#1873959)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.14-8" date="1605096000">- Depend on specific NVR of gmp and nettle (#1812933)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.14-9" date="1606219200">- Revert the previous change</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.14-10" date="1617278400">- Port fixes for potential miscalculation in ecdsa_verify (#1942931)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-1" date="1621857600">- Update to upstream 3.6.16 release (#1956783)
- Fix potential use-after-free in key_share handling (#1927597)
- Fix potential use-after-free in pre_shared_key handling (#1927593)
- Stop gnutls-serv relying on AI_ADDRCONFIG to decide listening address (#1908334)
- Fix cert expiration issue in tests (#1908110)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-2" date="1622030400">- Filter certificate_types in TLS 1.2 CR based on signature algorithms (#1942216)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-3" date="1623067200">- Treat SHA-1 signed CA in the trusted set differently (#1965445)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-4" date="1624881600">- p11tool: Document ID reuse behavior when importing certs (#1776250)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-5" date="1661774400">- Fix double-free in gnutls_pkcs7_verify (#2109788)</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 3.6.16-6" date="1677153600">- Fix x86_64 CPU feature detection when AVX is not available (#2131152)
- Fix timing side-channel in TLS RSA key exchange (#2162598)</changelog>
</package>
<package pkgid="43b65ef57c8e3f3b763059de5fa566da094c7227d625f6ddb3406b36785c3a7e" name="gnutls" arch="x86_64">
  <version epoch="0" ver="3.6.16" rel="6.el8_7"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.14-7" date="1604404800">- Increase DH key bits to &gt;= 2048 in self-tests (#1879506)
- Implement self-tests for KDF and CMAC (#1890870)
- Fix CVE-2020-24659: heap buffer-overflow when "no_renegotiation" alert is received (#1873959)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.14-8" date="1605096000">- Depend on specific NVR of gmp and nettle (#1812933)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.14-9" date="1606219200">- Revert the previous change</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.14-10" date="1617278400">- Port fixes for potential miscalculation in ecdsa_verify (#1942931)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-1" date="1621857600">- Update to upstream 3.6.16 release (#1956783)
- Fix potential use-after-free in key_share handling (#1927597)
- Fix potential use-after-free in pre_shared_key handling (#1927593)
- Stop gnutls-serv relying on AI_ADDRCONFIG to decide listening address (#1908334)
- Fix cert expiration issue in tests (#1908110)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-2" date="1622030400">- Filter certificate_types in TLS 1.2 CR based on signature algorithms (#1942216)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-3" date="1623067200">- Treat SHA-1 signed CA in the trusted set differently (#1965445)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-4" date="1624881600">- p11tool: Document ID reuse behavior when importing certs (#1776250)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-5" date="1661774400">- Fix double-free in gnutls_pkcs7_verify (#2109788)</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 3.6.16-6" date="1677153600">- Fix x86_64 CPU feature detection when AVX is not available (#2131152)
- Fix timing side-channel in TLS RSA key exchange (#2162598)</changelog>
</package>
<package pkgid="6febaa5153e52fe4647d1e6c16effe36b73ce2c0484adafeab38b0af35fe6656" name="grub2-common" arch="noarch">
  <version epoch="1" ver="2.02" rel="142.el8_7.1"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-126" date="1651665600">- Fix rpm verification error on grub.cfg permissions
- Resolves: #2071643</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-127" date="1651665601">- ppc64le: CAS improvements, prefix detection, and vTPM support
- Resolves: #2076795
- Resolves: #2026568
- Resolves: #2051331</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-129" date="1652702400">- ppc64le: Slow boot after LPM
- Resolves: #2070347</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-137" date="1654257600">- CVE fixes for 2022-06-07
- CVE-2022-28736 CVE-2022-28735 CVE-2022-28734 CVE-2022-28733
- CVE-2021-3697 CVE-2021-3696 CVE-2021-3695
- Resolves: #2070687</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-138" date="1658318400">- Rotate signing keys on ppc64le
- Resolves: #2074762</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-139" date="1660824000">- Kernel allocator fixups (in one pass)
- Resolves: #2118896</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-140" date="1661342400">- Or two, because I forgot the debug patch
- Resolves: #2118896</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-141" date="1661428800">- Implement vec5 for cas negotiation
- Resolves: #2117914</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-142" date="1662638400">- Drop the arena size changes
- Resolves: #2118896</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-142.el8_7.1" date="1667908800">- Sync with 8.8 (actually 2.02-145)
- Resolves: CVE-2022-2601</changelog>
</package>
<package pkgid="aa8e884ba7fa792918e7b2fdd43d8087933a4f82bea3be97d1b5f69db9af44a4" name="grub2-common" arch="noarch">
  <version epoch="1" ver="2.02" rel="142.el8_7.3"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-129" date="1652702400">- ppc64le: Slow boot after LPM
- Resolves: #2070347</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-137" date="1654257600">- CVE fixes for 2022-06-07
- CVE-2022-28736 CVE-2022-28735 CVE-2022-28734 CVE-2022-28733
- CVE-2021-3697 CVE-2021-3696 CVE-2021-3695
- Resolves: #2070687</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-138" date="1658318400">- Rotate signing keys on ppc64le
- Resolves: #2074762</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-139" date="1660824000">- Kernel allocator fixups (in one pass)
- Resolves: #2118896</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-140" date="1661342400">- Or two, because I forgot the debug patch
- Resolves: #2118896</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-141" date="1661428800">- Implement vec5 for cas negotiation
- Resolves: #2117914</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-142" date="1662638400">- Drop the arena size changes
- Resolves: #2118896</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-142.el8_7.1" date="1667908800">- Sync with 8.8 (actually 2.02-145)
- Resolves: CVE-2022-2601</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-142.el8_7.2" date="1674129600">- Sync with 8.8 (actually 2.02-147)
- Resolves: #2162411</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-142.el8_7.3" date="1675684800">- Sync with 8.8 (actually 2.02-148)
- Resolves: #2139508</changelog>
</package>
<package pkgid="e5197b7967af8ba542180a862b7d5ec2de3a052a911208e71d86f9a68c8eeb50" name="grub2-efi-ia32" arch="x86_64">
  <version epoch="1" ver="2.02" rel="142.el8_7.1"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-126" date="1651665600">- Fix rpm verification error on grub.cfg permissions
- Resolves: #2071643</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-127" date="1651665601">- ppc64le: CAS improvements, prefix detection, and vTPM support
- Resolves: #2076795
- Resolves: #2026568
- Resolves: #2051331</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-129" date="1652702400">- ppc64le: Slow boot after LPM
- Resolves: #2070347</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-137" date="1654257600">- CVE fixes for 2022-06-07
- CVE-2022-28736 CVE-2022-28735 CVE-2022-28734 CVE-2022-28733
- CVE-2021-3697 CVE-2021-3696 CVE-2021-3695
- Resolves: #2070687</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-138" date="1658318400">- Rotate signing keys on ppc64le
- Resolves: #2074762</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-139" date="1660824000">- Kernel allocator fixups (in one pass)
- Resolves: #2118896</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-140" date="1661342400">- Or two, because I forgot the debug patch
- Resolves: #2118896</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-141" date="1661428800">- Implement vec5 for cas negotiation
- Resolves: #2117914</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-142" date="1662638400">- Drop the arena size changes
- Resolves: #2118896</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-142.el8_7.1" date="1667908800">- Sync with 8.8 (actually 2.02-145)
- Resolves: CVE-2022-2601</changelog>
</package>
<package pkgid="e3739d68d33fdacd247d4b4a1c31a83e797d6f5eb3b0b5a5c1f55a51fe43fbc3" name="grub2-efi-ia32" arch="x86_64">
  <version epoch="1" ver="2.02" rel="142.el8_7.3"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-129" date="1652702400">- ppc64le: Slow boot after LPM
- Resolves: #2070347</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-137" date="1654257600">- CVE fixes for 2022-06-07
- CVE-2022-28736 CVE-2022-28735 CVE-2022-28734 CVE-2022-28733
- CVE-2021-3697 CVE-2021-3696 CVE-2021-3695
- Resolves: #2070687</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-138" date="1658318400">- Rotate signing keys on ppc64le
- Resolves: #2074762</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-139" date="1660824000">- Kernel allocator fixups (in one pass)
- Resolves: #2118896</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-140" date="1661342400">- Or two, because I forgot the debug patch
- Resolves: #2118896</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-141" date="1661428800">- Implement vec5 for cas negotiation
- Resolves: #2117914</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-142" date="1662638400">- Drop the arena size changes
- Resolves: #2118896</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-142.el8_7.1" date="1667908800">- Sync with 8.8 (actually 2.02-145)
- Resolves: CVE-2022-2601</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-142.el8_7.2" date="1674129600">- Sync with 8.8 (actually 2.02-147)
- Resolves: #2162411</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-142.el8_7.3" date="1675684800">- Sync with 8.8 (actually 2.02-148)
- Resolves: #2139508</changelog>
</package>
<package pkgid="3a747b9c6588c9ad8a98799122a82f46e9b321034e204acc3fb3470c992efac1" name="grub2-efi-ia32-cdboot" arch="x86_64">
  <version epoch="1" ver="2.02" rel="142.el8_7.1"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-126" date="1651665600">- Fix rpm verification error on grub.cfg permissions
- Resolves: #2071643</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-127" date="1651665601">- ppc64le: CAS improvements, prefix detection, and vTPM support
- Resolves: #2076795
- Resolves: #2026568
- Resolves: #2051331</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-129" date="1652702400">- ppc64le: Slow boot after LPM
- Resolves: #2070347</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-137" date="1654257600">- CVE fixes for 2022-06-07
- CVE-2022-28736 CVE-2022-28735 CVE-2022-28734 CVE-2022-28733
- CVE-2021-3697 CVE-2021-3696 CVE-2021-3695
- Resolves: #2070687</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-138" date="1658318400">- Rotate signing keys on ppc64le
- Resolves: #2074762</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-139" date="1660824000">- Kernel allocator fixups (in one pass)
- Resolves: #2118896</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-140" date="1661342400">- Or two, because I forgot the debug patch
- Resolves: #2118896</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-141" date="1661428800">- Implement vec5 for cas negotiation
- Resolves: #2117914</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-142" date="1662638400">- Drop the arena size changes
- Resolves: #2118896</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-142.el8_7.1" date="1667908800">- Sync with 8.8 (actually 2.02-145)
- Resolves: CVE-2022-2601</changelog>
</package>
<package pkgid="893d63d16d16a6ab752a4ddb46c3beb4abc7b0737b9077c3def868f7a1b7426c" name="grub2-efi-ia32-cdboot" arch="x86_64">
  <version epoch="1" ver="2.02" rel="142.el8_7.3"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-129" date="1652702400">- ppc64le: Slow boot after LPM
- Resolves: #2070347</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-137" date="1654257600">- CVE fixes for 2022-06-07
- CVE-2022-28736 CVE-2022-28735 CVE-2022-28734 CVE-2022-28733
- CVE-2021-3697 CVE-2021-3696 CVE-2021-3695
- Resolves: #2070687</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-138" date="1658318400">- Rotate signing keys on ppc64le
- Resolves: #2074762</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-139" date="1660824000">- Kernel allocator fixups (in one pass)
- Resolves: #2118896</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-140" date="1661342400">- Or two, because I forgot the debug patch
- Resolves: #2118896</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-141" date="1661428800">- Implement vec5 for cas negotiation
- Resolves: #2117914</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-142" date="1662638400">- Drop the arena size changes
- Resolves: #2118896</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-142.el8_7.1" date="1667908800">- Sync with 8.8 (actually 2.02-145)
- Resolves: CVE-2022-2601</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-142.el8_7.2" date="1674129600">- Sync with 8.8 (actually 2.02-147)
- Resolves: #2162411</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-142.el8_7.3" date="1675684800">- Sync with 8.8 (actually 2.02-148)
- Resolves: #2139508</changelog>
</package>
<package pkgid="0eb27b7565f39483427cd127de6358f3a6b1f7cdae4f747c90beeb2e47251924" name="grub2-efi-ia32-modules" arch="noarch">
  <version epoch="1" ver="2.02" rel="142.el8_7.1"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-126" date="1651665600">- Fix rpm verification error on grub.cfg permissions
- Resolves: #2071643</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-127" date="1651665601">- ppc64le: CAS improvements, prefix detection, and vTPM support
- Resolves: #2076795
- Resolves: #2026568
- Resolves: #2051331</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-129" date="1652702400">- ppc64le: Slow boot after LPM
- Resolves: #2070347</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-137" date="1654257600">- CVE fixes for 2022-06-07
- CVE-2022-28736 CVE-2022-28735 CVE-2022-28734 CVE-2022-28733
- CVE-2021-3697 CVE-2021-3696 CVE-2021-3695
- Resolves: #2070687</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-138" date="1658318400">- Rotate signing keys on ppc64le
- Resolves: #2074762</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-139" date="1660824000">- Kernel allocator fixups (in one pass)
- Resolves: #2118896</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-140" date="1661342400">- Or two, because I forgot the debug patch
- Resolves: #2118896</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-141" date="1661428800">- Implement vec5 for cas negotiation
- Resolves: #2117914</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-142" date="1662638400">- Drop the arena size changes
- Resolves: #2118896</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-142.el8_7.1" date="1667908800">- Sync with 8.8 (actually 2.02-145)
- Resolves: CVE-2022-2601</changelog>
</package>
<package pkgid="f6819677a247e760ba551792216019f15a06a243f6acf6d8db91042d9c13557f" name="grub2-efi-ia32-modules" arch="noarch">
  <version epoch="1" ver="2.02" rel="142.el8_7.3"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-129" date="1652702400">- ppc64le: Slow boot after LPM
- Resolves: #2070347</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-137" date="1654257600">- CVE fixes for 2022-06-07
- CVE-2022-28736 CVE-2022-28735 CVE-2022-28734 CVE-2022-28733
- CVE-2021-3697 CVE-2021-3696 CVE-2021-3695
- Resolves: #2070687</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-138" date="1658318400">- Rotate signing keys on ppc64le
- Resolves: #2074762</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-139" date="1660824000">- Kernel allocator fixups (in one pass)
- Resolves: #2118896</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-140" date="1661342400">- Or two, because I forgot the debug patch
- Resolves: #2118896</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-141" date="1661428800">- Implement vec5 for cas negotiation
- Resolves: #2117914</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-142" date="1662638400">- Drop the arena size changes
- Resolves: #2118896</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-142.el8_7.1" date="1667908800">- Sync with 8.8 (actually 2.02-145)
- Resolves: CVE-2022-2601</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-142.el8_7.2" date="1674129600">- Sync with 8.8 (actually 2.02-147)
- Resolves: #2162411</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-142.el8_7.3" date="1675684800">- Sync with 8.8 (actually 2.02-148)
- Resolves: #2139508</changelog>
</package>
<package pkgid="eea6d4bdf8de9b78e8de5d0b43c4b345d0ef71dae6ad512ddf8bfb392595cc30" name="grub2-efi-x64" arch="x86_64">
  <version epoch="1" ver="2.02" rel="142.el8_7.1"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-126" date="1651665600">- Fix rpm verification error on grub.cfg permissions
- Resolves: #2071643</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-127" date="1651665601">- ppc64le: CAS improvements, prefix detection, and vTPM support
- Resolves: #2076795
- Resolves: #2026568
- Resolves: #2051331</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-129" date="1652702400">- ppc64le: Slow boot after LPM
- Resolves: #2070347</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-137" date="1654257600">- CVE fixes for 2022-06-07
- CVE-2022-28736 CVE-2022-28735 CVE-2022-28734 CVE-2022-28733
- CVE-2021-3697 CVE-2021-3696 CVE-2021-3695
- Resolves: #2070687</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-138" date="1658318400">- Rotate signing keys on ppc64le
- Resolves: #2074762</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-139" date="1660824000">- Kernel allocator fixups (in one pass)
- Resolves: #2118896</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-140" date="1661342400">- Or two, because I forgot the debug patch
- Resolves: #2118896</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-141" date="1661428800">- Implement vec5 for cas negotiation
- Resolves: #2117914</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-142" date="1662638400">- Drop the arena size changes
- Resolves: #2118896</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-142.el8_7.1" date="1667908800">- Sync with 8.8 (actually 2.02-145)
- Resolves: CVE-2022-2601</changelog>
</package>
<package pkgid="5bc6791df59f68dbf6e0883cbf60c97bac9b7f4e23d39e469e37d75b8cb8c035" name="grub2-efi-x64" arch="x86_64">
  <version epoch="1" ver="2.02" rel="142.el8_7.3"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-129" date="1652702400">- ppc64le: Slow boot after LPM
- Resolves: #2070347</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-137" date="1654257600">- CVE fixes for 2022-06-07
- CVE-2022-28736 CVE-2022-28735 CVE-2022-28734 CVE-2022-28733
- CVE-2021-3697 CVE-2021-3696 CVE-2021-3695
- Resolves: #2070687</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-138" date="1658318400">- Rotate signing keys on ppc64le
- Resolves: #2074762</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-139" date="1660824000">- Kernel allocator fixups (in one pass)
- Resolves: #2118896</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-140" date="1661342400">- Or two, because I forgot the debug patch
- Resolves: #2118896</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-141" date="1661428800">- Implement vec5 for cas negotiation
- Resolves: #2117914</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-142" date="1662638400">- Drop the arena size changes
- Resolves: #2118896</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-142.el8_7.1" date="1667908800">- Sync with 8.8 (actually 2.02-145)
- Resolves: CVE-2022-2601</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-142.el8_7.2" date="1674129600">- Sync with 8.8 (actually 2.02-147)
- Resolves: #2162411</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-142.el8_7.3" date="1675684800">- Sync with 8.8 (actually 2.02-148)
- Resolves: #2139508</changelog>
</package>
<package pkgid="08f734130cc031aa10ce0758a63fa85b3265642b694744b868934eb6905858f2" name="grub2-efi-x64-cdboot" arch="x86_64">
  <version epoch="1" ver="2.02" rel="142.el8_7.1"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-126" date="1651665600">- Fix rpm verification error on grub.cfg permissions
- Resolves: #2071643</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-127" date="1651665601">- ppc64le: CAS improvements, prefix detection, and vTPM support
- Resolves: #2076795
- Resolves: #2026568
- Resolves: #2051331</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-129" date="1652702400">- ppc64le: Slow boot after LPM
- Resolves: #2070347</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-137" date="1654257600">- CVE fixes for 2022-06-07
- CVE-2022-28736 CVE-2022-28735 CVE-2022-28734 CVE-2022-28733
- CVE-2021-3697 CVE-2021-3696 CVE-2021-3695
- Resolves: #2070687</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-138" date="1658318400">- Rotate signing keys on ppc64le
- Resolves: #2074762</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-139" date="1660824000">- Kernel allocator fixups (in one pass)
- Resolves: #2118896</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-140" date="1661342400">- Or two, because I forgot the debug patch
- Resolves: #2118896</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-141" date="1661428800">- Implement vec5 for cas negotiation
- Resolves: #2117914</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-142" date="1662638400">- Drop the arena size changes
- Resolves: #2118896</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-142.el8_7.1" date="1667908800">- Sync with 8.8 (actually 2.02-145)
- Resolves: CVE-2022-2601</changelog>
</package>
<package pkgid="3d34308eb0e601cc8020a08ca09b21b7dc5cadb78882230a6ec2f70cf4ed6ed2" name="grub2-efi-x64-cdboot" arch="x86_64">
  <version epoch="1" ver="2.02" rel="142.el8_7.3"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-129" date="1652702400">- ppc64le: Slow boot after LPM
- Resolves: #2070347</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-137" date="1654257600">- CVE fixes for 2022-06-07
- CVE-2022-28736 CVE-2022-28735 CVE-2022-28734 CVE-2022-28733
- CVE-2021-3697 CVE-2021-3696 CVE-2021-3695
- Resolves: #2070687</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-138" date="1658318400">- Rotate signing keys on ppc64le
- Resolves: #2074762</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-139" date="1660824000">- Kernel allocator fixups (in one pass)
- Resolves: #2118896</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-140" date="1661342400">- Or two, because I forgot the debug patch
- Resolves: #2118896</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-141" date="1661428800">- Implement vec5 for cas negotiation
- Resolves: #2117914</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-142" date="1662638400">- Drop the arena size changes
- Resolves: #2118896</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-142.el8_7.1" date="1667908800">- Sync with 8.8 (actually 2.02-145)
- Resolves: CVE-2022-2601</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-142.el8_7.2" date="1674129600">- Sync with 8.8 (actually 2.02-147)
- Resolves: #2162411</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-142.el8_7.3" date="1675684800">- Sync with 8.8 (actually 2.02-148)
- Resolves: #2139508</changelog>
</package>
<package pkgid="9231db4af7f4682ca68527b7adef250c3834ad757361aae4f590046ea66dcd7d" name="grub2-efi-x64-modules" arch="noarch">
  <version epoch="1" ver="2.02" rel="142.el8_7.1"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-126" date="1651665600">- Fix rpm verification error on grub.cfg permissions
- Resolves: #2071643</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-127" date="1651665601">- ppc64le: CAS improvements, prefix detection, and vTPM support
- Resolves: #2076795
- Resolves: #2026568
- Resolves: #2051331</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-129" date="1652702400">- ppc64le: Slow boot after LPM
- Resolves: #2070347</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-137" date="1654257600">- CVE fixes for 2022-06-07
- CVE-2022-28736 CVE-2022-28735 CVE-2022-28734 CVE-2022-28733
- CVE-2021-3697 CVE-2021-3696 CVE-2021-3695
- Resolves: #2070687</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-138" date="1658318400">- Rotate signing keys on ppc64le
- Resolves: #2074762</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-139" date="1660824000">- Kernel allocator fixups (in one pass)
- Resolves: #2118896</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-140" date="1661342400">- Or two, because I forgot the debug patch
- Resolves: #2118896</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-141" date="1661428800">- Implement vec5 for cas negotiation
- Resolves: #2117914</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-142" date="1662638400">- Drop the arena size changes
- Resolves: #2118896</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-142.el8_7.1" date="1667908800">- Sync with 8.8 (actually 2.02-145)
- Resolves: CVE-2022-2601</changelog>
</package>
<package pkgid="c7e322b3f30942222263def15bafb7884b37a37d59b1da3862ed7bced6fe003d" name="grub2-efi-x64-modules" arch="noarch">
  <version epoch="1" ver="2.02" rel="142.el8_7.3"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-129" date="1652702400">- ppc64le: Slow boot after LPM
- Resolves: #2070347</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-137" date="1654257600">- CVE fixes for 2022-06-07
- CVE-2022-28736 CVE-2022-28735 CVE-2022-28734 CVE-2022-28733
- CVE-2021-3697 CVE-2021-3696 CVE-2021-3695
- Resolves: #2070687</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-138" date="1658318400">- Rotate signing keys on ppc64le
- Resolves: #2074762</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-139" date="1660824000">- Kernel allocator fixups (in one pass)
- Resolves: #2118896</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-140" date="1661342400">- Or two, because I forgot the debug patch
- Resolves: #2118896</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-141" date="1661428800">- Implement vec5 for cas negotiation
- Resolves: #2117914</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-142" date="1662638400">- Drop the arena size changes
- Resolves: #2118896</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-142.el8_7.1" date="1667908800">- Sync with 8.8 (actually 2.02-145)
- Resolves: CVE-2022-2601</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-142.el8_7.2" date="1674129600">- Sync with 8.8 (actually 2.02-147)
- Resolves: #2162411</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-142.el8_7.3" date="1675684800">- Sync with 8.8 (actually 2.02-148)
- Resolves: #2139508</changelog>
</package>
<package pkgid="e6836f81ccd3acbc922f7c9f6a2ceeeba94f4276c3713573938765ba31ebd9c3" name="grub2-pc" arch="x86_64">
  <version epoch="1" ver="2.02" rel="142.el8_7.1"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-126" date="1651665600">- Fix rpm verification error on grub.cfg permissions
- Resolves: #2071643</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-127" date="1651665601">- ppc64le: CAS improvements, prefix detection, and vTPM support
- Resolves: #2076795
- Resolves: #2026568
- Resolves: #2051331</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-129" date="1652702400">- ppc64le: Slow boot after LPM
- Resolves: #2070347</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-137" date="1654257600">- CVE fixes for 2022-06-07
- CVE-2022-28736 CVE-2022-28735 CVE-2022-28734 CVE-2022-28733
- CVE-2021-3697 CVE-2021-3696 CVE-2021-3695
- Resolves: #2070687</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-138" date="1658318400">- Rotate signing keys on ppc64le
- Resolves: #2074762</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-139" date="1660824000">- Kernel allocator fixups (in one pass)
- Resolves: #2118896</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-140" date="1661342400">- Or two, because I forgot the debug patch
- Resolves: #2118896</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-141" date="1661428800">- Implement vec5 for cas negotiation
- Resolves: #2117914</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-142" date="1662638400">- Drop the arena size changes
- Resolves: #2118896</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-142.el8_7.1" date="1667908800">- Sync with 8.8 (actually 2.02-145)
- Resolves: CVE-2022-2601</changelog>
</package>
<package pkgid="f2b09ca033878ffd5df0b50723da809d153a49c8c620541489c648c06d49c86b" name="grub2-pc" arch="x86_64">
  <version epoch="1" ver="2.02" rel="142.el8_7.3"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-129" date="1652702400">- ppc64le: Slow boot after LPM
- Resolves: #2070347</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-137" date="1654257600">- CVE fixes for 2022-06-07
- CVE-2022-28736 CVE-2022-28735 CVE-2022-28734 CVE-2022-28733
- CVE-2021-3697 CVE-2021-3696 CVE-2021-3695
- Resolves: #2070687</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-138" date="1658318400">- Rotate signing keys on ppc64le
- Resolves: #2074762</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-139" date="1660824000">- Kernel allocator fixups (in one pass)
- Resolves: #2118896</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-140" date="1661342400">- Or two, because I forgot the debug patch
- Resolves: #2118896</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-141" date="1661428800">- Implement vec5 for cas negotiation
- Resolves: #2117914</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-142" date="1662638400">- Drop the arena size changes
- Resolves: #2118896</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-142.el8_7.1" date="1667908800">- Sync with 8.8 (actually 2.02-145)
- Resolves: CVE-2022-2601</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-142.el8_7.2" date="1674129600">- Sync with 8.8 (actually 2.02-147)
- Resolves: #2162411</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-142.el8_7.3" date="1675684800">- Sync with 8.8 (actually 2.02-148)
- Resolves: #2139508</changelog>
</package>
<package pkgid="51a797ce4742e3ac06bd8d30c0a5caad9ddb87566f8e733b5ea5503b0e990944" name="grub2-pc-modules" arch="noarch">
  <version epoch="1" ver="2.02" rel="142.el8_7.1"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-126" date="1651665600">- Fix rpm verification error on grub.cfg permissions
- Resolves: #2071643</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-127" date="1651665601">- ppc64le: CAS improvements, prefix detection, and vTPM support
- Resolves: #2076795
- Resolves: #2026568
- Resolves: #2051331</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-129" date="1652702400">- ppc64le: Slow boot after LPM
- Resolves: #2070347</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-137" date="1654257600">- CVE fixes for 2022-06-07
- CVE-2022-28736 CVE-2022-28735 CVE-2022-28734 CVE-2022-28733
- CVE-2021-3697 CVE-2021-3696 CVE-2021-3695
- Resolves: #2070687</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-138" date="1658318400">- Rotate signing keys on ppc64le
- Resolves: #2074762</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-139" date="1660824000">- Kernel allocator fixups (in one pass)
- Resolves: #2118896</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-140" date="1661342400">- Or two, because I forgot the debug patch
- Resolves: #2118896</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-141" date="1661428800">- Implement vec5 for cas negotiation
- Resolves: #2117914</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-142" date="1662638400">- Drop the arena size changes
- Resolves: #2118896</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-142.el8_7.1" date="1667908800">- Sync with 8.8 (actually 2.02-145)
- Resolves: CVE-2022-2601</changelog>
</package>
<package pkgid="cdbe80530dc4a6d3d585e1cfc85c6cc5a5873809cb172fda6bf842d36ea14147" name="grub2-pc-modules" arch="noarch">
  <version epoch="1" ver="2.02" rel="142.el8_7.3"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-129" date="1652702400">- ppc64le: Slow boot after LPM
- Resolves: #2070347</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-137" date="1654257600">- CVE fixes for 2022-06-07
- CVE-2022-28736 CVE-2022-28735 CVE-2022-28734 CVE-2022-28733
- CVE-2021-3697 CVE-2021-3696 CVE-2021-3695
- Resolves: #2070687</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-138" date="1658318400">- Rotate signing keys on ppc64le
- Resolves: #2074762</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-139" date="1660824000">- Kernel allocator fixups (in one pass)
- Resolves: #2118896</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-140" date="1661342400">- Or two, because I forgot the debug patch
- Resolves: #2118896</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-141" date="1661428800">- Implement vec5 for cas negotiation
- Resolves: #2117914</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-142" date="1662638400">- Drop the arena size changes
- Resolves: #2118896</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-142.el8_7.1" date="1667908800">- Sync with 8.8 (actually 2.02-145)
- Resolves: CVE-2022-2601</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-142.el8_7.2" date="1674129600">- Sync with 8.8 (actually 2.02-147)
- Resolves: #2162411</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-142.el8_7.3" date="1675684800">- Sync with 8.8 (actually 2.02-148)
- Resolves: #2139508</changelog>
</package>
<package pkgid="255d459b0f193280e4a7229d8f37ec32d0086a18b2b27d4a782aa98cb992e79b" name="grub2-tools" arch="x86_64">
  <version epoch="1" ver="2.02" rel="142.el8_7.1"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-126" date="1651665600">- Fix rpm verification error on grub.cfg permissions
- Resolves: #2071643</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-127" date="1651665601">- ppc64le: CAS improvements, prefix detection, and vTPM support
- Resolves: #2076795
- Resolves: #2026568
- Resolves: #2051331</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-129" date="1652702400">- ppc64le: Slow boot after LPM
- Resolves: #2070347</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-137" date="1654257600">- CVE fixes for 2022-06-07
- CVE-2022-28736 CVE-2022-28735 CVE-2022-28734 CVE-2022-28733
- CVE-2021-3697 CVE-2021-3696 CVE-2021-3695
- Resolves: #2070687</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-138" date="1658318400">- Rotate signing keys on ppc64le
- Resolves: #2074762</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-139" date="1660824000">- Kernel allocator fixups (in one pass)
- Resolves: #2118896</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-140" date="1661342400">- Or two, because I forgot the debug patch
- Resolves: #2118896</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-141" date="1661428800">- Implement vec5 for cas negotiation
- Resolves: #2117914</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-142" date="1662638400">- Drop the arena size changes
- Resolves: #2118896</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-142.el8_7.1" date="1667908800">- Sync with 8.8 (actually 2.02-145)
- Resolves: CVE-2022-2601</changelog>
</package>
<package pkgid="ed9a8760a20fac408e48a542d1a4488ce7afb2680ffef97dd9bf9e84c1ea2b6f" name="grub2-tools" arch="x86_64">
  <version epoch="1" ver="2.02" rel="142.el8_7.3"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-129" date="1652702400">- ppc64le: Slow boot after LPM
- Resolves: #2070347</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-137" date="1654257600">- CVE fixes for 2022-06-07
- CVE-2022-28736 CVE-2022-28735 CVE-2022-28734 CVE-2022-28733
- CVE-2021-3697 CVE-2021-3696 CVE-2021-3695
- Resolves: #2070687</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-138" date="1658318400">- Rotate signing keys on ppc64le
- Resolves: #2074762</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-139" date="1660824000">- Kernel allocator fixups (in one pass)
- Resolves: #2118896</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-140" date="1661342400">- Or two, because I forgot the debug patch
- Resolves: #2118896</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-141" date="1661428800">- Implement vec5 for cas negotiation
- Resolves: #2117914</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-142" date="1662638400">- Drop the arena size changes
- Resolves: #2118896</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-142.el8_7.1" date="1667908800">- Sync with 8.8 (actually 2.02-145)
- Resolves: CVE-2022-2601</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-142.el8_7.2" date="1674129600">- Sync with 8.8 (actually 2.02-147)
- Resolves: #2162411</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-142.el8_7.3" date="1675684800">- Sync with 8.8 (actually 2.02-148)
- Resolves: #2139508</changelog>
</package>
<package pkgid="e8b18cd0e0bb980b2668cf0520afe9e5ddac993a90eda49c3467a91b8c4ece47" name="grub2-tools-efi" arch="x86_64">
  <version epoch="1" ver="2.02" rel="142.el8_7.1"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-126" date="1651665600">- Fix rpm verification error on grub.cfg permissions
- Resolves: #2071643</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-127" date="1651665601">- ppc64le: CAS improvements, prefix detection, and vTPM support
- Resolves: #2076795
- Resolves: #2026568
- Resolves: #2051331</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-129" date="1652702400">- ppc64le: Slow boot after LPM
- Resolves: #2070347</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-137" date="1654257600">- CVE fixes for 2022-06-07
- CVE-2022-28736 CVE-2022-28735 CVE-2022-28734 CVE-2022-28733
- CVE-2021-3697 CVE-2021-3696 CVE-2021-3695
- Resolves: #2070687</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-138" date="1658318400">- Rotate signing keys on ppc64le
- Resolves: #2074762</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-139" date="1660824000">- Kernel allocator fixups (in one pass)
- Resolves: #2118896</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-140" date="1661342400">- Or two, because I forgot the debug patch
- Resolves: #2118896</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-141" date="1661428800">- Implement vec5 for cas negotiation
- Resolves: #2117914</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-142" date="1662638400">- Drop the arena size changes
- Resolves: #2118896</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-142.el8_7.1" date="1667908800">- Sync with 8.8 (actually 2.02-145)
- Resolves: CVE-2022-2601</changelog>
</package>
<package pkgid="c12b4d331593f7b958b076dd334147220514f5c50bd8b61a6f3c117594ac6408" name="grub2-tools-efi" arch="x86_64">
  <version epoch="1" ver="2.02" rel="142.el8_7.3"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-129" date="1652702400">- ppc64le: Slow boot after LPM
- Resolves: #2070347</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-137" date="1654257600">- CVE fixes for 2022-06-07
- CVE-2022-28736 CVE-2022-28735 CVE-2022-28734 CVE-2022-28733
- CVE-2021-3697 CVE-2021-3696 CVE-2021-3695
- Resolves: #2070687</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-138" date="1658318400">- Rotate signing keys on ppc64le
- Resolves: #2074762</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-139" date="1660824000">- Kernel allocator fixups (in one pass)
- Resolves: #2118896</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-140" date="1661342400">- Or two, because I forgot the debug patch
- Resolves: #2118896</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-141" date="1661428800">- Implement vec5 for cas negotiation
- Resolves: #2117914</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-142" date="1662638400">- Drop the arena size changes
- Resolves: #2118896</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-142.el8_7.1" date="1667908800">- Sync with 8.8 (actually 2.02-145)
- Resolves: CVE-2022-2601</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-142.el8_7.2" date="1674129600">- Sync with 8.8 (actually 2.02-147)
- Resolves: #2162411</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-142.el8_7.3" date="1675684800">- Sync with 8.8 (actually 2.02-148)
- Resolves: #2139508</changelog>
</package>
<package pkgid="48e87630f19cf1afe578928308a3eedc9f06c8a866d8cf9c41c11f0644c22143" name="grub2-tools-extra" arch="x86_64">
  <version epoch="1" ver="2.02" rel="142.el8_7.1"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-126" date="1651665600">- Fix rpm verification error on grub.cfg permissions
- Resolves: #2071643</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-127" date="1651665601">- ppc64le: CAS improvements, prefix detection, and vTPM support
- Resolves: #2076795
- Resolves: #2026568
- Resolves: #2051331</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-129" date="1652702400">- ppc64le: Slow boot after LPM
- Resolves: #2070347</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-137" date="1654257600">- CVE fixes for 2022-06-07
- CVE-2022-28736 CVE-2022-28735 CVE-2022-28734 CVE-2022-28733
- CVE-2021-3697 CVE-2021-3696 CVE-2021-3695
- Resolves: #2070687</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-138" date="1658318400">- Rotate signing keys on ppc64le
- Resolves: #2074762</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-139" date="1660824000">- Kernel allocator fixups (in one pass)
- Resolves: #2118896</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-140" date="1661342400">- Or two, because I forgot the debug patch
- Resolves: #2118896</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-141" date="1661428800">- Implement vec5 for cas negotiation
- Resolves: #2117914</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-142" date="1662638400">- Drop the arena size changes
- Resolves: #2118896</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-142.el8_7.1" date="1667908800">- Sync with 8.8 (actually 2.02-145)
- Resolves: CVE-2022-2601</changelog>
</package>
<package pkgid="7693763341a4f5c7bc54ac71cc9d9b69dc2362b58dbc1c1bb782fbc5ecb17270" name="grub2-tools-extra" arch="x86_64">
  <version epoch="1" ver="2.02" rel="142.el8_7.3"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-129" date="1652702400">- ppc64le: Slow boot after LPM
- Resolves: #2070347</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-137" date="1654257600">- CVE fixes for 2022-06-07
- CVE-2022-28736 CVE-2022-28735 CVE-2022-28734 CVE-2022-28733
- CVE-2021-3697 CVE-2021-3696 CVE-2021-3695
- Resolves: #2070687</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-138" date="1658318400">- Rotate signing keys on ppc64le
- Resolves: #2074762</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-139" date="1660824000">- Kernel allocator fixups (in one pass)
- Resolves: #2118896</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-140" date="1661342400">- Or two, because I forgot the debug patch
- Resolves: #2118896</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-141" date="1661428800">- Implement vec5 for cas negotiation
- Resolves: #2117914</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-142" date="1662638400">- Drop the arena size changes
- Resolves: #2118896</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-142.el8_7.1" date="1667908800">- Sync with 8.8 (actually 2.02-145)
- Resolves: CVE-2022-2601</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-142.el8_7.2" date="1674129600">- Sync with 8.8 (actually 2.02-147)
- Resolves: #2162411</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-142.el8_7.3" date="1675684800">- Sync with 8.8 (actually 2.02-148)
- Resolves: #2139508</changelog>
</package>
<package pkgid="f908b71bd702a5e263ed5a4bf1add652fdbcb303e1056ec6b86b554847436ee6" name="grub2-tools-minimal" arch="x86_64">
  <version epoch="1" ver="2.02" rel="142.el8_7.1"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-126" date="1651665600">- Fix rpm verification error on grub.cfg permissions
- Resolves: #2071643</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-127" date="1651665601">- ppc64le: CAS improvements, prefix detection, and vTPM support
- Resolves: #2076795
- Resolves: #2026568
- Resolves: #2051331</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-129" date="1652702400">- ppc64le: Slow boot after LPM
- Resolves: #2070347</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-137" date="1654257600">- CVE fixes for 2022-06-07
- CVE-2022-28736 CVE-2022-28735 CVE-2022-28734 CVE-2022-28733
- CVE-2021-3697 CVE-2021-3696 CVE-2021-3695
- Resolves: #2070687</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-138" date="1658318400">- Rotate signing keys on ppc64le
- Resolves: #2074762</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-139" date="1660824000">- Kernel allocator fixups (in one pass)
- Resolves: #2118896</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-140" date="1661342400">- Or two, because I forgot the debug patch
- Resolves: #2118896</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-141" date="1661428800">- Implement vec5 for cas negotiation
- Resolves: #2117914</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-142" date="1662638400">- Drop the arena size changes
- Resolves: #2118896</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-142.el8_7.1" date="1667908800">- Sync with 8.8 (actually 2.02-145)
- Resolves: CVE-2022-2601</changelog>
</package>
<package pkgid="c8f945b9ba854c8f7eb9e6860708366d6d440cd2bcdb864204df6adead91f1ba" name="grub2-tools-minimal" arch="x86_64">
  <version epoch="1" ver="2.02" rel="142.el8_7.3"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-129" date="1652702400">- ppc64le: Slow boot after LPM
- Resolves: #2070347</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-137" date="1654257600">- CVE fixes for 2022-06-07
- CVE-2022-28736 CVE-2022-28735 CVE-2022-28734 CVE-2022-28733
- CVE-2021-3697 CVE-2021-3696 CVE-2021-3695
- Resolves: #2070687</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-138" date="1658318400">- Rotate signing keys on ppc64le
- Resolves: #2074762</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-139" date="1660824000">- Kernel allocator fixups (in one pass)
- Resolves: #2118896</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-140" date="1661342400">- Or two, because I forgot the debug patch
- Resolves: #2118896</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-141" date="1661428800">- Implement vec5 for cas negotiation
- Resolves: #2117914</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-142" date="1662638400">- Drop the arena size changes
- Resolves: #2118896</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-142.el8_7.1" date="1667908800">- Sync with 8.8 (actually 2.02-145)
- Resolves: CVE-2022-2601</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-142.el8_7.2" date="1674129600">- Sync with 8.8 (actually 2.02-147)
- Resolves: #2162411</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-142.el8_7.3" date="1675684800">- Sync with 8.8 (actually 2.02-148)
- Resolves: #2139508</changelog>
</package>
<package pkgid="8192a43cea653cac6e2e180cc752d15f71b0e6b6cf9084e07fe1d0cf03eb420e" name="iptables" arch="i686">
  <version epoch="0" ver="1.8.4" rel="23.el8_7.1"/>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.8.4-15" date="1597492800">- Ignore sysctl files not suffixed '.conf'</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.8.4-16" date="1603886400">- tests/shell: Add test for bitwise avoidance fixes
- ebtables: Optimize masked MAC address matches
- nft: Optimize class-based IP prefix matches
- nft: Fix for broken address mask match detection
- nft: cache: Make nft_rebuild_cache() respect fake cache
- tests: shell: Improve concurrent noflush restore test a bit
- nft: Fix for concurrent noflush restore calls
- nft: Fix error reporting for refreshed transactions
- nft: Make batch_add_chain() return the added batch object</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.8.4-17" date="1607601600">- extensions: dccp: Fix for DCCP type 'INVALID'
- tests: shell: Merge and extend return codes test
- nft: Fix command name in ip6tables error message
- extensions: libxt_CT: add translation for NOTRACK
- extensions: libipt_icmp: Fix translation of type 'any'
- tests/shell: Test for fixed extension registration
- libxtables: Register multiple extensions in ascending order
- libxtables: Simplify pending extension registration
- libxtables: Make sure extensions register in revision order</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.8.4-18" date="1621857600">- xtables-translate: Fix translation of odd netmasks
- nft: Fix bitwise expression avoidance detection
- xtables-monitor: 'LL=0x304' is not very convenient, print LOOPBACK instead.
- xtables-monitor: print packet first
- xtables-monitor: fix packet family protocol
- xtables-monitor: fix rule printing
- xtables-monitor: Fix ip6tables rule printing</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.8.4-19" date="1624017600">- Fix for rpminspect results</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.8.4-20" date="1628078400">- extensions: SECMARK: Use a better context in test case
- extensions: sctp: Translate --chunk-types option
- extensions: sctp: Fix nftables translation
- extensions: SECMARK: Implement revision 1
- nft: cache: Retry if kernel returns EINTR</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.8.4-21" date="1633608000">- extensions: hashlimit: Fix tests with HZ=100
- ebtables: Dump atomic waste
- doc: ebtables-nft.8: Adjust for missing atomic-options</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.8.4-22" date="1638187200">- extensions: hashlimit: Fix tests with HZ=1000</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.8.4-23" date="1656676800">- libxtables: Fix unsupported extension warning corner case
- tests: shell: Check overhead in iptables-save and -restore
- nft: Fix EPERM handling for extensions without rev 0
- Improve error messages for unsupported extensions
- xshared: Fix response to unprivileged users
- libxtables: Register only the highest revision extension
- Use proto_to_name() from xshared in more places
- libxtables: Boost rule target checks by announcing chain names
- libxtables: Implement notargets hash table
- nft: Reject standard targets as chain names when restoring
- xshared: Merge and share parse_chain()
- xshared: Prefer xtables_chain_protos lookup over getprotoent
- nft: Speed up immediate parsing
- nft: Simplify immediate parsing</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.8.4-23.1" date="1669204800">- ebtables: Support '-p Length'
- nft-shared: Introduce __get_cmp_data()</changelog>
</package>
<package pkgid="5cc393c8ef322395763cc78a2fda5a5a7500e3a345c660db146c156b0fa216c7" name="iptables" arch="x86_64">
  <version epoch="0" ver="1.8.4" rel="23.el8_7.1"/>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.8.4-15" date="1597492800">- Ignore sysctl files not suffixed '.conf'</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.8.4-16" date="1603886400">- tests/shell: Add test for bitwise avoidance fixes
- ebtables: Optimize masked MAC address matches
- nft: Optimize class-based IP prefix matches
- nft: Fix for broken address mask match detection
- nft: cache: Make nft_rebuild_cache() respect fake cache
- tests: shell: Improve concurrent noflush restore test a bit
- nft: Fix for concurrent noflush restore calls
- nft: Fix error reporting for refreshed transactions
- nft: Make batch_add_chain() return the added batch object</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.8.4-17" date="1607601600">- extensions: dccp: Fix for DCCP type 'INVALID'
- tests: shell: Merge and extend return codes test
- nft: Fix command name in ip6tables error message
- extensions: libxt_CT: add translation for NOTRACK
- extensions: libipt_icmp: Fix translation of type 'any'
- tests/shell: Test for fixed extension registration
- libxtables: Register multiple extensions in ascending order
- libxtables: Simplify pending extension registration
- libxtables: Make sure extensions register in revision order</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.8.4-18" date="1621857600">- xtables-translate: Fix translation of odd netmasks
- nft: Fix bitwise expression avoidance detection
- xtables-monitor: 'LL=0x304' is not very convenient, print LOOPBACK instead.
- xtables-monitor: print packet first
- xtables-monitor: fix packet family protocol
- xtables-monitor: fix rule printing
- xtables-monitor: Fix ip6tables rule printing</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.8.4-19" date="1624017600">- Fix for rpminspect results</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.8.4-20" date="1628078400">- extensions: SECMARK: Use a better context in test case
- extensions: sctp: Translate --chunk-types option
- extensions: sctp: Fix nftables translation
- extensions: SECMARK: Implement revision 1
- nft: cache: Retry if kernel returns EINTR</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.8.4-21" date="1633608000">- extensions: hashlimit: Fix tests with HZ=100
- ebtables: Dump atomic waste
- doc: ebtables-nft.8: Adjust for missing atomic-options</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.8.4-22" date="1638187200">- extensions: hashlimit: Fix tests with HZ=1000</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.8.4-23" date="1656676800">- libxtables: Fix unsupported extension warning corner case
- tests: shell: Check overhead in iptables-save and -restore
- nft: Fix EPERM handling for extensions without rev 0
- Improve error messages for unsupported extensions
- xshared: Fix response to unprivileged users
- libxtables: Register only the highest revision extension
- Use proto_to_name() from xshared in more places
- libxtables: Boost rule target checks by announcing chain names
- libxtables: Implement notargets hash table
- nft: Reject standard targets as chain names when restoring
- xshared: Merge and share parse_chain()
- xshared: Prefer xtables_chain_protos lookup over getprotoent
- nft: Speed up immediate parsing
- nft: Simplify immediate parsing</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.8.4-23.1" date="1669204800">- ebtables: Support '-p Length'
- nft-shared: Introduce __get_cmp_data()</changelog>
</package>
<package pkgid="8da2218b842ecb84e3c21ff419c05315895b299a4d41be2e023226f5bac523b2" name="iptables-arptables" arch="x86_64">
  <version epoch="0" ver="1.8.4" rel="23.el8_7.1"/>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.8.4-15" date="1597492800">- Ignore sysctl files not suffixed '.conf'</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.8.4-16" date="1603886400">- tests/shell: Add test for bitwise avoidance fixes
- ebtables: Optimize masked MAC address matches
- nft: Optimize class-based IP prefix matches
- nft: Fix for broken address mask match detection
- nft: cache: Make nft_rebuild_cache() respect fake cache
- tests: shell: Improve concurrent noflush restore test a bit
- nft: Fix for concurrent noflush restore calls
- nft: Fix error reporting for refreshed transactions
- nft: Make batch_add_chain() return the added batch object</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.8.4-17" date="1607601600">- extensions: dccp: Fix for DCCP type 'INVALID'
- tests: shell: Merge and extend return codes test
- nft: Fix command name in ip6tables error message
- extensions: libxt_CT: add translation for NOTRACK
- extensions: libipt_icmp: Fix translation of type 'any'
- tests/shell: Test for fixed extension registration
- libxtables: Register multiple extensions in ascending order
- libxtables: Simplify pending extension registration
- libxtables: Make sure extensions register in revision order</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.8.4-18" date="1621857600">- xtables-translate: Fix translation of odd netmasks
- nft: Fix bitwise expression avoidance detection
- xtables-monitor: 'LL=0x304' is not very convenient, print LOOPBACK instead.
- xtables-monitor: print packet first
- xtables-monitor: fix packet family protocol
- xtables-monitor: fix rule printing
- xtables-monitor: Fix ip6tables rule printing</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.8.4-19" date="1624017600">- Fix for rpminspect results</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.8.4-20" date="1628078400">- extensions: SECMARK: Use a better context in test case
- extensions: sctp: Translate --chunk-types option
- extensions: sctp: Fix nftables translation
- extensions: SECMARK: Implement revision 1
- nft: cache: Retry if kernel returns EINTR</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.8.4-21" date="1633608000">- extensions: hashlimit: Fix tests with HZ=100
- ebtables: Dump atomic waste
- doc: ebtables-nft.8: Adjust for missing atomic-options</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.8.4-22" date="1638187200">- extensions: hashlimit: Fix tests with HZ=1000</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.8.4-23" date="1656676800">- libxtables: Fix unsupported extension warning corner case
- tests: shell: Check overhead in iptables-save and -restore
- nft: Fix EPERM handling for extensions without rev 0
- Improve error messages for unsupported extensions
- xshared: Fix response to unprivileged users
- libxtables: Register only the highest revision extension
- Use proto_to_name() from xshared in more places
- libxtables: Boost rule target checks by announcing chain names
- libxtables: Implement notargets hash table
- nft: Reject standard targets as chain names when restoring
- xshared: Merge and share parse_chain()
- xshared: Prefer xtables_chain_protos lookup over getprotoent
- nft: Speed up immediate parsing
- nft: Simplify immediate parsing</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.8.4-23.1" date="1669204800">- ebtables: Support '-p Length'
- nft-shared: Introduce __get_cmp_data()</changelog>
</package>
<package pkgid="ed65e542ff62d81090f6e463ac028f74b85b7b0a33abd8457bfb0bd2090a066e" name="iptables-devel" arch="i686">
  <version epoch="0" ver="1.8.4" rel="23.el8_7.1"/>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.8.4-15" date="1597492800">- Ignore sysctl files not suffixed '.conf'</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.8.4-16" date="1603886400">- tests/shell: Add test for bitwise avoidance fixes
- ebtables: Optimize masked MAC address matches
- nft: Optimize class-based IP prefix matches
- nft: Fix for broken address mask match detection
- nft: cache: Make nft_rebuild_cache() respect fake cache
- tests: shell: Improve concurrent noflush restore test a bit
- nft: Fix for concurrent noflush restore calls
- nft: Fix error reporting for refreshed transactions
- nft: Make batch_add_chain() return the added batch object</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.8.4-17" date="1607601600">- extensions: dccp: Fix for DCCP type 'INVALID'
- tests: shell: Merge and extend return codes test
- nft: Fix command name in ip6tables error message
- extensions: libxt_CT: add translation for NOTRACK
- extensions: libipt_icmp: Fix translation of type 'any'
- tests/shell: Test for fixed extension registration
- libxtables: Register multiple extensions in ascending order
- libxtables: Simplify pending extension registration
- libxtables: Make sure extensions register in revision order</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.8.4-18" date="1621857600">- xtables-translate: Fix translation of odd netmasks
- nft: Fix bitwise expression avoidance detection
- xtables-monitor: 'LL=0x304' is not very convenient, print LOOPBACK instead.
- xtables-monitor: print packet first
- xtables-monitor: fix packet family protocol
- xtables-monitor: fix rule printing
- xtables-monitor: Fix ip6tables rule printing</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.8.4-19" date="1624017600">- Fix for rpminspect results</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.8.4-20" date="1628078400">- extensions: SECMARK: Use a better context in test case
- extensions: sctp: Translate --chunk-types option
- extensions: sctp: Fix nftables translation
- extensions: SECMARK: Implement revision 1
- nft: cache: Retry if kernel returns EINTR</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.8.4-21" date="1633608000">- extensions: hashlimit: Fix tests with HZ=100
- ebtables: Dump atomic waste
- doc: ebtables-nft.8: Adjust for missing atomic-options</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.8.4-22" date="1638187200">- extensions: hashlimit: Fix tests with HZ=1000</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.8.4-23" date="1656676800">- libxtables: Fix unsupported extension warning corner case
- tests: shell: Check overhead in iptables-save and -restore
- nft: Fix EPERM handling for extensions without rev 0
- Improve error messages for unsupported extensions
- xshared: Fix response to unprivileged users
- libxtables: Register only the highest revision extension
- Use proto_to_name() from xshared in more places
- libxtables: Boost rule target checks by announcing chain names
- libxtables: Implement notargets hash table
- nft: Reject standard targets as chain names when restoring
- xshared: Merge and share parse_chain()
- xshared: Prefer xtables_chain_protos lookup over getprotoent
- nft: Speed up immediate parsing
- nft: Simplify immediate parsing</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.8.4-23.1" date="1669204800">- ebtables: Support '-p Length'
- nft-shared: Introduce __get_cmp_data()</changelog>
</package>
<package pkgid="baabe9d6e30eeaee100560cf9d227da27f15ab5519b5cc976f335da50e84ba0f" name="iptables-devel" arch="x86_64">
  <version epoch="0" ver="1.8.4" rel="23.el8_7.1"/>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.8.4-15" date="1597492800">- Ignore sysctl files not suffixed '.conf'</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.8.4-16" date="1603886400">- tests/shell: Add test for bitwise avoidance fixes
- ebtables: Optimize masked MAC address matches
- nft: Optimize class-based IP prefix matches
- nft: Fix for broken address mask match detection
- nft: cache: Make nft_rebuild_cache() respect fake cache
- tests: shell: Improve concurrent noflush restore test a bit
- nft: Fix for concurrent noflush restore calls
- nft: Fix error reporting for refreshed transactions
- nft: Make batch_add_chain() return the added batch object</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.8.4-17" date="1607601600">- extensions: dccp: Fix for DCCP type 'INVALID'
- tests: shell: Merge and extend return codes test
- nft: Fix command name in ip6tables error message
- extensions: libxt_CT: add translation for NOTRACK
- extensions: libipt_icmp: Fix translation of type 'any'
- tests/shell: Test for fixed extension registration
- libxtables: Register multiple extensions in ascending order
- libxtables: Simplify pending extension registration
- libxtables: Make sure extensions register in revision order</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.8.4-18" date="1621857600">- xtables-translate: Fix translation of odd netmasks
- nft: Fix bitwise expression avoidance detection
- xtables-monitor: 'LL=0x304' is not very convenient, print LOOPBACK instead.
- xtables-monitor: print packet first
- xtables-monitor: fix packet family protocol
- xtables-monitor: fix rule printing
- xtables-monitor: Fix ip6tables rule printing</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.8.4-19" date="1624017600">- Fix for rpminspect results</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.8.4-20" date="1628078400">- extensions: SECMARK: Use a better context in test case
- extensions: sctp: Translate --chunk-types option
- extensions: sctp: Fix nftables translation
- extensions: SECMARK: Implement revision 1
- nft: cache: Retry if kernel returns EINTR</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.8.4-21" date="1633608000">- extensions: hashlimit: Fix tests with HZ=100
- ebtables: Dump atomic waste
- doc: ebtables-nft.8: Adjust for missing atomic-options</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.8.4-22" date="1638187200">- extensions: hashlimit: Fix tests with HZ=1000</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.8.4-23" date="1656676800">- libxtables: Fix unsupported extension warning corner case
- tests: shell: Check overhead in iptables-save and -restore
- nft: Fix EPERM handling for extensions without rev 0
- Improve error messages for unsupported extensions
- xshared: Fix response to unprivileged users
- libxtables: Register only the highest revision extension
- Use proto_to_name() from xshared in more places
- libxtables: Boost rule target checks by announcing chain names
- libxtables: Implement notargets hash table
- nft: Reject standard targets as chain names when restoring
- xshared: Merge and share parse_chain()
- xshared: Prefer xtables_chain_protos lookup over getprotoent
- nft: Speed up immediate parsing
- nft: Simplify immediate parsing</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.8.4-23.1" date="1669204800">- ebtables: Support '-p Length'
- nft-shared: Introduce __get_cmp_data()</changelog>
</package>
<package pkgid="c5cbf0435ad1bb55c1df03ddf8312fa26ebaf30c12b59295dd5666e68dfc5851" name="iptables-ebtables" arch="x86_64">
  <version epoch="0" ver="1.8.4" rel="23.el8_7.1"/>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.8.4-15" date="1597492800">- Ignore sysctl files not suffixed '.conf'</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.8.4-16" date="1603886400">- tests/shell: Add test for bitwise avoidance fixes
- ebtables: Optimize masked MAC address matches
- nft: Optimize class-based IP prefix matches
- nft: Fix for broken address mask match detection
- nft: cache: Make nft_rebuild_cache() respect fake cache
- tests: shell: Improve concurrent noflush restore test a bit
- nft: Fix for concurrent noflush restore calls
- nft: Fix error reporting for refreshed transactions
- nft: Make batch_add_chain() return the added batch object</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.8.4-17" date="1607601600">- extensions: dccp: Fix for DCCP type 'INVALID'
- tests: shell: Merge and extend return codes test
- nft: Fix command name in ip6tables error message
- extensions: libxt_CT: add translation for NOTRACK
- extensions: libipt_icmp: Fix translation of type 'any'
- tests/shell: Test for fixed extension registration
- libxtables: Register multiple extensions in ascending order
- libxtables: Simplify pending extension registration
- libxtables: Make sure extensions register in revision order</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.8.4-18" date="1621857600">- xtables-translate: Fix translation of odd netmasks
- nft: Fix bitwise expression avoidance detection
- xtables-monitor: 'LL=0x304' is not very convenient, print LOOPBACK instead.
- xtables-monitor: print packet first
- xtables-monitor: fix packet family protocol
- xtables-monitor: fix rule printing
- xtables-monitor: Fix ip6tables rule printing</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.8.4-19" date="1624017600">- Fix for rpminspect results</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.8.4-20" date="1628078400">- extensions: SECMARK: Use a better context in test case
- extensions: sctp: Translate --chunk-types option
- extensions: sctp: Fix nftables translation
- extensions: SECMARK: Implement revision 1
- nft: cache: Retry if kernel returns EINTR</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.8.4-21" date="1633608000">- extensions: hashlimit: Fix tests with HZ=100
- ebtables: Dump atomic waste
- doc: ebtables-nft.8: Adjust for missing atomic-options</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.8.4-22" date="1638187200">- extensions: hashlimit: Fix tests with HZ=1000</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.8.4-23" date="1656676800">- libxtables: Fix unsupported extension warning corner case
- tests: shell: Check overhead in iptables-save and -restore
- nft: Fix EPERM handling for extensions without rev 0
- Improve error messages for unsupported extensions
- xshared: Fix response to unprivileged users
- libxtables: Register only the highest revision extension
- Use proto_to_name() from xshared in more places
- libxtables: Boost rule target checks by announcing chain names
- libxtables: Implement notargets hash table
- nft: Reject standard targets as chain names when restoring
- xshared: Merge and share parse_chain()
- xshared: Prefer xtables_chain_protos lookup over getprotoent
- nft: Speed up immediate parsing
- nft: Simplify immediate parsing</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.8.4-23.1" date="1669204800">- ebtables: Support '-p Length'
- nft-shared: Introduce __get_cmp_data()</changelog>
</package>
<package pkgid="ac34418ab5f131a223410d6b33b6d06ca02606feaf6c003997797b8c9d7a535f" name="iptables-libs" arch="i686">
  <version epoch="0" ver="1.8.4" rel="23.el8_7.1"/>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.8.4-15" date="1597492800">- Ignore sysctl files not suffixed '.conf'</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.8.4-16" date="1603886400">- tests/shell: Add test for bitwise avoidance fixes
- ebtables: Optimize masked MAC address matches
- nft: Optimize class-based IP prefix matches
- nft: Fix for broken address mask match detection
- nft: cache: Make nft_rebuild_cache() respect fake cache
- tests: shell: Improve concurrent noflush restore test a bit
- nft: Fix for concurrent noflush restore calls
- nft: Fix error reporting for refreshed transactions
- nft: Make batch_add_chain() return the added batch object</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.8.4-17" date="1607601600">- extensions: dccp: Fix for DCCP type 'INVALID'
- tests: shell: Merge and extend return codes test
- nft: Fix command name in ip6tables error message
- extensions: libxt_CT: add translation for NOTRACK
- extensions: libipt_icmp: Fix translation of type 'any'
- tests/shell: Test for fixed extension registration
- libxtables: Register multiple extensions in ascending order
- libxtables: Simplify pending extension registration
- libxtables: Make sure extensions register in revision order</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.8.4-18" date="1621857600">- xtables-translate: Fix translation of odd netmasks
- nft: Fix bitwise expression avoidance detection
- xtables-monitor: 'LL=0x304' is not very convenient, print LOOPBACK instead.
- xtables-monitor: print packet first
- xtables-monitor: fix packet family protocol
- xtables-monitor: fix rule printing
- xtables-monitor: Fix ip6tables rule printing</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.8.4-19" date="1624017600">- Fix for rpminspect results</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.8.4-20" date="1628078400">- extensions: SECMARK: Use a better context in test case
- extensions: sctp: Translate --chunk-types option
- extensions: sctp: Fix nftables translation
- extensions: SECMARK: Implement revision 1
- nft: cache: Retry if kernel returns EINTR</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.8.4-21" date="1633608000">- extensions: hashlimit: Fix tests with HZ=100
- ebtables: Dump atomic waste
- doc: ebtables-nft.8: Adjust for missing atomic-options</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.8.4-22" date="1638187200">- extensions: hashlimit: Fix tests with HZ=1000</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.8.4-23" date="1656676800">- libxtables: Fix unsupported extension warning corner case
- tests: shell: Check overhead in iptables-save and -restore
- nft: Fix EPERM handling for extensions without rev 0
- Improve error messages for unsupported extensions
- xshared: Fix response to unprivileged users
- libxtables: Register only the highest revision extension
- Use proto_to_name() from xshared in more places
- libxtables: Boost rule target checks by announcing chain names
- libxtables: Implement notargets hash table
- nft: Reject standard targets as chain names when restoring
- xshared: Merge and share parse_chain()
- xshared: Prefer xtables_chain_protos lookup over getprotoent
- nft: Speed up immediate parsing
- nft: Simplify immediate parsing</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.8.4-23.1" date="1669204800">- ebtables: Support '-p Length'
- nft-shared: Introduce __get_cmp_data()</changelog>
</package>
<package pkgid="577597114c855779528b6130cab23b916cc9565634b19ed044b33bb51c50e0b2" name="iptables-libs" arch="x86_64">
  <version epoch="0" ver="1.8.4" rel="23.el8_7.1"/>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.8.4-15" date="1597492800">- Ignore sysctl files not suffixed '.conf'</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.8.4-16" date="1603886400">- tests/shell: Add test for bitwise avoidance fixes
- ebtables: Optimize masked MAC address matches
- nft: Optimize class-based IP prefix matches
- nft: Fix for broken address mask match detection
- nft: cache: Make nft_rebuild_cache() respect fake cache
- tests: shell: Improve concurrent noflush restore test a bit
- nft: Fix for concurrent noflush restore calls
- nft: Fix error reporting for refreshed transactions
- nft: Make batch_add_chain() return the added batch object</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.8.4-17" date="1607601600">- extensions: dccp: Fix for DCCP type 'INVALID'
- tests: shell: Merge and extend return codes test
- nft: Fix command name in ip6tables error message
- extensions: libxt_CT: add translation for NOTRACK
- extensions: libipt_icmp: Fix translation of type 'any'
- tests/shell: Test for fixed extension registration
- libxtables: Register multiple extensions in ascending order
- libxtables: Simplify pending extension registration
- libxtables: Make sure extensions register in revision order</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.8.4-18" date="1621857600">- xtables-translate: Fix translation of odd netmasks
- nft: Fix bitwise expression avoidance detection
- xtables-monitor: 'LL=0x304' is not very convenient, print LOOPBACK instead.
- xtables-monitor: print packet first
- xtables-monitor: fix packet family protocol
- xtables-monitor: fix rule printing
- xtables-monitor: Fix ip6tables rule printing</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.8.4-19" date="1624017600">- Fix for rpminspect results</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.8.4-20" date="1628078400">- extensions: SECMARK: Use a better context in test case
- extensions: sctp: Translate --chunk-types option
- extensions: sctp: Fix nftables translation
- extensions: SECMARK: Implement revision 1
- nft: cache: Retry if kernel returns EINTR</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.8.4-21" date="1633608000">- extensions: hashlimit: Fix tests with HZ=100
- ebtables: Dump atomic waste
- doc: ebtables-nft.8: Adjust for missing atomic-options</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.8.4-22" date="1638187200">- extensions: hashlimit: Fix tests with HZ=1000</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.8.4-23" date="1656676800">- libxtables: Fix unsupported extension warning corner case
- tests: shell: Check overhead in iptables-save and -restore
- nft: Fix EPERM handling for extensions without rev 0
- Improve error messages for unsupported extensions
- xshared: Fix response to unprivileged users
- libxtables: Register only the highest revision extension
- Use proto_to_name() from xshared in more places
- libxtables: Boost rule target checks by announcing chain names
- libxtables: Implement notargets hash table
- nft: Reject standard targets as chain names when restoring
- xshared: Merge and share parse_chain()
- xshared: Prefer xtables_chain_protos lookup over getprotoent
- nft: Speed up immediate parsing
- nft: Simplify immediate parsing</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.8.4-23.1" date="1669204800">- ebtables: Support '-p Length'
- nft-shared: Introduce __get_cmp_data()</changelog>
</package>
<package pkgid="4ec3028d0943e243b6d0c3da7a24e632f91b5ed021d82e4915e768118e5e0599" name="iptables-services" arch="x86_64">
  <version epoch="0" ver="1.8.4" rel="23.el8_7.1"/>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.8.4-15" date="1597492800">- Ignore sysctl files not suffixed '.conf'</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.8.4-16" date="1603886400">- tests/shell: Add test for bitwise avoidance fixes
- ebtables: Optimize masked MAC address matches
- nft: Optimize class-based IP prefix matches
- nft: Fix for broken address mask match detection
- nft: cache: Make nft_rebuild_cache() respect fake cache
- tests: shell: Improve concurrent noflush restore test a bit
- nft: Fix for concurrent noflush restore calls
- nft: Fix error reporting for refreshed transactions
- nft: Make batch_add_chain() return the added batch object</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.8.4-17" date="1607601600">- extensions: dccp: Fix for DCCP type 'INVALID'
- tests: shell: Merge and extend return codes test
- nft: Fix command name in ip6tables error message
- extensions: libxt_CT: add translation for NOTRACK
- extensions: libipt_icmp: Fix translation of type 'any'
- tests/shell: Test for fixed extension registration
- libxtables: Register multiple extensions in ascending order
- libxtables: Simplify pending extension registration
- libxtables: Make sure extensions register in revision order</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.8.4-18" date="1621857600">- xtables-translate: Fix translation of odd netmasks
- nft: Fix bitwise expression avoidance detection
- xtables-monitor: 'LL=0x304' is not very convenient, print LOOPBACK instead.
- xtables-monitor: print packet first
- xtables-monitor: fix packet family protocol
- xtables-monitor: fix rule printing
- xtables-monitor: Fix ip6tables rule printing</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.8.4-19" date="1624017600">- Fix for rpminspect results</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.8.4-20" date="1628078400">- extensions: SECMARK: Use a better context in test case
- extensions: sctp: Translate --chunk-types option
- extensions: sctp: Fix nftables translation
- extensions: SECMARK: Implement revision 1
- nft: cache: Retry if kernel returns EINTR</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.8.4-21" date="1633608000">- extensions: hashlimit: Fix tests with HZ=100
- ebtables: Dump atomic waste
- doc: ebtables-nft.8: Adjust for missing atomic-options</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.8.4-22" date="1638187200">- extensions: hashlimit: Fix tests with HZ=1000</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.8.4-23" date="1656676800">- libxtables: Fix unsupported extension warning corner case
- tests: shell: Check overhead in iptables-save and -restore
- nft: Fix EPERM handling for extensions without rev 0
- Improve error messages for unsupported extensions
- xshared: Fix response to unprivileged users
- libxtables: Register only the highest revision extension
- Use proto_to_name() from xshared in more places
- libxtables: Boost rule target checks by announcing chain names
- libxtables: Implement notargets hash table
- nft: Reject standard targets as chain names when restoring
- xshared: Merge and share parse_chain()
- xshared: Prefer xtables_chain_protos lookup over getprotoent
- nft: Speed up immediate parsing
- nft: Simplify immediate parsing</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.8.4-23.1" date="1669204800">- ebtables: Support '-p Length'
- nft-shared: Introduce __get_cmp_data()</changelog>
</package>
<package pkgid="e7de3e26b3dae8c087fb2467ab0e50b1dd2d962ef68c5e985cae43155f1e47bb" name="iptables-utils" arch="x86_64">
  <version epoch="0" ver="1.8.4" rel="23.el8_7.1"/>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.8.4-15" date="1597492800">- Ignore sysctl files not suffixed '.conf'</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.8.4-16" date="1603886400">- tests/shell: Add test for bitwise avoidance fixes
- ebtables: Optimize masked MAC address matches
- nft: Optimize class-based IP prefix matches
- nft: Fix for broken address mask match detection
- nft: cache: Make nft_rebuild_cache() respect fake cache
- tests: shell: Improve concurrent noflush restore test a bit
- nft: Fix for concurrent noflush restore calls
- nft: Fix error reporting for refreshed transactions
- nft: Make batch_add_chain() return the added batch object</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.8.4-17" date="1607601600">- extensions: dccp: Fix for DCCP type 'INVALID'
- tests: shell: Merge and extend return codes test
- nft: Fix command name in ip6tables error message
- extensions: libxt_CT: add translation for NOTRACK
- extensions: libipt_icmp: Fix translation of type 'any'
- tests/shell: Test for fixed extension registration
- libxtables: Register multiple extensions in ascending order
- libxtables: Simplify pending extension registration
- libxtables: Make sure extensions register in revision order</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.8.4-18" date="1621857600">- xtables-translate: Fix translation of odd netmasks
- nft: Fix bitwise expression avoidance detection
- xtables-monitor: 'LL=0x304' is not very convenient, print LOOPBACK instead.
- xtables-monitor: print packet first
- xtables-monitor: fix packet family protocol
- xtables-monitor: fix rule printing
- xtables-monitor: Fix ip6tables rule printing</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.8.4-19" date="1624017600">- Fix for rpminspect results</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.8.4-20" date="1628078400">- extensions: SECMARK: Use a better context in test case
- extensions: sctp: Translate --chunk-types option
- extensions: sctp: Fix nftables translation
- extensions: SECMARK: Implement revision 1
- nft: cache: Retry if kernel returns EINTR</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.8.4-21" date="1633608000">- extensions: hashlimit: Fix tests with HZ=100
- ebtables: Dump atomic waste
- doc: ebtables-nft.8: Adjust for missing atomic-options</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.8.4-22" date="1638187200">- extensions: hashlimit: Fix tests with HZ=1000</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.8.4-23" date="1656676800">- libxtables: Fix unsupported extension warning corner case
- tests: shell: Check overhead in iptables-save and -restore
- nft: Fix EPERM handling for extensions without rev 0
- Improve error messages for unsupported extensions
- xshared: Fix response to unprivileged users
- libxtables: Register only the highest revision extension
- Use proto_to_name() from xshared in more places
- libxtables: Boost rule target checks by announcing chain names
- libxtables: Implement notargets hash table
- nft: Reject standard targets as chain names when restoring
- xshared: Merge and share parse_chain()
- xshared: Prefer xtables_chain_protos lookup over getprotoent
- nft: Speed up immediate parsing
- nft: Simplify immediate parsing</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.8.4-23.1" date="1669204800">- ebtables: Support '-p Length'
- nft-shared: Introduce __get_cmp_data()</changelog>
</package>
<package pkgid="4e4a9ebb6ad1492fd68ba82f84d580ab02439498a16b2ab7eba5e71931a5891d" name="iwl100-firmware" arch="noarch">
  <version epoch="0" ver="39.31.5.1" rel="111.el8_7.1"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20201218-102.git05789708" date="1611748800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1918613)</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; - 20210702-103.gitd79c2677" date="1625227200">- Update to latest upstream linux-firmware image for assorted updates
- Include support for the Qualcomm AX500-DBS (QCA6390) 802.11ax Wireless (rhbz 1725913)
- Firmware for Chelsio T4/T5/T6 adapters (rhbz 1961398)
- Incorrect NVIDIA GPU firmware used for TU102 and TU104 GPUs (rhbz 1965312)
- Package the new iwl7260 ucode files and also the new binary format PNVM</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; - 20211007-104.git7a300505" date="1633608000">- Update to latest upstream linux-firmware image for assorted updates
- Certain amdgpu firmware files cause random hangs with AMD Picasso/Raven Ridge APUs (rhbz 2000879)
- Support Intel CNVi AX211 Garfield Peak2 on ADL - Bluetooth (rhbz 1923179)
- Support Intel CNVi AX211 Garfield Peak2 on ADL - WIFI (rhbz 1923175)</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; - 20211119-105.gitf5d51956" date="1638792000">- Update to latest upstream linux-firmware image for assorted updates
- Update to latest AMD GPU firmware (rhbz 1986660)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; - 20220209-106.git6342082c" date="1644494400">- Update to latest upstream linux-firmware image for assorted updates
- Include AMD GPU firmware fix (rhbz 2031172)
- Support QCA WCN6856 v2.1 Module: Bluetooth firmware (rhbz 2007904)</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; - 20220517-107.git251d2900" date="1652875200">- Update to latest upstream linux-firmware image for assorted updates
- Include latest qed firmware update (rhbz 2040269)
- Include latest bnx2x firmware update (rhbz 2040273)
- Include latest ice firmware update (rhbz 2059384, rhbz 2081543)
- Include latest Qualcomm firmware update (rhbz 2062871)</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; - 20220517-108.git251d2900" date="1654257600">- Bump NVR due to conflict with late 8.6 iwl firmware package versioning</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; - 20220713-109.gitdfa29317" date="1657713600">- Update to latest upstream linux-firmware image for assorted updates
- Include even newer qed firmware update (rhbz 2040269)</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; - 20220726-110.git150864a4" date="1658836800">- Omit unused password-protected vxge firmware files from package (rhbz 2108051)
- Pick up latest AMD GPU firmwares</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; - 20220726-111.git150864a4" date="1676635200">- Update AMD GPU firmware for multiple monitor fixes (rhbz 2165148)</changelog>
</package>
<package pkgid="383df9368ba839f5c25ec0b420e314381936b9e2e0552527c977b48bb8e96273" name="iwl1000-firmware" arch="noarch">
  <version epoch="1" ver="39.31.5.1" rel="111.el8_7.1"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20201218-102.git05789708" date="1611748800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1918613)</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; - 20210702-103.gitd79c2677" date="1625227200">- Update to latest upstream linux-firmware image for assorted updates
- Include support for the Qualcomm AX500-DBS (QCA6390) 802.11ax Wireless (rhbz 1725913)
- Firmware for Chelsio T4/T5/T6 adapters (rhbz 1961398)
- Incorrect NVIDIA GPU firmware used for TU102 and TU104 GPUs (rhbz 1965312)
- Package the new iwl7260 ucode files and also the new binary format PNVM</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; - 20211007-104.git7a300505" date="1633608000">- Update to latest upstream linux-firmware image for assorted updates
- Certain amdgpu firmware files cause random hangs with AMD Picasso/Raven Ridge APUs (rhbz 2000879)
- Support Intel CNVi AX211 Garfield Peak2 on ADL - Bluetooth (rhbz 1923179)
- Support Intel CNVi AX211 Garfield Peak2 on ADL - WIFI (rhbz 1923175)</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; - 20211119-105.gitf5d51956" date="1638792000">- Update to latest upstream linux-firmware image for assorted updates
- Update to latest AMD GPU firmware (rhbz 1986660)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; - 20220209-106.git6342082c" date="1644494400">- Update to latest upstream linux-firmware image for assorted updates
- Include AMD GPU firmware fix (rhbz 2031172)
- Support QCA WCN6856 v2.1 Module: Bluetooth firmware (rhbz 2007904)</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; - 20220517-107.git251d2900" date="1652875200">- Update to latest upstream linux-firmware image for assorted updates
- Include latest qed firmware update (rhbz 2040269)
- Include latest bnx2x firmware update (rhbz 2040273)
- Include latest ice firmware update (rhbz 2059384, rhbz 2081543)
- Include latest Qualcomm firmware update (rhbz 2062871)</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; - 20220517-108.git251d2900" date="1654257600">- Bump NVR due to conflict with late 8.6 iwl firmware package versioning</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; - 20220713-109.gitdfa29317" date="1657713600">- Update to latest upstream linux-firmware image for assorted updates
- Include even newer qed firmware update (rhbz 2040269)</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; - 20220726-110.git150864a4" date="1658836800">- Omit unused password-protected vxge firmware files from package (rhbz 2108051)
- Pick up latest AMD GPU firmwares</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; - 20220726-111.git150864a4" date="1676635200">- Update AMD GPU firmware for multiple monitor fixes (rhbz 2165148)</changelog>
</package>
<package pkgid="4351098523af7a9a59a3bcc6297dced7115867f7f92d16ecd43772488cd9f24d" name="iwl105-firmware" arch="noarch">
  <version epoch="0" ver="18.168.6.1" rel="111.el8_7.1"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20201218-102.git05789708" date="1611748800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1918613)</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; - 20210702-103.gitd79c2677" date="1625227200">- Update to latest upstream linux-firmware image for assorted updates
- Include support for the Qualcomm AX500-DBS (QCA6390) 802.11ax Wireless (rhbz 1725913)
- Firmware for Chelsio T4/T5/T6 adapters (rhbz 1961398)
- Incorrect NVIDIA GPU firmware used for TU102 and TU104 GPUs (rhbz 1965312)
- Package the new iwl7260 ucode files and also the new binary format PNVM</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; - 20211007-104.git7a300505" date="1633608000">- Update to latest upstream linux-firmware image for assorted updates
- Certain amdgpu firmware files cause random hangs with AMD Picasso/Raven Ridge APUs (rhbz 2000879)
- Support Intel CNVi AX211 Garfield Peak2 on ADL - Bluetooth (rhbz 1923179)
- Support Intel CNVi AX211 Garfield Peak2 on ADL - WIFI (rhbz 1923175)</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; - 20211119-105.gitf5d51956" date="1638792000">- Update to latest upstream linux-firmware image for assorted updates
- Update to latest AMD GPU firmware (rhbz 1986660)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; - 20220209-106.git6342082c" date="1644494400">- Update to latest upstream linux-firmware image for assorted updates
- Include AMD GPU firmware fix (rhbz 2031172)
- Support QCA WCN6856 v2.1 Module: Bluetooth firmware (rhbz 2007904)</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; - 20220517-107.git251d2900" date="1652875200">- Update to latest upstream linux-firmware image for assorted updates
- Include latest qed firmware update (rhbz 2040269)
- Include latest bnx2x firmware update (rhbz 2040273)
- Include latest ice firmware update (rhbz 2059384, rhbz 2081543)
- Include latest Qualcomm firmware update (rhbz 2062871)</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; - 20220517-108.git251d2900" date="1654257600">- Bump NVR due to conflict with late 8.6 iwl firmware package versioning</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; - 20220713-109.gitdfa29317" date="1657713600">- Update to latest upstream linux-firmware image for assorted updates
- Include even newer qed firmware update (rhbz 2040269)</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; - 20220726-110.git150864a4" date="1658836800">- Omit unused password-protected vxge firmware files from package (rhbz 2108051)
- Pick up latest AMD GPU firmwares</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; - 20220726-111.git150864a4" date="1676635200">- Update AMD GPU firmware for multiple monitor fixes (rhbz 2165148)</changelog>
</package>
<package pkgid="b45a79bbfa8346e2ac27cc30613f158440cef608062f3139dfb38a5ecb5261a7" name="iwl135-firmware" arch="noarch">
  <version epoch="0" ver="18.168.6.1" rel="111.el8_7.1"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20201218-102.git05789708" date="1611748800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1918613)</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; - 20210702-103.gitd79c2677" date="1625227200">- Update to latest upstream linux-firmware image for assorted updates
- Include support for the Qualcomm AX500-DBS (QCA6390) 802.11ax Wireless (rhbz 1725913)
- Firmware for Chelsio T4/T5/T6 adapters (rhbz 1961398)
- Incorrect NVIDIA GPU firmware used for TU102 and TU104 GPUs (rhbz 1965312)
- Package the new iwl7260 ucode files and also the new binary format PNVM</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; - 20211007-104.git7a300505" date="1633608000">- Update to latest upstream linux-firmware image for assorted updates
- Certain amdgpu firmware files cause random hangs with AMD Picasso/Raven Ridge APUs (rhbz 2000879)
- Support Intel CNVi AX211 Garfield Peak2 on ADL - Bluetooth (rhbz 1923179)
- Support Intel CNVi AX211 Garfield Peak2 on ADL - WIFI (rhbz 1923175)</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; - 20211119-105.gitf5d51956" date="1638792000">- Update to latest upstream linux-firmware image for assorted updates
- Update to latest AMD GPU firmware (rhbz 1986660)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; - 20220209-106.git6342082c" date="1644494400">- Update to latest upstream linux-firmware image for assorted updates
- Include AMD GPU firmware fix (rhbz 2031172)
- Support QCA WCN6856 v2.1 Module: Bluetooth firmware (rhbz 2007904)</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; - 20220517-107.git251d2900" date="1652875200">- Update to latest upstream linux-firmware image for assorted updates
- Include latest qed firmware update (rhbz 2040269)
- Include latest bnx2x firmware update (rhbz 2040273)
- Include latest ice firmware update (rhbz 2059384, rhbz 2081543)
- Include latest Qualcomm firmware update (rhbz 2062871)</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; - 20220517-108.git251d2900" date="1654257600">- Bump NVR due to conflict with late 8.6 iwl firmware package versioning</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; - 20220713-109.gitdfa29317" date="1657713600">- Update to latest upstream linux-firmware image for assorted updates
- Include even newer qed firmware update (rhbz 2040269)</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; - 20220726-110.git150864a4" date="1658836800">- Omit unused password-protected vxge firmware files from package (rhbz 2108051)
- Pick up latest AMD GPU firmwares</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; - 20220726-111.git150864a4" date="1676635200">- Update AMD GPU firmware for multiple monitor fixes (rhbz 2165148)</changelog>
</package>
<package pkgid="91968ea3b0dfd8dc243bd6d71a4f5cd6701f8de443bd2810a73e5dfe4ef29616" name="iwl2000-firmware" arch="noarch">
  <version epoch="0" ver="18.168.6.1" rel="111.el8_7.1"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20201218-102.git05789708" date="1611748800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1918613)</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; - 20210702-103.gitd79c2677" date="1625227200">- Update to latest upstream linux-firmware image for assorted updates
- Include support for the Qualcomm AX500-DBS (QCA6390) 802.11ax Wireless (rhbz 1725913)
- Firmware for Chelsio T4/T5/T6 adapters (rhbz 1961398)
- Incorrect NVIDIA GPU firmware used for TU102 and TU104 GPUs (rhbz 1965312)
- Package the new iwl7260 ucode files and also the new binary format PNVM</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; - 20211007-104.git7a300505" date="1633608000">- Update to latest upstream linux-firmware image for assorted updates
- Certain amdgpu firmware files cause random hangs with AMD Picasso/Raven Ridge APUs (rhbz 2000879)
- Support Intel CNVi AX211 Garfield Peak2 on ADL - Bluetooth (rhbz 1923179)
- Support Intel CNVi AX211 Garfield Peak2 on ADL - WIFI (rhbz 1923175)</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; - 20211119-105.gitf5d51956" date="1638792000">- Update to latest upstream linux-firmware image for assorted updates
- Update to latest AMD GPU firmware (rhbz 1986660)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; - 20220209-106.git6342082c" date="1644494400">- Update to latest upstream linux-firmware image for assorted updates
- Include AMD GPU firmware fix (rhbz 2031172)
- Support QCA WCN6856 v2.1 Module: Bluetooth firmware (rhbz 2007904)</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; - 20220517-107.git251d2900" date="1652875200">- Update to latest upstream linux-firmware image for assorted updates
- Include latest qed firmware update (rhbz 2040269)
- Include latest bnx2x firmware update (rhbz 2040273)
- Include latest ice firmware update (rhbz 2059384, rhbz 2081543)
- Include latest Qualcomm firmware update (rhbz 2062871)</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; - 20220517-108.git251d2900" date="1654257600">- Bump NVR due to conflict with late 8.6 iwl firmware package versioning</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; - 20220713-109.gitdfa29317" date="1657713600">- Update to latest upstream linux-firmware image for assorted updates
- Include even newer qed firmware update (rhbz 2040269)</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; - 20220726-110.git150864a4" date="1658836800">- Omit unused password-protected vxge firmware files from package (rhbz 2108051)
- Pick up latest AMD GPU firmwares</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; - 20220726-111.git150864a4" date="1676635200">- Update AMD GPU firmware for multiple monitor fixes (rhbz 2165148)</changelog>
</package>
<package pkgid="d2b208ad69c7db1bcc03480adef8920c06483246fbd3f936c1e9f4096ef3cd15" name="iwl2030-firmware" arch="noarch">
  <version epoch="0" ver="18.168.6.1" rel="111.el8_7.1"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20201218-102.git05789708" date="1611748800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1918613)</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; - 20210702-103.gitd79c2677" date="1625227200">- Update to latest upstream linux-firmware image for assorted updates
- Include support for the Qualcomm AX500-DBS (QCA6390) 802.11ax Wireless (rhbz 1725913)
- Firmware for Chelsio T4/T5/T6 adapters (rhbz 1961398)
- Incorrect NVIDIA GPU firmware used for TU102 and TU104 GPUs (rhbz 1965312)
- Package the new iwl7260 ucode files and also the new binary format PNVM</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; - 20211007-104.git7a300505" date="1633608000">- Update to latest upstream linux-firmware image for assorted updates
- Certain amdgpu firmware files cause random hangs with AMD Picasso/Raven Ridge APUs (rhbz 2000879)
- Support Intel CNVi AX211 Garfield Peak2 on ADL - Bluetooth (rhbz 1923179)
- Support Intel CNVi AX211 Garfield Peak2 on ADL - WIFI (rhbz 1923175)</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; - 20211119-105.gitf5d51956" date="1638792000">- Update to latest upstream linux-firmware image for assorted updates
- Update to latest AMD GPU firmware (rhbz 1986660)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; - 20220209-106.git6342082c" date="1644494400">- Update to latest upstream linux-firmware image for assorted updates
- Include AMD GPU firmware fix (rhbz 2031172)
- Support QCA WCN6856 v2.1 Module: Bluetooth firmware (rhbz 2007904)</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; - 20220517-107.git251d2900" date="1652875200">- Update to latest upstream linux-firmware image for assorted updates
- Include latest qed firmware update (rhbz 2040269)
- Include latest bnx2x firmware update (rhbz 2040273)
- Include latest ice firmware update (rhbz 2059384, rhbz 2081543)
- Include latest Qualcomm firmware update (rhbz 2062871)</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; - 20220517-108.git251d2900" date="1654257600">- Bump NVR due to conflict with late 8.6 iwl firmware package versioning</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; - 20220713-109.gitdfa29317" date="1657713600">- Update to latest upstream linux-firmware image for assorted updates
- Include even newer qed firmware update (rhbz 2040269)</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; - 20220726-110.git150864a4" date="1658836800">- Omit unused password-protected vxge firmware files from package (rhbz 2108051)
- Pick up latest AMD GPU firmwares</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; - 20220726-111.git150864a4" date="1676635200">- Update AMD GPU firmware for multiple monitor fixes (rhbz 2165148)</changelog>
</package>
<package pkgid="2e8cf3b093d09bc1b326544e15e7dbed2b46a1b96db15e3ceb0fe3d0a64edf1d" name="iwl3160-firmware" arch="noarch">
  <version epoch="1" ver="25.30.13.0" rel="111.el8_7.1"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20201218-102.git05789708" date="1611748800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1918613)</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; - 20210702-103.gitd79c2677" date="1625227200">- Update to latest upstream linux-firmware image for assorted updates
- Include support for the Qualcomm AX500-DBS (QCA6390) 802.11ax Wireless (rhbz 1725913)
- Firmware for Chelsio T4/T5/T6 adapters (rhbz 1961398)
- Incorrect NVIDIA GPU firmware used for TU102 and TU104 GPUs (rhbz 1965312)
- Package the new iwl7260 ucode files and also the new binary format PNVM</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; - 20211007-104.git7a300505" date="1633608000">- Update to latest upstream linux-firmware image for assorted updates
- Certain amdgpu firmware files cause random hangs with AMD Picasso/Raven Ridge APUs (rhbz 2000879)
- Support Intel CNVi AX211 Garfield Peak2 on ADL - Bluetooth (rhbz 1923179)
- Support Intel CNVi AX211 Garfield Peak2 on ADL - WIFI (rhbz 1923175)</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; - 20211119-105.gitf5d51956" date="1638792000">- Update to latest upstream linux-firmware image for assorted updates
- Update to latest AMD GPU firmware (rhbz 1986660)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; - 20220209-106.git6342082c" date="1644494400">- Update to latest upstream linux-firmware image for assorted updates
- Include AMD GPU firmware fix (rhbz 2031172)
- Support QCA WCN6856 v2.1 Module: Bluetooth firmware (rhbz 2007904)</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; - 20220517-107.git251d2900" date="1652875200">- Update to latest upstream linux-firmware image for assorted updates
- Include latest qed firmware update (rhbz 2040269)
- Include latest bnx2x firmware update (rhbz 2040273)
- Include latest ice firmware update (rhbz 2059384, rhbz 2081543)
- Include latest Qualcomm firmware update (rhbz 2062871)</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; - 20220517-108.git251d2900" date="1654257600">- Bump NVR due to conflict with late 8.6 iwl firmware package versioning</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; - 20220713-109.gitdfa29317" date="1657713600">- Update to latest upstream linux-firmware image for assorted updates
- Include even newer qed firmware update (rhbz 2040269)</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; - 20220726-110.git150864a4" date="1658836800">- Omit unused password-protected vxge firmware files from package (rhbz 2108051)
- Pick up latest AMD GPU firmwares</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; - 20220726-111.git150864a4" date="1676635200">- Update AMD GPU firmware for multiple monitor fixes (rhbz 2165148)</changelog>
</package>
<package pkgid="25e81750e7a2c4af8af3d04f6f10f0ea1a0e6743f6da48a4ef89d4eb65d8d920" name="iwl3945-firmware" arch="noarch">
  <version epoch="0" ver="15.32.2.9" rel="111.el8_7.1"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20201218-102.git05789708" date="1611748800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1918613)</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; - 20210702-103.gitd79c2677" date="1625227200">- Update to latest upstream linux-firmware image for assorted updates
- Include support for the Qualcomm AX500-DBS (QCA6390) 802.11ax Wireless (rhbz 1725913)
- Firmware for Chelsio T4/T5/T6 adapters (rhbz 1961398)
- Incorrect NVIDIA GPU firmware used for TU102 and TU104 GPUs (rhbz 1965312)
- Package the new iwl7260 ucode files and also the new binary format PNVM</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; - 20211007-104.git7a300505" date="1633608000">- Update to latest upstream linux-firmware image for assorted updates
- Certain amdgpu firmware files cause random hangs with AMD Picasso/Raven Ridge APUs (rhbz 2000879)
- Support Intel CNVi AX211 Garfield Peak2 on ADL - Bluetooth (rhbz 1923179)
- Support Intel CNVi AX211 Garfield Peak2 on ADL - WIFI (rhbz 1923175)</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; - 20211119-105.gitf5d51956" date="1638792000">- Update to latest upstream linux-firmware image for assorted updates
- Update to latest AMD GPU firmware (rhbz 1986660)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; - 20220209-106.git6342082c" date="1644494400">- Update to latest upstream linux-firmware image for assorted updates
- Include AMD GPU firmware fix (rhbz 2031172)
- Support QCA WCN6856 v2.1 Module: Bluetooth firmware (rhbz 2007904)</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; - 20220517-107.git251d2900" date="1652875200">- Update to latest upstream linux-firmware image for assorted updates
- Include latest qed firmware update (rhbz 2040269)
- Include latest bnx2x firmware update (rhbz 2040273)
- Include latest ice firmware update (rhbz 2059384, rhbz 2081543)
- Include latest Qualcomm firmware update (rhbz 2062871)</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; - 20220517-108.git251d2900" date="1654257600">- Bump NVR due to conflict with late 8.6 iwl firmware package versioning</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; - 20220713-109.gitdfa29317" date="1657713600">- Update to latest upstream linux-firmware image for assorted updates
- Include even newer qed firmware update (rhbz 2040269)</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; - 20220726-110.git150864a4" date="1658836800">- Omit unused password-protected vxge firmware files from package (rhbz 2108051)
- Pick up latest AMD GPU firmwares</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; - 20220726-111.git150864a4" date="1676635200">- Update AMD GPU firmware for multiple monitor fixes (rhbz 2165148)</changelog>
</package>
<package pkgid="7060de84e2a985c9fd64ac253c43728a164478fd557ba1a9c95b0769eafe8b19" name="iwl4965-firmware" arch="noarch">
  <version epoch="0" ver="228.61.2.24" rel="111.el8_7.1"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20201218-102.git05789708" date="1611748800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1918613)</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; - 20210702-103.gitd79c2677" date="1625227200">- Update to latest upstream linux-firmware image for assorted updates
- Include support for the Qualcomm AX500-DBS (QCA6390) 802.11ax Wireless (rhbz 1725913)
- Firmware for Chelsio T4/T5/T6 adapters (rhbz 1961398)
- Incorrect NVIDIA GPU firmware used for TU102 and TU104 GPUs (rhbz 1965312)
- Package the new iwl7260 ucode files and also the new binary format PNVM</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; - 20211007-104.git7a300505" date="1633608000">- Update to latest upstream linux-firmware image for assorted updates
- Certain amdgpu firmware files cause random hangs with AMD Picasso/Raven Ridge APUs (rhbz 2000879)
- Support Intel CNVi AX211 Garfield Peak2 on ADL - Bluetooth (rhbz 1923179)
- Support Intel CNVi AX211 Garfield Peak2 on ADL - WIFI (rhbz 1923175)</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; - 20211119-105.gitf5d51956" date="1638792000">- Update to latest upstream linux-firmware image for assorted updates
- Update to latest AMD GPU firmware (rhbz 1986660)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; - 20220209-106.git6342082c" date="1644494400">- Update to latest upstream linux-firmware image for assorted updates
- Include AMD GPU firmware fix (rhbz 2031172)
- Support QCA WCN6856 v2.1 Module: Bluetooth firmware (rhbz 2007904)</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; - 20220517-107.git251d2900" date="1652875200">- Update to latest upstream linux-firmware image for assorted updates
- Include latest qed firmware update (rhbz 2040269)
- Include latest bnx2x firmware update (rhbz 2040273)
- Include latest ice firmware update (rhbz 2059384, rhbz 2081543)
- Include latest Qualcomm firmware update (rhbz 2062871)</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; - 20220517-108.git251d2900" date="1654257600">- Bump NVR due to conflict with late 8.6 iwl firmware package versioning</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; - 20220713-109.gitdfa29317" date="1657713600">- Update to latest upstream linux-firmware image for assorted updates
- Include even newer qed firmware update (rhbz 2040269)</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; - 20220726-110.git150864a4" date="1658836800">- Omit unused password-protected vxge firmware files from package (rhbz 2108051)
- Pick up latest AMD GPU firmwares</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; - 20220726-111.git150864a4" date="1676635200">- Update AMD GPU firmware for multiple monitor fixes (rhbz 2165148)</changelog>
</package>
<package pkgid="5438dde294581b5e83f3acce613fb235aafa9e2db96c46027c33310f8ca201bc" name="iwl5000-firmware" arch="noarch">
  <version epoch="0" ver="8.83.5.1_1" rel="111.el8_7.1"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20201218-102.git05789708" date="1611748800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1918613)</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; - 20210702-103.gitd79c2677" date="1625227200">- Update to latest upstream linux-firmware image for assorted updates
- Include support for the Qualcomm AX500-DBS (QCA6390) 802.11ax Wireless (rhbz 1725913)
- Firmware for Chelsio T4/T5/T6 adapters (rhbz 1961398)
- Incorrect NVIDIA GPU firmware used for TU102 and TU104 GPUs (rhbz 1965312)
- Package the new iwl7260 ucode files and also the new binary format PNVM</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; - 20211007-104.git7a300505" date="1633608000">- Update to latest upstream linux-firmware image for assorted updates
- Certain amdgpu firmware files cause random hangs with AMD Picasso/Raven Ridge APUs (rhbz 2000879)
- Support Intel CNVi AX211 Garfield Peak2 on ADL - Bluetooth (rhbz 1923179)
- Support Intel CNVi AX211 Garfield Peak2 on ADL - WIFI (rhbz 1923175)</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; - 20211119-105.gitf5d51956" date="1638792000">- Update to latest upstream linux-firmware image for assorted updates
- Update to latest AMD GPU firmware (rhbz 1986660)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; - 20220209-106.git6342082c" date="1644494400">- Update to latest upstream linux-firmware image for assorted updates
- Include AMD GPU firmware fix (rhbz 2031172)
- Support QCA WCN6856 v2.1 Module: Bluetooth firmware (rhbz 2007904)</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; - 20220517-107.git251d2900" date="1652875200">- Update to latest upstream linux-firmware image for assorted updates
- Include latest qed firmware update (rhbz 2040269)
- Include latest bnx2x firmware update (rhbz 2040273)
- Include latest ice firmware update (rhbz 2059384, rhbz 2081543)
- Include latest Qualcomm firmware update (rhbz 2062871)</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; - 20220517-108.git251d2900" date="1654257600">- Bump NVR due to conflict with late 8.6 iwl firmware package versioning</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; - 20220713-109.gitdfa29317" date="1657713600">- Update to latest upstream linux-firmware image for assorted updates
- Include even newer qed firmware update (rhbz 2040269)</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; - 20220726-110.git150864a4" date="1658836800">- Omit unused password-protected vxge firmware files from package (rhbz 2108051)
- Pick up latest AMD GPU firmwares</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; - 20220726-111.git150864a4" date="1676635200">- Update AMD GPU firmware for multiple monitor fixes (rhbz 2165148)</changelog>
</package>
<package pkgid="70e64515bb1a6a2b39f7cc955dfd30cb0a8fd2f740da86a63a9c30ec7b14b03a" name="iwl5150-firmware" arch="noarch">
  <version epoch="0" ver="8.24.2.2" rel="111.el8_7.1"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20201218-102.git05789708" date="1611748800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1918613)</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; - 20210702-103.gitd79c2677" date="1625227200">- Update to latest upstream linux-firmware image for assorted updates
- Include support for the Qualcomm AX500-DBS (QCA6390) 802.11ax Wireless (rhbz 1725913)
- Firmware for Chelsio T4/T5/T6 adapters (rhbz 1961398)
- Incorrect NVIDIA GPU firmware used for TU102 and TU104 GPUs (rhbz 1965312)
- Package the new iwl7260 ucode files and also the new binary format PNVM</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; - 20211007-104.git7a300505" date="1633608000">- Update to latest upstream linux-firmware image for assorted updates
- Certain amdgpu firmware files cause random hangs with AMD Picasso/Raven Ridge APUs (rhbz 2000879)
- Support Intel CNVi AX211 Garfield Peak2 on ADL - Bluetooth (rhbz 1923179)
- Support Intel CNVi AX211 Garfield Peak2 on ADL - WIFI (rhbz 1923175)</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; - 20211119-105.gitf5d51956" date="1638792000">- Update to latest upstream linux-firmware image for assorted updates
- Update to latest AMD GPU firmware (rhbz 1986660)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; - 20220209-106.git6342082c" date="1644494400">- Update to latest upstream linux-firmware image for assorted updates
- Include AMD GPU firmware fix (rhbz 2031172)
- Support QCA WCN6856 v2.1 Module: Bluetooth firmware (rhbz 2007904)</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; - 20220517-107.git251d2900" date="1652875200">- Update to latest upstream linux-firmware image for assorted updates
- Include latest qed firmware update (rhbz 2040269)
- Include latest bnx2x firmware update (rhbz 2040273)
- Include latest ice firmware update (rhbz 2059384, rhbz 2081543)
- Include latest Qualcomm firmware update (rhbz 2062871)</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; - 20220517-108.git251d2900" date="1654257600">- Bump NVR due to conflict with late 8.6 iwl firmware package versioning</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; - 20220713-109.gitdfa29317" date="1657713600">- Update to latest upstream linux-firmware image for assorted updates
- Include even newer qed firmware update (rhbz 2040269)</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; - 20220726-110.git150864a4" date="1658836800">- Omit unused password-protected vxge firmware files from package (rhbz 2108051)
- Pick up latest AMD GPU firmwares</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; - 20220726-111.git150864a4" date="1676635200">- Update AMD GPU firmware for multiple monitor fixes (rhbz 2165148)</changelog>
</package>
<package pkgid="467c445765a5854f371ce73ece0d1d88665ace272b21641935b48604b2c22f67" name="iwl6000-firmware" arch="noarch">
  <version epoch="0" ver="9.221.4.1" rel="111.el8_7.1"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20201218-102.git05789708" date="1611748800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1918613)</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; - 20210702-103.gitd79c2677" date="1625227200">- Update to latest upstream linux-firmware image for assorted updates
- Include support for the Qualcomm AX500-DBS (QCA6390) 802.11ax Wireless (rhbz 1725913)
- Firmware for Chelsio T4/T5/T6 adapters (rhbz 1961398)
- Incorrect NVIDIA GPU firmware used for TU102 and TU104 GPUs (rhbz 1965312)
- Package the new iwl7260 ucode files and also the new binary format PNVM</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; - 20211007-104.git7a300505" date="1633608000">- Update to latest upstream linux-firmware image for assorted updates
- Certain amdgpu firmware files cause random hangs with AMD Picasso/Raven Ridge APUs (rhbz 2000879)
- Support Intel CNVi AX211 Garfield Peak2 on ADL - Bluetooth (rhbz 1923179)
- Support Intel CNVi AX211 Garfield Peak2 on ADL - WIFI (rhbz 1923175)</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; - 20211119-105.gitf5d51956" date="1638792000">- Update to latest upstream linux-firmware image for assorted updates
- Update to latest AMD GPU firmware (rhbz 1986660)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; - 20220209-106.git6342082c" date="1644494400">- Update to latest upstream linux-firmware image for assorted updates
- Include AMD GPU firmware fix (rhbz 2031172)
- Support QCA WCN6856 v2.1 Module: Bluetooth firmware (rhbz 2007904)</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; - 20220517-107.git251d2900" date="1652875200">- Update to latest upstream linux-firmware image for assorted updates
- Include latest qed firmware update (rhbz 2040269)
- Include latest bnx2x firmware update (rhbz 2040273)
- Include latest ice firmware update (rhbz 2059384, rhbz 2081543)
- Include latest Qualcomm firmware update (rhbz 2062871)</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; - 20220517-108.git251d2900" date="1654257600">- Bump NVR due to conflict with late 8.6 iwl firmware package versioning</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; - 20220713-109.gitdfa29317" date="1657713600">- Update to latest upstream linux-firmware image for assorted updates
- Include even newer qed firmware update (rhbz 2040269)</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; - 20220726-110.git150864a4" date="1658836800">- Omit unused password-protected vxge firmware files from package (rhbz 2108051)
- Pick up latest AMD GPU firmwares</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; - 20220726-111.git150864a4" date="1676635200">- Update AMD GPU firmware for multiple monitor fixes (rhbz 2165148)</changelog>
</package>
<package pkgid="512f46d4df39a559c081aba7e66c06c1c0fc0841d164a08d6b3275ce34f8b6d8" name="iwl6000g2a-firmware" arch="noarch">
  <version epoch="0" ver="18.168.6.1" rel="111.el8_7.1"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20201218-102.git05789708" date="1611748800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1918613)</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; - 20210702-103.gitd79c2677" date="1625227200">- Update to latest upstream linux-firmware image for assorted updates
- Include support for the Qualcomm AX500-DBS (QCA6390) 802.11ax Wireless (rhbz 1725913)
- Firmware for Chelsio T4/T5/T6 adapters (rhbz 1961398)
- Incorrect NVIDIA GPU firmware used for TU102 and TU104 GPUs (rhbz 1965312)
- Package the new iwl7260 ucode files and also the new binary format PNVM</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; - 20211007-104.git7a300505" date="1633608000">- Update to latest upstream linux-firmware image for assorted updates
- Certain amdgpu firmware files cause random hangs with AMD Picasso/Raven Ridge APUs (rhbz 2000879)
- Support Intel CNVi AX211 Garfield Peak2 on ADL - Bluetooth (rhbz 1923179)
- Support Intel CNVi AX211 Garfield Peak2 on ADL - WIFI (rhbz 1923175)</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; - 20211119-105.gitf5d51956" date="1638792000">- Update to latest upstream linux-firmware image for assorted updates
- Update to latest AMD GPU firmware (rhbz 1986660)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; - 20220209-106.git6342082c" date="1644494400">- Update to latest upstream linux-firmware image for assorted updates
- Include AMD GPU firmware fix (rhbz 2031172)
- Support QCA WCN6856 v2.1 Module: Bluetooth firmware (rhbz 2007904)</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; - 20220517-107.git251d2900" date="1652875200">- Update to latest upstream linux-firmware image for assorted updates
- Include latest qed firmware update (rhbz 2040269)
- Include latest bnx2x firmware update (rhbz 2040273)
- Include latest ice firmware update (rhbz 2059384, rhbz 2081543)
- Include latest Qualcomm firmware update (rhbz 2062871)</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; - 20220517-108.git251d2900" date="1654257600">- Bump NVR due to conflict with late 8.6 iwl firmware package versioning</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; - 20220713-109.gitdfa29317" date="1657713600">- Update to latest upstream linux-firmware image for assorted updates
- Include even newer qed firmware update (rhbz 2040269)</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; - 20220726-110.git150864a4" date="1658836800">- Omit unused password-protected vxge firmware files from package (rhbz 2108051)
- Pick up latest AMD GPU firmwares</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; - 20220726-111.git150864a4" date="1676635200">- Update AMD GPU firmware for multiple monitor fixes (rhbz 2165148)</changelog>
</package>
<package pkgid="5832050bb2b1cf8594240600cd217e863e116ff58b68df5c0b0ff9ce2143b2d7" name="iwl6000g2b-firmware" arch="noarch">
  <version epoch="0" ver="18.168.6.1" rel="111.el8_7.1"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20201218-102.git05789708" date="1611748800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1918613)</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; - 20210702-103.gitd79c2677" date="1625227200">- Update to latest upstream linux-firmware image for assorted updates
- Include support for the Qualcomm AX500-DBS (QCA6390) 802.11ax Wireless (rhbz 1725913)
- Firmware for Chelsio T4/T5/T6 adapters (rhbz 1961398)
- Incorrect NVIDIA GPU firmware used for TU102 and TU104 GPUs (rhbz 1965312)
- Package the new iwl7260 ucode files and also the new binary format PNVM</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; - 20211007-104.git7a300505" date="1633608000">- Update to latest upstream linux-firmware image for assorted updates
- Certain amdgpu firmware files cause random hangs with AMD Picasso/Raven Ridge APUs (rhbz 2000879)
- Support Intel CNVi AX211 Garfield Peak2 on ADL - Bluetooth (rhbz 1923179)
- Support Intel CNVi AX211 Garfield Peak2 on ADL - WIFI (rhbz 1923175)</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; - 20211119-105.gitf5d51956" date="1638792000">- Update to latest upstream linux-firmware image for assorted updates
- Update to latest AMD GPU firmware (rhbz 1986660)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; - 20220209-106.git6342082c" date="1644494400">- Update to latest upstream linux-firmware image for assorted updates
- Include AMD GPU firmware fix (rhbz 2031172)
- Support QCA WCN6856 v2.1 Module: Bluetooth firmware (rhbz 2007904)</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; - 20220517-107.git251d2900" date="1652875200">- Update to latest upstream linux-firmware image for assorted updates
- Include latest qed firmware update (rhbz 2040269)
- Include latest bnx2x firmware update (rhbz 2040273)
- Include latest ice firmware update (rhbz 2059384, rhbz 2081543)
- Include latest Qualcomm firmware update (rhbz 2062871)</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; - 20220517-108.git251d2900" date="1654257600">- Bump NVR due to conflict with late 8.6 iwl firmware package versioning</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; - 20220713-109.gitdfa29317" date="1657713600">- Update to latest upstream linux-firmware image for assorted updates
- Include even newer qed firmware update (rhbz 2040269)</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; - 20220726-110.git150864a4" date="1658836800">- Omit unused password-protected vxge firmware files from package (rhbz 2108051)
- Pick up latest AMD GPU firmwares</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; - 20220726-111.git150864a4" date="1676635200">- Update AMD GPU firmware for multiple monitor fixes (rhbz 2165148)</changelog>
</package>
<package pkgid="067424695aec621a8568896fc67cb3b38e1063f7bc2e69e3f83507a70340c2c7" name="iwl6050-firmware" arch="noarch">
  <version epoch="0" ver="41.28.5.1" rel="111.el8_7.1"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20201218-102.git05789708" date="1611748800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1918613)</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; - 20210702-103.gitd79c2677" date="1625227200">- Update to latest upstream linux-firmware image for assorted updates
- Include support for the Qualcomm AX500-DBS (QCA6390) 802.11ax Wireless (rhbz 1725913)
- Firmware for Chelsio T4/T5/T6 adapters (rhbz 1961398)
- Incorrect NVIDIA GPU firmware used for TU102 and TU104 GPUs (rhbz 1965312)
- Package the new iwl7260 ucode files and also the new binary format PNVM</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; - 20211007-104.git7a300505" date="1633608000">- Update to latest upstream linux-firmware image for assorted updates
- Certain amdgpu firmware files cause random hangs with AMD Picasso/Raven Ridge APUs (rhbz 2000879)
- Support Intel CNVi AX211 Garfield Peak2 on ADL - Bluetooth (rhbz 1923179)
- Support Intel CNVi AX211 Garfield Peak2 on ADL - WIFI (rhbz 1923175)</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; - 20211119-105.gitf5d51956" date="1638792000">- Update to latest upstream linux-firmware image for assorted updates
- Update to latest AMD GPU firmware (rhbz 1986660)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; - 20220209-106.git6342082c" date="1644494400">- Update to latest upstream linux-firmware image for assorted updates
- Include AMD GPU firmware fix (rhbz 2031172)
- Support QCA WCN6856 v2.1 Module: Bluetooth firmware (rhbz 2007904)</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; - 20220517-107.git251d2900" date="1652875200">- Update to latest upstream linux-firmware image for assorted updates
- Include latest qed firmware update (rhbz 2040269)
- Include latest bnx2x firmware update (rhbz 2040273)
- Include latest ice firmware update (rhbz 2059384, rhbz 2081543)
- Include latest Qualcomm firmware update (rhbz 2062871)</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; - 20220517-108.git251d2900" date="1654257600">- Bump NVR due to conflict with late 8.6 iwl firmware package versioning</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; - 20220713-109.gitdfa29317" date="1657713600">- Update to latest upstream linux-firmware image for assorted updates
- Include even newer qed firmware update (rhbz 2040269)</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; - 20220726-110.git150864a4" date="1658836800">- Omit unused password-protected vxge firmware files from package (rhbz 2108051)
- Pick up latest AMD GPU firmwares</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; - 20220726-111.git150864a4" date="1676635200">- Update AMD GPU firmware for multiple monitor fixes (rhbz 2165148)</changelog>
</package>
<package pkgid="cb2e7c67f2cba2028ce57dd39af4a178dccde2b812e21edb598a7b1c0a0c7cf3" name="iwl7260-firmware" arch="noarch">
  <version epoch="1" ver="25.30.13.0" rel="111.el8_7.1"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20201218-102.git05789708" date="1611748800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1918613)</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; - 20210702-103.gitd79c2677" date="1625227200">- Update to latest upstream linux-firmware image for assorted updates
- Include support for the Qualcomm AX500-DBS (QCA6390) 802.11ax Wireless (rhbz 1725913)
- Firmware for Chelsio T4/T5/T6 adapters (rhbz 1961398)
- Incorrect NVIDIA GPU firmware used for TU102 and TU104 GPUs (rhbz 1965312)
- Package the new iwl7260 ucode files and also the new binary format PNVM</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; - 20211007-104.git7a300505" date="1633608000">- Update to latest upstream linux-firmware image for assorted updates
- Certain amdgpu firmware files cause random hangs with AMD Picasso/Raven Ridge APUs (rhbz 2000879)
- Support Intel CNVi AX211 Garfield Peak2 on ADL - Bluetooth (rhbz 1923179)
- Support Intel CNVi AX211 Garfield Peak2 on ADL - WIFI (rhbz 1923175)</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; - 20211119-105.gitf5d51956" date="1638792000">- Update to latest upstream linux-firmware image for assorted updates
- Update to latest AMD GPU firmware (rhbz 1986660)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; - 20220209-106.git6342082c" date="1644494400">- Update to latest upstream linux-firmware image for assorted updates
- Include AMD GPU firmware fix (rhbz 2031172)
- Support QCA WCN6856 v2.1 Module: Bluetooth firmware (rhbz 2007904)</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; - 20220517-107.git251d2900" date="1652875200">- Update to latest upstream linux-firmware image for assorted updates
- Include latest qed firmware update (rhbz 2040269)
- Include latest bnx2x firmware update (rhbz 2040273)
- Include latest ice firmware update (rhbz 2059384, rhbz 2081543)
- Include latest Qualcomm firmware update (rhbz 2062871)</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; - 20220517-108.git251d2900" date="1654257600">- Bump NVR due to conflict with late 8.6 iwl firmware package versioning</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; - 20220713-109.gitdfa29317" date="1657713600">- Update to latest upstream linux-firmware image for assorted updates
- Include even newer qed firmware update (rhbz 2040269)</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; - 20220726-110.git150864a4" date="1658836800">- Omit unused password-protected vxge firmware files from package (rhbz 2108051)
- Pick up latest AMD GPU firmwares</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; - 20220726-111.git150864a4" date="1676635200">- Update AMD GPU firmware for multiple monitor fixes (rhbz 2165148)</changelog>
</package>
<package pkgid="ca81802e93c78e21a1159879685a4d7eb5bec2382b76fa26b81ce46e46220f6e" name="kernel" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="425.10.1.el8_7"/>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.1.1.el8]" date="1663588800">- i40e: Fix kernel crash during module removal (Ivan Vecera) [2091489]
- redhat: enable zstream release numbering for rhel 8.7 (Jarod Wilson)
- ice: Allow operation with reduced device MSI-X (Petr Oros) [2102844]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.2.1.el8]" date="1664193600">- EDAC/ghes: Set the DIMM label unconditionally (Aristeu Rozanski) [2109712]
- configs: enable CONFIG_HP_ILO for aarch64 (Mark Salter) [2123508]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.3.1.el8]" date="1664539200">- iwlwifi: limit fw version for AC9560 to avoid fw crash (Íñigo Huguet) [2129297]
- sfc: fix null pointer dereference in efx_hard_start_xmit (Íñigo Huguet) [2119638]
- sfc: fix TX channel offset when using legacy interrupts (Íñigo Huguet) [2119638]
- netfilter: conntrack: reduce timeout when receiving out-of-window fin or rst (Florian Westphal) [2047366]
- netfilter: conntrack: remove unneeded indent level (Florian Westphal) [2047366]
- netfilter: conntrack: ignore overly delayed tcp packets (Florian Westphal) [2047366]
- netfilter: conntrack: prepare tcp_in_window for ternary return value (Florian Westphal) [2047366]
- netfilter: conntrack: remove pr_debug callsites from tcp tracker (Florian Westphal) [2047366]
- netfilter: conntrack: work around exceeded receive window (Florian Westphal) [2047366]
- netfilter: conntrack: improve RST handling when tuple is re-used (Florian Westphal) [2047366]
- netfilter: conntrack: avoid misleading 'invalid' in log message (Florian Westphal) [2047366]
- netfilter: remove BUG_ON() after skb_header_pointer() (Florian Westphal) [2047366]
- iavf: Detach device during reset task (Petr Oros) [2069206]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.4.1.el8]" date="1665144000">- random: allow reseeding DRBG with getrandom (Daiki Ueno) [2121766]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.5.1.el8_7]" date="1667476800">- ice: Fix interface being down after reset with link-down-on-close flag on (Petr Oros) [2136216 2024110]
- ice: Fix crash by keep old cfg when update TCs more than queues (Petr Oros) [2130992 2129902]
- ice: Fix tunnel checksum offload with fragmented traffic (Petr Oros) [2130992 2129902]
- ice: handle E822 generic device ID in PLDM header (Petr Oros) [2130992 2129902]
- ice: ethtool: Prohibit improper channel config for DCB (Petr Oros) [2130992 2129902]
- ice: ethtool: advertise 1000M speeds properly (Petr Oros) [2130992 2129902]
- ice: Fix switchdev rules book keeping (Petr Oros) [2130992 2129902]
- ice: fix access-beyond-end in the switch code (Petr Oros) [2130992 2129902]
- eth: ice: silence the GCC 12 array-bounds warning (Petr Oros) [2130992 2129902]
- ice: Expose RSS indirection tables for queue groups via ethtool (Petr Oros) [2130992 2129902]
- Revert "ice: Hide bus-info in ethtool for PRs in switchdev mode" (Petr Oros) [2130992 2129902]
- ice: remove period on argument description in ice_for_each_vf (Petr Oros) [2130992 2129902]
- ice: add a function comment for ice_cfg_mac_antispoof (Petr Oros) [2130992 2129902]
- ice: fix wording in comment for ice_reset_vf (Petr Oros) [2130992 2129902]
- ice: remove return value comment for ice_reset_all_vfs (Petr Oros) [2130992 2129902]
- ice: always check VF VSI pointer values (Petr Oros) [2130992 2129902]
- ice: add newline to dev_dbg in ice_vf_fdir_dump_info (Petr Oros) [2130992 2129902]
- ice: get switch id on switchdev devices (Petr Oros) [2130992 2129902]
- ice: return ENOSPC when exceeding ICE_MAX_CHAIN_WORDS (Petr Oros) [2130992 2129902]
- ice: introduce common helper for retrieving VSI by vsi_num (Petr Oros) [2130992 2129902]
- ice: use min_t() to make code cleaner in ice_gnss (Petr Oros) [2130992 2129902]
- ice: Add mpls+tso support (Petr Oros) [2130992 2129902]
- ice: switch: convert packet template match code to rodata (Petr Oros) [2130992 2129902]
- ice: switch: use convenience macros to declare dummy pkt templates (Petr Oros) [2130992 2129902]
- ice: switch: use a struct to pass packet template params (Petr Oros) [2130992 2129902]
- ice: switch: unobscurify bitops loop in ice_fill_adv_dummy_packet() (Petr Oros) [2130992 2129902]
- ice: switch: add and use u16[] aliases to ice_adv_lkup_elem::{h, m}_u (Petr Oros) [2130992 2129902]
- ice: Support GTP-U and GTP-C offload in switchdev (Petr Oros) [2130992 2129902]
- ice: Remove useless DMA-32 fallback configuration (Petr Oros) [2130992 2129902]
- ice: switch to napi_build_skb() (Petr Oros) [2130992 2129902]
- redhat: switch to z-stream dist tag and build targets (Jarod Wilson)
- block: avoid sign extend problem with default queue flags mask (Nico Pache) [2135813]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.6.1.el8_7]" date="1668168000">- ice: Add low latency Tx timestamp read (Petr Oros) [2136036 2092425]
- ice: introduce ice_ptp_reset_cached_phctime function (Petr Oros) [2136036 2092425]
- ice: re-arrange some static functions in ice_ptp.c (Petr Oros) [2136036 2092425]
- ice: track and warn when PHC update is late (Petr Oros) [2136036 2092425]
- ice: track Tx timestamp stats similar to other Intel drivers (Petr Oros) [2136036 2092425]
- ice: implement adjfine with mul_u64_u64_div_u64 (Petr Oros) [2136036 2092425]
- ice: Add EXTTS feature to the feature bitmap (Petr Oros) [2136036 2092425]
- math: Export mul_u64_u64_div_u64 (Petr Oros) [2136036 2092425]
- vfio/type1: Unpin zero pages (Alex Williamson) [2128515 2123015]
- net: atlantic: remove aq_nic_deinit() when resume (Íñigo Huguet) [2131935 2130839]
- net: atlantic: remove deep parameter on suspend/resume functions (Íñigo Huguet) [2131935 2130839]
- CI: Use zstream builder container (Veronika Kabatova)
- CI: Add disttag override for 8.7 (Veronika Kabatova)</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.7.1.el8_7]" date="1669723200">- ice: Add additional CSR registers to ETHTOOL_GREGS (Petr Oros) [2136513 2131024]
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps (Petr Oros) [2137270 2106964]
- i40e: Fix VF set max MTU size (Petr Oros) [2137270 2106964]
- iavf: Fix set max MTU size with port VLAN and jumbo frames (Petr Oros) [2137270 2106964]
- iavf: Fix bad page state (Petr Oros) [2137270 2106964]
- Revert "scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels" (Jarod Wilson)
- scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels (Tomas Henzl) [2139216]
- Revert "ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems" (Jarod Wilson)
- ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems (Wei Huang) [2142170 2130653]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.8.1.el8_7]" date="1669982400">- scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels (Tomas Henzl) [2139216 2134535]
- RDMA/mlx5: Set local port to one when accessing counters (Mohammad Kabat) [2141957 2077119]
- drm/mgag200: Fix PLL setup for G200_SE_A rev &gt;=4 (Jocelyn Falempe) [2140152 2130159]
- iavf: Do not restart Tx queues after reset task failure (Petr Oros) [2149081 2134005]
- iavf: Fix a crash during reset task (Petr Oros) [2149081 2134005]
- scsi: core: Allow the ALUA transitioning state enough time (Tomas Henzl) [2147374 2084250]
- scsi: core: Return BLK_STS_TRANSPORT for ALUA transitioning (Tomas Henzl) [2147374 2084250]
- i40e: Fix DMA mappings leak (Ivan Vecera) [2138205 2077847]
- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2142724 2142725] {CVE-2022-2964}
- net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2142724 2142725] {CVE-2022-2964}</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.9.1.el8_7]" date="1670587200">- Documentation/admin-guide: Document nomodeset kernel parameter (Jocelyn Falempe) [2145218 2143952]
- drm: Move nomodeset kernel parameter to the DRM subsystem (Jocelyn Falempe) [2145218 2143952]
- wait: Fix __wait_event_hrtimeout for RT/DL tasks (Derek Barbosa) [2138953 2125233]
- scsi: zfcp: Fix missing auto port scan and thus missing target ports (Tobias Huschle) [2127849 2121089]
- net: Fix return value of qdisc ingress handling on success (Ivan Vecera) [2141878 2131361]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.10.1.el8_7]" date="1671019200">- scsi: target: loop: Fix handling of aborted TMRs (Maurizio Lombardi) [2144583 2141713]
- ice: virtchnl rss hena support (Petr Oros) [2148130]
- ice: Fix configuring VIRTCHNL_OP_CONFIG_VSI_QUEUES with unbalanced queues (Michal Schmidt) [2142017 2137378]
- ice: Add support Flex RXD (Michal Schmidt) [2138157 2131310]
- netfilter: flowtable: fix stuck flows on cleanup due to pending work (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: add function to invoke garbage collection immediately (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: pass flowtable to nf_flow_table_iterate() (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: separate replace, destroy and stats to different workqueues (Phil Sutter) [2134084 2131370]
- x86/paravirt: Add a dummy __x86_paravirt_patch_template() function (Waiman Long) [2152206 2144161]
- x86/paravirt: Fix kABI breakage in struct pv_mmu_ops (Waiman Long) [2152206 2144161]
- drm/i915: fix TLB invalidation for Gen12 video and compute engines (Wander Lairson Costa) [2148149 2148150] {CVE-2022-4139}
- PCI: hv: Do not set PCI_COMMAND_MEMORY to reduce VM boot time (Emanuele Giuseppe Esposito) [2150912 2082836]
- iavf: Fix cached head and tail value for iavf_get_tx_pending (Stefan Assmann) [2149742 2103944]
- iavf: Fix change VF's mac address (Stefan Assmann) [2149742 2103944]
- iavf: Fix race between iavf_close and iavf_reset_task (Stefan Assmann) [2149742 2103944]
- net: ethernet: move from strlcpy with unused retval to strscpy (Stefan Assmann) [2149742 2103944]
- iavf: Fix 'tc qdisc show' listing too many queues (Stefan Assmann) [2149742 2103944]
- iavf: Fix max_rate limiting (Stefan Assmann) [2149742 2103944]
- iavf: Check for duplicate TC flower filter before parsing (Stefan Assmann) [2149742 2103944]
- iavf: Fix handling of dummy receive descriptors (Stefan Assmann) [2149742 2103944]
- iavf: Disallow changing rx/tx-frames and rx/tx-frames-irq (Stefan Assmann) [2149742 2103944]
- intel/iavf:fix repeated words in comments (Stefan Assmann) [2149742 2103944]
- intel: remove unused macros (Stefan Assmann) [2149742 2103944]
- iavf: Add waiting for response from PF in set mac (Stefan Assmann) [2149742 2103944]</changelog>
</package>
<package pkgid="7e42bf426fb86440e207e9a799488145611337eca67d5f6902ca55f12fea44b3" name="kernel" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="425.13.1.el8_7"/>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.4.1.el8]" date="1665144000">- random: allow reseeding DRBG with getrandom (Daiki Ueno) [2121766]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.5.1.el8_7]" date="1667476800">- ice: Fix interface being down after reset with link-down-on-close flag on (Petr Oros) [2136216 2024110]
- ice: Fix crash by keep old cfg when update TCs more than queues (Petr Oros) [2130992 2129902]
- ice: Fix tunnel checksum offload with fragmented traffic (Petr Oros) [2130992 2129902]
- ice: handle E822 generic device ID in PLDM header (Petr Oros) [2130992 2129902]
- ice: ethtool: Prohibit improper channel config for DCB (Petr Oros) [2130992 2129902]
- ice: ethtool: advertise 1000M speeds properly (Petr Oros) [2130992 2129902]
- ice: Fix switchdev rules book keeping (Petr Oros) [2130992 2129902]
- ice: fix access-beyond-end in the switch code (Petr Oros) [2130992 2129902]
- eth: ice: silence the GCC 12 array-bounds warning (Petr Oros) [2130992 2129902]
- ice: Expose RSS indirection tables for queue groups via ethtool (Petr Oros) [2130992 2129902]
- Revert "ice: Hide bus-info in ethtool for PRs in switchdev mode" (Petr Oros) [2130992 2129902]
- ice: remove period on argument description in ice_for_each_vf (Petr Oros) [2130992 2129902]
- ice: add a function comment for ice_cfg_mac_antispoof (Petr Oros) [2130992 2129902]
- ice: fix wording in comment for ice_reset_vf (Petr Oros) [2130992 2129902]
- ice: remove return value comment for ice_reset_all_vfs (Petr Oros) [2130992 2129902]
- ice: always check VF VSI pointer values (Petr Oros) [2130992 2129902]
- ice: add newline to dev_dbg in ice_vf_fdir_dump_info (Petr Oros) [2130992 2129902]
- ice: get switch id on switchdev devices (Petr Oros) [2130992 2129902]
- ice: return ENOSPC when exceeding ICE_MAX_CHAIN_WORDS (Petr Oros) [2130992 2129902]
- ice: introduce common helper for retrieving VSI by vsi_num (Petr Oros) [2130992 2129902]
- ice: use min_t() to make code cleaner in ice_gnss (Petr Oros) [2130992 2129902]
- ice: Add mpls+tso support (Petr Oros) [2130992 2129902]
- ice: switch: convert packet template match code to rodata (Petr Oros) [2130992 2129902]
- ice: switch: use convenience macros to declare dummy pkt templates (Petr Oros) [2130992 2129902]
- ice: switch: use a struct to pass packet template params (Petr Oros) [2130992 2129902]
- ice: switch: unobscurify bitops loop in ice_fill_adv_dummy_packet() (Petr Oros) [2130992 2129902]
- ice: switch: add and use u16[] aliases to ice_adv_lkup_elem::{h, m}_u (Petr Oros) [2130992 2129902]
- ice: Support GTP-U and GTP-C offload in switchdev (Petr Oros) [2130992 2129902]
- ice: Remove useless DMA-32 fallback configuration (Petr Oros) [2130992 2129902]
- ice: switch to napi_build_skb() (Petr Oros) [2130992 2129902]
- redhat: switch to z-stream dist tag and build targets (Jarod Wilson)
- block: avoid sign extend problem with default queue flags mask (Nico Pache) [2135813]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.6.1.el8_7]" date="1668168000">- ice: Add low latency Tx timestamp read (Petr Oros) [2136036 2092425]
- ice: introduce ice_ptp_reset_cached_phctime function (Petr Oros) [2136036 2092425]
- ice: re-arrange some static functions in ice_ptp.c (Petr Oros) [2136036 2092425]
- ice: track and warn when PHC update is late (Petr Oros) [2136036 2092425]
- ice: track Tx timestamp stats similar to other Intel drivers (Petr Oros) [2136036 2092425]
- ice: implement adjfine with mul_u64_u64_div_u64 (Petr Oros) [2136036 2092425]
- ice: Add EXTTS feature to the feature bitmap (Petr Oros) [2136036 2092425]
- math: Export mul_u64_u64_div_u64 (Petr Oros) [2136036 2092425]
- vfio/type1: Unpin zero pages (Alex Williamson) [2128515 2123015]
- net: atlantic: remove aq_nic_deinit() when resume (Íñigo Huguet) [2131935 2130839]
- net: atlantic: remove deep parameter on suspend/resume functions (Íñigo Huguet) [2131935 2130839]
- CI: Use zstream builder container (Veronika Kabatova)
- CI: Add disttag override for 8.7 (Veronika Kabatova)</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.7.1.el8_7]" date="1669723200">- ice: Add additional CSR registers to ETHTOOL_GREGS (Petr Oros) [2136513 2131024]
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps (Petr Oros) [2137270 2106964]
- i40e: Fix VF set max MTU size (Petr Oros) [2137270 2106964]
- iavf: Fix set max MTU size with port VLAN and jumbo frames (Petr Oros) [2137270 2106964]
- iavf: Fix bad page state (Petr Oros) [2137270 2106964]
- Revert "scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels" (Jarod Wilson)
- scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels (Tomas Henzl) [2139216]
- Revert "ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems" (Jarod Wilson)
- ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems (Wei Huang) [2142170 2130653]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.8.1.el8_7]" date="1669982400">- scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels (Tomas Henzl) [2139216 2134535]
- RDMA/mlx5: Set local port to one when accessing counters (Mohammad Kabat) [2141957 2077119]
- drm/mgag200: Fix PLL setup for G200_SE_A rev &gt;=4 (Jocelyn Falempe) [2140152 2130159]
- iavf: Do not restart Tx queues after reset task failure (Petr Oros) [2149081 2134005]
- iavf: Fix a crash during reset task (Petr Oros) [2149081 2134005]
- scsi: core: Allow the ALUA transitioning state enough time (Tomas Henzl) [2147374 2084250]
- scsi: core: Return BLK_STS_TRANSPORT for ALUA transitioning (Tomas Henzl) [2147374 2084250]
- i40e: Fix DMA mappings leak (Ivan Vecera) [2138205 2077847]
- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2142724 2142725] {CVE-2022-2964}
- net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2142724 2142725] {CVE-2022-2964}</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.9.1.el8_7]" date="1670587200">- Documentation/admin-guide: Document nomodeset kernel parameter (Jocelyn Falempe) [2145218 2143952]
- drm: Move nomodeset kernel parameter to the DRM subsystem (Jocelyn Falempe) [2145218 2143952]
- wait: Fix __wait_event_hrtimeout for RT/DL tasks (Derek Barbosa) [2138953 2125233]
- scsi: zfcp: Fix missing auto port scan and thus missing target ports (Tobias Huschle) [2127849 2121089]
- net: Fix return value of qdisc ingress handling on success (Ivan Vecera) [2141878 2131361]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.10.1.el8_7]" date="1671019200">- scsi: target: loop: Fix handling of aborted TMRs (Maurizio Lombardi) [2144583 2141713]
- ice: virtchnl rss hena support (Petr Oros) [2148130]
- ice: Fix configuring VIRTCHNL_OP_CONFIG_VSI_QUEUES with unbalanced queues (Michal Schmidt) [2142017 2137378]
- ice: Add support Flex RXD (Michal Schmidt) [2138157 2131310]
- netfilter: flowtable: fix stuck flows on cleanup due to pending work (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: add function to invoke garbage collection immediately (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: pass flowtable to nf_flow_table_iterate() (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: separate replace, destroy and stats to different workqueues (Phil Sutter) [2134084 2131370]
- x86/paravirt: Add a dummy __x86_paravirt_patch_template() function (Waiman Long) [2152206 2144161]
- x86/paravirt: Fix kABI breakage in struct pv_mmu_ops (Waiman Long) [2152206 2144161]
- drm/i915: fix TLB invalidation for Gen12 video and compute engines (Wander Lairson Costa) [2148149 2148150] {CVE-2022-4139}
- PCI: hv: Do not set PCI_COMMAND_MEMORY to reduce VM boot time (Emanuele Giuseppe Esposito) [2150912 2082836]
- iavf: Fix cached head and tail value for iavf_get_tx_pending (Stefan Assmann) [2149742 2103944]
- iavf: Fix change VF's mac address (Stefan Assmann) [2149742 2103944]
- iavf: Fix race between iavf_close and iavf_reset_task (Stefan Assmann) [2149742 2103944]
- net: ethernet: move from strlcpy with unused retval to strscpy (Stefan Assmann) [2149742 2103944]
- iavf: Fix 'tc qdisc show' listing too many queues (Stefan Assmann) [2149742 2103944]
- iavf: Fix max_rate limiting (Stefan Assmann) [2149742 2103944]
- iavf: Check for duplicate TC flower filter before parsing (Stefan Assmann) [2149742 2103944]
- iavf: Fix handling of dummy receive descriptors (Stefan Assmann) [2149742 2103944]
- iavf: Disallow changing rx/tx-frames and rx/tx-frames-irq (Stefan Assmann) [2149742 2103944]
- intel/iavf:fix repeated words in comments (Stefan Assmann) [2149742 2103944]
- intel: remove unused macros (Stefan Assmann) [2149742 2103944]
- iavf: Add waiting for response from PF in set mac (Stefan Assmann) [2149742 2103944]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.11.1.el8_7]" date="1673006400">- NFSD: Protect against send buffer overflow in NFSv3 READ (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv2 READ (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv3 READDIR (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv2 READDIR (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- SUNRPC: Fix svcxdr_init_encode's buflen calculation (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- SUNRPC: Fix svcxdr_init_decode's end-of-buffer calculation (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- panic, kexec: make __crash_kexec() NMI safe (Valentin Schneider) [2139580 2134126]
- kexec: turn all kexec_mutex acquisitions into trylocks (Valentin Schneider) [2139580 2134126]
- kexec: move locking into do_kexec_load (Valentin Schneider) [2139580 2134126]
- vdpa/mlx5: re-create forwarding rules after mac modified (Laurent Vivier) [2152912 2145136]
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry (Waiman Long) [2153653 2108387]
- irq: Call tick_irq_enter() inside HARDIRQ_OFFSET (Waiman Long) [2153653 2108387]
- irqtime: Move irqtime entry accounting after irq offset incrementation (Waiman Long) [2153653 2108387]
- sched/vtime: Consolidate IRQ time accounting (Waiman Long) [2153653 2108387]
- s390/vtime: Use the generic IRQ entry accounting (Waiman Long) [2153653 2108387]
- sched/cputime: Remove symbol exports from IRQ time accounting (Waiman Long) [2153653 2108387]
- genirq/irqdomain: Don't try to free an interrupt that has no mapping (Waiman Long) [2153653 2108387]
- genirq: Provide __irq_enter/exit_raw() (Waiman Long) [2153653 2108387]
- powerpc/time: Only set CONFIG_ARCH_HAS_SCALED_CPUTIME on PPC64 (Waiman Long) [2153653 2108387]
- powerpc/time: isolate scaled cputime accounting in dedicated functions. (Waiman Long) [2153653 2108387]
- PCI: hv: Fix synchronization between channel callback and hv_pci_bus_exit() (Mohammed Gamal) [2155280 2144708]
- PCI: hv: Fix synchronization between channel callback and hv_compose_msi_msg() (Mohammed Gamal) [2155280 2144708]
- PCI: hv: Use vmbus_requestor to generate transaction IDs for VMbus hardening (Mohammed Gamal) [2155280 2144708]
- net/mlx5e: TC, Reject forwarding from internal port to internal port (Mohammad Kabat) [2141959 2131345]
- hv_netvsc: Fix race between VF offering and VF association message from host (Mohammed Gamal) [2155272 2149279]
- x86/mce: Reduce number of machine checks taken during recovery (Prarit Bhargava) [2137592 2104388]
- cgroup/cpuset: Reduce cpuset_rwsem writer latency (Waiman Long) [2153108 2149031]
- rcu/exp: Mark current CPU as exp-QS in IPI loop second pass (Waiman Long) [2153108 2149031]
- rcu: Always inline rcu_dynticks_task*_{enter,exit}() (Waiman Long) [2153108 2149031]
- rcu: Fix existing exp request check in sync_sched_exp_online_cleanup() (Waiman Long) [2153108 2149031]
- rcu: Fix macro name CONFIG_TASKS_RCU_TRACE (Waiman Long) [2153108 2149031]
- rcu: Fix stall-warning deadlock due to non-release of rcu_node -&gt;lock (Waiman Long) [2153108 2149031]
- rcu: Fix to include first blocked task in stall warning (Waiman Long) [2153108 2149031]
- cgroup: Use cgroup_attach_{lock,unlock}() from cgroup_attach_task_all() (Waiman Long) [2153108 2149031]
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all() (Waiman Long) [2153108 2149031]
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock (Waiman Long) [2153108 2149031]
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree (Waiman Long) [2153108 2149031]
- cgroup/cpuset: Fix a race between cpuset_attach() and cpu hotplug (Waiman Long) [2153108 2149031]
- cgroup: reduce dependency on cgroup_mutex (Waiman Long) [2153108 2149031]
- sunrpc: Set sk_allocation to GFP_NOFS to avoid using current-&gt;task_frag. (Guillaume Nault) [2153230 2089660]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.12.1.el8_7]" date="1674129600">- x86/fpu: Prevent FPU state corruption (Oleksandr Natalenko) [2134586 2130890]
- x86/fpu: Drop fpregs lock before inheriting FPU permissions (Eder Zulian) [2154460 2153549]
- kernel-doc: fix undefined args variable (Jan Stancek) [2157905 2134954]
- mm: memcontrol: fix potential oom_lock recursion deadlock (Waiman Long) [2157922 2138886]
- memcg: prohibit unconditional exceeding the limit of dying tasks (Waiman Long) [2157922 2138886]
- mm, oom: do not trigger out_of_memory from the #PF (Waiman Long) [2157922 2138886]
- mm, oom: pagefault_out_of_memory: don't force global OOM for dying tasks (Waiman Long) [2157922 2138886]
- mm: memcontrol: don't count limit-setting reclaim as memory pressure (Waiman Long) [2157922 2138886]
- KVM: s390: vsie: Fix the initialization of the epoch extension (epdx) field (Thomas Huth) [2158813 2151854]
- net: mana: Fix race on per-CQ variable napi work_done (Emanuele Giuseppe Esposito) [2155437 2151722]
- mei: me: add adler lake point S DID (Prarit Bhargava) [2141783 2141602]
- PCI: hv: Only reuse existing IRTE allocation for Multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix the definition of vector in hv_compose_msi_msg() (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix interrupt mapping for multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Reuse existing IRTE allocation in compose_msi_msg() (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix hv_arch_irq_unmask() for multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix multi-MSI to allow more than one MSI vector (Emanuele Giuseppe Esposito) [2155289 2100275]
- drm/ast: Support multiple outputs (Jarod Wilson) [2149287 2147553]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.13.1.el8_7]" date="1675339200">- mm/cgroup/reclaim: fix dirty pages throttling on cgroup v1 (Waiman Long) [2160221]
- mm: vmscan: remove deadlock due to throttling failing to make progress (Waiman Long) [2160221]
- mm: vmscan: reduce throttling due to a failure to make progress -fix (Waiman Long) [2160221]
- mm: vmscan: Reduce throttling due to a failure to make progress (Waiman Long) [2160221]
- mm/vmscan: delay waking of tasks throttled on NOPROGRESS (Waiman Long) [2160221]
- mm/vmscan: increase the timeout if page reclaim is not making progress (Waiman Long) [2160221]
- mm/vmscan: centralise timeout values for reclaim_throttle (Waiman Long) [2160221]
- mm/page_alloc: remove the throttling logic from the page allocator (Waiman Long) [2160221]
- mm/writeback: throttle based on page writeback instead of congestion (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim when no progress is being made (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim and compaction when too may pages are isolated (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim until some writeback completes if congested (Waiman Long) [2160221]
- mm/vmscan.c: delete or fix duplicated words (Waiman Long) [2160221]
- mm,page_alloc: PF_WQ_WORKER threads must sleep at should_reclaim_retry() (Nico Pache) [2160221]
- ceph: avoid putting the realm twice when decoding snaps fails (Xiubo Li) [2155797 2139881]
- mm/mremap: hold the rmap lock in write mode when moving page table entries. (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: use pmd/pud_poplulate to update page table entries (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: don't enable optimized PUD move if page table levels is 2 (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: convert huge PUD move to separate helper (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: fix BUILD_BUG_ON() error in get_extent (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap.c: fix extent calculation (Waiman Long) [2140944] {CVE-2022-41222}
- x86: mremap speedup - Enable HAVE_MOVE_PUD (Waiman Long) [2140944] {CVE-2022-41222}
- mm: speedup mremap on 1GB or larger regions (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: start addresses are properly aligned (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: calculate extent in one place (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: it is sure to have enough space when extent meets requirement (Waiman Long) [2140944] {CVE-2022-41222}
- s390/boot: add secure boot trailer (Tobias Huschle) [2151530 2141967]
- i40e: Fix VF hang when reset is triggered on another VF (Ivan Vecera) [2160460 2103801]
- i2c: ismt: Fix an out-of-bounds bug in ismt_access() (Prarit Bhargava) [2154388 2119066] {CVE-2022-2873}
- iavf: schedule watchdog immediately when changing primary MAC (Michal Schmidt) [2163257 2152493]
- iavf: Move netdev_update_features() into watchdog task (Michal Schmidt) [2163257 2152493]
- iavf: fix temporary deadlock and failure to set MAC address (Michal Schmidt) [2163257 2152493]
- iavf: Fix error handling in iavf_init_module() (Michal Schmidt) [2163257 2152493]
- iommu/vt-d: Clean up si_domain in the init_dmars() error path (Jerry Snitselaar) [2149474 2118428]
- x86/pci/xen: Use msi_msg shadow structs (Jerry Snitselaar) [2149474 2118428]
- iommu/intel: Use msi_msg shadow structs (Jerry Snitselaar) [2149474 2118428]
- PCI: MSI: Fix Kconfig dependencies for PCI_MSI_ARCH_FALLBACKS (Jerry Snitselaar) [2149474 2118428]
- x86/apic/msi: Unbreak DMAR and HPET MSI (Jerry Snitselaar) [2149474 2118428]
- iommu/amd: Remove domain search for PCI/MSI (Jerry Snitselaar) [2149474 2118428]
- iommu/vt-d: Remove domain search for PCI/MSI[X] (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Make most MSI ops XEN private (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Cleanup the arch_*_msi_irqs() leftovers (Jerry Snitselaar) [2149474 2118428]
- PCI/MSI: Make arch_.*_msi_irq[s] fallbacks selectable (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Wrap XEN MSI management into irqdomain (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Consolidate XEN-MSI init (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Rework MSI teardown (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Make xen_msi_init() static and rename it to xen_hvm_msi_init() (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Move apic_post_init() invocation to one place (Jerry Snitselaar) [2149474 2118428]
- x86/msi: Use generic MSI domain ops (Jerry Snitselaar) [2149474 2118428]
- x86/msi: Remove pointless vcpu_affinity callback (Jerry Snitselaar) [2149474 2118428]
- iommu/vt-d: Fix compile error with CONFIG_PCI_ATS not set (Myron Stowe) [2149474 2118428]
- iommu/vt-d: Cure VF irqdomain hickup (Myron Stowe) [2149474 2118428]
- x86/pci: Set default irq domain in pcibios_add_device() (Myron Stowe) [2149474 2118428]
- iommm/amd: Store irq domain in struct device (Myron Stowe) [2149474 2118428]
- iommm/vt-d: Store irq domain in struct device (Myron Stowe) [2149474 2118428]
- PCI/MSI: Provide pci_dev_has_special_msi_domain() helper (Myron Stowe) [2149474 2118428]
- x86/msi: Consolidate MSI allocation (Myron Stowe) [2149474 2118428]
- PCI/MSI: Rework pci_msi_domain_calc_hwirq() (Myron Stowe) [2149474 2118428]
- x86/irq: Consolidate UV domain allocation (Myron Stowe) [2149474 2118428]
- x86/irq: Consolidate DMAR irq allocation (Myron Stowe) [2149474 2118428]
- x86_ioapic_Consolidate_IOAPIC_allocation (Myron Stowe) [2149474 2118428]
- x86/msi: Consolidate HPET allocation (Myron Stowe) [2149474 2118428]
- iommu/irq_remapping: Consolidate irq domain lookup (Myron Stowe) [2149474 2118428]
- iommu/amd: Consolidate irq domain getter (Myron Stowe) [2149474 2118428]
- iommu/vt-d: Consolidate irq domain getter (Myron Stowe) [2149474 2118428]
- x86/irq: Add allocation type for parent domain retrieval (Myron Stowe) [2149474 2118428]
- irqdomain: Export irq_domain_update_bus_token (Myron Stowe) [2149474 2118428]
- gitlab-ci: use CI templates from production branch (Michael Hofmann)
- iavf: remove INITIAL_MAC_SET to allow gARP to work properly (Stefan Assmann) [2149745 1938635]
- Revert "scsi: iscsi: ql4xxx: Use per-session workqueue for unbinding" (Chris Leech) [2152734 2122624]
- Revert "scsi: iscsi: Use the session workqueue for recovery" (Chris Leech) [2152734 2122624]
- arm64/bpf: Remove 128MB limit for BPF JIT programs (Yauheni Kaliuta) [2152138 2140163]
- bpf: Define bpf_jit_alloc_exec_limit for arm64 JIT (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: add `type` and `data` fields (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: use `ex` for `exception_table_entry` (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: make fixup_exception() return bool (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: consolidate definitions (Yauheni Kaliuta) [2152138 2140163]
- arm64: kvm: use kvm_exception_table_entry (Yauheni Kaliuta) [2152138 2140163]
- be2net: Fix buffer overflow in be_get_module_eeprom (Josef Oskera) [2160182 2126917]</changelog>
</package>
<package pkgid="d7ebc66aa322c7c8bb413a8e0733e44b5fd30d3805a0b469226e18144e94d89e" name="kernel" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="425.19.2.el8_7"/>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.11.1.el8_7]" date="1673006400">- NFSD: Protect against send buffer overflow in NFSv3 READ (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv2 READ (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv3 READDIR (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv2 READDIR (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- SUNRPC: Fix svcxdr_init_encode's buflen calculation (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- SUNRPC: Fix svcxdr_init_decode's end-of-buffer calculation (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- panic, kexec: make __crash_kexec() NMI safe (Valentin Schneider) [2139580 2134126]
- kexec: turn all kexec_mutex acquisitions into trylocks (Valentin Schneider) [2139580 2134126]
- kexec: move locking into do_kexec_load (Valentin Schneider) [2139580 2134126]
- vdpa/mlx5: re-create forwarding rules after mac modified (Laurent Vivier) [2152912 2145136]
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry (Waiman Long) [2153653 2108387]
- irq: Call tick_irq_enter() inside HARDIRQ_OFFSET (Waiman Long) [2153653 2108387]
- irqtime: Move irqtime entry accounting after irq offset incrementation (Waiman Long) [2153653 2108387]
- sched/vtime: Consolidate IRQ time accounting (Waiman Long) [2153653 2108387]
- s390/vtime: Use the generic IRQ entry accounting (Waiman Long) [2153653 2108387]
- sched/cputime: Remove symbol exports from IRQ time accounting (Waiman Long) [2153653 2108387]
- genirq/irqdomain: Don't try to free an interrupt that has no mapping (Waiman Long) [2153653 2108387]
- genirq: Provide __irq_enter/exit_raw() (Waiman Long) [2153653 2108387]
- powerpc/time: Only set CONFIG_ARCH_HAS_SCALED_CPUTIME on PPC64 (Waiman Long) [2153653 2108387]
- powerpc/time: isolate scaled cputime accounting in dedicated functions. (Waiman Long) [2153653 2108387]
- PCI: hv: Fix synchronization between channel callback and hv_pci_bus_exit() (Mohammed Gamal) [2155280 2144708]
- PCI: hv: Fix synchronization between channel callback and hv_compose_msi_msg() (Mohammed Gamal) [2155280 2144708]
- PCI: hv: Use vmbus_requestor to generate transaction IDs for VMbus hardening (Mohammed Gamal) [2155280 2144708]
- net/mlx5e: TC, Reject forwarding from internal port to internal port (Mohammad Kabat) [2141959 2131345]
- hv_netvsc: Fix race between VF offering and VF association message from host (Mohammed Gamal) [2155272 2149279]
- x86/mce: Reduce number of machine checks taken during recovery (Prarit Bhargava) [2137592 2104388]
- cgroup/cpuset: Reduce cpuset_rwsem writer latency (Waiman Long) [2153108 2149031]
- rcu/exp: Mark current CPU as exp-QS in IPI loop second pass (Waiman Long) [2153108 2149031]
- rcu: Always inline rcu_dynticks_task*_{enter,exit}() (Waiman Long) [2153108 2149031]
- rcu: Fix existing exp request check in sync_sched_exp_online_cleanup() (Waiman Long) [2153108 2149031]
- rcu: Fix macro name CONFIG_TASKS_RCU_TRACE (Waiman Long) [2153108 2149031]
- rcu: Fix stall-warning deadlock due to non-release of rcu_node -&gt;lock (Waiman Long) [2153108 2149031]
- rcu: Fix to include first blocked task in stall warning (Waiman Long) [2153108 2149031]
- cgroup: Use cgroup_attach_{lock,unlock}() from cgroup_attach_task_all() (Waiman Long) [2153108 2149031]
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all() (Waiman Long) [2153108 2149031]
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock (Waiman Long) [2153108 2149031]
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree (Waiman Long) [2153108 2149031]
- cgroup/cpuset: Fix a race between cpuset_attach() and cpu hotplug (Waiman Long) [2153108 2149031]
- cgroup: reduce dependency on cgroup_mutex (Waiman Long) [2153108 2149031]
- sunrpc: Set sk_allocation to GFP_NOFS to avoid using current-&gt;task_frag. (Guillaume Nault) [2153230 2089660]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.12.1.el8_7]" date="1674129600">- x86/fpu: Prevent FPU state corruption (Oleksandr Natalenko) [2134586 2130890]
- x86/fpu: Drop fpregs lock before inheriting FPU permissions (Eder Zulian) [2154460 2153549]
- kernel-doc: fix undefined args variable (Jan Stancek) [2157905 2134954]
- mm: memcontrol: fix potential oom_lock recursion deadlock (Waiman Long) [2157922 2138886]
- memcg: prohibit unconditional exceeding the limit of dying tasks (Waiman Long) [2157922 2138886]
- mm, oom: do not trigger out_of_memory from the #PF (Waiman Long) [2157922 2138886]
- mm, oom: pagefault_out_of_memory: don't force global OOM for dying tasks (Waiman Long) [2157922 2138886]
- mm: memcontrol: don't count limit-setting reclaim as memory pressure (Waiman Long) [2157922 2138886]
- KVM: s390: vsie: Fix the initialization of the epoch extension (epdx) field (Thomas Huth) [2158813 2151854]
- net: mana: Fix race on per-CQ variable napi work_done (Emanuele Giuseppe Esposito) [2155437 2151722]
- mei: me: add adler lake point S DID (Prarit Bhargava) [2141783 2141602]
- PCI: hv: Only reuse existing IRTE allocation for Multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix the definition of vector in hv_compose_msi_msg() (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix interrupt mapping for multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Reuse existing IRTE allocation in compose_msi_msg() (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix hv_arch_irq_unmask() for multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix multi-MSI to allow more than one MSI vector (Emanuele Giuseppe Esposito) [2155289 2100275]
- drm/ast: Support multiple outputs (Jarod Wilson) [2149287 2147553]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.13.1.el8_7]" date="1675339200">- mm/cgroup/reclaim: fix dirty pages throttling on cgroup v1 (Waiman Long) [2160221]
- mm: vmscan: remove deadlock due to throttling failing to make progress (Waiman Long) [2160221]
- mm: vmscan: reduce throttling due to a failure to make progress -fix (Waiman Long) [2160221]
- mm: vmscan: Reduce throttling due to a failure to make progress (Waiman Long) [2160221]
- mm/vmscan: delay waking of tasks throttled on NOPROGRESS (Waiman Long) [2160221]
- mm/vmscan: increase the timeout if page reclaim is not making progress (Waiman Long) [2160221]
- mm/vmscan: centralise timeout values for reclaim_throttle (Waiman Long) [2160221]
- mm/page_alloc: remove the throttling logic from the page allocator (Waiman Long) [2160221]
- mm/writeback: throttle based on page writeback instead of congestion (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim when no progress is being made (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim and compaction when too may pages are isolated (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim until some writeback completes if congested (Waiman Long) [2160221]
- mm/vmscan.c: delete or fix duplicated words (Waiman Long) [2160221]
- mm,page_alloc: PF_WQ_WORKER threads must sleep at should_reclaim_retry() (Nico Pache) [2160221]
- ceph: avoid putting the realm twice when decoding snaps fails (Xiubo Li) [2155797 2139881]
- mm/mremap: hold the rmap lock in write mode when moving page table entries. (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: use pmd/pud_poplulate to update page table entries (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: don't enable optimized PUD move if page table levels is 2 (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: convert huge PUD move to separate helper (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: fix BUILD_BUG_ON() error in get_extent (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap.c: fix extent calculation (Waiman Long) [2140944] {CVE-2022-41222}
- x86: mremap speedup - Enable HAVE_MOVE_PUD (Waiman Long) [2140944] {CVE-2022-41222}
- mm: speedup mremap on 1GB or larger regions (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: start addresses are properly aligned (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: calculate extent in one place (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: it is sure to have enough space when extent meets requirement (Waiman Long) [2140944] {CVE-2022-41222}
- s390/boot: add secure boot trailer (Tobias Huschle) [2151530 2141967]
- i40e: Fix VF hang when reset is triggered on another VF (Ivan Vecera) [2160460 2103801]
- i2c: ismt: Fix an out-of-bounds bug in ismt_access() (Prarit Bhargava) [2154388 2119066] {CVE-2022-2873}
- iavf: schedule watchdog immediately when changing primary MAC (Michal Schmidt) [2163257 2152493]
- iavf: Move netdev_update_features() into watchdog task (Michal Schmidt) [2163257 2152493]
- iavf: fix temporary deadlock and failure to set MAC address (Michal Schmidt) [2163257 2152493]
- iavf: Fix error handling in iavf_init_module() (Michal Schmidt) [2163257 2152493]
- iommu/vt-d: Clean up si_domain in the init_dmars() error path (Jerry Snitselaar) [2149474 2118428]
- x86/pci/xen: Use msi_msg shadow structs (Jerry Snitselaar) [2149474 2118428]
- iommu/intel: Use msi_msg shadow structs (Jerry Snitselaar) [2149474 2118428]
- PCI: MSI: Fix Kconfig dependencies for PCI_MSI_ARCH_FALLBACKS (Jerry Snitselaar) [2149474 2118428]
- x86/apic/msi: Unbreak DMAR and HPET MSI (Jerry Snitselaar) [2149474 2118428]
- iommu/amd: Remove domain search for PCI/MSI (Jerry Snitselaar) [2149474 2118428]
- iommu/vt-d: Remove domain search for PCI/MSI[X] (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Make most MSI ops XEN private (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Cleanup the arch_*_msi_irqs() leftovers (Jerry Snitselaar) [2149474 2118428]
- PCI/MSI: Make arch_.*_msi_irq[s] fallbacks selectable (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Wrap XEN MSI management into irqdomain (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Consolidate XEN-MSI init (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Rework MSI teardown (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Make xen_msi_init() static and rename it to xen_hvm_msi_init() (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Move apic_post_init() invocation to one place (Jerry Snitselaar) [2149474 2118428]
- x86/msi: Use generic MSI domain ops (Jerry Snitselaar) [2149474 2118428]
- x86/msi: Remove pointless vcpu_affinity callback (Jerry Snitselaar) [2149474 2118428]
- iommu/vt-d: Fix compile error with CONFIG_PCI_ATS not set (Myron Stowe) [2149474 2118428]
- iommu/vt-d: Cure VF irqdomain hickup (Myron Stowe) [2149474 2118428]
- x86/pci: Set default irq domain in pcibios_add_device() (Myron Stowe) [2149474 2118428]
- iommm/amd: Store irq domain in struct device (Myron Stowe) [2149474 2118428]
- iommm/vt-d: Store irq domain in struct device (Myron Stowe) [2149474 2118428]
- PCI/MSI: Provide pci_dev_has_special_msi_domain() helper (Myron Stowe) [2149474 2118428]
- x86/msi: Consolidate MSI allocation (Myron Stowe) [2149474 2118428]
- PCI/MSI: Rework pci_msi_domain_calc_hwirq() (Myron Stowe) [2149474 2118428]
- x86/irq: Consolidate UV domain allocation (Myron Stowe) [2149474 2118428]
- x86/irq: Consolidate DMAR irq allocation (Myron Stowe) [2149474 2118428]
- x86_ioapic_Consolidate_IOAPIC_allocation (Myron Stowe) [2149474 2118428]
- x86/msi: Consolidate HPET allocation (Myron Stowe) [2149474 2118428]
- iommu/irq_remapping: Consolidate irq domain lookup (Myron Stowe) [2149474 2118428]
- iommu/amd: Consolidate irq domain getter (Myron Stowe) [2149474 2118428]
- iommu/vt-d: Consolidate irq domain getter (Myron Stowe) [2149474 2118428]
- x86/irq: Add allocation type for parent domain retrieval (Myron Stowe) [2149474 2118428]
- irqdomain: Export irq_domain_update_bus_token (Myron Stowe) [2149474 2118428]
- gitlab-ci: use CI templates from production branch (Michael Hofmann)
- iavf: remove INITIAL_MAC_SET to allow gARP to work properly (Stefan Assmann) [2149745 1938635]
- Revert "scsi: iscsi: ql4xxx: Use per-session workqueue for unbinding" (Chris Leech) [2152734 2122624]
- Revert "scsi: iscsi: Use the session workqueue for recovery" (Chris Leech) [2152734 2122624]
- arm64/bpf: Remove 128MB limit for BPF JIT programs (Yauheni Kaliuta) [2152138 2140163]
- bpf: Define bpf_jit_alloc_exec_limit for arm64 JIT (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: add `type` and `data` fields (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: use `ex` for `exception_table_entry` (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: make fixup_exception() return bool (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: consolidate definitions (Yauheni Kaliuta) [2152138 2140163]
- arm64: kvm: use kvm_exception_table_entry (Yauheni Kaliuta) [2152138 2140163]
- be2net: Fix buffer overflow in be_get_module_eeprom (Josef Oskera) [2160182 2126917]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.14.1.el8_7]" date="1676030400">- ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems (Wei Huang) [2142170 2130653]
- KVM: x86: nSVM: implement nested LBR virtualization (Emanuele Giuseppe Esposito) [2166362 2155149]
- KVM: x86: nSVM: correctly virtualize LBR msrs when L2 is running (Emanuele Giuseppe Esposito) [2166362 2155149]
- kvm: x86: SVM: use vmcb* instead of svm-&gt;vmcb where it makes sense (Emanuele Giuseppe Esposito) [2166362 2155149]
- KVM: x86: nSVM: implement nested VMLOAD/VMSAVE (Emanuele Giuseppe Esposito) [2166362 2155149]
- IB/iser: Fix login with authentication (Kamal Heib) [2161750 2120676]
- act_mirred: use the backlog for nested calls to mirred ingress (Davide Caratti) [2164648 2131339] {CVE-2022-4269}
- net/sched: act_mirred: better wording on protection against excessive stack growth (Davide Caratti) [2164648 2131339] {CVE-2022-4269}
- redhat/configs: Set CONFIG_X86_AMD_PSTATE to 'm' (Prarit Bhargava) [2151275 2145246]
- KVM: x86: smm: preserve interrupt shadow in SMRAM (Maxim Levitsky) [2166368 2097144]
- KVM: x86: SVM: don't save SVM state to SMRAM when VM is not long mode capable (Maxim Levitsky) [2166368 2097144]
- KVM: x86: SVM: use smram structs (Maxim Levitsky) [2166368 2097144]
- KVM: svm: drop explicit return value of kvm_vcpu_map (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: use smram struct for 64 bit smram load/restore (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: use smram struct for 32 bit smram load/restore (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: use smram structs in the common code (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: add structs for KVM's smram layout (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: check for failures on smm entry (Maxim Levitsky) [2166368 2097144]
- KVM: x86: do not go through ctxt-&gt;ops when emulating rsm (Maxim Levitsky) [2166368 2097144]
- KVM: x86: move SMM exit to a new file (Maxim Levitsky) [2166368 2097144]
- KVM: x86: move SMM entry to a new file (Maxim Levitsky) [2166368 2097144]
- KVM: x86: start moving SMM-related functions to new files (Maxim Levitsky) [2166368 2097144]
- bug: introduce ASSERT_STRUCT_OFFSET (Maxim Levitsky) [2166368 2097144]
- KVM: x86: Rename and expose helper to detect if INIT/SIPI are allowed (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: number of GPRs in the SMRAM image depends on the image format (Maxim Levitsky) [2166368 2097144]
- KVM: x86: emulator: update the emulation mode after CR0 write (Maxim Levitsky) [2166368 2097144]
- KVM: x86: emulator: update the emulation mode after rsm (Maxim Levitsky) [2166368 2097144]
- KVM: x86: emulator: introduce emulator_recalc_and_set_mode (Maxim Levitsky) [2166368 2097144]
- KVM: x86: emulator: em_sysexit should update ctxt-&gt;mode (Maxim Levitsky) [2166368 2097144]
- KVM: x86: Bug the VM if the emulator accesses a non-existent GPR (Maxim Levitsky) [2166368 2097144]
- \KVM: x86: Reduce the number of emulator GPRs to '8' for 32-bit KVM (Maxim Levitsky) [2166368 2097144]
- KVM: x86: Use 16-bit fields to track dirty/valid emulator GPRs (Maxim Levitsky) [2166368 2097144]
- KVM: x86: Omit VCPU_REGS_RIP from emulator's _regs array (Maxim Levitsky) [2166368 2097144]
- \KVM: x86: Harden _regs accesses to guard against buggy input (Maxim Levitsky) [2166368 2097144]
- KVM: x86: Grab regs_dirty in local 'unsigned long' (Maxim Levitsky) [2166368 2097144]
- proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152571 2152572] {CVE-2022-4378}
- proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152571 2152572] {CVE-2022-4378}</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.15.1.el8_7]" date="1676548800">- net/mlx5e: Fix use-after-free when reverting termination table (Amir Tzin) [2167640 2112927]
- net/mlx5: Do not query pci info while pci disabled (Amir Tzin) [2167645 2129249]
- x86/fpu: Fix copy_xstate_to_uabi() to copy init states correctly (Dean Nelson) [2168384 2122850]
- x86/fpu: Exclude dynamic states from init_fpstate (Dean Nelson) [2168384 2122850]
- x86/fpu: Fix the init_fpstate size check with the actual size (Dean Nelson) [2168384 2122850]
- x86/fpu: Configure init_fpstate attributes orderly (Dean Nelson) [2168384 2122850]
- x86/fpu/xstate: Fix the ARCH_REQ_XCOMP_PERM implementation (Dean Nelson) [2168384 2122850]
- net/mlx5: E-Switch, properly handle ingress tagged packets on VST (Amir Tzin) [2166665 2096109]
- cpuhotplug: Fix KABI breakage (Prarit Bhargava) [2162763 2156529]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.16.1.el8_7]" date="1677153600">- ipv6: fix panic when fib_lookup_arg-&gt;result is fib6_info (Jiri Benc) [2167602 2140599]
- ceph: blocklist the kclient when receiving corrupted snap trace (Xiubo Li) [2168896 2162414]
- ceph: move mount state enum to super.h (Xiubo Li) [2168896 2162414]
- s390/kexec: fix ipl report address for kdump (Tobias Huschle) [2166296 2161328]
- mm, compaction: fix fast_isolate_around() to stay within boundaries (Daniel Vacek) [2170576 2149309]
- scsi: storvsc: Fix swiotlb bounce buffer leak in confidential VM (Emanuele Giuseppe Esposito) [2170228 2150659]
- netfilter: conntrack: handle tcp challenge acks during connection reuse (Florian Westphal) [2165587 2158726]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.17.1.el8_7]" date="1677844800">- net: mana: Add rmb after checking owner bits (Mohammed Gamal) [2173103 2139462]
- net: mana: Add support of XDP_REDIRECT action (Mohammed Gamal) [2173103 2139462]
- net: mana: Add the Linux MANA PF driver (Mohammed Gamal) [2173103 2139462]
- ice: fix lost multicast packets in promisc mode (Ken Cox) [2172550 2138215]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.18.0-425.18.1.el8_7]" date="1678449600">- futex: Resend potentially swallowed owner death notification (Rafael Aquini) [2170054 2161526]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.19.1.el8_7]" date="1678968000">- s390/dasd: fix no record found for raw_track_access (Tobias Huschle) [2167776 2161270]
- locking/rwsem: Disable preemption in all down_read*() and up_read() code paths (Waiman Long) [2170939 2162139]
- locking/rwsem: Prevent non-first waiter from spinning in down_write() slowpath (Waiman Long) [2170939 2162139]
- locking/rwsem: Allow slowpath writer to ignore handoff bit if not set by first waiter (Waiman Long) [2170939 2162139]
- locking/rwsem: Always try to wake waiters in out_nolock path (Waiman Long) [2170939 2162139]
- locking/rwsem: No need to check for handoff bit if wait queue empty (Waiman Long) [2170939 2162139]
- locking/rwsem: Make handoff bit handling more consistent (Waiman Long) [2170939 2162139]
- locking/rwsem: Disable preemption while trying for rwsem lock (Waiman Long) [2170939 2162139]
- locking/rwsem: Conditionally wake waiters in reader/writer slowpaths (Waiman Long) [2170939 2162139]
- locking: Make owner_on_cpu() into &lt;linux/sched.h&gt; (Waiman Long) [2170939 2162139]
- locking/rwsem: Optimize down_read_trylock() under highly contended case (Waiman Long) [2170939 2162139]
- locking/rwsem: Fix comments about reader optimistic lock stealing conditions (Waiman Long) [2170939 2162139]
- locking/rwsem: Disable preemption for spinning region (Waiman Long) [2170939 2162139]
- locking: Remove rcu_read_{,un}lock() for preempt_{dis,en}able() (Waiman Long) [2170939 2162139]
- watchdog: fix UAF in reboot notifier handling in watchdog core code (Wander Lairson Costa) [2139770 2131308]
- netfilter: nf_conntrack_irc: Tighten matching on DCC message (Wander Lairson Costa) [2139770 2131308]
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF (Jaroslav Kysela) [2163400 2163401] {CVE-2023-0266}
- net/mlx5e: Fix enabling sriov while tc nic rules are offloaded (Amir Tzin) [2167647 2112925]
- net/mlx5: E-Switch, pair only capable devices (Amir Tzin) [2167647 2112925]
- net/mlx5: Fix mlx5_get_next_dev() peer device matching (Amir Tzin) [2167647 2112925]
- net/mlx5: Lag, filter non compatible devices (Amir Tzin) [2167647 2112925]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.19.2.el8_7.gf5e8]" date="1678968001">- ovl: fail on invalid uid/gid mapping at copy up (Miklos Szeredi) [2165341 2165342] {CVE-2023-0386}</changelog>
</package>
<package pkgid="5b313236aeadf6f0a60898fe17570f88dbb0cb1a9ac377615c63bfccea808fd2" name="kernel-abi-stablelists" arch="noarch">
  <version epoch="0" ver="4.18.0" rel="425.10.1.el8_7"/>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.1.1.el8]" date="1663588800">- i40e: Fix kernel crash during module removal (Ivan Vecera) [2091489]
- redhat: enable zstream release numbering for rhel 8.7 (Jarod Wilson)
- ice: Allow operation with reduced device MSI-X (Petr Oros) [2102844]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.2.1.el8]" date="1664193600">- EDAC/ghes: Set the DIMM label unconditionally (Aristeu Rozanski) [2109712]
- configs: enable CONFIG_HP_ILO for aarch64 (Mark Salter) [2123508]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.3.1.el8]" date="1664539200">- iwlwifi: limit fw version for AC9560 to avoid fw crash (Íñigo Huguet) [2129297]
- sfc: fix null pointer dereference in efx_hard_start_xmit (Íñigo Huguet) [2119638]
- sfc: fix TX channel offset when using legacy interrupts (Íñigo Huguet) [2119638]
- netfilter: conntrack: reduce timeout when receiving out-of-window fin or rst (Florian Westphal) [2047366]
- netfilter: conntrack: remove unneeded indent level (Florian Westphal) [2047366]
- netfilter: conntrack: ignore overly delayed tcp packets (Florian Westphal) [2047366]
- netfilter: conntrack: prepare tcp_in_window for ternary return value (Florian Westphal) [2047366]
- netfilter: conntrack: remove pr_debug callsites from tcp tracker (Florian Westphal) [2047366]
- netfilter: conntrack: work around exceeded receive window (Florian Westphal) [2047366]
- netfilter: conntrack: improve RST handling when tuple is re-used (Florian Westphal) [2047366]
- netfilter: conntrack: avoid misleading 'invalid' in log message (Florian Westphal) [2047366]
- netfilter: remove BUG_ON() after skb_header_pointer() (Florian Westphal) [2047366]
- iavf: Detach device during reset task (Petr Oros) [2069206]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.4.1.el8]" date="1665144000">- random: allow reseeding DRBG with getrandom (Daiki Ueno) [2121766]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.5.1.el8_7]" date="1667476800">- ice: Fix interface being down after reset with link-down-on-close flag on (Petr Oros) [2136216 2024110]
- ice: Fix crash by keep old cfg when update TCs more than queues (Petr Oros) [2130992 2129902]
- ice: Fix tunnel checksum offload with fragmented traffic (Petr Oros) [2130992 2129902]
- ice: handle E822 generic device ID in PLDM header (Petr Oros) [2130992 2129902]
- ice: ethtool: Prohibit improper channel config for DCB (Petr Oros) [2130992 2129902]
- ice: ethtool: advertise 1000M speeds properly (Petr Oros) [2130992 2129902]
- ice: Fix switchdev rules book keeping (Petr Oros) [2130992 2129902]
- ice: fix access-beyond-end in the switch code (Petr Oros) [2130992 2129902]
- eth: ice: silence the GCC 12 array-bounds warning (Petr Oros) [2130992 2129902]
- ice: Expose RSS indirection tables for queue groups via ethtool (Petr Oros) [2130992 2129902]
- Revert "ice: Hide bus-info in ethtool for PRs in switchdev mode" (Petr Oros) [2130992 2129902]
- ice: remove period on argument description in ice_for_each_vf (Petr Oros) [2130992 2129902]
- ice: add a function comment for ice_cfg_mac_antispoof (Petr Oros) [2130992 2129902]
- ice: fix wording in comment for ice_reset_vf (Petr Oros) [2130992 2129902]
- ice: remove return value comment for ice_reset_all_vfs (Petr Oros) [2130992 2129902]
- ice: always check VF VSI pointer values (Petr Oros) [2130992 2129902]
- ice: add newline to dev_dbg in ice_vf_fdir_dump_info (Petr Oros) [2130992 2129902]
- ice: get switch id on switchdev devices (Petr Oros) [2130992 2129902]
- ice: return ENOSPC when exceeding ICE_MAX_CHAIN_WORDS (Petr Oros) [2130992 2129902]
- ice: introduce common helper for retrieving VSI by vsi_num (Petr Oros) [2130992 2129902]
- ice: use min_t() to make code cleaner in ice_gnss (Petr Oros) [2130992 2129902]
- ice: Add mpls+tso support (Petr Oros) [2130992 2129902]
- ice: switch: convert packet template match code to rodata (Petr Oros) [2130992 2129902]
- ice: switch: use convenience macros to declare dummy pkt templates (Petr Oros) [2130992 2129902]
- ice: switch: use a struct to pass packet template params (Petr Oros) [2130992 2129902]
- ice: switch: unobscurify bitops loop in ice_fill_adv_dummy_packet() (Petr Oros) [2130992 2129902]
- ice: switch: add and use u16[] aliases to ice_adv_lkup_elem::{h, m}_u (Petr Oros) [2130992 2129902]
- ice: Support GTP-U and GTP-C offload in switchdev (Petr Oros) [2130992 2129902]
- ice: Remove useless DMA-32 fallback configuration (Petr Oros) [2130992 2129902]
- ice: switch to napi_build_skb() (Petr Oros) [2130992 2129902]
- redhat: switch to z-stream dist tag and build targets (Jarod Wilson)
- block: avoid sign extend problem with default queue flags mask (Nico Pache) [2135813]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.6.1.el8_7]" date="1668168000">- ice: Add low latency Tx timestamp read (Petr Oros) [2136036 2092425]
- ice: introduce ice_ptp_reset_cached_phctime function (Petr Oros) [2136036 2092425]
- ice: re-arrange some static functions in ice_ptp.c (Petr Oros) [2136036 2092425]
- ice: track and warn when PHC update is late (Petr Oros) [2136036 2092425]
- ice: track Tx timestamp stats similar to other Intel drivers (Petr Oros) [2136036 2092425]
- ice: implement adjfine with mul_u64_u64_div_u64 (Petr Oros) [2136036 2092425]
- ice: Add EXTTS feature to the feature bitmap (Petr Oros) [2136036 2092425]
- math: Export mul_u64_u64_div_u64 (Petr Oros) [2136036 2092425]
- vfio/type1: Unpin zero pages (Alex Williamson) [2128515 2123015]
- net: atlantic: remove aq_nic_deinit() when resume (Íñigo Huguet) [2131935 2130839]
- net: atlantic: remove deep parameter on suspend/resume functions (Íñigo Huguet) [2131935 2130839]
- CI: Use zstream builder container (Veronika Kabatova)
- CI: Add disttag override for 8.7 (Veronika Kabatova)</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.7.1.el8_7]" date="1669723200">- ice: Add additional CSR registers to ETHTOOL_GREGS (Petr Oros) [2136513 2131024]
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps (Petr Oros) [2137270 2106964]
- i40e: Fix VF set max MTU size (Petr Oros) [2137270 2106964]
- iavf: Fix set max MTU size with port VLAN and jumbo frames (Petr Oros) [2137270 2106964]
- iavf: Fix bad page state (Petr Oros) [2137270 2106964]
- Revert "scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels" (Jarod Wilson)
- scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels (Tomas Henzl) [2139216]
- Revert "ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems" (Jarod Wilson)
- ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems (Wei Huang) [2142170 2130653]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.8.1.el8_7]" date="1669982400">- scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels (Tomas Henzl) [2139216 2134535]
- RDMA/mlx5: Set local port to one when accessing counters (Mohammad Kabat) [2141957 2077119]
- drm/mgag200: Fix PLL setup for G200_SE_A rev &gt;=4 (Jocelyn Falempe) [2140152 2130159]
- iavf: Do not restart Tx queues after reset task failure (Petr Oros) [2149081 2134005]
- iavf: Fix a crash during reset task (Petr Oros) [2149081 2134005]
- scsi: core: Allow the ALUA transitioning state enough time (Tomas Henzl) [2147374 2084250]
- scsi: core: Return BLK_STS_TRANSPORT for ALUA transitioning (Tomas Henzl) [2147374 2084250]
- i40e: Fix DMA mappings leak (Ivan Vecera) [2138205 2077847]
- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2142724 2142725] {CVE-2022-2964}
- net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2142724 2142725] {CVE-2022-2964}</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.9.1.el8_7]" date="1670587200">- Documentation/admin-guide: Document nomodeset kernel parameter (Jocelyn Falempe) [2145218 2143952]
- drm: Move nomodeset kernel parameter to the DRM subsystem (Jocelyn Falempe) [2145218 2143952]
- wait: Fix __wait_event_hrtimeout for RT/DL tasks (Derek Barbosa) [2138953 2125233]
- scsi: zfcp: Fix missing auto port scan and thus missing target ports (Tobias Huschle) [2127849 2121089]
- net: Fix return value of qdisc ingress handling on success (Ivan Vecera) [2141878 2131361]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.10.1.el8_7]" date="1671019200">- scsi: target: loop: Fix handling of aborted TMRs (Maurizio Lombardi) [2144583 2141713]
- ice: virtchnl rss hena support (Petr Oros) [2148130]
- ice: Fix configuring VIRTCHNL_OP_CONFIG_VSI_QUEUES with unbalanced queues (Michal Schmidt) [2142017 2137378]
- ice: Add support Flex RXD (Michal Schmidt) [2138157 2131310]
- netfilter: flowtable: fix stuck flows on cleanup due to pending work (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: add function to invoke garbage collection immediately (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: pass flowtable to nf_flow_table_iterate() (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: separate replace, destroy and stats to different workqueues (Phil Sutter) [2134084 2131370]
- x86/paravirt: Add a dummy __x86_paravirt_patch_template() function (Waiman Long) [2152206 2144161]
- x86/paravirt: Fix kABI breakage in struct pv_mmu_ops (Waiman Long) [2152206 2144161]
- drm/i915: fix TLB invalidation for Gen12 video and compute engines (Wander Lairson Costa) [2148149 2148150] {CVE-2022-4139}
- PCI: hv: Do not set PCI_COMMAND_MEMORY to reduce VM boot time (Emanuele Giuseppe Esposito) [2150912 2082836]
- iavf: Fix cached head and tail value for iavf_get_tx_pending (Stefan Assmann) [2149742 2103944]
- iavf: Fix change VF's mac address (Stefan Assmann) [2149742 2103944]
- iavf: Fix race between iavf_close and iavf_reset_task (Stefan Assmann) [2149742 2103944]
- net: ethernet: move from strlcpy with unused retval to strscpy (Stefan Assmann) [2149742 2103944]
- iavf: Fix 'tc qdisc show' listing too many queues (Stefan Assmann) [2149742 2103944]
- iavf: Fix max_rate limiting (Stefan Assmann) [2149742 2103944]
- iavf: Check for duplicate TC flower filter before parsing (Stefan Assmann) [2149742 2103944]
- iavf: Fix handling of dummy receive descriptors (Stefan Assmann) [2149742 2103944]
- iavf: Disallow changing rx/tx-frames and rx/tx-frames-irq (Stefan Assmann) [2149742 2103944]
- intel/iavf:fix repeated words in comments (Stefan Assmann) [2149742 2103944]
- intel: remove unused macros (Stefan Assmann) [2149742 2103944]
- iavf: Add waiting for response from PF in set mac (Stefan Assmann) [2149742 2103944]</changelog>
</package>
<package pkgid="46553a13cb38079e08e27f32ec636bb5fecb6b210221b076b40206b5485323b8" name="kernel-abi-stablelists" arch="noarch">
  <version epoch="0" ver="4.18.0" rel="425.13.1.el8_7"/>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.4.1.el8]" date="1665144000">- random: allow reseeding DRBG with getrandom (Daiki Ueno) [2121766]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.5.1.el8_7]" date="1667476800">- ice: Fix interface being down after reset with link-down-on-close flag on (Petr Oros) [2136216 2024110]
- ice: Fix crash by keep old cfg when update TCs more than queues (Petr Oros) [2130992 2129902]
- ice: Fix tunnel checksum offload with fragmented traffic (Petr Oros) [2130992 2129902]
- ice: handle E822 generic device ID in PLDM header (Petr Oros) [2130992 2129902]
- ice: ethtool: Prohibit improper channel config for DCB (Petr Oros) [2130992 2129902]
- ice: ethtool: advertise 1000M speeds properly (Petr Oros) [2130992 2129902]
- ice: Fix switchdev rules book keeping (Petr Oros) [2130992 2129902]
- ice: fix access-beyond-end in the switch code (Petr Oros) [2130992 2129902]
- eth: ice: silence the GCC 12 array-bounds warning (Petr Oros) [2130992 2129902]
- ice: Expose RSS indirection tables for queue groups via ethtool (Petr Oros) [2130992 2129902]
- Revert "ice: Hide bus-info in ethtool for PRs in switchdev mode" (Petr Oros) [2130992 2129902]
- ice: remove period on argument description in ice_for_each_vf (Petr Oros) [2130992 2129902]
- ice: add a function comment for ice_cfg_mac_antispoof (Petr Oros) [2130992 2129902]
- ice: fix wording in comment for ice_reset_vf (Petr Oros) [2130992 2129902]
- ice: remove return value comment for ice_reset_all_vfs (Petr Oros) [2130992 2129902]
- ice: always check VF VSI pointer values (Petr Oros) [2130992 2129902]
- ice: add newline to dev_dbg in ice_vf_fdir_dump_info (Petr Oros) [2130992 2129902]
- ice: get switch id on switchdev devices (Petr Oros) [2130992 2129902]
- ice: return ENOSPC when exceeding ICE_MAX_CHAIN_WORDS (Petr Oros) [2130992 2129902]
- ice: introduce common helper for retrieving VSI by vsi_num (Petr Oros) [2130992 2129902]
- ice: use min_t() to make code cleaner in ice_gnss (Petr Oros) [2130992 2129902]
- ice: Add mpls+tso support (Petr Oros) [2130992 2129902]
- ice: switch: convert packet template match code to rodata (Petr Oros) [2130992 2129902]
- ice: switch: use convenience macros to declare dummy pkt templates (Petr Oros) [2130992 2129902]
- ice: switch: use a struct to pass packet template params (Petr Oros) [2130992 2129902]
- ice: switch: unobscurify bitops loop in ice_fill_adv_dummy_packet() (Petr Oros) [2130992 2129902]
- ice: switch: add and use u16[] aliases to ice_adv_lkup_elem::{h, m}_u (Petr Oros) [2130992 2129902]
- ice: Support GTP-U and GTP-C offload in switchdev (Petr Oros) [2130992 2129902]
- ice: Remove useless DMA-32 fallback configuration (Petr Oros) [2130992 2129902]
- ice: switch to napi_build_skb() (Petr Oros) [2130992 2129902]
- redhat: switch to z-stream dist tag and build targets (Jarod Wilson)
- block: avoid sign extend problem with default queue flags mask (Nico Pache) [2135813]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.6.1.el8_7]" date="1668168000">- ice: Add low latency Tx timestamp read (Petr Oros) [2136036 2092425]
- ice: introduce ice_ptp_reset_cached_phctime function (Petr Oros) [2136036 2092425]
- ice: re-arrange some static functions in ice_ptp.c (Petr Oros) [2136036 2092425]
- ice: track and warn when PHC update is late (Petr Oros) [2136036 2092425]
- ice: track Tx timestamp stats similar to other Intel drivers (Petr Oros) [2136036 2092425]
- ice: implement adjfine with mul_u64_u64_div_u64 (Petr Oros) [2136036 2092425]
- ice: Add EXTTS feature to the feature bitmap (Petr Oros) [2136036 2092425]
- math: Export mul_u64_u64_div_u64 (Petr Oros) [2136036 2092425]
- vfio/type1: Unpin zero pages (Alex Williamson) [2128515 2123015]
- net: atlantic: remove aq_nic_deinit() when resume (Íñigo Huguet) [2131935 2130839]
- net: atlantic: remove deep parameter on suspend/resume functions (Íñigo Huguet) [2131935 2130839]
- CI: Use zstream builder container (Veronika Kabatova)
- CI: Add disttag override for 8.7 (Veronika Kabatova)</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.7.1.el8_7]" date="1669723200">- ice: Add additional CSR registers to ETHTOOL_GREGS (Petr Oros) [2136513 2131024]
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps (Petr Oros) [2137270 2106964]
- i40e: Fix VF set max MTU size (Petr Oros) [2137270 2106964]
- iavf: Fix set max MTU size with port VLAN and jumbo frames (Petr Oros) [2137270 2106964]
- iavf: Fix bad page state (Petr Oros) [2137270 2106964]
- Revert "scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels" (Jarod Wilson)
- scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels (Tomas Henzl) [2139216]
- Revert "ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems" (Jarod Wilson)
- ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems (Wei Huang) [2142170 2130653]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.8.1.el8_7]" date="1669982400">- scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels (Tomas Henzl) [2139216 2134535]
- RDMA/mlx5: Set local port to one when accessing counters (Mohammad Kabat) [2141957 2077119]
- drm/mgag200: Fix PLL setup for G200_SE_A rev &gt;=4 (Jocelyn Falempe) [2140152 2130159]
- iavf: Do not restart Tx queues after reset task failure (Petr Oros) [2149081 2134005]
- iavf: Fix a crash during reset task (Petr Oros) [2149081 2134005]
- scsi: core: Allow the ALUA transitioning state enough time (Tomas Henzl) [2147374 2084250]
- scsi: core: Return BLK_STS_TRANSPORT for ALUA transitioning (Tomas Henzl) [2147374 2084250]
- i40e: Fix DMA mappings leak (Ivan Vecera) [2138205 2077847]
- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2142724 2142725] {CVE-2022-2964}
- net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2142724 2142725] {CVE-2022-2964}</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.9.1.el8_7]" date="1670587200">- Documentation/admin-guide: Document nomodeset kernel parameter (Jocelyn Falempe) [2145218 2143952]
- drm: Move nomodeset kernel parameter to the DRM subsystem (Jocelyn Falempe) [2145218 2143952]
- wait: Fix __wait_event_hrtimeout for RT/DL tasks (Derek Barbosa) [2138953 2125233]
- scsi: zfcp: Fix missing auto port scan and thus missing target ports (Tobias Huschle) [2127849 2121089]
- net: Fix return value of qdisc ingress handling on success (Ivan Vecera) [2141878 2131361]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.10.1.el8_7]" date="1671019200">- scsi: target: loop: Fix handling of aborted TMRs (Maurizio Lombardi) [2144583 2141713]
- ice: virtchnl rss hena support (Petr Oros) [2148130]
- ice: Fix configuring VIRTCHNL_OP_CONFIG_VSI_QUEUES with unbalanced queues (Michal Schmidt) [2142017 2137378]
- ice: Add support Flex RXD (Michal Schmidt) [2138157 2131310]
- netfilter: flowtable: fix stuck flows on cleanup due to pending work (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: add function to invoke garbage collection immediately (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: pass flowtable to nf_flow_table_iterate() (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: separate replace, destroy and stats to different workqueues (Phil Sutter) [2134084 2131370]
- x86/paravirt: Add a dummy __x86_paravirt_patch_template() function (Waiman Long) [2152206 2144161]
- x86/paravirt: Fix kABI breakage in struct pv_mmu_ops (Waiman Long) [2152206 2144161]
- drm/i915: fix TLB invalidation for Gen12 video and compute engines (Wander Lairson Costa) [2148149 2148150] {CVE-2022-4139}
- PCI: hv: Do not set PCI_COMMAND_MEMORY to reduce VM boot time (Emanuele Giuseppe Esposito) [2150912 2082836]
- iavf: Fix cached head and tail value for iavf_get_tx_pending (Stefan Assmann) [2149742 2103944]
- iavf: Fix change VF's mac address (Stefan Assmann) [2149742 2103944]
- iavf: Fix race between iavf_close and iavf_reset_task (Stefan Assmann) [2149742 2103944]
- net: ethernet: move from strlcpy with unused retval to strscpy (Stefan Assmann) [2149742 2103944]
- iavf: Fix 'tc qdisc show' listing too many queues (Stefan Assmann) [2149742 2103944]
- iavf: Fix max_rate limiting (Stefan Assmann) [2149742 2103944]
- iavf: Check for duplicate TC flower filter before parsing (Stefan Assmann) [2149742 2103944]
- iavf: Fix handling of dummy receive descriptors (Stefan Assmann) [2149742 2103944]
- iavf: Disallow changing rx/tx-frames and rx/tx-frames-irq (Stefan Assmann) [2149742 2103944]
- intel/iavf:fix repeated words in comments (Stefan Assmann) [2149742 2103944]
- intel: remove unused macros (Stefan Assmann) [2149742 2103944]
- iavf: Add waiting for response from PF in set mac (Stefan Assmann) [2149742 2103944]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.11.1.el8_7]" date="1673006400">- NFSD: Protect against send buffer overflow in NFSv3 READ (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv2 READ (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv3 READDIR (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv2 READDIR (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- SUNRPC: Fix svcxdr_init_encode's buflen calculation (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- SUNRPC: Fix svcxdr_init_decode's end-of-buffer calculation (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- panic, kexec: make __crash_kexec() NMI safe (Valentin Schneider) [2139580 2134126]
- kexec: turn all kexec_mutex acquisitions into trylocks (Valentin Schneider) [2139580 2134126]
- kexec: move locking into do_kexec_load (Valentin Schneider) [2139580 2134126]
- vdpa/mlx5: re-create forwarding rules after mac modified (Laurent Vivier) [2152912 2145136]
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry (Waiman Long) [2153653 2108387]
- irq: Call tick_irq_enter() inside HARDIRQ_OFFSET (Waiman Long) [2153653 2108387]
- irqtime: Move irqtime entry accounting after irq offset incrementation (Waiman Long) [2153653 2108387]
- sched/vtime: Consolidate IRQ time accounting (Waiman Long) [2153653 2108387]
- s390/vtime: Use the generic IRQ entry accounting (Waiman Long) [2153653 2108387]
- sched/cputime: Remove symbol exports from IRQ time accounting (Waiman Long) [2153653 2108387]
- genirq/irqdomain: Don't try to free an interrupt that has no mapping (Waiman Long) [2153653 2108387]
- genirq: Provide __irq_enter/exit_raw() (Waiman Long) [2153653 2108387]
- powerpc/time: Only set CONFIG_ARCH_HAS_SCALED_CPUTIME on PPC64 (Waiman Long) [2153653 2108387]
- powerpc/time: isolate scaled cputime accounting in dedicated functions. (Waiman Long) [2153653 2108387]
- PCI: hv: Fix synchronization between channel callback and hv_pci_bus_exit() (Mohammed Gamal) [2155280 2144708]
- PCI: hv: Fix synchronization between channel callback and hv_compose_msi_msg() (Mohammed Gamal) [2155280 2144708]
- PCI: hv: Use vmbus_requestor to generate transaction IDs for VMbus hardening (Mohammed Gamal) [2155280 2144708]
- net/mlx5e: TC, Reject forwarding from internal port to internal port (Mohammad Kabat) [2141959 2131345]
- hv_netvsc: Fix race between VF offering and VF association message from host (Mohammed Gamal) [2155272 2149279]
- x86/mce: Reduce number of machine checks taken during recovery (Prarit Bhargava) [2137592 2104388]
- cgroup/cpuset: Reduce cpuset_rwsem writer latency (Waiman Long) [2153108 2149031]
- rcu/exp: Mark current CPU as exp-QS in IPI loop second pass (Waiman Long) [2153108 2149031]
- rcu: Always inline rcu_dynticks_task*_{enter,exit}() (Waiman Long) [2153108 2149031]
- rcu: Fix existing exp request check in sync_sched_exp_online_cleanup() (Waiman Long) [2153108 2149031]
- rcu: Fix macro name CONFIG_TASKS_RCU_TRACE (Waiman Long) [2153108 2149031]
- rcu: Fix stall-warning deadlock due to non-release of rcu_node -&gt;lock (Waiman Long) [2153108 2149031]
- rcu: Fix to include first blocked task in stall warning (Waiman Long) [2153108 2149031]
- cgroup: Use cgroup_attach_{lock,unlock}() from cgroup_attach_task_all() (Waiman Long) [2153108 2149031]
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all() (Waiman Long) [2153108 2149031]
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock (Waiman Long) [2153108 2149031]
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree (Waiman Long) [2153108 2149031]
- cgroup/cpuset: Fix a race between cpuset_attach() and cpu hotplug (Waiman Long) [2153108 2149031]
- cgroup: reduce dependency on cgroup_mutex (Waiman Long) [2153108 2149031]
- sunrpc: Set sk_allocation to GFP_NOFS to avoid using current-&gt;task_frag. (Guillaume Nault) [2153230 2089660]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.12.1.el8_7]" date="1674129600">- x86/fpu: Prevent FPU state corruption (Oleksandr Natalenko) [2134586 2130890]
- x86/fpu: Drop fpregs lock before inheriting FPU permissions (Eder Zulian) [2154460 2153549]
- kernel-doc: fix undefined args variable (Jan Stancek) [2157905 2134954]
- mm: memcontrol: fix potential oom_lock recursion deadlock (Waiman Long) [2157922 2138886]
- memcg: prohibit unconditional exceeding the limit of dying tasks (Waiman Long) [2157922 2138886]
- mm, oom: do not trigger out_of_memory from the #PF (Waiman Long) [2157922 2138886]
- mm, oom: pagefault_out_of_memory: don't force global OOM for dying tasks (Waiman Long) [2157922 2138886]
- mm: memcontrol: don't count limit-setting reclaim as memory pressure (Waiman Long) [2157922 2138886]
- KVM: s390: vsie: Fix the initialization of the epoch extension (epdx) field (Thomas Huth) [2158813 2151854]
- net: mana: Fix race on per-CQ variable napi work_done (Emanuele Giuseppe Esposito) [2155437 2151722]
- mei: me: add adler lake point S DID (Prarit Bhargava) [2141783 2141602]
- PCI: hv: Only reuse existing IRTE allocation for Multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix the definition of vector in hv_compose_msi_msg() (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix interrupt mapping for multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Reuse existing IRTE allocation in compose_msi_msg() (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix hv_arch_irq_unmask() for multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix multi-MSI to allow more than one MSI vector (Emanuele Giuseppe Esposito) [2155289 2100275]
- drm/ast: Support multiple outputs (Jarod Wilson) [2149287 2147553]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.13.1.el8_7]" date="1675339200">- mm/cgroup/reclaim: fix dirty pages throttling on cgroup v1 (Waiman Long) [2160221]
- mm: vmscan: remove deadlock due to throttling failing to make progress (Waiman Long) [2160221]
- mm: vmscan: reduce throttling due to a failure to make progress -fix (Waiman Long) [2160221]
- mm: vmscan: Reduce throttling due to a failure to make progress (Waiman Long) [2160221]
- mm/vmscan: delay waking of tasks throttled on NOPROGRESS (Waiman Long) [2160221]
- mm/vmscan: increase the timeout if page reclaim is not making progress (Waiman Long) [2160221]
- mm/vmscan: centralise timeout values for reclaim_throttle (Waiman Long) [2160221]
- mm/page_alloc: remove the throttling logic from the page allocator (Waiman Long) [2160221]
- mm/writeback: throttle based on page writeback instead of congestion (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim when no progress is being made (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim and compaction when too may pages are isolated (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim until some writeback completes if congested (Waiman Long) [2160221]
- mm/vmscan.c: delete or fix duplicated words (Waiman Long) [2160221]
- mm,page_alloc: PF_WQ_WORKER threads must sleep at should_reclaim_retry() (Nico Pache) [2160221]
- ceph: avoid putting the realm twice when decoding snaps fails (Xiubo Li) [2155797 2139881]
- mm/mremap: hold the rmap lock in write mode when moving page table entries. (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: use pmd/pud_poplulate to update page table entries (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: don't enable optimized PUD move if page table levels is 2 (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: convert huge PUD move to separate helper (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: fix BUILD_BUG_ON() error in get_extent (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap.c: fix extent calculation (Waiman Long) [2140944] {CVE-2022-41222}
- x86: mremap speedup - Enable HAVE_MOVE_PUD (Waiman Long) [2140944] {CVE-2022-41222}
- mm: speedup mremap on 1GB or larger regions (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: start addresses are properly aligned (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: calculate extent in one place (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: it is sure to have enough space when extent meets requirement (Waiman Long) [2140944] {CVE-2022-41222}
- s390/boot: add secure boot trailer (Tobias Huschle) [2151530 2141967]
- i40e: Fix VF hang when reset is triggered on another VF (Ivan Vecera) [2160460 2103801]
- i2c: ismt: Fix an out-of-bounds bug in ismt_access() (Prarit Bhargava) [2154388 2119066] {CVE-2022-2873}
- iavf: schedule watchdog immediately when changing primary MAC (Michal Schmidt) [2163257 2152493]
- iavf: Move netdev_update_features() into watchdog task (Michal Schmidt) [2163257 2152493]
- iavf: fix temporary deadlock and failure to set MAC address (Michal Schmidt) [2163257 2152493]
- iavf: Fix error handling in iavf_init_module() (Michal Schmidt) [2163257 2152493]
- iommu/vt-d: Clean up si_domain in the init_dmars() error path (Jerry Snitselaar) [2149474 2118428]
- x86/pci/xen: Use msi_msg shadow structs (Jerry Snitselaar) [2149474 2118428]
- iommu/intel: Use msi_msg shadow structs (Jerry Snitselaar) [2149474 2118428]
- PCI: MSI: Fix Kconfig dependencies for PCI_MSI_ARCH_FALLBACKS (Jerry Snitselaar) [2149474 2118428]
- x86/apic/msi: Unbreak DMAR and HPET MSI (Jerry Snitselaar) [2149474 2118428]
- iommu/amd: Remove domain search for PCI/MSI (Jerry Snitselaar) [2149474 2118428]
- iommu/vt-d: Remove domain search for PCI/MSI[X] (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Make most MSI ops XEN private (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Cleanup the arch_*_msi_irqs() leftovers (Jerry Snitselaar) [2149474 2118428]
- PCI/MSI: Make arch_.*_msi_irq[s] fallbacks selectable (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Wrap XEN MSI management into irqdomain (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Consolidate XEN-MSI init (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Rework MSI teardown (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Make xen_msi_init() static and rename it to xen_hvm_msi_init() (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Move apic_post_init() invocation to one place (Jerry Snitselaar) [2149474 2118428]
- x86/msi: Use generic MSI domain ops (Jerry Snitselaar) [2149474 2118428]
- x86/msi: Remove pointless vcpu_affinity callback (Jerry Snitselaar) [2149474 2118428]
- iommu/vt-d: Fix compile error with CONFIG_PCI_ATS not set (Myron Stowe) [2149474 2118428]
- iommu/vt-d: Cure VF irqdomain hickup (Myron Stowe) [2149474 2118428]
- x86/pci: Set default irq domain in pcibios_add_device() (Myron Stowe) [2149474 2118428]
- iommm/amd: Store irq domain in struct device (Myron Stowe) [2149474 2118428]
- iommm/vt-d: Store irq domain in struct device (Myron Stowe) [2149474 2118428]
- PCI/MSI: Provide pci_dev_has_special_msi_domain() helper (Myron Stowe) [2149474 2118428]
- x86/msi: Consolidate MSI allocation (Myron Stowe) [2149474 2118428]
- PCI/MSI: Rework pci_msi_domain_calc_hwirq() (Myron Stowe) [2149474 2118428]
- x86/irq: Consolidate UV domain allocation (Myron Stowe) [2149474 2118428]
- x86/irq: Consolidate DMAR irq allocation (Myron Stowe) [2149474 2118428]
- x86_ioapic_Consolidate_IOAPIC_allocation (Myron Stowe) [2149474 2118428]
- x86/msi: Consolidate HPET allocation (Myron Stowe) [2149474 2118428]
- iommu/irq_remapping: Consolidate irq domain lookup (Myron Stowe) [2149474 2118428]
- iommu/amd: Consolidate irq domain getter (Myron Stowe) [2149474 2118428]
- iommu/vt-d: Consolidate irq domain getter (Myron Stowe) [2149474 2118428]
- x86/irq: Add allocation type for parent domain retrieval (Myron Stowe) [2149474 2118428]
- irqdomain: Export irq_domain_update_bus_token (Myron Stowe) [2149474 2118428]
- gitlab-ci: use CI templates from production branch (Michael Hofmann)
- iavf: remove INITIAL_MAC_SET to allow gARP to work properly (Stefan Assmann) [2149745 1938635]
- Revert "scsi: iscsi: ql4xxx: Use per-session workqueue for unbinding" (Chris Leech) [2152734 2122624]
- Revert "scsi: iscsi: Use the session workqueue for recovery" (Chris Leech) [2152734 2122624]
- arm64/bpf: Remove 128MB limit for BPF JIT programs (Yauheni Kaliuta) [2152138 2140163]
- bpf: Define bpf_jit_alloc_exec_limit for arm64 JIT (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: add `type` and `data` fields (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: use `ex` for `exception_table_entry` (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: make fixup_exception() return bool (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: consolidate definitions (Yauheni Kaliuta) [2152138 2140163]
- arm64: kvm: use kvm_exception_table_entry (Yauheni Kaliuta) [2152138 2140163]
- be2net: Fix buffer overflow in be_get_module_eeprom (Josef Oskera) [2160182 2126917]</changelog>
</package>
<package pkgid="34b4361e1ac78b29bc06a27de6273de5f093df2984289dd1264b0fa1d5b5f948" name="kernel-abi-stablelists" arch="noarch">
  <version epoch="0" ver="4.18.0" rel="425.19.2.el8_7"/>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.11.1.el8_7]" date="1673006400">- NFSD: Protect against send buffer overflow in NFSv3 READ (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv2 READ (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv3 READDIR (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv2 READDIR (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- SUNRPC: Fix svcxdr_init_encode's buflen calculation (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- SUNRPC: Fix svcxdr_init_decode's end-of-buffer calculation (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- panic, kexec: make __crash_kexec() NMI safe (Valentin Schneider) [2139580 2134126]
- kexec: turn all kexec_mutex acquisitions into trylocks (Valentin Schneider) [2139580 2134126]
- kexec: move locking into do_kexec_load (Valentin Schneider) [2139580 2134126]
- vdpa/mlx5: re-create forwarding rules after mac modified (Laurent Vivier) [2152912 2145136]
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry (Waiman Long) [2153653 2108387]
- irq: Call tick_irq_enter() inside HARDIRQ_OFFSET (Waiman Long) [2153653 2108387]
- irqtime: Move irqtime entry accounting after irq offset incrementation (Waiman Long) [2153653 2108387]
- sched/vtime: Consolidate IRQ time accounting (Waiman Long) [2153653 2108387]
- s390/vtime: Use the generic IRQ entry accounting (Waiman Long) [2153653 2108387]
- sched/cputime: Remove symbol exports from IRQ time accounting (Waiman Long) [2153653 2108387]
- genirq/irqdomain: Don't try to free an interrupt that has no mapping (Waiman Long) [2153653 2108387]
- genirq: Provide __irq_enter/exit_raw() (Waiman Long) [2153653 2108387]
- powerpc/time: Only set CONFIG_ARCH_HAS_SCALED_CPUTIME on PPC64 (Waiman Long) [2153653 2108387]
- powerpc/time: isolate scaled cputime accounting in dedicated functions. (Waiman Long) [2153653 2108387]
- PCI: hv: Fix synchronization between channel callback and hv_pci_bus_exit() (Mohammed Gamal) [2155280 2144708]
- PCI: hv: Fix synchronization between channel callback and hv_compose_msi_msg() (Mohammed Gamal) [2155280 2144708]
- PCI: hv: Use vmbus_requestor to generate transaction IDs for VMbus hardening (Mohammed Gamal) [2155280 2144708]
- net/mlx5e: TC, Reject forwarding from internal port to internal port (Mohammad Kabat) [2141959 2131345]
- hv_netvsc: Fix race between VF offering and VF association message from host (Mohammed Gamal) [2155272 2149279]
- x86/mce: Reduce number of machine checks taken during recovery (Prarit Bhargava) [2137592 2104388]
- cgroup/cpuset: Reduce cpuset_rwsem writer latency (Waiman Long) [2153108 2149031]
- rcu/exp: Mark current CPU as exp-QS in IPI loop second pass (Waiman Long) [2153108 2149031]
- rcu: Always inline rcu_dynticks_task*_{enter,exit}() (Waiman Long) [2153108 2149031]
- rcu: Fix existing exp request check in sync_sched_exp_online_cleanup() (Waiman Long) [2153108 2149031]
- rcu: Fix macro name CONFIG_TASKS_RCU_TRACE (Waiman Long) [2153108 2149031]
- rcu: Fix stall-warning deadlock due to non-release of rcu_node -&gt;lock (Waiman Long) [2153108 2149031]
- rcu: Fix to include first blocked task in stall warning (Waiman Long) [2153108 2149031]
- cgroup: Use cgroup_attach_{lock,unlock}() from cgroup_attach_task_all() (Waiman Long) [2153108 2149031]
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all() (Waiman Long) [2153108 2149031]
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock (Waiman Long) [2153108 2149031]
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree (Waiman Long) [2153108 2149031]
- cgroup/cpuset: Fix a race between cpuset_attach() and cpu hotplug (Waiman Long) [2153108 2149031]
- cgroup: reduce dependency on cgroup_mutex (Waiman Long) [2153108 2149031]
- sunrpc: Set sk_allocation to GFP_NOFS to avoid using current-&gt;task_frag. (Guillaume Nault) [2153230 2089660]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.12.1.el8_7]" date="1674129600">- x86/fpu: Prevent FPU state corruption (Oleksandr Natalenko) [2134586 2130890]
- x86/fpu: Drop fpregs lock before inheriting FPU permissions (Eder Zulian) [2154460 2153549]
- kernel-doc: fix undefined args variable (Jan Stancek) [2157905 2134954]
- mm: memcontrol: fix potential oom_lock recursion deadlock (Waiman Long) [2157922 2138886]
- memcg: prohibit unconditional exceeding the limit of dying tasks (Waiman Long) [2157922 2138886]
- mm, oom: do not trigger out_of_memory from the #PF (Waiman Long) [2157922 2138886]
- mm, oom: pagefault_out_of_memory: don't force global OOM for dying tasks (Waiman Long) [2157922 2138886]
- mm: memcontrol: don't count limit-setting reclaim as memory pressure (Waiman Long) [2157922 2138886]
- KVM: s390: vsie: Fix the initialization of the epoch extension (epdx) field (Thomas Huth) [2158813 2151854]
- net: mana: Fix race on per-CQ variable napi work_done (Emanuele Giuseppe Esposito) [2155437 2151722]
- mei: me: add adler lake point S DID (Prarit Bhargava) [2141783 2141602]
- PCI: hv: Only reuse existing IRTE allocation for Multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix the definition of vector in hv_compose_msi_msg() (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix interrupt mapping for multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Reuse existing IRTE allocation in compose_msi_msg() (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix hv_arch_irq_unmask() for multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix multi-MSI to allow more than one MSI vector (Emanuele Giuseppe Esposito) [2155289 2100275]
- drm/ast: Support multiple outputs (Jarod Wilson) [2149287 2147553]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.13.1.el8_7]" date="1675339200">- mm/cgroup/reclaim: fix dirty pages throttling on cgroup v1 (Waiman Long) [2160221]
- mm: vmscan: remove deadlock due to throttling failing to make progress (Waiman Long) [2160221]
- mm: vmscan: reduce throttling due to a failure to make progress -fix (Waiman Long) [2160221]
- mm: vmscan: Reduce throttling due to a failure to make progress (Waiman Long) [2160221]
- mm/vmscan: delay waking of tasks throttled on NOPROGRESS (Waiman Long) [2160221]
- mm/vmscan: increase the timeout if page reclaim is not making progress (Waiman Long) [2160221]
- mm/vmscan: centralise timeout values for reclaim_throttle (Waiman Long) [2160221]
- mm/page_alloc: remove the throttling logic from the page allocator (Waiman Long) [2160221]
- mm/writeback: throttle based on page writeback instead of congestion (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim when no progress is being made (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim and compaction when too may pages are isolated (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim until some writeback completes if congested (Waiman Long) [2160221]
- mm/vmscan.c: delete or fix duplicated words (Waiman Long) [2160221]
- mm,page_alloc: PF_WQ_WORKER threads must sleep at should_reclaim_retry() (Nico Pache) [2160221]
- ceph: avoid putting the realm twice when decoding snaps fails (Xiubo Li) [2155797 2139881]
- mm/mremap: hold the rmap lock in write mode when moving page table entries. (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: use pmd/pud_poplulate to update page table entries (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: don't enable optimized PUD move if page table levels is 2 (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: convert huge PUD move to separate helper (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: fix BUILD_BUG_ON() error in get_extent (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap.c: fix extent calculation (Waiman Long) [2140944] {CVE-2022-41222}
- x86: mremap speedup - Enable HAVE_MOVE_PUD (Waiman Long) [2140944] {CVE-2022-41222}
- mm: speedup mremap on 1GB or larger regions (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: start addresses are properly aligned (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: calculate extent in one place (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: it is sure to have enough space when extent meets requirement (Waiman Long) [2140944] {CVE-2022-41222}
- s390/boot: add secure boot trailer (Tobias Huschle) [2151530 2141967]
- i40e: Fix VF hang when reset is triggered on another VF (Ivan Vecera) [2160460 2103801]
- i2c: ismt: Fix an out-of-bounds bug in ismt_access() (Prarit Bhargava) [2154388 2119066] {CVE-2022-2873}
- iavf: schedule watchdog immediately when changing primary MAC (Michal Schmidt) [2163257 2152493]
- iavf: Move netdev_update_features() into watchdog task (Michal Schmidt) [2163257 2152493]
- iavf: fix temporary deadlock and failure to set MAC address (Michal Schmidt) [2163257 2152493]
- iavf: Fix error handling in iavf_init_module() (Michal Schmidt) [2163257 2152493]
- iommu/vt-d: Clean up si_domain in the init_dmars() error path (Jerry Snitselaar) [2149474 2118428]
- x86/pci/xen: Use msi_msg shadow structs (Jerry Snitselaar) [2149474 2118428]
- iommu/intel: Use msi_msg shadow structs (Jerry Snitselaar) [2149474 2118428]
- PCI: MSI: Fix Kconfig dependencies for PCI_MSI_ARCH_FALLBACKS (Jerry Snitselaar) [2149474 2118428]
- x86/apic/msi: Unbreak DMAR and HPET MSI (Jerry Snitselaar) [2149474 2118428]
- iommu/amd: Remove domain search for PCI/MSI (Jerry Snitselaar) [2149474 2118428]
- iommu/vt-d: Remove domain search for PCI/MSI[X] (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Make most MSI ops XEN private (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Cleanup the arch_*_msi_irqs() leftovers (Jerry Snitselaar) [2149474 2118428]
- PCI/MSI: Make arch_.*_msi_irq[s] fallbacks selectable (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Wrap XEN MSI management into irqdomain (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Consolidate XEN-MSI init (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Rework MSI teardown (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Make xen_msi_init() static and rename it to xen_hvm_msi_init() (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Move apic_post_init() invocation to one place (Jerry Snitselaar) [2149474 2118428]
- x86/msi: Use generic MSI domain ops (Jerry Snitselaar) [2149474 2118428]
- x86/msi: Remove pointless vcpu_affinity callback (Jerry Snitselaar) [2149474 2118428]
- iommu/vt-d: Fix compile error with CONFIG_PCI_ATS not set (Myron Stowe) [2149474 2118428]
- iommu/vt-d: Cure VF irqdomain hickup (Myron Stowe) [2149474 2118428]
- x86/pci: Set default irq domain in pcibios_add_device() (Myron Stowe) [2149474 2118428]
- iommm/amd: Store irq domain in struct device (Myron Stowe) [2149474 2118428]
- iommm/vt-d: Store irq domain in struct device (Myron Stowe) [2149474 2118428]
- PCI/MSI: Provide pci_dev_has_special_msi_domain() helper (Myron Stowe) [2149474 2118428]
- x86/msi: Consolidate MSI allocation (Myron Stowe) [2149474 2118428]
- PCI/MSI: Rework pci_msi_domain_calc_hwirq() (Myron Stowe) [2149474 2118428]
- x86/irq: Consolidate UV domain allocation (Myron Stowe) [2149474 2118428]
- x86/irq: Consolidate DMAR irq allocation (Myron Stowe) [2149474 2118428]
- x86_ioapic_Consolidate_IOAPIC_allocation (Myron Stowe) [2149474 2118428]
- x86/msi: Consolidate HPET allocation (Myron Stowe) [2149474 2118428]
- iommu/irq_remapping: Consolidate irq domain lookup (Myron Stowe) [2149474 2118428]
- iommu/amd: Consolidate irq domain getter (Myron Stowe) [2149474 2118428]
- iommu/vt-d: Consolidate irq domain getter (Myron Stowe) [2149474 2118428]
- x86/irq: Add allocation type for parent domain retrieval (Myron Stowe) [2149474 2118428]
- irqdomain: Export irq_domain_update_bus_token (Myron Stowe) [2149474 2118428]
- gitlab-ci: use CI templates from production branch (Michael Hofmann)
- iavf: remove INITIAL_MAC_SET to allow gARP to work properly (Stefan Assmann) [2149745 1938635]
- Revert "scsi: iscsi: ql4xxx: Use per-session workqueue for unbinding" (Chris Leech) [2152734 2122624]
- Revert "scsi: iscsi: Use the session workqueue for recovery" (Chris Leech) [2152734 2122624]
- arm64/bpf: Remove 128MB limit for BPF JIT programs (Yauheni Kaliuta) [2152138 2140163]
- bpf: Define bpf_jit_alloc_exec_limit for arm64 JIT (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: add `type` and `data` fields (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: use `ex` for `exception_table_entry` (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: make fixup_exception() return bool (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: consolidate definitions (Yauheni Kaliuta) [2152138 2140163]
- arm64: kvm: use kvm_exception_table_entry (Yauheni Kaliuta) [2152138 2140163]
- be2net: Fix buffer overflow in be_get_module_eeprom (Josef Oskera) [2160182 2126917]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.14.1.el8_7]" date="1676030400">- ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems (Wei Huang) [2142170 2130653]
- KVM: x86: nSVM: implement nested LBR virtualization (Emanuele Giuseppe Esposito) [2166362 2155149]
- KVM: x86: nSVM: correctly virtualize LBR msrs when L2 is running (Emanuele Giuseppe Esposito) [2166362 2155149]
- kvm: x86: SVM: use vmcb* instead of svm-&gt;vmcb where it makes sense (Emanuele Giuseppe Esposito) [2166362 2155149]
- KVM: x86: nSVM: implement nested VMLOAD/VMSAVE (Emanuele Giuseppe Esposito) [2166362 2155149]
- IB/iser: Fix login with authentication (Kamal Heib) [2161750 2120676]
- act_mirred: use the backlog for nested calls to mirred ingress (Davide Caratti) [2164648 2131339] {CVE-2022-4269}
- net/sched: act_mirred: better wording on protection against excessive stack growth (Davide Caratti) [2164648 2131339] {CVE-2022-4269}
- redhat/configs: Set CONFIG_X86_AMD_PSTATE to 'm' (Prarit Bhargava) [2151275 2145246]
- KVM: x86: smm: preserve interrupt shadow in SMRAM (Maxim Levitsky) [2166368 2097144]
- KVM: x86: SVM: don't save SVM state to SMRAM when VM is not long mode capable (Maxim Levitsky) [2166368 2097144]
- KVM: x86: SVM: use smram structs (Maxim Levitsky) [2166368 2097144]
- KVM: svm: drop explicit return value of kvm_vcpu_map (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: use smram struct for 64 bit smram load/restore (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: use smram struct for 32 bit smram load/restore (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: use smram structs in the common code (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: add structs for KVM's smram layout (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: check for failures on smm entry (Maxim Levitsky) [2166368 2097144]
- KVM: x86: do not go through ctxt-&gt;ops when emulating rsm (Maxim Levitsky) [2166368 2097144]
- KVM: x86: move SMM exit to a new file (Maxim Levitsky) [2166368 2097144]
- KVM: x86: move SMM entry to a new file (Maxim Levitsky) [2166368 2097144]
- KVM: x86: start moving SMM-related functions to new files (Maxim Levitsky) [2166368 2097144]
- bug: introduce ASSERT_STRUCT_OFFSET (Maxim Levitsky) [2166368 2097144]
- KVM: x86: Rename and expose helper to detect if INIT/SIPI are allowed (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: number of GPRs in the SMRAM image depends on the image format (Maxim Levitsky) [2166368 2097144]
- KVM: x86: emulator: update the emulation mode after CR0 write (Maxim Levitsky) [2166368 2097144]
- KVM: x86: emulator: update the emulation mode after rsm (Maxim Levitsky) [2166368 2097144]
- KVM: x86: emulator: introduce emulator_recalc_and_set_mode (Maxim Levitsky) [2166368 2097144]
- KVM: x86: emulator: em_sysexit should update ctxt-&gt;mode (Maxim Levitsky) [2166368 2097144]
- KVM: x86: Bug the VM if the emulator accesses a non-existent GPR (Maxim Levitsky) [2166368 2097144]
- \KVM: x86: Reduce the number of emulator GPRs to '8' for 32-bit KVM (Maxim Levitsky) [2166368 2097144]
- KVM: x86: Use 16-bit fields to track dirty/valid emulator GPRs (Maxim Levitsky) [2166368 2097144]
- KVM: x86: Omit VCPU_REGS_RIP from emulator's _regs array (Maxim Levitsky) [2166368 2097144]
- \KVM: x86: Harden _regs accesses to guard against buggy input (Maxim Levitsky) [2166368 2097144]
- KVM: x86: Grab regs_dirty in local 'unsigned long' (Maxim Levitsky) [2166368 2097144]
- proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152571 2152572] {CVE-2022-4378}
- proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152571 2152572] {CVE-2022-4378}</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.15.1.el8_7]" date="1676548800">- net/mlx5e: Fix use-after-free when reverting termination table (Amir Tzin) [2167640 2112927]
- net/mlx5: Do not query pci info while pci disabled (Amir Tzin) [2167645 2129249]
- x86/fpu: Fix copy_xstate_to_uabi() to copy init states correctly (Dean Nelson) [2168384 2122850]
- x86/fpu: Exclude dynamic states from init_fpstate (Dean Nelson) [2168384 2122850]
- x86/fpu: Fix the init_fpstate size check with the actual size (Dean Nelson) [2168384 2122850]
- x86/fpu: Configure init_fpstate attributes orderly (Dean Nelson) [2168384 2122850]
- x86/fpu/xstate: Fix the ARCH_REQ_XCOMP_PERM implementation (Dean Nelson) [2168384 2122850]
- net/mlx5: E-Switch, properly handle ingress tagged packets on VST (Amir Tzin) [2166665 2096109]
- cpuhotplug: Fix KABI breakage (Prarit Bhargava) [2162763 2156529]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.16.1.el8_7]" date="1677153600">- ipv6: fix panic when fib_lookup_arg-&gt;result is fib6_info (Jiri Benc) [2167602 2140599]
- ceph: blocklist the kclient when receiving corrupted snap trace (Xiubo Li) [2168896 2162414]
- ceph: move mount state enum to super.h (Xiubo Li) [2168896 2162414]
- s390/kexec: fix ipl report address for kdump (Tobias Huschle) [2166296 2161328]
- mm, compaction: fix fast_isolate_around() to stay within boundaries (Daniel Vacek) [2170576 2149309]
- scsi: storvsc: Fix swiotlb bounce buffer leak in confidential VM (Emanuele Giuseppe Esposito) [2170228 2150659]
- netfilter: conntrack: handle tcp challenge acks during connection reuse (Florian Westphal) [2165587 2158726]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.17.1.el8_7]" date="1677844800">- net: mana: Add rmb after checking owner bits (Mohammed Gamal) [2173103 2139462]
- net: mana: Add support of XDP_REDIRECT action (Mohammed Gamal) [2173103 2139462]
- net: mana: Add the Linux MANA PF driver (Mohammed Gamal) [2173103 2139462]
- ice: fix lost multicast packets in promisc mode (Ken Cox) [2172550 2138215]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.18.0-425.18.1.el8_7]" date="1678449600">- futex: Resend potentially swallowed owner death notification (Rafael Aquini) [2170054 2161526]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.19.1.el8_7]" date="1678968000">- s390/dasd: fix no record found for raw_track_access (Tobias Huschle) [2167776 2161270]
- locking/rwsem: Disable preemption in all down_read*() and up_read() code paths (Waiman Long) [2170939 2162139]
- locking/rwsem: Prevent non-first waiter from spinning in down_write() slowpath (Waiman Long) [2170939 2162139]
- locking/rwsem: Allow slowpath writer to ignore handoff bit if not set by first waiter (Waiman Long) [2170939 2162139]
- locking/rwsem: Always try to wake waiters in out_nolock path (Waiman Long) [2170939 2162139]
- locking/rwsem: No need to check for handoff bit if wait queue empty (Waiman Long) [2170939 2162139]
- locking/rwsem: Make handoff bit handling more consistent (Waiman Long) [2170939 2162139]
- locking/rwsem: Disable preemption while trying for rwsem lock (Waiman Long) [2170939 2162139]
- locking/rwsem: Conditionally wake waiters in reader/writer slowpaths (Waiman Long) [2170939 2162139]
- locking: Make owner_on_cpu() into &lt;linux/sched.h&gt; (Waiman Long) [2170939 2162139]
- locking/rwsem: Optimize down_read_trylock() under highly contended case (Waiman Long) [2170939 2162139]
- locking/rwsem: Fix comments about reader optimistic lock stealing conditions (Waiman Long) [2170939 2162139]
- locking/rwsem: Disable preemption for spinning region (Waiman Long) [2170939 2162139]
- locking: Remove rcu_read_{,un}lock() for preempt_{dis,en}able() (Waiman Long) [2170939 2162139]
- watchdog: fix UAF in reboot notifier handling in watchdog core code (Wander Lairson Costa) [2139770 2131308]
- netfilter: nf_conntrack_irc: Tighten matching on DCC message (Wander Lairson Costa) [2139770 2131308]
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF (Jaroslav Kysela) [2163400 2163401] {CVE-2023-0266}
- net/mlx5e: Fix enabling sriov while tc nic rules are offloaded (Amir Tzin) [2167647 2112925]
- net/mlx5: E-Switch, pair only capable devices (Amir Tzin) [2167647 2112925]
- net/mlx5: Fix mlx5_get_next_dev() peer device matching (Amir Tzin) [2167647 2112925]
- net/mlx5: Lag, filter non compatible devices (Amir Tzin) [2167647 2112925]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.19.2.el8_7.gf5e8]" date="1678968001">- ovl: fail on invalid uid/gid mapping at copy up (Miklos Szeredi) [2165341 2165342] {CVE-2023-0386}</changelog>
</package>
<package pkgid="97293226b1cd69a1771fe59dd81c3f730042ecc06cb1f31d28029945d294d65b" name="kernel-core" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="425.10.1.el8_7"/>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.1.1.el8]" date="1663588800">- i40e: Fix kernel crash during module removal (Ivan Vecera) [2091489]
- redhat: enable zstream release numbering for rhel 8.7 (Jarod Wilson)
- ice: Allow operation with reduced device MSI-X (Petr Oros) [2102844]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.2.1.el8]" date="1664193600">- EDAC/ghes: Set the DIMM label unconditionally (Aristeu Rozanski) [2109712]
- configs: enable CONFIG_HP_ILO for aarch64 (Mark Salter) [2123508]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.3.1.el8]" date="1664539200">- iwlwifi: limit fw version for AC9560 to avoid fw crash (Íñigo Huguet) [2129297]
- sfc: fix null pointer dereference in efx_hard_start_xmit (Íñigo Huguet) [2119638]
- sfc: fix TX channel offset when using legacy interrupts (Íñigo Huguet) [2119638]
- netfilter: conntrack: reduce timeout when receiving out-of-window fin or rst (Florian Westphal) [2047366]
- netfilter: conntrack: remove unneeded indent level (Florian Westphal) [2047366]
- netfilter: conntrack: ignore overly delayed tcp packets (Florian Westphal) [2047366]
- netfilter: conntrack: prepare tcp_in_window for ternary return value (Florian Westphal) [2047366]
- netfilter: conntrack: remove pr_debug callsites from tcp tracker (Florian Westphal) [2047366]
- netfilter: conntrack: work around exceeded receive window (Florian Westphal) [2047366]
- netfilter: conntrack: improve RST handling when tuple is re-used (Florian Westphal) [2047366]
- netfilter: conntrack: avoid misleading 'invalid' in log message (Florian Westphal) [2047366]
- netfilter: remove BUG_ON() after skb_header_pointer() (Florian Westphal) [2047366]
- iavf: Detach device during reset task (Petr Oros) [2069206]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.4.1.el8]" date="1665144000">- random: allow reseeding DRBG with getrandom (Daiki Ueno) [2121766]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.5.1.el8_7]" date="1667476800">- ice: Fix interface being down after reset with link-down-on-close flag on (Petr Oros) [2136216 2024110]
- ice: Fix crash by keep old cfg when update TCs more than queues (Petr Oros) [2130992 2129902]
- ice: Fix tunnel checksum offload with fragmented traffic (Petr Oros) [2130992 2129902]
- ice: handle E822 generic device ID in PLDM header (Petr Oros) [2130992 2129902]
- ice: ethtool: Prohibit improper channel config for DCB (Petr Oros) [2130992 2129902]
- ice: ethtool: advertise 1000M speeds properly (Petr Oros) [2130992 2129902]
- ice: Fix switchdev rules book keeping (Petr Oros) [2130992 2129902]
- ice: fix access-beyond-end in the switch code (Petr Oros) [2130992 2129902]
- eth: ice: silence the GCC 12 array-bounds warning (Petr Oros) [2130992 2129902]
- ice: Expose RSS indirection tables for queue groups via ethtool (Petr Oros) [2130992 2129902]
- Revert "ice: Hide bus-info in ethtool for PRs in switchdev mode" (Petr Oros) [2130992 2129902]
- ice: remove period on argument description in ice_for_each_vf (Petr Oros) [2130992 2129902]
- ice: add a function comment for ice_cfg_mac_antispoof (Petr Oros) [2130992 2129902]
- ice: fix wording in comment for ice_reset_vf (Petr Oros) [2130992 2129902]
- ice: remove return value comment for ice_reset_all_vfs (Petr Oros) [2130992 2129902]
- ice: always check VF VSI pointer values (Petr Oros) [2130992 2129902]
- ice: add newline to dev_dbg in ice_vf_fdir_dump_info (Petr Oros) [2130992 2129902]
- ice: get switch id on switchdev devices (Petr Oros) [2130992 2129902]
- ice: return ENOSPC when exceeding ICE_MAX_CHAIN_WORDS (Petr Oros) [2130992 2129902]
- ice: introduce common helper for retrieving VSI by vsi_num (Petr Oros) [2130992 2129902]
- ice: use min_t() to make code cleaner in ice_gnss (Petr Oros) [2130992 2129902]
- ice: Add mpls+tso support (Petr Oros) [2130992 2129902]
- ice: switch: convert packet template match code to rodata (Petr Oros) [2130992 2129902]
- ice: switch: use convenience macros to declare dummy pkt templates (Petr Oros) [2130992 2129902]
- ice: switch: use a struct to pass packet template params (Petr Oros) [2130992 2129902]
- ice: switch: unobscurify bitops loop in ice_fill_adv_dummy_packet() (Petr Oros) [2130992 2129902]
- ice: switch: add and use u16[] aliases to ice_adv_lkup_elem::{h, m}_u (Petr Oros) [2130992 2129902]
- ice: Support GTP-U and GTP-C offload in switchdev (Petr Oros) [2130992 2129902]
- ice: Remove useless DMA-32 fallback configuration (Petr Oros) [2130992 2129902]
- ice: switch to napi_build_skb() (Petr Oros) [2130992 2129902]
- redhat: switch to z-stream dist tag and build targets (Jarod Wilson)
- block: avoid sign extend problem with default queue flags mask (Nico Pache) [2135813]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.6.1.el8_7]" date="1668168000">- ice: Add low latency Tx timestamp read (Petr Oros) [2136036 2092425]
- ice: introduce ice_ptp_reset_cached_phctime function (Petr Oros) [2136036 2092425]
- ice: re-arrange some static functions in ice_ptp.c (Petr Oros) [2136036 2092425]
- ice: track and warn when PHC update is late (Petr Oros) [2136036 2092425]
- ice: track Tx timestamp stats similar to other Intel drivers (Petr Oros) [2136036 2092425]
- ice: implement adjfine with mul_u64_u64_div_u64 (Petr Oros) [2136036 2092425]
- ice: Add EXTTS feature to the feature bitmap (Petr Oros) [2136036 2092425]
- math: Export mul_u64_u64_div_u64 (Petr Oros) [2136036 2092425]
- vfio/type1: Unpin zero pages (Alex Williamson) [2128515 2123015]
- net: atlantic: remove aq_nic_deinit() when resume (Íñigo Huguet) [2131935 2130839]
- net: atlantic: remove deep parameter on suspend/resume functions (Íñigo Huguet) [2131935 2130839]
- CI: Use zstream builder container (Veronika Kabatova)
- CI: Add disttag override for 8.7 (Veronika Kabatova)</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.7.1.el8_7]" date="1669723200">- ice: Add additional CSR registers to ETHTOOL_GREGS (Petr Oros) [2136513 2131024]
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps (Petr Oros) [2137270 2106964]
- i40e: Fix VF set max MTU size (Petr Oros) [2137270 2106964]
- iavf: Fix set max MTU size with port VLAN and jumbo frames (Petr Oros) [2137270 2106964]
- iavf: Fix bad page state (Petr Oros) [2137270 2106964]
- Revert "scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels" (Jarod Wilson)
- scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels (Tomas Henzl) [2139216]
- Revert "ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems" (Jarod Wilson)
- ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems (Wei Huang) [2142170 2130653]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.8.1.el8_7]" date="1669982400">- scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels (Tomas Henzl) [2139216 2134535]
- RDMA/mlx5: Set local port to one when accessing counters (Mohammad Kabat) [2141957 2077119]
- drm/mgag200: Fix PLL setup for G200_SE_A rev &gt;=4 (Jocelyn Falempe) [2140152 2130159]
- iavf: Do not restart Tx queues after reset task failure (Petr Oros) [2149081 2134005]
- iavf: Fix a crash during reset task (Petr Oros) [2149081 2134005]
- scsi: core: Allow the ALUA transitioning state enough time (Tomas Henzl) [2147374 2084250]
- scsi: core: Return BLK_STS_TRANSPORT for ALUA transitioning (Tomas Henzl) [2147374 2084250]
- i40e: Fix DMA mappings leak (Ivan Vecera) [2138205 2077847]
- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2142724 2142725] {CVE-2022-2964}
- net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2142724 2142725] {CVE-2022-2964}</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.9.1.el8_7]" date="1670587200">- Documentation/admin-guide: Document nomodeset kernel parameter (Jocelyn Falempe) [2145218 2143952]
- drm: Move nomodeset kernel parameter to the DRM subsystem (Jocelyn Falempe) [2145218 2143952]
- wait: Fix __wait_event_hrtimeout for RT/DL tasks (Derek Barbosa) [2138953 2125233]
- scsi: zfcp: Fix missing auto port scan and thus missing target ports (Tobias Huschle) [2127849 2121089]
- net: Fix return value of qdisc ingress handling on success (Ivan Vecera) [2141878 2131361]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.10.1.el8_7]" date="1671019200">- scsi: target: loop: Fix handling of aborted TMRs (Maurizio Lombardi) [2144583 2141713]
- ice: virtchnl rss hena support (Petr Oros) [2148130]
- ice: Fix configuring VIRTCHNL_OP_CONFIG_VSI_QUEUES with unbalanced queues (Michal Schmidt) [2142017 2137378]
- ice: Add support Flex RXD (Michal Schmidt) [2138157 2131310]
- netfilter: flowtable: fix stuck flows on cleanup due to pending work (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: add function to invoke garbage collection immediately (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: pass flowtable to nf_flow_table_iterate() (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: separate replace, destroy and stats to different workqueues (Phil Sutter) [2134084 2131370]
- x86/paravirt: Add a dummy __x86_paravirt_patch_template() function (Waiman Long) [2152206 2144161]
- x86/paravirt: Fix kABI breakage in struct pv_mmu_ops (Waiman Long) [2152206 2144161]
- drm/i915: fix TLB invalidation for Gen12 video and compute engines (Wander Lairson Costa) [2148149 2148150] {CVE-2022-4139}
- PCI: hv: Do not set PCI_COMMAND_MEMORY to reduce VM boot time (Emanuele Giuseppe Esposito) [2150912 2082836]
- iavf: Fix cached head and tail value for iavf_get_tx_pending (Stefan Assmann) [2149742 2103944]
- iavf: Fix change VF's mac address (Stefan Assmann) [2149742 2103944]
- iavf: Fix race between iavf_close and iavf_reset_task (Stefan Assmann) [2149742 2103944]
- net: ethernet: move from strlcpy with unused retval to strscpy (Stefan Assmann) [2149742 2103944]
- iavf: Fix 'tc qdisc show' listing too many queues (Stefan Assmann) [2149742 2103944]
- iavf: Fix max_rate limiting (Stefan Assmann) [2149742 2103944]
- iavf: Check for duplicate TC flower filter before parsing (Stefan Assmann) [2149742 2103944]
- iavf: Fix handling of dummy receive descriptors (Stefan Assmann) [2149742 2103944]
- iavf: Disallow changing rx/tx-frames and rx/tx-frames-irq (Stefan Assmann) [2149742 2103944]
- intel/iavf:fix repeated words in comments (Stefan Assmann) [2149742 2103944]
- intel: remove unused macros (Stefan Assmann) [2149742 2103944]
- iavf: Add waiting for response from PF in set mac (Stefan Assmann) [2149742 2103944]</changelog>
</package>
<package pkgid="8fa77fbd390da1134726d9e7da351f66664867285651e09760b52a7ab7ed8d4c" name="kernel-core" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="425.13.1.el8_7"/>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.4.1.el8]" date="1665144000">- random: allow reseeding DRBG with getrandom (Daiki Ueno) [2121766]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.5.1.el8_7]" date="1667476800">- ice: Fix interface being down after reset with link-down-on-close flag on (Petr Oros) [2136216 2024110]
- ice: Fix crash by keep old cfg when update TCs more than queues (Petr Oros) [2130992 2129902]
- ice: Fix tunnel checksum offload with fragmented traffic (Petr Oros) [2130992 2129902]
- ice: handle E822 generic device ID in PLDM header (Petr Oros) [2130992 2129902]
- ice: ethtool: Prohibit improper channel config for DCB (Petr Oros) [2130992 2129902]
- ice: ethtool: advertise 1000M speeds properly (Petr Oros) [2130992 2129902]
- ice: Fix switchdev rules book keeping (Petr Oros) [2130992 2129902]
- ice: fix access-beyond-end in the switch code (Petr Oros) [2130992 2129902]
- eth: ice: silence the GCC 12 array-bounds warning (Petr Oros) [2130992 2129902]
- ice: Expose RSS indirection tables for queue groups via ethtool (Petr Oros) [2130992 2129902]
- Revert "ice: Hide bus-info in ethtool for PRs in switchdev mode" (Petr Oros) [2130992 2129902]
- ice: remove period on argument description in ice_for_each_vf (Petr Oros) [2130992 2129902]
- ice: add a function comment for ice_cfg_mac_antispoof (Petr Oros) [2130992 2129902]
- ice: fix wording in comment for ice_reset_vf (Petr Oros) [2130992 2129902]
- ice: remove return value comment for ice_reset_all_vfs (Petr Oros) [2130992 2129902]
- ice: always check VF VSI pointer values (Petr Oros) [2130992 2129902]
- ice: add newline to dev_dbg in ice_vf_fdir_dump_info (Petr Oros) [2130992 2129902]
- ice: get switch id on switchdev devices (Petr Oros) [2130992 2129902]
- ice: return ENOSPC when exceeding ICE_MAX_CHAIN_WORDS (Petr Oros) [2130992 2129902]
- ice: introduce common helper for retrieving VSI by vsi_num (Petr Oros) [2130992 2129902]
- ice: use min_t() to make code cleaner in ice_gnss (Petr Oros) [2130992 2129902]
- ice: Add mpls+tso support (Petr Oros) [2130992 2129902]
- ice: switch: convert packet template match code to rodata (Petr Oros) [2130992 2129902]
- ice: switch: use convenience macros to declare dummy pkt templates (Petr Oros) [2130992 2129902]
- ice: switch: use a struct to pass packet template params (Petr Oros) [2130992 2129902]
- ice: switch: unobscurify bitops loop in ice_fill_adv_dummy_packet() (Petr Oros) [2130992 2129902]
- ice: switch: add and use u16[] aliases to ice_adv_lkup_elem::{h, m}_u (Petr Oros) [2130992 2129902]
- ice: Support GTP-U and GTP-C offload in switchdev (Petr Oros) [2130992 2129902]
- ice: Remove useless DMA-32 fallback configuration (Petr Oros) [2130992 2129902]
- ice: switch to napi_build_skb() (Petr Oros) [2130992 2129902]
- redhat: switch to z-stream dist tag and build targets (Jarod Wilson)
- block: avoid sign extend problem with default queue flags mask (Nico Pache) [2135813]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.6.1.el8_7]" date="1668168000">- ice: Add low latency Tx timestamp read (Petr Oros) [2136036 2092425]
- ice: introduce ice_ptp_reset_cached_phctime function (Petr Oros) [2136036 2092425]
- ice: re-arrange some static functions in ice_ptp.c (Petr Oros) [2136036 2092425]
- ice: track and warn when PHC update is late (Petr Oros) [2136036 2092425]
- ice: track Tx timestamp stats similar to other Intel drivers (Petr Oros) [2136036 2092425]
- ice: implement adjfine with mul_u64_u64_div_u64 (Petr Oros) [2136036 2092425]
- ice: Add EXTTS feature to the feature bitmap (Petr Oros) [2136036 2092425]
- math: Export mul_u64_u64_div_u64 (Petr Oros) [2136036 2092425]
- vfio/type1: Unpin zero pages (Alex Williamson) [2128515 2123015]
- net: atlantic: remove aq_nic_deinit() when resume (Íñigo Huguet) [2131935 2130839]
- net: atlantic: remove deep parameter on suspend/resume functions (Íñigo Huguet) [2131935 2130839]
- CI: Use zstream builder container (Veronika Kabatova)
- CI: Add disttag override for 8.7 (Veronika Kabatova)</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.7.1.el8_7]" date="1669723200">- ice: Add additional CSR registers to ETHTOOL_GREGS (Petr Oros) [2136513 2131024]
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps (Petr Oros) [2137270 2106964]
- i40e: Fix VF set max MTU size (Petr Oros) [2137270 2106964]
- iavf: Fix set max MTU size with port VLAN and jumbo frames (Petr Oros) [2137270 2106964]
- iavf: Fix bad page state (Petr Oros) [2137270 2106964]
- Revert "scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels" (Jarod Wilson)
- scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels (Tomas Henzl) [2139216]
- Revert "ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems" (Jarod Wilson)
- ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems (Wei Huang) [2142170 2130653]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.8.1.el8_7]" date="1669982400">- scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels (Tomas Henzl) [2139216 2134535]
- RDMA/mlx5: Set local port to one when accessing counters (Mohammad Kabat) [2141957 2077119]
- drm/mgag200: Fix PLL setup for G200_SE_A rev &gt;=4 (Jocelyn Falempe) [2140152 2130159]
- iavf: Do not restart Tx queues after reset task failure (Petr Oros) [2149081 2134005]
- iavf: Fix a crash during reset task (Petr Oros) [2149081 2134005]
- scsi: core: Allow the ALUA transitioning state enough time (Tomas Henzl) [2147374 2084250]
- scsi: core: Return BLK_STS_TRANSPORT for ALUA transitioning (Tomas Henzl) [2147374 2084250]
- i40e: Fix DMA mappings leak (Ivan Vecera) [2138205 2077847]
- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2142724 2142725] {CVE-2022-2964}
- net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2142724 2142725] {CVE-2022-2964}</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.9.1.el8_7]" date="1670587200">- Documentation/admin-guide: Document nomodeset kernel parameter (Jocelyn Falempe) [2145218 2143952]
- drm: Move nomodeset kernel parameter to the DRM subsystem (Jocelyn Falempe) [2145218 2143952]
- wait: Fix __wait_event_hrtimeout for RT/DL tasks (Derek Barbosa) [2138953 2125233]
- scsi: zfcp: Fix missing auto port scan and thus missing target ports (Tobias Huschle) [2127849 2121089]
- net: Fix return value of qdisc ingress handling on success (Ivan Vecera) [2141878 2131361]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.10.1.el8_7]" date="1671019200">- scsi: target: loop: Fix handling of aborted TMRs (Maurizio Lombardi) [2144583 2141713]
- ice: virtchnl rss hena support (Petr Oros) [2148130]
- ice: Fix configuring VIRTCHNL_OP_CONFIG_VSI_QUEUES with unbalanced queues (Michal Schmidt) [2142017 2137378]
- ice: Add support Flex RXD (Michal Schmidt) [2138157 2131310]
- netfilter: flowtable: fix stuck flows on cleanup due to pending work (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: add function to invoke garbage collection immediately (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: pass flowtable to nf_flow_table_iterate() (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: separate replace, destroy and stats to different workqueues (Phil Sutter) [2134084 2131370]
- x86/paravirt: Add a dummy __x86_paravirt_patch_template() function (Waiman Long) [2152206 2144161]
- x86/paravirt: Fix kABI breakage in struct pv_mmu_ops (Waiman Long) [2152206 2144161]
- drm/i915: fix TLB invalidation for Gen12 video and compute engines (Wander Lairson Costa) [2148149 2148150] {CVE-2022-4139}
- PCI: hv: Do not set PCI_COMMAND_MEMORY to reduce VM boot time (Emanuele Giuseppe Esposito) [2150912 2082836]
- iavf: Fix cached head and tail value for iavf_get_tx_pending (Stefan Assmann) [2149742 2103944]
- iavf: Fix change VF's mac address (Stefan Assmann) [2149742 2103944]
- iavf: Fix race between iavf_close and iavf_reset_task (Stefan Assmann) [2149742 2103944]
- net: ethernet: move from strlcpy with unused retval to strscpy (Stefan Assmann) [2149742 2103944]
- iavf: Fix 'tc qdisc show' listing too many queues (Stefan Assmann) [2149742 2103944]
- iavf: Fix max_rate limiting (Stefan Assmann) [2149742 2103944]
- iavf: Check for duplicate TC flower filter before parsing (Stefan Assmann) [2149742 2103944]
- iavf: Fix handling of dummy receive descriptors (Stefan Assmann) [2149742 2103944]
- iavf: Disallow changing rx/tx-frames and rx/tx-frames-irq (Stefan Assmann) [2149742 2103944]
- intel/iavf:fix repeated words in comments (Stefan Assmann) [2149742 2103944]
- intel: remove unused macros (Stefan Assmann) [2149742 2103944]
- iavf: Add waiting for response from PF in set mac (Stefan Assmann) [2149742 2103944]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.11.1.el8_7]" date="1673006400">- NFSD: Protect against send buffer overflow in NFSv3 READ (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv2 READ (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv3 READDIR (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv2 READDIR (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- SUNRPC: Fix svcxdr_init_encode's buflen calculation (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- SUNRPC: Fix svcxdr_init_decode's end-of-buffer calculation (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- panic, kexec: make __crash_kexec() NMI safe (Valentin Schneider) [2139580 2134126]
- kexec: turn all kexec_mutex acquisitions into trylocks (Valentin Schneider) [2139580 2134126]
- kexec: move locking into do_kexec_load (Valentin Schneider) [2139580 2134126]
- vdpa/mlx5: re-create forwarding rules after mac modified (Laurent Vivier) [2152912 2145136]
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry (Waiman Long) [2153653 2108387]
- irq: Call tick_irq_enter() inside HARDIRQ_OFFSET (Waiman Long) [2153653 2108387]
- irqtime: Move irqtime entry accounting after irq offset incrementation (Waiman Long) [2153653 2108387]
- sched/vtime: Consolidate IRQ time accounting (Waiman Long) [2153653 2108387]
- s390/vtime: Use the generic IRQ entry accounting (Waiman Long) [2153653 2108387]
- sched/cputime: Remove symbol exports from IRQ time accounting (Waiman Long) [2153653 2108387]
- genirq/irqdomain: Don't try to free an interrupt that has no mapping (Waiman Long) [2153653 2108387]
- genirq: Provide __irq_enter/exit_raw() (Waiman Long) [2153653 2108387]
- powerpc/time: Only set CONFIG_ARCH_HAS_SCALED_CPUTIME on PPC64 (Waiman Long) [2153653 2108387]
- powerpc/time: isolate scaled cputime accounting in dedicated functions. (Waiman Long) [2153653 2108387]
- PCI: hv: Fix synchronization between channel callback and hv_pci_bus_exit() (Mohammed Gamal) [2155280 2144708]
- PCI: hv: Fix synchronization between channel callback and hv_compose_msi_msg() (Mohammed Gamal) [2155280 2144708]
- PCI: hv: Use vmbus_requestor to generate transaction IDs for VMbus hardening (Mohammed Gamal) [2155280 2144708]
- net/mlx5e: TC, Reject forwarding from internal port to internal port (Mohammad Kabat) [2141959 2131345]
- hv_netvsc: Fix race between VF offering and VF association message from host (Mohammed Gamal) [2155272 2149279]
- x86/mce: Reduce number of machine checks taken during recovery (Prarit Bhargava) [2137592 2104388]
- cgroup/cpuset: Reduce cpuset_rwsem writer latency (Waiman Long) [2153108 2149031]
- rcu/exp: Mark current CPU as exp-QS in IPI loop second pass (Waiman Long) [2153108 2149031]
- rcu: Always inline rcu_dynticks_task*_{enter,exit}() (Waiman Long) [2153108 2149031]
- rcu: Fix existing exp request check in sync_sched_exp_online_cleanup() (Waiman Long) [2153108 2149031]
- rcu: Fix macro name CONFIG_TASKS_RCU_TRACE (Waiman Long) [2153108 2149031]
- rcu: Fix stall-warning deadlock due to non-release of rcu_node -&gt;lock (Waiman Long) [2153108 2149031]
- rcu: Fix to include first blocked task in stall warning (Waiman Long) [2153108 2149031]
- cgroup: Use cgroup_attach_{lock,unlock}() from cgroup_attach_task_all() (Waiman Long) [2153108 2149031]
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all() (Waiman Long) [2153108 2149031]
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock (Waiman Long) [2153108 2149031]
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree (Waiman Long) [2153108 2149031]
- cgroup/cpuset: Fix a race between cpuset_attach() and cpu hotplug (Waiman Long) [2153108 2149031]
- cgroup: reduce dependency on cgroup_mutex (Waiman Long) [2153108 2149031]
- sunrpc: Set sk_allocation to GFP_NOFS to avoid using current-&gt;task_frag. (Guillaume Nault) [2153230 2089660]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.12.1.el8_7]" date="1674129600">- x86/fpu: Prevent FPU state corruption (Oleksandr Natalenko) [2134586 2130890]
- x86/fpu: Drop fpregs lock before inheriting FPU permissions (Eder Zulian) [2154460 2153549]
- kernel-doc: fix undefined args variable (Jan Stancek) [2157905 2134954]
- mm: memcontrol: fix potential oom_lock recursion deadlock (Waiman Long) [2157922 2138886]
- memcg: prohibit unconditional exceeding the limit of dying tasks (Waiman Long) [2157922 2138886]
- mm, oom: do not trigger out_of_memory from the #PF (Waiman Long) [2157922 2138886]
- mm, oom: pagefault_out_of_memory: don't force global OOM for dying tasks (Waiman Long) [2157922 2138886]
- mm: memcontrol: don't count limit-setting reclaim as memory pressure (Waiman Long) [2157922 2138886]
- KVM: s390: vsie: Fix the initialization of the epoch extension (epdx) field (Thomas Huth) [2158813 2151854]
- net: mana: Fix race on per-CQ variable napi work_done (Emanuele Giuseppe Esposito) [2155437 2151722]
- mei: me: add adler lake point S DID (Prarit Bhargava) [2141783 2141602]
- PCI: hv: Only reuse existing IRTE allocation for Multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix the definition of vector in hv_compose_msi_msg() (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix interrupt mapping for multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Reuse existing IRTE allocation in compose_msi_msg() (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix hv_arch_irq_unmask() for multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix multi-MSI to allow more than one MSI vector (Emanuele Giuseppe Esposito) [2155289 2100275]
- drm/ast: Support multiple outputs (Jarod Wilson) [2149287 2147553]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.13.1.el8_7]" date="1675339200">- mm/cgroup/reclaim: fix dirty pages throttling on cgroup v1 (Waiman Long) [2160221]
- mm: vmscan: remove deadlock due to throttling failing to make progress (Waiman Long) [2160221]
- mm: vmscan: reduce throttling due to a failure to make progress -fix (Waiman Long) [2160221]
- mm: vmscan: Reduce throttling due to a failure to make progress (Waiman Long) [2160221]
- mm/vmscan: delay waking of tasks throttled on NOPROGRESS (Waiman Long) [2160221]
- mm/vmscan: increase the timeout if page reclaim is not making progress (Waiman Long) [2160221]
- mm/vmscan: centralise timeout values for reclaim_throttle (Waiman Long) [2160221]
- mm/page_alloc: remove the throttling logic from the page allocator (Waiman Long) [2160221]
- mm/writeback: throttle based on page writeback instead of congestion (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim when no progress is being made (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim and compaction when too may pages are isolated (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim until some writeback completes if congested (Waiman Long) [2160221]
- mm/vmscan.c: delete or fix duplicated words (Waiman Long) [2160221]
- mm,page_alloc: PF_WQ_WORKER threads must sleep at should_reclaim_retry() (Nico Pache) [2160221]
- ceph: avoid putting the realm twice when decoding snaps fails (Xiubo Li) [2155797 2139881]
- mm/mremap: hold the rmap lock in write mode when moving page table entries. (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: use pmd/pud_poplulate to update page table entries (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: don't enable optimized PUD move if page table levels is 2 (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: convert huge PUD move to separate helper (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: fix BUILD_BUG_ON() error in get_extent (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap.c: fix extent calculation (Waiman Long) [2140944] {CVE-2022-41222}
- x86: mremap speedup - Enable HAVE_MOVE_PUD (Waiman Long) [2140944] {CVE-2022-41222}
- mm: speedup mremap on 1GB or larger regions (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: start addresses are properly aligned (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: calculate extent in one place (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: it is sure to have enough space when extent meets requirement (Waiman Long) [2140944] {CVE-2022-41222}
- s390/boot: add secure boot trailer (Tobias Huschle) [2151530 2141967]
- i40e: Fix VF hang when reset is triggered on another VF (Ivan Vecera) [2160460 2103801]
- i2c: ismt: Fix an out-of-bounds bug in ismt_access() (Prarit Bhargava) [2154388 2119066] {CVE-2022-2873}
- iavf: schedule watchdog immediately when changing primary MAC (Michal Schmidt) [2163257 2152493]
- iavf: Move netdev_update_features() into watchdog task (Michal Schmidt) [2163257 2152493]
- iavf: fix temporary deadlock and failure to set MAC address (Michal Schmidt) [2163257 2152493]
- iavf: Fix error handling in iavf_init_module() (Michal Schmidt) [2163257 2152493]
- iommu/vt-d: Clean up si_domain in the init_dmars() error path (Jerry Snitselaar) [2149474 2118428]
- x86/pci/xen: Use msi_msg shadow structs (Jerry Snitselaar) [2149474 2118428]
- iommu/intel: Use msi_msg shadow structs (Jerry Snitselaar) [2149474 2118428]
- PCI: MSI: Fix Kconfig dependencies for PCI_MSI_ARCH_FALLBACKS (Jerry Snitselaar) [2149474 2118428]
- x86/apic/msi: Unbreak DMAR and HPET MSI (Jerry Snitselaar) [2149474 2118428]
- iommu/amd: Remove domain search for PCI/MSI (Jerry Snitselaar) [2149474 2118428]
- iommu/vt-d: Remove domain search for PCI/MSI[X] (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Make most MSI ops XEN private (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Cleanup the arch_*_msi_irqs() leftovers (Jerry Snitselaar) [2149474 2118428]
- PCI/MSI: Make arch_.*_msi_irq[s] fallbacks selectable (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Wrap XEN MSI management into irqdomain (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Consolidate XEN-MSI init (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Rework MSI teardown (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Make xen_msi_init() static and rename it to xen_hvm_msi_init() (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Move apic_post_init() invocation to one place (Jerry Snitselaar) [2149474 2118428]
- x86/msi: Use generic MSI domain ops (Jerry Snitselaar) [2149474 2118428]
- x86/msi: Remove pointless vcpu_affinity callback (Jerry Snitselaar) [2149474 2118428]
- iommu/vt-d: Fix compile error with CONFIG_PCI_ATS not set (Myron Stowe) [2149474 2118428]
- iommu/vt-d: Cure VF irqdomain hickup (Myron Stowe) [2149474 2118428]
- x86/pci: Set default irq domain in pcibios_add_device() (Myron Stowe) [2149474 2118428]
- iommm/amd: Store irq domain in struct device (Myron Stowe) [2149474 2118428]
- iommm/vt-d: Store irq domain in struct device (Myron Stowe) [2149474 2118428]
- PCI/MSI: Provide pci_dev_has_special_msi_domain() helper (Myron Stowe) [2149474 2118428]
- x86/msi: Consolidate MSI allocation (Myron Stowe) [2149474 2118428]
- PCI/MSI: Rework pci_msi_domain_calc_hwirq() (Myron Stowe) [2149474 2118428]
- x86/irq: Consolidate UV domain allocation (Myron Stowe) [2149474 2118428]
- x86/irq: Consolidate DMAR irq allocation (Myron Stowe) [2149474 2118428]
- x86_ioapic_Consolidate_IOAPIC_allocation (Myron Stowe) [2149474 2118428]
- x86/msi: Consolidate HPET allocation (Myron Stowe) [2149474 2118428]
- iommu/irq_remapping: Consolidate irq domain lookup (Myron Stowe) [2149474 2118428]
- iommu/amd: Consolidate irq domain getter (Myron Stowe) [2149474 2118428]
- iommu/vt-d: Consolidate irq domain getter (Myron Stowe) [2149474 2118428]
- x86/irq: Add allocation type for parent domain retrieval (Myron Stowe) [2149474 2118428]
- irqdomain: Export irq_domain_update_bus_token (Myron Stowe) [2149474 2118428]
- gitlab-ci: use CI templates from production branch (Michael Hofmann)
- iavf: remove INITIAL_MAC_SET to allow gARP to work properly (Stefan Assmann) [2149745 1938635]
- Revert "scsi: iscsi: ql4xxx: Use per-session workqueue for unbinding" (Chris Leech) [2152734 2122624]
- Revert "scsi: iscsi: Use the session workqueue for recovery" (Chris Leech) [2152734 2122624]
- arm64/bpf: Remove 128MB limit for BPF JIT programs (Yauheni Kaliuta) [2152138 2140163]
- bpf: Define bpf_jit_alloc_exec_limit for arm64 JIT (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: add `type` and `data` fields (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: use `ex` for `exception_table_entry` (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: make fixup_exception() return bool (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: consolidate definitions (Yauheni Kaliuta) [2152138 2140163]
- arm64: kvm: use kvm_exception_table_entry (Yauheni Kaliuta) [2152138 2140163]
- be2net: Fix buffer overflow in be_get_module_eeprom (Josef Oskera) [2160182 2126917]</changelog>
</package>
<package pkgid="b3aa1805cfcb872eb7d1bf0ed70d1f28a9545e290a2bd5ecaac91320a2eea5c0" name="kernel-core" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="425.19.2.el8_7"/>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.11.1.el8_7]" date="1673006400">- NFSD: Protect against send buffer overflow in NFSv3 READ (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv2 READ (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv3 READDIR (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv2 READDIR (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- SUNRPC: Fix svcxdr_init_encode's buflen calculation (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- SUNRPC: Fix svcxdr_init_decode's end-of-buffer calculation (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- panic, kexec: make __crash_kexec() NMI safe (Valentin Schneider) [2139580 2134126]
- kexec: turn all kexec_mutex acquisitions into trylocks (Valentin Schneider) [2139580 2134126]
- kexec: move locking into do_kexec_load (Valentin Schneider) [2139580 2134126]
- vdpa/mlx5: re-create forwarding rules after mac modified (Laurent Vivier) [2152912 2145136]
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry (Waiman Long) [2153653 2108387]
- irq: Call tick_irq_enter() inside HARDIRQ_OFFSET (Waiman Long) [2153653 2108387]
- irqtime: Move irqtime entry accounting after irq offset incrementation (Waiman Long) [2153653 2108387]
- sched/vtime: Consolidate IRQ time accounting (Waiman Long) [2153653 2108387]
- s390/vtime: Use the generic IRQ entry accounting (Waiman Long) [2153653 2108387]
- sched/cputime: Remove symbol exports from IRQ time accounting (Waiman Long) [2153653 2108387]
- genirq/irqdomain: Don't try to free an interrupt that has no mapping (Waiman Long) [2153653 2108387]
- genirq: Provide __irq_enter/exit_raw() (Waiman Long) [2153653 2108387]
- powerpc/time: Only set CONFIG_ARCH_HAS_SCALED_CPUTIME on PPC64 (Waiman Long) [2153653 2108387]
- powerpc/time: isolate scaled cputime accounting in dedicated functions. (Waiman Long) [2153653 2108387]
- PCI: hv: Fix synchronization between channel callback and hv_pci_bus_exit() (Mohammed Gamal) [2155280 2144708]
- PCI: hv: Fix synchronization between channel callback and hv_compose_msi_msg() (Mohammed Gamal) [2155280 2144708]
- PCI: hv: Use vmbus_requestor to generate transaction IDs for VMbus hardening (Mohammed Gamal) [2155280 2144708]
- net/mlx5e: TC, Reject forwarding from internal port to internal port (Mohammad Kabat) [2141959 2131345]
- hv_netvsc: Fix race between VF offering and VF association message from host (Mohammed Gamal) [2155272 2149279]
- x86/mce: Reduce number of machine checks taken during recovery (Prarit Bhargava) [2137592 2104388]
- cgroup/cpuset: Reduce cpuset_rwsem writer latency (Waiman Long) [2153108 2149031]
- rcu/exp: Mark current CPU as exp-QS in IPI loop second pass (Waiman Long) [2153108 2149031]
- rcu: Always inline rcu_dynticks_task*_{enter,exit}() (Waiman Long) [2153108 2149031]
- rcu: Fix existing exp request check in sync_sched_exp_online_cleanup() (Waiman Long) [2153108 2149031]
- rcu: Fix macro name CONFIG_TASKS_RCU_TRACE (Waiman Long) [2153108 2149031]
- rcu: Fix stall-warning deadlock due to non-release of rcu_node -&gt;lock (Waiman Long) [2153108 2149031]
- rcu: Fix to include first blocked task in stall warning (Waiman Long) [2153108 2149031]
- cgroup: Use cgroup_attach_{lock,unlock}() from cgroup_attach_task_all() (Waiman Long) [2153108 2149031]
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all() (Waiman Long) [2153108 2149031]
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock (Waiman Long) [2153108 2149031]
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree (Waiman Long) [2153108 2149031]
- cgroup/cpuset: Fix a race between cpuset_attach() and cpu hotplug (Waiman Long) [2153108 2149031]
- cgroup: reduce dependency on cgroup_mutex (Waiman Long) [2153108 2149031]
- sunrpc: Set sk_allocation to GFP_NOFS to avoid using current-&gt;task_frag. (Guillaume Nault) [2153230 2089660]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.12.1.el8_7]" date="1674129600">- x86/fpu: Prevent FPU state corruption (Oleksandr Natalenko) [2134586 2130890]
- x86/fpu: Drop fpregs lock before inheriting FPU permissions (Eder Zulian) [2154460 2153549]
- kernel-doc: fix undefined args variable (Jan Stancek) [2157905 2134954]
- mm: memcontrol: fix potential oom_lock recursion deadlock (Waiman Long) [2157922 2138886]
- memcg: prohibit unconditional exceeding the limit of dying tasks (Waiman Long) [2157922 2138886]
- mm, oom: do not trigger out_of_memory from the #PF (Waiman Long) [2157922 2138886]
- mm, oom: pagefault_out_of_memory: don't force global OOM for dying tasks (Waiman Long) [2157922 2138886]
- mm: memcontrol: don't count limit-setting reclaim as memory pressure (Waiman Long) [2157922 2138886]
- KVM: s390: vsie: Fix the initialization of the epoch extension (epdx) field (Thomas Huth) [2158813 2151854]
- net: mana: Fix race on per-CQ variable napi work_done (Emanuele Giuseppe Esposito) [2155437 2151722]
- mei: me: add adler lake point S DID (Prarit Bhargava) [2141783 2141602]
- PCI: hv: Only reuse existing IRTE allocation for Multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix the definition of vector in hv_compose_msi_msg() (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix interrupt mapping for multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Reuse existing IRTE allocation in compose_msi_msg() (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix hv_arch_irq_unmask() for multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix multi-MSI to allow more than one MSI vector (Emanuele Giuseppe Esposito) [2155289 2100275]
- drm/ast: Support multiple outputs (Jarod Wilson) [2149287 2147553]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.13.1.el8_7]" date="1675339200">- mm/cgroup/reclaim: fix dirty pages throttling on cgroup v1 (Waiman Long) [2160221]
- mm: vmscan: remove deadlock due to throttling failing to make progress (Waiman Long) [2160221]
- mm: vmscan: reduce throttling due to a failure to make progress -fix (Waiman Long) [2160221]
- mm: vmscan: Reduce throttling due to a failure to make progress (Waiman Long) [2160221]
- mm/vmscan: delay waking of tasks throttled on NOPROGRESS (Waiman Long) [2160221]
- mm/vmscan: increase the timeout if page reclaim is not making progress (Waiman Long) [2160221]
- mm/vmscan: centralise timeout values for reclaim_throttle (Waiman Long) [2160221]
- mm/page_alloc: remove the throttling logic from the page allocator (Waiman Long) [2160221]
- mm/writeback: throttle based on page writeback instead of congestion (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim when no progress is being made (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim and compaction when too may pages are isolated (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim until some writeback completes if congested (Waiman Long) [2160221]
- mm/vmscan.c: delete or fix duplicated words (Waiman Long) [2160221]
- mm,page_alloc: PF_WQ_WORKER threads must sleep at should_reclaim_retry() (Nico Pache) [2160221]
- ceph: avoid putting the realm twice when decoding snaps fails (Xiubo Li) [2155797 2139881]
- mm/mremap: hold the rmap lock in write mode when moving page table entries. (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: use pmd/pud_poplulate to update page table entries (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: don't enable optimized PUD move if page table levels is 2 (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: convert huge PUD move to separate helper (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: fix BUILD_BUG_ON() error in get_extent (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap.c: fix extent calculation (Waiman Long) [2140944] {CVE-2022-41222}
- x86: mremap speedup - Enable HAVE_MOVE_PUD (Waiman Long) [2140944] {CVE-2022-41222}
- mm: speedup mremap on 1GB or larger regions (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: start addresses are properly aligned (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: calculate extent in one place (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: it is sure to have enough space when extent meets requirement (Waiman Long) [2140944] {CVE-2022-41222}
- s390/boot: add secure boot trailer (Tobias Huschle) [2151530 2141967]
- i40e: Fix VF hang when reset is triggered on another VF (Ivan Vecera) [2160460 2103801]
- i2c: ismt: Fix an out-of-bounds bug in ismt_access() (Prarit Bhargava) [2154388 2119066] {CVE-2022-2873}
- iavf: schedule watchdog immediately when changing primary MAC (Michal Schmidt) [2163257 2152493]
- iavf: Move netdev_update_features() into watchdog task (Michal Schmidt) [2163257 2152493]
- iavf: fix temporary deadlock and failure to set MAC address (Michal Schmidt) [2163257 2152493]
- iavf: Fix error handling in iavf_init_module() (Michal Schmidt) [2163257 2152493]
- iommu/vt-d: Clean up si_domain in the init_dmars() error path (Jerry Snitselaar) [2149474 2118428]
- x86/pci/xen: Use msi_msg shadow structs (Jerry Snitselaar) [2149474 2118428]
- iommu/intel: Use msi_msg shadow structs (Jerry Snitselaar) [2149474 2118428]
- PCI: MSI: Fix Kconfig dependencies for PCI_MSI_ARCH_FALLBACKS (Jerry Snitselaar) [2149474 2118428]
- x86/apic/msi: Unbreak DMAR and HPET MSI (Jerry Snitselaar) [2149474 2118428]
- iommu/amd: Remove domain search for PCI/MSI (Jerry Snitselaar) [2149474 2118428]
- iommu/vt-d: Remove domain search for PCI/MSI[X] (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Make most MSI ops XEN private (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Cleanup the arch_*_msi_irqs() leftovers (Jerry Snitselaar) [2149474 2118428]
- PCI/MSI: Make arch_.*_msi_irq[s] fallbacks selectable (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Wrap XEN MSI management into irqdomain (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Consolidate XEN-MSI init (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Rework MSI teardown (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Make xen_msi_init() static and rename it to xen_hvm_msi_init() (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Move apic_post_init() invocation to one place (Jerry Snitselaar) [2149474 2118428]
- x86/msi: Use generic MSI domain ops (Jerry Snitselaar) [2149474 2118428]
- x86/msi: Remove pointless vcpu_affinity callback (Jerry Snitselaar) [2149474 2118428]
- iommu/vt-d: Fix compile error with CONFIG_PCI_ATS not set (Myron Stowe) [2149474 2118428]
- iommu/vt-d: Cure VF irqdomain hickup (Myron Stowe) [2149474 2118428]
- x86/pci: Set default irq domain in pcibios_add_device() (Myron Stowe) [2149474 2118428]
- iommm/amd: Store irq domain in struct device (Myron Stowe) [2149474 2118428]
- iommm/vt-d: Store irq domain in struct device (Myron Stowe) [2149474 2118428]
- PCI/MSI: Provide pci_dev_has_special_msi_domain() helper (Myron Stowe) [2149474 2118428]
- x86/msi: Consolidate MSI allocation (Myron Stowe) [2149474 2118428]
- PCI/MSI: Rework pci_msi_domain_calc_hwirq() (Myron Stowe) [2149474 2118428]
- x86/irq: Consolidate UV domain allocation (Myron Stowe) [2149474 2118428]
- x86/irq: Consolidate DMAR irq allocation (Myron Stowe) [2149474 2118428]
- x86_ioapic_Consolidate_IOAPIC_allocation (Myron Stowe) [2149474 2118428]
- x86/msi: Consolidate HPET allocation (Myron Stowe) [2149474 2118428]
- iommu/irq_remapping: Consolidate irq domain lookup (Myron Stowe) [2149474 2118428]
- iommu/amd: Consolidate irq domain getter (Myron Stowe) [2149474 2118428]
- iommu/vt-d: Consolidate irq domain getter (Myron Stowe) [2149474 2118428]
- x86/irq: Add allocation type for parent domain retrieval (Myron Stowe) [2149474 2118428]
- irqdomain: Export irq_domain_update_bus_token (Myron Stowe) [2149474 2118428]
- gitlab-ci: use CI templates from production branch (Michael Hofmann)
- iavf: remove INITIAL_MAC_SET to allow gARP to work properly (Stefan Assmann) [2149745 1938635]
- Revert "scsi: iscsi: ql4xxx: Use per-session workqueue for unbinding" (Chris Leech) [2152734 2122624]
- Revert "scsi: iscsi: Use the session workqueue for recovery" (Chris Leech) [2152734 2122624]
- arm64/bpf: Remove 128MB limit for BPF JIT programs (Yauheni Kaliuta) [2152138 2140163]
- bpf: Define bpf_jit_alloc_exec_limit for arm64 JIT (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: add `type` and `data` fields (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: use `ex` for `exception_table_entry` (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: make fixup_exception() return bool (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: consolidate definitions (Yauheni Kaliuta) [2152138 2140163]
- arm64: kvm: use kvm_exception_table_entry (Yauheni Kaliuta) [2152138 2140163]
- be2net: Fix buffer overflow in be_get_module_eeprom (Josef Oskera) [2160182 2126917]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.14.1.el8_7]" date="1676030400">- ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems (Wei Huang) [2142170 2130653]
- KVM: x86: nSVM: implement nested LBR virtualization (Emanuele Giuseppe Esposito) [2166362 2155149]
- KVM: x86: nSVM: correctly virtualize LBR msrs when L2 is running (Emanuele Giuseppe Esposito) [2166362 2155149]
- kvm: x86: SVM: use vmcb* instead of svm-&gt;vmcb where it makes sense (Emanuele Giuseppe Esposito) [2166362 2155149]
- KVM: x86: nSVM: implement nested VMLOAD/VMSAVE (Emanuele Giuseppe Esposito) [2166362 2155149]
- IB/iser: Fix login with authentication (Kamal Heib) [2161750 2120676]
- act_mirred: use the backlog for nested calls to mirred ingress (Davide Caratti) [2164648 2131339] {CVE-2022-4269}
- net/sched: act_mirred: better wording on protection against excessive stack growth (Davide Caratti) [2164648 2131339] {CVE-2022-4269}
- redhat/configs: Set CONFIG_X86_AMD_PSTATE to 'm' (Prarit Bhargava) [2151275 2145246]
- KVM: x86: smm: preserve interrupt shadow in SMRAM (Maxim Levitsky) [2166368 2097144]
- KVM: x86: SVM: don't save SVM state to SMRAM when VM is not long mode capable (Maxim Levitsky) [2166368 2097144]
- KVM: x86: SVM: use smram structs (Maxim Levitsky) [2166368 2097144]
- KVM: svm: drop explicit return value of kvm_vcpu_map (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: use smram struct for 64 bit smram load/restore (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: use smram struct for 32 bit smram load/restore (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: use smram structs in the common code (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: add structs for KVM's smram layout (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: check for failures on smm entry (Maxim Levitsky) [2166368 2097144]
- KVM: x86: do not go through ctxt-&gt;ops when emulating rsm (Maxim Levitsky) [2166368 2097144]
- KVM: x86: move SMM exit to a new file (Maxim Levitsky) [2166368 2097144]
- KVM: x86: move SMM entry to a new file (Maxim Levitsky) [2166368 2097144]
- KVM: x86: start moving SMM-related functions to new files (Maxim Levitsky) [2166368 2097144]
- bug: introduce ASSERT_STRUCT_OFFSET (Maxim Levitsky) [2166368 2097144]
- KVM: x86: Rename and expose helper to detect if INIT/SIPI are allowed (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: number of GPRs in the SMRAM image depends on the image format (Maxim Levitsky) [2166368 2097144]
- KVM: x86: emulator: update the emulation mode after CR0 write (Maxim Levitsky) [2166368 2097144]
- KVM: x86: emulator: update the emulation mode after rsm (Maxim Levitsky) [2166368 2097144]
- KVM: x86: emulator: introduce emulator_recalc_and_set_mode (Maxim Levitsky) [2166368 2097144]
- KVM: x86: emulator: em_sysexit should update ctxt-&gt;mode (Maxim Levitsky) [2166368 2097144]
- KVM: x86: Bug the VM if the emulator accesses a non-existent GPR (Maxim Levitsky) [2166368 2097144]
- \KVM: x86: Reduce the number of emulator GPRs to '8' for 32-bit KVM (Maxim Levitsky) [2166368 2097144]
- KVM: x86: Use 16-bit fields to track dirty/valid emulator GPRs (Maxim Levitsky) [2166368 2097144]
- KVM: x86: Omit VCPU_REGS_RIP from emulator's _regs array (Maxim Levitsky) [2166368 2097144]
- \KVM: x86: Harden _regs accesses to guard against buggy input (Maxim Levitsky) [2166368 2097144]
- KVM: x86: Grab regs_dirty in local 'unsigned long' (Maxim Levitsky) [2166368 2097144]
- proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152571 2152572] {CVE-2022-4378}
- proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152571 2152572] {CVE-2022-4378}</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.15.1.el8_7]" date="1676548800">- net/mlx5e: Fix use-after-free when reverting termination table (Amir Tzin) [2167640 2112927]
- net/mlx5: Do not query pci info while pci disabled (Amir Tzin) [2167645 2129249]
- x86/fpu: Fix copy_xstate_to_uabi() to copy init states correctly (Dean Nelson) [2168384 2122850]
- x86/fpu: Exclude dynamic states from init_fpstate (Dean Nelson) [2168384 2122850]
- x86/fpu: Fix the init_fpstate size check with the actual size (Dean Nelson) [2168384 2122850]
- x86/fpu: Configure init_fpstate attributes orderly (Dean Nelson) [2168384 2122850]
- x86/fpu/xstate: Fix the ARCH_REQ_XCOMP_PERM implementation (Dean Nelson) [2168384 2122850]
- net/mlx5: E-Switch, properly handle ingress tagged packets on VST (Amir Tzin) [2166665 2096109]
- cpuhotplug: Fix KABI breakage (Prarit Bhargava) [2162763 2156529]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.16.1.el8_7]" date="1677153600">- ipv6: fix panic when fib_lookup_arg-&gt;result is fib6_info (Jiri Benc) [2167602 2140599]
- ceph: blocklist the kclient when receiving corrupted snap trace (Xiubo Li) [2168896 2162414]
- ceph: move mount state enum to super.h (Xiubo Li) [2168896 2162414]
- s390/kexec: fix ipl report address for kdump (Tobias Huschle) [2166296 2161328]
- mm, compaction: fix fast_isolate_around() to stay within boundaries (Daniel Vacek) [2170576 2149309]
- scsi: storvsc: Fix swiotlb bounce buffer leak in confidential VM (Emanuele Giuseppe Esposito) [2170228 2150659]
- netfilter: conntrack: handle tcp challenge acks during connection reuse (Florian Westphal) [2165587 2158726]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.17.1.el8_7]" date="1677844800">- net: mana: Add rmb after checking owner bits (Mohammed Gamal) [2173103 2139462]
- net: mana: Add support of XDP_REDIRECT action (Mohammed Gamal) [2173103 2139462]
- net: mana: Add the Linux MANA PF driver (Mohammed Gamal) [2173103 2139462]
- ice: fix lost multicast packets in promisc mode (Ken Cox) [2172550 2138215]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.18.0-425.18.1.el8_7]" date="1678449600">- futex: Resend potentially swallowed owner death notification (Rafael Aquini) [2170054 2161526]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.19.1.el8_7]" date="1678968000">- s390/dasd: fix no record found for raw_track_access (Tobias Huschle) [2167776 2161270]
- locking/rwsem: Disable preemption in all down_read*() and up_read() code paths (Waiman Long) [2170939 2162139]
- locking/rwsem: Prevent non-first waiter from spinning in down_write() slowpath (Waiman Long) [2170939 2162139]
- locking/rwsem: Allow slowpath writer to ignore handoff bit if not set by first waiter (Waiman Long) [2170939 2162139]
- locking/rwsem: Always try to wake waiters in out_nolock path (Waiman Long) [2170939 2162139]
- locking/rwsem: No need to check for handoff bit if wait queue empty (Waiman Long) [2170939 2162139]
- locking/rwsem: Make handoff bit handling more consistent (Waiman Long) [2170939 2162139]
- locking/rwsem: Disable preemption while trying for rwsem lock (Waiman Long) [2170939 2162139]
- locking/rwsem: Conditionally wake waiters in reader/writer slowpaths (Waiman Long) [2170939 2162139]
- locking: Make owner_on_cpu() into &lt;linux/sched.h&gt; (Waiman Long) [2170939 2162139]
- locking/rwsem: Optimize down_read_trylock() under highly contended case (Waiman Long) [2170939 2162139]
- locking/rwsem: Fix comments about reader optimistic lock stealing conditions (Waiman Long) [2170939 2162139]
- locking/rwsem: Disable preemption for spinning region (Waiman Long) [2170939 2162139]
- locking: Remove rcu_read_{,un}lock() for preempt_{dis,en}able() (Waiman Long) [2170939 2162139]
- watchdog: fix UAF in reboot notifier handling in watchdog core code (Wander Lairson Costa) [2139770 2131308]
- netfilter: nf_conntrack_irc: Tighten matching on DCC message (Wander Lairson Costa) [2139770 2131308]
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF (Jaroslav Kysela) [2163400 2163401] {CVE-2023-0266}
- net/mlx5e: Fix enabling sriov while tc nic rules are offloaded (Amir Tzin) [2167647 2112925]
- net/mlx5: E-Switch, pair only capable devices (Amir Tzin) [2167647 2112925]
- net/mlx5: Fix mlx5_get_next_dev() peer device matching (Amir Tzin) [2167647 2112925]
- net/mlx5: Lag, filter non compatible devices (Amir Tzin) [2167647 2112925]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.19.2.el8_7.gf5e8]" date="1678968001">- ovl: fail on invalid uid/gid mapping at copy up (Miklos Szeredi) [2165341 2165342] {CVE-2023-0386}</changelog>
</package>
<package pkgid="9ed8d9abca1ab7991d81a6c923c1693add3f3bddbfd3dd998de58a7d89d5b5d8" name="kernel-cross-headers" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="425.10.1.el8_7"/>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.1.1.el8]" date="1663588800">- i40e: Fix kernel crash during module removal (Ivan Vecera) [2091489]
- redhat: enable zstream release numbering for rhel 8.7 (Jarod Wilson)
- ice: Allow operation with reduced device MSI-X (Petr Oros) [2102844]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.2.1.el8]" date="1664193600">- EDAC/ghes: Set the DIMM label unconditionally (Aristeu Rozanski) [2109712]
- configs: enable CONFIG_HP_ILO for aarch64 (Mark Salter) [2123508]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.3.1.el8]" date="1664539200">- iwlwifi: limit fw version for AC9560 to avoid fw crash (Íñigo Huguet) [2129297]
- sfc: fix null pointer dereference in efx_hard_start_xmit (Íñigo Huguet) [2119638]
- sfc: fix TX channel offset when using legacy interrupts (Íñigo Huguet) [2119638]
- netfilter: conntrack: reduce timeout when receiving out-of-window fin or rst (Florian Westphal) [2047366]
- netfilter: conntrack: remove unneeded indent level (Florian Westphal) [2047366]
- netfilter: conntrack: ignore overly delayed tcp packets (Florian Westphal) [2047366]
- netfilter: conntrack: prepare tcp_in_window for ternary return value (Florian Westphal) [2047366]
- netfilter: conntrack: remove pr_debug callsites from tcp tracker (Florian Westphal) [2047366]
- netfilter: conntrack: work around exceeded receive window (Florian Westphal) [2047366]
- netfilter: conntrack: improve RST handling when tuple is re-used (Florian Westphal) [2047366]
- netfilter: conntrack: avoid misleading 'invalid' in log message (Florian Westphal) [2047366]
- netfilter: remove BUG_ON() after skb_header_pointer() (Florian Westphal) [2047366]
- iavf: Detach device during reset task (Petr Oros) [2069206]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.4.1.el8]" date="1665144000">- random: allow reseeding DRBG with getrandom (Daiki Ueno) [2121766]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.5.1.el8_7]" date="1667476800">- ice: Fix interface being down after reset with link-down-on-close flag on (Petr Oros) [2136216 2024110]
- ice: Fix crash by keep old cfg when update TCs more than queues (Petr Oros) [2130992 2129902]
- ice: Fix tunnel checksum offload with fragmented traffic (Petr Oros) [2130992 2129902]
- ice: handle E822 generic device ID in PLDM header (Petr Oros) [2130992 2129902]
- ice: ethtool: Prohibit improper channel config for DCB (Petr Oros) [2130992 2129902]
- ice: ethtool: advertise 1000M speeds properly (Petr Oros) [2130992 2129902]
- ice: Fix switchdev rules book keeping (Petr Oros) [2130992 2129902]
- ice: fix access-beyond-end in the switch code (Petr Oros) [2130992 2129902]
- eth: ice: silence the GCC 12 array-bounds warning (Petr Oros) [2130992 2129902]
- ice: Expose RSS indirection tables for queue groups via ethtool (Petr Oros) [2130992 2129902]
- Revert "ice: Hide bus-info in ethtool for PRs in switchdev mode" (Petr Oros) [2130992 2129902]
- ice: remove period on argument description in ice_for_each_vf (Petr Oros) [2130992 2129902]
- ice: add a function comment for ice_cfg_mac_antispoof (Petr Oros) [2130992 2129902]
- ice: fix wording in comment for ice_reset_vf (Petr Oros) [2130992 2129902]
- ice: remove return value comment for ice_reset_all_vfs (Petr Oros) [2130992 2129902]
- ice: always check VF VSI pointer values (Petr Oros) [2130992 2129902]
- ice: add newline to dev_dbg in ice_vf_fdir_dump_info (Petr Oros) [2130992 2129902]
- ice: get switch id on switchdev devices (Petr Oros) [2130992 2129902]
- ice: return ENOSPC when exceeding ICE_MAX_CHAIN_WORDS (Petr Oros) [2130992 2129902]
- ice: introduce common helper for retrieving VSI by vsi_num (Petr Oros) [2130992 2129902]
- ice: use min_t() to make code cleaner in ice_gnss (Petr Oros) [2130992 2129902]
- ice: Add mpls+tso support (Petr Oros) [2130992 2129902]
- ice: switch: convert packet template match code to rodata (Petr Oros) [2130992 2129902]
- ice: switch: use convenience macros to declare dummy pkt templates (Petr Oros) [2130992 2129902]
- ice: switch: use a struct to pass packet template params (Petr Oros) [2130992 2129902]
- ice: switch: unobscurify bitops loop in ice_fill_adv_dummy_packet() (Petr Oros) [2130992 2129902]
- ice: switch: add and use u16[] aliases to ice_adv_lkup_elem::{h, m}_u (Petr Oros) [2130992 2129902]
- ice: Support GTP-U and GTP-C offload in switchdev (Petr Oros) [2130992 2129902]
- ice: Remove useless DMA-32 fallback configuration (Petr Oros) [2130992 2129902]
- ice: switch to napi_build_skb() (Petr Oros) [2130992 2129902]
- redhat: switch to z-stream dist tag and build targets (Jarod Wilson)
- block: avoid sign extend problem with default queue flags mask (Nico Pache) [2135813]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.6.1.el8_7]" date="1668168000">- ice: Add low latency Tx timestamp read (Petr Oros) [2136036 2092425]
- ice: introduce ice_ptp_reset_cached_phctime function (Petr Oros) [2136036 2092425]
- ice: re-arrange some static functions in ice_ptp.c (Petr Oros) [2136036 2092425]
- ice: track and warn when PHC update is late (Petr Oros) [2136036 2092425]
- ice: track Tx timestamp stats similar to other Intel drivers (Petr Oros) [2136036 2092425]
- ice: implement adjfine with mul_u64_u64_div_u64 (Petr Oros) [2136036 2092425]
- ice: Add EXTTS feature to the feature bitmap (Petr Oros) [2136036 2092425]
- math: Export mul_u64_u64_div_u64 (Petr Oros) [2136036 2092425]
- vfio/type1: Unpin zero pages (Alex Williamson) [2128515 2123015]
- net: atlantic: remove aq_nic_deinit() when resume (Íñigo Huguet) [2131935 2130839]
- net: atlantic: remove deep parameter on suspend/resume functions (Íñigo Huguet) [2131935 2130839]
- CI: Use zstream builder container (Veronika Kabatova)
- CI: Add disttag override for 8.7 (Veronika Kabatova)</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.7.1.el8_7]" date="1669723200">- ice: Add additional CSR registers to ETHTOOL_GREGS (Petr Oros) [2136513 2131024]
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps (Petr Oros) [2137270 2106964]
- i40e: Fix VF set max MTU size (Petr Oros) [2137270 2106964]
- iavf: Fix set max MTU size with port VLAN and jumbo frames (Petr Oros) [2137270 2106964]
- iavf: Fix bad page state (Petr Oros) [2137270 2106964]
- Revert "scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels" (Jarod Wilson)
- scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels (Tomas Henzl) [2139216]
- Revert "ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems" (Jarod Wilson)
- ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems (Wei Huang) [2142170 2130653]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.8.1.el8_7]" date="1669982400">- scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels (Tomas Henzl) [2139216 2134535]
- RDMA/mlx5: Set local port to one when accessing counters (Mohammad Kabat) [2141957 2077119]
- drm/mgag200: Fix PLL setup for G200_SE_A rev &gt;=4 (Jocelyn Falempe) [2140152 2130159]
- iavf: Do not restart Tx queues after reset task failure (Petr Oros) [2149081 2134005]
- iavf: Fix a crash during reset task (Petr Oros) [2149081 2134005]
- scsi: core: Allow the ALUA transitioning state enough time (Tomas Henzl) [2147374 2084250]
- scsi: core: Return BLK_STS_TRANSPORT for ALUA transitioning (Tomas Henzl) [2147374 2084250]
- i40e: Fix DMA mappings leak (Ivan Vecera) [2138205 2077847]
- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2142724 2142725] {CVE-2022-2964}
- net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2142724 2142725] {CVE-2022-2964}</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.9.1.el8_7]" date="1670587200">- Documentation/admin-guide: Document nomodeset kernel parameter (Jocelyn Falempe) [2145218 2143952]
- drm: Move nomodeset kernel parameter to the DRM subsystem (Jocelyn Falempe) [2145218 2143952]
- wait: Fix __wait_event_hrtimeout for RT/DL tasks (Derek Barbosa) [2138953 2125233]
- scsi: zfcp: Fix missing auto port scan and thus missing target ports (Tobias Huschle) [2127849 2121089]
- net: Fix return value of qdisc ingress handling on success (Ivan Vecera) [2141878 2131361]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.10.1.el8_7]" date="1671019200">- scsi: target: loop: Fix handling of aborted TMRs (Maurizio Lombardi) [2144583 2141713]
- ice: virtchnl rss hena support (Petr Oros) [2148130]
- ice: Fix configuring VIRTCHNL_OP_CONFIG_VSI_QUEUES with unbalanced queues (Michal Schmidt) [2142017 2137378]
- ice: Add support Flex RXD (Michal Schmidt) [2138157 2131310]
- netfilter: flowtable: fix stuck flows on cleanup due to pending work (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: add function to invoke garbage collection immediately (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: pass flowtable to nf_flow_table_iterate() (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: separate replace, destroy and stats to different workqueues (Phil Sutter) [2134084 2131370]
- x86/paravirt: Add a dummy __x86_paravirt_patch_template() function (Waiman Long) [2152206 2144161]
- x86/paravirt: Fix kABI breakage in struct pv_mmu_ops (Waiman Long) [2152206 2144161]
- drm/i915: fix TLB invalidation for Gen12 video and compute engines (Wander Lairson Costa) [2148149 2148150] {CVE-2022-4139}
- PCI: hv: Do not set PCI_COMMAND_MEMORY to reduce VM boot time (Emanuele Giuseppe Esposito) [2150912 2082836]
- iavf: Fix cached head and tail value for iavf_get_tx_pending (Stefan Assmann) [2149742 2103944]
- iavf: Fix change VF's mac address (Stefan Assmann) [2149742 2103944]
- iavf: Fix race between iavf_close and iavf_reset_task (Stefan Assmann) [2149742 2103944]
- net: ethernet: move from strlcpy with unused retval to strscpy (Stefan Assmann) [2149742 2103944]
- iavf: Fix 'tc qdisc show' listing too many queues (Stefan Assmann) [2149742 2103944]
- iavf: Fix max_rate limiting (Stefan Assmann) [2149742 2103944]
- iavf: Check for duplicate TC flower filter before parsing (Stefan Assmann) [2149742 2103944]
- iavf: Fix handling of dummy receive descriptors (Stefan Assmann) [2149742 2103944]
- iavf: Disallow changing rx/tx-frames and rx/tx-frames-irq (Stefan Assmann) [2149742 2103944]
- intel/iavf:fix repeated words in comments (Stefan Assmann) [2149742 2103944]
- intel: remove unused macros (Stefan Assmann) [2149742 2103944]
- iavf: Add waiting for response from PF in set mac (Stefan Assmann) [2149742 2103944]</changelog>
</package>
<package pkgid="d6983c795932d610071b8ac29b325eac651e59901a7d557499e5993b823492da" name="kernel-cross-headers" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="425.13.1.el8_7"/>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.4.1.el8]" date="1665144000">- random: allow reseeding DRBG with getrandom (Daiki Ueno) [2121766]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.5.1.el8_7]" date="1667476800">- ice: Fix interface being down after reset with link-down-on-close flag on (Petr Oros) [2136216 2024110]
- ice: Fix crash by keep old cfg when update TCs more than queues (Petr Oros) [2130992 2129902]
- ice: Fix tunnel checksum offload with fragmented traffic (Petr Oros) [2130992 2129902]
- ice: handle E822 generic device ID in PLDM header (Petr Oros) [2130992 2129902]
- ice: ethtool: Prohibit improper channel config for DCB (Petr Oros) [2130992 2129902]
- ice: ethtool: advertise 1000M speeds properly (Petr Oros) [2130992 2129902]
- ice: Fix switchdev rules book keeping (Petr Oros) [2130992 2129902]
- ice: fix access-beyond-end in the switch code (Petr Oros) [2130992 2129902]
- eth: ice: silence the GCC 12 array-bounds warning (Petr Oros) [2130992 2129902]
- ice: Expose RSS indirection tables for queue groups via ethtool (Petr Oros) [2130992 2129902]
- Revert "ice: Hide bus-info in ethtool for PRs in switchdev mode" (Petr Oros) [2130992 2129902]
- ice: remove period on argument description in ice_for_each_vf (Petr Oros) [2130992 2129902]
- ice: add a function comment for ice_cfg_mac_antispoof (Petr Oros) [2130992 2129902]
- ice: fix wording in comment for ice_reset_vf (Petr Oros) [2130992 2129902]
- ice: remove return value comment for ice_reset_all_vfs (Petr Oros) [2130992 2129902]
- ice: always check VF VSI pointer values (Petr Oros) [2130992 2129902]
- ice: add newline to dev_dbg in ice_vf_fdir_dump_info (Petr Oros) [2130992 2129902]
- ice: get switch id on switchdev devices (Petr Oros) [2130992 2129902]
- ice: return ENOSPC when exceeding ICE_MAX_CHAIN_WORDS (Petr Oros) [2130992 2129902]
- ice: introduce common helper for retrieving VSI by vsi_num (Petr Oros) [2130992 2129902]
- ice: use min_t() to make code cleaner in ice_gnss (Petr Oros) [2130992 2129902]
- ice: Add mpls+tso support (Petr Oros) [2130992 2129902]
- ice: switch: convert packet template match code to rodata (Petr Oros) [2130992 2129902]
- ice: switch: use convenience macros to declare dummy pkt templates (Petr Oros) [2130992 2129902]
- ice: switch: use a struct to pass packet template params (Petr Oros) [2130992 2129902]
- ice: switch: unobscurify bitops loop in ice_fill_adv_dummy_packet() (Petr Oros) [2130992 2129902]
- ice: switch: add and use u16[] aliases to ice_adv_lkup_elem::{h, m}_u (Petr Oros) [2130992 2129902]
- ice: Support GTP-U and GTP-C offload in switchdev (Petr Oros) [2130992 2129902]
- ice: Remove useless DMA-32 fallback configuration (Petr Oros) [2130992 2129902]
- ice: switch to napi_build_skb() (Petr Oros) [2130992 2129902]
- redhat: switch to z-stream dist tag and build targets (Jarod Wilson)
- block: avoid sign extend problem with default queue flags mask (Nico Pache) [2135813]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.6.1.el8_7]" date="1668168000">- ice: Add low latency Tx timestamp read (Petr Oros) [2136036 2092425]
- ice: introduce ice_ptp_reset_cached_phctime function (Petr Oros) [2136036 2092425]
- ice: re-arrange some static functions in ice_ptp.c (Petr Oros) [2136036 2092425]
- ice: track and warn when PHC update is late (Petr Oros) [2136036 2092425]
- ice: track Tx timestamp stats similar to other Intel drivers (Petr Oros) [2136036 2092425]
- ice: implement adjfine with mul_u64_u64_div_u64 (Petr Oros) [2136036 2092425]
- ice: Add EXTTS feature to the feature bitmap (Petr Oros) [2136036 2092425]
- math: Export mul_u64_u64_div_u64 (Petr Oros) [2136036 2092425]
- vfio/type1: Unpin zero pages (Alex Williamson) [2128515 2123015]
- net: atlantic: remove aq_nic_deinit() when resume (Íñigo Huguet) [2131935 2130839]
- net: atlantic: remove deep parameter on suspend/resume functions (Íñigo Huguet) [2131935 2130839]
- CI: Use zstream builder container (Veronika Kabatova)
- CI: Add disttag override for 8.7 (Veronika Kabatova)</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.7.1.el8_7]" date="1669723200">- ice: Add additional CSR registers to ETHTOOL_GREGS (Petr Oros) [2136513 2131024]
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps (Petr Oros) [2137270 2106964]
- i40e: Fix VF set max MTU size (Petr Oros) [2137270 2106964]
- iavf: Fix set max MTU size with port VLAN and jumbo frames (Petr Oros) [2137270 2106964]
- iavf: Fix bad page state (Petr Oros) [2137270 2106964]
- Revert "scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels" (Jarod Wilson)
- scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels (Tomas Henzl) [2139216]
- Revert "ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems" (Jarod Wilson)
- ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems (Wei Huang) [2142170 2130653]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.8.1.el8_7]" date="1669982400">- scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels (Tomas Henzl) [2139216 2134535]
- RDMA/mlx5: Set local port to one when accessing counters (Mohammad Kabat) [2141957 2077119]
- drm/mgag200: Fix PLL setup for G200_SE_A rev &gt;=4 (Jocelyn Falempe) [2140152 2130159]
- iavf: Do not restart Tx queues after reset task failure (Petr Oros) [2149081 2134005]
- iavf: Fix a crash during reset task (Petr Oros) [2149081 2134005]
- scsi: core: Allow the ALUA transitioning state enough time (Tomas Henzl) [2147374 2084250]
- scsi: core: Return BLK_STS_TRANSPORT for ALUA transitioning (Tomas Henzl) [2147374 2084250]
- i40e: Fix DMA mappings leak (Ivan Vecera) [2138205 2077847]
- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2142724 2142725] {CVE-2022-2964}
- net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2142724 2142725] {CVE-2022-2964}</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.9.1.el8_7]" date="1670587200">- Documentation/admin-guide: Document nomodeset kernel parameter (Jocelyn Falempe) [2145218 2143952]
- drm: Move nomodeset kernel parameter to the DRM subsystem (Jocelyn Falempe) [2145218 2143952]
- wait: Fix __wait_event_hrtimeout for RT/DL tasks (Derek Barbosa) [2138953 2125233]
- scsi: zfcp: Fix missing auto port scan and thus missing target ports (Tobias Huschle) [2127849 2121089]
- net: Fix return value of qdisc ingress handling on success (Ivan Vecera) [2141878 2131361]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.10.1.el8_7]" date="1671019200">- scsi: target: loop: Fix handling of aborted TMRs (Maurizio Lombardi) [2144583 2141713]
- ice: virtchnl rss hena support (Petr Oros) [2148130]
- ice: Fix configuring VIRTCHNL_OP_CONFIG_VSI_QUEUES with unbalanced queues (Michal Schmidt) [2142017 2137378]
- ice: Add support Flex RXD (Michal Schmidt) [2138157 2131310]
- netfilter: flowtable: fix stuck flows on cleanup due to pending work (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: add function to invoke garbage collection immediately (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: pass flowtable to nf_flow_table_iterate() (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: separate replace, destroy and stats to different workqueues (Phil Sutter) [2134084 2131370]
- x86/paravirt: Add a dummy __x86_paravirt_patch_template() function (Waiman Long) [2152206 2144161]
- x86/paravirt: Fix kABI breakage in struct pv_mmu_ops (Waiman Long) [2152206 2144161]
- drm/i915: fix TLB invalidation for Gen12 video and compute engines (Wander Lairson Costa) [2148149 2148150] {CVE-2022-4139}
- PCI: hv: Do not set PCI_COMMAND_MEMORY to reduce VM boot time (Emanuele Giuseppe Esposito) [2150912 2082836]
- iavf: Fix cached head and tail value for iavf_get_tx_pending (Stefan Assmann) [2149742 2103944]
- iavf: Fix change VF's mac address (Stefan Assmann) [2149742 2103944]
- iavf: Fix race between iavf_close and iavf_reset_task (Stefan Assmann) [2149742 2103944]
- net: ethernet: move from strlcpy with unused retval to strscpy (Stefan Assmann) [2149742 2103944]
- iavf: Fix 'tc qdisc show' listing too many queues (Stefan Assmann) [2149742 2103944]
- iavf: Fix max_rate limiting (Stefan Assmann) [2149742 2103944]
- iavf: Check for duplicate TC flower filter before parsing (Stefan Assmann) [2149742 2103944]
- iavf: Fix handling of dummy receive descriptors (Stefan Assmann) [2149742 2103944]
- iavf: Disallow changing rx/tx-frames and rx/tx-frames-irq (Stefan Assmann) [2149742 2103944]
- intel/iavf:fix repeated words in comments (Stefan Assmann) [2149742 2103944]
- intel: remove unused macros (Stefan Assmann) [2149742 2103944]
- iavf: Add waiting for response from PF in set mac (Stefan Assmann) [2149742 2103944]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.11.1.el8_7]" date="1673006400">- NFSD: Protect against send buffer overflow in NFSv3 READ (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv2 READ (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv3 READDIR (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv2 READDIR (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- SUNRPC: Fix svcxdr_init_encode's buflen calculation (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- SUNRPC: Fix svcxdr_init_decode's end-of-buffer calculation (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- panic, kexec: make __crash_kexec() NMI safe (Valentin Schneider) [2139580 2134126]
- kexec: turn all kexec_mutex acquisitions into trylocks (Valentin Schneider) [2139580 2134126]
- kexec: move locking into do_kexec_load (Valentin Schneider) [2139580 2134126]
- vdpa/mlx5: re-create forwarding rules after mac modified (Laurent Vivier) [2152912 2145136]
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry (Waiman Long) [2153653 2108387]
- irq: Call tick_irq_enter() inside HARDIRQ_OFFSET (Waiman Long) [2153653 2108387]
- irqtime: Move irqtime entry accounting after irq offset incrementation (Waiman Long) [2153653 2108387]
- sched/vtime: Consolidate IRQ time accounting (Waiman Long) [2153653 2108387]
- s390/vtime: Use the generic IRQ entry accounting (Waiman Long) [2153653 2108387]
- sched/cputime: Remove symbol exports from IRQ time accounting (Waiman Long) [2153653 2108387]
- genirq/irqdomain: Don't try to free an interrupt that has no mapping (Waiman Long) [2153653 2108387]
- genirq: Provide __irq_enter/exit_raw() (Waiman Long) [2153653 2108387]
- powerpc/time: Only set CONFIG_ARCH_HAS_SCALED_CPUTIME on PPC64 (Waiman Long) [2153653 2108387]
- powerpc/time: isolate scaled cputime accounting in dedicated functions. (Waiman Long) [2153653 2108387]
- PCI: hv: Fix synchronization between channel callback and hv_pci_bus_exit() (Mohammed Gamal) [2155280 2144708]
- PCI: hv: Fix synchronization between channel callback and hv_compose_msi_msg() (Mohammed Gamal) [2155280 2144708]
- PCI: hv: Use vmbus_requestor to generate transaction IDs for VMbus hardening (Mohammed Gamal) [2155280 2144708]
- net/mlx5e: TC, Reject forwarding from internal port to internal port (Mohammad Kabat) [2141959 2131345]
- hv_netvsc: Fix race between VF offering and VF association message from host (Mohammed Gamal) [2155272 2149279]
- x86/mce: Reduce number of machine checks taken during recovery (Prarit Bhargava) [2137592 2104388]
- cgroup/cpuset: Reduce cpuset_rwsem writer latency (Waiman Long) [2153108 2149031]
- rcu/exp: Mark current CPU as exp-QS in IPI loop second pass (Waiman Long) [2153108 2149031]
- rcu: Always inline rcu_dynticks_task*_{enter,exit}() (Waiman Long) [2153108 2149031]
- rcu: Fix existing exp request check in sync_sched_exp_online_cleanup() (Waiman Long) [2153108 2149031]
- rcu: Fix macro name CONFIG_TASKS_RCU_TRACE (Waiman Long) [2153108 2149031]
- rcu: Fix stall-warning deadlock due to non-release of rcu_node -&gt;lock (Waiman Long) [2153108 2149031]
- rcu: Fix to include first blocked task in stall warning (Waiman Long) [2153108 2149031]
- cgroup: Use cgroup_attach_{lock,unlock}() from cgroup_attach_task_all() (Waiman Long) [2153108 2149031]
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all() (Waiman Long) [2153108 2149031]
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock (Waiman Long) [2153108 2149031]
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree (Waiman Long) [2153108 2149031]
- cgroup/cpuset: Fix a race between cpuset_attach() and cpu hotplug (Waiman Long) [2153108 2149031]
- cgroup: reduce dependency on cgroup_mutex (Waiman Long) [2153108 2149031]
- sunrpc: Set sk_allocation to GFP_NOFS to avoid using current-&gt;task_frag. (Guillaume Nault) [2153230 2089660]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.12.1.el8_7]" date="1674129600">- x86/fpu: Prevent FPU state corruption (Oleksandr Natalenko) [2134586 2130890]
- x86/fpu: Drop fpregs lock before inheriting FPU permissions (Eder Zulian) [2154460 2153549]
- kernel-doc: fix undefined args variable (Jan Stancek) [2157905 2134954]
- mm: memcontrol: fix potential oom_lock recursion deadlock (Waiman Long) [2157922 2138886]
- memcg: prohibit unconditional exceeding the limit of dying tasks (Waiman Long) [2157922 2138886]
- mm, oom: do not trigger out_of_memory from the #PF (Waiman Long) [2157922 2138886]
- mm, oom: pagefault_out_of_memory: don't force global OOM for dying tasks (Waiman Long) [2157922 2138886]
- mm: memcontrol: don't count limit-setting reclaim as memory pressure (Waiman Long) [2157922 2138886]
- KVM: s390: vsie: Fix the initialization of the epoch extension (epdx) field (Thomas Huth) [2158813 2151854]
- net: mana: Fix race on per-CQ variable napi work_done (Emanuele Giuseppe Esposito) [2155437 2151722]
- mei: me: add adler lake point S DID (Prarit Bhargava) [2141783 2141602]
- PCI: hv: Only reuse existing IRTE allocation for Multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix the definition of vector in hv_compose_msi_msg() (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix interrupt mapping for multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Reuse existing IRTE allocation in compose_msi_msg() (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix hv_arch_irq_unmask() for multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix multi-MSI to allow more than one MSI vector (Emanuele Giuseppe Esposito) [2155289 2100275]
- drm/ast: Support multiple outputs (Jarod Wilson) [2149287 2147553]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.13.1.el8_7]" date="1675339200">- mm/cgroup/reclaim: fix dirty pages throttling on cgroup v1 (Waiman Long) [2160221]
- mm: vmscan: remove deadlock due to throttling failing to make progress (Waiman Long) [2160221]
- mm: vmscan: reduce throttling due to a failure to make progress -fix (Waiman Long) [2160221]
- mm: vmscan: Reduce throttling due to a failure to make progress (Waiman Long) [2160221]
- mm/vmscan: delay waking of tasks throttled on NOPROGRESS (Waiman Long) [2160221]
- mm/vmscan: increase the timeout if page reclaim is not making progress (Waiman Long) [2160221]
- mm/vmscan: centralise timeout values for reclaim_throttle (Waiman Long) [2160221]
- mm/page_alloc: remove the throttling logic from the page allocator (Waiman Long) [2160221]
- mm/writeback: throttle based on page writeback instead of congestion (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim when no progress is being made (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim and compaction when too may pages are isolated (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim until some writeback completes if congested (Waiman Long) [2160221]
- mm/vmscan.c: delete or fix duplicated words (Waiman Long) [2160221]
- mm,page_alloc: PF_WQ_WORKER threads must sleep at should_reclaim_retry() (Nico Pache) [2160221]
- ceph: avoid putting the realm twice when decoding snaps fails (Xiubo Li) [2155797 2139881]
- mm/mremap: hold the rmap lock in write mode when moving page table entries. (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: use pmd/pud_poplulate to update page table entries (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: don't enable optimized PUD move if page table levels is 2 (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: convert huge PUD move to separate helper (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: fix BUILD_BUG_ON() error in get_extent (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap.c: fix extent calculation (Waiman Long) [2140944] {CVE-2022-41222}
- x86: mremap speedup - Enable HAVE_MOVE_PUD (Waiman Long) [2140944] {CVE-2022-41222}
- mm: speedup mremap on 1GB or larger regions (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: start addresses are properly aligned (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: calculate extent in one place (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: it is sure to have enough space when extent meets requirement (Waiman Long) [2140944] {CVE-2022-41222}
- s390/boot: add secure boot trailer (Tobias Huschle) [2151530 2141967]
- i40e: Fix VF hang when reset is triggered on another VF (Ivan Vecera) [2160460 2103801]
- i2c: ismt: Fix an out-of-bounds bug in ismt_access() (Prarit Bhargava) [2154388 2119066] {CVE-2022-2873}
- iavf: schedule watchdog immediately when changing primary MAC (Michal Schmidt) [2163257 2152493]
- iavf: Move netdev_update_features() into watchdog task (Michal Schmidt) [2163257 2152493]
- iavf: fix temporary deadlock and failure to set MAC address (Michal Schmidt) [2163257 2152493]
- iavf: Fix error handling in iavf_init_module() (Michal Schmidt) [2163257 2152493]
- iommu/vt-d: Clean up si_domain in the init_dmars() error path (Jerry Snitselaar) [2149474 2118428]
- x86/pci/xen: Use msi_msg shadow structs (Jerry Snitselaar) [2149474 2118428]
- iommu/intel: Use msi_msg shadow structs (Jerry Snitselaar) [2149474 2118428]
- PCI: MSI: Fix Kconfig dependencies for PCI_MSI_ARCH_FALLBACKS (Jerry Snitselaar) [2149474 2118428]
- x86/apic/msi: Unbreak DMAR and HPET MSI (Jerry Snitselaar) [2149474 2118428]
- iommu/amd: Remove domain search for PCI/MSI (Jerry Snitselaar) [2149474 2118428]
- iommu/vt-d: Remove domain search for PCI/MSI[X] (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Make most MSI ops XEN private (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Cleanup the arch_*_msi_irqs() leftovers (Jerry Snitselaar) [2149474 2118428]
- PCI/MSI: Make arch_.*_msi_irq[s] fallbacks selectable (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Wrap XEN MSI management into irqdomain (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Consolidate XEN-MSI init (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Rework MSI teardown (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Make xen_msi_init() static and rename it to xen_hvm_msi_init() (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Move apic_post_init() invocation to one place (Jerry Snitselaar) [2149474 2118428]
- x86/msi: Use generic MSI domain ops (Jerry Snitselaar) [2149474 2118428]
- x86/msi: Remove pointless vcpu_affinity callback (Jerry Snitselaar) [2149474 2118428]
- iommu/vt-d: Fix compile error with CONFIG_PCI_ATS not set (Myron Stowe) [2149474 2118428]
- iommu/vt-d: Cure VF irqdomain hickup (Myron Stowe) [2149474 2118428]
- x86/pci: Set default irq domain in pcibios_add_device() (Myron Stowe) [2149474 2118428]
- iommm/amd: Store irq domain in struct device (Myron Stowe) [2149474 2118428]
- iommm/vt-d: Store irq domain in struct device (Myron Stowe) [2149474 2118428]
- PCI/MSI: Provide pci_dev_has_special_msi_domain() helper (Myron Stowe) [2149474 2118428]
- x86/msi: Consolidate MSI allocation (Myron Stowe) [2149474 2118428]
- PCI/MSI: Rework pci_msi_domain_calc_hwirq() (Myron Stowe) [2149474 2118428]
- x86/irq: Consolidate UV domain allocation (Myron Stowe) [2149474 2118428]
- x86/irq: Consolidate DMAR irq allocation (Myron Stowe) [2149474 2118428]
- x86_ioapic_Consolidate_IOAPIC_allocation (Myron Stowe) [2149474 2118428]
- x86/msi: Consolidate HPET allocation (Myron Stowe) [2149474 2118428]
- iommu/irq_remapping: Consolidate irq domain lookup (Myron Stowe) [2149474 2118428]
- iommu/amd: Consolidate irq domain getter (Myron Stowe) [2149474 2118428]
- iommu/vt-d: Consolidate irq domain getter (Myron Stowe) [2149474 2118428]
- x86/irq: Add allocation type for parent domain retrieval (Myron Stowe) [2149474 2118428]
- irqdomain: Export irq_domain_update_bus_token (Myron Stowe) [2149474 2118428]
- gitlab-ci: use CI templates from production branch (Michael Hofmann)
- iavf: remove INITIAL_MAC_SET to allow gARP to work properly (Stefan Assmann) [2149745 1938635]
- Revert "scsi: iscsi: ql4xxx: Use per-session workqueue for unbinding" (Chris Leech) [2152734 2122624]
- Revert "scsi: iscsi: Use the session workqueue for recovery" (Chris Leech) [2152734 2122624]
- arm64/bpf: Remove 128MB limit for BPF JIT programs (Yauheni Kaliuta) [2152138 2140163]
- bpf: Define bpf_jit_alloc_exec_limit for arm64 JIT (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: add `type` and `data` fields (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: use `ex` for `exception_table_entry` (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: make fixup_exception() return bool (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: consolidate definitions (Yauheni Kaliuta) [2152138 2140163]
- arm64: kvm: use kvm_exception_table_entry (Yauheni Kaliuta) [2152138 2140163]
- be2net: Fix buffer overflow in be_get_module_eeprom (Josef Oskera) [2160182 2126917]</changelog>
</package>
<package pkgid="ac1ca4a8935b0fbdd27da502aaff6db82a12a8393dd1b585854eed00910ea889" name="kernel-cross-headers" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="425.19.2.el8_7"/>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.11.1.el8_7]" date="1673006400">- NFSD: Protect against send buffer overflow in NFSv3 READ (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv2 READ (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv3 READDIR (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv2 READDIR (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- SUNRPC: Fix svcxdr_init_encode's buflen calculation (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- SUNRPC: Fix svcxdr_init_decode's end-of-buffer calculation (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- panic, kexec: make __crash_kexec() NMI safe (Valentin Schneider) [2139580 2134126]
- kexec: turn all kexec_mutex acquisitions into trylocks (Valentin Schneider) [2139580 2134126]
- kexec: move locking into do_kexec_load (Valentin Schneider) [2139580 2134126]
- vdpa/mlx5: re-create forwarding rules after mac modified (Laurent Vivier) [2152912 2145136]
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry (Waiman Long) [2153653 2108387]
- irq: Call tick_irq_enter() inside HARDIRQ_OFFSET (Waiman Long) [2153653 2108387]
- irqtime: Move irqtime entry accounting after irq offset incrementation (Waiman Long) [2153653 2108387]
- sched/vtime: Consolidate IRQ time accounting (Waiman Long) [2153653 2108387]
- s390/vtime: Use the generic IRQ entry accounting (Waiman Long) [2153653 2108387]
- sched/cputime: Remove symbol exports from IRQ time accounting (Waiman Long) [2153653 2108387]
- genirq/irqdomain: Don't try to free an interrupt that has no mapping (Waiman Long) [2153653 2108387]
- genirq: Provide __irq_enter/exit_raw() (Waiman Long) [2153653 2108387]
- powerpc/time: Only set CONFIG_ARCH_HAS_SCALED_CPUTIME on PPC64 (Waiman Long) [2153653 2108387]
- powerpc/time: isolate scaled cputime accounting in dedicated functions. (Waiman Long) [2153653 2108387]
- PCI: hv: Fix synchronization between channel callback and hv_pci_bus_exit() (Mohammed Gamal) [2155280 2144708]
- PCI: hv: Fix synchronization between channel callback and hv_compose_msi_msg() (Mohammed Gamal) [2155280 2144708]
- PCI: hv: Use vmbus_requestor to generate transaction IDs for VMbus hardening (Mohammed Gamal) [2155280 2144708]
- net/mlx5e: TC, Reject forwarding from internal port to internal port (Mohammad Kabat) [2141959 2131345]
- hv_netvsc: Fix race between VF offering and VF association message from host (Mohammed Gamal) [2155272 2149279]
- x86/mce: Reduce number of machine checks taken during recovery (Prarit Bhargava) [2137592 2104388]
- cgroup/cpuset: Reduce cpuset_rwsem writer latency (Waiman Long) [2153108 2149031]
- rcu/exp: Mark current CPU as exp-QS in IPI loop second pass (Waiman Long) [2153108 2149031]
- rcu: Always inline rcu_dynticks_task*_{enter,exit}() (Waiman Long) [2153108 2149031]
- rcu: Fix existing exp request check in sync_sched_exp_online_cleanup() (Waiman Long) [2153108 2149031]
- rcu: Fix macro name CONFIG_TASKS_RCU_TRACE (Waiman Long) [2153108 2149031]
- rcu: Fix stall-warning deadlock due to non-release of rcu_node -&gt;lock (Waiman Long) [2153108 2149031]
- rcu: Fix to include first blocked task in stall warning (Waiman Long) [2153108 2149031]
- cgroup: Use cgroup_attach_{lock,unlock}() from cgroup_attach_task_all() (Waiman Long) [2153108 2149031]
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all() (Waiman Long) [2153108 2149031]
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock (Waiman Long) [2153108 2149031]
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree (Waiman Long) [2153108 2149031]
- cgroup/cpuset: Fix a race between cpuset_attach() and cpu hotplug (Waiman Long) [2153108 2149031]
- cgroup: reduce dependency on cgroup_mutex (Waiman Long) [2153108 2149031]
- sunrpc: Set sk_allocation to GFP_NOFS to avoid using current-&gt;task_frag. (Guillaume Nault) [2153230 2089660]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.12.1.el8_7]" date="1674129600">- x86/fpu: Prevent FPU state corruption (Oleksandr Natalenko) [2134586 2130890]
- x86/fpu: Drop fpregs lock before inheriting FPU permissions (Eder Zulian) [2154460 2153549]
- kernel-doc: fix undefined args variable (Jan Stancek) [2157905 2134954]
- mm: memcontrol: fix potential oom_lock recursion deadlock (Waiman Long) [2157922 2138886]
- memcg: prohibit unconditional exceeding the limit of dying tasks (Waiman Long) [2157922 2138886]
- mm, oom: do not trigger out_of_memory from the #PF (Waiman Long) [2157922 2138886]
- mm, oom: pagefault_out_of_memory: don't force global OOM for dying tasks (Waiman Long) [2157922 2138886]
- mm: memcontrol: don't count limit-setting reclaim as memory pressure (Waiman Long) [2157922 2138886]
- KVM: s390: vsie: Fix the initialization of the epoch extension (epdx) field (Thomas Huth) [2158813 2151854]
- net: mana: Fix race on per-CQ variable napi work_done (Emanuele Giuseppe Esposito) [2155437 2151722]
- mei: me: add adler lake point S DID (Prarit Bhargava) [2141783 2141602]
- PCI: hv: Only reuse existing IRTE allocation for Multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix the definition of vector in hv_compose_msi_msg() (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix interrupt mapping for multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Reuse existing IRTE allocation in compose_msi_msg() (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix hv_arch_irq_unmask() for multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix multi-MSI to allow more than one MSI vector (Emanuele Giuseppe Esposito) [2155289 2100275]
- drm/ast: Support multiple outputs (Jarod Wilson) [2149287 2147553]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.13.1.el8_7]" date="1675339200">- mm/cgroup/reclaim: fix dirty pages throttling on cgroup v1 (Waiman Long) [2160221]
- mm: vmscan: remove deadlock due to throttling failing to make progress (Waiman Long) [2160221]
- mm: vmscan: reduce throttling due to a failure to make progress -fix (Waiman Long) [2160221]
- mm: vmscan: Reduce throttling due to a failure to make progress (Waiman Long) [2160221]
- mm/vmscan: delay waking of tasks throttled on NOPROGRESS (Waiman Long) [2160221]
- mm/vmscan: increase the timeout if page reclaim is not making progress (Waiman Long) [2160221]
- mm/vmscan: centralise timeout values for reclaim_throttle (Waiman Long) [2160221]
- mm/page_alloc: remove the throttling logic from the page allocator (Waiman Long) [2160221]
- mm/writeback: throttle based on page writeback instead of congestion (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim when no progress is being made (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim and compaction when too may pages are isolated (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim until some writeback completes if congested (Waiman Long) [2160221]
- mm/vmscan.c: delete or fix duplicated words (Waiman Long) [2160221]
- mm,page_alloc: PF_WQ_WORKER threads must sleep at should_reclaim_retry() (Nico Pache) [2160221]
- ceph: avoid putting the realm twice when decoding snaps fails (Xiubo Li) [2155797 2139881]
- mm/mremap: hold the rmap lock in write mode when moving page table entries. (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: use pmd/pud_poplulate to update page table entries (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: don't enable optimized PUD move if page table levels is 2 (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: convert huge PUD move to separate helper (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: fix BUILD_BUG_ON() error in get_extent (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap.c: fix extent calculation (Waiman Long) [2140944] {CVE-2022-41222}
- x86: mremap speedup - Enable HAVE_MOVE_PUD (Waiman Long) [2140944] {CVE-2022-41222}
- mm: speedup mremap on 1GB or larger regions (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: start addresses are properly aligned (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: calculate extent in one place (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: it is sure to have enough space when extent meets requirement (Waiman Long) [2140944] {CVE-2022-41222}
- s390/boot: add secure boot trailer (Tobias Huschle) [2151530 2141967]
- i40e: Fix VF hang when reset is triggered on another VF (Ivan Vecera) [2160460 2103801]
- i2c: ismt: Fix an out-of-bounds bug in ismt_access() (Prarit Bhargava) [2154388 2119066] {CVE-2022-2873}
- iavf: schedule watchdog immediately when changing primary MAC (Michal Schmidt) [2163257 2152493]
- iavf: Move netdev_update_features() into watchdog task (Michal Schmidt) [2163257 2152493]
- iavf: fix temporary deadlock and failure to set MAC address (Michal Schmidt) [2163257 2152493]
- iavf: Fix error handling in iavf_init_module() (Michal Schmidt) [2163257 2152493]
- iommu/vt-d: Clean up si_domain in the init_dmars() error path (Jerry Snitselaar) [2149474 2118428]
- x86/pci/xen: Use msi_msg shadow structs (Jerry Snitselaar) [2149474 2118428]
- iommu/intel: Use msi_msg shadow structs (Jerry Snitselaar) [2149474 2118428]
- PCI: MSI: Fix Kconfig dependencies for PCI_MSI_ARCH_FALLBACKS (Jerry Snitselaar) [2149474 2118428]
- x86/apic/msi: Unbreak DMAR and HPET MSI (Jerry Snitselaar) [2149474 2118428]
- iommu/amd: Remove domain search for PCI/MSI (Jerry Snitselaar) [2149474 2118428]
- iommu/vt-d: Remove domain search for PCI/MSI[X] (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Make most MSI ops XEN private (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Cleanup the arch_*_msi_irqs() leftovers (Jerry Snitselaar) [2149474 2118428]
- PCI/MSI: Make arch_.*_msi_irq[s] fallbacks selectable (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Wrap XEN MSI management into irqdomain (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Consolidate XEN-MSI init (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Rework MSI teardown (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Make xen_msi_init() static and rename it to xen_hvm_msi_init() (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Move apic_post_init() invocation to one place (Jerry Snitselaar) [2149474 2118428]
- x86/msi: Use generic MSI domain ops (Jerry Snitselaar) [2149474 2118428]
- x86/msi: Remove pointless vcpu_affinity callback (Jerry Snitselaar) [2149474 2118428]
- iommu/vt-d: Fix compile error with CONFIG_PCI_ATS not set (Myron Stowe) [2149474 2118428]
- iommu/vt-d: Cure VF irqdomain hickup (Myron Stowe) [2149474 2118428]
- x86/pci: Set default irq domain in pcibios_add_device() (Myron Stowe) [2149474 2118428]
- iommm/amd: Store irq domain in struct device (Myron Stowe) [2149474 2118428]
- iommm/vt-d: Store irq domain in struct device (Myron Stowe) [2149474 2118428]
- PCI/MSI: Provide pci_dev_has_special_msi_domain() helper (Myron Stowe) [2149474 2118428]
- x86/msi: Consolidate MSI allocation (Myron Stowe) [2149474 2118428]
- PCI/MSI: Rework pci_msi_domain_calc_hwirq() (Myron Stowe) [2149474 2118428]
- x86/irq: Consolidate UV domain allocation (Myron Stowe) [2149474 2118428]
- x86/irq: Consolidate DMAR irq allocation (Myron Stowe) [2149474 2118428]
- x86_ioapic_Consolidate_IOAPIC_allocation (Myron Stowe) [2149474 2118428]
- x86/msi: Consolidate HPET allocation (Myron Stowe) [2149474 2118428]
- iommu/irq_remapping: Consolidate irq domain lookup (Myron Stowe) [2149474 2118428]
- iommu/amd: Consolidate irq domain getter (Myron Stowe) [2149474 2118428]
- iommu/vt-d: Consolidate irq domain getter (Myron Stowe) [2149474 2118428]
- x86/irq: Add allocation type for parent domain retrieval (Myron Stowe) [2149474 2118428]
- irqdomain: Export irq_domain_update_bus_token (Myron Stowe) [2149474 2118428]
- gitlab-ci: use CI templates from production branch (Michael Hofmann)
- iavf: remove INITIAL_MAC_SET to allow gARP to work properly (Stefan Assmann) [2149745 1938635]
- Revert "scsi: iscsi: ql4xxx: Use per-session workqueue for unbinding" (Chris Leech) [2152734 2122624]
- Revert "scsi: iscsi: Use the session workqueue for recovery" (Chris Leech) [2152734 2122624]
- arm64/bpf: Remove 128MB limit for BPF JIT programs (Yauheni Kaliuta) [2152138 2140163]
- bpf: Define bpf_jit_alloc_exec_limit for arm64 JIT (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: add `type` and `data` fields (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: use `ex` for `exception_table_entry` (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: make fixup_exception() return bool (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: consolidate definitions (Yauheni Kaliuta) [2152138 2140163]
- arm64: kvm: use kvm_exception_table_entry (Yauheni Kaliuta) [2152138 2140163]
- be2net: Fix buffer overflow in be_get_module_eeprom (Josef Oskera) [2160182 2126917]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.14.1.el8_7]" date="1676030400">- ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems (Wei Huang) [2142170 2130653]
- KVM: x86: nSVM: implement nested LBR virtualization (Emanuele Giuseppe Esposito) [2166362 2155149]
- KVM: x86: nSVM: correctly virtualize LBR msrs when L2 is running (Emanuele Giuseppe Esposito) [2166362 2155149]
- kvm: x86: SVM: use vmcb* instead of svm-&gt;vmcb where it makes sense (Emanuele Giuseppe Esposito) [2166362 2155149]
- KVM: x86: nSVM: implement nested VMLOAD/VMSAVE (Emanuele Giuseppe Esposito) [2166362 2155149]
- IB/iser: Fix login with authentication (Kamal Heib) [2161750 2120676]
- act_mirred: use the backlog for nested calls to mirred ingress (Davide Caratti) [2164648 2131339] {CVE-2022-4269}
- net/sched: act_mirred: better wording on protection against excessive stack growth (Davide Caratti) [2164648 2131339] {CVE-2022-4269}
- redhat/configs: Set CONFIG_X86_AMD_PSTATE to 'm' (Prarit Bhargava) [2151275 2145246]
- KVM: x86: smm: preserve interrupt shadow in SMRAM (Maxim Levitsky) [2166368 2097144]
- KVM: x86: SVM: don't save SVM state to SMRAM when VM is not long mode capable (Maxim Levitsky) [2166368 2097144]
- KVM: x86: SVM: use smram structs (Maxim Levitsky) [2166368 2097144]
- KVM: svm: drop explicit return value of kvm_vcpu_map (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: use smram struct for 64 bit smram load/restore (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: use smram struct for 32 bit smram load/restore (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: use smram structs in the common code (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: add structs for KVM's smram layout (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: check for failures on smm entry (Maxim Levitsky) [2166368 2097144]
- KVM: x86: do not go through ctxt-&gt;ops when emulating rsm (Maxim Levitsky) [2166368 2097144]
- KVM: x86: move SMM exit to a new file (Maxim Levitsky) [2166368 2097144]
- KVM: x86: move SMM entry to a new file (Maxim Levitsky) [2166368 2097144]
- KVM: x86: start moving SMM-related functions to new files (Maxim Levitsky) [2166368 2097144]
- bug: introduce ASSERT_STRUCT_OFFSET (Maxim Levitsky) [2166368 2097144]
- KVM: x86: Rename and expose helper to detect if INIT/SIPI are allowed (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: number of GPRs in the SMRAM image depends on the image format (Maxim Levitsky) [2166368 2097144]
- KVM: x86: emulator: update the emulation mode after CR0 write (Maxim Levitsky) [2166368 2097144]
- KVM: x86: emulator: update the emulation mode after rsm (Maxim Levitsky) [2166368 2097144]
- KVM: x86: emulator: introduce emulator_recalc_and_set_mode (Maxim Levitsky) [2166368 2097144]
- KVM: x86: emulator: em_sysexit should update ctxt-&gt;mode (Maxim Levitsky) [2166368 2097144]
- KVM: x86: Bug the VM if the emulator accesses a non-existent GPR (Maxim Levitsky) [2166368 2097144]
- \KVM: x86: Reduce the number of emulator GPRs to '8' for 32-bit KVM (Maxim Levitsky) [2166368 2097144]
- KVM: x86: Use 16-bit fields to track dirty/valid emulator GPRs (Maxim Levitsky) [2166368 2097144]
- KVM: x86: Omit VCPU_REGS_RIP from emulator's _regs array (Maxim Levitsky) [2166368 2097144]
- \KVM: x86: Harden _regs accesses to guard against buggy input (Maxim Levitsky) [2166368 2097144]
- KVM: x86: Grab regs_dirty in local 'unsigned long' (Maxim Levitsky) [2166368 2097144]
- proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152571 2152572] {CVE-2022-4378}
- proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152571 2152572] {CVE-2022-4378}</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.15.1.el8_7]" date="1676548800">- net/mlx5e: Fix use-after-free when reverting termination table (Amir Tzin) [2167640 2112927]
- net/mlx5: Do not query pci info while pci disabled (Amir Tzin) [2167645 2129249]
- x86/fpu: Fix copy_xstate_to_uabi() to copy init states correctly (Dean Nelson) [2168384 2122850]
- x86/fpu: Exclude dynamic states from init_fpstate (Dean Nelson) [2168384 2122850]
- x86/fpu: Fix the init_fpstate size check with the actual size (Dean Nelson) [2168384 2122850]
- x86/fpu: Configure init_fpstate attributes orderly (Dean Nelson) [2168384 2122850]
- x86/fpu/xstate: Fix the ARCH_REQ_XCOMP_PERM implementation (Dean Nelson) [2168384 2122850]
- net/mlx5: E-Switch, properly handle ingress tagged packets on VST (Amir Tzin) [2166665 2096109]
- cpuhotplug: Fix KABI breakage (Prarit Bhargava) [2162763 2156529]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.16.1.el8_7]" date="1677153600">- ipv6: fix panic when fib_lookup_arg-&gt;result is fib6_info (Jiri Benc) [2167602 2140599]
- ceph: blocklist the kclient when receiving corrupted snap trace (Xiubo Li) [2168896 2162414]
- ceph: move mount state enum to super.h (Xiubo Li) [2168896 2162414]
- s390/kexec: fix ipl report address for kdump (Tobias Huschle) [2166296 2161328]
- mm, compaction: fix fast_isolate_around() to stay within boundaries (Daniel Vacek) [2170576 2149309]
- scsi: storvsc: Fix swiotlb bounce buffer leak in confidential VM (Emanuele Giuseppe Esposito) [2170228 2150659]
- netfilter: conntrack: handle tcp challenge acks during connection reuse (Florian Westphal) [2165587 2158726]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.17.1.el8_7]" date="1677844800">- net: mana: Add rmb after checking owner bits (Mohammed Gamal) [2173103 2139462]
- net: mana: Add support of XDP_REDIRECT action (Mohammed Gamal) [2173103 2139462]
- net: mana: Add the Linux MANA PF driver (Mohammed Gamal) [2173103 2139462]
- ice: fix lost multicast packets in promisc mode (Ken Cox) [2172550 2138215]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.18.0-425.18.1.el8_7]" date="1678449600">- futex: Resend potentially swallowed owner death notification (Rafael Aquini) [2170054 2161526]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.19.1.el8_7]" date="1678968000">- s390/dasd: fix no record found for raw_track_access (Tobias Huschle) [2167776 2161270]
- locking/rwsem: Disable preemption in all down_read*() and up_read() code paths (Waiman Long) [2170939 2162139]
- locking/rwsem: Prevent non-first waiter from spinning in down_write() slowpath (Waiman Long) [2170939 2162139]
- locking/rwsem: Allow slowpath writer to ignore handoff bit if not set by first waiter (Waiman Long) [2170939 2162139]
- locking/rwsem: Always try to wake waiters in out_nolock path (Waiman Long) [2170939 2162139]
- locking/rwsem: No need to check for handoff bit if wait queue empty (Waiman Long) [2170939 2162139]
- locking/rwsem: Make handoff bit handling more consistent (Waiman Long) [2170939 2162139]
- locking/rwsem: Disable preemption while trying for rwsem lock (Waiman Long) [2170939 2162139]
- locking/rwsem: Conditionally wake waiters in reader/writer slowpaths (Waiman Long) [2170939 2162139]
- locking: Make owner_on_cpu() into &lt;linux/sched.h&gt; (Waiman Long) [2170939 2162139]
- locking/rwsem: Optimize down_read_trylock() under highly contended case (Waiman Long) [2170939 2162139]
- locking/rwsem: Fix comments about reader optimistic lock stealing conditions (Waiman Long) [2170939 2162139]
- locking/rwsem: Disable preemption for spinning region (Waiman Long) [2170939 2162139]
- locking: Remove rcu_read_{,un}lock() for preempt_{dis,en}able() (Waiman Long) [2170939 2162139]
- watchdog: fix UAF in reboot notifier handling in watchdog core code (Wander Lairson Costa) [2139770 2131308]
- netfilter: nf_conntrack_irc: Tighten matching on DCC message (Wander Lairson Costa) [2139770 2131308]
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF (Jaroslav Kysela) [2163400 2163401] {CVE-2023-0266}
- net/mlx5e: Fix enabling sriov while tc nic rules are offloaded (Amir Tzin) [2167647 2112925]
- net/mlx5: E-Switch, pair only capable devices (Amir Tzin) [2167647 2112925]
- net/mlx5: Fix mlx5_get_next_dev() peer device matching (Amir Tzin) [2167647 2112925]
- net/mlx5: Lag, filter non compatible devices (Amir Tzin) [2167647 2112925]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.19.2.el8_7.gf5e8]" date="1678968001">- ovl: fail on invalid uid/gid mapping at copy up (Miklos Szeredi) [2165341 2165342] {CVE-2023-0386}</changelog>
</package>
<package pkgid="6cdad70e34dbaeea1523fd82390e4f4f2b53bc99c901da1a755330010d2a46fe" name="kernel-debug" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="425.10.1.el8_7"/>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.1.1.el8]" date="1663588800">- i40e: Fix kernel crash during module removal (Ivan Vecera) [2091489]
- redhat: enable zstream release numbering for rhel 8.7 (Jarod Wilson)
- ice: Allow operation with reduced device MSI-X (Petr Oros) [2102844]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.2.1.el8]" date="1664193600">- EDAC/ghes: Set the DIMM label unconditionally (Aristeu Rozanski) [2109712]
- configs: enable CONFIG_HP_ILO for aarch64 (Mark Salter) [2123508]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.3.1.el8]" date="1664539200">- iwlwifi: limit fw version for AC9560 to avoid fw crash (Íñigo Huguet) [2129297]
- sfc: fix null pointer dereference in efx_hard_start_xmit (Íñigo Huguet) [2119638]
- sfc: fix TX channel offset when using legacy interrupts (Íñigo Huguet) [2119638]
- netfilter: conntrack: reduce timeout when receiving out-of-window fin or rst (Florian Westphal) [2047366]
- netfilter: conntrack: remove unneeded indent level (Florian Westphal) [2047366]
- netfilter: conntrack: ignore overly delayed tcp packets (Florian Westphal) [2047366]
- netfilter: conntrack: prepare tcp_in_window for ternary return value (Florian Westphal) [2047366]
- netfilter: conntrack: remove pr_debug callsites from tcp tracker (Florian Westphal) [2047366]
- netfilter: conntrack: work around exceeded receive window (Florian Westphal) [2047366]
- netfilter: conntrack: improve RST handling when tuple is re-used (Florian Westphal) [2047366]
- netfilter: conntrack: avoid misleading 'invalid' in log message (Florian Westphal) [2047366]
- netfilter: remove BUG_ON() after skb_header_pointer() (Florian Westphal) [2047366]
- iavf: Detach device during reset task (Petr Oros) [2069206]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.4.1.el8]" date="1665144000">- random: allow reseeding DRBG with getrandom (Daiki Ueno) [2121766]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.5.1.el8_7]" date="1667476800">- ice: Fix interface being down after reset with link-down-on-close flag on (Petr Oros) [2136216 2024110]
- ice: Fix crash by keep old cfg when update TCs more than queues (Petr Oros) [2130992 2129902]
- ice: Fix tunnel checksum offload with fragmented traffic (Petr Oros) [2130992 2129902]
- ice: handle E822 generic device ID in PLDM header (Petr Oros) [2130992 2129902]
- ice: ethtool: Prohibit improper channel config for DCB (Petr Oros) [2130992 2129902]
- ice: ethtool: advertise 1000M speeds properly (Petr Oros) [2130992 2129902]
- ice: Fix switchdev rules book keeping (Petr Oros) [2130992 2129902]
- ice: fix access-beyond-end in the switch code (Petr Oros) [2130992 2129902]
- eth: ice: silence the GCC 12 array-bounds warning (Petr Oros) [2130992 2129902]
- ice: Expose RSS indirection tables for queue groups via ethtool (Petr Oros) [2130992 2129902]
- Revert "ice: Hide bus-info in ethtool for PRs in switchdev mode" (Petr Oros) [2130992 2129902]
- ice: remove period on argument description in ice_for_each_vf (Petr Oros) [2130992 2129902]
- ice: add a function comment for ice_cfg_mac_antispoof (Petr Oros) [2130992 2129902]
- ice: fix wording in comment for ice_reset_vf (Petr Oros) [2130992 2129902]
- ice: remove return value comment for ice_reset_all_vfs (Petr Oros) [2130992 2129902]
- ice: always check VF VSI pointer values (Petr Oros) [2130992 2129902]
- ice: add newline to dev_dbg in ice_vf_fdir_dump_info (Petr Oros) [2130992 2129902]
- ice: get switch id on switchdev devices (Petr Oros) [2130992 2129902]
- ice: return ENOSPC when exceeding ICE_MAX_CHAIN_WORDS (Petr Oros) [2130992 2129902]
- ice: introduce common helper for retrieving VSI by vsi_num (Petr Oros) [2130992 2129902]
- ice: use min_t() to make code cleaner in ice_gnss (Petr Oros) [2130992 2129902]
- ice: Add mpls+tso support (Petr Oros) [2130992 2129902]
- ice: switch: convert packet template match code to rodata (Petr Oros) [2130992 2129902]
- ice: switch: use convenience macros to declare dummy pkt templates (Petr Oros) [2130992 2129902]
- ice: switch: use a struct to pass packet template params (Petr Oros) [2130992 2129902]
- ice: switch: unobscurify bitops loop in ice_fill_adv_dummy_packet() (Petr Oros) [2130992 2129902]
- ice: switch: add and use u16[] aliases to ice_adv_lkup_elem::{h, m}_u (Petr Oros) [2130992 2129902]
- ice: Support GTP-U and GTP-C offload in switchdev (Petr Oros) [2130992 2129902]
- ice: Remove useless DMA-32 fallback configuration (Petr Oros) [2130992 2129902]
- ice: switch to napi_build_skb() (Petr Oros) [2130992 2129902]
- redhat: switch to z-stream dist tag and build targets (Jarod Wilson)
- block: avoid sign extend problem with default queue flags mask (Nico Pache) [2135813]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.6.1.el8_7]" date="1668168000">- ice: Add low latency Tx timestamp read (Petr Oros) [2136036 2092425]
- ice: introduce ice_ptp_reset_cached_phctime function (Petr Oros) [2136036 2092425]
- ice: re-arrange some static functions in ice_ptp.c (Petr Oros) [2136036 2092425]
- ice: track and warn when PHC update is late (Petr Oros) [2136036 2092425]
- ice: track Tx timestamp stats similar to other Intel drivers (Petr Oros) [2136036 2092425]
- ice: implement adjfine with mul_u64_u64_div_u64 (Petr Oros) [2136036 2092425]
- ice: Add EXTTS feature to the feature bitmap (Petr Oros) [2136036 2092425]
- math: Export mul_u64_u64_div_u64 (Petr Oros) [2136036 2092425]
- vfio/type1: Unpin zero pages (Alex Williamson) [2128515 2123015]
- net: atlantic: remove aq_nic_deinit() when resume (Íñigo Huguet) [2131935 2130839]
- net: atlantic: remove deep parameter on suspend/resume functions (Íñigo Huguet) [2131935 2130839]
- CI: Use zstream builder container (Veronika Kabatova)
- CI: Add disttag override for 8.7 (Veronika Kabatova)</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.7.1.el8_7]" date="1669723200">- ice: Add additional CSR registers to ETHTOOL_GREGS (Petr Oros) [2136513 2131024]
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps (Petr Oros) [2137270 2106964]
- i40e: Fix VF set max MTU size (Petr Oros) [2137270 2106964]
- iavf: Fix set max MTU size with port VLAN and jumbo frames (Petr Oros) [2137270 2106964]
- iavf: Fix bad page state (Petr Oros) [2137270 2106964]
- Revert "scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels" (Jarod Wilson)
- scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels (Tomas Henzl) [2139216]
- Revert "ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems" (Jarod Wilson)
- ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems (Wei Huang) [2142170 2130653]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.8.1.el8_7]" date="1669982400">- scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels (Tomas Henzl) [2139216 2134535]
- RDMA/mlx5: Set local port to one when accessing counters (Mohammad Kabat) [2141957 2077119]
- drm/mgag200: Fix PLL setup for G200_SE_A rev &gt;=4 (Jocelyn Falempe) [2140152 2130159]
- iavf: Do not restart Tx queues after reset task failure (Petr Oros) [2149081 2134005]
- iavf: Fix a crash during reset task (Petr Oros) [2149081 2134005]
- scsi: core: Allow the ALUA transitioning state enough time (Tomas Henzl) [2147374 2084250]
- scsi: core: Return BLK_STS_TRANSPORT for ALUA transitioning (Tomas Henzl) [2147374 2084250]
- i40e: Fix DMA mappings leak (Ivan Vecera) [2138205 2077847]
- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2142724 2142725] {CVE-2022-2964}
- net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2142724 2142725] {CVE-2022-2964}</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.9.1.el8_7]" date="1670587200">- Documentation/admin-guide: Document nomodeset kernel parameter (Jocelyn Falempe) [2145218 2143952]
- drm: Move nomodeset kernel parameter to the DRM subsystem (Jocelyn Falempe) [2145218 2143952]
- wait: Fix __wait_event_hrtimeout for RT/DL tasks (Derek Barbosa) [2138953 2125233]
- scsi: zfcp: Fix missing auto port scan and thus missing target ports (Tobias Huschle) [2127849 2121089]
- net: Fix return value of qdisc ingress handling on success (Ivan Vecera) [2141878 2131361]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.10.1.el8_7]" date="1671019200">- scsi: target: loop: Fix handling of aborted TMRs (Maurizio Lombardi) [2144583 2141713]
- ice: virtchnl rss hena support (Petr Oros) [2148130]
- ice: Fix configuring VIRTCHNL_OP_CONFIG_VSI_QUEUES with unbalanced queues (Michal Schmidt) [2142017 2137378]
- ice: Add support Flex RXD (Michal Schmidt) [2138157 2131310]
- netfilter: flowtable: fix stuck flows on cleanup due to pending work (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: add function to invoke garbage collection immediately (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: pass flowtable to nf_flow_table_iterate() (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: separate replace, destroy and stats to different workqueues (Phil Sutter) [2134084 2131370]
- x86/paravirt: Add a dummy __x86_paravirt_patch_template() function (Waiman Long) [2152206 2144161]
- x86/paravirt: Fix kABI breakage in struct pv_mmu_ops (Waiman Long) [2152206 2144161]
- drm/i915: fix TLB invalidation for Gen12 video and compute engines (Wander Lairson Costa) [2148149 2148150] {CVE-2022-4139}
- PCI: hv: Do not set PCI_COMMAND_MEMORY to reduce VM boot time (Emanuele Giuseppe Esposito) [2150912 2082836]
- iavf: Fix cached head and tail value for iavf_get_tx_pending (Stefan Assmann) [2149742 2103944]
- iavf: Fix change VF's mac address (Stefan Assmann) [2149742 2103944]
- iavf: Fix race between iavf_close and iavf_reset_task (Stefan Assmann) [2149742 2103944]
- net: ethernet: move from strlcpy with unused retval to strscpy (Stefan Assmann) [2149742 2103944]
- iavf: Fix 'tc qdisc show' listing too many queues (Stefan Assmann) [2149742 2103944]
- iavf: Fix max_rate limiting (Stefan Assmann) [2149742 2103944]
- iavf: Check for duplicate TC flower filter before parsing (Stefan Assmann) [2149742 2103944]
- iavf: Fix handling of dummy receive descriptors (Stefan Assmann) [2149742 2103944]
- iavf: Disallow changing rx/tx-frames and rx/tx-frames-irq (Stefan Assmann) [2149742 2103944]
- intel/iavf:fix repeated words in comments (Stefan Assmann) [2149742 2103944]
- intel: remove unused macros (Stefan Assmann) [2149742 2103944]
- iavf: Add waiting for response from PF in set mac (Stefan Assmann) [2149742 2103944]</changelog>
</package>
<package pkgid="78c6b4902ac0582957fb4655be78c135e46602551bf1d687a7664428818908e5" name="kernel-debug" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="425.13.1.el8_7"/>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.4.1.el8]" date="1665144000">- random: allow reseeding DRBG with getrandom (Daiki Ueno) [2121766]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.5.1.el8_7]" date="1667476800">- ice: Fix interface being down after reset with link-down-on-close flag on (Petr Oros) [2136216 2024110]
- ice: Fix crash by keep old cfg when update TCs more than queues (Petr Oros) [2130992 2129902]
- ice: Fix tunnel checksum offload with fragmented traffic (Petr Oros) [2130992 2129902]
- ice: handle E822 generic device ID in PLDM header (Petr Oros) [2130992 2129902]
- ice: ethtool: Prohibit improper channel config for DCB (Petr Oros) [2130992 2129902]
- ice: ethtool: advertise 1000M speeds properly (Petr Oros) [2130992 2129902]
- ice: Fix switchdev rules book keeping (Petr Oros) [2130992 2129902]
- ice: fix access-beyond-end in the switch code (Petr Oros) [2130992 2129902]
- eth: ice: silence the GCC 12 array-bounds warning (Petr Oros) [2130992 2129902]
- ice: Expose RSS indirection tables for queue groups via ethtool (Petr Oros) [2130992 2129902]
- Revert "ice: Hide bus-info in ethtool for PRs in switchdev mode" (Petr Oros) [2130992 2129902]
- ice: remove period on argument description in ice_for_each_vf (Petr Oros) [2130992 2129902]
- ice: add a function comment for ice_cfg_mac_antispoof (Petr Oros) [2130992 2129902]
- ice: fix wording in comment for ice_reset_vf (Petr Oros) [2130992 2129902]
- ice: remove return value comment for ice_reset_all_vfs (Petr Oros) [2130992 2129902]
- ice: always check VF VSI pointer values (Petr Oros) [2130992 2129902]
- ice: add newline to dev_dbg in ice_vf_fdir_dump_info (Petr Oros) [2130992 2129902]
- ice: get switch id on switchdev devices (Petr Oros) [2130992 2129902]
- ice: return ENOSPC when exceeding ICE_MAX_CHAIN_WORDS (Petr Oros) [2130992 2129902]
- ice: introduce common helper for retrieving VSI by vsi_num (Petr Oros) [2130992 2129902]
- ice: use min_t() to make code cleaner in ice_gnss (Petr Oros) [2130992 2129902]
- ice: Add mpls+tso support (Petr Oros) [2130992 2129902]
- ice: switch: convert packet template match code to rodata (Petr Oros) [2130992 2129902]
- ice: switch: use convenience macros to declare dummy pkt templates (Petr Oros) [2130992 2129902]
- ice: switch: use a struct to pass packet template params (Petr Oros) [2130992 2129902]
- ice: switch: unobscurify bitops loop in ice_fill_adv_dummy_packet() (Petr Oros) [2130992 2129902]
- ice: switch: add and use u16[] aliases to ice_adv_lkup_elem::{h, m}_u (Petr Oros) [2130992 2129902]
- ice: Support GTP-U and GTP-C offload in switchdev (Petr Oros) [2130992 2129902]
- ice: Remove useless DMA-32 fallback configuration (Petr Oros) [2130992 2129902]
- ice: switch to napi_build_skb() (Petr Oros) [2130992 2129902]
- redhat: switch to z-stream dist tag and build targets (Jarod Wilson)
- block: avoid sign extend problem with default queue flags mask (Nico Pache) [2135813]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.6.1.el8_7]" date="1668168000">- ice: Add low latency Tx timestamp read (Petr Oros) [2136036 2092425]
- ice: introduce ice_ptp_reset_cached_phctime function (Petr Oros) [2136036 2092425]
- ice: re-arrange some static functions in ice_ptp.c (Petr Oros) [2136036 2092425]
- ice: track and warn when PHC update is late (Petr Oros) [2136036 2092425]
- ice: track Tx timestamp stats similar to other Intel drivers (Petr Oros) [2136036 2092425]
- ice: implement adjfine with mul_u64_u64_div_u64 (Petr Oros) [2136036 2092425]
- ice: Add EXTTS feature to the feature bitmap (Petr Oros) [2136036 2092425]
- math: Export mul_u64_u64_div_u64 (Petr Oros) [2136036 2092425]
- vfio/type1: Unpin zero pages (Alex Williamson) [2128515 2123015]
- net: atlantic: remove aq_nic_deinit() when resume (Íñigo Huguet) [2131935 2130839]
- net: atlantic: remove deep parameter on suspend/resume functions (Íñigo Huguet) [2131935 2130839]
- CI: Use zstream builder container (Veronika Kabatova)
- CI: Add disttag override for 8.7 (Veronika Kabatova)</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.7.1.el8_7]" date="1669723200">- ice: Add additional CSR registers to ETHTOOL_GREGS (Petr Oros) [2136513 2131024]
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps (Petr Oros) [2137270 2106964]
- i40e: Fix VF set max MTU size (Petr Oros) [2137270 2106964]
- iavf: Fix set max MTU size with port VLAN and jumbo frames (Petr Oros) [2137270 2106964]
- iavf: Fix bad page state (Petr Oros) [2137270 2106964]
- Revert "scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels" (Jarod Wilson)
- scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels (Tomas Henzl) [2139216]
- Revert "ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems" (Jarod Wilson)
- ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems (Wei Huang) [2142170 2130653]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.8.1.el8_7]" date="1669982400">- scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels (Tomas Henzl) [2139216 2134535]
- RDMA/mlx5: Set local port to one when accessing counters (Mohammad Kabat) [2141957 2077119]
- drm/mgag200: Fix PLL setup for G200_SE_A rev &gt;=4 (Jocelyn Falempe) [2140152 2130159]
- iavf: Do not restart Tx queues after reset task failure (Petr Oros) [2149081 2134005]
- iavf: Fix a crash during reset task (Petr Oros) [2149081 2134005]
- scsi: core: Allow the ALUA transitioning state enough time (Tomas Henzl) [2147374 2084250]
- scsi: core: Return BLK_STS_TRANSPORT for ALUA transitioning (Tomas Henzl) [2147374 2084250]
- i40e: Fix DMA mappings leak (Ivan Vecera) [2138205 2077847]
- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2142724 2142725] {CVE-2022-2964}
- net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2142724 2142725] {CVE-2022-2964}</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.9.1.el8_7]" date="1670587200">- Documentation/admin-guide: Document nomodeset kernel parameter (Jocelyn Falempe) [2145218 2143952]
- drm: Move nomodeset kernel parameter to the DRM subsystem (Jocelyn Falempe) [2145218 2143952]
- wait: Fix __wait_event_hrtimeout for RT/DL tasks (Derek Barbosa) [2138953 2125233]
- scsi: zfcp: Fix missing auto port scan and thus missing target ports (Tobias Huschle) [2127849 2121089]
- net: Fix return value of qdisc ingress handling on success (Ivan Vecera) [2141878 2131361]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.10.1.el8_7]" date="1671019200">- scsi: target: loop: Fix handling of aborted TMRs (Maurizio Lombardi) [2144583 2141713]
- ice: virtchnl rss hena support (Petr Oros) [2148130]
- ice: Fix configuring VIRTCHNL_OP_CONFIG_VSI_QUEUES with unbalanced queues (Michal Schmidt) [2142017 2137378]
- ice: Add support Flex RXD (Michal Schmidt) [2138157 2131310]
- netfilter: flowtable: fix stuck flows on cleanup due to pending work (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: add function to invoke garbage collection immediately (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: pass flowtable to nf_flow_table_iterate() (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: separate replace, destroy and stats to different workqueues (Phil Sutter) [2134084 2131370]
- x86/paravirt: Add a dummy __x86_paravirt_patch_template() function (Waiman Long) [2152206 2144161]
- x86/paravirt: Fix kABI breakage in struct pv_mmu_ops (Waiman Long) [2152206 2144161]
- drm/i915: fix TLB invalidation for Gen12 video and compute engines (Wander Lairson Costa) [2148149 2148150] {CVE-2022-4139}
- PCI: hv: Do not set PCI_COMMAND_MEMORY to reduce VM boot time (Emanuele Giuseppe Esposito) [2150912 2082836]
- iavf: Fix cached head and tail value for iavf_get_tx_pending (Stefan Assmann) [2149742 2103944]
- iavf: Fix change VF's mac address (Stefan Assmann) [2149742 2103944]
- iavf: Fix race between iavf_close and iavf_reset_task (Stefan Assmann) [2149742 2103944]
- net: ethernet: move from strlcpy with unused retval to strscpy (Stefan Assmann) [2149742 2103944]
- iavf: Fix 'tc qdisc show' listing too many queues (Stefan Assmann) [2149742 2103944]
- iavf: Fix max_rate limiting (Stefan Assmann) [2149742 2103944]
- iavf: Check for duplicate TC flower filter before parsing (Stefan Assmann) [2149742 2103944]
- iavf: Fix handling of dummy receive descriptors (Stefan Assmann) [2149742 2103944]
- iavf: Disallow changing rx/tx-frames and rx/tx-frames-irq (Stefan Assmann) [2149742 2103944]
- intel/iavf:fix repeated words in comments (Stefan Assmann) [2149742 2103944]
- intel: remove unused macros (Stefan Assmann) [2149742 2103944]
- iavf: Add waiting for response from PF in set mac (Stefan Assmann) [2149742 2103944]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.11.1.el8_7]" date="1673006400">- NFSD: Protect against send buffer overflow in NFSv3 READ (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv2 READ (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv3 READDIR (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv2 READDIR (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- SUNRPC: Fix svcxdr_init_encode's buflen calculation (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- SUNRPC: Fix svcxdr_init_decode's end-of-buffer calculation (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- panic, kexec: make __crash_kexec() NMI safe (Valentin Schneider) [2139580 2134126]
- kexec: turn all kexec_mutex acquisitions into trylocks (Valentin Schneider) [2139580 2134126]
- kexec: move locking into do_kexec_load (Valentin Schneider) [2139580 2134126]
- vdpa/mlx5: re-create forwarding rules after mac modified (Laurent Vivier) [2152912 2145136]
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry (Waiman Long) [2153653 2108387]
- irq: Call tick_irq_enter() inside HARDIRQ_OFFSET (Waiman Long) [2153653 2108387]
- irqtime: Move irqtime entry accounting after irq offset incrementation (Waiman Long) [2153653 2108387]
- sched/vtime: Consolidate IRQ time accounting (Waiman Long) [2153653 2108387]
- s390/vtime: Use the generic IRQ entry accounting (Waiman Long) [2153653 2108387]
- sched/cputime: Remove symbol exports from IRQ time accounting (Waiman Long) [2153653 2108387]
- genirq/irqdomain: Don't try to free an interrupt that has no mapping (Waiman Long) [2153653 2108387]
- genirq: Provide __irq_enter/exit_raw() (Waiman Long) [2153653 2108387]
- powerpc/time: Only set CONFIG_ARCH_HAS_SCALED_CPUTIME on PPC64 (Waiman Long) [2153653 2108387]
- powerpc/time: isolate scaled cputime accounting in dedicated functions. (Waiman Long) [2153653 2108387]
- PCI: hv: Fix synchronization between channel callback and hv_pci_bus_exit() (Mohammed Gamal) [2155280 2144708]
- PCI: hv: Fix synchronization between channel callback and hv_compose_msi_msg() (Mohammed Gamal) [2155280 2144708]
- PCI: hv: Use vmbus_requestor to generate transaction IDs for VMbus hardening (Mohammed Gamal) [2155280 2144708]
- net/mlx5e: TC, Reject forwarding from internal port to internal port (Mohammad Kabat) [2141959 2131345]
- hv_netvsc: Fix race between VF offering and VF association message from host (Mohammed Gamal) [2155272 2149279]
- x86/mce: Reduce number of machine checks taken during recovery (Prarit Bhargava) [2137592 2104388]
- cgroup/cpuset: Reduce cpuset_rwsem writer latency (Waiman Long) [2153108 2149031]
- rcu/exp: Mark current CPU as exp-QS in IPI loop second pass (Waiman Long) [2153108 2149031]
- rcu: Always inline rcu_dynticks_task*_{enter,exit}() (Waiman Long) [2153108 2149031]
- rcu: Fix existing exp request check in sync_sched_exp_online_cleanup() (Waiman Long) [2153108 2149031]
- rcu: Fix macro name CONFIG_TASKS_RCU_TRACE (Waiman Long) [2153108 2149031]
- rcu: Fix stall-warning deadlock due to non-release of rcu_node -&gt;lock (Waiman Long) [2153108 2149031]
- rcu: Fix to include first blocked task in stall warning (Waiman Long) [2153108 2149031]
- cgroup: Use cgroup_attach_{lock,unlock}() from cgroup_attach_task_all() (Waiman Long) [2153108 2149031]
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all() (Waiman Long) [2153108 2149031]
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock (Waiman Long) [2153108 2149031]
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree (Waiman Long) [2153108 2149031]
- cgroup/cpuset: Fix a race between cpuset_attach() and cpu hotplug (Waiman Long) [2153108 2149031]
- cgroup: reduce dependency on cgroup_mutex (Waiman Long) [2153108 2149031]
- sunrpc: Set sk_allocation to GFP_NOFS to avoid using current-&gt;task_frag. (Guillaume Nault) [2153230 2089660]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.12.1.el8_7]" date="1674129600">- x86/fpu: Prevent FPU state corruption (Oleksandr Natalenko) [2134586 2130890]
- x86/fpu: Drop fpregs lock before inheriting FPU permissions (Eder Zulian) [2154460 2153549]
- kernel-doc: fix undefined args variable (Jan Stancek) [2157905 2134954]
- mm: memcontrol: fix potential oom_lock recursion deadlock (Waiman Long) [2157922 2138886]
- memcg: prohibit unconditional exceeding the limit of dying tasks (Waiman Long) [2157922 2138886]
- mm, oom: do not trigger out_of_memory from the #PF (Waiman Long) [2157922 2138886]
- mm, oom: pagefault_out_of_memory: don't force global OOM for dying tasks (Waiman Long) [2157922 2138886]
- mm: memcontrol: don't count limit-setting reclaim as memory pressure (Waiman Long) [2157922 2138886]
- KVM: s390: vsie: Fix the initialization of the epoch extension (epdx) field (Thomas Huth) [2158813 2151854]
- net: mana: Fix race on per-CQ variable napi work_done (Emanuele Giuseppe Esposito) [2155437 2151722]
- mei: me: add adler lake point S DID (Prarit Bhargava) [2141783 2141602]
- PCI: hv: Only reuse existing IRTE allocation for Multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix the definition of vector in hv_compose_msi_msg() (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix interrupt mapping for multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Reuse existing IRTE allocation in compose_msi_msg() (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix hv_arch_irq_unmask() for multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix multi-MSI to allow more than one MSI vector (Emanuele Giuseppe Esposito) [2155289 2100275]
- drm/ast: Support multiple outputs (Jarod Wilson) [2149287 2147553]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.13.1.el8_7]" date="1675339200">- mm/cgroup/reclaim: fix dirty pages throttling on cgroup v1 (Waiman Long) [2160221]
- mm: vmscan: remove deadlock due to throttling failing to make progress (Waiman Long) [2160221]
- mm: vmscan: reduce throttling due to a failure to make progress -fix (Waiman Long) [2160221]
- mm: vmscan: Reduce throttling due to a failure to make progress (Waiman Long) [2160221]
- mm/vmscan: delay waking of tasks throttled on NOPROGRESS (Waiman Long) [2160221]
- mm/vmscan: increase the timeout if page reclaim is not making progress (Waiman Long) [2160221]
- mm/vmscan: centralise timeout values for reclaim_throttle (Waiman Long) [2160221]
- mm/page_alloc: remove the throttling logic from the page allocator (Waiman Long) [2160221]
- mm/writeback: throttle based on page writeback instead of congestion (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim when no progress is being made (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim and compaction when too may pages are isolated (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim until some writeback completes if congested (Waiman Long) [2160221]
- mm/vmscan.c: delete or fix duplicated words (Waiman Long) [2160221]
- mm,page_alloc: PF_WQ_WORKER threads must sleep at should_reclaim_retry() (Nico Pache) [2160221]
- ceph: avoid putting the realm twice when decoding snaps fails (Xiubo Li) [2155797 2139881]
- mm/mremap: hold the rmap lock in write mode when moving page table entries. (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: use pmd/pud_poplulate to update page table entries (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: don't enable optimized PUD move if page table levels is 2 (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: convert huge PUD move to separate helper (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: fix BUILD_BUG_ON() error in get_extent (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap.c: fix extent calculation (Waiman Long) [2140944] {CVE-2022-41222}
- x86: mremap speedup - Enable HAVE_MOVE_PUD (Waiman Long) [2140944] {CVE-2022-41222}
- mm: speedup mremap on 1GB or larger regions (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: start addresses are properly aligned (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: calculate extent in one place (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: it is sure to have enough space when extent meets requirement (Waiman Long) [2140944] {CVE-2022-41222}
- s390/boot: add secure boot trailer (Tobias Huschle) [2151530 2141967]
- i40e: Fix VF hang when reset is triggered on another VF (Ivan Vecera) [2160460 2103801]
- i2c: ismt: Fix an out-of-bounds bug in ismt_access() (Prarit Bhargava) [2154388 2119066] {CVE-2022-2873}
- iavf: schedule watchdog immediately when changing primary MAC (Michal Schmidt) [2163257 2152493]
- iavf: Move netdev_update_features() into watchdog task (Michal Schmidt) [2163257 2152493]
- iavf: fix temporary deadlock and failure to set MAC address (Michal Schmidt) [2163257 2152493]
- iavf: Fix error handling in iavf_init_module() (Michal Schmidt) [2163257 2152493]
- iommu/vt-d: Clean up si_domain in the init_dmars() error path (Jerry Snitselaar) [2149474 2118428]
- x86/pci/xen: Use msi_msg shadow structs (Jerry Snitselaar) [2149474 2118428]
- iommu/intel: Use msi_msg shadow structs (Jerry Snitselaar) [2149474 2118428]
- PCI: MSI: Fix Kconfig dependencies for PCI_MSI_ARCH_FALLBACKS (Jerry Snitselaar) [2149474 2118428]
- x86/apic/msi: Unbreak DMAR and HPET MSI (Jerry Snitselaar) [2149474 2118428]
- iommu/amd: Remove domain search for PCI/MSI (Jerry Snitselaar) [2149474 2118428]
- iommu/vt-d: Remove domain search for PCI/MSI[X] (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Make most MSI ops XEN private (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Cleanup the arch_*_msi_irqs() leftovers (Jerry Snitselaar) [2149474 2118428]
- PCI/MSI: Make arch_.*_msi_irq[s] fallbacks selectable (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Wrap XEN MSI management into irqdomain (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Consolidate XEN-MSI init (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Rework MSI teardown (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Make xen_msi_init() static and rename it to xen_hvm_msi_init() (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Move apic_post_init() invocation to one place (Jerry Snitselaar) [2149474 2118428]
- x86/msi: Use generic MSI domain ops (Jerry Snitselaar) [2149474 2118428]
- x86/msi: Remove pointless vcpu_affinity callback (Jerry Snitselaar) [2149474 2118428]
- iommu/vt-d: Fix compile error with CONFIG_PCI_ATS not set (Myron Stowe) [2149474 2118428]
- iommu/vt-d: Cure VF irqdomain hickup (Myron Stowe) [2149474 2118428]
- x86/pci: Set default irq domain in pcibios_add_device() (Myron Stowe) [2149474 2118428]
- iommm/amd: Store irq domain in struct device (Myron Stowe) [2149474 2118428]
- iommm/vt-d: Store irq domain in struct device (Myron Stowe) [2149474 2118428]
- PCI/MSI: Provide pci_dev_has_special_msi_domain() helper (Myron Stowe) [2149474 2118428]
- x86/msi: Consolidate MSI allocation (Myron Stowe) [2149474 2118428]
- PCI/MSI: Rework pci_msi_domain_calc_hwirq() (Myron Stowe) [2149474 2118428]
- x86/irq: Consolidate UV domain allocation (Myron Stowe) [2149474 2118428]
- x86/irq: Consolidate DMAR irq allocation (Myron Stowe) [2149474 2118428]
- x86_ioapic_Consolidate_IOAPIC_allocation (Myron Stowe) [2149474 2118428]
- x86/msi: Consolidate HPET allocation (Myron Stowe) [2149474 2118428]
- iommu/irq_remapping: Consolidate irq domain lookup (Myron Stowe) [2149474 2118428]
- iommu/amd: Consolidate irq domain getter (Myron Stowe) [2149474 2118428]
- iommu/vt-d: Consolidate irq domain getter (Myron Stowe) [2149474 2118428]
- x86/irq: Add allocation type for parent domain retrieval (Myron Stowe) [2149474 2118428]
- irqdomain: Export irq_domain_update_bus_token (Myron Stowe) [2149474 2118428]
- gitlab-ci: use CI templates from production branch (Michael Hofmann)
- iavf: remove INITIAL_MAC_SET to allow gARP to work properly (Stefan Assmann) [2149745 1938635]
- Revert "scsi: iscsi: ql4xxx: Use per-session workqueue for unbinding" (Chris Leech) [2152734 2122624]
- Revert "scsi: iscsi: Use the session workqueue for recovery" (Chris Leech) [2152734 2122624]
- arm64/bpf: Remove 128MB limit for BPF JIT programs (Yauheni Kaliuta) [2152138 2140163]
- bpf: Define bpf_jit_alloc_exec_limit for arm64 JIT (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: add `type` and `data` fields (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: use `ex` for `exception_table_entry` (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: make fixup_exception() return bool (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: consolidate definitions (Yauheni Kaliuta) [2152138 2140163]
- arm64: kvm: use kvm_exception_table_entry (Yauheni Kaliuta) [2152138 2140163]
- be2net: Fix buffer overflow in be_get_module_eeprom (Josef Oskera) [2160182 2126917]</changelog>
</package>
<package pkgid="20e724b3f8f2e61889f17f0869649dca0d587d42ed97ae5973f752a1579811d0" name="kernel-debug" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="425.19.2.el8_7"/>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.11.1.el8_7]" date="1673006400">- NFSD: Protect against send buffer overflow in NFSv3 READ (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv2 READ (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv3 READDIR (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv2 READDIR (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- SUNRPC: Fix svcxdr_init_encode's buflen calculation (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- SUNRPC: Fix svcxdr_init_decode's end-of-buffer calculation (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- panic, kexec: make __crash_kexec() NMI safe (Valentin Schneider) [2139580 2134126]
- kexec: turn all kexec_mutex acquisitions into trylocks (Valentin Schneider) [2139580 2134126]
- kexec: move locking into do_kexec_load (Valentin Schneider) [2139580 2134126]
- vdpa/mlx5: re-create forwarding rules after mac modified (Laurent Vivier) [2152912 2145136]
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry (Waiman Long) [2153653 2108387]
- irq: Call tick_irq_enter() inside HARDIRQ_OFFSET (Waiman Long) [2153653 2108387]
- irqtime: Move irqtime entry accounting after irq offset incrementation (Waiman Long) [2153653 2108387]
- sched/vtime: Consolidate IRQ time accounting (Waiman Long) [2153653 2108387]
- s390/vtime: Use the generic IRQ entry accounting (Waiman Long) [2153653 2108387]
- sched/cputime: Remove symbol exports from IRQ time accounting (Waiman Long) [2153653 2108387]
- genirq/irqdomain: Don't try to free an interrupt that has no mapping (Waiman Long) [2153653 2108387]
- genirq: Provide __irq_enter/exit_raw() (Waiman Long) [2153653 2108387]
- powerpc/time: Only set CONFIG_ARCH_HAS_SCALED_CPUTIME on PPC64 (Waiman Long) [2153653 2108387]
- powerpc/time: isolate scaled cputime accounting in dedicated functions. (Waiman Long) [2153653 2108387]
- PCI: hv: Fix synchronization between channel callback and hv_pci_bus_exit() (Mohammed Gamal) [2155280 2144708]
- PCI: hv: Fix synchronization between channel callback and hv_compose_msi_msg() (Mohammed Gamal) [2155280 2144708]
- PCI: hv: Use vmbus_requestor to generate transaction IDs for VMbus hardening (Mohammed Gamal) [2155280 2144708]
- net/mlx5e: TC, Reject forwarding from internal port to internal port (Mohammad Kabat) [2141959 2131345]
- hv_netvsc: Fix race between VF offering and VF association message from host (Mohammed Gamal) [2155272 2149279]
- x86/mce: Reduce number of machine checks taken during recovery (Prarit Bhargava) [2137592 2104388]
- cgroup/cpuset: Reduce cpuset_rwsem writer latency (Waiman Long) [2153108 2149031]
- rcu/exp: Mark current CPU as exp-QS in IPI loop second pass (Waiman Long) [2153108 2149031]
- rcu: Always inline rcu_dynticks_task*_{enter,exit}() (Waiman Long) [2153108 2149031]
- rcu: Fix existing exp request check in sync_sched_exp_online_cleanup() (Waiman Long) [2153108 2149031]
- rcu: Fix macro name CONFIG_TASKS_RCU_TRACE (Waiman Long) [2153108 2149031]
- rcu: Fix stall-warning deadlock due to non-release of rcu_node -&gt;lock (Waiman Long) [2153108 2149031]
- rcu: Fix to include first blocked task in stall warning (Waiman Long) [2153108 2149031]
- cgroup: Use cgroup_attach_{lock,unlock}() from cgroup_attach_task_all() (Waiman Long) [2153108 2149031]
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all() (Waiman Long) [2153108 2149031]
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock (Waiman Long) [2153108 2149031]
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree (Waiman Long) [2153108 2149031]
- cgroup/cpuset: Fix a race between cpuset_attach() and cpu hotplug (Waiman Long) [2153108 2149031]
- cgroup: reduce dependency on cgroup_mutex (Waiman Long) [2153108 2149031]
- sunrpc: Set sk_allocation to GFP_NOFS to avoid using current-&gt;task_frag. (Guillaume Nault) [2153230 2089660]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.12.1.el8_7]" date="1674129600">- x86/fpu: Prevent FPU state corruption (Oleksandr Natalenko) [2134586 2130890]
- x86/fpu: Drop fpregs lock before inheriting FPU permissions (Eder Zulian) [2154460 2153549]
- kernel-doc: fix undefined args variable (Jan Stancek) [2157905 2134954]
- mm: memcontrol: fix potential oom_lock recursion deadlock (Waiman Long) [2157922 2138886]
- memcg: prohibit unconditional exceeding the limit of dying tasks (Waiman Long) [2157922 2138886]
- mm, oom: do not trigger out_of_memory from the #PF (Waiman Long) [2157922 2138886]
- mm, oom: pagefault_out_of_memory: don't force global OOM for dying tasks (Waiman Long) [2157922 2138886]
- mm: memcontrol: don't count limit-setting reclaim as memory pressure (Waiman Long) [2157922 2138886]
- KVM: s390: vsie: Fix the initialization of the epoch extension (epdx) field (Thomas Huth) [2158813 2151854]
- net: mana: Fix race on per-CQ variable napi work_done (Emanuele Giuseppe Esposito) [2155437 2151722]
- mei: me: add adler lake point S DID (Prarit Bhargava) [2141783 2141602]
- PCI: hv: Only reuse existing IRTE allocation for Multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix the definition of vector in hv_compose_msi_msg() (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix interrupt mapping for multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Reuse existing IRTE allocation in compose_msi_msg() (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix hv_arch_irq_unmask() for multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix multi-MSI to allow more than one MSI vector (Emanuele Giuseppe Esposito) [2155289 2100275]
- drm/ast: Support multiple outputs (Jarod Wilson) [2149287 2147553]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.13.1.el8_7]" date="1675339200">- mm/cgroup/reclaim: fix dirty pages throttling on cgroup v1 (Waiman Long) [2160221]
- mm: vmscan: remove deadlock due to throttling failing to make progress (Waiman Long) [2160221]
- mm: vmscan: reduce throttling due to a failure to make progress -fix (Waiman Long) [2160221]
- mm: vmscan: Reduce throttling due to a failure to make progress (Waiman Long) [2160221]
- mm/vmscan: delay waking of tasks throttled on NOPROGRESS (Waiman Long) [2160221]
- mm/vmscan: increase the timeout if page reclaim is not making progress (Waiman Long) [2160221]
- mm/vmscan: centralise timeout values for reclaim_throttle (Waiman Long) [2160221]
- mm/page_alloc: remove the throttling logic from the page allocator (Waiman Long) [2160221]
- mm/writeback: throttle based on page writeback instead of congestion (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim when no progress is being made (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim and compaction when too may pages are isolated (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim until some writeback completes if congested (Waiman Long) [2160221]
- mm/vmscan.c: delete or fix duplicated words (Waiman Long) [2160221]
- mm,page_alloc: PF_WQ_WORKER threads must sleep at should_reclaim_retry() (Nico Pache) [2160221]
- ceph: avoid putting the realm twice when decoding snaps fails (Xiubo Li) [2155797 2139881]
- mm/mremap: hold the rmap lock in write mode when moving page table entries. (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: use pmd/pud_poplulate to update page table entries (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: don't enable optimized PUD move if page table levels is 2 (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: convert huge PUD move to separate helper (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: fix BUILD_BUG_ON() error in get_extent (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap.c: fix extent calculation (Waiman Long) [2140944] {CVE-2022-41222}
- x86: mremap speedup - Enable HAVE_MOVE_PUD (Waiman Long) [2140944] {CVE-2022-41222}
- mm: speedup mremap on 1GB or larger regions (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: start addresses are properly aligned (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: calculate extent in one place (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: it is sure to have enough space when extent meets requirement (Waiman Long) [2140944] {CVE-2022-41222}
- s390/boot: add secure boot trailer (Tobias Huschle) [2151530 2141967]
- i40e: Fix VF hang when reset is triggered on another VF (Ivan Vecera) [2160460 2103801]
- i2c: ismt: Fix an out-of-bounds bug in ismt_access() (Prarit Bhargava) [2154388 2119066] {CVE-2022-2873}
- iavf: schedule watchdog immediately when changing primary MAC (Michal Schmidt) [2163257 2152493]
- iavf: Move netdev_update_features() into watchdog task (Michal Schmidt) [2163257 2152493]
- iavf: fix temporary deadlock and failure to set MAC address (Michal Schmidt) [2163257 2152493]
- iavf: Fix error handling in iavf_init_module() (Michal Schmidt) [2163257 2152493]
- iommu/vt-d: Clean up si_domain in the init_dmars() error path (Jerry Snitselaar) [2149474 2118428]
- x86/pci/xen: Use msi_msg shadow structs (Jerry Snitselaar) [2149474 2118428]
- iommu/intel: Use msi_msg shadow structs (Jerry Snitselaar) [2149474 2118428]
- PCI: MSI: Fix Kconfig dependencies for PCI_MSI_ARCH_FALLBACKS (Jerry Snitselaar) [2149474 2118428]
- x86/apic/msi: Unbreak DMAR and HPET MSI (Jerry Snitselaar) [2149474 2118428]
- iommu/amd: Remove domain search for PCI/MSI (Jerry Snitselaar) [2149474 2118428]
- iommu/vt-d: Remove domain search for PCI/MSI[X] (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Make most MSI ops XEN private (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Cleanup the arch_*_msi_irqs() leftovers (Jerry Snitselaar) [2149474 2118428]
- PCI/MSI: Make arch_.*_msi_irq[s] fallbacks selectable (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Wrap XEN MSI management into irqdomain (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Consolidate XEN-MSI init (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Rework MSI teardown (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Make xen_msi_init() static and rename it to xen_hvm_msi_init() (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Move apic_post_init() invocation to one place (Jerry Snitselaar) [2149474 2118428]
- x86/msi: Use generic MSI domain ops (Jerry Snitselaar) [2149474 2118428]
- x86/msi: Remove pointless vcpu_affinity callback (Jerry Snitselaar) [2149474 2118428]
- iommu/vt-d: Fix compile error with CONFIG_PCI_ATS not set (Myron Stowe) [2149474 2118428]
- iommu/vt-d: Cure VF irqdomain hickup (Myron Stowe) [2149474 2118428]
- x86/pci: Set default irq domain in pcibios_add_device() (Myron Stowe) [2149474 2118428]
- iommm/amd: Store irq domain in struct device (Myron Stowe) [2149474 2118428]
- iommm/vt-d: Store irq domain in struct device (Myron Stowe) [2149474 2118428]
- PCI/MSI: Provide pci_dev_has_special_msi_domain() helper (Myron Stowe) [2149474 2118428]
- x86/msi: Consolidate MSI allocation (Myron Stowe) [2149474 2118428]
- PCI/MSI: Rework pci_msi_domain_calc_hwirq() (Myron Stowe) [2149474 2118428]
- x86/irq: Consolidate UV domain allocation (Myron Stowe) [2149474 2118428]
- x86/irq: Consolidate DMAR irq allocation (Myron Stowe) [2149474 2118428]
- x86_ioapic_Consolidate_IOAPIC_allocation (Myron Stowe) [2149474 2118428]
- x86/msi: Consolidate HPET allocation (Myron Stowe) [2149474 2118428]
- iommu/irq_remapping: Consolidate irq domain lookup (Myron Stowe) [2149474 2118428]
- iommu/amd: Consolidate irq domain getter (Myron Stowe) [2149474 2118428]
- iommu/vt-d: Consolidate irq domain getter (Myron Stowe) [2149474 2118428]
- x86/irq: Add allocation type for parent domain retrieval (Myron Stowe) [2149474 2118428]
- irqdomain: Export irq_domain_update_bus_token (Myron Stowe) [2149474 2118428]
- gitlab-ci: use CI templates from production branch (Michael Hofmann)
- iavf: remove INITIAL_MAC_SET to allow gARP to work properly (Stefan Assmann) [2149745 1938635]
- Revert "scsi: iscsi: ql4xxx: Use per-session workqueue for unbinding" (Chris Leech) [2152734 2122624]
- Revert "scsi: iscsi: Use the session workqueue for recovery" (Chris Leech) [2152734 2122624]
- arm64/bpf: Remove 128MB limit for BPF JIT programs (Yauheni Kaliuta) [2152138 2140163]
- bpf: Define bpf_jit_alloc_exec_limit for arm64 JIT (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: add `type` and `data` fields (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: use `ex` for `exception_table_entry` (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: make fixup_exception() return bool (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: consolidate definitions (Yauheni Kaliuta) [2152138 2140163]
- arm64: kvm: use kvm_exception_table_entry (Yauheni Kaliuta) [2152138 2140163]
- be2net: Fix buffer overflow in be_get_module_eeprom (Josef Oskera) [2160182 2126917]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.14.1.el8_7]" date="1676030400">- ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems (Wei Huang) [2142170 2130653]
- KVM: x86: nSVM: implement nested LBR virtualization (Emanuele Giuseppe Esposito) [2166362 2155149]
- KVM: x86: nSVM: correctly virtualize LBR msrs when L2 is running (Emanuele Giuseppe Esposito) [2166362 2155149]
- kvm: x86: SVM: use vmcb* instead of svm-&gt;vmcb where it makes sense (Emanuele Giuseppe Esposito) [2166362 2155149]
- KVM: x86: nSVM: implement nested VMLOAD/VMSAVE (Emanuele Giuseppe Esposito) [2166362 2155149]
- IB/iser: Fix login with authentication (Kamal Heib) [2161750 2120676]
- act_mirred: use the backlog for nested calls to mirred ingress (Davide Caratti) [2164648 2131339] {CVE-2022-4269}
- net/sched: act_mirred: better wording on protection against excessive stack growth (Davide Caratti) [2164648 2131339] {CVE-2022-4269}
- redhat/configs: Set CONFIG_X86_AMD_PSTATE to 'm' (Prarit Bhargava) [2151275 2145246]
- KVM: x86: smm: preserve interrupt shadow in SMRAM (Maxim Levitsky) [2166368 2097144]
- KVM: x86: SVM: don't save SVM state to SMRAM when VM is not long mode capable (Maxim Levitsky) [2166368 2097144]
- KVM: x86: SVM: use smram structs (Maxim Levitsky) [2166368 2097144]
- KVM: svm: drop explicit return value of kvm_vcpu_map (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: use smram struct for 64 bit smram load/restore (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: use smram struct for 32 bit smram load/restore (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: use smram structs in the common code (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: add structs for KVM's smram layout (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: check for failures on smm entry (Maxim Levitsky) [2166368 2097144]
- KVM: x86: do not go through ctxt-&gt;ops when emulating rsm (Maxim Levitsky) [2166368 2097144]
- KVM: x86: move SMM exit to a new file (Maxim Levitsky) [2166368 2097144]
- KVM: x86: move SMM entry to a new file (Maxim Levitsky) [2166368 2097144]
- KVM: x86: start moving SMM-related functions to new files (Maxim Levitsky) [2166368 2097144]
- bug: introduce ASSERT_STRUCT_OFFSET (Maxim Levitsky) [2166368 2097144]
- KVM: x86: Rename and expose helper to detect if INIT/SIPI are allowed (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: number of GPRs in the SMRAM image depends on the image format (Maxim Levitsky) [2166368 2097144]
- KVM: x86: emulator: update the emulation mode after CR0 write (Maxim Levitsky) [2166368 2097144]
- KVM: x86: emulator: update the emulation mode after rsm (Maxim Levitsky) [2166368 2097144]
- KVM: x86: emulator: introduce emulator_recalc_and_set_mode (Maxim Levitsky) [2166368 2097144]
- KVM: x86: emulator: em_sysexit should update ctxt-&gt;mode (Maxim Levitsky) [2166368 2097144]
- KVM: x86: Bug the VM if the emulator accesses a non-existent GPR (Maxim Levitsky) [2166368 2097144]
- \KVM: x86: Reduce the number of emulator GPRs to '8' for 32-bit KVM (Maxim Levitsky) [2166368 2097144]
- KVM: x86: Use 16-bit fields to track dirty/valid emulator GPRs (Maxim Levitsky) [2166368 2097144]
- KVM: x86: Omit VCPU_REGS_RIP from emulator's _regs array (Maxim Levitsky) [2166368 2097144]
- \KVM: x86: Harden _regs accesses to guard against buggy input (Maxim Levitsky) [2166368 2097144]
- KVM: x86: Grab regs_dirty in local 'unsigned long' (Maxim Levitsky) [2166368 2097144]
- proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152571 2152572] {CVE-2022-4378}
- proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152571 2152572] {CVE-2022-4378}</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.15.1.el8_7]" date="1676548800">- net/mlx5e: Fix use-after-free when reverting termination table (Amir Tzin) [2167640 2112927]
- net/mlx5: Do not query pci info while pci disabled (Amir Tzin) [2167645 2129249]
- x86/fpu: Fix copy_xstate_to_uabi() to copy init states correctly (Dean Nelson) [2168384 2122850]
- x86/fpu: Exclude dynamic states from init_fpstate (Dean Nelson) [2168384 2122850]
- x86/fpu: Fix the init_fpstate size check with the actual size (Dean Nelson) [2168384 2122850]
- x86/fpu: Configure init_fpstate attributes orderly (Dean Nelson) [2168384 2122850]
- x86/fpu/xstate: Fix the ARCH_REQ_XCOMP_PERM implementation (Dean Nelson) [2168384 2122850]
- net/mlx5: E-Switch, properly handle ingress tagged packets on VST (Amir Tzin) [2166665 2096109]
- cpuhotplug: Fix KABI breakage (Prarit Bhargava) [2162763 2156529]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.16.1.el8_7]" date="1677153600">- ipv6: fix panic when fib_lookup_arg-&gt;result is fib6_info (Jiri Benc) [2167602 2140599]
- ceph: blocklist the kclient when receiving corrupted snap trace (Xiubo Li) [2168896 2162414]
- ceph: move mount state enum to super.h (Xiubo Li) [2168896 2162414]
- s390/kexec: fix ipl report address for kdump (Tobias Huschle) [2166296 2161328]
- mm, compaction: fix fast_isolate_around() to stay within boundaries (Daniel Vacek) [2170576 2149309]
- scsi: storvsc: Fix swiotlb bounce buffer leak in confidential VM (Emanuele Giuseppe Esposito) [2170228 2150659]
- netfilter: conntrack: handle tcp challenge acks during connection reuse (Florian Westphal) [2165587 2158726]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.17.1.el8_7]" date="1677844800">- net: mana: Add rmb after checking owner bits (Mohammed Gamal) [2173103 2139462]
- net: mana: Add support of XDP_REDIRECT action (Mohammed Gamal) [2173103 2139462]
- net: mana: Add the Linux MANA PF driver (Mohammed Gamal) [2173103 2139462]
- ice: fix lost multicast packets in promisc mode (Ken Cox) [2172550 2138215]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.18.0-425.18.1.el8_7]" date="1678449600">- futex: Resend potentially swallowed owner death notification (Rafael Aquini) [2170054 2161526]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.19.1.el8_7]" date="1678968000">- s390/dasd: fix no record found for raw_track_access (Tobias Huschle) [2167776 2161270]
- locking/rwsem: Disable preemption in all down_read*() and up_read() code paths (Waiman Long) [2170939 2162139]
- locking/rwsem: Prevent non-first waiter from spinning in down_write() slowpath (Waiman Long) [2170939 2162139]
- locking/rwsem: Allow slowpath writer to ignore handoff bit if not set by first waiter (Waiman Long) [2170939 2162139]
- locking/rwsem: Always try to wake waiters in out_nolock path (Waiman Long) [2170939 2162139]
- locking/rwsem: No need to check for handoff bit if wait queue empty (Waiman Long) [2170939 2162139]
- locking/rwsem: Make handoff bit handling more consistent (Waiman Long) [2170939 2162139]
- locking/rwsem: Disable preemption while trying for rwsem lock (Waiman Long) [2170939 2162139]
- locking/rwsem: Conditionally wake waiters in reader/writer slowpaths (Waiman Long) [2170939 2162139]
- locking: Make owner_on_cpu() into &lt;linux/sched.h&gt; (Waiman Long) [2170939 2162139]
- locking/rwsem: Optimize down_read_trylock() under highly contended case (Waiman Long) [2170939 2162139]
- locking/rwsem: Fix comments about reader optimistic lock stealing conditions (Waiman Long) [2170939 2162139]
- locking/rwsem: Disable preemption for spinning region (Waiman Long) [2170939 2162139]
- locking: Remove rcu_read_{,un}lock() for preempt_{dis,en}able() (Waiman Long) [2170939 2162139]
- watchdog: fix UAF in reboot notifier handling in watchdog core code (Wander Lairson Costa) [2139770 2131308]
- netfilter: nf_conntrack_irc: Tighten matching on DCC message (Wander Lairson Costa) [2139770 2131308]
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF (Jaroslav Kysela) [2163400 2163401] {CVE-2023-0266}
- net/mlx5e: Fix enabling sriov while tc nic rules are offloaded (Amir Tzin) [2167647 2112925]
- net/mlx5: E-Switch, pair only capable devices (Amir Tzin) [2167647 2112925]
- net/mlx5: Fix mlx5_get_next_dev() peer device matching (Amir Tzin) [2167647 2112925]
- net/mlx5: Lag, filter non compatible devices (Amir Tzin) [2167647 2112925]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.19.2.el8_7.gf5e8]" date="1678968001">- ovl: fail on invalid uid/gid mapping at copy up (Miklos Szeredi) [2165341 2165342] {CVE-2023-0386}</changelog>
</package>
<package pkgid="e26e905c3bbb41e6c2dfd7fd336fcc27a25aec7059126ed911f5ec21e67dd068" name="kernel-debug-core" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="425.10.1.el8_7"/>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.1.1.el8]" date="1663588800">- i40e: Fix kernel crash during module removal (Ivan Vecera) [2091489]
- redhat: enable zstream release numbering for rhel 8.7 (Jarod Wilson)
- ice: Allow operation with reduced device MSI-X (Petr Oros) [2102844]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.2.1.el8]" date="1664193600">- EDAC/ghes: Set the DIMM label unconditionally (Aristeu Rozanski) [2109712]
- configs: enable CONFIG_HP_ILO for aarch64 (Mark Salter) [2123508]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.3.1.el8]" date="1664539200">- iwlwifi: limit fw version for AC9560 to avoid fw crash (Íñigo Huguet) [2129297]
- sfc: fix null pointer dereference in efx_hard_start_xmit (Íñigo Huguet) [2119638]
- sfc: fix TX channel offset when using legacy interrupts (Íñigo Huguet) [2119638]
- netfilter: conntrack: reduce timeout when receiving out-of-window fin or rst (Florian Westphal) [2047366]
- netfilter: conntrack: remove unneeded indent level (Florian Westphal) [2047366]
- netfilter: conntrack: ignore overly delayed tcp packets (Florian Westphal) [2047366]
- netfilter: conntrack: prepare tcp_in_window for ternary return value (Florian Westphal) [2047366]
- netfilter: conntrack: remove pr_debug callsites from tcp tracker (Florian Westphal) [2047366]
- netfilter: conntrack: work around exceeded receive window (Florian Westphal) [2047366]
- netfilter: conntrack: improve RST handling when tuple is re-used (Florian Westphal) [2047366]
- netfilter: conntrack: avoid misleading 'invalid' in log message (Florian Westphal) [2047366]
- netfilter: remove BUG_ON() after skb_header_pointer() (Florian Westphal) [2047366]
- iavf: Detach device during reset task (Petr Oros) [2069206]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.4.1.el8]" date="1665144000">- random: allow reseeding DRBG with getrandom (Daiki Ueno) [2121766]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.5.1.el8_7]" date="1667476800">- ice: Fix interface being down after reset with link-down-on-close flag on (Petr Oros) [2136216 2024110]
- ice: Fix crash by keep old cfg when update TCs more than queues (Petr Oros) [2130992 2129902]
- ice: Fix tunnel checksum offload with fragmented traffic (Petr Oros) [2130992 2129902]
- ice: handle E822 generic device ID in PLDM header (Petr Oros) [2130992 2129902]
- ice: ethtool: Prohibit improper channel config for DCB (Petr Oros) [2130992 2129902]
- ice: ethtool: advertise 1000M speeds properly (Petr Oros) [2130992 2129902]
- ice: Fix switchdev rules book keeping (Petr Oros) [2130992 2129902]
- ice: fix access-beyond-end in the switch code (Petr Oros) [2130992 2129902]
- eth: ice: silence the GCC 12 array-bounds warning (Petr Oros) [2130992 2129902]
- ice: Expose RSS indirection tables for queue groups via ethtool (Petr Oros) [2130992 2129902]
- Revert "ice: Hide bus-info in ethtool for PRs in switchdev mode" (Petr Oros) [2130992 2129902]
- ice: remove period on argument description in ice_for_each_vf (Petr Oros) [2130992 2129902]
- ice: add a function comment for ice_cfg_mac_antispoof (Petr Oros) [2130992 2129902]
- ice: fix wording in comment for ice_reset_vf (Petr Oros) [2130992 2129902]
- ice: remove return value comment for ice_reset_all_vfs (Petr Oros) [2130992 2129902]
- ice: always check VF VSI pointer values (Petr Oros) [2130992 2129902]
- ice: add newline to dev_dbg in ice_vf_fdir_dump_info (Petr Oros) [2130992 2129902]
- ice: get switch id on switchdev devices (Petr Oros) [2130992 2129902]
- ice: return ENOSPC when exceeding ICE_MAX_CHAIN_WORDS (Petr Oros) [2130992 2129902]
- ice: introduce common helper for retrieving VSI by vsi_num (Petr Oros) [2130992 2129902]
- ice: use min_t() to make code cleaner in ice_gnss (Petr Oros) [2130992 2129902]
- ice: Add mpls+tso support (Petr Oros) [2130992 2129902]
- ice: switch: convert packet template match code to rodata (Petr Oros) [2130992 2129902]
- ice: switch: use convenience macros to declare dummy pkt templates (Petr Oros) [2130992 2129902]
- ice: switch: use a struct to pass packet template params (Petr Oros) [2130992 2129902]
- ice: switch: unobscurify bitops loop in ice_fill_adv_dummy_packet() (Petr Oros) [2130992 2129902]
- ice: switch: add and use u16[] aliases to ice_adv_lkup_elem::{h, m}_u (Petr Oros) [2130992 2129902]
- ice: Support GTP-U and GTP-C offload in switchdev (Petr Oros) [2130992 2129902]
- ice: Remove useless DMA-32 fallback configuration (Petr Oros) [2130992 2129902]
- ice: switch to napi_build_skb() (Petr Oros) [2130992 2129902]
- redhat: switch to z-stream dist tag and build targets (Jarod Wilson)
- block: avoid sign extend problem with default queue flags mask (Nico Pache) [2135813]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.6.1.el8_7]" date="1668168000">- ice: Add low latency Tx timestamp read (Petr Oros) [2136036 2092425]
- ice: introduce ice_ptp_reset_cached_phctime function (Petr Oros) [2136036 2092425]
- ice: re-arrange some static functions in ice_ptp.c (Petr Oros) [2136036 2092425]
- ice: track and warn when PHC update is late (Petr Oros) [2136036 2092425]
- ice: track Tx timestamp stats similar to other Intel drivers (Petr Oros) [2136036 2092425]
- ice: implement adjfine with mul_u64_u64_div_u64 (Petr Oros) [2136036 2092425]
- ice: Add EXTTS feature to the feature bitmap (Petr Oros) [2136036 2092425]
- math: Export mul_u64_u64_div_u64 (Petr Oros) [2136036 2092425]
- vfio/type1: Unpin zero pages (Alex Williamson) [2128515 2123015]
- net: atlantic: remove aq_nic_deinit() when resume (Íñigo Huguet) [2131935 2130839]
- net: atlantic: remove deep parameter on suspend/resume functions (Íñigo Huguet) [2131935 2130839]
- CI: Use zstream builder container (Veronika Kabatova)
- CI: Add disttag override for 8.7 (Veronika Kabatova)</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.7.1.el8_7]" date="1669723200">- ice: Add additional CSR registers to ETHTOOL_GREGS (Petr Oros) [2136513 2131024]
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps (Petr Oros) [2137270 2106964]
- i40e: Fix VF set max MTU size (Petr Oros) [2137270 2106964]
- iavf: Fix set max MTU size with port VLAN and jumbo frames (Petr Oros) [2137270 2106964]
- iavf: Fix bad page state (Petr Oros) [2137270 2106964]
- Revert "scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels" (Jarod Wilson)
- scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels (Tomas Henzl) [2139216]
- Revert "ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems" (Jarod Wilson)
- ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems (Wei Huang) [2142170 2130653]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.8.1.el8_7]" date="1669982400">- scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels (Tomas Henzl) [2139216 2134535]
- RDMA/mlx5: Set local port to one when accessing counters (Mohammad Kabat) [2141957 2077119]
- drm/mgag200: Fix PLL setup for G200_SE_A rev &gt;=4 (Jocelyn Falempe) [2140152 2130159]
- iavf: Do not restart Tx queues after reset task failure (Petr Oros) [2149081 2134005]
- iavf: Fix a crash during reset task (Petr Oros) [2149081 2134005]
- scsi: core: Allow the ALUA transitioning state enough time (Tomas Henzl) [2147374 2084250]
- scsi: core: Return BLK_STS_TRANSPORT for ALUA transitioning (Tomas Henzl) [2147374 2084250]
- i40e: Fix DMA mappings leak (Ivan Vecera) [2138205 2077847]
- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2142724 2142725] {CVE-2022-2964}
- net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2142724 2142725] {CVE-2022-2964}</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.9.1.el8_7]" date="1670587200">- Documentation/admin-guide: Document nomodeset kernel parameter (Jocelyn Falempe) [2145218 2143952]
- drm: Move nomodeset kernel parameter to the DRM subsystem (Jocelyn Falempe) [2145218 2143952]
- wait: Fix __wait_event_hrtimeout for RT/DL tasks (Derek Barbosa) [2138953 2125233]
- scsi: zfcp: Fix missing auto port scan and thus missing target ports (Tobias Huschle) [2127849 2121089]
- net: Fix return value of qdisc ingress handling on success (Ivan Vecera) [2141878 2131361]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.10.1.el8_7]" date="1671019200">- scsi: target: loop: Fix handling of aborted TMRs (Maurizio Lombardi) [2144583 2141713]
- ice: virtchnl rss hena support (Petr Oros) [2148130]
- ice: Fix configuring VIRTCHNL_OP_CONFIG_VSI_QUEUES with unbalanced queues (Michal Schmidt) [2142017 2137378]
- ice: Add support Flex RXD (Michal Schmidt) [2138157 2131310]
- netfilter: flowtable: fix stuck flows on cleanup due to pending work (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: add function to invoke garbage collection immediately (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: pass flowtable to nf_flow_table_iterate() (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: separate replace, destroy and stats to different workqueues (Phil Sutter) [2134084 2131370]
- x86/paravirt: Add a dummy __x86_paravirt_patch_template() function (Waiman Long) [2152206 2144161]
- x86/paravirt: Fix kABI breakage in struct pv_mmu_ops (Waiman Long) [2152206 2144161]
- drm/i915: fix TLB invalidation for Gen12 video and compute engines (Wander Lairson Costa) [2148149 2148150] {CVE-2022-4139}
- PCI: hv: Do not set PCI_COMMAND_MEMORY to reduce VM boot time (Emanuele Giuseppe Esposito) [2150912 2082836]
- iavf: Fix cached head and tail value for iavf_get_tx_pending (Stefan Assmann) [2149742 2103944]
- iavf: Fix change VF's mac address (Stefan Assmann) [2149742 2103944]
- iavf: Fix race between iavf_close and iavf_reset_task (Stefan Assmann) [2149742 2103944]
- net: ethernet: move from strlcpy with unused retval to strscpy (Stefan Assmann) [2149742 2103944]
- iavf: Fix 'tc qdisc show' listing too many queues (Stefan Assmann) [2149742 2103944]
- iavf: Fix max_rate limiting (Stefan Assmann) [2149742 2103944]
- iavf: Check for duplicate TC flower filter before parsing (Stefan Assmann) [2149742 2103944]
- iavf: Fix handling of dummy receive descriptors (Stefan Assmann) [2149742 2103944]
- iavf: Disallow changing rx/tx-frames and rx/tx-frames-irq (Stefan Assmann) [2149742 2103944]
- intel/iavf:fix repeated words in comments (Stefan Assmann) [2149742 2103944]
- intel: remove unused macros (Stefan Assmann) [2149742 2103944]
- iavf: Add waiting for response from PF in set mac (Stefan Assmann) [2149742 2103944]</changelog>
</package>
<package pkgid="7cce5addaf044897ebf65616d4aa171411d449ed9f185971e615fe255ef75da7" name="kernel-debug-core" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="425.13.1.el8_7"/>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.4.1.el8]" date="1665144000">- random: allow reseeding DRBG with getrandom (Daiki Ueno) [2121766]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.5.1.el8_7]" date="1667476800">- ice: Fix interface being down after reset with link-down-on-close flag on (Petr Oros) [2136216 2024110]
- ice: Fix crash by keep old cfg when update TCs more than queues (Petr Oros) [2130992 2129902]
- ice: Fix tunnel checksum offload with fragmented traffic (Petr Oros) [2130992 2129902]
- ice: handle E822 generic device ID in PLDM header (Petr Oros) [2130992 2129902]
- ice: ethtool: Prohibit improper channel config for DCB (Petr Oros) [2130992 2129902]
- ice: ethtool: advertise 1000M speeds properly (Petr Oros) [2130992 2129902]
- ice: Fix switchdev rules book keeping (Petr Oros) [2130992 2129902]
- ice: fix access-beyond-end in the switch code (Petr Oros) [2130992 2129902]
- eth: ice: silence the GCC 12 array-bounds warning (Petr Oros) [2130992 2129902]
- ice: Expose RSS indirection tables for queue groups via ethtool (Petr Oros) [2130992 2129902]
- Revert "ice: Hide bus-info in ethtool for PRs in switchdev mode" (Petr Oros) [2130992 2129902]
- ice: remove period on argument description in ice_for_each_vf (Petr Oros) [2130992 2129902]
- ice: add a function comment for ice_cfg_mac_antispoof (Petr Oros) [2130992 2129902]
- ice: fix wording in comment for ice_reset_vf (Petr Oros) [2130992 2129902]
- ice: remove return value comment for ice_reset_all_vfs (Petr Oros) [2130992 2129902]
- ice: always check VF VSI pointer values (Petr Oros) [2130992 2129902]
- ice: add newline to dev_dbg in ice_vf_fdir_dump_info (Petr Oros) [2130992 2129902]
- ice: get switch id on switchdev devices (Petr Oros) [2130992 2129902]
- ice: return ENOSPC when exceeding ICE_MAX_CHAIN_WORDS (Petr Oros) [2130992 2129902]
- ice: introduce common helper for retrieving VSI by vsi_num (Petr Oros) [2130992 2129902]
- ice: use min_t() to make code cleaner in ice_gnss (Petr Oros) [2130992 2129902]
- ice: Add mpls+tso support (Petr Oros) [2130992 2129902]
- ice: switch: convert packet template match code to rodata (Petr Oros) [2130992 2129902]
- ice: switch: use convenience macros to declare dummy pkt templates (Petr Oros) [2130992 2129902]
- ice: switch: use a struct to pass packet template params (Petr Oros) [2130992 2129902]
- ice: switch: unobscurify bitops loop in ice_fill_adv_dummy_packet() (Petr Oros) [2130992 2129902]
- ice: switch: add and use u16[] aliases to ice_adv_lkup_elem::{h, m}_u (Petr Oros) [2130992 2129902]
- ice: Support GTP-U and GTP-C offload in switchdev (Petr Oros) [2130992 2129902]
- ice: Remove useless DMA-32 fallback configuration (Petr Oros) [2130992 2129902]
- ice: switch to napi_build_skb() (Petr Oros) [2130992 2129902]
- redhat: switch to z-stream dist tag and build targets (Jarod Wilson)
- block: avoid sign extend problem with default queue flags mask (Nico Pache) [2135813]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.6.1.el8_7]" date="1668168000">- ice: Add low latency Tx timestamp read (Petr Oros) [2136036 2092425]
- ice: introduce ice_ptp_reset_cached_phctime function (Petr Oros) [2136036 2092425]
- ice: re-arrange some static functions in ice_ptp.c (Petr Oros) [2136036 2092425]
- ice: track and warn when PHC update is late (Petr Oros) [2136036 2092425]
- ice: track Tx timestamp stats similar to other Intel drivers (Petr Oros) [2136036 2092425]
- ice: implement adjfine with mul_u64_u64_div_u64 (Petr Oros) [2136036 2092425]
- ice: Add EXTTS feature to the feature bitmap (Petr Oros) [2136036 2092425]
- math: Export mul_u64_u64_div_u64 (Petr Oros) [2136036 2092425]
- vfio/type1: Unpin zero pages (Alex Williamson) [2128515 2123015]
- net: atlantic: remove aq_nic_deinit() when resume (Íñigo Huguet) [2131935 2130839]
- net: atlantic: remove deep parameter on suspend/resume functions (Íñigo Huguet) [2131935 2130839]
- CI: Use zstream builder container (Veronika Kabatova)
- CI: Add disttag override for 8.7 (Veronika Kabatova)</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.7.1.el8_7]" date="1669723200">- ice: Add additional CSR registers to ETHTOOL_GREGS (Petr Oros) [2136513 2131024]
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps (Petr Oros) [2137270 2106964]
- i40e: Fix VF set max MTU size (Petr Oros) [2137270 2106964]
- iavf: Fix set max MTU size with port VLAN and jumbo frames (Petr Oros) [2137270 2106964]
- iavf: Fix bad page state (Petr Oros) [2137270 2106964]
- Revert "scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels" (Jarod Wilson)
- scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels (Tomas Henzl) [2139216]
- Revert "ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems" (Jarod Wilson)
- ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems (Wei Huang) [2142170 2130653]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.8.1.el8_7]" date="1669982400">- scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels (Tomas Henzl) [2139216 2134535]
- RDMA/mlx5: Set local port to one when accessing counters (Mohammad Kabat) [2141957 2077119]
- drm/mgag200: Fix PLL setup for G200_SE_A rev &gt;=4 (Jocelyn Falempe) [2140152 2130159]
- iavf: Do not restart Tx queues after reset task failure (Petr Oros) [2149081 2134005]
- iavf: Fix a crash during reset task (Petr Oros) [2149081 2134005]
- scsi: core: Allow the ALUA transitioning state enough time (Tomas Henzl) [2147374 2084250]
- scsi: core: Return BLK_STS_TRANSPORT for ALUA transitioning (Tomas Henzl) [2147374 2084250]
- i40e: Fix DMA mappings leak (Ivan Vecera) [2138205 2077847]
- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2142724 2142725] {CVE-2022-2964}
- net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2142724 2142725] {CVE-2022-2964}</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.9.1.el8_7]" date="1670587200">- Documentation/admin-guide: Document nomodeset kernel parameter (Jocelyn Falempe) [2145218 2143952]
- drm: Move nomodeset kernel parameter to the DRM subsystem (Jocelyn Falempe) [2145218 2143952]
- wait: Fix __wait_event_hrtimeout for RT/DL tasks (Derek Barbosa) [2138953 2125233]
- scsi: zfcp: Fix missing auto port scan and thus missing target ports (Tobias Huschle) [2127849 2121089]
- net: Fix return value of qdisc ingress handling on success (Ivan Vecera) [2141878 2131361]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.10.1.el8_7]" date="1671019200">- scsi: target: loop: Fix handling of aborted TMRs (Maurizio Lombardi) [2144583 2141713]
- ice: virtchnl rss hena support (Petr Oros) [2148130]
- ice: Fix configuring VIRTCHNL_OP_CONFIG_VSI_QUEUES with unbalanced queues (Michal Schmidt) [2142017 2137378]
- ice: Add support Flex RXD (Michal Schmidt) [2138157 2131310]
- netfilter: flowtable: fix stuck flows on cleanup due to pending work (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: add function to invoke garbage collection immediately (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: pass flowtable to nf_flow_table_iterate() (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: separate replace, destroy and stats to different workqueues (Phil Sutter) [2134084 2131370]
- x86/paravirt: Add a dummy __x86_paravirt_patch_template() function (Waiman Long) [2152206 2144161]
- x86/paravirt: Fix kABI breakage in struct pv_mmu_ops (Waiman Long) [2152206 2144161]
- drm/i915: fix TLB invalidation for Gen12 video and compute engines (Wander Lairson Costa) [2148149 2148150] {CVE-2022-4139}
- PCI: hv: Do not set PCI_COMMAND_MEMORY to reduce VM boot time (Emanuele Giuseppe Esposito) [2150912 2082836]
- iavf: Fix cached head and tail value for iavf_get_tx_pending (Stefan Assmann) [2149742 2103944]
- iavf: Fix change VF's mac address (Stefan Assmann) [2149742 2103944]
- iavf: Fix race between iavf_close and iavf_reset_task (Stefan Assmann) [2149742 2103944]
- net: ethernet: move from strlcpy with unused retval to strscpy (Stefan Assmann) [2149742 2103944]
- iavf: Fix 'tc qdisc show' listing too many queues (Stefan Assmann) [2149742 2103944]
- iavf: Fix max_rate limiting (Stefan Assmann) [2149742 2103944]
- iavf: Check for duplicate TC flower filter before parsing (Stefan Assmann) [2149742 2103944]
- iavf: Fix handling of dummy receive descriptors (Stefan Assmann) [2149742 2103944]
- iavf: Disallow changing rx/tx-frames and rx/tx-frames-irq (Stefan Assmann) [2149742 2103944]
- intel/iavf:fix repeated words in comments (Stefan Assmann) [2149742 2103944]
- intel: remove unused macros (Stefan Assmann) [2149742 2103944]
- iavf: Add waiting for response from PF in set mac (Stefan Assmann) [2149742 2103944]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.11.1.el8_7]" date="1673006400">- NFSD: Protect against send buffer overflow in NFSv3 READ (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv2 READ (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv3 READDIR (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv2 READDIR (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- SUNRPC: Fix svcxdr_init_encode's buflen calculation (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- SUNRPC: Fix svcxdr_init_decode's end-of-buffer calculation (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- panic, kexec: make __crash_kexec() NMI safe (Valentin Schneider) [2139580 2134126]
- kexec: turn all kexec_mutex acquisitions into trylocks (Valentin Schneider) [2139580 2134126]
- kexec: move locking into do_kexec_load (Valentin Schneider) [2139580 2134126]
- vdpa/mlx5: re-create forwarding rules after mac modified (Laurent Vivier) [2152912 2145136]
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry (Waiman Long) [2153653 2108387]
- irq: Call tick_irq_enter() inside HARDIRQ_OFFSET (Waiman Long) [2153653 2108387]
- irqtime: Move irqtime entry accounting after irq offset incrementation (Waiman Long) [2153653 2108387]
- sched/vtime: Consolidate IRQ time accounting (Waiman Long) [2153653 2108387]
- s390/vtime: Use the generic IRQ entry accounting (Waiman Long) [2153653 2108387]
- sched/cputime: Remove symbol exports from IRQ time accounting (Waiman Long) [2153653 2108387]
- genirq/irqdomain: Don't try to free an interrupt that has no mapping (Waiman Long) [2153653 2108387]
- genirq: Provide __irq_enter/exit_raw() (Waiman Long) [2153653 2108387]
- powerpc/time: Only set CONFIG_ARCH_HAS_SCALED_CPUTIME on PPC64 (Waiman Long) [2153653 2108387]
- powerpc/time: isolate scaled cputime accounting in dedicated functions. (Waiman Long) [2153653 2108387]
- PCI: hv: Fix synchronization between channel callback and hv_pci_bus_exit() (Mohammed Gamal) [2155280 2144708]
- PCI: hv: Fix synchronization between channel callback and hv_compose_msi_msg() (Mohammed Gamal) [2155280 2144708]
- PCI: hv: Use vmbus_requestor to generate transaction IDs for VMbus hardening (Mohammed Gamal) [2155280 2144708]
- net/mlx5e: TC, Reject forwarding from internal port to internal port (Mohammad Kabat) [2141959 2131345]
- hv_netvsc: Fix race between VF offering and VF association message from host (Mohammed Gamal) [2155272 2149279]
- x86/mce: Reduce number of machine checks taken during recovery (Prarit Bhargava) [2137592 2104388]
- cgroup/cpuset: Reduce cpuset_rwsem writer latency (Waiman Long) [2153108 2149031]
- rcu/exp: Mark current CPU as exp-QS in IPI loop second pass (Waiman Long) [2153108 2149031]
- rcu: Always inline rcu_dynticks_task*_{enter,exit}() (Waiman Long) [2153108 2149031]
- rcu: Fix existing exp request check in sync_sched_exp_online_cleanup() (Waiman Long) [2153108 2149031]
- rcu: Fix macro name CONFIG_TASKS_RCU_TRACE (Waiman Long) [2153108 2149031]
- rcu: Fix stall-warning deadlock due to non-release of rcu_node -&gt;lock (Waiman Long) [2153108 2149031]
- rcu: Fix to include first blocked task in stall warning (Waiman Long) [2153108 2149031]
- cgroup: Use cgroup_attach_{lock,unlock}() from cgroup_attach_task_all() (Waiman Long) [2153108 2149031]
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all() (Waiman Long) [2153108 2149031]
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock (Waiman Long) [2153108 2149031]
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree (Waiman Long) [2153108 2149031]
- cgroup/cpuset: Fix a race between cpuset_attach() and cpu hotplug (Waiman Long) [2153108 2149031]
- cgroup: reduce dependency on cgroup_mutex (Waiman Long) [2153108 2149031]
- sunrpc: Set sk_allocation to GFP_NOFS to avoid using current-&gt;task_frag. (Guillaume Nault) [2153230 2089660]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.12.1.el8_7]" date="1674129600">- x86/fpu: Prevent FPU state corruption (Oleksandr Natalenko) [2134586 2130890]
- x86/fpu: Drop fpregs lock before inheriting FPU permissions (Eder Zulian) [2154460 2153549]
- kernel-doc: fix undefined args variable (Jan Stancek) [2157905 2134954]
- mm: memcontrol: fix potential oom_lock recursion deadlock (Waiman Long) [2157922 2138886]
- memcg: prohibit unconditional exceeding the limit of dying tasks (Waiman Long) [2157922 2138886]
- mm, oom: do not trigger out_of_memory from the #PF (Waiman Long) [2157922 2138886]
- mm, oom: pagefault_out_of_memory: don't force global OOM for dying tasks (Waiman Long) [2157922 2138886]
- mm: memcontrol: don't count limit-setting reclaim as memory pressure (Waiman Long) [2157922 2138886]
- KVM: s390: vsie: Fix the initialization of the epoch extension (epdx) field (Thomas Huth) [2158813 2151854]
- net: mana: Fix race on per-CQ variable napi work_done (Emanuele Giuseppe Esposito) [2155437 2151722]
- mei: me: add adler lake point S DID (Prarit Bhargava) [2141783 2141602]
- PCI: hv: Only reuse existing IRTE allocation for Multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix the definition of vector in hv_compose_msi_msg() (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix interrupt mapping for multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Reuse existing IRTE allocation in compose_msi_msg() (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix hv_arch_irq_unmask() for multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix multi-MSI to allow more than one MSI vector (Emanuele Giuseppe Esposito) [2155289 2100275]
- drm/ast: Support multiple outputs (Jarod Wilson) [2149287 2147553]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.13.1.el8_7]" date="1675339200">- mm/cgroup/reclaim: fix dirty pages throttling on cgroup v1 (Waiman Long) [2160221]
- mm: vmscan: remove deadlock due to throttling failing to make progress (Waiman Long) [2160221]
- mm: vmscan: reduce throttling due to a failure to make progress -fix (Waiman Long) [2160221]
- mm: vmscan: Reduce throttling due to a failure to make progress (Waiman Long) [2160221]
- mm/vmscan: delay waking of tasks throttled on NOPROGRESS (Waiman Long) [2160221]
- mm/vmscan: increase the timeout if page reclaim is not making progress (Waiman Long) [2160221]
- mm/vmscan: centralise timeout values for reclaim_throttle (Waiman Long) [2160221]
- mm/page_alloc: remove the throttling logic from the page allocator (Waiman Long) [2160221]
- mm/writeback: throttle based on page writeback instead of congestion (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim when no progress is being made (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim and compaction when too may pages are isolated (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim until some writeback completes if congested (Waiman Long) [2160221]
- mm/vmscan.c: delete or fix duplicated words (Waiman Long) [2160221]
- mm,page_alloc: PF_WQ_WORKER threads must sleep at should_reclaim_retry() (Nico Pache) [2160221]
- ceph: avoid putting the realm twice when decoding snaps fails (Xiubo Li) [2155797 2139881]
- mm/mremap: hold the rmap lock in write mode when moving page table entries. (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: use pmd/pud_poplulate to update page table entries (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: don't enable optimized PUD move if page table levels is 2 (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: convert huge PUD move to separate helper (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: fix BUILD_BUG_ON() error in get_extent (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap.c: fix extent calculation (Waiman Long) [2140944] {CVE-2022-41222}
- x86: mremap speedup - Enable HAVE_MOVE_PUD (Waiman Long) [2140944] {CVE-2022-41222}
- mm: speedup mremap on 1GB or larger regions (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: start addresses are properly aligned (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: calculate extent in one place (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: it is sure to have enough space when extent meets requirement (Waiman Long) [2140944] {CVE-2022-41222}
- s390/boot: add secure boot trailer (Tobias Huschle) [2151530 2141967]
- i40e: Fix VF hang when reset is triggered on another VF (Ivan Vecera) [2160460 2103801]
- i2c: ismt: Fix an out-of-bounds bug in ismt_access() (Prarit Bhargava) [2154388 2119066] {CVE-2022-2873}
- iavf: schedule watchdog immediately when changing primary MAC (Michal Schmidt) [2163257 2152493]
- iavf: Move netdev_update_features() into watchdog task (Michal Schmidt) [2163257 2152493]
- iavf: fix temporary deadlock and failure to set MAC address (Michal Schmidt) [2163257 2152493]
- iavf: Fix error handling in iavf_init_module() (Michal Schmidt) [2163257 2152493]
- iommu/vt-d: Clean up si_domain in the init_dmars() error path (Jerry Snitselaar) [2149474 2118428]
- x86/pci/xen: Use msi_msg shadow structs (Jerry Snitselaar) [2149474 2118428]
- iommu/intel: Use msi_msg shadow structs (Jerry Snitselaar) [2149474 2118428]
- PCI: MSI: Fix Kconfig dependencies for PCI_MSI_ARCH_FALLBACKS (Jerry Snitselaar) [2149474 2118428]
- x86/apic/msi: Unbreak DMAR and HPET MSI (Jerry Snitselaar) [2149474 2118428]
- iommu/amd: Remove domain search for PCI/MSI (Jerry Snitselaar) [2149474 2118428]
- iommu/vt-d: Remove domain search for PCI/MSI[X] (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Make most MSI ops XEN private (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Cleanup the arch_*_msi_irqs() leftovers (Jerry Snitselaar) [2149474 2118428]
- PCI/MSI: Make arch_.*_msi_irq[s] fallbacks selectable (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Wrap XEN MSI management into irqdomain (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Consolidate XEN-MSI init (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Rework MSI teardown (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Make xen_msi_init() static and rename it to xen_hvm_msi_init() (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Move apic_post_init() invocation to one place (Jerry Snitselaar) [2149474 2118428]
- x86/msi: Use generic MSI domain ops (Jerry Snitselaar) [2149474 2118428]
- x86/msi: Remove pointless vcpu_affinity callback (Jerry Snitselaar) [2149474 2118428]
- iommu/vt-d: Fix compile error with CONFIG_PCI_ATS not set (Myron Stowe) [2149474 2118428]
- iommu/vt-d: Cure VF irqdomain hickup (Myron Stowe) [2149474 2118428]
- x86/pci: Set default irq domain in pcibios_add_device() (Myron Stowe) [2149474 2118428]
- iommm/amd: Store irq domain in struct device (Myron Stowe) [2149474 2118428]
- iommm/vt-d: Store irq domain in struct device (Myron Stowe) [2149474 2118428]
- PCI/MSI: Provide pci_dev_has_special_msi_domain() helper (Myron Stowe) [2149474 2118428]
- x86/msi: Consolidate MSI allocation (Myron Stowe) [2149474 2118428]
- PCI/MSI: Rework pci_msi_domain_calc_hwirq() (Myron Stowe) [2149474 2118428]
- x86/irq: Consolidate UV domain allocation (Myron Stowe) [2149474 2118428]
- x86/irq: Consolidate DMAR irq allocation (Myron Stowe) [2149474 2118428]
- x86_ioapic_Consolidate_IOAPIC_allocation (Myron Stowe) [2149474 2118428]
- x86/msi: Consolidate HPET allocation (Myron Stowe) [2149474 2118428]
- iommu/irq_remapping: Consolidate irq domain lookup (Myron Stowe) [2149474 2118428]
- iommu/amd: Consolidate irq domain getter (Myron Stowe) [2149474 2118428]
- iommu/vt-d: Consolidate irq domain getter (Myron Stowe) [2149474 2118428]
- x86/irq: Add allocation type for parent domain retrieval (Myron Stowe) [2149474 2118428]
- irqdomain: Export irq_domain_update_bus_token (Myron Stowe) [2149474 2118428]
- gitlab-ci: use CI templates from production branch (Michael Hofmann)
- iavf: remove INITIAL_MAC_SET to allow gARP to work properly (Stefan Assmann) [2149745 1938635]
- Revert "scsi: iscsi: ql4xxx: Use per-session workqueue for unbinding" (Chris Leech) [2152734 2122624]
- Revert "scsi: iscsi: Use the session workqueue for recovery" (Chris Leech) [2152734 2122624]
- arm64/bpf: Remove 128MB limit for BPF JIT programs (Yauheni Kaliuta) [2152138 2140163]
- bpf: Define bpf_jit_alloc_exec_limit for arm64 JIT (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: add `type` and `data` fields (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: use `ex` for `exception_table_entry` (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: make fixup_exception() return bool (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: consolidate definitions (Yauheni Kaliuta) [2152138 2140163]
- arm64: kvm: use kvm_exception_table_entry (Yauheni Kaliuta) [2152138 2140163]
- be2net: Fix buffer overflow in be_get_module_eeprom (Josef Oskera) [2160182 2126917]</changelog>
</package>
<package pkgid="6db1697537823a3cb55cac718da955260dfad0b400db7cdd4d4e1136abd5efc6" name="kernel-debug-core" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="425.19.2.el8_7"/>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.11.1.el8_7]" date="1673006400">- NFSD: Protect against send buffer overflow in NFSv3 READ (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv2 READ (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv3 READDIR (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv2 READDIR (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- SUNRPC: Fix svcxdr_init_encode's buflen calculation (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- SUNRPC: Fix svcxdr_init_decode's end-of-buffer calculation (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- panic, kexec: make __crash_kexec() NMI safe (Valentin Schneider) [2139580 2134126]
- kexec: turn all kexec_mutex acquisitions into trylocks (Valentin Schneider) [2139580 2134126]
- kexec: move locking into do_kexec_load (Valentin Schneider) [2139580 2134126]
- vdpa/mlx5: re-create forwarding rules after mac modified (Laurent Vivier) [2152912 2145136]
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry (Waiman Long) [2153653 2108387]
- irq: Call tick_irq_enter() inside HARDIRQ_OFFSET (Waiman Long) [2153653 2108387]
- irqtime: Move irqtime entry accounting after irq offset incrementation (Waiman Long) [2153653 2108387]
- sched/vtime: Consolidate IRQ time accounting (Waiman Long) [2153653 2108387]
- s390/vtime: Use the generic IRQ entry accounting (Waiman Long) [2153653 2108387]
- sched/cputime: Remove symbol exports from IRQ time accounting (Waiman Long) [2153653 2108387]
- genirq/irqdomain: Don't try to free an interrupt that has no mapping (Waiman Long) [2153653 2108387]
- genirq: Provide __irq_enter/exit_raw() (Waiman Long) [2153653 2108387]
- powerpc/time: Only set CONFIG_ARCH_HAS_SCALED_CPUTIME on PPC64 (Waiman Long) [2153653 2108387]
- powerpc/time: isolate scaled cputime accounting in dedicated functions. (Waiman Long) [2153653 2108387]
- PCI: hv: Fix synchronization between channel callback and hv_pci_bus_exit() (Mohammed Gamal) [2155280 2144708]
- PCI: hv: Fix synchronization between channel callback and hv_compose_msi_msg() (Mohammed Gamal) [2155280 2144708]
- PCI: hv: Use vmbus_requestor to generate transaction IDs for VMbus hardening (Mohammed Gamal) [2155280 2144708]
- net/mlx5e: TC, Reject forwarding from internal port to internal port (Mohammad Kabat) [2141959 2131345]
- hv_netvsc: Fix race between VF offering and VF association message from host (Mohammed Gamal) [2155272 2149279]
- x86/mce: Reduce number of machine checks taken during recovery (Prarit Bhargava) [2137592 2104388]
- cgroup/cpuset: Reduce cpuset_rwsem writer latency (Waiman Long) [2153108 2149031]
- rcu/exp: Mark current CPU as exp-QS in IPI loop second pass (Waiman Long) [2153108 2149031]
- rcu: Always inline rcu_dynticks_task*_{enter,exit}() (Waiman Long) [2153108 2149031]
- rcu: Fix existing exp request check in sync_sched_exp_online_cleanup() (Waiman Long) [2153108 2149031]
- rcu: Fix macro name CONFIG_TASKS_RCU_TRACE (Waiman Long) [2153108 2149031]
- rcu: Fix stall-warning deadlock due to non-release of rcu_node -&gt;lock (Waiman Long) [2153108 2149031]
- rcu: Fix to include first blocked task in stall warning (Waiman Long) [2153108 2149031]
- cgroup: Use cgroup_attach_{lock,unlock}() from cgroup_attach_task_all() (Waiman Long) [2153108 2149031]
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all() (Waiman Long) [2153108 2149031]
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock (Waiman Long) [2153108 2149031]
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree (Waiman Long) [2153108 2149031]
- cgroup/cpuset: Fix a race between cpuset_attach() and cpu hotplug (Waiman Long) [2153108 2149031]
- cgroup: reduce dependency on cgroup_mutex (Waiman Long) [2153108 2149031]
- sunrpc: Set sk_allocation to GFP_NOFS to avoid using current-&gt;task_frag. (Guillaume Nault) [2153230 2089660]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.12.1.el8_7]" date="1674129600">- x86/fpu: Prevent FPU state corruption (Oleksandr Natalenko) [2134586 2130890]
- x86/fpu: Drop fpregs lock before inheriting FPU permissions (Eder Zulian) [2154460 2153549]
- kernel-doc: fix undefined args variable (Jan Stancek) [2157905 2134954]
- mm: memcontrol: fix potential oom_lock recursion deadlock (Waiman Long) [2157922 2138886]
- memcg: prohibit unconditional exceeding the limit of dying tasks (Waiman Long) [2157922 2138886]
- mm, oom: do not trigger out_of_memory from the #PF (Waiman Long) [2157922 2138886]
- mm, oom: pagefault_out_of_memory: don't force global OOM for dying tasks (Waiman Long) [2157922 2138886]
- mm: memcontrol: don't count limit-setting reclaim as memory pressure (Waiman Long) [2157922 2138886]
- KVM: s390: vsie: Fix the initialization of the epoch extension (epdx) field (Thomas Huth) [2158813 2151854]
- net: mana: Fix race on per-CQ variable napi work_done (Emanuele Giuseppe Esposito) [2155437 2151722]
- mei: me: add adler lake point S DID (Prarit Bhargava) [2141783 2141602]
- PCI: hv: Only reuse existing IRTE allocation for Multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix the definition of vector in hv_compose_msi_msg() (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix interrupt mapping for multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Reuse existing IRTE allocation in compose_msi_msg() (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix hv_arch_irq_unmask() for multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix multi-MSI to allow more than one MSI vector (Emanuele Giuseppe Esposito) [2155289 2100275]
- drm/ast: Support multiple outputs (Jarod Wilson) [2149287 2147553]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.13.1.el8_7]" date="1675339200">- mm/cgroup/reclaim: fix dirty pages throttling on cgroup v1 (Waiman Long) [2160221]
- mm: vmscan: remove deadlock due to throttling failing to make progress (Waiman Long) [2160221]
- mm: vmscan: reduce throttling due to a failure to make progress -fix (Waiman Long) [2160221]
- mm: vmscan: Reduce throttling due to a failure to make progress (Waiman Long) [2160221]
- mm/vmscan: delay waking of tasks throttled on NOPROGRESS (Waiman Long) [2160221]
- mm/vmscan: increase the timeout if page reclaim is not making progress (Waiman Long) [2160221]
- mm/vmscan: centralise timeout values for reclaim_throttle (Waiman Long) [2160221]
- mm/page_alloc: remove the throttling logic from the page allocator (Waiman Long) [2160221]
- mm/writeback: throttle based on page writeback instead of congestion (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim when no progress is being made (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim and compaction when too may pages are isolated (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim until some writeback completes if congested (Waiman Long) [2160221]
- mm/vmscan.c: delete or fix duplicated words (Waiman Long) [2160221]
- mm,page_alloc: PF_WQ_WORKER threads must sleep at should_reclaim_retry() (Nico Pache) [2160221]
- ceph: avoid putting the realm twice when decoding snaps fails (Xiubo Li) [2155797 2139881]
- mm/mremap: hold the rmap lock in write mode when moving page table entries. (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: use pmd/pud_poplulate to update page table entries (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: don't enable optimized PUD move if page table levels is 2 (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: convert huge PUD move to separate helper (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: fix BUILD_BUG_ON() error in get_extent (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap.c: fix extent calculation (Waiman Long) [2140944] {CVE-2022-41222}
- x86: mremap speedup - Enable HAVE_MOVE_PUD (Waiman Long) [2140944] {CVE-2022-41222}
- mm: speedup mremap on 1GB or larger regions (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: start addresses are properly aligned (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: calculate extent in one place (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: it is sure to have enough space when extent meets requirement (Waiman Long) [2140944] {CVE-2022-41222}
- s390/boot: add secure boot trailer (Tobias Huschle) [2151530 2141967]
- i40e: Fix VF hang when reset is triggered on another VF (Ivan Vecera) [2160460 2103801]
- i2c: ismt: Fix an out-of-bounds bug in ismt_access() (Prarit Bhargava) [2154388 2119066] {CVE-2022-2873}
- iavf: schedule watchdog immediately when changing primary MAC (Michal Schmidt) [2163257 2152493]
- iavf: Move netdev_update_features() into watchdog task (Michal Schmidt) [2163257 2152493]
- iavf: fix temporary deadlock and failure to set MAC address (Michal Schmidt) [2163257 2152493]
- iavf: Fix error handling in iavf_init_module() (Michal Schmidt) [2163257 2152493]
- iommu/vt-d: Clean up si_domain in the init_dmars() error path (Jerry Snitselaar) [2149474 2118428]
- x86/pci/xen: Use msi_msg shadow structs (Jerry Snitselaar) [2149474 2118428]
- iommu/intel: Use msi_msg shadow structs (Jerry Snitselaar) [2149474 2118428]
- PCI: MSI: Fix Kconfig dependencies for PCI_MSI_ARCH_FALLBACKS (Jerry Snitselaar) [2149474 2118428]
- x86/apic/msi: Unbreak DMAR and HPET MSI (Jerry Snitselaar) [2149474 2118428]
- iommu/amd: Remove domain search for PCI/MSI (Jerry Snitselaar) [2149474 2118428]
- iommu/vt-d: Remove domain search for PCI/MSI[X] (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Make most MSI ops XEN private (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Cleanup the arch_*_msi_irqs() leftovers (Jerry Snitselaar) [2149474 2118428]
- PCI/MSI: Make arch_.*_msi_irq[s] fallbacks selectable (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Wrap XEN MSI management into irqdomain (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Consolidate XEN-MSI init (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Rework MSI teardown (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Make xen_msi_init() static and rename it to xen_hvm_msi_init() (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Move apic_post_init() invocation to one place (Jerry Snitselaar) [2149474 2118428]
- x86/msi: Use generic MSI domain ops (Jerry Snitselaar) [2149474 2118428]
- x86/msi: Remove pointless vcpu_affinity callback (Jerry Snitselaar) [2149474 2118428]
- iommu/vt-d: Fix compile error with CONFIG_PCI_ATS not set (Myron Stowe) [2149474 2118428]
- iommu/vt-d: Cure VF irqdomain hickup (Myron Stowe) [2149474 2118428]
- x86/pci: Set default irq domain in pcibios_add_device() (Myron Stowe) [2149474 2118428]
- iommm/amd: Store irq domain in struct device (Myron Stowe) [2149474 2118428]
- iommm/vt-d: Store irq domain in struct device (Myron Stowe) [2149474 2118428]
- PCI/MSI: Provide pci_dev_has_special_msi_domain() helper (Myron Stowe) [2149474 2118428]
- x86/msi: Consolidate MSI allocation (Myron Stowe) [2149474 2118428]
- PCI/MSI: Rework pci_msi_domain_calc_hwirq() (Myron Stowe) [2149474 2118428]
- x86/irq: Consolidate UV domain allocation (Myron Stowe) [2149474 2118428]
- x86/irq: Consolidate DMAR irq allocation (Myron Stowe) [2149474 2118428]
- x86_ioapic_Consolidate_IOAPIC_allocation (Myron Stowe) [2149474 2118428]
- x86/msi: Consolidate HPET allocation (Myron Stowe) [2149474 2118428]
- iommu/irq_remapping: Consolidate irq domain lookup (Myron Stowe) [2149474 2118428]
- iommu/amd: Consolidate irq domain getter (Myron Stowe) [2149474 2118428]
- iommu/vt-d: Consolidate irq domain getter (Myron Stowe) [2149474 2118428]
- x86/irq: Add allocation type for parent domain retrieval (Myron Stowe) [2149474 2118428]
- irqdomain: Export irq_domain_update_bus_token (Myron Stowe) [2149474 2118428]
- gitlab-ci: use CI templates from production branch (Michael Hofmann)
- iavf: remove INITIAL_MAC_SET to allow gARP to work properly (Stefan Assmann) [2149745 1938635]
- Revert "scsi: iscsi: ql4xxx: Use per-session workqueue for unbinding" (Chris Leech) [2152734 2122624]
- Revert "scsi: iscsi: Use the session workqueue for recovery" (Chris Leech) [2152734 2122624]
- arm64/bpf: Remove 128MB limit for BPF JIT programs (Yauheni Kaliuta) [2152138 2140163]
- bpf: Define bpf_jit_alloc_exec_limit for arm64 JIT (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: add `type` and `data` fields (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: use `ex` for `exception_table_entry` (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: make fixup_exception() return bool (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: consolidate definitions (Yauheni Kaliuta) [2152138 2140163]
- arm64: kvm: use kvm_exception_table_entry (Yauheni Kaliuta) [2152138 2140163]
- be2net: Fix buffer overflow in be_get_module_eeprom (Josef Oskera) [2160182 2126917]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.14.1.el8_7]" date="1676030400">- ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems (Wei Huang) [2142170 2130653]
- KVM: x86: nSVM: implement nested LBR virtualization (Emanuele Giuseppe Esposito) [2166362 2155149]
- KVM: x86: nSVM: correctly virtualize LBR msrs when L2 is running (Emanuele Giuseppe Esposito) [2166362 2155149]
- kvm: x86: SVM: use vmcb* instead of svm-&gt;vmcb where it makes sense (Emanuele Giuseppe Esposito) [2166362 2155149]
- KVM: x86: nSVM: implement nested VMLOAD/VMSAVE (Emanuele Giuseppe Esposito) [2166362 2155149]
- IB/iser: Fix login with authentication (Kamal Heib) [2161750 2120676]
- act_mirred: use the backlog for nested calls to mirred ingress (Davide Caratti) [2164648 2131339] {CVE-2022-4269}
- net/sched: act_mirred: better wording on protection against excessive stack growth (Davide Caratti) [2164648 2131339] {CVE-2022-4269}
- redhat/configs: Set CONFIG_X86_AMD_PSTATE to 'm' (Prarit Bhargava) [2151275 2145246]
- KVM: x86: smm: preserve interrupt shadow in SMRAM (Maxim Levitsky) [2166368 2097144]
- KVM: x86: SVM: don't save SVM state to SMRAM when VM is not long mode capable (Maxim Levitsky) [2166368 2097144]
- KVM: x86: SVM: use smram structs (Maxim Levitsky) [2166368 2097144]
- KVM: svm: drop explicit return value of kvm_vcpu_map (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: use smram struct for 64 bit smram load/restore (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: use smram struct for 32 bit smram load/restore (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: use smram structs in the common code (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: add structs for KVM's smram layout (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: check for failures on smm entry (Maxim Levitsky) [2166368 2097144]
- KVM: x86: do not go through ctxt-&gt;ops when emulating rsm (Maxim Levitsky) [2166368 2097144]
- KVM: x86: move SMM exit to a new file (Maxim Levitsky) [2166368 2097144]
- KVM: x86: move SMM entry to a new file (Maxim Levitsky) [2166368 2097144]
- KVM: x86: start moving SMM-related functions to new files (Maxim Levitsky) [2166368 2097144]
- bug: introduce ASSERT_STRUCT_OFFSET (Maxim Levitsky) [2166368 2097144]
- KVM: x86: Rename and expose helper to detect if INIT/SIPI are allowed (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: number of GPRs in the SMRAM image depends on the image format (Maxim Levitsky) [2166368 2097144]
- KVM: x86: emulator: update the emulation mode after CR0 write (Maxim Levitsky) [2166368 2097144]
- KVM: x86: emulator: update the emulation mode after rsm (Maxim Levitsky) [2166368 2097144]
- KVM: x86: emulator: introduce emulator_recalc_and_set_mode (Maxim Levitsky) [2166368 2097144]
- KVM: x86: emulator: em_sysexit should update ctxt-&gt;mode (Maxim Levitsky) [2166368 2097144]
- KVM: x86: Bug the VM if the emulator accesses a non-existent GPR (Maxim Levitsky) [2166368 2097144]
- \KVM: x86: Reduce the number of emulator GPRs to '8' for 32-bit KVM (Maxim Levitsky) [2166368 2097144]
- KVM: x86: Use 16-bit fields to track dirty/valid emulator GPRs (Maxim Levitsky) [2166368 2097144]
- KVM: x86: Omit VCPU_REGS_RIP from emulator's _regs array (Maxim Levitsky) [2166368 2097144]
- \KVM: x86: Harden _regs accesses to guard against buggy input (Maxim Levitsky) [2166368 2097144]
- KVM: x86: Grab regs_dirty in local 'unsigned long' (Maxim Levitsky) [2166368 2097144]
- proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152571 2152572] {CVE-2022-4378}
- proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152571 2152572] {CVE-2022-4378}</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.15.1.el8_7]" date="1676548800">- net/mlx5e: Fix use-after-free when reverting termination table (Amir Tzin) [2167640 2112927]
- net/mlx5: Do not query pci info while pci disabled (Amir Tzin) [2167645 2129249]
- x86/fpu: Fix copy_xstate_to_uabi() to copy init states correctly (Dean Nelson) [2168384 2122850]
- x86/fpu: Exclude dynamic states from init_fpstate (Dean Nelson) [2168384 2122850]
- x86/fpu: Fix the init_fpstate size check with the actual size (Dean Nelson) [2168384 2122850]
- x86/fpu: Configure init_fpstate attributes orderly (Dean Nelson) [2168384 2122850]
- x86/fpu/xstate: Fix the ARCH_REQ_XCOMP_PERM implementation (Dean Nelson) [2168384 2122850]
- net/mlx5: E-Switch, properly handle ingress tagged packets on VST (Amir Tzin) [2166665 2096109]
- cpuhotplug: Fix KABI breakage (Prarit Bhargava) [2162763 2156529]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.16.1.el8_7]" date="1677153600">- ipv6: fix panic when fib_lookup_arg-&gt;result is fib6_info (Jiri Benc) [2167602 2140599]
- ceph: blocklist the kclient when receiving corrupted snap trace (Xiubo Li) [2168896 2162414]
- ceph: move mount state enum to super.h (Xiubo Li) [2168896 2162414]
- s390/kexec: fix ipl report address for kdump (Tobias Huschle) [2166296 2161328]
- mm, compaction: fix fast_isolate_around() to stay within boundaries (Daniel Vacek) [2170576 2149309]
- scsi: storvsc: Fix swiotlb bounce buffer leak in confidential VM (Emanuele Giuseppe Esposito) [2170228 2150659]
- netfilter: conntrack: handle tcp challenge acks during connection reuse (Florian Westphal) [2165587 2158726]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.17.1.el8_7]" date="1677844800">- net: mana: Add rmb after checking owner bits (Mohammed Gamal) [2173103 2139462]
- net: mana: Add support of XDP_REDIRECT action (Mohammed Gamal) [2173103 2139462]
- net: mana: Add the Linux MANA PF driver (Mohammed Gamal) [2173103 2139462]
- ice: fix lost multicast packets in promisc mode (Ken Cox) [2172550 2138215]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.18.0-425.18.1.el8_7]" date="1678449600">- futex: Resend potentially swallowed owner death notification (Rafael Aquini) [2170054 2161526]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.19.1.el8_7]" date="1678968000">- s390/dasd: fix no record found for raw_track_access (Tobias Huschle) [2167776 2161270]
- locking/rwsem: Disable preemption in all down_read*() and up_read() code paths (Waiman Long) [2170939 2162139]
- locking/rwsem: Prevent non-first waiter from spinning in down_write() slowpath (Waiman Long) [2170939 2162139]
- locking/rwsem: Allow slowpath writer to ignore handoff bit if not set by first waiter (Waiman Long) [2170939 2162139]
- locking/rwsem: Always try to wake waiters in out_nolock path (Waiman Long) [2170939 2162139]
- locking/rwsem: No need to check for handoff bit if wait queue empty (Waiman Long) [2170939 2162139]
- locking/rwsem: Make handoff bit handling more consistent (Waiman Long) [2170939 2162139]
- locking/rwsem: Disable preemption while trying for rwsem lock (Waiman Long) [2170939 2162139]
- locking/rwsem: Conditionally wake waiters in reader/writer slowpaths (Waiman Long) [2170939 2162139]
- locking: Make owner_on_cpu() into &lt;linux/sched.h&gt; (Waiman Long) [2170939 2162139]
- locking/rwsem: Optimize down_read_trylock() under highly contended case (Waiman Long) [2170939 2162139]
- locking/rwsem: Fix comments about reader optimistic lock stealing conditions (Waiman Long) [2170939 2162139]
- locking/rwsem: Disable preemption for spinning region (Waiman Long) [2170939 2162139]
- locking: Remove rcu_read_{,un}lock() for preempt_{dis,en}able() (Waiman Long) [2170939 2162139]
- watchdog: fix UAF in reboot notifier handling in watchdog core code (Wander Lairson Costa) [2139770 2131308]
- netfilter: nf_conntrack_irc: Tighten matching on DCC message (Wander Lairson Costa) [2139770 2131308]
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF (Jaroslav Kysela) [2163400 2163401] {CVE-2023-0266}
- net/mlx5e: Fix enabling sriov while tc nic rules are offloaded (Amir Tzin) [2167647 2112925]
- net/mlx5: E-Switch, pair only capable devices (Amir Tzin) [2167647 2112925]
- net/mlx5: Fix mlx5_get_next_dev() peer device matching (Amir Tzin) [2167647 2112925]
- net/mlx5: Lag, filter non compatible devices (Amir Tzin) [2167647 2112925]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.19.2.el8_7.gf5e8]" date="1678968001">- ovl: fail on invalid uid/gid mapping at copy up (Miklos Szeredi) [2165341 2165342] {CVE-2023-0386}</changelog>
</package>
<package pkgid="19ac95f52016d139021e222b61dccee1161422ad00553a640e2542fc3fd694a9" name="kernel-debug-devel" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="425.10.1.el8_7"/>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.1.1.el8]" date="1663588800">- i40e: Fix kernel crash during module removal (Ivan Vecera) [2091489]
- redhat: enable zstream release numbering for rhel 8.7 (Jarod Wilson)
- ice: Allow operation with reduced device MSI-X (Petr Oros) [2102844]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.2.1.el8]" date="1664193600">- EDAC/ghes: Set the DIMM label unconditionally (Aristeu Rozanski) [2109712]
- configs: enable CONFIG_HP_ILO for aarch64 (Mark Salter) [2123508]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.3.1.el8]" date="1664539200">- iwlwifi: limit fw version for AC9560 to avoid fw crash (Íñigo Huguet) [2129297]
- sfc: fix null pointer dereference in efx_hard_start_xmit (Íñigo Huguet) [2119638]
- sfc: fix TX channel offset when using legacy interrupts (Íñigo Huguet) [2119638]
- netfilter: conntrack: reduce timeout when receiving out-of-window fin or rst (Florian Westphal) [2047366]
- netfilter: conntrack: remove unneeded indent level (Florian Westphal) [2047366]
- netfilter: conntrack: ignore overly delayed tcp packets (Florian Westphal) [2047366]
- netfilter: conntrack: prepare tcp_in_window for ternary return value (Florian Westphal) [2047366]
- netfilter: conntrack: remove pr_debug callsites from tcp tracker (Florian Westphal) [2047366]
- netfilter: conntrack: work around exceeded receive window (Florian Westphal) [2047366]
- netfilter: conntrack: improve RST handling when tuple is re-used (Florian Westphal) [2047366]
- netfilter: conntrack: avoid misleading 'invalid' in log message (Florian Westphal) [2047366]
- netfilter: remove BUG_ON() after skb_header_pointer() (Florian Westphal) [2047366]
- iavf: Detach device during reset task (Petr Oros) [2069206]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.4.1.el8]" date="1665144000">- random: allow reseeding DRBG with getrandom (Daiki Ueno) [2121766]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.5.1.el8_7]" date="1667476800">- ice: Fix interface being down after reset with link-down-on-close flag on (Petr Oros) [2136216 2024110]
- ice: Fix crash by keep old cfg when update TCs more than queues (Petr Oros) [2130992 2129902]
- ice: Fix tunnel checksum offload with fragmented traffic (Petr Oros) [2130992 2129902]
- ice: handle E822 generic device ID in PLDM header (Petr Oros) [2130992 2129902]
- ice: ethtool: Prohibit improper channel config for DCB (Petr Oros) [2130992 2129902]
- ice: ethtool: advertise 1000M speeds properly (Petr Oros) [2130992 2129902]
- ice: Fix switchdev rules book keeping (Petr Oros) [2130992 2129902]
- ice: fix access-beyond-end in the switch code (Petr Oros) [2130992 2129902]
- eth: ice: silence the GCC 12 array-bounds warning (Petr Oros) [2130992 2129902]
- ice: Expose RSS indirection tables for queue groups via ethtool (Petr Oros) [2130992 2129902]
- Revert "ice: Hide bus-info in ethtool for PRs in switchdev mode" (Petr Oros) [2130992 2129902]
- ice: remove period on argument description in ice_for_each_vf (Petr Oros) [2130992 2129902]
- ice: add a function comment for ice_cfg_mac_antispoof (Petr Oros) [2130992 2129902]
- ice: fix wording in comment for ice_reset_vf (Petr Oros) [2130992 2129902]
- ice: remove return value comment for ice_reset_all_vfs (Petr Oros) [2130992 2129902]
- ice: always check VF VSI pointer values (Petr Oros) [2130992 2129902]
- ice: add newline to dev_dbg in ice_vf_fdir_dump_info (Petr Oros) [2130992 2129902]
- ice: get switch id on switchdev devices (Petr Oros) [2130992 2129902]
- ice: return ENOSPC when exceeding ICE_MAX_CHAIN_WORDS (Petr Oros) [2130992 2129902]
- ice: introduce common helper for retrieving VSI by vsi_num (Petr Oros) [2130992 2129902]
- ice: use min_t() to make code cleaner in ice_gnss (Petr Oros) [2130992 2129902]
- ice: Add mpls+tso support (Petr Oros) [2130992 2129902]
- ice: switch: convert packet template match code to rodata (Petr Oros) [2130992 2129902]
- ice: switch: use convenience macros to declare dummy pkt templates (Petr Oros) [2130992 2129902]
- ice: switch: use a struct to pass packet template params (Petr Oros) [2130992 2129902]
- ice: switch: unobscurify bitops loop in ice_fill_adv_dummy_packet() (Petr Oros) [2130992 2129902]
- ice: switch: add and use u16[] aliases to ice_adv_lkup_elem::{h, m}_u (Petr Oros) [2130992 2129902]
- ice: Support GTP-U and GTP-C offload in switchdev (Petr Oros) [2130992 2129902]
- ice: Remove useless DMA-32 fallback configuration (Petr Oros) [2130992 2129902]
- ice: switch to napi_build_skb() (Petr Oros) [2130992 2129902]
- redhat: switch to z-stream dist tag and build targets (Jarod Wilson)
- block: avoid sign extend problem with default queue flags mask (Nico Pache) [2135813]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.6.1.el8_7]" date="1668168000">- ice: Add low latency Tx timestamp read (Petr Oros) [2136036 2092425]
- ice: introduce ice_ptp_reset_cached_phctime function (Petr Oros) [2136036 2092425]
- ice: re-arrange some static functions in ice_ptp.c (Petr Oros) [2136036 2092425]
- ice: track and warn when PHC update is late (Petr Oros) [2136036 2092425]
- ice: track Tx timestamp stats similar to other Intel drivers (Petr Oros) [2136036 2092425]
- ice: implement adjfine with mul_u64_u64_div_u64 (Petr Oros) [2136036 2092425]
- ice: Add EXTTS feature to the feature bitmap (Petr Oros) [2136036 2092425]
- math: Export mul_u64_u64_div_u64 (Petr Oros) [2136036 2092425]
- vfio/type1: Unpin zero pages (Alex Williamson) [2128515 2123015]
- net: atlantic: remove aq_nic_deinit() when resume (Íñigo Huguet) [2131935 2130839]
- net: atlantic: remove deep parameter on suspend/resume functions (Íñigo Huguet) [2131935 2130839]
- CI: Use zstream builder container (Veronika Kabatova)
- CI: Add disttag override for 8.7 (Veronika Kabatova)</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.7.1.el8_7]" date="1669723200">- ice: Add additional CSR registers to ETHTOOL_GREGS (Petr Oros) [2136513 2131024]
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps (Petr Oros) [2137270 2106964]
- i40e: Fix VF set max MTU size (Petr Oros) [2137270 2106964]
- iavf: Fix set max MTU size with port VLAN and jumbo frames (Petr Oros) [2137270 2106964]
- iavf: Fix bad page state (Petr Oros) [2137270 2106964]
- Revert "scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels" (Jarod Wilson)
- scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels (Tomas Henzl) [2139216]
- Revert "ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems" (Jarod Wilson)
- ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems (Wei Huang) [2142170 2130653]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.8.1.el8_7]" date="1669982400">- scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels (Tomas Henzl) [2139216 2134535]
- RDMA/mlx5: Set local port to one when accessing counters (Mohammad Kabat) [2141957 2077119]
- drm/mgag200: Fix PLL setup for G200_SE_A rev &gt;=4 (Jocelyn Falempe) [2140152 2130159]
- iavf: Do not restart Tx queues after reset task failure (Petr Oros) [2149081 2134005]
- iavf: Fix a crash during reset task (Petr Oros) [2149081 2134005]
- scsi: core: Allow the ALUA transitioning state enough time (Tomas Henzl) [2147374 2084250]
- scsi: core: Return BLK_STS_TRANSPORT for ALUA transitioning (Tomas Henzl) [2147374 2084250]
- i40e: Fix DMA mappings leak (Ivan Vecera) [2138205 2077847]
- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2142724 2142725] {CVE-2022-2964}
- net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2142724 2142725] {CVE-2022-2964}</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.9.1.el8_7]" date="1670587200">- Documentation/admin-guide: Document nomodeset kernel parameter (Jocelyn Falempe) [2145218 2143952]
- drm: Move nomodeset kernel parameter to the DRM subsystem (Jocelyn Falempe) [2145218 2143952]
- wait: Fix __wait_event_hrtimeout for RT/DL tasks (Derek Barbosa) [2138953 2125233]
- scsi: zfcp: Fix missing auto port scan and thus missing target ports (Tobias Huschle) [2127849 2121089]
- net: Fix return value of qdisc ingress handling on success (Ivan Vecera) [2141878 2131361]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.10.1.el8_7]" date="1671019200">- scsi: target: loop: Fix handling of aborted TMRs (Maurizio Lombardi) [2144583 2141713]
- ice: virtchnl rss hena support (Petr Oros) [2148130]
- ice: Fix configuring VIRTCHNL_OP_CONFIG_VSI_QUEUES with unbalanced queues (Michal Schmidt) [2142017 2137378]
- ice: Add support Flex RXD (Michal Schmidt) [2138157 2131310]
- netfilter: flowtable: fix stuck flows on cleanup due to pending work (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: add function to invoke garbage collection immediately (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: pass flowtable to nf_flow_table_iterate() (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: separate replace, destroy and stats to different workqueues (Phil Sutter) [2134084 2131370]
- x86/paravirt: Add a dummy __x86_paravirt_patch_template() function (Waiman Long) [2152206 2144161]
- x86/paravirt: Fix kABI breakage in struct pv_mmu_ops (Waiman Long) [2152206 2144161]
- drm/i915: fix TLB invalidation for Gen12 video and compute engines (Wander Lairson Costa) [2148149 2148150] {CVE-2022-4139}
- PCI: hv: Do not set PCI_COMMAND_MEMORY to reduce VM boot time (Emanuele Giuseppe Esposito) [2150912 2082836]
- iavf: Fix cached head and tail value for iavf_get_tx_pending (Stefan Assmann) [2149742 2103944]
- iavf: Fix change VF's mac address (Stefan Assmann) [2149742 2103944]
- iavf: Fix race between iavf_close and iavf_reset_task (Stefan Assmann) [2149742 2103944]
- net: ethernet: move from strlcpy with unused retval to strscpy (Stefan Assmann) [2149742 2103944]
- iavf: Fix 'tc qdisc show' listing too many queues (Stefan Assmann) [2149742 2103944]
- iavf: Fix max_rate limiting (Stefan Assmann) [2149742 2103944]
- iavf: Check for duplicate TC flower filter before parsing (Stefan Assmann) [2149742 2103944]
- iavf: Fix handling of dummy receive descriptors (Stefan Assmann) [2149742 2103944]
- iavf: Disallow changing rx/tx-frames and rx/tx-frames-irq (Stefan Assmann) [2149742 2103944]
- intel/iavf:fix repeated words in comments (Stefan Assmann) [2149742 2103944]
- intel: remove unused macros (Stefan Assmann) [2149742 2103944]
- iavf: Add waiting for response from PF in set mac (Stefan Assmann) [2149742 2103944]</changelog>
</package>
<package pkgid="5d8c52fd95e80821db241d81eed41489fcfa77401d77dccd7fb1ea8bb28412e5" name="kernel-debug-devel" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="425.13.1.el8_7"/>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.4.1.el8]" date="1665144000">- random: allow reseeding DRBG with getrandom (Daiki Ueno) [2121766]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.5.1.el8_7]" date="1667476800">- ice: Fix interface being down after reset with link-down-on-close flag on (Petr Oros) [2136216 2024110]
- ice: Fix crash by keep old cfg when update TCs more than queues (Petr Oros) [2130992 2129902]
- ice: Fix tunnel checksum offload with fragmented traffic (Petr Oros) [2130992 2129902]
- ice: handle E822 generic device ID in PLDM header (Petr Oros) [2130992 2129902]
- ice: ethtool: Prohibit improper channel config for DCB (Petr Oros) [2130992 2129902]
- ice: ethtool: advertise 1000M speeds properly (Petr Oros) [2130992 2129902]
- ice: Fix switchdev rules book keeping (Petr Oros) [2130992 2129902]
- ice: fix access-beyond-end in the switch code (Petr Oros) [2130992 2129902]
- eth: ice: silence the GCC 12 array-bounds warning (Petr Oros) [2130992 2129902]
- ice: Expose RSS indirection tables for queue groups via ethtool (Petr Oros) [2130992 2129902]
- Revert "ice: Hide bus-info in ethtool for PRs in switchdev mode" (Petr Oros) [2130992 2129902]
- ice: remove period on argument description in ice_for_each_vf (Petr Oros) [2130992 2129902]
- ice: add a function comment for ice_cfg_mac_antispoof (Petr Oros) [2130992 2129902]
- ice: fix wording in comment for ice_reset_vf (Petr Oros) [2130992 2129902]
- ice: remove return value comment for ice_reset_all_vfs (Petr Oros) [2130992 2129902]
- ice: always check VF VSI pointer values (Petr Oros) [2130992 2129902]
- ice: add newline to dev_dbg in ice_vf_fdir_dump_info (Petr Oros) [2130992 2129902]
- ice: get switch id on switchdev devices (Petr Oros) [2130992 2129902]
- ice: return ENOSPC when exceeding ICE_MAX_CHAIN_WORDS (Petr Oros) [2130992 2129902]
- ice: introduce common helper for retrieving VSI by vsi_num (Petr Oros) [2130992 2129902]
- ice: use min_t() to make code cleaner in ice_gnss (Petr Oros) [2130992 2129902]
- ice: Add mpls+tso support (Petr Oros) [2130992 2129902]
- ice: switch: convert packet template match code to rodata (Petr Oros) [2130992 2129902]
- ice: switch: use convenience macros to declare dummy pkt templates (Petr Oros) [2130992 2129902]
- ice: switch: use a struct to pass packet template params (Petr Oros) [2130992 2129902]
- ice: switch: unobscurify bitops loop in ice_fill_adv_dummy_packet() (Petr Oros) [2130992 2129902]
- ice: switch: add and use u16[] aliases to ice_adv_lkup_elem::{h, m}_u (Petr Oros) [2130992 2129902]
- ice: Support GTP-U and GTP-C offload in switchdev (Petr Oros) [2130992 2129902]
- ice: Remove useless DMA-32 fallback configuration (Petr Oros) [2130992 2129902]
- ice: switch to napi_build_skb() (Petr Oros) [2130992 2129902]
- redhat: switch to z-stream dist tag and build targets (Jarod Wilson)
- block: avoid sign extend problem with default queue flags mask (Nico Pache) [2135813]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.6.1.el8_7]" date="1668168000">- ice: Add low latency Tx timestamp read (Petr Oros) [2136036 2092425]
- ice: introduce ice_ptp_reset_cached_phctime function (Petr Oros) [2136036 2092425]
- ice: re-arrange some static functions in ice_ptp.c (Petr Oros) [2136036 2092425]
- ice: track and warn when PHC update is late (Petr Oros) [2136036 2092425]
- ice: track Tx timestamp stats similar to other Intel drivers (Petr Oros) [2136036 2092425]
- ice: implement adjfine with mul_u64_u64_div_u64 (Petr Oros) [2136036 2092425]
- ice: Add EXTTS feature to the feature bitmap (Petr Oros) [2136036 2092425]
- math: Export mul_u64_u64_div_u64 (Petr Oros) [2136036 2092425]
- vfio/type1: Unpin zero pages (Alex Williamson) [2128515 2123015]
- net: atlantic: remove aq_nic_deinit() when resume (Íñigo Huguet) [2131935 2130839]
- net: atlantic: remove deep parameter on suspend/resume functions (Íñigo Huguet) [2131935 2130839]
- CI: Use zstream builder container (Veronika Kabatova)
- CI: Add disttag override for 8.7 (Veronika Kabatova)</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.7.1.el8_7]" date="1669723200">- ice: Add additional CSR registers to ETHTOOL_GREGS (Petr Oros) [2136513 2131024]
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps (Petr Oros) [2137270 2106964]
- i40e: Fix VF set max MTU size (Petr Oros) [2137270 2106964]
- iavf: Fix set max MTU size with port VLAN and jumbo frames (Petr Oros) [2137270 2106964]
- iavf: Fix bad page state (Petr Oros) [2137270 2106964]
- Revert "scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels" (Jarod Wilson)
- scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels (Tomas Henzl) [2139216]
- Revert "ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems" (Jarod Wilson)
- ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems (Wei Huang) [2142170 2130653]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.8.1.el8_7]" date="1669982400">- scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels (Tomas Henzl) [2139216 2134535]
- RDMA/mlx5: Set local port to one when accessing counters (Mohammad Kabat) [2141957 2077119]
- drm/mgag200: Fix PLL setup for G200_SE_A rev &gt;=4 (Jocelyn Falempe) [2140152 2130159]
- iavf: Do not restart Tx queues after reset task failure (Petr Oros) [2149081 2134005]
- iavf: Fix a crash during reset task (Petr Oros) [2149081 2134005]
- scsi: core: Allow the ALUA transitioning state enough time (Tomas Henzl) [2147374 2084250]
- scsi: core: Return BLK_STS_TRANSPORT for ALUA transitioning (Tomas Henzl) [2147374 2084250]
- i40e: Fix DMA mappings leak (Ivan Vecera) [2138205 2077847]
- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2142724 2142725] {CVE-2022-2964}
- net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2142724 2142725] {CVE-2022-2964}</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.9.1.el8_7]" date="1670587200">- Documentation/admin-guide: Document nomodeset kernel parameter (Jocelyn Falempe) [2145218 2143952]
- drm: Move nomodeset kernel parameter to the DRM subsystem (Jocelyn Falempe) [2145218 2143952]
- wait: Fix __wait_event_hrtimeout for RT/DL tasks (Derek Barbosa) [2138953 2125233]
- scsi: zfcp: Fix missing auto port scan and thus missing target ports (Tobias Huschle) [2127849 2121089]
- net: Fix return value of qdisc ingress handling on success (Ivan Vecera) [2141878 2131361]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.10.1.el8_7]" date="1671019200">- scsi: target: loop: Fix handling of aborted TMRs (Maurizio Lombardi) [2144583 2141713]
- ice: virtchnl rss hena support (Petr Oros) [2148130]
- ice: Fix configuring VIRTCHNL_OP_CONFIG_VSI_QUEUES with unbalanced queues (Michal Schmidt) [2142017 2137378]
- ice: Add support Flex RXD (Michal Schmidt) [2138157 2131310]
- netfilter: flowtable: fix stuck flows on cleanup due to pending work (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: add function to invoke garbage collection immediately (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: pass flowtable to nf_flow_table_iterate() (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: separate replace, destroy and stats to different workqueues (Phil Sutter) [2134084 2131370]
- x86/paravirt: Add a dummy __x86_paravirt_patch_template() function (Waiman Long) [2152206 2144161]
- x86/paravirt: Fix kABI breakage in struct pv_mmu_ops (Waiman Long) [2152206 2144161]
- drm/i915: fix TLB invalidation for Gen12 video and compute engines (Wander Lairson Costa) [2148149 2148150] {CVE-2022-4139}
- PCI: hv: Do not set PCI_COMMAND_MEMORY to reduce VM boot time (Emanuele Giuseppe Esposito) [2150912 2082836]
- iavf: Fix cached head and tail value for iavf_get_tx_pending (Stefan Assmann) [2149742 2103944]
- iavf: Fix change VF's mac address (Stefan Assmann) [2149742 2103944]
- iavf: Fix race between iavf_close and iavf_reset_task (Stefan Assmann) [2149742 2103944]
- net: ethernet: move from strlcpy with unused retval to strscpy (Stefan Assmann) [2149742 2103944]
- iavf: Fix 'tc qdisc show' listing too many queues (Stefan Assmann) [2149742 2103944]
- iavf: Fix max_rate limiting (Stefan Assmann) [2149742 2103944]
- iavf: Check for duplicate TC flower filter before parsing (Stefan Assmann) [2149742 2103944]
- iavf: Fix handling of dummy receive descriptors (Stefan Assmann) [2149742 2103944]
- iavf: Disallow changing rx/tx-frames and rx/tx-frames-irq (Stefan Assmann) [2149742 2103944]
- intel/iavf:fix repeated words in comments (Stefan Assmann) [2149742 2103944]
- intel: remove unused macros (Stefan Assmann) [2149742 2103944]
- iavf: Add waiting for response from PF in set mac (Stefan Assmann) [2149742 2103944]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.11.1.el8_7]" date="1673006400">- NFSD: Protect against send buffer overflow in NFSv3 READ (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv2 READ (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv3 READDIR (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv2 READDIR (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- SUNRPC: Fix svcxdr_init_encode's buflen calculation (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- SUNRPC: Fix svcxdr_init_decode's end-of-buffer calculation (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- panic, kexec: make __crash_kexec() NMI safe (Valentin Schneider) [2139580 2134126]
- kexec: turn all kexec_mutex acquisitions into trylocks (Valentin Schneider) [2139580 2134126]
- kexec: move locking into do_kexec_load (Valentin Schneider) [2139580 2134126]
- vdpa/mlx5: re-create forwarding rules after mac modified (Laurent Vivier) [2152912 2145136]
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry (Waiman Long) [2153653 2108387]
- irq: Call tick_irq_enter() inside HARDIRQ_OFFSET (Waiman Long) [2153653 2108387]
- irqtime: Move irqtime entry accounting after irq offset incrementation (Waiman Long) [2153653 2108387]
- sched/vtime: Consolidate IRQ time accounting (Waiman Long) [2153653 2108387]
- s390/vtime: Use the generic IRQ entry accounting (Waiman Long) [2153653 2108387]
- sched/cputime: Remove symbol exports from IRQ time accounting (Waiman Long) [2153653 2108387]
- genirq/irqdomain: Don't try to free an interrupt that has no mapping (Waiman Long) [2153653 2108387]
- genirq: Provide __irq_enter/exit_raw() (Waiman Long) [2153653 2108387]
- powerpc/time: Only set CONFIG_ARCH_HAS_SCALED_CPUTIME on PPC64 (Waiman Long) [2153653 2108387]
- powerpc/time: isolate scaled cputime accounting in dedicated functions. (Waiman Long) [2153653 2108387]
- PCI: hv: Fix synchronization between channel callback and hv_pci_bus_exit() (Mohammed Gamal) [2155280 2144708]
- PCI: hv: Fix synchronization between channel callback and hv_compose_msi_msg() (Mohammed Gamal) [2155280 2144708]
- PCI: hv: Use vmbus_requestor to generate transaction IDs for VMbus hardening (Mohammed Gamal) [2155280 2144708]
- net/mlx5e: TC, Reject forwarding from internal port to internal port (Mohammad Kabat) [2141959 2131345]
- hv_netvsc: Fix race between VF offering and VF association message from host (Mohammed Gamal) [2155272 2149279]
- x86/mce: Reduce number of machine checks taken during recovery (Prarit Bhargava) [2137592 2104388]
- cgroup/cpuset: Reduce cpuset_rwsem writer latency (Waiman Long) [2153108 2149031]
- rcu/exp: Mark current CPU as exp-QS in IPI loop second pass (Waiman Long) [2153108 2149031]
- rcu: Always inline rcu_dynticks_task*_{enter,exit}() (Waiman Long) [2153108 2149031]
- rcu: Fix existing exp request check in sync_sched_exp_online_cleanup() (Waiman Long) [2153108 2149031]
- rcu: Fix macro name CONFIG_TASKS_RCU_TRACE (Waiman Long) [2153108 2149031]
- rcu: Fix stall-warning deadlock due to non-release of rcu_node -&gt;lock (Waiman Long) [2153108 2149031]
- rcu: Fix to include first blocked task in stall warning (Waiman Long) [2153108 2149031]
- cgroup: Use cgroup_attach_{lock,unlock}() from cgroup_attach_task_all() (Waiman Long) [2153108 2149031]
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all() (Waiman Long) [2153108 2149031]
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock (Waiman Long) [2153108 2149031]
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree (Waiman Long) [2153108 2149031]
- cgroup/cpuset: Fix a race between cpuset_attach() and cpu hotplug (Waiman Long) [2153108 2149031]
- cgroup: reduce dependency on cgroup_mutex (Waiman Long) [2153108 2149031]
- sunrpc: Set sk_allocation to GFP_NOFS to avoid using current-&gt;task_frag. (Guillaume Nault) [2153230 2089660]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.12.1.el8_7]" date="1674129600">- x86/fpu: Prevent FPU state corruption (Oleksandr Natalenko) [2134586 2130890]
- x86/fpu: Drop fpregs lock before inheriting FPU permissions (Eder Zulian) [2154460 2153549]
- kernel-doc: fix undefined args variable (Jan Stancek) [2157905 2134954]
- mm: memcontrol: fix potential oom_lock recursion deadlock (Waiman Long) [2157922 2138886]
- memcg: prohibit unconditional exceeding the limit of dying tasks (Waiman Long) [2157922 2138886]
- mm, oom: do not trigger out_of_memory from the #PF (Waiman Long) [2157922 2138886]
- mm, oom: pagefault_out_of_memory: don't force global OOM for dying tasks (Waiman Long) [2157922 2138886]
- mm: memcontrol: don't count limit-setting reclaim as memory pressure (Waiman Long) [2157922 2138886]
- KVM: s390: vsie: Fix the initialization of the epoch extension (epdx) field (Thomas Huth) [2158813 2151854]
- net: mana: Fix race on per-CQ variable napi work_done (Emanuele Giuseppe Esposito) [2155437 2151722]
- mei: me: add adler lake point S DID (Prarit Bhargava) [2141783 2141602]
- PCI: hv: Only reuse existing IRTE allocation for Multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix the definition of vector in hv_compose_msi_msg() (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix interrupt mapping for multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Reuse existing IRTE allocation in compose_msi_msg() (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix hv_arch_irq_unmask() for multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix multi-MSI to allow more than one MSI vector (Emanuele Giuseppe Esposito) [2155289 2100275]
- drm/ast: Support multiple outputs (Jarod Wilson) [2149287 2147553]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.13.1.el8_7]" date="1675339200">- mm/cgroup/reclaim: fix dirty pages throttling on cgroup v1 (Waiman Long) [2160221]
- mm: vmscan: remove deadlock due to throttling failing to make progress (Waiman Long) [2160221]
- mm: vmscan: reduce throttling due to a failure to make progress -fix (Waiman Long) [2160221]
- mm: vmscan: Reduce throttling due to a failure to make progress (Waiman Long) [2160221]
- mm/vmscan: delay waking of tasks throttled on NOPROGRESS (Waiman Long) [2160221]
- mm/vmscan: increase the timeout if page reclaim is not making progress (Waiman Long) [2160221]
- mm/vmscan: centralise timeout values for reclaim_throttle (Waiman Long) [2160221]
- mm/page_alloc: remove the throttling logic from the page allocator (Waiman Long) [2160221]
- mm/writeback: throttle based on page writeback instead of congestion (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim when no progress is being made (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim and compaction when too may pages are isolated (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim until some writeback completes if congested (Waiman Long) [2160221]
- mm/vmscan.c: delete or fix duplicated words (Waiman Long) [2160221]
- mm,page_alloc: PF_WQ_WORKER threads must sleep at should_reclaim_retry() (Nico Pache) [2160221]
- ceph: avoid putting the realm twice when decoding snaps fails (Xiubo Li) [2155797 2139881]
- mm/mremap: hold the rmap lock in write mode when moving page table entries. (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: use pmd/pud_poplulate to update page table entries (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: don't enable optimized PUD move if page table levels is 2 (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: convert huge PUD move to separate helper (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: fix BUILD_BUG_ON() error in get_extent (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap.c: fix extent calculation (Waiman Long) [2140944] {CVE-2022-41222}
- x86: mremap speedup - Enable HAVE_MOVE_PUD (Waiman Long) [2140944] {CVE-2022-41222}
- mm: speedup mremap on 1GB or larger regions (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: start addresses are properly aligned (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: calculate extent in one place (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: it is sure to have enough space when extent meets requirement (Waiman Long) [2140944] {CVE-2022-41222}
- s390/boot: add secure boot trailer (Tobias Huschle) [2151530 2141967]
- i40e: Fix VF hang when reset is triggered on another VF (Ivan Vecera) [2160460 2103801]
- i2c: ismt: Fix an out-of-bounds bug in ismt_access() (Prarit Bhargava) [2154388 2119066] {CVE-2022-2873}
- iavf: schedule watchdog immediately when changing primary MAC (Michal Schmidt) [2163257 2152493]
- iavf: Move netdev_update_features() into watchdog task (Michal Schmidt) [2163257 2152493]
- iavf: fix temporary deadlock and failure to set MAC address (Michal Schmidt) [2163257 2152493]
- iavf: Fix error handling in iavf_init_module() (Michal Schmidt) [2163257 2152493]
- iommu/vt-d: Clean up si_domain in the init_dmars() error path (Jerry Snitselaar) [2149474 2118428]
- x86/pci/xen: Use msi_msg shadow structs (Jerry Snitselaar) [2149474 2118428]
- iommu/intel: Use msi_msg shadow structs (Jerry Snitselaar) [2149474 2118428]
- PCI: MSI: Fix Kconfig dependencies for PCI_MSI_ARCH_FALLBACKS (Jerry Snitselaar) [2149474 2118428]
- x86/apic/msi: Unbreak DMAR and HPET MSI (Jerry Snitselaar) [2149474 2118428]
- iommu/amd: Remove domain search for PCI/MSI (Jerry Snitselaar) [2149474 2118428]
- iommu/vt-d: Remove domain search for PCI/MSI[X] (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Make most MSI ops XEN private (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Cleanup the arch_*_msi_irqs() leftovers (Jerry Snitselaar) [2149474 2118428]
- PCI/MSI: Make arch_.*_msi_irq[s] fallbacks selectable (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Wrap XEN MSI management into irqdomain (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Consolidate XEN-MSI init (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Rework MSI teardown (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Make xen_msi_init() static and rename it to xen_hvm_msi_init() (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Move apic_post_init() invocation to one place (Jerry Snitselaar) [2149474 2118428]
- x86/msi: Use generic MSI domain ops (Jerry Snitselaar) [2149474 2118428]
- x86/msi: Remove pointless vcpu_affinity callback (Jerry Snitselaar) [2149474 2118428]
- iommu/vt-d: Fix compile error with CONFIG_PCI_ATS not set (Myron Stowe) [2149474 2118428]
- iommu/vt-d: Cure VF irqdomain hickup (Myron Stowe) [2149474 2118428]
- x86/pci: Set default irq domain in pcibios_add_device() (Myron Stowe) [2149474 2118428]
- iommm/amd: Store irq domain in struct device (Myron Stowe) [2149474 2118428]
- iommm/vt-d: Store irq domain in struct device (Myron Stowe) [2149474 2118428]
- PCI/MSI: Provide pci_dev_has_special_msi_domain() helper (Myron Stowe) [2149474 2118428]
- x86/msi: Consolidate MSI allocation (Myron Stowe) [2149474 2118428]
- PCI/MSI: Rework pci_msi_domain_calc_hwirq() (Myron Stowe) [2149474 2118428]
- x86/irq: Consolidate UV domain allocation (Myron Stowe) [2149474 2118428]
- x86/irq: Consolidate DMAR irq allocation (Myron Stowe) [2149474 2118428]
- x86_ioapic_Consolidate_IOAPIC_allocation (Myron Stowe) [2149474 2118428]
- x86/msi: Consolidate HPET allocation (Myron Stowe) [2149474 2118428]
- iommu/irq_remapping: Consolidate irq domain lookup (Myron Stowe) [2149474 2118428]
- iommu/amd: Consolidate irq domain getter (Myron Stowe) [2149474 2118428]
- iommu/vt-d: Consolidate irq domain getter (Myron Stowe) [2149474 2118428]
- x86/irq: Add allocation type for parent domain retrieval (Myron Stowe) [2149474 2118428]
- irqdomain: Export irq_domain_update_bus_token (Myron Stowe) [2149474 2118428]
- gitlab-ci: use CI templates from production branch (Michael Hofmann)
- iavf: remove INITIAL_MAC_SET to allow gARP to work properly (Stefan Assmann) [2149745 1938635]
- Revert "scsi: iscsi: ql4xxx: Use per-session workqueue for unbinding" (Chris Leech) [2152734 2122624]
- Revert "scsi: iscsi: Use the session workqueue for recovery" (Chris Leech) [2152734 2122624]
- arm64/bpf: Remove 128MB limit for BPF JIT programs (Yauheni Kaliuta) [2152138 2140163]
- bpf: Define bpf_jit_alloc_exec_limit for arm64 JIT (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: add `type` and `data` fields (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: use `ex` for `exception_table_entry` (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: make fixup_exception() return bool (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: consolidate definitions (Yauheni Kaliuta) [2152138 2140163]
- arm64: kvm: use kvm_exception_table_entry (Yauheni Kaliuta) [2152138 2140163]
- be2net: Fix buffer overflow in be_get_module_eeprom (Josef Oskera) [2160182 2126917]</changelog>
</package>
<package pkgid="761efbe89a46409848a9a2af4a39fac1fd02c1e7edda48daa97349f705f5480b" name="kernel-debug-devel" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="425.19.2.el8_7"/>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.11.1.el8_7]" date="1673006400">- NFSD: Protect against send buffer overflow in NFSv3 READ (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv2 READ (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv3 READDIR (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv2 READDIR (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- SUNRPC: Fix svcxdr_init_encode's buflen calculation (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- SUNRPC: Fix svcxdr_init_decode's end-of-buffer calculation (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- panic, kexec: make __crash_kexec() NMI safe (Valentin Schneider) [2139580 2134126]
- kexec: turn all kexec_mutex acquisitions into trylocks (Valentin Schneider) [2139580 2134126]
- kexec: move locking into do_kexec_load (Valentin Schneider) [2139580 2134126]
- vdpa/mlx5: re-create forwarding rules after mac modified (Laurent Vivier) [2152912 2145136]
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry (Waiman Long) [2153653 2108387]
- irq: Call tick_irq_enter() inside HARDIRQ_OFFSET (Waiman Long) [2153653 2108387]
- irqtime: Move irqtime entry accounting after irq offset incrementation (Waiman Long) [2153653 2108387]
- sched/vtime: Consolidate IRQ time accounting (Waiman Long) [2153653 2108387]
- s390/vtime: Use the generic IRQ entry accounting (Waiman Long) [2153653 2108387]
- sched/cputime: Remove symbol exports from IRQ time accounting (Waiman Long) [2153653 2108387]
- genirq/irqdomain: Don't try to free an interrupt that has no mapping (Waiman Long) [2153653 2108387]
- genirq: Provide __irq_enter/exit_raw() (Waiman Long) [2153653 2108387]
- powerpc/time: Only set CONFIG_ARCH_HAS_SCALED_CPUTIME on PPC64 (Waiman Long) [2153653 2108387]
- powerpc/time: isolate scaled cputime accounting in dedicated functions. (Waiman Long) [2153653 2108387]
- PCI: hv: Fix synchronization between channel callback and hv_pci_bus_exit() (Mohammed Gamal) [2155280 2144708]
- PCI: hv: Fix synchronization between channel callback and hv_compose_msi_msg() (Mohammed Gamal) [2155280 2144708]
- PCI: hv: Use vmbus_requestor to generate transaction IDs for VMbus hardening (Mohammed Gamal) [2155280 2144708]
- net/mlx5e: TC, Reject forwarding from internal port to internal port (Mohammad Kabat) [2141959 2131345]
- hv_netvsc: Fix race between VF offering and VF association message from host (Mohammed Gamal) [2155272 2149279]
- x86/mce: Reduce number of machine checks taken during recovery (Prarit Bhargava) [2137592 2104388]
- cgroup/cpuset: Reduce cpuset_rwsem writer latency (Waiman Long) [2153108 2149031]
- rcu/exp: Mark current CPU as exp-QS in IPI loop second pass (Waiman Long) [2153108 2149031]
- rcu: Always inline rcu_dynticks_task*_{enter,exit}() (Waiman Long) [2153108 2149031]
- rcu: Fix existing exp request check in sync_sched_exp_online_cleanup() (Waiman Long) [2153108 2149031]
- rcu: Fix macro name CONFIG_TASKS_RCU_TRACE (Waiman Long) [2153108 2149031]
- rcu: Fix stall-warning deadlock due to non-release of rcu_node -&gt;lock (Waiman Long) [2153108 2149031]
- rcu: Fix to include first blocked task in stall warning (Waiman Long) [2153108 2149031]
- cgroup: Use cgroup_attach_{lock,unlock}() from cgroup_attach_task_all() (Waiman Long) [2153108 2149031]
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all() (Waiman Long) [2153108 2149031]
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock (Waiman Long) [2153108 2149031]
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree (Waiman Long) [2153108 2149031]
- cgroup/cpuset: Fix a race between cpuset_attach() and cpu hotplug (Waiman Long) [2153108 2149031]
- cgroup: reduce dependency on cgroup_mutex (Waiman Long) [2153108 2149031]
- sunrpc: Set sk_allocation to GFP_NOFS to avoid using current-&gt;task_frag. (Guillaume Nault) [2153230 2089660]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.12.1.el8_7]" date="1674129600">- x86/fpu: Prevent FPU state corruption (Oleksandr Natalenko) [2134586 2130890]
- x86/fpu: Drop fpregs lock before inheriting FPU permissions (Eder Zulian) [2154460 2153549]
- kernel-doc: fix undefined args variable (Jan Stancek) [2157905 2134954]
- mm: memcontrol: fix potential oom_lock recursion deadlock (Waiman Long) [2157922 2138886]
- memcg: prohibit unconditional exceeding the limit of dying tasks (Waiman Long) [2157922 2138886]
- mm, oom: do not trigger out_of_memory from the #PF (Waiman Long) [2157922 2138886]
- mm, oom: pagefault_out_of_memory: don't force global OOM for dying tasks (Waiman Long) [2157922 2138886]
- mm: memcontrol: don't count limit-setting reclaim as memory pressure (Waiman Long) [2157922 2138886]
- KVM: s390: vsie: Fix the initialization of the epoch extension (epdx) field (Thomas Huth) [2158813 2151854]
- net: mana: Fix race on per-CQ variable napi work_done (Emanuele Giuseppe Esposito) [2155437 2151722]
- mei: me: add adler lake point S DID (Prarit Bhargava) [2141783 2141602]
- PCI: hv: Only reuse existing IRTE allocation for Multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix the definition of vector in hv_compose_msi_msg() (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix interrupt mapping for multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Reuse existing IRTE allocation in compose_msi_msg() (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix hv_arch_irq_unmask() for multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix multi-MSI to allow more than one MSI vector (Emanuele Giuseppe Esposito) [2155289 2100275]
- drm/ast: Support multiple outputs (Jarod Wilson) [2149287 2147553]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.13.1.el8_7]" date="1675339200">- mm/cgroup/reclaim: fix dirty pages throttling on cgroup v1 (Waiman Long) [2160221]
- mm: vmscan: remove deadlock due to throttling failing to make progress (Waiman Long) [2160221]
- mm: vmscan: reduce throttling due to a failure to make progress -fix (Waiman Long) [2160221]
- mm: vmscan: Reduce throttling due to a failure to make progress (Waiman Long) [2160221]
- mm/vmscan: delay waking of tasks throttled on NOPROGRESS (Waiman Long) [2160221]
- mm/vmscan: increase the timeout if page reclaim is not making progress (Waiman Long) [2160221]
- mm/vmscan: centralise timeout values for reclaim_throttle (Waiman Long) [2160221]
- mm/page_alloc: remove the throttling logic from the page allocator (Waiman Long) [2160221]
- mm/writeback: throttle based on page writeback instead of congestion (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim when no progress is being made (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim and compaction when too may pages are isolated (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim until some writeback completes if congested (Waiman Long) [2160221]
- mm/vmscan.c: delete or fix duplicated words (Waiman Long) [2160221]
- mm,page_alloc: PF_WQ_WORKER threads must sleep at should_reclaim_retry() (Nico Pache) [2160221]
- ceph: avoid putting the realm twice when decoding snaps fails (Xiubo Li) [2155797 2139881]
- mm/mremap: hold the rmap lock in write mode when moving page table entries. (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: use pmd/pud_poplulate to update page table entries (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: don't enable optimized PUD move if page table levels is 2 (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: convert huge PUD move to separate helper (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: fix BUILD_BUG_ON() error in get_extent (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap.c: fix extent calculation (Waiman Long) [2140944] {CVE-2022-41222}
- x86: mremap speedup - Enable HAVE_MOVE_PUD (Waiman Long) [2140944] {CVE-2022-41222}
- mm: speedup mremap on 1GB or larger regions (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: start addresses are properly aligned (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: calculate extent in one place (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: it is sure to have enough space when extent meets requirement (Waiman Long) [2140944] {CVE-2022-41222}
- s390/boot: add secure boot trailer (Tobias Huschle) [2151530 2141967]
- i40e: Fix VF hang when reset is triggered on another VF (Ivan Vecera) [2160460 2103801]
- i2c: ismt: Fix an out-of-bounds bug in ismt_access() (Prarit Bhargava) [2154388 2119066] {CVE-2022-2873}
- iavf: schedule watchdog immediately when changing primary MAC (Michal Schmidt) [2163257 2152493]
- iavf: Move netdev_update_features() into watchdog task (Michal Schmidt) [2163257 2152493]
- iavf: fix temporary deadlock and failure to set MAC address (Michal Schmidt) [2163257 2152493]
- iavf: Fix error handling in iavf_init_module() (Michal Schmidt) [2163257 2152493]
- iommu/vt-d: Clean up si_domain in the init_dmars() error path (Jerry Snitselaar) [2149474 2118428]
- x86/pci/xen: Use msi_msg shadow structs (Jerry Snitselaar) [2149474 2118428]
- iommu/intel: Use msi_msg shadow structs (Jerry Snitselaar) [2149474 2118428]
- PCI: MSI: Fix Kconfig dependencies for PCI_MSI_ARCH_FALLBACKS (Jerry Snitselaar) [2149474 2118428]
- x86/apic/msi: Unbreak DMAR and HPET MSI (Jerry Snitselaar) [2149474 2118428]
- iommu/amd: Remove domain search for PCI/MSI (Jerry Snitselaar) [2149474 2118428]
- iommu/vt-d: Remove domain search for PCI/MSI[X] (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Make most MSI ops XEN private (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Cleanup the arch_*_msi_irqs() leftovers (Jerry Snitselaar) [2149474 2118428]
- PCI/MSI: Make arch_.*_msi_irq[s] fallbacks selectable (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Wrap XEN MSI management into irqdomain (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Consolidate XEN-MSI init (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Rework MSI teardown (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Make xen_msi_init() static and rename it to xen_hvm_msi_init() (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Move apic_post_init() invocation to one place (Jerry Snitselaar) [2149474 2118428]
- x86/msi: Use generic MSI domain ops (Jerry Snitselaar) [2149474 2118428]
- x86/msi: Remove pointless vcpu_affinity callback (Jerry Snitselaar) [2149474 2118428]
- iommu/vt-d: Fix compile error with CONFIG_PCI_ATS not set (Myron Stowe) [2149474 2118428]
- iommu/vt-d: Cure VF irqdomain hickup (Myron Stowe) [2149474 2118428]
- x86/pci: Set default irq domain in pcibios_add_device() (Myron Stowe) [2149474 2118428]
- iommm/amd: Store irq domain in struct device (Myron Stowe) [2149474 2118428]
- iommm/vt-d: Store irq domain in struct device (Myron Stowe) [2149474 2118428]
- PCI/MSI: Provide pci_dev_has_special_msi_domain() helper (Myron Stowe) [2149474 2118428]
- x86/msi: Consolidate MSI allocation (Myron Stowe) [2149474 2118428]
- PCI/MSI: Rework pci_msi_domain_calc_hwirq() (Myron Stowe) [2149474 2118428]
- x86/irq: Consolidate UV domain allocation (Myron Stowe) [2149474 2118428]
- x86/irq: Consolidate DMAR irq allocation (Myron Stowe) [2149474 2118428]
- x86_ioapic_Consolidate_IOAPIC_allocation (Myron Stowe) [2149474 2118428]
- x86/msi: Consolidate HPET allocation (Myron Stowe) [2149474 2118428]
- iommu/irq_remapping: Consolidate irq domain lookup (Myron Stowe) [2149474 2118428]
- iommu/amd: Consolidate irq domain getter (Myron Stowe) [2149474 2118428]
- iommu/vt-d: Consolidate irq domain getter (Myron Stowe) [2149474 2118428]
- x86/irq: Add allocation type for parent domain retrieval (Myron Stowe) [2149474 2118428]
- irqdomain: Export irq_domain_update_bus_token (Myron Stowe) [2149474 2118428]
- gitlab-ci: use CI templates from production branch (Michael Hofmann)
- iavf: remove INITIAL_MAC_SET to allow gARP to work properly (Stefan Assmann) [2149745 1938635]
- Revert "scsi: iscsi: ql4xxx: Use per-session workqueue for unbinding" (Chris Leech) [2152734 2122624]
- Revert "scsi: iscsi: Use the session workqueue for recovery" (Chris Leech) [2152734 2122624]
- arm64/bpf: Remove 128MB limit for BPF JIT programs (Yauheni Kaliuta) [2152138 2140163]
- bpf: Define bpf_jit_alloc_exec_limit for arm64 JIT (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: add `type` and `data` fields (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: use `ex` for `exception_table_entry` (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: make fixup_exception() return bool (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: consolidate definitions (Yauheni Kaliuta) [2152138 2140163]
- arm64: kvm: use kvm_exception_table_entry (Yauheni Kaliuta) [2152138 2140163]
- be2net: Fix buffer overflow in be_get_module_eeprom (Josef Oskera) [2160182 2126917]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.14.1.el8_7]" date="1676030400">- ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems (Wei Huang) [2142170 2130653]
- KVM: x86: nSVM: implement nested LBR virtualization (Emanuele Giuseppe Esposito) [2166362 2155149]
- KVM: x86: nSVM: correctly virtualize LBR msrs when L2 is running (Emanuele Giuseppe Esposito) [2166362 2155149]
- kvm: x86: SVM: use vmcb* instead of svm-&gt;vmcb where it makes sense (Emanuele Giuseppe Esposito) [2166362 2155149]
- KVM: x86: nSVM: implement nested VMLOAD/VMSAVE (Emanuele Giuseppe Esposito) [2166362 2155149]
- IB/iser: Fix login with authentication (Kamal Heib) [2161750 2120676]
- act_mirred: use the backlog for nested calls to mirred ingress (Davide Caratti) [2164648 2131339] {CVE-2022-4269}
- net/sched: act_mirred: better wording on protection against excessive stack growth (Davide Caratti) [2164648 2131339] {CVE-2022-4269}
- redhat/configs: Set CONFIG_X86_AMD_PSTATE to 'm' (Prarit Bhargava) [2151275 2145246]
- KVM: x86: smm: preserve interrupt shadow in SMRAM (Maxim Levitsky) [2166368 2097144]
- KVM: x86: SVM: don't save SVM state to SMRAM when VM is not long mode capable (Maxim Levitsky) [2166368 2097144]
- KVM: x86: SVM: use smram structs (Maxim Levitsky) [2166368 2097144]
- KVM: svm: drop explicit return value of kvm_vcpu_map (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: use smram struct for 64 bit smram load/restore (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: use smram struct for 32 bit smram load/restore (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: use smram structs in the common code (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: add structs for KVM's smram layout (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: check for failures on smm entry (Maxim Levitsky) [2166368 2097144]
- KVM: x86: do not go through ctxt-&gt;ops when emulating rsm (Maxim Levitsky) [2166368 2097144]
- KVM: x86: move SMM exit to a new file (Maxim Levitsky) [2166368 2097144]
- KVM: x86: move SMM entry to a new file (Maxim Levitsky) [2166368 2097144]
- KVM: x86: start moving SMM-related functions to new files (Maxim Levitsky) [2166368 2097144]
- bug: introduce ASSERT_STRUCT_OFFSET (Maxim Levitsky) [2166368 2097144]
- KVM: x86: Rename and expose helper to detect if INIT/SIPI are allowed (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: number of GPRs in the SMRAM image depends on the image format (Maxim Levitsky) [2166368 2097144]
- KVM: x86: emulator: update the emulation mode after CR0 write (Maxim Levitsky) [2166368 2097144]
- KVM: x86: emulator: update the emulation mode after rsm (Maxim Levitsky) [2166368 2097144]
- KVM: x86: emulator: introduce emulator_recalc_and_set_mode (Maxim Levitsky) [2166368 2097144]
- KVM: x86: emulator: em_sysexit should update ctxt-&gt;mode (Maxim Levitsky) [2166368 2097144]
- KVM: x86: Bug the VM if the emulator accesses a non-existent GPR (Maxim Levitsky) [2166368 2097144]
- \KVM: x86: Reduce the number of emulator GPRs to '8' for 32-bit KVM (Maxim Levitsky) [2166368 2097144]
- KVM: x86: Use 16-bit fields to track dirty/valid emulator GPRs (Maxim Levitsky) [2166368 2097144]
- KVM: x86: Omit VCPU_REGS_RIP from emulator's _regs array (Maxim Levitsky) [2166368 2097144]
- \KVM: x86: Harden _regs accesses to guard against buggy input (Maxim Levitsky) [2166368 2097144]
- KVM: x86: Grab regs_dirty in local 'unsigned long' (Maxim Levitsky) [2166368 2097144]
- proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152571 2152572] {CVE-2022-4378}
- proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152571 2152572] {CVE-2022-4378}</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.15.1.el8_7]" date="1676548800">- net/mlx5e: Fix use-after-free when reverting termination table (Amir Tzin) [2167640 2112927]
- net/mlx5: Do not query pci info while pci disabled (Amir Tzin) [2167645 2129249]
- x86/fpu: Fix copy_xstate_to_uabi() to copy init states correctly (Dean Nelson) [2168384 2122850]
- x86/fpu: Exclude dynamic states from init_fpstate (Dean Nelson) [2168384 2122850]
- x86/fpu: Fix the init_fpstate size check with the actual size (Dean Nelson) [2168384 2122850]
- x86/fpu: Configure init_fpstate attributes orderly (Dean Nelson) [2168384 2122850]
- x86/fpu/xstate: Fix the ARCH_REQ_XCOMP_PERM implementation (Dean Nelson) [2168384 2122850]
- net/mlx5: E-Switch, properly handle ingress tagged packets on VST (Amir Tzin) [2166665 2096109]
- cpuhotplug: Fix KABI breakage (Prarit Bhargava) [2162763 2156529]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.16.1.el8_7]" date="1677153600">- ipv6: fix panic when fib_lookup_arg-&gt;result is fib6_info (Jiri Benc) [2167602 2140599]
- ceph: blocklist the kclient when receiving corrupted snap trace (Xiubo Li) [2168896 2162414]
- ceph: move mount state enum to super.h (Xiubo Li) [2168896 2162414]
- s390/kexec: fix ipl report address for kdump (Tobias Huschle) [2166296 2161328]
- mm, compaction: fix fast_isolate_around() to stay within boundaries (Daniel Vacek) [2170576 2149309]
- scsi: storvsc: Fix swiotlb bounce buffer leak in confidential VM (Emanuele Giuseppe Esposito) [2170228 2150659]
- netfilter: conntrack: handle tcp challenge acks during connection reuse (Florian Westphal) [2165587 2158726]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.17.1.el8_7]" date="1677844800">- net: mana: Add rmb after checking owner bits (Mohammed Gamal) [2173103 2139462]
- net: mana: Add support of XDP_REDIRECT action (Mohammed Gamal) [2173103 2139462]
- net: mana: Add the Linux MANA PF driver (Mohammed Gamal) [2173103 2139462]
- ice: fix lost multicast packets in promisc mode (Ken Cox) [2172550 2138215]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.18.0-425.18.1.el8_7]" date="1678449600">- futex: Resend potentially swallowed owner death notification (Rafael Aquini) [2170054 2161526]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.19.1.el8_7]" date="1678968000">- s390/dasd: fix no record found for raw_track_access (Tobias Huschle) [2167776 2161270]
- locking/rwsem: Disable preemption in all down_read*() and up_read() code paths (Waiman Long) [2170939 2162139]
- locking/rwsem: Prevent non-first waiter from spinning in down_write() slowpath (Waiman Long) [2170939 2162139]
- locking/rwsem: Allow slowpath writer to ignore handoff bit if not set by first waiter (Waiman Long) [2170939 2162139]
- locking/rwsem: Always try to wake waiters in out_nolock path (Waiman Long) [2170939 2162139]
- locking/rwsem: No need to check for handoff bit if wait queue empty (Waiman Long) [2170939 2162139]
- locking/rwsem: Make handoff bit handling more consistent (Waiman Long) [2170939 2162139]
- locking/rwsem: Disable preemption while trying for rwsem lock (Waiman Long) [2170939 2162139]
- locking/rwsem: Conditionally wake waiters in reader/writer slowpaths (Waiman Long) [2170939 2162139]
- locking: Make owner_on_cpu() into &lt;linux/sched.h&gt; (Waiman Long) [2170939 2162139]
- locking/rwsem: Optimize down_read_trylock() under highly contended case (Waiman Long) [2170939 2162139]
- locking/rwsem: Fix comments about reader optimistic lock stealing conditions (Waiman Long) [2170939 2162139]
- locking/rwsem: Disable preemption for spinning region (Waiman Long) [2170939 2162139]
- locking: Remove rcu_read_{,un}lock() for preempt_{dis,en}able() (Waiman Long) [2170939 2162139]
- watchdog: fix UAF in reboot notifier handling in watchdog core code (Wander Lairson Costa) [2139770 2131308]
- netfilter: nf_conntrack_irc: Tighten matching on DCC message (Wander Lairson Costa) [2139770 2131308]
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF (Jaroslav Kysela) [2163400 2163401] {CVE-2023-0266}
- net/mlx5e: Fix enabling sriov while tc nic rules are offloaded (Amir Tzin) [2167647 2112925]
- net/mlx5: E-Switch, pair only capable devices (Amir Tzin) [2167647 2112925]
- net/mlx5: Fix mlx5_get_next_dev() peer device matching (Amir Tzin) [2167647 2112925]
- net/mlx5: Lag, filter non compatible devices (Amir Tzin) [2167647 2112925]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.19.2.el8_7.gf5e8]" date="1678968001">- ovl: fail on invalid uid/gid mapping at copy up (Miklos Szeredi) [2165341 2165342] {CVE-2023-0386}</changelog>
</package>
<package pkgid="e9d9de97fb33ce409306c2bc25fd446bcfea016ddce0828a1ed45007eb674c0c" name="kernel-debug-modules" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="425.10.1.el8_7"/>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.1.1.el8]" date="1663588800">- i40e: Fix kernel crash during module removal (Ivan Vecera) [2091489]
- redhat: enable zstream release numbering for rhel 8.7 (Jarod Wilson)
- ice: Allow operation with reduced device MSI-X (Petr Oros) [2102844]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.2.1.el8]" date="1664193600">- EDAC/ghes: Set the DIMM label unconditionally (Aristeu Rozanski) [2109712]
- configs: enable CONFIG_HP_ILO for aarch64 (Mark Salter) [2123508]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.3.1.el8]" date="1664539200">- iwlwifi: limit fw version for AC9560 to avoid fw crash (Íñigo Huguet) [2129297]
- sfc: fix null pointer dereference in efx_hard_start_xmit (Íñigo Huguet) [2119638]
- sfc: fix TX channel offset when using legacy interrupts (Íñigo Huguet) [2119638]
- netfilter: conntrack: reduce timeout when receiving out-of-window fin or rst (Florian Westphal) [2047366]
- netfilter: conntrack: remove unneeded indent level (Florian Westphal) [2047366]
- netfilter: conntrack: ignore overly delayed tcp packets (Florian Westphal) [2047366]
- netfilter: conntrack: prepare tcp_in_window for ternary return value (Florian Westphal) [2047366]
- netfilter: conntrack: remove pr_debug callsites from tcp tracker (Florian Westphal) [2047366]
- netfilter: conntrack: work around exceeded receive window (Florian Westphal) [2047366]
- netfilter: conntrack: improve RST handling when tuple is re-used (Florian Westphal) [2047366]
- netfilter: conntrack: avoid misleading 'invalid' in log message (Florian Westphal) [2047366]
- netfilter: remove BUG_ON() after skb_header_pointer() (Florian Westphal) [2047366]
- iavf: Detach device during reset task (Petr Oros) [2069206]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.4.1.el8]" date="1665144000">- random: allow reseeding DRBG with getrandom (Daiki Ueno) [2121766]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.5.1.el8_7]" date="1667476800">- ice: Fix interface being down after reset with link-down-on-close flag on (Petr Oros) [2136216 2024110]
- ice: Fix crash by keep old cfg when update TCs more than queues (Petr Oros) [2130992 2129902]
- ice: Fix tunnel checksum offload with fragmented traffic (Petr Oros) [2130992 2129902]
- ice: handle E822 generic device ID in PLDM header (Petr Oros) [2130992 2129902]
- ice: ethtool: Prohibit improper channel config for DCB (Petr Oros) [2130992 2129902]
- ice: ethtool: advertise 1000M speeds properly (Petr Oros) [2130992 2129902]
- ice: Fix switchdev rules book keeping (Petr Oros) [2130992 2129902]
- ice: fix access-beyond-end in the switch code (Petr Oros) [2130992 2129902]
- eth: ice: silence the GCC 12 array-bounds warning (Petr Oros) [2130992 2129902]
- ice: Expose RSS indirection tables for queue groups via ethtool (Petr Oros) [2130992 2129902]
- Revert "ice: Hide bus-info in ethtool for PRs in switchdev mode" (Petr Oros) [2130992 2129902]
- ice: remove period on argument description in ice_for_each_vf (Petr Oros) [2130992 2129902]
- ice: add a function comment for ice_cfg_mac_antispoof (Petr Oros) [2130992 2129902]
- ice: fix wording in comment for ice_reset_vf (Petr Oros) [2130992 2129902]
- ice: remove return value comment for ice_reset_all_vfs (Petr Oros) [2130992 2129902]
- ice: always check VF VSI pointer values (Petr Oros) [2130992 2129902]
- ice: add newline to dev_dbg in ice_vf_fdir_dump_info (Petr Oros) [2130992 2129902]
- ice: get switch id on switchdev devices (Petr Oros) [2130992 2129902]
- ice: return ENOSPC when exceeding ICE_MAX_CHAIN_WORDS (Petr Oros) [2130992 2129902]
- ice: introduce common helper for retrieving VSI by vsi_num (Petr Oros) [2130992 2129902]
- ice: use min_t() to make code cleaner in ice_gnss (Petr Oros) [2130992 2129902]
- ice: Add mpls+tso support (Petr Oros) [2130992 2129902]
- ice: switch: convert packet template match code to rodata (Petr Oros) [2130992 2129902]
- ice: switch: use convenience macros to declare dummy pkt templates (Petr Oros) [2130992 2129902]
- ice: switch: use a struct to pass packet template params (Petr Oros) [2130992 2129902]
- ice: switch: unobscurify bitops loop in ice_fill_adv_dummy_packet() (Petr Oros) [2130992 2129902]
- ice: switch: add and use u16[] aliases to ice_adv_lkup_elem::{h, m}_u (Petr Oros) [2130992 2129902]
- ice: Support GTP-U and GTP-C offload in switchdev (Petr Oros) [2130992 2129902]
- ice: Remove useless DMA-32 fallback configuration (Petr Oros) [2130992 2129902]
- ice: switch to napi_build_skb() (Petr Oros) [2130992 2129902]
- redhat: switch to z-stream dist tag and build targets (Jarod Wilson)
- block: avoid sign extend problem with default queue flags mask (Nico Pache) [2135813]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.6.1.el8_7]" date="1668168000">- ice: Add low latency Tx timestamp read (Petr Oros) [2136036 2092425]
- ice: introduce ice_ptp_reset_cached_phctime function (Petr Oros) [2136036 2092425]
- ice: re-arrange some static functions in ice_ptp.c (Petr Oros) [2136036 2092425]
- ice: track and warn when PHC update is late (Petr Oros) [2136036 2092425]
- ice: track Tx timestamp stats similar to other Intel drivers (Petr Oros) [2136036 2092425]
- ice: implement adjfine with mul_u64_u64_div_u64 (Petr Oros) [2136036 2092425]
- ice: Add EXTTS feature to the feature bitmap (Petr Oros) [2136036 2092425]
- math: Export mul_u64_u64_div_u64 (Petr Oros) [2136036 2092425]
- vfio/type1: Unpin zero pages (Alex Williamson) [2128515 2123015]
- net: atlantic: remove aq_nic_deinit() when resume (Íñigo Huguet) [2131935 2130839]
- net: atlantic: remove deep parameter on suspend/resume functions (Íñigo Huguet) [2131935 2130839]
- CI: Use zstream builder container (Veronika Kabatova)
- CI: Add disttag override for 8.7 (Veronika Kabatova)</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.7.1.el8_7]" date="1669723200">- ice: Add additional CSR registers to ETHTOOL_GREGS (Petr Oros) [2136513 2131024]
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps (Petr Oros) [2137270 2106964]
- i40e: Fix VF set max MTU size (Petr Oros) [2137270 2106964]
- iavf: Fix set max MTU size with port VLAN and jumbo frames (Petr Oros) [2137270 2106964]
- iavf: Fix bad page state (Petr Oros) [2137270 2106964]
- Revert "scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels" (Jarod Wilson)
- scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels (Tomas Henzl) [2139216]
- Revert "ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems" (Jarod Wilson)
- ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems (Wei Huang) [2142170 2130653]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.8.1.el8_7]" date="1669982400">- scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels (Tomas Henzl) [2139216 2134535]
- RDMA/mlx5: Set local port to one when accessing counters (Mohammad Kabat) [2141957 2077119]
- drm/mgag200: Fix PLL setup for G200_SE_A rev &gt;=4 (Jocelyn Falempe) [2140152 2130159]
- iavf: Do not restart Tx queues after reset task failure (Petr Oros) [2149081 2134005]
- iavf: Fix a crash during reset task (Petr Oros) [2149081 2134005]
- scsi: core: Allow the ALUA transitioning state enough time (Tomas Henzl) [2147374 2084250]
- scsi: core: Return BLK_STS_TRANSPORT for ALUA transitioning (Tomas Henzl) [2147374 2084250]
- i40e: Fix DMA mappings leak (Ivan Vecera) [2138205 2077847]
- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2142724 2142725] {CVE-2022-2964}
- net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2142724 2142725] {CVE-2022-2964}</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.9.1.el8_7]" date="1670587200">- Documentation/admin-guide: Document nomodeset kernel parameter (Jocelyn Falempe) [2145218 2143952]
- drm: Move nomodeset kernel parameter to the DRM subsystem (Jocelyn Falempe) [2145218 2143952]
- wait: Fix __wait_event_hrtimeout for RT/DL tasks (Derek Barbosa) [2138953 2125233]
- scsi: zfcp: Fix missing auto port scan and thus missing target ports (Tobias Huschle) [2127849 2121089]
- net: Fix return value of qdisc ingress handling on success (Ivan Vecera) [2141878 2131361]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.10.1.el8_7]" date="1671019200">- scsi: target: loop: Fix handling of aborted TMRs (Maurizio Lombardi) [2144583 2141713]
- ice: virtchnl rss hena support (Petr Oros) [2148130]
- ice: Fix configuring VIRTCHNL_OP_CONFIG_VSI_QUEUES with unbalanced queues (Michal Schmidt) [2142017 2137378]
- ice: Add support Flex RXD (Michal Schmidt) [2138157 2131310]
- netfilter: flowtable: fix stuck flows on cleanup due to pending work (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: add function to invoke garbage collection immediately (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: pass flowtable to nf_flow_table_iterate() (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: separate replace, destroy and stats to different workqueues (Phil Sutter) [2134084 2131370]
- x86/paravirt: Add a dummy __x86_paravirt_patch_template() function (Waiman Long) [2152206 2144161]
- x86/paravirt: Fix kABI breakage in struct pv_mmu_ops (Waiman Long) [2152206 2144161]
- drm/i915: fix TLB invalidation for Gen12 video and compute engines (Wander Lairson Costa) [2148149 2148150] {CVE-2022-4139}
- PCI: hv: Do not set PCI_COMMAND_MEMORY to reduce VM boot time (Emanuele Giuseppe Esposito) [2150912 2082836]
- iavf: Fix cached head and tail value for iavf_get_tx_pending (Stefan Assmann) [2149742 2103944]
- iavf: Fix change VF's mac address (Stefan Assmann) [2149742 2103944]
- iavf: Fix race between iavf_close and iavf_reset_task (Stefan Assmann) [2149742 2103944]
- net: ethernet: move from strlcpy with unused retval to strscpy (Stefan Assmann) [2149742 2103944]
- iavf: Fix 'tc qdisc show' listing too many queues (Stefan Assmann) [2149742 2103944]
- iavf: Fix max_rate limiting (Stefan Assmann) [2149742 2103944]
- iavf: Check for duplicate TC flower filter before parsing (Stefan Assmann) [2149742 2103944]
- iavf: Fix handling of dummy receive descriptors (Stefan Assmann) [2149742 2103944]
- iavf: Disallow changing rx/tx-frames and rx/tx-frames-irq (Stefan Assmann) [2149742 2103944]
- intel/iavf:fix repeated words in comments (Stefan Assmann) [2149742 2103944]
- intel: remove unused macros (Stefan Assmann) [2149742 2103944]
- iavf: Add waiting for response from PF in set mac (Stefan Assmann) [2149742 2103944]</changelog>
</package>
<package pkgid="934b64d510e99d415798bcb75f482e3b7437f6e495614c021a6592e6325401a6" name="kernel-debug-modules" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="425.13.1.el8_7"/>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.4.1.el8]" date="1665144000">- random: allow reseeding DRBG with getrandom (Daiki Ueno) [2121766]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.5.1.el8_7]" date="1667476800">- ice: Fix interface being down after reset with link-down-on-close flag on (Petr Oros) [2136216 2024110]
- ice: Fix crash by keep old cfg when update TCs more than queues (Petr Oros) [2130992 2129902]
- ice: Fix tunnel checksum offload with fragmented traffic (Petr Oros) [2130992 2129902]
- ice: handle E822 generic device ID in PLDM header (Petr Oros) [2130992 2129902]
- ice: ethtool: Prohibit improper channel config for DCB (Petr Oros) [2130992 2129902]
- ice: ethtool: advertise 1000M speeds properly (Petr Oros) [2130992 2129902]
- ice: Fix switchdev rules book keeping (Petr Oros) [2130992 2129902]
- ice: fix access-beyond-end in the switch code (Petr Oros) [2130992 2129902]
- eth: ice: silence the GCC 12 array-bounds warning (Petr Oros) [2130992 2129902]
- ice: Expose RSS indirection tables for queue groups via ethtool (Petr Oros) [2130992 2129902]
- Revert "ice: Hide bus-info in ethtool for PRs in switchdev mode" (Petr Oros) [2130992 2129902]
- ice: remove period on argument description in ice_for_each_vf (Petr Oros) [2130992 2129902]
- ice: add a function comment for ice_cfg_mac_antispoof (Petr Oros) [2130992 2129902]
- ice: fix wording in comment for ice_reset_vf (Petr Oros) [2130992 2129902]
- ice: remove return value comment for ice_reset_all_vfs (Petr Oros) [2130992 2129902]
- ice: always check VF VSI pointer values (Petr Oros) [2130992 2129902]
- ice: add newline to dev_dbg in ice_vf_fdir_dump_info (Petr Oros) [2130992 2129902]
- ice: get switch id on switchdev devices (Petr Oros) [2130992 2129902]
- ice: return ENOSPC when exceeding ICE_MAX_CHAIN_WORDS (Petr Oros) [2130992 2129902]
- ice: introduce common helper for retrieving VSI by vsi_num (Petr Oros) [2130992 2129902]
- ice: use min_t() to make code cleaner in ice_gnss (Petr Oros) [2130992 2129902]
- ice: Add mpls+tso support (Petr Oros) [2130992 2129902]
- ice: switch: convert packet template match code to rodata (Petr Oros) [2130992 2129902]
- ice: switch: use convenience macros to declare dummy pkt templates (Petr Oros) [2130992 2129902]
- ice: switch: use a struct to pass packet template params (Petr Oros) [2130992 2129902]
- ice: switch: unobscurify bitops loop in ice_fill_adv_dummy_packet() (Petr Oros) [2130992 2129902]
- ice: switch: add and use u16[] aliases to ice_adv_lkup_elem::{h, m}_u (Petr Oros) [2130992 2129902]
- ice: Support GTP-U and GTP-C offload in switchdev (Petr Oros) [2130992 2129902]
- ice: Remove useless DMA-32 fallback configuration (Petr Oros) [2130992 2129902]
- ice: switch to napi_build_skb() (Petr Oros) [2130992 2129902]
- redhat: switch to z-stream dist tag and build targets (Jarod Wilson)
- block: avoid sign extend problem with default queue flags mask (Nico Pache) [2135813]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.6.1.el8_7]" date="1668168000">- ice: Add low latency Tx timestamp read (Petr Oros) [2136036 2092425]
- ice: introduce ice_ptp_reset_cached_phctime function (Petr Oros) [2136036 2092425]
- ice: re-arrange some static functions in ice_ptp.c (Petr Oros) [2136036 2092425]
- ice: track and warn when PHC update is late (Petr Oros) [2136036 2092425]
- ice: track Tx timestamp stats similar to other Intel drivers (Petr Oros) [2136036 2092425]
- ice: implement adjfine with mul_u64_u64_div_u64 (Petr Oros) [2136036 2092425]
- ice: Add EXTTS feature to the feature bitmap (Petr Oros) [2136036 2092425]
- math: Export mul_u64_u64_div_u64 (Petr Oros) [2136036 2092425]
- vfio/type1: Unpin zero pages (Alex Williamson) [2128515 2123015]
- net: atlantic: remove aq_nic_deinit() when resume (Íñigo Huguet) [2131935 2130839]
- net: atlantic: remove deep parameter on suspend/resume functions (Íñigo Huguet) [2131935 2130839]
- CI: Use zstream builder container (Veronika Kabatova)
- CI: Add disttag override for 8.7 (Veronika Kabatova)</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.7.1.el8_7]" date="1669723200">- ice: Add additional CSR registers to ETHTOOL_GREGS (Petr Oros) [2136513 2131024]
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps (Petr Oros) [2137270 2106964]
- i40e: Fix VF set max MTU size (Petr Oros) [2137270 2106964]
- iavf: Fix set max MTU size with port VLAN and jumbo frames (Petr Oros) [2137270 2106964]
- iavf: Fix bad page state (Petr Oros) [2137270 2106964]
- Revert "scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels" (Jarod Wilson)
- scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels (Tomas Henzl) [2139216]
- Revert "ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems" (Jarod Wilson)
- ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems (Wei Huang) [2142170 2130653]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.8.1.el8_7]" date="1669982400">- scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels (Tomas Henzl) [2139216 2134535]
- RDMA/mlx5: Set local port to one when accessing counters (Mohammad Kabat) [2141957 2077119]
- drm/mgag200: Fix PLL setup for G200_SE_A rev &gt;=4 (Jocelyn Falempe) [2140152 2130159]
- iavf: Do not restart Tx queues after reset task failure (Petr Oros) [2149081 2134005]
- iavf: Fix a crash during reset task (Petr Oros) [2149081 2134005]
- scsi: core: Allow the ALUA transitioning state enough time (Tomas Henzl) [2147374 2084250]
- scsi: core: Return BLK_STS_TRANSPORT for ALUA transitioning (Tomas Henzl) [2147374 2084250]
- i40e: Fix DMA mappings leak (Ivan Vecera) [2138205 2077847]
- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2142724 2142725] {CVE-2022-2964}
- net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2142724 2142725] {CVE-2022-2964}</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.9.1.el8_7]" date="1670587200">- Documentation/admin-guide: Document nomodeset kernel parameter (Jocelyn Falempe) [2145218 2143952]
- drm: Move nomodeset kernel parameter to the DRM subsystem (Jocelyn Falempe) [2145218 2143952]
- wait: Fix __wait_event_hrtimeout for RT/DL tasks (Derek Barbosa) [2138953 2125233]
- scsi: zfcp: Fix missing auto port scan and thus missing target ports (Tobias Huschle) [2127849 2121089]
- net: Fix return value of qdisc ingress handling on success (Ivan Vecera) [2141878 2131361]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.10.1.el8_7]" date="1671019200">- scsi: target: loop: Fix handling of aborted TMRs (Maurizio Lombardi) [2144583 2141713]
- ice: virtchnl rss hena support (Petr Oros) [2148130]
- ice: Fix configuring VIRTCHNL_OP_CONFIG_VSI_QUEUES with unbalanced queues (Michal Schmidt) [2142017 2137378]
- ice: Add support Flex RXD (Michal Schmidt) [2138157 2131310]
- netfilter: flowtable: fix stuck flows on cleanup due to pending work (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: add function to invoke garbage collection immediately (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: pass flowtable to nf_flow_table_iterate() (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: separate replace, destroy and stats to different workqueues (Phil Sutter) [2134084 2131370]
- x86/paravirt: Add a dummy __x86_paravirt_patch_template() function (Waiman Long) [2152206 2144161]
- x86/paravirt: Fix kABI breakage in struct pv_mmu_ops (Waiman Long) [2152206 2144161]
- drm/i915: fix TLB invalidation for Gen12 video and compute engines (Wander Lairson Costa) [2148149 2148150] {CVE-2022-4139}
- PCI: hv: Do not set PCI_COMMAND_MEMORY to reduce VM boot time (Emanuele Giuseppe Esposito) [2150912 2082836]
- iavf: Fix cached head and tail value for iavf_get_tx_pending (Stefan Assmann) [2149742 2103944]
- iavf: Fix change VF's mac address (Stefan Assmann) [2149742 2103944]
- iavf: Fix race between iavf_close and iavf_reset_task (Stefan Assmann) [2149742 2103944]
- net: ethernet: move from strlcpy with unused retval to strscpy (Stefan Assmann) [2149742 2103944]
- iavf: Fix 'tc qdisc show' listing too many queues (Stefan Assmann) [2149742 2103944]
- iavf: Fix max_rate limiting (Stefan Assmann) [2149742 2103944]
- iavf: Check for duplicate TC flower filter before parsing (Stefan Assmann) [2149742 2103944]
- iavf: Fix handling of dummy receive descriptors (Stefan Assmann) [2149742 2103944]
- iavf: Disallow changing rx/tx-frames and rx/tx-frames-irq (Stefan Assmann) [2149742 2103944]
- intel/iavf:fix repeated words in comments (Stefan Assmann) [2149742 2103944]
- intel: remove unused macros (Stefan Assmann) [2149742 2103944]
- iavf: Add waiting for response from PF in set mac (Stefan Assmann) [2149742 2103944]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.11.1.el8_7]" date="1673006400">- NFSD: Protect against send buffer overflow in NFSv3 READ (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv2 READ (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv3 READDIR (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv2 READDIR (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- SUNRPC: Fix svcxdr_init_encode's buflen calculation (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- SUNRPC: Fix svcxdr_init_decode's end-of-buffer calculation (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- panic, kexec: make __crash_kexec() NMI safe (Valentin Schneider) [2139580 2134126]
- kexec: turn all kexec_mutex acquisitions into trylocks (Valentin Schneider) [2139580 2134126]
- kexec: move locking into do_kexec_load (Valentin Schneider) [2139580 2134126]
- vdpa/mlx5: re-create forwarding rules after mac modified (Laurent Vivier) [2152912 2145136]
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry (Waiman Long) [2153653 2108387]
- irq: Call tick_irq_enter() inside HARDIRQ_OFFSET (Waiman Long) [2153653 2108387]
- irqtime: Move irqtime entry accounting after irq offset incrementation (Waiman Long) [2153653 2108387]
- sched/vtime: Consolidate IRQ time accounting (Waiman Long) [2153653 2108387]
- s390/vtime: Use the generic IRQ entry accounting (Waiman Long) [2153653 2108387]
- sched/cputime: Remove symbol exports from IRQ time accounting (Waiman Long) [2153653 2108387]
- genirq/irqdomain: Don't try to free an interrupt that has no mapping (Waiman Long) [2153653 2108387]
- genirq: Provide __irq_enter/exit_raw() (Waiman Long) [2153653 2108387]
- powerpc/time: Only set CONFIG_ARCH_HAS_SCALED_CPUTIME on PPC64 (Waiman Long) [2153653 2108387]
- powerpc/time: isolate scaled cputime accounting in dedicated functions. (Waiman Long) [2153653 2108387]
- PCI: hv: Fix synchronization between channel callback and hv_pci_bus_exit() (Mohammed Gamal) [2155280 2144708]
- PCI: hv: Fix synchronization between channel callback and hv_compose_msi_msg() (Mohammed Gamal) [2155280 2144708]
- PCI: hv: Use vmbus_requestor to generate transaction IDs for VMbus hardening (Mohammed Gamal) [2155280 2144708]
- net/mlx5e: TC, Reject forwarding from internal port to internal port (Mohammad Kabat) [2141959 2131345]
- hv_netvsc: Fix race between VF offering and VF association message from host (Mohammed Gamal) [2155272 2149279]
- x86/mce: Reduce number of machine checks taken during recovery (Prarit Bhargava) [2137592 2104388]
- cgroup/cpuset: Reduce cpuset_rwsem writer latency (Waiman Long) [2153108 2149031]
- rcu/exp: Mark current CPU as exp-QS in IPI loop second pass (Waiman Long) [2153108 2149031]
- rcu: Always inline rcu_dynticks_task*_{enter,exit}() (Waiman Long) [2153108 2149031]
- rcu: Fix existing exp request check in sync_sched_exp_online_cleanup() (Waiman Long) [2153108 2149031]
- rcu: Fix macro name CONFIG_TASKS_RCU_TRACE (Waiman Long) [2153108 2149031]
- rcu: Fix stall-warning deadlock due to non-release of rcu_node -&gt;lock (Waiman Long) [2153108 2149031]
- rcu: Fix to include first blocked task in stall warning (Waiman Long) [2153108 2149031]
- cgroup: Use cgroup_attach_{lock,unlock}() from cgroup_attach_task_all() (Waiman Long) [2153108 2149031]
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all() (Waiman Long) [2153108 2149031]
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock (Waiman Long) [2153108 2149031]
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree (Waiman Long) [2153108 2149031]
- cgroup/cpuset: Fix a race between cpuset_attach() and cpu hotplug (Waiman Long) [2153108 2149031]
- cgroup: reduce dependency on cgroup_mutex (Waiman Long) [2153108 2149031]
- sunrpc: Set sk_allocation to GFP_NOFS to avoid using current-&gt;task_frag. (Guillaume Nault) [2153230 2089660]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.12.1.el8_7]" date="1674129600">- x86/fpu: Prevent FPU state corruption (Oleksandr Natalenko) [2134586 2130890]
- x86/fpu: Drop fpregs lock before inheriting FPU permissions (Eder Zulian) [2154460 2153549]
- kernel-doc: fix undefined args variable (Jan Stancek) [2157905 2134954]
- mm: memcontrol: fix potential oom_lock recursion deadlock (Waiman Long) [2157922 2138886]
- memcg: prohibit unconditional exceeding the limit of dying tasks (Waiman Long) [2157922 2138886]
- mm, oom: do not trigger out_of_memory from the #PF (Waiman Long) [2157922 2138886]
- mm, oom: pagefault_out_of_memory: don't force global OOM for dying tasks (Waiman Long) [2157922 2138886]
- mm: memcontrol: don't count limit-setting reclaim as memory pressure (Waiman Long) [2157922 2138886]
- KVM: s390: vsie: Fix the initialization of the epoch extension (epdx) field (Thomas Huth) [2158813 2151854]
- net: mana: Fix race on per-CQ variable napi work_done (Emanuele Giuseppe Esposito) [2155437 2151722]
- mei: me: add adler lake point S DID (Prarit Bhargava) [2141783 2141602]
- PCI: hv: Only reuse existing IRTE allocation for Multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix the definition of vector in hv_compose_msi_msg() (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix interrupt mapping for multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Reuse existing IRTE allocation in compose_msi_msg() (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix hv_arch_irq_unmask() for multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix multi-MSI to allow more than one MSI vector (Emanuele Giuseppe Esposito) [2155289 2100275]
- drm/ast: Support multiple outputs (Jarod Wilson) [2149287 2147553]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.13.1.el8_7]" date="1675339200">- mm/cgroup/reclaim: fix dirty pages throttling on cgroup v1 (Waiman Long) [2160221]
- mm: vmscan: remove deadlock due to throttling failing to make progress (Waiman Long) [2160221]
- mm: vmscan: reduce throttling due to a failure to make progress -fix (Waiman Long) [2160221]
- mm: vmscan: Reduce throttling due to a failure to make progress (Waiman Long) [2160221]
- mm/vmscan: delay waking of tasks throttled on NOPROGRESS (Waiman Long) [2160221]
- mm/vmscan: increase the timeout if page reclaim is not making progress (Waiman Long) [2160221]
- mm/vmscan: centralise timeout values for reclaim_throttle (Waiman Long) [2160221]
- mm/page_alloc: remove the throttling logic from the page allocator (Waiman Long) [2160221]
- mm/writeback: throttle based on page writeback instead of congestion (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim when no progress is being made (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim and compaction when too may pages are isolated (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim until some writeback completes if congested (Waiman Long) [2160221]
- mm/vmscan.c: delete or fix duplicated words (Waiman Long) [2160221]
- mm,page_alloc: PF_WQ_WORKER threads must sleep at should_reclaim_retry() (Nico Pache) [2160221]
- ceph: avoid putting the realm twice when decoding snaps fails (Xiubo Li) [2155797 2139881]
- mm/mremap: hold the rmap lock in write mode when moving page table entries. (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: use pmd/pud_poplulate to update page table entries (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: don't enable optimized PUD move if page table levels is 2 (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: convert huge PUD move to separate helper (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: fix BUILD_BUG_ON() error in get_extent (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap.c: fix extent calculation (Waiman Long) [2140944] {CVE-2022-41222}
- x86: mremap speedup - Enable HAVE_MOVE_PUD (Waiman Long) [2140944] {CVE-2022-41222}
- mm: speedup mremap on 1GB or larger regions (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: start addresses are properly aligned (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: calculate extent in one place (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: it is sure to have enough space when extent meets requirement (Waiman Long) [2140944] {CVE-2022-41222}
- s390/boot: add secure boot trailer (Tobias Huschle) [2151530 2141967]
- i40e: Fix VF hang when reset is triggered on another VF (Ivan Vecera) [2160460 2103801]
- i2c: ismt: Fix an out-of-bounds bug in ismt_access() (Prarit Bhargava) [2154388 2119066] {CVE-2022-2873}
- iavf: schedule watchdog immediately when changing primary MAC (Michal Schmidt) [2163257 2152493]
- iavf: Move netdev_update_features() into watchdog task (Michal Schmidt) [2163257 2152493]
- iavf: fix temporary deadlock and failure to set MAC address (Michal Schmidt) [2163257 2152493]
- iavf: Fix error handling in iavf_init_module() (Michal Schmidt) [2163257 2152493]
- iommu/vt-d: Clean up si_domain in the init_dmars() error path (Jerry Snitselaar) [2149474 2118428]
- x86/pci/xen: Use msi_msg shadow structs (Jerry Snitselaar) [2149474 2118428]
- iommu/intel: Use msi_msg shadow structs (Jerry Snitselaar) [2149474 2118428]
- PCI: MSI: Fix Kconfig dependencies for PCI_MSI_ARCH_FALLBACKS (Jerry Snitselaar) [2149474 2118428]
- x86/apic/msi: Unbreak DMAR and HPET MSI (Jerry Snitselaar) [2149474 2118428]
- iommu/amd: Remove domain search for PCI/MSI (Jerry Snitselaar) [2149474 2118428]
- iommu/vt-d: Remove domain search for PCI/MSI[X] (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Make most MSI ops XEN private (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Cleanup the arch_*_msi_irqs() leftovers (Jerry Snitselaar) [2149474 2118428]
- PCI/MSI: Make arch_.*_msi_irq[s] fallbacks selectable (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Wrap XEN MSI management into irqdomain (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Consolidate XEN-MSI init (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Rework MSI teardown (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Make xen_msi_init() static and rename it to xen_hvm_msi_init() (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Move apic_post_init() invocation to one place (Jerry Snitselaar) [2149474 2118428]
- x86/msi: Use generic MSI domain ops (Jerry Snitselaar) [2149474 2118428]
- x86/msi: Remove pointless vcpu_affinity callback (Jerry Snitselaar) [2149474 2118428]
- iommu/vt-d: Fix compile error with CONFIG_PCI_ATS not set (Myron Stowe) [2149474 2118428]
- iommu/vt-d: Cure VF irqdomain hickup (Myron Stowe) [2149474 2118428]
- x86/pci: Set default irq domain in pcibios_add_device() (Myron Stowe) [2149474 2118428]
- iommm/amd: Store irq domain in struct device (Myron Stowe) [2149474 2118428]
- iommm/vt-d: Store irq domain in struct device (Myron Stowe) [2149474 2118428]
- PCI/MSI: Provide pci_dev_has_special_msi_domain() helper (Myron Stowe) [2149474 2118428]
- x86/msi: Consolidate MSI allocation (Myron Stowe) [2149474 2118428]
- PCI/MSI: Rework pci_msi_domain_calc_hwirq() (Myron Stowe) [2149474 2118428]
- x86/irq: Consolidate UV domain allocation (Myron Stowe) [2149474 2118428]
- x86/irq: Consolidate DMAR irq allocation (Myron Stowe) [2149474 2118428]
- x86_ioapic_Consolidate_IOAPIC_allocation (Myron Stowe) [2149474 2118428]
- x86/msi: Consolidate HPET allocation (Myron Stowe) [2149474 2118428]
- iommu/irq_remapping: Consolidate irq domain lookup (Myron Stowe) [2149474 2118428]
- iommu/amd: Consolidate irq domain getter (Myron Stowe) [2149474 2118428]
- iommu/vt-d: Consolidate irq domain getter (Myron Stowe) [2149474 2118428]
- x86/irq: Add allocation type for parent domain retrieval (Myron Stowe) [2149474 2118428]
- irqdomain: Export irq_domain_update_bus_token (Myron Stowe) [2149474 2118428]
- gitlab-ci: use CI templates from production branch (Michael Hofmann)
- iavf: remove INITIAL_MAC_SET to allow gARP to work properly (Stefan Assmann) [2149745 1938635]
- Revert "scsi: iscsi: ql4xxx: Use per-session workqueue for unbinding" (Chris Leech) [2152734 2122624]
- Revert "scsi: iscsi: Use the session workqueue for recovery" (Chris Leech) [2152734 2122624]
- arm64/bpf: Remove 128MB limit for BPF JIT programs (Yauheni Kaliuta) [2152138 2140163]
- bpf: Define bpf_jit_alloc_exec_limit for arm64 JIT (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: add `type` and `data` fields (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: use `ex` for `exception_table_entry` (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: make fixup_exception() return bool (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: consolidate definitions (Yauheni Kaliuta) [2152138 2140163]
- arm64: kvm: use kvm_exception_table_entry (Yauheni Kaliuta) [2152138 2140163]
- be2net: Fix buffer overflow in be_get_module_eeprom (Josef Oskera) [2160182 2126917]</changelog>
</package>
<package pkgid="6672e80906d60311f4525c48085194ebaebb6087ca284520547acb272dbb71c1" name="kernel-debug-modules" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="425.19.2.el8_7"/>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.11.1.el8_7]" date="1673006400">- NFSD: Protect against send buffer overflow in NFSv3 READ (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv2 READ (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv3 READDIR (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv2 READDIR (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- SUNRPC: Fix svcxdr_init_encode's buflen calculation (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- SUNRPC: Fix svcxdr_init_decode's end-of-buffer calculation (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- panic, kexec: make __crash_kexec() NMI safe (Valentin Schneider) [2139580 2134126]
- kexec: turn all kexec_mutex acquisitions into trylocks (Valentin Schneider) [2139580 2134126]
- kexec: move locking into do_kexec_load (Valentin Schneider) [2139580 2134126]
- vdpa/mlx5: re-create forwarding rules after mac modified (Laurent Vivier) [2152912 2145136]
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry (Waiman Long) [2153653 2108387]
- irq: Call tick_irq_enter() inside HARDIRQ_OFFSET (Waiman Long) [2153653 2108387]
- irqtime: Move irqtime entry accounting after irq offset incrementation (Waiman Long) [2153653 2108387]
- sched/vtime: Consolidate IRQ time accounting (Waiman Long) [2153653 2108387]
- s390/vtime: Use the generic IRQ entry accounting (Waiman Long) [2153653 2108387]
- sched/cputime: Remove symbol exports from IRQ time accounting (Waiman Long) [2153653 2108387]
- genirq/irqdomain: Don't try to free an interrupt that has no mapping (Waiman Long) [2153653 2108387]
- genirq: Provide __irq_enter/exit_raw() (Waiman Long) [2153653 2108387]
- powerpc/time: Only set CONFIG_ARCH_HAS_SCALED_CPUTIME on PPC64 (Waiman Long) [2153653 2108387]
- powerpc/time: isolate scaled cputime accounting in dedicated functions. (Waiman Long) [2153653 2108387]
- PCI: hv: Fix synchronization between channel callback and hv_pci_bus_exit() (Mohammed Gamal) [2155280 2144708]
- PCI: hv: Fix synchronization between channel callback and hv_compose_msi_msg() (Mohammed Gamal) [2155280 2144708]
- PCI: hv: Use vmbus_requestor to generate transaction IDs for VMbus hardening (Mohammed Gamal) [2155280 2144708]
- net/mlx5e: TC, Reject forwarding from internal port to internal port (Mohammad Kabat) [2141959 2131345]
- hv_netvsc: Fix race between VF offering and VF association message from host (Mohammed Gamal) [2155272 2149279]
- x86/mce: Reduce number of machine checks taken during recovery (Prarit Bhargava) [2137592 2104388]
- cgroup/cpuset: Reduce cpuset_rwsem writer latency (Waiman Long) [2153108 2149031]
- rcu/exp: Mark current CPU as exp-QS in IPI loop second pass (Waiman Long) [2153108 2149031]
- rcu: Always inline rcu_dynticks_task*_{enter,exit}() (Waiman Long) [2153108 2149031]
- rcu: Fix existing exp request check in sync_sched_exp_online_cleanup() (Waiman Long) [2153108 2149031]
- rcu: Fix macro name CONFIG_TASKS_RCU_TRACE (Waiman Long) [2153108 2149031]
- rcu: Fix stall-warning deadlock due to non-release of rcu_node -&gt;lock (Waiman Long) [2153108 2149031]
- rcu: Fix to include first blocked task in stall warning (Waiman Long) [2153108 2149031]
- cgroup: Use cgroup_attach_{lock,unlock}() from cgroup_attach_task_all() (Waiman Long) [2153108 2149031]
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all() (Waiman Long) [2153108 2149031]
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock (Waiman Long) [2153108 2149031]
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree (Waiman Long) [2153108 2149031]
- cgroup/cpuset: Fix a race between cpuset_attach() and cpu hotplug (Waiman Long) [2153108 2149031]
- cgroup: reduce dependency on cgroup_mutex (Waiman Long) [2153108 2149031]
- sunrpc: Set sk_allocation to GFP_NOFS to avoid using current-&gt;task_frag. (Guillaume Nault) [2153230 2089660]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.12.1.el8_7]" date="1674129600">- x86/fpu: Prevent FPU state corruption (Oleksandr Natalenko) [2134586 2130890]
- x86/fpu: Drop fpregs lock before inheriting FPU permissions (Eder Zulian) [2154460 2153549]
- kernel-doc: fix undefined args variable (Jan Stancek) [2157905 2134954]
- mm: memcontrol: fix potential oom_lock recursion deadlock (Waiman Long) [2157922 2138886]
- memcg: prohibit unconditional exceeding the limit of dying tasks (Waiman Long) [2157922 2138886]
- mm, oom: do not trigger out_of_memory from the #PF (Waiman Long) [2157922 2138886]
- mm, oom: pagefault_out_of_memory: don't force global OOM for dying tasks (Waiman Long) [2157922 2138886]
- mm: memcontrol: don't count limit-setting reclaim as memory pressure (Waiman Long) [2157922 2138886]
- KVM: s390: vsie: Fix the initialization of the epoch extension (epdx) field (Thomas Huth) [2158813 2151854]
- net: mana: Fix race on per-CQ variable napi work_done (Emanuele Giuseppe Esposito) [2155437 2151722]
- mei: me: add adler lake point S DID (Prarit Bhargava) [2141783 2141602]
- PCI: hv: Only reuse existing IRTE allocation for Multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix the definition of vector in hv_compose_msi_msg() (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix interrupt mapping for multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Reuse existing IRTE allocation in compose_msi_msg() (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix hv_arch_irq_unmask() for multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix multi-MSI to allow more than one MSI vector (Emanuele Giuseppe Esposito) [2155289 2100275]
- drm/ast: Support multiple outputs (Jarod Wilson) [2149287 2147553]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.13.1.el8_7]" date="1675339200">- mm/cgroup/reclaim: fix dirty pages throttling on cgroup v1 (Waiman Long) [2160221]
- mm: vmscan: remove deadlock due to throttling failing to make progress (Waiman Long) [2160221]
- mm: vmscan: reduce throttling due to a failure to make progress -fix (Waiman Long) [2160221]
- mm: vmscan: Reduce throttling due to a failure to make progress (Waiman Long) [2160221]
- mm/vmscan: delay waking of tasks throttled on NOPROGRESS (Waiman Long) [2160221]
- mm/vmscan: increase the timeout if page reclaim is not making progress (Waiman Long) [2160221]
- mm/vmscan: centralise timeout values for reclaim_throttle (Waiman Long) [2160221]
- mm/page_alloc: remove the throttling logic from the page allocator (Waiman Long) [2160221]
- mm/writeback: throttle based on page writeback instead of congestion (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim when no progress is being made (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim and compaction when too may pages are isolated (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim until some writeback completes if congested (Waiman Long) [2160221]
- mm/vmscan.c: delete or fix duplicated words (Waiman Long) [2160221]
- mm,page_alloc: PF_WQ_WORKER threads must sleep at should_reclaim_retry() (Nico Pache) [2160221]
- ceph: avoid putting the realm twice when decoding snaps fails (Xiubo Li) [2155797 2139881]
- mm/mremap: hold the rmap lock in write mode when moving page table entries. (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: use pmd/pud_poplulate to update page table entries (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: don't enable optimized PUD move if page table levels is 2 (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: convert huge PUD move to separate helper (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: fix BUILD_BUG_ON() error in get_extent (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap.c: fix extent calculation (Waiman Long) [2140944] {CVE-2022-41222}
- x86: mremap speedup - Enable HAVE_MOVE_PUD (Waiman Long) [2140944] {CVE-2022-41222}
- mm: speedup mremap on 1GB or larger regions (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: start addresses are properly aligned (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: calculate extent in one place (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: it is sure to have enough space when extent meets requirement (Waiman Long) [2140944] {CVE-2022-41222}
- s390/boot: add secure boot trailer (Tobias Huschle) [2151530 2141967]
- i40e: Fix VF hang when reset is triggered on another VF (Ivan Vecera) [2160460 2103801]
- i2c: ismt: Fix an out-of-bounds bug in ismt_access() (Prarit Bhargava) [2154388 2119066] {CVE-2022-2873}
- iavf: schedule watchdog immediately when changing primary MAC (Michal Schmidt) [2163257 2152493]
- iavf: Move netdev_update_features() into watchdog task (Michal Schmidt) [2163257 2152493]
- iavf: fix temporary deadlock and failure to set MAC address (Michal Schmidt) [2163257 2152493]
- iavf: Fix error handling in iavf_init_module() (Michal Schmidt) [2163257 2152493]
- iommu/vt-d: Clean up si_domain in the init_dmars() error path (Jerry Snitselaar) [2149474 2118428]
- x86/pci/xen: Use msi_msg shadow structs (Jerry Snitselaar) [2149474 2118428]
- iommu/intel: Use msi_msg shadow structs (Jerry Snitselaar) [2149474 2118428]
- PCI: MSI: Fix Kconfig dependencies for PCI_MSI_ARCH_FALLBACKS (Jerry Snitselaar) [2149474 2118428]
- x86/apic/msi: Unbreak DMAR and HPET MSI (Jerry Snitselaar) [2149474 2118428]
- iommu/amd: Remove domain search for PCI/MSI (Jerry Snitselaar) [2149474 2118428]
- iommu/vt-d: Remove domain search for PCI/MSI[X] (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Make most MSI ops XEN private (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Cleanup the arch_*_msi_irqs() leftovers (Jerry Snitselaar) [2149474 2118428]
- PCI/MSI: Make arch_.*_msi_irq[s] fallbacks selectable (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Wrap XEN MSI management into irqdomain (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Consolidate XEN-MSI init (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Rework MSI teardown (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Make xen_msi_init() static and rename it to xen_hvm_msi_init() (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Move apic_post_init() invocation to one place (Jerry Snitselaar) [2149474 2118428]
- x86/msi: Use generic MSI domain ops (Jerry Snitselaar) [2149474 2118428]
- x86/msi: Remove pointless vcpu_affinity callback (Jerry Snitselaar) [2149474 2118428]
- iommu/vt-d: Fix compile error with CONFIG_PCI_ATS not set (Myron Stowe) [2149474 2118428]
- iommu/vt-d: Cure VF irqdomain hickup (Myron Stowe) [2149474 2118428]
- x86/pci: Set default irq domain in pcibios_add_device() (Myron Stowe) [2149474 2118428]
- iommm/amd: Store irq domain in struct device (Myron Stowe) [2149474 2118428]
- iommm/vt-d: Store irq domain in struct device (Myron Stowe) [2149474 2118428]
- PCI/MSI: Provide pci_dev_has_special_msi_domain() helper (Myron Stowe) [2149474 2118428]
- x86/msi: Consolidate MSI allocation (Myron Stowe) [2149474 2118428]
- PCI/MSI: Rework pci_msi_domain_calc_hwirq() (Myron Stowe) [2149474 2118428]
- x86/irq: Consolidate UV domain allocation (Myron Stowe) [2149474 2118428]
- x86/irq: Consolidate DMAR irq allocation (Myron Stowe) [2149474 2118428]
- x86_ioapic_Consolidate_IOAPIC_allocation (Myron Stowe) [2149474 2118428]
- x86/msi: Consolidate HPET allocation (Myron Stowe) [2149474 2118428]
- iommu/irq_remapping: Consolidate irq domain lookup (Myron Stowe) [2149474 2118428]
- iommu/amd: Consolidate irq domain getter (Myron Stowe) [2149474 2118428]
- iommu/vt-d: Consolidate irq domain getter (Myron Stowe) [2149474 2118428]
- x86/irq: Add allocation type for parent domain retrieval (Myron Stowe) [2149474 2118428]
- irqdomain: Export irq_domain_update_bus_token (Myron Stowe) [2149474 2118428]
- gitlab-ci: use CI templates from production branch (Michael Hofmann)
- iavf: remove INITIAL_MAC_SET to allow gARP to work properly (Stefan Assmann) [2149745 1938635]
- Revert "scsi: iscsi: ql4xxx: Use per-session workqueue for unbinding" (Chris Leech) [2152734 2122624]
- Revert "scsi: iscsi: Use the session workqueue for recovery" (Chris Leech) [2152734 2122624]
- arm64/bpf: Remove 128MB limit for BPF JIT programs (Yauheni Kaliuta) [2152138 2140163]
- bpf: Define bpf_jit_alloc_exec_limit for arm64 JIT (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: add `type` and `data` fields (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: use `ex` for `exception_table_entry` (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: make fixup_exception() return bool (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: consolidate definitions (Yauheni Kaliuta) [2152138 2140163]
- arm64: kvm: use kvm_exception_table_entry (Yauheni Kaliuta) [2152138 2140163]
- be2net: Fix buffer overflow in be_get_module_eeprom (Josef Oskera) [2160182 2126917]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.14.1.el8_7]" date="1676030400">- ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems (Wei Huang) [2142170 2130653]
- KVM: x86: nSVM: implement nested LBR virtualization (Emanuele Giuseppe Esposito) [2166362 2155149]
- KVM: x86: nSVM: correctly virtualize LBR msrs when L2 is running (Emanuele Giuseppe Esposito) [2166362 2155149]
- kvm: x86: SVM: use vmcb* instead of svm-&gt;vmcb where it makes sense (Emanuele Giuseppe Esposito) [2166362 2155149]
- KVM: x86: nSVM: implement nested VMLOAD/VMSAVE (Emanuele Giuseppe Esposito) [2166362 2155149]
- IB/iser: Fix login with authentication (Kamal Heib) [2161750 2120676]
- act_mirred: use the backlog for nested calls to mirred ingress (Davide Caratti) [2164648 2131339] {CVE-2022-4269}
- net/sched: act_mirred: better wording on protection against excessive stack growth (Davide Caratti) [2164648 2131339] {CVE-2022-4269}
- redhat/configs: Set CONFIG_X86_AMD_PSTATE to 'm' (Prarit Bhargava) [2151275 2145246]
- KVM: x86: smm: preserve interrupt shadow in SMRAM (Maxim Levitsky) [2166368 2097144]
- KVM: x86: SVM: don't save SVM state to SMRAM when VM is not long mode capable (Maxim Levitsky) [2166368 2097144]
- KVM: x86: SVM: use smram structs (Maxim Levitsky) [2166368 2097144]
- KVM: svm: drop explicit return value of kvm_vcpu_map (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: use smram struct for 64 bit smram load/restore (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: use smram struct for 32 bit smram load/restore (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: use smram structs in the common code (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: add structs for KVM's smram layout (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: check for failures on smm entry (Maxim Levitsky) [2166368 2097144]
- KVM: x86: do not go through ctxt-&gt;ops when emulating rsm (Maxim Levitsky) [2166368 2097144]
- KVM: x86: move SMM exit to a new file (Maxim Levitsky) [2166368 2097144]
- KVM: x86: move SMM entry to a new file (Maxim Levitsky) [2166368 2097144]
- KVM: x86: start moving SMM-related functions to new files (Maxim Levitsky) [2166368 2097144]
- bug: introduce ASSERT_STRUCT_OFFSET (Maxim Levitsky) [2166368 2097144]
- KVM: x86: Rename and expose helper to detect if INIT/SIPI are allowed (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: number of GPRs in the SMRAM image depends on the image format (Maxim Levitsky) [2166368 2097144]
- KVM: x86: emulator: update the emulation mode after CR0 write (Maxim Levitsky) [2166368 2097144]
- KVM: x86: emulator: update the emulation mode after rsm (Maxim Levitsky) [2166368 2097144]
- KVM: x86: emulator: introduce emulator_recalc_and_set_mode (Maxim Levitsky) [2166368 2097144]
- KVM: x86: emulator: em_sysexit should update ctxt-&gt;mode (Maxim Levitsky) [2166368 2097144]
- KVM: x86: Bug the VM if the emulator accesses a non-existent GPR (Maxim Levitsky) [2166368 2097144]
- \KVM: x86: Reduce the number of emulator GPRs to '8' for 32-bit KVM (Maxim Levitsky) [2166368 2097144]
- KVM: x86: Use 16-bit fields to track dirty/valid emulator GPRs (Maxim Levitsky) [2166368 2097144]
- KVM: x86: Omit VCPU_REGS_RIP from emulator's _regs array (Maxim Levitsky) [2166368 2097144]
- \KVM: x86: Harden _regs accesses to guard against buggy input (Maxim Levitsky) [2166368 2097144]
- KVM: x86: Grab regs_dirty in local 'unsigned long' (Maxim Levitsky) [2166368 2097144]
- proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152571 2152572] {CVE-2022-4378}
- proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152571 2152572] {CVE-2022-4378}</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.15.1.el8_7]" date="1676548800">- net/mlx5e: Fix use-after-free when reverting termination table (Amir Tzin) [2167640 2112927]
- net/mlx5: Do not query pci info while pci disabled (Amir Tzin) [2167645 2129249]
- x86/fpu: Fix copy_xstate_to_uabi() to copy init states correctly (Dean Nelson) [2168384 2122850]
- x86/fpu: Exclude dynamic states from init_fpstate (Dean Nelson) [2168384 2122850]
- x86/fpu: Fix the init_fpstate size check with the actual size (Dean Nelson) [2168384 2122850]
- x86/fpu: Configure init_fpstate attributes orderly (Dean Nelson) [2168384 2122850]
- x86/fpu/xstate: Fix the ARCH_REQ_XCOMP_PERM implementation (Dean Nelson) [2168384 2122850]
- net/mlx5: E-Switch, properly handle ingress tagged packets on VST (Amir Tzin) [2166665 2096109]
- cpuhotplug: Fix KABI breakage (Prarit Bhargava) [2162763 2156529]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.16.1.el8_7]" date="1677153600">- ipv6: fix panic when fib_lookup_arg-&gt;result is fib6_info (Jiri Benc) [2167602 2140599]
- ceph: blocklist the kclient when receiving corrupted snap trace (Xiubo Li) [2168896 2162414]
- ceph: move mount state enum to super.h (Xiubo Li) [2168896 2162414]
- s390/kexec: fix ipl report address for kdump (Tobias Huschle) [2166296 2161328]
- mm, compaction: fix fast_isolate_around() to stay within boundaries (Daniel Vacek) [2170576 2149309]
- scsi: storvsc: Fix swiotlb bounce buffer leak in confidential VM (Emanuele Giuseppe Esposito) [2170228 2150659]
- netfilter: conntrack: handle tcp challenge acks during connection reuse (Florian Westphal) [2165587 2158726]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.17.1.el8_7]" date="1677844800">- net: mana: Add rmb after checking owner bits (Mohammed Gamal) [2173103 2139462]
- net: mana: Add support of XDP_REDIRECT action (Mohammed Gamal) [2173103 2139462]
- net: mana: Add the Linux MANA PF driver (Mohammed Gamal) [2173103 2139462]
- ice: fix lost multicast packets in promisc mode (Ken Cox) [2172550 2138215]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.18.0-425.18.1.el8_7]" date="1678449600">- futex: Resend potentially swallowed owner death notification (Rafael Aquini) [2170054 2161526]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.19.1.el8_7]" date="1678968000">- s390/dasd: fix no record found for raw_track_access (Tobias Huschle) [2167776 2161270]
- locking/rwsem: Disable preemption in all down_read*() and up_read() code paths (Waiman Long) [2170939 2162139]
- locking/rwsem: Prevent non-first waiter from spinning in down_write() slowpath (Waiman Long) [2170939 2162139]
- locking/rwsem: Allow slowpath writer to ignore handoff bit if not set by first waiter (Waiman Long) [2170939 2162139]
- locking/rwsem: Always try to wake waiters in out_nolock path (Waiman Long) [2170939 2162139]
- locking/rwsem: No need to check for handoff bit if wait queue empty (Waiman Long) [2170939 2162139]
- locking/rwsem: Make handoff bit handling more consistent (Waiman Long) [2170939 2162139]
- locking/rwsem: Disable preemption while trying for rwsem lock (Waiman Long) [2170939 2162139]
- locking/rwsem: Conditionally wake waiters in reader/writer slowpaths (Waiman Long) [2170939 2162139]
- locking: Make owner_on_cpu() into &lt;linux/sched.h&gt; (Waiman Long) [2170939 2162139]
- locking/rwsem: Optimize down_read_trylock() under highly contended case (Waiman Long) [2170939 2162139]
- locking/rwsem: Fix comments about reader optimistic lock stealing conditions (Waiman Long) [2170939 2162139]
- locking/rwsem: Disable preemption for spinning region (Waiman Long) [2170939 2162139]
- locking: Remove rcu_read_{,un}lock() for preempt_{dis,en}able() (Waiman Long) [2170939 2162139]
- watchdog: fix UAF in reboot notifier handling in watchdog core code (Wander Lairson Costa) [2139770 2131308]
- netfilter: nf_conntrack_irc: Tighten matching on DCC message (Wander Lairson Costa) [2139770 2131308]
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF (Jaroslav Kysela) [2163400 2163401] {CVE-2023-0266}
- net/mlx5e: Fix enabling sriov while tc nic rules are offloaded (Amir Tzin) [2167647 2112925]
- net/mlx5: E-Switch, pair only capable devices (Amir Tzin) [2167647 2112925]
- net/mlx5: Fix mlx5_get_next_dev() peer device matching (Amir Tzin) [2167647 2112925]
- net/mlx5: Lag, filter non compatible devices (Amir Tzin) [2167647 2112925]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.19.2.el8_7.gf5e8]" date="1678968001">- ovl: fail on invalid uid/gid mapping at copy up (Miklos Szeredi) [2165341 2165342] {CVE-2023-0386}</changelog>
</package>
<package pkgid="fb37aea86296afac300ffe2aa28c32f7322856f146aef4bdbb1a3a6981c1b89f" name="kernel-debug-modules-extra" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="425.10.1.el8_7"/>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.1.1.el8]" date="1663588800">- i40e: Fix kernel crash during module removal (Ivan Vecera) [2091489]
- redhat: enable zstream release numbering for rhel 8.7 (Jarod Wilson)
- ice: Allow operation with reduced device MSI-X (Petr Oros) [2102844]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.2.1.el8]" date="1664193600">- EDAC/ghes: Set the DIMM label unconditionally (Aristeu Rozanski) [2109712]
- configs: enable CONFIG_HP_ILO for aarch64 (Mark Salter) [2123508]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.3.1.el8]" date="1664539200">- iwlwifi: limit fw version for AC9560 to avoid fw crash (Íñigo Huguet) [2129297]
- sfc: fix null pointer dereference in efx_hard_start_xmit (Íñigo Huguet) [2119638]
- sfc: fix TX channel offset when using legacy interrupts (Íñigo Huguet) [2119638]
- netfilter: conntrack: reduce timeout when receiving out-of-window fin or rst (Florian Westphal) [2047366]
- netfilter: conntrack: remove unneeded indent level (Florian Westphal) [2047366]
- netfilter: conntrack: ignore overly delayed tcp packets (Florian Westphal) [2047366]
- netfilter: conntrack: prepare tcp_in_window for ternary return value (Florian Westphal) [2047366]
- netfilter: conntrack: remove pr_debug callsites from tcp tracker (Florian Westphal) [2047366]
- netfilter: conntrack: work around exceeded receive window (Florian Westphal) [2047366]
- netfilter: conntrack: improve RST handling when tuple is re-used (Florian Westphal) [2047366]
- netfilter: conntrack: avoid misleading 'invalid' in log message (Florian Westphal) [2047366]
- netfilter: remove BUG_ON() after skb_header_pointer() (Florian Westphal) [2047366]
- iavf: Detach device during reset task (Petr Oros) [2069206]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.4.1.el8]" date="1665144000">- random: allow reseeding DRBG with getrandom (Daiki Ueno) [2121766]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.5.1.el8_7]" date="1667476800">- ice: Fix interface being down after reset with link-down-on-close flag on (Petr Oros) [2136216 2024110]
- ice: Fix crash by keep old cfg when update TCs more than queues (Petr Oros) [2130992 2129902]
- ice: Fix tunnel checksum offload with fragmented traffic (Petr Oros) [2130992 2129902]
- ice: handle E822 generic device ID in PLDM header (Petr Oros) [2130992 2129902]
- ice: ethtool: Prohibit improper channel config for DCB (Petr Oros) [2130992 2129902]
- ice: ethtool: advertise 1000M speeds properly (Petr Oros) [2130992 2129902]
- ice: Fix switchdev rules book keeping (Petr Oros) [2130992 2129902]
- ice: fix access-beyond-end in the switch code (Petr Oros) [2130992 2129902]
- eth: ice: silence the GCC 12 array-bounds warning (Petr Oros) [2130992 2129902]
- ice: Expose RSS indirection tables for queue groups via ethtool (Petr Oros) [2130992 2129902]
- Revert "ice: Hide bus-info in ethtool for PRs in switchdev mode" (Petr Oros) [2130992 2129902]
- ice: remove period on argument description in ice_for_each_vf (Petr Oros) [2130992 2129902]
- ice: add a function comment for ice_cfg_mac_antispoof (Petr Oros) [2130992 2129902]
- ice: fix wording in comment for ice_reset_vf (Petr Oros) [2130992 2129902]
- ice: remove return value comment for ice_reset_all_vfs (Petr Oros) [2130992 2129902]
- ice: always check VF VSI pointer values (Petr Oros) [2130992 2129902]
- ice: add newline to dev_dbg in ice_vf_fdir_dump_info (Petr Oros) [2130992 2129902]
- ice: get switch id on switchdev devices (Petr Oros) [2130992 2129902]
- ice: return ENOSPC when exceeding ICE_MAX_CHAIN_WORDS (Petr Oros) [2130992 2129902]
- ice: introduce common helper for retrieving VSI by vsi_num (Petr Oros) [2130992 2129902]
- ice: use min_t() to make code cleaner in ice_gnss (Petr Oros) [2130992 2129902]
- ice: Add mpls+tso support (Petr Oros) [2130992 2129902]
- ice: switch: convert packet template match code to rodata (Petr Oros) [2130992 2129902]
- ice: switch: use convenience macros to declare dummy pkt templates (Petr Oros) [2130992 2129902]
- ice: switch: use a struct to pass packet template params (Petr Oros) [2130992 2129902]
- ice: switch: unobscurify bitops loop in ice_fill_adv_dummy_packet() (Petr Oros) [2130992 2129902]
- ice: switch: add and use u16[] aliases to ice_adv_lkup_elem::{h, m}_u (Petr Oros) [2130992 2129902]
- ice: Support GTP-U and GTP-C offload in switchdev (Petr Oros) [2130992 2129902]
- ice: Remove useless DMA-32 fallback configuration (Petr Oros) [2130992 2129902]
- ice: switch to napi_build_skb() (Petr Oros) [2130992 2129902]
- redhat: switch to z-stream dist tag and build targets (Jarod Wilson)
- block: avoid sign extend problem with default queue flags mask (Nico Pache) [2135813]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.6.1.el8_7]" date="1668168000">- ice: Add low latency Tx timestamp read (Petr Oros) [2136036 2092425]
- ice: introduce ice_ptp_reset_cached_phctime function (Petr Oros) [2136036 2092425]
- ice: re-arrange some static functions in ice_ptp.c (Petr Oros) [2136036 2092425]
- ice: track and warn when PHC update is late (Petr Oros) [2136036 2092425]
- ice: track Tx timestamp stats similar to other Intel drivers (Petr Oros) [2136036 2092425]
- ice: implement adjfine with mul_u64_u64_div_u64 (Petr Oros) [2136036 2092425]
- ice: Add EXTTS feature to the feature bitmap (Petr Oros) [2136036 2092425]
- math: Export mul_u64_u64_div_u64 (Petr Oros) [2136036 2092425]
- vfio/type1: Unpin zero pages (Alex Williamson) [2128515 2123015]
- net: atlantic: remove aq_nic_deinit() when resume (Íñigo Huguet) [2131935 2130839]
- net: atlantic: remove deep parameter on suspend/resume functions (Íñigo Huguet) [2131935 2130839]
- CI: Use zstream builder container (Veronika Kabatova)
- CI: Add disttag override for 8.7 (Veronika Kabatova)</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.7.1.el8_7]" date="1669723200">- ice: Add additional CSR registers to ETHTOOL_GREGS (Petr Oros) [2136513 2131024]
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps (Petr Oros) [2137270 2106964]
- i40e: Fix VF set max MTU size (Petr Oros) [2137270 2106964]
- iavf: Fix set max MTU size with port VLAN and jumbo frames (Petr Oros) [2137270 2106964]
- iavf: Fix bad page state (Petr Oros) [2137270 2106964]
- Revert "scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels" (Jarod Wilson)
- scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels (Tomas Henzl) [2139216]
- Revert "ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems" (Jarod Wilson)
- ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems (Wei Huang) [2142170 2130653]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.8.1.el8_7]" date="1669982400">- scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels (Tomas Henzl) [2139216 2134535]
- RDMA/mlx5: Set local port to one when accessing counters (Mohammad Kabat) [2141957 2077119]
- drm/mgag200: Fix PLL setup for G200_SE_A rev &gt;=4 (Jocelyn Falempe) [2140152 2130159]
- iavf: Do not restart Tx queues after reset task failure (Petr Oros) [2149081 2134005]
- iavf: Fix a crash during reset task (Petr Oros) [2149081 2134005]
- scsi: core: Allow the ALUA transitioning state enough time (Tomas Henzl) [2147374 2084250]
- scsi: core: Return BLK_STS_TRANSPORT for ALUA transitioning (Tomas Henzl) [2147374 2084250]
- i40e: Fix DMA mappings leak (Ivan Vecera) [2138205 2077847]
- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2142724 2142725] {CVE-2022-2964}
- net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2142724 2142725] {CVE-2022-2964}</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.9.1.el8_7]" date="1670587200">- Documentation/admin-guide: Document nomodeset kernel parameter (Jocelyn Falempe) [2145218 2143952]
- drm: Move nomodeset kernel parameter to the DRM subsystem (Jocelyn Falempe) [2145218 2143952]
- wait: Fix __wait_event_hrtimeout for RT/DL tasks (Derek Barbosa) [2138953 2125233]
- scsi: zfcp: Fix missing auto port scan and thus missing target ports (Tobias Huschle) [2127849 2121089]
- net: Fix return value of qdisc ingress handling on success (Ivan Vecera) [2141878 2131361]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.10.1.el8_7]" date="1671019200">- scsi: target: loop: Fix handling of aborted TMRs (Maurizio Lombardi) [2144583 2141713]
- ice: virtchnl rss hena support (Petr Oros) [2148130]
- ice: Fix configuring VIRTCHNL_OP_CONFIG_VSI_QUEUES with unbalanced queues (Michal Schmidt) [2142017 2137378]
- ice: Add support Flex RXD (Michal Schmidt) [2138157 2131310]
- netfilter: flowtable: fix stuck flows on cleanup due to pending work (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: add function to invoke garbage collection immediately (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: pass flowtable to nf_flow_table_iterate() (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: separate replace, destroy and stats to different workqueues (Phil Sutter) [2134084 2131370]
- x86/paravirt: Add a dummy __x86_paravirt_patch_template() function (Waiman Long) [2152206 2144161]
- x86/paravirt: Fix kABI breakage in struct pv_mmu_ops (Waiman Long) [2152206 2144161]
- drm/i915: fix TLB invalidation for Gen12 video and compute engines (Wander Lairson Costa) [2148149 2148150] {CVE-2022-4139}
- PCI: hv: Do not set PCI_COMMAND_MEMORY to reduce VM boot time (Emanuele Giuseppe Esposito) [2150912 2082836]
- iavf: Fix cached head and tail value for iavf_get_tx_pending (Stefan Assmann) [2149742 2103944]
- iavf: Fix change VF's mac address (Stefan Assmann) [2149742 2103944]
- iavf: Fix race between iavf_close and iavf_reset_task (Stefan Assmann) [2149742 2103944]
- net: ethernet: move from strlcpy with unused retval to strscpy (Stefan Assmann) [2149742 2103944]
- iavf: Fix 'tc qdisc show' listing too many queues (Stefan Assmann) [2149742 2103944]
- iavf: Fix max_rate limiting (Stefan Assmann) [2149742 2103944]
- iavf: Check for duplicate TC flower filter before parsing (Stefan Assmann) [2149742 2103944]
- iavf: Fix handling of dummy receive descriptors (Stefan Assmann) [2149742 2103944]
- iavf: Disallow changing rx/tx-frames and rx/tx-frames-irq (Stefan Assmann) [2149742 2103944]
- intel/iavf:fix repeated words in comments (Stefan Assmann) [2149742 2103944]
- intel: remove unused macros (Stefan Assmann) [2149742 2103944]
- iavf: Add waiting for response from PF in set mac (Stefan Assmann) [2149742 2103944]</changelog>
</package>
<package pkgid="d97d473ea0e4721457c558db32a6d64cafc3eb2482a7b8712e3b3bc4310bbc5d" name="kernel-debug-modules-extra" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="425.13.1.el8_7"/>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.4.1.el8]" date="1665144000">- random: allow reseeding DRBG with getrandom (Daiki Ueno) [2121766]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.5.1.el8_7]" date="1667476800">- ice: Fix interface being down after reset with link-down-on-close flag on (Petr Oros) [2136216 2024110]
- ice: Fix crash by keep old cfg when update TCs more than queues (Petr Oros) [2130992 2129902]
- ice: Fix tunnel checksum offload with fragmented traffic (Petr Oros) [2130992 2129902]
- ice: handle E822 generic device ID in PLDM header (Petr Oros) [2130992 2129902]
- ice: ethtool: Prohibit improper channel config for DCB (Petr Oros) [2130992 2129902]
- ice: ethtool: advertise 1000M speeds properly (Petr Oros) [2130992 2129902]
- ice: Fix switchdev rules book keeping (Petr Oros) [2130992 2129902]
- ice: fix access-beyond-end in the switch code (Petr Oros) [2130992 2129902]
- eth: ice: silence the GCC 12 array-bounds warning (Petr Oros) [2130992 2129902]
- ice: Expose RSS indirection tables for queue groups via ethtool (Petr Oros) [2130992 2129902]
- Revert "ice: Hide bus-info in ethtool for PRs in switchdev mode" (Petr Oros) [2130992 2129902]
- ice: remove period on argument description in ice_for_each_vf (Petr Oros) [2130992 2129902]
- ice: add a function comment for ice_cfg_mac_antispoof (Petr Oros) [2130992 2129902]
- ice: fix wording in comment for ice_reset_vf (Petr Oros) [2130992 2129902]
- ice: remove return value comment for ice_reset_all_vfs (Petr Oros) [2130992 2129902]
- ice: always check VF VSI pointer values (Petr Oros) [2130992 2129902]
- ice: add newline to dev_dbg in ice_vf_fdir_dump_info (Petr Oros) [2130992 2129902]
- ice: get switch id on switchdev devices (Petr Oros) [2130992 2129902]
- ice: return ENOSPC when exceeding ICE_MAX_CHAIN_WORDS (Petr Oros) [2130992 2129902]
- ice: introduce common helper for retrieving VSI by vsi_num (Petr Oros) [2130992 2129902]
- ice: use min_t() to make code cleaner in ice_gnss (Petr Oros) [2130992 2129902]
- ice: Add mpls+tso support (Petr Oros) [2130992 2129902]
- ice: switch: convert packet template match code to rodata (Petr Oros) [2130992 2129902]
- ice: switch: use convenience macros to declare dummy pkt templates (Petr Oros) [2130992 2129902]
- ice: switch: use a struct to pass packet template params (Petr Oros) [2130992 2129902]
- ice: switch: unobscurify bitops loop in ice_fill_adv_dummy_packet() (Petr Oros) [2130992 2129902]
- ice: switch: add and use u16[] aliases to ice_adv_lkup_elem::{h, m}_u (Petr Oros) [2130992 2129902]
- ice: Support GTP-U and GTP-C offload in switchdev (Petr Oros) [2130992 2129902]
- ice: Remove useless DMA-32 fallback configuration (Petr Oros) [2130992 2129902]
- ice: switch to napi_build_skb() (Petr Oros) [2130992 2129902]
- redhat: switch to z-stream dist tag and build targets (Jarod Wilson)
- block: avoid sign extend problem with default queue flags mask (Nico Pache) [2135813]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.6.1.el8_7]" date="1668168000">- ice: Add low latency Tx timestamp read (Petr Oros) [2136036 2092425]
- ice: introduce ice_ptp_reset_cached_phctime function (Petr Oros) [2136036 2092425]
- ice: re-arrange some static functions in ice_ptp.c (Petr Oros) [2136036 2092425]
- ice: track and warn when PHC update is late (Petr Oros) [2136036 2092425]
- ice: track Tx timestamp stats similar to other Intel drivers (Petr Oros) [2136036 2092425]
- ice: implement adjfine with mul_u64_u64_div_u64 (Petr Oros) [2136036 2092425]
- ice: Add EXTTS feature to the feature bitmap (Petr Oros) [2136036 2092425]
- math: Export mul_u64_u64_div_u64 (Petr Oros) [2136036 2092425]
- vfio/type1: Unpin zero pages (Alex Williamson) [2128515 2123015]
- net: atlantic: remove aq_nic_deinit() when resume (Íñigo Huguet) [2131935 2130839]
- net: atlantic: remove deep parameter on suspend/resume functions (Íñigo Huguet) [2131935 2130839]
- CI: Use zstream builder container (Veronika Kabatova)
- CI: Add disttag override for 8.7 (Veronika Kabatova)</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.7.1.el8_7]" date="1669723200">- ice: Add additional CSR registers to ETHTOOL_GREGS (Petr Oros) [2136513 2131024]
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps (Petr Oros) [2137270 2106964]
- i40e: Fix VF set max MTU size (Petr Oros) [2137270 2106964]
- iavf: Fix set max MTU size with port VLAN and jumbo frames (Petr Oros) [2137270 2106964]
- iavf: Fix bad page state (Petr Oros) [2137270 2106964]
- Revert "scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels" (Jarod Wilson)
- scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels (Tomas Henzl) [2139216]
- Revert "ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems" (Jarod Wilson)
- ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems (Wei Huang) [2142170 2130653]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.8.1.el8_7]" date="1669982400">- scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels (Tomas Henzl) [2139216 2134535]
- RDMA/mlx5: Set local port to one when accessing counters (Mohammad Kabat) [2141957 2077119]
- drm/mgag200: Fix PLL setup for G200_SE_A rev &gt;=4 (Jocelyn Falempe) [2140152 2130159]
- iavf: Do not restart Tx queues after reset task failure (Petr Oros) [2149081 2134005]
- iavf: Fix a crash during reset task (Petr Oros) [2149081 2134005]
- scsi: core: Allow the ALUA transitioning state enough time (Tomas Henzl) [2147374 2084250]
- scsi: core: Return BLK_STS_TRANSPORT for ALUA transitioning (Tomas Henzl) [2147374 2084250]
- i40e: Fix DMA mappings leak (Ivan Vecera) [2138205 2077847]
- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2142724 2142725] {CVE-2022-2964}
- net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2142724 2142725] {CVE-2022-2964}</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.9.1.el8_7]" date="1670587200">- Documentation/admin-guide: Document nomodeset kernel parameter (Jocelyn Falempe) [2145218 2143952]
- drm: Move nomodeset kernel parameter to the DRM subsystem (Jocelyn Falempe) [2145218 2143952]
- wait: Fix __wait_event_hrtimeout for RT/DL tasks (Derek Barbosa) [2138953 2125233]
- scsi: zfcp: Fix missing auto port scan and thus missing target ports (Tobias Huschle) [2127849 2121089]
- net: Fix return value of qdisc ingress handling on success (Ivan Vecera) [2141878 2131361]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.10.1.el8_7]" date="1671019200">- scsi: target: loop: Fix handling of aborted TMRs (Maurizio Lombardi) [2144583 2141713]
- ice: virtchnl rss hena support (Petr Oros) [2148130]
- ice: Fix configuring VIRTCHNL_OP_CONFIG_VSI_QUEUES with unbalanced queues (Michal Schmidt) [2142017 2137378]
- ice: Add support Flex RXD (Michal Schmidt) [2138157 2131310]
- netfilter: flowtable: fix stuck flows on cleanup due to pending work (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: add function to invoke garbage collection immediately (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: pass flowtable to nf_flow_table_iterate() (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: separate replace, destroy and stats to different workqueues (Phil Sutter) [2134084 2131370]
- x86/paravirt: Add a dummy __x86_paravirt_patch_template() function (Waiman Long) [2152206 2144161]
- x86/paravirt: Fix kABI breakage in struct pv_mmu_ops (Waiman Long) [2152206 2144161]
- drm/i915: fix TLB invalidation for Gen12 video and compute engines (Wander Lairson Costa) [2148149 2148150] {CVE-2022-4139}
- PCI: hv: Do not set PCI_COMMAND_MEMORY to reduce VM boot time (Emanuele Giuseppe Esposito) [2150912 2082836]
- iavf: Fix cached head and tail value for iavf_get_tx_pending (Stefan Assmann) [2149742 2103944]
- iavf: Fix change VF's mac address (Stefan Assmann) [2149742 2103944]
- iavf: Fix race between iavf_close and iavf_reset_task (Stefan Assmann) [2149742 2103944]
- net: ethernet: move from strlcpy with unused retval to strscpy (Stefan Assmann) [2149742 2103944]
- iavf: Fix 'tc qdisc show' listing too many queues (Stefan Assmann) [2149742 2103944]
- iavf: Fix max_rate limiting (Stefan Assmann) [2149742 2103944]
- iavf: Check for duplicate TC flower filter before parsing (Stefan Assmann) [2149742 2103944]
- iavf: Fix handling of dummy receive descriptors (Stefan Assmann) [2149742 2103944]
- iavf: Disallow changing rx/tx-frames and rx/tx-frames-irq (Stefan Assmann) [2149742 2103944]
- intel/iavf:fix repeated words in comments (Stefan Assmann) [2149742 2103944]
- intel: remove unused macros (Stefan Assmann) [2149742 2103944]
- iavf: Add waiting for response from PF in set mac (Stefan Assmann) [2149742 2103944]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.11.1.el8_7]" date="1673006400">- NFSD: Protect against send buffer overflow in NFSv3 READ (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv2 READ (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv3 READDIR (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv2 READDIR (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- SUNRPC: Fix svcxdr_init_encode's buflen calculation (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- SUNRPC: Fix svcxdr_init_decode's end-of-buffer calculation (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- panic, kexec: make __crash_kexec() NMI safe (Valentin Schneider) [2139580 2134126]
- kexec: turn all kexec_mutex acquisitions into trylocks (Valentin Schneider) [2139580 2134126]
- kexec: move locking into do_kexec_load (Valentin Schneider) [2139580 2134126]
- vdpa/mlx5: re-create forwarding rules after mac modified (Laurent Vivier) [2152912 2145136]
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry (Waiman Long) [2153653 2108387]
- irq: Call tick_irq_enter() inside HARDIRQ_OFFSET (Waiman Long) [2153653 2108387]
- irqtime: Move irqtime entry accounting after irq offset incrementation (Waiman Long) [2153653 2108387]
- sched/vtime: Consolidate IRQ time accounting (Waiman Long) [2153653 2108387]
- s390/vtime: Use the generic IRQ entry accounting (Waiman Long) [2153653 2108387]
- sched/cputime: Remove symbol exports from IRQ time accounting (Waiman Long) [2153653 2108387]
- genirq/irqdomain: Don't try to free an interrupt that has no mapping (Waiman Long) [2153653 2108387]
- genirq: Provide __irq_enter/exit_raw() (Waiman Long) [2153653 2108387]
- powerpc/time: Only set CONFIG_ARCH_HAS_SCALED_CPUTIME on PPC64 (Waiman Long) [2153653 2108387]
- powerpc/time: isolate scaled cputime accounting in dedicated functions. (Waiman Long) [2153653 2108387]
- PCI: hv: Fix synchronization between channel callback and hv_pci_bus_exit() (Mohammed Gamal) [2155280 2144708]
- PCI: hv: Fix synchronization between channel callback and hv_compose_msi_msg() (Mohammed Gamal) [2155280 2144708]
- PCI: hv: Use vmbus_requestor to generate transaction IDs for VMbus hardening (Mohammed Gamal) [2155280 2144708]
- net/mlx5e: TC, Reject forwarding from internal port to internal port (Mohammad Kabat) [2141959 2131345]
- hv_netvsc: Fix race between VF offering and VF association message from host (Mohammed Gamal) [2155272 2149279]
- x86/mce: Reduce number of machine checks taken during recovery (Prarit Bhargava) [2137592 2104388]
- cgroup/cpuset: Reduce cpuset_rwsem writer latency (Waiman Long) [2153108 2149031]
- rcu/exp: Mark current CPU as exp-QS in IPI loop second pass (Waiman Long) [2153108 2149031]
- rcu: Always inline rcu_dynticks_task*_{enter,exit}() (Waiman Long) [2153108 2149031]
- rcu: Fix existing exp request check in sync_sched_exp_online_cleanup() (Waiman Long) [2153108 2149031]
- rcu: Fix macro name CONFIG_TASKS_RCU_TRACE (Waiman Long) [2153108 2149031]
- rcu: Fix stall-warning deadlock due to non-release of rcu_node -&gt;lock (Waiman Long) [2153108 2149031]
- rcu: Fix to include first blocked task in stall warning (Waiman Long) [2153108 2149031]
- cgroup: Use cgroup_attach_{lock,unlock}() from cgroup_attach_task_all() (Waiman Long) [2153108 2149031]
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all() (Waiman Long) [2153108 2149031]
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock (Waiman Long) [2153108 2149031]
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree (Waiman Long) [2153108 2149031]
- cgroup/cpuset: Fix a race between cpuset_attach() and cpu hotplug (Waiman Long) [2153108 2149031]
- cgroup: reduce dependency on cgroup_mutex (Waiman Long) [2153108 2149031]
- sunrpc: Set sk_allocation to GFP_NOFS to avoid using current-&gt;task_frag. (Guillaume Nault) [2153230 2089660]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.12.1.el8_7]" date="1674129600">- x86/fpu: Prevent FPU state corruption (Oleksandr Natalenko) [2134586 2130890]
- x86/fpu: Drop fpregs lock before inheriting FPU permissions (Eder Zulian) [2154460 2153549]
- kernel-doc: fix undefined args variable (Jan Stancek) [2157905 2134954]
- mm: memcontrol: fix potential oom_lock recursion deadlock (Waiman Long) [2157922 2138886]
- memcg: prohibit unconditional exceeding the limit of dying tasks (Waiman Long) [2157922 2138886]
- mm, oom: do not trigger out_of_memory from the #PF (Waiman Long) [2157922 2138886]
- mm, oom: pagefault_out_of_memory: don't force global OOM for dying tasks (Waiman Long) [2157922 2138886]
- mm: memcontrol: don't count limit-setting reclaim as memory pressure (Waiman Long) [2157922 2138886]
- KVM: s390: vsie: Fix the initialization of the epoch extension (epdx) field (Thomas Huth) [2158813 2151854]
- net: mana: Fix race on per-CQ variable napi work_done (Emanuele Giuseppe Esposito) [2155437 2151722]
- mei: me: add adler lake point S DID (Prarit Bhargava) [2141783 2141602]
- PCI: hv: Only reuse existing IRTE allocation for Multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix the definition of vector in hv_compose_msi_msg() (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix interrupt mapping for multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Reuse existing IRTE allocation in compose_msi_msg() (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix hv_arch_irq_unmask() for multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix multi-MSI to allow more than one MSI vector (Emanuele Giuseppe Esposito) [2155289 2100275]
- drm/ast: Support multiple outputs (Jarod Wilson) [2149287 2147553]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.13.1.el8_7]" date="1675339200">- mm/cgroup/reclaim: fix dirty pages throttling on cgroup v1 (Waiman Long) [2160221]
- mm: vmscan: remove deadlock due to throttling failing to make progress (Waiman Long) [2160221]
- mm: vmscan: reduce throttling due to a failure to make progress -fix (Waiman Long) [2160221]
- mm: vmscan: Reduce throttling due to a failure to make progress (Waiman Long) [2160221]
- mm/vmscan: delay waking of tasks throttled on NOPROGRESS (Waiman Long) [2160221]
- mm/vmscan: increase the timeout if page reclaim is not making progress (Waiman Long) [2160221]
- mm/vmscan: centralise timeout values for reclaim_throttle (Waiman Long) [2160221]
- mm/page_alloc: remove the throttling logic from the page allocator (Waiman Long) [2160221]
- mm/writeback: throttle based on page writeback instead of congestion (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim when no progress is being made (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim and compaction when too may pages are isolated (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim until some writeback completes if congested (Waiman Long) [2160221]
- mm/vmscan.c: delete or fix duplicated words (Waiman Long) [2160221]
- mm,page_alloc: PF_WQ_WORKER threads must sleep at should_reclaim_retry() (Nico Pache) [2160221]
- ceph: avoid putting the realm twice when decoding snaps fails (Xiubo Li) [2155797 2139881]
- mm/mremap: hold the rmap lock in write mode when moving page table entries. (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: use pmd/pud_poplulate to update page table entries (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: don't enable optimized PUD move if page table levels is 2 (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: convert huge PUD move to separate helper (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: fix BUILD_BUG_ON() error in get_extent (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap.c: fix extent calculation (Waiman Long) [2140944] {CVE-2022-41222}
- x86: mremap speedup - Enable HAVE_MOVE_PUD (Waiman Long) [2140944] {CVE-2022-41222}
- mm: speedup mremap on 1GB or larger regions (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: start addresses are properly aligned (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: calculate extent in one place (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: it is sure to have enough space when extent meets requirement (Waiman Long) [2140944] {CVE-2022-41222}
- s390/boot: add secure boot trailer (Tobias Huschle) [2151530 2141967]
- i40e: Fix VF hang when reset is triggered on another VF (Ivan Vecera) [2160460 2103801]
- i2c: ismt: Fix an out-of-bounds bug in ismt_access() (Prarit Bhargava) [2154388 2119066] {CVE-2022-2873}
- iavf: schedule watchdog immediately when changing primary MAC (Michal Schmidt) [2163257 2152493]
- iavf: Move netdev_update_features() into watchdog task (Michal Schmidt) [2163257 2152493]
- iavf: fix temporary deadlock and failure to set MAC address (Michal Schmidt) [2163257 2152493]
- iavf: Fix error handling in iavf_init_module() (Michal Schmidt) [2163257 2152493]
- iommu/vt-d: Clean up si_domain in the init_dmars() error path (Jerry Snitselaar) [2149474 2118428]
- x86/pci/xen: Use msi_msg shadow structs (Jerry Snitselaar) [2149474 2118428]
- iommu/intel: Use msi_msg shadow structs (Jerry Snitselaar) [2149474 2118428]
- PCI: MSI: Fix Kconfig dependencies for PCI_MSI_ARCH_FALLBACKS (Jerry Snitselaar) [2149474 2118428]
- x86/apic/msi: Unbreak DMAR and HPET MSI (Jerry Snitselaar) [2149474 2118428]
- iommu/amd: Remove domain search for PCI/MSI (Jerry Snitselaar) [2149474 2118428]
- iommu/vt-d: Remove domain search for PCI/MSI[X] (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Make most MSI ops XEN private (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Cleanup the arch_*_msi_irqs() leftovers (Jerry Snitselaar) [2149474 2118428]
- PCI/MSI: Make arch_.*_msi_irq[s] fallbacks selectable (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Wrap XEN MSI management into irqdomain (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Consolidate XEN-MSI init (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Rework MSI teardown (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Make xen_msi_init() static and rename it to xen_hvm_msi_init() (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Move apic_post_init() invocation to one place (Jerry Snitselaar) [2149474 2118428]
- x86/msi: Use generic MSI domain ops (Jerry Snitselaar) [2149474 2118428]
- x86/msi: Remove pointless vcpu_affinity callback (Jerry Snitselaar) [2149474 2118428]
- iommu/vt-d: Fix compile error with CONFIG_PCI_ATS not set (Myron Stowe) [2149474 2118428]
- iommu/vt-d: Cure VF irqdomain hickup (Myron Stowe) [2149474 2118428]
- x86/pci: Set default irq domain in pcibios_add_device() (Myron Stowe) [2149474 2118428]
- iommm/amd: Store irq domain in struct device (Myron Stowe) [2149474 2118428]
- iommm/vt-d: Store irq domain in struct device (Myron Stowe) [2149474 2118428]
- PCI/MSI: Provide pci_dev_has_special_msi_domain() helper (Myron Stowe) [2149474 2118428]
- x86/msi: Consolidate MSI allocation (Myron Stowe) [2149474 2118428]
- PCI/MSI: Rework pci_msi_domain_calc_hwirq() (Myron Stowe) [2149474 2118428]
- x86/irq: Consolidate UV domain allocation (Myron Stowe) [2149474 2118428]
- x86/irq: Consolidate DMAR irq allocation (Myron Stowe) [2149474 2118428]
- x86_ioapic_Consolidate_IOAPIC_allocation (Myron Stowe) [2149474 2118428]
- x86/msi: Consolidate HPET allocation (Myron Stowe) [2149474 2118428]
- iommu/irq_remapping: Consolidate irq domain lookup (Myron Stowe) [2149474 2118428]
- iommu/amd: Consolidate irq domain getter (Myron Stowe) [2149474 2118428]
- iommu/vt-d: Consolidate irq domain getter (Myron Stowe) [2149474 2118428]
- x86/irq: Add allocation type for parent domain retrieval (Myron Stowe) [2149474 2118428]
- irqdomain: Export irq_domain_update_bus_token (Myron Stowe) [2149474 2118428]
- gitlab-ci: use CI templates from production branch (Michael Hofmann)
- iavf: remove INITIAL_MAC_SET to allow gARP to work properly (Stefan Assmann) [2149745 1938635]
- Revert "scsi: iscsi: ql4xxx: Use per-session workqueue for unbinding" (Chris Leech) [2152734 2122624]
- Revert "scsi: iscsi: Use the session workqueue for recovery" (Chris Leech) [2152734 2122624]
- arm64/bpf: Remove 128MB limit for BPF JIT programs (Yauheni Kaliuta) [2152138 2140163]
- bpf: Define bpf_jit_alloc_exec_limit for arm64 JIT (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: add `type` and `data` fields (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: use `ex` for `exception_table_entry` (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: make fixup_exception() return bool (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: consolidate definitions (Yauheni Kaliuta) [2152138 2140163]
- arm64: kvm: use kvm_exception_table_entry (Yauheni Kaliuta) [2152138 2140163]
- be2net: Fix buffer overflow in be_get_module_eeprom (Josef Oskera) [2160182 2126917]</changelog>
</package>
<package pkgid="babe73a493c946f353f6fce4808aabac65e71ccaf82e38aa5e2c151d11ce3d01" name="kernel-debug-modules-extra" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="425.19.2.el8_7"/>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.11.1.el8_7]" date="1673006400">- NFSD: Protect against send buffer overflow in NFSv3 READ (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv2 READ (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv3 READDIR (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv2 READDIR (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- SUNRPC: Fix svcxdr_init_encode's buflen calculation (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- SUNRPC: Fix svcxdr_init_decode's end-of-buffer calculation (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- panic, kexec: make __crash_kexec() NMI safe (Valentin Schneider) [2139580 2134126]
- kexec: turn all kexec_mutex acquisitions into trylocks (Valentin Schneider) [2139580 2134126]
- kexec: move locking into do_kexec_load (Valentin Schneider) [2139580 2134126]
- vdpa/mlx5: re-create forwarding rules after mac modified (Laurent Vivier) [2152912 2145136]
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry (Waiman Long) [2153653 2108387]
- irq: Call tick_irq_enter() inside HARDIRQ_OFFSET (Waiman Long) [2153653 2108387]
- irqtime: Move irqtime entry accounting after irq offset incrementation (Waiman Long) [2153653 2108387]
- sched/vtime: Consolidate IRQ time accounting (Waiman Long) [2153653 2108387]
- s390/vtime: Use the generic IRQ entry accounting (Waiman Long) [2153653 2108387]
- sched/cputime: Remove symbol exports from IRQ time accounting (Waiman Long) [2153653 2108387]
- genirq/irqdomain: Don't try to free an interrupt that has no mapping (Waiman Long) [2153653 2108387]
- genirq: Provide __irq_enter/exit_raw() (Waiman Long) [2153653 2108387]
- powerpc/time: Only set CONFIG_ARCH_HAS_SCALED_CPUTIME on PPC64 (Waiman Long) [2153653 2108387]
- powerpc/time: isolate scaled cputime accounting in dedicated functions. (Waiman Long) [2153653 2108387]
- PCI: hv: Fix synchronization between channel callback and hv_pci_bus_exit() (Mohammed Gamal) [2155280 2144708]
- PCI: hv: Fix synchronization between channel callback and hv_compose_msi_msg() (Mohammed Gamal) [2155280 2144708]
- PCI: hv: Use vmbus_requestor to generate transaction IDs for VMbus hardening (Mohammed Gamal) [2155280 2144708]
- net/mlx5e: TC, Reject forwarding from internal port to internal port (Mohammad Kabat) [2141959 2131345]
- hv_netvsc: Fix race between VF offering and VF association message from host (Mohammed Gamal) [2155272 2149279]
- x86/mce: Reduce number of machine checks taken during recovery (Prarit Bhargava) [2137592 2104388]
- cgroup/cpuset: Reduce cpuset_rwsem writer latency (Waiman Long) [2153108 2149031]
- rcu/exp: Mark current CPU as exp-QS in IPI loop second pass (Waiman Long) [2153108 2149031]
- rcu: Always inline rcu_dynticks_task*_{enter,exit}() (Waiman Long) [2153108 2149031]
- rcu: Fix existing exp request check in sync_sched_exp_online_cleanup() (Waiman Long) [2153108 2149031]
- rcu: Fix macro name CONFIG_TASKS_RCU_TRACE (Waiman Long) [2153108 2149031]
- rcu: Fix stall-warning deadlock due to non-release of rcu_node -&gt;lock (Waiman Long) [2153108 2149031]
- rcu: Fix to include first blocked task in stall warning (Waiman Long) [2153108 2149031]
- cgroup: Use cgroup_attach_{lock,unlock}() from cgroup_attach_task_all() (Waiman Long) [2153108 2149031]
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all() (Waiman Long) [2153108 2149031]
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock (Waiman Long) [2153108 2149031]
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree (Waiman Long) [2153108 2149031]
- cgroup/cpuset: Fix a race between cpuset_attach() and cpu hotplug (Waiman Long) [2153108 2149031]
- cgroup: reduce dependency on cgroup_mutex (Waiman Long) [2153108 2149031]
- sunrpc: Set sk_allocation to GFP_NOFS to avoid using current-&gt;task_frag. (Guillaume Nault) [2153230 2089660]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.12.1.el8_7]" date="1674129600">- x86/fpu: Prevent FPU state corruption (Oleksandr Natalenko) [2134586 2130890]
- x86/fpu: Drop fpregs lock before inheriting FPU permissions (Eder Zulian) [2154460 2153549]
- kernel-doc: fix undefined args variable (Jan Stancek) [2157905 2134954]
- mm: memcontrol: fix potential oom_lock recursion deadlock (Waiman Long) [2157922 2138886]
- memcg: prohibit unconditional exceeding the limit of dying tasks (Waiman Long) [2157922 2138886]
- mm, oom: do not trigger out_of_memory from the #PF (Waiman Long) [2157922 2138886]
- mm, oom: pagefault_out_of_memory: don't force global OOM for dying tasks (Waiman Long) [2157922 2138886]
- mm: memcontrol: don't count limit-setting reclaim as memory pressure (Waiman Long) [2157922 2138886]
- KVM: s390: vsie: Fix the initialization of the epoch extension (epdx) field (Thomas Huth) [2158813 2151854]
- net: mana: Fix race on per-CQ variable napi work_done (Emanuele Giuseppe Esposito) [2155437 2151722]
- mei: me: add adler lake point S DID (Prarit Bhargava) [2141783 2141602]
- PCI: hv: Only reuse existing IRTE allocation for Multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix the definition of vector in hv_compose_msi_msg() (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix interrupt mapping for multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Reuse existing IRTE allocation in compose_msi_msg() (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix hv_arch_irq_unmask() for multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix multi-MSI to allow more than one MSI vector (Emanuele Giuseppe Esposito) [2155289 2100275]
- drm/ast: Support multiple outputs (Jarod Wilson) [2149287 2147553]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.13.1.el8_7]" date="1675339200">- mm/cgroup/reclaim: fix dirty pages throttling on cgroup v1 (Waiman Long) [2160221]
- mm: vmscan: remove deadlock due to throttling failing to make progress (Waiman Long) [2160221]
- mm: vmscan: reduce throttling due to a failure to make progress -fix (Waiman Long) [2160221]
- mm: vmscan: Reduce throttling due to a failure to make progress (Waiman Long) [2160221]
- mm/vmscan: delay waking of tasks throttled on NOPROGRESS (Waiman Long) [2160221]
- mm/vmscan: increase the timeout if page reclaim is not making progress (Waiman Long) [2160221]
- mm/vmscan: centralise timeout values for reclaim_throttle (Waiman Long) [2160221]
- mm/page_alloc: remove the throttling logic from the page allocator (Waiman Long) [2160221]
- mm/writeback: throttle based on page writeback instead of congestion (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim when no progress is being made (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim and compaction when too may pages are isolated (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim until some writeback completes if congested (Waiman Long) [2160221]
- mm/vmscan.c: delete or fix duplicated words (Waiman Long) [2160221]
- mm,page_alloc: PF_WQ_WORKER threads must sleep at should_reclaim_retry() (Nico Pache) [2160221]
- ceph: avoid putting the realm twice when decoding snaps fails (Xiubo Li) [2155797 2139881]
- mm/mremap: hold the rmap lock in write mode when moving page table entries. (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: use pmd/pud_poplulate to update page table entries (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: don't enable optimized PUD move if page table levels is 2 (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: convert huge PUD move to separate helper (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: fix BUILD_BUG_ON() error in get_extent (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap.c: fix extent calculation (Waiman Long) [2140944] {CVE-2022-41222}
- x86: mremap speedup - Enable HAVE_MOVE_PUD (Waiman Long) [2140944] {CVE-2022-41222}
- mm: speedup mremap on 1GB or larger regions (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: start addresses are properly aligned (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: calculate extent in one place (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: it is sure to have enough space when extent meets requirement (Waiman Long) [2140944] {CVE-2022-41222}
- s390/boot: add secure boot trailer (Tobias Huschle) [2151530 2141967]
- i40e: Fix VF hang when reset is triggered on another VF (Ivan Vecera) [2160460 2103801]
- i2c: ismt: Fix an out-of-bounds bug in ismt_access() (Prarit Bhargava) [2154388 2119066] {CVE-2022-2873}
- iavf: schedule watchdog immediately when changing primary MAC (Michal Schmidt) [2163257 2152493]
- iavf: Move netdev_update_features() into watchdog task (Michal Schmidt) [2163257 2152493]
- iavf: fix temporary deadlock and failure to set MAC address (Michal Schmidt) [2163257 2152493]
- iavf: Fix error handling in iavf_init_module() (Michal Schmidt) [2163257 2152493]
- iommu/vt-d: Clean up si_domain in the init_dmars() error path (Jerry Snitselaar) [2149474 2118428]
- x86/pci/xen: Use msi_msg shadow structs (Jerry Snitselaar) [2149474 2118428]
- iommu/intel: Use msi_msg shadow structs (Jerry Snitselaar) [2149474 2118428]
- PCI: MSI: Fix Kconfig dependencies for PCI_MSI_ARCH_FALLBACKS (Jerry Snitselaar) [2149474 2118428]
- x86/apic/msi: Unbreak DMAR and HPET MSI (Jerry Snitselaar) [2149474 2118428]
- iommu/amd: Remove domain search for PCI/MSI (Jerry Snitselaar) [2149474 2118428]
- iommu/vt-d: Remove domain search for PCI/MSI[X] (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Make most MSI ops XEN private (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Cleanup the arch_*_msi_irqs() leftovers (Jerry Snitselaar) [2149474 2118428]
- PCI/MSI: Make arch_.*_msi_irq[s] fallbacks selectable (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Wrap XEN MSI management into irqdomain (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Consolidate XEN-MSI init (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Rework MSI teardown (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Make xen_msi_init() static and rename it to xen_hvm_msi_init() (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Move apic_post_init() invocation to one place (Jerry Snitselaar) [2149474 2118428]
- x86/msi: Use generic MSI domain ops (Jerry Snitselaar) [2149474 2118428]
- x86/msi: Remove pointless vcpu_affinity callback (Jerry Snitselaar) [2149474 2118428]
- iommu/vt-d: Fix compile error with CONFIG_PCI_ATS not set (Myron Stowe) [2149474 2118428]
- iommu/vt-d: Cure VF irqdomain hickup (Myron Stowe) [2149474 2118428]
- x86/pci: Set default irq domain in pcibios_add_device() (Myron Stowe) [2149474 2118428]
- iommm/amd: Store irq domain in struct device (Myron Stowe) [2149474 2118428]
- iommm/vt-d: Store irq domain in struct device (Myron Stowe) [2149474 2118428]
- PCI/MSI: Provide pci_dev_has_special_msi_domain() helper (Myron Stowe) [2149474 2118428]
- x86/msi: Consolidate MSI allocation (Myron Stowe) [2149474 2118428]
- PCI/MSI: Rework pci_msi_domain_calc_hwirq() (Myron Stowe) [2149474 2118428]
- x86/irq: Consolidate UV domain allocation (Myron Stowe) [2149474 2118428]
- x86/irq: Consolidate DMAR irq allocation (Myron Stowe) [2149474 2118428]
- x86_ioapic_Consolidate_IOAPIC_allocation (Myron Stowe) [2149474 2118428]
- x86/msi: Consolidate HPET allocation (Myron Stowe) [2149474 2118428]
- iommu/irq_remapping: Consolidate irq domain lookup (Myron Stowe) [2149474 2118428]
- iommu/amd: Consolidate irq domain getter (Myron Stowe) [2149474 2118428]
- iommu/vt-d: Consolidate irq domain getter (Myron Stowe) [2149474 2118428]
- x86/irq: Add allocation type for parent domain retrieval (Myron Stowe) [2149474 2118428]
- irqdomain: Export irq_domain_update_bus_token (Myron Stowe) [2149474 2118428]
- gitlab-ci: use CI templates from production branch (Michael Hofmann)
- iavf: remove INITIAL_MAC_SET to allow gARP to work properly (Stefan Assmann) [2149745 1938635]
- Revert "scsi: iscsi: ql4xxx: Use per-session workqueue for unbinding" (Chris Leech) [2152734 2122624]
- Revert "scsi: iscsi: Use the session workqueue for recovery" (Chris Leech) [2152734 2122624]
- arm64/bpf: Remove 128MB limit for BPF JIT programs (Yauheni Kaliuta) [2152138 2140163]
- bpf: Define bpf_jit_alloc_exec_limit for arm64 JIT (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: add `type` and `data` fields (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: use `ex` for `exception_table_entry` (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: make fixup_exception() return bool (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: consolidate definitions (Yauheni Kaliuta) [2152138 2140163]
- arm64: kvm: use kvm_exception_table_entry (Yauheni Kaliuta) [2152138 2140163]
- be2net: Fix buffer overflow in be_get_module_eeprom (Josef Oskera) [2160182 2126917]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.14.1.el8_7]" date="1676030400">- ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems (Wei Huang) [2142170 2130653]
- KVM: x86: nSVM: implement nested LBR virtualization (Emanuele Giuseppe Esposito) [2166362 2155149]
- KVM: x86: nSVM: correctly virtualize LBR msrs when L2 is running (Emanuele Giuseppe Esposito) [2166362 2155149]
- kvm: x86: SVM: use vmcb* instead of svm-&gt;vmcb where it makes sense (Emanuele Giuseppe Esposito) [2166362 2155149]
- KVM: x86: nSVM: implement nested VMLOAD/VMSAVE (Emanuele Giuseppe Esposito) [2166362 2155149]
- IB/iser: Fix login with authentication (Kamal Heib) [2161750 2120676]
- act_mirred: use the backlog for nested calls to mirred ingress (Davide Caratti) [2164648 2131339] {CVE-2022-4269}
- net/sched: act_mirred: better wording on protection against excessive stack growth (Davide Caratti) [2164648 2131339] {CVE-2022-4269}
- redhat/configs: Set CONFIG_X86_AMD_PSTATE to 'm' (Prarit Bhargava) [2151275 2145246]
- KVM: x86: smm: preserve interrupt shadow in SMRAM (Maxim Levitsky) [2166368 2097144]
- KVM: x86: SVM: don't save SVM state to SMRAM when VM is not long mode capable (Maxim Levitsky) [2166368 2097144]
- KVM: x86: SVM: use smram structs (Maxim Levitsky) [2166368 2097144]
- KVM: svm: drop explicit return value of kvm_vcpu_map (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: use smram struct for 64 bit smram load/restore (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: use smram struct for 32 bit smram load/restore (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: use smram structs in the common code (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: add structs for KVM's smram layout (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: check for failures on smm entry (Maxim Levitsky) [2166368 2097144]
- KVM: x86: do not go through ctxt-&gt;ops when emulating rsm (Maxim Levitsky) [2166368 2097144]
- KVM: x86: move SMM exit to a new file (Maxim Levitsky) [2166368 2097144]
- KVM: x86: move SMM entry to a new file (Maxim Levitsky) [2166368 2097144]
- KVM: x86: start moving SMM-related functions to new files (Maxim Levitsky) [2166368 2097144]
- bug: introduce ASSERT_STRUCT_OFFSET (Maxim Levitsky) [2166368 2097144]
- KVM: x86: Rename and expose helper to detect if INIT/SIPI are allowed (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: number of GPRs in the SMRAM image depends on the image format (Maxim Levitsky) [2166368 2097144]
- KVM: x86: emulator: update the emulation mode after CR0 write (Maxim Levitsky) [2166368 2097144]
- KVM: x86: emulator: update the emulation mode after rsm (Maxim Levitsky) [2166368 2097144]
- KVM: x86: emulator: introduce emulator_recalc_and_set_mode (Maxim Levitsky) [2166368 2097144]
- KVM: x86: emulator: em_sysexit should update ctxt-&gt;mode (Maxim Levitsky) [2166368 2097144]
- KVM: x86: Bug the VM if the emulator accesses a non-existent GPR (Maxim Levitsky) [2166368 2097144]
- \KVM: x86: Reduce the number of emulator GPRs to '8' for 32-bit KVM (Maxim Levitsky) [2166368 2097144]
- KVM: x86: Use 16-bit fields to track dirty/valid emulator GPRs (Maxim Levitsky) [2166368 2097144]
- KVM: x86: Omit VCPU_REGS_RIP from emulator's _regs array (Maxim Levitsky) [2166368 2097144]
- \KVM: x86: Harden _regs accesses to guard against buggy input (Maxim Levitsky) [2166368 2097144]
- KVM: x86: Grab regs_dirty in local 'unsigned long' (Maxim Levitsky) [2166368 2097144]
- proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152571 2152572] {CVE-2022-4378}
- proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152571 2152572] {CVE-2022-4378}</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.15.1.el8_7]" date="1676548800">- net/mlx5e: Fix use-after-free when reverting termination table (Amir Tzin) [2167640 2112927]
- net/mlx5: Do not query pci info while pci disabled (Amir Tzin) [2167645 2129249]
- x86/fpu: Fix copy_xstate_to_uabi() to copy init states correctly (Dean Nelson) [2168384 2122850]
- x86/fpu: Exclude dynamic states from init_fpstate (Dean Nelson) [2168384 2122850]
- x86/fpu: Fix the init_fpstate size check with the actual size (Dean Nelson) [2168384 2122850]
- x86/fpu: Configure init_fpstate attributes orderly (Dean Nelson) [2168384 2122850]
- x86/fpu/xstate: Fix the ARCH_REQ_XCOMP_PERM implementation (Dean Nelson) [2168384 2122850]
- net/mlx5: E-Switch, properly handle ingress tagged packets on VST (Amir Tzin) [2166665 2096109]
- cpuhotplug: Fix KABI breakage (Prarit Bhargava) [2162763 2156529]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.16.1.el8_7]" date="1677153600">- ipv6: fix panic when fib_lookup_arg-&gt;result is fib6_info (Jiri Benc) [2167602 2140599]
- ceph: blocklist the kclient when receiving corrupted snap trace (Xiubo Li) [2168896 2162414]
- ceph: move mount state enum to super.h (Xiubo Li) [2168896 2162414]
- s390/kexec: fix ipl report address for kdump (Tobias Huschle) [2166296 2161328]
- mm, compaction: fix fast_isolate_around() to stay within boundaries (Daniel Vacek) [2170576 2149309]
- scsi: storvsc: Fix swiotlb bounce buffer leak in confidential VM (Emanuele Giuseppe Esposito) [2170228 2150659]
- netfilter: conntrack: handle tcp challenge acks during connection reuse (Florian Westphal) [2165587 2158726]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.17.1.el8_7]" date="1677844800">- net: mana: Add rmb after checking owner bits (Mohammed Gamal) [2173103 2139462]
- net: mana: Add support of XDP_REDIRECT action (Mohammed Gamal) [2173103 2139462]
- net: mana: Add the Linux MANA PF driver (Mohammed Gamal) [2173103 2139462]
- ice: fix lost multicast packets in promisc mode (Ken Cox) [2172550 2138215]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.18.0-425.18.1.el8_7]" date="1678449600">- futex: Resend potentially swallowed owner death notification (Rafael Aquini) [2170054 2161526]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.19.1.el8_7]" date="1678968000">- s390/dasd: fix no record found for raw_track_access (Tobias Huschle) [2167776 2161270]
- locking/rwsem: Disable preemption in all down_read*() and up_read() code paths (Waiman Long) [2170939 2162139]
- locking/rwsem: Prevent non-first waiter from spinning in down_write() slowpath (Waiman Long) [2170939 2162139]
- locking/rwsem: Allow slowpath writer to ignore handoff bit if not set by first waiter (Waiman Long) [2170939 2162139]
- locking/rwsem: Always try to wake waiters in out_nolock path (Waiman Long) [2170939 2162139]
- locking/rwsem: No need to check for handoff bit if wait queue empty (Waiman Long) [2170939 2162139]
- locking/rwsem: Make handoff bit handling more consistent (Waiman Long) [2170939 2162139]
- locking/rwsem: Disable preemption while trying for rwsem lock (Waiman Long) [2170939 2162139]
- locking/rwsem: Conditionally wake waiters in reader/writer slowpaths (Waiman Long) [2170939 2162139]
- locking: Make owner_on_cpu() into &lt;linux/sched.h&gt; (Waiman Long) [2170939 2162139]
- locking/rwsem: Optimize down_read_trylock() under highly contended case (Waiman Long) [2170939 2162139]
- locking/rwsem: Fix comments about reader optimistic lock stealing conditions (Waiman Long) [2170939 2162139]
- locking/rwsem: Disable preemption for spinning region (Waiman Long) [2170939 2162139]
- locking: Remove rcu_read_{,un}lock() for preempt_{dis,en}able() (Waiman Long) [2170939 2162139]
- watchdog: fix UAF in reboot notifier handling in watchdog core code (Wander Lairson Costa) [2139770 2131308]
- netfilter: nf_conntrack_irc: Tighten matching on DCC message (Wander Lairson Costa) [2139770 2131308]
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF (Jaroslav Kysela) [2163400 2163401] {CVE-2023-0266}
- net/mlx5e: Fix enabling sriov while tc nic rules are offloaded (Amir Tzin) [2167647 2112925]
- net/mlx5: E-Switch, pair only capable devices (Amir Tzin) [2167647 2112925]
- net/mlx5: Fix mlx5_get_next_dev() peer device matching (Amir Tzin) [2167647 2112925]
- net/mlx5: Lag, filter non compatible devices (Amir Tzin) [2167647 2112925]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.19.2.el8_7.gf5e8]" date="1678968001">- ovl: fail on invalid uid/gid mapping at copy up (Miklos Szeredi) [2165341 2165342] {CVE-2023-0386}</changelog>
</package>
<package pkgid="ee39a14ac7d1ee92a80e97a17a9bcca030ff37f41a9bc7604b699b4813dacf87" name="kernel-debug-modules-internal" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="425.10.1.el8_7"/>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.1.1.el8]" date="1663588800">- i40e: Fix kernel crash during module removal (Ivan Vecera) [2091489]
- redhat: enable zstream release numbering for rhel 8.7 (Jarod Wilson)
- ice: Allow operation with reduced device MSI-X (Petr Oros) [2102844]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.2.1.el8]" date="1664193600">- EDAC/ghes: Set the DIMM label unconditionally (Aristeu Rozanski) [2109712]
- configs: enable CONFIG_HP_ILO for aarch64 (Mark Salter) [2123508]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.3.1.el8]" date="1664539200">- iwlwifi: limit fw version for AC9560 to avoid fw crash (Íñigo Huguet) [2129297]
- sfc: fix null pointer dereference in efx_hard_start_xmit (Íñigo Huguet) [2119638]
- sfc: fix TX channel offset when using legacy interrupts (Íñigo Huguet) [2119638]
- netfilter: conntrack: reduce timeout when receiving out-of-window fin or rst (Florian Westphal) [2047366]
- netfilter: conntrack: remove unneeded indent level (Florian Westphal) [2047366]
- netfilter: conntrack: ignore overly delayed tcp packets (Florian Westphal) [2047366]
- netfilter: conntrack: prepare tcp_in_window for ternary return value (Florian Westphal) [2047366]
- netfilter: conntrack: remove pr_debug callsites from tcp tracker (Florian Westphal) [2047366]
- netfilter: conntrack: work around exceeded receive window (Florian Westphal) [2047366]
- netfilter: conntrack: improve RST handling when tuple is re-used (Florian Westphal) [2047366]
- netfilter: conntrack: avoid misleading 'invalid' in log message (Florian Westphal) [2047366]
- netfilter: remove BUG_ON() after skb_header_pointer() (Florian Westphal) [2047366]
- iavf: Detach device during reset task (Petr Oros) [2069206]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.4.1.el8]" date="1665144000">- random: allow reseeding DRBG with getrandom (Daiki Ueno) [2121766]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.5.1.el8_7]" date="1667476800">- ice: Fix interface being down after reset with link-down-on-close flag on (Petr Oros) [2136216 2024110]
- ice: Fix crash by keep old cfg when update TCs more than queues (Petr Oros) [2130992 2129902]
- ice: Fix tunnel checksum offload with fragmented traffic (Petr Oros) [2130992 2129902]
- ice: handle E822 generic device ID in PLDM header (Petr Oros) [2130992 2129902]
- ice: ethtool: Prohibit improper channel config for DCB (Petr Oros) [2130992 2129902]
- ice: ethtool: advertise 1000M speeds properly (Petr Oros) [2130992 2129902]
- ice: Fix switchdev rules book keeping (Petr Oros) [2130992 2129902]
- ice: fix access-beyond-end in the switch code (Petr Oros) [2130992 2129902]
- eth: ice: silence the GCC 12 array-bounds warning (Petr Oros) [2130992 2129902]
- ice: Expose RSS indirection tables for queue groups via ethtool (Petr Oros) [2130992 2129902]
- Revert "ice: Hide bus-info in ethtool for PRs in switchdev mode" (Petr Oros) [2130992 2129902]
- ice: remove period on argument description in ice_for_each_vf (Petr Oros) [2130992 2129902]
- ice: add a function comment for ice_cfg_mac_antispoof (Petr Oros) [2130992 2129902]
- ice: fix wording in comment for ice_reset_vf (Petr Oros) [2130992 2129902]
- ice: remove return value comment for ice_reset_all_vfs (Petr Oros) [2130992 2129902]
- ice: always check VF VSI pointer values (Petr Oros) [2130992 2129902]
- ice: add newline to dev_dbg in ice_vf_fdir_dump_info (Petr Oros) [2130992 2129902]
- ice: get switch id on switchdev devices (Petr Oros) [2130992 2129902]
- ice: return ENOSPC when exceeding ICE_MAX_CHAIN_WORDS (Petr Oros) [2130992 2129902]
- ice: introduce common helper for retrieving VSI by vsi_num (Petr Oros) [2130992 2129902]
- ice: use min_t() to make code cleaner in ice_gnss (Petr Oros) [2130992 2129902]
- ice: Add mpls+tso support (Petr Oros) [2130992 2129902]
- ice: switch: convert packet template match code to rodata (Petr Oros) [2130992 2129902]
- ice: switch: use convenience macros to declare dummy pkt templates (Petr Oros) [2130992 2129902]
- ice: switch: use a struct to pass packet template params (Petr Oros) [2130992 2129902]
- ice: switch: unobscurify bitops loop in ice_fill_adv_dummy_packet() (Petr Oros) [2130992 2129902]
- ice: switch: add and use u16[] aliases to ice_adv_lkup_elem::{h, m}_u (Petr Oros) [2130992 2129902]
- ice: Support GTP-U and GTP-C offload in switchdev (Petr Oros) [2130992 2129902]
- ice: Remove useless DMA-32 fallback configuration (Petr Oros) [2130992 2129902]
- ice: switch to napi_build_skb() (Petr Oros) [2130992 2129902]
- redhat: switch to z-stream dist tag and build targets (Jarod Wilson)
- block: avoid sign extend problem with default queue flags mask (Nico Pache) [2135813]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.6.1.el8_7]" date="1668168000">- ice: Add low latency Tx timestamp read (Petr Oros) [2136036 2092425]
- ice: introduce ice_ptp_reset_cached_phctime function (Petr Oros) [2136036 2092425]
- ice: re-arrange some static functions in ice_ptp.c (Petr Oros) [2136036 2092425]
- ice: track and warn when PHC update is late (Petr Oros) [2136036 2092425]
- ice: track Tx timestamp stats similar to other Intel drivers (Petr Oros) [2136036 2092425]
- ice: implement adjfine with mul_u64_u64_div_u64 (Petr Oros) [2136036 2092425]
- ice: Add EXTTS feature to the feature bitmap (Petr Oros) [2136036 2092425]
- math: Export mul_u64_u64_div_u64 (Petr Oros) [2136036 2092425]
- vfio/type1: Unpin zero pages (Alex Williamson) [2128515 2123015]
- net: atlantic: remove aq_nic_deinit() when resume (Íñigo Huguet) [2131935 2130839]
- net: atlantic: remove deep parameter on suspend/resume functions (Íñigo Huguet) [2131935 2130839]
- CI: Use zstream builder container (Veronika Kabatova)
- CI: Add disttag override for 8.7 (Veronika Kabatova)</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.7.1.el8_7]" date="1669723200">- ice: Add additional CSR registers to ETHTOOL_GREGS (Petr Oros) [2136513 2131024]
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps (Petr Oros) [2137270 2106964]
- i40e: Fix VF set max MTU size (Petr Oros) [2137270 2106964]
- iavf: Fix set max MTU size with port VLAN and jumbo frames (Petr Oros) [2137270 2106964]
- iavf: Fix bad page state (Petr Oros) [2137270 2106964]
- Revert "scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels" (Jarod Wilson)
- scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels (Tomas Henzl) [2139216]
- Revert "ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems" (Jarod Wilson)
- ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems (Wei Huang) [2142170 2130653]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.8.1.el8_7]" date="1669982400">- scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels (Tomas Henzl) [2139216 2134535]
- RDMA/mlx5: Set local port to one when accessing counters (Mohammad Kabat) [2141957 2077119]
- drm/mgag200: Fix PLL setup for G200_SE_A rev &gt;=4 (Jocelyn Falempe) [2140152 2130159]
- iavf: Do not restart Tx queues after reset task failure (Petr Oros) [2149081 2134005]
- iavf: Fix a crash during reset task (Petr Oros) [2149081 2134005]
- scsi: core: Allow the ALUA transitioning state enough time (Tomas Henzl) [2147374 2084250]
- scsi: core: Return BLK_STS_TRANSPORT for ALUA transitioning (Tomas Henzl) [2147374 2084250]
- i40e: Fix DMA mappings leak (Ivan Vecera) [2138205 2077847]
- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2142724 2142725] {CVE-2022-2964}
- net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2142724 2142725] {CVE-2022-2964}</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.9.1.el8_7]" date="1670587200">- Documentation/admin-guide: Document nomodeset kernel parameter (Jocelyn Falempe) [2145218 2143952]
- drm: Move nomodeset kernel parameter to the DRM subsystem (Jocelyn Falempe) [2145218 2143952]
- wait: Fix __wait_event_hrtimeout for RT/DL tasks (Derek Barbosa) [2138953 2125233]
- scsi: zfcp: Fix missing auto port scan and thus missing target ports (Tobias Huschle) [2127849 2121089]
- net: Fix return value of qdisc ingress handling on success (Ivan Vecera) [2141878 2131361]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.10.1.el8_7]" date="1671019200">- scsi: target: loop: Fix handling of aborted TMRs (Maurizio Lombardi) [2144583 2141713]
- ice: virtchnl rss hena support (Petr Oros) [2148130]
- ice: Fix configuring VIRTCHNL_OP_CONFIG_VSI_QUEUES with unbalanced queues (Michal Schmidt) [2142017 2137378]
- ice: Add support Flex RXD (Michal Schmidt) [2138157 2131310]
- netfilter: flowtable: fix stuck flows on cleanup due to pending work (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: add function to invoke garbage collection immediately (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: pass flowtable to nf_flow_table_iterate() (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: separate replace, destroy and stats to different workqueues (Phil Sutter) [2134084 2131370]
- x86/paravirt: Add a dummy __x86_paravirt_patch_template() function (Waiman Long) [2152206 2144161]
- x86/paravirt: Fix kABI breakage in struct pv_mmu_ops (Waiman Long) [2152206 2144161]
- drm/i915: fix TLB invalidation for Gen12 video and compute engines (Wander Lairson Costa) [2148149 2148150] {CVE-2022-4139}
- PCI: hv: Do not set PCI_COMMAND_MEMORY to reduce VM boot time (Emanuele Giuseppe Esposito) [2150912 2082836]
- iavf: Fix cached head and tail value for iavf_get_tx_pending (Stefan Assmann) [2149742 2103944]
- iavf: Fix change VF's mac address (Stefan Assmann) [2149742 2103944]
- iavf: Fix race between iavf_close and iavf_reset_task (Stefan Assmann) [2149742 2103944]
- net: ethernet: move from strlcpy with unused retval to strscpy (Stefan Assmann) [2149742 2103944]
- iavf: Fix 'tc qdisc show' listing too many queues (Stefan Assmann) [2149742 2103944]
- iavf: Fix max_rate limiting (Stefan Assmann) [2149742 2103944]
- iavf: Check for duplicate TC flower filter before parsing (Stefan Assmann) [2149742 2103944]
- iavf: Fix handling of dummy receive descriptors (Stefan Assmann) [2149742 2103944]
- iavf: Disallow changing rx/tx-frames and rx/tx-frames-irq (Stefan Assmann) [2149742 2103944]
- intel/iavf:fix repeated words in comments (Stefan Assmann) [2149742 2103944]
- intel: remove unused macros (Stefan Assmann) [2149742 2103944]
- iavf: Add waiting for response from PF in set mac (Stefan Assmann) [2149742 2103944]</changelog>
</package>
<package pkgid="32e00ed4e7bc70a3012501977a0a246fa5c5f68f38827cc523fc642f4660fb4f" name="kernel-debug-modules-internal" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="425.13.1.el8_7"/>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.4.1.el8]" date="1665144000">- random: allow reseeding DRBG with getrandom (Daiki Ueno) [2121766]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.5.1.el8_7]" date="1667476800">- ice: Fix interface being down after reset with link-down-on-close flag on (Petr Oros) [2136216 2024110]
- ice: Fix crash by keep old cfg when update TCs more than queues (Petr Oros) [2130992 2129902]
- ice: Fix tunnel checksum offload with fragmented traffic (Petr Oros) [2130992 2129902]
- ice: handle E822 generic device ID in PLDM header (Petr Oros) [2130992 2129902]
- ice: ethtool: Prohibit improper channel config for DCB (Petr Oros) [2130992 2129902]
- ice: ethtool: advertise 1000M speeds properly (Petr Oros) [2130992 2129902]
- ice: Fix switchdev rules book keeping (Petr Oros) [2130992 2129902]
- ice: fix access-beyond-end in the switch code (Petr Oros) [2130992 2129902]
- eth: ice: silence the GCC 12 array-bounds warning (Petr Oros) [2130992 2129902]
- ice: Expose RSS indirection tables for queue groups via ethtool (Petr Oros) [2130992 2129902]
- Revert "ice: Hide bus-info in ethtool for PRs in switchdev mode" (Petr Oros) [2130992 2129902]
- ice: remove period on argument description in ice_for_each_vf (Petr Oros) [2130992 2129902]
- ice: add a function comment for ice_cfg_mac_antispoof (Petr Oros) [2130992 2129902]
- ice: fix wording in comment for ice_reset_vf (Petr Oros) [2130992 2129902]
- ice: remove return value comment for ice_reset_all_vfs (Petr Oros) [2130992 2129902]
- ice: always check VF VSI pointer values (Petr Oros) [2130992 2129902]
- ice: add newline to dev_dbg in ice_vf_fdir_dump_info (Petr Oros) [2130992 2129902]
- ice: get switch id on switchdev devices (Petr Oros) [2130992 2129902]
- ice: return ENOSPC when exceeding ICE_MAX_CHAIN_WORDS (Petr Oros) [2130992 2129902]
- ice: introduce common helper for retrieving VSI by vsi_num (Petr Oros) [2130992 2129902]
- ice: use min_t() to make code cleaner in ice_gnss (Petr Oros) [2130992 2129902]
- ice: Add mpls+tso support (Petr Oros) [2130992 2129902]
- ice: switch: convert packet template match code to rodata (Petr Oros) [2130992 2129902]
- ice: switch: use convenience macros to declare dummy pkt templates (Petr Oros) [2130992 2129902]
- ice: switch: use a struct to pass packet template params (Petr Oros) [2130992 2129902]
- ice: switch: unobscurify bitops loop in ice_fill_adv_dummy_packet() (Petr Oros) [2130992 2129902]
- ice: switch: add and use u16[] aliases to ice_adv_lkup_elem::{h, m}_u (Petr Oros) [2130992 2129902]
- ice: Support GTP-U and GTP-C offload in switchdev (Petr Oros) [2130992 2129902]
- ice: Remove useless DMA-32 fallback configuration (Petr Oros) [2130992 2129902]
- ice: switch to napi_build_skb() (Petr Oros) [2130992 2129902]
- redhat: switch to z-stream dist tag and build targets (Jarod Wilson)
- block: avoid sign extend problem with default queue flags mask (Nico Pache) [2135813]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.6.1.el8_7]" date="1668168000">- ice: Add low latency Tx timestamp read (Petr Oros) [2136036 2092425]
- ice: introduce ice_ptp_reset_cached_phctime function (Petr Oros) [2136036 2092425]
- ice: re-arrange some static functions in ice_ptp.c (Petr Oros) [2136036 2092425]
- ice: track and warn when PHC update is late (Petr Oros) [2136036 2092425]
- ice: track Tx timestamp stats similar to other Intel drivers (Petr Oros) [2136036 2092425]
- ice: implement adjfine with mul_u64_u64_div_u64 (Petr Oros) [2136036 2092425]
- ice: Add EXTTS feature to the feature bitmap (Petr Oros) [2136036 2092425]
- math: Export mul_u64_u64_div_u64 (Petr Oros) [2136036 2092425]
- vfio/type1: Unpin zero pages (Alex Williamson) [2128515 2123015]
- net: atlantic: remove aq_nic_deinit() when resume (Íñigo Huguet) [2131935 2130839]
- net: atlantic: remove deep parameter on suspend/resume functions (Íñigo Huguet) [2131935 2130839]
- CI: Use zstream builder container (Veronika Kabatova)
- CI: Add disttag override for 8.7 (Veronika Kabatova)</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.7.1.el8_7]" date="1669723200">- ice: Add additional CSR registers to ETHTOOL_GREGS (Petr Oros) [2136513 2131024]
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps (Petr Oros) [2137270 2106964]
- i40e: Fix VF set max MTU size (Petr Oros) [2137270 2106964]
- iavf: Fix set max MTU size with port VLAN and jumbo frames (Petr Oros) [2137270 2106964]
- iavf: Fix bad page state (Petr Oros) [2137270 2106964]
- Revert "scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels" (Jarod Wilson)
- scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels (Tomas Henzl) [2139216]
- Revert "ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems" (Jarod Wilson)
- ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems (Wei Huang) [2142170 2130653]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.8.1.el8_7]" date="1669982400">- scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels (Tomas Henzl) [2139216 2134535]
- RDMA/mlx5: Set local port to one when accessing counters (Mohammad Kabat) [2141957 2077119]
- drm/mgag200: Fix PLL setup for G200_SE_A rev &gt;=4 (Jocelyn Falempe) [2140152 2130159]
- iavf: Do not restart Tx queues after reset task failure (Petr Oros) [2149081 2134005]
- iavf: Fix a crash during reset task (Petr Oros) [2149081 2134005]
- scsi: core: Allow the ALUA transitioning state enough time (Tomas Henzl) [2147374 2084250]
- scsi: core: Return BLK_STS_TRANSPORT for ALUA transitioning (Tomas Henzl) [2147374 2084250]
- i40e: Fix DMA mappings leak (Ivan Vecera) [2138205 2077847]
- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2142724 2142725] {CVE-2022-2964}
- net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2142724 2142725] {CVE-2022-2964}</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.9.1.el8_7]" date="1670587200">- Documentation/admin-guide: Document nomodeset kernel parameter (Jocelyn Falempe) [2145218 2143952]
- drm: Move nomodeset kernel parameter to the DRM subsystem (Jocelyn Falempe) [2145218 2143952]
- wait: Fix __wait_event_hrtimeout for RT/DL tasks (Derek Barbosa) [2138953 2125233]
- scsi: zfcp: Fix missing auto port scan and thus missing target ports (Tobias Huschle) [2127849 2121089]
- net: Fix return value of qdisc ingress handling on success (Ivan Vecera) [2141878 2131361]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.10.1.el8_7]" date="1671019200">- scsi: target: loop: Fix handling of aborted TMRs (Maurizio Lombardi) [2144583 2141713]
- ice: virtchnl rss hena support (Petr Oros) [2148130]
- ice: Fix configuring VIRTCHNL_OP_CONFIG_VSI_QUEUES with unbalanced queues (Michal Schmidt) [2142017 2137378]
- ice: Add support Flex RXD (Michal Schmidt) [2138157 2131310]
- netfilter: flowtable: fix stuck flows on cleanup due to pending work (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: add function to invoke garbage collection immediately (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: pass flowtable to nf_flow_table_iterate() (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: separate replace, destroy and stats to different workqueues (Phil Sutter) [2134084 2131370]
- x86/paravirt: Add a dummy __x86_paravirt_patch_template() function (Waiman Long) [2152206 2144161]
- x86/paravirt: Fix kABI breakage in struct pv_mmu_ops (Waiman Long) [2152206 2144161]
- drm/i915: fix TLB invalidation for Gen12 video and compute engines (Wander Lairson Costa) [2148149 2148150] {CVE-2022-4139}
- PCI: hv: Do not set PCI_COMMAND_MEMORY to reduce VM boot time (Emanuele Giuseppe Esposito) [2150912 2082836]
- iavf: Fix cached head and tail value for iavf_get_tx_pending (Stefan Assmann) [2149742 2103944]
- iavf: Fix change VF's mac address (Stefan Assmann) [2149742 2103944]
- iavf: Fix race between iavf_close and iavf_reset_task (Stefan Assmann) [2149742 2103944]
- net: ethernet: move from strlcpy with unused retval to strscpy (Stefan Assmann) [2149742 2103944]
- iavf: Fix 'tc qdisc show' listing too many queues (Stefan Assmann) [2149742 2103944]
- iavf: Fix max_rate limiting (Stefan Assmann) [2149742 2103944]
- iavf: Check for duplicate TC flower filter before parsing (Stefan Assmann) [2149742 2103944]
- iavf: Fix handling of dummy receive descriptors (Stefan Assmann) [2149742 2103944]
- iavf: Disallow changing rx/tx-frames and rx/tx-frames-irq (Stefan Assmann) [2149742 2103944]
- intel/iavf:fix repeated words in comments (Stefan Assmann) [2149742 2103944]
- intel: remove unused macros (Stefan Assmann) [2149742 2103944]
- iavf: Add waiting for response from PF in set mac (Stefan Assmann) [2149742 2103944]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.11.1.el8_7]" date="1673006400">- NFSD: Protect against send buffer overflow in NFSv3 READ (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv2 READ (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv3 READDIR (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv2 READDIR (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- SUNRPC: Fix svcxdr_init_encode's buflen calculation (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- SUNRPC: Fix svcxdr_init_decode's end-of-buffer calculation (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- panic, kexec: make __crash_kexec() NMI safe (Valentin Schneider) [2139580 2134126]
- kexec: turn all kexec_mutex acquisitions into trylocks (Valentin Schneider) [2139580 2134126]
- kexec: move locking into do_kexec_load (Valentin Schneider) [2139580 2134126]
- vdpa/mlx5: re-create forwarding rules after mac modified (Laurent Vivier) [2152912 2145136]
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry (Waiman Long) [2153653 2108387]
- irq: Call tick_irq_enter() inside HARDIRQ_OFFSET (Waiman Long) [2153653 2108387]
- irqtime: Move irqtime entry accounting after irq offset incrementation (Waiman Long) [2153653 2108387]
- sched/vtime: Consolidate IRQ time accounting (Waiman Long) [2153653 2108387]
- s390/vtime: Use the generic IRQ entry accounting (Waiman Long) [2153653 2108387]
- sched/cputime: Remove symbol exports from IRQ time accounting (Waiman Long) [2153653 2108387]
- genirq/irqdomain: Don't try to free an interrupt that has no mapping (Waiman Long) [2153653 2108387]
- genirq: Provide __irq_enter/exit_raw() (Waiman Long) [2153653 2108387]
- powerpc/time: Only set CONFIG_ARCH_HAS_SCALED_CPUTIME on PPC64 (Waiman Long) [2153653 2108387]
- powerpc/time: isolate scaled cputime accounting in dedicated functions. (Waiman Long) [2153653 2108387]
- PCI: hv: Fix synchronization between channel callback and hv_pci_bus_exit() (Mohammed Gamal) [2155280 2144708]
- PCI: hv: Fix synchronization between channel callback and hv_compose_msi_msg() (Mohammed Gamal) [2155280 2144708]
- PCI: hv: Use vmbus_requestor to generate transaction IDs for VMbus hardening (Mohammed Gamal) [2155280 2144708]
- net/mlx5e: TC, Reject forwarding from internal port to internal port (Mohammad Kabat) [2141959 2131345]
- hv_netvsc: Fix race between VF offering and VF association message from host (Mohammed Gamal) [2155272 2149279]
- x86/mce: Reduce number of machine checks taken during recovery (Prarit Bhargava) [2137592 2104388]
- cgroup/cpuset: Reduce cpuset_rwsem writer latency (Waiman Long) [2153108 2149031]
- rcu/exp: Mark current CPU as exp-QS in IPI loop second pass (Waiman Long) [2153108 2149031]
- rcu: Always inline rcu_dynticks_task*_{enter,exit}() (Waiman Long) [2153108 2149031]
- rcu: Fix existing exp request check in sync_sched_exp_online_cleanup() (Waiman Long) [2153108 2149031]
- rcu: Fix macro name CONFIG_TASKS_RCU_TRACE (Waiman Long) [2153108 2149031]
- rcu: Fix stall-warning deadlock due to non-release of rcu_node -&gt;lock (Waiman Long) [2153108 2149031]
- rcu: Fix to include first blocked task in stall warning (Waiman Long) [2153108 2149031]
- cgroup: Use cgroup_attach_{lock,unlock}() from cgroup_attach_task_all() (Waiman Long) [2153108 2149031]
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all() (Waiman Long) [2153108 2149031]
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock (Waiman Long) [2153108 2149031]
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree (Waiman Long) [2153108 2149031]
- cgroup/cpuset: Fix a race between cpuset_attach() and cpu hotplug (Waiman Long) [2153108 2149031]
- cgroup: reduce dependency on cgroup_mutex (Waiman Long) [2153108 2149031]
- sunrpc: Set sk_allocation to GFP_NOFS to avoid using current-&gt;task_frag. (Guillaume Nault) [2153230 2089660]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.12.1.el8_7]" date="1674129600">- x86/fpu: Prevent FPU state corruption (Oleksandr Natalenko) [2134586 2130890]
- x86/fpu: Drop fpregs lock before inheriting FPU permissions (Eder Zulian) [2154460 2153549]
- kernel-doc: fix undefined args variable (Jan Stancek) [2157905 2134954]
- mm: memcontrol: fix potential oom_lock recursion deadlock (Waiman Long) [2157922 2138886]
- memcg: prohibit unconditional exceeding the limit of dying tasks (Waiman Long) [2157922 2138886]
- mm, oom: do not trigger out_of_memory from the #PF (Waiman Long) [2157922 2138886]
- mm, oom: pagefault_out_of_memory: don't force global OOM for dying tasks (Waiman Long) [2157922 2138886]
- mm: memcontrol: don't count limit-setting reclaim as memory pressure (Waiman Long) [2157922 2138886]
- KVM: s390: vsie: Fix the initialization of the epoch extension (epdx) field (Thomas Huth) [2158813 2151854]
- net: mana: Fix race on per-CQ variable napi work_done (Emanuele Giuseppe Esposito) [2155437 2151722]
- mei: me: add adler lake point S DID (Prarit Bhargava) [2141783 2141602]
- PCI: hv: Only reuse existing IRTE allocation for Multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix the definition of vector in hv_compose_msi_msg() (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix interrupt mapping for multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Reuse existing IRTE allocation in compose_msi_msg() (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix hv_arch_irq_unmask() for multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix multi-MSI to allow more than one MSI vector (Emanuele Giuseppe Esposito) [2155289 2100275]
- drm/ast: Support multiple outputs (Jarod Wilson) [2149287 2147553]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.13.1.el8_7]" date="1675339200">- mm/cgroup/reclaim: fix dirty pages throttling on cgroup v1 (Waiman Long) [2160221]
- mm: vmscan: remove deadlock due to throttling failing to make progress (Waiman Long) [2160221]
- mm: vmscan: reduce throttling due to a failure to make progress -fix (Waiman Long) [2160221]
- mm: vmscan: Reduce throttling due to a failure to make progress (Waiman Long) [2160221]
- mm/vmscan: delay waking of tasks throttled on NOPROGRESS (Waiman Long) [2160221]
- mm/vmscan: increase the timeout if page reclaim is not making progress (Waiman Long) [2160221]
- mm/vmscan: centralise timeout values for reclaim_throttle (Waiman Long) [2160221]
- mm/page_alloc: remove the throttling logic from the page allocator (Waiman Long) [2160221]
- mm/writeback: throttle based on page writeback instead of congestion (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim when no progress is being made (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim and compaction when too may pages are isolated (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim until some writeback completes if congested (Waiman Long) [2160221]
- mm/vmscan.c: delete or fix duplicated words (Waiman Long) [2160221]
- mm,page_alloc: PF_WQ_WORKER threads must sleep at should_reclaim_retry() (Nico Pache) [2160221]
- ceph: avoid putting the realm twice when decoding snaps fails (Xiubo Li) [2155797 2139881]
- mm/mremap: hold the rmap lock in write mode when moving page table entries. (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: use pmd/pud_poplulate to update page table entries (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: don't enable optimized PUD move if page table levels is 2 (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: convert huge PUD move to separate helper (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: fix BUILD_BUG_ON() error in get_extent (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap.c: fix extent calculation (Waiman Long) [2140944] {CVE-2022-41222}
- x86: mremap speedup - Enable HAVE_MOVE_PUD (Waiman Long) [2140944] {CVE-2022-41222}
- mm: speedup mremap on 1GB or larger regions (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: start addresses are properly aligned (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: calculate extent in one place (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: it is sure to have enough space when extent meets requirement (Waiman Long) [2140944] {CVE-2022-41222}
- s390/boot: add secure boot trailer (Tobias Huschle) [2151530 2141967]
- i40e: Fix VF hang when reset is triggered on another VF (Ivan Vecera) [2160460 2103801]
- i2c: ismt: Fix an out-of-bounds bug in ismt_access() (Prarit Bhargava) [2154388 2119066] {CVE-2022-2873}
- iavf: schedule watchdog immediately when changing primary MAC (Michal Schmidt) [2163257 2152493]
- iavf: Move netdev_update_features() into watchdog task (Michal Schmidt) [2163257 2152493]
- iavf: fix temporary deadlock and failure to set MAC address (Michal Schmidt) [2163257 2152493]
- iavf: Fix error handling in iavf_init_module() (Michal Schmidt) [2163257 2152493]
- iommu/vt-d: Clean up si_domain in the init_dmars() error path (Jerry Snitselaar) [2149474 2118428]
- x86/pci/xen: Use msi_msg shadow structs (Jerry Snitselaar) [2149474 2118428]
- iommu/intel: Use msi_msg shadow structs (Jerry Snitselaar) [2149474 2118428]
- PCI: MSI: Fix Kconfig dependencies for PCI_MSI_ARCH_FALLBACKS (Jerry Snitselaar) [2149474 2118428]
- x86/apic/msi: Unbreak DMAR and HPET MSI (Jerry Snitselaar) [2149474 2118428]
- iommu/amd: Remove domain search for PCI/MSI (Jerry Snitselaar) [2149474 2118428]
- iommu/vt-d: Remove domain search for PCI/MSI[X] (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Make most MSI ops XEN private (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Cleanup the arch_*_msi_irqs() leftovers (Jerry Snitselaar) [2149474 2118428]
- PCI/MSI: Make arch_.*_msi_irq[s] fallbacks selectable (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Wrap XEN MSI management into irqdomain (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Consolidate XEN-MSI init (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Rework MSI teardown (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Make xen_msi_init() static and rename it to xen_hvm_msi_init() (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Move apic_post_init() invocation to one place (Jerry Snitselaar) [2149474 2118428]
- x86/msi: Use generic MSI domain ops (Jerry Snitselaar) [2149474 2118428]
- x86/msi: Remove pointless vcpu_affinity callback (Jerry Snitselaar) [2149474 2118428]
- iommu/vt-d: Fix compile error with CONFIG_PCI_ATS not set (Myron Stowe) [2149474 2118428]
- iommu/vt-d: Cure VF irqdomain hickup (Myron Stowe) [2149474 2118428]
- x86/pci: Set default irq domain in pcibios_add_device() (Myron Stowe) [2149474 2118428]
- iommm/amd: Store irq domain in struct device (Myron Stowe) [2149474 2118428]
- iommm/vt-d: Store irq domain in struct device (Myron Stowe) [2149474 2118428]
- PCI/MSI: Provide pci_dev_has_special_msi_domain() helper (Myron Stowe) [2149474 2118428]
- x86/msi: Consolidate MSI allocation (Myron Stowe) [2149474 2118428]
- PCI/MSI: Rework pci_msi_domain_calc_hwirq() (Myron Stowe) [2149474 2118428]
- x86/irq: Consolidate UV domain allocation (Myron Stowe) [2149474 2118428]
- x86/irq: Consolidate DMAR irq allocation (Myron Stowe) [2149474 2118428]
- x86_ioapic_Consolidate_IOAPIC_allocation (Myron Stowe) [2149474 2118428]
- x86/msi: Consolidate HPET allocation (Myron Stowe) [2149474 2118428]
- iommu/irq_remapping: Consolidate irq domain lookup (Myron Stowe) [2149474 2118428]
- iommu/amd: Consolidate irq domain getter (Myron Stowe) [2149474 2118428]
- iommu/vt-d: Consolidate irq domain getter (Myron Stowe) [2149474 2118428]
- x86/irq: Add allocation type for parent domain retrieval (Myron Stowe) [2149474 2118428]
- irqdomain: Export irq_domain_update_bus_token (Myron Stowe) [2149474 2118428]
- gitlab-ci: use CI templates from production branch (Michael Hofmann)
- iavf: remove INITIAL_MAC_SET to allow gARP to work properly (Stefan Assmann) [2149745 1938635]
- Revert "scsi: iscsi: ql4xxx: Use per-session workqueue for unbinding" (Chris Leech) [2152734 2122624]
- Revert "scsi: iscsi: Use the session workqueue for recovery" (Chris Leech) [2152734 2122624]
- arm64/bpf: Remove 128MB limit for BPF JIT programs (Yauheni Kaliuta) [2152138 2140163]
- bpf: Define bpf_jit_alloc_exec_limit for arm64 JIT (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: add `type` and `data` fields (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: use `ex` for `exception_table_entry` (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: make fixup_exception() return bool (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: consolidate definitions (Yauheni Kaliuta) [2152138 2140163]
- arm64: kvm: use kvm_exception_table_entry (Yauheni Kaliuta) [2152138 2140163]
- be2net: Fix buffer overflow in be_get_module_eeprom (Josef Oskera) [2160182 2126917]</changelog>
</package>
<package pkgid="f584a4c6535b6d7033c53784e7783394da9a6ef9febdc53ebfff06e1a59b980b" name="kernel-debug-modules-internal" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="425.19.2.el8_7"/>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.11.1.el8_7]" date="1673006400">- NFSD: Protect against send buffer overflow in NFSv3 READ (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv2 READ (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv3 READDIR (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv2 READDIR (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- SUNRPC: Fix svcxdr_init_encode's buflen calculation (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- SUNRPC: Fix svcxdr_init_decode's end-of-buffer calculation (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- panic, kexec: make __crash_kexec() NMI safe (Valentin Schneider) [2139580 2134126]
- kexec: turn all kexec_mutex acquisitions into trylocks (Valentin Schneider) [2139580 2134126]
- kexec: move locking into do_kexec_load (Valentin Schneider) [2139580 2134126]
- vdpa/mlx5: re-create forwarding rules after mac modified (Laurent Vivier) [2152912 2145136]
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry (Waiman Long) [2153653 2108387]
- irq: Call tick_irq_enter() inside HARDIRQ_OFFSET (Waiman Long) [2153653 2108387]
- irqtime: Move irqtime entry accounting after irq offset incrementation (Waiman Long) [2153653 2108387]
- sched/vtime: Consolidate IRQ time accounting (Waiman Long) [2153653 2108387]
- s390/vtime: Use the generic IRQ entry accounting (Waiman Long) [2153653 2108387]
- sched/cputime: Remove symbol exports from IRQ time accounting (Waiman Long) [2153653 2108387]
- genirq/irqdomain: Don't try to free an interrupt that has no mapping (Waiman Long) [2153653 2108387]
- genirq: Provide __irq_enter/exit_raw() (Waiman Long) [2153653 2108387]
- powerpc/time: Only set CONFIG_ARCH_HAS_SCALED_CPUTIME on PPC64 (Waiman Long) [2153653 2108387]
- powerpc/time: isolate scaled cputime accounting in dedicated functions. (Waiman Long) [2153653 2108387]
- PCI: hv: Fix synchronization between channel callback and hv_pci_bus_exit() (Mohammed Gamal) [2155280 2144708]
- PCI: hv: Fix synchronization between channel callback and hv_compose_msi_msg() (Mohammed Gamal) [2155280 2144708]
- PCI: hv: Use vmbus_requestor to generate transaction IDs for VMbus hardening (Mohammed Gamal) [2155280 2144708]
- net/mlx5e: TC, Reject forwarding from internal port to internal port (Mohammad Kabat) [2141959 2131345]
- hv_netvsc: Fix race between VF offering and VF association message from host (Mohammed Gamal) [2155272 2149279]
- x86/mce: Reduce number of machine checks taken during recovery (Prarit Bhargava) [2137592 2104388]
- cgroup/cpuset: Reduce cpuset_rwsem writer latency (Waiman Long) [2153108 2149031]
- rcu/exp: Mark current CPU as exp-QS in IPI loop second pass (Waiman Long) [2153108 2149031]
- rcu: Always inline rcu_dynticks_task*_{enter,exit}() (Waiman Long) [2153108 2149031]
- rcu: Fix existing exp request check in sync_sched_exp_online_cleanup() (Waiman Long) [2153108 2149031]
- rcu: Fix macro name CONFIG_TASKS_RCU_TRACE (Waiman Long) [2153108 2149031]
- rcu: Fix stall-warning deadlock due to non-release of rcu_node -&gt;lock (Waiman Long) [2153108 2149031]
- rcu: Fix to include first blocked task in stall warning (Waiman Long) [2153108 2149031]
- cgroup: Use cgroup_attach_{lock,unlock}() from cgroup_attach_task_all() (Waiman Long) [2153108 2149031]
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all() (Waiman Long) [2153108 2149031]
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock (Waiman Long) [2153108 2149031]
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree (Waiman Long) [2153108 2149031]
- cgroup/cpuset: Fix a race between cpuset_attach() and cpu hotplug (Waiman Long) [2153108 2149031]
- cgroup: reduce dependency on cgroup_mutex (Waiman Long) [2153108 2149031]
- sunrpc: Set sk_allocation to GFP_NOFS to avoid using current-&gt;task_frag. (Guillaume Nault) [2153230 2089660]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.12.1.el8_7]" date="1674129600">- x86/fpu: Prevent FPU state corruption (Oleksandr Natalenko) [2134586 2130890]
- x86/fpu: Drop fpregs lock before inheriting FPU permissions (Eder Zulian) [2154460 2153549]
- kernel-doc: fix undefined args variable (Jan Stancek) [2157905 2134954]
- mm: memcontrol: fix potential oom_lock recursion deadlock (Waiman Long) [2157922 2138886]
- memcg: prohibit unconditional exceeding the limit of dying tasks (Waiman Long) [2157922 2138886]
- mm, oom: do not trigger out_of_memory from the #PF (Waiman Long) [2157922 2138886]
- mm, oom: pagefault_out_of_memory: don't force global OOM for dying tasks (Waiman Long) [2157922 2138886]
- mm: memcontrol: don't count limit-setting reclaim as memory pressure (Waiman Long) [2157922 2138886]
- KVM: s390: vsie: Fix the initialization of the epoch extension (epdx) field (Thomas Huth) [2158813 2151854]
- net: mana: Fix race on per-CQ variable napi work_done (Emanuele Giuseppe Esposito) [2155437 2151722]
- mei: me: add adler lake point S DID (Prarit Bhargava) [2141783 2141602]
- PCI: hv: Only reuse existing IRTE allocation for Multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix the definition of vector in hv_compose_msi_msg() (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix interrupt mapping for multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Reuse existing IRTE allocation in compose_msi_msg() (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix hv_arch_irq_unmask() for multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix multi-MSI to allow more than one MSI vector (Emanuele Giuseppe Esposito) [2155289 2100275]
- drm/ast: Support multiple outputs (Jarod Wilson) [2149287 2147553]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.13.1.el8_7]" date="1675339200">- mm/cgroup/reclaim: fix dirty pages throttling on cgroup v1 (Waiman Long) [2160221]
- mm: vmscan: remove deadlock due to throttling failing to make progress (Waiman Long) [2160221]
- mm: vmscan: reduce throttling due to a failure to make progress -fix (Waiman Long) [2160221]
- mm: vmscan: Reduce throttling due to a failure to make progress (Waiman Long) [2160221]
- mm/vmscan: delay waking of tasks throttled on NOPROGRESS (Waiman Long) [2160221]
- mm/vmscan: increase the timeout if page reclaim is not making progress (Waiman Long) [2160221]
- mm/vmscan: centralise timeout values for reclaim_throttle (Waiman Long) [2160221]
- mm/page_alloc: remove the throttling logic from the page allocator (Waiman Long) [2160221]
- mm/writeback: throttle based on page writeback instead of congestion (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim when no progress is being made (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim and compaction when too may pages are isolated (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim until some writeback completes if congested (Waiman Long) [2160221]
- mm/vmscan.c: delete or fix duplicated words (Waiman Long) [2160221]
- mm,page_alloc: PF_WQ_WORKER threads must sleep at should_reclaim_retry() (Nico Pache) [2160221]
- ceph: avoid putting the realm twice when decoding snaps fails (Xiubo Li) [2155797 2139881]
- mm/mremap: hold the rmap lock in write mode when moving page table entries. (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: use pmd/pud_poplulate to update page table entries (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: don't enable optimized PUD move if page table levels is 2 (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: convert huge PUD move to separate helper (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: fix BUILD_BUG_ON() error in get_extent (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap.c: fix extent calculation (Waiman Long) [2140944] {CVE-2022-41222}
- x86: mremap speedup - Enable HAVE_MOVE_PUD (Waiman Long) [2140944] {CVE-2022-41222}
- mm: speedup mremap on 1GB or larger regions (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: start addresses are properly aligned (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: calculate extent in one place (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: it is sure to have enough space when extent meets requirement (Waiman Long) [2140944] {CVE-2022-41222}
- s390/boot: add secure boot trailer (Tobias Huschle) [2151530 2141967]
- i40e: Fix VF hang when reset is triggered on another VF (Ivan Vecera) [2160460 2103801]
- i2c: ismt: Fix an out-of-bounds bug in ismt_access() (Prarit Bhargava) [2154388 2119066] {CVE-2022-2873}
- iavf: schedule watchdog immediately when changing primary MAC (Michal Schmidt) [2163257 2152493]
- iavf: Move netdev_update_features() into watchdog task (Michal Schmidt) [2163257 2152493]
- iavf: fix temporary deadlock and failure to set MAC address (Michal Schmidt) [2163257 2152493]
- iavf: Fix error handling in iavf_init_module() (Michal Schmidt) [2163257 2152493]
- iommu/vt-d: Clean up si_domain in the init_dmars() error path (Jerry Snitselaar) [2149474 2118428]
- x86/pci/xen: Use msi_msg shadow structs (Jerry Snitselaar) [2149474 2118428]
- iommu/intel: Use msi_msg shadow structs (Jerry Snitselaar) [2149474 2118428]
- PCI: MSI: Fix Kconfig dependencies for PCI_MSI_ARCH_FALLBACKS (Jerry Snitselaar) [2149474 2118428]
- x86/apic/msi: Unbreak DMAR and HPET MSI (Jerry Snitselaar) [2149474 2118428]
- iommu/amd: Remove domain search for PCI/MSI (Jerry Snitselaar) [2149474 2118428]
- iommu/vt-d: Remove domain search for PCI/MSI[X] (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Make most MSI ops XEN private (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Cleanup the arch_*_msi_irqs() leftovers (Jerry Snitselaar) [2149474 2118428]
- PCI/MSI: Make arch_.*_msi_irq[s] fallbacks selectable (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Wrap XEN MSI management into irqdomain (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Consolidate XEN-MSI init (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Rework MSI teardown (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Make xen_msi_init() static and rename it to xen_hvm_msi_init() (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Move apic_post_init() invocation to one place (Jerry Snitselaar) [2149474 2118428]
- x86/msi: Use generic MSI domain ops (Jerry Snitselaar) [2149474 2118428]
- x86/msi: Remove pointless vcpu_affinity callback (Jerry Snitselaar) [2149474 2118428]
- iommu/vt-d: Fix compile error with CONFIG_PCI_ATS not set (Myron Stowe) [2149474 2118428]
- iommu/vt-d: Cure VF irqdomain hickup (Myron Stowe) [2149474 2118428]
- x86/pci: Set default irq domain in pcibios_add_device() (Myron Stowe) [2149474 2118428]
- iommm/amd: Store irq domain in struct device (Myron Stowe) [2149474 2118428]
- iommm/vt-d: Store irq domain in struct device (Myron Stowe) [2149474 2118428]
- PCI/MSI: Provide pci_dev_has_special_msi_domain() helper (Myron Stowe) [2149474 2118428]
- x86/msi: Consolidate MSI allocation (Myron Stowe) [2149474 2118428]
- PCI/MSI: Rework pci_msi_domain_calc_hwirq() (Myron Stowe) [2149474 2118428]
- x86/irq: Consolidate UV domain allocation (Myron Stowe) [2149474 2118428]
- x86/irq: Consolidate DMAR irq allocation (Myron Stowe) [2149474 2118428]
- x86_ioapic_Consolidate_IOAPIC_allocation (Myron Stowe) [2149474 2118428]
- x86/msi: Consolidate HPET allocation (Myron Stowe) [2149474 2118428]
- iommu/irq_remapping: Consolidate irq domain lookup (Myron Stowe) [2149474 2118428]
- iommu/amd: Consolidate irq domain getter (Myron Stowe) [2149474 2118428]
- iommu/vt-d: Consolidate irq domain getter (Myron Stowe) [2149474 2118428]
- x86/irq: Add allocation type for parent domain retrieval (Myron Stowe) [2149474 2118428]
- irqdomain: Export irq_domain_update_bus_token (Myron Stowe) [2149474 2118428]
- gitlab-ci: use CI templates from production branch (Michael Hofmann)
- iavf: remove INITIAL_MAC_SET to allow gARP to work properly (Stefan Assmann) [2149745 1938635]
- Revert "scsi: iscsi: ql4xxx: Use per-session workqueue for unbinding" (Chris Leech) [2152734 2122624]
- Revert "scsi: iscsi: Use the session workqueue for recovery" (Chris Leech) [2152734 2122624]
- arm64/bpf: Remove 128MB limit for BPF JIT programs (Yauheni Kaliuta) [2152138 2140163]
- bpf: Define bpf_jit_alloc_exec_limit for arm64 JIT (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: add `type` and `data` fields (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: use `ex` for `exception_table_entry` (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: make fixup_exception() return bool (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: consolidate definitions (Yauheni Kaliuta) [2152138 2140163]
- arm64: kvm: use kvm_exception_table_entry (Yauheni Kaliuta) [2152138 2140163]
- be2net: Fix buffer overflow in be_get_module_eeprom (Josef Oskera) [2160182 2126917]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.14.1.el8_7]" date="1676030400">- ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems (Wei Huang) [2142170 2130653]
- KVM: x86: nSVM: implement nested LBR virtualization (Emanuele Giuseppe Esposito) [2166362 2155149]
- KVM: x86: nSVM: correctly virtualize LBR msrs when L2 is running (Emanuele Giuseppe Esposito) [2166362 2155149]
- kvm: x86: SVM: use vmcb* instead of svm-&gt;vmcb where it makes sense (Emanuele Giuseppe Esposito) [2166362 2155149]
- KVM: x86: nSVM: implement nested VMLOAD/VMSAVE (Emanuele Giuseppe Esposito) [2166362 2155149]
- IB/iser: Fix login with authentication (Kamal Heib) [2161750 2120676]
- act_mirred: use the backlog for nested calls to mirred ingress (Davide Caratti) [2164648 2131339] {CVE-2022-4269}
- net/sched: act_mirred: better wording on protection against excessive stack growth (Davide Caratti) [2164648 2131339] {CVE-2022-4269}
- redhat/configs: Set CONFIG_X86_AMD_PSTATE to 'm' (Prarit Bhargava) [2151275 2145246]
- KVM: x86: smm: preserve interrupt shadow in SMRAM (Maxim Levitsky) [2166368 2097144]
- KVM: x86: SVM: don't save SVM state to SMRAM when VM is not long mode capable (Maxim Levitsky) [2166368 2097144]
- KVM: x86: SVM: use smram structs (Maxim Levitsky) [2166368 2097144]
- KVM: svm: drop explicit return value of kvm_vcpu_map (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: use smram struct for 64 bit smram load/restore (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: use smram struct for 32 bit smram load/restore (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: use smram structs in the common code (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: add structs for KVM's smram layout (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: check for failures on smm entry (Maxim Levitsky) [2166368 2097144]
- KVM: x86: do not go through ctxt-&gt;ops when emulating rsm (Maxim Levitsky) [2166368 2097144]
- KVM: x86: move SMM exit to a new file (Maxim Levitsky) [2166368 2097144]
- KVM: x86: move SMM entry to a new file (Maxim Levitsky) [2166368 2097144]
- KVM: x86: start moving SMM-related functions to new files (Maxim Levitsky) [2166368 2097144]
- bug: introduce ASSERT_STRUCT_OFFSET (Maxim Levitsky) [2166368 2097144]
- KVM: x86: Rename and expose helper to detect if INIT/SIPI are allowed (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: number of GPRs in the SMRAM image depends on the image format (Maxim Levitsky) [2166368 2097144]
- KVM: x86: emulator: update the emulation mode after CR0 write (Maxim Levitsky) [2166368 2097144]
- KVM: x86: emulator: update the emulation mode after rsm (Maxim Levitsky) [2166368 2097144]
- KVM: x86: emulator: introduce emulator_recalc_and_set_mode (Maxim Levitsky) [2166368 2097144]
- KVM: x86: emulator: em_sysexit should update ctxt-&gt;mode (Maxim Levitsky) [2166368 2097144]
- KVM: x86: Bug the VM if the emulator accesses a non-existent GPR (Maxim Levitsky) [2166368 2097144]
- \KVM: x86: Reduce the number of emulator GPRs to '8' for 32-bit KVM (Maxim Levitsky) [2166368 2097144]
- KVM: x86: Use 16-bit fields to track dirty/valid emulator GPRs (Maxim Levitsky) [2166368 2097144]
- KVM: x86: Omit VCPU_REGS_RIP from emulator's _regs array (Maxim Levitsky) [2166368 2097144]
- \KVM: x86: Harden _regs accesses to guard against buggy input (Maxim Levitsky) [2166368 2097144]
- KVM: x86: Grab regs_dirty in local 'unsigned long' (Maxim Levitsky) [2166368 2097144]
- proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152571 2152572] {CVE-2022-4378}
- proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152571 2152572] {CVE-2022-4378}</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.15.1.el8_7]" date="1676548800">- net/mlx5e: Fix use-after-free when reverting termination table (Amir Tzin) [2167640 2112927]
- net/mlx5: Do not query pci info while pci disabled (Amir Tzin) [2167645 2129249]
- x86/fpu: Fix copy_xstate_to_uabi() to copy init states correctly (Dean Nelson) [2168384 2122850]
- x86/fpu: Exclude dynamic states from init_fpstate (Dean Nelson) [2168384 2122850]
- x86/fpu: Fix the init_fpstate size check with the actual size (Dean Nelson) [2168384 2122850]
- x86/fpu: Configure init_fpstate attributes orderly (Dean Nelson) [2168384 2122850]
- x86/fpu/xstate: Fix the ARCH_REQ_XCOMP_PERM implementation (Dean Nelson) [2168384 2122850]
- net/mlx5: E-Switch, properly handle ingress tagged packets on VST (Amir Tzin) [2166665 2096109]
- cpuhotplug: Fix KABI breakage (Prarit Bhargava) [2162763 2156529]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.16.1.el8_7]" date="1677153600">- ipv6: fix panic when fib_lookup_arg-&gt;result is fib6_info (Jiri Benc) [2167602 2140599]
- ceph: blocklist the kclient when receiving corrupted snap trace (Xiubo Li) [2168896 2162414]
- ceph: move mount state enum to super.h (Xiubo Li) [2168896 2162414]
- s390/kexec: fix ipl report address for kdump (Tobias Huschle) [2166296 2161328]
- mm, compaction: fix fast_isolate_around() to stay within boundaries (Daniel Vacek) [2170576 2149309]
- scsi: storvsc: Fix swiotlb bounce buffer leak in confidential VM (Emanuele Giuseppe Esposito) [2170228 2150659]
- netfilter: conntrack: handle tcp challenge acks during connection reuse (Florian Westphal) [2165587 2158726]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.17.1.el8_7]" date="1677844800">- net: mana: Add rmb after checking owner bits (Mohammed Gamal) [2173103 2139462]
- net: mana: Add support of XDP_REDIRECT action (Mohammed Gamal) [2173103 2139462]
- net: mana: Add the Linux MANA PF driver (Mohammed Gamal) [2173103 2139462]
- ice: fix lost multicast packets in promisc mode (Ken Cox) [2172550 2138215]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.18.0-425.18.1.el8_7]" date="1678449600">- futex: Resend potentially swallowed owner death notification (Rafael Aquini) [2170054 2161526]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.19.1.el8_7]" date="1678968000">- s390/dasd: fix no record found for raw_track_access (Tobias Huschle) [2167776 2161270]
- locking/rwsem: Disable preemption in all down_read*() and up_read() code paths (Waiman Long) [2170939 2162139]
- locking/rwsem: Prevent non-first waiter from spinning in down_write() slowpath (Waiman Long) [2170939 2162139]
- locking/rwsem: Allow slowpath writer to ignore handoff bit if not set by first waiter (Waiman Long) [2170939 2162139]
- locking/rwsem: Always try to wake waiters in out_nolock path (Waiman Long) [2170939 2162139]
- locking/rwsem: No need to check for handoff bit if wait queue empty (Waiman Long) [2170939 2162139]
- locking/rwsem: Make handoff bit handling more consistent (Waiman Long) [2170939 2162139]
- locking/rwsem: Disable preemption while trying for rwsem lock (Waiman Long) [2170939 2162139]
- locking/rwsem: Conditionally wake waiters in reader/writer slowpaths (Waiman Long) [2170939 2162139]
- locking: Make owner_on_cpu() into &lt;linux/sched.h&gt; (Waiman Long) [2170939 2162139]
- locking/rwsem: Optimize down_read_trylock() under highly contended case (Waiman Long) [2170939 2162139]
- locking/rwsem: Fix comments about reader optimistic lock stealing conditions (Waiman Long) [2170939 2162139]
- locking/rwsem: Disable preemption for spinning region (Waiman Long) [2170939 2162139]
- locking: Remove rcu_read_{,un}lock() for preempt_{dis,en}able() (Waiman Long) [2170939 2162139]
- watchdog: fix UAF in reboot notifier handling in watchdog core code (Wander Lairson Costa) [2139770 2131308]
- netfilter: nf_conntrack_irc: Tighten matching on DCC message (Wander Lairson Costa) [2139770 2131308]
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF (Jaroslav Kysela) [2163400 2163401] {CVE-2023-0266}
- net/mlx5e: Fix enabling sriov while tc nic rules are offloaded (Amir Tzin) [2167647 2112925]
- net/mlx5: E-Switch, pair only capable devices (Amir Tzin) [2167647 2112925]
- net/mlx5: Fix mlx5_get_next_dev() peer device matching (Amir Tzin) [2167647 2112925]
- net/mlx5: Lag, filter non compatible devices (Amir Tzin) [2167647 2112925]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.19.2.el8_7.gf5e8]" date="1678968001">- ovl: fail on invalid uid/gid mapping at copy up (Miklos Szeredi) [2165341 2165342] {CVE-2023-0386}</changelog>
</package>
<package pkgid="adedd5773e5cc3014784d6bb6bba5da1d487a8df229c456b6b7a19e1e6a2178f" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="425.10.1.el8_7"/>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.1.1.el8]" date="1663588800">- i40e: Fix kernel crash during module removal (Ivan Vecera) [2091489]
- redhat: enable zstream release numbering for rhel 8.7 (Jarod Wilson)
- ice: Allow operation with reduced device MSI-X (Petr Oros) [2102844]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.2.1.el8]" date="1664193600">- EDAC/ghes: Set the DIMM label unconditionally (Aristeu Rozanski) [2109712]
- configs: enable CONFIG_HP_ILO for aarch64 (Mark Salter) [2123508]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.3.1.el8]" date="1664539200">- iwlwifi: limit fw version for AC9560 to avoid fw crash (Íñigo Huguet) [2129297]
- sfc: fix null pointer dereference in efx_hard_start_xmit (Íñigo Huguet) [2119638]
- sfc: fix TX channel offset when using legacy interrupts (Íñigo Huguet) [2119638]
- netfilter: conntrack: reduce timeout when receiving out-of-window fin or rst (Florian Westphal) [2047366]
- netfilter: conntrack: remove unneeded indent level (Florian Westphal) [2047366]
- netfilter: conntrack: ignore overly delayed tcp packets (Florian Westphal) [2047366]
- netfilter: conntrack: prepare tcp_in_window for ternary return value (Florian Westphal) [2047366]
- netfilter: conntrack: remove pr_debug callsites from tcp tracker (Florian Westphal) [2047366]
- netfilter: conntrack: work around exceeded receive window (Florian Westphal) [2047366]
- netfilter: conntrack: improve RST handling when tuple is re-used (Florian Westphal) [2047366]
- netfilter: conntrack: avoid misleading 'invalid' in log message (Florian Westphal) [2047366]
- netfilter: remove BUG_ON() after skb_header_pointer() (Florian Westphal) [2047366]
- iavf: Detach device during reset task (Petr Oros) [2069206]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.4.1.el8]" date="1665144000">- random: allow reseeding DRBG with getrandom (Daiki Ueno) [2121766]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.5.1.el8_7]" date="1667476800">- ice: Fix interface being down after reset with link-down-on-close flag on (Petr Oros) [2136216 2024110]
- ice: Fix crash by keep old cfg when update TCs more than queues (Petr Oros) [2130992 2129902]
- ice: Fix tunnel checksum offload with fragmented traffic (Petr Oros) [2130992 2129902]
- ice: handle E822 generic device ID in PLDM header (Petr Oros) [2130992 2129902]
- ice: ethtool: Prohibit improper channel config for DCB (Petr Oros) [2130992 2129902]
- ice: ethtool: advertise 1000M speeds properly (Petr Oros) [2130992 2129902]
- ice: Fix switchdev rules book keeping (Petr Oros) [2130992 2129902]
- ice: fix access-beyond-end in the switch code (Petr Oros) [2130992 2129902]
- eth: ice: silence the GCC 12 array-bounds warning (Petr Oros) [2130992 2129902]
- ice: Expose RSS indirection tables for queue groups via ethtool (Petr Oros) [2130992 2129902]
- Revert "ice: Hide bus-info in ethtool for PRs in switchdev mode" (Petr Oros) [2130992 2129902]
- ice: remove period on argument description in ice_for_each_vf (Petr Oros) [2130992 2129902]
- ice: add a function comment for ice_cfg_mac_antispoof (Petr Oros) [2130992 2129902]
- ice: fix wording in comment for ice_reset_vf (Petr Oros) [2130992 2129902]
- ice: remove return value comment for ice_reset_all_vfs (Petr Oros) [2130992 2129902]
- ice: always check VF VSI pointer values (Petr Oros) [2130992 2129902]
- ice: add newline to dev_dbg in ice_vf_fdir_dump_info (Petr Oros) [2130992 2129902]
- ice: get switch id on switchdev devices (Petr Oros) [2130992 2129902]
- ice: return ENOSPC when exceeding ICE_MAX_CHAIN_WORDS (Petr Oros) [2130992 2129902]
- ice: introduce common helper for retrieving VSI by vsi_num (Petr Oros) [2130992 2129902]
- ice: use min_t() to make code cleaner in ice_gnss (Petr Oros) [2130992 2129902]
- ice: Add mpls+tso support (Petr Oros) [2130992 2129902]
- ice: switch: convert packet template match code to rodata (Petr Oros) [2130992 2129902]
- ice: switch: use convenience macros to declare dummy pkt templates (Petr Oros) [2130992 2129902]
- ice: switch: use a struct to pass packet template params (Petr Oros) [2130992 2129902]
- ice: switch: unobscurify bitops loop in ice_fill_adv_dummy_packet() (Petr Oros) [2130992 2129902]
- ice: switch: add and use u16[] aliases to ice_adv_lkup_elem::{h, m}_u (Petr Oros) [2130992 2129902]
- ice: Support GTP-U and GTP-C offload in switchdev (Petr Oros) [2130992 2129902]
- ice: Remove useless DMA-32 fallback configuration (Petr Oros) [2130992 2129902]
- ice: switch to napi_build_skb() (Petr Oros) [2130992 2129902]
- redhat: switch to z-stream dist tag and build targets (Jarod Wilson)
- block: avoid sign extend problem with default queue flags mask (Nico Pache) [2135813]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.6.1.el8_7]" date="1668168000">- ice: Add low latency Tx timestamp read (Petr Oros) [2136036 2092425]
- ice: introduce ice_ptp_reset_cached_phctime function (Petr Oros) [2136036 2092425]
- ice: re-arrange some static functions in ice_ptp.c (Petr Oros) [2136036 2092425]
- ice: track and warn when PHC update is late (Petr Oros) [2136036 2092425]
- ice: track Tx timestamp stats similar to other Intel drivers (Petr Oros) [2136036 2092425]
- ice: implement adjfine with mul_u64_u64_div_u64 (Petr Oros) [2136036 2092425]
- ice: Add EXTTS feature to the feature bitmap (Petr Oros) [2136036 2092425]
- math: Export mul_u64_u64_div_u64 (Petr Oros) [2136036 2092425]
- vfio/type1: Unpin zero pages (Alex Williamson) [2128515 2123015]
- net: atlantic: remove aq_nic_deinit() when resume (Íñigo Huguet) [2131935 2130839]
- net: atlantic: remove deep parameter on suspend/resume functions (Íñigo Huguet) [2131935 2130839]
- CI: Use zstream builder container (Veronika Kabatova)
- CI: Add disttag override for 8.7 (Veronika Kabatova)</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.7.1.el8_7]" date="1669723200">- ice: Add additional CSR registers to ETHTOOL_GREGS (Petr Oros) [2136513 2131024]
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps (Petr Oros) [2137270 2106964]
- i40e: Fix VF set max MTU size (Petr Oros) [2137270 2106964]
- iavf: Fix set max MTU size with port VLAN and jumbo frames (Petr Oros) [2137270 2106964]
- iavf: Fix bad page state (Petr Oros) [2137270 2106964]
- Revert "scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels" (Jarod Wilson)
- scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels (Tomas Henzl) [2139216]
- Revert "ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems" (Jarod Wilson)
- ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems (Wei Huang) [2142170 2130653]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.8.1.el8_7]" date="1669982400">- scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels (Tomas Henzl) [2139216 2134535]
- RDMA/mlx5: Set local port to one when accessing counters (Mohammad Kabat) [2141957 2077119]
- drm/mgag200: Fix PLL setup for G200_SE_A rev &gt;=4 (Jocelyn Falempe) [2140152 2130159]
- iavf: Do not restart Tx queues after reset task failure (Petr Oros) [2149081 2134005]
- iavf: Fix a crash during reset task (Petr Oros) [2149081 2134005]
- scsi: core: Allow the ALUA transitioning state enough time (Tomas Henzl) [2147374 2084250]
- scsi: core: Return BLK_STS_TRANSPORT for ALUA transitioning (Tomas Henzl) [2147374 2084250]
- i40e: Fix DMA mappings leak (Ivan Vecera) [2138205 2077847]
- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2142724 2142725] {CVE-2022-2964}
- net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2142724 2142725] {CVE-2022-2964}</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.9.1.el8_7]" date="1670587200">- Documentation/admin-guide: Document nomodeset kernel parameter (Jocelyn Falempe) [2145218 2143952]
- drm: Move nomodeset kernel parameter to the DRM subsystem (Jocelyn Falempe) [2145218 2143952]
- wait: Fix __wait_event_hrtimeout for RT/DL tasks (Derek Barbosa) [2138953 2125233]
- scsi: zfcp: Fix missing auto port scan and thus missing target ports (Tobias Huschle) [2127849 2121089]
- net: Fix return value of qdisc ingress handling on success (Ivan Vecera) [2141878 2131361]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.10.1.el8_7]" date="1671019200">- scsi: target: loop: Fix handling of aborted TMRs (Maurizio Lombardi) [2144583 2141713]
- ice: virtchnl rss hena support (Petr Oros) [2148130]
- ice: Fix configuring VIRTCHNL_OP_CONFIG_VSI_QUEUES with unbalanced queues (Michal Schmidt) [2142017 2137378]
- ice: Add support Flex RXD (Michal Schmidt) [2138157 2131310]
- netfilter: flowtable: fix stuck flows on cleanup due to pending work (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: add function to invoke garbage collection immediately (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: pass flowtable to nf_flow_table_iterate() (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: separate replace, destroy and stats to different workqueues (Phil Sutter) [2134084 2131370]
- x86/paravirt: Add a dummy __x86_paravirt_patch_template() function (Waiman Long) [2152206 2144161]
- x86/paravirt: Fix kABI breakage in struct pv_mmu_ops (Waiman Long) [2152206 2144161]
- drm/i915: fix TLB invalidation for Gen12 video and compute engines (Wander Lairson Costa) [2148149 2148150] {CVE-2022-4139}
- PCI: hv: Do not set PCI_COMMAND_MEMORY to reduce VM boot time (Emanuele Giuseppe Esposito) [2150912 2082836]
- iavf: Fix cached head and tail value for iavf_get_tx_pending (Stefan Assmann) [2149742 2103944]
- iavf: Fix change VF's mac address (Stefan Assmann) [2149742 2103944]
- iavf: Fix race between iavf_close and iavf_reset_task (Stefan Assmann) [2149742 2103944]
- net: ethernet: move from strlcpy with unused retval to strscpy (Stefan Assmann) [2149742 2103944]
- iavf: Fix 'tc qdisc show' listing too many queues (Stefan Assmann) [2149742 2103944]
- iavf: Fix max_rate limiting (Stefan Assmann) [2149742 2103944]
- iavf: Check for duplicate TC flower filter before parsing (Stefan Assmann) [2149742 2103944]
- iavf: Fix handling of dummy receive descriptors (Stefan Assmann) [2149742 2103944]
- iavf: Disallow changing rx/tx-frames and rx/tx-frames-irq (Stefan Assmann) [2149742 2103944]
- intel/iavf:fix repeated words in comments (Stefan Assmann) [2149742 2103944]
- intel: remove unused macros (Stefan Assmann) [2149742 2103944]
- iavf: Add waiting for response from PF in set mac (Stefan Assmann) [2149742 2103944]</changelog>
</package>
<package pkgid="4eb2d0899d23786fb19318ec09e19d04f87e1609946714d0e443da63b3fb2cc9" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="425.13.1.el8_7"/>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.4.1.el8]" date="1665144000">- random: allow reseeding DRBG with getrandom (Daiki Ueno) [2121766]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.5.1.el8_7]" date="1667476800">- ice: Fix interface being down after reset with link-down-on-close flag on (Petr Oros) [2136216 2024110]
- ice: Fix crash by keep old cfg when update TCs more than queues (Petr Oros) [2130992 2129902]
- ice: Fix tunnel checksum offload with fragmented traffic (Petr Oros) [2130992 2129902]
- ice: handle E822 generic device ID in PLDM header (Petr Oros) [2130992 2129902]
- ice: ethtool: Prohibit improper channel config for DCB (Petr Oros) [2130992 2129902]
- ice: ethtool: advertise 1000M speeds properly (Petr Oros) [2130992 2129902]
- ice: Fix switchdev rules book keeping (Petr Oros) [2130992 2129902]
- ice: fix access-beyond-end in the switch code (Petr Oros) [2130992 2129902]
- eth: ice: silence the GCC 12 array-bounds warning (Petr Oros) [2130992 2129902]
- ice: Expose RSS indirection tables for queue groups via ethtool (Petr Oros) [2130992 2129902]
- Revert "ice: Hide bus-info in ethtool for PRs in switchdev mode" (Petr Oros) [2130992 2129902]
- ice: remove period on argument description in ice_for_each_vf (Petr Oros) [2130992 2129902]
- ice: add a function comment for ice_cfg_mac_antispoof (Petr Oros) [2130992 2129902]
- ice: fix wording in comment for ice_reset_vf (Petr Oros) [2130992 2129902]
- ice: remove return value comment for ice_reset_all_vfs (Petr Oros) [2130992 2129902]
- ice: always check VF VSI pointer values (Petr Oros) [2130992 2129902]
- ice: add newline to dev_dbg in ice_vf_fdir_dump_info (Petr Oros) [2130992 2129902]
- ice: get switch id on switchdev devices (Petr Oros) [2130992 2129902]
- ice: return ENOSPC when exceeding ICE_MAX_CHAIN_WORDS (Petr Oros) [2130992 2129902]
- ice: introduce common helper for retrieving VSI by vsi_num (Petr Oros) [2130992 2129902]
- ice: use min_t() to make code cleaner in ice_gnss (Petr Oros) [2130992 2129902]
- ice: Add mpls+tso support (Petr Oros) [2130992 2129902]
- ice: switch: convert packet template match code to rodata (Petr Oros) [2130992 2129902]
- ice: switch: use convenience macros to declare dummy pkt templates (Petr Oros) [2130992 2129902]
- ice: switch: use a struct to pass packet template params (Petr Oros) [2130992 2129902]
- ice: switch: unobscurify bitops loop in ice_fill_adv_dummy_packet() (Petr Oros) [2130992 2129902]
- ice: switch: add and use u16[] aliases to ice_adv_lkup_elem::{h, m}_u (Petr Oros) [2130992 2129902]
- ice: Support GTP-U and GTP-C offload in switchdev (Petr Oros) [2130992 2129902]
- ice: Remove useless DMA-32 fallback configuration (Petr Oros) [2130992 2129902]
- ice: switch to napi_build_skb() (Petr Oros) [2130992 2129902]
- redhat: switch to z-stream dist tag and build targets (Jarod Wilson)
- block: avoid sign extend problem with default queue flags mask (Nico Pache) [2135813]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.6.1.el8_7]" date="1668168000">- ice: Add low latency Tx timestamp read (Petr Oros) [2136036 2092425]
- ice: introduce ice_ptp_reset_cached_phctime function (Petr Oros) [2136036 2092425]
- ice: re-arrange some static functions in ice_ptp.c (Petr Oros) [2136036 2092425]
- ice: track and warn when PHC update is late (Petr Oros) [2136036 2092425]
- ice: track Tx timestamp stats similar to other Intel drivers (Petr Oros) [2136036 2092425]
- ice: implement adjfine with mul_u64_u64_div_u64 (Petr Oros) [2136036 2092425]
- ice: Add EXTTS feature to the feature bitmap (Petr Oros) [2136036 2092425]
- math: Export mul_u64_u64_div_u64 (Petr Oros) [2136036 2092425]
- vfio/type1: Unpin zero pages (Alex Williamson) [2128515 2123015]
- net: atlantic: remove aq_nic_deinit() when resume (Íñigo Huguet) [2131935 2130839]
- net: atlantic: remove deep parameter on suspend/resume functions (Íñigo Huguet) [2131935 2130839]
- CI: Use zstream builder container (Veronika Kabatova)
- CI: Add disttag override for 8.7 (Veronika Kabatova)</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.7.1.el8_7]" date="1669723200">- ice: Add additional CSR registers to ETHTOOL_GREGS (Petr Oros) [2136513 2131024]
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps (Petr Oros) [2137270 2106964]
- i40e: Fix VF set max MTU size (Petr Oros) [2137270 2106964]
- iavf: Fix set max MTU size with port VLAN and jumbo frames (Petr Oros) [2137270 2106964]
- iavf: Fix bad page state (Petr Oros) [2137270 2106964]
- Revert "scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels" (Jarod Wilson)
- scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels (Tomas Henzl) [2139216]
- Revert "ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems" (Jarod Wilson)
- ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems (Wei Huang) [2142170 2130653]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.8.1.el8_7]" date="1669982400">- scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels (Tomas Henzl) [2139216 2134535]
- RDMA/mlx5: Set local port to one when accessing counters (Mohammad Kabat) [2141957 2077119]
- drm/mgag200: Fix PLL setup for G200_SE_A rev &gt;=4 (Jocelyn Falempe) [2140152 2130159]
- iavf: Do not restart Tx queues after reset task failure (Petr Oros) [2149081 2134005]
- iavf: Fix a crash during reset task (Petr Oros) [2149081 2134005]
- scsi: core: Allow the ALUA transitioning state enough time (Tomas Henzl) [2147374 2084250]
- scsi: core: Return BLK_STS_TRANSPORT for ALUA transitioning (Tomas Henzl) [2147374 2084250]
- i40e: Fix DMA mappings leak (Ivan Vecera) [2138205 2077847]
- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2142724 2142725] {CVE-2022-2964}
- net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2142724 2142725] {CVE-2022-2964}</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.9.1.el8_7]" date="1670587200">- Documentation/admin-guide: Document nomodeset kernel parameter (Jocelyn Falempe) [2145218 2143952]
- drm: Move nomodeset kernel parameter to the DRM subsystem (Jocelyn Falempe) [2145218 2143952]
- wait: Fix __wait_event_hrtimeout for RT/DL tasks (Derek Barbosa) [2138953 2125233]
- scsi: zfcp: Fix missing auto port scan and thus missing target ports (Tobias Huschle) [2127849 2121089]
- net: Fix return value of qdisc ingress handling on success (Ivan Vecera) [2141878 2131361]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.10.1.el8_7]" date="1671019200">- scsi: target: loop: Fix handling of aborted TMRs (Maurizio Lombardi) [2144583 2141713]
- ice: virtchnl rss hena support (Petr Oros) [2148130]
- ice: Fix configuring VIRTCHNL_OP_CONFIG_VSI_QUEUES with unbalanced queues (Michal Schmidt) [2142017 2137378]
- ice: Add support Flex RXD (Michal Schmidt) [2138157 2131310]
- netfilter: flowtable: fix stuck flows on cleanup due to pending work (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: add function to invoke garbage collection immediately (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: pass flowtable to nf_flow_table_iterate() (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: separate replace, destroy and stats to different workqueues (Phil Sutter) [2134084 2131370]
- x86/paravirt: Add a dummy __x86_paravirt_patch_template() function (Waiman Long) [2152206 2144161]
- x86/paravirt: Fix kABI breakage in struct pv_mmu_ops (Waiman Long) [2152206 2144161]
- drm/i915: fix TLB invalidation for Gen12 video and compute engines (Wander Lairson Costa) [2148149 2148150] {CVE-2022-4139}
- PCI: hv: Do not set PCI_COMMAND_MEMORY to reduce VM boot time (Emanuele Giuseppe Esposito) [2150912 2082836]
- iavf: Fix cached head and tail value for iavf_get_tx_pending (Stefan Assmann) [2149742 2103944]
- iavf: Fix change VF's mac address (Stefan Assmann) [2149742 2103944]
- iavf: Fix race between iavf_close and iavf_reset_task (Stefan Assmann) [2149742 2103944]
- net: ethernet: move from strlcpy with unused retval to strscpy (Stefan Assmann) [2149742 2103944]
- iavf: Fix 'tc qdisc show' listing too many queues (Stefan Assmann) [2149742 2103944]
- iavf: Fix max_rate limiting (Stefan Assmann) [2149742 2103944]
- iavf: Check for duplicate TC flower filter before parsing (Stefan Assmann) [2149742 2103944]
- iavf: Fix handling of dummy receive descriptors (Stefan Assmann) [2149742 2103944]
- iavf: Disallow changing rx/tx-frames and rx/tx-frames-irq (Stefan Assmann) [2149742 2103944]
- intel/iavf:fix repeated words in comments (Stefan Assmann) [2149742 2103944]
- intel: remove unused macros (Stefan Assmann) [2149742 2103944]
- iavf: Add waiting for response from PF in set mac (Stefan Assmann) [2149742 2103944]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.11.1.el8_7]" date="1673006400">- NFSD: Protect against send buffer overflow in NFSv3 READ (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv2 READ (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv3 READDIR (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv2 READDIR (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- SUNRPC: Fix svcxdr_init_encode's buflen calculation (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- SUNRPC: Fix svcxdr_init_decode's end-of-buffer calculation (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- panic, kexec: make __crash_kexec() NMI safe (Valentin Schneider) [2139580 2134126]
- kexec: turn all kexec_mutex acquisitions into trylocks (Valentin Schneider) [2139580 2134126]
- kexec: move locking into do_kexec_load (Valentin Schneider) [2139580 2134126]
- vdpa/mlx5: re-create forwarding rules after mac modified (Laurent Vivier) [2152912 2145136]
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry (Waiman Long) [2153653 2108387]
- irq: Call tick_irq_enter() inside HARDIRQ_OFFSET (Waiman Long) [2153653 2108387]
- irqtime: Move irqtime entry accounting after irq offset incrementation (Waiman Long) [2153653 2108387]
- sched/vtime: Consolidate IRQ time accounting (Waiman Long) [2153653 2108387]
- s390/vtime: Use the generic IRQ entry accounting (Waiman Long) [2153653 2108387]
- sched/cputime: Remove symbol exports from IRQ time accounting (Waiman Long) [2153653 2108387]
- genirq/irqdomain: Don't try to free an interrupt that has no mapping (Waiman Long) [2153653 2108387]
- genirq: Provide __irq_enter/exit_raw() (Waiman Long) [2153653 2108387]
- powerpc/time: Only set CONFIG_ARCH_HAS_SCALED_CPUTIME on PPC64 (Waiman Long) [2153653 2108387]
- powerpc/time: isolate scaled cputime accounting in dedicated functions. (Waiman Long) [2153653 2108387]
- PCI: hv: Fix synchronization between channel callback and hv_pci_bus_exit() (Mohammed Gamal) [2155280 2144708]
- PCI: hv: Fix synchronization between channel callback and hv_compose_msi_msg() (Mohammed Gamal) [2155280 2144708]
- PCI: hv: Use vmbus_requestor to generate transaction IDs for VMbus hardening (Mohammed Gamal) [2155280 2144708]
- net/mlx5e: TC, Reject forwarding from internal port to internal port (Mohammad Kabat) [2141959 2131345]
- hv_netvsc: Fix race between VF offering and VF association message from host (Mohammed Gamal) [2155272 2149279]
- x86/mce: Reduce number of machine checks taken during recovery (Prarit Bhargava) [2137592 2104388]
- cgroup/cpuset: Reduce cpuset_rwsem writer latency (Waiman Long) [2153108 2149031]
- rcu/exp: Mark current CPU as exp-QS in IPI loop second pass (Waiman Long) [2153108 2149031]
- rcu: Always inline rcu_dynticks_task*_{enter,exit}() (Waiman Long) [2153108 2149031]
- rcu: Fix existing exp request check in sync_sched_exp_online_cleanup() (Waiman Long) [2153108 2149031]
- rcu: Fix macro name CONFIG_TASKS_RCU_TRACE (Waiman Long) [2153108 2149031]
- rcu: Fix stall-warning deadlock due to non-release of rcu_node -&gt;lock (Waiman Long) [2153108 2149031]
- rcu: Fix to include first blocked task in stall warning (Waiman Long) [2153108 2149031]
- cgroup: Use cgroup_attach_{lock,unlock}() from cgroup_attach_task_all() (Waiman Long) [2153108 2149031]
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all() (Waiman Long) [2153108 2149031]
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock (Waiman Long) [2153108 2149031]
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree (Waiman Long) [2153108 2149031]
- cgroup/cpuset: Fix a race between cpuset_attach() and cpu hotplug (Waiman Long) [2153108 2149031]
- cgroup: reduce dependency on cgroup_mutex (Waiman Long) [2153108 2149031]
- sunrpc: Set sk_allocation to GFP_NOFS to avoid using current-&gt;task_frag. (Guillaume Nault) [2153230 2089660]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.12.1.el8_7]" date="1674129600">- x86/fpu: Prevent FPU state corruption (Oleksandr Natalenko) [2134586 2130890]
- x86/fpu: Drop fpregs lock before inheriting FPU permissions (Eder Zulian) [2154460 2153549]
- kernel-doc: fix undefined args variable (Jan Stancek) [2157905 2134954]
- mm: memcontrol: fix potential oom_lock recursion deadlock (Waiman Long) [2157922 2138886]
- memcg: prohibit unconditional exceeding the limit of dying tasks (Waiman Long) [2157922 2138886]
- mm, oom: do not trigger out_of_memory from the #PF (Waiman Long) [2157922 2138886]
- mm, oom: pagefault_out_of_memory: don't force global OOM for dying tasks (Waiman Long) [2157922 2138886]
- mm: memcontrol: don't count limit-setting reclaim as memory pressure (Waiman Long) [2157922 2138886]
- KVM: s390: vsie: Fix the initialization of the epoch extension (epdx) field (Thomas Huth) [2158813 2151854]
- net: mana: Fix race on per-CQ variable napi work_done (Emanuele Giuseppe Esposito) [2155437 2151722]
- mei: me: add adler lake point S DID (Prarit Bhargava) [2141783 2141602]
- PCI: hv: Only reuse existing IRTE allocation for Multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix the definition of vector in hv_compose_msi_msg() (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix interrupt mapping for multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Reuse existing IRTE allocation in compose_msi_msg() (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix hv_arch_irq_unmask() for multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix multi-MSI to allow more than one MSI vector (Emanuele Giuseppe Esposito) [2155289 2100275]
- drm/ast: Support multiple outputs (Jarod Wilson) [2149287 2147553]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.13.1.el8_7]" date="1675339200">- mm/cgroup/reclaim: fix dirty pages throttling on cgroup v1 (Waiman Long) [2160221]
- mm: vmscan: remove deadlock due to throttling failing to make progress (Waiman Long) [2160221]
- mm: vmscan: reduce throttling due to a failure to make progress -fix (Waiman Long) [2160221]
- mm: vmscan: Reduce throttling due to a failure to make progress (Waiman Long) [2160221]
- mm/vmscan: delay waking of tasks throttled on NOPROGRESS (Waiman Long) [2160221]
- mm/vmscan: increase the timeout if page reclaim is not making progress (Waiman Long) [2160221]
- mm/vmscan: centralise timeout values for reclaim_throttle (Waiman Long) [2160221]
- mm/page_alloc: remove the throttling logic from the page allocator (Waiman Long) [2160221]
- mm/writeback: throttle based on page writeback instead of congestion (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim when no progress is being made (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim and compaction when too may pages are isolated (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim until some writeback completes if congested (Waiman Long) [2160221]
- mm/vmscan.c: delete or fix duplicated words (Waiman Long) [2160221]
- mm,page_alloc: PF_WQ_WORKER threads must sleep at should_reclaim_retry() (Nico Pache) [2160221]
- ceph: avoid putting the realm twice when decoding snaps fails (Xiubo Li) [2155797 2139881]
- mm/mremap: hold the rmap lock in write mode when moving page table entries. (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: use pmd/pud_poplulate to update page table entries (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: don't enable optimized PUD move if page table levels is 2 (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: convert huge PUD move to separate helper (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: fix BUILD_BUG_ON() error in get_extent (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap.c: fix extent calculation (Waiman Long) [2140944] {CVE-2022-41222}
- x86: mremap speedup - Enable HAVE_MOVE_PUD (Waiman Long) [2140944] {CVE-2022-41222}
- mm: speedup mremap on 1GB or larger regions (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: start addresses are properly aligned (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: calculate extent in one place (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: it is sure to have enough space when extent meets requirement (Waiman Long) [2140944] {CVE-2022-41222}
- s390/boot: add secure boot trailer (Tobias Huschle) [2151530 2141967]
- i40e: Fix VF hang when reset is triggered on another VF (Ivan Vecera) [2160460 2103801]
- i2c: ismt: Fix an out-of-bounds bug in ismt_access() (Prarit Bhargava) [2154388 2119066] {CVE-2022-2873}
- iavf: schedule watchdog immediately when changing primary MAC (Michal Schmidt) [2163257 2152493]
- iavf: Move netdev_update_features() into watchdog task (Michal Schmidt) [2163257 2152493]
- iavf: fix temporary deadlock and failure to set MAC address (Michal Schmidt) [2163257 2152493]
- iavf: Fix error handling in iavf_init_module() (Michal Schmidt) [2163257 2152493]
- iommu/vt-d: Clean up si_domain in the init_dmars() error path (Jerry Snitselaar) [2149474 2118428]
- x86/pci/xen: Use msi_msg shadow structs (Jerry Snitselaar) [2149474 2118428]
- iommu/intel: Use msi_msg shadow structs (Jerry Snitselaar) [2149474 2118428]
- PCI: MSI: Fix Kconfig dependencies for PCI_MSI_ARCH_FALLBACKS (Jerry Snitselaar) [2149474 2118428]
- x86/apic/msi: Unbreak DMAR and HPET MSI (Jerry Snitselaar) [2149474 2118428]
- iommu/amd: Remove domain search for PCI/MSI (Jerry Snitselaar) [2149474 2118428]
- iommu/vt-d: Remove domain search for PCI/MSI[X] (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Make most MSI ops XEN private (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Cleanup the arch_*_msi_irqs() leftovers (Jerry Snitselaar) [2149474 2118428]
- PCI/MSI: Make arch_.*_msi_irq[s] fallbacks selectable (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Wrap XEN MSI management into irqdomain (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Consolidate XEN-MSI init (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Rework MSI teardown (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Make xen_msi_init() static and rename it to xen_hvm_msi_init() (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Move apic_post_init() invocation to one place (Jerry Snitselaar) [2149474 2118428]
- x86/msi: Use generic MSI domain ops (Jerry Snitselaar) [2149474 2118428]
- x86/msi: Remove pointless vcpu_affinity callback (Jerry Snitselaar) [2149474 2118428]
- iommu/vt-d: Fix compile error with CONFIG_PCI_ATS not set (Myron Stowe) [2149474 2118428]
- iommu/vt-d: Cure VF irqdomain hickup (Myron Stowe) [2149474 2118428]
- x86/pci: Set default irq domain in pcibios_add_device() (Myron Stowe) [2149474 2118428]
- iommm/amd: Store irq domain in struct device (Myron Stowe) [2149474 2118428]
- iommm/vt-d: Store irq domain in struct device (Myron Stowe) [2149474 2118428]
- PCI/MSI: Provide pci_dev_has_special_msi_domain() helper (Myron Stowe) [2149474 2118428]
- x86/msi: Consolidate MSI allocation (Myron Stowe) [2149474 2118428]
- PCI/MSI: Rework pci_msi_domain_calc_hwirq() (Myron Stowe) [2149474 2118428]
- x86/irq: Consolidate UV domain allocation (Myron Stowe) [2149474 2118428]
- x86/irq: Consolidate DMAR irq allocation (Myron Stowe) [2149474 2118428]
- x86_ioapic_Consolidate_IOAPIC_allocation (Myron Stowe) [2149474 2118428]
- x86/msi: Consolidate HPET allocation (Myron Stowe) [2149474 2118428]
- iommu/irq_remapping: Consolidate irq domain lookup (Myron Stowe) [2149474 2118428]
- iommu/amd: Consolidate irq domain getter (Myron Stowe) [2149474 2118428]
- iommu/vt-d: Consolidate irq domain getter (Myron Stowe) [2149474 2118428]
- x86/irq: Add allocation type for parent domain retrieval (Myron Stowe) [2149474 2118428]
- irqdomain: Export irq_domain_update_bus_token (Myron Stowe) [2149474 2118428]
- gitlab-ci: use CI templates from production branch (Michael Hofmann)
- iavf: remove INITIAL_MAC_SET to allow gARP to work properly (Stefan Assmann) [2149745 1938635]
- Revert "scsi: iscsi: ql4xxx: Use per-session workqueue for unbinding" (Chris Leech) [2152734 2122624]
- Revert "scsi: iscsi: Use the session workqueue for recovery" (Chris Leech) [2152734 2122624]
- arm64/bpf: Remove 128MB limit for BPF JIT programs (Yauheni Kaliuta) [2152138 2140163]
- bpf: Define bpf_jit_alloc_exec_limit for arm64 JIT (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: add `type` and `data` fields (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: use `ex` for `exception_table_entry` (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: make fixup_exception() return bool (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: consolidate definitions (Yauheni Kaliuta) [2152138 2140163]
- arm64: kvm: use kvm_exception_table_entry (Yauheni Kaliuta) [2152138 2140163]
- be2net: Fix buffer overflow in be_get_module_eeprom (Josef Oskera) [2160182 2126917]</changelog>
</package>
<package pkgid="0497080dbb38f1abb1e6cf1b16acb0d03f8fcacdb0af0facd68e984d18ff8d32" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="425.19.2.el8_7"/>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.11.1.el8_7]" date="1673006400">- NFSD: Protect against send buffer overflow in NFSv3 READ (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv2 READ (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv3 READDIR (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv2 READDIR (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- SUNRPC: Fix svcxdr_init_encode's buflen calculation (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- SUNRPC: Fix svcxdr_init_decode's end-of-buffer calculation (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- panic, kexec: make __crash_kexec() NMI safe (Valentin Schneider) [2139580 2134126]
- kexec: turn all kexec_mutex acquisitions into trylocks (Valentin Schneider) [2139580 2134126]
- kexec: move locking into do_kexec_load (Valentin Schneider) [2139580 2134126]
- vdpa/mlx5: re-create forwarding rules after mac modified (Laurent Vivier) [2152912 2145136]
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry (Waiman Long) [2153653 2108387]
- irq: Call tick_irq_enter() inside HARDIRQ_OFFSET (Waiman Long) [2153653 2108387]
- irqtime: Move irqtime entry accounting after irq offset incrementation (Waiman Long) [2153653 2108387]
- sched/vtime: Consolidate IRQ time accounting (Waiman Long) [2153653 2108387]
- s390/vtime: Use the generic IRQ entry accounting (Waiman Long) [2153653 2108387]
- sched/cputime: Remove symbol exports from IRQ time accounting (Waiman Long) [2153653 2108387]
- genirq/irqdomain: Don't try to free an interrupt that has no mapping (Waiman Long) [2153653 2108387]
- genirq: Provide __irq_enter/exit_raw() (Waiman Long) [2153653 2108387]
- powerpc/time: Only set CONFIG_ARCH_HAS_SCALED_CPUTIME on PPC64 (Waiman Long) [2153653 2108387]
- powerpc/time: isolate scaled cputime accounting in dedicated functions. (Waiman Long) [2153653 2108387]
- PCI: hv: Fix synchronization between channel callback and hv_pci_bus_exit() (Mohammed Gamal) [2155280 2144708]
- PCI: hv: Fix synchronization between channel callback and hv_compose_msi_msg() (Mohammed Gamal) [2155280 2144708]
- PCI: hv: Use vmbus_requestor to generate transaction IDs for VMbus hardening (Mohammed Gamal) [2155280 2144708]
- net/mlx5e: TC, Reject forwarding from internal port to internal port (Mohammad Kabat) [2141959 2131345]
- hv_netvsc: Fix race between VF offering and VF association message from host (Mohammed Gamal) [2155272 2149279]
- x86/mce: Reduce number of machine checks taken during recovery (Prarit Bhargava) [2137592 2104388]
- cgroup/cpuset: Reduce cpuset_rwsem writer latency (Waiman Long) [2153108 2149031]
- rcu/exp: Mark current CPU as exp-QS in IPI loop second pass (Waiman Long) [2153108 2149031]
- rcu: Always inline rcu_dynticks_task*_{enter,exit}() (Waiman Long) [2153108 2149031]
- rcu: Fix existing exp request check in sync_sched_exp_online_cleanup() (Waiman Long) [2153108 2149031]
- rcu: Fix macro name CONFIG_TASKS_RCU_TRACE (Waiman Long) [2153108 2149031]
- rcu: Fix stall-warning deadlock due to non-release of rcu_node -&gt;lock (Waiman Long) [2153108 2149031]
- rcu: Fix to include first blocked task in stall warning (Waiman Long) [2153108 2149031]
- cgroup: Use cgroup_attach_{lock,unlock}() from cgroup_attach_task_all() (Waiman Long) [2153108 2149031]
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all() (Waiman Long) [2153108 2149031]
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock (Waiman Long) [2153108 2149031]
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree (Waiman Long) [2153108 2149031]
- cgroup/cpuset: Fix a race between cpuset_attach() and cpu hotplug (Waiman Long) [2153108 2149031]
- cgroup: reduce dependency on cgroup_mutex (Waiman Long) [2153108 2149031]
- sunrpc: Set sk_allocation to GFP_NOFS to avoid using current-&gt;task_frag. (Guillaume Nault) [2153230 2089660]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.12.1.el8_7]" date="1674129600">- x86/fpu: Prevent FPU state corruption (Oleksandr Natalenko) [2134586 2130890]
- x86/fpu: Drop fpregs lock before inheriting FPU permissions (Eder Zulian) [2154460 2153549]
- kernel-doc: fix undefined args variable (Jan Stancek) [2157905 2134954]
- mm: memcontrol: fix potential oom_lock recursion deadlock (Waiman Long) [2157922 2138886]
- memcg: prohibit unconditional exceeding the limit of dying tasks (Waiman Long) [2157922 2138886]
- mm, oom: do not trigger out_of_memory from the #PF (Waiman Long) [2157922 2138886]
- mm, oom: pagefault_out_of_memory: don't force global OOM for dying tasks (Waiman Long) [2157922 2138886]
- mm: memcontrol: don't count limit-setting reclaim as memory pressure (Waiman Long) [2157922 2138886]
- KVM: s390: vsie: Fix the initialization of the epoch extension (epdx) field (Thomas Huth) [2158813 2151854]
- net: mana: Fix race on per-CQ variable napi work_done (Emanuele Giuseppe Esposito) [2155437 2151722]
- mei: me: add adler lake point S DID (Prarit Bhargava) [2141783 2141602]
- PCI: hv: Only reuse existing IRTE allocation for Multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix the definition of vector in hv_compose_msi_msg() (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix interrupt mapping for multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Reuse existing IRTE allocation in compose_msi_msg() (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix hv_arch_irq_unmask() for multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix multi-MSI to allow more than one MSI vector (Emanuele Giuseppe Esposito) [2155289 2100275]
- drm/ast: Support multiple outputs (Jarod Wilson) [2149287 2147553]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.13.1.el8_7]" date="1675339200">- mm/cgroup/reclaim: fix dirty pages throttling on cgroup v1 (Waiman Long) [2160221]
- mm: vmscan: remove deadlock due to throttling failing to make progress (Waiman Long) [2160221]
- mm: vmscan: reduce throttling due to a failure to make progress -fix (Waiman Long) [2160221]
- mm: vmscan: Reduce throttling due to a failure to make progress (Waiman Long) [2160221]
- mm/vmscan: delay waking of tasks throttled on NOPROGRESS (Waiman Long) [2160221]
- mm/vmscan: increase the timeout if page reclaim is not making progress (Waiman Long) [2160221]
- mm/vmscan: centralise timeout values for reclaim_throttle (Waiman Long) [2160221]
- mm/page_alloc: remove the throttling logic from the page allocator (Waiman Long) [2160221]
- mm/writeback: throttle based on page writeback instead of congestion (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim when no progress is being made (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim and compaction when too may pages are isolated (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim until some writeback completes if congested (Waiman Long) [2160221]
- mm/vmscan.c: delete or fix duplicated words (Waiman Long) [2160221]
- mm,page_alloc: PF_WQ_WORKER threads must sleep at should_reclaim_retry() (Nico Pache) [2160221]
- ceph: avoid putting the realm twice when decoding snaps fails (Xiubo Li) [2155797 2139881]
- mm/mremap: hold the rmap lock in write mode when moving page table entries. (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: use pmd/pud_poplulate to update page table entries (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: don't enable optimized PUD move if page table levels is 2 (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: convert huge PUD move to separate helper (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: fix BUILD_BUG_ON() error in get_extent (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap.c: fix extent calculation (Waiman Long) [2140944] {CVE-2022-41222}
- x86: mremap speedup - Enable HAVE_MOVE_PUD (Waiman Long) [2140944] {CVE-2022-41222}
- mm: speedup mremap on 1GB or larger regions (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: start addresses are properly aligned (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: calculate extent in one place (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: it is sure to have enough space when extent meets requirement (Waiman Long) [2140944] {CVE-2022-41222}
- s390/boot: add secure boot trailer (Tobias Huschle) [2151530 2141967]
- i40e: Fix VF hang when reset is triggered on another VF (Ivan Vecera) [2160460 2103801]
- i2c: ismt: Fix an out-of-bounds bug in ismt_access() (Prarit Bhargava) [2154388 2119066] {CVE-2022-2873}
- iavf: schedule watchdog immediately when changing primary MAC (Michal Schmidt) [2163257 2152493]
- iavf: Move netdev_update_features() into watchdog task (Michal Schmidt) [2163257 2152493]
- iavf: fix temporary deadlock and failure to set MAC address (Michal Schmidt) [2163257 2152493]
- iavf: Fix error handling in iavf_init_module() (Michal Schmidt) [2163257 2152493]
- iommu/vt-d: Clean up si_domain in the init_dmars() error path (Jerry Snitselaar) [2149474 2118428]
- x86/pci/xen: Use msi_msg shadow structs (Jerry Snitselaar) [2149474 2118428]
- iommu/intel: Use msi_msg shadow structs (Jerry Snitselaar) [2149474 2118428]
- PCI: MSI: Fix Kconfig dependencies for PCI_MSI_ARCH_FALLBACKS (Jerry Snitselaar) [2149474 2118428]
- x86/apic/msi: Unbreak DMAR and HPET MSI (Jerry Snitselaar) [2149474 2118428]
- iommu/amd: Remove domain search for PCI/MSI (Jerry Snitselaar) [2149474 2118428]
- iommu/vt-d: Remove domain search for PCI/MSI[X] (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Make most MSI ops XEN private (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Cleanup the arch_*_msi_irqs() leftovers (Jerry Snitselaar) [2149474 2118428]
- PCI/MSI: Make arch_.*_msi_irq[s] fallbacks selectable (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Wrap XEN MSI management into irqdomain (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Consolidate XEN-MSI init (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Rework MSI teardown (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Make xen_msi_init() static and rename it to xen_hvm_msi_init() (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Move apic_post_init() invocation to one place (Jerry Snitselaar) [2149474 2118428]
- x86/msi: Use generic MSI domain ops (Jerry Snitselaar) [2149474 2118428]
- x86/msi: Remove pointless vcpu_affinity callback (Jerry Snitselaar) [2149474 2118428]
- iommu/vt-d: Fix compile error with CONFIG_PCI_ATS not set (Myron Stowe) [2149474 2118428]
- iommu/vt-d: Cure VF irqdomain hickup (Myron Stowe) [2149474 2118428]
- x86/pci: Set default irq domain in pcibios_add_device() (Myron Stowe) [2149474 2118428]
- iommm/amd: Store irq domain in struct device (Myron Stowe) [2149474 2118428]
- iommm/vt-d: Store irq domain in struct device (Myron Stowe) [2149474 2118428]
- PCI/MSI: Provide pci_dev_has_special_msi_domain() helper (Myron Stowe) [2149474 2118428]
- x86/msi: Consolidate MSI allocation (Myron Stowe) [2149474 2118428]
- PCI/MSI: Rework pci_msi_domain_calc_hwirq() (Myron Stowe) [2149474 2118428]
- x86/irq: Consolidate UV domain allocation (Myron Stowe) [2149474 2118428]
- x86/irq: Consolidate DMAR irq allocation (Myron Stowe) [2149474 2118428]
- x86_ioapic_Consolidate_IOAPIC_allocation (Myron Stowe) [2149474 2118428]
- x86/msi: Consolidate HPET allocation (Myron Stowe) [2149474 2118428]
- iommu/irq_remapping: Consolidate irq domain lookup (Myron Stowe) [2149474 2118428]
- iommu/amd: Consolidate irq domain getter (Myron Stowe) [2149474 2118428]
- iommu/vt-d: Consolidate irq domain getter (Myron Stowe) [2149474 2118428]
- x86/irq: Add allocation type for parent domain retrieval (Myron Stowe) [2149474 2118428]
- irqdomain: Export irq_domain_update_bus_token (Myron Stowe) [2149474 2118428]
- gitlab-ci: use CI templates from production branch (Michael Hofmann)
- iavf: remove INITIAL_MAC_SET to allow gARP to work properly (Stefan Assmann) [2149745 1938635]
- Revert "scsi: iscsi: ql4xxx: Use per-session workqueue for unbinding" (Chris Leech) [2152734 2122624]
- Revert "scsi: iscsi: Use the session workqueue for recovery" (Chris Leech) [2152734 2122624]
- arm64/bpf: Remove 128MB limit for BPF JIT programs (Yauheni Kaliuta) [2152138 2140163]
- bpf: Define bpf_jit_alloc_exec_limit for arm64 JIT (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: add `type` and `data` fields (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: use `ex` for `exception_table_entry` (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: make fixup_exception() return bool (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: consolidate definitions (Yauheni Kaliuta) [2152138 2140163]
- arm64: kvm: use kvm_exception_table_entry (Yauheni Kaliuta) [2152138 2140163]
- be2net: Fix buffer overflow in be_get_module_eeprom (Josef Oskera) [2160182 2126917]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.14.1.el8_7]" date="1676030400">- ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems (Wei Huang) [2142170 2130653]
- KVM: x86: nSVM: implement nested LBR virtualization (Emanuele Giuseppe Esposito) [2166362 2155149]
- KVM: x86: nSVM: correctly virtualize LBR msrs when L2 is running (Emanuele Giuseppe Esposito) [2166362 2155149]
- kvm: x86: SVM: use vmcb* instead of svm-&gt;vmcb where it makes sense (Emanuele Giuseppe Esposito) [2166362 2155149]
- KVM: x86: nSVM: implement nested VMLOAD/VMSAVE (Emanuele Giuseppe Esposito) [2166362 2155149]
- IB/iser: Fix login with authentication (Kamal Heib) [2161750 2120676]
- act_mirred: use the backlog for nested calls to mirred ingress (Davide Caratti) [2164648 2131339] {CVE-2022-4269}
- net/sched: act_mirred: better wording on protection against excessive stack growth (Davide Caratti) [2164648 2131339] {CVE-2022-4269}
- redhat/configs: Set CONFIG_X86_AMD_PSTATE to 'm' (Prarit Bhargava) [2151275 2145246]
- KVM: x86: smm: preserve interrupt shadow in SMRAM (Maxim Levitsky) [2166368 2097144]
- KVM: x86: SVM: don't save SVM state to SMRAM when VM is not long mode capable (Maxim Levitsky) [2166368 2097144]
- KVM: x86: SVM: use smram structs (Maxim Levitsky) [2166368 2097144]
- KVM: svm: drop explicit return value of kvm_vcpu_map (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: use smram struct for 64 bit smram load/restore (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: use smram struct for 32 bit smram load/restore (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: use smram structs in the common code (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: add structs for KVM's smram layout (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: check for failures on smm entry (Maxim Levitsky) [2166368 2097144]
- KVM: x86: do not go through ctxt-&gt;ops when emulating rsm (Maxim Levitsky) [2166368 2097144]
- KVM: x86: move SMM exit to a new file (Maxim Levitsky) [2166368 2097144]
- KVM: x86: move SMM entry to a new file (Maxim Levitsky) [2166368 2097144]
- KVM: x86: start moving SMM-related functions to new files (Maxim Levitsky) [2166368 2097144]
- bug: introduce ASSERT_STRUCT_OFFSET (Maxim Levitsky) [2166368 2097144]
- KVM: x86: Rename and expose helper to detect if INIT/SIPI are allowed (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: number of GPRs in the SMRAM image depends on the image format (Maxim Levitsky) [2166368 2097144]
- KVM: x86: emulator: update the emulation mode after CR0 write (Maxim Levitsky) [2166368 2097144]
- KVM: x86: emulator: update the emulation mode after rsm (Maxim Levitsky) [2166368 2097144]
- KVM: x86: emulator: introduce emulator_recalc_and_set_mode (Maxim Levitsky) [2166368 2097144]
- KVM: x86: emulator: em_sysexit should update ctxt-&gt;mode (Maxim Levitsky) [2166368 2097144]
- KVM: x86: Bug the VM if the emulator accesses a non-existent GPR (Maxim Levitsky) [2166368 2097144]
- \KVM: x86: Reduce the number of emulator GPRs to '8' for 32-bit KVM (Maxim Levitsky) [2166368 2097144]
- KVM: x86: Use 16-bit fields to track dirty/valid emulator GPRs (Maxim Levitsky) [2166368 2097144]
- KVM: x86: Omit VCPU_REGS_RIP from emulator's _regs array (Maxim Levitsky) [2166368 2097144]
- \KVM: x86: Harden _regs accesses to guard against buggy input (Maxim Levitsky) [2166368 2097144]
- KVM: x86: Grab regs_dirty in local 'unsigned long' (Maxim Levitsky) [2166368 2097144]
- proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152571 2152572] {CVE-2022-4378}
- proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152571 2152572] {CVE-2022-4378}</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.15.1.el8_7]" date="1676548800">- net/mlx5e: Fix use-after-free when reverting termination table (Amir Tzin) [2167640 2112927]
- net/mlx5: Do not query pci info while pci disabled (Amir Tzin) [2167645 2129249]
- x86/fpu: Fix copy_xstate_to_uabi() to copy init states correctly (Dean Nelson) [2168384 2122850]
- x86/fpu: Exclude dynamic states from init_fpstate (Dean Nelson) [2168384 2122850]
- x86/fpu: Fix the init_fpstate size check with the actual size (Dean Nelson) [2168384 2122850]
- x86/fpu: Configure init_fpstate attributes orderly (Dean Nelson) [2168384 2122850]
- x86/fpu/xstate: Fix the ARCH_REQ_XCOMP_PERM implementation (Dean Nelson) [2168384 2122850]
- net/mlx5: E-Switch, properly handle ingress tagged packets on VST (Amir Tzin) [2166665 2096109]
- cpuhotplug: Fix KABI breakage (Prarit Bhargava) [2162763 2156529]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.16.1.el8_7]" date="1677153600">- ipv6: fix panic when fib_lookup_arg-&gt;result is fib6_info (Jiri Benc) [2167602 2140599]
- ceph: blocklist the kclient when receiving corrupted snap trace (Xiubo Li) [2168896 2162414]
- ceph: move mount state enum to super.h (Xiubo Li) [2168896 2162414]
- s390/kexec: fix ipl report address for kdump (Tobias Huschle) [2166296 2161328]
- mm, compaction: fix fast_isolate_around() to stay within boundaries (Daniel Vacek) [2170576 2149309]
- scsi: storvsc: Fix swiotlb bounce buffer leak in confidential VM (Emanuele Giuseppe Esposito) [2170228 2150659]
- netfilter: conntrack: handle tcp challenge acks during connection reuse (Florian Westphal) [2165587 2158726]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.17.1.el8_7]" date="1677844800">- net: mana: Add rmb after checking owner bits (Mohammed Gamal) [2173103 2139462]
- net: mana: Add support of XDP_REDIRECT action (Mohammed Gamal) [2173103 2139462]
- net: mana: Add the Linux MANA PF driver (Mohammed Gamal) [2173103 2139462]
- ice: fix lost multicast packets in promisc mode (Ken Cox) [2172550 2138215]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.18.0-425.18.1.el8_7]" date="1678449600">- futex: Resend potentially swallowed owner death notification (Rafael Aquini) [2170054 2161526]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.19.1.el8_7]" date="1678968000">- s390/dasd: fix no record found for raw_track_access (Tobias Huschle) [2167776 2161270]
- locking/rwsem: Disable preemption in all down_read*() and up_read() code paths (Waiman Long) [2170939 2162139]
- locking/rwsem: Prevent non-first waiter from spinning in down_write() slowpath (Waiman Long) [2170939 2162139]
- locking/rwsem: Allow slowpath writer to ignore handoff bit if not set by first waiter (Waiman Long) [2170939 2162139]
- locking/rwsem: Always try to wake waiters in out_nolock path (Waiman Long) [2170939 2162139]
- locking/rwsem: No need to check for handoff bit if wait queue empty (Waiman Long) [2170939 2162139]
- locking/rwsem: Make handoff bit handling more consistent (Waiman Long) [2170939 2162139]
- locking/rwsem: Disable preemption while trying for rwsem lock (Waiman Long) [2170939 2162139]
- locking/rwsem: Conditionally wake waiters in reader/writer slowpaths (Waiman Long) [2170939 2162139]
- locking: Make owner_on_cpu() into &lt;linux/sched.h&gt; (Waiman Long) [2170939 2162139]
- locking/rwsem: Optimize down_read_trylock() under highly contended case (Waiman Long) [2170939 2162139]
- locking/rwsem: Fix comments about reader optimistic lock stealing conditions (Waiman Long) [2170939 2162139]
- locking/rwsem: Disable preemption for spinning region (Waiman Long) [2170939 2162139]
- locking: Remove rcu_read_{,un}lock() for preempt_{dis,en}able() (Waiman Long) [2170939 2162139]
- watchdog: fix UAF in reboot notifier handling in watchdog core code (Wander Lairson Costa) [2139770 2131308]
- netfilter: nf_conntrack_irc: Tighten matching on DCC message (Wander Lairson Costa) [2139770 2131308]
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF (Jaroslav Kysela) [2163400 2163401] {CVE-2023-0266}
- net/mlx5e: Fix enabling sriov while tc nic rules are offloaded (Amir Tzin) [2167647 2112925]
- net/mlx5: E-Switch, pair only capable devices (Amir Tzin) [2167647 2112925]
- net/mlx5: Fix mlx5_get_next_dev() peer device matching (Amir Tzin) [2167647 2112925]
- net/mlx5: Lag, filter non compatible devices (Amir Tzin) [2167647 2112925]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.19.2.el8_7.gf5e8]" date="1678968001">- ovl: fail on invalid uid/gid mapping at copy up (Miklos Szeredi) [2165341 2165342] {CVE-2023-0386}</changelog>
</package>
<package pkgid="67ec627019da744d29835a4d645ac7ed484862778044f5f3091bfb6720d1edf7" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="4.18.0" rel="425.10.1.el8_7"/>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.1.1.el8]" date="1663588800">- i40e: Fix kernel crash during module removal (Ivan Vecera) [2091489]
- redhat: enable zstream release numbering for rhel 8.7 (Jarod Wilson)
- ice: Allow operation with reduced device MSI-X (Petr Oros) [2102844]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.2.1.el8]" date="1664193600">- EDAC/ghes: Set the DIMM label unconditionally (Aristeu Rozanski) [2109712]
- configs: enable CONFIG_HP_ILO for aarch64 (Mark Salter) [2123508]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.3.1.el8]" date="1664539200">- iwlwifi: limit fw version for AC9560 to avoid fw crash (Íñigo Huguet) [2129297]
- sfc: fix null pointer dereference in efx_hard_start_xmit (Íñigo Huguet) [2119638]
- sfc: fix TX channel offset when using legacy interrupts (Íñigo Huguet) [2119638]
- netfilter: conntrack: reduce timeout when receiving out-of-window fin or rst (Florian Westphal) [2047366]
- netfilter: conntrack: remove unneeded indent level (Florian Westphal) [2047366]
- netfilter: conntrack: ignore overly delayed tcp packets (Florian Westphal) [2047366]
- netfilter: conntrack: prepare tcp_in_window for ternary return value (Florian Westphal) [2047366]
- netfilter: conntrack: remove pr_debug callsites from tcp tracker (Florian Westphal) [2047366]
- netfilter: conntrack: work around exceeded receive window (Florian Westphal) [2047366]
- netfilter: conntrack: improve RST handling when tuple is re-used (Florian Westphal) [2047366]
- netfilter: conntrack: avoid misleading 'invalid' in log message (Florian Westphal) [2047366]
- netfilter: remove BUG_ON() after skb_header_pointer() (Florian Westphal) [2047366]
- iavf: Detach device during reset task (Petr Oros) [2069206]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.4.1.el8]" date="1665144000">- random: allow reseeding DRBG with getrandom (Daiki Ueno) [2121766]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.5.1.el8_7]" date="1667476800">- ice: Fix interface being down after reset with link-down-on-close flag on (Petr Oros) [2136216 2024110]
- ice: Fix crash by keep old cfg when update TCs more than queues (Petr Oros) [2130992 2129902]
- ice: Fix tunnel checksum offload with fragmented traffic (Petr Oros) [2130992 2129902]
- ice: handle E822 generic device ID in PLDM header (Petr Oros) [2130992 2129902]
- ice: ethtool: Prohibit improper channel config for DCB (Petr Oros) [2130992 2129902]
- ice: ethtool: advertise 1000M speeds properly (Petr Oros) [2130992 2129902]
- ice: Fix switchdev rules book keeping (Petr Oros) [2130992 2129902]
- ice: fix access-beyond-end in the switch code (Petr Oros) [2130992 2129902]
- eth: ice: silence the GCC 12 array-bounds warning (Petr Oros) [2130992 2129902]
- ice: Expose RSS indirection tables for queue groups via ethtool (Petr Oros) [2130992 2129902]
- Revert "ice: Hide bus-info in ethtool for PRs in switchdev mode" (Petr Oros) [2130992 2129902]
- ice: remove period on argument description in ice_for_each_vf (Petr Oros) [2130992 2129902]
- ice: add a function comment for ice_cfg_mac_antispoof (Petr Oros) [2130992 2129902]
- ice: fix wording in comment for ice_reset_vf (Petr Oros) [2130992 2129902]
- ice: remove return value comment for ice_reset_all_vfs (Petr Oros) [2130992 2129902]
- ice: always check VF VSI pointer values (Petr Oros) [2130992 2129902]
- ice: add newline to dev_dbg in ice_vf_fdir_dump_info (Petr Oros) [2130992 2129902]
- ice: get switch id on switchdev devices (Petr Oros) [2130992 2129902]
- ice: return ENOSPC when exceeding ICE_MAX_CHAIN_WORDS (Petr Oros) [2130992 2129902]
- ice: introduce common helper for retrieving VSI by vsi_num (Petr Oros) [2130992 2129902]
- ice: use min_t() to make code cleaner in ice_gnss (Petr Oros) [2130992 2129902]
- ice: Add mpls+tso support (Petr Oros) [2130992 2129902]
- ice: switch: convert packet template match code to rodata (Petr Oros) [2130992 2129902]
- ice: switch: use convenience macros to declare dummy pkt templates (Petr Oros) [2130992 2129902]
- ice: switch: use a struct to pass packet template params (Petr Oros) [2130992 2129902]
- ice: switch: unobscurify bitops loop in ice_fill_adv_dummy_packet() (Petr Oros) [2130992 2129902]
- ice: switch: add and use u16[] aliases to ice_adv_lkup_elem::{h, m}_u (Petr Oros) [2130992 2129902]
- ice: Support GTP-U and GTP-C offload in switchdev (Petr Oros) [2130992 2129902]
- ice: Remove useless DMA-32 fallback configuration (Petr Oros) [2130992 2129902]
- ice: switch to napi_build_skb() (Petr Oros) [2130992 2129902]
- redhat: switch to z-stream dist tag and build targets (Jarod Wilson)
- block: avoid sign extend problem with default queue flags mask (Nico Pache) [2135813]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.6.1.el8_7]" date="1668168000">- ice: Add low latency Tx timestamp read (Petr Oros) [2136036 2092425]
- ice: introduce ice_ptp_reset_cached_phctime function (Petr Oros) [2136036 2092425]
- ice: re-arrange some static functions in ice_ptp.c (Petr Oros) [2136036 2092425]
- ice: track and warn when PHC update is late (Petr Oros) [2136036 2092425]
- ice: track Tx timestamp stats similar to other Intel drivers (Petr Oros) [2136036 2092425]
- ice: implement adjfine with mul_u64_u64_div_u64 (Petr Oros) [2136036 2092425]
- ice: Add EXTTS feature to the feature bitmap (Petr Oros) [2136036 2092425]
- math: Export mul_u64_u64_div_u64 (Petr Oros) [2136036 2092425]
- vfio/type1: Unpin zero pages (Alex Williamson) [2128515 2123015]
- net: atlantic: remove aq_nic_deinit() when resume (Íñigo Huguet) [2131935 2130839]
- net: atlantic: remove deep parameter on suspend/resume functions (Íñigo Huguet) [2131935 2130839]
- CI: Use zstream builder container (Veronika Kabatova)
- CI: Add disttag override for 8.7 (Veronika Kabatova)</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.7.1.el8_7]" date="1669723200">- ice: Add additional CSR registers to ETHTOOL_GREGS (Petr Oros) [2136513 2131024]
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps (Petr Oros) [2137270 2106964]
- i40e: Fix VF set max MTU size (Petr Oros) [2137270 2106964]
- iavf: Fix set max MTU size with port VLAN and jumbo frames (Petr Oros) [2137270 2106964]
- iavf: Fix bad page state (Petr Oros) [2137270 2106964]
- Revert "scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels" (Jarod Wilson)
- scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels (Tomas Henzl) [2139216]
- Revert "ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems" (Jarod Wilson)
- ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems (Wei Huang) [2142170 2130653]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.8.1.el8_7]" date="1669982400">- scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels (Tomas Henzl) [2139216 2134535]
- RDMA/mlx5: Set local port to one when accessing counters (Mohammad Kabat) [2141957 2077119]
- drm/mgag200: Fix PLL setup for G200_SE_A rev &gt;=4 (Jocelyn Falempe) [2140152 2130159]
- iavf: Do not restart Tx queues after reset task failure (Petr Oros) [2149081 2134005]
- iavf: Fix a crash during reset task (Petr Oros) [2149081 2134005]
- scsi: core: Allow the ALUA transitioning state enough time (Tomas Henzl) [2147374 2084250]
- scsi: core: Return BLK_STS_TRANSPORT for ALUA transitioning (Tomas Henzl) [2147374 2084250]
- i40e: Fix DMA mappings leak (Ivan Vecera) [2138205 2077847]
- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2142724 2142725] {CVE-2022-2964}
- net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2142724 2142725] {CVE-2022-2964}</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.9.1.el8_7]" date="1670587200">- Documentation/admin-guide: Document nomodeset kernel parameter (Jocelyn Falempe) [2145218 2143952]
- drm: Move nomodeset kernel parameter to the DRM subsystem (Jocelyn Falempe) [2145218 2143952]
- wait: Fix __wait_event_hrtimeout for RT/DL tasks (Derek Barbosa) [2138953 2125233]
- scsi: zfcp: Fix missing auto port scan and thus missing target ports (Tobias Huschle) [2127849 2121089]
- net: Fix return value of qdisc ingress handling on success (Ivan Vecera) [2141878 2131361]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.10.1.el8_7]" date="1671019200">- scsi: target: loop: Fix handling of aborted TMRs (Maurizio Lombardi) [2144583 2141713]
- ice: virtchnl rss hena support (Petr Oros) [2148130]
- ice: Fix configuring VIRTCHNL_OP_CONFIG_VSI_QUEUES with unbalanced queues (Michal Schmidt) [2142017 2137378]
- ice: Add support Flex RXD (Michal Schmidt) [2138157 2131310]
- netfilter: flowtable: fix stuck flows on cleanup due to pending work (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: add function to invoke garbage collection immediately (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: pass flowtable to nf_flow_table_iterate() (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: separate replace, destroy and stats to different workqueues (Phil Sutter) [2134084 2131370]
- x86/paravirt: Add a dummy __x86_paravirt_patch_template() function (Waiman Long) [2152206 2144161]
- x86/paravirt: Fix kABI breakage in struct pv_mmu_ops (Waiman Long) [2152206 2144161]
- drm/i915: fix TLB invalidation for Gen12 video and compute engines (Wander Lairson Costa) [2148149 2148150] {CVE-2022-4139}
- PCI: hv: Do not set PCI_COMMAND_MEMORY to reduce VM boot time (Emanuele Giuseppe Esposito) [2150912 2082836]
- iavf: Fix cached head and tail value for iavf_get_tx_pending (Stefan Assmann) [2149742 2103944]
- iavf: Fix change VF's mac address (Stefan Assmann) [2149742 2103944]
- iavf: Fix race between iavf_close and iavf_reset_task (Stefan Assmann) [2149742 2103944]
- net: ethernet: move from strlcpy with unused retval to strscpy (Stefan Assmann) [2149742 2103944]
- iavf: Fix 'tc qdisc show' listing too many queues (Stefan Assmann) [2149742 2103944]
- iavf: Fix max_rate limiting (Stefan Assmann) [2149742 2103944]
- iavf: Check for duplicate TC flower filter before parsing (Stefan Assmann) [2149742 2103944]
- iavf: Fix handling of dummy receive descriptors (Stefan Assmann) [2149742 2103944]
- iavf: Disallow changing rx/tx-frames and rx/tx-frames-irq (Stefan Assmann) [2149742 2103944]
- intel/iavf:fix repeated words in comments (Stefan Assmann) [2149742 2103944]
- intel: remove unused macros (Stefan Assmann) [2149742 2103944]
- iavf: Add waiting for response from PF in set mac (Stefan Assmann) [2149742 2103944]</changelog>
</package>
<package pkgid="570b97a16088344c17ca1d5ab16c70a9941c189ff06ac347ab26d06688e9987e" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="4.18.0" rel="425.13.1.el8_7"/>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.4.1.el8]" date="1665144000">- random: allow reseeding DRBG with getrandom (Daiki Ueno) [2121766]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.5.1.el8_7]" date="1667476800">- ice: Fix interface being down after reset with link-down-on-close flag on (Petr Oros) [2136216 2024110]
- ice: Fix crash by keep old cfg when update TCs more than queues (Petr Oros) [2130992 2129902]
- ice: Fix tunnel checksum offload with fragmented traffic (Petr Oros) [2130992 2129902]
- ice: handle E822 generic device ID in PLDM header (Petr Oros) [2130992 2129902]
- ice: ethtool: Prohibit improper channel config for DCB (Petr Oros) [2130992 2129902]
- ice: ethtool: advertise 1000M speeds properly (Petr Oros) [2130992 2129902]
- ice: Fix switchdev rules book keeping (Petr Oros) [2130992 2129902]
- ice: fix access-beyond-end in the switch code (Petr Oros) [2130992 2129902]
- eth: ice: silence the GCC 12 array-bounds warning (Petr Oros) [2130992 2129902]
- ice: Expose RSS indirection tables for queue groups via ethtool (Petr Oros) [2130992 2129902]
- Revert "ice: Hide bus-info in ethtool for PRs in switchdev mode" (Petr Oros) [2130992 2129902]
- ice: remove period on argument description in ice_for_each_vf (Petr Oros) [2130992 2129902]
- ice: add a function comment for ice_cfg_mac_antispoof (Petr Oros) [2130992 2129902]
- ice: fix wording in comment for ice_reset_vf (Petr Oros) [2130992 2129902]
- ice: remove return value comment for ice_reset_all_vfs (Petr Oros) [2130992 2129902]
- ice: always check VF VSI pointer values (Petr Oros) [2130992 2129902]
- ice: add newline to dev_dbg in ice_vf_fdir_dump_info (Petr Oros) [2130992 2129902]
- ice: get switch id on switchdev devices (Petr Oros) [2130992 2129902]
- ice: return ENOSPC when exceeding ICE_MAX_CHAIN_WORDS (Petr Oros) [2130992 2129902]
- ice: introduce common helper for retrieving VSI by vsi_num (Petr Oros) [2130992 2129902]
- ice: use min_t() to make code cleaner in ice_gnss (Petr Oros) [2130992 2129902]
- ice: Add mpls+tso support (Petr Oros) [2130992 2129902]
- ice: switch: convert packet template match code to rodata (Petr Oros) [2130992 2129902]
- ice: switch: use convenience macros to declare dummy pkt templates (Petr Oros) [2130992 2129902]
- ice: switch: use a struct to pass packet template params (Petr Oros) [2130992 2129902]
- ice: switch: unobscurify bitops loop in ice_fill_adv_dummy_packet() (Petr Oros) [2130992 2129902]
- ice: switch: add and use u16[] aliases to ice_adv_lkup_elem::{h, m}_u (Petr Oros) [2130992 2129902]
- ice: Support GTP-U and GTP-C offload in switchdev (Petr Oros) [2130992 2129902]
- ice: Remove useless DMA-32 fallback configuration (Petr Oros) [2130992 2129902]
- ice: switch to napi_build_skb() (Petr Oros) [2130992 2129902]
- redhat: switch to z-stream dist tag and build targets (Jarod Wilson)
- block: avoid sign extend problem with default queue flags mask (Nico Pache) [2135813]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.6.1.el8_7]" date="1668168000">- ice: Add low latency Tx timestamp read (Petr Oros) [2136036 2092425]
- ice: introduce ice_ptp_reset_cached_phctime function (Petr Oros) [2136036 2092425]
- ice: re-arrange some static functions in ice_ptp.c (Petr Oros) [2136036 2092425]
- ice: track and warn when PHC update is late (Petr Oros) [2136036 2092425]
- ice: track Tx timestamp stats similar to other Intel drivers (Petr Oros) [2136036 2092425]
- ice: implement adjfine with mul_u64_u64_div_u64 (Petr Oros) [2136036 2092425]
- ice: Add EXTTS feature to the feature bitmap (Petr Oros) [2136036 2092425]
- math: Export mul_u64_u64_div_u64 (Petr Oros) [2136036 2092425]
- vfio/type1: Unpin zero pages (Alex Williamson) [2128515 2123015]
- net: atlantic: remove aq_nic_deinit() when resume (Íñigo Huguet) [2131935 2130839]
- net: atlantic: remove deep parameter on suspend/resume functions (Íñigo Huguet) [2131935 2130839]
- CI: Use zstream builder container (Veronika Kabatova)
- CI: Add disttag override for 8.7 (Veronika Kabatova)</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.7.1.el8_7]" date="1669723200">- ice: Add additional CSR registers to ETHTOOL_GREGS (Petr Oros) [2136513 2131024]
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps (Petr Oros) [2137270 2106964]
- i40e: Fix VF set max MTU size (Petr Oros) [2137270 2106964]
- iavf: Fix set max MTU size with port VLAN and jumbo frames (Petr Oros) [2137270 2106964]
- iavf: Fix bad page state (Petr Oros) [2137270 2106964]
- Revert "scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels" (Jarod Wilson)
- scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels (Tomas Henzl) [2139216]
- Revert "ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems" (Jarod Wilson)
- ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems (Wei Huang) [2142170 2130653]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.8.1.el8_7]" date="1669982400">- scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels (Tomas Henzl) [2139216 2134535]
- RDMA/mlx5: Set local port to one when accessing counters (Mohammad Kabat) [2141957 2077119]
- drm/mgag200: Fix PLL setup for G200_SE_A rev &gt;=4 (Jocelyn Falempe) [2140152 2130159]
- iavf: Do not restart Tx queues after reset task failure (Petr Oros) [2149081 2134005]
- iavf: Fix a crash during reset task (Petr Oros) [2149081 2134005]
- scsi: core: Allow the ALUA transitioning state enough time (Tomas Henzl) [2147374 2084250]
- scsi: core: Return BLK_STS_TRANSPORT for ALUA transitioning (Tomas Henzl) [2147374 2084250]
- i40e: Fix DMA mappings leak (Ivan Vecera) [2138205 2077847]
- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2142724 2142725] {CVE-2022-2964}
- net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2142724 2142725] {CVE-2022-2964}</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.9.1.el8_7]" date="1670587200">- Documentation/admin-guide: Document nomodeset kernel parameter (Jocelyn Falempe) [2145218 2143952]
- drm: Move nomodeset kernel parameter to the DRM subsystem (Jocelyn Falempe) [2145218 2143952]
- wait: Fix __wait_event_hrtimeout for RT/DL tasks (Derek Barbosa) [2138953 2125233]
- scsi: zfcp: Fix missing auto port scan and thus missing target ports (Tobias Huschle) [2127849 2121089]
- net: Fix return value of qdisc ingress handling on success (Ivan Vecera) [2141878 2131361]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.10.1.el8_7]" date="1671019200">- scsi: target: loop: Fix handling of aborted TMRs (Maurizio Lombardi) [2144583 2141713]
- ice: virtchnl rss hena support (Petr Oros) [2148130]
- ice: Fix configuring VIRTCHNL_OP_CONFIG_VSI_QUEUES with unbalanced queues (Michal Schmidt) [2142017 2137378]
- ice: Add support Flex RXD (Michal Schmidt) [2138157 2131310]
- netfilter: flowtable: fix stuck flows on cleanup due to pending work (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: add function to invoke garbage collection immediately (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: pass flowtable to nf_flow_table_iterate() (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: separate replace, destroy and stats to different workqueues (Phil Sutter) [2134084 2131370]
- x86/paravirt: Add a dummy __x86_paravirt_patch_template() function (Waiman Long) [2152206 2144161]
- x86/paravirt: Fix kABI breakage in struct pv_mmu_ops (Waiman Long) [2152206 2144161]
- drm/i915: fix TLB invalidation for Gen12 video and compute engines (Wander Lairson Costa) [2148149 2148150] {CVE-2022-4139}
- PCI: hv: Do not set PCI_COMMAND_MEMORY to reduce VM boot time (Emanuele Giuseppe Esposito) [2150912 2082836]
- iavf: Fix cached head and tail value for iavf_get_tx_pending (Stefan Assmann) [2149742 2103944]
- iavf: Fix change VF's mac address (Stefan Assmann) [2149742 2103944]
- iavf: Fix race between iavf_close and iavf_reset_task (Stefan Assmann) [2149742 2103944]
- net: ethernet: move from strlcpy with unused retval to strscpy (Stefan Assmann) [2149742 2103944]
- iavf: Fix 'tc qdisc show' listing too many queues (Stefan Assmann) [2149742 2103944]
- iavf: Fix max_rate limiting (Stefan Assmann) [2149742 2103944]
- iavf: Check for duplicate TC flower filter before parsing (Stefan Assmann) [2149742 2103944]
- iavf: Fix handling of dummy receive descriptors (Stefan Assmann) [2149742 2103944]
- iavf: Disallow changing rx/tx-frames and rx/tx-frames-irq (Stefan Assmann) [2149742 2103944]
- intel/iavf:fix repeated words in comments (Stefan Assmann) [2149742 2103944]
- intel: remove unused macros (Stefan Assmann) [2149742 2103944]
- iavf: Add waiting for response from PF in set mac (Stefan Assmann) [2149742 2103944]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.11.1.el8_7]" date="1673006400">- NFSD: Protect against send buffer overflow in NFSv3 READ (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv2 READ (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv3 READDIR (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv2 READDIR (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- SUNRPC: Fix svcxdr_init_encode's buflen calculation (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- SUNRPC: Fix svcxdr_init_decode's end-of-buffer calculation (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- panic, kexec: make __crash_kexec() NMI safe (Valentin Schneider) [2139580 2134126]
- kexec: turn all kexec_mutex acquisitions into trylocks (Valentin Schneider) [2139580 2134126]
- kexec: move locking into do_kexec_load (Valentin Schneider) [2139580 2134126]
- vdpa/mlx5: re-create forwarding rules after mac modified (Laurent Vivier) [2152912 2145136]
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry (Waiman Long) [2153653 2108387]
- irq: Call tick_irq_enter() inside HARDIRQ_OFFSET (Waiman Long) [2153653 2108387]
- irqtime: Move irqtime entry accounting after irq offset incrementation (Waiman Long) [2153653 2108387]
- sched/vtime: Consolidate IRQ time accounting (Waiman Long) [2153653 2108387]
- s390/vtime: Use the generic IRQ entry accounting (Waiman Long) [2153653 2108387]
- sched/cputime: Remove symbol exports from IRQ time accounting (Waiman Long) [2153653 2108387]
- genirq/irqdomain: Don't try to free an interrupt that has no mapping (Waiman Long) [2153653 2108387]
- genirq: Provide __irq_enter/exit_raw() (Waiman Long) [2153653 2108387]
- powerpc/time: Only set CONFIG_ARCH_HAS_SCALED_CPUTIME on PPC64 (Waiman Long) [2153653 2108387]
- powerpc/time: isolate scaled cputime accounting in dedicated functions. (Waiman Long) [2153653 2108387]
- PCI: hv: Fix synchronization between channel callback and hv_pci_bus_exit() (Mohammed Gamal) [2155280 2144708]
- PCI: hv: Fix synchronization between channel callback and hv_compose_msi_msg() (Mohammed Gamal) [2155280 2144708]
- PCI: hv: Use vmbus_requestor to generate transaction IDs for VMbus hardening (Mohammed Gamal) [2155280 2144708]
- net/mlx5e: TC, Reject forwarding from internal port to internal port (Mohammad Kabat) [2141959 2131345]
- hv_netvsc: Fix race between VF offering and VF association message from host (Mohammed Gamal) [2155272 2149279]
- x86/mce: Reduce number of machine checks taken during recovery (Prarit Bhargava) [2137592 2104388]
- cgroup/cpuset: Reduce cpuset_rwsem writer latency (Waiman Long) [2153108 2149031]
- rcu/exp: Mark current CPU as exp-QS in IPI loop second pass (Waiman Long) [2153108 2149031]
- rcu: Always inline rcu_dynticks_task*_{enter,exit}() (Waiman Long) [2153108 2149031]
- rcu: Fix existing exp request check in sync_sched_exp_online_cleanup() (Waiman Long) [2153108 2149031]
- rcu: Fix macro name CONFIG_TASKS_RCU_TRACE (Waiman Long) [2153108 2149031]
- rcu: Fix stall-warning deadlock due to non-release of rcu_node -&gt;lock (Waiman Long) [2153108 2149031]
- rcu: Fix to include first blocked task in stall warning (Waiman Long) [2153108 2149031]
- cgroup: Use cgroup_attach_{lock,unlock}() from cgroup_attach_task_all() (Waiman Long) [2153108 2149031]
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all() (Waiman Long) [2153108 2149031]
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock (Waiman Long) [2153108 2149031]
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree (Waiman Long) [2153108 2149031]
- cgroup/cpuset: Fix a race between cpuset_attach() and cpu hotplug (Waiman Long) [2153108 2149031]
- cgroup: reduce dependency on cgroup_mutex (Waiman Long) [2153108 2149031]
- sunrpc: Set sk_allocation to GFP_NOFS to avoid using current-&gt;task_frag. (Guillaume Nault) [2153230 2089660]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.12.1.el8_7]" date="1674129600">- x86/fpu: Prevent FPU state corruption (Oleksandr Natalenko) [2134586 2130890]
- x86/fpu: Drop fpregs lock before inheriting FPU permissions (Eder Zulian) [2154460 2153549]
- kernel-doc: fix undefined args variable (Jan Stancek) [2157905 2134954]
- mm: memcontrol: fix potential oom_lock recursion deadlock (Waiman Long) [2157922 2138886]
- memcg: prohibit unconditional exceeding the limit of dying tasks (Waiman Long) [2157922 2138886]
- mm, oom: do not trigger out_of_memory from the #PF (Waiman Long) [2157922 2138886]
- mm, oom: pagefault_out_of_memory: don't force global OOM for dying tasks (Waiman Long) [2157922 2138886]
- mm: memcontrol: don't count limit-setting reclaim as memory pressure (Waiman Long) [2157922 2138886]
- KVM: s390: vsie: Fix the initialization of the epoch extension (epdx) field (Thomas Huth) [2158813 2151854]
- net: mana: Fix race on per-CQ variable napi work_done (Emanuele Giuseppe Esposito) [2155437 2151722]
- mei: me: add adler lake point S DID (Prarit Bhargava) [2141783 2141602]
- PCI: hv: Only reuse existing IRTE allocation for Multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix the definition of vector in hv_compose_msi_msg() (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix interrupt mapping for multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Reuse existing IRTE allocation in compose_msi_msg() (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix hv_arch_irq_unmask() for multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix multi-MSI to allow more than one MSI vector (Emanuele Giuseppe Esposito) [2155289 2100275]
- drm/ast: Support multiple outputs (Jarod Wilson) [2149287 2147553]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.13.1.el8_7]" date="1675339200">- mm/cgroup/reclaim: fix dirty pages throttling on cgroup v1 (Waiman Long) [2160221]
- mm: vmscan: remove deadlock due to throttling failing to make progress (Waiman Long) [2160221]
- mm: vmscan: reduce throttling due to a failure to make progress -fix (Waiman Long) [2160221]
- mm: vmscan: Reduce throttling due to a failure to make progress (Waiman Long) [2160221]
- mm/vmscan: delay waking of tasks throttled on NOPROGRESS (Waiman Long) [2160221]
- mm/vmscan: increase the timeout if page reclaim is not making progress (Waiman Long) [2160221]
- mm/vmscan: centralise timeout values for reclaim_throttle (Waiman Long) [2160221]
- mm/page_alloc: remove the throttling logic from the page allocator (Waiman Long) [2160221]
- mm/writeback: throttle based on page writeback instead of congestion (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim when no progress is being made (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim and compaction when too may pages are isolated (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim until some writeback completes if congested (Waiman Long) [2160221]
- mm/vmscan.c: delete or fix duplicated words (Waiman Long) [2160221]
- mm,page_alloc: PF_WQ_WORKER threads must sleep at should_reclaim_retry() (Nico Pache) [2160221]
- ceph: avoid putting the realm twice when decoding snaps fails (Xiubo Li) [2155797 2139881]
- mm/mremap: hold the rmap lock in write mode when moving page table entries. (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: use pmd/pud_poplulate to update page table entries (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: don't enable optimized PUD move if page table levels is 2 (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: convert huge PUD move to separate helper (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: fix BUILD_BUG_ON() error in get_extent (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap.c: fix extent calculation (Waiman Long) [2140944] {CVE-2022-41222}
- x86: mremap speedup - Enable HAVE_MOVE_PUD (Waiman Long) [2140944] {CVE-2022-41222}
- mm: speedup mremap on 1GB or larger regions (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: start addresses are properly aligned (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: calculate extent in one place (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: it is sure to have enough space when extent meets requirement (Waiman Long) [2140944] {CVE-2022-41222}
- s390/boot: add secure boot trailer (Tobias Huschle) [2151530 2141967]
- i40e: Fix VF hang when reset is triggered on another VF (Ivan Vecera) [2160460 2103801]
- i2c: ismt: Fix an out-of-bounds bug in ismt_access() (Prarit Bhargava) [2154388 2119066] {CVE-2022-2873}
- iavf: schedule watchdog immediately when changing primary MAC (Michal Schmidt) [2163257 2152493]
- iavf: Move netdev_update_features() into watchdog task (Michal Schmidt) [2163257 2152493]
- iavf: fix temporary deadlock and failure to set MAC address (Michal Schmidt) [2163257 2152493]
- iavf: Fix error handling in iavf_init_module() (Michal Schmidt) [2163257 2152493]
- iommu/vt-d: Clean up si_domain in the init_dmars() error path (Jerry Snitselaar) [2149474 2118428]
- x86/pci/xen: Use msi_msg shadow structs (Jerry Snitselaar) [2149474 2118428]
- iommu/intel: Use msi_msg shadow structs (Jerry Snitselaar) [2149474 2118428]
- PCI: MSI: Fix Kconfig dependencies for PCI_MSI_ARCH_FALLBACKS (Jerry Snitselaar) [2149474 2118428]
- x86/apic/msi: Unbreak DMAR and HPET MSI (Jerry Snitselaar) [2149474 2118428]
- iommu/amd: Remove domain search for PCI/MSI (Jerry Snitselaar) [2149474 2118428]
- iommu/vt-d: Remove domain search for PCI/MSI[X] (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Make most MSI ops XEN private (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Cleanup the arch_*_msi_irqs() leftovers (Jerry Snitselaar) [2149474 2118428]
- PCI/MSI: Make arch_.*_msi_irq[s] fallbacks selectable (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Wrap XEN MSI management into irqdomain (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Consolidate XEN-MSI init (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Rework MSI teardown (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Make xen_msi_init() static and rename it to xen_hvm_msi_init() (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Move apic_post_init() invocation to one place (Jerry Snitselaar) [2149474 2118428]
- x86/msi: Use generic MSI domain ops (Jerry Snitselaar) [2149474 2118428]
- x86/msi: Remove pointless vcpu_affinity callback (Jerry Snitselaar) [2149474 2118428]
- iommu/vt-d: Fix compile error with CONFIG_PCI_ATS not set (Myron Stowe) [2149474 2118428]
- iommu/vt-d: Cure VF irqdomain hickup (Myron Stowe) [2149474 2118428]
- x86/pci: Set default irq domain in pcibios_add_device() (Myron Stowe) [2149474 2118428]
- iommm/amd: Store irq domain in struct device (Myron Stowe) [2149474 2118428]
- iommm/vt-d: Store irq domain in struct device (Myron Stowe) [2149474 2118428]
- PCI/MSI: Provide pci_dev_has_special_msi_domain() helper (Myron Stowe) [2149474 2118428]
- x86/msi: Consolidate MSI allocation (Myron Stowe) [2149474 2118428]
- PCI/MSI: Rework pci_msi_domain_calc_hwirq() (Myron Stowe) [2149474 2118428]
- x86/irq: Consolidate UV domain allocation (Myron Stowe) [2149474 2118428]
- x86/irq: Consolidate DMAR irq allocation (Myron Stowe) [2149474 2118428]
- x86_ioapic_Consolidate_IOAPIC_allocation (Myron Stowe) [2149474 2118428]
- x86/msi: Consolidate HPET allocation (Myron Stowe) [2149474 2118428]
- iommu/irq_remapping: Consolidate irq domain lookup (Myron Stowe) [2149474 2118428]
- iommu/amd: Consolidate irq domain getter (Myron Stowe) [2149474 2118428]
- iommu/vt-d: Consolidate irq domain getter (Myron Stowe) [2149474 2118428]
- x86/irq: Add allocation type for parent domain retrieval (Myron Stowe) [2149474 2118428]
- irqdomain: Export irq_domain_update_bus_token (Myron Stowe) [2149474 2118428]
- gitlab-ci: use CI templates from production branch (Michael Hofmann)
- iavf: remove INITIAL_MAC_SET to allow gARP to work properly (Stefan Assmann) [2149745 1938635]
- Revert "scsi: iscsi: ql4xxx: Use per-session workqueue for unbinding" (Chris Leech) [2152734 2122624]
- Revert "scsi: iscsi: Use the session workqueue for recovery" (Chris Leech) [2152734 2122624]
- arm64/bpf: Remove 128MB limit for BPF JIT programs (Yauheni Kaliuta) [2152138 2140163]
- bpf: Define bpf_jit_alloc_exec_limit for arm64 JIT (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: add `type` and `data` fields (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: use `ex` for `exception_table_entry` (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: make fixup_exception() return bool (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: consolidate definitions (Yauheni Kaliuta) [2152138 2140163]
- arm64: kvm: use kvm_exception_table_entry (Yauheni Kaliuta) [2152138 2140163]
- be2net: Fix buffer overflow in be_get_module_eeprom (Josef Oskera) [2160182 2126917]</changelog>
</package>
<package pkgid="0952daafeb3621fe9682f78d5f054fa882f3aac650ae31bd4536e8d84329de64" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="4.18.0" rel="425.19.2.el8_7"/>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.11.1.el8_7]" date="1673006400">- NFSD: Protect against send buffer overflow in NFSv3 READ (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv2 READ (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv3 READDIR (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv2 READDIR (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- SUNRPC: Fix svcxdr_init_encode's buflen calculation (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- SUNRPC: Fix svcxdr_init_decode's end-of-buffer calculation (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- panic, kexec: make __crash_kexec() NMI safe (Valentin Schneider) [2139580 2134126]
- kexec: turn all kexec_mutex acquisitions into trylocks (Valentin Schneider) [2139580 2134126]
- kexec: move locking into do_kexec_load (Valentin Schneider) [2139580 2134126]
- vdpa/mlx5: re-create forwarding rules after mac modified (Laurent Vivier) [2152912 2145136]
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry (Waiman Long) [2153653 2108387]
- irq: Call tick_irq_enter() inside HARDIRQ_OFFSET (Waiman Long) [2153653 2108387]
- irqtime: Move irqtime entry accounting after irq offset incrementation (Waiman Long) [2153653 2108387]
- sched/vtime: Consolidate IRQ time accounting (Waiman Long) [2153653 2108387]
- s390/vtime: Use the generic IRQ entry accounting (Waiman Long) [2153653 2108387]
- sched/cputime: Remove symbol exports from IRQ time accounting (Waiman Long) [2153653 2108387]
- genirq/irqdomain: Don't try to free an interrupt that has no mapping (Waiman Long) [2153653 2108387]
- genirq: Provide __irq_enter/exit_raw() (Waiman Long) [2153653 2108387]
- powerpc/time: Only set CONFIG_ARCH_HAS_SCALED_CPUTIME on PPC64 (Waiman Long) [2153653 2108387]
- powerpc/time: isolate scaled cputime accounting in dedicated functions. (Waiman Long) [2153653 2108387]
- PCI: hv: Fix synchronization between channel callback and hv_pci_bus_exit() (Mohammed Gamal) [2155280 2144708]
- PCI: hv: Fix synchronization between channel callback and hv_compose_msi_msg() (Mohammed Gamal) [2155280 2144708]
- PCI: hv: Use vmbus_requestor to generate transaction IDs for VMbus hardening (Mohammed Gamal) [2155280 2144708]
- net/mlx5e: TC, Reject forwarding from internal port to internal port (Mohammad Kabat) [2141959 2131345]
- hv_netvsc: Fix race between VF offering and VF association message from host (Mohammed Gamal) [2155272 2149279]
- x86/mce: Reduce number of machine checks taken during recovery (Prarit Bhargava) [2137592 2104388]
- cgroup/cpuset: Reduce cpuset_rwsem writer latency (Waiman Long) [2153108 2149031]
- rcu/exp: Mark current CPU as exp-QS in IPI loop second pass (Waiman Long) [2153108 2149031]
- rcu: Always inline rcu_dynticks_task*_{enter,exit}() (Waiman Long) [2153108 2149031]
- rcu: Fix existing exp request check in sync_sched_exp_online_cleanup() (Waiman Long) [2153108 2149031]
- rcu: Fix macro name CONFIG_TASKS_RCU_TRACE (Waiman Long) [2153108 2149031]
- rcu: Fix stall-warning deadlock due to non-release of rcu_node -&gt;lock (Waiman Long) [2153108 2149031]
- rcu: Fix to include first blocked task in stall warning (Waiman Long) [2153108 2149031]
- cgroup: Use cgroup_attach_{lock,unlock}() from cgroup_attach_task_all() (Waiman Long) [2153108 2149031]
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all() (Waiman Long) [2153108 2149031]
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock (Waiman Long) [2153108 2149031]
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree (Waiman Long) [2153108 2149031]
- cgroup/cpuset: Fix a race between cpuset_attach() and cpu hotplug (Waiman Long) [2153108 2149031]
- cgroup: reduce dependency on cgroup_mutex (Waiman Long) [2153108 2149031]
- sunrpc: Set sk_allocation to GFP_NOFS to avoid using current-&gt;task_frag. (Guillaume Nault) [2153230 2089660]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.12.1.el8_7]" date="1674129600">- x86/fpu: Prevent FPU state corruption (Oleksandr Natalenko) [2134586 2130890]
- x86/fpu: Drop fpregs lock before inheriting FPU permissions (Eder Zulian) [2154460 2153549]
- kernel-doc: fix undefined args variable (Jan Stancek) [2157905 2134954]
- mm: memcontrol: fix potential oom_lock recursion deadlock (Waiman Long) [2157922 2138886]
- memcg: prohibit unconditional exceeding the limit of dying tasks (Waiman Long) [2157922 2138886]
- mm, oom: do not trigger out_of_memory from the #PF (Waiman Long) [2157922 2138886]
- mm, oom: pagefault_out_of_memory: don't force global OOM for dying tasks (Waiman Long) [2157922 2138886]
- mm: memcontrol: don't count limit-setting reclaim as memory pressure (Waiman Long) [2157922 2138886]
- KVM: s390: vsie: Fix the initialization of the epoch extension (epdx) field (Thomas Huth) [2158813 2151854]
- net: mana: Fix race on per-CQ variable napi work_done (Emanuele Giuseppe Esposito) [2155437 2151722]
- mei: me: add adler lake point S DID (Prarit Bhargava) [2141783 2141602]
- PCI: hv: Only reuse existing IRTE allocation for Multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix the definition of vector in hv_compose_msi_msg() (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix interrupt mapping for multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Reuse existing IRTE allocation in compose_msi_msg() (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix hv_arch_irq_unmask() for multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix multi-MSI to allow more than one MSI vector (Emanuele Giuseppe Esposito) [2155289 2100275]
- drm/ast: Support multiple outputs (Jarod Wilson) [2149287 2147553]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.13.1.el8_7]" date="1675339200">- mm/cgroup/reclaim: fix dirty pages throttling on cgroup v1 (Waiman Long) [2160221]
- mm: vmscan: remove deadlock due to throttling failing to make progress (Waiman Long) [2160221]
- mm: vmscan: reduce throttling due to a failure to make progress -fix (Waiman Long) [2160221]
- mm: vmscan: Reduce throttling due to a failure to make progress (Waiman Long) [2160221]
- mm/vmscan: delay waking of tasks throttled on NOPROGRESS (Waiman Long) [2160221]
- mm/vmscan: increase the timeout if page reclaim is not making progress (Waiman Long) [2160221]
- mm/vmscan: centralise timeout values for reclaim_throttle (Waiman Long) [2160221]
- mm/page_alloc: remove the throttling logic from the page allocator (Waiman Long) [2160221]
- mm/writeback: throttle based on page writeback instead of congestion (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim when no progress is being made (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim and compaction when too may pages are isolated (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim until some writeback completes if congested (Waiman Long) [2160221]
- mm/vmscan.c: delete or fix duplicated words (Waiman Long) [2160221]
- mm,page_alloc: PF_WQ_WORKER threads must sleep at should_reclaim_retry() (Nico Pache) [2160221]
- ceph: avoid putting the realm twice when decoding snaps fails (Xiubo Li) [2155797 2139881]
- mm/mremap: hold the rmap lock in write mode when moving page table entries. (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: use pmd/pud_poplulate to update page table entries (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: don't enable optimized PUD move if page table levels is 2 (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: convert huge PUD move to separate helper (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: fix BUILD_BUG_ON() error in get_extent (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap.c: fix extent calculation (Waiman Long) [2140944] {CVE-2022-41222}
- x86: mremap speedup - Enable HAVE_MOVE_PUD (Waiman Long) [2140944] {CVE-2022-41222}
- mm: speedup mremap on 1GB or larger regions (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: start addresses are properly aligned (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: calculate extent in one place (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: it is sure to have enough space when extent meets requirement (Waiman Long) [2140944] {CVE-2022-41222}
- s390/boot: add secure boot trailer (Tobias Huschle) [2151530 2141967]
- i40e: Fix VF hang when reset is triggered on another VF (Ivan Vecera) [2160460 2103801]
- i2c: ismt: Fix an out-of-bounds bug in ismt_access() (Prarit Bhargava) [2154388 2119066] {CVE-2022-2873}
- iavf: schedule watchdog immediately when changing primary MAC (Michal Schmidt) [2163257 2152493]
- iavf: Move netdev_update_features() into watchdog task (Michal Schmidt) [2163257 2152493]
- iavf: fix temporary deadlock and failure to set MAC address (Michal Schmidt) [2163257 2152493]
- iavf: Fix error handling in iavf_init_module() (Michal Schmidt) [2163257 2152493]
- iommu/vt-d: Clean up si_domain in the init_dmars() error path (Jerry Snitselaar) [2149474 2118428]
- x86/pci/xen: Use msi_msg shadow structs (Jerry Snitselaar) [2149474 2118428]
- iommu/intel: Use msi_msg shadow structs (Jerry Snitselaar) [2149474 2118428]
- PCI: MSI: Fix Kconfig dependencies for PCI_MSI_ARCH_FALLBACKS (Jerry Snitselaar) [2149474 2118428]
- x86/apic/msi: Unbreak DMAR and HPET MSI (Jerry Snitselaar) [2149474 2118428]
- iommu/amd: Remove domain search for PCI/MSI (Jerry Snitselaar) [2149474 2118428]
- iommu/vt-d: Remove domain search for PCI/MSI[X] (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Make most MSI ops XEN private (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Cleanup the arch_*_msi_irqs() leftovers (Jerry Snitselaar) [2149474 2118428]
- PCI/MSI: Make arch_.*_msi_irq[s] fallbacks selectable (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Wrap XEN MSI management into irqdomain (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Consolidate XEN-MSI init (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Rework MSI teardown (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Make xen_msi_init() static and rename it to xen_hvm_msi_init() (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Move apic_post_init() invocation to one place (Jerry Snitselaar) [2149474 2118428]
- x86/msi: Use generic MSI domain ops (Jerry Snitselaar) [2149474 2118428]
- x86/msi: Remove pointless vcpu_affinity callback (Jerry Snitselaar) [2149474 2118428]
- iommu/vt-d: Fix compile error with CONFIG_PCI_ATS not set (Myron Stowe) [2149474 2118428]
- iommu/vt-d: Cure VF irqdomain hickup (Myron Stowe) [2149474 2118428]
- x86/pci: Set default irq domain in pcibios_add_device() (Myron Stowe) [2149474 2118428]
- iommm/amd: Store irq domain in struct device (Myron Stowe) [2149474 2118428]
- iommm/vt-d: Store irq domain in struct device (Myron Stowe) [2149474 2118428]
- PCI/MSI: Provide pci_dev_has_special_msi_domain() helper (Myron Stowe) [2149474 2118428]
- x86/msi: Consolidate MSI allocation (Myron Stowe) [2149474 2118428]
- PCI/MSI: Rework pci_msi_domain_calc_hwirq() (Myron Stowe) [2149474 2118428]
- x86/irq: Consolidate UV domain allocation (Myron Stowe) [2149474 2118428]
- x86/irq: Consolidate DMAR irq allocation (Myron Stowe) [2149474 2118428]
- x86_ioapic_Consolidate_IOAPIC_allocation (Myron Stowe) [2149474 2118428]
- x86/msi: Consolidate HPET allocation (Myron Stowe) [2149474 2118428]
- iommu/irq_remapping: Consolidate irq domain lookup (Myron Stowe) [2149474 2118428]
- iommu/amd: Consolidate irq domain getter (Myron Stowe) [2149474 2118428]
- iommu/vt-d: Consolidate irq domain getter (Myron Stowe) [2149474 2118428]
- x86/irq: Add allocation type for parent domain retrieval (Myron Stowe) [2149474 2118428]
- irqdomain: Export irq_domain_update_bus_token (Myron Stowe) [2149474 2118428]
- gitlab-ci: use CI templates from production branch (Michael Hofmann)
- iavf: remove INITIAL_MAC_SET to allow gARP to work properly (Stefan Assmann) [2149745 1938635]
- Revert "scsi: iscsi: ql4xxx: Use per-session workqueue for unbinding" (Chris Leech) [2152734 2122624]
- Revert "scsi: iscsi: Use the session workqueue for recovery" (Chris Leech) [2152734 2122624]
- arm64/bpf: Remove 128MB limit for BPF JIT programs (Yauheni Kaliuta) [2152138 2140163]
- bpf: Define bpf_jit_alloc_exec_limit for arm64 JIT (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: add `type` and `data` fields (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: use `ex` for `exception_table_entry` (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: make fixup_exception() return bool (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: consolidate definitions (Yauheni Kaliuta) [2152138 2140163]
- arm64: kvm: use kvm_exception_table_entry (Yauheni Kaliuta) [2152138 2140163]
- be2net: Fix buffer overflow in be_get_module_eeprom (Josef Oskera) [2160182 2126917]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.14.1.el8_7]" date="1676030400">- ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems (Wei Huang) [2142170 2130653]
- KVM: x86: nSVM: implement nested LBR virtualization (Emanuele Giuseppe Esposito) [2166362 2155149]
- KVM: x86: nSVM: correctly virtualize LBR msrs when L2 is running (Emanuele Giuseppe Esposito) [2166362 2155149]
- kvm: x86: SVM: use vmcb* instead of svm-&gt;vmcb where it makes sense (Emanuele Giuseppe Esposito) [2166362 2155149]
- KVM: x86: nSVM: implement nested VMLOAD/VMSAVE (Emanuele Giuseppe Esposito) [2166362 2155149]
- IB/iser: Fix login with authentication (Kamal Heib) [2161750 2120676]
- act_mirred: use the backlog for nested calls to mirred ingress (Davide Caratti) [2164648 2131339] {CVE-2022-4269}
- net/sched: act_mirred: better wording on protection against excessive stack growth (Davide Caratti) [2164648 2131339] {CVE-2022-4269}
- redhat/configs: Set CONFIG_X86_AMD_PSTATE to 'm' (Prarit Bhargava) [2151275 2145246]
- KVM: x86: smm: preserve interrupt shadow in SMRAM (Maxim Levitsky) [2166368 2097144]
- KVM: x86: SVM: don't save SVM state to SMRAM when VM is not long mode capable (Maxim Levitsky) [2166368 2097144]
- KVM: x86: SVM: use smram structs (Maxim Levitsky) [2166368 2097144]
- KVM: svm: drop explicit return value of kvm_vcpu_map (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: use smram struct for 64 bit smram load/restore (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: use smram struct for 32 bit smram load/restore (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: use smram structs in the common code (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: add structs for KVM's smram layout (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: check for failures on smm entry (Maxim Levitsky) [2166368 2097144]
- KVM: x86: do not go through ctxt-&gt;ops when emulating rsm (Maxim Levitsky) [2166368 2097144]
- KVM: x86: move SMM exit to a new file (Maxim Levitsky) [2166368 2097144]
- KVM: x86: move SMM entry to a new file (Maxim Levitsky) [2166368 2097144]
- KVM: x86: start moving SMM-related functions to new files (Maxim Levitsky) [2166368 2097144]
- bug: introduce ASSERT_STRUCT_OFFSET (Maxim Levitsky) [2166368 2097144]
- KVM: x86: Rename and expose helper to detect if INIT/SIPI are allowed (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: number of GPRs in the SMRAM image depends on the image format (Maxim Levitsky) [2166368 2097144]
- KVM: x86: emulator: update the emulation mode after CR0 write (Maxim Levitsky) [2166368 2097144]
- KVM: x86: emulator: update the emulation mode after rsm (Maxim Levitsky) [2166368 2097144]
- KVM: x86: emulator: introduce emulator_recalc_and_set_mode (Maxim Levitsky) [2166368 2097144]
- KVM: x86: emulator: em_sysexit should update ctxt-&gt;mode (Maxim Levitsky) [2166368 2097144]
- KVM: x86: Bug the VM if the emulator accesses a non-existent GPR (Maxim Levitsky) [2166368 2097144]
- \KVM: x86: Reduce the number of emulator GPRs to '8' for 32-bit KVM (Maxim Levitsky) [2166368 2097144]
- KVM: x86: Use 16-bit fields to track dirty/valid emulator GPRs (Maxim Levitsky) [2166368 2097144]
- KVM: x86: Omit VCPU_REGS_RIP from emulator's _regs array (Maxim Levitsky) [2166368 2097144]
- \KVM: x86: Harden _regs accesses to guard against buggy input (Maxim Levitsky) [2166368 2097144]
- KVM: x86: Grab regs_dirty in local 'unsigned long' (Maxim Levitsky) [2166368 2097144]
- proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152571 2152572] {CVE-2022-4378}
- proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152571 2152572] {CVE-2022-4378}</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.15.1.el8_7]" date="1676548800">- net/mlx5e: Fix use-after-free when reverting termination table (Amir Tzin) [2167640 2112927]
- net/mlx5: Do not query pci info while pci disabled (Amir Tzin) [2167645 2129249]
- x86/fpu: Fix copy_xstate_to_uabi() to copy init states correctly (Dean Nelson) [2168384 2122850]
- x86/fpu: Exclude dynamic states from init_fpstate (Dean Nelson) [2168384 2122850]
- x86/fpu: Fix the init_fpstate size check with the actual size (Dean Nelson) [2168384 2122850]
- x86/fpu: Configure init_fpstate attributes orderly (Dean Nelson) [2168384 2122850]
- x86/fpu/xstate: Fix the ARCH_REQ_XCOMP_PERM implementation (Dean Nelson) [2168384 2122850]
- net/mlx5: E-Switch, properly handle ingress tagged packets on VST (Amir Tzin) [2166665 2096109]
- cpuhotplug: Fix KABI breakage (Prarit Bhargava) [2162763 2156529]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.16.1.el8_7]" date="1677153600">- ipv6: fix panic when fib_lookup_arg-&gt;result is fib6_info (Jiri Benc) [2167602 2140599]
- ceph: blocklist the kclient when receiving corrupted snap trace (Xiubo Li) [2168896 2162414]
- ceph: move mount state enum to super.h (Xiubo Li) [2168896 2162414]
- s390/kexec: fix ipl report address for kdump (Tobias Huschle) [2166296 2161328]
- mm, compaction: fix fast_isolate_around() to stay within boundaries (Daniel Vacek) [2170576 2149309]
- scsi: storvsc: Fix swiotlb bounce buffer leak in confidential VM (Emanuele Giuseppe Esposito) [2170228 2150659]
- netfilter: conntrack: handle tcp challenge acks during connection reuse (Florian Westphal) [2165587 2158726]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.17.1.el8_7]" date="1677844800">- net: mana: Add rmb after checking owner bits (Mohammed Gamal) [2173103 2139462]
- net: mana: Add support of XDP_REDIRECT action (Mohammed Gamal) [2173103 2139462]
- net: mana: Add the Linux MANA PF driver (Mohammed Gamal) [2173103 2139462]
- ice: fix lost multicast packets in promisc mode (Ken Cox) [2172550 2138215]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.18.0-425.18.1.el8_7]" date="1678449600">- futex: Resend potentially swallowed owner death notification (Rafael Aquini) [2170054 2161526]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.19.1.el8_7]" date="1678968000">- s390/dasd: fix no record found for raw_track_access (Tobias Huschle) [2167776 2161270]
- locking/rwsem: Disable preemption in all down_read*() and up_read() code paths (Waiman Long) [2170939 2162139]
- locking/rwsem: Prevent non-first waiter from spinning in down_write() slowpath (Waiman Long) [2170939 2162139]
- locking/rwsem: Allow slowpath writer to ignore handoff bit if not set by first waiter (Waiman Long) [2170939 2162139]
- locking/rwsem: Always try to wake waiters in out_nolock path (Waiman Long) [2170939 2162139]
- locking/rwsem: No need to check for handoff bit if wait queue empty (Waiman Long) [2170939 2162139]
- locking/rwsem: Make handoff bit handling more consistent (Waiman Long) [2170939 2162139]
- locking/rwsem: Disable preemption while trying for rwsem lock (Waiman Long) [2170939 2162139]
- locking/rwsem: Conditionally wake waiters in reader/writer slowpaths (Waiman Long) [2170939 2162139]
- locking: Make owner_on_cpu() into &lt;linux/sched.h&gt; (Waiman Long) [2170939 2162139]
- locking/rwsem: Optimize down_read_trylock() under highly contended case (Waiman Long) [2170939 2162139]
- locking/rwsem: Fix comments about reader optimistic lock stealing conditions (Waiman Long) [2170939 2162139]
- locking/rwsem: Disable preemption for spinning region (Waiman Long) [2170939 2162139]
- locking: Remove rcu_read_{,un}lock() for preempt_{dis,en}able() (Waiman Long) [2170939 2162139]
- watchdog: fix UAF in reboot notifier handling in watchdog core code (Wander Lairson Costa) [2139770 2131308]
- netfilter: nf_conntrack_irc: Tighten matching on DCC message (Wander Lairson Costa) [2139770 2131308]
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF (Jaroslav Kysela) [2163400 2163401] {CVE-2023-0266}
- net/mlx5e: Fix enabling sriov while tc nic rules are offloaded (Amir Tzin) [2167647 2112925]
- net/mlx5: E-Switch, pair only capable devices (Amir Tzin) [2167647 2112925]
- net/mlx5: Fix mlx5_get_next_dev() peer device matching (Amir Tzin) [2167647 2112925]
- net/mlx5: Lag, filter non compatible devices (Amir Tzin) [2167647 2112925]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.19.2.el8_7.gf5e8]" date="1678968001">- ovl: fail on invalid uid/gid mapping at copy up (Miklos Szeredi) [2165341 2165342] {CVE-2023-0386}</changelog>
</package>
<package pkgid="c72b36113ab3cb67680403f066ad63eaaaabe5f0fff8b1e597c136018ac4298d" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="425.10.1.el8_7"/>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.1.1.el8]" date="1663588800">- i40e: Fix kernel crash during module removal (Ivan Vecera) [2091489]
- redhat: enable zstream release numbering for rhel 8.7 (Jarod Wilson)
- ice: Allow operation with reduced device MSI-X (Petr Oros) [2102844]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.2.1.el8]" date="1664193600">- EDAC/ghes: Set the DIMM label unconditionally (Aristeu Rozanski) [2109712]
- configs: enable CONFIG_HP_ILO for aarch64 (Mark Salter) [2123508]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.3.1.el8]" date="1664539200">- iwlwifi: limit fw version for AC9560 to avoid fw crash (Íñigo Huguet) [2129297]
- sfc: fix null pointer dereference in efx_hard_start_xmit (Íñigo Huguet) [2119638]
- sfc: fix TX channel offset when using legacy interrupts (Íñigo Huguet) [2119638]
- netfilter: conntrack: reduce timeout when receiving out-of-window fin or rst (Florian Westphal) [2047366]
- netfilter: conntrack: remove unneeded indent level (Florian Westphal) [2047366]
- netfilter: conntrack: ignore overly delayed tcp packets (Florian Westphal) [2047366]
- netfilter: conntrack: prepare tcp_in_window for ternary return value (Florian Westphal) [2047366]
- netfilter: conntrack: remove pr_debug callsites from tcp tracker (Florian Westphal) [2047366]
- netfilter: conntrack: work around exceeded receive window (Florian Westphal) [2047366]
- netfilter: conntrack: improve RST handling when tuple is re-used (Florian Westphal) [2047366]
- netfilter: conntrack: avoid misleading 'invalid' in log message (Florian Westphal) [2047366]
- netfilter: remove BUG_ON() after skb_header_pointer() (Florian Westphal) [2047366]
- iavf: Detach device during reset task (Petr Oros) [2069206]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.4.1.el8]" date="1665144000">- random: allow reseeding DRBG with getrandom (Daiki Ueno) [2121766]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.5.1.el8_7]" date="1667476800">- ice: Fix interface being down after reset with link-down-on-close flag on (Petr Oros) [2136216 2024110]
- ice: Fix crash by keep old cfg when update TCs more than queues (Petr Oros) [2130992 2129902]
- ice: Fix tunnel checksum offload with fragmented traffic (Petr Oros) [2130992 2129902]
- ice: handle E822 generic device ID in PLDM header (Petr Oros) [2130992 2129902]
- ice: ethtool: Prohibit improper channel config for DCB (Petr Oros) [2130992 2129902]
- ice: ethtool: advertise 1000M speeds properly (Petr Oros) [2130992 2129902]
- ice: Fix switchdev rules book keeping (Petr Oros) [2130992 2129902]
- ice: fix access-beyond-end in the switch code (Petr Oros) [2130992 2129902]
- eth: ice: silence the GCC 12 array-bounds warning (Petr Oros) [2130992 2129902]
- ice: Expose RSS indirection tables for queue groups via ethtool (Petr Oros) [2130992 2129902]
- Revert "ice: Hide bus-info in ethtool for PRs in switchdev mode" (Petr Oros) [2130992 2129902]
- ice: remove period on argument description in ice_for_each_vf (Petr Oros) [2130992 2129902]
- ice: add a function comment for ice_cfg_mac_antispoof (Petr Oros) [2130992 2129902]
- ice: fix wording in comment for ice_reset_vf (Petr Oros) [2130992 2129902]
- ice: remove return value comment for ice_reset_all_vfs (Petr Oros) [2130992 2129902]
- ice: always check VF VSI pointer values (Petr Oros) [2130992 2129902]
- ice: add newline to dev_dbg in ice_vf_fdir_dump_info (Petr Oros) [2130992 2129902]
- ice: get switch id on switchdev devices (Petr Oros) [2130992 2129902]
- ice: return ENOSPC when exceeding ICE_MAX_CHAIN_WORDS (Petr Oros) [2130992 2129902]
- ice: introduce common helper for retrieving VSI by vsi_num (Petr Oros) [2130992 2129902]
- ice: use min_t() to make code cleaner in ice_gnss (Petr Oros) [2130992 2129902]
- ice: Add mpls+tso support (Petr Oros) [2130992 2129902]
- ice: switch: convert packet template match code to rodata (Petr Oros) [2130992 2129902]
- ice: switch: use convenience macros to declare dummy pkt templates (Petr Oros) [2130992 2129902]
- ice: switch: use a struct to pass packet template params (Petr Oros) [2130992 2129902]
- ice: switch: unobscurify bitops loop in ice_fill_adv_dummy_packet() (Petr Oros) [2130992 2129902]
- ice: switch: add and use u16[] aliases to ice_adv_lkup_elem::{h, m}_u (Petr Oros) [2130992 2129902]
- ice: Support GTP-U and GTP-C offload in switchdev (Petr Oros) [2130992 2129902]
- ice: Remove useless DMA-32 fallback configuration (Petr Oros) [2130992 2129902]
- ice: switch to napi_build_skb() (Petr Oros) [2130992 2129902]
- redhat: switch to z-stream dist tag and build targets (Jarod Wilson)
- block: avoid sign extend problem with default queue flags mask (Nico Pache) [2135813]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.6.1.el8_7]" date="1668168000">- ice: Add low latency Tx timestamp read (Petr Oros) [2136036 2092425]
- ice: introduce ice_ptp_reset_cached_phctime function (Petr Oros) [2136036 2092425]
- ice: re-arrange some static functions in ice_ptp.c (Petr Oros) [2136036 2092425]
- ice: track and warn when PHC update is late (Petr Oros) [2136036 2092425]
- ice: track Tx timestamp stats similar to other Intel drivers (Petr Oros) [2136036 2092425]
- ice: implement adjfine with mul_u64_u64_div_u64 (Petr Oros) [2136036 2092425]
- ice: Add EXTTS feature to the feature bitmap (Petr Oros) [2136036 2092425]
- math: Export mul_u64_u64_div_u64 (Petr Oros) [2136036 2092425]
- vfio/type1: Unpin zero pages (Alex Williamson) [2128515 2123015]
- net: atlantic: remove aq_nic_deinit() when resume (Íñigo Huguet) [2131935 2130839]
- net: atlantic: remove deep parameter on suspend/resume functions (Íñigo Huguet) [2131935 2130839]
- CI: Use zstream builder container (Veronika Kabatova)
- CI: Add disttag override for 8.7 (Veronika Kabatova)</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.7.1.el8_7]" date="1669723200">- ice: Add additional CSR registers to ETHTOOL_GREGS (Petr Oros) [2136513 2131024]
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps (Petr Oros) [2137270 2106964]
- i40e: Fix VF set max MTU size (Petr Oros) [2137270 2106964]
- iavf: Fix set max MTU size with port VLAN and jumbo frames (Petr Oros) [2137270 2106964]
- iavf: Fix bad page state (Petr Oros) [2137270 2106964]
- Revert "scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels" (Jarod Wilson)
- scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels (Tomas Henzl) [2139216]
- Revert "ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems" (Jarod Wilson)
- ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems (Wei Huang) [2142170 2130653]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.8.1.el8_7]" date="1669982400">- scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels (Tomas Henzl) [2139216 2134535]
- RDMA/mlx5: Set local port to one when accessing counters (Mohammad Kabat) [2141957 2077119]
- drm/mgag200: Fix PLL setup for G200_SE_A rev &gt;=4 (Jocelyn Falempe) [2140152 2130159]
- iavf: Do not restart Tx queues after reset task failure (Petr Oros) [2149081 2134005]
- iavf: Fix a crash during reset task (Petr Oros) [2149081 2134005]
- scsi: core: Allow the ALUA transitioning state enough time (Tomas Henzl) [2147374 2084250]
- scsi: core: Return BLK_STS_TRANSPORT for ALUA transitioning (Tomas Henzl) [2147374 2084250]
- i40e: Fix DMA mappings leak (Ivan Vecera) [2138205 2077847]
- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2142724 2142725] {CVE-2022-2964}
- net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2142724 2142725] {CVE-2022-2964}</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.9.1.el8_7]" date="1670587200">- Documentation/admin-guide: Document nomodeset kernel parameter (Jocelyn Falempe) [2145218 2143952]
- drm: Move nomodeset kernel parameter to the DRM subsystem (Jocelyn Falempe) [2145218 2143952]
- wait: Fix __wait_event_hrtimeout for RT/DL tasks (Derek Barbosa) [2138953 2125233]
- scsi: zfcp: Fix missing auto port scan and thus missing target ports (Tobias Huschle) [2127849 2121089]
- net: Fix return value of qdisc ingress handling on success (Ivan Vecera) [2141878 2131361]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.10.1.el8_7]" date="1671019200">- scsi: target: loop: Fix handling of aborted TMRs (Maurizio Lombardi) [2144583 2141713]
- ice: virtchnl rss hena support (Petr Oros) [2148130]
- ice: Fix configuring VIRTCHNL_OP_CONFIG_VSI_QUEUES with unbalanced queues (Michal Schmidt) [2142017 2137378]
- ice: Add support Flex RXD (Michal Schmidt) [2138157 2131310]
- netfilter: flowtable: fix stuck flows on cleanup due to pending work (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: add function to invoke garbage collection immediately (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: pass flowtable to nf_flow_table_iterate() (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: separate replace, destroy and stats to different workqueues (Phil Sutter) [2134084 2131370]
- x86/paravirt: Add a dummy __x86_paravirt_patch_template() function (Waiman Long) [2152206 2144161]
- x86/paravirt: Fix kABI breakage in struct pv_mmu_ops (Waiman Long) [2152206 2144161]
- drm/i915: fix TLB invalidation for Gen12 video and compute engines (Wander Lairson Costa) [2148149 2148150] {CVE-2022-4139}
- PCI: hv: Do not set PCI_COMMAND_MEMORY to reduce VM boot time (Emanuele Giuseppe Esposito) [2150912 2082836]
- iavf: Fix cached head and tail value for iavf_get_tx_pending (Stefan Assmann) [2149742 2103944]
- iavf: Fix change VF's mac address (Stefan Assmann) [2149742 2103944]
- iavf: Fix race between iavf_close and iavf_reset_task (Stefan Assmann) [2149742 2103944]
- net: ethernet: move from strlcpy with unused retval to strscpy (Stefan Assmann) [2149742 2103944]
- iavf: Fix 'tc qdisc show' listing too many queues (Stefan Assmann) [2149742 2103944]
- iavf: Fix max_rate limiting (Stefan Assmann) [2149742 2103944]
- iavf: Check for duplicate TC flower filter before parsing (Stefan Assmann) [2149742 2103944]
- iavf: Fix handling of dummy receive descriptors (Stefan Assmann) [2149742 2103944]
- iavf: Disallow changing rx/tx-frames and rx/tx-frames-irq (Stefan Assmann) [2149742 2103944]
- intel/iavf:fix repeated words in comments (Stefan Assmann) [2149742 2103944]
- intel: remove unused macros (Stefan Assmann) [2149742 2103944]
- iavf: Add waiting for response from PF in set mac (Stefan Assmann) [2149742 2103944]</changelog>
</package>
<package pkgid="49d911b2f4b1cf10c160f4750d42d5491b33ad0826c90c3a9491eb1edfc3cd02" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="425.13.1.el8_7"/>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.4.1.el8]" date="1665144000">- random: allow reseeding DRBG with getrandom (Daiki Ueno) [2121766]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.5.1.el8_7]" date="1667476800">- ice: Fix interface being down after reset with link-down-on-close flag on (Petr Oros) [2136216 2024110]
- ice: Fix crash by keep old cfg when update TCs more than queues (Petr Oros) [2130992 2129902]
- ice: Fix tunnel checksum offload with fragmented traffic (Petr Oros) [2130992 2129902]
- ice: handle E822 generic device ID in PLDM header (Petr Oros) [2130992 2129902]
- ice: ethtool: Prohibit improper channel config for DCB (Petr Oros) [2130992 2129902]
- ice: ethtool: advertise 1000M speeds properly (Petr Oros) [2130992 2129902]
- ice: Fix switchdev rules book keeping (Petr Oros) [2130992 2129902]
- ice: fix access-beyond-end in the switch code (Petr Oros) [2130992 2129902]
- eth: ice: silence the GCC 12 array-bounds warning (Petr Oros) [2130992 2129902]
- ice: Expose RSS indirection tables for queue groups via ethtool (Petr Oros) [2130992 2129902]
- Revert "ice: Hide bus-info in ethtool for PRs in switchdev mode" (Petr Oros) [2130992 2129902]
- ice: remove period on argument description in ice_for_each_vf (Petr Oros) [2130992 2129902]
- ice: add a function comment for ice_cfg_mac_antispoof (Petr Oros) [2130992 2129902]
- ice: fix wording in comment for ice_reset_vf (Petr Oros) [2130992 2129902]
- ice: remove return value comment for ice_reset_all_vfs (Petr Oros) [2130992 2129902]
- ice: always check VF VSI pointer values (Petr Oros) [2130992 2129902]
- ice: add newline to dev_dbg in ice_vf_fdir_dump_info (Petr Oros) [2130992 2129902]
- ice: get switch id on switchdev devices (Petr Oros) [2130992 2129902]
- ice: return ENOSPC when exceeding ICE_MAX_CHAIN_WORDS (Petr Oros) [2130992 2129902]
- ice: introduce common helper for retrieving VSI by vsi_num (Petr Oros) [2130992 2129902]
- ice: use min_t() to make code cleaner in ice_gnss (Petr Oros) [2130992 2129902]
- ice: Add mpls+tso support (Petr Oros) [2130992 2129902]
- ice: switch: convert packet template match code to rodata (Petr Oros) [2130992 2129902]
- ice: switch: use convenience macros to declare dummy pkt templates (Petr Oros) [2130992 2129902]
- ice: switch: use a struct to pass packet template params (Petr Oros) [2130992 2129902]
- ice: switch: unobscurify bitops loop in ice_fill_adv_dummy_packet() (Petr Oros) [2130992 2129902]
- ice: switch: add and use u16[] aliases to ice_adv_lkup_elem::{h, m}_u (Petr Oros) [2130992 2129902]
- ice: Support GTP-U and GTP-C offload in switchdev (Petr Oros) [2130992 2129902]
- ice: Remove useless DMA-32 fallback configuration (Petr Oros) [2130992 2129902]
- ice: switch to napi_build_skb() (Petr Oros) [2130992 2129902]
- redhat: switch to z-stream dist tag and build targets (Jarod Wilson)
- block: avoid sign extend problem with default queue flags mask (Nico Pache) [2135813]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.6.1.el8_7]" date="1668168000">- ice: Add low latency Tx timestamp read (Petr Oros) [2136036 2092425]
- ice: introduce ice_ptp_reset_cached_phctime function (Petr Oros) [2136036 2092425]
- ice: re-arrange some static functions in ice_ptp.c (Petr Oros) [2136036 2092425]
- ice: track and warn when PHC update is late (Petr Oros) [2136036 2092425]
- ice: track Tx timestamp stats similar to other Intel drivers (Petr Oros) [2136036 2092425]
- ice: implement adjfine with mul_u64_u64_div_u64 (Petr Oros) [2136036 2092425]
- ice: Add EXTTS feature to the feature bitmap (Petr Oros) [2136036 2092425]
- math: Export mul_u64_u64_div_u64 (Petr Oros) [2136036 2092425]
- vfio/type1: Unpin zero pages (Alex Williamson) [2128515 2123015]
- net: atlantic: remove aq_nic_deinit() when resume (Íñigo Huguet) [2131935 2130839]
- net: atlantic: remove deep parameter on suspend/resume functions (Íñigo Huguet) [2131935 2130839]
- CI: Use zstream builder container (Veronika Kabatova)
- CI: Add disttag override for 8.7 (Veronika Kabatova)</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.7.1.el8_7]" date="1669723200">- ice: Add additional CSR registers to ETHTOOL_GREGS (Petr Oros) [2136513 2131024]
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps (Petr Oros) [2137270 2106964]
- i40e: Fix VF set max MTU size (Petr Oros) [2137270 2106964]
- iavf: Fix set max MTU size with port VLAN and jumbo frames (Petr Oros) [2137270 2106964]
- iavf: Fix bad page state (Petr Oros) [2137270 2106964]
- Revert "scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels" (Jarod Wilson)
- scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels (Tomas Henzl) [2139216]
- Revert "ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems" (Jarod Wilson)
- ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems (Wei Huang) [2142170 2130653]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.8.1.el8_7]" date="1669982400">- scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels (Tomas Henzl) [2139216 2134535]
- RDMA/mlx5: Set local port to one when accessing counters (Mohammad Kabat) [2141957 2077119]
- drm/mgag200: Fix PLL setup for G200_SE_A rev &gt;=4 (Jocelyn Falempe) [2140152 2130159]
- iavf: Do not restart Tx queues after reset task failure (Petr Oros) [2149081 2134005]
- iavf: Fix a crash during reset task (Petr Oros) [2149081 2134005]
- scsi: core: Allow the ALUA transitioning state enough time (Tomas Henzl) [2147374 2084250]
- scsi: core: Return BLK_STS_TRANSPORT for ALUA transitioning (Tomas Henzl) [2147374 2084250]
- i40e: Fix DMA mappings leak (Ivan Vecera) [2138205 2077847]
- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2142724 2142725] {CVE-2022-2964}
- net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2142724 2142725] {CVE-2022-2964}</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.9.1.el8_7]" date="1670587200">- Documentation/admin-guide: Document nomodeset kernel parameter (Jocelyn Falempe) [2145218 2143952]
- drm: Move nomodeset kernel parameter to the DRM subsystem (Jocelyn Falempe) [2145218 2143952]
- wait: Fix __wait_event_hrtimeout for RT/DL tasks (Derek Barbosa) [2138953 2125233]
- scsi: zfcp: Fix missing auto port scan and thus missing target ports (Tobias Huschle) [2127849 2121089]
- net: Fix return value of qdisc ingress handling on success (Ivan Vecera) [2141878 2131361]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.10.1.el8_7]" date="1671019200">- scsi: target: loop: Fix handling of aborted TMRs (Maurizio Lombardi) [2144583 2141713]
- ice: virtchnl rss hena support (Petr Oros) [2148130]
- ice: Fix configuring VIRTCHNL_OP_CONFIG_VSI_QUEUES with unbalanced queues (Michal Schmidt) [2142017 2137378]
- ice: Add support Flex RXD (Michal Schmidt) [2138157 2131310]
- netfilter: flowtable: fix stuck flows on cleanup due to pending work (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: add function to invoke garbage collection immediately (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: pass flowtable to nf_flow_table_iterate() (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: separate replace, destroy and stats to different workqueues (Phil Sutter) [2134084 2131370]
- x86/paravirt: Add a dummy __x86_paravirt_patch_template() function (Waiman Long) [2152206 2144161]
- x86/paravirt: Fix kABI breakage in struct pv_mmu_ops (Waiman Long) [2152206 2144161]
- drm/i915: fix TLB invalidation for Gen12 video and compute engines (Wander Lairson Costa) [2148149 2148150] {CVE-2022-4139}
- PCI: hv: Do not set PCI_COMMAND_MEMORY to reduce VM boot time (Emanuele Giuseppe Esposito) [2150912 2082836]
- iavf: Fix cached head and tail value for iavf_get_tx_pending (Stefan Assmann) [2149742 2103944]
- iavf: Fix change VF's mac address (Stefan Assmann) [2149742 2103944]
- iavf: Fix race between iavf_close and iavf_reset_task (Stefan Assmann) [2149742 2103944]
- net: ethernet: move from strlcpy with unused retval to strscpy (Stefan Assmann) [2149742 2103944]
- iavf: Fix 'tc qdisc show' listing too many queues (Stefan Assmann) [2149742 2103944]
- iavf: Fix max_rate limiting (Stefan Assmann) [2149742 2103944]
- iavf: Check for duplicate TC flower filter before parsing (Stefan Assmann) [2149742 2103944]
- iavf: Fix handling of dummy receive descriptors (Stefan Assmann) [2149742 2103944]
- iavf: Disallow changing rx/tx-frames and rx/tx-frames-irq (Stefan Assmann) [2149742 2103944]
- intel/iavf:fix repeated words in comments (Stefan Assmann) [2149742 2103944]
- intel: remove unused macros (Stefan Assmann) [2149742 2103944]
- iavf: Add waiting for response from PF in set mac (Stefan Assmann) [2149742 2103944]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.11.1.el8_7]" date="1673006400">- NFSD: Protect against send buffer overflow in NFSv3 READ (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv2 READ (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv3 READDIR (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv2 READDIR (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- SUNRPC: Fix svcxdr_init_encode's buflen calculation (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- SUNRPC: Fix svcxdr_init_decode's end-of-buffer calculation (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- panic, kexec: make __crash_kexec() NMI safe (Valentin Schneider) [2139580 2134126]
- kexec: turn all kexec_mutex acquisitions into trylocks (Valentin Schneider) [2139580 2134126]
- kexec: move locking into do_kexec_load (Valentin Schneider) [2139580 2134126]
- vdpa/mlx5: re-create forwarding rules after mac modified (Laurent Vivier) [2152912 2145136]
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry (Waiman Long) [2153653 2108387]
- irq: Call tick_irq_enter() inside HARDIRQ_OFFSET (Waiman Long) [2153653 2108387]
- irqtime: Move irqtime entry accounting after irq offset incrementation (Waiman Long) [2153653 2108387]
- sched/vtime: Consolidate IRQ time accounting (Waiman Long) [2153653 2108387]
- s390/vtime: Use the generic IRQ entry accounting (Waiman Long) [2153653 2108387]
- sched/cputime: Remove symbol exports from IRQ time accounting (Waiman Long) [2153653 2108387]
- genirq/irqdomain: Don't try to free an interrupt that has no mapping (Waiman Long) [2153653 2108387]
- genirq: Provide __irq_enter/exit_raw() (Waiman Long) [2153653 2108387]
- powerpc/time: Only set CONFIG_ARCH_HAS_SCALED_CPUTIME on PPC64 (Waiman Long) [2153653 2108387]
- powerpc/time: isolate scaled cputime accounting in dedicated functions. (Waiman Long) [2153653 2108387]
- PCI: hv: Fix synchronization between channel callback and hv_pci_bus_exit() (Mohammed Gamal) [2155280 2144708]
- PCI: hv: Fix synchronization between channel callback and hv_compose_msi_msg() (Mohammed Gamal) [2155280 2144708]
- PCI: hv: Use vmbus_requestor to generate transaction IDs for VMbus hardening (Mohammed Gamal) [2155280 2144708]
- net/mlx5e: TC, Reject forwarding from internal port to internal port (Mohammad Kabat) [2141959 2131345]
- hv_netvsc: Fix race between VF offering and VF association message from host (Mohammed Gamal) [2155272 2149279]
- x86/mce: Reduce number of machine checks taken during recovery (Prarit Bhargava) [2137592 2104388]
- cgroup/cpuset: Reduce cpuset_rwsem writer latency (Waiman Long) [2153108 2149031]
- rcu/exp: Mark current CPU as exp-QS in IPI loop second pass (Waiman Long) [2153108 2149031]
- rcu: Always inline rcu_dynticks_task*_{enter,exit}() (Waiman Long) [2153108 2149031]
- rcu: Fix existing exp request check in sync_sched_exp_online_cleanup() (Waiman Long) [2153108 2149031]
- rcu: Fix macro name CONFIG_TASKS_RCU_TRACE (Waiman Long) [2153108 2149031]
- rcu: Fix stall-warning deadlock due to non-release of rcu_node -&gt;lock (Waiman Long) [2153108 2149031]
- rcu: Fix to include first blocked task in stall warning (Waiman Long) [2153108 2149031]
- cgroup: Use cgroup_attach_{lock,unlock}() from cgroup_attach_task_all() (Waiman Long) [2153108 2149031]
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all() (Waiman Long) [2153108 2149031]
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock (Waiman Long) [2153108 2149031]
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree (Waiman Long) [2153108 2149031]
- cgroup/cpuset: Fix a race between cpuset_attach() and cpu hotplug (Waiman Long) [2153108 2149031]
- cgroup: reduce dependency on cgroup_mutex (Waiman Long) [2153108 2149031]
- sunrpc: Set sk_allocation to GFP_NOFS to avoid using current-&gt;task_frag. (Guillaume Nault) [2153230 2089660]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.12.1.el8_7]" date="1674129600">- x86/fpu: Prevent FPU state corruption (Oleksandr Natalenko) [2134586 2130890]
- x86/fpu: Drop fpregs lock before inheriting FPU permissions (Eder Zulian) [2154460 2153549]
- kernel-doc: fix undefined args variable (Jan Stancek) [2157905 2134954]
- mm: memcontrol: fix potential oom_lock recursion deadlock (Waiman Long) [2157922 2138886]
- memcg: prohibit unconditional exceeding the limit of dying tasks (Waiman Long) [2157922 2138886]
- mm, oom: do not trigger out_of_memory from the #PF (Waiman Long) [2157922 2138886]
- mm, oom: pagefault_out_of_memory: don't force global OOM for dying tasks (Waiman Long) [2157922 2138886]
- mm: memcontrol: don't count limit-setting reclaim as memory pressure (Waiman Long) [2157922 2138886]
- KVM: s390: vsie: Fix the initialization of the epoch extension (epdx) field (Thomas Huth) [2158813 2151854]
- net: mana: Fix race on per-CQ variable napi work_done (Emanuele Giuseppe Esposito) [2155437 2151722]
- mei: me: add adler lake point S DID (Prarit Bhargava) [2141783 2141602]
- PCI: hv: Only reuse existing IRTE allocation for Multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix the definition of vector in hv_compose_msi_msg() (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix interrupt mapping for multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Reuse existing IRTE allocation in compose_msi_msg() (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix hv_arch_irq_unmask() for multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix multi-MSI to allow more than one MSI vector (Emanuele Giuseppe Esposito) [2155289 2100275]
- drm/ast: Support multiple outputs (Jarod Wilson) [2149287 2147553]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.13.1.el8_7]" date="1675339200">- mm/cgroup/reclaim: fix dirty pages throttling on cgroup v1 (Waiman Long) [2160221]
- mm: vmscan: remove deadlock due to throttling failing to make progress (Waiman Long) [2160221]
- mm: vmscan: reduce throttling due to a failure to make progress -fix (Waiman Long) [2160221]
- mm: vmscan: Reduce throttling due to a failure to make progress (Waiman Long) [2160221]
- mm/vmscan: delay waking of tasks throttled on NOPROGRESS (Waiman Long) [2160221]
- mm/vmscan: increase the timeout if page reclaim is not making progress (Waiman Long) [2160221]
- mm/vmscan: centralise timeout values for reclaim_throttle (Waiman Long) [2160221]
- mm/page_alloc: remove the throttling logic from the page allocator (Waiman Long) [2160221]
- mm/writeback: throttle based on page writeback instead of congestion (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim when no progress is being made (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim and compaction when too may pages are isolated (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim until some writeback completes if congested (Waiman Long) [2160221]
- mm/vmscan.c: delete or fix duplicated words (Waiman Long) [2160221]
- mm,page_alloc: PF_WQ_WORKER threads must sleep at should_reclaim_retry() (Nico Pache) [2160221]
- ceph: avoid putting the realm twice when decoding snaps fails (Xiubo Li) [2155797 2139881]
- mm/mremap: hold the rmap lock in write mode when moving page table entries. (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: use pmd/pud_poplulate to update page table entries (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: don't enable optimized PUD move if page table levels is 2 (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: convert huge PUD move to separate helper (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: fix BUILD_BUG_ON() error in get_extent (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap.c: fix extent calculation (Waiman Long) [2140944] {CVE-2022-41222}
- x86: mremap speedup - Enable HAVE_MOVE_PUD (Waiman Long) [2140944] {CVE-2022-41222}
- mm: speedup mremap on 1GB or larger regions (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: start addresses are properly aligned (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: calculate extent in one place (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: it is sure to have enough space when extent meets requirement (Waiman Long) [2140944] {CVE-2022-41222}
- s390/boot: add secure boot trailer (Tobias Huschle) [2151530 2141967]
- i40e: Fix VF hang when reset is triggered on another VF (Ivan Vecera) [2160460 2103801]
- i2c: ismt: Fix an out-of-bounds bug in ismt_access() (Prarit Bhargava) [2154388 2119066] {CVE-2022-2873}
- iavf: schedule watchdog immediately when changing primary MAC (Michal Schmidt) [2163257 2152493]
- iavf: Move netdev_update_features() into watchdog task (Michal Schmidt) [2163257 2152493]
- iavf: fix temporary deadlock and failure to set MAC address (Michal Schmidt) [2163257 2152493]
- iavf: Fix error handling in iavf_init_module() (Michal Schmidt) [2163257 2152493]
- iommu/vt-d: Clean up si_domain in the init_dmars() error path (Jerry Snitselaar) [2149474 2118428]
- x86/pci/xen: Use msi_msg shadow structs (Jerry Snitselaar) [2149474 2118428]
- iommu/intel: Use msi_msg shadow structs (Jerry Snitselaar) [2149474 2118428]
- PCI: MSI: Fix Kconfig dependencies for PCI_MSI_ARCH_FALLBACKS (Jerry Snitselaar) [2149474 2118428]
- x86/apic/msi: Unbreak DMAR and HPET MSI (Jerry Snitselaar) [2149474 2118428]
- iommu/amd: Remove domain search for PCI/MSI (Jerry Snitselaar) [2149474 2118428]
- iommu/vt-d: Remove domain search for PCI/MSI[X] (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Make most MSI ops XEN private (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Cleanup the arch_*_msi_irqs() leftovers (Jerry Snitselaar) [2149474 2118428]
- PCI/MSI: Make arch_.*_msi_irq[s] fallbacks selectable (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Wrap XEN MSI management into irqdomain (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Consolidate XEN-MSI init (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Rework MSI teardown (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Make xen_msi_init() static and rename it to xen_hvm_msi_init() (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Move apic_post_init() invocation to one place (Jerry Snitselaar) [2149474 2118428]
- x86/msi: Use generic MSI domain ops (Jerry Snitselaar) [2149474 2118428]
- x86/msi: Remove pointless vcpu_affinity callback (Jerry Snitselaar) [2149474 2118428]
- iommu/vt-d: Fix compile error with CONFIG_PCI_ATS not set (Myron Stowe) [2149474 2118428]
- iommu/vt-d: Cure VF irqdomain hickup (Myron Stowe) [2149474 2118428]
- x86/pci: Set default irq domain in pcibios_add_device() (Myron Stowe) [2149474 2118428]
- iommm/amd: Store irq domain in struct device (Myron Stowe) [2149474 2118428]
- iommm/vt-d: Store irq domain in struct device (Myron Stowe) [2149474 2118428]
- PCI/MSI: Provide pci_dev_has_special_msi_domain() helper (Myron Stowe) [2149474 2118428]
- x86/msi: Consolidate MSI allocation (Myron Stowe) [2149474 2118428]
- PCI/MSI: Rework pci_msi_domain_calc_hwirq() (Myron Stowe) [2149474 2118428]
- x86/irq: Consolidate UV domain allocation (Myron Stowe) [2149474 2118428]
- x86/irq: Consolidate DMAR irq allocation (Myron Stowe) [2149474 2118428]
- x86_ioapic_Consolidate_IOAPIC_allocation (Myron Stowe) [2149474 2118428]
- x86/msi: Consolidate HPET allocation (Myron Stowe) [2149474 2118428]
- iommu/irq_remapping: Consolidate irq domain lookup (Myron Stowe) [2149474 2118428]
- iommu/amd: Consolidate irq domain getter (Myron Stowe) [2149474 2118428]
- iommu/vt-d: Consolidate irq domain getter (Myron Stowe) [2149474 2118428]
- x86/irq: Add allocation type for parent domain retrieval (Myron Stowe) [2149474 2118428]
- irqdomain: Export irq_domain_update_bus_token (Myron Stowe) [2149474 2118428]
- gitlab-ci: use CI templates from production branch (Michael Hofmann)
- iavf: remove INITIAL_MAC_SET to allow gARP to work properly (Stefan Assmann) [2149745 1938635]
- Revert "scsi: iscsi: ql4xxx: Use per-session workqueue for unbinding" (Chris Leech) [2152734 2122624]
- Revert "scsi: iscsi: Use the session workqueue for recovery" (Chris Leech) [2152734 2122624]
- arm64/bpf: Remove 128MB limit for BPF JIT programs (Yauheni Kaliuta) [2152138 2140163]
- bpf: Define bpf_jit_alloc_exec_limit for arm64 JIT (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: add `type` and `data` fields (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: use `ex` for `exception_table_entry` (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: make fixup_exception() return bool (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: consolidate definitions (Yauheni Kaliuta) [2152138 2140163]
- arm64: kvm: use kvm_exception_table_entry (Yauheni Kaliuta) [2152138 2140163]
- be2net: Fix buffer overflow in be_get_module_eeprom (Josef Oskera) [2160182 2126917]</changelog>
</package>
<package pkgid="8aee2106366a803a47222557100693ecc0188a55b1b20496c07dd191330bfc6a" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="425.19.2.el8_7"/>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.11.1.el8_7]" date="1673006400">- NFSD: Protect against send buffer overflow in NFSv3 READ (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv2 READ (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv3 READDIR (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv2 READDIR (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- SUNRPC: Fix svcxdr_init_encode's buflen calculation (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- SUNRPC: Fix svcxdr_init_decode's end-of-buffer calculation (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- panic, kexec: make __crash_kexec() NMI safe (Valentin Schneider) [2139580 2134126]
- kexec: turn all kexec_mutex acquisitions into trylocks (Valentin Schneider) [2139580 2134126]
- kexec: move locking into do_kexec_load (Valentin Schneider) [2139580 2134126]
- vdpa/mlx5: re-create forwarding rules after mac modified (Laurent Vivier) [2152912 2145136]
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry (Waiman Long) [2153653 2108387]
- irq: Call tick_irq_enter() inside HARDIRQ_OFFSET (Waiman Long) [2153653 2108387]
- irqtime: Move irqtime entry accounting after irq offset incrementation (Waiman Long) [2153653 2108387]
- sched/vtime: Consolidate IRQ time accounting (Waiman Long) [2153653 2108387]
- s390/vtime: Use the generic IRQ entry accounting (Waiman Long) [2153653 2108387]
- sched/cputime: Remove symbol exports from IRQ time accounting (Waiman Long) [2153653 2108387]
- genirq/irqdomain: Don't try to free an interrupt that has no mapping (Waiman Long) [2153653 2108387]
- genirq: Provide __irq_enter/exit_raw() (Waiman Long) [2153653 2108387]
- powerpc/time: Only set CONFIG_ARCH_HAS_SCALED_CPUTIME on PPC64 (Waiman Long) [2153653 2108387]
- powerpc/time: isolate scaled cputime accounting in dedicated functions. (Waiman Long) [2153653 2108387]
- PCI: hv: Fix synchronization between channel callback and hv_pci_bus_exit() (Mohammed Gamal) [2155280 2144708]
- PCI: hv: Fix synchronization between channel callback and hv_compose_msi_msg() (Mohammed Gamal) [2155280 2144708]
- PCI: hv: Use vmbus_requestor to generate transaction IDs for VMbus hardening (Mohammed Gamal) [2155280 2144708]
- net/mlx5e: TC, Reject forwarding from internal port to internal port (Mohammad Kabat) [2141959 2131345]
- hv_netvsc: Fix race between VF offering and VF association message from host (Mohammed Gamal) [2155272 2149279]
- x86/mce: Reduce number of machine checks taken during recovery (Prarit Bhargava) [2137592 2104388]
- cgroup/cpuset: Reduce cpuset_rwsem writer latency (Waiman Long) [2153108 2149031]
- rcu/exp: Mark current CPU as exp-QS in IPI loop second pass (Waiman Long) [2153108 2149031]
- rcu: Always inline rcu_dynticks_task*_{enter,exit}() (Waiman Long) [2153108 2149031]
- rcu: Fix existing exp request check in sync_sched_exp_online_cleanup() (Waiman Long) [2153108 2149031]
- rcu: Fix macro name CONFIG_TASKS_RCU_TRACE (Waiman Long) [2153108 2149031]
- rcu: Fix stall-warning deadlock due to non-release of rcu_node -&gt;lock (Waiman Long) [2153108 2149031]
- rcu: Fix to include first blocked task in stall warning (Waiman Long) [2153108 2149031]
- cgroup: Use cgroup_attach_{lock,unlock}() from cgroup_attach_task_all() (Waiman Long) [2153108 2149031]
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all() (Waiman Long) [2153108 2149031]
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock (Waiman Long) [2153108 2149031]
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree (Waiman Long) [2153108 2149031]
- cgroup/cpuset: Fix a race between cpuset_attach() and cpu hotplug (Waiman Long) [2153108 2149031]
- cgroup: reduce dependency on cgroup_mutex (Waiman Long) [2153108 2149031]
- sunrpc: Set sk_allocation to GFP_NOFS to avoid using current-&gt;task_frag. (Guillaume Nault) [2153230 2089660]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.12.1.el8_7]" date="1674129600">- x86/fpu: Prevent FPU state corruption (Oleksandr Natalenko) [2134586 2130890]
- x86/fpu: Drop fpregs lock before inheriting FPU permissions (Eder Zulian) [2154460 2153549]
- kernel-doc: fix undefined args variable (Jan Stancek) [2157905 2134954]
- mm: memcontrol: fix potential oom_lock recursion deadlock (Waiman Long) [2157922 2138886]
- memcg: prohibit unconditional exceeding the limit of dying tasks (Waiman Long) [2157922 2138886]
- mm, oom: do not trigger out_of_memory from the #PF (Waiman Long) [2157922 2138886]
- mm, oom: pagefault_out_of_memory: don't force global OOM for dying tasks (Waiman Long) [2157922 2138886]
- mm: memcontrol: don't count limit-setting reclaim as memory pressure (Waiman Long) [2157922 2138886]
- KVM: s390: vsie: Fix the initialization of the epoch extension (epdx) field (Thomas Huth) [2158813 2151854]
- net: mana: Fix race on per-CQ variable napi work_done (Emanuele Giuseppe Esposito) [2155437 2151722]
- mei: me: add adler lake point S DID (Prarit Bhargava) [2141783 2141602]
- PCI: hv: Only reuse existing IRTE allocation for Multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix the definition of vector in hv_compose_msi_msg() (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix interrupt mapping for multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Reuse existing IRTE allocation in compose_msi_msg() (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix hv_arch_irq_unmask() for multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix multi-MSI to allow more than one MSI vector (Emanuele Giuseppe Esposito) [2155289 2100275]
- drm/ast: Support multiple outputs (Jarod Wilson) [2149287 2147553]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.13.1.el8_7]" date="1675339200">- mm/cgroup/reclaim: fix dirty pages throttling on cgroup v1 (Waiman Long) [2160221]
- mm: vmscan: remove deadlock due to throttling failing to make progress (Waiman Long) [2160221]
- mm: vmscan: reduce throttling due to a failure to make progress -fix (Waiman Long) [2160221]
- mm: vmscan: Reduce throttling due to a failure to make progress (Waiman Long) [2160221]
- mm/vmscan: delay waking of tasks throttled on NOPROGRESS (Waiman Long) [2160221]
- mm/vmscan: increase the timeout if page reclaim is not making progress (Waiman Long) [2160221]
- mm/vmscan: centralise timeout values for reclaim_throttle (Waiman Long) [2160221]
- mm/page_alloc: remove the throttling logic from the page allocator (Waiman Long) [2160221]
- mm/writeback: throttle based on page writeback instead of congestion (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim when no progress is being made (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim and compaction when too may pages are isolated (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim until some writeback completes if congested (Waiman Long) [2160221]
- mm/vmscan.c: delete or fix duplicated words (Waiman Long) [2160221]
- mm,page_alloc: PF_WQ_WORKER threads must sleep at should_reclaim_retry() (Nico Pache) [2160221]
- ceph: avoid putting the realm twice when decoding snaps fails (Xiubo Li) [2155797 2139881]
- mm/mremap: hold the rmap lock in write mode when moving page table entries. (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: use pmd/pud_poplulate to update page table entries (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: don't enable optimized PUD move if page table levels is 2 (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: convert huge PUD move to separate helper (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: fix BUILD_BUG_ON() error in get_extent (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap.c: fix extent calculation (Waiman Long) [2140944] {CVE-2022-41222}
- x86: mremap speedup - Enable HAVE_MOVE_PUD (Waiman Long) [2140944] {CVE-2022-41222}
- mm: speedup mremap on 1GB or larger regions (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: start addresses are properly aligned (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: calculate extent in one place (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: it is sure to have enough space when extent meets requirement (Waiman Long) [2140944] {CVE-2022-41222}
- s390/boot: add secure boot trailer (Tobias Huschle) [2151530 2141967]
- i40e: Fix VF hang when reset is triggered on another VF (Ivan Vecera) [2160460 2103801]
- i2c: ismt: Fix an out-of-bounds bug in ismt_access() (Prarit Bhargava) [2154388 2119066] {CVE-2022-2873}
- iavf: schedule watchdog immediately when changing primary MAC (Michal Schmidt) [2163257 2152493]
- iavf: Move netdev_update_features() into watchdog task (Michal Schmidt) [2163257 2152493]
- iavf: fix temporary deadlock and failure to set MAC address (Michal Schmidt) [2163257 2152493]
- iavf: Fix error handling in iavf_init_module() (Michal Schmidt) [2163257 2152493]
- iommu/vt-d: Clean up si_domain in the init_dmars() error path (Jerry Snitselaar) [2149474 2118428]
- x86/pci/xen: Use msi_msg shadow structs (Jerry Snitselaar) [2149474 2118428]
- iommu/intel: Use msi_msg shadow structs (Jerry Snitselaar) [2149474 2118428]
- PCI: MSI: Fix Kconfig dependencies for PCI_MSI_ARCH_FALLBACKS (Jerry Snitselaar) [2149474 2118428]
- x86/apic/msi: Unbreak DMAR and HPET MSI (Jerry Snitselaar) [2149474 2118428]
- iommu/amd: Remove domain search for PCI/MSI (Jerry Snitselaar) [2149474 2118428]
- iommu/vt-d: Remove domain search for PCI/MSI[X] (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Make most MSI ops XEN private (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Cleanup the arch_*_msi_irqs() leftovers (Jerry Snitselaar) [2149474 2118428]
- PCI/MSI: Make arch_.*_msi_irq[s] fallbacks selectable (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Wrap XEN MSI management into irqdomain (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Consolidate XEN-MSI init (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Rework MSI teardown (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Make xen_msi_init() static and rename it to xen_hvm_msi_init() (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Move apic_post_init() invocation to one place (Jerry Snitselaar) [2149474 2118428]
- x86/msi: Use generic MSI domain ops (Jerry Snitselaar) [2149474 2118428]
- x86/msi: Remove pointless vcpu_affinity callback (Jerry Snitselaar) [2149474 2118428]
- iommu/vt-d: Fix compile error with CONFIG_PCI_ATS not set (Myron Stowe) [2149474 2118428]
- iommu/vt-d: Cure VF irqdomain hickup (Myron Stowe) [2149474 2118428]
- x86/pci: Set default irq domain in pcibios_add_device() (Myron Stowe) [2149474 2118428]
- iommm/amd: Store irq domain in struct device (Myron Stowe) [2149474 2118428]
- iommm/vt-d: Store irq domain in struct device (Myron Stowe) [2149474 2118428]
- PCI/MSI: Provide pci_dev_has_special_msi_domain() helper (Myron Stowe) [2149474 2118428]
- x86/msi: Consolidate MSI allocation (Myron Stowe) [2149474 2118428]
- PCI/MSI: Rework pci_msi_domain_calc_hwirq() (Myron Stowe) [2149474 2118428]
- x86/irq: Consolidate UV domain allocation (Myron Stowe) [2149474 2118428]
- x86/irq: Consolidate DMAR irq allocation (Myron Stowe) [2149474 2118428]
- x86_ioapic_Consolidate_IOAPIC_allocation (Myron Stowe) [2149474 2118428]
- x86/msi: Consolidate HPET allocation (Myron Stowe) [2149474 2118428]
- iommu/irq_remapping: Consolidate irq domain lookup (Myron Stowe) [2149474 2118428]
- iommu/amd: Consolidate irq domain getter (Myron Stowe) [2149474 2118428]
- iommu/vt-d: Consolidate irq domain getter (Myron Stowe) [2149474 2118428]
- x86/irq: Add allocation type for parent domain retrieval (Myron Stowe) [2149474 2118428]
- irqdomain: Export irq_domain_update_bus_token (Myron Stowe) [2149474 2118428]
- gitlab-ci: use CI templates from production branch (Michael Hofmann)
- iavf: remove INITIAL_MAC_SET to allow gARP to work properly (Stefan Assmann) [2149745 1938635]
- Revert "scsi: iscsi: ql4xxx: Use per-session workqueue for unbinding" (Chris Leech) [2152734 2122624]
- Revert "scsi: iscsi: Use the session workqueue for recovery" (Chris Leech) [2152734 2122624]
- arm64/bpf: Remove 128MB limit for BPF JIT programs (Yauheni Kaliuta) [2152138 2140163]
- bpf: Define bpf_jit_alloc_exec_limit for arm64 JIT (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: add `type` and `data` fields (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: use `ex` for `exception_table_entry` (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: make fixup_exception() return bool (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: consolidate definitions (Yauheni Kaliuta) [2152138 2140163]
- arm64: kvm: use kvm_exception_table_entry (Yauheni Kaliuta) [2152138 2140163]
- be2net: Fix buffer overflow in be_get_module_eeprom (Josef Oskera) [2160182 2126917]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.14.1.el8_7]" date="1676030400">- ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems (Wei Huang) [2142170 2130653]
- KVM: x86: nSVM: implement nested LBR virtualization (Emanuele Giuseppe Esposito) [2166362 2155149]
- KVM: x86: nSVM: correctly virtualize LBR msrs when L2 is running (Emanuele Giuseppe Esposito) [2166362 2155149]
- kvm: x86: SVM: use vmcb* instead of svm-&gt;vmcb where it makes sense (Emanuele Giuseppe Esposito) [2166362 2155149]
- KVM: x86: nSVM: implement nested VMLOAD/VMSAVE (Emanuele Giuseppe Esposito) [2166362 2155149]
- IB/iser: Fix login with authentication (Kamal Heib) [2161750 2120676]
- act_mirred: use the backlog for nested calls to mirred ingress (Davide Caratti) [2164648 2131339] {CVE-2022-4269}
- net/sched: act_mirred: better wording on protection against excessive stack growth (Davide Caratti) [2164648 2131339] {CVE-2022-4269}
- redhat/configs: Set CONFIG_X86_AMD_PSTATE to 'm' (Prarit Bhargava) [2151275 2145246]
- KVM: x86: smm: preserve interrupt shadow in SMRAM (Maxim Levitsky) [2166368 2097144]
- KVM: x86: SVM: don't save SVM state to SMRAM when VM is not long mode capable (Maxim Levitsky) [2166368 2097144]
- KVM: x86: SVM: use smram structs (Maxim Levitsky) [2166368 2097144]
- KVM: svm: drop explicit return value of kvm_vcpu_map (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: use smram struct for 64 bit smram load/restore (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: use smram struct for 32 bit smram load/restore (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: use smram structs in the common code (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: add structs for KVM's smram layout (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: check for failures on smm entry (Maxim Levitsky) [2166368 2097144]
- KVM: x86: do not go through ctxt-&gt;ops when emulating rsm (Maxim Levitsky) [2166368 2097144]
- KVM: x86: move SMM exit to a new file (Maxim Levitsky) [2166368 2097144]
- KVM: x86: move SMM entry to a new file (Maxim Levitsky) [2166368 2097144]
- KVM: x86: start moving SMM-related functions to new files (Maxim Levitsky) [2166368 2097144]
- bug: introduce ASSERT_STRUCT_OFFSET (Maxim Levitsky) [2166368 2097144]
- KVM: x86: Rename and expose helper to detect if INIT/SIPI are allowed (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: number of GPRs in the SMRAM image depends on the image format (Maxim Levitsky) [2166368 2097144]
- KVM: x86: emulator: update the emulation mode after CR0 write (Maxim Levitsky) [2166368 2097144]
- KVM: x86: emulator: update the emulation mode after rsm (Maxim Levitsky) [2166368 2097144]
- KVM: x86: emulator: introduce emulator_recalc_and_set_mode (Maxim Levitsky) [2166368 2097144]
- KVM: x86: emulator: em_sysexit should update ctxt-&gt;mode (Maxim Levitsky) [2166368 2097144]
- KVM: x86: Bug the VM if the emulator accesses a non-existent GPR (Maxim Levitsky) [2166368 2097144]
- \KVM: x86: Reduce the number of emulator GPRs to '8' for 32-bit KVM (Maxim Levitsky) [2166368 2097144]
- KVM: x86: Use 16-bit fields to track dirty/valid emulator GPRs (Maxim Levitsky) [2166368 2097144]
- KVM: x86: Omit VCPU_REGS_RIP from emulator's _regs array (Maxim Levitsky) [2166368 2097144]
- \KVM: x86: Harden _regs accesses to guard against buggy input (Maxim Levitsky) [2166368 2097144]
- KVM: x86: Grab regs_dirty in local 'unsigned long' (Maxim Levitsky) [2166368 2097144]
- proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152571 2152572] {CVE-2022-4378}
- proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152571 2152572] {CVE-2022-4378}</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.15.1.el8_7]" date="1676548800">- net/mlx5e: Fix use-after-free when reverting termination table (Amir Tzin) [2167640 2112927]
- net/mlx5: Do not query pci info while pci disabled (Amir Tzin) [2167645 2129249]
- x86/fpu: Fix copy_xstate_to_uabi() to copy init states correctly (Dean Nelson) [2168384 2122850]
- x86/fpu: Exclude dynamic states from init_fpstate (Dean Nelson) [2168384 2122850]
- x86/fpu: Fix the init_fpstate size check with the actual size (Dean Nelson) [2168384 2122850]
- x86/fpu: Configure init_fpstate attributes orderly (Dean Nelson) [2168384 2122850]
- x86/fpu/xstate: Fix the ARCH_REQ_XCOMP_PERM implementation (Dean Nelson) [2168384 2122850]
- net/mlx5: E-Switch, properly handle ingress tagged packets on VST (Amir Tzin) [2166665 2096109]
- cpuhotplug: Fix KABI breakage (Prarit Bhargava) [2162763 2156529]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.16.1.el8_7]" date="1677153600">- ipv6: fix panic when fib_lookup_arg-&gt;result is fib6_info (Jiri Benc) [2167602 2140599]
- ceph: blocklist the kclient when receiving corrupted snap trace (Xiubo Li) [2168896 2162414]
- ceph: move mount state enum to super.h (Xiubo Li) [2168896 2162414]
- s390/kexec: fix ipl report address for kdump (Tobias Huschle) [2166296 2161328]
- mm, compaction: fix fast_isolate_around() to stay within boundaries (Daniel Vacek) [2170576 2149309]
- scsi: storvsc: Fix swiotlb bounce buffer leak in confidential VM (Emanuele Giuseppe Esposito) [2170228 2150659]
- netfilter: conntrack: handle tcp challenge acks during connection reuse (Florian Westphal) [2165587 2158726]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.17.1.el8_7]" date="1677844800">- net: mana: Add rmb after checking owner bits (Mohammed Gamal) [2173103 2139462]
- net: mana: Add support of XDP_REDIRECT action (Mohammed Gamal) [2173103 2139462]
- net: mana: Add the Linux MANA PF driver (Mohammed Gamal) [2173103 2139462]
- ice: fix lost multicast packets in promisc mode (Ken Cox) [2172550 2138215]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.18.0-425.18.1.el8_7]" date="1678449600">- futex: Resend potentially swallowed owner death notification (Rafael Aquini) [2170054 2161526]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.19.1.el8_7]" date="1678968000">- s390/dasd: fix no record found for raw_track_access (Tobias Huschle) [2167776 2161270]
- locking/rwsem: Disable preemption in all down_read*() and up_read() code paths (Waiman Long) [2170939 2162139]
- locking/rwsem: Prevent non-first waiter from spinning in down_write() slowpath (Waiman Long) [2170939 2162139]
- locking/rwsem: Allow slowpath writer to ignore handoff bit if not set by first waiter (Waiman Long) [2170939 2162139]
- locking/rwsem: Always try to wake waiters in out_nolock path (Waiman Long) [2170939 2162139]
- locking/rwsem: No need to check for handoff bit if wait queue empty (Waiman Long) [2170939 2162139]
- locking/rwsem: Make handoff bit handling more consistent (Waiman Long) [2170939 2162139]
- locking/rwsem: Disable preemption while trying for rwsem lock (Waiman Long) [2170939 2162139]
- locking/rwsem: Conditionally wake waiters in reader/writer slowpaths (Waiman Long) [2170939 2162139]
- locking: Make owner_on_cpu() into &lt;linux/sched.h&gt; (Waiman Long) [2170939 2162139]
- locking/rwsem: Optimize down_read_trylock() under highly contended case (Waiman Long) [2170939 2162139]
- locking/rwsem: Fix comments about reader optimistic lock stealing conditions (Waiman Long) [2170939 2162139]
- locking/rwsem: Disable preemption for spinning region (Waiman Long) [2170939 2162139]
- locking: Remove rcu_read_{,un}lock() for preempt_{dis,en}able() (Waiman Long) [2170939 2162139]
- watchdog: fix UAF in reboot notifier handling in watchdog core code (Wander Lairson Costa) [2139770 2131308]
- netfilter: nf_conntrack_irc: Tighten matching on DCC message (Wander Lairson Costa) [2139770 2131308]
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF (Jaroslav Kysela) [2163400 2163401] {CVE-2023-0266}
- net/mlx5e: Fix enabling sriov while tc nic rules are offloaded (Amir Tzin) [2167647 2112925]
- net/mlx5: E-Switch, pair only capable devices (Amir Tzin) [2167647 2112925]
- net/mlx5: Fix mlx5_get_next_dev() peer device matching (Amir Tzin) [2167647 2112925]
- net/mlx5: Lag, filter non compatible devices (Amir Tzin) [2167647 2112925]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.19.2.el8_7.gf5e8]" date="1678968001">- ovl: fail on invalid uid/gid mapping at copy up (Miklos Szeredi) [2165341 2165342] {CVE-2023-0386}</changelog>
</package>
<package pkgid="78d94e78143abbb496d614ef86eb8344c6ab817884d86748fe99a43bff0a3da8" name="kernel-modules" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="425.10.1.el8_7"/>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.1.1.el8]" date="1663588800">- i40e: Fix kernel crash during module removal (Ivan Vecera) [2091489]
- redhat: enable zstream release numbering for rhel 8.7 (Jarod Wilson)
- ice: Allow operation with reduced device MSI-X (Petr Oros) [2102844]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.2.1.el8]" date="1664193600">- EDAC/ghes: Set the DIMM label unconditionally (Aristeu Rozanski) [2109712]
- configs: enable CONFIG_HP_ILO for aarch64 (Mark Salter) [2123508]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.3.1.el8]" date="1664539200">- iwlwifi: limit fw version for AC9560 to avoid fw crash (Íñigo Huguet) [2129297]
- sfc: fix null pointer dereference in efx_hard_start_xmit (Íñigo Huguet) [2119638]
- sfc: fix TX channel offset when using legacy interrupts (Íñigo Huguet) [2119638]
- netfilter: conntrack: reduce timeout when receiving out-of-window fin or rst (Florian Westphal) [2047366]
- netfilter: conntrack: remove unneeded indent level (Florian Westphal) [2047366]
- netfilter: conntrack: ignore overly delayed tcp packets (Florian Westphal) [2047366]
- netfilter: conntrack: prepare tcp_in_window for ternary return value (Florian Westphal) [2047366]
- netfilter: conntrack: remove pr_debug callsites from tcp tracker (Florian Westphal) [2047366]
- netfilter: conntrack: work around exceeded receive window (Florian Westphal) [2047366]
- netfilter: conntrack: improve RST handling when tuple is re-used (Florian Westphal) [2047366]
- netfilter: conntrack: avoid misleading 'invalid' in log message (Florian Westphal) [2047366]
- netfilter: remove BUG_ON() after skb_header_pointer() (Florian Westphal) [2047366]
- iavf: Detach device during reset task (Petr Oros) [2069206]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.4.1.el8]" date="1665144000">- random: allow reseeding DRBG with getrandom (Daiki Ueno) [2121766]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.5.1.el8_7]" date="1667476800">- ice: Fix interface being down after reset with link-down-on-close flag on (Petr Oros) [2136216 2024110]
- ice: Fix crash by keep old cfg when update TCs more than queues (Petr Oros) [2130992 2129902]
- ice: Fix tunnel checksum offload with fragmented traffic (Petr Oros) [2130992 2129902]
- ice: handle E822 generic device ID in PLDM header (Petr Oros) [2130992 2129902]
- ice: ethtool: Prohibit improper channel config for DCB (Petr Oros) [2130992 2129902]
- ice: ethtool: advertise 1000M speeds properly (Petr Oros) [2130992 2129902]
- ice: Fix switchdev rules book keeping (Petr Oros) [2130992 2129902]
- ice: fix access-beyond-end in the switch code (Petr Oros) [2130992 2129902]
- eth: ice: silence the GCC 12 array-bounds warning (Petr Oros) [2130992 2129902]
- ice: Expose RSS indirection tables for queue groups via ethtool (Petr Oros) [2130992 2129902]
- Revert "ice: Hide bus-info in ethtool for PRs in switchdev mode" (Petr Oros) [2130992 2129902]
- ice: remove period on argument description in ice_for_each_vf (Petr Oros) [2130992 2129902]
- ice: add a function comment for ice_cfg_mac_antispoof (Petr Oros) [2130992 2129902]
- ice: fix wording in comment for ice_reset_vf (Petr Oros) [2130992 2129902]
- ice: remove return value comment for ice_reset_all_vfs (Petr Oros) [2130992 2129902]
- ice: always check VF VSI pointer values (Petr Oros) [2130992 2129902]
- ice: add newline to dev_dbg in ice_vf_fdir_dump_info (Petr Oros) [2130992 2129902]
- ice: get switch id on switchdev devices (Petr Oros) [2130992 2129902]
- ice: return ENOSPC when exceeding ICE_MAX_CHAIN_WORDS (Petr Oros) [2130992 2129902]
- ice: introduce common helper for retrieving VSI by vsi_num (Petr Oros) [2130992 2129902]
- ice: use min_t() to make code cleaner in ice_gnss (Petr Oros) [2130992 2129902]
- ice: Add mpls+tso support (Petr Oros) [2130992 2129902]
- ice: switch: convert packet template match code to rodata (Petr Oros) [2130992 2129902]
- ice: switch: use convenience macros to declare dummy pkt templates (Petr Oros) [2130992 2129902]
- ice: switch: use a struct to pass packet template params (Petr Oros) [2130992 2129902]
- ice: switch: unobscurify bitops loop in ice_fill_adv_dummy_packet() (Petr Oros) [2130992 2129902]
- ice: switch: add and use u16[] aliases to ice_adv_lkup_elem::{h, m}_u (Petr Oros) [2130992 2129902]
- ice: Support GTP-U and GTP-C offload in switchdev (Petr Oros) [2130992 2129902]
- ice: Remove useless DMA-32 fallback configuration (Petr Oros) [2130992 2129902]
- ice: switch to napi_build_skb() (Petr Oros) [2130992 2129902]
- redhat: switch to z-stream dist tag and build targets (Jarod Wilson)
- block: avoid sign extend problem with default queue flags mask (Nico Pache) [2135813]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.6.1.el8_7]" date="1668168000">- ice: Add low latency Tx timestamp read (Petr Oros) [2136036 2092425]
- ice: introduce ice_ptp_reset_cached_phctime function (Petr Oros) [2136036 2092425]
- ice: re-arrange some static functions in ice_ptp.c (Petr Oros) [2136036 2092425]
- ice: track and warn when PHC update is late (Petr Oros) [2136036 2092425]
- ice: track Tx timestamp stats similar to other Intel drivers (Petr Oros) [2136036 2092425]
- ice: implement adjfine with mul_u64_u64_div_u64 (Petr Oros) [2136036 2092425]
- ice: Add EXTTS feature to the feature bitmap (Petr Oros) [2136036 2092425]
- math: Export mul_u64_u64_div_u64 (Petr Oros) [2136036 2092425]
- vfio/type1: Unpin zero pages (Alex Williamson) [2128515 2123015]
- net: atlantic: remove aq_nic_deinit() when resume (Íñigo Huguet) [2131935 2130839]
- net: atlantic: remove deep parameter on suspend/resume functions (Íñigo Huguet) [2131935 2130839]
- CI: Use zstream builder container (Veronika Kabatova)
- CI: Add disttag override for 8.7 (Veronika Kabatova)</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.7.1.el8_7]" date="1669723200">- ice: Add additional CSR registers to ETHTOOL_GREGS (Petr Oros) [2136513 2131024]
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps (Petr Oros) [2137270 2106964]
- i40e: Fix VF set max MTU size (Petr Oros) [2137270 2106964]
- iavf: Fix set max MTU size with port VLAN and jumbo frames (Petr Oros) [2137270 2106964]
- iavf: Fix bad page state (Petr Oros) [2137270 2106964]
- Revert "scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels" (Jarod Wilson)
- scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels (Tomas Henzl) [2139216]
- Revert "ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems" (Jarod Wilson)
- ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems (Wei Huang) [2142170 2130653]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.8.1.el8_7]" date="1669982400">- scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels (Tomas Henzl) [2139216 2134535]
- RDMA/mlx5: Set local port to one when accessing counters (Mohammad Kabat) [2141957 2077119]
- drm/mgag200: Fix PLL setup for G200_SE_A rev &gt;=4 (Jocelyn Falempe) [2140152 2130159]
- iavf: Do not restart Tx queues after reset task failure (Petr Oros) [2149081 2134005]
- iavf: Fix a crash during reset task (Petr Oros) [2149081 2134005]
- scsi: core: Allow the ALUA transitioning state enough time (Tomas Henzl) [2147374 2084250]
- scsi: core: Return BLK_STS_TRANSPORT for ALUA transitioning (Tomas Henzl) [2147374 2084250]
- i40e: Fix DMA mappings leak (Ivan Vecera) [2138205 2077847]
- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2142724 2142725] {CVE-2022-2964}
- net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2142724 2142725] {CVE-2022-2964}</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.9.1.el8_7]" date="1670587200">- Documentation/admin-guide: Document nomodeset kernel parameter (Jocelyn Falempe) [2145218 2143952]
- drm: Move nomodeset kernel parameter to the DRM subsystem (Jocelyn Falempe) [2145218 2143952]
- wait: Fix __wait_event_hrtimeout for RT/DL tasks (Derek Barbosa) [2138953 2125233]
- scsi: zfcp: Fix missing auto port scan and thus missing target ports (Tobias Huschle) [2127849 2121089]
- net: Fix return value of qdisc ingress handling on success (Ivan Vecera) [2141878 2131361]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.10.1.el8_7]" date="1671019200">- scsi: target: loop: Fix handling of aborted TMRs (Maurizio Lombardi) [2144583 2141713]
- ice: virtchnl rss hena support (Petr Oros) [2148130]
- ice: Fix configuring VIRTCHNL_OP_CONFIG_VSI_QUEUES with unbalanced queues (Michal Schmidt) [2142017 2137378]
- ice: Add support Flex RXD (Michal Schmidt) [2138157 2131310]
- netfilter: flowtable: fix stuck flows on cleanup due to pending work (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: add function to invoke garbage collection immediately (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: pass flowtable to nf_flow_table_iterate() (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: separate replace, destroy and stats to different workqueues (Phil Sutter) [2134084 2131370]
- x86/paravirt: Add a dummy __x86_paravirt_patch_template() function (Waiman Long) [2152206 2144161]
- x86/paravirt: Fix kABI breakage in struct pv_mmu_ops (Waiman Long) [2152206 2144161]
- drm/i915: fix TLB invalidation for Gen12 video and compute engines (Wander Lairson Costa) [2148149 2148150] {CVE-2022-4139}
- PCI: hv: Do not set PCI_COMMAND_MEMORY to reduce VM boot time (Emanuele Giuseppe Esposito) [2150912 2082836]
- iavf: Fix cached head and tail value for iavf_get_tx_pending (Stefan Assmann) [2149742 2103944]
- iavf: Fix change VF's mac address (Stefan Assmann) [2149742 2103944]
- iavf: Fix race between iavf_close and iavf_reset_task (Stefan Assmann) [2149742 2103944]
- net: ethernet: move from strlcpy with unused retval to strscpy (Stefan Assmann) [2149742 2103944]
- iavf: Fix 'tc qdisc show' listing too many queues (Stefan Assmann) [2149742 2103944]
- iavf: Fix max_rate limiting (Stefan Assmann) [2149742 2103944]
- iavf: Check for duplicate TC flower filter before parsing (Stefan Assmann) [2149742 2103944]
- iavf: Fix handling of dummy receive descriptors (Stefan Assmann) [2149742 2103944]
- iavf: Disallow changing rx/tx-frames and rx/tx-frames-irq (Stefan Assmann) [2149742 2103944]
- intel/iavf:fix repeated words in comments (Stefan Assmann) [2149742 2103944]
- intel: remove unused macros (Stefan Assmann) [2149742 2103944]
- iavf: Add waiting for response from PF in set mac (Stefan Assmann) [2149742 2103944]</changelog>
</package>
<package pkgid="b75baf912ec9c8bd223de76dba5f895517064416816cd97ac8f7ee73ed62146e" name="kernel-modules" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="425.13.1.el8_7"/>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.4.1.el8]" date="1665144000">- random: allow reseeding DRBG with getrandom (Daiki Ueno) [2121766]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.5.1.el8_7]" date="1667476800">- ice: Fix interface being down after reset with link-down-on-close flag on (Petr Oros) [2136216 2024110]
- ice: Fix crash by keep old cfg when update TCs more than queues (Petr Oros) [2130992 2129902]
- ice: Fix tunnel checksum offload with fragmented traffic (Petr Oros) [2130992 2129902]
- ice: handle E822 generic device ID in PLDM header (Petr Oros) [2130992 2129902]
- ice: ethtool: Prohibit improper channel config for DCB (Petr Oros) [2130992 2129902]
- ice: ethtool: advertise 1000M speeds properly (Petr Oros) [2130992 2129902]
- ice: Fix switchdev rules book keeping (Petr Oros) [2130992 2129902]
- ice: fix access-beyond-end in the switch code (Petr Oros) [2130992 2129902]
- eth: ice: silence the GCC 12 array-bounds warning (Petr Oros) [2130992 2129902]
- ice: Expose RSS indirection tables for queue groups via ethtool (Petr Oros) [2130992 2129902]
- Revert "ice: Hide bus-info in ethtool for PRs in switchdev mode" (Petr Oros) [2130992 2129902]
- ice: remove period on argument description in ice_for_each_vf (Petr Oros) [2130992 2129902]
- ice: add a function comment for ice_cfg_mac_antispoof (Petr Oros) [2130992 2129902]
- ice: fix wording in comment for ice_reset_vf (Petr Oros) [2130992 2129902]
- ice: remove return value comment for ice_reset_all_vfs (Petr Oros) [2130992 2129902]
- ice: always check VF VSI pointer values (Petr Oros) [2130992 2129902]
- ice: add newline to dev_dbg in ice_vf_fdir_dump_info (Petr Oros) [2130992 2129902]
- ice: get switch id on switchdev devices (Petr Oros) [2130992 2129902]
- ice: return ENOSPC when exceeding ICE_MAX_CHAIN_WORDS (Petr Oros) [2130992 2129902]
- ice: introduce common helper for retrieving VSI by vsi_num (Petr Oros) [2130992 2129902]
- ice: use min_t() to make code cleaner in ice_gnss (Petr Oros) [2130992 2129902]
- ice: Add mpls+tso support (Petr Oros) [2130992 2129902]
- ice: switch: convert packet template match code to rodata (Petr Oros) [2130992 2129902]
- ice: switch: use convenience macros to declare dummy pkt templates (Petr Oros) [2130992 2129902]
- ice: switch: use a struct to pass packet template params (Petr Oros) [2130992 2129902]
- ice: switch: unobscurify bitops loop in ice_fill_adv_dummy_packet() (Petr Oros) [2130992 2129902]
- ice: switch: add and use u16[] aliases to ice_adv_lkup_elem::{h, m}_u (Petr Oros) [2130992 2129902]
- ice: Support GTP-U and GTP-C offload in switchdev (Petr Oros) [2130992 2129902]
- ice: Remove useless DMA-32 fallback configuration (Petr Oros) [2130992 2129902]
- ice: switch to napi_build_skb() (Petr Oros) [2130992 2129902]
- redhat: switch to z-stream dist tag and build targets (Jarod Wilson)
- block: avoid sign extend problem with default queue flags mask (Nico Pache) [2135813]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.6.1.el8_7]" date="1668168000">- ice: Add low latency Tx timestamp read (Petr Oros) [2136036 2092425]
- ice: introduce ice_ptp_reset_cached_phctime function (Petr Oros) [2136036 2092425]
- ice: re-arrange some static functions in ice_ptp.c (Petr Oros) [2136036 2092425]
- ice: track and warn when PHC update is late (Petr Oros) [2136036 2092425]
- ice: track Tx timestamp stats similar to other Intel drivers (Petr Oros) [2136036 2092425]
- ice: implement adjfine with mul_u64_u64_div_u64 (Petr Oros) [2136036 2092425]
- ice: Add EXTTS feature to the feature bitmap (Petr Oros) [2136036 2092425]
- math: Export mul_u64_u64_div_u64 (Petr Oros) [2136036 2092425]
- vfio/type1: Unpin zero pages (Alex Williamson) [2128515 2123015]
- net: atlantic: remove aq_nic_deinit() when resume (Íñigo Huguet) [2131935 2130839]
- net: atlantic: remove deep parameter on suspend/resume functions (Íñigo Huguet) [2131935 2130839]
- CI: Use zstream builder container (Veronika Kabatova)
- CI: Add disttag override for 8.7 (Veronika Kabatova)</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.7.1.el8_7]" date="1669723200">- ice: Add additional CSR registers to ETHTOOL_GREGS (Petr Oros) [2136513 2131024]
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps (Petr Oros) [2137270 2106964]
- i40e: Fix VF set max MTU size (Petr Oros) [2137270 2106964]
- iavf: Fix set max MTU size with port VLAN and jumbo frames (Petr Oros) [2137270 2106964]
- iavf: Fix bad page state (Petr Oros) [2137270 2106964]
- Revert "scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels" (Jarod Wilson)
- scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels (Tomas Henzl) [2139216]
- Revert "ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems" (Jarod Wilson)
- ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems (Wei Huang) [2142170 2130653]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.8.1.el8_7]" date="1669982400">- scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels (Tomas Henzl) [2139216 2134535]
- RDMA/mlx5: Set local port to one when accessing counters (Mohammad Kabat) [2141957 2077119]
- drm/mgag200: Fix PLL setup for G200_SE_A rev &gt;=4 (Jocelyn Falempe) [2140152 2130159]
- iavf: Do not restart Tx queues after reset task failure (Petr Oros) [2149081 2134005]
- iavf: Fix a crash during reset task (Petr Oros) [2149081 2134005]
- scsi: core: Allow the ALUA transitioning state enough time (Tomas Henzl) [2147374 2084250]
- scsi: core: Return BLK_STS_TRANSPORT for ALUA transitioning (Tomas Henzl) [2147374 2084250]
- i40e: Fix DMA mappings leak (Ivan Vecera) [2138205 2077847]
- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2142724 2142725] {CVE-2022-2964}
- net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2142724 2142725] {CVE-2022-2964}</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.9.1.el8_7]" date="1670587200">- Documentation/admin-guide: Document nomodeset kernel parameter (Jocelyn Falempe) [2145218 2143952]
- drm: Move nomodeset kernel parameter to the DRM subsystem (Jocelyn Falempe) [2145218 2143952]
- wait: Fix __wait_event_hrtimeout for RT/DL tasks (Derek Barbosa) [2138953 2125233]
- scsi: zfcp: Fix missing auto port scan and thus missing target ports (Tobias Huschle) [2127849 2121089]
- net: Fix return value of qdisc ingress handling on success (Ivan Vecera) [2141878 2131361]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.10.1.el8_7]" date="1671019200">- scsi: target: loop: Fix handling of aborted TMRs (Maurizio Lombardi) [2144583 2141713]
- ice: virtchnl rss hena support (Petr Oros) [2148130]
- ice: Fix configuring VIRTCHNL_OP_CONFIG_VSI_QUEUES with unbalanced queues (Michal Schmidt) [2142017 2137378]
- ice: Add support Flex RXD (Michal Schmidt) [2138157 2131310]
- netfilter: flowtable: fix stuck flows on cleanup due to pending work (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: add function to invoke garbage collection immediately (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: pass flowtable to nf_flow_table_iterate() (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: separate replace, destroy and stats to different workqueues (Phil Sutter) [2134084 2131370]
- x86/paravirt: Add a dummy __x86_paravirt_patch_template() function (Waiman Long) [2152206 2144161]
- x86/paravirt: Fix kABI breakage in struct pv_mmu_ops (Waiman Long) [2152206 2144161]
- drm/i915: fix TLB invalidation for Gen12 video and compute engines (Wander Lairson Costa) [2148149 2148150] {CVE-2022-4139}
- PCI: hv: Do not set PCI_COMMAND_MEMORY to reduce VM boot time (Emanuele Giuseppe Esposito) [2150912 2082836]
- iavf: Fix cached head and tail value for iavf_get_tx_pending (Stefan Assmann) [2149742 2103944]
- iavf: Fix change VF's mac address (Stefan Assmann) [2149742 2103944]
- iavf: Fix race between iavf_close and iavf_reset_task (Stefan Assmann) [2149742 2103944]
- net: ethernet: move from strlcpy with unused retval to strscpy (Stefan Assmann) [2149742 2103944]
- iavf: Fix 'tc qdisc show' listing too many queues (Stefan Assmann) [2149742 2103944]
- iavf: Fix max_rate limiting (Stefan Assmann) [2149742 2103944]
- iavf: Check for duplicate TC flower filter before parsing (Stefan Assmann) [2149742 2103944]
- iavf: Fix handling of dummy receive descriptors (Stefan Assmann) [2149742 2103944]
- iavf: Disallow changing rx/tx-frames and rx/tx-frames-irq (Stefan Assmann) [2149742 2103944]
- intel/iavf:fix repeated words in comments (Stefan Assmann) [2149742 2103944]
- intel: remove unused macros (Stefan Assmann) [2149742 2103944]
- iavf: Add waiting for response from PF in set mac (Stefan Assmann) [2149742 2103944]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.11.1.el8_7]" date="1673006400">- NFSD: Protect against send buffer overflow in NFSv3 READ (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv2 READ (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv3 READDIR (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv2 READDIR (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- SUNRPC: Fix svcxdr_init_encode's buflen calculation (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- SUNRPC: Fix svcxdr_init_decode's end-of-buffer calculation (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- panic, kexec: make __crash_kexec() NMI safe (Valentin Schneider) [2139580 2134126]
- kexec: turn all kexec_mutex acquisitions into trylocks (Valentin Schneider) [2139580 2134126]
- kexec: move locking into do_kexec_load (Valentin Schneider) [2139580 2134126]
- vdpa/mlx5: re-create forwarding rules after mac modified (Laurent Vivier) [2152912 2145136]
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry (Waiman Long) [2153653 2108387]
- irq: Call tick_irq_enter() inside HARDIRQ_OFFSET (Waiman Long) [2153653 2108387]
- irqtime: Move irqtime entry accounting after irq offset incrementation (Waiman Long) [2153653 2108387]
- sched/vtime: Consolidate IRQ time accounting (Waiman Long) [2153653 2108387]
- s390/vtime: Use the generic IRQ entry accounting (Waiman Long) [2153653 2108387]
- sched/cputime: Remove symbol exports from IRQ time accounting (Waiman Long) [2153653 2108387]
- genirq/irqdomain: Don't try to free an interrupt that has no mapping (Waiman Long) [2153653 2108387]
- genirq: Provide __irq_enter/exit_raw() (Waiman Long) [2153653 2108387]
- powerpc/time: Only set CONFIG_ARCH_HAS_SCALED_CPUTIME on PPC64 (Waiman Long) [2153653 2108387]
- powerpc/time: isolate scaled cputime accounting in dedicated functions. (Waiman Long) [2153653 2108387]
- PCI: hv: Fix synchronization between channel callback and hv_pci_bus_exit() (Mohammed Gamal) [2155280 2144708]
- PCI: hv: Fix synchronization between channel callback and hv_compose_msi_msg() (Mohammed Gamal) [2155280 2144708]
- PCI: hv: Use vmbus_requestor to generate transaction IDs for VMbus hardening (Mohammed Gamal) [2155280 2144708]
- net/mlx5e: TC, Reject forwarding from internal port to internal port (Mohammad Kabat) [2141959 2131345]
- hv_netvsc: Fix race between VF offering and VF association message from host (Mohammed Gamal) [2155272 2149279]
- x86/mce: Reduce number of machine checks taken during recovery (Prarit Bhargava) [2137592 2104388]
- cgroup/cpuset: Reduce cpuset_rwsem writer latency (Waiman Long) [2153108 2149031]
- rcu/exp: Mark current CPU as exp-QS in IPI loop second pass (Waiman Long) [2153108 2149031]
- rcu: Always inline rcu_dynticks_task*_{enter,exit}() (Waiman Long) [2153108 2149031]
- rcu: Fix existing exp request check in sync_sched_exp_online_cleanup() (Waiman Long) [2153108 2149031]
- rcu: Fix macro name CONFIG_TASKS_RCU_TRACE (Waiman Long) [2153108 2149031]
- rcu: Fix stall-warning deadlock due to non-release of rcu_node -&gt;lock (Waiman Long) [2153108 2149031]
- rcu: Fix to include first blocked task in stall warning (Waiman Long) [2153108 2149031]
- cgroup: Use cgroup_attach_{lock,unlock}() from cgroup_attach_task_all() (Waiman Long) [2153108 2149031]
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all() (Waiman Long) [2153108 2149031]
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock (Waiman Long) [2153108 2149031]
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree (Waiman Long) [2153108 2149031]
- cgroup/cpuset: Fix a race between cpuset_attach() and cpu hotplug (Waiman Long) [2153108 2149031]
- cgroup: reduce dependency on cgroup_mutex (Waiman Long) [2153108 2149031]
- sunrpc: Set sk_allocation to GFP_NOFS to avoid using current-&gt;task_frag. (Guillaume Nault) [2153230 2089660]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.12.1.el8_7]" date="1674129600">- x86/fpu: Prevent FPU state corruption (Oleksandr Natalenko) [2134586 2130890]
- x86/fpu: Drop fpregs lock before inheriting FPU permissions (Eder Zulian) [2154460 2153549]
- kernel-doc: fix undefined args variable (Jan Stancek) [2157905 2134954]
- mm: memcontrol: fix potential oom_lock recursion deadlock (Waiman Long) [2157922 2138886]
- memcg: prohibit unconditional exceeding the limit of dying tasks (Waiman Long) [2157922 2138886]
- mm, oom: do not trigger out_of_memory from the #PF (Waiman Long) [2157922 2138886]
- mm, oom: pagefault_out_of_memory: don't force global OOM for dying tasks (Waiman Long) [2157922 2138886]
- mm: memcontrol: don't count limit-setting reclaim as memory pressure (Waiman Long) [2157922 2138886]
- KVM: s390: vsie: Fix the initialization of the epoch extension (epdx) field (Thomas Huth) [2158813 2151854]
- net: mana: Fix race on per-CQ variable napi work_done (Emanuele Giuseppe Esposito) [2155437 2151722]
- mei: me: add adler lake point S DID (Prarit Bhargava) [2141783 2141602]
- PCI: hv: Only reuse existing IRTE allocation for Multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix the definition of vector in hv_compose_msi_msg() (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix interrupt mapping for multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Reuse existing IRTE allocation in compose_msi_msg() (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix hv_arch_irq_unmask() for multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix multi-MSI to allow more than one MSI vector (Emanuele Giuseppe Esposito) [2155289 2100275]
- drm/ast: Support multiple outputs (Jarod Wilson) [2149287 2147553]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.13.1.el8_7]" date="1675339200">- mm/cgroup/reclaim: fix dirty pages throttling on cgroup v1 (Waiman Long) [2160221]
- mm: vmscan: remove deadlock due to throttling failing to make progress (Waiman Long) [2160221]
- mm: vmscan: reduce throttling due to a failure to make progress -fix (Waiman Long) [2160221]
- mm: vmscan: Reduce throttling due to a failure to make progress (Waiman Long) [2160221]
- mm/vmscan: delay waking of tasks throttled on NOPROGRESS (Waiman Long) [2160221]
- mm/vmscan: increase the timeout if page reclaim is not making progress (Waiman Long) [2160221]
- mm/vmscan: centralise timeout values for reclaim_throttle (Waiman Long) [2160221]
- mm/page_alloc: remove the throttling logic from the page allocator (Waiman Long) [2160221]
- mm/writeback: throttle based on page writeback instead of congestion (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim when no progress is being made (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim and compaction when too may pages are isolated (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim until some writeback completes if congested (Waiman Long) [2160221]
- mm/vmscan.c: delete or fix duplicated words (Waiman Long) [2160221]
- mm,page_alloc: PF_WQ_WORKER threads must sleep at should_reclaim_retry() (Nico Pache) [2160221]
- ceph: avoid putting the realm twice when decoding snaps fails (Xiubo Li) [2155797 2139881]
- mm/mremap: hold the rmap lock in write mode when moving page table entries. (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: use pmd/pud_poplulate to update page table entries (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: don't enable optimized PUD move if page table levels is 2 (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: convert huge PUD move to separate helper (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: fix BUILD_BUG_ON() error in get_extent (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap.c: fix extent calculation (Waiman Long) [2140944] {CVE-2022-41222}
- x86: mremap speedup - Enable HAVE_MOVE_PUD (Waiman Long) [2140944] {CVE-2022-41222}
- mm: speedup mremap on 1GB or larger regions (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: start addresses are properly aligned (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: calculate extent in one place (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: it is sure to have enough space when extent meets requirement (Waiman Long) [2140944] {CVE-2022-41222}
- s390/boot: add secure boot trailer (Tobias Huschle) [2151530 2141967]
- i40e: Fix VF hang when reset is triggered on another VF (Ivan Vecera) [2160460 2103801]
- i2c: ismt: Fix an out-of-bounds bug in ismt_access() (Prarit Bhargava) [2154388 2119066] {CVE-2022-2873}
- iavf: schedule watchdog immediately when changing primary MAC (Michal Schmidt) [2163257 2152493]
- iavf: Move netdev_update_features() into watchdog task (Michal Schmidt) [2163257 2152493]
- iavf: fix temporary deadlock and failure to set MAC address (Michal Schmidt) [2163257 2152493]
- iavf: Fix error handling in iavf_init_module() (Michal Schmidt) [2163257 2152493]
- iommu/vt-d: Clean up si_domain in the init_dmars() error path (Jerry Snitselaar) [2149474 2118428]
- x86/pci/xen: Use msi_msg shadow structs (Jerry Snitselaar) [2149474 2118428]
- iommu/intel: Use msi_msg shadow structs (Jerry Snitselaar) [2149474 2118428]
- PCI: MSI: Fix Kconfig dependencies for PCI_MSI_ARCH_FALLBACKS (Jerry Snitselaar) [2149474 2118428]
- x86/apic/msi: Unbreak DMAR and HPET MSI (Jerry Snitselaar) [2149474 2118428]
- iommu/amd: Remove domain search for PCI/MSI (Jerry Snitselaar) [2149474 2118428]
- iommu/vt-d: Remove domain search for PCI/MSI[X] (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Make most MSI ops XEN private (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Cleanup the arch_*_msi_irqs() leftovers (Jerry Snitselaar) [2149474 2118428]
- PCI/MSI: Make arch_.*_msi_irq[s] fallbacks selectable (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Wrap XEN MSI management into irqdomain (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Consolidate XEN-MSI init (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Rework MSI teardown (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Make xen_msi_init() static and rename it to xen_hvm_msi_init() (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Move apic_post_init() invocation to one place (Jerry Snitselaar) [2149474 2118428]
- x86/msi: Use generic MSI domain ops (Jerry Snitselaar) [2149474 2118428]
- x86/msi: Remove pointless vcpu_affinity callback (Jerry Snitselaar) [2149474 2118428]
- iommu/vt-d: Fix compile error with CONFIG_PCI_ATS not set (Myron Stowe) [2149474 2118428]
- iommu/vt-d: Cure VF irqdomain hickup (Myron Stowe) [2149474 2118428]
- x86/pci: Set default irq domain in pcibios_add_device() (Myron Stowe) [2149474 2118428]
- iommm/amd: Store irq domain in struct device (Myron Stowe) [2149474 2118428]
- iommm/vt-d: Store irq domain in struct device (Myron Stowe) [2149474 2118428]
- PCI/MSI: Provide pci_dev_has_special_msi_domain() helper (Myron Stowe) [2149474 2118428]
- x86/msi: Consolidate MSI allocation (Myron Stowe) [2149474 2118428]
- PCI/MSI: Rework pci_msi_domain_calc_hwirq() (Myron Stowe) [2149474 2118428]
- x86/irq: Consolidate UV domain allocation (Myron Stowe) [2149474 2118428]
- x86/irq: Consolidate DMAR irq allocation (Myron Stowe) [2149474 2118428]
- x86_ioapic_Consolidate_IOAPIC_allocation (Myron Stowe) [2149474 2118428]
- x86/msi: Consolidate HPET allocation (Myron Stowe) [2149474 2118428]
- iommu/irq_remapping: Consolidate irq domain lookup (Myron Stowe) [2149474 2118428]
- iommu/amd: Consolidate irq domain getter (Myron Stowe) [2149474 2118428]
- iommu/vt-d: Consolidate irq domain getter (Myron Stowe) [2149474 2118428]
- x86/irq: Add allocation type for parent domain retrieval (Myron Stowe) [2149474 2118428]
- irqdomain: Export irq_domain_update_bus_token (Myron Stowe) [2149474 2118428]
- gitlab-ci: use CI templates from production branch (Michael Hofmann)
- iavf: remove INITIAL_MAC_SET to allow gARP to work properly (Stefan Assmann) [2149745 1938635]
- Revert "scsi: iscsi: ql4xxx: Use per-session workqueue for unbinding" (Chris Leech) [2152734 2122624]
- Revert "scsi: iscsi: Use the session workqueue for recovery" (Chris Leech) [2152734 2122624]
- arm64/bpf: Remove 128MB limit for BPF JIT programs (Yauheni Kaliuta) [2152138 2140163]
- bpf: Define bpf_jit_alloc_exec_limit for arm64 JIT (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: add `type` and `data` fields (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: use `ex` for `exception_table_entry` (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: make fixup_exception() return bool (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: consolidate definitions (Yauheni Kaliuta) [2152138 2140163]
- arm64: kvm: use kvm_exception_table_entry (Yauheni Kaliuta) [2152138 2140163]
- be2net: Fix buffer overflow in be_get_module_eeprom (Josef Oskera) [2160182 2126917]</changelog>
</package>
<package pkgid="6f1ec35121df82825caa6c63f8d793f01bc1d0f351d31be30134aac25ad3486e" name="kernel-modules" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="425.19.2.el8_7"/>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.11.1.el8_7]" date="1673006400">- NFSD: Protect against send buffer overflow in NFSv3 READ (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv2 READ (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv3 READDIR (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv2 READDIR (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- SUNRPC: Fix svcxdr_init_encode's buflen calculation (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- SUNRPC: Fix svcxdr_init_decode's end-of-buffer calculation (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- panic, kexec: make __crash_kexec() NMI safe (Valentin Schneider) [2139580 2134126]
- kexec: turn all kexec_mutex acquisitions into trylocks (Valentin Schneider) [2139580 2134126]
- kexec: move locking into do_kexec_load (Valentin Schneider) [2139580 2134126]
- vdpa/mlx5: re-create forwarding rules after mac modified (Laurent Vivier) [2152912 2145136]
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry (Waiman Long) [2153653 2108387]
- irq: Call tick_irq_enter() inside HARDIRQ_OFFSET (Waiman Long) [2153653 2108387]
- irqtime: Move irqtime entry accounting after irq offset incrementation (Waiman Long) [2153653 2108387]
- sched/vtime: Consolidate IRQ time accounting (Waiman Long) [2153653 2108387]
- s390/vtime: Use the generic IRQ entry accounting (Waiman Long) [2153653 2108387]
- sched/cputime: Remove symbol exports from IRQ time accounting (Waiman Long) [2153653 2108387]
- genirq/irqdomain: Don't try to free an interrupt that has no mapping (Waiman Long) [2153653 2108387]
- genirq: Provide __irq_enter/exit_raw() (Waiman Long) [2153653 2108387]
- powerpc/time: Only set CONFIG_ARCH_HAS_SCALED_CPUTIME on PPC64 (Waiman Long) [2153653 2108387]
- powerpc/time: isolate scaled cputime accounting in dedicated functions. (Waiman Long) [2153653 2108387]
- PCI: hv: Fix synchronization between channel callback and hv_pci_bus_exit() (Mohammed Gamal) [2155280 2144708]
- PCI: hv: Fix synchronization between channel callback and hv_compose_msi_msg() (Mohammed Gamal) [2155280 2144708]
- PCI: hv: Use vmbus_requestor to generate transaction IDs for VMbus hardening (Mohammed Gamal) [2155280 2144708]
- net/mlx5e: TC, Reject forwarding from internal port to internal port (Mohammad Kabat) [2141959 2131345]
- hv_netvsc: Fix race between VF offering and VF association message from host (Mohammed Gamal) [2155272 2149279]
- x86/mce: Reduce number of machine checks taken during recovery (Prarit Bhargava) [2137592 2104388]
- cgroup/cpuset: Reduce cpuset_rwsem writer latency (Waiman Long) [2153108 2149031]
- rcu/exp: Mark current CPU as exp-QS in IPI loop second pass (Waiman Long) [2153108 2149031]
- rcu: Always inline rcu_dynticks_task*_{enter,exit}() (Waiman Long) [2153108 2149031]
- rcu: Fix existing exp request check in sync_sched_exp_online_cleanup() (Waiman Long) [2153108 2149031]
- rcu: Fix macro name CONFIG_TASKS_RCU_TRACE (Waiman Long) [2153108 2149031]
- rcu: Fix stall-warning deadlock due to non-release of rcu_node -&gt;lock (Waiman Long) [2153108 2149031]
- rcu: Fix to include first blocked task in stall warning (Waiman Long) [2153108 2149031]
- cgroup: Use cgroup_attach_{lock,unlock}() from cgroup_attach_task_all() (Waiman Long) [2153108 2149031]
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all() (Waiman Long) [2153108 2149031]
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock (Waiman Long) [2153108 2149031]
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree (Waiman Long) [2153108 2149031]
- cgroup/cpuset: Fix a race between cpuset_attach() and cpu hotplug (Waiman Long) [2153108 2149031]
- cgroup: reduce dependency on cgroup_mutex (Waiman Long) [2153108 2149031]
- sunrpc: Set sk_allocation to GFP_NOFS to avoid using current-&gt;task_frag. (Guillaume Nault) [2153230 2089660]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.12.1.el8_7]" date="1674129600">- x86/fpu: Prevent FPU state corruption (Oleksandr Natalenko) [2134586 2130890]
- x86/fpu: Drop fpregs lock before inheriting FPU permissions (Eder Zulian) [2154460 2153549]
- kernel-doc: fix undefined args variable (Jan Stancek) [2157905 2134954]
- mm: memcontrol: fix potential oom_lock recursion deadlock (Waiman Long) [2157922 2138886]
- memcg: prohibit unconditional exceeding the limit of dying tasks (Waiman Long) [2157922 2138886]
- mm, oom: do not trigger out_of_memory from the #PF (Waiman Long) [2157922 2138886]
- mm, oom: pagefault_out_of_memory: don't force global OOM for dying tasks (Waiman Long) [2157922 2138886]
- mm: memcontrol: don't count limit-setting reclaim as memory pressure (Waiman Long) [2157922 2138886]
- KVM: s390: vsie: Fix the initialization of the epoch extension (epdx) field (Thomas Huth) [2158813 2151854]
- net: mana: Fix race on per-CQ variable napi work_done (Emanuele Giuseppe Esposito) [2155437 2151722]
- mei: me: add adler lake point S DID (Prarit Bhargava) [2141783 2141602]
- PCI: hv: Only reuse existing IRTE allocation for Multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix the definition of vector in hv_compose_msi_msg() (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix interrupt mapping for multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Reuse existing IRTE allocation in compose_msi_msg() (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix hv_arch_irq_unmask() for multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix multi-MSI to allow more than one MSI vector (Emanuele Giuseppe Esposito) [2155289 2100275]
- drm/ast: Support multiple outputs (Jarod Wilson) [2149287 2147553]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.13.1.el8_7]" date="1675339200">- mm/cgroup/reclaim: fix dirty pages throttling on cgroup v1 (Waiman Long) [2160221]
- mm: vmscan: remove deadlock due to throttling failing to make progress (Waiman Long) [2160221]
- mm: vmscan: reduce throttling due to a failure to make progress -fix (Waiman Long) [2160221]
- mm: vmscan: Reduce throttling due to a failure to make progress (Waiman Long) [2160221]
- mm/vmscan: delay waking of tasks throttled on NOPROGRESS (Waiman Long) [2160221]
- mm/vmscan: increase the timeout if page reclaim is not making progress (Waiman Long) [2160221]
- mm/vmscan: centralise timeout values for reclaim_throttle (Waiman Long) [2160221]
- mm/page_alloc: remove the throttling logic from the page allocator (Waiman Long) [2160221]
- mm/writeback: throttle based on page writeback instead of congestion (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim when no progress is being made (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim and compaction when too may pages are isolated (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim until some writeback completes if congested (Waiman Long) [2160221]
- mm/vmscan.c: delete or fix duplicated words (Waiman Long) [2160221]
- mm,page_alloc: PF_WQ_WORKER threads must sleep at should_reclaim_retry() (Nico Pache) [2160221]
- ceph: avoid putting the realm twice when decoding snaps fails (Xiubo Li) [2155797 2139881]
- mm/mremap: hold the rmap lock in write mode when moving page table entries. (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: use pmd/pud_poplulate to update page table entries (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: don't enable optimized PUD move if page table levels is 2 (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: convert huge PUD move to separate helper (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: fix BUILD_BUG_ON() error in get_extent (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap.c: fix extent calculation (Waiman Long) [2140944] {CVE-2022-41222}
- x86: mremap speedup - Enable HAVE_MOVE_PUD (Waiman Long) [2140944] {CVE-2022-41222}
- mm: speedup mremap on 1GB or larger regions (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: start addresses are properly aligned (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: calculate extent in one place (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: it is sure to have enough space when extent meets requirement (Waiman Long) [2140944] {CVE-2022-41222}
- s390/boot: add secure boot trailer (Tobias Huschle) [2151530 2141967]
- i40e: Fix VF hang when reset is triggered on another VF (Ivan Vecera) [2160460 2103801]
- i2c: ismt: Fix an out-of-bounds bug in ismt_access() (Prarit Bhargava) [2154388 2119066] {CVE-2022-2873}
- iavf: schedule watchdog immediately when changing primary MAC (Michal Schmidt) [2163257 2152493]
- iavf: Move netdev_update_features() into watchdog task (Michal Schmidt) [2163257 2152493]
- iavf: fix temporary deadlock and failure to set MAC address (Michal Schmidt) [2163257 2152493]
- iavf: Fix error handling in iavf_init_module() (Michal Schmidt) [2163257 2152493]
- iommu/vt-d: Clean up si_domain in the init_dmars() error path (Jerry Snitselaar) [2149474 2118428]
- x86/pci/xen: Use msi_msg shadow structs (Jerry Snitselaar) [2149474 2118428]
- iommu/intel: Use msi_msg shadow structs (Jerry Snitselaar) [2149474 2118428]
- PCI: MSI: Fix Kconfig dependencies for PCI_MSI_ARCH_FALLBACKS (Jerry Snitselaar) [2149474 2118428]
- x86/apic/msi: Unbreak DMAR and HPET MSI (Jerry Snitselaar) [2149474 2118428]
- iommu/amd: Remove domain search for PCI/MSI (Jerry Snitselaar) [2149474 2118428]
- iommu/vt-d: Remove domain search for PCI/MSI[X] (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Make most MSI ops XEN private (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Cleanup the arch_*_msi_irqs() leftovers (Jerry Snitselaar) [2149474 2118428]
- PCI/MSI: Make arch_.*_msi_irq[s] fallbacks selectable (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Wrap XEN MSI management into irqdomain (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Consolidate XEN-MSI init (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Rework MSI teardown (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Make xen_msi_init() static and rename it to xen_hvm_msi_init() (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Move apic_post_init() invocation to one place (Jerry Snitselaar) [2149474 2118428]
- x86/msi: Use generic MSI domain ops (Jerry Snitselaar) [2149474 2118428]
- x86/msi: Remove pointless vcpu_affinity callback (Jerry Snitselaar) [2149474 2118428]
- iommu/vt-d: Fix compile error with CONFIG_PCI_ATS not set (Myron Stowe) [2149474 2118428]
- iommu/vt-d: Cure VF irqdomain hickup (Myron Stowe) [2149474 2118428]
- x86/pci: Set default irq domain in pcibios_add_device() (Myron Stowe) [2149474 2118428]
- iommm/amd: Store irq domain in struct device (Myron Stowe) [2149474 2118428]
- iommm/vt-d: Store irq domain in struct device (Myron Stowe) [2149474 2118428]
- PCI/MSI: Provide pci_dev_has_special_msi_domain() helper (Myron Stowe) [2149474 2118428]
- x86/msi: Consolidate MSI allocation (Myron Stowe) [2149474 2118428]
- PCI/MSI: Rework pci_msi_domain_calc_hwirq() (Myron Stowe) [2149474 2118428]
- x86/irq: Consolidate UV domain allocation (Myron Stowe) [2149474 2118428]
- x86/irq: Consolidate DMAR irq allocation (Myron Stowe) [2149474 2118428]
- x86_ioapic_Consolidate_IOAPIC_allocation (Myron Stowe) [2149474 2118428]
- x86/msi: Consolidate HPET allocation (Myron Stowe) [2149474 2118428]
- iommu/irq_remapping: Consolidate irq domain lookup (Myron Stowe) [2149474 2118428]
- iommu/amd: Consolidate irq domain getter (Myron Stowe) [2149474 2118428]
- iommu/vt-d: Consolidate irq domain getter (Myron Stowe) [2149474 2118428]
- x86/irq: Add allocation type for parent domain retrieval (Myron Stowe) [2149474 2118428]
- irqdomain: Export irq_domain_update_bus_token (Myron Stowe) [2149474 2118428]
- gitlab-ci: use CI templates from production branch (Michael Hofmann)
- iavf: remove INITIAL_MAC_SET to allow gARP to work properly (Stefan Assmann) [2149745 1938635]
- Revert "scsi: iscsi: ql4xxx: Use per-session workqueue for unbinding" (Chris Leech) [2152734 2122624]
- Revert "scsi: iscsi: Use the session workqueue for recovery" (Chris Leech) [2152734 2122624]
- arm64/bpf: Remove 128MB limit for BPF JIT programs (Yauheni Kaliuta) [2152138 2140163]
- bpf: Define bpf_jit_alloc_exec_limit for arm64 JIT (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: add `type` and `data` fields (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: use `ex` for `exception_table_entry` (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: make fixup_exception() return bool (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: consolidate definitions (Yauheni Kaliuta) [2152138 2140163]
- arm64: kvm: use kvm_exception_table_entry (Yauheni Kaliuta) [2152138 2140163]
- be2net: Fix buffer overflow in be_get_module_eeprom (Josef Oskera) [2160182 2126917]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.14.1.el8_7]" date="1676030400">- ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems (Wei Huang) [2142170 2130653]
- KVM: x86: nSVM: implement nested LBR virtualization (Emanuele Giuseppe Esposito) [2166362 2155149]
- KVM: x86: nSVM: correctly virtualize LBR msrs when L2 is running (Emanuele Giuseppe Esposito) [2166362 2155149]
- kvm: x86: SVM: use vmcb* instead of svm-&gt;vmcb where it makes sense (Emanuele Giuseppe Esposito) [2166362 2155149]
- KVM: x86: nSVM: implement nested VMLOAD/VMSAVE (Emanuele Giuseppe Esposito) [2166362 2155149]
- IB/iser: Fix login with authentication (Kamal Heib) [2161750 2120676]
- act_mirred: use the backlog for nested calls to mirred ingress (Davide Caratti) [2164648 2131339] {CVE-2022-4269}
- net/sched: act_mirred: better wording on protection against excessive stack growth (Davide Caratti) [2164648 2131339] {CVE-2022-4269}
- redhat/configs: Set CONFIG_X86_AMD_PSTATE to 'm' (Prarit Bhargava) [2151275 2145246]
- KVM: x86: smm: preserve interrupt shadow in SMRAM (Maxim Levitsky) [2166368 2097144]
- KVM: x86: SVM: don't save SVM state to SMRAM when VM is not long mode capable (Maxim Levitsky) [2166368 2097144]
- KVM: x86: SVM: use smram structs (Maxim Levitsky) [2166368 2097144]
- KVM: svm: drop explicit return value of kvm_vcpu_map (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: use smram struct for 64 bit smram load/restore (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: use smram struct for 32 bit smram load/restore (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: use smram structs in the common code (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: add structs for KVM's smram layout (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: check for failures on smm entry (Maxim Levitsky) [2166368 2097144]
- KVM: x86: do not go through ctxt-&gt;ops when emulating rsm (Maxim Levitsky) [2166368 2097144]
- KVM: x86: move SMM exit to a new file (Maxim Levitsky) [2166368 2097144]
- KVM: x86: move SMM entry to a new file (Maxim Levitsky) [2166368 2097144]
- KVM: x86: start moving SMM-related functions to new files (Maxim Levitsky) [2166368 2097144]
- bug: introduce ASSERT_STRUCT_OFFSET (Maxim Levitsky) [2166368 2097144]
- KVM: x86: Rename and expose helper to detect if INIT/SIPI are allowed (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: number of GPRs in the SMRAM image depends on the image format (Maxim Levitsky) [2166368 2097144]
- KVM: x86: emulator: update the emulation mode after CR0 write (Maxim Levitsky) [2166368 2097144]
- KVM: x86: emulator: update the emulation mode after rsm (Maxim Levitsky) [2166368 2097144]
- KVM: x86: emulator: introduce emulator_recalc_and_set_mode (Maxim Levitsky) [2166368 2097144]
- KVM: x86: emulator: em_sysexit should update ctxt-&gt;mode (Maxim Levitsky) [2166368 2097144]
- KVM: x86: Bug the VM if the emulator accesses a non-existent GPR (Maxim Levitsky) [2166368 2097144]
- \KVM: x86: Reduce the number of emulator GPRs to '8' for 32-bit KVM (Maxim Levitsky) [2166368 2097144]
- KVM: x86: Use 16-bit fields to track dirty/valid emulator GPRs (Maxim Levitsky) [2166368 2097144]
- KVM: x86: Omit VCPU_REGS_RIP from emulator's _regs array (Maxim Levitsky) [2166368 2097144]
- \KVM: x86: Harden _regs accesses to guard against buggy input (Maxim Levitsky) [2166368 2097144]
- KVM: x86: Grab regs_dirty in local 'unsigned long' (Maxim Levitsky) [2166368 2097144]
- proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152571 2152572] {CVE-2022-4378}
- proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152571 2152572] {CVE-2022-4378}</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.15.1.el8_7]" date="1676548800">- net/mlx5e: Fix use-after-free when reverting termination table (Amir Tzin) [2167640 2112927]
- net/mlx5: Do not query pci info while pci disabled (Amir Tzin) [2167645 2129249]
- x86/fpu: Fix copy_xstate_to_uabi() to copy init states correctly (Dean Nelson) [2168384 2122850]
- x86/fpu: Exclude dynamic states from init_fpstate (Dean Nelson) [2168384 2122850]
- x86/fpu: Fix the init_fpstate size check with the actual size (Dean Nelson) [2168384 2122850]
- x86/fpu: Configure init_fpstate attributes orderly (Dean Nelson) [2168384 2122850]
- x86/fpu/xstate: Fix the ARCH_REQ_XCOMP_PERM implementation (Dean Nelson) [2168384 2122850]
- net/mlx5: E-Switch, properly handle ingress tagged packets on VST (Amir Tzin) [2166665 2096109]
- cpuhotplug: Fix KABI breakage (Prarit Bhargava) [2162763 2156529]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.16.1.el8_7]" date="1677153600">- ipv6: fix panic when fib_lookup_arg-&gt;result is fib6_info (Jiri Benc) [2167602 2140599]
- ceph: blocklist the kclient when receiving corrupted snap trace (Xiubo Li) [2168896 2162414]
- ceph: move mount state enum to super.h (Xiubo Li) [2168896 2162414]
- s390/kexec: fix ipl report address for kdump (Tobias Huschle) [2166296 2161328]
- mm, compaction: fix fast_isolate_around() to stay within boundaries (Daniel Vacek) [2170576 2149309]
- scsi: storvsc: Fix swiotlb bounce buffer leak in confidential VM (Emanuele Giuseppe Esposito) [2170228 2150659]
- netfilter: conntrack: handle tcp challenge acks during connection reuse (Florian Westphal) [2165587 2158726]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.17.1.el8_7]" date="1677844800">- net: mana: Add rmb after checking owner bits (Mohammed Gamal) [2173103 2139462]
- net: mana: Add support of XDP_REDIRECT action (Mohammed Gamal) [2173103 2139462]
- net: mana: Add the Linux MANA PF driver (Mohammed Gamal) [2173103 2139462]
- ice: fix lost multicast packets in promisc mode (Ken Cox) [2172550 2138215]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.18.0-425.18.1.el8_7]" date="1678449600">- futex: Resend potentially swallowed owner death notification (Rafael Aquini) [2170054 2161526]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.19.1.el8_7]" date="1678968000">- s390/dasd: fix no record found for raw_track_access (Tobias Huschle) [2167776 2161270]
- locking/rwsem: Disable preemption in all down_read*() and up_read() code paths (Waiman Long) [2170939 2162139]
- locking/rwsem: Prevent non-first waiter from spinning in down_write() slowpath (Waiman Long) [2170939 2162139]
- locking/rwsem: Allow slowpath writer to ignore handoff bit if not set by first waiter (Waiman Long) [2170939 2162139]
- locking/rwsem: Always try to wake waiters in out_nolock path (Waiman Long) [2170939 2162139]
- locking/rwsem: No need to check for handoff bit if wait queue empty (Waiman Long) [2170939 2162139]
- locking/rwsem: Make handoff bit handling more consistent (Waiman Long) [2170939 2162139]
- locking/rwsem: Disable preemption while trying for rwsem lock (Waiman Long) [2170939 2162139]
- locking/rwsem: Conditionally wake waiters in reader/writer slowpaths (Waiman Long) [2170939 2162139]
- locking: Make owner_on_cpu() into &lt;linux/sched.h&gt; (Waiman Long) [2170939 2162139]
- locking/rwsem: Optimize down_read_trylock() under highly contended case (Waiman Long) [2170939 2162139]
- locking/rwsem: Fix comments about reader optimistic lock stealing conditions (Waiman Long) [2170939 2162139]
- locking/rwsem: Disable preemption for spinning region (Waiman Long) [2170939 2162139]
- locking: Remove rcu_read_{,un}lock() for preempt_{dis,en}able() (Waiman Long) [2170939 2162139]
- watchdog: fix UAF in reboot notifier handling in watchdog core code (Wander Lairson Costa) [2139770 2131308]
- netfilter: nf_conntrack_irc: Tighten matching on DCC message (Wander Lairson Costa) [2139770 2131308]
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF (Jaroslav Kysela) [2163400 2163401] {CVE-2023-0266}
- net/mlx5e: Fix enabling sriov while tc nic rules are offloaded (Amir Tzin) [2167647 2112925]
- net/mlx5: E-Switch, pair only capable devices (Amir Tzin) [2167647 2112925]
- net/mlx5: Fix mlx5_get_next_dev() peer device matching (Amir Tzin) [2167647 2112925]
- net/mlx5: Lag, filter non compatible devices (Amir Tzin) [2167647 2112925]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.19.2.el8_7.gf5e8]" date="1678968001">- ovl: fail on invalid uid/gid mapping at copy up (Miklos Szeredi) [2165341 2165342] {CVE-2023-0386}</changelog>
</package>
<package pkgid="a31d74d929cfb5061bfc24c547451f34ebbff3cd5f3d06180625b51a12bb01cf" name="kernel-modules-extra" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="425.10.1.el8_7"/>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.1.1.el8]" date="1663588800">- i40e: Fix kernel crash during module removal (Ivan Vecera) [2091489]
- redhat: enable zstream release numbering for rhel 8.7 (Jarod Wilson)
- ice: Allow operation with reduced device MSI-X (Petr Oros) [2102844]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.2.1.el8]" date="1664193600">- EDAC/ghes: Set the DIMM label unconditionally (Aristeu Rozanski) [2109712]
- configs: enable CONFIG_HP_ILO for aarch64 (Mark Salter) [2123508]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.3.1.el8]" date="1664539200">- iwlwifi: limit fw version for AC9560 to avoid fw crash (Íñigo Huguet) [2129297]
- sfc: fix null pointer dereference in efx_hard_start_xmit (Íñigo Huguet) [2119638]
- sfc: fix TX channel offset when using legacy interrupts (Íñigo Huguet) [2119638]
- netfilter: conntrack: reduce timeout when receiving out-of-window fin or rst (Florian Westphal) [2047366]
- netfilter: conntrack: remove unneeded indent level (Florian Westphal) [2047366]
- netfilter: conntrack: ignore overly delayed tcp packets (Florian Westphal) [2047366]
- netfilter: conntrack: prepare tcp_in_window for ternary return value (Florian Westphal) [2047366]
- netfilter: conntrack: remove pr_debug callsites from tcp tracker (Florian Westphal) [2047366]
- netfilter: conntrack: work around exceeded receive window (Florian Westphal) [2047366]
- netfilter: conntrack: improve RST handling when tuple is re-used (Florian Westphal) [2047366]
- netfilter: conntrack: avoid misleading 'invalid' in log message (Florian Westphal) [2047366]
- netfilter: remove BUG_ON() after skb_header_pointer() (Florian Westphal) [2047366]
- iavf: Detach device during reset task (Petr Oros) [2069206]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.4.1.el8]" date="1665144000">- random: allow reseeding DRBG with getrandom (Daiki Ueno) [2121766]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.5.1.el8_7]" date="1667476800">- ice: Fix interface being down after reset with link-down-on-close flag on (Petr Oros) [2136216 2024110]
- ice: Fix crash by keep old cfg when update TCs more than queues (Petr Oros) [2130992 2129902]
- ice: Fix tunnel checksum offload with fragmented traffic (Petr Oros) [2130992 2129902]
- ice: handle E822 generic device ID in PLDM header (Petr Oros) [2130992 2129902]
- ice: ethtool: Prohibit improper channel config for DCB (Petr Oros) [2130992 2129902]
- ice: ethtool: advertise 1000M speeds properly (Petr Oros) [2130992 2129902]
- ice: Fix switchdev rules book keeping (Petr Oros) [2130992 2129902]
- ice: fix access-beyond-end in the switch code (Petr Oros) [2130992 2129902]
- eth: ice: silence the GCC 12 array-bounds warning (Petr Oros) [2130992 2129902]
- ice: Expose RSS indirection tables for queue groups via ethtool (Petr Oros) [2130992 2129902]
- Revert "ice: Hide bus-info in ethtool for PRs in switchdev mode" (Petr Oros) [2130992 2129902]
- ice: remove period on argument description in ice_for_each_vf (Petr Oros) [2130992 2129902]
- ice: add a function comment for ice_cfg_mac_antispoof (Petr Oros) [2130992 2129902]
- ice: fix wording in comment for ice_reset_vf (Petr Oros) [2130992 2129902]
- ice: remove return value comment for ice_reset_all_vfs (Petr Oros) [2130992 2129902]
- ice: always check VF VSI pointer values (Petr Oros) [2130992 2129902]
- ice: add newline to dev_dbg in ice_vf_fdir_dump_info (Petr Oros) [2130992 2129902]
- ice: get switch id on switchdev devices (Petr Oros) [2130992 2129902]
- ice: return ENOSPC when exceeding ICE_MAX_CHAIN_WORDS (Petr Oros) [2130992 2129902]
- ice: introduce common helper for retrieving VSI by vsi_num (Petr Oros) [2130992 2129902]
- ice: use min_t() to make code cleaner in ice_gnss (Petr Oros) [2130992 2129902]
- ice: Add mpls+tso support (Petr Oros) [2130992 2129902]
- ice: switch: convert packet template match code to rodata (Petr Oros) [2130992 2129902]
- ice: switch: use convenience macros to declare dummy pkt templates (Petr Oros) [2130992 2129902]
- ice: switch: use a struct to pass packet template params (Petr Oros) [2130992 2129902]
- ice: switch: unobscurify bitops loop in ice_fill_adv_dummy_packet() (Petr Oros) [2130992 2129902]
- ice: switch: add and use u16[] aliases to ice_adv_lkup_elem::{h, m}_u (Petr Oros) [2130992 2129902]
- ice: Support GTP-U and GTP-C offload in switchdev (Petr Oros) [2130992 2129902]
- ice: Remove useless DMA-32 fallback configuration (Petr Oros) [2130992 2129902]
- ice: switch to napi_build_skb() (Petr Oros) [2130992 2129902]
- redhat: switch to z-stream dist tag and build targets (Jarod Wilson)
- block: avoid sign extend problem with default queue flags mask (Nico Pache) [2135813]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.6.1.el8_7]" date="1668168000">- ice: Add low latency Tx timestamp read (Petr Oros) [2136036 2092425]
- ice: introduce ice_ptp_reset_cached_phctime function (Petr Oros) [2136036 2092425]
- ice: re-arrange some static functions in ice_ptp.c (Petr Oros) [2136036 2092425]
- ice: track and warn when PHC update is late (Petr Oros) [2136036 2092425]
- ice: track Tx timestamp stats similar to other Intel drivers (Petr Oros) [2136036 2092425]
- ice: implement adjfine with mul_u64_u64_div_u64 (Petr Oros) [2136036 2092425]
- ice: Add EXTTS feature to the feature bitmap (Petr Oros) [2136036 2092425]
- math: Export mul_u64_u64_div_u64 (Petr Oros) [2136036 2092425]
- vfio/type1: Unpin zero pages (Alex Williamson) [2128515 2123015]
- net: atlantic: remove aq_nic_deinit() when resume (Íñigo Huguet) [2131935 2130839]
- net: atlantic: remove deep parameter on suspend/resume functions (Íñigo Huguet) [2131935 2130839]
- CI: Use zstream builder container (Veronika Kabatova)
- CI: Add disttag override for 8.7 (Veronika Kabatova)</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.7.1.el8_7]" date="1669723200">- ice: Add additional CSR registers to ETHTOOL_GREGS (Petr Oros) [2136513 2131024]
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps (Petr Oros) [2137270 2106964]
- i40e: Fix VF set max MTU size (Petr Oros) [2137270 2106964]
- iavf: Fix set max MTU size with port VLAN and jumbo frames (Petr Oros) [2137270 2106964]
- iavf: Fix bad page state (Petr Oros) [2137270 2106964]
- Revert "scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels" (Jarod Wilson)
- scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels (Tomas Henzl) [2139216]
- Revert "ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems" (Jarod Wilson)
- ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems (Wei Huang) [2142170 2130653]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.8.1.el8_7]" date="1669982400">- scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels (Tomas Henzl) [2139216 2134535]
- RDMA/mlx5: Set local port to one when accessing counters (Mohammad Kabat) [2141957 2077119]
- drm/mgag200: Fix PLL setup for G200_SE_A rev &gt;=4 (Jocelyn Falempe) [2140152 2130159]
- iavf: Do not restart Tx queues after reset task failure (Petr Oros) [2149081 2134005]
- iavf: Fix a crash during reset task (Petr Oros) [2149081 2134005]
- scsi: core: Allow the ALUA transitioning state enough time (Tomas Henzl) [2147374 2084250]
- scsi: core: Return BLK_STS_TRANSPORT for ALUA transitioning (Tomas Henzl) [2147374 2084250]
- i40e: Fix DMA mappings leak (Ivan Vecera) [2138205 2077847]
- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2142724 2142725] {CVE-2022-2964}
- net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2142724 2142725] {CVE-2022-2964}</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.9.1.el8_7]" date="1670587200">- Documentation/admin-guide: Document nomodeset kernel parameter (Jocelyn Falempe) [2145218 2143952]
- drm: Move nomodeset kernel parameter to the DRM subsystem (Jocelyn Falempe) [2145218 2143952]
- wait: Fix __wait_event_hrtimeout for RT/DL tasks (Derek Barbosa) [2138953 2125233]
- scsi: zfcp: Fix missing auto port scan and thus missing target ports (Tobias Huschle) [2127849 2121089]
- net: Fix return value of qdisc ingress handling on success (Ivan Vecera) [2141878 2131361]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.10.1.el8_7]" date="1671019200">- scsi: target: loop: Fix handling of aborted TMRs (Maurizio Lombardi) [2144583 2141713]
- ice: virtchnl rss hena support (Petr Oros) [2148130]
- ice: Fix configuring VIRTCHNL_OP_CONFIG_VSI_QUEUES with unbalanced queues (Michal Schmidt) [2142017 2137378]
- ice: Add support Flex RXD (Michal Schmidt) [2138157 2131310]
- netfilter: flowtable: fix stuck flows on cleanup due to pending work (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: add function to invoke garbage collection immediately (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: pass flowtable to nf_flow_table_iterate() (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: separate replace, destroy and stats to different workqueues (Phil Sutter) [2134084 2131370]
- x86/paravirt: Add a dummy __x86_paravirt_patch_template() function (Waiman Long) [2152206 2144161]
- x86/paravirt: Fix kABI breakage in struct pv_mmu_ops (Waiman Long) [2152206 2144161]
- drm/i915: fix TLB invalidation for Gen12 video and compute engines (Wander Lairson Costa) [2148149 2148150] {CVE-2022-4139}
- PCI: hv: Do not set PCI_COMMAND_MEMORY to reduce VM boot time (Emanuele Giuseppe Esposito) [2150912 2082836]
- iavf: Fix cached head and tail value for iavf_get_tx_pending (Stefan Assmann) [2149742 2103944]
- iavf: Fix change VF's mac address (Stefan Assmann) [2149742 2103944]
- iavf: Fix race between iavf_close and iavf_reset_task (Stefan Assmann) [2149742 2103944]
- net: ethernet: move from strlcpy with unused retval to strscpy (Stefan Assmann) [2149742 2103944]
- iavf: Fix 'tc qdisc show' listing too many queues (Stefan Assmann) [2149742 2103944]
- iavf: Fix max_rate limiting (Stefan Assmann) [2149742 2103944]
- iavf: Check for duplicate TC flower filter before parsing (Stefan Assmann) [2149742 2103944]
- iavf: Fix handling of dummy receive descriptors (Stefan Assmann) [2149742 2103944]
- iavf: Disallow changing rx/tx-frames and rx/tx-frames-irq (Stefan Assmann) [2149742 2103944]
- intel/iavf:fix repeated words in comments (Stefan Assmann) [2149742 2103944]
- intel: remove unused macros (Stefan Assmann) [2149742 2103944]
- iavf: Add waiting for response from PF in set mac (Stefan Assmann) [2149742 2103944]</changelog>
</package>
<package pkgid="95124e4e4ece1c97d720b2301996ee09031cc676ed32e3d8d8d168c365abcfb5" name="kernel-modules-extra" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="425.13.1.el8_7"/>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.4.1.el8]" date="1665144000">- random: allow reseeding DRBG with getrandom (Daiki Ueno) [2121766]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.5.1.el8_7]" date="1667476800">- ice: Fix interface being down after reset with link-down-on-close flag on (Petr Oros) [2136216 2024110]
- ice: Fix crash by keep old cfg when update TCs more than queues (Petr Oros) [2130992 2129902]
- ice: Fix tunnel checksum offload with fragmented traffic (Petr Oros) [2130992 2129902]
- ice: handle E822 generic device ID in PLDM header (Petr Oros) [2130992 2129902]
- ice: ethtool: Prohibit improper channel config for DCB (Petr Oros) [2130992 2129902]
- ice: ethtool: advertise 1000M speeds properly (Petr Oros) [2130992 2129902]
- ice: Fix switchdev rules book keeping (Petr Oros) [2130992 2129902]
- ice: fix access-beyond-end in the switch code (Petr Oros) [2130992 2129902]
- eth: ice: silence the GCC 12 array-bounds warning (Petr Oros) [2130992 2129902]
- ice: Expose RSS indirection tables for queue groups via ethtool (Petr Oros) [2130992 2129902]
- Revert "ice: Hide bus-info in ethtool for PRs in switchdev mode" (Petr Oros) [2130992 2129902]
- ice: remove period on argument description in ice_for_each_vf (Petr Oros) [2130992 2129902]
- ice: add a function comment for ice_cfg_mac_antispoof (Petr Oros) [2130992 2129902]
- ice: fix wording in comment for ice_reset_vf (Petr Oros) [2130992 2129902]
- ice: remove return value comment for ice_reset_all_vfs (Petr Oros) [2130992 2129902]
- ice: always check VF VSI pointer values (Petr Oros) [2130992 2129902]
- ice: add newline to dev_dbg in ice_vf_fdir_dump_info (Petr Oros) [2130992 2129902]
- ice: get switch id on switchdev devices (Petr Oros) [2130992 2129902]
- ice: return ENOSPC when exceeding ICE_MAX_CHAIN_WORDS (Petr Oros) [2130992 2129902]
- ice: introduce common helper for retrieving VSI by vsi_num (Petr Oros) [2130992 2129902]
- ice: use min_t() to make code cleaner in ice_gnss (Petr Oros) [2130992 2129902]
- ice: Add mpls+tso support (Petr Oros) [2130992 2129902]
- ice: switch: convert packet template match code to rodata (Petr Oros) [2130992 2129902]
- ice: switch: use convenience macros to declare dummy pkt templates (Petr Oros) [2130992 2129902]
- ice: switch: use a struct to pass packet template params (Petr Oros) [2130992 2129902]
- ice: switch: unobscurify bitops loop in ice_fill_adv_dummy_packet() (Petr Oros) [2130992 2129902]
- ice: switch: add and use u16[] aliases to ice_adv_lkup_elem::{h, m}_u (Petr Oros) [2130992 2129902]
- ice: Support GTP-U and GTP-C offload in switchdev (Petr Oros) [2130992 2129902]
- ice: Remove useless DMA-32 fallback configuration (Petr Oros) [2130992 2129902]
- ice: switch to napi_build_skb() (Petr Oros) [2130992 2129902]
- redhat: switch to z-stream dist tag and build targets (Jarod Wilson)
- block: avoid sign extend problem with default queue flags mask (Nico Pache) [2135813]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.6.1.el8_7]" date="1668168000">- ice: Add low latency Tx timestamp read (Petr Oros) [2136036 2092425]
- ice: introduce ice_ptp_reset_cached_phctime function (Petr Oros) [2136036 2092425]
- ice: re-arrange some static functions in ice_ptp.c (Petr Oros) [2136036 2092425]
- ice: track and warn when PHC update is late (Petr Oros) [2136036 2092425]
- ice: track Tx timestamp stats similar to other Intel drivers (Petr Oros) [2136036 2092425]
- ice: implement adjfine with mul_u64_u64_div_u64 (Petr Oros) [2136036 2092425]
- ice: Add EXTTS feature to the feature bitmap (Petr Oros) [2136036 2092425]
- math: Export mul_u64_u64_div_u64 (Petr Oros) [2136036 2092425]
- vfio/type1: Unpin zero pages (Alex Williamson) [2128515 2123015]
- net: atlantic: remove aq_nic_deinit() when resume (Íñigo Huguet) [2131935 2130839]
- net: atlantic: remove deep parameter on suspend/resume functions (Íñigo Huguet) [2131935 2130839]
- CI: Use zstream builder container (Veronika Kabatova)
- CI: Add disttag override for 8.7 (Veronika Kabatova)</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.7.1.el8_7]" date="1669723200">- ice: Add additional CSR registers to ETHTOOL_GREGS (Petr Oros) [2136513 2131024]
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps (Petr Oros) [2137270 2106964]
- i40e: Fix VF set max MTU size (Petr Oros) [2137270 2106964]
- iavf: Fix set max MTU size with port VLAN and jumbo frames (Petr Oros) [2137270 2106964]
- iavf: Fix bad page state (Petr Oros) [2137270 2106964]
- Revert "scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels" (Jarod Wilson)
- scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels (Tomas Henzl) [2139216]
- Revert "ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems" (Jarod Wilson)
- ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems (Wei Huang) [2142170 2130653]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.8.1.el8_7]" date="1669982400">- scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels (Tomas Henzl) [2139216 2134535]
- RDMA/mlx5: Set local port to one when accessing counters (Mohammad Kabat) [2141957 2077119]
- drm/mgag200: Fix PLL setup for G200_SE_A rev &gt;=4 (Jocelyn Falempe) [2140152 2130159]
- iavf: Do not restart Tx queues after reset task failure (Petr Oros) [2149081 2134005]
- iavf: Fix a crash during reset task (Petr Oros) [2149081 2134005]
- scsi: core: Allow the ALUA transitioning state enough time (Tomas Henzl) [2147374 2084250]
- scsi: core: Return BLK_STS_TRANSPORT for ALUA transitioning (Tomas Henzl) [2147374 2084250]
- i40e: Fix DMA mappings leak (Ivan Vecera) [2138205 2077847]
- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2142724 2142725] {CVE-2022-2964}
- net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2142724 2142725] {CVE-2022-2964}</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.9.1.el8_7]" date="1670587200">- Documentation/admin-guide: Document nomodeset kernel parameter (Jocelyn Falempe) [2145218 2143952]
- drm: Move nomodeset kernel parameter to the DRM subsystem (Jocelyn Falempe) [2145218 2143952]
- wait: Fix __wait_event_hrtimeout for RT/DL tasks (Derek Barbosa) [2138953 2125233]
- scsi: zfcp: Fix missing auto port scan and thus missing target ports (Tobias Huschle) [2127849 2121089]
- net: Fix return value of qdisc ingress handling on success (Ivan Vecera) [2141878 2131361]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.10.1.el8_7]" date="1671019200">- scsi: target: loop: Fix handling of aborted TMRs (Maurizio Lombardi) [2144583 2141713]
- ice: virtchnl rss hena support (Petr Oros) [2148130]
- ice: Fix configuring VIRTCHNL_OP_CONFIG_VSI_QUEUES with unbalanced queues (Michal Schmidt) [2142017 2137378]
- ice: Add support Flex RXD (Michal Schmidt) [2138157 2131310]
- netfilter: flowtable: fix stuck flows on cleanup due to pending work (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: add function to invoke garbage collection immediately (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: pass flowtable to nf_flow_table_iterate() (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: separate replace, destroy and stats to different workqueues (Phil Sutter) [2134084 2131370]
- x86/paravirt: Add a dummy __x86_paravirt_patch_template() function (Waiman Long) [2152206 2144161]
- x86/paravirt: Fix kABI breakage in struct pv_mmu_ops (Waiman Long) [2152206 2144161]
- drm/i915: fix TLB invalidation for Gen12 video and compute engines (Wander Lairson Costa) [2148149 2148150] {CVE-2022-4139}
- PCI: hv: Do not set PCI_COMMAND_MEMORY to reduce VM boot time (Emanuele Giuseppe Esposito) [2150912 2082836]
- iavf: Fix cached head and tail value for iavf_get_tx_pending (Stefan Assmann) [2149742 2103944]
- iavf: Fix change VF's mac address (Stefan Assmann) [2149742 2103944]
- iavf: Fix race between iavf_close and iavf_reset_task (Stefan Assmann) [2149742 2103944]
- net: ethernet: move from strlcpy with unused retval to strscpy (Stefan Assmann) [2149742 2103944]
- iavf: Fix 'tc qdisc show' listing too many queues (Stefan Assmann) [2149742 2103944]
- iavf: Fix max_rate limiting (Stefan Assmann) [2149742 2103944]
- iavf: Check for duplicate TC flower filter before parsing (Stefan Assmann) [2149742 2103944]
- iavf: Fix handling of dummy receive descriptors (Stefan Assmann) [2149742 2103944]
- iavf: Disallow changing rx/tx-frames and rx/tx-frames-irq (Stefan Assmann) [2149742 2103944]
- intel/iavf:fix repeated words in comments (Stefan Assmann) [2149742 2103944]
- intel: remove unused macros (Stefan Assmann) [2149742 2103944]
- iavf: Add waiting for response from PF in set mac (Stefan Assmann) [2149742 2103944]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.11.1.el8_7]" date="1673006400">- NFSD: Protect against send buffer overflow in NFSv3 READ (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv2 READ (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv3 READDIR (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv2 READDIR (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- SUNRPC: Fix svcxdr_init_encode's buflen calculation (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- SUNRPC: Fix svcxdr_init_decode's end-of-buffer calculation (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- panic, kexec: make __crash_kexec() NMI safe (Valentin Schneider) [2139580 2134126]
- kexec: turn all kexec_mutex acquisitions into trylocks (Valentin Schneider) [2139580 2134126]
- kexec: move locking into do_kexec_load (Valentin Schneider) [2139580 2134126]
- vdpa/mlx5: re-create forwarding rules after mac modified (Laurent Vivier) [2152912 2145136]
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry (Waiman Long) [2153653 2108387]
- irq: Call tick_irq_enter() inside HARDIRQ_OFFSET (Waiman Long) [2153653 2108387]
- irqtime: Move irqtime entry accounting after irq offset incrementation (Waiman Long) [2153653 2108387]
- sched/vtime: Consolidate IRQ time accounting (Waiman Long) [2153653 2108387]
- s390/vtime: Use the generic IRQ entry accounting (Waiman Long) [2153653 2108387]
- sched/cputime: Remove symbol exports from IRQ time accounting (Waiman Long) [2153653 2108387]
- genirq/irqdomain: Don't try to free an interrupt that has no mapping (Waiman Long) [2153653 2108387]
- genirq: Provide __irq_enter/exit_raw() (Waiman Long) [2153653 2108387]
- powerpc/time: Only set CONFIG_ARCH_HAS_SCALED_CPUTIME on PPC64 (Waiman Long) [2153653 2108387]
- powerpc/time: isolate scaled cputime accounting in dedicated functions. (Waiman Long) [2153653 2108387]
- PCI: hv: Fix synchronization between channel callback and hv_pci_bus_exit() (Mohammed Gamal) [2155280 2144708]
- PCI: hv: Fix synchronization between channel callback and hv_compose_msi_msg() (Mohammed Gamal) [2155280 2144708]
- PCI: hv: Use vmbus_requestor to generate transaction IDs for VMbus hardening (Mohammed Gamal) [2155280 2144708]
- net/mlx5e: TC, Reject forwarding from internal port to internal port (Mohammad Kabat) [2141959 2131345]
- hv_netvsc: Fix race between VF offering and VF association message from host (Mohammed Gamal) [2155272 2149279]
- x86/mce: Reduce number of machine checks taken during recovery (Prarit Bhargava) [2137592 2104388]
- cgroup/cpuset: Reduce cpuset_rwsem writer latency (Waiman Long) [2153108 2149031]
- rcu/exp: Mark current CPU as exp-QS in IPI loop second pass (Waiman Long) [2153108 2149031]
- rcu: Always inline rcu_dynticks_task*_{enter,exit}() (Waiman Long) [2153108 2149031]
- rcu: Fix existing exp request check in sync_sched_exp_online_cleanup() (Waiman Long) [2153108 2149031]
- rcu: Fix macro name CONFIG_TASKS_RCU_TRACE (Waiman Long) [2153108 2149031]
- rcu: Fix stall-warning deadlock due to non-release of rcu_node -&gt;lock (Waiman Long) [2153108 2149031]
- rcu: Fix to include first blocked task in stall warning (Waiman Long) [2153108 2149031]
- cgroup: Use cgroup_attach_{lock,unlock}() from cgroup_attach_task_all() (Waiman Long) [2153108 2149031]
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all() (Waiman Long) [2153108 2149031]
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock (Waiman Long) [2153108 2149031]
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree (Waiman Long) [2153108 2149031]
- cgroup/cpuset: Fix a race between cpuset_attach() and cpu hotplug (Waiman Long) [2153108 2149031]
- cgroup: reduce dependency on cgroup_mutex (Waiman Long) [2153108 2149031]
- sunrpc: Set sk_allocation to GFP_NOFS to avoid using current-&gt;task_frag. (Guillaume Nault) [2153230 2089660]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.12.1.el8_7]" date="1674129600">- x86/fpu: Prevent FPU state corruption (Oleksandr Natalenko) [2134586 2130890]
- x86/fpu: Drop fpregs lock before inheriting FPU permissions (Eder Zulian) [2154460 2153549]
- kernel-doc: fix undefined args variable (Jan Stancek) [2157905 2134954]
- mm: memcontrol: fix potential oom_lock recursion deadlock (Waiman Long) [2157922 2138886]
- memcg: prohibit unconditional exceeding the limit of dying tasks (Waiman Long) [2157922 2138886]
- mm, oom: do not trigger out_of_memory from the #PF (Waiman Long) [2157922 2138886]
- mm, oom: pagefault_out_of_memory: don't force global OOM for dying tasks (Waiman Long) [2157922 2138886]
- mm: memcontrol: don't count limit-setting reclaim as memory pressure (Waiman Long) [2157922 2138886]
- KVM: s390: vsie: Fix the initialization of the epoch extension (epdx) field (Thomas Huth) [2158813 2151854]
- net: mana: Fix race on per-CQ variable napi work_done (Emanuele Giuseppe Esposito) [2155437 2151722]
- mei: me: add adler lake point S DID (Prarit Bhargava) [2141783 2141602]
- PCI: hv: Only reuse existing IRTE allocation for Multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix the definition of vector in hv_compose_msi_msg() (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix interrupt mapping for multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Reuse existing IRTE allocation in compose_msi_msg() (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix hv_arch_irq_unmask() for multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix multi-MSI to allow more than one MSI vector (Emanuele Giuseppe Esposito) [2155289 2100275]
- drm/ast: Support multiple outputs (Jarod Wilson) [2149287 2147553]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.13.1.el8_7]" date="1675339200">- mm/cgroup/reclaim: fix dirty pages throttling on cgroup v1 (Waiman Long) [2160221]
- mm: vmscan: remove deadlock due to throttling failing to make progress (Waiman Long) [2160221]
- mm: vmscan: reduce throttling due to a failure to make progress -fix (Waiman Long) [2160221]
- mm: vmscan: Reduce throttling due to a failure to make progress (Waiman Long) [2160221]
- mm/vmscan: delay waking of tasks throttled on NOPROGRESS (Waiman Long) [2160221]
- mm/vmscan: increase the timeout if page reclaim is not making progress (Waiman Long) [2160221]
- mm/vmscan: centralise timeout values for reclaim_throttle (Waiman Long) [2160221]
- mm/page_alloc: remove the throttling logic from the page allocator (Waiman Long) [2160221]
- mm/writeback: throttle based on page writeback instead of congestion (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim when no progress is being made (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim and compaction when too may pages are isolated (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim until some writeback completes if congested (Waiman Long) [2160221]
- mm/vmscan.c: delete or fix duplicated words (Waiman Long) [2160221]
- mm,page_alloc: PF_WQ_WORKER threads must sleep at should_reclaim_retry() (Nico Pache) [2160221]
- ceph: avoid putting the realm twice when decoding snaps fails (Xiubo Li) [2155797 2139881]
- mm/mremap: hold the rmap lock in write mode when moving page table entries. (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: use pmd/pud_poplulate to update page table entries (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: don't enable optimized PUD move if page table levels is 2 (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: convert huge PUD move to separate helper (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: fix BUILD_BUG_ON() error in get_extent (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap.c: fix extent calculation (Waiman Long) [2140944] {CVE-2022-41222}
- x86: mremap speedup - Enable HAVE_MOVE_PUD (Waiman Long) [2140944] {CVE-2022-41222}
- mm: speedup mremap on 1GB or larger regions (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: start addresses are properly aligned (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: calculate extent in one place (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: it is sure to have enough space when extent meets requirement (Waiman Long) [2140944] {CVE-2022-41222}
- s390/boot: add secure boot trailer (Tobias Huschle) [2151530 2141967]
- i40e: Fix VF hang when reset is triggered on another VF (Ivan Vecera) [2160460 2103801]
- i2c: ismt: Fix an out-of-bounds bug in ismt_access() (Prarit Bhargava) [2154388 2119066] {CVE-2022-2873}
- iavf: schedule watchdog immediately when changing primary MAC (Michal Schmidt) [2163257 2152493]
- iavf: Move netdev_update_features() into watchdog task (Michal Schmidt) [2163257 2152493]
- iavf: fix temporary deadlock and failure to set MAC address (Michal Schmidt) [2163257 2152493]
- iavf: Fix error handling in iavf_init_module() (Michal Schmidt) [2163257 2152493]
- iommu/vt-d: Clean up si_domain in the init_dmars() error path (Jerry Snitselaar) [2149474 2118428]
- x86/pci/xen: Use msi_msg shadow structs (Jerry Snitselaar) [2149474 2118428]
- iommu/intel: Use msi_msg shadow structs (Jerry Snitselaar) [2149474 2118428]
- PCI: MSI: Fix Kconfig dependencies for PCI_MSI_ARCH_FALLBACKS (Jerry Snitselaar) [2149474 2118428]
- x86/apic/msi: Unbreak DMAR and HPET MSI (Jerry Snitselaar) [2149474 2118428]
- iommu/amd: Remove domain search for PCI/MSI (Jerry Snitselaar) [2149474 2118428]
- iommu/vt-d: Remove domain search for PCI/MSI[X] (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Make most MSI ops XEN private (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Cleanup the arch_*_msi_irqs() leftovers (Jerry Snitselaar) [2149474 2118428]
- PCI/MSI: Make arch_.*_msi_irq[s] fallbacks selectable (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Wrap XEN MSI management into irqdomain (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Consolidate XEN-MSI init (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Rework MSI teardown (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Make xen_msi_init() static and rename it to xen_hvm_msi_init() (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Move apic_post_init() invocation to one place (Jerry Snitselaar) [2149474 2118428]
- x86/msi: Use generic MSI domain ops (Jerry Snitselaar) [2149474 2118428]
- x86/msi: Remove pointless vcpu_affinity callback (Jerry Snitselaar) [2149474 2118428]
- iommu/vt-d: Fix compile error with CONFIG_PCI_ATS not set (Myron Stowe) [2149474 2118428]
- iommu/vt-d: Cure VF irqdomain hickup (Myron Stowe) [2149474 2118428]
- x86/pci: Set default irq domain in pcibios_add_device() (Myron Stowe) [2149474 2118428]
- iommm/amd: Store irq domain in struct device (Myron Stowe) [2149474 2118428]
- iommm/vt-d: Store irq domain in struct device (Myron Stowe) [2149474 2118428]
- PCI/MSI: Provide pci_dev_has_special_msi_domain() helper (Myron Stowe) [2149474 2118428]
- x86/msi: Consolidate MSI allocation (Myron Stowe) [2149474 2118428]
- PCI/MSI: Rework pci_msi_domain_calc_hwirq() (Myron Stowe) [2149474 2118428]
- x86/irq: Consolidate UV domain allocation (Myron Stowe) [2149474 2118428]
- x86/irq: Consolidate DMAR irq allocation (Myron Stowe) [2149474 2118428]
- x86_ioapic_Consolidate_IOAPIC_allocation (Myron Stowe) [2149474 2118428]
- x86/msi: Consolidate HPET allocation (Myron Stowe) [2149474 2118428]
- iommu/irq_remapping: Consolidate irq domain lookup (Myron Stowe) [2149474 2118428]
- iommu/amd: Consolidate irq domain getter (Myron Stowe) [2149474 2118428]
- iommu/vt-d: Consolidate irq domain getter (Myron Stowe) [2149474 2118428]
- x86/irq: Add allocation type for parent domain retrieval (Myron Stowe) [2149474 2118428]
- irqdomain: Export irq_domain_update_bus_token (Myron Stowe) [2149474 2118428]
- gitlab-ci: use CI templates from production branch (Michael Hofmann)
- iavf: remove INITIAL_MAC_SET to allow gARP to work properly (Stefan Assmann) [2149745 1938635]
- Revert "scsi: iscsi: ql4xxx: Use per-session workqueue for unbinding" (Chris Leech) [2152734 2122624]
- Revert "scsi: iscsi: Use the session workqueue for recovery" (Chris Leech) [2152734 2122624]
- arm64/bpf: Remove 128MB limit for BPF JIT programs (Yauheni Kaliuta) [2152138 2140163]
- bpf: Define bpf_jit_alloc_exec_limit for arm64 JIT (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: add `type` and `data` fields (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: use `ex` for `exception_table_entry` (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: make fixup_exception() return bool (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: consolidate definitions (Yauheni Kaliuta) [2152138 2140163]
- arm64: kvm: use kvm_exception_table_entry (Yauheni Kaliuta) [2152138 2140163]
- be2net: Fix buffer overflow in be_get_module_eeprom (Josef Oskera) [2160182 2126917]</changelog>
</package>
<package pkgid="18869d568abff4601f303753e27bb990b80c4f4b3de8586cac053ccc3158ee41" name="kernel-modules-extra" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="425.19.2.el8_7"/>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.11.1.el8_7]" date="1673006400">- NFSD: Protect against send buffer overflow in NFSv3 READ (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv2 READ (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv3 READDIR (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv2 READDIR (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- SUNRPC: Fix svcxdr_init_encode's buflen calculation (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- SUNRPC: Fix svcxdr_init_decode's end-of-buffer calculation (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- panic, kexec: make __crash_kexec() NMI safe (Valentin Schneider) [2139580 2134126]
- kexec: turn all kexec_mutex acquisitions into trylocks (Valentin Schneider) [2139580 2134126]
- kexec: move locking into do_kexec_load (Valentin Schneider) [2139580 2134126]
- vdpa/mlx5: re-create forwarding rules after mac modified (Laurent Vivier) [2152912 2145136]
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry (Waiman Long) [2153653 2108387]
- irq: Call tick_irq_enter() inside HARDIRQ_OFFSET (Waiman Long) [2153653 2108387]
- irqtime: Move irqtime entry accounting after irq offset incrementation (Waiman Long) [2153653 2108387]
- sched/vtime: Consolidate IRQ time accounting (Waiman Long) [2153653 2108387]
- s390/vtime: Use the generic IRQ entry accounting (Waiman Long) [2153653 2108387]
- sched/cputime: Remove symbol exports from IRQ time accounting (Waiman Long) [2153653 2108387]
- genirq/irqdomain: Don't try to free an interrupt that has no mapping (Waiman Long) [2153653 2108387]
- genirq: Provide __irq_enter/exit_raw() (Waiman Long) [2153653 2108387]
- powerpc/time: Only set CONFIG_ARCH_HAS_SCALED_CPUTIME on PPC64 (Waiman Long) [2153653 2108387]
- powerpc/time: isolate scaled cputime accounting in dedicated functions. (Waiman Long) [2153653 2108387]
- PCI: hv: Fix synchronization between channel callback and hv_pci_bus_exit() (Mohammed Gamal) [2155280 2144708]
- PCI: hv: Fix synchronization between channel callback and hv_compose_msi_msg() (Mohammed Gamal) [2155280 2144708]
- PCI: hv: Use vmbus_requestor to generate transaction IDs for VMbus hardening (Mohammed Gamal) [2155280 2144708]
- net/mlx5e: TC, Reject forwarding from internal port to internal port (Mohammad Kabat) [2141959 2131345]
- hv_netvsc: Fix race between VF offering and VF association message from host (Mohammed Gamal) [2155272 2149279]
- x86/mce: Reduce number of machine checks taken during recovery (Prarit Bhargava) [2137592 2104388]
- cgroup/cpuset: Reduce cpuset_rwsem writer latency (Waiman Long) [2153108 2149031]
- rcu/exp: Mark current CPU as exp-QS in IPI loop second pass (Waiman Long) [2153108 2149031]
- rcu: Always inline rcu_dynticks_task*_{enter,exit}() (Waiman Long) [2153108 2149031]
- rcu: Fix existing exp request check in sync_sched_exp_online_cleanup() (Waiman Long) [2153108 2149031]
- rcu: Fix macro name CONFIG_TASKS_RCU_TRACE (Waiman Long) [2153108 2149031]
- rcu: Fix stall-warning deadlock due to non-release of rcu_node -&gt;lock (Waiman Long) [2153108 2149031]
- rcu: Fix to include first blocked task in stall warning (Waiman Long) [2153108 2149031]
- cgroup: Use cgroup_attach_{lock,unlock}() from cgroup_attach_task_all() (Waiman Long) [2153108 2149031]
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all() (Waiman Long) [2153108 2149031]
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock (Waiman Long) [2153108 2149031]
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree (Waiman Long) [2153108 2149031]
- cgroup/cpuset: Fix a race between cpuset_attach() and cpu hotplug (Waiman Long) [2153108 2149031]
- cgroup: reduce dependency on cgroup_mutex (Waiman Long) [2153108 2149031]
- sunrpc: Set sk_allocation to GFP_NOFS to avoid using current-&gt;task_frag. (Guillaume Nault) [2153230 2089660]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.12.1.el8_7]" date="1674129600">- x86/fpu: Prevent FPU state corruption (Oleksandr Natalenko) [2134586 2130890]
- x86/fpu: Drop fpregs lock before inheriting FPU permissions (Eder Zulian) [2154460 2153549]
- kernel-doc: fix undefined args variable (Jan Stancek) [2157905 2134954]
- mm: memcontrol: fix potential oom_lock recursion deadlock (Waiman Long) [2157922 2138886]
- memcg: prohibit unconditional exceeding the limit of dying tasks (Waiman Long) [2157922 2138886]
- mm, oom: do not trigger out_of_memory from the #PF (Waiman Long) [2157922 2138886]
- mm, oom: pagefault_out_of_memory: don't force global OOM for dying tasks (Waiman Long) [2157922 2138886]
- mm: memcontrol: don't count limit-setting reclaim as memory pressure (Waiman Long) [2157922 2138886]
- KVM: s390: vsie: Fix the initialization of the epoch extension (epdx) field (Thomas Huth) [2158813 2151854]
- net: mana: Fix race on per-CQ variable napi work_done (Emanuele Giuseppe Esposito) [2155437 2151722]
- mei: me: add adler lake point S DID (Prarit Bhargava) [2141783 2141602]
- PCI: hv: Only reuse existing IRTE allocation for Multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix the definition of vector in hv_compose_msi_msg() (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix interrupt mapping for multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Reuse existing IRTE allocation in compose_msi_msg() (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix hv_arch_irq_unmask() for multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix multi-MSI to allow more than one MSI vector (Emanuele Giuseppe Esposito) [2155289 2100275]
- drm/ast: Support multiple outputs (Jarod Wilson) [2149287 2147553]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.13.1.el8_7]" date="1675339200">- mm/cgroup/reclaim: fix dirty pages throttling on cgroup v1 (Waiman Long) [2160221]
- mm: vmscan: remove deadlock due to throttling failing to make progress (Waiman Long) [2160221]
- mm: vmscan: reduce throttling due to a failure to make progress -fix (Waiman Long) [2160221]
- mm: vmscan: Reduce throttling due to a failure to make progress (Waiman Long) [2160221]
- mm/vmscan: delay waking of tasks throttled on NOPROGRESS (Waiman Long) [2160221]
- mm/vmscan: increase the timeout if page reclaim is not making progress (Waiman Long) [2160221]
- mm/vmscan: centralise timeout values for reclaim_throttle (Waiman Long) [2160221]
- mm/page_alloc: remove the throttling logic from the page allocator (Waiman Long) [2160221]
- mm/writeback: throttle based on page writeback instead of congestion (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim when no progress is being made (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim and compaction when too may pages are isolated (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim until some writeback completes if congested (Waiman Long) [2160221]
- mm/vmscan.c: delete or fix duplicated words (Waiman Long) [2160221]
- mm,page_alloc: PF_WQ_WORKER threads must sleep at should_reclaim_retry() (Nico Pache) [2160221]
- ceph: avoid putting the realm twice when decoding snaps fails (Xiubo Li) [2155797 2139881]
- mm/mremap: hold the rmap lock in write mode when moving page table entries. (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: use pmd/pud_poplulate to update page table entries (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: don't enable optimized PUD move if page table levels is 2 (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: convert huge PUD move to separate helper (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: fix BUILD_BUG_ON() error in get_extent (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap.c: fix extent calculation (Waiman Long) [2140944] {CVE-2022-41222}
- x86: mremap speedup - Enable HAVE_MOVE_PUD (Waiman Long) [2140944] {CVE-2022-41222}
- mm: speedup mremap on 1GB or larger regions (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: start addresses are properly aligned (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: calculate extent in one place (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: it is sure to have enough space when extent meets requirement (Waiman Long) [2140944] {CVE-2022-41222}
- s390/boot: add secure boot trailer (Tobias Huschle) [2151530 2141967]
- i40e: Fix VF hang when reset is triggered on another VF (Ivan Vecera) [2160460 2103801]
- i2c: ismt: Fix an out-of-bounds bug in ismt_access() (Prarit Bhargava) [2154388 2119066] {CVE-2022-2873}
- iavf: schedule watchdog immediately when changing primary MAC (Michal Schmidt) [2163257 2152493]
- iavf: Move netdev_update_features() into watchdog task (Michal Schmidt) [2163257 2152493]
- iavf: fix temporary deadlock and failure to set MAC address (Michal Schmidt) [2163257 2152493]
- iavf: Fix error handling in iavf_init_module() (Michal Schmidt) [2163257 2152493]
- iommu/vt-d: Clean up si_domain in the init_dmars() error path (Jerry Snitselaar) [2149474 2118428]
- x86/pci/xen: Use msi_msg shadow structs (Jerry Snitselaar) [2149474 2118428]
- iommu/intel: Use msi_msg shadow structs (Jerry Snitselaar) [2149474 2118428]
- PCI: MSI: Fix Kconfig dependencies for PCI_MSI_ARCH_FALLBACKS (Jerry Snitselaar) [2149474 2118428]
- x86/apic/msi: Unbreak DMAR and HPET MSI (Jerry Snitselaar) [2149474 2118428]
- iommu/amd: Remove domain search for PCI/MSI (Jerry Snitselaar) [2149474 2118428]
- iommu/vt-d: Remove domain search for PCI/MSI[X] (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Make most MSI ops XEN private (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Cleanup the arch_*_msi_irqs() leftovers (Jerry Snitselaar) [2149474 2118428]
- PCI/MSI: Make arch_.*_msi_irq[s] fallbacks selectable (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Wrap XEN MSI management into irqdomain (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Consolidate XEN-MSI init (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Rework MSI teardown (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Make xen_msi_init() static and rename it to xen_hvm_msi_init() (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Move apic_post_init() invocation to one place (Jerry Snitselaar) [2149474 2118428]
- x86/msi: Use generic MSI domain ops (Jerry Snitselaar) [2149474 2118428]
- x86/msi: Remove pointless vcpu_affinity callback (Jerry Snitselaar) [2149474 2118428]
- iommu/vt-d: Fix compile error with CONFIG_PCI_ATS not set (Myron Stowe) [2149474 2118428]
- iommu/vt-d: Cure VF irqdomain hickup (Myron Stowe) [2149474 2118428]
- x86/pci: Set default irq domain in pcibios_add_device() (Myron Stowe) [2149474 2118428]
- iommm/amd: Store irq domain in struct device (Myron Stowe) [2149474 2118428]
- iommm/vt-d: Store irq domain in struct device (Myron Stowe) [2149474 2118428]
- PCI/MSI: Provide pci_dev_has_special_msi_domain() helper (Myron Stowe) [2149474 2118428]
- x86/msi: Consolidate MSI allocation (Myron Stowe) [2149474 2118428]
- PCI/MSI: Rework pci_msi_domain_calc_hwirq() (Myron Stowe) [2149474 2118428]
- x86/irq: Consolidate UV domain allocation (Myron Stowe) [2149474 2118428]
- x86/irq: Consolidate DMAR irq allocation (Myron Stowe) [2149474 2118428]
- x86_ioapic_Consolidate_IOAPIC_allocation (Myron Stowe) [2149474 2118428]
- x86/msi: Consolidate HPET allocation (Myron Stowe) [2149474 2118428]
- iommu/irq_remapping: Consolidate irq domain lookup (Myron Stowe) [2149474 2118428]
- iommu/amd: Consolidate irq domain getter (Myron Stowe) [2149474 2118428]
- iommu/vt-d: Consolidate irq domain getter (Myron Stowe) [2149474 2118428]
- x86/irq: Add allocation type for parent domain retrieval (Myron Stowe) [2149474 2118428]
- irqdomain: Export irq_domain_update_bus_token (Myron Stowe) [2149474 2118428]
- gitlab-ci: use CI templates from production branch (Michael Hofmann)
- iavf: remove INITIAL_MAC_SET to allow gARP to work properly (Stefan Assmann) [2149745 1938635]
- Revert "scsi: iscsi: ql4xxx: Use per-session workqueue for unbinding" (Chris Leech) [2152734 2122624]
- Revert "scsi: iscsi: Use the session workqueue for recovery" (Chris Leech) [2152734 2122624]
- arm64/bpf: Remove 128MB limit for BPF JIT programs (Yauheni Kaliuta) [2152138 2140163]
- bpf: Define bpf_jit_alloc_exec_limit for arm64 JIT (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: add `type` and `data` fields (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: use `ex` for `exception_table_entry` (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: make fixup_exception() return bool (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: consolidate definitions (Yauheni Kaliuta) [2152138 2140163]
- arm64: kvm: use kvm_exception_table_entry (Yauheni Kaliuta) [2152138 2140163]
- be2net: Fix buffer overflow in be_get_module_eeprom (Josef Oskera) [2160182 2126917]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.14.1.el8_7]" date="1676030400">- ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems (Wei Huang) [2142170 2130653]
- KVM: x86: nSVM: implement nested LBR virtualization (Emanuele Giuseppe Esposito) [2166362 2155149]
- KVM: x86: nSVM: correctly virtualize LBR msrs when L2 is running (Emanuele Giuseppe Esposito) [2166362 2155149]
- kvm: x86: SVM: use vmcb* instead of svm-&gt;vmcb where it makes sense (Emanuele Giuseppe Esposito) [2166362 2155149]
- KVM: x86: nSVM: implement nested VMLOAD/VMSAVE (Emanuele Giuseppe Esposito) [2166362 2155149]
- IB/iser: Fix login with authentication (Kamal Heib) [2161750 2120676]
- act_mirred: use the backlog for nested calls to mirred ingress (Davide Caratti) [2164648 2131339] {CVE-2022-4269}
- net/sched: act_mirred: better wording on protection against excessive stack growth (Davide Caratti) [2164648 2131339] {CVE-2022-4269}
- redhat/configs: Set CONFIG_X86_AMD_PSTATE to 'm' (Prarit Bhargava) [2151275 2145246]
- KVM: x86: smm: preserve interrupt shadow in SMRAM (Maxim Levitsky) [2166368 2097144]
- KVM: x86: SVM: don't save SVM state to SMRAM when VM is not long mode capable (Maxim Levitsky) [2166368 2097144]
- KVM: x86: SVM: use smram structs (Maxim Levitsky) [2166368 2097144]
- KVM: svm: drop explicit return value of kvm_vcpu_map (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: use smram struct for 64 bit smram load/restore (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: use smram struct for 32 bit smram load/restore (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: use smram structs in the common code (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: add structs for KVM's smram layout (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: check for failures on smm entry (Maxim Levitsky) [2166368 2097144]
- KVM: x86: do not go through ctxt-&gt;ops when emulating rsm (Maxim Levitsky) [2166368 2097144]
- KVM: x86: move SMM exit to a new file (Maxim Levitsky) [2166368 2097144]
- KVM: x86: move SMM entry to a new file (Maxim Levitsky) [2166368 2097144]
- KVM: x86: start moving SMM-related functions to new files (Maxim Levitsky) [2166368 2097144]
- bug: introduce ASSERT_STRUCT_OFFSET (Maxim Levitsky) [2166368 2097144]
- KVM: x86: Rename and expose helper to detect if INIT/SIPI are allowed (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: number of GPRs in the SMRAM image depends on the image format (Maxim Levitsky) [2166368 2097144]
- KVM: x86: emulator: update the emulation mode after CR0 write (Maxim Levitsky) [2166368 2097144]
- KVM: x86: emulator: update the emulation mode after rsm (Maxim Levitsky) [2166368 2097144]
- KVM: x86: emulator: introduce emulator_recalc_and_set_mode (Maxim Levitsky) [2166368 2097144]
- KVM: x86: emulator: em_sysexit should update ctxt-&gt;mode (Maxim Levitsky) [2166368 2097144]
- KVM: x86: Bug the VM if the emulator accesses a non-existent GPR (Maxim Levitsky) [2166368 2097144]
- \KVM: x86: Reduce the number of emulator GPRs to '8' for 32-bit KVM (Maxim Levitsky) [2166368 2097144]
- KVM: x86: Use 16-bit fields to track dirty/valid emulator GPRs (Maxim Levitsky) [2166368 2097144]
- KVM: x86: Omit VCPU_REGS_RIP from emulator's _regs array (Maxim Levitsky) [2166368 2097144]
- \KVM: x86: Harden _regs accesses to guard against buggy input (Maxim Levitsky) [2166368 2097144]
- KVM: x86: Grab regs_dirty in local 'unsigned long' (Maxim Levitsky) [2166368 2097144]
- proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152571 2152572] {CVE-2022-4378}
- proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152571 2152572] {CVE-2022-4378}</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.15.1.el8_7]" date="1676548800">- net/mlx5e: Fix use-after-free when reverting termination table (Amir Tzin) [2167640 2112927]
- net/mlx5: Do not query pci info while pci disabled (Amir Tzin) [2167645 2129249]
- x86/fpu: Fix copy_xstate_to_uabi() to copy init states correctly (Dean Nelson) [2168384 2122850]
- x86/fpu: Exclude dynamic states from init_fpstate (Dean Nelson) [2168384 2122850]
- x86/fpu: Fix the init_fpstate size check with the actual size (Dean Nelson) [2168384 2122850]
- x86/fpu: Configure init_fpstate attributes orderly (Dean Nelson) [2168384 2122850]
- x86/fpu/xstate: Fix the ARCH_REQ_XCOMP_PERM implementation (Dean Nelson) [2168384 2122850]
- net/mlx5: E-Switch, properly handle ingress tagged packets on VST (Amir Tzin) [2166665 2096109]
- cpuhotplug: Fix KABI breakage (Prarit Bhargava) [2162763 2156529]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.16.1.el8_7]" date="1677153600">- ipv6: fix panic when fib_lookup_arg-&gt;result is fib6_info (Jiri Benc) [2167602 2140599]
- ceph: blocklist the kclient when receiving corrupted snap trace (Xiubo Li) [2168896 2162414]
- ceph: move mount state enum to super.h (Xiubo Li) [2168896 2162414]
- s390/kexec: fix ipl report address for kdump (Tobias Huschle) [2166296 2161328]
- mm, compaction: fix fast_isolate_around() to stay within boundaries (Daniel Vacek) [2170576 2149309]
- scsi: storvsc: Fix swiotlb bounce buffer leak in confidential VM (Emanuele Giuseppe Esposito) [2170228 2150659]
- netfilter: conntrack: handle tcp challenge acks during connection reuse (Florian Westphal) [2165587 2158726]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.17.1.el8_7]" date="1677844800">- net: mana: Add rmb after checking owner bits (Mohammed Gamal) [2173103 2139462]
- net: mana: Add support of XDP_REDIRECT action (Mohammed Gamal) [2173103 2139462]
- net: mana: Add the Linux MANA PF driver (Mohammed Gamal) [2173103 2139462]
- ice: fix lost multicast packets in promisc mode (Ken Cox) [2172550 2138215]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.18.0-425.18.1.el8_7]" date="1678449600">- futex: Resend potentially swallowed owner death notification (Rafael Aquini) [2170054 2161526]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.19.1.el8_7]" date="1678968000">- s390/dasd: fix no record found for raw_track_access (Tobias Huschle) [2167776 2161270]
- locking/rwsem: Disable preemption in all down_read*() and up_read() code paths (Waiman Long) [2170939 2162139]
- locking/rwsem: Prevent non-first waiter from spinning in down_write() slowpath (Waiman Long) [2170939 2162139]
- locking/rwsem: Allow slowpath writer to ignore handoff bit if not set by first waiter (Waiman Long) [2170939 2162139]
- locking/rwsem: Always try to wake waiters in out_nolock path (Waiman Long) [2170939 2162139]
- locking/rwsem: No need to check for handoff bit if wait queue empty (Waiman Long) [2170939 2162139]
- locking/rwsem: Make handoff bit handling more consistent (Waiman Long) [2170939 2162139]
- locking/rwsem: Disable preemption while trying for rwsem lock (Waiman Long) [2170939 2162139]
- locking/rwsem: Conditionally wake waiters in reader/writer slowpaths (Waiman Long) [2170939 2162139]
- locking: Make owner_on_cpu() into &lt;linux/sched.h&gt; (Waiman Long) [2170939 2162139]
- locking/rwsem: Optimize down_read_trylock() under highly contended case (Waiman Long) [2170939 2162139]
- locking/rwsem: Fix comments about reader optimistic lock stealing conditions (Waiman Long) [2170939 2162139]
- locking/rwsem: Disable preemption for spinning region (Waiman Long) [2170939 2162139]
- locking: Remove rcu_read_{,un}lock() for preempt_{dis,en}able() (Waiman Long) [2170939 2162139]
- watchdog: fix UAF in reboot notifier handling in watchdog core code (Wander Lairson Costa) [2139770 2131308]
- netfilter: nf_conntrack_irc: Tighten matching on DCC message (Wander Lairson Costa) [2139770 2131308]
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF (Jaroslav Kysela) [2163400 2163401] {CVE-2023-0266}
- net/mlx5e: Fix enabling sriov while tc nic rules are offloaded (Amir Tzin) [2167647 2112925]
- net/mlx5: E-Switch, pair only capable devices (Amir Tzin) [2167647 2112925]
- net/mlx5: Fix mlx5_get_next_dev() peer device matching (Amir Tzin) [2167647 2112925]
- net/mlx5: Lag, filter non compatible devices (Amir Tzin) [2167647 2112925]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.19.2.el8_7.gf5e8]" date="1678968001">- ovl: fail on invalid uid/gid mapping at copy up (Miklos Szeredi) [2165341 2165342] {CVE-2023-0386}</changelog>
</package>
<package pkgid="258b640bc15a4e3633705e6e79f6e3a36484efb1fad7c20ecb069ed3bbfd63ca" name="kernel-rt" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="425.10.1.rt7.220.el8_7"/>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.1.1.rt7.211.el8]" date="1663588800">- [rt] build kernel-rt-4.18.0-425.1.1.rt7.211.el8 [2067251]
- i40e: Fix kernel crash during module removal (Ivan Vecera) [2091489]
- redhat: enable zstream release numbering for rhel 8.7 (Jarod Wilson)
- ice: Allow operation with reduced device MSI-X (Petr Oros) [2102844]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.2.1.rt7.212.el8]" date="1664280000">- [rt] build kernel-rt-4.18.0-425.2.1.rt7.212.el8 [2067251]
- EDAC/ghes: Set the DIMM label unconditionally (Aristeu Rozanski) [2109712]
- configs: enable CONFIG_HP_ILO for aarch64 (Mark Salter) [2123508]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.3.1.rt7.213.el8]" date="1664539200">- [rt] build kernel-rt-4.18.0-425.3.1.rt7.213.el8 [2067251]
- iwlwifi: limit fw version for AC9560 to avoid fw crash (Íñigo Huguet) [2129297]
- sfc: fix null pointer dereference in efx_hard_start_xmit (Íñigo Huguet) [2119638]
- sfc: fix TX channel offset when using legacy interrupts (Íñigo Huguet) [2119638]
- netfilter: conntrack: reduce timeout when receiving out-of-window fin or rst (Florian Westphal) [2047366]
- netfilter: conntrack: remove unneeded indent level (Florian Westphal) [2047366]
- netfilter: conntrack: ignore overly delayed tcp packets (Florian Westphal) [2047366]
- netfilter: conntrack: prepare tcp_in_window for ternary return value (Florian Westphal) [2047366]
- netfilter: conntrack: remove pr_debug callsites from tcp tracker (Florian Westphal) [2047366]
- netfilter: conntrack: work around exceeded receive window (Florian Westphal) [2047366]
- netfilter: conntrack: improve RST handling when tuple is re-used (Florian Westphal) [2047366]
- netfilter: conntrack: avoid misleading 'invalid' in log message (Florian Westphal) [2047366]
- netfilter: remove BUG_ON() after skb_header_pointer() (Florian Westphal) [2047366]
- iavf: Detach device during reset task (Petr Oros) [2069206]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.4.1.rt7.214.el8]" date="1665144000">- [rt] build kernel-rt-4.18.0-425.4.1.rt7.214.el8 [2067251]
- random: allow reseeding DRBG with getrandom (Daiki Ueno) [2121766]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.5.1.rt7.215.el8_7]" date="1667822400">- [rt] build kernel-rt-4.18.0-425.5.1.rt7.215.el8_7 [2137411]
- ice: Fix interface being down after reset with link-down-on-close flag on (Petr Oros) [2136216 2024110]
- ice: Fix crash by keep old cfg when update TCs more than queues (Petr Oros) [2130992 2129902]
- ice: Fix tunnel checksum offload with fragmented traffic (Petr Oros) [2130992 2129902]
- ice: handle E822 generic device ID in PLDM header (Petr Oros) [2130992 2129902]
- ice: ethtool: Prohibit improper channel config for DCB (Petr Oros) [2130992 2129902]
- ice: ethtool: advertise 1000M speeds properly (Petr Oros) [2130992 2129902]
- ice: Fix switchdev rules book keeping (Petr Oros) [2130992 2129902]
- ice: fix access-beyond-end in the switch code (Petr Oros) [2130992 2129902]
- eth: ice: silence the GCC 12 array-bounds warning (Petr Oros) [2130992 2129902]
- ice: Expose RSS indirection tables for queue groups via ethtool (Petr Oros) [2130992 2129902]
- Revert "ice: Hide bus-info in ethtool for PRs in switchdev mode" (Petr Oros) [2130992 2129902]
- ice: remove period on argument description in ice_for_each_vf (Petr Oros) [2130992 2129902]
- ice: add a function comment for ice_cfg_mac_antispoof (Petr Oros) [2130992 2129902]
- ice: fix wording in comment for ice_reset_vf (Petr Oros) [2130992 2129902]
- ice: remove return value comment for ice_reset_all_vfs (Petr Oros) [2130992 2129902]
- ice: always check VF VSI pointer values (Petr Oros) [2130992 2129902]
- ice: add newline to dev_dbg in ice_vf_fdir_dump_info (Petr Oros) [2130992 2129902]
- ice: get switch id on switchdev devices (Petr Oros) [2130992 2129902]
- ice: return ENOSPC when exceeding ICE_MAX_CHAIN_WORDS (Petr Oros) [2130992 2129902]
- ice: introduce common helper for retrieving VSI by vsi_num (Petr Oros) [2130992 2129902]
- ice: use min_t() to make code cleaner in ice_gnss (Petr Oros) [2130992 2129902]
- ice: Add mpls+tso support (Petr Oros) [2130992 2129902]
- ice: switch: convert packet template match code to rodata (Petr Oros) [2130992 2129902]
- ice: switch: use convenience macros to declare dummy pkt templates (Petr Oros) [2130992 2129902]
- ice: switch: use a struct to pass packet template params (Petr Oros) [2130992 2129902]
- ice: switch: unobscurify bitops loop in ice_fill_adv_dummy_packet() (Petr Oros) [2130992 2129902]
- ice: switch: add and use u16[] aliases to ice_adv_lkup_elem::{h, m}_u (Petr Oros) [2130992 2129902]
- ice: Support GTP-U and GTP-C offload in switchdev (Petr Oros) [2130992 2129902]
- ice: Remove useless DMA-32 fallback configuration (Petr Oros) [2130992 2129902]
- ice: switch to napi_build_skb() (Petr Oros) [2130992 2129902]
- redhat: switch to z-stream dist tag and build targets (Jarod Wilson)
- block: avoid sign extend problem with default queue flags mask (Nico Pache) [2135813]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.6.1.rt7.216.el8_7]" date="1668168000">- [rt] build kernel-rt-4.18.0-425.6.1.rt7.216.el8_7 [2137411]
- ice: Add low latency Tx timestamp read (Petr Oros) [2136036 2092425]
- ice: introduce ice_ptp_reset_cached_phctime function (Petr Oros) [2136036 2092425]
- ice: re-arrange some static functions in ice_ptp.c (Petr Oros) [2136036 2092425]
- ice: track and warn when PHC update is late (Petr Oros) [2136036 2092425]
- ice: track Tx timestamp stats similar to other Intel drivers (Petr Oros) [2136036 2092425]
- ice: implement adjfine with mul_u64_u64_div_u64 (Petr Oros) [2136036 2092425]
- ice: Add EXTTS feature to the feature bitmap (Petr Oros) [2136036 2092425]
- math: Export mul_u64_u64_div_u64 (Petr Oros) [2136036 2092425]
- vfio/type1: Unpin zero pages (Alex Williamson) [2128515 2123015]
- net: atlantic: remove aq_nic_deinit() when resume (Íñigo Huguet) [2131935 2130839]
- net: atlantic: remove deep parameter on suspend/resume functions (Íñigo Huguet) [2131935 2130839]
- CI: Use zstream builder container (Veronika Kabatova)
- CI: Add disttag override for 8.7 (Veronika Kabatova)</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.7.1.rt7.217.el8_7]" date="1669723200">- [rt] build kernel-rt-4.18.0-425.7.1.rt7.217.el8_7 [2137411]
- ice: Add additional CSR registers to ETHTOOL_GREGS (Petr Oros) [2136513 2131024]
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps (Petr Oros) [2137270 2106964]
- i40e: Fix VF set max MTU size (Petr Oros) [2137270 2106964]
- iavf: Fix set max MTU size with port VLAN and jumbo frames (Petr Oros) [2137270 2106964]
- iavf: Fix bad page state (Petr Oros) [2137270 2106964]
- Revert "scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels" (Jarod Wilson)
- scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels (Tomas Henzl) [2139216]
- Revert "ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems" (Jarod Wilson)
- ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems (Wei Huang) [2142170 2130653]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.8.1.rt7.218.el8_7]" date="1669982400">- [rt] build kernel-rt-4.18.0-425.8.1.rt7.218.el8_7 [2137411]
- scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels (Tomas Henzl) [2139216 2134535]
- RDMA/mlx5: Set local port to one when accessing counters (Mohammad Kabat) [2141957 2077119]
- drm/mgag200: Fix PLL setup for G200_SE_A rev &gt;=4 (Jocelyn Falempe) [2140152 2130159]
- iavf: Do not restart Tx queues after reset task failure (Petr Oros) [2149081 2134005]
- iavf: Fix a crash during reset task (Petr Oros) [2149081 2134005]
- scsi: core: Allow the ALUA transitioning state enough time (Tomas Henzl) [2147374 2084250]
- scsi: core: Return BLK_STS_TRANSPORT for ALUA transitioning (Tomas Henzl) [2147374 2084250]
- i40e: Fix DMA mappings leak (Ivan Vecera) [2138205 2077847]
- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2142724 2142725] {CVE-2022-2964}
- net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2142724 2142725] {CVE-2022-2964}</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.9.1.rt7.219.el8_7]" date="1670587200">- [rt] build kernel-rt-4.18.0-425.9.1.rt7.219.el8_7 [2137411]
- Documentation/admin-guide: Document nomodeset kernel parameter (Jocelyn Falempe) [2145218 2143952]
- drm: Move nomodeset kernel parameter to the DRM subsystem (Jocelyn Falempe) [2145218 2143952]
- wait: Fix __wait_event_hrtimeout for RT/DL tasks (Derek Barbosa) [2138953 2125233]
- scsi: zfcp: Fix missing auto port scan and thus missing target ports (Tobias Huschle) [2127849 2121089]
- net: Fix return value of qdisc ingress handling on success (Ivan Vecera) [2141878 2131361]</changelog>
  <changelog author="Chris White &lt;chwhite@redhat.com&gt; [4.18.0-425.10.1.rt7.220.el8_7]" date="1671192000">- [rt] build kernel-rt-4.18.0-425.10.1.rt7.220.el8_7 [2137411]
- scsi: target: loop: Fix handling of aborted TMRs (Maurizio Lombardi) [2144583 2141713]
- ice: virtchnl rss hena support (Petr Oros) [2148130]
- ice: Fix configuring VIRTCHNL_OP_CONFIG_VSI_QUEUES with unbalanced queues (Michal Schmidt) [2142017 2137378]
- ice: Add support Flex RXD (Michal Schmidt) [2138157 2131310]
- netfilter: flowtable: fix stuck flows on cleanup due to pending work (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: add function to invoke garbage collection immediately (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: pass flowtable to nf_flow_table_iterate() (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: separate replace, destroy and stats to different workqueues (Phil Sutter) [2134084 2131370]
- x86/paravirt: Add a dummy __x86_paravirt_patch_template() function (Waiman Long) [2152206 2144161]
- x86/paravirt: Fix kABI breakage in struct pv_mmu_ops (Waiman Long) [2152206 2144161]
- drm/i915: fix TLB invalidation for Gen12 video and compute engines (Wander Lairson Costa) [2148162 2148163] {CVE-2022-4139}
- PCI: hv: Do not set PCI_COMMAND_MEMORY to reduce VM boot time (Emanuele Giuseppe Esposito) [2150912 2082836]
- iavf: Fix cached head and tail value for iavf_get_tx_pending (Stefan Assmann) [2149742 2103944]
- iavf: Fix change VF's mac address (Stefan Assmann) [2149742 2103944]
- iavf: Fix race between iavf_close and iavf_reset_task (Stefan Assmann) [2149742 2103944]
- net: ethernet: move from strlcpy with unused retval to strscpy (Stefan Assmann) [2149742 2103944]
- iavf: Fix 'tc qdisc show' listing too many queues (Stefan Assmann) [2149742 2103944]
- iavf: Fix max_rate limiting (Stefan Assmann) [2149742 2103944]
- iavf: Check for duplicate TC flower filter before parsing (Stefan Assmann) [2149742 2103944]
- iavf: Fix handling of dummy receive descriptors (Stefan Assmann) [2149742 2103944]
- iavf: Disallow changing rx/tx-frames and rx/tx-frames-irq (Stefan Assmann) [2149742 2103944]
- intel/iavf:fix repeated words in comments (Stefan Assmann) [2149742 2103944]
- intel: remove unused macros (Stefan Assmann) [2149742 2103944]
- iavf: Add waiting for response from PF in set mac (Stefan Assmann) [2149742 2103944]</changelog>
</package>
<package pkgid="e77dbaa582157b7b24618ef30faa8db6bc51b13b2970910f1ecec8cb7aef8d40" name="kernel-rt" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="425.13.1.rt7.223.el8_7"/>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.4.1.rt7.214.el8]" date="1665144000">- [rt] build kernel-rt-4.18.0-425.4.1.rt7.214.el8 [2067251]
- random: allow reseeding DRBG with getrandom (Daiki Ueno) [2121766]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.5.1.rt7.215.el8_7]" date="1667822400">- [rt] build kernel-rt-4.18.0-425.5.1.rt7.215.el8_7 [2137411]
- ice: Fix interface being down after reset with link-down-on-close flag on (Petr Oros) [2136216 2024110]
- ice: Fix crash by keep old cfg when update TCs more than queues (Petr Oros) [2130992 2129902]
- ice: Fix tunnel checksum offload with fragmented traffic (Petr Oros) [2130992 2129902]
- ice: handle E822 generic device ID in PLDM header (Petr Oros) [2130992 2129902]
- ice: ethtool: Prohibit improper channel config for DCB (Petr Oros) [2130992 2129902]
- ice: ethtool: advertise 1000M speeds properly (Petr Oros) [2130992 2129902]
- ice: Fix switchdev rules book keeping (Petr Oros) [2130992 2129902]
- ice: fix access-beyond-end in the switch code (Petr Oros) [2130992 2129902]
- eth: ice: silence the GCC 12 array-bounds warning (Petr Oros) [2130992 2129902]
- ice: Expose RSS indirection tables for queue groups via ethtool (Petr Oros) [2130992 2129902]
- Revert "ice: Hide bus-info in ethtool for PRs in switchdev mode" (Petr Oros) [2130992 2129902]
- ice: remove period on argument description in ice_for_each_vf (Petr Oros) [2130992 2129902]
- ice: add a function comment for ice_cfg_mac_antispoof (Petr Oros) [2130992 2129902]
- ice: fix wording in comment for ice_reset_vf (Petr Oros) [2130992 2129902]
- ice: remove return value comment for ice_reset_all_vfs (Petr Oros) [2130992 2129902]
- ice: always check VF VSI pointer values (Petr Oros) [2130992 2129902]
- ice: add newline to dev_dbg in ice_vf_fdir_dump_info (Petr Oros) [2130992 2129902]
- ice: get switch id on switchdev devices (Petr Oros) [2130992 2129902]
- ice: return ENOSPC when exceeding ICE_MAX_CHAIN_WORDS (Petr Oros) [2130992 2129902]
- ice: introduce common helper for retrieving VSI by vsi_num (Petr Oros) [2130992 2129902]
- ice: use min_t() to make code cleaner in ice_gnss (Petr Oros) [2130992 2129902]
- ice: Add mpls+tso support (Petr Oros) [2130992 2129902]
- ice: switch: convert packet template match code to rodata (Petr Oros) [2130992 2129902]
- ice: switch: use convenience macros to declare dummy pkt templates (Petr Oros) [2130992 2129902]
- ice: switch: use a struct to pass packet template params (Petr Oros) [2130992 2129902]
- ice: switch: unobscurify bitops loop in ice_fill_adv_dummy_packet() (Petr Oros) [2130992 2129902]
- ice: switch: add and use u16[] aliases to ice_adv_lkup_elem::{h, m}_u (Petr Oros) [2130992 2129902]
- ice: Support GTP-U and GTP-C offload in switchdev (Petr Oros) [2130992 2129902]
- ice: Remove useless DMA-32 fallback configuration (Petr Oros) [2130992 2129902]
- ice: switch to napi_build_skb() (Petr Oros) [2130992 2129902]
- redhat: switch to z-stream dist tag and build targets (Jarod Wilson)
- block: avoid sign extend problem with default queue flags mask (Nico Pache) [2135813]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.6.1.rt7.216.el8_7]" date="1668168000">- [rt] build kernel-rt-4.18.0-425.6.1.rt7.216.el8_7 [2137411]
- ice: Add low latency Tx timestamp read (Petr Oros) [2136036 2092425]
- ice: introduce ice_ptp_reset_cached_phctime function (Petr Oros) [2136036 2092425]
- ice: re-arrange some static functions in ice_ptp.c (Petr Oros) [2136036 2092425]
- ice: track and warn when PHC update is late (Petr Oros) [2136036 2092425]
- ice: track Tx timestamp stats similar to other Intel drivers (Petr Oros) [2136036 2092425]
- ice: implement adjfine with mul_u64_u64_div_u64 (Petr Oros) [2136036 2092425]
- ice: Add EXTTS feature to the feature bitmap (Petr Oros) [2136036 2092425]
- math: Export mul_u64_u64_div_u64 (Petr Oros) [2136036 2092425]
- vfio/type1: Unpin zero pages (Alex Williamson) [2128515 2123015]
- net: atlantic: remove aq_nic_deinit() when resume (Íñigo Huguet) [2131935 2130839]
- net: atlantic: remove deep parameter on suspend/resume functions (Íñigo Huguet) [2131935 2130839]
- CI: Use zstream builder container (Veronika Kabatova)
- CI: Add disttag override for 8.7 (Veronika Kabatova)</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.7.1.rt7.217.el8_7]" date="1669723200">- [rt] build kernel-rt-4.18.0-425.7.1.rt7.217.el8_7 [2137411]
- ice: Add additional CSR registers to ETHTOOL_GREGS (Petr Oros) [2136513 2131024]
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps (Petr Oros) [2137270 2106964]
- i40e: Fix VF set max MTU size (Petr Oros) [2137270 2106964]
- iavf: Fix set max MTU size with port VLAN and jumbo frames (Petr Oros) [2137270 2106964]
- iavf: Fix bad page state (Petr Oros) [2137270 2106964]
- Revert "scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels" (Jarod Wilson)
- scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels (Tomas Henzl) [2139216]
- Revert "ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems" (Jarod Wilson)
- ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems (Wei Huang) [2142170 2130653]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.8.1.rt7.218.el8_7]" date="1669982400">- [rt] build kernel-rt-4.18.0-425.8.1.rt7.218.el8_7 [2137411]
- scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels (Tomas Henzl) [2139216 2134535]
- RDMA/mlx5: Set local port to one when accessing counters (Mohammad Kabat) [2141957 2077119]
- drm/mgag200: Fix PLL setup for G200_SE_A rev &gt;=4 (Jocelyn Falempe) [2140152 2130159]
- iavf: Do not restart Tx queues after reset task failure (Petr Oros) [2149081 2134005]
- iavf: Fix a crash during reset task (Petr Oros) [2149081 2134005]
- scsi: core: Allow the ALUA transitioning state enough time (Tomas Henzl) [2147374 2084250]
- scsi: core: Return BLK_STS_TRANSPORT for ALUA transitioning (Tomas Henzl) [2147374 2084250]
- i40e: Fix DMA mappings leak (Ivan Vecera) [2138205 2077847]
- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2142724 2142725] {CVE-2022-2964}
- net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2142724 2142725] {CVE-2022-2964}</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.9.1.rt7.219.el8_7]" date="1670587200">- [rt] build kernel-rt-4.18.0-425.9.1.rt7.219.el8_7 [2137411]
- Documentation/admin-guide: Document nomodeset kernel parameter (Jocelyn Falempe) [2145218 2143952]
- drm: Move nomodeset kernel parameter to the DRM subsystem (Jocelyn Falempe) [2145218 2143952]
- wait: Fix __wait_event_hrtimeout for RT/DL tasks (Derek Barbosa) [2138953 2125233]
- scsi: zfcp: Fix missing auto port scan and thus missing target ports (Tobias Huschle) [2127849 2121089]
- net: Fix return value of qdisc ingress handling on success (Ivan Vecera) [2141878 2131361]</changelog>
  <changelog author="Chris White &lt;chwhite@redhat.com&gt; [4.18.0-425.10.1.rt7.220.el8_7]" date="1671192000">- [rt] build kernel-rt-4.18.0-425.10.1.rt7.220.el8_7 [2137411]
- scsi: target: loop: Fix handling of aborted TMRs (Maurizio Lombardi) [2144583 2141713]
- ice: virtchnl rss hena support (Petr Oros) [2148130]
- ice: Fix configuring VIRTCHNL_OP_CONFIG_VSI_QUEUES with unbalanced queues (Michal Schmidt) [2142017 2137378]
- ice: Add support Flex RXD (Michal Schmidt) [2138157 2131310]
- netfilter: flowtable: fix stuck flows on cleanup due to pending work (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: add function to invoke garbage collection immediately (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: pass flowtable to nf_flow_table_iterate() (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: separate replace, destroy and stats to different workqueues (Phil Sutter) [2134084 2131370]
- x86/paravirt: Add a dummy __x86_paravirt_patch_template() function (Waiman Long) [2152206 2144161]
- x86/paravirt: Fix kABI breakage in struct pv_mmu_ops (Waiman Long) [2152206 2144161]
- drm/i915: fix TLB invalidation for Gen12 video and compute engines (Wander Lairson Costa) [2148162 2148163] {CVE-2022-4139}
- PCI: hv: Do not set PCI_COMMAND_MEMORY to reduce VM boot time (Emanuele Giuseppe Esposito) [2150912 2082836]
- iavf: Fix cached head and tail value for iavf_get_tx_pending (Stefan Assmann) [2149742 2103944]
- iavf: Fix change VF's mac address (Stefan Assmann) [2149742 2103944]
- iavf: Fix race between iavf_close and iavf_reset_task (Stefan Assmann) [2149742 2103944]
- net: ethernet: move from strlcpy with unused retval to strscpy (Stefan Assmann) [2149742 2103944]
- iavf: Fix 'tc qdisc show' listing too many queues (Stefan Assmann) [2149742 2103944]
- iavf: Fix max_rate limiting (Stefan Assmann) [2149742 2103944]
- iavf: Check for duplicate TC flower filter before parsing (Stefan Assmann) [2149742 2103944]
- iavf: Fix handling of dummy receive descriptors (Stefan Assmann) [2149742 2103944]
- iavf: Disallow changing rx/tx-frames and rx/tx-frames-irq (Stefan Assmann) [2149742 2103944]
- intel/iavf:fix repeated words in comments (Stefan Assmann) [2149742 2103944]
- intel: remove unused macros (Stefan Assmann) [2149742 2103944]
- iavf: Add waiting for response from PF in set mac (Stefan Assmann) [2149742 2103944]</changelog>
  <changelog author="Chris White &lt;chwhite@redhat.com&gt; [4.18.0-425.11.1.rt7.221.el8_7]" date="1673352000">- [rt] build kernel-rt-4.18.0-425.11.1.rt7.221.el8_7 [2159806]
- NFSD: Protect against send buffer overflow in NFSv3 READ (Scott Mayhew) [2143174] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv2 READ (Scott Mayhew) [2143174] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv3 READDIR (Scott Mayhew) [2143174] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv2 READDIR (Scott Mayhew) [2143174] {CVE-2022-43945}
- SUNRPC: Fix svcxdr_init_encode's buflen calculation (Scott Mayhew) [2143174] {CVE-2022-43945}
- SUNRPC: Fix svcxdr_init_decode's end-of-buffer calculation (Scott Mayhew) [2143174] {CVE-2022-43945}
- panic, kexec: make __crash_kexec() NMI safe (Valentin Schneider) [2139580]
- kexec: turn all kexec_mutex acquisitions into trylocks (Valentin Schneider) [2139580]
- kexec: move locking into do_kexec_load (Valentin Schneider) [2139580]
- vdpa/mlx5: re-create forwarding rules after mac modified (Laurent Vivier) [2152912]
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry (Waiman Long) [2153653]
- irq: Call tick_irq_enter() inside HARDIRQ_OFFSET (Waiman Long) [2153653]
- irqtime: Move irqtime entry accounting after irq offset incrementation (Waiman Long) [2153653]
- sched/vtime: Consolidate IRQ time accounting (Waiman Long) [2153653]
- s390/vtime: Use the generic IRQ entry accounting (Waiman Long) [2153653]
- sched/cputime: Remove symbol exports from IRQ time accounting (Waiman Long) [2153653]
- genirq/irqdomain: Don't try to free an interrupt that has no mapping (Waiman Long) [2153653]
- genirq: Provide __irq_enter/exit_raw() (Waiman Long) [2153653]
- powerpc/time: Only set CONFIG_ARCH_HAS_SCALED_CPUTIME on PPC64 (Waiman Long) [2153653]
- powerpc/time: isolate scaled cputime accounting in dedicated functions. (Waiman Long) [2153653]
- PCI: hv: Fix synchronization between channel callback and hv_pci_bus_exit() (Mohammed Gamal) [2155280]
- PCI: hv: Fix synchronization between channel callback and hv_compose_msi_msg() (Mohammed Gamal) [2155280]
- PCI: hv: Use vmbus_requestor to generate transaction IDs for VMbus hardening (Mohammed Gamal) [2155280]
- net/mlx5e: TC, Reject forwarding from internal port to internal port (Mohammad Kabat) [2141959 2131345]
- hv_netvsc: Fix race between VF offering and VF association message from host (Mohammed Gamal) [2155272]
- x86/mce: Reduce number of machine checks taken during recovery (Prarit Bhargava) [2137592 2104388]
- cgroup/cpuset: Reduce cpuset_rwsem writer latency (Waiman Long) [2153108]
- rcu/exp: Mark current CPU as exp-QS in IPI loop second pass (Waiman Long) [2153108]
- rcu: Always inline rcu_dynticks_task*_{enter,exit}() (Waiman Long) [2153108]
- rcu: Fix existing exp request check in sync_sched_exp_online_cleanup() (Waiman Long) [2153108]
- rcu: Fix macro name CONFIG_TASKS_RCU_TRACE (Waiman Long) [2153108]
- rcu: Fix stall-warning deadlock due to non-release of rcu_node -&gt;lock (Waiman Long) [2153108]
- rcu: Fix to include first blocked task in stall warning (Waiman Long) [2153108]
- cgroup: Use cgroup_attach_{lock,unlock}() from cgroup_attach_task_all() (Waiman Long) [2153108]
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all() (Waiman Long) [2153108]
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock (Waiman Long) [2153108]
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree (Waiman Long) [2153108]
- cgroup/cpuset: Fix a race between cpuset_attach() and cpu hotplug (Waiman Long) [2153108]
- cgroup: reduce dependency on cgroup_mutex (Waiman Long) [2153108]
- sunrpc: Set sk_allocation to GFP_NOFS to avoid using current-&gt;task_frag. (Guillaume Nault) [2153230]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.12.1.rt7.222.el8_7]" date="1674129600">- [rt] build kernel-rt-4.18.0-425.12.1.rt7.222.el8_7 [2159806]
- x86/fpu: Prevent FPU state corruption (Oleksandr Natalenko) [2134586 2130890]
- x86/fpu: Drop fpregs lock before inheriting FPU permissions (Eder Zulian) [2154460 2153549]
- kernel-doc: fix undefined args variable (Jan Stancek) [2157905 2134954]
- mm: memcontrol: fix potential oom_lock recursion deadlock (Waiman Long) [2157922 2138886]
- memcg: prohibit unconditional exceeding the limit of dying tasks (Waiman Long) [2157922 2138886]
- mm, oom: do not trigger out_of_memory from the #PF (Waiman Long) [2157922 2138886]
- mm, oom: pagefault_out_of_memory: don't force global OOM for dying tasks (Waiman Long) [2157922 2138886]
- mm: memcontrol: don't count limit-setting reclaim as memory pressure (Waiman Long) [2157922 2138886]
- KVM: s390: vsie: Fix the initialization of the epoch extension (epdx) field (Thomas Huth) [2158813 2151854]
- net: mana: Fix race on per-CQ variable napi work_done (Emanuele Giuseppe Esposito) [2155437 2151722]
- mei: me: add adler lake point S DID (Prarit Bhargava) [2141783 2141602]
- PCI: hv: Only reuse existing IRTE allocation for Multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix the definition of vector in hv_compose_msi_msg() (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix interrupt mapping for multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Reuse existing IRTE allocation in compose_msi_msg() (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix hv_arch_irq_unmask() for multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix multi-MSI to allow more than one MSI vector (Emanuele Giuseppe Esposito) [2155289 2100275]
- drm/ast: Support multiple outputs (Jarod Wilson) [2149287 2147553]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.13.1.rt7.223.el8_7]" date="1675339200">- [rt] build kernel-rt-4.18.0-425.13.1.rt7.223.el8_7 [2159806]
- mm/cgroup/reclaim: fix dirty pages throttling on cgroup v1 (Waiman Long) [2160221]
- mm: vmscan: remove deadlock due to throttling failing to make progress (Waiman Long) [2160221]
- mm: vmscan: reduce throttling due to a failure to make progress -fix (Waiman Long) [2160221]
- mm: vmscan: Reduce throttling due to a failure to make progress (Waiman Long) [2160221]
- mm/vmscan: delay waking of tasks throttled on NOPROGRESS (Waiman Long) [2160221]
- mm/vmscan: increase the timeout if page reclaim is not making progress (Waiman Long) [2160221]
- mm/vmscan: centralise timeout values for reclaim_throttle (Waiman Long) [2160221]
- mm/page_alloc: remove the throttling logic from the page allocator (Waiman Long) [2160221]
- mm/writeback: throttle based on page writeback instead of congestion (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim when no progress is being made (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim and compaction when too may pages are isolated (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim until some writeback completes if congested (Waiman Long) [2160221]
- mm/vmscan.c: delete or fix duplicated words (Waiman Long) [2160221]
- mm,page_alloc: PF_WQ_WORKER threads must sleep at should_reclaim_retry() (Nico Pache) [2160221]
- ceph: avoid putting the realm twice when decoding snaps fails (Xiubo Li) [2155797 2139881]
- mm/mremap: hold the rmap lock in write mode when moving page table entries. (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap: use pmd/pud_poplulate to update page table entries (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap: don't enable optimized PUD move if page table levels is 2 (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap: convert huge PUD move to separate helper (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap: fix BUILD_BUG_ON() error in get_extent (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap.c: fix extent calculation (Waiman Long) [2140950] {CVE-2022-41222}
- x86: mremap speedup - Enable HAVE_MOVE_PUD (Waiman Long) [2140950] {CVE-2022-41222}
- mm: speedup mremap on 1GB or larger regions (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap: start addresses are properly aligned (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap: calculate extent in one place (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap: it is sure to have enough space when extent meets requirement (Waiman Long) [2140950] {CVE-2022-41222}
- s390/boot: add secure boot trailer (Tobias Huschle) [2151530 2141967]
- i40e: Fix VF hang when reset is triggered on another VF (Ivan Vecera) [2160460 2103801]
- i2c: ismt: Fix an out-of-bounds bug in ismt_access() (Prarit Bhargava) [2154388 2119066] {CVE-2022-2873}
- iavf: schedule watchdog immediately when changing primary MAC (Michal Schmidt) [2163257 2152493]
- iavf: Move netdev_update_features() into watchdog task (Michal Schmidt) [2163257 2152493]
- iavf: fix temporary deadlock and failure to set MAC address (Michal Schmidt) [2163257 2152493]
- iavf: Fix error handling in iavf_init_module() (Michal Schmidt) [2163257 2152493]
- iommu/vt-d: Clean up si_domain in the init_dmars() error path (Jerry Snitselaar) [2149474 2118428]
- x86/pci/xen: Use msi_msg shadow structs (Jerry Snitselaar) [2149474 2118428]
- iommu/intel: Use msi_msg shadow structs (Jerry Snitselaar) [2149474 2118428]
- PCI: MSI: Fix Kconfig dependencies for PCI_MSI_ARCH_FALLBACKS (Jerry Snitselaar) [2149474 2118428]
- x86/apic/msi: Unbreak DMAR and HPET MSI (Jerry Snitselaar) [2149474 2118428]
- iommu/amd: Remove domain search for PCI/MSI (Jerry Snitselaar) [2149474 2118428]
- iommu/vt-d: Remove domain search for PCI/MSI[X] (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Make most MSI ops XEN private (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Cleanup the arch_*_msi_irqs() leftovers (Jerry Snitselaar) [2149474 2118428]
- PCI/MSI: Make arch_.*_msi_irq[s] fallbacks selectable (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Wrap XEN MSI management into irqdomain (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Consolidate XEN-MSI init (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Rework MSI teardown (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Make xen_msi_init() static and rename it to xen_hvm_msi_init() (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Move apic_post_init() invocation to one place (Jerry Snitselaar) [2149474 2118428]
- x86/msi: Use generic MSI domain ops (Jerry Snitselaar) [2149474 2118428]
- x86/msi: Remove pointless vcpu_affinity callback (Jerry Snitselaar) [2149474 2118428]
- iommu/vt-d: Fix compile error with CONFIG_PCI_ATS not set (Myron Stowe) [2149474 2118428]
- iommu/vt-d: Cure VF irqdomain hickup (Myron Stowe) [2149474 2118428]
- x86/pci: Set default irq domain in pcibios_add_device() (Myron Stowe) [2149474 2118428]
- iommm/amd: Store irq domain in struct device (Myron Stowe) [2149474 2118428]
- iommm/vt-d: Store irq domain in struct device (Myron Stowe) [2149474 2118428]
- PCI/MSI: Provide pci_dev_has_special_msi_domain() helper (Myron Stowe) [2149474 2118428]
- x86/msi: Consolidate MSI allocation (Myron Stowe) [2149474 2118428]
- PCI/MSI: Rework pci_msi_domain_calc_hwirq() (Myron Stowe) [2149474 2118428]
- x86/irq: Consolidate UV domain allocation (Myron Stowe) [2149474 2118428]
- x86/irq: Consolidate DMAR irq allocation (Myron Stowe) [2149474 2118428]
- x86_ioapic_Consolidate_IOAPIC_allocation (Myron Stowe) [2149474 2118428]
- x86/msi: Consolidate HPET allocation (Myron Stowe) [2149474 2118428]
- iommu/irq_remapping: Consolidate irq domain lookup (Myron Stowe) [2149474 2118428]
- iommu/amd: Consolidate irq domain getter (Myron Stowe) [2149474 2118428]
- iommu/vt-d: Consolidate irq domain getter (Myron Stowe) [2149474 2118428]
- x86/irq: Add allocation type for parent domain retrieval (Myron Stowe) [2149474 2118428]
- irqdomain: Export irq_domain_update_bus_token (Myron Stowe) [2149474 2118428]
- gitlab-ci: use CI templates from production branch (Michael Hofmann)
- iavf: remove INITIAL_MAC_SET to allow gARP to work properly (Stefan Assmann) [2149745 1938635]
- Revert "scsi: iscsi: ql4xxx: Use per-session workqueue for unbinding" (Chris Leech) [2152734 2122624]
- Revert "scsi: iscsi: Use the session workqueue for recovery" (Chris Leech) [2152734 2122624]
- arm64/bpf: Remove 128MB limit for BPF JIT programs (Yauheni Kaliuta) [2152138 2140163]
- bpf: Define bpf_jit_alloc_exec_limit for arm64 JIT (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: add `type` and `data` fields (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: use `ex` for `exception_table_entry` (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: make fixup_exception() return bool (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: consolidate definitions (Yauheni Kaliuta) [2152138 2140163]
- arm64: kvm: use kvm_exception_table_entry (Yauheni Kaliuta) [2152138 2140163]
- be2net: Fix buffer overflow in be_get_module_eeprom (Josef Oskera) [2160182 2126917]
- sched: Switch to upstream migrate disable code (Crystal Wood) [2132062]
- tick: Fix timer storm since introduction of timersd (Valentin Schneider) [2127204]
- softirq: Use a dedicated thread for timer wakeups. (Valentin Schneider) [2127204]</changelog>
</package>
<package pkgid="bfcec7c0dbce0dae6ce0e5a708a24d7288b48e1d19e69f2856b6e83135166eda" name="kernel-rt" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="425.19.2.rt7.230.el8_7"/>
  <changelog author="Chris White &lt;chwhite@redhat.com&gt; [4.18.0-425.11.1.rt7.221.el8_7]" date="1673352000">- [rt] build kernel-rt-4.18.0-425.11.1.rt7.221.el8_7 [2159806]
- NFSD: Protect against send buffer overflow in NFSv3 READ (Scott Mayhew) [2143174] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv2 READ (Scott Mayhew) [2143174] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv3 READDIR (Scott Mayhew) [2143174] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv2 READDIR (Scott Mayhew) [2143174] {CVE-2022-43945}
- SUNRPC: Fix svcxdr_init_encode's buflen calculation (Scott Mayhew) [2143174] {CVE-2022-43945}
- SUNRPC: Fix svcxdr_init_decode's end-of-buffer calculation (Scott Mayhew) [2143174] {CVE-2022-43945}
- panic, kexec: make __crash_kexec() NMI safe (Valentin Schneider) [2139851]
- kexec: turn all kexec_mutex acquisitions into trylocks (Valentin Schneider) [2139580]
- kexec: move locking into do_kexec_load (Valentin Schneider) [2139580]
- vdpa/mlx5: re-create forwarding rules after mac modified (Laurent Vivier) [2152912]
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry (Waiman Long) [2153653]
- irq: Call tick_irq_enter() inside HARDIRQ_OFFSET (Waiman Long) [2153653]
- irqtime: Move irqtime entry accounting after irq offset incrementation (Waiman Long) [2153653]
- sched/vtime: Consolidate IRQ time accounting (Waiman Long) [2153653]
- s390/vtime: Use the generic IRQ entry accounting (Waiman Long) [2153653]
- sched/cputime: Remove symbol exports from IRQ time accounting (Waiman Long) [2153653]
- genirq/irqdomain: Don't try to free an interrupt that has no mapping (Waiman Long) [2153653]
- genirq: Provide __irq_enter/exit_raw() (Waiman Long) [2153653]
- powerpc/time: Only set CONFIG_ARCH_HAS_SCALED_CPUTIME on PPC64 (Waiman Long) [2153653]
- powerpc/time: isolate scaled cputime accounting in dedicated functions. (Waiman Long) [2153653]
- PCI: hv: Fix synchronization between channel callback and hv_pci_bus_exit() (Mohammed Gamal) [2155280]
- PCI: hv: Fix synchronization between channel callback and hv_compose_msi_msg() (Mohammed Gamal) [2155280]
- PCI: hv: Use vmbus_requestor to generate transaction IDs for VMbus hardening (Mohammed Gamal) [2155280]
- net/mlx5e: TC, Reject forwarding from internal port to internal port (Mohammad Kabat) [2141959 2131345]
- hv_netvsc: Fix race between VF offering and VF association message from host (Mohammed Gamal) [2155272]
- x86/mce: Reduce number of machine checks taken during recovery (Prarit Bhargava) [2137592 2104388]
- cgroup/cpuset: Reduce cpuset_rwsem writer latency (Waiman Long) [2153108]
- rcu/exp: Mark current CPU as exp-QS in IPI loop second pass (Waiman Long) [2153108]
- rcu: Always inline rcu_dynticks_task*_{enter,exit}() (Waiman Long) [2153108]
- rcu: Fix existing exp request check in sync_sched_exp_online_cleanup() (Waiman Long) [2153108]
- rcu: Fix macro name CONFIG_TASKS_RCU_TRACE (Waiman Long) [2153108]
- rcu: Fix stall-warning deadlock due to non-release of rcu_node -&gt;lock (Waiman Long) [2153108]
- rcu: Fix to include first blocked task in stall warning (Waiman Long) [2153108]
- cgroup: Use cgroup_attach_{lock,unlock}() from cgroup_attach_task_all() (Waiman Long) [2153108]
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all() (Waiman Long) [2153108]
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock (Waiman Long) [2153108]
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree (Waiman Long) [2153108]
- cgroup/cpuset: Fix a race between cpuset_attach() and cpu hotplug (Waiman Long) [2153108]
- cgroup: reduce dependency on cgroup_mutex (Waiman Long) [2153108]
- sunrpc: Set sk_allocation to GFP_NOFS to avoid using current-&gt;task_frag. (Guillaume Nault) [2153230]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.12.1.rt7.222.el8_7]" date="1674129600">- [rt] build kernel-rt-4.18.0-425.12.1.rt7.222.el8_7 [2159806]
- x86/fpu: Prevent FPU state corruption (Oleksandr Natalenko) [2134586 2130890]
- x86/fpu: Drop fpregs lock before inheriting FPU permissions (Eder Zulian) [2154469 2153549]
- kernel-doc: fix undefined args variable (Jan Stancek) [2157905 2134954]
- mm: memcontrol: fix potential oom_lock recursion deadlock (Waiman Long) [2157922 2138886]
- memcg: prohibit unconditional exceeding the limit of dying tasks (Waiman Long) [2157922 2138886]
- mm, oom: do not trigger out_of_memory from the #PF (Waiman Long) [2157922 2138886]
- mm, oom: pagefault_out_of_memory: don't force global OOM for dying tasks (Waiman Long) [2157922 2138886]
- mm: memcontrol: don't count limit-setting reclaim as memory pressure (Waiman Long) [2157922 2138886]
- KVM: s390: vsie: Fix the initialization of the epoch extension (epdx) field (Thomas Huth) [2158813 2151854]
- net: mana: Fix race on per-CQ variable napi work_done (Emanuele Giuseppe Esposito) [2155437 2151722]
- mei: me: add adler lake point S DID (Prarit Bhargava) [2141783 2141602]
- PCI: hv: Only reuse existing IRTE allocation for Multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix the definition of vector in hv_compose_msi_msg() (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix interrupt mapping for multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Reuse existing IRTE allocation in compose_msi_msg() (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix hv_arch_irq_unmask() for multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix multi-MSI to allow more than one MSI vector (Emanuele Giuseppe Esposito) [2155289 2100275]
- drm/ast: Support multiple outputs (Jarod Wilson) [2149287 2147553]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.13.1.rt7.223.el8_7]" date="1675339200">- [rt] build kernel-rt-4.18.0-425.13.1.rt7.223.el8_7 [2159806]
- mm/cgroup/reclaim: fix dirty pages throttling on cgroup v1 (Waiman Long) [2160221]
- mm: vmscan: remove deadlock due to throttling failing to make progress (Waiman Long) [2160221]
- mm: vmscan: reduce throttling due to a failure to make progress -fix (Waiman Long) [2160221]
- mm: vmscan: Reduce throttling due to a failure to make progress (Waiman Long) [2160221]
- mm/vmscan: delay waking of tasks throttled on NOPROGRESS (Waiman Long) [2160221]
- mm/vmscan: increase the timeout if page reclaim is not making progress (Waiman Long) [2160221]
- mm/vmscan: centralise timeout values for reclaim_throttle (Waiman Long) [2160221]
- mm/page_alloc: remove the throttling logic from the page allocator (Waiman Long) [2160221]
- mm/writeback: throttle based on page writeback instead of congestion (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim when no progress is being made (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim and compaction when too may pages are isolated (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim until some writeback completes if congested (Waiman Long) [2160221]
- mm/vmscan.c: delete or fix duplicated words (Waiman Long) [2160221]
- mm,page_alloc: PF_WQ_WORKER threads must sleep at should_reclaim_retry() (Nico Pache) [2160221]
- ceph: avoid putting the realm twice when decoding snaps fails (Xiubo Li) [2155797 2139881]
- mm/mremap: hold the rmap lock in write mode when moving page table entries. (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap: use pmd/pud_poplulate to update page table entries (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap: don't enable optimized PUD move if page table levels is 2 (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap: convert huge PUD move to separate helper (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap: fix BUILD_BUG_ON() error in get_extent (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap.c: fix extent calculation (Waiman Long) [2140950] {CVE-2022-41222}
- x86: mremap speedup - Enable HAVE_MOVE_PUD (Waiman Long) [2140950] {CVE-2022-41222}
- mm: speedup mremap on 1GB or larger regions (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap: start addresses are properly aligned (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap: calculate extent in one place (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap: it is sure to have enough space when extent meets requirement (Waiman Long) [2140950] {CVE-2022-41222}
- s390/boot: add secure boot trailer (Tobias Huschle) [2151530 2141967]
- i40e: Fix VF hang when reset is triggered on another VF (Ivan Vecera) [2160460 2103801]
- i2c: ismt: Fix an out-of-bounds bug in ismt_access() (Prarit Bhargava) [2154388 2119066] {CVE-2022-2873}
- iavf: schedule watchdog immediately when changing primary MAC (Michal Schmidt) [2163257 2152493]
- iavf: Move netdev_update_features() into watchdog task (Michal Schmidt) [2163257 2152493]
- iavf: fix temporary deadlock and failure to set MAC address (Michal Schmidt) [2163257 2152493]
- iavf: Fix error handling in iavf_init_module() (Michal Schmidt) [2163257 2152493]
- iommu/vt-d: Clean up si_domain in the init_dmars() error path (Jerry Snitselaar) [2149474 2118428]
- x86/pci/xen: Use msi_msg shadow structs (Jerry Snitselaar) [2149474 2118428]
- iommu/intel: Use msi_msg shadow structs (Jerry Snitselaar) [2149474 2118428]
- PCI: MSI: Fix Kconfig dependencies for PCI_MSI_ARCH_FALLBACKS (Jerry Snitselaar) [2149474 2118428]
- x86/apic/msi: Unbreak DMAR and HPET MSI (Jerry Snitselaar) [2149474 2118428]
- iommu/amd: Remove domain search for PCI/MSI (Jerry Snitselaar) [2149474 2118428]
- iommu/vt-d: Remove domain search for PCI/MSI[X] (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Make most MSI ops XEN private (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Cleanup the arch_*_msi_irqs() leftovers (Jerry Snitselaar) [2149474 2118428]
- PCI/MSI: Make arch_.*_msi_irq[s] fallbacks selectable (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Wrap XEN MSI management into irqdomain (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Consolidate XEN-MSI init (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Rework MSI teardown (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Make xen_msi_init() static and rename it to xen_hvm_msi_init() (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Move apic_post_init() invocation to one place (Jerry Snitselaar) [2149474 2118428]
- x86/msi: Use generic MSI domain ops (Jerry Snitselaar) [2149474 2118428]
- x86/msi: Remove pointless vcpu_affinity callback (Jerry Snitselaar) [2149474 2118428]
- iommu/vt-d: Fix compile error with CONFIG_PCI_ATS not set (Myron Stowe) [2149474 2118428]
- iommu/vt-d: Cure VF irqdomain hickup (Myron Stowe) [2149474 2118428]
- x86/pci: Set default irq domain in pcibios_add_device() (Myron Stowe) [2149474 2118428]
- iommm/amd: Store irq domain in struct device (Myron Stowe) [2149474 2118428]
- iommm/vt-d: Store irq domain in struct device (Myron Stowe) [2149474 2118428]
- PCI/MSI: Provide pci_dev_has_special_msi_domain() helper (Myron Stowe) [2149474 2118428]
- x86/msi: Consolidate MSI allocation (Myron Stowe) [2149474 2118428]
- PCI/MSI: Rework pci_msi_domain_calc_hwirq() (Myron Stowe) [2149474 2118428]
- x86/irq: Consolidate UV domain allocation (Myron Stowe) [2149474 2118428]
- x86/irq: Consolidate DMAR irq allocation (Myron Stowe) [2149474 2118428]
- x86_ioapic_Consolidate_IOAPIC_allocation (Myron Stowe) [2149474 2118428]
- x86/msi: Consolidate HPET allocation (Myron Stowe) [2149474 2118428]
- iommu/irq_remapping: Consolidate irq domain lookup (Myron Stowe) [2149474 2118428]
- iommu/amd: Consolidate irq domain getter (Myron Stowe) [2149474 2118428]
- iommu/vt-d: Consolidate irq domain getter (Myron Stowe) [2149474 2118428]
- x86/irq: Add allocation type for parent domain retrieval (Myron Stowe) [2149474 2118428]
- irqdomain: Export irq_domain_update_bus_token (Myron Stowe) [2149474 2118428]
- gitlab-ci: use CI templates from production branch (Michael Hofmann)
- iavf: remove INITIAL_MAC_SET to allow gARP to work properly (Stefan Assmann) [2149745 1938635]
- Revert "scsi: iscsi: ql4xxx: Use per-session workqueue for unbinding" (Chris Leech) [2152734 2122624]
- Revert "scsi: iscsi: Use the session workqueue for recovery" (Chris Leech) [2152734 2122624]
- arm64/bpf: Remove 128MB limit for BPF JIT programs (Yauheni Kaliuta) [2152138 2140163]
- bpf: Define bpf_jit_alloc_exec_limit for arm64 JIT (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: add `type` and `data` fields (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: use `ex` for `exception_table_entry` (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: make fixup_exception() return bool (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: consolidate definitions (Yauheni Kaliuta) [2152138 2140163]
- arm64: kvm: use kvm_exception_table_entry (Yauheni Kaliuta) [2152138 2140163]
- be2net: Fix buffer overflow in be_get_module_eeprom (Josef Oskera) [2160182 2126917]
- sched: Switch to upstream migrate disable code (Crystal Wood) [2132062]
- tick: Fix timer storm since introduction of timersd (Valentin Schneider) [2127204]
- softirq: Use a dedicated thread for timer wakeups. (Valentin Schneider) [2127204]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.14.1.rt7.224.el8_7]" date="1676030400">- [rt] build kernel-rt-4.18.0-425.14.1.rt7.224.el8_7 [2172278]
- ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems (Wei Huang) [2142170 2130653]
- KVM: x86: nSVM: implement nested LBR virtualization (Emanuele Giuseppe Esposito) [2166362 2155149]
- KVM: x86: nSVM: correctly virtualize LBR msrs when L2 is running (Emanuele Giuseppe Esposito) [2166362 2155149]
- kvm: x86: SVM: use vmcb* instead of svm-&gt;vmcb where it makes sense (Emanuele Giuseppe Esposito) [2166362 2155149]
- KVM: x86: nSVM: implement nested VMLOAD/VMSAVE (Emanuele Giuseppe Esposito) [2166362 2155149]
- IB/iser: Fix login with authentication (Kamal Heib) [2161750 2120676]
- act_mirred: use the backlog for nested calls to mirred ingress (Davide Caratti) [2164648 2131339] {CVE-2022-4269}
- net/sched: act_mirred: better wording on protection against excessive stack growth (Davide Caratti) [2164648 2131339] {CVE-2022-4269}
- redhat/configs: Set CONFIG_X86_AMD_PSTATE to 'm' (Prarit Bhargava) [2151275 2145246]
- KVM: x86: smm: preserve interrupt shadow in SMRAM (Maxim Levitsky) [2166368 2097144]
- KVM: x86: SVM: don't save SVM state to SMRAM when VM is not long mode capable (Maxim Levitsky) [2166368 2097144]
- KVM: x86: SVM: use smram structs (Maxim Levitsky) [2166368 2097144]
- KVM: svm: drop explicit return value of kvm_vcpu_map (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: use smram struct for 64 bit smram load/restore (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: use smram struct for 32 bit smram load/restore (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: use smram structs in the common code (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: add structs for KVM's smram layout (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: check for failures on smm entry (Maxim Levitsky) [2166368 2097144]
- KVM: x86: do not go through ctxt-&gt;ops when emulating rsm (Maxim Levitsky) [2166368 2097144]
- KVM: x86: move SMM exit to a new file (Maxim Levitsky) [2166368 2097144]
- KVM: x86: move SMM entry to a new file (Maxim Levitsky) [2166368 2097144]
- KVM: x86: start moving SMM-related functions to new files (Maxim Levitsky) [2166368 2097144]
- bug: introduce ASSERT_STRUCT_OFFSET (Maxim Levitsky) [2166368 2097144]
- KVM: x86: Rename and expose helper to detect if INIT/SIPI are allowed (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: number of GPRs in the SMRAM image depends on the image format (Maxim Levitsky) [2166368 2097144]
- KVM: x86: emulator: update the emulation mode after CR0 write (Maxim Levitsky) [2166368 2097144]
- KVM: x86: emulator: update the emulation mode after rsm (Maxim Levitsky) [2166368 2097144]
- KVM: x86: emulator: introduce emulator_recalc_and_set_mode (Maxim Levitsky) [2166368 2097144]
- KVM: x86: emulator: em_sysexit should update ctxt-&gt;mode (Maxim Levitsky) [2166368 2097144]
- KVM: x86: Bug the VM if the emulator accesses a non-existent GPR (Maxim Levitsky) [2166368 2097144]
- \KVM: x86: Reduce the number of emulator GPRs to '8' for 32-bit KVM (Maxim Levitsky) [2166368 2097144]
- KVM: x86: Use 16-bit fields to track dirty/valid emulator GPRs (Maxim Levitsky) [2166368 2097144]
- KVM: x86: Omit VCPU_REGS_RIP from emulator's _regs array (Maxim Levitsky) [2166368 2097144]
- \KVM: x86: Harden _regs accesses to guard against buggy input (Maxim Levitsky) [2166368 2097144]
- KVM: x86: Grab regs_dirty in local 'unsigned long' (Maxim Levitsky) [2166368 2097144]
- proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152577 2152578] {CVE-2022-4378}
- proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152577 2152578] {CVE-2022-4378}</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.15.1.rt7.225.el8_7]" date="1676548800">- [rt] build kernel-rt-4.18.0-425.15.1.rt7.225.el8_7 [2172278]
- net/mlx5e: Fix use-after-free when reverting termination table (Amir Tzin) [2167640 2112927]
- net/mlx5: Do not query pci info while pci disabled (Amir Tzin) [2167645 2129249]
- x86/fpu: Fix copy_xstate_to_uabi() to copy init states correctly (Dean Nelson) [2168384 2122850]
- x86/fpu: Exclude dynamic states from init_fpstate (Dean Nelson) [2168384 2122850]
- x86/fpu: Fix the init_fpstate size check with the actual size (Dean Nelson) [2168384 2122850]
- x86/fpu: Configure init_fpstate attributes orderly (Dean Nelson) [2168384 2122850]
- x86/fpu/xstate: Fix the ARCH_REQ_XCOMP_PERM implementation (Dean Nelson) [2168384 2122850]
- net/mlx5: E-Switch, properly handle ingress tagged packets on VST (Amir Tzin) [2166665 2096109]
- cpuhotplug: Fix KABI breakage (Prarit Bhargava) [2162763 2156529]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.16.1.rt7.226.el8_7]" date="1677153600">- [rt] build kernel-rt-4.18.0-425.16.1.rt7.226.el8_7 [2172278]
- ipv6: fix panic when fib_lookup_arg-&gt;result is fib6_info (Jiri Benc) [2167602 2140599]
- ceph: blocklist the kclient when receiving corrupted snap trace (Xiubo Li) [2168896 2162414]
- ceph: move mount state enum to super.h (Xiubo Li) [2168896 2162414]
- s390/kexec: fix ipl report address for kdump (Tobias Huschle) [2166296 2161328]
- mm, compaction: fix fast_isolate_around() to stay within boundaries (Daniel Vacek) [2170576 2149309]
- scsi: storvsc: Fix swiotlb bounce buffer leak in confidential VM (Emanuele Giuseppe Esposito) [2170228 2150659]
- netfilter: conntrack: handle tcp challenge acks during connection reuse (Florian Westphal) [2165587 2158726]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.17.1.rt7.227.el8_7]" date="1677844800">- [rt] build kernel-rt-4.18.0-425.17.1.rt7.227.el8_7 [2172278]
- net: mana: Add rmb after checking owner bits (Mohammed Gamal) [2173103 2139462]
- net: mana: Add support of XDP_REDIRECT action (Mohammed Gamal) [2173103 2139462]
- net: mana: Add the Linux MANA PF driver (Mohammed Gamal) [2173103 2139462]
- ice: fix lost multicast packets in promisc mode (Ken Cox) [2172550 2138215]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.18.1.rt7.228.el8_7]" date="1678708800">- [rt] build kernel-rt-4.18.0-425.18.1.rt7.228.el8_7 [2172278]
- futex: Resend potentially swallowed owner death notification (Rafael Aquini) [2170054]
- irq_work: Move lazy work execution to dedicated irq_work kthreads (Valentin Schneider) [2172163]
- irq_work: Sync the patches (Valentin Schneider) [2172163]
- irq_work: Also rcuwait for !IRQ_WORK_HARD_IRQ on PREEMPT_RT (Valentin Schneider) [2172163]
- irq_work: Allow irq_work_sync() to sleep if irq_work() no IRQ support. (Valentin Schneider) [2172163]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.19.1.rt7.229.el8_7]" date="1678968000">- [rt] build kernel-rt-4.18.0-425.19.1.rt7.229.el8_7 [2172278]
- s390/dasd: fix no record found for raw_track_access (Tobias Huschle) [2167776 2161270]
- locking/rwsem: Disable preemption in all down_read*() and up_read() code paths (Waiman Long) [2170939 2162139]
- locking/rwsem: Prevent non-first waiter from spinning in down_write() slowpath (Waiman Long) [2170939 2162139]
- locking/rwsem: Allow slowpath writer to ignore handoff bit if not set by first waiter (Waiman Long) [2170939 2162139]
- locking/rwsem: Always try to wake waiters in out_nolock path (Waiman Long) [2170939 2162139]
- locking/rwsem: No need to check for handoff bit if wait queue empty (Waiman Long) [2170939 2162139]
- locking/rwsem: Make handoff bit handling more consistent (Waiman Long) [2170939 2162139]
- locking/rwsem: Disable preemption while trying for rwsem lock (Waiman Long) [2170939 2162139]
- locking/rwsem: Conditionally wake waiters in reader/writer slowpaths (Waiman Long) [2170939 2162139]
- locking: Make owner_on_cpu() into &lt;linux/sched.h&gt; (Waiman Long) [2170939 2162139]
- locking/rwsem: Optimize down_read_trylock() under highly contended case (Waiman Long) [2170939 2162139]
- locking/rwsem: Fix comments about reader optimistic lock stealing conditions (Waiman Long) [2170939 2162139]
- locking/rwsem: Disable preemption for spinning region (Waiman Long) [2170939 2162139]
- locking: Remove rcu_read_{,un}lock() for preempt_{dis,en}able() (Waiman Long) [2170939 2162139]
- watchdog: fix UAF in reboot notifier handling in watchdog core code (Wander Lairson Costa) [2139770 2131308]
- netfilter: nf_conntrack_irc: Tighten matching on DCC message (Wander Lairson Costa) [2139770 2131308]
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF (Jaroslav Kysela) [2163405 2163406] {CVE-2023-0266}
- net/mlx5e: Fix enabling sriov while tc nic rules are offloaded (Amir Tzin) [2167647 2112925]
- net/mlx5: E-Switch, pair only capable devices (Amir Tzin) [2167647 2112925]
- net/mlx5: Fix mlx5_get_next_dev() peer device matching (Amir Tzin) [2167647 2112925]
- net/mlx5: Lag, filter non compatible devices (Amir Tzin) [2167647 2112925]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.19.2.rt7.230.el8_7]" date="1679054400">- [rt] build kernel-rt-4.18.0-425.19.2.rt7.230.el8_7.geb93 [2172278]
- ovl: fail on invalid uid/gid mapping at copy up (Miklos Szeredi) [2165341 2165342] {CVE-2023-0386}</changelog>
</package>
<package pkgid="93e4d872250d92d9b846e1c266f3b098326e8f11f2d17f0d920f4e7fd37900aa" name="kernel-rt-core" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="425.10.1.rt7.220.el8_7"/>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.1.1.rt7.211.el8]" date="1663588800">- [rt] build kernel-rt-4.18.0-425.1.1.rt7.211.el8 [2067251]
- i40e: Fix kernel crash during module removal (Ivan Vecera) [2091489]
- redhat: enable zstream release numbering for rhel 8.7 (Jarod Wilson)
- ice: Allow operation with reduced device MSI-X (Petr Oros) [2102844]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.2.1.rt7.212.el8]" date="1664280000">- [rt] build kernel-rt-4.18.0-425.2.1.rt7.212.el8 [2067251]
- EDAC/ghes: Set the DIMM label unconditionally (Aristeu Rozanski) [2109712]
- configs: enable CONFIG_HP_ILO for aarch64 (Mark Salter) [2123508]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.3.1.rt7.213.el8]" date="1664539200">- [rt] build kernel-rt-4.18.0-425.3.1.rt7.213.el8 [2067251]
- iwlwifi: limit fw version for AC9560 to avoid fw crash (Íñigo Huguet) [2129297]
- sfc: fix null pointer dereference in efx_hard_start_xmit (Íñigo Huguet) [2119638]
- sfc: fix TX channel offset when using legacy interrupts (Íñigo Huguet) [2119638]
- netfilter: conntrack: reduce timeout when receiving out-of-window fin or rst (Florian Westphal) [2047366]
- netfilter: conntrack: remove unneeded indent level (Florian Westphal) [2047366]
- netfilter: conntrack: ignore overly delayed tcp packets (Florian Westphal) [2047366]
- netfilter: conntrack: prepare tcp_in_window for ternary return value (Florian Westphal) [2047366]
- netfilter: conntrack: remove pr_debug callsites from tcp tracker (Florian Westphal) [2047366]
- netfilter: conntrack: work around exceeded receive window (Florian Westphal) [2047366]
- netfilter: conntrack: improve RST handling when tuple is re-used (Florian Westphal) [2047366]
- netfilter: conntrack: avoid misleading 'invalid' in log message (Florian Westphal) [2047366]
- netfilter: remove BUG_ON() after skb_header_pointer() (Florian Westphal) [2047366]
- iavf: Detach device during reset task (Petr Oros) [2069206]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.4.1.rt7.214.el8]" date="1665144000">- [rt] build kernel-rt-4.18.0-425.4.1.rt7.214.el8 [2067251]
- random: allow reseeding DRBG with getrandom (Daiki Ueno) [2121766]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.5.1.rt7.215.el8_7]" date="1667822400">- [rt] build kernel-rt-4.18.0-425.5.1.rt7.215.el8_7 [2137411]
- ice: Fix interface being down after reset with link-down-on-close flag on (Petr Oros) [2136216 2024110]
- ice: Fix crash by keep old cfg when update TCs more than queues (Petr Oros) [2130992 2129902]
- ice: Fix tunnel checksum offload with fragmented traffic (Petr Oros) [2130992 2129902]
- ice: handle E822 generic device ID in PLDM header (Petr Oros) [2130992 2129902]
- ice: ethtool: Prohibit improper channel config for DCB (Petr Oros) [2130992 2129902]
- ice: ethtool: advertise 1000M speeds properly (Petr Oros) [2130992 2129902]
- ice: Fix switchdev rules book keeping (Petr Oros) [2130992 2129902]
- ice: fix access-beyond-end in the switch code (Petr Oros) [2130992 2129902]
- eth: ice: silence the GCC 12 array-bounds warning (Petr Oros) [2130992 2129902]
- ice: Expose RSS indirection tables for queue groups via ethtool (Petr Oros) [2130992 2129902]
- Revert "ice: Hide bus-info in ethtool for PRs in switchdev mode" (Petr Oros) [2130992 2129902]
- ice: remove period on argument description in ice_for_each_vf (Petr Oros) [2130992 2129902]
- ice: add a function comment for ice_cfg_mac_antispoof (Petr Oros) [2130992 2129902]
- ice: fix wording in comment for ice_reset_vf (Petr Oros) [2130992 2129902]
- ice: remove return value comment for ice_reset_all_vfs (Petr Oros) [2130992 2129902]
- ice: always check VF VSI pointer values (Petr Oros) [2130992 2129902]
- ice: add newline to dev_dbg in ice_vf_fdir_dump_info (Petr Oros) [2130992 2129902]
- ice: get switch id on switchdev devices (Petr Oros) [2130992 2129902]
- ice: return ENOSPC when exceeding ICE_MAX_CHAIN_WORDS (Petr Oros) [2130992 2129902]
- ice: introduce common helper for retrieving VSI by vsi_num (Petr Oros) [2130992 2129902]
- ice: use min_t() to make code cleaner in ice_gnss (Petr Oros) [2130992 2129902]
- ice: Add mpls+tso support (Petr Oros) [2130992 2129902]
- ice: switch: convert packet template match code to rodata (Petr Oros) [2130992 2129902]
- ice: switch: use convenience macros to declare dummy pkt templates (Petr Oros) [2130992 2129902]
- ice: switch: use a struct to pass packet template params (Petr Oros) [2130992 2129902]
- ice: switch: unobscurify bitops loop in ice_fill_adv_dummy_packet() (Petr Oros) [2130992 2129902]
- ice: switch: add and use u16[] aliases to ice_adv_lkup_elem::{h, m}_u (Petr Oros) [2130992 2129902]
- ice: Support GTP-U and GTP-C offload in switchdev (Petr Oros) [2130992 2129902]
- ice: Remove useless DMA-32 fallback configuration (Petr Oros) [2130992 2129902]
- ice: switch to napi_build_skb() (Petr Oros) [2130992 2129902]
- redhat: switch to z-stream dist tag and build targets (Jarod Wilson)
- block: avoid sign extend problem with default queue flags mask (Nico Pache) [2135813]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.6.1.rt7.216.el8_7]" date="1668168000">- [rt] build kernel-rt-4.18.0-425.6.1.rt7.216.el8_7 [2137411]
- ice: Add low latency Tx timestamp read (Petr Oros) [2136036 2092425]
- ice: introduce ice_ptp_reset_cached_phctime function (Petr Oros) [2136036 2092425]
- ice: re-arrange some static functions in ice_ptp.c (Petr Oros) [2136036 2092425]
- ice: track and warn when PHC update is late (Petr Oros) [2136036 2092425]
- ice: track Tx timestamp stats similar to other Intel drivers (Petr Oros) [2136036 2092425]
- ice: implement adjfine with mul_u64_u64_div_u64 (Petr Oros) [2136036 2092425]
- ice: Add EXTTS feature to the feature bitmap (Petr Oros) [2136036 2092425]
- math: Export mul_u64_u64_div_u64 (Petr Oros) [2136036 2092425]
- vfio/type1: Unpin zero pages (Alex Williamson) [2128515 2123015]
- net: atlantic: remove aq_nic_deinit() when resume (Íñigo Huguet) [2131935 2130839]
- net: atlantic: remove deep parameter on suspend/resume functions (Íñigo Huguet) [2131935 2130839]
- CI: Use zstream builder container (Veronika Kabatova)
- CI: Add disttag override for 8.7 (Veronika Kabatova)</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.7.1.rt7.217.el8_7]" date="1669723200">- [rt] build kernel-rt-4.18.0-425.7.1.rt7.217.el8_7 [2137411]
- ice: Add additional CSR registers to ETHTOOL_GREGS (Petr Oros) [2136513 2131024]
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps (Petr Oros) [2137270 2106964]
- i40e: Fix VF set max MTU size (Petr Oros) [2137270 2106964]
- iavf: Fix set max MTU size with port VLAN and jumbo frames (Petr Oros) [2137270 2106964]
- iavf: Fix bad page state (Petr Oros) [2137270 2106964]
- Revert "scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels" (Jarod Wilson)
- scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels (Tomas Henzl) [2139216]
- Revert "ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems" (Jarod Wilson)
- ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems (Wei Huang) [2142170 2130653]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.8.1.rt7.218.el8_7]" date="1669982400">- [rt] build kernel-rt-4.18.0-425.8.1.rt7.218.el8_7 [2137411]
- scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels (Tomas Henzl) [2139216 2134535]
- RDMA/mlx5: Set local port to one when accessing counters (Mohammad Kabat) [2141957 2077119]
- drm/mgag200: Fix PLL setup for G200_SE_A rev &gt;=4 (Jocelyn Falempe) [2140152 2130159]
- iavf: Do not restart Tx queues after reset task failure (Petr Oros) [2149081 2134005]
- iavf: Fix a crash during reset task (Petr Oros) [2149081 2134005]
- scsi: core: Allow the ALUA transitioning state enough time (Tomas Henzl) [2147374 2084250]
- scsi: core: Return BLK_STS_TRANSPORT for ALUA transitioning (Tomas Henzl) [2147374 2084250]
- i40e: Fix DMA mappings leak (Ivan Vecera) [2138205 2077847]
- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2142724 2142725] {CVE-2022-2964}
- net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2142724 2142725] {CVE-2022-2964}</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.9.1.rt7.219.el8_7]" date="1670587200">- [rt] build kernel-rt-4.18.0-425.9.1.rt7.219.el8_7 [2137411]
- Documentation/admin-guide: Document nomodeset kernel parameter (Jocelyn Falempe) [2145218 2143952]
- drm: Move nomodeset kernel parameter to the DRM subsystem (Jocelyn Falempe) [2145218 2143952]
- wait: Fix __wait_event_hrtimeout for RT/DL tasks (Derek Barbosa) [2138953 2125233]
- scsi: zfcp: Fix missing auto port scan and thus missing target ports (Tobias Huschle) [2127849 2121089]
- net: Fix return value of qdisc ingress handling on success (Ivan Vecera) [2141878 2131361]</changelog>
  <changelog author="Chris White &lt;chwhite@redhat.com&gt; [4.18.0-425.10.1.rt7.220.el8_7]" date="1671192000">- [rt] build kernel-rt-4.18.0-425.10.1.rt7.220.el8_7 [2137411]
- scsi: target: loop: Fix handling of aborted TMRs (Maurizio Lombardi) [2144583 2141713]
- ice: virtchnl rss hena support (Petr Oros) [2148130]
- ice: Fix configuring VIRTCHNL_OP_CONFIG_VSI_QUEUES with unbalanced queues (Michal Schmidt) [2142017 2137378]
- ice: Add support Flex RXD (Michal Schmidt) [2138157 2131310]
- netfilter: flowtable: fix stuck flows on cleanup due to pending work (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: add function to invoke garbage collection immediately (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: pass flowtable to nf_flow_table_iterate() (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: separate replace, destroy and stats to different workqueues (Phil Sutter) [2134084 2131370]
- x86/paravirt: Add a dummy __x86_paravirt_patch_template() function (Waiman Long) [2152206 2144161]
- x86/paravirt: Fix kABI breakage in struct pv_mmu_ops (Waiman Long) [2152206 2144161]
- drm/i915: fix TLB invalidation for Gen12 video and compute engines (Wander Lairson Costa) [2148162 2148163] {CVE-2022-4139}
- PCI: hv: Do not set PCI_COMMAND_MEMORY to reduce VM boot time (Emanuele Giuseppe Esposito) [2150912 2082836]
- iavf: Fix cached head and tail value for iavf_get_tx_pending (Stefan Assmann) [2149742 2103944]
- iavf: Fix change VF's mac address (Stefan Assmann) [2149742 2103944]
- iavf: Fix race between iavf_close and iavf_reset_task (Stefan Assmann) [2149742 2103944]
- net: ethernet: move from strlcpy with unused retval to strscpy (Stefan Assmann) [2149742 2103944]
- iavf: Fix 'tc qdisc show' listing too many queues (Stefan Assmann) [2149742 2103944]
- iavf: Fix max_rate limiting (Stefan Assmann) [2149742 2103944]
- iavf: Check for duplicate TC flower filter before parsing (Stefan Assmann) [2149742 2103944]
- iavf: Fix handling of dummy receive descriptors (Stefan Assmann) [2149742 2103944]
- iavf: Disallow changing rx/tx-frames and rx/tx-frames-irq (Stefan Assmann) [2149742 2103944]
- intel/iavf:fix repeated words in comments (Stefan Assmann) [2149742 2103944]
- intel: remove unused macros (Stefan Assmann) [2149742 2103944]
- iavf: Add waiting for response from PF in set mac (Stefan Assmann) [2149742 2103944]</changelog>
</package>
<package pkgid="cdf94f700b2f61d74eac6abf472fc4019a62ad19cb76b3518925ce1f1731fa5d" name="kernel-rt-core" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="425.13.1.rt7.223.el8_7"/>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.4.1.rt7.214.el8]" date="1665144000">- [rt] build kernel-rt-4.18.0-425.4.1.rt7.214.el8 [2067251]
- random: allow reseeding DRBG with getrandom (Daiki Ueno) [2121766]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.5.1.rt7.215.el8_7]" date="1667822400">- [rt] build kernel-rt-4.18.0-425.5.1.rt7.215.el8_7 [2137411]
- ice: Fix interface being down after reset with link-down-on-close flag on (Petr Oros) [2136216 2024110]
- ice: Fix crash by keep old cfg when update TCs more than queues (Petr Oros) [2130992 2129902]
- ice: Fix tunnel checksum offload with fragmented traffic (Petr Oros) [2130992 2129902]
- ice: handle E822 generic device ID in PLDM header (Petr Oros) [2130992 2129902]
- ice: ethtool: Prohibit improper channel config for DCB (Petr Oros) [2130992 2129902]
- ice: ethtool: advertise 1000M speeds properly (Petr Oros) [2130992 2129902]
- ice: Fix switchdev rules book keeping (Petr Oros) [2130992 2129902]
- ice: fix access-beyond-end in the switch code (Petr Oros) [2130992 2129902]
- eth: ice: silence the GCC 12 array-bounds warning (Petr Oros) [2130992 2129902]
- ice: Expose RSS indirection tables for queue groups via ethtool (Petr Oros) [2130992 2129902]
- Revert "ice: Hide bus-info in ethtool for PRs in switchdev mode" (Petr Oros) [2130992 2129902]
- ice: remove period on argument description in ice_for_each_vf (Petr Oros) [2130992 2129902]
- ice: add a function comment for ice_cfg_mac_antispoof (Petr Oros) [2130992 2129902]
- ice: fix wording in comment for ice_reset_vf (Petr Oros) [2130992 2129902]
- ice: remove return value comment for ice_reset_all_vfs (Petr Oros) [2130992 2129902]
- ice: always check VF VSI pointer values (Petr Oros) [2130992 2129902]
- ice: add newline to dev_dbg in ice_vf_fdir_dump_info (Petr Oros) [2130992 2129902]
- ice: get switch id on switchdev devices (Petr Oros) [2130992 2129902]
- ice: return ENOSPC when exceeding ICE_MAX_CHAIN_WORDS (Petr Oros) [2130992 2129902]
- ice: introduce common helper for retrieving VSI by vsi_num (Petr Oros) [2130992 2129902]
- ice: use min_t() to make code cleaner in ice_gnss (Petr Oros) [2130992 2129902]
- ice: Add mpls+tso support (Petr Oros) [2130992 2129902]
- ice: switch: convert packet template match code to rodata (Petr Oros) [2130992 2129902]
- ice: switch: use convenience macros to declare dummy pkt templates (Petr Oros) [2130992 2129902]
- ice: switch: use a struct to pass packet template params (Petr Oros) [2130992 2129902]
- ice: switch: unobscurify bitops loop in ice_fill_adv_dummy_packet() (Petr Oros) [2130992 2129902]
- ice: switch: add and use u16[] aliases to ice_adv_lkup_elem::{h, m}_u (Petr Oros) [2130992 2129902]
- ice: Support GTP-U and GTP-C offload in switchdev (Petr Oros) [2130992 2129902]
- ice: Remove useless DMA-32 fallback configuration (Petr Oros) [2130992 2129902]
- ice: switch to napi_build_skb() (Petr Oros) [2130992 2129902]
- redhat: switch to z-stream dist tag and build targets (Jarod Wilson)
- block: avoid sign extend problem with default queue flags mask (Nico Pache) [2135813]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.6.1.rt7.216.el8_7]" date="1668168000">- [rt] build kernel-rt-4.18.0-425.6.1.rt7.216.el8_7 [2137411]
- ice: Add low latency Tx timestamp read (Petr Oros) [2136036 2092425]
- ice: introduce ice_ptp_reset_cached_phctime function (Petr Oros) [2136036 2092425]
- ice: re-arrange some static functions in ice_ptp.c (Petr Oros) [2136036 2092425]
- ice: track and warn when PHC update is late (Petr Oros) [2136036 2092425]
- ice: track Tx timestamp stats similar to other Intel drivers (Petr Oros) [2136036 2092425]
- ice: implement adjfine with mul_u64_u64_div_u64 (Petr Oros) [2136036 2092425]
- ice: Add EXTTS feature to the feature bitmap (Petr Oros) [2136036 2092425]
- math: Export mul_u64_u64_div_u64 (Petr Oros) [2136036 2092425]
- vfio/type1: Unpin zero pages (Alex Williamson) [2128515 2123015]
- net: atlantic: remove aq_nic_deinit() when resume (Íñigo Huguet) [2131935 2130839]
- net: atlantic: remove deep parameter on suspend/resume functions (Íñigo Huguet) [2131935 2130839]
- CI: Use zstream builder container (Veronika Kabatova)
- CI: Add disttag override for 8.7 (Veronika Kabatova)</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.7.1.rt7.217.el8_7]" date="1669723200">- [rt] build kernel-rt-4.18.0-425.7.1.rt7.217.el8_7 [2137411]
- ice: Add additional CSR registers to ETHTOOL_GREGS (Petr Oros) [2136513 2131024]
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps (Petr Oros) [2137270 2106964]
- i40e: Fix VF set max MTU size (Petr Oros) [2137270 2106964]
- iavf: Fix set max MTU size with port VLAN and jumbo frames (Petr Oros) [2137270 2106964]
- iavf: Fix bad page state (Petr Oros) [2137270 2106964]
- Revert "scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels" (Jarod Wilson)
- scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels (Tomas Henzl) [2139216]
- Revert "ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems" (Jarod Wilson)
- ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems (Wei Huang) [2142170 2130653]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.8.1.rt7.218.el8_7]" date="1669982400">- [rt] build kernel-rt-4.18.0-425.8.1.rt7.218.el8_7 [2137411]
- scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels (Tomas Henzl) [2139216 2134535]
- RDMA/mlx5: Set local port to one when accessing counters (Mohammad Kabat) [2141957 2077119]
- drm/mgag200: Fix PLL setup for G200_SE_A rev &gt;=4 (Jocelyn Falempe) [2140152 2130159]
- iavf: Do not restart Tx queues after reset task failure (Petr Oros) [2149081 2134005]
- iavf: Fix a crash during reset task (Petr Oros) [2149081 2134005]
- scsi: core: Allow the ALUA transitioning state enough time (Tomas Henzl) [2147374 2084250]
- scsi: core: Return BLK_STS_TRANSPORT for ALUA transitioning (Tomas Henzl) [2147374 2084250]
- i40e: Fix DMA mappings leak (Ivan Vecera) [2138205 2077847]
- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2142724 2142725] {CVE-2022-2964}
- net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2142724 2142725] {CVE-2022-2964}</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.9.1.rt7.219.el8_7]" date="1670587200">- [rt] build kernel-rt-4.18.0-425.9.1.rt7.219.el8_7 [2137411]
- Documentation/admin-guide: Document nomodeset kernel parameter (Jocelyn Falempe) [2145218 2143952]
- drm: Move nomodeset kernel parameter to the DRM subsystem (Jocelyn Falempe) [2145218 2143952]
- wait: Fix __wait_event_hrtimeout for RT/DL tasks (Derek Barbosa) [2138953 2125233]
- scsi: zfcp: Fix missing auto port scan and thus missing target ports (Tobias Huschle) [2127849 2121089]
- net: Fix return value of qdisc ingress handling on success (Ivan Vecera) [2141878 2131361]</changelog>
  <changelog author="Chris White &lt;chwhite@redhat.com&gt; [4.18.0-425.10.1.rt7.220.el8_7]" date="1671192000">- [rt] build kernel-rt-4.18.0-425.10.1.rt7.220.el8_7 [2137411]
- scsi: target: loop: Fix handling of aborted TMRs (Maurizio Lombardi) [2144583 2141713]
- ice: virtchnl rss hena support (Petr Oros) [2148130]
- ice: Fix configuring VIRTCHNL_OP_CONFIG_VSI_QUEUES with unbalanced queues (Michal Schmidt) [2142017 2137378]
- ice: Add support Flex RXD (Michal Schmidt) [2138157 2131310]
- netfilter: flowtable: fix stuck flows on cleanup due to pending work (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: add function to invoke garbage collection immediately (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: pass flowtable to nf_flow_table_iterate() (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: separate replace, destroy and stats to different workqueues (Phil Sutter) [2134084 2131370]
- x86/paravirt: Add a dummy __x86_paravirt_patch_template() function (Waiman Long) [2152206 2144161]
- x86/paravirt: Fix kABI breakage in struct pv_mmu_ops (Waiman Long) [2152206 2144161]
- drm/i915: fix TLB invalidation for Gen12 video and compute engines (Wander Lairson Costa) [2148162 2148163] {CVE-2022-4139}
- PCI: hv: Do not set PCI_COMMAND_MEMORY to reduce VM boot time (Emanuele Giuseppe Esposito) [2150912 2082836]
- iavf: Fix cached head and tail value for iavf_get_tx_pending (Stefan Assmann) [2149742 2103944]
- iavf: Fix change VF's mac address (Stefan Assmann) [2149742 2103944]
- iavf: Fix race between iavf_close and iavf_reset_task (Stefan Assmann) [2149742 2103944]
- net: ethernet: move from strlcpy with unused retval to strscpy (Stefan Assmann) [2149742 2103944]
- iavf: Fix 'tc qdisc show' listing too many queues (Stefan Assmann) [2149742 2103944]
- iavf: Fix max_rate limiting (Stefan Assmann) [2149742 2103944]
- iavf: Check for duplicate TC flower filter before parsing (Stefan Assmann) [2149742 2103944]
- iavf: Fix handling of dummy receive descriptors (Stefan Assmann) [2149742 2103944]
- iavf: Disallow changing rx/tx-frames and rx/tx-frames-irq (Stefan Assmann) [2149742 2103944]
- intel/iavf:fix repeated words in comments (Stefan Assmann) [2149742 2103944]
- intel: remove unused macros (Stefan Assmann) [2149742 2103944]
- iavf: Add waiting for response from PF in set mac (Stefan Assmann) [2149742 2103944]</changelog>
  <changelog author="Chris White &lt;chwhite@redhat.com&gt; [4.18.0-425.11.1.rt7.221.el8_7]" date="1673352000">- [rt] build kernel-rt-4.18.0-425.11.1.rt7.221.el8_7 [2159806]
- NFSD: Protect against send buffer overflow in NFSv3 READ (Scott Mayhew) [2143174] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv2 READ (Scott Mayhew) [2143174] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv3 READDIR (Scott Mayhew) [2143174] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv2 READDIR (Scott Mayhew) [2143174] {CVE-2022-43945}
- SUNRPC: Fix svcxdr_init_encode's buflen calculation (Scott Mayhew) [2143174] {CVE-2022-43945}
- SUNRPC: Fix svcxdr_init_decode's end-of-buffer calculation (Scott Mayhew) [2143174] {CVE-2022-43945}
- panic, kexec: make __crash_kexec() NMI safe (Valentin Schneider) [2139580]
- kexec: turn all kexec_mutex acquisitions into trylocks (Valentin Schneider) [2139580]
- kexec: move locking into do_kexec_load (Valentin Schneider) [2139580]
- vdpa/mlx5: re-create forwarding rules after mac modified (Laurent Vivier) [2152912]
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry (Waiman Long) [2153653]
- irq: Call tick_irq_enter() inside HARDIRQ_OFFSET (Waiman Long) [2153653]
- irqtime: Move irqtime entry accounting after irq offset incrementation (Waiman Long) [2153653]
- sched/vtime: Consolidate IRQ time accounting (Waiman Long) [2153653]
- s390/vtime: Use the generic IRQ entry accounting (Waiman Long) [2153653]
- sched/cputime: Remove symbol exports from IRQ time accounting (Waiman Long) [2153653]
- genirq/irqdomain: Don't try to free an interrupt that has no mapping (Waiman Long) [2153653]
- genirq: Provide __irq_enter/exit_raw() (Waiman Long) [2153653]
- powerpc/time: Only set CONFIG_ARCH_HAS_SCALED_CPUTIME on PPC64 (Waiman Long) [2153653]
- powerpc/time: isolate scaled cputime accounting in dedicated functions. (Waiman Long) [2153653]
- PCI: hv: Fix synchronization between channel callback and hv_pci_bus_exit() (Mohammed Gamal) [2155280]
- PCI: hv: Fix synchronization between channel callback and hv_compose_msi_msg() (Mohammed Gamal) [2155280]
- PCI: hv: Use vmbus_requestor to generate transaction IDs for VMbus hardening (Mohammed Gamal) [2155280]
- net/mlx5e: TC, Reject forwarding from internal port to internal port (Mohammad Kabat) [2141959 2131345]
- hv_netvsc: Fix race between VF offering and VF association message from host (Mohammed Gamal) [2155272]
- x86/mce: Reduce number of machine checks taken during recovery (Prarit Bhargava) [2137592 2104388]
- cgroup/cpuset: Reduce cpuset_rwsem writer latency (Waiman Long) [2153108]
- rcu/exp: Mark current CPU as exp-QS in IPI loop second pass (Waiman Long) [2153108]
- rcu: Always inline rcu_dynticks_task*_{enter,exit}() (Waiman Long) [2153108]
- rcu: Fix existing exp request check in sync_sched_exp_online_cleanup() (Waiman Long) [2153108]
- rcu: Fix macro name CONFIG_TASKS_RCU_TRACE (Waiman Long) [2153108]
- rcu: Fix stall-warning deadlock due to non-release of rcu_node -&gt;lock (Waiman Long) [2153108]
- rcu: Fix to include first blocked task in stall warning (Waiman Long) [2153108]
- cgroup: Use cgroup_attach_{lock,unlock}() from cgroup_attach_task_all() (Waiman Long) [2153108]
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all() (Waiman Long) [2153108]
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock (Waiman Long) [2153108]
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree (Waiman Long) [2153108]
- cgroup/cpuset: Fix a race between cpuset_attach() and cpu hotplug (Waiman Long) [2153108]
- cgroup: reduce dependency on cgroup_mutex (Waiman Long) [2153108]
- sunrpc: Set sk_allocation to GFP_NOFS to avoid using current-&gt;task_frag. (Guillaume Nault) [2153230]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.12.1.rt7.222.el8_7]" date="1674129600">- [rt] build kernel-rt-4.18.0-425.12.1.rt7.222.el8_7 [2159806]
- x86/fpu: Prevent FPU state corruption (Oleksandr Natalenko) [2134586 2130890]
- x86/fpu: Drop fpregs lock before inheriting FPU permissions (Eder Zulian) [2154460 2153549]
- kernel-doc: fix undefined args variable (Jan Stancek) [2157905 2134954]
- mm: memcontrol: fix potential oom_lock recursion deadlock (Waiman Long) [2157922 2138886]
- memcg: prohibit unconditional exceeding the limit of dying tasks (Waiman Long) [2157922 2138886]
- mm, oom: do not trigger out_of_memory from the #PF (Waiman Long) [2157922 2138886]
- mm, oom: pagefault_out_of_memory: don't force global OOM for dying tasks (Waiman Long) [2157922 2138886]
- mm: memcontrol: don't count limit-setting reclaim as memory pressure (Waiman Long) [2157922 2138886]
- KVM: s390: vsie: Fix the initialization of the epoch extension (epdx) field (Thomas Huth) [2158813 2151854]
- net: mana: Fix race on per-CQ variable napi work_done (Emanuele Giuseppe Esposito) [2155437 2151722]
- mei: me: add adler lake point S DID (Prarit Bhargava) [2141783 2141602]
- PCI: hv: Only reuse existing IRTE allocation for Multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix the definition of vector in hv_compose_msi_msg() (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix interrupt mapping for multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Reuse existing IRTE allocation in compose_msi_msg() (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix hv_arch_irq_unmask() for multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix multi-MSI to allow more than one MSI vector (Emanuele Giuseppe Esposito) [2155289 2100275]
- drm/ast: Support multiple outputs (Jarod Wilson) [2149287 2147553]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.13.1.rt7.223.el8_7]" date="1675339200">- [rt] build kernel-rt-4.18.0-425.13.1.rt7.223.el8_7 [2159806]
- mm/cgroup/reclaim: fix dirty pages throttling on cgroup v1 (Waiman Long) [2160221]
- mm: vmscan: remove deadlock due to throttling failing to make progress (Waiman Long) [2160221]
- mm: vmscan: reduce throttling due to a failure to make progress -fix (Waiman Long) [2160221]
- mm: vmscan: Reduce throttling due to a failure to make progress (Waiman Long) [2160221]
- mm/vmscan: delay waking of tasks throttled on NOPROGRESS (Waiman Long) [2160221]
- mm/vmscan: increase the timeout if page reclaim is not making progress (Waiman Long) [2160221]
- mm/vmscan: centralise timeout values for reclaim_throttle (Waiman Long) [2160221]
- mm/page_alloc: remove the throttling logic from the page allocator (Waiman Long) [2160221]
- mm/writeback: throttle based on page writeback instead of congestion (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim when no progress is being made (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim and compaction when too may pages are isolated (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim until some writeback completes if congested (Waiman Long) [2160221]
- mm/vmscan.c: delete or fix duplicated words (Waiman Long) [2160221]
- mm,page_alloc: PF_WQ_WORKER threads must sleep at should_reclaim_retry() (Nico Pache) [2160221]
- ceph: avoid putting the realm twice when decoding snaps fails (Xiubo Li) [2155797 2139881]
- mm/mremap: hold the rmap lock in write mode when moving page table entries. (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap: use pmd/pud_poplulate to update page table entries (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap: don't enable optimized PUD move if page table levels is 2 (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap: convert huge PUD move to separate helper (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap: fix BUILD_BUG_ON() error in get_extent (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap.c: fix extent calculation (Waiman Long) [2140950] {CVE-2022-41222}
- x86: mremap speedup - Enable HAVE_MOVE_PUD (Waiman Long) [2140950] {CVE-2022-41222}
- mm: speedup mremap on 1GB or larger regions (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap: start addresses are properly aligned (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap: calculate extent in one place (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap: it is sure to have enough space when extent meets requirement (Waiman Long) [2140950] {CVE-2022-41222}
- s390/boot: add secure boot trailer (Tobias Huschle) [2151530 2141967]
- i40e: Fix VF hang when reset is triggered on another VF (Ivan Vecera) [2160460 2103801]
- i2c: ismt: Fix an out-of-bounds bug in ismt_access() (Prarit Bhargava) [2154388 2119066] {CVE-2022-2873}
- iavf: schedule watchdog immediately when changing primary MAC (Michal Schmidt) [2163257 2152493]
- iavf: Move netdev_update_features() into watchdog task (Michal Schmidt) [2163257 2152493]
- iavf: fix temporary deadlock and failure to set MAC address (Michal Schmidt) [2163257 2152493]
- iavf: Fix error handling in iavf_init_module() (Michal Schmidt) [2163257 2152493]
- iommu/vt-d: Clean up si_domain in the init_dmars() error path (Jerry Snitselaar) [2149474 2118428]
- x86/pci/xen: Use msi_msg shadow structs (Jerry Snitselaar) [2149474 2118428]
- iommu/intel: Use msi_msg shadow structs (Jerry Snitselaar) [2149474 2118428]
- PCI: MSI: Fix Kconfig dependencies for PCI_MSI_ARCH_FALLBACKS (Jerry Snitselaar) [2149474 2118428]
- x86/apic/msi: Unbreak DMAR and HPET MSI (Jerry Snitselaar) [2149474 2118428]
- iommu/amd: Remove domain search for PCI/MSI (Jerry Snitselaar) [2149474 2118428]
- iommu/vt-d: Remove domain search for PCI/MSI[X] (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Make most MSI ops XEN private (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Cleanup the arch_*_msi_irqs() leftovers (Jerry Snitselaar) [2149474 2118428]
- PCI/MSI: Make arch_.*_msi_irq[s] fallbacks selectable (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Wrap XEN MSI management into irqdomain (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Consolidate XEN-MSI init (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Rework MSI teardown (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Make xen_msi_init() static and rename it to xen_hvm_msi_init() (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Move apic_post_init() invocation to one place (Jerry Snitselaar) [2149474 2118428]
- x86/msi: Use generic MSI domain ops (Jerry Snitselaar) [2149474 2118428]
- x86/msi: Remove pointless vcpu_affinity callback (Jerry Snitselaar) [2149474 2118428]
- iommu/vt-d: Fix compile error with CONFIG_PCI_ATS not set (Myron Stowe) [2149474 2118428]
- iommu/vt-d: Cure VF irqdomain hickup (Myron Stowe) [2149474 2118428]
- x86/pci: Set default irq domain in pcibios_add_device() (Myron Stowe) [2149474 2118428]
- iommm/amd: Store irq domain in struct device (Myron Stowe) [2149474 2118428]
- iommm/vt-d: Store irq domain in struct device (Myron Stowe) [2149474 2118428]
- PCI/MSI: Provide pci_dev_has_special_msi_domain() helper (Myron Stowe) [2149474 2118428]
- x86/msi: Consolidate MSI allocation (Myron Stowe) [2149474 2118428]
- PCI/MSI: Rework pci_msi_domain_calc_hwirq() (Myron Stowe) [2149474 2118428]
- x86/irq: Consolidate UV domain allocation (Myron Stowe) [2149474 2118428]
- x86/irq: Consolidate DMAR irq allocation (Myron Stowe) [2149474 2118428]
- x86_ioapic_Consolidate_IOAPIC_allocation (Myron Stowe) [2149474 2118428]
- x86/msi: Consolidate HPET allocation (Myron Stowe) [2149474 2118428]
- iommu/irq_remapping: Consolidate irq domain lookup (Myron Stowe) [2149474 2118428]
- iommu/amd: Consolidate irq domain getter (Myron Stowe) [2149474 2118428]
- iommu/vt-d: Consolidate irq domain getter (Myron Stowe) [2149474 2118428]
- x86/irq: Add allocation type for parent domain retrieval (Myron Stowe) [2149474 2118428]
- irqdomain: Export irq_domain_update_bus_token (Myron Stowe) [2149474 2118428]
- gitlab-ci: use CI templates from production branch (Michael Hofmann)
- iavf: remove INITIAL_MAC_SET to allow gARP to work properly (Stefan Assmann) [2149745 1938635]
- Revert "scsi: iscsi: ql4xxx: Use per-session workqueue for unbinding" (Chris Leech) [2152734 2122624]
- Revert "scsi: iscsi: Use the session workqueue for recovery" (Chris Leech) [2152734 2122624]
- arm64/bpf: Remove 128MB limit for BPF JIT programs (Yauheni Kaliuta) [2152138 2140163]
- bpf: Define bpf_jit_alloc_exec_limit for arm64 JIT (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: add `type` and `data` fields (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: use `ex` for `exception_table_entry` (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: make fixup_exception() return bool (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: consolidate definitions (Yauheni Kaliuta) [2152138 2140163]
- arm64: kvm: use kvm_exception_table_entry (Yauheni Kaliuta) [2152138 2140163]
- be2net: Fix buffer overflow in be_get_module_eeprom (Josef Oskera) [2160182 2126917]
- sched: Switch to upstream migrate disable code (Crystal Wood) [2132062]
- tick: Fix timer storm since introduction of timersd (Valentin Schneider) [2127204]
- softirq: Use a dedicated thread for timer wakeups. (Valentin Schneider) [2127204]</changelog>
</package>
<package pkgid="1b9283679230c1db6b0961212b547950fc518f89c1a48657c515e911231f0560" name="kernel-rt-core" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="425.19.2.rt7.230.el8_7"/>
  <changelog author="Chris White &lt;chwhite@redhat.com&gt; [4.18.0-425.11.1.rt7.221.el8_7]" date="1673352000">- [rt] build kernel-rt-4.18.0-425.11.1.rt7.221.el8_7 [2159806]
- NFSD: Protect against send buffer overflow in NFSv3 READ (Scott Mayhew) [2143174] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv2 READ (Scott Mayhew) [2143174] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv3 READDIR (Scott Mayhew) [2143174] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv2 READDIR (Scott Mayhew) [2143174] {CVE-2022-43945}
- SUNRPC: Fix svcxdr_init_encode's buflen calculation (Scott Mayhew) [2143174] {CVE-2022-43945}
- SUNRPC: Fix svcxdr_init_decode's end-of-buffer calculation (Scott Mayhew) [2143174] {CVE-2022-43945}
- panic, kexec: make __crash_kexec() NMI safe (Valentin Schneider) [2139851]
- kexec: turn all kexec_mutex acquisitions into trylocks (Valentin Schneider) [2139580]
- kexec: move locking into do_kexec_load (Valentin Schneider) [2139580]
- vdpa/mlx5: re-create forwarding rules after mac modified (Laurent Vivier) [2152912]
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry (Waiman Long) [2153653]
- irq: Call tick_irq_enter() inside HARDIRQ_OFFSET (Waiman Long) [2153653]
- irqtime: Move irqtime entry accounting after irq offset incrementation (Waiman Long) [2153653]
- sched/vtime: Consolidate IRQ time accounting (Waiman Long) [2153653]
- s390/vtime: Use the generic IRQ entry accounting (Waiman Long) [2153653]
- sched/cputime: Remove symbol exports from IRQ time accounting (Waiman Long) [2153653]
- genirq/irqdomain: Don't try to free an interrupt that has no mapping (Waiman Long) [2153653]
- genirq: Provide __irq_enter/exit_raw() (Waiman Long) [2153653]
- powerpc/time: Only set CONFIG_ARCH_HAS_SCALED_CPUTIME on PPC64 (Waiman Long) [2153653]
- powerpc/time: isolate scaled cputime accounting in dedicated functions. (Waiman Long) [2153653]
- PCI: hv: Fix synchronization between channel callback and hv_pci_bus_exit() (Mohammed Gamal) [2155280]
- PCI: hv: Fix synchronization between channel callback and hv_compose_msi_msg() (Mohammed Gamal) [2155280]
- PCI: hv: Use vmbus_requestor to generate transaction IDs for VMbus hardening (Mohammed Gamal) [2155280]
- net/mlx5e: TC, Reject forwarding from internal port to internal port (Mohammad Kabat) [2141959 2131345]
- hv_netvsc: Fix race between VF offering and VF association message from host (Mohammed Gamal) [2155272]
- x86/mce: Reduce number of machine checks taken during recovery (Prarit Bhargava) [2137592 2104388]
- cgroup/cpuset: Reduce cpuset_rwsem writer latency (Waiman Long) [2153108]
- rcu/exp: Mark current CPU as exp-QS in IPI loop second pass (Waiman Long) [2153108]
- rcu: Always inline rcu_dynticks_task*_{enter,exit}() (Waiman Long) [2153108]
- rcu: Fix existing exp request check in sync_sched_exp_online_cleanup() (Waiman Long) [2153108]
- rcu: Fix macro name CONFIG_TASKS_RCU_TRACE (Waiman Long) [2153108]
- rcu: Fix stall-warning deadlock due to non-release of rcu_node -&gt;lock (Waiman Long) [2153108]
- rcu: Fix to include first blocked task in stall warning (Waiman Long) [2153108]
- cgroup: Use cgroup_attach_{lock,unlock}() from cgroup_attach_task_all() (Waiman Long) [2153108]
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all() (Waiman Long) [2153108]
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock (Waiman Long) [2153108]
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree (Waiman Long) [2153108]
- cgroup/cpuset: Fix a race between cpuset_attach() and cpu hotplug (Waiman Long) [2153108]
- cgroup: reduce dependency on cgroup_mutex (Waiman Long) [2153108]
- sunrpc: Set sk_allocation to GFP_NOFS to avoid using current-&gt;task_frag. (Guillaume Nault) [2153230]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.12.1.rt7.222.el8_7]" date="1674129600">- [rt] build kernel-rt-4.18.0-425.12.1.rt7.222.el8_7 [2159806]
- x86/fpu: Prevent FPU state corruption (Oleksandr Natalenko) [2134586 2130890]
- x86/fpu: Drop fpregs lock before inheriting FPU permissions (Eder Zulian) [2154469 2153549]
- kernel-doc: fix undefined args variable (Jan Stancek) [2157905 2134954]
- mm: memcontrol: fix potential oom_lock recursion deadlock (Waiman Long) [2157922 2138886]
- memcg: prohibit unconditional exceeding the limit of dying tasks (Waiman Long) [2157922 2138886]
- mm, oom: do not trigger out_of_memory from the #PF (Waiman Long) [2157922 2138886]
- mm, oom: pagefault_out_of_memory: don't force global OOM for dying tasks (Waiman Long) [2157922 2138886]
- mm: memcontrol: don't count limit-setting reclaim as memory pressure (Waiman Long) [2157922 2138886]
- KVM: s390: vsie: Fix the initialization of the epoch extension (epdx) field (Thomas Huth) [2158813 2151854]
- net: mana: Fix race on per-CQ variable napi work_done (Emanuele Giuseppe Esposito) [2155437 2151722]
- mei: me: add adler lake point S DID (Prarit Bhargava) [2141783 2141602]
- PCI: hv: Only reuse existing IRTE allocation for Multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix the definition of vector in hv_compose_msi_msg() (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix interrupt mapping for multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Reuse existing IRTE allocation in compose_msi_msg() (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix hv_arch_irq_unmask() for multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix multi-MSI to allow more than one MSI vector (Emanuele Giuseppe Esposito) [2155289 2100275]
- drm/ast: Support multiple outputs (Jarod Wilson) [2149287 2147553]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.13.1.rt7.223.el8_7]" date="1675339200">- [rt] build kernel-rt-4.18.0-425.13.1.rt7.223.el8_7 [2159806]
- mm/cgroup/reclaim: fix dirty pages throttling on cgroup v1 (Waiman Long) [2160221]
- mm: vmscan: remove deadlock due to throttling failing to make progress (Waiman Long) [2160221]
- mm: vmscan: reduce throttling due to a failure to make progress -fix (Waiman Long) [2160221]
- mm: vmscan: Reduce throttling due to a failure to make progress (Waiman Long) [2160221]
- mm/vmscan: delay waking of tasks throttled on NOPROGRESS (Waiman Long) [2160221]
- mm/vmscan: increase the timeout if page reclaim is not making progress (Waiman Long) [2160221]
- mm/vmscan: centralise timeout values for reclaim_throttle (Waiman Long) [2160221]
- mm/page_alloc: remove the throttling logic from the page allocator (Waiman Long) [2160221]
- mm/writeback: throttle based on page writeback instead of congestion (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim when no progress is being made (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim and compaction when too may pages are isolated (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim until some writeback completes if congested (Waiman Long) [2160221]
- mm/vmscan.c: delete or fix duplicated words (Waiman Long) [2160221]
- mm,page_alloc: PF_WQ_WORKER threads must sleep at should_reclaim_retry() (Nico Pache) [2160221]
- ceph: avoid putting the realm twice when decoding snaps fails (Xiubo Li) [2155797 2139881]
- mm/mremap: hold the rmap lock in write mode when moving page table entries. (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap: use pmd/pud_poplulate to update page table entries (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap: don't enable optimized PUD move if page table levels is 2 (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap: convert huge PUD move to separate helper (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap: fix BUILD_BUG_ON() error in get_extent (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap.c: fix extent calculation (Waiman Long) [2140950] {CVE-2022-41222}
- x86: mremap speedup - Enable HAVE_MOVE_PUD (Waiman Long) [2140950] {CVE-2022-41222}
- mm: speedup mremap on 1GB or larger regions (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap: start addresses are properly aligned (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap: calculate extent in one place (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap: it is sure to have enough space when extent meets requirement (Waiman Long) [2140950] {CVE-2022-41222}
- s390/boot: add secure boot trailer (Tobias Huschle) [2151530 2141967]
- i40e: Fix VF hang when reset is triggered on another VF (Ivan Vecera) [2160460 2103801]
- i2c: ismt: Fix an out-of-bounds bug in ismt_access() (Prarit Bhargava) [2154388 2119066] {CVE-2022-2873}
- iavf: schedule watchdog immediately when changing primary MAC (Michal Schmidt) [2163257 2152493]
- iavf: Move netdev_update_features() into watchdog task (Michal Schmidt) [2163257 2152493]
- iavf: fix temporary deadlock and failure to set MAC address (Michal Schmidt) [2163257 2152493]
- iavf: Fix error handling in iavf_init_module() (Michal Schmidt) [2163257 2152493]
- iommu/vt-d: Clean up si_domain in the init_dmars() error path (Jerry Snitselaar) [2149474 2118428]
- x86/pci/xen: Use msi_msg shadow structs (Jerry Snitselaar) [2149474 2118428]
- iommu/intel: Use msi_msg shadow structs (Jerry Snitselaar) [2149474 2118428]
- PCI: MSI: Fix Kconfig dependencies for PCI_MSI_ARCH_FALLBACKS (Jerry Snitselaar) [2149474 2118428]
- x86/apic/msi: Unbreak DMAR and HPET MSI (Jerry Snitselaar) [2149474 2118428]
- iommu/amd: Remove domain search for PCI/MSI (Jerry Snitselaar) [2149474 2118428]
- iommu/vt-d: Remove domain search for PCI/MSI[X] (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Make most MSI ops XEN private (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Cleanup the arch_*_msi_irqs() leftovers (Jerry Snitselaar) [2149474 2118428]
- PCI/MSI: Make arch_.*_msi_irq[s] fallbacks selectable (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Wrap XEN MSI management into irqdomain (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Consolidate XEN-MSI init (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Rework MSI teardown (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Make xen_msi_init() static and rename it to xen_hvm_msi_init() (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Move apic_post_init() invocation to one place (Jerry Snitselaar) [2149474 2118428]
- x86/msi: Use generic MSI domain ops (Jerry Snitselaar) [2149474 2118428]
- x86/msi: Remove pointless vcpu_affinity callback (Jerry Snitselaar) [2149474 2118428]
- iommu/vt-d: Fix compile error with CONFIG_PCI_ATS not set (Myron Stowe) [2149474 2118428]
- iommu/vt-d: Cure VF irqdomain hickup (Myron Stowe) [2149474 2118428]
- x86/pci: Set default irq domain in pcibios_add_device() (Myron Stowe) [2149474 2118428]
- iommm/amd: Store irq domain in struct device (Myron Stowe) [2149474 2118428]
- iommm/vt-d: Store irq domain in struct device (Myron Stowe) [2149474 2118428]
- PCI/MSI: Provide pci_dev_has_special_msi_domain() helper (Myron Stowe) [2149474 2118428]
- x86/msi: Consolidate MSI allocation (Myron Stowe) [2149474 2118428]
- PCI/MSI: Rework pci_msi_domain_calc_hwirq() (Myron Stowe) [2149474 2118428]
- x86/irq: Consolidate UV domain allocation (Myron Stowe) [2149474 2118428]
- x86/irq: Consolidate DMAR irq allocation (Myron Stowe) [2149474 2118428]
- x86_ioapic_Consolidate_IOAPIC_allocation (Myron Stowe) [2149474 2118428]
- x86/msi: Consolidate HPET allocation (Myron Stowe) [2149474 2118428]
- iommu/irq_remapping: Consolidate irq domain lookup (Myron Stowe) [2149474 2118428]
- iommu/amd: Consolidate irq domain getter (Myron Stowe) [2149474 2118428]
- iommu/vt-d: Consolidate irq domain getter (Myron Stowe) [2149474 2118428]
- x86/irq: Add allocation type for parent domain retrieval (Myron Stowe) [2149474 2118428]
- irqdomain: Export irq_domain_update_bus_token (Myron Stowe) [2149474 2118428]
- gitlab-ci: use CI templates from production branch (Michael Hofmann)
- iavf: remove INITIAL_MAC_SET to allow gARP to work properly (Stefan Assmann) [2149745 1938635]
- Revert "scsi: iscsi: ql4xxx: Use per-session workqueue for unbinding" (Chris Leech) [2152734 2122624]
- Revert "scsi: iscsi: Use the session workqueue for recovery" (Chris Leech) [2152734 2122624]
- arm64/bpf: Remove 128MB limit for BPF JIT programs (Yauheni Kaliuta) [2152138 2140163]
- bpf: Define bpf_jit_alloc_exec_limit for arm64 JIT (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: add `type` and `data` fields (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: use `ex` for `exception_table_entry` (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: make fixup_exception() return bool (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: consolidate definitions (Yauheni Kaliuta) [2152138 2140163]
- arm64: kvm: use kvm_exception_table_entry (Yauheni Kaliuta) [2152138 2140163]
- be2net: Fix buffer overflow in be_get_module_eeprom (Josef Oskera) [2160182 2126917]
- sched: Switch to upstream migrate disable code (Crystal Wood) [2132062]
- tick: Fix timer storm since introduction of timersd (Valentin Schneider) [2127204]
- softirq: Use a dedicated thread for timer wakeups. (Valentin Schneider) [2127204]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.14.1.rt7.224.el8_7]" date="1676030400">- [rt] build kernel-rt-4.18.0-425.14.1.rt7.224.el8_7 [2172278]
- ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems (Wei Huang) [2142170 2130653]
- KVM: x86: nSVM: implement nested LBR virtualization (Emanuele Giuseppe Esposito) [2166362 2155149]
- KVM: x86: nSVM: correctly virtualize LBR msrs when L2 is running (Emanuele Giuseppe Esposito) [2166362 2155149]
- kvm: x86: SVM: use vmcb* instead of svm-&gt;vmcb where it makes sense (Emanuele Giuseppe Esposito) [2166362 2155149]
- KVM: x86: nSVM: implement nested VMLOAD/VMSAVE (Emanuele Giuseppe Esposito) [2166362 2155149]
- IB/iser: Fix login with authentication (Kamal Heib) [2161750 2120676]
- act_mirred: use the backlog for nested calls to mirred ingress (Davide Caratti) [2164648 2131339] {CVE-2022-4269}
- net/sched: act_mirred: better wording on protection against excessive stack growth (Davide Caratti) [2164648 2131339] {CVE-2022-4269}
- redhat/configs: Set CONFIG_X86_AMD_PSTATE to 'm' (Prarit Bhargava) [2151275 2145246]
- KVM: x86: smm: preserve interrupt shadow in SMRAM (Maxim Levitsky) [2166368 2097144]
- KVM: x86: SVM: don't save SVM state to SMRAM when VM is not long mode capable (Maxim Levitsky) [2166368 2097144]
- KVM: x86: SVM: use smram structs (Maxim Levitsky) [2166368 2097144]
- KVM: svm: drop explicit return value of kvm_vcpu_map (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: use smram struct for 64 bit smram load/restore (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: use smram struct for 32 bit smram load/restore (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: use smram structs in the common code (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: add structs for KVM's smram layout (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: check for failures on smm entry (Maxim Levitsky) [2166368 2097144]
- KVM: x86: do not go through ctxt-&gt;ops when emulating rsm (Maxim Levitsky) [2166368 2097144]
- KVM: x86: move SMM exit to a new file (Maxim Levitsky) [2166368 2097144]
- KVM: x86: move SMM entry to a new file (Maxim Levitsky) [2166368 2097144]
- KVM: x86: start moving SMM-related functions to new files (Maxim Levitsky) [2166368 2097144]
- bug: introduce ASSERT_STRUCT_OFFSET (Maxim Levitsky) [2166368 2097144]
- KVM: x86: Rename and expose helper to detect if INIT/SIPI are allowed (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: number of GPRs in the SMRAM image depends on the image format (Maxim Levitsky) [2166368 2097144]
- KVM: x86: emulator: update the emulation mode after CR0 write (Maxim Levitsky) [2166368 2097144]
- KVM: x86: emulator: update the emulation mode after rsm (Maxim Levitsky) [2166368 2097144]
- KVM: x86: emulator: introduce emulator_recalc_and_set_mode (Maxim Levitsky) [2166368 2097144]
- KVM: x86: emulator: em_sysexit should update ctxt-&gt;mode (Maxim Levitsky) [2166368 2097144]
- KVM: x86: Bug the VM if the emulator accesses a non-existent GPR (Maxim Levitsky) [2166368 2097144]
- \KVM: x86: Reduce the number of emulator GPRs to '8' for 32-bit KVM (Maxim Levitsky) [2166368 2097144]
- KVM: x86: Use 16-bit fields to track dirty/valid emulator GPRs (Maxim Levitsky) [2166368 2097144]
- KVM: x86: Omit VCPU_REGS_RIP from emulator's _regs array (Maxim Levitsky) [2166368 2097144]
- \KVM: x86: Harden _regs accesses to guard against buggy input (Maxim Levitsky) [2166368 2097144]
- KVM: x86: Grab regs_dirty in local 'unsigned long' (Maxim Levitsky) [2166368 2097144]
- proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152577 2152578] {CVE-2022-4378}
- proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152577 2152578] {CVE-2022-4378}</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.15.1.rt7.225.el8_7]" date="1676548800">- [rt] build kernel-rt-4.18.0-425.15.1.rt7.225.el8_7 [2172278]
- net/mlx5e: Fix use-after-free when reverting termination table (Amir Tzin) [2167640 2112927]
- net/mlx5: Do not query pci info while pci disabled (Amir Tzin) [2167645 2129249]
- x86/fpu: Fix copy_xstate_to_uabi() to copy init states correctly (Dean Nelson) [2168384 2122850]
- x86/fpu: Exclude dynamic states from init_fpstate (Dean Nelson) [2168384 2122850]
- x86/fpu: Fix the init_fpstate size check with the actual size (Dean Nelson) [2168384 2122850]
- x86/fpu: Configure init_fpstate attributes orderly (Dean Nelson) [2168384 2122850]
- x86/fpu/xstate: Fix the ARCH_REQ_XCOMP_PERM implementation (Dean Nelson) [2168384 2122850]
- net/mlx5: E-Switch, properly handle ingress tagged packets on VST (Amir Tzin) [2166665 2096109]
- cpuhotplug: Fix KABI breakage (Prarit Bhargava) [2162763 2156529]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.16.1.rt7.226.el8_7]" date="1677153600">- [rt] build kernel-rt-4.18.0-425.16.1.rt7.226.el8_7 [2172278]
- ipv6: fix panic when fib_lookup_arg-&gt;result is fib6_info (Jiri Benc) [2167602 2140599]
- ceph: blocklist the kclient when receiving corrupted snap trace (Xiubo Li) [2168896 2162414]
- ceph: move mount state enum to super.h (Xiubo Li) [2168896 2162414]
- s390/kexec: fix ipl report address for kdump (Tobias Huschle) [2166296 2161328]
- mm, compaction: fix fast_isolate_around() to stay within boundaries (Daniel Vacek) [2170576 2149309]
- scsi: storvsc: Fix swiotlb bounce buffer leak in confidential VM (Emanuele Giuseppe Esposito) [2170228 2150659]
- netfilter: conntrack: handle tcp challenge acks during connection reuse (Florian Westphal) [2165587 2158726]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.17.1.rt7.227.el8_7]" date="1677844800">- [rt] build kernel-rt-4.18.0-425.17.1.rt7.227.el8_7 [2172278]
- net: mana: Add rmb after checking owner bits (Mohammed Gamal) [2173103 2139462]
- net: mana: Add support of XDP_REDIRECT action (Mohammed Gamal) [2173103 2139462]
- net: mana: Add the Linux MANA PF driver (Mohammed Gamal) [2173103 2139462]
- ice: fix lost multicast packets in promisc mode (Ken Cox) [2172550 2138215]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.18.1.rt7.228.el8_7]" date="1678708800">- [rt] build kernel-rt-4.18.0-425.18.1.rt7.228.el8_7 [2172278]
- futex: Resend potentially swallowed owner death notification (Rafael Aquini) [2170054]
- irq_work: Move lazy work execution to dedicated irq_work kthreads (Valentin Schneider) [2172163]
- irq_work: Sync the patches (Valentin Schneider) [2172163]
- irq_work: Also rcuwait for !IRQ_WORK_HARD_IRQ on PREEMPT_RT (Valentin Schneider) [2172163]
- irq_work: Allow irq_work_sync() to sleep if irq_work() no IRQ support. (Valentin Schneider) [2172163]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.19.1.rt7.229.el8_7]" date="1678968000">- [rt] build kernel-rt-4.18.0-425.19.1.rt7.229.el8_7 [2172278]
- s390/dasd: fix no record found for raw_track_access (Tobias Huschle) [2167776 2161270]
- locking/rwsem: Disable preemption in all down_read*() and up_read() code paths (Waiman Long) [2170939 2162139]
- locking/rwsem: Prevent non-first waiter from spinning in down_write() slowpath (Waiman Long) [2170939 2162139]
- locking/rwsem: Allow slowpath writer to ignore handoff bit if not set by first waiter (Waiman Long) [2170939 2162139]
- locking/rwsem: Always try to wake waiters in out_nolock path (Waiman Long) [2170939 2162139]
- locking/rwsem: No need to check for handoff bit if wait queue empty (Waiman Long) [2170939 2162139]
- locking/rwsem: Make handoff bit handling more consistent (Waiman Long) [2170939 2162139]
- locking/rwsem: Disable preemption while trying for rwsem lock (Waiman Long) [2170939 2162139]
- locking/rwsem: Conditionally wake waiters in reader/writer slowpaths (Waiman Long) [2170939 2162139]
- locking: Make owner_on_cpu() into &lt;linux/sched.h&gt; (Waiman Long) [2170939 2162139]
- locking/rwsem: Optimize down_read_trylock() under highly contended case (Waiman Long) [2170939 2162139]
- locking/rwsem: Fix comments about reader optimistic lock stealing conditions (Waiman Long) [2170939 2162139]
- locking/rwsem: Disable preemption for spinning region (Waiman Long) [2170939 2162139]
- locking: Remove rcu_read_{,un}lock() for preempt_{dis,en}able() (Waiman Long) [2170939 2162139]
- watchdog: fix UAF in reboot notifier handling in watchdog core code (Wander Lairson Costa) [2139770 2131308]
- netfilter: nf_conntrack_irc: Tighten matching on DCC message (Wander Lairson Costa) [2139770 2131308]
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF (Jaroslav Kysela) [2163405 2163406] {CVE-2023-0266}
- net/mlx5e: Fix enabling sriov while tc nic rules are offloaded (Amir Tzin) [2167647 2112925]
- net/mlx5: E-Switch, pair only capable devices (Amir Tzin) [2167647 2112925]
- net/mlx5: Fix mlx5_get_next_dev() peer device matching (Amir Tzin) [2167647 2112925]
- net/mlx5: Lag, filter non compatible devices (Amir Tzin) [2167647 2112925]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.19.2.rt7.230.el8_7]" date="1679054400">- [rt] build kernel-rt-4.18.0-425.19.2.rt7.230.el8_7.geb93 [2172278]
- ovl: fail on invalid uid/gid mapping at copy up (Miklos Szeredi) [2165341 2165342] {CVE-2023-0386}</changelog>
</package>
<package pkgid="b8b6b73c908f04be270d8230cc88c8f6990e67bd359e310ed10bb26f7798bf7f" name="kernel-rt-debug" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="425.10.1.rt7.220.el8_7"/>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.1.1.rt7.211.el8]" date="1663588800">- [rt] build kernel-rt-4.18.0-425.1.1.rt7.211.el8 [2067251]
- i40e: Fix kernel crash during module removal (Ivan Vecera) [2091489]
- redhat: enable zstream release numbering for rhel 8.7 (Jarod Wilson)
- ice: Allow operation with reduced device MSI-X (Petr Oros) [2102844]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.2.1.rt7.212.el8]" date="1664280000">- [rt] build kernel-rt-4.18.0-425.2.1.rt7.212.el8 [2067251]
- EDAC/ghes: Set the DIMM label unconditionally (Aristeu Rozanski) [2109712]
- configs: enable CONFIG_HP_ILO for aarch64 (Mark Salter) [2123508]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.3.1.rt7.213.el8]" date="1664539200">- [rt] build kernel-rt-4.18.0-425.3.1.rt7.213.el8 [2067251]
- iwlwifi: limit fw version for AC9560 to avoid fw crash (Íñigo Huguet) [2129297]
- sfc: fix null pointer dereference in efx_hard_start_xmit (Íñigo Huguet) [2119638]
- sfc: fix TX channel offset when using legacy interrupts (Íñigo Huguet) [2119638]
- netfilter: conntrack: reduce timeout when receiving out-of-window fin or rst (Florian Westphal) [2047366]
- netfilter: conntrack: remove unneeded indent level (Florian Westphal) [2047366]
- netfilter: conntrack: ignore overly delayed tcp packets (Florian Westphal) [2047366]
- netfilter: conntrack: prepare tcp_in_window for ternary return value (Florian Westphal) [2047366]
- netfilter: conntrack: remove pr_debug callsites from tcp tracker (Florian Westphal) [2047366]
- netfilter: conntrack: work around exceeded receive window (Florian Westphal) [2047366]
- netfilter: conntrack: improve RST handling when tuple is re-used (Florian Westphal) [2047366]
- netfilter: conntrack: avoid misleading 'invalid' in log message (Florian Westphal) [2047366]
- netfilter: remove BUG_ON() after skb_header_pointer() (Florian Westphal) [2047366]
- iavf: Detach device during reset task (Petr Oros) [2069206]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.4.1.rt7.214.el8]" date="1665144000">- [rt] build kernel-rt-4.18.0-425.4.1.rt7.214.el8 [2067251]
- random: allow reseeding DRBG with getrandom (Daiki Ueno) [2121766]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.5.1.rt7.215.el8_7]" date="1667822400">- [rt] build kernel-rt-4.18.0-425.5.1.rt7.215.el8_7 [2137411]
- ice: Fix interface being down after reset with link-down-on-close flag on (Petr Oros) [2136216 2024110]
- ice: Fix crash by keep old cfg when update TCs more than queues (Petr Oros) [2130992 2129902]
- ice: Fix tunnel checksum offload with fragmented traffic (Petr Oros) [2130992 2129902]
- ice: handle E822 generic device ID in PLDM header (Petr Oros) [2130992 2129902]
- ice: ethtool: Prohibit improper channel config for DCB (Petr Oros) [2130992 2129902]
- ice: ethtool: advertise 1000M speeds properly (Petr Oros) [2130992 2129902]
- ice: Fix switchdev rules book keeping (Petr Oros) [2130992 2129902]
- ice: fix access-beyond-end in the switch code (Petr Oros) [2130992 2129902]
- eth: ice: silence the GCC 12 array-bounds warning (Petr Oros) [2130992 2129902]
- ice: Expose RSS indirection tables for queue groups via ethtool (Petr Oros) [2130992 2129902]
- Revert "ice: Hide bus-info in ethtool for PRs in switchdev mode" (Petr Oros) [2130992 2129902]
- ice: remove period on argument description in ice_for_each_vf (Petr Oros) [2130992 2129902]
- ice: add a function comment for ice_cfg_mac_antispoof (Petr Oros) [2130992 2129902]
- ice: fix wording in comment for ice_reset_vf (Petr Oros) [2130992 2129902]
- ice: remove return value comment for ice_reset_all_vfs (Petr Oros) [2130992 2129902]
- ice: always check VF VSI pointer values (Petr Oros) [2130992 2129902]
- ice: add newline to dev_dbg in ice_vf_fdir_dump_info (Petr Oros) [2130992 2129902]
- ice: get switch id on switchdev devices (Petr Oros) [2130992 2129902]
- ice: return ENOSPC when exceeding ICE_MAX_CHAIN_WORDS (Petr Oros) [2130992 2129902]
- ice: introduce common helper for retrieving VSI by vsi_num (Petr Oros) [2130992 2129902]
- ice: use min_t() to make code cleaner in ice_gnss (Petr Oros) [2130992 2129902]
- ice: Add mpls+tso support (Petr Oros) [2130992 2129902]
- ice: switch: convert packet template match code to rodata (Petr Oros) [2130992 2129902]
- ice: switch: use convenience macros to declare dummy pkt templates (Petr Oros) [2130992 2129902]
- ice: switch: use a struct to pass packet template params (Petr Oros) [2130992 2129902]
- ice: switch: unobscurify bitops loop in ice_fill_adv_dummy_packet() (Petr Oros) [2130992 2129902]
- ice: switch: add and use u16[] aliases to ice_adv_lkup_elem::{h, m}_u (Petr Oros) [2130992 2129902]
- ice: Support GTP-U and GTP-C offload in switchdev (Petr Oros) [2130992 2129902]
- ice: Remove useless DMA-32 fallback configuration (Petr Oros) [2130992 2129902]
- ice: switch to napi_build_skb() (Petr Oros) [2130992 2129902]
- redhat: switch to z-stream dist tag and build targets (Jarod Wilson)
- block: avoid sign extend problem with default queue flags mask (Nico Pache) [2135813]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.6.1.rt7.216.el8_7]" date="1668168000">- [rt] build kernel-rt-4.18.0-425.6.1.rt7.216.el8_7 [2137411]
- ice: Add low latency Tx timestamp read (Petr Oros) [2136036 2092425]
- ice: introduce ice_ptp_reset_cached_phctime function (Petr Oros) [2136036 2092425]
- ice: re-arrange some static functions in ice_ptp.c (Petr Oros) [2136036 2092425]
- ice: track and warn when PHC update is late (Petr Oros) [2136036 2092425]
- ice: track Tx timestamp stats similar to other Intel drivers (Petr Oros) [2136036 2092425]
- ice: implement adjfine with mul_u64_u64_div_u64 (Petr Oros) [2136036 2092425]
- ice: Add EXTTS feature to the feature bitmap (Petr Oros) [2136036 2092425]
- math: Export mul_u64_u64_div_u64 (Petr Oros) [2136036 2092425]
- vfio/type1: Unpin zero pages (Alex Williamson) [2128515 2123015]
- net: atlantic: remove aq_nic_deinit() when resume (Íñigo Huguet) [2131935 2130839]
- net: atlantic: remove deep parameter on suspend/resume functions (Íñigo Huguet) [2131935 2130839]
- CI: Use zstream builder container (Veronika Kabatova)
- CI: Add disttag override for 8.7 (Veronika Kabatova)</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.7.1.rt7.217.el8_7]" date="1669723200">- [rt] build kernel-rt-4.18.0-425.7.1.rt7.217.el8_7 [2137411]
- ice: Add additional CSR registers to ETHTOOL_GREGS (Petr Oros) [2136513 2131024]
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps (Petr Oros) [2137270 2106964]
- i40e: Fix VF set max MTU size (Petr Oros) [2137270 2106964]
- iavf: Fix set max MTU size with port VLAN and jumbo frames (Petr Oros) [2137270 2106964]
- iavf: Fix bad page state (Petr Oros) [2137270 2106964]
- Revert "scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels" (Jarod Wilson)
- scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels (Tomas Henzl) [2139216]
- Revert "ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems" (Jarod Wilson)
- ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems (Wei Huang) [2142170 2130653]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.8.1.rt7.218.el8_7]" date="1669982400">- [rt] build kernel-rt-4.18.0-425.8.1.rt7.218.el8_7 [2137411]
- scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels (Tomas Henzl) [2139216 2134535]
- RDMA/mlx5: Set local port to one when accessing counters (Mohammad Kabat) [2141957 2077119]
- drm/mgag200: Fix PLL setup for G200_SE_A rev &gt;=4 (Jocelyn Falempe) [2140152 2130159]
- iavf: Do not restart Tx queues after reset task failure (Petr Oros) [2149081 2134005]
- iavf: Fix a crash during reset task (Petr Oros) [2149081 2134005]
- scsi: core: Allow the ALUA transitioning state enough time (Tomas Henzl) [2147374 2084250]
- scsi: core: Return BLK_STS_TRANSPORT for ALUA transitioning (Tomas Henzl) [2147374 2084250]
- i40e: Fix DMA mappings leak (Ivan Vecera) [2138205 2077847]
- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2142724 2142725] {CVE-2022-2964}
- net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2142724 2142725] {CVE-2022-2964}</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.9.1.rt7.219.el8_7]" date="1670587200">- [rt] build kernel-rt-4.18.0-425.9.1.rt7.219.el8_7 [2137411]
- Documentation/admin-guide: Document nomodeset kernel parameter (Jocelyn Falempe) [2145218 2143952]
- drm: Move nomodeset kernel parameter to the DRM subsystem (Jocelyn Falempe) [2145218 2143952]
- wait: Fix __wait_event_hrtimeout for RT/DL tasks (Derek Barbosa) [2138953 2125233]
- scsi: zfcp: Fix missing auto port scan and thus missing target ports (Tobias Huschle) [2127849 2121089]
- net: Fix return value of qdisc ingress handling on success (Ivan Vecera) [2141878 2131361]</changelog>
  <changelog author="Chris White &lt;chwhite@redhat.com&gt; [4.18.0-425.10.1.rt7.220.el8_7]" date="1671192000">- [rt] build kernel-rt-4.18.0-425.10.1.rt7.220.el8_7 [2137411]
- scsi: target: loop: Fix handling of aborted TMRs (Maurizio Lombardi) [2144583 2141713]
- ice: virtchnl rss hena support (Petr Oros) [2148130]
- ice: Fix configuring VIRTCHNL_OP_CONFIG_VSI_QUEUES with unbalanced queues (Michal Schmidt) [2142017 2137378]
- ice: Add support Flex RXD (Michal Schmidt) [2138157 2131310]
- netfilter: flowtable: fix stuck flows on cleanup due to pending work (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: add function to invoke garbage collection immediately (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: pass flowtable to nf_flow_table_iterate() (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: separate replace, destroy and stats to different workqueues (Phil Sutter) [2134084 2131370]
- x86/paravirt: Add a dummy __x86_paravirt_patch_template() function (Waiman Long) [2152206 2144161]
- x86/paravirt: Fix kABI breakage in struct pv_mmu_ops (Waiman Long) [2152206 2144161]
- drm/i915: fix TLB invalidation for Gen12 video and compute engines (Wander Lairson Costa) [2148162 2148163] {CVE-2022-4139}
- PCI: hv: Do not set PCI_COMMAND_MEMORY to reduce VM boot time (Emanuele Giuseppe Esposito) [2150912 2082836]
- iavf: Fix cached head and tail value for iavf_get_tx_pending (Stefan Assmann) [2149742 2103944]
- iavf: Fix change VF's mac address (Stefan Assmann) [2149742 2103944]
- iavf: Fix race between iavf_close and iavf_reset_task (Stefan Assmann) [2149742 2103944]
- net: ethernet: move from strlcpy with unused retval to strscpy (Stefan Assmann) [2149742 2103944]
- iavf: Fix 'tc qdisc show' listing too many queues (Stefan Assmann) [2149742 2103944]
- iavf: Fix max_rate limiting (Stefan Assmann) [2149742 2103944]
- iavf: Check for duplicate TC flower filter before parsing (Stefan Assmann) [2149742 2103944]
- iavf: Fix handling of dummy receive descriptors (Stefan Assmann) [2149742 2103944]
- iavf: Disallow changing rx/tx-frames and rx/tx-frames-irq (Stefan Assmann) [2149742 2103944]
- intel/iavf:fix repeated words in comments (Stefan Assmann) [2149742 2103944]
- intel: remove unused macros (Stefan Assmann) [2149742 2103944]
- iavf: Add waiting for response from PF in set mac (Stefan Assmann) [2149742 2103944]</changelog>
</package>
<package pkgid="3ad9a3c6c95f970f9091700d18785875ce68e548ac95d06a7e2da69896979a8d" name="kernel-rt-debug" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="425.13.1.rt7.223.el8_7"/>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.4.1.rt7.214.el8]" date="1665144000">- [rt] build kernel-rt-4.18.0-425.4.1.rt7.214.el8 [2067251]
- random: allow reseeding DRBG with getrandom (Daiki Ueno) [2121766]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.5.1.rt7.215.el8_7]" date="1667822400">- [rt] build kernel-rt-4.18.0-425.5.1.rt7.215.el8_7 [2137411]
- ice: Fix interface being down after reset with link-down-on-close flag on (Petr Oros) [2136216 2024110]
- ice: Fix crash by keep old cfg when update TCs more than queues (Petr Oros) [2130992 2129902]
- ice: Fix tunnel checksum offload with fragmented traffic (Petr Oros) [2130992 2129902]
- ice: handle E822 generic device ID in PLDM header (Petr Oros) [2130992 2129902]
- ice: ethtool: Prohibit improper channel config for DCB (Petr Oros) [2130992 2129902]
- ice: ethtool: advertise 1000M speeds properly (Petr Oros) [2130992 2129902]
- ice: Fix switchdev rules book keeping (Petr Oros) [2130992 2129902]
- ice: fix access-beyond-end in the switch code (Petr Oros) [2130992 2129902]
- eth: ice: silence the GCC 12 array-bounds warning (Petr Oros) [2130992 2129902]
- ice: Expose RSS indirection tables for queue groups via ethtool (Petr Oros) [2130992 2129902]
- Revert "ice: Hide bus-info in ethtool for PRs in switchdev mode" (Petr Oros) [2130992 2129902]
- ice: remove period on argument description in ice_for_each_vf (Petr Oros) [2130992 2129902]
- ice: add a function comment for ice_cfg_mac_antispoof (Petr Oros) [2130992 2129902]
- ice: fix wording in comment for ice_reset_vf (Petr Oros) [2130992 2129902]
- ice: remove return value comment for ice_reset_all_vfs (Petr Oros) [2130992 2129902]
- ice: always check VF VSI pointer values (Petr Oros) [2130992 2129902]
- ice: add newline to dev_dbg in ice_vf_fdir_dump_info (Petr Oros) [2130992 2129902]
- ice: get switch id on switchdev devices (Petr Oros) [2130992 2129902]
- ice: return ENOSPC when exceeding ICE_MAX_CHAIN_WORDS (Petr Oros) [2130992 2129902]
- ice: introduce common helper for retrieving VSI by vsi_num (Petr Oros) [2130992 2129902]
- ice: use min_t() to make code cleaner in ice_gnss (Petr Oros) [2130992 2129902]
- ice: Add mpls+tso support (Petr Oros) [2130992 2129902]
- ice: switch: convert packet template match code to rodata (Petr Oros) [2130992 2129902]
- ice: switch: use convenience macros to declare dummy pkt templates (Petr Oros) [2130992 2129902]
- ice: switch: use a struct to pass packet template params (Petr Oros) [2130992 2129902]
- ice: switch: unobscurify bitops loop in ice_fill_adv_dummy_packet() (Petr Oros) [2130992 2129902]
- ice: switch: add and use u16[] aliases to ice_adv_lkup_elem::{h, m}_u (Petr Oros) [2130992 2129902]
- ice: Support GTP-U and GTP-C offload in switchdev (Petr Oros) [2130992 2129902]
- ice: Remove useless DMA-32 fallback configuration (Petr Oros) [2130992 2129902]
- ice: switch to napi_build_skb() (Petr Oros) [2130992 2129902]
- redhat: switch to z-stream dist tag and build targets (Jarod Wilson)
- block: avoid sign extend problem with default queue flags mask (Nico Pache) [2135813]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.6.1.rt7.216.el8_7]" date="1668168000">- [rt] build kernel-rt-4.18.0-425.6.1.rt7.216.el8_7 [2137411]
- ice: Add low latency Tx timestamp read (Petr Oros) [2136036 2092425]
- ice: introduce ice_ptp_reset_cached_phctime function (Petr Oros) [2136036 2092425]
- ice: re-arrange some static functions in ice_ptp.c (Petr Oros) [2136036 2092425]
- ice: track and warn when PHC update is late (Petr Oros) [2136036 2092425]
- ice: track Tx timestamp stats similar to other Intel drivers (Petr Oros) [2136036 2092425]
- ice: implement adjfine with mul_u64_u64_div_u64 (Petr Oros) [2136036 2092425]
- ice: Add EXTTS feature to the feature bitmap (Petr Oros) [2136036 2092425]
- math: Export mul_u64_u64_div_u64 (Petr Oros) [2136036 2092425]
- vfio/type1: Unpin zero pages (Alex Williamson) [2128515 2123015]
- net: atlantic: remove aq_nic_deinit() when resume (Íñigo Huguet) [2131935 2130839]
- net: atlantic: remove deep parameter on suspend/resume functions (Íñigo Huguet) [2131935 2130839]
- CI: Use zstream builder container (Veronika Kabatova)
- CI: Add disttag override for 8.7 (Veronika Kabatova)</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.7.1.rt7.217.el8_7]" date="1669723200">- [rt] build kernel-rt-4.18.0-425.7.1.rt7.217.el8_7 [2137411]
- ice: Add additional CSR registers to ETHTOOL_GREGS (Petr Oros) [2136513 2131024]
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps (Petr Oros) [2137270 2106964]
- i40e: Fix VF set max MTU size (Petr Oros) [2137270 2106964]
- iavf: Fix set max MTU size with port VLAN and jumbo frames (Petr Oros) [2137270 2106964]
- iavf: Fix bad page state (Petr Oros) [2137270 2106964]
- Revert "scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels" (Jarod Wilson)
- scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels (Tomas Henzl) [2139216]
- Revert "ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems" (Jarod Wilson)
- ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems (Wei Huang) [2142170 2130653]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.8.1.rt7.218.el8_7]" date="1669982400">- [rt] build kernel-rt-4.18.0-425.8.1.rt7.218.el8_7 [2137411]
- scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels (Tomas Henzl) [2139216 2134535]
- RDMA/mlx5: Set local port to one when accessing counters (Mohammad Kabat) [2141957 2077119]
- drm/mgag200: Fix PLL setup for G200_SE_A rev &gt;=4 (Jocelyn Falempe) [2140152 2130159]
- iavf: Do not restart Tx queues after reset task failure (Petr Oros) [2149081 2134005]
- iavf: Fix a crash during reset task (Petr Oros) [2149081 2134005]
- scsi: core: Allow the ALUA transitioning state enough time (Tomas Henzl) [2147374 2084250]
- scsi: core: Return BLK_STS_TRANSPORT for ALUA transitioning (Tomas Henzl) [2147374 2084250]
- i40e: Fix DMA mappings leak (Ivan Vecera) [2138205 2077847]
- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2142724 2142725] {CVE-2022-2964}
- net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2142724 2142725] {CVE-2022-2964}</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.9.1.rt7.219.el8_7]" date="1670587200">- [rt] build kernel-rt-4.18.0-425.9.1.rt7.219.el8_7 [2137411]
- Documentation/admin-guide: Document nomodeset kernel parameter (Jocelyn Falempe) [2145218 2143952]
- drm: Move nomodeset kernel parameter to the DRM subsystem (Jocelyn Falempe) [2145218 2143952]
- wait: Fix __wait_event_hrtimeout for RT/DL tasks (Derek Barbosa) [2138953 2125233]
- scsi: zfcp: Fix missing auto port scan and thus missing target ports (Tobias Huschle) [2127849 2121089]
- net: Fix return value of qdisc ingress handling on success (Ivan Vecera) [2141878 2131361]</changelog>
  <changelog author="Chris White &lt;chwhite@redhat.com&gt; [4.18.0-425.10.1.rt7.220.el8_7]" date="1671192000">- [rt] build kernel-rt-4.18.0-425.10.1.rt7.220.el8_7 [2137411]
- scsi: target: loop: Fix handling of aborted TMRs (Maurizio Lombardi) [2144583 2141713]
- ice: virtchnl rss hena support (Petr Oros) [2148130]
- ice: Fix configuring VIRTCHNL_OP_CONFIG_VSI_QUEUES with unbalanced queues (Michal Schmidt) [2142017 2137378]
- ice: Add support Flex RXD (Michal Schmidt) [2138157 2131310]
- netfilter: flowtable: fix stuck flows on cleanup due to pending work (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: add function to invoke garbage collection immediately (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: pass flowtable to nf_flow_table_iterate() (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: separate replace, destroy and stats to different workqueues (Phil Sutter) [2134084 2131370]
- x86/paravirt: Add a dummy __x86_paravirt_patch_template() function (Waiman Long) [2152206 2144161]
- x86/paravirt: Fix kABI breakage in struct pv_mmu_ops (Waiman Long) [2152206 2144161]
- drm/i915: fix TLB invalidation for Gen12 video and compute engines (Wander Lairson Costa) [2148162 2148163] {CVE-2022-4139}
- PCI: hv: Do not set PCI_COMMAND_MEMORY to reduce VM boot time (Emanuele Giuseppe Esposito) [2150912 2082836]
- iavf: Fix cached head and tail value for iavf_get_tx_pending (Stefan Assmann) [2149742 2103944]
- iavf: Fix change VF's mac address (Stefan Assmann) [2149742 2103944]
- iavf: Fix race between iavf_close and iavf_reset_task (Stefan Assmann) [2149742 2103944]
- net: ethernet: move from strlcpy with unused retval to strscpy (Stefan Assmann) [2149742 2103944]
- iavf: Fix 'tc qdisc show' listing too many queues (Stefan Assmann) [2149742 2103944]
- iavf: Fix max_rate limiting (Stefan Assmann) [2149742 2103944]
- iavf: Check for duplicate TC flower filter before parsing (Stefan Assmann) [2149742 2103944]
- iavf: Fix handling of dummy receive descriptors (Stefan Assmann) [2149742 2103944]
- iavf: Disallow changing rx/tx-frames and rx/tx-frames-irq (Stefan Assmann) [2149742 2103944]
- intel/iavf:fix repeated words in comments (Stefan Assmann) [2149742 2103944]
- intel: remove unused macros (Stefan Assmann) [2149742 2103944]
- iavf: Add waiting for response from PF in set mac (Stefan Assmann) [2149742 2103944]</changelog>
  <changelog author="Chris White &lt;chwhite@redhat.com&gt; [4.18.0-425.11.1.rt7.221.el8_7]" date="1673352000">- [rt] build kernel-rt-4.18.0-425.11.1.rt7.221.el8_7 [2159806]
- NFSD: Protect against send buffer overflow in NFSv3 READ (Scott Mayhew) [2143174] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv2 READ (Scott Mayhew) [2143174] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv3 READDIR (Scott Mayhew) [2143174] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv2 READDIR (Scott Mayhew) [2143174] {CVE-2022-43945}
- SUNRPC: Fix svcxdr_init_encode's buflen calculation (Scott Mayhew) [2143174] {CVE-2022-43945}
- SUNRPC: Fix svcxdr_init_decode's end-of-buffer calculation (Scott Mayhew) [2143174] {CVE-2022-43945}
- panic, kexec: make __crash_kexec() NMI safe (Valentin Schneider) [2139580]
- kexec: turn all kexec_mutex acquisitions into trylocks (Valentin Schneider) [2139580]
- kexec: move locking into do_kexec_load (Valentin Schneider) [2139580]
- vdpa/mlx5: re-create forwarding rules after mac modified (Laurent Vivier) [2152912]
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry (Waiman Long) [2153653]
- irq: Call tick_irq_enter() inside HARDIRQ_OFFSET (Waiman Long) [2153653]
- irqtime: Move irqtime entry accounting after irq offset incrementation (Waiman Long) [2153653]
- sched/vtime: Consolidate IRQ time accounting (Waiman Long) [2153653]
- s390/vtime: Use the generic IRQ entry accounting (Waiman Long) [2153653]
- sched/cputime: Remove symbol exports from IRQ time accounting (Waiman Long) [2153653]
- genirq/irqdomain: Don't try to free an interrupt that has no mapping (Waiman Long) [2153653]
- genirq: Provide __irq_enter/exit_raw() (Waiman Long) [2153653]
- powerpc/time: Only set CONFIG_ARCH_HAS_SCALED_CPUTIME on PPC64 (Waiman Long) [2153653]
- powerpc/time: isolate scaled cputime accounting in dedicated functions. (Waiman Long) [2153653]
- PCI: hv: Fix synchronization between channel callback and hv_pci_bus_exit() (Mohammed Gamal) [2155280]
- PCI: hv: Fix synchronization between channel callback and hv_compose_msi_msg() (Mohammed Gamal) [2155280]
- PCI: hv: Use vmbus_requestor to generate transaction IDs for VMbus hardening (Mohammed Gamal) [2155280]
- net/mlx5e: TC, Reject forwarding from internal port to internal port (Mohammad Kabat) [2141959 2131345]
- hv_netvsc: Fix race between VF offering and VF association message from host (Mohammed Gamal) [2155272]
- x86/mce: Reduce number of machine checks taken during recovery (Prarit Bhargava) [2137592 2104388]
- cgroup/cpuset: Reduce cpuset_rwsem writer latency (Waiman Long) [2153108]
- rcu/exp: Mark current CPU as exp-QS in IPI loop second pass (Waiman Long) [2153108]
- rcu: Always inline rcu_dynticks_task*_{enter,exit}() (Waiman Long) [2153108]
- rcu: Fix existing exp request check in sync_sched_exp_online_cleanup() (Waiman Long) [2153108]
- rcu: Fix macro name CONFIG_TASKS_RCU_TRACE (Waiman Long) [2153108]
- rcu: Fix stall-warning deadlock due to non-release of rcu_node -&gt;lock (Waiman Long) [2153108]
- rcu: Fix to include first blocked task in stall warning (Waiman Long) [2153108]
- cgroup: Use cgroup_attach_{lock,unlock}() from cgroup_attach_task_all() (Waiman Long) [2153108]
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all() (Waiman Long) [2153108]
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock (Waiman Long) [2153108]
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree (Waiman Long) [2153108]
- cgroup/cpuset: Fix a race between cpuset_attach() and cpu hotplug (Waiman Long) [2153108]
- cgroup: reduce dependency on cgroup_mutex (Waiman Long) [2153108]
- sunrpc: Set sk_allocation to GFP_NOFS to avoid using current-&gt;task_frag. (Guillaume Nault) [2153230]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.12.1.rt7.222.el8_7]" date="1674129600">- [rt] build kernel-rt-4.18.0-425.12.1.rt7.222.el8_7 [2159806]
- x86/fpu: Prevent FPU state corruption (Oleksandr Natalenko) [2134586 2130890]
- x86/fpu: Drop fpregs lock before inheriting FPU permissions (Eder Zulian) [2154460 2153549]
- kernel-doc: fix undefined args variable (Jan Stancek) [2157905 2134954]
- mm: memcontrol: fix potential oom_lock recursion deadlock (Waiman Long) [2157922 2138886]
- memcg: prohibit unconditional exceeding the limit of dying tasks (Waiman Long) [2157922 2138886]
- mm, oom: do not trigger out_of_memory from the #PF (Waiman Long) [2157922 2138886]
- mm, oom: pagefault_out_of_memory: don't force global OOM for dying tasks (Waiman Long) [2157922 2138886]
- mm: memcontrol: don't count limit-setting reclaim as memory pressure (Waiman Long) [2157922 2138886]
- KVM: s390: vsie: Fix the initialization of the epoch extension (epdx) field (Thomas Huth) [2158813 2151854]
- net: mana: Fix race on per-CQ variable napi work_done (Emanuele Giuseppe Esposito) [2155437 2151722]
- mei: me: add adler lake point S DID (Prarit Bhargava) [2141783 2141602]
- PCI: hv: Only reuse existing IRTE allocation for Multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix the definition of vector in hv_compose_msi_msg() (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix interrupt mapping for multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Reuse existing IRTE allocation in compose_msi_msg() (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix hv_arch_irq_unmask() for multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix multi-MSI to allow more than one MSI vector (Emanuele Giuseppe Esposito) [2155289 2100275]
- drm/ast: Support multiple outputs (Jarod Wilson) [2149287 2147553]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.13.1.rt7.223.el8_7]" date="1675339200">- [rt] build kernel-rt-4.18.0-425.13.1.rt7.223.el8_7 [2159806]
- mm/cgroup/reclaim: fix dirty pages throttling on cgroup v1 (Waiman Long) [2160221]
- mm: vmscan: remove deadlock due to throttling failing to make progress (Waiman Long) [2160221]
- mm: vmscan: reduce throttling due to a failure to make progress -fix (Waiman Long) [2160221]
- mm: vmscan: Reduce throttling due to a failure to make progress (Waiman Long) [2160221]
- mm/vmscan: delay waking of tasks throttled on NOPROGRESS (Waiman Long) [2160221]
- mm/vmscan: increase the timeout if page reclaim is not making progress (Waiman Long) [2160221]
- mm/vmscan: centralise timeout values for reclaim_throttle (Waiman Long) [2160221]
- mm/page_alloc: remove the throttling logic from the page allocator (Waiman Long) [2160221]
- mm/writeback: throttle based on page writeback instead of congestion (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim when no progress is being made (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim and compaction when too may pages are isolated (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim until some writeback completes if congested (Waiman Long) [2160221]
- mm/vmscan.c: delete or fix duplicated words (Waiman Long) [2160221]
- mm,page_alloc: PF_WQ_WORKER threads must sleep at should_reclaim_retry() (Nico Pache) [2160221]
- ceph: avoid putting the realm twice when decoding snaps fails (Xiubo Li) [2155797 2139881]
- mm/mremap: hold the rmap lock in write mode when moving page table entries. (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap: use pmd/pud_poplulate to update page table entries (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap: don't enable optimized PUD move if page table levels is 2 (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap: convert huge PUD move to separate helper (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap: fix BUILD_BUG_ON() error in get_extent (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap.c: fix extent calculation (Waiman Long) [2140950] {CVE-2022-41222}
- x86: mremap speedup - Enable HAVE_MOVE_PUD (Waiman Long) [2140950] {CVE-2022-41222}
- mm: speedup mremap on 1GB or larger regions (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap: start addresses are properly aligned (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap: calculate extent in one place (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap: it is sure to have enough space when extent meets requirement (Waiman Long) [2140950] {CVE-2022-41222}
- s390/boot: add secure boot trailer (Tobias Huschle) [2151530 2141967]
- i40e: Fix VF hang when reset is triggered on another VF (Ivan Vecera) [2160460 2103801]
- i2c: ismt: Fix an out-of-bounds bug in ismt_access() (Prarit Bhargava) [2154388 2119066] {CVE-2022-2873}
- iavf: schedule watchdog immediately when changing primary MAC (Michal Schmidt) [2163257 2152493]
- iavf: Move netdev_update_features() into watchdog task (Michal Schmidt) [2163257 2152493]
- iavf: fix temporary deadlock and failure to set MAC address (Michal Schmidt) [2163257 2152493]
- iavf: Fix error handling in iavf_init_module() (Michal Schmidt) [2163257 2152493]
- iommu/vt-d: Clean up si_domain in the init_dmars() error path (Jerry Snitselaar) [2149474 2118428]
- x86/pci/xen: Use msi_msg shadow structs (Jerry Snitselaar) [2149474 2118428]
- iommu/intel: Use msi_msg shadow structs (Jerry Snitselaar) [2149474 2118428]
- PCI: MSI: Fix Kconfig dependencies for PCI_MSI_ARCH_FALLBACKS (Jerry Snitselaar) [2149474 2118428]
- x86/apic/msi: Unbreak DMAR and HPET MSI (Jerry Snitselaar) [2149474 2118428]
- iommu/amd: Remove domain search for PCI/MSI (Jerry Snitselaar) [2149474 2118428]
- iommu/vt-d: Remove domain search for PCI/MSI[X] (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Make most MSI ops XEN private (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Cleanup the arch_*_msi_irqs() leftovers (Jerry Snitselaar) [2149474 2118428]
- PCI/MSI: Make arch_.*_msi_irq[s] fallbacks selectable (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Wrap XEN MSI management into irqdomain (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Consolidate XEN-MSI init (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Rework MSI teardown (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Make xen_msi_init() static and rename it to xen_hvm_msi_init() (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Move apic_post_init() invocation to one place (Jerry Snitselaar) [2149474 2118428]
- x86/msi: Use generic MSI domain ops (Jerry Snitselaar) [2149474 2118428]
- x86/msi: Remove pointless vcpu_affinity callback (Jerry Snitselaar) [2149474 2118428]
- iommu/vt-d: Fix compile error with CONFIG_PCI_ATS not set (Myron Stowe) [2149474 2118428]
- iommu/vt-d: Cure VF irqdomain hickup (Myron Stowe) [2149474 2118428]
- x86/pci: Set default irq domain in pcibios_add_device() (Myron Stowe) [2149474 2118428]
- iommm/amd: Store irq domain in struct device (Myron Stowe) [2149474 2118428]
- iommm/vt-d: Store irq domain in struct device (Myron Stowe) [2149474 2118428]
- PCI/MSI: Provide pci_dev_has_special_msi_domain() helper (Myron Stowe) [2149474 2118428]
- x86/msi: Consolidate MSI allocation (Myron Stowe) [2149474 2118428]
- PCI/MSI: Rework pci_msi_domain_calc_hwirq() (Myron Stowe) [2149474 2118428]
- x86/irq: Consolidate UV domain allocation (Myron Stowe) [2149474 2118428]
- x86/irq: Consolidate DMAR irq allocation (Myron Stowe) [2149474 2118428]
- x86_ioapic_Consolidate_IOAPIC_allocation (Myron Stowe) [2149474 2118428]
- x86/msi: Consolidate HPET allocation (Myron Stowe) [2149474 2118428]
- iommu/irq_remapping: Consolidate irq domain lookup (Myron Stowe) [2149474 2118428]
- iommu/amd: Consolidate irq domain getter (Myron Stowe) [2149474 2118428]
- iommu/vt-d: Consolidate irq domain getter (Myron Stowe) [2149474 2118428]
- x86/irq: Add allocation type for parent domain retrieval (Myron Stowe) [2149474 2118428]
- irqdomain: Export irq_domain_update_bus_token (Myron Stowe) [2149474 2118428]
- gitlab-ci: use CI templates from production branch (Michael Hofmann)
- iavf: remove INITIAL_MAC_SET to allow gARP to work properly (Stefan Assmann) [2149745 1938635]
- Revert "scsi: iscsi: ql4xxx: Use per-session workqueue for unbinding" (Chris Leech) [2152734 2122624]
- Revert "scsi: iscsi: Use the session workqueue for recovery" (Chris Leech) [2152734 2122624]
- arm64/bpf: Remove 128MB limit for BPF JIT programs (Yauheni Kaliuta) [2152138 2140163]
- bpf: Define bpf_jit_alloc_exec_limit for arm64 JIT (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: add `type` and `data` fields (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: use `ex` for `exception_table_entry` (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: make fixup_exception() return bool (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: consolidate definitions (Yauheni Kaliuta) [2152138 2140163]
- arm64: kvm: use kvm_exception_table_entry (Yauheni Kaliuta) [2152138 2140163]
- be2net: Fix buffer overflow in be_get_module_eeprom (Josef Oskera) [2160182 2126917]
- sched: Switch to upstream migrate disable code (Crystal Wood) [2132062]
- tick: Fix timer storm since introduction of timersd (Valentin Schneider) [2127204]
- softirq: Use a dedicated thread for timer wakeups. (Valentin Schneider) [2127204]</changelog>
</package>
<package pkgid="188edd882cc2651565af4050ce15b1b91424dfed4ac0cca7911a6d8f263c1900" name="kernel-rt-debug" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="425.19.2.rt7.230.el8_7"/>
  <changelog author="Chris White &lt;chwhite@redhat.com&gt; [4.18.0-425.11.1.rt7.221.el8_7]" date="1673352000">- [rt] build kernel-rt-4.18.0-425.11.1.rt7.221.el8_7 [2159806]
- NFSD: Protect against send buffer overflow in NFSv3 READ (Scott Mayhew) [2143174] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv2 READ (Scott Mayhew) [2143174] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv3 READDIR (Scott Mayhew) [2143174] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv2 READDIR (Scott Mayhew) [2143174] {CVE-2022-43945}
- SUNRPC: Fix svcxdr_init_encode's buflen calculation (Scott Mayhew) [2143174] {CVE-2022-43945}
- SUNRPC: Fix svcxdr_init_decode's end-of-buffer calculation (Scott Mayhew) [2143174] {CVE-2022-43945}
- panic, kexec: make __crash_kexec() NMI safe (Valentin Schneider) [2139851]
- kexec: turn all kexec_mutex acquisitions into trylocks (Valentin Schneider) [2139580]
- kexec: move locking into do_kexec_load (Valentin Schneider) [2139580]
- vdpa/mlx5: re-create forwarding rules after mac modified (Laurent Vivier) [2152912]
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry (Waiman Long) [2153653]
- irq: Call tick_irq_enter() inside HARDIRQ_OFFSET (Waiman Long) [2153653]
- irqtime: Move irqtime entry accounting after irq offset incrementation (Waiman Long) [2153653]
- sched/vtime: Consolidate IRQ time accounting (Waiman Long) [2153653]
- s390/vtime: Use the generic IRQ entry accounting (Waiman Long) [2153653]
- sched/cputime: Remove symbol exports from IRQ time accounting (Waiman Long) [2153653]
- genirq/irqdomain: Don't try to free an interrupt that has no mapping (Waiman Long) [2153653]
- genirq: Provide __irq_enter/exit_raw() (Waiman Long) [2153653]
- powerpc/time: Only set CONFIG_ARCH_HAS_SCALED_CPUTIME on PPC64 (Waiman Long) [2153653]
- powerpc/time: isolate scaled cputime accounting in dedicated functions. (Waiman Long) [2153653]
- PCI: hv: Fix synchronization between channel callback and hv_pci_bus_exit() (Mohammed Gamal) [2155280]
- PCI: hv: Fix synchronization between channel callback and hv_compose_msi_msg() (Mohammed Gamal) [2155280]
- PCI: hv: Use vmbus_requestor to generate transaction IDs for VMbus hardening (Mohammed Gamal) [2155280]
- net/mlx5e: TC, Reject forwarding from internal port to internal port (Mohammad Kabat) [2141959 2131345]
- hv_netvsc: Fix race between VF offering and VF association message from host (Mohammed Gamal) [2155272]
- x86/mce: Reduce number of machine checks taken during recovery (Prarit Bhargava) [2137592 2104388]
- cgroup/cpuset: Reduce cpuset_rwsem writer latency (Waiman Long) [2153108]
- rcu/exp: Mark current CPU as exp-QS in IPI loop second pass (Waiman Long) [2153108]
- rcu: Always inline rcu_dynticks_task*_{enter,exit}() (Waiman Long) [2153108]
- rcu: Fix existing exp request check in sync_sched_exp_online_cleanup() (Waiman Long) [2153108]
- rcu: Fix macro name CONFIG_TASKS_RCU_TRACE (Waiman Long) [2153108]
- rcu: Fix stall-warning deadlock due to non-release of rcu_node -&gt;lock (Waiman Long) [2153108]
- rcu: Fix to include first blocked task in stall warning (Waiman Long) [2153108]
- cgroup: Use cgroup_attach_{lock,unlock}() from cgroup_attach_task_all() (Waiman Long) [2153108]
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all() (Waiman Long) [2153108]
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock (Waiman Long) [2153108]
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree (Waiman Long) [2153108]
- cgroup/cpuset: Fix a race between cpuset_attach() and cpu hotplug (Waiman Long) [2153108]
- cgroup: reduce dependency on cgroup_mutex (Waiman Long) [2153108]
- sunrpc: Set sk_allocation to GFP_NOFS to avoid using current-&gt;task_frag. (Guillaume Nault) [2153230]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.12.1.rt7.222.el8_7]" date="1674129600">- [rt] build kernel-rt-4.18.0-425.12.1.rt7.222.el8_7 [2159806]
- x86/fpu: Prevent FPU state corruption (Oleksandr Natalenko) [2134586 2130890]
- x86/fpu: Drop fpregs lock before inheriting FPU permissions (Eder Zulian) [2154469 2153549]
- kernel-doc: fix undefined args variable (Jan Stancek) [2157905 2134954]
- mm: memcontrol: fix potential oom_lock recursion deadlock (Waiman Long) [2157922 2138886]
- memcg: prohibit unconditional exceeding the limit of dying tasks (Waiman Long) [2157922 2138886]
- mm, oom: do not trigger out_of_memory from the #PF (Waiman Long) [2157922 2138886]
- mm, oom: pagefault_out_of_memory: don't force global OOM for dying tasks (Waiman Long) [2157922 2138886]
- mm: memcontrol: don't count limit-setting reclaim as memory pressure (Waiman Long) [2157922 2138886]
- KVM: s390: vsie: Fix the initialization of the epoch extension (epdx) field (Thomas Huth) [2158813 2151854]
- net: mana: Fix race on per-CQ variable napi work_done (Emanuele Giuseppe Esposito) [2155437 2151722]
- mei: me: add adler lake point S DID (Prarit Bhargava) [2141783 2141602]
- PCI: hv: Only reuse existing IRTE allocation for Multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix the definition of vector in hv_compose_msi_msg() (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix interrupt mapping for multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Reuse existing IRTE allocation in compose_msi_msg() (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix hv_arch_irq_unmask() for multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix multi-MSI to allow more than one MSI vector (Emanuele Giuseppe Esposito) [2155289 2100275]
- drm/ast: Support multiple outputs (Jarod Wilson) [2149287 2147553]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.13.1.rt7.223.el8_7]" date="1675339200">- [rt] build kernel-rt-4.18.0-425.13.1.rt7.223.el8_7 [2159806]
- mm/cgroup/reclaim: fix dirty pages throttling on cgroup v1 (Waiman Long) [2160221]
- mm: vmscan: remove deadlock due to throttling failing to make progress (Waiman Long) [2160221]
- mm: vmscan: reduce throttling due to a failure to make progress -fix (Waiman Long) [2160221]
- mm: vmscan: Reduce throttling due to a failure to make progress (Waiman Long) [2160221]
- mm/vmscan: delay waking of tasks throttled on NOPROGRESS (Waiman Long) [2160221]
- mm/vmscan: increase the timeout if page reclaim is not making progress (Waiman Long) [2160221]
- mm/vmscan: centralise timeout values for reclaim_throttle (Waiman Long) [2160221]
- mm/page_alloc: remove the throttling logic from the page allocator (Waiman Long) [2160221]
- mm/writeback: throttle based on page writeback instead of congestion (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim when no progress is being made (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim and compaction when too may pages are isolated (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim until some writeback completes if congested (Waiman Long) [2160221]
- mm/vmscan.c: delete or fix duplicated words (Waiman Long) [2160221]
- mm,page_alloc: PF_WQ_WORKER threads must sleep at should_reclaim_retry() (Nico Pache) [2160221]
- ceph: avoid putting the realm twice when decoding snaps fails (Xiubo Li) [2155797 2139881]
- mm/mremap: hold the rmap lock in write mode when moving page table entries. (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap: use pmd/pud_poplulate to update page table entries (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap: don't enable optimized PUD move if page table levels is 2 (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap: convert huge PUD move to separate helper (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap: fix BUILD_BUG_ON() error in get_extent (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap.c: fix extent calculation (Waiman Long) [2140950] {CVE-2022-41222}
- x86: mremap speedup - Enable HAVE_MOVE_PUD (Waiman Long) [2140950] {CVE-2022-41222}
- mm: speedup mremap on 1GB or larger regions (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap: start addresses are properly aligned (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap: calculate extent in one place (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap: it is sure to have enough space when extent meets requirement (Waiman Long) [2140950] {CVE-2022-41222}
- s390/boot: add secure boot trailer (Tobias Huschle) [2151530 2141967]
- i40e: Fix VF hang when reset is triggered on another VF (Ivan Vecera) [2160460 2103801]
- i2c: ismt: Fix an out-of-bounds bug in ismt_access() (Prarit Bhargava) [2154388 2119066] {CVE-2022-2873}
- iavf: schedule watchdog immediately when changing primary MAC (Michal Schmidt) [2163257 2152493]
- iavf: Move netdev_update_features() into watchdog task (Michal Schmidt) [2163257 2152493]
- iavf: fix temporary deadlock and failure to set MAC address (Michal Schmidt) [2163257 2152493]
- iavf: Fix error handling in iavf_init_module() (Michal Schmidt) [2163257 2152493]
- iommu/vt-d: Clean up si_domain in the init_dmars() error path (Jerry Snitselaar) [2149474 2118428]
- x86/pci/xen: Use msi_msg shadow structs (Jerry Snitselaar) [2149474 2118428]
- iommu/intel: Use msi_msg shadow structs (Jerry Snitselaar) [2149474 2118428]
- PCI: MSI: Fix Kconfig dependencies for PCI_MSI_ARCH_FALLBACKS (Jerry Snitselaar) [2149474 2118428]
- x86/apic/msi: Unbreak DMAR and HPET MSI (Jerry Snitselaar) [2149474 2118428]
- iommu/amd: Remove domain search for PCI/MSI (Jerry Snitselaar) [2149474 2118428]
- iommu/vt-d: Remove domain search for PCI/MSI[X] (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Make most MSI ops XEN private (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Cleanup the arch_*_msi_irqs() leftovers (Jerry Snitselaar) [2149474 2118428]
- PCI/MSI: Make arch_.*_msi_irq[s] fallbacks selectable (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Wrap XEN MSI management into irqdomain (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Consolidate XEN-MSI init (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Rework MSI teardown (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Make xen_msi_init() static and rename it to xen_hvm_msi_init() (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Move apic_post_init() invocation to one place (Jerry Snitselaar) [2149474 2118428]
- x86/msi: Use generic MSI domain ops (Jerry Snitselaar) [2149474 2118428]
- x86/msi: Remove pointless vcpu_affinity callback (Jerry Snitselaar) [2149474 2118428]
- iommu/vt-d: Fix compile error with CONFIG_PCI_ATS not set (Myron Stowe) [2149474 2118428]
- iommu/vt-d: Cure VF irqdomain hickup (Myron Stowe) [2149474 2118428]
- x86/pci: Set default irq domain in pcibios_add_device() (Myron Stowe) [2149474 2118428]
- iommm/amd: Store irq domain in struct device (Myron Stowe) [2149474 2118428]
- iommm/vt-d: Store irq domain in struct device (Myron Stowe) [2149474 2118428]
- PCI/MSI: Provide pci_dev_has_special_msi_domain() helper (Myron Stowe) [2149474 2118428]
- x86/msi: Consolidate MSI allocation (Myron Stowe) [2149474 2118428]
- PCI/MSI: Rework pci_msi_domain_calc_hwirq() (Myron Stowe) [2149474 2118428]
- x86/irq: Consolidate UV domain allocation (Myron Stowe) [2149474 2118428]
- x86/irq: Consolidate DMAR irq allocation (Myron Stowe) [2149474 2118428]
- x86_ioapic_Consolidate_IOAPIC_allocation (Myron Stowe) [2149474 2118428]
- x86/msi: Consolidate HPET allocation (Myron Stowe) [2149474 2118428]
- iommu/irq_remapping: Consolidate irq domain lookup (Myron Stowe) [2149474 2118428]
- iommu/amd: Consolidate irq domain getter (Myron Stowe) [2149474 2118428]
- iommu/vt-d: Consolidate irq domain getter (Myron Stowe) [2149474 2118428]
- x86/irq: Add allocation type for parent domain retrieval (Myron Stowe) [2149474 2118428]
- irqdomain: Export irq_domain_update_bus_token (Myron Stowe) [2149474 2118428]
- gitlab-ci: use CI templates from production branch (Michael Hofmann)
- iavf: remove INITIAL_MAC_SET to allow gARP to work properly (Stefan Assmann) [2149745 1938635]
- Revert "scsi: iscsi: ql4xxx: Use per-session workqueue for unbinding" (Chris Leech) [2152734 2122624]
- Revert "scsi: iscsi: Use the session workqueue for recovery" (Chris Leech) [2152734 2122624]
- arm64/bpf: Remove 128MB limit for BPF JIT programs (Yauheni Kaliuta) [2152138 2140163]
- bpf: Define bpf_jit_alloc_exec_limit for arm64 JIT (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: add `type` and `data` fields (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: use `ex` for `exception_table_entry` (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: make fixup_exception() return bool (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: consolidate definitions (Yauheni Kaliuta) [2152138 2140163]
- arm64: kvm: use kvm_exception_table_entry (Yauheni Kaliuta) [2152138 2140163]
- be2net: Fix buffer overflow in be_get_module_eeprom (Josef Oskera) [2160182 2126917]
- sched: Switch to upstream migrate disable code (Crystal Wood) [2132062]
- tick: Fix timer storm since introduction of timersd (Valentin Schneider) [2127204]
- softirq: Use a dedicated thread for timer wakeups. (Valentin Schneider) [2127204]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.14.1.rt7.224.el8_7]" date="1676030400">- [rt] build kernel-rt-4.18.0-425.14.1.rt7.224.el8_7 [2172278]
- ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems (Wei Huang) [2142170 2130653]
- KVM: x86: nSVM: implement nested LBR virtualization (Emanuele Giuseppe Esposito) [2166362 2155149]
- KVM: x86: nSVM: correctly virtualize LBR msrs when L2 is running (Emanuele Giuseppe Esposito) [2166362 2155149]
- kvm: x86: SVM: use vmcb* instead of svm-&gt;vmcb where it makes sense (Emanuele Giuseppe Esposito) [2166362 2155149]
- KVM: x86: nSVM: implement nested VMLOAD/VMSAVE (Emanuele Giuseppe Esposito) [2166362 2155149]
- IB/iser: Fix login with authentication (Kamal Heib) [2161750 2120676]
- act_mirred: use the backlog for nested calls to mirred ingress (Davide Caratti) [2164648 2131339] {CVE-2022-4269}
- net/sched: act_mirred: better wording on protection against excessive stack growth (Davide Caratti) [2164648 2131339] {CVE-2022-4269}
- redhat/configs: Set CONFIG_X86_AMD_PSTATE to 'm' (Prarit Bhargava) [2151275 2145246]
- KVM: x86: smm: preserve interrupt shadow in SMRAM (Maxim Levitsky) [2166368 2097144]
- KVM: x86: SVM: don't save SVM state to SMRAM when VM is not long mode capable (Maxim Levitsky) [2166368 2097144]
- KVM: x86: SVM: use smram structs (Maxim Levitsky) [2166368 2097144]
- KVM: svm: drop explicit return value of kvm_vcpu_map (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: use smram struct for 64 bit smram load/restore (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: use smram struct for 32 bit smram load/restore (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: use smram structs in the common code (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: add structs for KVM's smram layout (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: check for failures on smm entry (Maxim Levitsky) [2166368 2097144]
- KVM: x86: do not go through ctxt-&gt;ops when emulating rsm (Maxim Levitsky) [2166368 2097144]
- KVM: x86: move SMM exit to a new file (Maxim Levitsky) [2166368 2097144]
- KVM: x86: move SMM entry to a new file (Maxim Levitsky) [2166368 2097144]
- KVM: x86: start moving SMM-related functions to new files (Maxim Levitsky) [2166368 2097144]
- bug: introduce ASSERT_STRUCT_OFFSET (Maxim Levitsky) [2166368 2097144]
- KVM: x86: Rename and expose helper to detect if INIT/SIPI are allowed (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: number of GPRs in the SMRAM image depends on the image format (Maxim Levitsky) [2166368 2097144]
- KVM: x86: emulator: update the emulation mode after CR0 write (Maxim Levitsky) [2166368 2097144]
- KVM: x86: emulator: update the emulation mode after rsm (Maxim Levitsky) [2166368 2097144]
- KVM: x86: emulator: introduce emulator_recalc_and_set_mode (Maxim Levitsky) [2166368 2097144]
- KVM: x86: emulator: em_sysexit should update ctxt-&gt;mode (Maxim Levitsky) [2166368 2097144]
- KVM: x86: Bug the VM if the emulator accesses a non-existent GPR (Maxim Levitsky) [2166368 2097144]
- \KVM: x86: Reduce the number of emulator GPRs to '8' for 32-bit KVM (Maxim Levitsky) [2166368 2097144]
- KVM: x86: Use 16-bit fields to track dirty/valid emulator GPRs (Maxim Levitsky) [2166368 2097144]
- KVM: x86: Omit VCPU_REGS_RIP from emulator's _regs array (Maxim Levitsky) [2166368 2097144]
- \KVM: x86: Harden _regs accesses to guard against buggy input (Maxim Levitsky) [2166368 2097144]
- KVM: x86: Grab regs_dirty in local 'unsigned long' (Maxim Levitsky) [2166368 2097144]
- proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152577 2152578] {CVE-2022-4378}
- proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152577 2152578] {CVE-2022-4378}</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.15.1.rt7.225.el8_7]" date="1676548800">- [rt] build kernel-rt-4.18.0-425.15.1.rt7.225.el8_7 [2172278]
- net/mlx5e: Fix use-after-free when reverting termination table (Amir Tzin) [2167640 2112927]
- net/mlx5: Do not query pci info while pci disabled (Amir Tzin) [2167645 2129249]
- x86/fpu: Fix copy_xstate_to_uabi() to copy init states correctly (Dean Nelson) [2168384 2122850]
- x86/fpu: Exclude dynamic states from init_fpstate (Dean Nelson) [2168384 2122850]
- x86/fpu: Fix the init_fpstate size check with the actual size (Dean Nelson) [2168384 2122850]
- x86/fpu: Configure init_fpstate attributes orderly (Dean Nelson) [2168384 2122850]
- x86/fpu/xstate: Fix the ARCH_REQ_XCOMP_PERM implementation (Dean Nelson) [2168384 2122850]
- net/mlx5: E-Switch, properly handle ingress tagged packets on VST (Amir Tzin) [2166665 2096109]
- cpuhotplug: Fix KABI breakage (Prarit Bhargava) [2162763 2156529]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.16.1.rt7.226.el8_7]" date="1677153600">- [rt] build kernel-rt-4.18.0-425.16.1.rt7.226.el8_7 [2172278]
- ipv6: fix panic when fib_lookup_arg-&gt;result is fib6_info (Jiri Benc) [2167602 2140599]
- ceph: blocklist the kclient when receiving corrupted snap trace (Xiubo Li) [2168896 2162414]
- ceph: move mount state enum to super.h (Xiubo Li) [2168896 2162414]
- s390/kexec: fix ipl report address for kdump (Tobias Huschle) [2166296 2161328]
- mm, compaction: fix fast_isolate_around() to stay within boundaries (Daniel Vacek) [2170576 2149309]
- scsi: storvsc: Fix swiotlb bounce buffer leak in confidential VM (Emanuele Giuseppe Esposito) [2170228 2150659]
- netfilter: conntrack: handle tcp challenge acks during connection reuse (Florian Westphal) [2165587 2158726]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.17.1.rt7.227.el8_7]" date="1677844800">- [rt] build kernel-rt-4.18.0-425.17.1.rt7.227.el8_7 [2172278]
- net: mana: Add rmb after checking owner bits (Mohammed Gamal) [2173103 2139462]
- net: mana: Add support of XDP_REDIRECT action (Mohammed Gamal) [2173103 2139462]
- net: mana: Add the Linux MANA PF driver (Mohammed Gamal) [2173103 2139462]
- ice: fix lost multicast packets in promisc mode (Ken Cox) [2172550 2138215]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.18.1.rt7.228.el8_7]" date="1678708800">- [rt] build kernel-rt-4.18.0-425.18.1.rt7.228.el8_7 [2172278]
- futex: Resend potentially swallowed owner death notification (Rafael Aquini) [2170054]
- irq_work: Move lazy work execution to dedicated irq_work kthreads (Valentin Schneider) [2172163]
- irq_work: Sync the patches (Valentin Schneider) [2172163]
- irq_work: Also rcuwait for !IRQ_WORK_HARD_IRQ on PREEMPT_RT (Valentin Schneider) [2172163]
- irq_work: Allow irq_work_sync() to sleep if irq_work() no IRQ support. (Valentin Schneider) [2172163]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.19.1.rt7.229.el8_7]" date="1678968000">- [rt] build kernel-rt-4.18.0-425.19.1.rt7.229.el8_7 [2172278]
- s390/dasd: fix no record found for raw_track_access (Tobias Huschle) [2167776 2161270]
- locking/rwsem: Disable preemption in all down_read*() and up_read() code paths (Waiman Long) [2170939 2162139]
- locking/rwsem: Prevent non-first waiter from spinning in down_write() slowpath (Waiman Long) [2170939 2162139]
- locking/rwsem: Allow slowpath writer to ignore handoff bit if not set by first waiter (Waiman Long) [2170939 2162139]
- locking/rwsem: Always try to wake waiters in out_nolock path (Waiman Long) [2170939 2162139]
- locking/rwsem: No need to check for handoff bit if wait queue empty (Waiman Long) [2170939 2162139]
- locking/rwsem: Make handoff bit handling more consistent (Waiman Long) [2170939 2162139]
- locking/rwsem: Disable preemption while trying for rwsem lock (Waiman Long) [2170939 2162139]
- locking/rwsem: Conditionally wake waiters in reader/writer slowpaths (Waiman Long) [2170939 2162139]
- locking: Make owner_on_cpu() into &lt;linux/sched.h&gt; (Waiman Long) [2170939 2162139]
- locking/rwsem: Optimize down_read_trylock() under highly contended case (Waiman Long) [2170939 2162139]
- locking/rwsem: Fix comments about reader optimistic lock stealing conditions (Waiman Long) [2170939 2162139]
- locking/rwsem: Disable preemption for spinning region (Waiman Long) [2170939 2162139]
- locking: Remove rcu_read_{,un}lock() for preempt_{dis,en}able() (Waiman Long) [2170939 2162139]
- watchdog: fix UAF in reboot notifier handling in watchdog core code (Wander Lairson Costa) [2139770 2131308]
- netfilter: nf_conntrack_irc: Tighten matching on DCC message (Wander Lairson Costa) [2139770 2131308]
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF (Jaroslav Kysela) [2163405 2163406] {CVE-2023-0266}
- net/mlx5e: Fix enabling sriov while tc nic rules are offloaded (Amir Tzin) [2167647 2112925]
- net/mlx5: E-Switch, pair only capable devices (Amir Tzin) [2167647 2112925]
- net/mlx5: Fix mlx5_get_next_dev() peer device matching (Amir Tzin) [2167647 2112925]
- net/mlx5: Lag, filter non compatible devices (Amir Tzin) [2167647 2112925]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.19.2.rt7.230.el8_7]" date="1679054400">- [rt] build kernel-rt-4.18.0-425.19.2.rt7.230.el8_7.geb93 [2172278]
- ovl: fail on invalid uid/gid mapping at copy up (Miklos Szeredi) [2165341 2165342] {CVE-2023-0386}</changelog>
</package>
<package pkgid="d0b0fa82246f9ba51a0440856a2a8b9ac8296a827b624e1e6d2246f444bd8334" name="kernel-rt-debug-core" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="425.10.1.rt7.220.el8_7"/>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.1.1.rt7.211.el8]" date="1663588800">- [rt] build kernel-rt-4.18.0-425.1.1.rt7.211.el8 [2067251]
- i40e: Fix kernel crash during module removal (Ivan Vecera) [2091489]
- redhat: enable zstream release numbering for rhel 8.7 (Jarod Wilson)
- ice: Allow operation with reduced device MSI-X (Petr Oros) [2102844]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.2.1.rt7.212.el8]" date="1664280000">- [rt] build kernel-rt-4.18.0-425.2.1.rt7.212.el8 [2067251]
- EDAC/ghes: Set the DIMM label unconditionally (Aristeu Rozanski) [2109712]
- configs: enable CONFIG_HP_ILO for aarch64 (Mark Salter) [2123508]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.3.1.rt7.213.el8]" date="1664539200">- [rt] build kernel-rt-4.18.0-425.3.1.rt7.213.el8 [2067251]
- iwlwifi: limit fw version for AC9560 to avoid fw crash (Íñigo Huguet) [2129297]
- sfc: fix null pointer dereference in efx_hard_start_xmit (Íñigo Huguet) [2119638]
- sfc: fix TX channel offset when using legacy interrupts (Íñigo Huguet) [2119638]
- netfilter: conntrack: reduce timeout when receiving out-of-window fin or rst (Florian Westphal) [2047366]
- netfilter: conntrack: remove unneeded indent level (Florian Westphal) [2047366]
- netfilter: conntrack: ignore overly delayed tcp packets (Florian Westphal) [2047366]
- netfilter: conntrack: prepare tcp_in_window for ternary return value (Florian Westphal) [2047366]
- netfilter: conntrack: remove pr_debug callsites from tcp tracker (Florian Westphal) [2047366]
- netfilter: conntrack: work around exceeded receive window (Florian Westphal) [2047366]
- netfilter: conntrack: improve RST handling when tuple is re-used (Florian Westphal) [2047366]
- netfilter: conntrack: avoid misleading 'invalid' in log message (Florian Westphal) [2047366]
- netfilter: remove BUG_ON() after skb_header_pointer() (Florian Westphal) [2047366]
- iavf: Detach device during reset task (Petr Oros) [2069206]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.4.1.rt7.214.el8]" date="1665144000">- [rt] build kernel-rt-4.18.0-425.4.1.rt7.214.el8 [2067251]
- random: allow reseeding DRBG with getrandom (Daiki Ueno) [2121766]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.5.1.rt7.215.el8_7]" date="1667822400">- [rt] build kernel-rt-4.18.0-425.5.1.rt7.215.el8_7 [2137411]
- ice: Fix interface being down after reset with link-down-on-close flag on (Petr Oros) [2136216 2024110]
- ice: Fix crash by keep old cfg when update TCs more than queues (Petr Oros) [2130992 2129902]
- ice: Fix tunnel checksum offload with fragmented traffic (Petr Oros) [2130992 2129902]
- ice: handle E822 generic device ID in PLDM header (Petr Oros) [2130992 2129902]
- ice: ethtool: Prohibit improper channel config for DCB (Petr Oros) [2130992 2129902]
- ice: ethtool: advertise 1000M speeds properly (Petr Oros) [2130992 2129902]
- ice: Fix switchdev rules book keeping (Petr Oros) [2130992 2129902]
- ice: fix access-beyond-end in the switch code (Petr Oros) [2130992 2129902]
- eth: ice: silence the GCC 12 array-bounds warning (Petr Oros) [2130992 2129902]
- ice: Expose RSS indirection tables for queue groups via ethtool (Petr Oros) [2130992 2129902]
- Revert "ice: Hide bus-info in ethtool for PRs in switchdev mode" (Petr Oros) [2130992 2129902]
- ice: remove period on argument description in ice_for_each_vf (Petr Oros) [2130992 2129902]
- ice: add a function comment for ice_cfg_mac_antispoof (Petr Oros) [2130992 2129902]
- ice: fix wording in comment for ice_reset_vf (Petr Oros) [2130992 2129902]
- ice: remove return value comment for ice_reset_all_vfs (Petr Oros) [2130992 2129902]
- ice: always check VF VSI pointer values (Petr Oros) [2130992 2129902]
- ice: add newline to dev_dbg in ice_vf_fdir_dump_info (Petr Oros) [2130992 2129902]
- ice: get switch id on switchdev devices (Petr Oros) [2130992 2129902]
- ice: return ENOSPC when exceeding ICE_MAX_CHAIN_WORDS (Petr Oros) [2130992 2129902]
- ice: introduce common helper for retrieving VSI by vsi_num (Petr Oros) [2130992 2129902]
- ice: use min_t() to make code cleaner in ice_gnss (Petr Oros) [2130992 2129902]
- ice: Add mpls+tso support (Petr Oros) [2130992 2129902]
- ice: switch: convert packet template match code to rodata (Petr Oros) [2130992 2129902]
- ice: switch: use convenience macros to declare dummy pkt templates (Petr Oros) [2130992 2129902]
- ice: switch: use a struct to pass packet template params (Petr Oros) [2130992 2129902]
- ice: switch: unobscurify bitops loop in ice_fill_adv_dummy_packet() (Petr Oros) [2130992 2129902]
- ice: switch: add and use u16[] aliases to ice_adv_lkup_elem::{h, m}_u (Petr Oros) [2130992 2129902]
- ice: Support GTP-U and GTP-C offload in switchdev (Petr Oros) [2130992 2129902]
- ice: Remove useless DMA-32 fallback configuration (Petr Oros) [2130992 2129902]
- ice: switch to napi_build_skb() (Petr Oros) [2130992 2129902]
- redhat: switch to z-stream dist tag and build targets (Jarod Wilson)
- block: avoid sign extend problem with default queue flags mask (Nico Pache) [2135813]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.6.1.rt7.216.el8_7]" date="1668168000">- [rt] build kernel-rt-4.18.0-425.6.1.rt7.216.el8_7 [2137411]
- ice: Add low latency Tx timestamp read (Petr Oros) [2136036 2092425]
- ice: introduce ice_ptp_reset_cached_phctime function (Petr Oros) [2136036 2092425]
- ice: re-arrange some static functions in ice_ptp.c (Petr Oros) [2136036 2092425]
- ice: track and warn when PHC update is late (Petr Oros) [2136036 2092425]
- ice: track Tx timestamp stats similar to other Intel drivers (Petr Oros) [2136036 2092425]
- ice: implement adjfine with mul_u64_u64_div_u64 (Petr Oros) [2136036 2092425]
- ice: Add EXTTS feature to the feature bitmap (Petr Oros) [2136036 2092425]
- math: Export mul_u64_u64_div_u64 (Petr Oros) [2136036 2092425]
- vfio/type1: Unpin zero pages (Alex Williamson) [2128515 2123015]
- net: atlantic: remove aq_nic_deinit() when resume (Íñigo Huguet) [2131935 2130839]
- net: atlantic: remove deep parameter on suspend/resume functions (Íñigo Huguet) [2131935 2130839]
- CI: Use zstream builder container (Veronika Kabatova)
- CI: Add disttag override for 8.7 (Veronika Kabatova)</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.7.1.rt7.217.el8_7]" date="1669723200">- [rt] build kernel-rt-4.18.0-425.7.1.rt7.217.el8_7 [2137411]
- ice: Add additional CSR registers to ETHTOOL_GREGS (Petr Oros) [2136513 2131024]
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps (Petr Oros) [2137270 2106964]
- i40e: Fix VF set max MTU size (Petr Oros) [2137270 2106964]
- iavf: Fix set max MTU size with port VLAN and jumbo frames (Petr Oros) [2137270 2106964]
- iavf: Fix bad page state (Petr Oros) [2137270 2106964]
- Revert "scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels" (Jarod Wilson)
- scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels (Tomas Henzl) [2139216]
- Revert "ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems" (Jarod Wilson)
- ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems (Wei Huang) [2142170 2130653]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.8.1.rt7.218.el8_7]" date="1669982400">- [rt] build kernel-rt-4.18.0-425.8.1.rt7.218.el8_7 [2137411]
- scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels (Tomas Henzl) [2139216 2134535]
- RDMA/mlx5: Set local port to one when accessing counters (Mohammad Kabat) [2141957 2077119]
- drm/mgag200: Fix PLL setup for G200_SE_A rev &gt;=4 (Jocelyn Falempe) [2140152 2130159]
- iavf: Do not restart Tx queues after reset task failure (Petr Oros) [2149081 2134005]
- iavf: Fix a crash during reset task (Petr Oros) [2149081 2134005]
- scsi: core: Allow the ALUA transitioning state enough time (Tomas Henzl) [2147374 2084250]
- scsi: core: Return BLK_STS_TRANSPORT for ALUA transitioning (Tomas Henzl) [2147374 2084250]
- i40e: Fix DMA mappings leak (Ivan Vecera) [2138205 2077847]
- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2142724 2142725] {CVE-2022-2964}
- net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2142724 2142725] {CVE-2022-2964}</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.9.1.rt7.219.el8_7]" date="1670587200">- [rt] build kernel-rt-4.18.0-425.9.1.rt7.219.el8_7 [2137411]
- Documentation/admin-guide: Document nomodeset kernel parameter (Jocelyn Falempe) [2145218 2143952]
- drm: Move nomodeset kernel parameter to the DRM subsystem (Jocelyn Falempe) [2145218 2143952]
- wait: Fix __wait_event_hrtimeout for RT/DL tasks (Derek Barbosa) [2138953 2125233]
- scsi: zfcp: Fix missing auto port scan and thus missing target ports (Tobias Huschle) [2127849 2121089]
- net: Fix return value of qdisc ingress handling on success (Ivan Vecera) [2141878 2131361]</changelog>
  <changelog author="Chris White &lt;chwhite@redhat.com&gt; [4.18.0-425.10.1.rt7.220.el8_7]" date="1671192000">- [rt] build kernel-rt-4.18.0-425.10.1.rt7.220.el8_7 [2137411]
- scsi: target: loop: Fix handling of aborted TMRs (Maurizio Lombardi) [2144583 2141713]
- ice: virtchnl rss hena support (Petr Oros) [2148130]
- ice: Fix configuring VIRTCHNL_OP_CONFIG_VSI_QUEUES with unbalanced queues (Michal Schmidt) [2142017 2137378]
- ice: Add support Flex RXD (Michal Schmidt) [2138157 2131310]
- netfilter: flowtable: fix stuck flows on cleanup due to pending work (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: add function to invoke garbage collection immediately (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: pass flowtable to nf_flow_table_iterate() (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: separate replace, destroy and stats to different workqueues (Phil Sutter) [2134084 2131370]
- x86/paravirt: Add a dummy __x86_paravirt_patch_template() function (Waiman Long) [2152206 2144161]
- x86/paravirt: Fix kABI breakage in struct pv_mmu_ops (Waiman Long) [2152206 2144161]
- drm/i915: fix TLB invalidation for Gen12 video and compute engines (Wander Lairson Costa) [2148162 2148163] {CVE-2022-4139}
- PCI: hv: Do not set PCI_COMMAND_MEMORY to reduce VM boot time (Emanuele Giuseppe Esposito) [2150912 2082836]
- iavf: Fix cached head and tail value for iavf_get_tx_pending (Stefan Assmann) [2149742 2103944]
- iavf: Fix change VF's mac address (Stefan Assmann) [2149742 2103944]
- iavf: Fix race between iavf_close and iavf_reset_task (Stefan Assmann) [2149742 2103944]
- net: ethernet: move from strlcpy with unused retval to strscpy (Stefan Assmann) [2149742 2103944]
- iavf: Fix 'tc qdisc show' listing too many queues (Stefan Assmann) [2149742 2103944]
- iavf: Fix max_rate limiting (Stefan Assmann) [2149742 2103944]
- iavf: Check for duplicate TC flower filter before parsing (Stefan Assmann) [2149742 2103944]
- iavf: Fix handling of dummy receive descriptors (Stefan Assmann) [2149742 2103944]
- iavf: Disallow changing rx/tx-frames and rx/tx-frames-irq (Stefan Assmann) [2149742 2103944]
- intel/iavf:fix repeated words in comments (Stefan Assmann) [2149742 2103944]
- intel: remove unused macros (Stefan Assmann) [2149742 2103944]
- iavf: Add waiting for response from PF in set mac (Stefan Assmann) [2149742 2103944]</changelog>
</package>
<package pkgid="7f134ee4eb076dd22810497331161c13cc52d276df48bf151e80705256132d80" name="kernel-rt-debug-core" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="425.13.1.rt7.223.el8_7"/>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.4.1.rt7.214.el8]" date="1665144000">- [rt] build kernel-rt-4.18.0-425.4.1.rt7.214.el8 [2067251]
- random: allow reseeding DRBG with getrandom (Daiki Ueno) [2121766]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.5.1.rt7.215.el8_7]" date="1667822400">- [rt] build kernel-rt-4.18.0-425.5.1.rt7.215.el8_7 [2137411]
- ice: Fix interface being down after reset with link-down-on-close flag on (Petr Oros) [2136216 2024110]
- ice: Fix crash by keep old cfg when update TCs more than queues (Petr Oros) [2130992 2129902]
- ice: Fix tunnel checksum offload with fragmented traffic (Petr Oros) [2130992 2129902]
- ice: handle E822 generic device ID in PLDM header (Petr Oros) [2130992 2129902]
- ice: ethtool: Prohibit improper channel config for DCB (Petr Oros) [2130992 2129902]
- ice: ethtool: advertise 1000M speeds properly (Petr Oros) [2130992 2129902]
- ice: Fix switchdev rules book keeping (Petr Oros) [2130992 2129902]
- ice: fix access-beyond-end in the switch code (Petr Oros) [2130992 2129902]
- eth: ice: silence the GCC 12 array-bounds warning (Petr Oros) [2130992 2129902]
- ice: Expose RSS indirection tables for queue groups via ethtool (Petr Oros) [2130992 2129902]
- Revert "ice: Hide bus-info in ethtool for PRs in switchdev mode" (Petr Oros) [2130992 2129902]
- ice: remove period on argument description in ice_for_each_vf (Petr Oros) [2130992 2129902]
- ice: add a function comment for ice_cfg_mac_antispoof (Petr Oros) [2130992 2129902]
- ice: fix wording in comment for ice_reset_vf (Petr Oros) [2130992 2129902]
- ice: remove return value comment for ice_reset_all_vfs (Petr Oros) [2130992 2129902]
- ice: always check VF VSI pointer values (Petr Oros) [2130992 2129902]
- ice: add newline to dev_dbg in ice_vf_fdir_dump_info (Petr Oros) [2130992 2129902]
- ice: get switch id on switchdev devices (Petr Oros) [2130992 2129902]
- ice: return ENOSPC when exceeding ICE_MAX_CHAIN_WORDS (Petr Oros) [2130992 2129902]
- ice: introduce common helper for retrieving VSI by vsi_num (Petr Oros) [2130992 2129902]
- ice: use min_t() to make code cleaner in ice_gnss (Petr Oros) [2130992 2129902]
- ice: Add mpls+tso support (Petr Oros) [2130992 2129902]
- ice: switch: convert packet template match code to rodata (Petr Oros) [2130992 2129902]
- ice: switch: use convenience macros to declare dummy pkt templates (Petr Oros) [2130992 2129902]
- ice: switch: use a struct to pass packet template params (Petr Oros) [2130992 2129902]
- ice: switch: unobscurify bitops loop in ice_fill_adv_dummy_packet() (Petr Oros) [2130992 2129902]
- ice: switch: add and use u16[] aliases to ice_adv_lkup_elem::{h, m}_u (Petr Oros) [2130992 2129902]
- ice: Support GTP-U and GTP-C offload in switchdev (Petr Oros) [2130992 2129902]
- ice: Remove useless DMA-32 fallback configuration (Petr Oros) [2130992 2129902]
- ice: switch to napi_build_skb() (Petr Oros) [2130992 2129902]
- redhat: switch to z-stream dist tag and build targets (Jarod Wilson)
- block: avoid sign extend problem with default queue flags mask (Nico Pache) [2135813]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.6.1.rt7.216.el8_7]" date="1668168000">- [rt] build kernel-rt-4.18.0-425.6.1.rt7.216.el8_7 [2137411]
- ice: Add low latency Tx timestamp read (Petr Oros) [2136036 2092425]
- ice: introduce ice_ptp_reset_cached_phctime function (Petr Oros) [2136036 2092425]
- ice: re-arrange some static functions in ice_ptp.c (Petr Oros) [2136036 2092425]
- ice: track and warn when PHC update is late (Petr Oros) [2136036 2092425]
- ice: track Tx timestamp stats similar to other Intel drivers (Petr Oros) [2136036 2092425]
- ice: implement adjfine with mul_u64_u64_div_u64 (Petr Oros) [2136036 2092425]
- ice: Add EXTTS feature to the feature bitmap (Petr Oros) [2136036 2092425]
- math: Export mul_u64_u64_div_u64 (Petr Oros) [2136036 2092425]
- vfio/type1: Unpin zero pages (Alex Williamson) [2128515 2123015]
- net: atlantic: remove aq_nic_deinit() when resume (Íñigo Huguet) [2131935 2130839]
- net: atlantic: remove deep parameter on suspend/resume functions (Íñigo Huguet) [2131935 2130839]
- CI: Use zstream builder container (Veronika Kabatova)
- CI: Add disttag override for 8.7 (Veronika Kabatova)</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.7.1.rt7.217.el8_7]" date="1669723200">- [rt] build kernel-rt-4.18.0-425.7.1.rt7.217.el8_7 [2137411]
- ice: Add additional CSR registers to ETHTOOL_GREGS (Petr Oros) [2136513 2131024]
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps (Petr Oros) [2137270 2106964]
- i40e: Fix VF set max MTU size (Petr Oros) [2137270 2106964]
- iavf: Fix set max MTU size with port VLAN and jumbo frames (Petr Oros) [2137270 2106964]
- iavf: Fix bad page state (Petr Oros) [2137270 2106964]
- Revert "scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels" (Jarod Wilson)
- scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels (Tomas Henzl) [2139216]
- Revert "ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems" (Jarod Wilson)
- ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems (Wei Huang) [2142170 2130653]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.8.1.rt7.218.el8_7]" date="1669982400">- [rt] build kernel-rt-4.18.0-425.8.1.rt7.218.el8_7 [2137411]
- scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels (Tomas Henzl) [2139216 2134535]
- RDMA/mlx5: Set local port to one when accessing counters (Mohammad Kabat) [2141957 2077119]
- drm/mgag200: Fix PLL setup for G200_SE_A rev &gt;=4 (Jocelyn Falempe) [2140152 2130159]
- iavf: Do not restart Tx queues after reset task failure (Petr Oros) [2149081 2134005]
- iavf: Fix a crash during reset task (Petr Oros) [2149081 2134005]
- scsi: core: Allow the ALUA transitioning state enough time (Tomas Henzl) [2147374 2084250]
- scsi: core: Return BLK_STS_TRANSPORT for ALUA transitioning (Tomas Henzl) [2147374 2084250]
- i40e: Fix DMA mappings leak (Ivan Vecera) [2138205 2077847]
- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2142724 2142725] {CVE-2022-2964}
- net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2142724 2142725] {CVE-2022-2964}</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.9.1.rt7.219.el8_7]" date="1670587200">- [rt] build kernel-rt-4.18.0-425.9.1.rt7.219.el8_7 [2137411]
- Documentation/admin-guide: Document nomodeset kernel parameter (Jocelyn Falempe) [2145218 2143952]
- drm: Move nomodeset kernel parameter to the DRM subsystem (Jocelyn Falempe) [2145218 2143952]
- wait: Fix __wait_event_hrtimeout for RT/DL tasks (Derek Barbosa) [2138953 2125233]
- scsi: zfcp: Fix missing auto port scan and thus missing target ports (Tobias Huschle) [2127849 2121089]
- net: Fix return value of qdisc ingress handling on success (Ivan Vecera) [2141878 2131361]</changelog>
  <changelog author="Chris White &lt;chwhite@redhat.com&gt; [4.18.0-425.10.1.rt7.220.el8_7]" date="1671192000">- [rt] build kernel-rt-4.18.0-425.10.1.rt7.220.el8_7 [2137411]
- scsi: target: loop: Fix handling of aborted TMRs (Maurizio Lombardi) [2144583 2141713]
- ice: virtchnl rss hena support (Petr Oros) [2148130]
- ice: Fix configuring VIRTCHNL_OP_CONFIG_VSI_QUEUES with unbalanced queues (Michal Schmidt) [2142017 2137378]
- ice: Add support Flex RXD (Michal Schmidt) [2138157 2131310]
- netfilter: flowtable: fix stuck flows on cleanup due to pending work (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: add function to invoke garbage collection immediately (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: pass flowtable to nf_flow_table_iterate() (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: separate replace, destroy and stats to different workqueues (Phil Sutter) [2134084 2131370]
- x86/paravirt: Add a dummy __x86_paravirt_patch_template() function (Waiman Long) [2152206 2144161]
- x86/paravirt: Fix kABI breakage in struct pv_mmu_ops (Waiman Long) [2152206 2144161]
- drm/i915: fix TLB invalidation for Gen12 video and compute engines (Wander Lairson Costa) [2148162 2148163] {CVE-2022-4139}
- PCI: hv: Do not set PCI_COMMAND_MEMORY to reduce VM boot time (Emanuele Giuseppe Esposito) [2150912 2082836]
- iavf: Fix cached head and tail value for iavf_get_tx_pending (Stefan Assmann) [2149742 2103944]
- iavf: Fix change VF's mac address (Stefan Assmann) [2149742 2103944]
- iavf: Fix race between iavf_close and iavf_reset_task (Stefan Assmann) [2149742 2103944]
- net: ethernet: move from strlcpy with unused retval to strscpy (Stefan Assmann) [2149742 2103944]
- iavf: Fix 'tc qdisc show' listing too many queues (Stefan Assmann) [2149742 2103944]
- iavf: Fix max_rate limiting (Stefan Assmann) [2149742 2103944]
- iavf: Check for duplicate TC flower filter before parsing (Stefan Assmann) [2149742 2103944]
- iavf: Fix handling of dummy receive descriptors (Stefan Assmann) [2149742 2103944]
- iavf: Disallow changing rx/tx-frames and rx/tx-frames-irq (Stefan Assmann) [2149742 2103944]
- intel/iavf:fix repeated words in comments (Stefan Assmann) [2149742 2103944]
- intel: remove unused macros (Stefan Assmann) [2149742 2103944]
- iavf: Add waiting for response from PF in set mac (Stefan Assmann) [2149742 2103944]</changelog>
  <changelog author="Chris White &lt;chwhite@redhat.com&gt; [4.18.0-425.11.1.rt7.221.el8_7]" date="1673352000">- [rt] build kernel-rt-4.18.0-425.11.1.rt7.221.el8_7 [2159806]
- NFSD: Protect against send buffer overflow in NFSv3 READ (Scott Mayhew) [2143174] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv2 READ (Scott Mayhew) [2143174] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv3 READDIR (Scott Mayhew) [2143174] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv2 READDIR (Scott Mayhew) [2143174] {CVE-2022-43945}
- SUNRPC: Fix svcxdr_init_encode's buflen calculation (Scott Mayhew) [2143174] {CVE-2022-43945}
- SUNRPC: Fix svcxdr_init_decode's end-of-buffer calculation (Scott Mayhew) [2143174] {CVE-2022-43945}
- panic, kexec: make __crash_kexec() NMI safe (Valentin Schneider) [2139580]
- kexec: turn all kexec_mutex acquisitions into trylocks (Valentin Schneider) [2139580]
- kexec: move locking into do_kexec_load (Valentin Schneider) [2139580]
- vdpa/mlx5: re-create forwarding rules after mac modified (Laurent Vivier) [2152912]
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry (Waiman Long) [2153653]
- irq: Call tick_irq_enter() inside HARDIRQ_OFFSET (Waiman Long) [2153653]
- irqtime: Move irqtime entry accounting after irq offset incrementation (Waiman Long) [2153653]
- sched/vtime: Consolidate IRQ time accounting (Waiman Long) [2153653]
- s390/vtime: Use the generic IRQ entry accounting (Waiman Long) [2153653]
- sched/cputime: Remove symbol exports from IRQ time accounting (Waiman Long) [2153653]
- genirq/irqdomain: Don't try to free an interrupt that has no mapping (Waiman Long) [2153653]
- genirq: Provide __irq_enter/exit_raw() (Waiman Long) [2153653]
- powerpc/time: Only set CONFIG_ARCH_HAS_SCALED_CPUTIME on PPC64 (Waiman Long) [2153653]
- powerpc/time: isolate scaled cputime accounting in dedicated functions. (Waiman Long) [2153653]
- PCI: hv: Fix synchronization between channel callback and hv_pci_bus_exit() (Mohammed Gamal) [2155280]
- PCI: hv: Fix synchronization between channel callback and hv_compose_msi_msg() (Mohammed Gamal) [2155280]
- PCI: hv: Use vmbus_requestor to generate transaction IDs for VMbus hardening (Mohammed Gamal) [2155280]
- net/mlx5e: TC, Reject forwarding from internal port to internal port (Mohammad Kabat) [2141959 2131345]
- hv_netvsc: Fix race between VF offering and VF association message from host (Mohammed Gamal) [2155272]
- x86/mce: Reduce number of machine checks taken during recovery (Prarit Bhargava) [2137592 2104388]
- cgroup/cpuset: Reduce cpuset_rwsem writer latency (Waiman Long) [2153108]
- rcu/exp: Mark current CPU as exp-QS in IPI loop second pass (Waiman Long) [2153108]
- rcu: Always inline rcu_dynticks_task*_{enter,exit}() (Waiman Long) [2153108]
- rcu: Fix existing exp request check in sync_sched_exp_online_cleanup() (Waiman Long) [2153108]
- rcu: Fix macro name CONFIG_TASKS_RCU_TRACE (Waiman Long) [2153108]
- rcu: Fix stall-warning deadlock due to non-release of rcu_node -&gt;lock (Waiman Long) [2153108]
- rcu: Fix to include first blocked task in stall warning (Waiman Long) [2153108]
- cgroup: Use cgroup_attach_{lock,unlock}() from cgroup_attach_task_all() (Waiman Long) [2153108]
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all() (Waiman Long) [2153108]
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock (Waiman Long) [2153108]
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree (Waiman Long) [2153108]
- cgroup/cpuset: Fix a race between cpuset_attach() and cpu hotplug (Waiman Long) [2153108]
- cgroup: reduce dependency on cgroup_mutex (Waiman Long) [2153108]
- sunrpc: Set sk_allocation to GFP_NOFS to avoid using current-&gt;task_frag. (Guillaume Nault) [2153230]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.12.1.rt7.222.el8_7]" date="1674129600">- [rt] build kernel-rt-4.18.0-425.12.1.rt7.222.el8_7 [2159806]
- x86/fpu: Prevent FPU state corruption (Oleksandr Natalenko) [2134586 2130890]
- x86/fpu: Drop fpregs lock before inheriting FPU permissions (Eder Zulian) [2154460 2153549]
- kernel-doc: fix undefined args variable (Jan Stancek) [2157905 2134954]
- mm: memcontrol: fix potential oom_lock recursion deadlock (Waiman Long) [2157922 2138886]
- memcg: prohibit unconditional exceeding the limit of dying tasks (Waiman Long) [2157922 2138886]
- mm, oom: do not trigger out_of_memory from the #PF (Waiman Long) [2157922 2138886]
- mm, oom: pagefault_out_of_memory: don't force global OOM for dying tasks (Waiman Long) [2157922 2138886]
- mm: memcontrol: don't count limit-setting reclaim as memory pressure (Waiman Long) [2157922 2138886]
- KVM: s390: vsie: Fix the initialization of the epoch extension (epdx) field (Thomas Huth) [2158813 2151854]
- net: mana: Fix race on per-CQ variable napi work_done (Emanuele Giuseppe Esposito) [2155437 2151722]
- mei: me: add adler lake point S DID (Prarit Bhargava) [2141783 2141602]
- PCI: hv: Only reuse existing IRTE allocation for Multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix the definition of vector in hv_compose_msi_msg() (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix interrupt mapping for multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Reuse existing IRTE allocation in compose_msi_msg() (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix hv_arch_irq_unmask() for multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix multi-MSI to allow more than one MSI vector (Emanuele Giuseppe Esposito) [2155289 2100275]
- drm/ast: Support multiple outputs (Jarod Wilson) [2149287 2147553]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.13.1.rt7.223.el8_7]" date="1675339200">- [rt] build kernel-rt-4.18.0-425.13.1.rt7.223.el8_7 [2159806]
- mm/cgroup/reclaim: fix dirty pages throttling on cgroup v1 (Waiman Long) [2160221]
- mm: vmscan: remove deadlock due to throttling failing to make progress (Waiman Long) [2160221]
- mm: vmscan: reduce throttling due to a failure to make progress -fix (Waiman Long) [2160221]
- mm: vmscan: Reduce throttling due to a failure to make progress (Waiman Long) [2160221]
- mm/vmscan: delay waking of tasks throttled on NOPROGRESS (Waiman Long) [2160221]
- mm/vmscan: increase the timeout if page reclaim is not making progress (Waiman Long) [2160221]
- mm/vmscan: centralise timeout values for reclaim_throttle (Waiman Long) [2160221]
- mm/page_alloc: remove the throttling logic from the page allocator (Waiman Long) [2160221]
- mm/writeback: throttle based on page writeback instead of congestion (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim when no progress is being made (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim and compaction when too may pages are isolated (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim until some writeback completes if congested (Waiman Long) [2160221]
- mm/vmscan.c: delete or fix duplicated words (Waiman Long) [2160221]
- mm,page_alloc: PF_WQ_WORKER threads must sleep at should_reclaim_retry() (Nico Pache) [2160221]
- ceph: avoid putting the realm twice when decoding snaps fails (Xiubo Li) [2155797 2139881]
- mm/mremap: hold the rmap lock in write mode when moving page table entries. (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap: use pmd/pud_poplulate to update page table entries (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap: don't enable optimized PUD move if page table levels is 2 (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap: convert huge PUD move to separate helper (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap: fix BUILD_BUG_ON() error in get_extent (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap.c: fix extent calculation (Waiman Long) [2140950] {CVE-2022-41222}
- x86: mremap speedup - Enable HAVE_MOVE_PUD (Waiman Long) [2140950] {CVE-2022-41222}
- mm: speedup mremap on 1GB or larger regions (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap: start addresses are properly aligned (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap: calculate extent in one place (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap: it is sure to have enough space when extent meets requirement (Waiman Long) [2140950] {CVE-2022-41222}
- s390/boot: add secure boot trailer (Tobias Huschle) [2151530 2141967]
- i40e: Fix VF hang when reset is triggered on another VF (Ivan Vecera) [2160460 2103801]
- i2c: ismt: Fix an out-of-bounds bug in ismt_access() (Prarit Bhargava) [2154388 2119066] {CVE-2022-2873}
- iavf: schedule watchdog immediately when changing primary MAC (Michal Schmidt) [2163257 2152493]
- iavf: Move netdev_update_features() into watchdog task (Michal Schmidt) [2163257 2152493]
- iavf: fix temporary deadlock and failure to set MAC address (Michal Schmidt) [2163257 2152493]
- iavf: Fix error handling in iavf_init_module() (Michal Schmidt) [2163257 2152493]
- iommu/vt-d: Clean up si_domain in the init_dmars() error path (Jerry Snitselaar) [2149474 2118428]
- x86/pci/xen: Use msi_msg shadow structs (Jerry Snitselaar) [2149474 2118428]
- iommu/intel: Use msi_msg shadow structs (Jerry Snitselaar) [2149474 2118428]
- PCI: MSI: Fix Kconfig dependencies for PCI_MSI_ARCH_FALLBACKS (Jerry Snitselaar) [2149474 2118428]
- x86/apic/msi: Unbreak DMAR and HPET MSI (Jerry Snitselaar) [2149474 2118428]
- iommu/amd: Remove domain search for PCI/MSI (Jerry Snitselaar) [2149474 2118428]
- iommu/vt-d: Remove domain search for PCI/MSI[X] (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Make most MSI ops XEN private (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Cleanup the arch_*_msi_irqs() leftovers (Jerry Snitselaar) [2149474 2118428]
- PCI/MSI: Make arch_.*_msi_irq[s] fallbacks selectable (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Wrap XEN MSI management into irqdomain (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Consolidate XEN-MSI init (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Rework MSI teardown (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Make xen_msi_init() static and rename it to xen_hvm_msi_init() (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Move apic_post_init() invocation to one place (Jerry Snitselaar) [2149474 2118428]
- x86/msi: Use generic MSI domain ops (Jerry Snitselaar) [2149474 2118428]
- x86/msi: Remove pointless vcpu_affinity callback (Jerry Snitselaar) [2149474 2118428]
- iommu/vt-d: Fix compile error with CONFIG_PCI_ATS not set (Myron Stowe) [2149474 2118428]
- iommu/vt-d: Cure VF irqdomain hickup (Myron Stowe) [2149474 2118428]
- x86/pci: Set default irq domain in pcibios_add_device() (Myron Stowe) [2149474 2118428]
- iommm/amd: Store irq domain in struct device (Myron Stowe) [2149474 2118428]
- iommm/vt-d: Store irq domain in struct device (Myron Stowe) [2149474 2118428]
- PCI/MSI: Provide pci_dev_has_special_msi_domain() helper (Myron Stowe) [2149474 2118428]
- x86/msi: Consolidate MSI allocation (Myron Stowe) [2149474 2118428]
- PCI/MSI: Rework pci_msi_domain_calc_hwirq() (Myron Stowe) [2149474 2118428]
- x86/irq: Consolidate UV domain allocation (Myron Stowe) [2149474 2118428]
- x86/irq: Consolidate DMAR irq allocation (Myron Stowe) [2149474 2118428]
- x86_ioapic_Consolidate_IOAPIC_allocation (Myron Stowe) [2149474 2118428]
- x86/msi: Consolidate HPET allocation (Myron Stowe) [2149474 2118428]
- iommu/irq_remapping: Consolidate irq domain lookup (Myron Stowe) [2149474 2118428]
- iommu/amd: Consolidate irq domain getter (Myron Stowe) [2149474 2118428]
- iommu/vt-d: Consolidate irq domain getter (Myron Stowe) [2149474 2118428]
- x86/irq: Add allocation type for parent domain retrieval (Myron Stowe) [2149474 2118428]
- irqdomain: Export irq_domain_update_bus_token (Myron Stowe) [2149474 2118428]
- gitlab-ci: use CI templates from production branch (Michael Hofmann)
- iavf: remove INITIAL_MAC_SET to allow gARP to work properly (Stefan Assmann) [2149745 1938635]
- Revert "scsi: iscsi: ql4xxx: Use per-session workqueue for unbinding" (Chris Leech) [2152734 2122624]
- Revert "scsi: iscsi: Use the session workqueue for recovery" (Chris Leech) [2152734 2122624]
- arm64/bpf: Remove 128MB limit for BPF JIT programs (Yauheni Kaliuta) [2152138 2140163]
- bpf: Define bpf_jit_alloc_exec_limit for arm64 JIT (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: add `type` and `data` fields (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: use `ex` for `exception_table_entry` (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: make fixup_exception() return bool (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: consolidate definitions (Yauheni Kaliuta) [2152138 2140163]
- arm64: kvm: use kvm_exception_table_entry (Yauheni Kaliuta) [2152138 2140163]
- be2net: Fix buffer overflow in be_get_module_eeprom (Josef Oskera) [2160182 2126917]
- sched: Switch to upstream migrate disable code (Crystal Wood) [2132062]
- tick: Fix timer storm since introduction of timersd (Valentin Schneider) [2127204]
- softirq: Use a dedicated thread for timer wakeups. (Valentin Schneider) [2127204]</changelog>
</package>
<package pkgid="6fd6cf23f7662e4f1dc6c70e7727ac40ae2136109a631df0c0d8a0a3d98eb956" name="kernel-rt-debug-core" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="425.19.2.rt7.230.el8_7"/>
  <changelog author="Chris White &lt;chwhite@redhat.com&gt; [4.18.0-425.11.1.rt7.221.el8_7]" date="1673352000">- [rt] build kernel-rt-4.18.0-425.11.1.rt7.221.el8_7 [2159806]
- NFSD: Protect against send buffer overflow in NFSv3 READ (Scott Mayhew) [2143174] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv2 READ (Scott Mayhew) [2143174] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv3 READDIR (Scott Mayhew) [2143174] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv2 READDIR (Scott Mayhew) [2143174] {CVE-2022-43945}
- SUNRPC: Fix svcxdr_init_encode's buflen calculation (Scott Mayhew) [2143174] {CVE-2022-43945}
- SUNRPC: Fix svcxdr_init_decode's end-of-buffer calculation (Scott Mayhew) [2143174] {CVE-2022-43945}
- panic, kexec: make __crash_kexec() NMI safe (Valentin Schneider) [2139851]
- kexec: turn all kexec_mutex acquisitions into trylocks (Valentin Schneider) [2139580]
- kexec: move locking into do_kexec_load (Valentin Schneider) [2139580]
- vdpa/mlx5: re-create forwarding rules after mac modified (Laurent Vivier) [2152912]
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry (Waiman Long) [2153653]
- irq: Call tick_irq_enter() inside HARDIRQ_OFFSET (Waiman Long) [2153653]
- irqtime: Move irqtime entry accounting after irq offset incrementation (Waiman Long) [2153653]
- sched/vtime: Consolidate IRQ time accounting (Waiman Long) [2153653]
- s390/vtime: Use the generic IRQ entry accounting (Waiman Long) [2153653]
- sched/cputime: Remove symbol exports from IRQ time accounting (Waiman Long) [2153653]
- genirq/irqdomain: Don't try to free an interrupt that has no mapping (Waiman Long) [2153653]
- genirq: Provide __irq_enter/exit_raw() (Waiman Long) [2153653]
- powerpc/time: Only set CONFIG_ARCH_HAS_SCALED_CPUTIME on PPC64 (Waiman Long) [2153653]
- powerpc/time: isolate scaled cputime accounting in dedicated functions. (Waiman Long) [2153653]
- PCI: hv: Fix synchronization between channel callback and hv_pci_bus_exit() (Mohammed Gamal) [2155280]
- PCI: hv: Fix synchronization between channel callback and hv_compose_msi_msg() (Mohammed Gamal) [2155280]
- PCI: hv: Use vmbus_requestor to generate transaction IDs for VMbus hardening (Mohammed Gamal) [2155280]
- net/mlx5e: TC, Reject forwarding from internal port to internal port (Mohammad Kabat) [2141959 2131345]
- hv_netvsc: Fix race between VF offering and VF association message from host (Mohammed Gamal) [2155272]
- x86/mce: Reduce number of machine checks taken during recovery (Prarit Bhargava) [2137592 2104388]
- cgroup/cpuset: Reduce cpuset_rwsem writer latency (Waiman Long) [2153108]
- rcu/exp: Mark current CPU as exp-QS in IPI loop second pass (Waiman Long) [2153108]
- rcu: Always inline rcu_dynticks_task*_{enter,exit}() (Waiman Long) [2153108]
- rcu: Fix existing exp request check in sync_sched_exp_online_cleanup() (Waiman Long) [2153108]
- rcu: Fix macro name CONFIG_TASKS_RCU_TRACE (Waiman Long) [2153108]
- rcu: Fix stall-warning deadlock due to non-release of rcu_node -&gt;lock (Waiman Long) [2153108]
- rcu: Fix to include first blocked task in stall warning (Waiman Long) [2153108]
- cgroup: Use cgroup_attach_{lock,unlock}() from cgroup_attach_task_all() (Waiman Long) [2153108]
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all() (Waiman Long) [2153108]
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock (Waiman Long) [2153108]
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree (Waiman Long) [2153108]
- cgroup/cpuset: Fix a race between cpuset_attach() and cpu hotplug (Waiman Long) [2153108]
- cgroup: reduce dependency on cgroup_mutex (Waiman Long) [2153108]
- sunrpc: Set sk_allocation to GFP_NOFS to avoid using current-&gt;task_frag. (Guillaume Nault) [2153230]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.12.1.rt7.222.el8_7]" date="1674129600">- [rt] build kernel-rt-4.18.0-425.12.1.rt7.222.el8_7 [2159806]
- x86/fpu: Prevent FPU state corruption (Oleksandr Natalenko) [2134586 2130890]
- x86/fpu: Drop fpregs lock before inheriting FPU permissions (Eder Zulian) [2154469 2153549]
- kernel-doc: fix undefined args variable (Jan Stancek) [2157905 2134954]
- mm: memcontrol: fix potential oom_lock recursion deadlock (Waiman Long) [2157922 2138886]
- memcg: prohibit unconditional exceeding the limit of dying tasks (Waiman Long) [2157922 2138886]
- mm, oom: do not trigger out_of_memory from the #PF (Waiman Long) [2157922 2138886]
- mm, oom: pagefault_out_of_memory: don't force global OOM for dying tasks (Waiman Long) [2157922 2138886]
- mm: memcontrol: don't count limit-setting reclaim as memory pressure (Waiman Long) [2157922 2138886]
- KVM: s390: vsie: Fix the initialization of the epoch extension (epdx) field (Thomas Huth) [2158813 2151854]
- net: mana: Fix race on per-CQ variable napi work_done (Emanuele Giuseppe Esposito) [2155437 2151722]
- mei: me: add adler lake point S DID (Prarit Bhargava) [2141783 2141602]
- PCI: hv: Only reuse existing IRTE allocation for Multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix the definition of vector in hv_compose_msi_msg() (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix interrupt mapping for multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Reuse existing IRTE allocation in compose_msi_msg() (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix hv_arch_irq_unmask() for multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix multi-MSI to allow more than one MSI vector (Emanuele Giuseppe Esposito) [2155289 2100275]
- drm/ast: Support multiple outputs (Jarod Wilson) [2149287 2147553]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.13.1.rt7.223.el8_7]" date="1675339200">- [rt] build kernel-rt-4.18.0-425.13.1.rt7.223.el8_7 [2159806]
- mm/cgroup/reclaim: fix dirty pages throttling on cgroup v1 (Waiman Long) [2160221]
- mm: vmscan: remove deadlock due to throttling failing to make progress (Waiman Long) [2160221]
- mm: vmscan: reduce throttling due to a failure to make progress -fix (Waiman Long) [2160221]
- mm: vmscan: Reduce throttling due to a failure to make progress (Waiman Long) [2160221]
- mm/vmscan: delay waking of tasks throttled on NOPROGRESS (Waiman Long) [2160221]
- mm/vmscan: increase the timeout if page reclaim is not making progress (Waiman Long) [2160221]
- mm/vmscan: centralise timeout values for reclaim_throttle (Waiman Long) [2160221]
- mm/page_alloc: remove the throttling logic from the page allocator (Waiman Long) [2160221]
- mm/writeback: throttle based on page writeback instead of congestion (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim when no progress is being made (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim and compaction when too may pages are isolated (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim until some writeback completes if congested (Waiman Long) [2160221]
- mm/vmscan.c: delete or fix duplicated words (Waiman Long) [2160221]
- mm,page_alloc: PF_WQ_WORKER threads must sleep at should_reclaim_retry() (Nico Pache) [2160221]
- ceph: avoid putting the realm twice when decoding snaps fails (Xiubo Li) [2155797 2139881]
- mm/mremap: hold the rmap lock in write mode when moving page table entries. (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap: use pmd/pud_poplulate to update page table entries (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap: don't enable optimized PUD move if page table levels is 2 (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap: convert huge PUD move to separate helper (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap: fix BUILD_BUG_ON() error in get_extent (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap.c: fix extent calculation (Waiman Long) [2140950] {CVE-2022-41222}
- x86: mremap speedup - Enable HAVE_MOVE_PUD (Waiman Long) [2140950] {CVE-2022-41222}
- mm: speedup mremap on 1GB or larger regions (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap: start addresses are properly aligned (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap: calculate extent in one place (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap: it is sure to have enough space when extent meets requirement (Waiman Long) [2140950] {CVE-2022-41222}
- s390/boot: add secure boot trailer (Tobias Huschle) [2151530 2141967]
- i40e: Fix VF hang when reset is triggered on another VF (Ivan Vecera) [2160460 2103801]
- i2c: ismt: Fix an out-of-bounds bug in ismt_access() (Prarit Bhargava) [2154388 2119066] {CVE-2022-2873}
- iavf: schedule watchdog immediately when changing primary MAC (Michal Schmidt) [2163257 2152493]
- iavf: Move netdev_update_features() into watchdog task (Michal Schmidt) [2163257 2152493]
- iavf: fix temporary deadlock and failure to set MAC address (Michal Schmidt) [2163257 2152493]
- iavf: Fix error handling in iavf_init_module() (Michal Schmidt) [2163257 2152493]
- iommu/vt-d: Clean up si_domain in the init_dmars() error path (Jerry Snitselaar) [2149474 2118428]
- x86/pci/xen: Use msi_msg shadow structs (Jerry Snitselaar) [2149474 2118428]
- iommu/intel: Use msi_msg shadow structs (Jerry Snitselaar) [2149474 2118428]
- PCI: MSI: Fix Kconfig dependencies for PCI_MSI_ARCH_FALLBACKS (Jerry Snitselaar) [2149474 2118428]
- x86/apic/msi: Unbreak DMAR and HPET MSI (Jerry Snitselaar) [2149474 2118428]
- iommu/amd: Remove domain search for PCI/MSI (Jerry Snitselaar) [2149474 2118428]
- iommu/vt-d: Remove domain search for PCI/MSI[X] (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Make most MSI ops XEN private (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Cleanup the arch_*_msi_irqs() leftovers (Jerry Snitselaar) [2149474 2118428]
- PCI/MSI: Make arch_.*_msi_irq[s] fallbacks selectable (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Wrap XEN MSI management into irqdomain (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Consolidate XEN-MSI init (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Rework MSI teardown (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Make xen_msi_init() static and rename it to xen_hvm_msi_init() (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Move apic_post_init() invocation to one place (Jerry Snitselaar) [2149474 2118428]
- x86/msi: Use generic MSI domain ops (Jerry Snitselaar) [2149474 2118428]
- x86/msi: Remove pointless vcpu_affinity callback (Jerry Snitselaar) [2149474 2118428]
- iommu/vt-d: Fix compile error with CONFIG_PCI_ATS not set (Myron Stowe) [2149474 2118428]
- iommu/vt-d: Cure VF irqdomain hickup (Myron Stowe) [2149474 2118428]
- x86/pci: Set default irq domain in pcibios_add_device() (Myron Stowe) [2149474 2118428]
- iommm/amd: Store irq domain in struct device (Myron Stowe) [2149474 2118428]
- iommm/vt-d: Store irq domain in struct device (Myron Stowe) [2149474 2118428]
- PCI/MSI: Provide pci_dev_has_special_msi_domain() helper (Myron Stowe) [2149474 2118428]
- x86/msi: Consolidate MSI allocation (Myron Stowe) [2149474 2118428]
- PCI/MSI: Rework pci_msi_domain_calc_hwirq() (Myron Stowe) [2149474 2118428]
- x86/irq: Consolidate UV domain allocation (Myron Stowe) [2149474 2118428]
- x86/irq: Consolidate DMAR irq allocation (Myron Stowe) [2149474 2118428]
- x86_ioapic_Consolidate_IOAPIC_allocation (Myron Stowe) [2149474 2118428]
- x86/msi: Consolidate HPET allocation (Myron Stowe) [2149474 2118428]
- iommu/irq_remapping: Consolidate irq domain lookup (Myron Stowe) [2149474 2118428]
- iommu/amd: Consolidate irq domain getter (Myron Stowe) [2149474 2118428]
- iommu/vt-d: Consolidate irq domain getter (Myron Stowe) [2149474 2118428]
- x86/irq: Add allocation type for parent domain retrieval (Myron Stowe) [2149474 2118428]
- irqdomain: Export irq_domain_update_bus_token (Myron Stowe) [2149474 2118428]
- gitlab-ci: use CI templates from production branch (Michael Hofmann)
- iavf: remove INITIAL_MAC_SET to allow gARP to work properly (Stefan Assmann) [2149745 1938635]
- Revert "scsi: iscsi: ql4xxx: Use per-session workqueue for unbinding" (Chris Leech) [2152734 2122624]
- Revert "scsi: iscsi: Use the session workqueue for recovery" (Chris Leech) [2152734 2122624]
- arm64/bpf: Remove 128MB limit for BPF JIT programs (Yauheni Kaliuta) [2152138 2140163]
- bpf: Define bpf_jit_alloc_exec_limit for arm64 JIT (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: add `type` and `data` fields (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: use `ex` for `exception_table_entry` (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: make fixup_exception() return bool (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: consolidate definitions (Yauheni Kaliuta) [2152138 2140163]
- arm64: kvm: use kvm_exception_table_entry (Yauheni Kaliuta) [2152138 2140163]
- be2net: Fix buffer overflow in be_get_module_eeprom (Josef Oskera) [2160182 2126917]
- sched: Switch to upstream migrate disable code (Crystal Wood) [2132062]
- tick: Fix timer storm since introduction of timersd (Valentin Schneider) [2127204]
- softirq: Use a dedicated thread for timer wakeups. (Valentin Schneider) [2127204]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.14.1.rt7.224.el8_7]" date="1676030400">- [rt] build kernel-rt-4.18.0-425.14.1.rt7.224.el8_7 [2172278]
- ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems (Wei Huang) [2142170 2130653]
- KVM: x86: nSVM: implement nested LBR virtualization (Emanuele Giuseppe Esposito) [2166362 2155149]
- KVM: x86: nSVM: correctly virtualize LBR msrs when L2 is running (Emanuele Giuseppe Esposito) [2166362 2155149]
- kvm: x86: SVM: use vmcb* instead of svm-&gt;vmcb where it makes sense (Emanuele Giuseppe Esposito) [2166362 2155149]
- KVM: x86: nSVM: implement nested VMLOAD/VMSAVE (Emanuele Giuseppe Esposito) [2166362 2155149]
- IB/iser: Fix login with authentication (Kamal Heib) [2161750 2120676]
- act_mirred: use the backlog for nested calls to mirred ingress (Davide Caratti) [2164648 2131339] {CVE-2022-4269}
- net/sched: act_mirred: better wording on protection against excessive stack growth (Davide Caratti) [2164648 2131339] {CVE-2022-4269}
- redhat/configs: Set CONFIG_X86_AMD_PSTATE to 'm' (Prarit Bhargava) [2151275 2145246]
- KVM: x86: smm: preserve interrupt shadow in SMRAM (Maxim Levitsky) [2166368 2097144]
- KVM: x86: SVM: don't save SVM state to SMRAM when VM is not long mode capable (Maxim Levitsky) [2166368 2097144]
- KVM: x86: SVM: use smram structs (Maxim Levitsky) [2166368 2097144]
- KVM: svm: drop explicit return value of kvm_vcpu_map (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: use smram struct for 64 bit smram load/restore (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: use smram struct for 32 bit smram load/restore (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: use smram structs in the common code (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: add structs for KVM's smram layout (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: check for failures on smm entry (Maxim Levitsky) [2166368 2097144]
- KVM: x86: do not go through ctxt-&gt;ops when emulating rsm (Maxim Levitsky) [2166368 2097144]
- KVM: x86: move SMM exit to a new file (Maxim Levitsky) [2166368 2097144]
- KVM: x86: move SMM entry to a new file (Maxim Levitsky) [2166368 2097144]
- KVM: x86: start moving SMM-related functions to new files (Maxim Levitsky) [2166368 2097144]
- bug: introduce ASSERT_STRUCT_OFFSET (Maxim Levitsky) [2166368 2097144]
- KVM: x86: Rename and expose helper to detect if INIT/SIPI are allowed (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: number of GPRs in the SMRAM image depends on the image format (Maxim Levitsky) [2166368 2097144]
- KVM: x86: emulator: update the emulation mode after CR0 write (Maxim Levitsky) [2166368 2097144]
- KVM: x86: emulator: update the emulation mode after rsm (Maxim Levitsky) [2166368 2097144]
- KVM: x86: emulator: introduce emulator_recalc_and_set_mode (Maxim Levitsky) [2166368 2097144]
- KVM: x86: emulator: em_sysexit should update ctxt-&gt;mode (Maxim Levitsky) [2166368 2097144]
- KVM: x86: Bug the VM if the emulator accesses a non-existent GPR (Maxim Levitsky) [2166368 2097144]
- \KVM: x86: Reduce the number of emulator GPRs to '8' for 32-bit KVM (Maxim Levitsky) [2166368 2097144]
- KVM: x86: Use 16-bit fields to track dirty/valid emulator GPRs (Maxim Levitsky) [2166368 2097144]
- KVM: x86: Omit VCPU_REGS_RIP from emulator's _regs array (Maxim Levitsky) [2166368 2097144]
- \KVM: x86: Harden _regs accesses to guard against buggy input (Maxim Levitsky) [2166368 2097144]
- KVM: x86: Grab regs_dirty in local 'unsigned long' (Maxim Levitsky) [2166368 2097144]
- proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152577 2152578] {CVE-2022-4378}
- proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152577 2152578] {CVE-2022-4378}</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.15.1.rt7.225.el8_7]" date="1676548800">- [rt] build kernel-rt-4.18.0-425.15.1.rt7.225.el8_7 [2172278]
- net/mlx5e: Fix use-after-free when reverting termination table (Amir Tzin) [2167640 2112927]
- net/mlx5: Do not query pci info while pci disabled (Amir Tzin) [2167645 2129249]
- x86/fpu: Fix copy_xstate_to_uabi() to copy init states correctly (Dean Nelson) [2168384 2122850]
- x86/fpu: Exclude dynamic states from init_fpstate (Dean Nelson) [2168384 2122850]
- x86/fpu: Fix the init_fpstate size check with the actual size (Dean Nelson) [2168384 2122850]
- x86/fpu: Configure init_fpstate attributes orderly (Dean Nelson) [2168384 2122850]
- x86/fpu/xstate: Fix the ARCH_REQ_XCOMP_PERM implementation (Dean Nelson) [2168384 2122850]
- net/mlx5: E-Switch, properly handle ingress tagged packets on VST (Amir Tzin) [2166665 2096109]
- cpuhotplug: Fix KABI breakage (Prarit Bhargava) [2162763 2156529]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.16.1.rt7.226.el8_7]" date="1677153600">- [rt] build kernel-rt-4.18.0-425.16.1.rt7.226.el8_7 [2172278]
- ipv6: fix panic when fib_lookup_arg-&gt;result is fib6_info (Jiri Benc) [2167602 2140599]
- ceph: blocklist the kclient when receiving corrupted snap trace (Xiubo Li) [2168896 2162414]
- ceph: move mount state enum to super.h (Xiubo Li) [2168896 2162414]
- s390/kexec: fix ipl report address for kdump (Tobias Huschle) [2166296 2161328]
- mm, compaction: fix fast_isolate_around() to stay within boundaries (Daniel Vacek) [2170576 2149309]
- scsi: storvsc: Fix swiotlb bounce buffer leak in confidential VM (Emanuele Giuseppe Esposito) [2170228 2150659]
- netfilter: conntrack: handle tcp challenge acks during connection reuse (Florian Westphal) [2165587 2158726]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.17.1.rt7.227.el8_7]" date="1677844800">- [rt] build kernel-rt-4.18.0-425.17.1.rt7.227.el8_7 [2172278]
- net: mana: Add rmb after checking owner bits (Mohammed Gamal) [2173103 2139462]
- net: mana: Add support of XDP_REDIRECT action (Mohammed Gamal) [2173103 2139462]
- net: mana: Add the Linux MANA PF driver (Mohammed Gamal) [2173103 2139462]
- ice: fix lost multicast packets in promisc mode (Ken Cox) [2172550 2138215]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.18.1.rt7.228.el8_7]" date="1678708800">- [rt] build kernel-rt-4.18.0-425.18.1.rt7.228.el8_7 [2172278]
- futex: Resend potentially swallowed owner death notification (Rafael Aquini) [2170054]
- irq_work: Move lazy work execution to dedicated irq_work kthreads (Valentin Schneider) [2172163]
- irq_work: Sync the patches (Valentin Schneider) [2172163]
- irq_work: Also rcuwait for !IRQ_WORK_HARD_IRQ on PREEMPT_RT (Valentin Schneider) [2172163]
- irq_work: Allow irq_work_sync() to sleep if irq_work() no IRQ support. (Valentin Schneider) [2172163]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.19.1.rt7.229.el8_7]" date="1678968000">- [rt] build kernel-rt-4.18.0-425.19.1.rt7.229.el8_7 [2172278]
- s390/dasd: fix no record found for raw_track_access (Tobias Huschle) [2167776 2161270]
- locking/rwsem: Disable preemption in all down_read*() and up_read() code paths (Waiman Long) [2170939 2162139]
- locking/rwsem: Prevent non-first waiter from spinning in down_write() slowpath (Waiman Long) [2170939 2162139]
- locking/rwsem: Allow slowpath writer to ignore handoff bit if not set by first waiter (Waiman Long) [2170939 2162139]
- locking/rwsem: Always try to wake waiters in out_nolock path (Waiman Long) [2170939 2162139]
- locking/rwsem: No need to check for handoff bit if wait queue empty (Waiman Long) [2170939 2162139]
- locking/rwsem: Make handoff bit handling more consistent (Waiman Long) [2170939 2162139]
- locking/rwsem: Disable preemption while trying for rwsem lock (Waiman Long) [2170939 2162139]
- locking/rwsem: Conditionally wake waiters in reader/writer slowpaths (Waiman Long) [2170939 2162139]
- locking: Make owner_on_cpu() into &lt;linux/sched.h&gt; (Waiman Long) [2170939 2162139]
- locking/rwsem: Optimize down_read_trylock() under highly contended case (Waiman Long) [2170939 2162139]
- locking/rwsem: Fix comments about reader optimistic lock stealing conditions (Waiman Long) [2170939 2162139]
- locking/rwsem: Disable preemption for spinning region (Waiman Long) [2170939 2162139]
- locking: Remove rcu_read_{,un}lock() for preempt_{dis,en}able() (Waiman Long) [2170939 2162139]
- watchdog: fix UAF in reboot notifier handling in watchdog core code (Wander Lairson Costa) [2139770 2131308]
- netfilter: nf_conntrack_irc: Tighten matching on DCC message (Wander Lairson Costa) [2139770 2131308]
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF (Jaroslav Kysela) [2163405 2163406] {CVE-2023-0266}
- net/mlx5e: Fix enabling sriov while tc nic rules are offloaded (Amir Tzin) [2167647 2112925]
- net/mlx5: E-Switch, pair only capable devices (Amir Tzin) [2167647 2112925]
- net/mlx5: Fix mlx5_get_next_dev() peer device matching (Amir Tzin) [2167647 2112925]
- net/mlx5: Lag, filter non compatible devices (Amir Tzin) [2167647 2112925]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.19.2.rt7.230.el8_7]" date="1679054400">- [rt] build kernel-rt-4.18.0-425.19.2.rt7.230.el8_7.geb93 [2172278]
- ovl: fail on invalid uid/gid mapping at copy up (Miklos Szeredi) [2165341 2165342] {CVE-2023-0386}</changelog>
</package>
<package pkgid="e016e9feb40104823125e6becd5a4ca94a79ce73f73a9701deda9dc56341b332" name="kernel-rt-debug-devel" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="425.10.1.rt7.220.el8_7"/>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.1.1.rt7.211.el8]" date="1663588800">- [rt] build kernel-rt-4.18.0-425.1.1.rt7.211.el8 [2067251]
- i40e: Fix kernel crash during module removal (Ivan Vecera) [2091489]
- redhat: enable zstream release numbering for rhel 8.7 (Jarod Wilson)
- ice: Allow operation with reduced device MSI-X (Petr Oros) [2102844]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.2.1.rt7.212.el8]" date="1664280000">- [rt] build kernel-rt-4.18.0-425.2.1.rt7.212.el8 [2067251]
- EDAC/ghes: Set the DIMM label unconditionally (Aristeu Rozanski) [2109712]
- configs: enable CONFIG_HP_ILO for aarch64 (Mark Salter) [2123508]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.3.1.rt7.213.el8]" date="1664539200">- [rt] build kernel-rt-4.18.0-425.3.1.rt7.213.el8 [2067251]
- iwlwifi: limit fw version for AC9560 to avoid fw crash (Íñigo Huguet) [2129297]
- sfc: fix null pointer dereference in efx_hard_start_xmit (Íñigo Huguet) [2119638]
- sfc: fix TX channel offset when using legacy interrupts (Íñigo Huguet) [2119638]
- netfilter: conntrack: reduce timeout when receiving out-of-window fin or rst (Florian Westphal) [2047366]
- netfilter: conntrack: remove unneeded indent level (Florian Westphal) [2047366]
- netfilter: conntrack: ignore overly delayed tcp packets (Florian Westphal) [2047366]
- netfilter: conntrack: prepare tcp_in_window for ternary return value (Florian Westphal) [2047366]
- netfilter: conntrack: remove pr_debug callsites from tcp tracker (Florian Westphal) [2047366]
- netfilter: conntrack: work around exceeded receive window (Florian Westphal) [2047366]
- netfilter: conntrack: improve RST handling when tuple is re-used (Florian Westphal) [2047366]
- netfilter: conntrack: avoid misleading 'invalid' in log message (Florian Westphal) [2047366]
- netfilter: remove BUG_ON() after skb_header_pointer() (Florian Westphal) [2047366]
- iavf: Detach device during reset task (Petr Oros) [2069206]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.4.1.rt7.214.el8]" date="1665144000">- [rt] build kernel-rt-4.18.0-425.4.1.rt7.214.el8 [2067251]
- random: allow reseeding DRBG with getrandom (Daiki Ueno) [2121766]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.5.1.rt7.215.el8_7]" date="1667822400">- [rt] build kernel-rt-4.18.0-425.5.1.rt7.215.el8_7 [2137411]
- ice: Fix interface being down after reset with link-down-on-close flag on (Petr Oros) [2136216 2024110]
- ice: Fix crash by keep old cfg when update TCs more than queues (Petr Oros) [2130992 2129902]
- ice: Fix tunnel checksum offload with fragmented traffic (Petr Oros) [2130992 2129902]
- ice: handle E822 generic device ID in PLDM header (Petr Oros) [2130992 2129902]
- ice: ethtool: Prohibit improper channel config for DCB (Petr Oros) [2130992 2129902]
- ice: ethtool: advertise 1000M speeds properly (Petr Oros) [2130992 2129902]
- ice: Fix switchdev rules book keeping (Petr Oros) [2130992 2129902]
- ice: fix access-beyond-end in the switch code (Petr Oros) [2130992 2129902]
- eth: ice: silence the GCC 12 array-bounds warning (Petr Oros) [2130992 2129902]
- ice: Expose RSS indirection tables for queue groups via ethtool (Petr Oros) [2130992 2129902]
- Revert "ice: Hide bus-info in ethtool for PRs in switchdev mode" (Petr Oros) [2130992 2129902]
- ice: remove period on argument description in ice_for_each_vf (Petr Oros) [2130992 2129902]
- ice: add a function comment for ice_cfg_mac_antispoof (Petr Oros) [2130992 2129902]
- ice: fix wording in comment for ice_reset_vf (Petr Oros) [2130992 2129902]
- ice: remove return value comment for ice_reset_all_vfs (Petr Oros) [2130992 2129902]
- ice: always check VF VSI pointer values (Petr Oros) [2130992 2129902]
- ice: add newline to dev_dbg in ice_vf_fdir_dump_info (Petr Oros) [2130992 2129902]
- ice: get switch id on switchdev devices (Petr Oros) [2130992 2129902]
- ice: return ENOSPC when exceeding ICE_MAX_CHAIN_WORDS (Petr Oros) [2130992 2129902]
- ice: introduce common helper for retrieving VSI by vsi_num (Petr Oros) [2130992 2129902]
- ice: use min_t() to make code cleaner in ice_gnss (Petr Oros) [2130992 2129902]
- ice: Add mpls+tso support (Petr Oros) [2130992 2129902]
- ice: switch: convert packet template match code to rodata (Petr Oros) [2130992 2129902]
- ice: switch: use convenience macros to declare dummy pkt templates (Petr Oros) [2130992 2129902]
- ice: switch: use a struct to pass packet template params (Petr Oros) [2130992 2129902]
- ice: switch: unobscurify bitops loop in ice_fill_adv_dummy_packet() (Petr Oros) [2130992 2129902]
- ice: switch: add and use u16[] aliases to ice_adv_lkup_elem::{h, m}_u (Petr Oros) [2130992 2129902]
- ice: Support GTP-U and GTP-C offload in switchdev (Petr Oros) [2130992 2129902]
- ice: Remove useless DMA-32 fallback configuration (Petr Oros) [2130992 2129902]
- ice: switch to napi_build_skb() (Petr Oros) [2130992 2129902]
- redhat: switch to z-stream dist tag and build targets (Jarod Wilson)
- block: avoid sign extend problem with default queue flags mask (Nico Pache) [2135813]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.6.1.rt7.216.el8_7]" date="1668168000">- [rt] build kernel-rt-4.18.0-425.6.1.rt7.216.el8_7 [2137411]
- ice: Add low latency Tx timestamp read (Petr Oros) [2136036 2092425]
- ice: introduce ice_ptp_reset_cached_phctime function (Petr Oros) [2136036 2092425]
- ice: re-arrange some static functions in ice_ptp.c (Petr Oros) [2136036 2092425]
- ice: track and warn when PHC update is late (Petr Oros) [2136036 2092425]
- ice: track Tx timestamp stats similar to other Intel drivers (Petr Oros) [2136036 2092425]
- ice: implement adjfine with mul_u64_u64_div_u64 (Petr Oros) [2136036 2092425]
- ice: Add EXTTS feature to the feature bitmap (Petr Oros) [2136036 2092425]
- math: Export mul_u64_u64_div_u64 (Petr Oros) [2136036 2092425]
- vfio/type1: Unpin zero pages (Alex Williamson) [2128515 2123015]
- net: atlantic: remove aq_nic_deinit() when resume (Íñigo Huguet) [2131935 2130839]
- net: atlantic: remove deep parameter on suspend/resume functions (Íñigo Huguet) [2131935 2130839]
- CI: Use zstream builder container (Veronika Kabatova)
- CI: Add disttag override for 8.7 (Veronika Kabatova)</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.7.1.rt7.217.el8_7]" date="1669723200">- [rt] build kernel-rt-4.18.0-425.7.1.rt7.217.el8_7 [2137411]
- ice: Add additional CSR registers to ETHTOOL_GREGS (Petr Oros) [2136513 2131024]
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps (Petr Oros) [2137270 2106964]
- i40e: Fix VF set max MTU size (Petr Oros) [2137270 2106964]
- iavf: Fix set max MTU size with port VLAN and jumbo frames (Petr Oros) [2137270 2106964]
- iavf: Fix bad page state (Petr Oros) [2137270 2106964]
- Revert "scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels" (Jarod Wilson)
- scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels (Tomas Henzl) [2139216]
- Revert "ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems" (Jarod Wilson)
- ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems (Wei Huang) [2142170 2130653]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.8.1.rt7.218.el8_7]" date="1669982400">- [rt] build kernel-rt-4.18.0-425.8.1.rt7.218.el8_7 [2137411]
- scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels (Tomas Henzl) [2139216 2134535]
- RDMA/mlx5: Set local port to one when accessing counters (Mohammad Kabat) [2141957 2077119]
- drm/mgag200: Fix PLL setup for G200_SE_A rev &gt;=4 (Jocelyn Falempe) [2140152 2130159]
- iavf: Do not restart Tx queues after reset task failure (Petr Oros) [2149081 2134005]
- iavf: Fix a crash during reset task (Petr Oros) [2149081 2134005]
- scsi: core: Allow the ALUA transitioning state enough time (Tomas Henzl) [2147374 2084250]
- scsi: core: Return BLK_STS_TRANSPORT for ALUA transitioning (Tomas Henzl) [2147374 2084250]
- i40e: Fix DMA mappings leak (Ivan Vecera) [2138205 2077847]
- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2142724 2142725] {CVE-2022-2964}
- net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2142724 2142725] {CVE-2022-2964}</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.9.1.rt7.219.el8_7]" date="1670587200">- [rt] build kernel-rt-4.18.0-425.9.1.rt7.219.el8_7 [2137411]
- Documentation/admin-guide: Document nomodeset kernel parameter (Jocelyn Falempe) [2145218 2143952]
- drm: Move nomodeset kernel parameter to the DRM subsystem (Jocelyn Falempe) [2145218 2143952]
- wait: Fix __wait_event_hrtimeout for RT/DL tasks (Derek Barbosa) [2138953 2125233]
- scsi: zfcp: Fix missing auto port scan and thus missing target ports (Tobias Huschle) [2127849 2121089]
- net: Fix return value of qdisc ingress handling on success (Ivan Vecera) [2141878 2131361]</changelog>
  <changelog author="Chris White &lt;chwhite@redhat.com&gt; [4.18.0-425.10.1.rt7.220.el8_7]" date="1671192000">- [rt] build kernel-rt-4.18.0-425.10.1.rt7.220.el8_7 [2137411]
- scsi: target: loop: Fix handling of aborted TMRs (Maurizio Lombardi) [2144583 2141713]
- ice: virtchnl rss hena support (Petr Oros) [2148130]
- ice: Fix configuring VIRTCHNL_OP_CONFIG_VSI_QUEUES with unbalanced queues (Michal Schmidt) [2142017 2137378]
- ice: Add support Flex RXD (Michal Schmidt) [2138157 2131310]
- netfilter: flowtable: fix stuck flows on cleanup due to pending work (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: add function to invoke garbage collection immediately (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: pass flowtable to nf_flow_table_iterate() (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: separate replace, destroy and stats to different workqueues (Phil Sutter) [2134084 2131370]
- x86/paravirt: Add a dummy __x86_paravirt_patch_template() function (Waiman Long) [2152206 2144161]
- x86/paravirt: Fix kABI breakage in struct pv_mmu_ops (Waiman Long) [2152206 2144161]
- drm/i915: fix TLB invalidation for Gen12 video and compute engines (Wander Lairson Costa) [2148162 2148163] {CVE-2022-4139}
- PCI: hv: Do not set PCI_COMMAND_MEMORY to reduce VM boot time (Emanuele Giuseppe Esposito) [2150912 2082836]
- iavf: Fix cached head and tail value for iavf_get_tx_pending (Stefan Assmann) [2149742 2103944]
- iavf: Fix change VF's mac address (Stefan Assmann) [2149742 2103944]
- iavf: Fix race between iavf_close and iavf_reset_task (Stefan Assmann) [2149742 2103944]
- net: ethernet: move from strlcpy with unused retval to strscpy (Stefan Assmann) [2149742 2103944]
- iavf: Fix 'tc qdisc show' listing too many queues (Stefan Assmann) [2149742 2103944]
- iavf: Fix max_rate limiting (Stefan Assmann) [2149742 2103944]
- iavf: Check for duplicate TC flower filter before parsing (Stefan Assmann) [2149742 2103944]
- iavf: Fix handling of dummy receive descriptors (Stefan Assmann) [2149742 2103944]
- iavf: Disallow changing rx/tx-frames and rx/tx-frames-irq (Stefan Assmann) [2149742 2103944]
- intel/iavf:fix repeated words in comments (Stefan Assmann) [2149742 2103944]
- intel: remove unused macros (Stefan Assmann) [2149742 2103944]
- iavf: Add waiting for response from PF in set mac (Stefan Assmann) [2149742 2103944]</changelog>
</package>
<package pkgid="18b86ac631f912cb248edc7b01baa9dff4b98090e1ff6ba157ced79998651235" name="kernel-rt-debug-devel" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="425.13.1.rt7.223.el8_7"/>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.4.1.rt7.214.el8]" date="1665144000">- [rt] build kernel-rt-4.18.0-425.4.1.rt7.214.el8 [2067251]
- random: allow reseeding DRBG with getrandom (Daiki Ueno) [2121766]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.5.1.rt7.215.el8_7]" date="1667822400">- [rt] build kernel-rt-4.18.0-425.5.1.rt7.215.el8_7 [2137411]
- ice: Fix interface being down after reset with link-down-on-close flag on (Petr Oros) [2136216 2024110]
- ice: Fix crash by keep old cfg when update TCs more than queues (Petr Oros) [2130992 2129902]
- ice: Fix tunnel checksum offload with fragmented traffic (Petr Oros) [2130992 2129902]
- ice: handle E822 generic device ID in PLDM header (Petr Oros) [2130992 2129902]
- ice: ethtool: Prohibit improper channel config for DCB (Petr Oros) [2130992 2129902]
- ice: ethtool: advertise 1000M speeds properly (Petr Oros) [2130992 2129902]
- ice: Fix switchdev rules book keeping (Petr Oros) [2130992 2129902]
- ice: fix access-beyond-end in the switch code (Petr Oros) [2130992 2129902]
- eth: ice: silence the GCC 12 array-bounds warning (Petr Oros) [2130992 2129902]
- ice: Expose RSS indirection tables for queue groups via ethtool (Petr Oros) [2130992 2129902]
- Revert "ice: Hide bus-info in ethtool for PRs in switchdev mode" (Petr Oros) [2130992 2129902]
- ice: remove period on argument description in ice_for_each_vf (Petr Oros) [2130992 2129902]
- ice: add a function comment for ice_cfg_mac_antispoof (Petr Oros) [2130992 2129902]
- ice: fix wording in comment for ice_reset_vf (Petr Oros) [2130992 2129902]
- ice: remove return value comment for ice_reset_all_vfs (Petr Oros) [2130992 2129902]
- ice: always check VF VSI pointer values (Petr Oros) [2130992 2129902]
- ice: add newline to dev_dbg in ice_vf_fdir_dump_info (Petr Oros) [2130992 2129902]
- ice: get switch id on switchdev devices (Petr Oros) [2130992 2129902]
- ice: return ENOSPC when exceeding ICE_MAX_CHAIN_WORDS (Petr Oros) [2130992 2129902]
- ice: introduce common helper for retrieving VSI by vsi_num (Petr Oros) [2130992 2129902]
- ice: use min_t() to make code cleaner in ice_gnss (Petr Oros) [2130992 2129902]
- ice: Add mpls+tso support (Petr Oros) [2130992 2129902]
- ice: switch: convert packet template match code to rodata (Petr Oros) [2130992 2129902]
- ice: switch: use convenience macros to declare dummy pkt templates (Petr Oros) [2130992 2129902]
- ice: switch: use a struct to pass packet template params (Petr Oros) [2130992 2129902]
- ice: switch: unobscurify bitops loop in ice_fill_adv_dummy_packet() (Petr Oros) [2130992 2129902]
- ice: switch: add and use u16[] aliases to ice_adv_lkup_elem::{h, m}_u (Petr Oros) [2130992 2129902]
- ice: Support GTP-U and GTP-C offload in switchdev (Petr Oros) [2130992 2129902]
- ice: Remove useless DMA-32 fallback configuration (Petr Oros) [2130992 2129902]
- ice: switch to napi_build_skb() (Petr Oros) [2130992 2129902]
- redhat: switch to z-stream dist tag and build targets (Jarod Wilson)
- block: avoid sign extend problem with default queue flags mask (Nico Pache) [2135813]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.6.1.rt7.216.el8_7]" date="1668168000">- [rt] build kernel-rt-4.18.0-425.6.1.rt7.216.el8_7 [2137411]
- ice: Add low latency Tx timestamp read (Petr Oros) [2136036 2092425]
- ice: introduce ice_ptp_reset_cached_phctime function (Petr Oros) [2136036 2092425]
- ice: re-arrange some static functions in ice_ptp.c (Petr Oros) [2136036 2092425]
- ice: track and warn when PHC update is late (Petr Oros) [2136036 2092425]
- ice: track Tx timestamp stats similar to other Intel drivers (Petr Oros) [2136036 2092425]
- ice: implement adjfine with mul_u64_u64_div_u64 (Petr Oros) [2136036 2092425]
- ice: Add EXTTS feature to the feature bitmap (Petr Oros) [2136036 2092425]
- math: Export mul_u64_u64_div_u64 (Petr Oros) [2136036 2092425]
- vfio/type1: Unpin zero pages (Alex Williamson) [2128515 2123015]
- net: atlantic: remove aq_nic_deinit() when resume (Íñigo Huguet) [2131935 2130839]
- net: atlantic: remove deep parameter on suspend/resume functions (Íñigo Huguet) [2131935 2130839]
- CI: Use zstream builder container (Veronika Kabatova)
- CI: Add disttag override for 8.7 (Veronika Kabatova)</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.7.1.rt7.217.el8_7]" date="1669723200">- [rt] build kernel-rt-4.18.0-425.7.1.rt7.217.el8_7 [2137411]
- ice: Add additional CSR registers to ETHTOOL_GREGS (Petr Oros) [2136513 2131024]
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps (Petr Oros) [2137270 2106964]
- i40e: Fix VF set max MTU size (Petr Oros) [2137270 2106964]
- iavf: Fix set max MTU size with port VLAN and jumbo frames (Petr Oros) [2137270 2106964]
- iavf: Fix bad page state (Petr Oros) [2137270 2106964]
- Revert "scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels" (Jarod Wilson)
- scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels (Tomas Henzl) [2139216]
- Revert "ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems" (Jarod Wilson)
- ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems (Wei Huang) [2142170 2130653]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.8.1.rt7.218.el8_7]" date="1669982400">- [rt] build kernel-rt-4.18.0-425.8.1.rt7.218.el8_7 [2137411]
- scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels (Tomas Henzl) [2139216 2134535]
- RDMA/mlx5: Set local port to one when accessing counters (Mohammad Kabat) [2141957 2077119]
- drm/mgag200: Fix PLL setup for G200_SE_A rev &gt;=4 (Jocelyn Falempe) [2140152 2130159]
- iavf: Do not restart Tx queues after reset task failure (Petr Oros) [2149081 2134005]
- iavf: Fix a crash during reset task (Petr Oros) [2149081 2134005]
- scsi: core: Allow the ALUA transitioning state enough time (Tomas Henzl) [2147374 2084250]
- scsi: core: Return BLK_STS_TRANSPORT for ALUA transitioning (Tomas Henzl) [2147374 2084250]
- i40e: Fix DMA mappings leak (Ivan Vecera) [2138205 2077847]
- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2142724 2142725] {CVE-2022-2964}
- net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2142724 2142725] {CVE-2022-2964}</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.9.1.rt7.219.el8_7]" date="1670587200">- [rt] build kernel-rt-4.18.0-425.9.1.rt7.219.el8_7 [2137411]
- Documentation/admin-guide: Document nomodeset kernel parameter (Jocelyn Falempe) [2145218 2143952]
- drm: Move nomodeset kernel parameter to the DRM subsystem (Jocelyn Falempe) [2145218 2143952]
- wait: Fix __wait_event_hrtimeout for RT/DL tasks (Derek Barbosa) [2138953 2125233]
- scsi: zfcp: Fix missing auto port scan and thus missing target ports (Tobias Huschle) [2127849 2121089]
- net: Fix return value of qdisc ingress handling on success (Ivan Vecera) [2141878 2131361]</changelog>
  <changelog author="Chris White &lt;chwhite@redhat.com&gt; [4.18.0-425.10.1.rt7.220.el8_7]" date="1671192000">- [rt] build kernel-rt-4.18.0-425.10.1.rt7.220.el8_7 [2137411]
- scsi: target: loop: Fix handling of aborted TMRs (Maurizio Lombardi) [2144583 2141713]
- ice: virtchnl rss hena support (Petr Oros) [2148130]
- ice: Fix configuring VIRTCHNL_OP_CONFIG_VSI_QUEUES with unbalanced queues (Michal Schmidt) [2142017 2137378]
- ice: Add support Flex RXD (Michal Schmidt) [2138157 2131310]
- netfilter: flowtable: fix stuck flows on cleanup due to pending work (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: add function to invoke garbage collection immediately (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: pass flowtable to nf_flow_table_iterate() (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: separate replace, destroy and stats to different workqueues (Phil Sutter) [2134084 2131370]
- x86/paravirt: Add a dummy __x86_paravirt_patch_template() function (Waiman Long) [2152206 2144161]
- x86/paravirt: Fix kABI breakage in struct pv_mmu_ops (Waiman Long) [2152206 2144161]
- drm/i915: fix TLB invalidation for Gen12 video and compute engines (Wander Lairson Costa) [2148162 2148163] {CVE-2022-4139}
- PCI: hv: Do not set PCI_COMMAND_MEMORY to reduce VM boot time (Emanuele Giuseppe Esposito) [2150912 2082836]
- iavf: Fix cached head and tail value for iavf_get_tx_pending (Stefan Assmann) [2149742 2103944]
- iavf: Fix change VF's mac address (Stefan Assmann) [2149742 2103944]
- iavf: Fix race between iavf_close and iavf_reset_task (Stefan Assmann) [2149742 2103944]
- net: ethernet: move from strlcpy with unused retval to strscpy (Stefan Assmann) [2149742 2103944]
- iavf: Fix 'tc qdisc show' listing too many queues (Stefan Assmann) [2149742 2103944]
- iavf: Fix max_rate limiting (Stefan Assmann) [2149742 2103944]
- iavf: Check for duplicate TC flower filter before parsing (Stefan Assmann) [2149742 2103944]
- iavf: Fix handling of dummy receive descriptors (Stefan Assmann) [2149742 2103944]
- iavf: Disallow changing rx/tx-frames and rx/tx-frames-irq (Stefan Assmann) [2149742 2103944]
- intel/iavf:fix repeated words in comments (Stefan Assmann) [2149742 2103944]
- intel: remove unused macros (Stefan Assmann) [2149742 2103944]
- iavf: Add waiting for response from PF in set mac (Stefan Assmann) [2149742 2103944]</changelog>
  <changelog author="Chris White &lt;chwhite@redhat.com&gt; [4.18.0-425.11.1.rt7.221.el8_7]" date="1673352000">- [rt] build kernel-rt-4.18.0-425.11.1.rt7.221.el8_7 [2159806]
- NFSD: Protect against send buffer overflow in NFSv3 READ (Scott Mayhew) [2143174] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv2 READ (Scott Mayhew) [2143174] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv3 READDIR (Scott Mayhew) [2143174] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv2 READDIR (Scott Mayhew) [2143174] {CVE-2022-43945}
- SUNRPC: Fix svcxdr_init_encode's buflen calculation (Scott Mayhew) [2143174] {CVE-2022-43945}
- SUNRPC: Fix svcxdr_init_decode's end-of-buffer calculation (Scott Mayhew) [2143174] {CVE-2022-43945}
- panic, kexec: make __crash_kexec() NMI safe (Valentin Schneider) [2139580]
- kexec: turn all kexec_mutex acquisitions into trylocks (Valentin Schneider) [2139580]
- kexec: move locking into do_kexec_load (Valentin Schneider) [2139580]
- vdpa/mlx5: re-create forwarding rules after mac modified (Laurent Vivier) [2152912]
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry (Waiman Long) [2153653]
- irq: Call tick_irq_enter() inside HARDIRQ_OFFSET (Waiman Long) [2153653]
- irqtime: Move irqtime entry accounting after irq offset incrementation (Waiman Long) [2153653]
- sched/vtime: Consolidate IRQ time accounting (Waiman Long) [2153653]
- s390/vtime: Use the generic IRQ entry accounting (Waiman Long) [2153653]
- sched/cputime: Remove symbol exports from IRQ time accounting (Waiman Long) [2153653]
- genirq/irqdomain: Don't try to free an interrupt that has no mapping (Waiman Long) [2153653]
- genirq: Provide __irq_enter/exit_raw() (Waiman Long) [2153653]
- powerpc/time: Only set CONFIG_ARCH_HAS_SCALED_CPUTIME on PPC64 (Waiman Long) [2153653]
- powerpc/time: isolate scaled cputime accounting in dedicated functions. (Waiman Long) [2153653]
- PCI: hv: Fix synchronization between channel callback and hv_pci_bus_exit() (Mohammed Gamal) [2155280]
- PCI: hv: Fix synchronization between channel callback and hv_compose_msi_msg() (Mohammed Gamal) [2155280]
- PCI: hv: Use vmbus_requestor to generate transaction IDs for VMbus hardening (Mohammed Gamal) [2155280]
- net/mlx5e: TC, Reject forwarding from internal port to internal port (Mohammad Kabat) [2141959 2131345]
- hv_netvsc: Fix race between VF offering and VF association message from host (Mohammed Gamal) [2155272]
- x86/mce: Reduce number of machine checks taken during recovery (Prarit Bhargava) [2137592 2104388]
- cgroup/cpuset: Reduce cpuset_rwsem writer latency (Waiman Long) [2153108]
- rcu/exp: Mark current CPU as exp-QS in IPI loop second pass (Waiman Long) [2153108]
- rcu: Always inline rcu_dynticks_task*_{enter,exit}() (Waiman Long) [2153108]
- rcu: Fix existing exp request check in sync_sched_exp_online_cleanup() (Waiman Long) [2153108]
- rcu: Fix macro name CONFIG_TASKS_RCU_TRACE (Waiman Long) [2153108]
- rcu: Fix stall-warning deadlock due to non-release of rcu_node -&gt;lock (Waiman Long) [2153108]
- rcu: Fix to include first blocked task in stall warning (Waiman Long) [2153108]
- cgroup: Use cgroup_attach_{lock,unlock}() from cgroup_attach_task_all() (Waiman Long) [2153108]
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all() (Waiman Long) [2153108]
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock (Waiman Long) [2153108]
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree (Waiman Long) [2153108]
- cgroup/cpuset: Fix a race between cpuset_attach() and cpu hotplug (Waiman Long) [2153108]
- cgroup: reduce dependency on cgroup_mutex (Waiman Long) [2153108]
- sunrpc: Set sk_allocation to GFP_NOFS to avoid using current-&gt;task_frag. (Guillaume Nault) [2153230]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.12.1.rt7.222.el8_7]" date="1674129600">- [rt] build kernel-rt-4.18.0-425.12.1.rt7.222.el8_7 [2159806]
- x86/fpu: Prevent FPU state corruption (Oleksandr Natalenko) [2134586 2130890]
- x86/fpu: Drop fpregs lock before inheriting FPU permissions (Eder Zulian) [2154460 2153549]
- kernel-doc: fix undefined args variable (Jan Stancek) [2157905 2134954]
- mm: memcontrol: fix potential oom_lock recursion deadlock (Waiman Long) [2157922 2138886]
- memcg: prohibit unconditional exceeding the limit of dying tasks (Waiman Long) [2157922 2138886]
- mm, oom: do not trigger out_of_memory from the #PF (Waiman Long) [2157922 2138886]
- mm, oom: pagefault_out_of_memory: don't force global OOM for dying tasks (Waiman Long) [2157922 2138886]
- mm: memcontrol: don't count limit-setting reclaim as memory pressure (Waiman Long) [2157922 2138886]
- KVM: s390: vsie: Fix the initialization of the epoch extension (epdx) field (Thomas Huth) [2158813 2151854]
- net: mana: Fix race on per-CQ variable napi work_done (Emanuele Giuseppe Esposito) [2155437 2151722]
- mei: me: add adler lake point S DID (Prarit Bhargava) [2141783 2141602]
- PCI: hv: Only reuse existing IRTE allocation for Multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix the definition of vector in hv_compose_msi_msg() (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix interrupt mapping for multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Reuse existing IRTE allocation in compose_msi_msg() (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix hv_arch_irq_unmask() for multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix multi-MSI to allow more than one MSI vector (Emanuele Giuseppe Esposito) [2155289 2100275]
- drm/ast: Support multiple outputs (Jarod Wilson) [2149287 2147553]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.13.1.rt7.223.el8_7]" date="1675339200">- [rt] build kernel-rt-4.18.0-425.13.1.rt7.223.el8_7 [2159806]
- mm/cgroup/reclaim: fix dirty pages throttling on cgroup v1 (Waiman Long) [2160221]
- mm: vmscan: remove deadlock due to throttling failing to make progress (Waiman Long) [2160221]
- mm: vmscan: reduce throttling due to a failure to make progress -fix (Waiman Long) [2160221]
- mm: vmscan: Reduce throttling due to a failure to make progress (Waiman Long) [2160221]
- mm/vmscan: delay waking of tasks throttled on NOPROGRESS (Waiman Long) [2160221]
- mm/vmscan: increase the timeout if page reclaim is not making progress (Waiman Long) [2160221]
- mm/vmscan: centralise timeout values for reclaim_throttle (Waiman Long) [2160221]
- mm/page_alloc: remove the throttling logic from the page allocator (Waiman Long) [2160221]
- mm/writeback: throttle based on page writeback instead of congestion (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim when no progress is being made (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim and compaction when too may pages are isolated (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim until some writeback completes if congested (Waiman Long) [2160221]
- mm/vmscan.c: delete or fix duplicated words (Waiman Long) [2160221]
- mm,page_alloc: PF_WQ_WORKER threads must sleep at should_reclaim_retry() (Nico Pache) [2160221]
- ceph: avoid putting the realm twice when decoding snaps fails (Xiubo Li) [2155797 2139881]
- mm/mremap: hold the rmap lock in write mode when moving page table entries. (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap: use pmd/pud_poplulate to update page table entries (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap: don't enable optimized PUD move if page table levels is 2 (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap: convert huge PUD move to separate helper (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap: fix BUILD_BUG_ON() error in get_extent (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap.c: fix extent calculation (Waiman Long) [2140950] {CVE-2022-41222}
- x86: mremap speedup - Enable HAVE_MOVE_PUD (Waiman Long) [2140950] {CVE-2022-41222}
- mm: speedup mremap on 1GB or larger regions (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap: start addresses are properly aligned (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap: calculate extent in one place (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap: it is sure to have enough space when extent meets requirement (Waiman Long) [2140950] {CVE-2022-41222}
- s390/boot: add secure boot trailer (Tobias Huschle) [2151530 2141967]
- i40e: Fix VF hang when reset is triggered on another VF (Ivan Vecera) [2160460 2103801]
- i2c: ismt: Fix an out-of-bounds bug in ismt_access() (Prarit Bhargava) [2154388 2119066] {CVE-2022-2873}
- iavf: schedule watchdog immediately when changing primary MAC (Michal Schmidt) [2163257 2152493]
- iavf: Move netdev_update_features() into watchdog task (Michal Schmidt) [2163257 2152493]
- iavf: fix temporary deadlock and failure to set MAC address (Michal Schmidt) [2163257 2152493]
- iavf: Fix error handling in iavf_init_module() (Michal Schmidt) [2163257 2152493]
- iommu/vt-d: Clean up si_domain in the init_dmars() error path (Jerry Snitselaar) [2149474 2118428]
- x86/pci/xen: Use msi_msg shadow structs (Jerry Snitselaar) [2149474 2118428]
- iommu/intel: Use msi_msg shadow structs (Jerry Snitselaar) [2149474 2118428]
- PCI: MSI: Fix Kconfig dependencies for PCI_MSI_ARCH_FALLBACKS (Jerry Snitselaar) [2149474 2118428]
- x86/apic/msi: Unbreak DMAR and HPET MSI (Jerry Snitselaar) [2149474 2118428]
- iommu/amd: Remove domain search for PCI/MSI (Jerry Snitselaar) [2149474 2118428]
- iommu/vt-d: Remove domain search for PCI/MSI[X] (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Make most MSI ops XEN private (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Cleanup the arch_*_msi_irqs() leftovers (Jerry Snitselaar) [2149474 2118428]
- PCI/MSI: Make arch_.*_msi_irq[s] fallbacks selectable (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Wrap XEN MSI management into irqdomain (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Consolidate XEN-MSI init (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Rework MSI teardown (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Make xen_msi_init() static and rename it to xen_hvm_msi_init() (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Move apic_post_init() invocation to one place (Jerry Snitselaar) [2149474 2118428]
- x86/msi: Use generic MSI domain ops (Jerry Snitselaar) [2149474 2118428]
- x86/msi: Remove pointless vcpu_affinity callback (Jerry Snitselaar) [2149474 2118428]
- iommu/vt-d: Fix compile error with CONFIG_PCI_ATS not set (Myron Stowe) [2149474 2118428]
- iommu/vt-d: Cure VF irqdomain hickup (Myron Stowe) [2149474 2118428]
- x86/pci: Set default irq domain in pcibios_add_device() (Myron Stowe) [2149474 2118428]
- iommm/amd: Store irq domain in struct device (Myron Stowe) [2149474 2118428]
- iommm/vt-d: Store irq domain in struct device (Myron Stowe) [2149474 2118428]
- PCI/MSI: Provide pci_dev_has_special_msi_domain() helper (Myron Stowe) [2149474 2118428]
- x86/msi: Consolidate MSI allocation (Myron Stowe) [2149474 2118428]
- PCI/MSI: Rework pci_msi_domain_calc_hwirq() (Myron Stowe) [2149474 2118428]
- x86/irq: Consolidate UV domain allocation (Myron Stowe) [2149474 2118428]
- x86/irq: Consolidate DMAR irq allocation (Myron Stowe) [2149474 2118428]
- x86_ioapic_Consolidate_IOAPIC_allocation (Myron Stowe) [2149474 2118428]
- x86/msi: Consolidate HPET allocation (Myron Stowe) [2149474 2118428]
- iommu/irq_remapping: Consolidate irq domain lookup (Myron Stowe) [2149474 2118428]
- iommu/amd: Consolidate irq domain getter (Myron Stowe) [2149474 2118428]
- iommu/vt-d: Consolidate irq domain getter (Myron Stowe) [2149474 2118428]
- x86/irq: Add allocation type for parent domain retrieval (Myron Stowe) [2149474 2118428]
- irqdomain: Export irq_domain_update_bus_token (Myron Stowe) [2149474 2118428]
- gitlab-ci: use CI templates from production branch (Michael Hofmann)
- iavf: remove INITIAL_MAC_SET to allow gARP to work properly (Stefan Assmann) [2149745 1938635]
- Revert "scsi: iscsi: ql4xxx: Use per-session workqueue for unbinding" (Chris Leech) [2152734 2122624]
- Revert "scsi: iscsi: Use the session workqueue for recovery" (Chris Leech) [2152734 2122624]
- arm64/bpf: Remove 128MB limit for BPF JIT programs (Yauheni Kaliuta) [2152138 2140163]
- bpf: Define bpf_jit_alloc_exec_limit for arm64 JIT (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: add `type` and `data` fields (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: use `ex` for `exception_table_entry` (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: make fixup_exception() return bool (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: consolidate definitions (Yauheni Kaliuta) [2152138 2140163]
- arm64: kvm: use kvm_exception_table_entry (Yauheni Kaliuta) [2152138 2140163]
- be2net: Fix buffer overflow in be_get_module_eeprom (Josef Oskera) [2160182 2126917]
- sched: Switch to upstream migrate disable code (Crystal Wood) [2132062]
- tick: Fix timer storm since introduction of timersd (Valentin Schneider) [2127204]
- softirq: Use a dedicated thread for timer wakeups. (Valentin Schneider) [2127204]</changelog>
</package>
<package pkgid="3761896733e8c17e3953a3ca2ab6331590c5be5c5bbbdbebcabe116d9d13c90b" name="kernel-rt-debug-devel" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="425.19.2.rt7.230.el8_7"/>
  <changelog author="Chris White &lt;chwhite@redhat.com&gt; [4.18.0-425.11.1.rt7.221.el8_7]" date="1673352000">- [rt] build kernel-rt-4.18.0-425.11.1.rt7.221.el8_7 [2159806]
- NFSD: Protect against send buffer overflow in NFSv3 READ (Scott Mayhew) [2143174] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv2 READ (Scott Mayhew) [2143174] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv3 READDIR (Scott Mayhew) [2143174] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv2 READDIR (Scott Mayhew) [2143174] {CVE-2022-43945}
- SUNRPC: Fix svcxdr_init_encode's buflen calculation (Scott Mayhew) [2143174] {CVE-2022-43945}
- SUNRPC: Fix svcxdr_init_decode's end-of-buffer calculation (Scott Mayhew) [2143174] {CVE-2022-43945}
- panic, kexec: make __crash_kexec() NMI safe (Valentin Schneider) [2139851]
- kexec: turn all kexec_mutex acquisitions into trylocks (Valentin Schneider) [2139580]
- kexec: move locking into do_kexec_load (Valentin Schneider) [2139580]
- vdpa/mlx5: re-create forwarding rules after mac modified (Laurent Vivier) [2152912]
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry (Waiman Long) [2153653]
- irq: Call tick_irq_enter() inside HARDIRQ_OFFSET (Waiman Long) [2153653]
- irqtime: Move irqtime entry accounting after irq offset incrementation (Waiman Long) [2153653]
- sched/vtime: Consolidate IRQ time accounting (Waiman Long) [2153653]
- s390/vtime: Use the generic IRQ entry accounting (Waiman Long) [2153653]
- sched/cputime: Remove symbol exports from IRQ time accounting (Waiman Long) [2153653]
- genirq/irqdomain: Don't try to free an interrupt that has no mapping (Waiman Long) [2153653]
- genirq: Provide __irq_enter/exit_raw() (Waiman Long) [2153653]
- powerpc/time: Only set CONFIG_ARCH_HAS_SCALED_CPUTIME on PPC64 (Waiman Long) [2153653]
- powerpc/time: isolate scaled cputime accounting in dedicated functions. (Waiman Long) [2153653]
- PCI: hv: Fix synchronization between channel callback and hv_pci_bus_exit() (Mohammed Gamal) [2155280]
- PCI: hv: Fix synchronization between channel callback and hv_compose_msi_msg() (Mohammed Gamal) [2155280]
- PCI: hv: Use vmbus_requestor to generate transaction IDs for VMbus hardening (Mohammed Gamal) [2155280]
- net/mlx5e: TC, Reject forwarding from internal port to internal port (Mohammad Kabat) [2141959 2131345]
- hv_netvsc: Fix race between VF offering and VF association message from host (Mohammed Gamal) [2155272]
- x86/mce: Reduce number of machine checks taken during recovery (Prarit Bhargava) [2137592 2104388]
- cgroup/cpuset: Reduce cpuset_rwsem writer latency (Waiman Long) [2153108]
- rcu/exp: Mark current CPU as exp-QS in IPI loop second pass (Waiman Long) [2153108]
- rcu: Always inline rcu_dynticks_task*_{enter,exit}() (Waiman Long) [2153108]
- rcu: Fix existing exp request check in sync_sched_exp_online_cleanup() (Waiman Long) [2153108]
- rcu: Fix macro name CONFIG_TASKS_RCU_TRACE (Waiman Long) [2153108]
- rcu: Fix stall-warning deadlock due to non-release of rcu_node -&gt;lock (Waiman Long) [2153108]
- rcu: Fix to include first blocked task in stall warning (Waiman Long) [2153108]
- cgroup: Use cgroup_attach_{lock,unlock}() from cgroup_attach_task_all() (Waiman Long) [2153108]
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all() (Waiman Long) [2153108]
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock (Waiman Long) [2153108]
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree (Waiman Long) [2153108]
- cgroup/cpuset: Fix a race between cpuset_attach() and cpu hotplug (Waiman Long) [2153108]
- cgroup: reduce dependency on cgroup_mutex (Waiman Long) [2153108]
- sunrpc: Set sk_allocation to GFP_NOFS to avoid using current-&gt;task_frag. (Guillaume Nault) [2153230]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.12.1.rt7.222.el8_7]" date="1674129600">- [rt] build kernel-rt-4.18.0-425.12.1.rt7.222.el8_7 [2159806]
- x86/fpu: Prevent FPU state corruption (Oleksandr Natalenko) [2134586 2130890]
- x86/fpu: Drop fpregs lock before inheriting FPU permissions (Eder Zulian) [2154469 2153549]
- kernel-doc: fix undefined args variable (Jan Stancek) [2157905 2134954]
- mm: memcontrol: fix potential oom_lock recursion deadlock (Waiman Long) [2157922 2138886]
- memcg: prohibit unconditional exceeding the limit of dying tasks (Waiman Long) [2157922 2138886]
- mm, oom: do not trigger out_of_memory from the #PF (Waiman Long) [2157922 2138886]
- mm, oom: pagefault_out_of_memory: don't force global OOM for dying tasks (Waiman Long) [2157922 2138886]
- mm: memcontrol: don't count limit-setting reclaim as memory pressure (Waiman Long) [2157922 2138886]
- KVM: s390: vsie: Fix the initialization of the epoch extension (epdx) field (Thomas Huth) [2158813 2151854]
- net: mana: Fix race on per-CQ variable napi work_done (Emanuele Giuseppe Esposito) [2155437 2151722]
- mei: me: add adler lake point S DID (Prarit Bhargava) [2141783 2141602]
- PCI: hv: Only reuse existing IRTE allocation for Multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix the definition of vector in hv_compose_msi_msg() (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix interrupt mapping for multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Reuse existing IRTE allocation in compose_msi_msg() (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix hv_arch_irq_unmask() for multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix multi-MSI to allow more than one MSI vector (Emanuele Giuseppe Esposito) [2155289 2100275]
- drm/ast: Support multiple outputs (Jarod Wilson) [2149287 2147553]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.13.1.rt7.223.el8_7]" date="1675339200">- [rt] build kernel-rt-4.18.0-425.13.1.rt7.223.el8_7 [2159806]
- mm/cgroup/reclaim: fix dirty pages throttling on cgroup v1 (Waiman Long) [2160221]
- mm: vmscan: remove deadlock due to throttling failing to make progress (Waiman Long) [2160221]
- mm: vmscan: reduce throttling due to a failure to make progress -fix (Waiman Long) [2160221]
- mm: vmscan: Reduce throttling due to a failure to make progress (Waiman Long) [2160221]
- mm/vmscan: delay waking of tasks throttled on NOPROGRESS (Waiman Long) [2160221]
- mm/vmscan: increase the timeout if page reclaim is not making progress (Waiman Long) [2160221]
- mm/vmscan: centralise timeout values for reclaim_throttle (Waiman Long) [2160221]
- mm/page_alloc: remove the throttling logic from the page allocator (Waiman Long) [2160221]
- mm/writeback: throttle based on page writeback instead of congestion (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim when no progress is being made (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim and compaction when too may pages are isolated (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim until some writeback completes if congested (Waiman Long) [2160221]
- mm/vmscan.c: delete or fix duplicated words (Waiman Long) [2160221]
- mm,page_alloc: PF_WQ_WORKER threads must sleep at should_reclaim_retry() (Nico Pache) [2160221]
- ceph: avoid putting the realm twice when decoding snaps fails (Xiubo Li) [2155797 2139881]
- mm/mremap: hold the rmap lock in write mode when moving page table entries. (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap: use pmd/pud_poplulate to update page table entries (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap: don't enable optimized PUD move if page table levels is 2 (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap: convert huge PUD move to separate helper (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap: fix BUILD_BUG_ON() error in get_extent (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap.c: fix extent calculation (Waiman Long) [2140950] {CVE-2022-41222}
- x86: mremap speedup - Enable HAVE_MOVE_PUD (Waiman Long) [2140950] {CVE-2022-41222}
- mm: speedup mremap on 1GB or larger regions (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap: start addresses are properly aligned (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap: calculate extent in one place (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap: it is sure to have enough space when extent meets requirement (Waiman Long) [2140950] {CVE-2022-41222}
- s390/boot: add secure boot trailer (Tobias Huschle) [2151530 2141967]
- i40e: Fix VF hang when reset is triggered on another VF (Ivan Vecera) [2160460 2103801]
- i2c: ismt: Fix an out-of-bounds bug in ismt_access() (Prarit Bhargava) [2154388 2119066] {CVE-2022-2873}
- iavf: schedule watchdog immediately when changing primary MAC (Michal Schmidt) [2163257 2152493]
- iavf: Move netdev_update_features() into watchdog task (Michal Schmidt) [2163257 2152493]
- iavf: fix temporary deadlock and failure to set MAC address (Michal Schmidt) [2163257 2152493]
- iavf: Fix error handling in iavf_init_module() (Michal Schmidt) [2163257 2152493]
- iommu/vt-d: Clean up si_domain in the init_dmars() error path (Jerry Snitselaar) [2149474 2118428]
- x86/pci/xen: Use msi_msg shadow structs (Jerry Snitselaar) [2149474 2118428]
- iommu/intel: Use msi_msg shadow structs (Jerry Snitselaar) [2149474 2118428]
- PCI: MSI: Fix Kconfig dependencies for PCI_MSI_ARCH_FALLBACKS (Jerry Snitselaar) [2149474 2118428]
- x86/apic/msi: Unbreak DMAR and HPET MSI (Jerry Snitselaar) [2149474 2118428]
- iommu/amd: Remove domain search for PCI/MSI (Jerry Snitselaar) [2149474 2118428]
- iommu/vt-d: Remove domain search for PCI/MSI[X] (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Make most MSI ops XEN private (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Cleanup the arch_*_msi_irqs() leftovers (Jerry Snitselaar) [2149474 2118428]
- PCI/MSI: Make arch_.*_msi_irq[s] fallbacks selectable (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Wrap XEN MSI management into irqdomain (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Consolidate XEN-MSI init (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Rework MSI teardown (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Make xen_msi_init() static and rename it to xen_hvm_msi_init() (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Move apic_post_init() invocation to one place (Jerry Snitselaar) [2149474 2118428]
- x86/msi: Use generic MSI domain ops (Jerry Snitselaar) [2149474 2118428]
- x86/msi: Remove pointless vcpu_affinity callback (Jerry Snitselaar) [2149474 2118428]
- iommu/vt-d: Fix compile error with CONFIG_PCI_ATS not set (Myron Stowe) [2149474 2118428]
- iommu/vt-d: Cure VF irqdomain hickup (Myron Stowe) [2149474 2118428]
- x86/pci: Set default irq domain in pcibios_add_device() (Myron Stowe) [2149474 2118428]
- iommm/amd: Store irq domain in struct device (Myron Stowe) [2149474 2118428]
- iommm/vt-d: Store irq domain in struct device (Myron Stowe) [2149474 2118428]
- PCI/MSI: Provide pci_dev_has_special_msi_domain() helper (Myron Stowe) [2149474 2118428]
- x86/msi: Consolidate MSI allocation (Myron Stowe) [2149474 2118428]
- PCI/MSI: Rework pci_msi_domain_calc_hwirq() (Myron Stowe) [2149474 2118428]
- x86/irq: Consolidate UV domain allocation (Myron Stowe) [2149474 2118428]
- x86/irq: Consolidate DMAR irq allocation (Myron Stowe) [2149474 2118428]
- x86_ioapic_Consolidate_IOAPIC_allocation (Myron Stowe) [2149474 2118428]
- x86/msi: Consolidate HPET allocation (Myron Stowe) [2149474 2118428]
- iommu/irq_remapping: Consolidate irq domain lookup (Myron Stowe) [2149474 2118428]
- iommu/amd: Consolidate irq domain getter (Myron Stowe) [2149474 2118428]
- iommu/vt-d: Consolidate irq domain getter (Myron Stowe) [2149474 2118428]
- x86/irq: Add allocation type for parent domain retrieval (Myron Stowe) [2149474 2118428]
- irqdomain: Export irq_domain_update_bus_token (Myron Stowe) [2149474 2118428]
- gitlab-ci: use CI templates from production branch (Michael Hofmann)
- iavf: remove INITIAL_MAC_SET to allow gARP to work properly (Stefan Assmann) [2149745 1938635]
- Revert "scsi: iscsi: ql4xxx: Use per-session workqueue for unbinding" (Chris Leech) [2152734 2122624]
- Revert "scsi: iscsi: Use the session workqueue for recovery" (Chris Leech) [2152734 2122624]
- arm64/bpf: Remove 128MB limit for BPF JIT programs (Yauheni Kaliuta) [2152138 2140163]
- bpf: Define bpf_jit_alloc_exec_limit for arm64 JIT (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: add `type` and `data` fields (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: use `ex` for `exception_table_entry` (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: make fixup_exception() return bool (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: consolidate definitions (Yauheni Kaliuta) [2152138 2140163]
- arm64: kvm: use kvm_exception_table_entry (Yauheni Kaliuta) [2152138 2140163]
- be2net: Fix buffer overflow in be_get_module_eeprom (Josef Oskera) [2160182 2126917]
- sched: Switch to upstream migrate disable code (Crystal Wood) [2132062]
- tick: Fix timer storm since introduction of timersd (Valentin Schneider) [2127204]
- softirq: Use a dedicated thread for timer wakeups. (Valentin Schneider) [2127204]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.14.1.rt7.224.el8_7]" date="1676030400">- [rt] build kernel-rt-4.18.0-425.14.1.rt7.224.el8_7 [2172278]
- ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems (Wei Huang) [2142170 2130653]
- KVM: x86: nSVM: implement nested LBR virtualization (Emanuele Giuseppe Esposito) [2166362 2155149]
- KVM: x86: nSVM: correctly virtualize LBR msrs when L2 is running (Emanuele Giuseppe Esposito) [2166362 2155149]
- kvm: x86: SVM: use vmcb* instead of svm-&gt;vmcb where it makes sense (Emanuele Giuseppe Esposito) [2166362 2155149]
- KVM: x86: nSVM: implement nested VMLOAD/VMSAVE (Emanuele Giuseppe Esposito) [2166362 2155149]
- IB/iser: Fix login with authentication (Kamal Heib) [2161750 2120676]
- act_mirred: use the backlog for nested calls to mirred ingress (Davide Caratti) [2164648 2131339] {CVE-2022-4269}
- net/sched: act_mirred: better wording on protection against excessive stack growth (Davide Caratti) [2164648 2131339] {CVE-2022-4269}
- redhat/configs: Set CONFIG_X86_AMD_PSTATE to 'm' (Prarit Bhargava) [2151275 2145246]
- KVM: x86: smm: preserve interrupt shadow in SMRAM (Maxim Levitsky) [2166368 2097144]
- KVM: x86: SVM: don't save SVM state to SMRAM when VM is not long mode capable (Maxim Levitsky) [2166368 2097144]
- KVM: x86: SVM: use smram structs (Maxim Levitsky) [2166368 2097144]
- KVM: svm: drop explicit return value of kvm_vcpu_map (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: use smram struct for 64 bit smram load/restore (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: use smram struct for 32 bit smram load/restore (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: use smram structs in the common code (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: add structs for KVM's smram layout (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: check for failures on smm entry (Maxim Levitsky) [2166368 2097144]
- KVM: x86: do not go through ctxt-&gt;ops when emulating rsm (Maxim Levitsky) [2166368 2097144]
- KVM: x86: move SMM exit to a new file (Maxim Levitsky) [2166368 2097144]
- KVM: x86: move SMM entry to a new file (Maxim Levitsky) [2166368 2097144]
- KVM: x86: start moving SMM-related functions to new files (Maxim Levitsky) [2166368 2097144]
- bug: introduce ASSERT_STRUCT_OFFSET (Maxim Levitsky) [2166368 2097144]
- KVM: x86: Rename and expose helper to detect if INIT/SIPI are allowed (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: number of GPRs in the SMRAM image depends on the image format (Maxim Levitsky) [2166368 2097144]
- KVM: x86: emulator: update the emulation mode after CR0 write (Maxim Levitsky) [2166368 2097144]
- KVM: x86: emulator: update the emulation mode after rsm (Maxim Levitsky) [2166368 2097144]
- KVM: x86: emulator: introduce emulator_recalc_and_set_mode (Maxim Levitsky) [2166368 2097144]
- KVM: x86: emulator: em_sysexit should update ctxt-&gt;mode (Maxim Levitsky) [2166368 2097144]
- KVM: x86: Bug the VM if the emulator accesses a non-existent GPR (Maxim Levitsky) [2166368 2097144]
- \KVM: x86: Reduce the number of emulator GPRs to '8' for 32-bit KVM (Maxim Levitsky) [2166368 2097144]
- KVM: x86: Use 16-bit fields to track dirty/valid emulator GPRs (Maxim Levitsky) [2166368 2097144]
- KVM: x86: Omit VCPU_REGS_RIP from emulator's _regs array (Maxim Levitsky) [2166368 2097144]
- \KVM: x86: Harden _regs accesses to guard against buggy input (Maxim Levitsky) [2166368 2097144]
- KVM: x86: Grab regs_dirty in local 'unsigned long' (Maxim Levitsky) [2166368 2097144]
- proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152577 2152578] {CVE-2022-4378}
- proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152577 2152578] {CVE-2022-4378}</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.15.1.rt7.225.el8_7]" date="1676548800">- [rt] build kernel-rt-4.18.0-425.15.1.rt7.225.el8_7 [2172278]
- net/mlx5e: Fix use-after-free when reverting termination table (Amir Tzin) [2167640 2112927]
- net/mlx5: Do not query pci info while pci disabled (Amir Tzin) [2167645 2129249]
- x86/fpu: Fix copy_xstate_to_uabi() to copy init states correctly (Dean Nelson) [2168384 2122850]
- x86/fpu: Exclude dynamic states from init_fpstate (Dean Nelson) [2168384 2122850]
- x86/fpu: Fix the init_fpstate size check with the actual size (Dean Nelson) [2168384 2122850]
- x86/fpu: Configure init_fpstate attributes orderly (Dean Nelson) [2168384 2122850]
- x86/fpu/xstate: Fix the ARCH_REQ_XCOMP_PERM implementation (Dean Nelson) [2168384 2122850]
- net/mlx5: E-Switch, properly handle ingress tagged packets on VST (Amir Tzin) [2166665 2096109]
- cpuhotplug: Fix KABI breakage (Prarit Bhargava) [2162763 2156529]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.16.1.rt7.226.el8_7]" date="1677153600">- [rt] build kernel-rt-4.18.0-425.16.1.rt7.226.el8_7 [2172278]
- ipv6: fix panic when fib_lookup_arg-&gt;result is fib6_info (Jiri Benc) [2167602 2140599]
- ceph: blocklist the kclient when receiving corrupted snap trace (Xiubo Li) [2168896 2162414]
- ceph: move mount state enum to super.h (Xiubo Li) [2168896 2162414]
- s390/kexec: fix ipl report address for kdump (Tobias Huschle) [2166296 2161328]
- mm, compaction: fix fast_isolate_around() to stay within boundaries (Daniel Vacek) [2170576 2149309]
- scsi: storvsc: Fix swiotlb bounce buffer leak in confidential VM (Emanuele Giuseppe Esposito) [2170228 2150659]
- netfilter: conntrack: handle tcp challenge acks during connection reuse (Florian Westphal) [2165587 2158726]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.17.1.rt7.227.el8_7]" date="1677844800">- [rt] build kernel-rt-4.18.0-425.17.1.rt7.227.el8_7 [2172278]
- net: mana: Add rmb after checking owner bits (Mohammed Gamal) [2173103 2139462]
- net: mana: Add support of XDP_REDIRECT action (Mohammed Gamal) [2173103 2139462]
- net: mana: Add the Linux MANA PF driver (Mohammed Gamal) [2173103 2139462]
- ice: fix lost multicast packets in promisc mode (Ken Cox) [2172550 2138215]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.18.1.rt7.228.el8_7]" date="1678708800">- [rt] build kernel-rt-4.18.0-425.18.1.rt7.228.el8_7 [2172278]
- futex: Resend potentially swallowed owner death notification (Rafael Aquini) [2170054]
- irq_work: Move lazy work execution to dedicated irq_work kthreads (Valentin Schneider) [2172163]
- irq_work: Sync the patches (Valentin Schneider) [2172163]
- irq_work: Also rcuwait for !IRQ_WORK_HARD_IRQ on PREEMPT_RT (Valentin Schneider) [2172163]
- irq_work: Allow irq_work_sync() to sleep if irq_work() no IRQ support. (Valentin Schneider) [2172163]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.19.1.rt7.229.el8_7]" date="1678968000">- [rt] build kernel-rt-4.18.0-425.19.1.rt7.229.el8_7 [2172278]
- s390/dasd: fix no record found for raw_track_access (Tobias Huschle) [2167776 2161270]
- locking/rwsem: Disable preemption in all down_read*() and up_read() code paths (Waiman Long) [2170939 2162139]
- locking/rwsem: Prevent non-first waiter from spinning in down_write() slowpath (Waiman Long) [2170939 2162139]
- locking/rwsem: Allow slowpath writer to ignore handoff bit if not set by first waiter (Waiman Long) [2170939 2162139]
- locking/rwsem: Always try to wake waiters in out_nolock path (Waiman Long) [2170939 2162139]
- locking/rwsem: No need to check for handoff bit if wait queue empty (Waiman Long) [2170939 2162139]
- locking/rwsem: Make handoff bit handling more consistent (Waiman Long) [2170939 2162139]
- locking/rwsem: Disable preemption while trying for rwsem lock (Waiman Long) [2170939 2162139]
- locking/rwsem: Conditionally wake waiters in reader/writer slowpaths (Waiman Long) [2170939 2162139]
- locking: Make owner_on_cpu() into &lt;linux/sched.h&gt; (Waiman Long) [2170939 2162139]
- locking/rwsem: Optimize down_read_trylock() under highly contended case (Waiman Long) [2170939 2162139]
- locking/rwsem: Fix comments about reader optimistic lock stealing conditions (Waiman Long) [2170939 2162139]
- locking/rwsem: Disable preemption for spinning region (Waiman Long) [2170939 2162139]
- locking: Remove rcu_read_{,un}lock() for preempt_{dis,en}able() (Waiman Long) [2170939 2162139]
- watchdog: fix UAF in reboot notifier handling in watchdog core code (Wander Lairson Costa) [2139770 2131308]
- netfilter: nf_conntrack_irc: Tighten matching on DCC message (Wander Lairson Costa) [2139770 2131308]
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF (Jaroslav Kysela) [2163405 2163406] {CVE-2023-0266}
- net/mlx5e: Fix enabling sriov while tc nic rules are offloaded (Amir Tzin) [2167647 2112925]
- net/mlx5: E-Switch, pair only capable devices (Amir Tzin) [2167647 2112925]
- net/mlx5: Fix mlx5_get_next_dev() peer device matching (Amir Tzin) [2167647 2112925]
- net/mlx5: Lag, filter non compatible devices (Amir Tzin) [2167647 2112925]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.19.2.rt7.230.el8_7]" date="1679054400">- [rt] build kernel-rt-4.18.0-425.19.2.rt7.230.el8_7.geb93 [2172278]
- ovl: fail on invalid uid/gid mapping at copy up (Miklos Szeredi) [2165341 2165342] {CVE-2023-0386}</changelog>
</package>
<package pkgid="eee9c3bfc491c77e7dfd77292bde3c945326b04a123d2bbfaad39267c7167f22" name="kernel-rt-debug-modules" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="425.10.1.rt7.220.el8_7"/>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.1.1.rt7.211.el8]" date="1663588800">- [rt] build kernel-rt-4.18.0-425.1.1.rt7.211.el8 [2067251]
- i40e: Fix kernel crash during module removal (Ivan Vecera) [2091489]
- redhat: enable zstream release numbering for rhel 8.7 (Jarod Wilson)
- ice: Allow operation with reduced device MSI-X (Petr Oros) [2102844]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.2.1.rt7.212.el8]" date="1664280000">- [rt] build kernel-rt-4.18.0-425.2.1.rt7.212.el8 [2067251]
- EDAC/ghes: Set the DIMM label unconditionally (Aristeu Rozanski) [2109712]
- configs: enable CONFIG_HP_ILO for aarch64 (Mark Salter) [2123508]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.3.1.rt7.213.el8]" date="1664539200">- [rt] build kernel-rt-4.18.0-425.3.1.rt7.213.el8 [2067251]
- iwlwifi: limit fw version for AC9560 to avoid fw crash (Íñigo Huguet) [2129297]
- sfc: fix null pointer dereference in efx_hard_start_xmit (Íñigo Huguet) [2119638]
- sfc: fix TX channel offset when using legacy interrupts (Íñigo Huguet) [2119638]
- netfilter: conntrack: reduce timeout when receiving out-of-window fin or rst (Florian Westphal) [2047366]
- netfilter: conntrack: remove unneeded indent level (Florian Westphal) [2047366]
- netfilter: conntrack: ignore overly delayed tcp packets (Florian Westphal) [2047366]
- netfilter: conntrack: prepare tcp_in_window for ternary return value (Florian Westphal) [2047366]
- netfilter: conntrack: remove pr_debug callsites from tcp tracker (Florian Westphal) [2047366]
- netfilter: conntrack: work around exceeded receive window (Florian Westphal) [2047366]
- netfilter: conntrack: improve RST handling when tuple is re-used (Florian Westphal) [2047366]
- netfilter: conntrack: avoid misleading 'invalid' in log message (Florian Westphal) [2047366]
- netfilter: remove BUG_ON() after skb_header_pointer() (Florian Westphal) [2047366]
- iavf: Detach device during reset task (Petr Oros) [2069206]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.4.1.rt7.214.el8]" date="1665144000">- [rt] build kernel-rt-4.18.0-425.4.1.rt7.214.el8 [2067251]
- random: allow reseeding DRBG with getrandom (Daiki Ueno) [2121766]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.5.1.rt7.215.el8_7]" date="1667822400">- [rt] build kernel-rt-4.18.0-425.5.1.rt7.215.el8_7 [2137411]
- ice: Fix interface being down after reset with link-down-on-close flag on (Petr Oros) [2136216 2024110]
- ice: Fix crash by keep old cfg when update TCs more than queues (Petr Oros) [2130992 2129902]
- ice: Fix tunnel checksum offload with fragmented traffic (Petr Oros) [2130992 2129902]
- ice: handle E822 generic device ID in PLDM header (Petr Oros) [2130992 2129902]
- ice: ethtool: Prohibit improper channel config for DCB (Petr Oros) [2130992 2129902]
- ice: ethtool: advertise 1000M speeds properly (Petr Oros) [2130992 2129902]
- ice: Fix switchdev rules book keeping (Petr Oros) [2130992 2129902]
- ice: fix access-beyond-end in the switch code (Petr Oros) [2130992 2129902]
- eth: ice: silence the GCC 12 array-bounds warning (Petr Oros) [2130992 2129902]
- ice: Expose RSS indirection tables for queue groups via ethtool (Petr Oros) [2130992 2129902]
- Revert "ice: Hide bus-info in ethtool for PRs in switchdev mode" (Petr Oros) [2130992 2129902]
- ice: remove period on argument description in ice_for_each_vf (Petr Oros) [2130992 2129902]
- ice: add a function comment for ice_cfg_mac_antispoof (Petr Oros) [2130992 2129902]
- ice: fix wording in comment for ice_reset_vf (Petr Oros) [2130992 2129902]
- ice: remove return value comment for ice_reset_all_vfs (Petr Oros) [2130992 2129902]
- ice: always check VF VSI pointer values (Petr Oros) [2130992 2129902]
- ice: add newline to dev_dbg in ice_vf_fdir_dump_info (Petr Oros) [2130992 2129902]
- ice: get switch id on switchdev devices (Petr Oros) [2130992 2129902]
- ice: return ENOSPC when exceeding ICE_MAX_CHAIN_WORDS (Petr Oros) [2130992 2129902]
- ice: introduce common helper for retrieving VSI by vsi_num (Petr Oros) [2130992 2129902]
- ice: use min_t() to make code cleaner in ice_gnss (Petr Oros) [2130992 2129902]
- ice: Add mpls+tso support (Petr Oros) [2130992 2129902]
- ice: switch: convert packet template match code to rodata (Petr Oros) [2130992 2129902]
- ice: switch: use convenience macros to declare dummy pkt templates (Petr Oros) [2130992 2129902]
- ice: switch: use a struct to pass packet template params (Petr Oros) [2130992 2129902]
- ice: switch: unobscurify bitops loop in ice_fill_adv_dummy_packet() (Petr Oros) [2130992 2129902]
- ice: switch: add and use u16[] aliases to ice_adv_lkup_elem::{h, m}_u (Petr Oros) [2130992 2129902]
- ice: Support GTP-U and GTP-C offload in switchdev (Petr Oros) [2130992 2129902]
- ice: Remove useless DMA-32 fallback configuration (Petr Oros) [2130992 2129902]
- ice: switch to napi_build_skb() (Petr Oros) [2130992 2129902]
- redhat: switch to z-stream dist tag and build targets (Jarod Wilson)
- block: avoid sign extend problem with default queue flags mask (Nico Pache) [2135813]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.6.1.rt7.216.el8_7]" date="1668168000">- [rt] build kernel-rt-4.18.0-425.6.1.rt7.216.el8_7 [2137411]
- ice: Add low latency Tx timestamp read (Petr Oros) [2136036 2092425]
- ice: introduce ice_ptp_reset_cached_phctime function (Petr Oros) [2136036 2092425]
- ice: re-arrange some static functions in ice_ptp.c (Petr Oros) [2136036 2092425]
- ice: track and warn when PHC update is late (Petr Oros) [2136036 2092425]
- ice: track Tx timestamp stats similar to other Intel drivers (Petr Oros) [2136036 2092425]
- ice: implement adjfine with mul_u64_u64_div_u64 (Petr Oros) [2136036 2092425]
- ice: Add EXTTS feature to the feature bitmap (Petr Oros) [2136036 2092425]
- math: Export mul_u64_u64_div_u64 (Petr Oros) [2136036 2092425]
- vfio/type1: Unpin zero pages (Alex Williamson) [2128515 2123015]
- net: atlantic: remove aq_nic_deinit() when resume (Íñigo Huguet) [2131935 2130839]
- net: atlantic: remove deep parameter on suspend/resume functions (Íñigo Huguet) [2131935 2130839]
- CI: Use zstream builder container (Veronika Kabatova)
- CI: Add disttag override for 8.7 (Veronika Kabatova)</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.7.1.rt7.217.el8_7]" date="1669723200">- [rt] build kernel-rt-4.18.0-425.7.1.rt7.217.el8_7 [2137411]
- ice: Add additional CSR registers to ETHTOOL_GREGS (Petr Oros) [2136513 2131024]
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps (Petr Oros) [2137270 2106964]
- i40e: Fix VF set max MTU size (Petr Oros) [2137270 2106964]
- iavf: Fix set max MTU size with port VLAN and jumbo frames (Petr Oros) [2137270 2106964]
- iavf: Fix bad page state (Petr Oros) [2137270 2106964]
- Revert "scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels" (Jarod Wilson)
- scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels (Tomas Henzl) [2139216]
- Revert "ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems" (Jarod Wilson)
- ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems (Wei Huang) [2142170 2130653]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.8.1.rt7.218.el8_7]" date="1669982400">- [rt] build kernel-rt-4.18.0-425.8.1.rt7.218.el8_7 [2137411]
- scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels (Tomas Henzl) [2139216 2134535]
- RDMA/mlx5: Set local port to one when accessing counters (Mohammad Kabat) [2141957 2077119]
- drm/mgag200: Fix PLL setup for G200_SE_A rev &gt;=4 (Jocelyn Falempe) [2140152 2130159]
- iavf: Do not restart Tx queues after reset task failure (Petr Oros) [2149081 2134005]
- iavf: Fix a crash during reset task (Petr Oros) [2149081 2134005]
- scsi: core: Allow the ALUA transitioning state enough time (Tomas Henzl) [2147374 2084250]
- scsi: core: Return BLK_STS_TRANSPORT for ALUA transitioning (Tomas Henzl) [2147374 2084250]
- i40e: Fix DMA mappings leak (Ivan Vecera) [2138205 2077847]
- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2142724 2142725] {CVE-2022-2964}
- net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2142724 2142725] {CVE-2022-2964}</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.9.1.rt7.219.el8_7]" date="1670587200">- [rt] build kernel-rt-4.18.0-425.9.1.rt7.219.el8_7 [2137411]
- Documentation/admin-guide: Document nomodeset kernel parameter (Jocelyn Falempe) [2145218 2143952]
- drm: Move nomodeset kernel parameter to the DRM subsystem (Jocelyn Falempe) [2145218 2143952]
- wait: Fix __wait_event_hrtimeout for RT/DL tasks (Derek Barbosa) [2138953 2125233]
- scsi: zfcp: Fix missing auto port scan and thus missing target ports (Tobias Huschle) [2127849 2121089]
- net: Fix return value of qdisc ingress handling on success (Ivan Vecera) [2141878 2131361]</changelog>
  <changelog author="Chris White &lt;chwhite@redhat.com&gt; [4.18.0-425.10.1.rt7.220.el8_7]" date="1671192000">- [rt] build kernel-rt-4.18.0-425.10.1.rt7.220.el8_7 [2137411]
- scsi: target: loop: Fix handling of aborted TMRs (Maurizio Lombardi) [2144583 2141713]
- ice: virtchnl rss hena support (Petr Oros) [2148130]
- ice: Fix configuring VIRTCHNL_OP_CONFIG_VSI_QUEUES with unbalanced queues (Michal Schmidt) [2142017 2137378]
- ice: Add support Flex RXD (Michal Schmidt) [2138157 2131310]
- netfilter: flowtable: fix stuck flows on cleanup due to pending work (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: add function to invoke garbage collection immediately (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: pass flowtable to nf_flow_table_iterate() (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: separate replace, destroy and stats to different workqueues (Phil Sutter) [2134084 2131370]
- x86/paravirt: Add a dummy __x86_paravirt_patch_template() function (Waiman Long) [2152206 2144161]
- x86/paravirt: Fix kABI breakage in struct pv_mmu_ops (Waiman Long) [2152206 2144161]
- drm/i915: fix TLB invalidation for Gen12 video and compute engines (Wander Lairson Costa) [2148162 2148163] {CVE-2022-4139}
- PCI: hv: Do not set PCI_COMMAND_MEMORY to reduce VM boot time (Emanuele Giuseppe Esposito) [2150912 2082836]
- iavf: Fix cached head and tail value for iavf_get_tx_pending (Stefan Assmann) [2149742 2103944]
- iavf: Fix change VF's mac address (Stefan Assmann) [2149742 2103944]
- iavf: Fix race between iavf_close and iavf_reset_task (Stefan Assmann) [2149742 2103944]
- net: ethernet: move from strlcpy with unused retval to strscpy (Stefan Assmann) [2149742 2103944]
- iavf: Fix 'tc qdisc show' listing too many queues (Stefan Assmann) [2149742 2103944]
- iavf: Fix max_rate limiting (Stefan Assmann) [2149742 2103944]
- iavf: Check for duplicate TC flower filter before parsing (Stefan Assmann) [2149742 2103944]
- iavf: Fix handling of dummy receive descriptors (Stefan Assmann) [2149742 2103944]
- iavf: Disallow changing rx/tx-frames and rx/tx-frames-irq (Stefan Assmann) [2149742 2103944]
- intel/iavf:fix repeated words in comments (Stefan Assmann) [2149742 2103944]
- intel: remove unused macros (Stefan Assmann) [2149742 2103944]
- iavf: Add waiting for response from PF in set mac (Stefan Assmann) [2149742 2103944]</changelog>
</package>
<package pkgid="d67d2059e22434d22bc8790fc15717c394e148cb0c663ca7742ebaef5f6a696e" name="kernel-rt-debug-modules" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="425.13.1.rt7.223.el8_7"/>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.4.1.rt7.214.el8]" date="1665144000">- [rt] build kernel-rt-4.18.0-425.4.1.rt7.214.el8 [2067251]
- random: allow reseeding DRBG with getrandom (Daiki Ueno) [2121766]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.5.1.rt7.215.el8_7]" date="1667822400">- [rt] build kernel-rt-4.18.0-425.5.1.rt7.215.el8_7 [2137411]
- ice: Fix interface being down after reset with link-down-on-close flag on (Petr Oros) [2136216 2024110]
- ice: Fix crash by keep old cfg when update TCs more than queues (Petr Oros) [2130992 2129902]
- ice: Fix tunnel checksum offload with fragmented traffic (Petr Oros) [2130992 2129902]
- ice: handle E822 generic device ID in PLDM header (Petr Oros) [2130992 2129902]
- ice: ethtool: Prohibit improper channel config for DCB (Petr Oros) [2130992 2129902]
- ice: ethtool: advertise 1000M speeds properly (Petr Oros) [2130992 2129902]
- ice: Fix switchdev rules book keeping (Petr Oros) [2130992 2129902]
- ice: fix access-beyond-end in the switch code (Petr Oros) [2130992 2129902]
- eth: ice: silence the GCC 12 array-bounds warning (Petr Oros) [2130992 2129902]
- ice: Expose RSS indirection tables for queue groups via ethtool (Petr Oros) [2130992 2129902]
- Revert "ice: Hide bus-info in ethtool for PRs in switchdev mode" (Petr Oros) [2130992 2129902]
- ice: remove period on argument description in ice_for_each_vf (Petr Oros) [2130992 2129902]
- ice: add a function comment for ice_cfg_mac_antispoof (Petr Oros) [2130992 2129902]
- ice: fix wording in comment for ice_reset_vf (Petr Oros) [2130992 2129902]
- ice: remove return value comment for ice_reset_all_vfs (Petr Oros) [2130992 2129902]
- ice: always check VF VSI pointer values (Petr Oros) [2130992 2129902]
- ice: add newline to dev_dbg in ice_vf_fdir_dump_info (Petr Oros) [2130992 2129902]
- ice: get switch id on switchdev devices (Petr Oros) [2130992 2129902]
- ice: return ENOSPC when exceeding ICE_MAX_CHAIN_WORDS (Petr Oros) [2130992 2129902]
- ice: introduce common helper for retrieving VSI by vsi_num (Petr Oros) [2130992 2129902]
- ice: use min_t() to make code cleaner in ice_gnss (Petr Oros) [2130992 2129902]
- ice: Add mpls+tso support (Petr Oros) [2130992 2129902]
- ice: switch: convert packet template match code to rodata (Petr Oros) [2130992 2129902]
- ice: switch: use convenience macros to declare dummy pkt templates (Petr Oros) [2130992 2129902]
- ice: switch: use a struct to pass packet template params (Petr Oros) [2130992 2129902]
- ice: switch: unobscurify bitops loop in ice_fill_adv_dummy_packet() (Petr Oros) [2130992 2129902]
- ice: switch: add and use u16[] aliases to ice_adv_lkup_elem::{h, m}_u (Petr Oros) [2130992 2129902]
- ice: Support GTP-U and GTP-C offload in switchdev (Petr Oros) [2130992 2129902]
- ice: Remove useless DMA-32 fallback configuration (Petr Oros) [2130992 2129902]
- ice: switch to napi_build_skb() (Petr Oros) [2130992 2129902]
- redhat: switch to z-stream dist tag and build targets (Jarod Wilson)
- block: avoid sign extend problem with default queue flags mask (Nico Pache) [2135813]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.6.1.rt7.216.el8_7]" date="1668168000">- [rt] build kernel-rt-4.18.0-425.6.1.rt7.216.el8_7 [2137411]
- ice: Add low latency Tx timestamp read (Petr Oros) [2136036 2092425]
- ice: introduce ice_ptp_reset_cached_phctime function (Petr Oros) [2136036 2092425]
- ice: re-arrange some static functions in ice_ptp.c (Petr Oros) [2136036 2092425]
- ice: track and warn when PHC update is late (Petr Oros) [2136036 2092425]
- ice: track Tx timestamp stats similar to other Intel drivers (Petr Oros) [2136036 2092425]
- ice: implement adjfine with mul_u64_u64_div_u64 (Petr Oros) [2136036 2092425]
- ice: Add EXTTS feature to the feature bitmap (Petr Oros) [2136036 2092425]
- math: Export mul_u64_u64_div_u64 (Petr Oros) [2136036 2092425]
- vfio/type1: Unpin zero pages (Alex Williamson) [2128515 2123015]
- net: atlantic: remove aq_nic_deinit() when resume (Íñigo Huguet) [2131935 2130839]
- net: atlantic: remove deep parameter on suspend/resume functions (Íñigo Huguet) [2131935 2130839]
- CI: Use zstream builder container (Veronika Kabatova)
- CI: Add disttag override for 8.7 (Veronika Kabatova)</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.7.1.rt7.217.el8_7]" date="1669723200">- [rt] build kernel-rt-4.18.0-425.7.1.rt7.217.el8_7 [2137411]
- ice: Add additional CSR registers to ETHTOOL_GREGS (Petr Oros) [2136513 2131024]
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps (Petr Oros) [2137270 2106964]
- i40e: Fix VF set max MTU size (Petr Oros) [2137270 2106964]
- iavf: Fix set max MTU size with port VLAN and jumbo frames (Petr Oros) [2137270 2106964]
- iavf: Fix bad page state (Petr Oros) [2137270 2106964]
- Revert "scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels" (Jarod Wilson)
- scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels (Tomas Henzl) [2139216]
- Revert "ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems" (Jarod Wilson)
- ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems (Wei Huang) [2142170 2130653]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.8.1.rt7.218.el8_7]" date="1669982400">- [rt] build kernel-rt-4.18.0-425.8.1.rt7.218.el8_7 [2137411]
- scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels (Tomas Henzl) [2139216 2134535]
- RDMA/mlx5: Set local port to one when accessing counters (Mohammad Kabat) [2141957 2077119]
- drm/mgag200: Fix PLL setup for G200_SE_A rev &gt;=4 (Jocelyn Falempe) [2140152 2130159]
- iavf: Do not restart Tx queues after reset task failure (Petr Oros) [2149081 2134005]
- iavf: Fix a crash during reset task (Petr Oros) [2149081 2134005]
- scsi: core: Allow the ALUA transitioning state enough time (Tomas Henzl) [2147374 2084250]
- scsi: core: Return BLK_STS_TRANSPORT for ALUA transitioning (Tomas Henzl) [2147374 2084250]
- i40e: Fix DMA mappings leak (Ivan Vecera) [2138205 2077847]
- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2142724 2142725] {CVE-2022-2964}
- net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2142724 2142725] {CVE-2022-2964}</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.9.1.rt7.219.el8_7]" date="1670587200">- [rt] build kernel-rt-4.18.0-425.9.1.rt7.219.el8_7 [2137411]
- Documentation/admin-guide: Document nomodeset kernel parameter (Jocelyn Falempe) [2145218 2143952]
- drm: Move nomodeset kernel parameter to the DRM subsystem (Jocelyn Falempe) [2145218 2143952]
- wait: Fix __wait_event_hrtimeout for RT/DL tasks (Derek Barbosa) [2138953 2125233]
- scsi: zfcp: Fix missing auto port scan and thus missing target ports (Tobias Huschle) [2127849 2121089]
- net: Fix return value of qdisc ingress handling on success (Ivan Vecera) [2141878 2131361]</changelog>
  <changelog author="Chris White &lt;chwhite@redhat.com&gt; [4.18.0-425.10.1.rt7.220.el8_7]" date="1671192000">- [rt] build kernel-rt-4.18.0-425.10.1.rt7.220.el8_7 [2137411]
- scsi: target: loop: Fix handling of aborted TMRs (Maurizio Lombardi) [2144583 2141713]
- ice: virtchnl rss hena support (Petr Oros) [2148130]
- ice: Fix configuring VIRTCHNL_OP_CONFIG_VSI_QUEUES with unbalanced queues (Michal Schmidt) [2142017 2137378]
- ice: Add support Flex RXD (Michal Schmidt) [2138157 2131310]
- netfilter: flowtable: fix stuck flows on cleanup due to pending work (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: add function to invoke garbage collection immediately (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: pass flowtable to nf_flow_table_iterate() (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: separate replace, destroy and stats to different workqueues (Phil Sutter) [2134084 2131370]
- x86/paravirt: Add a dummy __x86_paravirt_patch_template() function (Waiman Long) [2152206 2144161]
- x86/paravirt: Fix kABI breakage in struct pv_mmu_ops (Waiman Long) [2152206 2144161]
- drm/i915: fix TLB invalidation for Gen12 video and compute engines (Wander Lairson Costa) [2148162 2148163] {CVE-2022-4139}
- PCI: hv: Do not set PCI_COMMAND_MEMORY to reduce VM boot time (Emanuele Giuseppe Esposito) [2150912 2082836]
- iavf: Fix cached head and tail value for iavf_get_tx_pending (Stefan Assmann) [2149742 2103944]
- iavf: Fix change VF's mac address (Stefan Assmann) [2149742 2103944]
- iavf: Fix race between iavf_close and iavf_reset_task (Stefan Assmann) [2149742 2103944]
- net: ethernet: move from strlcpy with unused retval to strscpy (Stefan Assmann) [2149742 2103944]
- iavf: Fix 'tc qdisc show' listing too many queues (Stefan Assmann) [2149742 2103944]
- iavf: Fix max_rate limiting (Stefan Assmann) [2149742 2103944]
- iavf: Check for duplicate TC flower filter before parsing (Stefan Assmann) [2149742 2103944]
- iavf: Fix handling of dummy receive descriptors (Stefan Assmann) [2149742 2103944]
- iavf: Disallow changing rx/tx-frames and rx/tx-frames-irq (Stefan Assmann) [2149742 2103944]
- intel/iavf:fix repeated words in comments (Stefan Assmann) [2149742 2103944]
- intel: remove unused macros (Stefan Assmann) [2149742 2103944]
- iavf: Add waiting for response from PF in set mac (Stefan Assmann) [2149742 2103944]</changelog>
  <changelog author="Chris White &lt;chwhite@redhat.com&gt; [4.18.0-425.11.1.rt7.221.el8_7]" date="1673352000">- [rt] build kernel-rt-4.18.0-425.11.1.rt7.221.el8_7 [2159806]
- NFSD: Protect against send buffer overflow in NFSv3 READ (Scott Mayhew) [2143174] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv2 READ (Scott Mayhew) [2143174] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv3 READDIR (Scott Mayhew) [2143174] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv2 READDIR (Scott Mayhew) [2143174] {CVE-2022-43945}
- SUNRPC: Fix svcxdr_init_encode's buflen calculation (Scott Mayhew) [2143174] {CVE-2022-43945}
- SUNRPC: Fix svcxdr_init_decode's end-of-buffer calculation (Scott Mayhew) [2143174] {CVE-2022-43945}
- panic, kexec: make __crash_kexec() NMI safe (Valentin Schneider) [2139580]
- kexec: turn all kexec_mutex acquisitions into trylocks (Valentin Schneider) [2139580]
- kexec: move locking into do_kexec_load (Valentin Schneider) [2139580]
- vdpa/mlx5: re-create forwarding rules after mac modified (Laurent Vivier) [2152912]
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry (Waiman Long) [2153653]
- irq: Call tick_irq_enter() inside HARDIRQ_OFFSET (Waiman Long) [2153653]
- irqtime: Move irqtime entry accounting after irq offset incrementation (Waiman Long) [2153653]
- sched/vtime: Consolidate IRQ time accounting (Waiman Long) [2153653]
- s390/vtime: Use the generic IRQ entry accounting (Waiman Long) [2153653]
- sched/cputime: Remove symbol exports from IRQ time accounting (Waiman Long) [2153653]
- genirq/irqdomain: Don't try to free an interrupt that has no mapping (Waiman Long) [2153653]
- genirq: Provide __irq_enter/exit_raw() (Waiman Long) [2153653]
- powerpc/time: Only set CONFIG_ARCH_HAS_SCALED_CPUTIME on PPC64 (Waiman Long) [2153653]
- powerpc/time: isolate scaled cputime accounting in dedicated functions. (Waiman Long) [2153653]
- PCI: hv: Fix synchronization between channel callback and hv_pci_bus_exit() (Mohammed Gamal) [2155280]
- PCI: hv: Fix synchronization between channel callback and hv_compose_msi_msg() (Mohammed Gamal) [2155280]
- PCI: hv: Use vmbus_requestor to generate transaction IDs for VMbus hardening (Mohammed Gamal) [2155280]
- net/mlx5e: TC, Reject forwarding from internal port to internal port (Mohammad Kabat) [2141959 2131345]
- hv_netvsc: Fix race between VF offering and VF association message from host (Mohammed Gamal) [2155272]
- x86/mce: Reduce number of machine checks taken during recovery (Prarit Bhargava) [2137592 2104388]
- cgroup/cpuset: Reduce cpuset_rwsem writer latency (Waiman Long) [2153108]
- rcu/exp: Mark current CPU as exp-QS in IPI loop second pass (Waiman Long) [2153108]
- rcu: Always inline rcu_dynticks_task*_{enter,exit}() (Waiman Long) [2153108]
- rcu: Fix existing exp request check in sync_sched_exp_online_cleanup() (Waiman Long) [2153108]
- rcu: Fix macro name CONFIG_TASKS_RCU_TRACE (Waiman Long) [2153108]
- rcu: Fix stall-warning deadlock due to non-release of rcu_node -&gt;lock (Waiman Long) [2153108]
- rcu: Fix to include first blocked task in stall warning (Waiman Long) [2153108]
- cgroup: Use cgroup_attach_{lock,unlock}() from cgroup_attach_task_all() (Waiman Long) [2153108]
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all() (Waiman Long) [2153108]
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock (Waiman Long) [2153108]
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree (Waiman Long) [2153108]
- cgroup/cpuset: Fix a race between cpuset_attach() and cpu hotplug (Waiman Long) [2153108]
- cgroup: reduce dependency on cgroup_mutex (Waiman Long) [2153108]
- sunrpc: Set sk_allocation to GFP_NOFS to avoid using current-&gt;task_frag. (Guillaume Nault) [2153230]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.12.1.rt7.222.el8_7]" date="1674129600">- [rt] build kernel-rt-4.18.0-425.12.1.rt7.222.el8_7 [2159806]
- x86/fpu: Prevent FPU state corruption (Oleksandr Natalenko) [2134586 2130890]
- x86/fpu: Drop fpregs lock before inheriting FPU permissions (Eder Zulian) [2154460 2153549]
- kernel-doc: fix undefined args variable (Jan Stancek) [2157905 2134954]
- mm: memcontrol: fix potential oom_lock recursion deadlock (Waiman Long) [2157922 2138886]
- memcg: prohibit unconditional exceeding the limit of dying tasks (Waiman Long) [2157922 2138886]
- mm, oom: do not trigger out_of_memory from the #PF (Waiman Long) [2157922 2138886]
- mm, oom: pagefault_out_of_memory: don't force global OOM for dying tasks (Waiman Long) [2157922 2138886]
- mm: memcontrol: don't count limit-setting reclaim as memory pressure (Waiman Long) [2157922 2138886]
- KVM: s390: vsie: Fix the initialization of the epoch extension (epdx) field (Thomas Huth) [2158813 2151854]
- net: mana: Fix race on per-CQ variable napi work_done (Emanuele Giuseppe Esposito) [2155437 2151722]
- mei: me: add adler lake point S DID (Prarit Bhargava) [2141783 2141602]
- PCI: hv: Only reuse existing IRTE allocation for Multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix the definition of vector in hv_compose_msi_msg() (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix interrupt mapping for multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Reuse existing IRTE allocation in compose_msi_msg() (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix hv_arch_irq_unmask() for multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix multi-MSI to allow more than one MSI vector (Emanuele Giuseppe Esposito) [2155289 2100275]
- drm/ast: Support multiple outputs (Jarod Wilson) [2149287 2147553]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.13.1.rt7.223.el8_7]" date="1675339200">- [rt] build kernel-rt-4.18.0-425.13.1.rt7.223.el8_7 [2159806]
- mm/cgroup/reclaim: fix dirty pages throttling on cgroup v1 (Waiman Long) [2160221]
- mm: vmscan: remove deadlock due to throttling failing to make progress (Waiman Long) [2160221]
- mm: vmscan: reduce throttling due to a failure to make progress -fix (Waiman Long) [2160221]
- mm: vmscan: Reduce throttling due to a failure to make progress (Waiman Long) [2160221]
- mm/vmscan: delay waking of tasks throttled on NOPROGRESS (Waiman Long) [2160221]
- mm/vmscan: increase the timeout if page reclaim is not making progress (Waiman Long) [2160221]
- mm/vmscan: centralise timeout values for reclaim_throttle (Waiman Long) [2160221]
- mm/page_alloc: remove the throttling logic from the page allocator (Waiman Long) [2160221]
- mm/writeback: throttle based on page writeback instead of congestion (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim when no progress is being made (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim and compaction when too may pages are isolated (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim until some writeback completes if congested (Waiman Long) [2160221]
- mm/vmscan.c: delete or fix duplicated words (Waiman Long) [2160221]
- mm,page_alloc: PF_WQ_WORKER threads must sleep at should_reclaim_retry() (Nico Pache) [2160221]
- ceph: avoid putting the realm twice when decoding snaps fails (Xiubo Li) [2155797 2139881]
- mm/mremap: hold the rmap lock in write mode when moving page table entries. (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap: use pmd/pud_poplulate to update page table entries (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap: don't enable optimized PUD move if page table levels is 2 (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap: convert huge PUD move to separate helper (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap: fix BUILD_BUG_ON() error in get_extent (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap.c: fix extent calculation (Waiman Long) [2140950] {CVE-2022-41222}
- x86: mremap speedup - Enable HAVE_MOVE_PUD (Waiman Long) [2140950] {CVE-2022-41222}
- mm: speedup mremap on 1GB or larger regions (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap: start addresses are properly aligned (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap: calculate extent in one place (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap: it is sure to have enough space when extent meets requirement (Waiman Long) [2140950] {CVE-2022-41222}
- s390/boot: add secure boot trailer (Tobias Huschle) [2151530 2141967]
- i40e: Fix VF hang when reset is triggered on another VF (Ivan Vecera) [2160460 2103801]
- i2c: ismt: Fix an out-of-bounds bug in ismt_access() (Prarit Bhargava) [2154388 2119066] {CVE-2022-2873}
- iavf: schedule watchdog immediately when changing primary MAC (Michal Schmidt) [2163257 2152493]
- iavf: Move netdev_update_features() into watchdog task (Michal Schmidt) [2163257 2152493]
- iavf: fix temporary deadlock and failure to set MAC address (Michal Schmidt) [2163257 2152493]
- iavf: Fix error handling in iavf_init_module() (Michal Schmidt) [2163257 2152493]
- iommu/vt-d: Clean up si_domain in the init_dmars() error path (Jerry Snitselaar) [2149474 2118428]
- x86/pci/xen: Use msi_msg shadow structs (Jerry Snitselaar) [2149474 2118428]
- iommu/intel: Use msi_msg shadow structs (Jerry Snitselaar) [2149474 2118428]
- PCI: MSI: Fix Kconfig dependencies for PCI_MSI_ARCH_FALLBACKS (Jerry Snitselaar) [2149474 2118428]
- x86/apic/msi: Unbreak DMAR and HPET MSI (Jerry Snitselaar) [2149474 2118428]
- iommu/amd: Remove domain search for PCI/MSI (Jerry Snitselaar) [2149474 2118428]
- iommu/vt-d: Remove domain search for PCI/MSI[X] (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Make most MSI ops XEN private (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Cleanup the arch_*_msi_irqs() leftovers (Jerry Snitselaar) [2149474 2118428]
- PCI/MSI: Make arch_.*_msi_irq[s] fallbacks selectable (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Wrap XEN MSI management into irqdomain (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Consolidate XEN-MSI init (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Rework MSI teardown (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Make xen_msi_init() static and rename it to xen_hvm_msi_init() (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Move apic_post_init() invocation to one place (Jerry Snitselaar) [2149474 2118428]
- x86/msi: Use generic MSI domain ops (Jerry Snitselaar) [2149474 2118428]
- x86/msi: Remove pointless vcpu_affinity callback (Jerry Snitselaar) [2149474 2118428]
- iommu/vt-d: Fix compile error with CONFIG_PCI_ATS not set (Myron Stowe) [2149474 2118428]
- iommu/vt-d: Cure VF irqdomain hickup (Myron Stowe) [2149474 2118428]
- x86/pci: Set default irq domain in pcibios_add_device() (Myron Stowe) [2149474 2118428]
- iommm/amd: Store irq domain in struct device (Myron Stowe) [2149474 2118428]
- iommm/vt-d: Store irq domain in struct device (Myron Stowe) [2149474 2118428]
- PCI/MSI: Provide pci_dev_has_special_msi_domain() helper (Myron Stowe) [2149474 2118428]
- x86/msi: Consolidate MSI allocation (Myron Stowe) [2149474 2118428]
- PCI/MSI: Rework pci_msi_domain_calc_hwirq() (Myron Stowe) [2149474 2118428]
- x86/irq: Consolidate UV domain allocation (Myron Stowe) [2149474 2118428]
- x86/irq: Consolidate DMAR irq allocation (Myron Stowe) [2149474 2118428]
- x86_ioapic_Consolidate_IOAPIC_allocation (Myron Stowe) [2149474 2118428]
- x86/msi: Consolidate HPET allocation (Myron Stowe) [2149474 2118428]
- iommu/irq_remapping: Consolidate irq domain lookup (Myron Stowe) [2149474 2118428]
- iommu/amd: Consolidate irq domain getter (Myron Stowe) [2149474 2118428]
- iommu/vt-d: Consolidate irq domain getter (Myron Stowe) [2149474 2118428]
- x86/irq: Add allocation type for parent domain retrieval (Myron Stowe) [2149474 2118428]
- irqdomain: Export irq_domain_update_bus_token (Myron Stowe) [2149474 2118428]
- gitlab-ci: use CI templates from production branch (Michael Hofmann)
- iavf: remove INITIAL_MAC_SET to allow gARP to work properly (Stefan Assmann) [2149745 1938635]
- Revert "scsi: iscsi: ql4xxx: Use per-session workqueue for unbinding" (Chris Leech) [2152734 2122624]
- Revert "scsi: iscsi: Use the session workqueue for recovery" (Chris Leech) [2152734 2122624]
- arm64/bpf: Remove 128MB limit for BPF JIT programs (Yauheni Kaliuta) [2152138 2140163]
- bpf: Define bpf_jit_alloc_exec_limit for arm64 JIT (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: add `type` and `data` fields (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: use `ex` for `exception_table_entry` (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: make fixup_exception() return bool (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: consolidate definitions (Yauheni Kaliuta) [2152138 2140163]
- arm64: kvm: use kvm_exception_table_entry (Yauheni Kaliuta) [2152138 2140163]
- be2net: Fix buffer overflow in be_get_module_eeprom (Josef Oskera) [2160182 2126917]
- sched: Switch to upstream migrate disable code (Crystal Wood) [2132062]
- tick: Fix timer storm since introduction of timersd (Valentin Schneider) [2127204]
- softirq: Use a dedicated thread for timer wakeups. (Valentin Schneider) [2127204]</changelog>
</package>
<package pkgid="898b6629213cf0edf5ee84125ab6324f551725ee5bb2d89df084cc00a42982c5" name="kernel-rt-debug-modules" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="425.19.2.rt7.230.el8_7"/>
  <changelog author="Chris White &lt;chwhite@redhat.com&gt; [4.18.0-425.11.1.rt7.221.el8_7]" date="1673352000">- [rt] build kernel-rt-4.18.0-425.11.1.rt7.221.el8_7 [2159806]
- NFSD: Protect against send buffer overflow in NFSv3 READ (Scott Mayhew) [2143174] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv2 READ (Scott Mayhew) [2143174] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv3 READDIR (Scott Mayhew) [2143174] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv2 READDIR (Scott Mayhew) [2143174] {CVE-2022-43945}
- SUNRPC: Fix svcxdr_init_encode's buflen calculation (Scott Mayhew) [2143174] {CVE-2022-43945}
- SUNRPC: Fix svcxdr_init_decode's end-of-buffer calculation (Scott Mayhew) [2143174] {CVE-2022-43945}
- panic, kexec: make __crash_kexec() NMI safe (Valentin Schneider) [2139851]
- kexec: turn all kexec_mutex acquisitions into trylocks (Valentin Schneider) [2139580]
- kexec: move locking into do_kexec_load (Valentin Schneider) [2139580]
- vdpa/mlx5: re-create forwarding rules after mac modified (Laurent Vivier) [2152912]
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry (Waiman Long) [2153653]
- irq: Call tick_irq_enter() inside HARDIRQ_OFFSET (Waiman Long) [2153653]
- irqtime: Move irqtime entry accounting after irq offset incrementation (Waiman Long) [2153653]
- sched/vtime: Consolidate IRQ time accounting (Waiman Long) [2153653]
- s390/vtime: Use the generic IRQ entry accounting (Waiman Long) [2153653]
- sched/cputime: Remove symbol exports from IRQ time accounting (Waiman Long) [2153653]
- genirq/irqdomain: Don't try to free an interrupt that has no mapping (Waiman Long) [2153653]
- genirq: Provide __irq_enter/exit_raw() (Waiman Long) [2153653]
- powerpc/time: Only set CONFIG_ARCH_HAS_SCALED_CPUTIME on PPC64 (Waiman Long) [2153653]
- powerpc/time: isolate scaled cputime accounting in dedicated functions. (Waiman Long) [2153653]
- PCI: hv: Fix synchronization between channel callback and hv_pci_bus_exit() (Mohammed Gamal) [2155280]
- PCI: hv: Fix synchronization between channel callback and hv_compose_msi_msg() (Mohammed Gamal) [2155280]
- PCI: hv: Use vmbus_requestor to generate transaction IDs for VMbus hardening (Mohammed Gamal) [2155280]
- net/mlx5e: TC, Reject forwarding from internal port to internal port (Mohammad Kabat) [2141959 2131345]
- hv_netvsc: Fix race between VF offering and VF association message from host (Mohammed Gamal) [2155272]
- x86/mce: Reduce number of machine checks taken during recovery (Prarit Bhargava) [2137592 2104388]
- cgroup/cpuset: Reduce cpuset_rwsem writer latency (Waiman Long) [2153108]
- rcu/exp: Mark current CPU as exp-QS in IPI loop second pass (Waiman Long) [2153108]
- rcu: Always inline rcu_dynticks_task*_{enter,exit}() (Waiman Long) [2153108]
- rcu: Fix existing exp request check in sync_sched_exp_online_cleanup() (Waiman Long) [2153108]
- rcu: Fix macro name CONFIG_TASKS_RCU_TRACE (Waiman Long) [2153108]
- rcu: Fix stall-warning deadlock due to non-release of rcu_node -&gt;lock (Waiman Long) [2153108]
- rcu: Fix to include first blocked task in stall warning (Waiman Long) [2153108]
- cgroup: Use cgroup_attach_{lock,unlock}() from cgroup_attach_task_all() (Waiman Long) [2153108]
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all() (Waiman Long) [2153108]
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock (Waiman Long) [2153108]
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree (Waiman Long) [2153108]
- cgroup/cpuset: Fix a race between cpuset_attach() and cpu hotplug (Waiman Long) [2153108]
- cgroup: reduce dependency on cgroup_mutex (Waiman Long) [2153108]
- sunrpc: Set sk_allocation to GFP_NOFS to avoid using current-&gt;task_frag. (Guillaume Nault) [2153230]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.12.1.rt7.222.el8_7]" date="1674129600">- [rt] build kernel-rt-4.18.0-425.12.1.rt7.222.el8_7 [2159806]
- x86/fpu: Prevent FPU state corruption (Oleksandr Natalenko) [2134586 2130890]
- x86/fpu: Drop fpregs lock before inheriting FPU permissions (Eder Zulian) [2154469 2153549]
- kernel-doc: fix undefined args variable (Jan Stancek) [2157905 2134954]
- mm: memcontrol: fix potential oom_lock recursion deadlock (Waiman Long) [2157922 2138886]
- memcg: prohibit unconditional exceeding the limit of dying tasks (Waiman Long) [2157922 2138886]
- mm, oom: do not trigger out_of_memory from the #PF (Waiman Long) [2157922 2138886]
- mm, oom: pagefault_out_of_memory: don't force global OOM for dying tasks (Waiman Long) [2157922 2138886]
- mm: memcontrol: don't count limit-setting reclaim as memory pressure (Waiman Long) [2157922 2138886]
- KVM: s390: vsie: Fix the initialization of the epoch extension (epdx) field (Thomas Huth) [2158813 2151854]
- net: mana: Fix race on per-CQ variable napi work_done (Emanuele Giuseppe Esposito) [2155437 2151722]
- mei: me: add adler lake point S DID (Prarit Bhargava) [2141783 2141602]
- PCI: hv: Only reuse existing IRTE allocation for Multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix the definition of vector in hv_compose_msi_msg() (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix interrupt mapping for multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Reuse existing IRTE allocation in compose_msi_msg() (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix hv_arch_irq_unmask() for multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix multi-MSI to allow more than one MSI vector (Emanuele Giuseppe Esposito) [2155289 2100275]
- drm/ast: Support multiple outputs (Jarod Wilson) [2149287 2147553]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.13.1.rt7.223.el8_7]" date="1675339200">- [rt] build kernel-rt-4.18.0-425.13.1.rt7.223.el8_7 [2159806]
- mm/cgroup/reclaim: fix dirty pages throttling on cgroup v1 (Waiman Long) [2160221]
- mm: vmscan: remove deadlock due to throttling failing to make progress (Waiman Long) [2160221]
- mm: vmscan: reduce throttling due to a failure to make progress -fix (Waiman Long) [2160221]
- mm: vmscan: Reduce throttling due to a failure to make progress (Waiman Long) [2160221]
- mm/vmscan: delay waking of tasks throttled on NOPROGRESS (Waiman Long) [2160221]
- mm/vmscan: increase the timeout if page reclaim is not making progress (Waiman Long) [2160221]
- mm/vmscan: centralise timeout values for reclaim_throttle (Waiman Long) [2160221]
- mm/page_alloc: remove the throttling logic from the page allocator (Waiman Long) [2160221]
- mm/writeback: throttle based on page writeback instead of congestion (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim when no progress is being made (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim and compaction when too may pages are isolated (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim until some writeback completes if congested (Waiman Long) [2160221]
- mm/vmscan.c: delete or fix duplicated words (Waiman Long) [2160221]
- mm,page_alloc: PF_WQ_WORKER threads must sleep at should_reclaim_retry() (Nico Pache) [2160221]
- ceph: avoid putting the realm twice when decoding snaps fails (Xiubo Li) [2155797 2139881]
- mm/mremap: hold the rmap lock in write mode when moving page table entries. (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap: use pmd/pud_poplulate to update page table entries (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap: don't enable optimized PUD move if page table levels is 2 (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap: convert huge PUD move to separate helper (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap: fix BUILD_BUG_ON() error in get_extent (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap.c: fix extent calculation (Waiman Long) [2140950] {CVE-2022-41222}
- x86: mremap speedup - Enable HAVE_MOVE_PUD (Waiman Long) [2140950] {CVE-2022-41222}
- mm: speedup mremap on 1GB or larger regions (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap: start addresses are properly aligned (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap: calculate extent in one place (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap: it is sure to have enough space when extent meets requirement (Waiman Long) [2140950] {CVE-2022-41222}
- s390/boot: add secure boot trailer (Tobias Huschle) [2151530 2141967]
- i40e: Fix VF hang when reset is triggered on another VF (Ivan Vecera) [2160460 2103801]
- i2c: ismt: Fix an out-of-bounds bug in ismt_access() (Prarit Bhargava) [2154388 2119066] {CVE-2022-2873}
- iavf: schedule watchdog immediately when changing primary MAC (Michal Schmidt) [2163257 2152493]
- iavf: Move netdev_update_features() into watchdog task (Michal Schmidt) [2163257 2152493]
- iavf: fix temporary deadlock and failure to set MAC address (Michal Schmidt) [2163257 2152493]
- iavf: Fix error handling in iavf_init_module() (Michal Schmidt) [2163257 2152493]
- iommu/vt-d: Clean up si_domain in the init_dmars() error path (Jerry Snitselaar) [2149474 2118428]
- x86/pci/xen: Use msi_msg shadow structs (Jerry Snitselaar) [2149474 2118428]
- iommu/intel: Use msi_msg shadow structs (Jerry Snitselaar) [2149474 2118428]
- PCI: MSI: Fix Kconfig dependencies for PCI_MSI_ARCH_FALLBACKS (Jerry Snitselaar) [2149474 2118428]
- x86/apic/msi: Unbreak DMAR and HPET MSI (Jerry Snitselaar) [2149474 2118428]
- iommu/amd: Remove domain search for PCI/MSI (Jerry Snitselaar) [2149474 2118428]
- iommu/vt-d: Remove domain search for PCI/MSI[X] (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Make most MSI ops XEN private (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Cleanup the arch_*_msi_irqs() leftovers (Jerry Snitselaar) [2149474 2118428]
- PCI/MSI: Make arch_.*_msi_irq[s] fallbacks selectable (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Wrap XEN MSI management into irqdomain (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Consolidate XEN-MSI init (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Rework MSI teardown (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Make xen_msi_init() static and rename it to xen_hvm_msi_init() (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Move apic_post_init() invocation to one place (Jerry Snitselaar) [2149474 2118428]
- x86/msi: Use generic MSI domain ops (Jerry Snitselaar) [2149474 2118428]
- x86/msi: Remove pointless vcpu_affinity callback (Jerry Snitselaar) [2149474 2118428]
- iommu/vt-d: Fix compile error with CONFIG_PCI_ATS not set (Myron Stowe) [2149474 2118428]
- iommu/vt-d: Cure VF irqdomain hickup (Myron Stowe) [2149474 2118428]
- x86/pci: Set default irq domain in pcibios_add_device() (Myron Stowe) [2149474 2118428]
- iommm/amd: Store irq domain in struct device (Myron Stowe) [2149474 2118428]
- iommm/vt-d: Store irq domain in struct device (Myron Stowe) [2149474 2118428]
- PCI/MSI: Provide pci_dev_has_special_msi_domain() helper (Myron Stowe) [2149474 2118428]
- x86/msi: Consolidate MSI allocation (Myron Stowe) [2149474 2118428]
- PCI/MSI: Rework pci_msi_domain_calc_hwirq() (Myron Stowe) [2149474 2118428]
- x86/irq: Consolidate UV domain allocation (Myron Stowe) [2149474 2118428]
- x86/irq: Consolidate DMAR irq allocation (Myron Stowe) [2149474 2118428]
- x86_ioapic_Consolidate_IOAPIC_allocation (Myron Stowe) [2149474 2118428]
- x86/msi: Consolidate HPET allocation (Myron Stowe) [2149474 2118428]
- iommu/irq_remapping: Consolidate irq domain lookup (Myron Stowe) [2149474 2118428]
- iommu/amd: Consolidate irq domain getter (Myron Stowe) [2149474 2118428]
- iommu/vt-d: Consolidate irq domain getter (Myron Stowe) [2149474 2118428]
- x86/irq: Add allocation type for parent domain retrieval (Myron Stowe) [2149474 2118428]
- irqdomain: Export irq_domain_update_bus_token (Myron Stowe) [2149474 2118428]
- gitlab-ci: use CI templates from production branch (Michael Hofmann)
- iavf: remove INITIAL_MAC_SET to allow gARP to work properly (Stefan Assmann) [2149745 1938635]
- Revert "scsi: iscsi: ql4xxx: Use per-session workqueue for unbinding" (Chris Leech) [2152734 2122624]
- Revert "scsi: iscsi: Use the session workqueue for recovery" (Chris Leech) [2152734 2122624]
- arm64/bpf: Remove 128MB limit for BPF JIT programs (Yauheni Kaliuta) [2152138 2140163]
- bpf: Define bpf_jit_alloc_exec_limit for arm64 JIT (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: add `type` and `data` fields (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: use `ex` for `exception_table_entry` (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: make fixup_exception() return bool (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: consolidate definitions (Yauheni Kaliuta) [2152138 2140163]
- arm64: kvm: use kvm_exception_table_entry (Yauheni Kaliuta) [2152138 2140163]
- be2net: Fix buffer overflow in be_get_module_eeprom (Josef Oskera) [2160182 2126917]
- sched: Switch to upstream migrate disable code (Crystal Wood) [2132062]
- tick: Fix timer storm since introduction of timersd (Valentin Schneider) [2127204]
- softirq: Use a dedicated thread for timer wakeups. (Valentin Schneider) [2127204]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.14.1.rt7.224.el8_7]" date="1676030400">- [rt] build kernel-rt-4.18.0-425.14.1.rt7.224.el8_7 [2172278]
- ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems (Wei Huang) [2142170 2130653]
- KVM: x86: nSVM: implement nested LBR virtualization (Emanuele Giuseppe Esposito) [2166362 2155149]
- KVM: x86: nSVM: correctly virtualize LBR msrs when L2 is running (Emanuele Giuseppe Esposito) [2166362 2155149]
- kvm: x86: SVM: use vmcb* instead of svm-&gt;vmcb where it makes sense (Emanuele Giuseppe Esposito) [2166362 2155149]
- KVM: x86: nSVM: implement nested VMLOAD/VMSAVE (Emanuele Giuseppe Esposito) [2166362 2155149]
- IB/iser: Fix login with authentication (Kamal Heib) [2161750 2120676]
- act_mirred: use the backlog for nested calls to mirred ingress (Davide Caratti) [2164648 2131339] {CVE-2022-4269}
- net/sched: act_mirred: better wording on protection against excessive stack growth (Davide Caratti) [2164648 2131339] {CVE-2022-4269}
- redhat/configs: Set CONFIG_X86_AMD_PSTATE to 'm' (Prarit Bhargava) [2151275 2145246]
- KVM: x86: smm: preserve interrupt shadow in SMRAM (Maxim Levitsky) [2166368 2097144]
- KVM: x86: SVM: don't save SVM state to SMRAM when VM is not long mode capable (Maxim Levitsky) [2166368 2097144]
- KVM: x86: SVM: use smram structs (Maxim Levitsky) [2166368 2097144]
- KVM: svm: drop explicit return value of kvm_vcpu_map (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: use smram struct for 64 bit smram load/restore (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: use smram struct for 32 bit smram load/restore (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: use smram structs in the common code (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: add structs for KVM's smram layout (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: check for failures on smm entry (Maxim Levitsky) [2166368 2097144]
- KVM: x86: do not go through ctxt-&gt;ops when emulating rsm (Maxim Levitsky) [2166368 2097144]
- KVM: x86: move SMM exit to a new file (Maxim Levitsky) [2166368 2097144]
- KVM: x86: move SMM entry to a new file (Maxim Levitsky) [2166368 2097144]
- KVM: x86: start moving SMM-related functions to new files (Maxim Levitsky) [2166368 2097144]
- bug: introduce ASSERT_STRUCT_OFFSET (Maxim Levitsky) [2166368 2097144]
- KVM: x86: Rename and expose helper to detect if INIT/SIPI are allowed (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: number of GPRs in the SMRAM image depends on the image format (Maxim Levitsky) [2166368 2097144]
- KVM: x86: emulator: update the emulation mode after CR0 write (Maxim Levitsky) [2166368 2097144]
- KVM: x86: emulator: update the emulation mode after rsm (Maxim Levitsky) [2166368 2097144]
- KVM: x86: emulator: introduce emulator_recalc_and_set_mode (Maxim Levitsky) [2166368 2097144]
- KVM: x86: emulator: em_sysexit should update ctxt-&gt;mode (Maxim Levitsky) [2166368 2097144]
- KVM: x86: Bug the VM if the emulator accesses a non-existent GPR (Maxim Levitsky) [2166368 2097144]
- \KVM: x86: Reduce the number of emulator GPRs to '8' for 32-bit KVM (Maxim Levitsky) [2166368 2097144]
- KVM: x86: Use 16-bit fields to track dirty/valid emulator GPRs (Maxim Levitsky) [2166368 2097144]
- KVM: x86: Omit VCPU_REGS_RIP from emulator's _regs array (Maxim Levitsky) [2166368 2097144]
- \KVM: x86: Harden _regs accesses to guard against buggy input (Maxim Levitsky) [2166368 2097144]
- KVM: x86: Grab regs_dirty in local 'unsigned long' (Maxim Levitsky) [2166368 2097144]
- proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152577 2152578] {CVE-2022-4378}
- proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152577 2152578] {CVE-2022-4378}</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.15.1.rt7.225.el8_7]" date="1676548800">- [rt] build kernel-rt-4.18.0-425.15.1.rt7.225.el8_7 [2172278]
- net/mlx5e: Fix use-after-free when reverting termination table (Amir Tzin) [2167640 2112927]
- net/mlx5: Do not query pci info while pci disabled (Amir Tzin) [2167645 2129249]
- x86/fpu: Fix copy_xstate_to_uabi() to copy init states correctly (Dean Nelson) [2168384 2122850]
- x86/fpu: Exclude dynamic states from init_fpstate (Dean Nelson) [2168384 2122850]
- x86/fpu: Fix the init_fpstate size check with the actual size (Dean Nelson) [2168384 2122850]
- x86/fpu: Configure init_fpstate attributes orderly (Dean Nelson) [2168384 2122850]
- x86/fpu/xstate: Fix the ARCH_REQ_XCOMP_PERM implementation (Dean Nelson) [2168384 2122850]
- net/mlx5: E-Switch, properly handle ingress tagged packets on VST (Amir Tzin) [2166665 2096109]
- cpuhotplug: Fix KABI breakage (Prarit Bhargava) [2162763 2156529]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.16.1.rt7.226.el8_7]" date="1677153600">- [rt] build kernel-rt-4.18.0-425.16.1.rt7.226.el8_7 [2172278]
- ipv6: fix panic when fib_lookup_arg-&gt;result is fib6_info (Jiri Benc) [2167602 2140599]
- ceph: blocklist the kclient when receiving corrupted snap trace (Xiubo Li) [2168896 2162414]
- ceph: move mount state enum to super.h (Xiubo Li) [2168896 2162414]
- s390/kexec: fix ipl report address for kdump (Tobias Huschle) [2166296 2161328]
- mm, compaction: fix fast_isolate_around() to stay within boundaries (Daniel Vacek) [2170576 2149309]
- scsi: storvsc: Fix swiotlb bounce buffer leak in confidential VM (Emanuele Giuseppe Esposito) [2170228 2150659]
- netfilter: conntrack: handle tcp challenge acks during connection reuse (Florian Westphal) [2165587 2158726]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.17.1.rt7.227.el8_7]" date="1677844800">- [rt] build kernel-rt-4.18.0-425.17.1.rt7.227.el8_7 [2172278]
- net: mana: Add rmb after checking owner bits (Mohammed Gamal) [2173103 2139462]
- net: mana: Add support of XDP_REDIRECT action (Mohammed Gamal) [2173103 2139462]
- net: mana: Add the Linux MANA PF driver (Mohammed Gamal) [2173103 2139462]
- ice: fix lost multicast packets in promisc mode (Ken Cox) [2172550 2138215]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.18.1.rt7.228.el8_7]" date="1678708800">- [rt] build kernel-rt-4.18.0-425.18.1.rt7.228.el8_7 [2172278]
- futex: Resend potentially swallowed owner death notification (Rafael Aquini) [2170054]
- irq_work: Move lazy work execution to dedicated irq_work kthreads (Valentin Schneider) [2172163]
- irq_work: Sync the patches (Valentin Schneider) [2172163]
- irq_work: Also rcuwait for !IRQ_WORK_HARD_IRQ on PREEMPT_RT (Valentin Schneider) [2172163]
- irq_work: Allow irq_work_sync() to sleep if irq_work() no IRQ support. (Valentin Schneider) [2172163]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.19.1.rt7.229.el8_7]" date="1678968000">- [rt] build kernel-rt-4.18.0-425.19.1.rt7.229.el8_7 [2172278]
- s390/dasd: fix no record found for raw_track_access (Tobias Huschle) [2167776 2161270]
- locking/rwsem: Disable preemption in all down_read*() and up_read() code paths (Waiman Long) [2170939 2162139]
- locking/rwsem: Prevent non-first waiter from spinning in down_write() slowpath (Waiman Long) [2170939 2162139]
- locking/rwsem: Allow slowpath writer to ignore handoff bit if not set by first waiter (Waiman Long) [2170939 2162139]
- locking/rwsem: Always try to wake waiters in out_nolock path (Waiman Long) [2170939 2162139]
- locking/rwsem: No need to check for handoff bit if wait queue empty (Waiman Long) [2170939 2162139]
- locking/rwsem: Make handoff bit handling more consistent (Waiman Long) [2170939 2162139]
- locking/rwsem: Disable preemption while trying for rwsem lock (Waiman Long) [2170939 2162139]
- locking/rwsem: Conditionally wake waiters in reader/writer slowpaths (Waiman Long) [2170939 2162139]
- locking: Make owner_on_cpu() into &lt;linux/sched.h&gt; (Waiman Long) [2170939 2162139]
- locking/rwsem: Optimize down_read_trylock() under highly contended case (Waiman Long) [2170939 2162139]
- locking/rwsem: Fix comments about reader optimistic lock stealing conditions (Waiman Long) [2170939 2162139]
- locking/rwsem: Disable preemption for spinning region (Waiman Long) [2170939 2162139]
- locking: Remove rcu_read_{,un}lock() for preempt_{dis,en}able() (Waiman Long) [2170939 2162139]
- watchdog: fix UAF in reboot notifier handling in watchdog core code (Wander Lairson Costa) [2139770 2131308]
- netfilter: nf_conntrack_irc: Tighten matching on DCC message (Wander Lairson Costa) [2139770 2131308]
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF (Jaroslav Kysela) [2163405 2163406] {CVE-2023-0266}
- net/mlx5e: Fix enabling sriov while tc nic rules are offloaded (Amir Tzin) [2167647 2112925]
- net/mlx5: E-Switch, pair only capable devices (Amir Tzin) [2167647 2112925]
- net/mlx5: Fix mlx5_get_next_dev() peer device matching (Amir Tzin) [2167647 2112925]
- net/mlx5: Lag, filter non compatible devices (Amir Tzin) [2167647 2112925]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.19.2.rt7.230.el8_7]" date="1679054400">- [rt] build kernel-rt-4.18.0-425.19.2.rt7.230.el8_7.geb93 [2172278]
- ovl: fail on invalid uid/gid mapping at copy up (Miklos Szeredi) [2165341 2165342] {CVE-2023-0386}</changelog>
</package>
<package pkgid="b8e1faf9a2eb99f5f73015b8c513396083aac1871ab7760a1cde5b8c8d18a616" name="kernel-rt-debug-modules-extra" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="425.10.1.rt7.220.el8_7"/>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.1.1.rt7.211.el8]" date="1663588800">- [rt] build kernel-rt-4.18.0-425.1.1.rt7.211.el8 [2067251]
- i40e: Fix kernel crash during module removal (Ivan Vecera) [2091489]
- redhat: enable zstream release numbering for rhel 8.7 (Jarod Wilson)
- ice: Allow operation with reduced device MSI-X (Petr Oros) [2102844]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.2.1.rt7.212.el8]" date="1664280000">- [rt] build kernel-rt-4.18.0-425.2.1.rt7.212.el8 [2067251]
- EDAC/ghes: Set the DIMM label unconditionally (Aristeu Rozanski) [2109712]
- configs: enable CONFIG_HP_ILO for aarch64 (Mark Salter) [2123508]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.3.1.rt7.213.el8]" date="1664539200">- [rt] build kernel-rt-4.18.0-425.3.1.rt7.213.el8 [2067251]
- iwlwifi: limit fw version for AC9560 to avoid fw crash (Íñigo Huguet) [2129297]
- sfc: fix null pointer dereference in efx_hard_start_xmit (Íñigo Huguet) [2119638]
- sfc: fix TX channel offset when using legacy interrupts (Íñigo Huguet) [2119638]
- netfilter: conntrack: reduce timeout when receiving out-of-window fin or rst (Florian Westphal) [2047366]
- netfilter: conntrack: remove unneeded indent level (Florian Westphal) [2047366]
- netfilter: conntrack: ignore overly delayed tcp packets (Florian Westphal) [2047366]
- netfilter: conntrack: prepare tcp_in_window for ternary return value (Florian Westphal) [2047366]
- netfilter: conntrack: remove pr_debug callsites from tcp tracker (Florian Westphal) [2047366]
- netfilter: conntrack: work around exceeded receive window (Florian Westphal) [2047366]
- netfilter: conntrack: improve RST handling when tuple is re-used (Florian Westphal) [2047366]
- netfilter: conntrack: avoid misleading 'invalid' in log message (Florian Westphal) [2047366]
- netfilter: remove BUG_ON() after skb_header_pointer() (Florian Westphal) [2047366]
- iavf: Detach device during reset task (Petr Oros) [2069206]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.4.1.rt7.214.el8]" date="1665144000">- [rt] build kernel-rt-4.18.0-425.4.1.rt7.214.el8 [2067251]
- random: allow reseeding DRBG with getrandom (Daiki Ueno) [2121766]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.5.1.rt7.215.el8_7]" date="1667822400">- [rt] build kernel-rt-4.18.0-425.5.1.rt7.215.el8_7 [2137411]
- ice: Fix interface being down after reset with link-down-on-close flag on (Petr Oros) [2136216 2024110]
- ice: Fix crash by keep old cfg when update TCs more than queues (Petr Oros) [2130992 2129902]
- ice: Fix tunnel checksum offload with fragmented traffic (Petr Oros) [2130992 2129902]
- ice: handle E822 generic device ID in PLDM header (Petr Oros) [2130992 2129902]
- ice: ethtool: Prohibit improper channel config for DCB (Petr Oros) [2130992 2129902]
- ice: ethtool: advertise 1000M speeds properly (Petr Oros) [2130992 2129902]
- ice: Fix switchdev rules book keeping (Petr Oros) [2130992 2129902]
- ice: fix access-beyond-end in the switch code (Petr Oros) [2130992 2129902]
- eth: ice: silence the GCC 12 array-bounds warning (Petr Oros) [2130992 2129902]
- ice: Expose RSS indirection tables for queue groups via ethtool (Petr Oros) [2130992 2129902]
- Revert "ice: Hide bus-info in ethtool for PRs in switchdev mode" (Petr Oros) [2130992 2129902]
- ice: remove period on argument description in ice_for_each_vf (Petr Oros) [2130992 2129902]
- ice: add a function comment for ice_cfg_mac_antispoof (Petr Oros) [2130992 2129902]
- ice: fix wording in comment for ice_reset_vf (Petr Oros) [2130992 2129902]
- ice: remove return value comment for ice_reset_all_vfs (Petr Oros) [2130992 2129902]
- ice: always check VF VSI pointer values (Petr Oros) [2130992 2129902]
- ice: add newline to dev_dbg in ice_vf_fdir_dump_info (Petr Oros) [2130992 2129902]
- ice: get switch id on switchdev devices (Petr Oros) [2130992 2129902]
- ice: return ENOSPC when exceeding ICE_MAX_CHAIN_WORDS (Petr Oros) [2130992 2129902]
- ice: introduce common helper for retrieving VSI by vsi_num (Petr Oros) [2130992 2129902]
- ice: use min_t() to make code cleaner in ice_gnss (Petr Oros) [2130992 2129902]
- ice: Add mpls+tso support (Petr Oros) [2130992 2129902]
- ice: switch: convert packet template match code to rodata (Petr Oros) [2130992 2129902]
- ice: switch: use convenience macros to declare dummy pkt templates (Petr Oros) [2130992 2129902]
- ice: switch: use a struct to pass packet template params (Petr Oros) [2130992 2129902]
- ice: switch: unobscurify bitops loop in ice_fill_adv_dummy_packet() (Petr Oros) [2130992 2129902]
- ice: switch: add and use u16[] aliases to ice_adv_lkup_elem::{h, m}_u (Petr Oros) [2130992 2129902]
- ice: Support GTP-U and GTP-C offload in switchdev (Petr Oros) [2130992 2129902]
- ice: Remove useless DMA-32 fallback configuration (Petr Oros) [2130992 2129902]
- ice: switch to napi_build_skb() (Petr Oros) [2130992 2129902]
- redhat: switch to z-stream dist tag and build targets (Jarod Wilson)
- block: avoid sign extend problem with default queue flags mask (Nico Pache) [2135813]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.6.1.rt7.216.el8_7]" date="1668168000">- [rt] build kernel-rt-4.18.0-425.6.1.rt7.216.el8_7 [2137411]
- ice: Add low latency Tx timestamp read (Petr Oros) [2136036 2092425]
- ice: introduce ice_ptp_reset_cached_phctime function (Petr Oros) [2136036 2092425]
- ice: re-arrange some static functions in ice_ptp.c (Petr Oros) [2136036 2092425]
- ice: track and warn when PHC update is late (Petr Oros) [2136036 2092425]
- ice: track Tx timestamp stats similar to other Intel drivers (Petr Oros) [2136036 2092425]
- ice: implement adjfine with mul_u64_u64_div_u64 (Petr Oros) [2136036 2092425]
- ice: Add EXTTS feature to the feature bitmap (Petr Oros) [2136036 2092425]
- math: Export mul_u64_u64_div_u64 (Petr Oros) [2136036 2092425]
- vfio/type1: Unpin zero pages (Alex Williamson) [2128515 2123015]
- net: atlantic: remove aq_nic_deinit() when resume (Íñigo Huguet) [2131935 2130839]
- net: atlantic: remove deep parameter on suspend/resume functions (Íñigo Huguet) [2131935 2130839]
- CI: Use zstream builder container (Veronika Kabatova)
- CI: Add disttag override for 8.7 (Veronika Kabatova)</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.7.1.rt7.217.el8_7]" date="1669723200">- [rt] build kernel-rt-4.18.0-425.7.1.rt7.217.el8_7 [2137411]
- ice: Add additional CSR registers to ETHTOOL_GREGS (Petr Oros) [2136513 2131024]
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps (Petr Oros) [2137270 2106964]
- i40e: Fix VF set max MTU size (Petr Oros) [2137270 2106964]
- iavf: Fix set max MTU size with port VLAN and jumbo frames (Petr Oros) [2137270 2106964]
- iavf: Fix bad page state (Petr Oros) [2137270 2106964]
- Revert "scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels" (Jarod Wilson)
- scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels (Tomas Henzl) [2139216]
- Revert "ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems" (Jarod Wilson)
- ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems (Wei Huang) [2142170 2130653]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.8.1.rt7.218.el8_7]" date="1669982400">- [rt] build kernel-rt-4.18.0-425.8.1.rt7.218.el8_7 [2137411]
- scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels (Tomas Henzl) [2139216 2134535]
- RDMA/mlx5: Set local port to one when accessing counters (Mohammad Kabat) [2141957 2077119]
- drm/mgag200: Fix PLL setup for G200_SE_A rev &gt;=4 (Jocelyn Falempe) [2140152 2130159]
- iavf: Do not restart Tx queues after reset task failure (Petr Oros) [2149081 2134005]
- iavf: Fix a crash during reset task (Petr Oros) [2149081 2134005]
- scsi: core: Allow the ALUA transitioning state enough time (Tomas Henzl) [2147374 2084250]
- scsi: core: Return BLK_STS_TRANSPORT for ALUA transitioning (Tomas Henzl) [2147374 2084250]
- i40e: Fix DMA mappings leak (Ivan Vecera) [2138205 2077847]
- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2142724 2142725] {CVE-2022-2964}
- net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2142724 2142725] {CVE-2022-2964}</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.9.1.rt7.219.el8_7]" date="1670587200">- [rt] build kernel-rt-4.18.0-425.9.1.rt7.219.el8_7 [2137411]
- Documentation/admin-guide: Document nomodeset kernel parameter (Jocelyn Falempe) [2145218 2143952]
- drm: Move nomodeset kernel parameter to the DRM subsystem (Jocelyn Falempe) [2145218 2143952]
- wait: Fix __wait_event_hrtimeout for RT/DL tasks (Derek Barbosa) [2138953 2125233]
- scsi: zfcp: Fix missing auto port scan and thus missing target ports (Tobias Huschle) [2127849 2121089]
- net: Fix return value of qdisc ingress handling on success (Ivan Vecera) [2141878 2131361]</changelog>
  <changelog author="Chris White &lt;chwhite@redhat.com&gt; [4.18.0-425.10.1.rt7.220.el8_7]" date="1671192000">- [rt] build kernel-rt-4.18.0-425.10.1.rt7.220.el8_7 [2137411]
- scsi: target: loop: Fix handling of aborted TMRs (Maurizio Lombardi) [2144583 2141713]
- ice: virtchnl rss hena support (Petr Oros) [2148130]
- ice: Fix configuring VIRTCHNL_OP_CONFIG_VSI_QUEUES with unbalanced queues (Michal Schmidt) [2142017 2137378]
- ice: Add support Flex RXD (Michal Schmidt) [2138157 2131310]
- netfilter: flowtable: fix stuck flows on cleanup due to pending work (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: add function to invoke garbage collection immediately (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: pass flowtable to nf_flow_table_iterate() (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: separate replace, destroy and stats to different workqueues (Phil Sutter) [2134084 2131370]
- x86/paravirt: Add a dummy __x86_paravirt_patch_template() function (Waiman Long) [2152206 2144161]
- x86/paravirt: Fix kABI breakage in struct pv_mmu_ops (Waiman Long) [2152206 2144161]
- drm/i915: fix TLB invalidation for Gen12 video and compute engines (Wander Lairson Costa) [2148162 2148163] {CVE-2022-4139}
- PCI: hv: Do not set PCI_COMMAND_MEMORY to reduce VM boot time (Emanuele Giuseppe Esposito) [2150912 2082836]
- iavf: Fix cached head and tail value for iavf_get_tx_pending (Stefan Assmann) [2149742 2103944]
- iavf: Fix change VF's mac address (Stefan Assmann) [2149742 2103944]
- iavf: Fix race between iavf_close and iavf_reset_task (Stefan Assmann) [2149742 2103944]
- net: ethernet: move from strlcpy with unused retval to strscpy (Stefan Assmann) [2149742 2103944]
- iavf: Fix 'tc qdisc show' listing too many queues (Stefan Assmann) [2149742 2103944]
- iavf: Fix max_rate limiting (Stefan Assmann) [2149742 2103944]
- iavf: Check for duplicate TC flower filter before parsing (Stefan Assmann) [2149742 2103944]
- iavf: Fix handling of dummy receive descriptors (Stefan Assmann) [2149742 2103944]
- iavf: Disallow changing rx/tx-frames and rx/tx-frames-irq (Stefan Assmann) [2149742 2103944]
- intel/iavf:fix repeated words in comments (Stefan Assmann) [2149742 2103944]
- intel: remove unused macros (Stefan Assmann) [2149742 2103944]
- iavf: Add waiting for response from PF in set mac (Stefan Assmann) [2149742 2103944]</changelog>
</package>
<package pkgid="e606154308edc189d51818d42e4de75747d29b30ba6fc76e3488b7d39fcdc091" name="kernel-rt-debug-modules-extra" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="425.13.1.rt7.223.el8_7"/>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.4.1.rt7.214.el8]" date="1665144000">- [rt] build kernel-rt-4.18.0-425.4.1.rt7.214.el8 [2067251]
- random: allow reseeding DRBG with getrandom (Daiki Ueno) [2121766]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.5.1.rt7.215.el8_7]" date="1667822400">- [rt] build kernel-rt-4.18.0-425.5.1.rt7.215.el8_7 [2137411]
- ice: Fix interface being down after reset with link-down-on-close flag on (Petr Oros) [2136216 2024110]
- ice: Fix crash by keep old cfg when update TCs more than queues (Petr Oros) [2130992 2129902]
- ice: Fix tunnel checksum offload with fragmented traffic (Petr Oros) [2130992 2129902]
- ice: handle E822 generic device ID in PLDM header (Petr Oros) [2130992 2129902]
- ice: ethtool: Prohibit improper channel config for DCB (Petr Oros) [2130992 2129902]
- ice: ethtool: advertise 1000M speeds properly (Petr Oros) [2130992 2129902]
- ice: Fix switchdev rules book keeping (Petr Oros) [2130992 2129902]
- ice: fix access-beyond-end in the switch code (Petr Oros) [2130992 2129902]
- eth: ice: silence the GCC 12 array-bounds warning (Petr Oros) [2130992 2129902]
- ice: Expose RSS indirection tables for queue groups via ethtool (Petr Oros) [2130992 2129902]
- Revert "ice: Hide bus-info in ethtool for PRs in switchdev mode" (Petr Oros) [2130992 2129902]
- ice: remove period on argument description in ice_for_each_vf (Petr Oros) [2130992 2129902]
- ice: add a function comment for ice_cfg_mac_antispoof (Petr Oros) [2130992 2129902]
- ice: fix wording in comment for ice_reset_vf (Petr Oros) [2130992 2129902]
- ice: remove return value comment for ice_reset_all_vfs (Petr Oros) [2130992 2129902]
- ice: always check VF VSI pointer values (Petr Oros) [2130992 2129902]
- ice: add newline to dev_dbg in ice_vf_fdir_dump_info (Petr Oros) [2130992 2129902]
- ice: get switch id on switchdev devices (Petr Oros) [2130992 2129902]
- ice: return ENOSPC when exceeding ICE_MAX_CHAIN_WORDS (Petr Oros) [2130992 2129902]
- ice: introduce common helper for retrieving VSI by vsi_num (Petr Oros) [2130992 2129902]
- ice: use min_t() to make code cleaner in ice_gnss (Petr Oros) [2130992 2129902]
- ice: Add mpls+tso support (Petr Oros) [2130992 2129902]
- ice: switch: convert packet template match code to rodata (Petr Oros) [2130992 2129902]
- ice: switch: use convenience macros to declare dummy pkt templates (Petr Oros) [2130992 2129902]
- ice: switch: use a struct to pass packet template params (Petr Oros) [2130992 2129902]
- ice: switch: unobscurify bitops loop in ice_fill_adv_dummy_packet() (Petr Oros) [2130992 2129902]
- ice: switch: add and use u16[] aliases to ice_adv_lkup_elem::{h, m}_u (Petr Oros) [2130992 2129902]
- ice: Support GTP-U and GTP-C offload in switchdev (Petr Oros) [2130992 2129902]
- ice: Remove useless DMA-32 fallback configuration (Petr Oros) [2130992 2129902]
- ice: switch to napi_build_skb() (Petr Oros) [2130992 2129902]
- redhat: switch to z-stream dist tag and build targets (Jarod Wilson)
- block: avoid sign extend problem with default queue flags mask (Nico Pache) [2135813]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.6.1.rt7.216.el8_7]" date="1668168000">- [rt] build kernel-rt-4.18.0-425.6.1.rt7.216.el8_7 [2137411]
- ice: Add low latency Tx timestamp read (Petr Oros) [2136036 2092425]
- ice: introduce ice_ptp_reset_cached_phctime function (Petr Oros) [2136036 2092425]
- ice: re-arrange some static functions in ice_ptp.c (Petr Oros) [2136036 2092425]
- ice: track and warn when PHC update is late (Petr Oros) [2136036 2092425]
- ice: track Tx timestamp stats similar to other Intel drivers (Petr Oros) [2136036 2092425]
- ice: implement adjfine with mul_u64_u64_div_u64 (Petr Oros) [2136036 2092425]
- ice: Add EXTTS feature to the feature bitmap (Petr Oros) [2136036 2092425]
- math: Export mul_u64_u64_div_u64 (Petr Oros) [2136036 2092425]
- vfio/type1: Unpin zero pages (Alex Williamson) [2128515 2123015]
- net: atlantic: remove aq_nic_deinit() when resume (Íñigo Huguet) [2131935 2130839]
- net: atlantic: remove deep parameter on suspend/resume functions (Íñigo Huguet) [2131935 2130839]
- CI: Use zstream builder container (Veronika Kabatova)
- CI: Add disttag override for 8.7 (Veronika Kabatova)</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.7.1.rt7.217.el8_7]" date="1669723200">- [rt] build kernel-rt-4.18.0-425.7.1.rt7.217.el8_7 [2137411]
- ice: Add additional CSR registers to ETHTOOL_GREGS (Petr Oros) [2136513 2131024]
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps (Petr Oros) [2137270 2106964]
- i40e: Fix VF set max MTU size (Petr Oros) [2137270 2106964]
- iavf: Fix set max MTU size with port VLAN and jumbo frames (Petr Oros) [2137270 2106964]
- iavf: Fix bad page state (Petr Oros) [2137270 2106964]
- Revert "scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels" (Jarod Wilson)
- scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels (Tomas Henzl) [2139216]
- Revert "ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems" (Jarod Wilson)
- ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems (Wei Huang) [2142170 2130653]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.8.1.rt7.218.el8_7]" date="1669982400">- [rt] build kernel-rt-4.18.0-425.8.1.rt7.218.el8_7 [2137411]
- scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels (Tomas Henzl) [2139216 2134535]
- RDMA/mlx5: Set local port to one when accessing counters (Mohammad Kabat) [2141957 2077119]
- drm/mgag200: Fix PLL setup for G200_SE_A rev &gt;=4 (Jocelyn Falempe) [2140152 2130159]
- iavf: Do not restart Tx queues after reset task failure (Petr Oros) [2149081 2134005]
- iavf: Fix a crash during reset task (Petr Oros) [2149081 2134005]
- scsi: core: Allow the ALUA transitioning state enough time (Tomas Henzl) [2147374 2084250]
- scsi: core: Return BLK_STS_TRANSPORT for ALUA transitioning (Tomas Henzl) [2147374 2084250]
- i40e: Fix DMA mappings leak (Ivan Vecera) [2138205 2077847]
- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2142724 2142725] {CVE-2022-2964}
- net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2142724 2142725] {CVE-2022-2964}</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.9.1.rt7.219.el8_7]" date="1670587200">- [rt] build kernel-rt-4.18.0-425.9.1.rt7.219.el8_7 [2137411]
- Documentation/admin-guide: Document nomodeset kernel parameter (Jocelyn Falempe) [2145218 2143952]
- drm: Move nomodeset kernel parameter to the DRM subsystem (Jocelyn Falempe) [2145218 2143952]
- wait: Fix __wait_event_hrtimeout for RT/DL tasks (Derek Barbosa) [2138953 2125233]
- scsi: zfcp: Fix missing auto port scan and thus missing target ports (Tobias Huschle) [2127849 2121089]
- net: Fix return value of qdisc ingress handling on success (Ivan Vecera) [2141878 2131361]</changelog>
  <changelog author="Chris White &lt;chwhite@redhat.com&gt; [4.18.0-425.10.1.rt7.220.el8_7]" date="1671192000">- [rt] build kernel-rt-4.18.0-425.10.1.rt7.220.el8_7 [2137411]
- scsi: target: loop: Fix handling of aborted TMRs (Maurizio Lombardi) [2144583 2141713]
- ice: virtchnl rss hena support (Petr Oros) [2148130]
- ice: Fix configuring VIRTCHNL_OP_CONFIG_VSI_QUEUES with unbalanced queues (Michal Schmidt) [2142017 2137378]
- ice: Add support Flex RXD (Michal Schmidt) [2138157 2131310]
- netfilter: flowtable: fix stuck flows on cleanup due to pending work (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: add function to invoke garbage collection immediately (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: pass flowtable to nf_flow_table_iterate() (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: separate replace, destroy and stats to different workqueues (Phil Sutter) [2134084 2131370]
- x86/paravirt: Add a dummy __x86_paravirt_patch_template() function (Waiman Long) [2152206 2144161]
- x86/paravirt: Fix kABI breakage in struct pv_mmu_ops (Waiman Long) [2152206 2144161]
- drm/i915: fix TLB invalidation for Gen12 video and compute engines (Wander Lairson Costa) [2148162 2148163] {CVE-2022-4139}
- PCI: hv: Do not set PCI_COMMAND_MEMORY to reduce VM boot time (Emanuele Giuseppe Esposito) [2150912 2082836]
- iavf: Fix cached head and tail value for iavf_get_tx_pending (Stefan Assmann) [2149742 2103944]
- iavf: Fix change VF's mac address (Stefan Assmann) [2149742 2103944]
- iavf: Fix race between iavf_close and iavf_reset_task (Stefan Assmann) [2149742 2103944]
- net: ethernet: move from strlcpy with unused retval to strscpy (Stefan Assmann) [2149742 2103944]
- iavf: Fix 'tc qdisc show' listing too many queues (Stefan Assmann) [2149742 2103944]
- iavf: Fix max_rate limiting (Stefan Assmann) [2149742 2103944]
- iavf: Check for duplicate TC flower filter before parsing (Stefan Assmann) [2149742 2103944]
- iavf: Fix handling of dummy receive descriptors (Stefan Assmann) [2149742 2103944]
- iavf: Disallow changing rx/tx-frames and rx/tx-frames-irq (Stefan Assmann) [2149742 2103944]
- intel/iavf:fix repeated words in comments (Stefan Assmann) [2149742 2103944]
- intel: remove unused macros (Stefan Assmann) [2149742 2103944]
- iavf: Add waiting for response from PF in set mac (Stefan Assmann) [2149742 2103944]</changelog>
  <changelog author="Chris White &lt;chwhite@redhat.com&gt; [4.18.0-425.11.1.rt7.221.el8_7]" date="1673352000">- [rt] build kernel-rt-4.18.0-425.11.1.rt7.221.el8_7 [2159806]
- NFSD: Protect against send buffer overflow in NFSv3 READ (Scott Mayhew) [2143174] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv2 READ (Scott Mayhew) [2143174] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv3 READDIR (Scott Mayhew) [2143174] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv2 READDIR (Scott Mayhew) [2143174] {CVE-2022-43945}
- SUNRPC: Fix svcxdr_init_encode's buflen calculation (Scott Mayhew) [2143174] {CVE-2022-43945}
- SUNRPC: Fix svcxdr_init_decode's end-of-buffer calculation (Scott Mayhew) [2143174] {CVE-2022-43945}
- panic, kexec: make __crash_kexec() NMI safe (Valentin Schneider) [2139580]
- kexec: turn all kexec_mutex acquisitions into trylocks (Valentin Schneider) [2139580]
- kexec: move locking into do_kexec_load (Valentin Schneider) [2139580]
- vdpa/mlx5: re-create forwarding rules after mac modified (Laurent Vivier) [2152912]
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry (Waiman Long) [2153653]
- irq: Call tick_irq_enter() inside HARDIRQ_OFFSET (Waiman Long) [2153653]
- irqtime: Move irqtime entry accounting after irq offset incrementation (Waiman Long) [2153653]
- sched/vtime: Consolidate IRQ time accounting (Waiman Long) [2153653]
- s390/vtime: Use the generic IRQ entry accounting (Waiman Long) [2153653]
- sched/cputime: Remove symbol exports from IRQ time accounting (Waiman Long) [2153653]
- genirq/irqdomain: Don't try to free an interrupt that has no mapping (Waiman Long) [2153653]
- genirq: Provide __irq_enter/exit_raw() (Waiman Long) [2153653]
- powerpc/time: Only set CONFIG_ARCH_HAS_SCALED_CPUTIME on PPC64 (Waiman Long) [2153653]
- powerpc/time: isolate scaled cputime accounting in dedicated functions. (Waiman Long) [2153653]
- PCI: hv: Fix synchronization between channel callback and hv_pci_bus_exit() (Mohammed Gamal) [2155280]
- PCI: hv: Fix synchronization between channel callback and hv_compose_msi_msg() (Mohammed Gamal) [2155280]
- PCI: hv: Use vmbus_requestor to generate transaction IDs for VMbus hardening (Mohammed Gamal) [2155280]
- net/mlx5e: TC, Reject forwarding from internal port to internal port (Mohammad Kabat) [2141959 2131345]
- hv_netvsc: Fix race between VF offering and VF association message from host (Mohammed Gamal) [2155272]
- x86/mce: Reduce number of machine checks taken during recovery (Prarit Bhargava) [2137592 2104388]
- cgroup/cpuset: Reduce cpuset_rwsem writer latency (Waiman Long) [2153108]
- rcu/exp: Mark current CPU as exp-QS in IPI loop second pass (Waiman Long) [2153108]
- rcu: Always inline rcu_dynticks_task*_{enter,exit}() (Waiman Long) [2153108]
- rcu: Fix existing exp request check in sync_sched_exp_online_cleanup() (Waiman Long) [2153108]
- rcu: Fix macro name CONFIG_TASKS_RCU_TRACE (Waiman Long) [2153108]
- rcu: Fix stall-warning deadlock due to non-release of rcu_node -&gt;lock (Waiman Long) [2153108]
- rcu: Fix to include first blocked task in stall warning (Waiman Long) [2153108]
- cgroup: Use cgroup_attach_{lock,unlock}() from cgroup_attach_task_all() (Waiman Long) [2153108]
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all() (Waiman Long) [2153108]
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock (Waiman Long) [2153108]
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree (Waiman Long) [2153108]
- cgroup/cpuset: Fix a race between cpuset_attach() and cpu hotplug (Waiman Long) [2153108]
- cgroup: reduce dependency on cgroup_mutex (Waiman Long) [2153108]
- sunrpc: Set sk_allocation to GFP_NOFS to avoid using current-&gt;task_frag. (Guillaume Nault) [2153230]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.12.1.rt7.222.el8_7]" date="1674129600">- [rt] build kernel-rt-4.18.0-425.12.1.rt7.222.el8_7 [2159806]
- x86/fpu: Prevent FPU state corruption (Oleksandr Natalenko) [2134586 2130890]
- x86/fpu: Drop fpregs lock before inheriting FPU permissions (Eder Zulian) [2154460 2153549]
- kernel-doc: fix undefined args variable (Jan Stancek) [2157905 2134954]
- mm: memcontrol: fix potential oom_lock recursion deadlock (Waiman Long) [2157922 2138886]
- memcg: prohibit unconditional exceeding the limit of dying tasks (Waiman Long) [2157922 2138886]
- mm, oom: do not trigger out_of_memory from the #PF (Waiman Long) [2157922 2138886]
- mm, oom: pagefault_out_of_memory: don't force global OOM for dying tasks (Waiman Long) [2157922 2138886]
- mm: memcontrol: don't count limit-setting reclaim as memory pressure (Waiman Long) [2157922 2138886]
- KVM: s390: vsie: Fix the initialization of the epoch extension (epdx) field (Thomas Huth) [2158813 2151854]
- net: mana: Fix race on per-CQ variable napi work_done (Emanuele Giuseppe Esposito) [2155437 2151722]
- mei: me: add adler lake point S DID (Prarit Bhargava) [2141783 2141602]
- PCI: hv: Only reuse existing IRTE allocation for Multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix the definition of vector in hv_compose_msi_msg() (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix interrupt mapping for multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Reuse existing IRTE allocation in compose_msi_msg() (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix hv_arch_irq_unmask() for multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix multi-MSI to allow more than one MSI vector (Emanuele Giuseppe Esposito) [2155289 2100275]
- drm/ast: Support multiple outputs (Jarod Wilson) [2149287 2147553]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.13.1.rt7.223.el8_7]" date="1675339200">- [rt] build kernel-rt-4.18.0-425.13.1.rt7.223.el8_7 [2159806]
- mm/cgroup/reclaim: fix dirty pages throttling on cgroup v1 (Waiman Long) [2160221]
- mm: vmscan: remove deadlock due to throttling failing to make progress (Waiman Long) [2160221]
- mm: vmscan: reduce throttling due to a failure to make progress -fix (Waiman Long) [2160221]
- mm: vmscan: Reduce throttling due to a failure to make progress (Waiman Long) [2160221]
- mm/vmscan: delay waking of tasks throttled on NOPROGRESS (Waiman Long) [2160221]
- mm/vmscan: increase the timeout if page reclaim is not making progress (Waiman Long) [2160221]
- mm/vmscan: centralise timeout values for reclaim_throttle (Waiman Long) [2160221]
- mm/page_alloc: remove the throttling logic from the page allocator (Waiman Long) [2160221]
- mm/writeback: throttle based on page writeback instead of congestion (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim when no progress is being made (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim and compaction when too may pages are isolated (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim until some writeback completes if congested (Waiman Long) [2160221]
- mm/vmscan.c: delete or fix duplicated words (Waiman Long) [2160221]
- mm,page_alloc: PF_WQ_WORKER threads must sleep at should_reclaim_retry() (Nico Pache) [2160221]
- ceph: avoid putting the realm twice when decoding snaps fails (Xiubo Li) [2155797 2139881]
- mm/mremap: hold the rmap lock in write mode when moving page table entries. (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap: use pmd/pud_poplulate to update page table entries (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap: don't enable optimized PUD move if page table levels is 2 (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap: convert huge PUD move to separate helper (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap: fix BUILD_BUG_ON() error in get_extent (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap.c: fix extent calculation (Waiman Long) [2140950] {CVE-2022-41222}
- x86: mremap speedup - Enable HAVE_MOVE_PUD (Waiman Long) [2140950] {CVE-2022-41222}
- mm: speedup mremap on 1GB or larger regions (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap: start addresses are properly aligned (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap: calculate extent in one place (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap: it is sure to have enough space when extent meets requirement (Waiman Long) [2140950] {CVE-2022-41222}
- s390/boot: add secure boot trailer (Tobias Huschle) [2151530 2141967]
- i40e: Fix VF hang when reset is triggered on another VF (Ivan Vecera) [2160460 2103801]
- i2c: ismt: Fix an out-of-bounds bug in ismt_access() (Prarit Bhargava) [2154388 2119066] {CVE-2022-2873}
- iavf: schedule watchdog immediately when changing primary MAC (Michal Schmidt) [2163257 2152493]
- iavf: Move netdev_update_features() into watchdog task (Michal Schmidt) [2163257 2152493]
- iavf: fix temporary deadlock and failure to set MAC address (Michal Schmidt) [2163257 2152493]
- iavf: Fix error handling in iavf_init_module() (Michal Schmidt) [2163257 2152493]
- iommu/vt-d: Clean up si_domain in the init_dmars() error path (Jerry Snitselaar) [2149474 2118428]
- x86/pci/xen: Use msi_msg shadow structs (Jerry Snitselaar) [2149474 2118428]
- iommu/intel: Use msi_msg shadow structs (Jerry Snitselaar) [2149474 2118428]
- PCI: MSI: Fix Kconfig dependencies for PCI_MSI_ARCH_FALLBACKS (Jerry Snitselaar) [2149474 2118428]
- x86/apic/msi: Unbreak DMAR and HPET MSI (Jerry Snitselaar) [2149474 2118428]
- iommu/amd: Remove domain search for PCI/MSI (Jerry Snitselaar) [2149474 2118428]
- iommu/vt-d: Remove domain search for PCI/MSI[X] (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Make most MSI ops XEN private (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Cleanup the arch_*_msi_irqs() leftovers (Jerry Snitselaar) [2149474 2118428]
- PCI/MSI: Make arch_.*_msi_irq[s] fallbacks selectable (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Wrap XEN MSI management into irqdomain (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Consolidate XEN-MSI init (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Rework MSI teardown (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Make xen_msi_init() static and rename it to xen_hvm_msi_init() (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Move apic_post_init() invocation to one place (Jerry Snitselaar) [2149474 2118428]
- x86/msi: Use generic MSI domain ops (Jerry Snitselaar) [2149474 2118428]
- x86/msi: Remove pointless vcpu_affinity callback (Jerry Snitselaar) [2149474 2118428]
- iommu/vt-d: Fix compile error with CONFIG_PCI_ATS not set (Myron Stowe) [2149474 2118428]
- iommu/vt-d: Cure VF irqdomain hickup (Myron Stowe) [2149474 2118428]
- x86/pci: Set default irq domain in pcibios_add_device() (Myron Stowe) [2149474 2118428]
- iommm/amd: Store irq domain in struct device (Myron Stowe) [2149474 2118428]
- iommm/vt-d: Store irq domain in struct device (Myron Stowe) [2149474 2118428]
- PCI/MSI: Provide pci_dev_has_special_msi_domain() helper (Myron Stowe) [2149474 2118428]
- x86/msi: Consolidate MSI allocation (Myron Stowe) [2149474 2118428]
- PCI/MSI: Rework pci_msi_domain_calc_hwirq() (Myron Stowe) [2149474 2118428]
- x86/irq: Consolidate UV domain allocation (Myron Stowe) [2149474 2118428]
- x86/irq: Consolidate DMAR irq allocation (Myron Stowe) [2149474 2118428]
- x86_ioapic_Consolidate_IOAPIC_allocation (Myron Stowe) [2149474 2118428]
- x86/msi: Consolidate HPET allocation (Myron Stowe) [2149474 2118428]
- iommu/irq_remapping: Consolidate irq domain lookup (Myron Stowe) [2149474 2118428]
- iommu/amd: Consolidate irq domain getter (Myron Stowe) [2149474 2118428]
- iommu/vt-d: Consolidate irq domain getter (Myron Stowe) [2149474 2118428]
- x86/irq: Add allocation type for parent domain retrieval (Myron Stowe) [2149474 2118428]
- irqdomain: Export irq_domain_update_bus_token (Myron Stowe) [2149474 2118428]
- gitlab-ci: use CI templates from production branch (Michael Hofmann)
- iavf: remove INITIAL_MAC_SET to allow gARP to work properly (Stefan Assmann) [2149745 1938635]
- Revert "scsi: iscsi: ql4xxx: Use per-session workqueue for unbinding" (Chris Leech) [2152734 2122624]
- Revert "scsi: iscsi: Use the session workqueue for recovery" (Chris Leech) [2152734 2122624]
- arm64/bpf: Remove 128MB limit for BPF JIT programs (Yauheni Kaliuta) [2152138 2140163]
- bpf: Define bpf_jit_alloc_exec_limit for arm64 JIT (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: add `type` and `data` fields (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: use `ex` for `exception_table_entry` (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: make fixup_exception() return bool (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: consolidate definitions (Yauheni Kaliuta) [2152138 2140163]
- arm64: kvm: use kvm_exception_table_entry (Yauheni Kaliuta) [2152138 2140163]
- be2net: Fix buffer overflow in be_get_module_eeprom (Josef Oskera) [2160182 2126917]
- sched: Switch to upstream migrate disable code (Crystal Wood) [2132062]
- tick: Fix timer storm since introduction of timersd (Valentin Schneider) [2127204]
- softirq: Use a dedicated thread for timer wakeups. (Valentin Schneider) [2127204]</changelog>
</package>
<package pkgid="ea3d6d5e0dd7faff742f4731ea447f65212548e7a9f46128a8ee103a5eaac42d" name="kernel-rt-debug-modules-extra" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="425.19.2.rt7.230.el8_7"/>
  <changelog author="Chris White &lt;chwhite@redhat.com&gt; [4.18.0-425.11.1.rt7.221.el8_7]" date="1673352000">- [rt] build kernel-rt-4.18.0-425.11.1.rt7.221.el8_7 [2159806]
- NFSD: Protect against send buffer overflow in NFSv3 READ (Scott Mayhew) [2143174] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv2 READ (Scott Mayhew) [2143174] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv3 READDIR (Scott Mayhew) [2143174] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv2 READDIR (Scott Mayhew) [2143174] {CVE-2022-43945}
- SUNRPC: Fix svcxdr_init_encode's buflen calculation (Scott Mayhew) [2143174] {CVE-2022-43945}
- SUNRPC: Fix svcxdr_init_decode's end-of-buffer calculation (Scott Mayhew) [2143174] {CVE-2022-43945}
- panic, kexec: make __crash_kexec() NMI safe (Valentin Schneider) [2139851]
- kexec: turn all kexec_mutex acquisitions into trylocks (Valentin Schneider) [2139580]
- kexec: move locking into do_kexec_load (Valentin Schneider) [2139580]
- vdpa/mlx5: re-create forwarding rules after mac modified (Laurent Vivier) [2152912]
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry (Waiman Long) [2153653]
- irq: Call tick_irq_enter() inside HARDIRQ_OFFSET (Waiman Long) [2153653]
- irqtime: Move irqtime entry accounting after irq offset incrementation (Waiman Long) [2153653]
- sched/vtime: Consolidate IRQ time accounting (Waiman Long) [2153653]
- s390/vtime: Use the generic IRQ entry accounting (Waiman Long) [2153653]
- sched/cputime: Remove symbol exports from IRQ time accounting (Waiman Long) [2153653]
- genirq/irqdomain: Don't try to free an interrupt that has no mapping (Waiman Long) [2153653]
- genirq: Provide __irq_enter/exit_raw() (Waiman Long) [2153653]
- powerpc/time: Only set CONFIG_ARCH_HAS_SCALED_CPUTIME on PPC64 (Waiman Long) [2153653]
- powerpc/time: isolate scaled cputime accounting in dedicated functions. (Waiman Long) [2153653]
- PCI: hv: Fix synchronization between channel callback and hv_pci_bus_exit() (Mohammed Gamal) [2155280]
- PCI: hv: Fix synchronization between channel callback and hv_compose_msi_msg() (Mohammed Gamal) [2155280]
- PCI: hv: Use vmbus_requestor to generate transaction IDs for VMbus hardening (Mohammed Gamal) [2155280]
- net/mlx5e: TC, Reject forwarding from internal port to internal port (Mohammad Kabat) [2141959 2131345]
- hv_netvsc: Fix race between VF offering and VF association message from host (Mohammed Gamal) [2155272]
- x86/mce: Reduce number of machine checks taken during recovery (Prarit Bhargava) [2137592 2104388]
- cgroup/cpuset: Reduce cpuset_rwsem writer latency (Waiman Long) [2153108]
- rcu/exp: Mark current CPU as exp-QS in IPI loop second pass (Waiman Long) [2153108]
- rcu: Always inline rcu_dynticks_task*_{enter,exit}() (Waiman Long) [2153108]
- rcu: Fix existing exp request check in sync_sched_exp_online_cleanup() (Waiman Long) [2153108]
- rcu: Fix macro name CONFIG_TASKS_RCU_TRACE (Waiman Long) [2153108]
- rcu: Fix stall-warning deadlock due to non-release of rcu_node -&gt;lock (Waiman Long) [2153108]
- rcu: Fix to include first blocked task in stall warning (Waiman Long) [2153108]
- cgroup: Use cgroup_attach_{lock,unlock}() from cgroup_attach_task_all() (Waiman Long) [2153108]
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all() (Waiman Long) [2153108]
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock (Waiman Long) [2153108]
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree (Waiman Long) [2153108]
- cgroup/cpuset: Fix a race between cpuset_attach() and cpu hotplug (Waiman Long) [2153108]
- cgroup: reduce dependency on cgroup_mutex (Waiman Long) [2153108]
- sunrpc: Set sk_allocation to GFP_NOFS to avoid using current-&gt;task_frag. (Guillaume Nault) [2153230]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.12.1.rt7.222.el8_7]" date="1674129600">- [rt] build kernel-rt-4.18.0-425.12.1.rt7.222.el8_7 [2159806]
- x86/fpu: Prevent FPU state corruption (Oleksandr Natalenko) [2134586 2130890]
- x86/fpu: Drop fpregs lock before inheriting FPU permissions (Eder Zulian) [2154469 2153549]
- kernel-doc: fix undefined args variable (Jan Stancek) [2157905 2134954]
- mm: memcontrol: fix potential oom_lock recursion deadlock (Waiman Long) [2157922 2138886]
- memcg: prohibit unconditional exceeding the limit of dying tasks (Waiman Long) [2157922 2138886]
- mm, oom: do not trigger out_of_memory from the #PF (Waiman Long) [2157922 2138886]
- mm, oom: pagefault_out_of_memory: don't force global OOM for dying tasks (Waiman Long) [2157922 2138886]
- mm: memcontrol: don't count limit-setting reclaim as memory pressure (Waiman Long) [2157922 2138886]
- KVM: s390: vsie: Fix the initialization of the epoch extension (epdx) field (Thomas Huth) [2158813 2151854]
- net: mana: Fix race on per-CQ variable napi work_done (Emanuele Giuseppe Esposito) [2155437 2151722]
- mei: me: add adler lake point S DID (Prarit Bhargava) [2141783 2141602]
- PCI: hv: Only reuse existing IRTE allocation for Multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix the definition of vector in hv_compose_msi_msg() (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix interrupt mapping for multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Reuse existing IRTE allocation in compose_msi_msg() (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix hv_arch_irq_unmask() for multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix multi-MSI to allow more than one MSI vector (Emanuele Giuseppe Esposito) [2155289 2100275]
- drm/ast: Support multiple outputs (Jarod Wilson) [2149287 2147553]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.13.1.rt7.223.el8_7]" date="1675339200">- [rt] build kernel-rt-4.18.0-425.13.1.rt7.223.el8_7 [2159806]
- mm/cgroup/reclaim: fix dirty pages throttling on cgroup v1 (Waiman Long) [2160221]
- mm: vmscan: remove deadlock due to throttling failing to make progress (Waiman Long) [2160221]
- mm: vmscan: reduce throttling due to a failure to make progress -fix (Waiman Long) [2160221]
- mm: vmscan: Reduce throttling due to a failure to make progress (Waiman Long) [2160221]
- mm/vmscan: delay waking of tasks throttled on NOPROGRESS (Waiman Long) [2160221]
- mm/vmscan: increase the timeout if page reclaim is not making progress (Waiman Long) [2160221]
- mm/vmscan: centralise timeout values for reclaim_throttle (Waiman Long) [2160221]
- mm/page_alloc: remove the throttling logic from the page allocator (Waiman Long) [2160221]
- mm/writeback: throttle based on page writeback instead of congestion (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim when no progress is being made (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim and compaction when too may pages are isolated (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim until some writeback completes if congested (Waiman Long) [2160221]
- mm/vmscan.c: delete or fix duplicated words (Waiman Long) [2160221]
- mm,page_alloc: PF_WQ_WORKER threads must sleep at should_reclaim_retry() (Nico Pache) [2160221]
- ceph: avoid putting the realm twice when decoding snaps fails (Xiubo Li) [2155797 2139881]
- mm/mremap: hold the rmap lock in write mode when moving page table entries. (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap: use pmd/pud_poplulate to update page table entries (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap: don't enable optimized PUD move if page table levels is 2 (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap: convert huge PUD move to separate helper (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap: fix BUILD_BUG_ON() error in get_extent (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap.c: fix extent calculation (Waiman Long) [2140950] {CVE-2022-41222}
- x86: mremap speedup - Enable HAVE_MOVE_PUD (Waiman Long) [2140950] {CVE-2022-41222}
- mm: speedup mremap on 1GB or larger regions (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap: start addresses are properly aligned (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap: calculate extent in one place (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap: it is sure to have enough space when extent meets requirement (Waiman Long) [2140950] {CVE-2022-41222}
- s390/boot: add secure boot trailer (Tobias Huschle) [2151530 2141967]
- i40e: Fix VF hang when reset is triggered on another VF (Ivan Vecera) [2160460 2103801]
- i2c: ismt: Fix an out-of-bounds bug in ismt_access() (Prarit Bhargava) [2154388 2119066] {CVE-2022-2873}
- iavf: schedule watchdog immediately when changing primary MAC (Michal Schmidt) [2163257 2152493]
- iavf: Move netdev_update_features() into watchdog task (Michal Schmidt) [2163257 2152493]
- iavf: fix temporary deadlock and failure to set MAC address (Michal Schmidt) [2163257 2152493]
- iavf: Fix error handling in iavf_init_module() (Michal Schmidt) [2163257 2152493]
- iommu/vt-d: Clean up si_domain in the init_dmars() error path (Jerry Snitselaar) [2149474 2118428]
- x86/pci/xen: Use msi_msg shadow structs (Jerry Snitselaar) [2149474 2118428]
- iommu/intel: Use msi_msg shadow structs (Jerry Snitselaar) [2149474 2118428]
- PCI: MSI: Fix Kconfig dependencies for PCI_MSI_ARCH_FALLBACKS (Jerry Snitselaar) [2149474 2118428]
- x86/apic/msi: Unbreak DMAR and HPET MSI (Jerry Snitselaar) [2149474 2118428]
- iommu/amd: Remove domain search for PCI/MSI (Jerry Snitselaar) [2149474 2118428]
- iommu/vt-d: Remove domain search for PCI/MSI[X] (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Make most MSI ops XEN private (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Cleanup the arch_*_msi_irqs() leftovers (Jerry Snitselaar) [2149474 2118428]
- PCI/MSI: Make arch_.*_msi_irq[s] fallbacks selectable (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Wrap XEN MSI management into irqdomain (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Consolidate XEN-MSI init (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Rework MSI teardown (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Make xen_msi_init() static and rename it to xen_hvm_msi_init() (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Move apic_post_init() invocation to one place (Jerry Snitselaar) [2149474 2118428]
- x86/msi: Use generic MSI domain ops (Jerry Snitselaar) [2149474 2118428]
- x86/msi: Remove pointless vcpu_affinity callback (Jerry Snitselaar) [2149474 2118428]
- iommu/vt-d: Fix compile error with CONFIG_PCI_ATS not set (Myron Stowe) [2149474 2118428]
- iommu/vt-d: Cure VF irqdomain hickup (Myron Stowe) [2149474 2118428]
- x86/pci: Set default irq domain in pcibios_add_device() (Myron Stowe) [2149474 2118428]
- iommm/amd: Store irq domain in struct device (Myron Stowe) [2149474 2118428]
- iommm/vt-d: Store irq domain in struct device (Myron Stowe) [2149474 2118428]
- PCI/MSI: Provide pci_dev_has_special_msi_domain() helper (Myron Stowe) [2149474 2118428]
- x86/msi: Consolidate MSI allocation (Myron Stowe) [2149474 2118428]
- PCI/MSI: Rework pci_msi_domain_calc_hwirq() (Myron Stowe) [2149474 2118428]
- x86/irq: Consolidate UV domain allocation (Myron Stowe) [2149474 2118428]
- x86/irq: Consolidate DMAR irq allocation (Myron Stowe) [2149474 2118428]
- x86_ioapic_Consolidate_IOAPIC_allocation (Myron Stowe) [2149474 2118428]
- x86/msi: Consolidate HPET allocation (Myron Stowe) [2149474 2118428]
- iommu/irq_remapping: Consolidate irq domain lookup (Myron Stowe) [2149474 2118428]
- iommu/amd: Consolidate irq domain getter (Myron Stowe) [2149474 2118428]
- iommu/vt-d: Consolidate irq domain getter (Myron Stowe) [2149474 2118428]
- x86/irq: Add allocation type for parent domain retrieval (Myron Stowe) [2149474 2118428]
- irqdomain: Export irq_domain_update_bus_token (Myron Stowe) [2149474 2118428]
- gitlab-ci: use CI templates from production branch (Michael Hofmann)
- iavf: remove INITIAL_MAC_SET to allow gARP to work properly (Stefan Assmann) [2149745 1938635]
- Revert "scsi: iscsi: ql4xxx: Use per-session workqueue for unbinding" (Chris Leech) [2152734 2122624]
- Revert "scsi: iscsi: Use the session workqueue for recovery" (Chris Leech) [2152734 2122624]
- arm64/bpf: Remove 128MB limit for BPF JIT programs (Yauheni Kaliuta) [2152138 2140163]
- bpf: Define bpf_jit_alloc_exec_limit for arm64 JIT (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: add `type` and `data` fields (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: use `ex` for `exception_table_entry` (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: make fixup_exception() return bool (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: consolidate definitions (Yauheni Kaliuta) [2152138 2140163]
- arm64: kvm: use kvm_exception_table_entry (Yauheni Kaliuta) [2152138 2140163]
- be2net: Fix buffer overflow in be_get_module_eeprom (Josef Oskera) [2160182 2126917]
- sched: Switch to upstream migrate disable code (Crystal Wood) [2132062]
- tick: Fix timer storm since introduction of timersd (Valentin Schneider) [2127204]
- softirq: Use a dedicated thread for timer wakeups. (Valentin Schneider) [2127204]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.14.1.rt7.224.el8_7]" date="1676030400">- [rt] build kernel-rt-4.18.0-425.14.1.rt7.224.el8_7 [2172278]
- ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems (Wei Huang) [2142170 2130653]
- KVM: x86: nSVM: implement nested LBR virtualization (Emanuele Giuseppe Esposito) [2166362 2155149]
- KVM: x86: nSVM: correctly virtualize LBR msrs when L2 is running (Emanuele Giuseppe Esposito) [2166362 2155149]
- kvm: x86: SVM: use vmcb* instead of svm-&gt;vmcb where it makes sense (Emanuele Giuseppe Esposito) [2166362 2155149]
- KVM: x86: nSVM: implement nested VMLOAD/VMSAVE (Emanuele Giuseppe Esposito) [2166362 2155149]
- IB/iser: Fix login with authentication (Kamal Heib) [2161750 2120676]
- act_mirred: use the backlog for nested calls to mirred ingress (Davide Caratti) [2164648 2131339] {CVE-2022-4269}
- net/sched: act_mirred: better wording on protection against excessive stack growth (Davide Caratti) [2164648 2131339] {CVE-2022-4269}
- redhat/configs: Set CONFIG_X86_AMD_PSTATE to 'm' (Prarit Bhargava) [2151275 2145246]
- KVM: x86: smm: preserve interrupt shadow in SMRAM (Maxim Levitsky) [2166368 2097144]
- KVM: x86: SVM: don't save SVM state to SMRAM when VM is not long mode capable (Maxim Levitsky) [2166368 2097144]
- KVM: x86: SVM: use smram structs (Maxim Levitsky) [2166368 2097144]
- KVM: svm: drop explicit return value of kvm_vcpu_map (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: use smram struct for 64 bit smram load/restore (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: use smram struct for 32 bit smram load/restore (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: use smram structs in the common code (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: add structs for KVM's smram layout (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: check for failures on smm entry (Maxim Levitsky) [2166368 2097144]
- KVM: x86: do not go through ctxt-&gt;ops when emulating rsm (Maxim Levitsky) [2166368 2097144]
- KVM: x86: move SMM exit to a new file (Maxim Levitsky) [2166368 2097144]
- KVM: x86: move SMM entry to a new file (Maxim Levitsky) [2166368 2097144]
- KVM: x86: start moving SMM-related functions to new files (Maxim Levitsky) [2166368 2097144]
- bug: introduce ASSERT_STRUCT_OFFSET (Maxim Levitsky) [2166368 2097144]
- KVM: x86: Rename and expose helper to detect if INIT/SIPI are allowed (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: number of GPRs in the SMRAM image depends on the image format (Maxim Levitsky) [2166368 2097144]
- KVM: x86: emulator: update the emulation mode after CR0 write (Maxim Levitsky) [2166368 2097144]
- KVM: x86: emulator: update the emulation mode after rsm (Maxim Levitsky) [2166368 2097144]
- KVM: x86: emulator: introduce emulator_recalc_and_set_mode (Maxim Levitsky) [2166368 2097144]
- KVM: x86: emulator: em_sysexit should update ctxt-&gt;mode (Maxim Levitsky) [2166368 2097144]
- KVM: x86: Bug the VM if the emulator accesses a non-existent GPR (Maxim Levitsky) [2166368 2097144]
- \KVM: x86: Reduce the number of emulator GPRs to '8' for 32-bit KVM (Maxim Levitsky) [2166368 2097144]
- KVM: x86: Use 16-bit fields to track dirty/valid emulator GPRs (Maxim Levitsky) [2166368 2097144]
- KVM: x86: Omit VCPU_REGS_RIP from emulator's _regs array (Maxim Levitsky) [2166368 2097144]
- \KVM: x86: Harden _regs accesses to guard against buggy input (Maxim Levitsky) [2166368 2097144]
- KVM: x86: Grab regs_dirty in local 'unsigned long' (Maxim Levitsky) [2166368 2097144]
- proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152577 2152578] {CVE-2022-4378}
- proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152577 2152578] {CVE-2022-4378}</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.15.1.rt7.225.el8_7]" date="1676548800">- [rt] build kernel-rt-4.18.0-425.15.1.rt7.225.el8_7 [2172278]
- net/mlx5e: Fix use-after-free when reverting termination table (Amir Tzin) [2167640 2112927]
- net/mlx5: Do not query pci info while pci disabled (Amir Tzin) [2167645 2129249]
- x86/fpu: Fix copy_xstate_to_uabi() to copy init states correctly (Dean Nelson) [2168384 2122850]
- x86/fpu: Exclude dynamic states from init_fpstate (Dean Nelson) [2168384 2122850]
- x86/fpu: Fix the init_fpstate size check with the actual size (Dean Nelson) [2168384 2122850]
- x86/fpu: Configure init_fpstate attributes orderly (Dean Nelson) [2168384 2122850]
- x86/fpu/xstate: Fix the ARCH_REQ_XCOMP_PERM implementation (Dean Nelson) [2168384 2122850]
- net/mlx5: E-Switch, properly handle ingress tagged packets on VST (Amir Tzin) [2166665 2096109]
- cpuhotplug: Fix KABI breakage (Prarit Bhargava) [2162763 2156529]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.16.1.rt7.226.el8_7]" date="1677153600">- [rt] build kernel-rt-4.18.0-425.16.1.rt7.226.el8_7 [2172278]
- ipv6: fix panic when fib_lookup_arg-&gt;result is fib6_info (Jiri Benc) [2167602 2140599]
- ceph: blocklist the kclient when receiving corrupted snap trace (Xiubo Li) [2168896 2162414]
- ceph: move mount state enum to super.h (Xiubo Li) [2168896 2162414]
- s390/kexec: fix ipl report address for kdump (Tobias Huschle) [2166296 2161328]
- mm, compaction: fix fast_isolate_around() to stay within boundaries (Daniel Vacek) [2170576 2149309]
- scsi: storvsc: Fix swiotlb bounce buffer leak in confidential VM (Emanuele Giuseppe Esposito) [2170228 2150659]
- netfilter: conntrack: handle tcp challenge acks during connection reuse (Florian Westphal) [2165587 2158726]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.17.1.rt7.227.el8_7]" date="1677844800">- [rt] build kernel-rt-4.18.0-425.17.1.rt7.227.el8_7 [2172278]
- net: mana: Add rmb after checking owner bits (Mohammed Gamal) [2173103 2139462]
- net: mana: Add support of XDP_REDIRECT action (Mohammed Gamal) [2173103 2139462]
- net: mana: Add the Linux MANA PF driver (Mohammed Gamal) [2173103 2139462]
- ice: fix lost multicast packets in promisc mode (Ken Cox) [2172550 2138215]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.18.1.rt7.228.el8_7]" date="1678708800">- [rt] build kernel-rt-4.18.0-425.18.1.rt7.228.el8_7 [2172278]
- futex: Resend potentially swallowed owner death notification (Rafael Aquini) [2170054]
- irq_work: Move lazy work execution to dedicated irq_work kthreads (Valentin Schneider) [2172163]
- irq_work: Sync the patches (Valentin Schneider) [2172163]
- irq_work: Also rcuwait for !IRQ_WORK_HARD_IRQ on PREEMPT_RT (Valentin Schneider) [2172163]
- irq_work: Allow irq_work_sync() to sleep if irq_work() no IRQ support. (Valentin Schneider) [2172163]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.19.1.rt7.229.el8_7]" date="1678968000">- [rt] build kernel-rt-4.18.0-425.19.1.rt7.229.el8_7 [2172278]
- s390/dasd: fix no record found for raw_track_access (Tobias Huschle) [2167776 2161270]
- locking/rwsem: Disable preemption in all down_read*() and up_read() code paths (Waiman Long) [2170939 2162139]
- locking/rwsem: Prevent non-first waiter from spinning in down_write() slowpath (Waiman Long) [2170939 2162139]
- locking/rwsem: Allow slowpath writer to ignore handoff bit if not set by first waiter (Waiman Long) [2170939 2162139]
- locking/rwsem: Always try to wake waiters in out_nolock path (Waiman Long) [2170939 2162139]
- locking/rwsem: No need to check for handoff bit if wait queue empty (Waiman Long) [2170939 2162139]
- locking/rwsem: Make handoff bit handling more consistent (Waiman Long) [2170939 2162139]
- locking/rwsem: Disable preemption while trying for rwsem lock (Waiman Long) [2170939 2162139]
- locking/rwsem: Conditionally wake waiters in reader/writer slowpaths (Waiman Long) [2170939 2162139]
- locking: Make owner_on_cpu() into &lt;linux/sched.h&gt; (Waiman Long) [2170939 2162139]
- locking/rwsem: Optimize down_read_trylock() under highly contended case (Waiman Long) [2170939 2162139]
- locking/rwsem: Fix comments about reader optimistic lock stealing conditions (Waiman Long) [2170939 2162139]
- locking/rwsem: Disable preemption for spinning region (Waiman Long) [2170939 2162139]
- locking: Remove rcu_read_{,un}lock() for preempt_{dis,en}able() (Waiman Long) [2170939 2162139]
- watchdog: fix UAF in reboot notifier handling in watchdog core code (Wander Lairson Costa) [2139770 2131308]
- netfilter: nf_conntrack_irc: Tighten matching on DCC message (Wander Lairson Costa) [2139770 2131308]
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF (Jaroslav Kysela) [2163405 2163406] {CVE-2023-0266}
- net/mlx5e: Fix enabling sriov while tc nic rules are offloaded (Amir Tzin) [2167647 2112925]
- net/mlx5: E-Switch, pair only capable devices (Amir Tzin) [2167647 2112925]
- net/mlx5: Fix mlx5_get_next_dev() peer device matching (Amir Tzin) [2167647 2112925]
- net/mlx5: Lag, filter non compatible devices (Amir Tzin) [2167647 2112925]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.19.2.rt7.230.el8_7]" date="1679054400">- [rt] build kernel-rt-4.18.0-425.19.2.rt7.230.el8_7.geb93 [2172278]
- ovl: fail on invalid uid/gid mapping at copy up (Miklos Szeredi) [2165341 2165342] {CVE-2023-0386}</changelog>
</package>
<package pkgid="58f5f9b585657fdfe76082c491d7658c53e8fddf5f78ba3c221973b93223b317" name="kernel-rt-debug-modules-internal" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="425.10.1.rt7.220.el8_7"/>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.1.1.rt7.211.el8]" date="1663588800">- [rt] build kernel-rt-4.18.0-425.1.1.rt7.211.el8 [2067251]
- i40e: Fix kernel crash during module removal (Ivan Vecera) [2091489]
- redhat: enable zstream release numbering for rhel 8.7 (Jarod Wilson)
- ice: Allow operation with reduced device MSI-X (Petr Oros) [2102844]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.2.1.rt7.212.el8]" date="1664280000">- [rt] build kernel-rt-4.18.0-425.2.1.rt7.212.el8 [2067251]
- EDAC/ghes: Set the DIMM label unconditionally (Aristeu Rozanski) [2109712]
- configs: enable CONFIG_HP_ILO for aarch64 (Mark Salter) [2123508]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.3.1.rt7.213.el8]" date="1664539200">- [rt] build kernel-rt-4.18.0-425.3.1.rt7.213.el8 [2067251]
- iwlwifi: limit fw version for AC9560 to avoid fw crash (Íñigo Huguet) [2129297]
- sfc: fix null pointer dereference in efx_hard_start_xmit (Íñigo Huguet) [2119638]
- sfc: fix TX channel offset when using legacy interrupts (Íñigo Huguet) [2119638]
- netfilter: conntrack: reduce timeout when receiving out-of-window fin or rst (Florian Westphal) [2047366]
- netfilter: conntrack: remove unneeded indent level (Florian Westphal) [2047366]
- netfilter: conntrack: ignore overly delayed tcp packets (Florian Westphal) [2047366]
- netfilter: conntrack: prepare tcp_in_window for ternary return value (Florian Westphal) [2047366]
- netfilter: conntrack: remove pr_debug callsites from tcp tracker (Florian Westphal) [2047366]
- netfilter: conntrack: work around exceeded receive window (Florian Westphal) [2047366]
- netfilter: conntrack: improve RST handling when tuple is re-used (Florian Westphal) [2047366]
- netfilter: conntrack: avoid misleading 'invalid' in log message (Florian Westphal) [2047366]
- netfilter: remove BUG_ON() after skb_header_pointer() (Florian Westphal) [2047366]
- iavf: Detach device during reset task (Petr Oros) [2069206]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.4.1.rt7.214.el8]" date="1665144000">- [rt] build kernel-rt-4.18.0-425.4.1.rt7.214.el8 [2067251]
- random: allow reseeding DRBG with getrandom (Daiki Ueno) [2121766]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.5.1.rt7.215.el8_7]" date="1667822400">- [rt] build kernel-rt-4.18.0-425.5.1.rt7.215.el8_7 [2137411]
- ice: Fix interface being down after reset with link-down-on-close flag on (Petr Oros) [2136216 2024110]
- ice: Fix crash by keep old cfg when update TCs more than queues (Petr Oros) [2130992 2129902]
- ice: Fix tunnel checksum offload with fragmented traffic (Petr Oros) [2130992 2129902]
- ice: handle E822 generic device ID in PLDM header (Petr Oros) [2130992 2129902]
- ice: ethtool: Prohibit improper channel config for DCB (Petr Oros) [2130992 2129902]
- ice: ethtool: advertise 1000M speeds properly (Petr Oros) [2130992 2129902]
- ice: Fix switchdev rules book keeping (Petr Oros) [2130992 2129902]
- ice: fix access-beyond-end in the switch code (Petr Oros) [2130992 2129902]
- eth: ice: silence the GCC 12 array-bounds warning (Petr Oros) [2130992 2129902]
- ice: Expose RSS indirection tables for queue groups via ethtool (Petr Oros) [2130992 2129902]
- Revert "ice: Hide bus-info in ethtool for PRs in switchdev mode" (Petr Oros) [2130992 2129902]
- ice: remove period on argument description in ice_for_each_vf (Petr Oros) [2130992 2129902]
- ice: add a function comment for ice_cfg_mac_antispoof (Petr Oros) [2130992 2129902]
- ice: fix wording in comment for ice_reset_vf (Petr Oros) [2130992 2129902]
- ice: remove return value comment for ice_reset_all_vfs (Petr Oros) [2130992 2129902]
- ice: always check VF VSI pointer values (Petr Oros) [2130992 2129902]
- ice: add newline to dev_dbg in ice_vf_fdir_dump_info (Petr Oros) [2130992 2129902]
- ice: get switch id on switchdev devices (Petr Oros) [2130992 2129902]
- ice: return ENOSPC when exceeding ICE_MAX_CHAIN_WORDS (Petr Oros) [2130992 2129902]
- ice: introduce common helper for retrieving VSI by vsi_num (Petr Oros) [2130992 2129902]
- ice: use min_t() to make code cleaner in ice_gnss (Petr Oros) [2130992 2129902]
- ice: Add mpls+tso support (Petr Oros) [2130992 2129902]
- ice: switch: convert packet template match code to rodata (Petr Oros) [2130992 2129902]
- ice: switch: use convenience macros to declare dummy pkt templates (Petr Oros) [2130992 2129902]
- ice: switch: use a struct to pass packet template params (Petr Oros) [2130992 2129902]
- ice: switch: unobscurify bitops loop in ice_fill_adv_dummy_packet() (Petr Oros) [2130992 2129902]
- ice: switch: add and use u16[] aliases to ice_adv_lkup_elem::{h, m}_u (Petr Oros) [2130992 2129902]
- ice: Support GTP-U and GTP-C offload in switchdev (Petr Oros) [2130992 2129902]
- ice: Remove useless DMA-32 fallback configuration (Petr Oros) [2130992 2129902]
- ice: switch to napi_build_skb() (Petr Oros) [2130992 2129902]
- redhat: switch to z-stream dist tag and build targets (Jarod Wilson)
- block: avoid sign extend problem with default queue flags mask (Nico Pache) [2135813]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.6.1.rt7.216.el8_7]" date="1668168000">- [rt] build kernel-rt-4.18.0-425.6.1.rt7.216.el8_7 [2137411]
- ice: Add low latency Tx timestamp read (Petr Oros) [2136036 2092425]
- ice: introduce ice_ptp_reset_cached_phctime function (Petr Oros) [2136036 2092425]
- ice: re-arrange some static functions in ice_ptp.c (Petr Oros) [2136036 2092425]
- ice: track and warn when PHC update is late (Petr Oros) [2136036 2092425]
- ice: track Tx timestamp stats similar to other Intel drivers (Petr Oros) [2136036 2092425]
- ice: implement adjfine with mul_u64_u64_div_u64 (Petr Oros) [2136036 2092425]
- ice: Add EXTTS feature to the feature bitmap (Petr Oros) [2136036 2092425]
- math: Export mul_u64_u64_div_u64 (Petr Oros) [2136036 2092425]
- vfio/type1: Unpin zero pages (Alex Williamson) [2128515 2123015]
- net: atlantic: remove aq_nic_deinit() when resume (Íñigo Huguet) [2131935 2130839]
- net: atlantic: remove deep parameter on suspend/resume functions (Íñigo Huguet) [2131935 2130839]
- CI: Use zstream builder container (Veronika Kabatova)
- CI: Add disttag override for 8.7 (Veronika Kabatova)</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.7.1.rt7.217.el8_7]" date="1669723200">- [rt] build kernel-rt-4.18.0-425.7.1.rt7.217.el8_7 [2137411]
- ice: Add additional CSR registers to ETHTOOL_GREGS (Petr Oros) [2136513 2131024]
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps (Petr Oros) [2137270 2106964]
- i40e: Fix VF set max MTU size (Petr Oros) [2137270 2106964]
- iavf: Fix set max MTU size with port VLAN and jumbo frames (Petr Oros) [2137270 2106964]
- iavf: Fix bad page state (Petr Oros) [2137270 2106964]
- Revert "scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels" (Jarod Wilson)
- scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels (Tomas Henzl) [2139216]
- Revert "ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems" (Jarod Wilson)
- ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems (Wei Huang) [2142170 2130653]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.8.1.rt7.218.el8_7]" date="1669982400">- [rt] build kernel-rt-4.18.0-425.8.1.rt7.218.el8_7 [2137411]
- scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels (Tomas Henzl) [2139216 2134535]
- RDMA/mlx5: Set local port to one when accessing counters (Mohammad Kabat) [2141957 2077119]
- drm/mgag200: Fix PLL setup for G200_SE_A rev &gt;=4 (Jocelyn Falempe) [2140152 2130159]
- iavf: Do not restart Tx queues after reset task failure (Petr Oros) [2149081 2134005]
- iavf: Fix a crash during reset task (Petr Oros) [2149081 2134005]
- scsi: core: Allow the ALUA transitioning state enough time (Tomas Henzl) [2147374 2084250]
- scsi: core: Return BLK_STS_TRANSPORT for ALUA transitioning (Tomas Henzl) [2147374 2084250]
- i40e: Fix DMA mappings leak (Ivan Vecera) [2138205 2077847]
- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2142724 2142725] {CVE-2022-2964}
- net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2142724 2142725] {CVE-2022-2964}</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.9.1.rt7.219.el8_7]" date="1670587200">- [rt] build kernel-rt-4.18.0-425.9.1.rt7.219.el8_7 [2137411]
- Documentation/admin-guide: Document nomodeset kernel parameter (Jocelyn Falempe) [2145218 2143952]
- drm: Move nomodeset kernel parameter to the DRM subsystem (Jocelyn Falempe) [2145218 2143952]
- wait: Fix __wait_event_hrtimeout for RT/DL tasks (Derek Barbosa) [2138953 2125233]
- scsi: zfcp: Fix missing auto port scan and thus missing target ports (Tobias Huschle) [2127849 2121089]
- net: Fix return value of qdisc ingress handling on success (Ivan Vecera) [2141878 2131361]</changelog>
  <changelog author="Chris White &lt;chwhite@redhat.com&gt; [4.18.0-425.10.1.rt7.220.el8_7]" date="1671192000">- [rt] build kernel-rt-4.18.0-425.10.1.rt7.220.el8_7 [2137411]
- scsi: target: loop: Fix handling of aborted TMRs (Maurizio Lombardi) [2144583 2141713]
- ice: virtchnl rss hena support (Petr Oros) [2148130]
- ice: Fix configuring VIRTCHNL_OP_CONFIG_VSI_QUEUES with unbalanced queues (Michal Schmidt) [2142017 2137378]
- ice: Add support Flex RXD (Michal Schmidt) [2138157 2131310]
- netfilter: flowtable: fix stuck flows on cleanup due to pending work (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: add function to invoke garbage collection immediately (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: pass flowtable to nf_flow_table_iterate() (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: separate replace, destroy and stats to different workqueues (Phil Sutter) [2134084 2131370]
- x86/paravirt: Add a dummy __x86_paravirt_patch_template() function (Waiman Long) [2152206 2144161]
- x86/paravirt: Fix kABI breakage in struct pv_mmu_ops (Waiman Long) [2152206 2144161]
- drm/i915: fix TLB invalidation for Gen12 video and compute engines (Wander Lairson Costa) [2148162 2148163] {CVE-2022-4139}
- PCI: hv: Do not set PCI_COMMAND_MEMORY to reduce VM boot time (Emanuele Giuseppe Esposito) [2150912 2082836]
- iavf: Fix cached head and tail value for iavf_get_tx_pending (Stefan Assmann) [2149742 2103944]
- iavf: Fix change VF's mac address (Stefan Assmann) [2149742 2103944]
- iavf: Fix race between iavf_close and iavf_reset_task (Stefan Assmann) [2149742 2103944]
- net: ethernet: move from strlcpy with unused retval to strscpy (Stefan Assmann) [2149742 2103944]
- iavf: Fix 'tc qdisc show' listing too many queues (Stefan Assmann) [2149742 2103944]
- iavf: Fix max_rate limiting (Stefan Assmann) [2149742 2103944]
- iavf: Check for duplicate TC flower filter before parsing (Stefan Assmann) [2149742 2103944]
- iavf: Fix handling of dummy receive descriptors (Stefan Assmann) [2149742 2103944]
- iavf: Disallow changing rx/tx-frames and rx/tx-frames-irq (Stefan Assmann) [2149742 2103944]
- intel/iavf:fix repeated words in comments (Stefan Assmann) [2149742 2103944]
- intel: remove unused macros (Stefan Assmann) [2149742 2103944]
- iavf: Add waiting for response from PF in set mac (Stefan Assmann) [2149742 2103944]</changelog>
</package>
<package pkgid="6463ae76e515a1a24cdbd70e5a74e35a0c48e84aaa04e39554f9c004b11aebd1" name="kernel-rt-debug-modules-internal" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="425.13.1.rt7.223.el8_7"/>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.4.1.rt7.214.el8]" date="1665144000">- [rt] build kernel-rt-4.18.0-425.4.1.rt7.214.el8 [2067251]
- random: allow reseeding DRBG with getrandom (Daiki Ueno) [2121766]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.5.1.rt7.215.el8_7]" date="1667822400">- [rt] build kernel-rt-4.18.0-425.5.1.rt7.215.el8_7 [2137411]
- ice: Fix interface being down after reset with link-down-on-close flag on (Petr Oros) [2136216 2024110]
- ice: Fix crash by keep old cfg when update TCs more than queues (Petr Oros) [2130992 2129902]
- ice: Fix tunnel checksum offload with fragmented traffic (Petr Oros) [2130992 2129902]
- ice: handle E822 generic device ID in PLDM header (Petr Oros) [2130992 2129902]
- ice: ethtool: Prohibit improper channel config for DCB (Petr Oros) [2130992 2129902]
- ice: ethtool: advertise 1000M speeds properly (Petr Oros) [2130992 2129902]
- ice: Fix switchdev rules book keeping (Petr Oros) [2130992 2129902]
- ice: fix access-beyond-end in the switch code (Petr Oros) [2130992 2129902]
- eth: ice: silence the GCC 12 array-bounds warning (Petr Oros) [2130992 2129902]
- ice: Expose RSS indirection tables for queue groups via ethtool (Petr Oros) [2130992 2129902]
- Revert "ice: Hide bus-info in ethtool for PRs in switchdev mode" (Petr Oros) [2130992 2129902]
- ice: remove period on argument description in ice_for_each_vf (Petr Oros) [2130992 2129902]
- ice: add a function comment for ice_cfg_mac_antispoof (Petr Oros) [2130992 2129902]
- ice: fix wording in comment for ice_reset_vf (Petr Oros) [2130992 2129902]
- ice: remove return value comment for ice_reset_all_vfs (Petr Oros) [2130992 2129902]
- ice: always check VF VSI pointer values (Petr Oros) [2130992 2129902]
- ice: add newline to dev_dbg in ice_vf_fdir_dump_info (Petr Oros) [2130992 2129902]
- ice: get switch id on switchdev devices (Petr Oros) [2130992 2129902]
- ice: return ENOSPC when exceeding ICE_MAX_CHAIN_WORDS (Petr Oros) [2130992 2129902]
- ice: introduce common helper for retrieving VSI by vsi_num (Petr Oros) [2130992 2129902]
- ice: use min_t() to make code cleaner in ice_gnss (Petr Oros) [2130992 2129902]
- ice: Add mpls+tso support (Petr Oros) [2130992 2129902]
- ice: switch: convert packet template match code to rodata (Petr Oros) [2130992 2129902]
- ice: switch: use convenience macros to declare dummy pkt templates (Petr Oros) [2130992 2129902]
- ice: switch: use a struct to pass packet template params (Petr Oros) [2130992 2129902]
- ice: switch: unobscurify bitops loop in ice_fill_adv_dummy_packet() (Petr Oros) [2130992 2129902]
- ice: switch: add and use u16[] aliases to ice_adv_lkup_elem::{h, m}_u (Petr Oros) [2130992 2129902]
- ice: Support GTP-U and GTP-C offload in switchdev (Petr Oros) [2130992 2129902]
- ice: Remove useless DMA-32 fallback configuration (Petr Oros) [2130992 2129902]
- ice: switch to napi_build_skb() (Petr Oros) [2130992 2129902]
- redhat: switch to z-stream dist tag and build targets (Jarod Wilson)
- block: avoid sign extend problem with default queue flags mask (Nico Pache) [2135813]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.6.1.rt7.216.el8_7]" date="1668168000">- [rt] build kernel-rt-4.18.0-425.6.1.rt7.216.el8_7 [2137411]
- ice: Add low latency Tx timestamp read (Petr Oros) [2136036 2092425]
- ice: introduce ice_ptp_reset_cached_phctime function (Petr Oros) [2136036 2092425]
- ice: re-arrange some static functions in ice_ptp.c (Petr Oros) [2136036 2092425]
- ice: track and warn when PHC update is late (Petr Oros) [2136036 2092425]
- ice: track Tx timestamp stats similar to other Intel drivers (Petr Oros) [2136036 2092425]
- ice: implement adjfine with mul_u64_u64_div_u64 (Petr Oros) [2136036 2092425]
- ice: Add EXTTS feature to the feature bitmap (Petr Oros) [2136036 2092425]
- math: Export mul_u64_u64_div_u64 (Petr Oros) [2136036 2092425]
- vfio/type1: Unpin zero pages (Alex Williamson) [2128515 2123015]
- net: atlantic: remove aq_nic_deinit() when resume (Íñigo Huguet) [2131935 2130839]
- net: atlantic: remove deep parameter on suspend/resume functions (Íñigo Huguet) [2131935 2130839]
- CI: Use zstream builder container (Veronika Kabatova)
- CI: Add disttag override for 8.7 (Veronika Kabatova)</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.7.1.rt7.217.el8_7]" date="1669723200">- [rt] build kernel-rt-4.18.0-425.7.1.rt7.217.el8_7 [2137411]
- ice: Add additional CSR registers to ETHTOOL_GREGS (Petr Oros) [2136513 2131024]
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps (Petr Oros) [2137270 2106964]
- i40e: Fix VF set max MTU size (Petr Oros) [2137270 2106964]
- iavf: Fix set max MTU size with port VLAN and jumbo frames (Petr Oros) [2137270 2106964]
- iavf: Fix bad page state (Petr Oros) [2137270 2106964]
- Revert "scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels" (Jarod Wilson)
- scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels (Tomas Henzl) [2139216]
- Revert "ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems" (Jarod Wilson)
- ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems (Wei Huang) [2142170 2130653]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.8.1.rt7.218.el8_7]" date="1669982400">- [rt] build kernel-rt-4.18.0-425.8.1.rt7.218.el8_7 [2137411]
- scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels (Tomas Henzl) [2139216 2134535]
- RDMA/mlx5: Set local port to one when accessing counters (Mohammad Kabat) [2141957 2077119]
- drm/mgag200: Fix PLL setup for G200_SE_A rev &gt;=4 (Jocelyn Falempe) [2140152 2130159]
- iavf: Do not restart Tx queues after reset task failure (Petr Oros) [2149081 2134005]
- iavf: Fix a crash during reset task (Petr Oros) [2149081 2134005]
- scsi: core: Allow the ALUA transitioning state enough time (Tomas Henzl) [2147374 2084250]
- scsi: core: Return BLK_STS_TRANSPORT for ALUA transitioning (Tomas Henzl) [2147374 2084250]
- i40e: Fix DMA mappings leak (Ivan Vecera) [2138205 2077847]
- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2142724 2142725] {CVE-2022-2964}
- net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2142724 2142725] {CVE-2022-2964}</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.9.1.rt7.219.el8_7]" date="1670587200">- [rt] build kernel-rt-4.18.0-425.9.1.rt7.219.el8_7 [2137411]
- Documentation/admin-guide: Document nomodeset kernel parameter (Jocelyn Falempe) [2145218 2143952]
- drm: Move nomodeset kernel parameter to the DRM subsystem (Jocelyn Falempe) [2145218 2143952]
- wait: Fix __wait_event_hrtimeout for RT/DL tasks (Derek Barbosa) [2138953 2125233]
- scsi: zfcp: Fix missing auto port scan and thus missing target ports (Tobias Huschle) [2127849 2121089]
- net: Fix return value of qdisc ingress handling on success (Ivan Vecera) [2141878 2131361]</changelog>
  <changelog author="Chris White &lt;chwhite@redhat.com&gt; [4.18.0-425.10.1.rt7.220.el8_7]" date="1671192000">- [rt] build kernel-rt-4.18.0-425.10.1.rt7.220.el8_7 [2137411]
- scsi: target: loop: Fix handling of aborted TMRs (Maurizio Lombardi) [2144583 2141713]
- ice: virtchnl rss hena support (Petr Oros) [2148130]
- ice: Fix configuring VIRTCHNL_OP_CONFIG_VSI_QUEUES with unbalanced queues (Michal Schmidt) [2142017 2137378]
- ice: Add support Flex RXD (Michal Schmidt) [2138157 2131310]
- netfilter: flowtable: fix stuck flows on cleanup due to pending work (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: add function to invoke garbage collection immediately (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: pass flowtable to nf_flow_table_iterate() (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: separate replace, destroy and stats to different workqueues (Phil Sutter) [2134084 2131370]
- x86/paravirt: Add a dummy __x86_paravirt_patch_template() function (Waiman Long) [2152206 2144161]
- x86/paravirt: Fix kABI breakage in struct pv_mmu_ops (Waiman Long) [2152206 2144161]
- drm/i915: fix TLB invalidation for Gen12 video and compute engines (Wander Lairson Costa) [2148162 2148163] {CVE-2022-4139}
- PCI: hv: Do not set PCI_COMMAND_MEMORY to reduce VM boot time (Emanuele Giuseppe Esposito) [2150912 2082836]
- iavf: Fix cached head and tail value for iavf_get_tx_pending (Stefan Assmann) [2149742 2103944]
- iavf: Fix change VF's mac address (Stefan Assmann) [2149742 2103944]
- iavf: Fix race between iavf_close and iavf_reset_task (Stefan Assmann) [2149742 2103944]
- net: ethernet: move from strlcpy with unused retval to strscpy (Stefan Assmann) [2149742 2103944]
- iavf: Fix 'tc qdisc show' listing too many queues (Stefan Assmann) [2149742 2103944]
- iavf: Fix max_rate limiting (Stefan Assmann) [2149742 2103944]
- iavf: Check for duplicate TC flower filter before parsing (Stefan Assmann) [2149742 2103944]
- iavf: Fix handling of dummy receive descriptors (Stefan Assmann) [2149742 2103944]
- iavf: Disallow changing rx/tx-frames and rx/tx-frames-irq (Stefan Assmann) [2149742 2103944]
- intel/iavf:fix repeated words in comments (Stefan Assmann) [2149742 2103944]
- intel: remove unused macros (Stefan Assmann) [2149742 2103944]
- iavf: Add waiting for response from PF in set mac (Stefan Assmann) [2149742 2103944]</changelog>
  <changelog author="Chris White &lt;chwhite@redhat.com&gt; [4.18.0-425.11.1.rt7.221.el8_7]" date="1673352000">- [rt] build kernel-rt-4.18.0-425.11.1.rt7.221.el8_7 [2159806]
- NFSD: Protect against send buffer overflow in NFSv3 READ (Scott Mayhew) [2143174] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv2 READ (Scott Mayhew) [2143174] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv3 READDIR (Scott Mayhew) [2143174] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv2 READDIR (Scott Mayhew) [2143174] {CVE-2022-43945}
- SUNRPC: Fix svcxdr_init_encode's buflen calculation (Scott Mayhew) [2143174] {CVE-2022-43945}
- SUNRPC: Fix svcxdr_init_decode's end-of-buffer calculation (Scott Mayhew) [2143174] {CVE-2022-43945}
- panic, kexec: make __crash_kexec() NMI safe (Valentin Schneider) [2139580]
- kexec: turn all kexec_mutex acquisitions into trylocks (Valentin Schneider) [2139580]
- kexec: move locking into do_kexec_load (Valentin Schneider) [2139580]
- vdpa/mlx5: re-create forwarding rules after mac modified (Laurent Vivier) [2152912]
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry (Waiman Long) [2153653]
- irq: Call tick_irq_enter() inside HARDIRQ_OFFSET (Waiman Long) [2153653]
- irqtime: Move irqtime entry accounting after irq offset incrementation (Waiman Long) [2153653]
- sched/vtime: Consolidate IRQ time accounting (Waiman Long) [2153653]
- s390/vtime: Use the generic IRQ entry accounting (Waiman Long) [2153653]
- sched/cputime: Remove symbol exports from IRQ time accounting (Waiman Long) [2153653]
- genirq/irqdomain: Don't try to free an interrupt that has no mapping (Waiman Long) [2153653]
- genirq: Provide __irq_enter/exit_raw() (Waiman Long) [2153653]
- powerpc/time: Only set CONFIG_ARCH_HAS_SCALED_CPUTIME on PPC64 (Waiman Long) [2153653]
- powerpc/time: isolate scaled cputime accounting in dedicated functions. (Waiman Long) [2153653]
- PCI: hv: Fix synchronization between channel callback and hv_pci_bus_exit() (Mohammed Gamal) [2155280]
- PCI: hv: Fix synchronization between channel callback and hv_compose_msi_msg() (Mohammed Gamal) [2155280]
- PCI: hv: Use vmbus_requestor to generate transaction IDs for VMbus hardening (Mohammed Gamal) [2155280]
- net/mlx5e: TC, Reject forwarding from internal port to internal port (Mohammad Kabat) [2141959 2131345]
- hv_netvsc: Fix race between VF offering and VF association message from host (Mohammed Gamal) [2155272]
- x86/mce: Reduce number of machine checks taken during recovery (Prarit Bhargava) [2137592 2104388]
- cgroup/cpuset: Reduce cpuset_rwsem writer latency (Waiman Long) [2153108]
- rcu/exp: Mark current CPU as exp-QS in IPI loop second pass (Waiman Long) [2153108]
- rcu: Always inline rcu_dynticks_task*_{enter,exit}() (Waiman Long) [2153108]
- rcu: Fix existing exp request check in sync_sched_exp_online_cleanup() (Waiman Long) [2153108]
- rcu: Fix macro name CONFIG_TASKS_RCU_TRACE (Waiman Long) [2153108]
- rcu: Fix stall-warning deadlock due to non-release of rcu_node -&gt;lock (Waiman Long) [2153108]
- rcu: Fix to include first blocked task in stall warning (Waiman Long) [2153108]
- cgroup: Use cgroup_attach_{lock,unlock}() from cgroup_attach_task_all() (Waiman Long) [2153108]
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all() (Waiman Long) [2153108]
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock (Waiman Long) [2153108]
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree (Waiman Long) [2153108]
- cgroup/cpuset: Fix a race between cpuset_attach() and cpu hotplug (Waiman Long) [2153108]
- cgroup: reduce dependency on cgroup_mutex (Waiman Long) [2153108]
- sunrpc: Set sk_allocation to GFP_NOFS to avoid using current-&gt;task_frag. (Guillaume Nault) [2153230]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.12.1.rt7.222.el8_7]" date="1674129600">- [rt] build kernel-rt-4.18.0-425.12.1.rt7.222.el8_7 [2159806]
- x86/fpu: Prevent FPU state corruption (Oleksandr Natalenko) [2134586 2130890]
- x86/fpu: Drop fpregs lock before inheriting FPU permissions (Eder Zulian) [2154460 2153549]
- kernel-doc: fix undefined args variable (Jan Stancek) [2157905 2134954]
- mm: memcontrol: fix potential oom_lock recursion deadlock (Waiman Long) [2157922 2138886]
- memcg: prohibit unconditional exceeding the limit of dying tasks (Waiman Long) [2157922 2138886]
- mm, oom: do not trigger out_of_memory from the #PF (Waiman Long) [2157922 2138886]
- mm, oom: pagefault_out_of_memory: don't force global OOM for dying tasks (Waiman Long) [2157922 2138886]
- mm: memcontrol: don't count limit-setting reclaim as memory pressure (Waiman Long) [2157922 2138886]
- KVM: s390: vsie: Fix the initialization of the epoch extension (epdx) field (Thomas Huth) [2158813 2151854]
- net: mana: Fix race on per-CQ variable napi work_done (Emanuele Giuseppe Esposito) [2155437 2151722]
- mei: me: add adler lake point S DID (Prarit Bhargava) [2141783 2141602]
- PCI: hv: Only reuse existing IRTE allocation for Multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix the definition of vector in hv_compose_msi_msg() (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix interrupt mapping for multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Reuse existing IRTE allocation in compose_msi_msg() (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix hv_arch_irq_unmask() for multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix multi-MSI to allow more than one MSI vector (Emanuele Giuseppe Esposito) [2155289 2100275]
- drm/ast: Support multiple outputs (Jarod Wilson) [2149287 2147553]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.13.1.rt7.223.el8_7]" date="1675339200">- [rt] build kernel-rt-4.18.0-425.13.1.rt7.223.el8_7 [2159806]
- mm/cgroup/reclaim: fix dirty pages throttling on cgroup v1 (Waiman Long) [2160221]
- mm: vmscan: remove deadlock due to throttling failing to make progress (Waiman Long) [2160221]
- mm: vmscan: reduce throttling due to a failure to make progress -fix (Waiman Long) [2160221]
- mm: vmscan: Reduce throttling due to a failure to make progress (Waiman Long) [2160221]
- mm/vmscan: delay waking of tasks throttled on NOPROGRESS (Waiman Long) [2160221]
- mm/vmscan: increase the timeout if page reclaim is not making progress (Waiman Long) [2160221]
- mm/vmscan: centralise timeout values for reclaim_throttle (Waiman Long) [2160221]
- mm/page_alloc: remove the throttling logic from the page allocator (Waiman Long) [2160221]
- mm/writeback: throttle based on page writeback instead of congestion (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim when no progress is being made (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim and compaction when too may pages are isolated (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim until some writeback completes if congested (Waiman Long) [2160221]
- mm/vmscan.c: delete or fix duplicated words (Waiman Long) [2160221]
- mm,page_alloc: PF_WQ_WORKER threads must sleep at should_reclaim_retry() (Nico Pache) [2160221]
- ceph: avoid putting the realm twice when decoding snaps fails (Xiubo Li) [2155797 2139881]
- mm/mremap: hold the rmap lock in write mode when moving page table entries. (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap: use pmd/pud_poplulate to update page table entries (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap: don't enable optimized PUD move if page table levels is 2 (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap: convert huge PUD move to separate helper (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap: fix BUILD_BUG_ON() error in get_extent (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap.c: fix extent calculation (Waiman Long) [2140950] {CVE-2022-41222}
- x86: mremap speedup - Enable HAVE_MOVE_PUD (Waiman Long) [2140950] {CVE-2022-41222}
- mm: speedup mremap on 1GB or larger regions (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap: start addresses are properly aligned (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap: calculate extent in one place (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap: it is sure to have enough space when extent meets requirement (Waiman Long) [2140950] {CVE-2022-41222}
- s390/boot: add secure boot trailer (Tobias Huschle) [2151530 2141967]
- i40e: Fix VF hang when reset is triggered on another VF (Ivan Vecera) [2160460 2103801]
- i2c: ismt: Fix an out-of-bounds bug in ismt_access() (Prarit Bhargava) [2154388 2119066] {CVE-2022-2873}
- iavf: schedule watchdog immediately when changing primary MAC (Michal Schmidt) [2163257 2152493]
- iavf: Move netdev_update_features() into watchdog task (Michal Schmidt) [2163257 2152493]
- iavf: fix temporary deadlock and failure to set MAC address (Michal Schmidt) [2163257 2152493]
- iavf: Fix error handling in iavf_init_module() (Michal Schmidt) [2163257 2152493]
- iommu/vt-d: Clean up si_domain in the init_dmars() error path (Jerry Snitselaar) [2149474 2118428]
- x86/pci/xen: Use msi_msg shadow structs (Jerry Snitselaar) [2149474 2118428]
- iommu/intel: Use msi_msg shadow structs (Jerry Snitselaar) [2149474 2118428]
- PCI: MSI: Fix Kconfig dependencies for PCI_MSI_ARCH_FALLBACKS (Jerry Snitselaar) [2149474 2118428]
- x86/apic/msi: Unbreak DMAR and HPET MSI (Jerry Snitselaar) [2149474 2118428]
- iommu/amd: Remove domain search for PCI/MSI (Jerry Snitselaar) [2149474 2118428]
- iommu/vt-d: Remove domain search for PCI/MSI[X] (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Make most MSI ops XEN private (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Cleanup the arch_*_msi_irqs() leftovers (Jerry Snitselaar) [2149474 2118428]
- PCI/MSI: Make arch_.*_msi_irq[s] fallbacks selectable (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Wrap XEN MSI management into irqdomain (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Consolidate XEN-MSI init (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Rework MSI teardown (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Make xen_msi_init() static and rename it to xen_hvm_msi_init() (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Move apic_post_init() invocation to one place (Jerry Snitselaar) [2149474 2118428]
- x86/msi: Use generic MSI domain ops (Jerry Snitselaar) [2149474 2118428]
- x86/msi: Remove pointless vcpu_affinity callback (Jerry Snitselaar) [2149474 2118428]
- iommu/vt-d: Fix compile error with CONFIG_PCI_ATS not set (Myron Stowe) [2149474 2118428]
- iommu/vt-d: Cure VF irqdomain hickup (Myron Stowe) [2149474 2118428]
- x86/pci: Set default irq domain in pcibios_add_device() (Myron Stowe) [2149474 2118428]
- iommm/amd: Store irq domain in struct device (Myron Stowe) [2149474 2118428]
- iommm/vt-d: Store irq domain in struct device (Myron Stowe) [2149474 2118428]
- PCI/MSI: Provide pci_dev_has_special_msi_domain() helper (Myron Stowe) [2149474 2118428]
- x86/msi: Consolidate MSI allocation (Myron Stowe) [2149474 2118428]
- PCI/MSI: Rework pci_msi_domain_calc_hwirq() (Myron Stowe) [2149474 2118428]
- x86/irq: Consolidate UV domain allocation (Myron Stowe) [2149474 2118428]
- x86/irq: Consolidate DMAR irq allocation (Myron Stowe) [2149474 2118428]
- x86_ioapic_Consolidate_IOAPIC_allocation (Myron Stowe) [2149474 2118428]
- x86/msi: Consolidate HPET allocation (Myron Stowe) [2149474 2118428]
- iommu/irq_remapping: Consolidate irq domain lookup (Myron Stowe) [2149474 2118428]
- iommu/amd: Consolidate irq domain getter (Myron Stowe) [2149474 2118428]
- iommu/vt-d: Consolidate irq domain getter (Myron Stowe) [2149474 2118428]
- x86/irq: Add allocation type for parent domain retrieval (Myron Stowe) [2149474 2118428]
- irqdomain: Export irq_domain_update_bus_token (Myron Stowe) [2149474 2118428]
- gitlab-ci: use CI templates from production branch (Michael Hofmann)
- iavf: remove INITIAL_MAC_SET to allow gARP to work properly (Stefan Assmann) [2149745 1938635]
- Revert "scsi: iscsi: ql4xxx: Use per-session workqueue for unbinding" (Chris Leech) [2152734 2122624]
- Revert "scsi: iscsi: Use the session workqueue for recovery" (Chris Leech) [2152734 2122624]
- arm64/bpf: Remove 128MB limit for BPF JIT programs (Yauheni Kaliuta) [2152138 2140163]
- bpf: Define bpf_jit_alloc_exec_limit for arm64 JIT (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: add `type` and `data` fields (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: use `ex` for `exception_table_entry` (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: make fixup_exception() return bool (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: consolidate definitions (Yauheni Kaliuta) [2152138 2140163]
- arm64: kvm: use kvm_exception_table_entry (Yauheni Kaliuta) [2152138 2140163]
- be2net: Fix buffer overflow in be_get_module_eeprom (Josef Oskera) [2160182 2126917]
- sched: Switch to upstream migrate disable code (Crystal Wood) [2132062]
- tick: Fix timer storm since introduction of timersd (Valentin Schneider) [2127204]
- softirq: Use a dedicated thread for timer wakeups. (Valentin Schneider) [2127204]</changelog>
</package>
<package pkgid="923c0f1a4c8992febcff91726625e6d2b4b19c04c0e13caa5df6f6fdfbba707d" name="kernel-rt-debug-modules-internal" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="425.19.2.rt7.230.el8_7"/>
  <changelog author="Chris White &lt;chwhite@redhat.com&gt; [4.18.0-425.11.1.rt7.221.el8_7]" date="1673352000">- [rt] build kernel-rt-4.18.0-425.11.1.rt7.221.el8_7 [2159806]
- NFSD: Protect against send buffer overflow in NFSv3 READ (Scott Mayhew) [2143174] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv2 READ (Scott Mayhew) [2143174] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv3 READDIR (Scott Mayhew) [2143174] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv2 READDIR (Scott Mayhew) [2143174] {CVE-2022-43945}
- SUNRPC: Fix svcxdr_init_encode's buflen calculation (Scott Mayhew) [2143174] {CVE-2022-43945}
- SUNRPC: Fix svcxdr_init_decode's end-of-buffer calculation (Scott Mayhew) [2143174] {CVE-2022-43945}
- panic, kexec: make __crash_kexec() NMI safe (Valentin Schneider) [2139851]
- kexec: turn all kexec_mutex acquisitions into trylocks (Valentin Schneider) [2139580]
- kexec: move locking into do_kexec_load (Valentin Schneider) [2139580]
- vdpa/mlx5: re-create forwarding rules after mac modified (Laurent Vivier) [2152912]
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry (Waiman Long) [2153653]
- irq: Call tick_irq_enter() inside HARDIRQ_OFFSET (Waiman Long) [2153653]
- irqtime: Move irqtime entry accounting after irq offset incrementation (Waiman Long) [2153653]
- sched/vtime: Consolidate IRQ time accounting (Waiman Long) [2153653]
- s390/vtime: Use the generic IRQ entry accounting (Waiman Long) [2153653]
- sched/cputime: Remove symbol exports from IRQ time accounting (Waiman Long) [2153653]
- genirq/irqdomain: Don't try to free an interrupt that has no mapping (Waiman Long) [2153653]
- genirq: Provide __irq_enter/exit_raw() (Waiman Long) [2153653]
- powerpc/time: Only set CONFIG_ARCH_HAS_SCALED_CPUTIME on PPC64 (Waiman Long) [2153653]
- powerpc/time: isolate scaled cputime accounting in dedicated functions. (Waiman Long) [2153653]
- PCI: hv: Fix synchronization between channel callback and hv_pci_bus_exit() (Mohammed Gamal) [2155280]
- PCI: hv: Fix synchronization between channel callback and hv_compose_msi_msg() (Mohammed Gamal) [2155280]
- PCI: hv: Use vmbus_requestor to generate transaction IDs for VMbus hardening (Mohammed Gamal) [2155280]
- net/mlx5e: TC, Reject forwarding from internal port to internal port (Mohammad Kabat) [2141959 2131345]
- hv_netvsc: Fix race between VF offering and VF association message from host (Mohammed Gamal) [2155272]
- x86/mce: Reduce number of machine checks taken during recovery (Prarit Bhargava) [2137592 2104388]
- cgroup/cpuset: Reduce cpuset_rwsem writer latency (Waiman Long) [2153108]
- rcu/exp: Mark current CPU as exp-QS in IPI loop second pass (Waiman Long) [2153108]
- rcu: Always inline rcu_dynticks_task*_{enter,exit}() (Waiman Long) [2153108]
- rcu: Fix existing exp request check in sync_sched_exp_online_cleanup() (Waiman Long) [2153108]
- rcu: Fix macro name CONFIG_TASKS_RCU_TRACE (Waiman Long) [2153108]
- rcu: Fix stall-warning deadlock due to non-release of rcu_node -&gt;lock (Waiman Long) [2153108]
- rcu: Fix to include first blocked task in stall warning (Waiman Long) [2153108]
- cgroup: Use cgroup_attach_{lock,unlock}() from cgroup_attach_task_all() (Waiman Long) [2153108]
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all() (Waiman Long) [2153108]
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock (Waiman Long) [2153108]
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree (Waiman Long) [2153108]
- cgroup/cpuset: Fix a race between cpuset_attach() and cpu hotplug (Waiman Long) [2153108]
- cgroup: reduce dependency on cgroup_mutex (Waiman Long) [2153108]
- sunrpc: Set sk_allocation to GFP_NOFS to avoid using current-&gt;task_frag. (Guillaume Nault) [2153230]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.12.1.rt7.222.el8_7]" date="1674129600">- [rt] build kernel-rt-4.18.0-425.12.1.rt7.222.el8_7 [2159806]
- x86/fpu: Prevent FPU state corruption (Oleksandr Natalenko) [2134586 2130890]
- x86/fpu: Drop fpregs lock before inheriting FPU permissions (Eder Zulian) [2154469 2153549]
- kernel-doc: fix undefined args variable (Jan Stancek) [2157905 2134954]
- mm: memcontrol: fix potential oom_lock recursion deadlock (Waiman Long) [2157922 2138886]
- memcg: prohibit unconditional exceeding the limit of dying tasks (Waiman Long) [2157922 2138886]
- mm, oom: do not trigger out_of_memory from the #PF (Waiman Long) [2157922 2138886]
- mm, oom: pagefault_out_of_memory: don't force global OOM for dying tasks (Waiman Long) [2157922 2138886]
- mm: memcontrol: don't count limit-setting reclaim as memory pressure (Waiman Long) [2157922 2138886]
- KVM: s390: vsie: Fix the initialization of the epoch extension (epdx) field (Thomas Huth) [2158813 2151854]
- net: mana: Fix race on per-CQ variable napi work_done (Emanuele Giuseppe Esposito) [2155437 2151722]
- mei: me: add adler lake point S DID (Prarit Bhargava) [2141783 2141602]
- PCI: hv: Only reuse existing IRTE allocation for Multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix the definition of vector in hv_compose_msi_msg() (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix interrupt mapping for multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Reuse existing IRTE allocation in compose_msi_msg() (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix hv_arch_irq_unmask() for multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix multi-MSI to allow more than one MSI vector (Emanuele Giuseppe Esposito) [2155289 2100275]
- drm/ast: Support multiple outputs (Jarod Wilson) [2149287 2147553]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.13.1.rt7.223.el8_7]" date="1675339200">- [rt] build kernel-rt-4.18.0-425.13.1.rt7.223.el8_7 [2159806]
- mm/cgroup/reclaim: fix dirty pages throttling on cgroup v1 (Waiman Long) [2160221]
- mm: vmscan: remove deadlock due to throttling failing to make progress (Waiman Long) [2160221]
- mm: vmscan: reduce throttling due to a failure to make progress -fix (Waiman Long) [2160221]
- mm: vmscan: Reduce throttling due to a failure to make progress (Waiman Long) [2160221]
- mm/vmscan: delay waking of tasks throttled on NOPROGRESS (Waiman Long) [2160221]
- mm/vmscan: increase the timeout if page reclaim is not making progress (Waiman Long) [2160221]
- mm/vmscan: centralise timeout values for reclaim_throttle (Waiman Long) [2160221]
- mm/page_alloc: remove the throttling logic from the page allocator (Waiman Long) [2160221]
- mm/writeback: throttle based on page writeback instead of congestion (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim when no progress is being made (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim and compaction when too may pages are isolated (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim until some writeback completes if congested (Waiman Long) [2160221]
- mm/vmscan.c: delete or fix duplicated words (Waiman Long) [2160221]
- mm,page_alloc: PF_WQ_WORKER threads must sleep at should_reclaim_retry() (Nico Pache) [2160221]
- ceph: avoid putting the realm twice when decoding snaps fails (Xiubo Li) [2155797 2139881]
- mm/mremap: hold the rmap lock in write mode when moving page table entries. (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap: use pmd/pud_poplulate to update page table entries (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap: don't enable optimized PUD move if page table levels is 2 (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap: convert huge PUD move to separate helper (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap: fix BUILD_BUG_ON() error in get_extent (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap.c: fix extent calculation (Waiman Long) [2140950] {CVE-2022-41222}
- x86: mremap speedup - Enable HAVE_MOVE_PUD (Waiman Long) [2140950] {CVE-2022-41222}
- mm: speedup mremap on 1GB or larger regions (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap: start addresses are properly aligned (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap: calculate extent in one place (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap: it is sure to have enough space when extent meets requirement (Waiman Long) [2140950] {CVE-2022-41222}
- s390/boot: add secure boot trailer (Tobias Huschle) [2151530 2141967]
- i40e: Fix VF hang when reset is triggered on another VF (Ivan Vecera) [2160460 2103801]
- i2c: ismt: Fix an out-of-bounds bug in ismt_access() (Prarit Bhargava) [2154388 2119066] {CVE-2022-2873}
- iavf: schedule watchdog immediately when changing primary MAC (Michal Schmidt) [2163257 2152493]
- iavf: Move netdev_update_features() into watchdog task (Michal Schmidt) [2163257 2152493]
- iavf: fix temporary deadlock and failure to set MAC address (Michal Schmidt) [2163257 2152493]
- iavf: Fix error handling in iavf_init_module() (Michal Schmidt) [2163257 2152493]
- iommu/vt-d: Clean up si_domain in the init_dmars() error path (Jerry Snitselaar) [2149474 2118428]
- x86/pci/xen: Use msi_msg shadow structs (Jerry Snitselaar) [2149474 2118428]
- iommu/intel: Use msi_msg shadow structs (Jerry Snitselaar) [2149474 2118428]
- PCI: MSI: Fix Kconfig dependencies for PCI_MSI_ARCH_FALLBACKS (Jerry Snitselaar) [2149474 2118428]
- x86/apic/msi: Unbreak DMAR and HPET MSI (Jerry Snitselaar) [2149474 2118428]
- iommu/amd: Remove domain search for PCI/MSI (Jerry Snitselaar) [2149474 2118428]
- iommu/vt-d: Remove domain search for PCI/MSI[X] (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Make most MSI ops XEN private (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Cleanup the arch_*_msi_irqs() leftovers (Jerry Snitselaar) [2149474 2118428]
- PCI/MSI: Make arch_.*_msi_irq[s] fallbacks selectable (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Wrap XEN MSI management into irqdomain (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Consolidate XEN-MSI init (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Rework MSI teardown (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Make xen_msi_init() static and rename it to xen_hvm_msi_init() (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Move apic_post_init() invocation to one place (Jerry Snitselaar) [2149474 2118428]
- x86/msi: Use generic MSI domain ops (Jerry Snitselaar) [2149474 2118428]
- x86/msi: Remove pointless vcpu_affinity callback (Jerry Snitselaar) [2149474 2118428]
- iommu/vt-d: Fix compile error with CONFIG_PCI_ATS not set (Myron Stowe) [2149474 2118428]
- iommu/vt-d: Cure VF irqdomain hickup (Myron Stowe) [2149474 2118428]
- x86/pci: Set default irq domain in pcibios_add_device() (Myron Stowe) [2149474 2118428]
- iommm/amd: Store irq domain in struct device (Myron Stowe) [2149474 2118428]
- iommm/vt-d: Store irq domain in struct device (Myron Stowe) [2149474 2118428]
- PCI/MSI: Provide pci_dev_has_special_msi_domain() helper (Myron Stowe) [2149474 2118428]
- x86/msi: Consolidate MSI allocation (Myron Stowe) [2149474 2118428]
- PCI/MSI: Rework pci_msi_domain_calc_hwirq() (Myron Stowe) [2149474 2118428]
- x86/irq: Consolidate UV domain allocation (Myron Stowe) [2149474 2118428]
- x86/irq: Consolidate DMAR irq allocation (Myron Stowe) [2149474 2118428]
- x86_ioapic_Consolidate_IOAPIC_allocation (Myron Stowe) [2149474 2118428]
- x86/msi: Consolidate HPET allocation (Myron Stowe) [2149474 2118428]
- iommu/irq_remapping: Consolidate irq domain lookup (Myron Stowe) [2149474 2118428]
- iommu/amd: Consolidate irq domain getter (Myron Stowe) [2149474 2118428]
- iommu/vt-d: Consolidate irq domain getter (Myron Stowe) [2149474 2118428]
- x86/irq: Add allocation type for parent domain retrieval (Myron Stowe) [2149474 2118428]
- irqdomain: Export irq_domain_update_bus_token (Myron Stowe) [2149474 2118428]
- gitlab-ci: use CI templates from production branch (Michael Hofmann)
- iavf: remove INITIAL_MAC_SET to allow gARP to work properly (Stefan Assmann) [2149745 1938635]
- Revert "scsi: iscsi: ql4xxx: Use per-session workqueue for unbinding" (Chris Leech) [2152734 2122624]
- Revert "scsi: iscsi: Use the session workqueue for recovery" (Chris Leech) [2152734 2122624]
- arm64/bpf: Remove 128MB limit for BPF JIT programs (Yauheni Kaliuta) [2152138 2140163]
- bpf: Define bpf_jit_alloc_exec_limit for arm64 JIT (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: add `type` and `data` fields (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: use `ex` for `exception_table_entry` (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: make fixup_exception() return bool (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: consolidate definitions (Yauheni Kaliuta) [2152138 2140163]
- arm64: kvm: use kvm_exception_table_entry (Yauheni Kaliuta) [2152138 2140163]
- be2net: Fix buffer overflow in be_get_module_eeprom (Josef Oskera) [2160182 2126917]
- sched: Switch to upstream migrate disable code (Crystal Wood) [2132062]
- tick: Fix timer storm since introduction of timersd (Valentin Schneider) [2127204]
- softirq: Use a dedicated thread for timer wakeups. (Valentin Schneider) [2127204]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.14.1.rt7.224.el8_7]" date="1676030400">- [rt] build kernel-rt-4.18.0-425.14.1.rt7.224.el8_7 [2172278]
- ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems (Wei Huang) [2142170 2130653]
- KVM: x86: nSVM: implement nested LBR virtualization (Emanuele Giuseppe Esposito) [2166362 2155149]
- KVM: x86: nSVM: correctly virtualize LBR msrs when L2 is running (Emanuele Giuseppe Esposito) [2166362 2155149]
- kvm: x86: SVM: use vmcb* instead of svm-&gt;vmcb where it makes sense (Emanuele Giuseppe Esposito) [2166362 2155149]
- KVM: x86: nSVM: implement nested VMLOAD/VMSAVE (Emanuele Giuseppe Esposito) [2166362 2155149]
- IB/iser: Fix login with authentication (Kamal Heib) [2161750 2120676]
- act_mirred: use the backlog for nested calls to mirred ingress (Davide Caratti) [2164648 2131339] {CVE-2022-4269}
- net/sched: act_mirred: better wording on protection against excessive stack growth (Davide Caratti) [2164648 2131339] {CVE-2022-4269}
- redhat/configs: Set CONFIG_X86_AMD_PSTATE to 'm' (Prarit Bhargava) [2151275 2145246]
- KVM: x86: smm: preserve interrupt shadow in SMRAM (Maxim Levitsky) [2166368 2097144]
- KVM: x86: SVM: don't save SVM state to SMRAM when VM is not long mode capable (Maxim Levitsky) [2166368 2097144]
- KVM: x86: SVM: use smram structs (Maxim Levitsky) [2166368 2097144]
- KVM: svm: drop explicit return value of kvm_vcpu_map (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: use smram struct for 64 bit smram load/restore (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: use smram struct for 32 bit smram load/restore (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: use smram structs in the common code (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: add structs for KVM's smram layout (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: check for failures on smm entry (Maxim Levitsky) [2166368 2097144]
- KVM: x86: do not go through ctxt-&gt;ops when emulating rsm (Maxim Levitsky) [2166368 2097144]
- KVM: x86: move SMM exit to a new file (Maxim Levitsky) [2166368 2097144]
- KVM: x86: move SMM entry to a new file (Maxim Levitsky) [2166368 2097144]
- KVM: x86: start moving SMM-related functions to new files (Maxim Levitsky) [2166368 2097144]
- bug: introduce ASSERT_STRUCT_OFFSET (Maxim Levitsky) [2166368 2097144]
- KVM: x86: Rename and expose helper to detect if INIT/SIPI are allowed (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: number of GPRs in the SMRAM image depends on the image format (Maxim Levitsky) [2166368 2097144]
- KVM: x86: emulator: update the emulation mode after CR0 write (Maxim Levitsky) [2166368 2097144]
- KVM: x86: emulator: update the emulation mode after rsm (Maxim Levitsky) [2166368 2097144]
- KVM: x86: emulator: introduce emulator_recalc_and_set_mode (Maxim Levitsky) [2166368 2097144]
- KVM: x86: emulator: em_sysexit should update ctxt-&gt;mode (Maxim Levitsky) [2166368 2097144]
- KVM: x86: Bug the VM if the emulator accesses a non-existent GPR (Maxim Levitsky) [2166368 2097144]
- \KVM: x86: Reduce the number of emulator GPRs to '8' for 32-bit KVM (Maxim Levitsky) [2166368 2097144]
- KVM: x86: Use 16-bit fields to track dirty/valid emulator GPRs (Maxim Levitsky) [2166368 2097144]
- KVM: x86: Omit VCPU_REGS_RIP from emulator's _regs array (Maxim Levitsky) [2166368 2097144]
- \KVM: x86: Harden _regs accesses to guard against buggy input (Maxim Levitsky) [2166368 2097144]
- KVM: x86: Grab regs_dirty in local 'unsigned long' (Maxim Levitsky) [2166368 2097144]
- proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152577 2152578] {CVE-2022-4378}
- proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152577 2152578] {CVE-2022-4378}</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.15.1.rt7.225.el8_7]" date="1676548800">- [rt] build kernel-rt-4.18.0-425.15.1.rt7.225.el8_7 [2172278]
- net/mlx5e: Fix use-after-free when reverting termination table (Amir Tzin) [2167640 2112927]
- net/mlx5: Do not query pci info while pci disabled (Amir Tzin) [2167645 2129249]
- x86/fpu: Fix copy_xstate_to_uabi() to copy init states correctly (Dean Nelson) [2168384 2122850]
- x86/fpu: Exclude dynamic states from init_fpstate (Dean Nelson) [2168384 2122850]
- x86/fpu: Fix the init_fpstate size check with the actual size (Dean Nelson) [2168384 2122850]
- x86/fpu: Configure init_fpstate attributes orderly (Dean Nelson) [2168384 2122850]
- x86/fpu/xstate: Fix the ARCH_REQ_XCOMP_PERM implementation (Dean Nelson) [2168384 2122850]
- net/mlx5: E-Switch, properly handle ingress tagged packets on VST (Amir Tzin) [2166665 2096109]
- cpuhotplug: Fix KABI breakage (Prarit Bhargava) [2162763 2156529]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.16.1.rt7.226.el8_7]" date="1677153600">- [rt] build kernel-rt-4.18.0-425.16.1.rt7.226.el8_7 [2172278]
- ipv6: fix panic when fib_lookup_arg-&gt;result is fib6_info (Jiri Benc) [2167602 2140599]
- ceph: blocklist the kclient when receiving corrupted snap trace (Xiubo Li) [2168896 2162414]
- ceph: move mount state enum to super.h (Xiubo Li) [2168896 2162414]
- s390/kexec: fix ipl report address for kdump (Tobias Huschle) [2166296 2161328]
- mm, compaction: fix fast_isolate_around() to stay within boundaries (Daniel Vacek) [2170576 2149309]
- scsi: storvsc: Fix swiotlb bounce buffer leak in confidential VM (Emanuele Giuseppe Esposito) [2170228 2150659]
- netfilter: conntrack: handle tcp challenge acks during connection reuse (Florian Westphal) [2165587 2158726]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.17.1.rt7.227.el8_7]" date="1677844800">- [rt] build kernel-rt-4.18.0-425.17.1.rt7.227.el8_7 [2172278]
- net: mana: Add rmb after checking owner bits (Mohammed Gamal) [2173103 2139462]
- net: mana: Add support of XDP_REDIRECT action (Mohammed Gamal) [2173103 2139462]
- net: mana: Add the Linux MANA PF driver (Mohammed Gamal) [2173103 2139462]
- ice: fix lost multicast packets in promisc mode (Ken Cox) [2172550 2138215]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.18.1.rt7.228.el8_7]" date="1678708800">- [rt] build kernel-rt-4.18.0-425.18.1.rt7.228.el8_7 [2172278]
- futex: Resend potentially swallowed owner death notification (Rafael Aquini) [2170054]
- irq_work: Move lazy work execution to dedicated irq_work kthreads (Valentin Schneider) [2172163]
- irq_work: Sync the patches (Valentin Schneider) [2172163]
- irq_work: Also rcuwait for !IRQ_WORK_HARD_IRQ on PREEMPT_RT (Valentin Schneider) [2172163]
- irq_work: Allow irq_work_sync() to sleep if irq_work() no IRQ support. (Valentin Schneider) [2172163]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.19.1.rt7.229.el8_7]" date="1678968000">- [rt] build kernel-rt-4.18.0-425.19.1.rt7.229.el8_7 [2172278]
- s390/dasd: fix no record found for raw_track_access (Tobias Huschle) [2167776 2161270]
- locking/rwsem: Disable preemption in all down_read*() and up_read() code paths (Waiman Long) [2170939 2162139]
- locking/rwsem: Prevent non-first waiter from spinning in down_write() slowpath (Waiman Long) [2170939 2162139]
- locking/rwsem: Allow slowpath writer to ignore handoff bit if not set by first waiter (Waiman Long) [2170939 2162139]
- locking/rwsem: Always try to wake waiters in out_nolock path (Waiman Long) [2170939 2162139]
- locking/rwsem: No need to check for handoff bit if wait queue empty (Waiman Long) [2170939 2162139]
- locking/rwsem: Make handoff bit handling more consistent (Waiman Long) [2170939 2162139]
- locking/rwsem: Disable preemption while trying for rwsem lock (Waiman Long) [2170939 2162139]
- locking/rwsem: Conditionally wake waiters in reader/writer slowpaths (Waiman Long) [2170939 2162139]
- locking: Make owner_on_cpu() into &lt;linux/sched.h&gt; (Waiman Long) [2170939 2162139]
- locking/rwsem: Optimize down_read_trylock() under highly contended case (Waiman Long) [2170939 2162139]
- locking/rwsem: Fix comments about reader optimistic lock stealing conditions (Waiman Long) [2170939 2162139]
- locking/rwsem: Disable preemption for spinning region (Waiman Long) [2170939 2162139]
- locking: Remove rcu_read_{,un}lock() for preempt_{dis,en}able() (Waiman Long) [2170939 2162139]
- watchdog: fix UAF in reboot notifier handling in watchdog core code (Wander Lairson Costa) [2139770 2131308]
- netfilter: nf_conntrack_irc: Tighten matching on DCC message (Wander Lairson Costa) [2139770 2131308]
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF (Jaroslav Kysela) [2163405 2163406] {CVE-2023-0266}
- net/mlx5e: Fix enabling sriov while tc nic rules are offloaded (Amir Tzin) [2167647 2112925]
- net/mlx5: E-Switch, pair only capable devices (Amir Tzin) [2167647 2112925]
- net/mlx5: Fix mlx5_get_next_dev() peer device matching (Amir Tzin) [2167647 2112925]
- net/mlx5: Lag, filter non compatible devices (Amir Tzin) [2167647 2112925]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.19.2.rt7.230.el8_7]" date="1679054400">- [rt] build kernel-rt-4.18.0-425.19.2.rt7.230.el8_7.geb93 [2172278]
- ovl: fail on invalid uid/gid mapping at copy up (Miklos Szeredi) [2165341 2165342] {CVE-2023-0386}</changelog>
</package>
<package pkgid="5cf55922b43a9565ed97de7f8dbf0a1654ece1aafeba50ac9ae2f1495a94eaec" name="kernel-rt-devel" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="425.10.1.rt7.220.el8_7"/>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.1.1.rt7.211.el8]" date="1663588800">- [rt] build kernel-rt-4.18.0-425.1.1.rt7.211.el8 [2067251]
- i40e: Fix kernel crash during module removal (Ivan Vecera) [2091489]
- redhat: enable zstream release numbering for rhel 8.7 (Jarod Wilson)
- ice: Allow operation with reduced device MSI-X (Petr Oros) [2102844]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.2.1.rt7.212.el8]" date="1664280000">- [rt] build kernel-rt-4.18.0-425.2.1.rt7.212.el8 [2067251]
- EDAC/ghes: Set the DIMM label unconditionally (Aristeu Rozanski) [2109712]
- configs: enable CONFIG_HP_ILO for aarch64 (Mark Salter) [2123508]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.3.1.rt7.213.el8]" date="1664539200">- [rt] build kernel-rt-4.18.0-425.3.1.rt7.213.el8 [2067251]
- iwlwifi: limit fw version for AC9560 to avoid fw crash (Íñigo Huguet) [2129297]
- sfc: fix null pointer dereference in efx_hard_start_xmit (Íñigo Huguet) [2119638]
- sfc: fix TX channel offset when using legacy interrupts (Íñigo Huguet) [2119638]
- netfilter: conntrack: reduce timeout when receiving out-of-window fin or rst (Florian Westphal) [2047366]
- netfilter: conntrack: remove unneeded indent level (Florian Westphal) [2047366]
- netfilter: conntrack: ignore overly delayed tcp packets (Florian Westphal) [2047366]
- netfilter: conntrack: prepare tcp_in_window for ternary return value (Florian Westphal) [2047366]
- netfilter: conntrack: remove pr_debug callsites from tcp tracker (Florian Westphal) [2047366]
- netfilter: conntrack: work around exceeded receive window (Florian Westphal) [2047366]
- netfilter: conntrack: improve RST handling when tuple is re-used (Florian Westphal) [2047366]
- netfilter: conntrack: avoid misleading 'invalid' in log message (Florian Westphal) [2047366]
- netfilter: remove BUG_ON() after skb_header_pointer() (Florian Westphal) [2047366]
- iavf: Detach device during reset task (Petr Oros) [2069206]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.4.1.rt7.214.el8]" date="1665144000">- [rt] build kernel-rt-4.18.0-425.4.1.rt7.214.el8 [2067251]
- random: allow reseeding DRBG with getrandom (Daiki Ueno) [2121766]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.5.1.rt7.215.el8_7]" date="1667822400">- [rt] build kernel-rt-4.18.0-425.5.1.rt7.215.el8_7 [2137411]
- ice: Fix interface being down after reset with link-down-on-close flag on (Petr Oros) [2136216 2024110]
- ice: Fix crash by keep old cfg when update TCs more than queues (Petr Oros) [2130992 2129902]
- ice: Fix tunnel checksum offload with fragmented traffic (Petr Oros) [2130992 2129902]
- ice: handle E822 generic device ID in PLDM header (Petr Oros) [2130992 2129902]
- ice: ethtool: Prohibit improper channel config for DCB (Petr Oros) [2130992 2129902]
- ice: ethtool: advertise 1000M speeds properly (Petr Oros) [2130992 2129902]
- ice: Fix switchdev rules book keeping (Petr Oros) [2130992 2129902]
- ice: fix access-beyond-end in the switch code (Petr Oros) [2130992 2129902]
- eth: ice: silence the GCC 12 array-bounds warning (Petr Oros) [2130992 2129902]
- ice: Expose RSS indirection tables for queue groups via ethtool (Petr Oros) [2130992 2129902]
- Revert "ice: Hide bus-info in ethtool for PRs in switchdev mode" (Petr Oros) [2130992 2129902]
- ice: remove period on argument description in ice_for_each_vf (Petr Oros) [2130992 2129902]
- ice: add a function comment for ice_cfg_mac_antispoof (Petr Oros) [2130992 2129902]
- ice: fix wording in comment for ice_reset_vf (Petr Oros) [2130992 2129902]
- ice: remove return value comment for ice_reset_all_vfs (Petr Oros) [2130992 2129902]
- ice: always check VF VSI pointer values (Petr Oros) [2130992 2129902]
- ice: add newline to dev_dbg in ice_vf_fdir_dump_info (Petr Oros) [2130992 2129902]
- ice: get switch id on switchdev devices (Petr Oros) [2130992 2129902]
- ice: return ENOSPC when exceeding ICE_MAX_CHAIN_WORDS (Petr Oros) [2130992 2129902]
- ice: introduce common helper for retrieving VSI by vsi_num (Petr Oros) [2130992 2129902]
- ice: use min_t() to make code cleaner in ice_gnss (Petr Oros) [2130992 2129902]
- ice: Add mpls+tso support (Petr Oros) [2130992 2129902]
- ice: switch: convert packet template match code to rodata (Petr Oros) [2130992 2129902]
- ice: switch: use convenience macros to declare dummy pkt templates (Petr Oros) [2130992 2129902]
- ice: switch: use a struct to pass packet template params (Petr Oros) [2130992 2129902]
- ice: switch: unobscurify bitops loop in ice_fill_adv_dummy_packet() (Petr Oros) [2130992 2129902]
- ice: switch: add and use u16[] aliases to ice_adv_lkup_elem::{h, m}_u (Petr Oros) [2130992 2129902]
- ice: Support GTP-U and GTP-C offload in switchdev (Petr Oros) [2130992 2129902]
- ice: Remove useless DMA-32 fallback configuration (Petr Oros) [2130992 2129902]
- ice: switch to napi_build_skb() (Petr Oros) [2130992 2129902]
- redhat: switch to z-stream dist tag and build targets (Jarod Wilson)
- block: avoid sign extend problem with default queue flags mask (Nico Pache) [2135813]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.6.1.rt7.216.el8_7]" date="1668168000">- [rt] build kernel-rt-4.18.0-425.6.1.rt7.216.el8_7 [2137411]
- ice: Add low latency Tx timestamp read (Petr Oros) [2136036 2092425]
- ice: introduce ice_ptp_reset_cached_phctime function (Petr Oros) [2136036 2092425]
- ice: re-arrange some static functions in ice_ptp.c (Petr Oros) [2136036 2092425]
- ice: track and warn when PHC update is late (Petr Oros) [2136036 2092425]
- ice: track Tx timestamp stats similar to other Intel drivers (Petr Oros) [2136036 2092425]
- ice: implement adjfine with mul_u64_u64_div_u64 (Petr Oros) [2136036 2092425]
- ice: Add EXTTS feature to the feature bitmap (Petr Oros) [2136036 2092425]
- math: Export mul_u64_u64_div_u64 (Petr Oros) [2136036 2092425]
- vfio/type1: Unpin zero pages (Alex Williamson) [2128515 2123015]
- net: atlantic: remove aq_nic_deinit() when resume (Íñigo Huguet) [2131935 2130839]
- net: atlantic: remove deep parameter on suspend/resume functions (Íñigo Huguet) [2131935 2130839]
- CI: Use zstream builder container (Veronika Kabatova)
- CI: Add disttag override for 8.7 (Veronika Kabatova)</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.7.1.rt7.217.el8_7]" date="1669723200">- [rt] build kernel-rt-4.18.0-425.7.1.rt7.217.el8_7 [2137411]
- ice: Add additional CSR registers to ETHTOOL_GREGS (Petr Oros) [2136513 2131024]
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps (Petr Oros) [2137270 2106964]
- i40e: Fix VF set max MTU size (Petr Oros) [2137270 2106964]
- iavf: Fix set max MTU size with port VLAN and jumbo frames (Petr Oros) [2137270 2106964]
- iavf: Fix bad page state (Petr Oros) [2137270 2106964]
- Revert "scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels" (Jarod Wilson)
- scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels (Tomas Henzl) [2139216]
- Revert "ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems" (Jarod Wilson)
- ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems (Wei Huang) [2142170 2130653]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.8.1.rt7.218.el8_7]" date="1669982400">- [rt] build kernel-rt-4.18.0-425.8.1.rt7.218.el8_7 [2137411]
- scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels (Tomas Henzl) [2139216 2134535]
- RDMA/mlx5: Set local port to one when accessing counters (Mohammad Kabat) [2141957 2077119]
- drm/mgag200: Fix PLL setup for G200_SE_A rev &gt;=4 (Jocelyn Falempe) [2140152 2130159]
- iavf: Do not restart Tx queues after reset task failure (Petr Oros) [2149081 2134005]
- iavf: Fix a crash during reset task (Petr Oros) [2149081 2134005]
- scsi: core: Allow the ALUA transitioning state enough time (Tomas Henzl) [2147374 2084250]
- scsi: core: Return BLK_STS_TRANSPORT for ALUA transitioning (Tomas Henzl) [2147374 2084250]
- i40e: Fix DMA mappings leak (Ivan Vecera) [2138205 2077847]
- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2142724 2142725] {CVE-2022-2964}
- net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2142724 2142725] {CVE-2022-2964}</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.9.1.rt7.219.el8_7]" date="1670587200">- [rt] build kernel-rt-4.18.0-425.9.1.rt7.219.el8_7 [2137411]
- Documentation/admin-guide: Document nomodeset kernel parameter (Jocelyn Falempe) [2145218 2143952]
- drm: Move nomodeset kernel parameter to the DRM subsystem (Jocelyn Falempe) [2145218 2143952]
- wait: Fix __wait_event_hrtimeout for RT/DL tasks (Derek Barbosa) [2138953 2125233]
- scsi: zfcp: Fix missing auto port scan and thus missing target ports (Tobias Huschle) [2127849 2121089]
- net: Fix return value of qdisc ingress handling on success (Ivan Vecera) [2141878 2131361]</changelog>
  <changelog author="Chris White &lt;chwhite@redhat.com&gt; [4.18.0-425.10.1.rt7.220.el8_7]" date="1671192000">- [rt] build kernel-rt-4.18.0-425.10.1.rt7.220.el8_7 [2137411]
- scsi: target: loop: Fix handling of aborted TMRs (Maurizio Lombardi) [2144583 2141713]
- ice: virtchnl rss hena support (Petr Oros) [2148130]
- ice: Fix configuring VIRTCHNL_OP_CONFIG_VSI_QUEUES with unbalanced queues (Michal Schmidt) [2142017 2137378]
- ice: Add support Flex RXD (Michal Schmidt) [2138157 2131310]
- netfilter: flowtable: fix stuck flows on cleanup due to pending work (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: add function to invoke garbage collection immediately (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: pass flowtable to nf_flow_table_iterate() (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: separate replace, destroy and stats to different workqueues (Phil Sutter) [2134084 2131370]
- x86/paravirt: Add a dummy __x86_paravirt_patch_template() function (Waiman Long) [2152206 2144161]
- x86/paravirt: Fix kABI breakage in struct pv_mmu_ops (Waiman Long) [2152206 2144161]
- drm/i915: fix TLB invalidation for Gen12 video and compute engines (Wander Lairson Costa) [2148162 2148163] {CVE-2022-4139}
- PCI: hv: Do not set PCI_COMMAND_MEMORY to reduce VM boot time (Emanuele Giuseppe Esposito) [2150912 2082836]
- iavf: Fix cached head and tail value for iavf_get_tx_pending (Stefan Assmann) [2149742 2103944]
- iavf: Fix change VF's mac address (Stefan Assmann) [2149742 2103944]
- iavf: Fix race between iavf_close and iavf_reset_task (Stefan Assmann) [2149742 2103944]
- net: ethernet: move from strlcpy with unused retval to strscpy (Stefan Assmann) [2149742 2103944]
- iavf: Fix 'tc qdisc show' listing too many queues (Stefan Assmann) [2149742 2103944]
- iavf: Fix max_rate limiting (Stefan Assmann) [2149742 2103944]
- iavf: Check for duplicate TC flower filter before parsing (Stefan Assmann) [2149742 2103944]
- iavf: Fix handling of dummy receive descriptors (Stefan Assmann) [2149742 2103944]
- iavf: Disallow changing rx/tx-frames and rx/tx-frames-irq (Stefan Assmann) [2149742 2103944]
- intel/iavf:fix repeated words in comments (Stefan Assmann) [2149742 2103944]
- intel: remove unused macros (Stefan Assmann) [2149742 2103944]
- iavf: Add waiting for response from PF in set mac (Stefan Assmann) [2149742 2103944]</changelog>
</package>
<package pkgid="173fb8da3c2f96f005e164e55086d9e087b856ea9dbf827f31ad1a7318eeb20e" name="kernel-rt-devel" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="425.13.1.rt7.223.el8_7"/>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.4.1.rt7.214.el8]" date="1665144000">- [rt] build kernel-rt-4.18.0-425.4.1.rt7.214.el8 [2067251]
- random: allow reseeding DRBG with getrandom (Daiki Ueno) [2121766]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.5.1.rt7.215.el8_7]" date="1667822400">- [rt] build kernel-rt-4.18.0-425.5.1.rt7.215.el8_7 [2137411]
- ice: Fix interface being down after reset with link-down-on-close flag on (Petr Oros) [2136216 2024110]
- ice: Fix crash by keep old cfg when update TCs more than queues (Petr Oros) [2130992 2129902]
- ice: Fix tunnel checksum offload with fragmented traffic (Petr Oros) [2130992 2129902]
- ice: handle E822 generic device ID in PLDM header (Petr Oros) [2130992 2129902]
- ice: ethtool: Prohibit improper channel config for DCB (Petr Oros) [2130992 2129902]
- ice: ethtool: advertise 1000M speeds properly (Petr Oros) [2130992 2129902]
- ice: Fix switchdev rules book keeping (Petr Oros) [2130992 2129902]
- ice: fix access-beyond-end in the switch code (Petr Oros) [2130992 2129902]
- eth: ice: silence the GCC 12 array-bounds warning (Petr Oros) [2130992 2129902]
- ice: Expose RSS indirection tables for queue groups via ethtool (Petr Oros) [2130992 2129902]
- Revert "ice: Hide bus-info in ethtool for PRs in switchdev mode" (Petr Oros) [2130992 2129902]
- ice: remove period on argument description in ice_for_each_vf (Petr Oros) [2130992 2129902]
- ice: add a function comment for ice_cfg_mac_antispoof (Petr Oros) [2130992 2129902]
- ice: fix wording in comment for ice_reset_vf (Petr Oros) [2130992 2129902]
- ice: remove return value comment for ice_reset_all_vfs (Petr Oros) [2130992 2129902]
- ice: always check VF VSI pointer values (Petr Oros) [2130992 2129902]
- ice: add newline to dev_dbg in ice_vf_fdir_dump_info (Petr Oros) [2130992 2129902]
- ice: get switch id on switchdev devices (Petr Oros) [2130992 2129902]
- ice: return ENOSPC when exceeding ICE_MAX_CHAIN_WORDS (Petr Oros) [2130992 2129902]
- ice: introduce common helper for retrieving VSI by vsi_num (Petr Oros) [2130992 2129902]
- ice: use min_t() to make code cleaner in ice_gnss (Petr Oros) [2130992 2129902]
- ice: Add mpls+tso support (Petr Oros) [2130992 2129902]
- ice: switch: convert packet template match code to rodata (Petr Oros) [2130992 2129902]
- ice: switch: use convenience macros to declare dummy pkt templates (Petr Oros) [2130992 2129902]
- ice: switch: use a struct to pass packet template params (Petr Oros) [2130992 2129902]
- ice: switch: unobscurify bitops loop in ice_fill_adv_dummy_packet() (Petr Oros) [2130992 2129902]
- ice: switch: add and use u16[] aliases to ice_adv_lkup_elem::{h, m}_u (Petr Oros) [2130992 2129902]
- ice: Support GTP-U and GTP-C offload in switchdev (Petr Oros) [2130992 2129902]
- ice: Remove useless DMA-32 fallback configuration (Petr Oros) [2130992 2129902]
- ice: switch to napi_build_skb() (Petr Oros) [2130992 2129902]
- redhat: switch to z-stream dist tag and build targets (Jarod Wilson)
- block: avoid sign extend problem with default queue flags mask (Nico Pache) [2135813]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.6.1.rt7.216.el8_7]" date="1668168000">- [rt] build kernel-rt-4.18.0-425.6.1.rt7.216.el8_7 [2137411]
- ice: Add low latency Tx timestamp read (Petr Oros) [2136036 2092425]
- ice: introduce ice_ptp_reset_cached_phctime function (Petr Oros) [2136036 2092425]
- ice: re-arrange some static functions in ice_ptp.c (Petr Oros) [2136036 2092425]
- ice: track and warn when PHC update is late (Petr Oros) [2136036 2092425]
- ice: track Tx timestamp stats similar to other Intel drivers (Petr Oros) [2136036 2092425]
- ice: implement adjfine with mul_u64_u64_div_u64 (Petr Oros) [2136036 2092425]
- ice: Add EXTTS feature to the feature bitmap (Petr Oros) [2136036 2092425]
- math: Export mul_u64_u64_div_u64 (Petr Oros) [2136036 2092425]
- vfio/type1: Unpin zero pages (Alex Williamson) [2128515 2123015]
- net: atlantic: remove aq_nic_deinit() when resume (Íñigo Huguet) [2131935 2130839]
- net: atlantic: remove deep parameter on suspend/resume functions (Íñigo Huguet) [2131935 2130839]
- CI: Use zstream builder container (Veronika Kabatova)
- CI: Add disttag override for 8.7 (Veronika Kabatova)</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.7.1.rt7.217.el8_7]" date="1669723200">- [rt] build kernel-rt-4.18.0-425.7.1.rt7.217.el8_7 [2137411]
- ice: Add additional CSR registers to ETHTOOL_GREGS (Petr Oros) [2136513 2131024]
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps (Petr Oros) [2137270 2106964]
- i40e: Fix VF set max MTU size (Petr Oros) [2137270 2106964]
- iavf: Fix set max MTU size with port VLAN and jumbo frames (Petr Oros) [2137270 2106964]
- iavf: Fix bad page state (Petr Oros) [2137270 2106964]
- Revert "scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels" (Jarod Wilson)
- scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels (Tomas Henzl) [2139216]
- Revert "ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems" (Jarod Wilson)
- ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems (Wei Huang) [2142170 2130653]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.8.1.rt7.218.el8_7]" date="1669982400">- [rt] build kernel-rt-4.18.0-425.8.1.rt7.218.el8_7 [2137411]
- scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels (Tomas Henzl) [2139216 2134535]
- RDMA/mlx5: Set local port to one when accessing counters (Mohammad Kabat) [2141957 2077119]
- drm/mgag200: Fix PLL setup for G200_SE_A rev &gt;=4 (Jocelyn Falempe) [2140152 2130159]
- iavf: Do not restart Tx queues after reset task failure (Petr Oros) [2149081 2134005]
- iavf: Fix a crash during reset task (Petr Oros) [2149081 2134005]
- scsi: core: Allow the ALUA transitioning state enough time (Tomas Henzl) [2147374 2084250]
- scsi: core: Return BLK_STS_TRANSPORT for ALUA transitioning (Tomas Henzl) [2147374 2084250]
- i40e: Fix DMA mappings leak (Ivan Vecera) [2138205 2077847]
- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2142724 2142725] {CVE-2022-2964}
- net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2142724 2142725] {CVE-2022-2964}</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.9.1.rt7.219.el8_7]" date="1670587200">- [rt] build kernel-rt-4.18.0-425.9.1.rt7.219.el8_7 [2137411]
- Documentation/admin-guide: Document nomodeset kernel parameter (Jocelyn Falempe) [2145218 2143952]
- drm: Move nomodeset kernel parameter to the DRM subsystem (Jocelyn Falempe) [2145218 2143952]
- wait: Fix __wait_event_hrtimeout for RT/DL tasks (Derek Barbosa) [2138953 2125233]
- scsi: zfcp: Fix missing auto port scan and thus missing target ports (Tobias Huschle) [2127849 2121089]
- net: Fix return value of qdisc ingress handling on success (Ivan Vecera) [2141878 2131361]</changelog>
  <changelog author="Chris White &lt;chwhite@redhat.com&gt; [4.18.0-425.10.1.rt7.220.el8_7]" date="1671192000">- [rt] build kernel-rt-4.18.0-425.10.1.rt7.220.el8_7 [2137411]
- scsi: target: loop: Fix handling of aborted TMRs (Maurizio Lombardi) [2144583 2141713]
- ice: virtchnl rss hena support (Petr Oros) [2148130]
- ice: Fix configuring VIRTCHNL_OP_CONFIG_VSI_QUEUES with unbalanced queues (Michal Schmidt) [2142017 2137378]
- ice: Add support Flex RXD (Michal Schmidt) [2138157 2131310]
- netfilter: flowtable: fix stuck flows on cleanup due to pending work (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: add function to invoke garbage collection immediately (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: pass flowtable to nf_flow_table_iterate() (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: separate replace, destroy and stats to different workqueues (Phil Sutter) [2134084 2131370]
- x86/paravirt: Add a dummy __x86_paravirt_patch_template() function (Waiman Long) [2152206 2144161]
- x86/paravirt: Fix kABI breakage in struct pv_mmu_ops (Waiman Long) [2152206 2144161]
- drm/i915: fix TLB invalidation for Gen12 video and compute engines (Wander Lairson Costa) [2148162 2148163] {CVE-2022-4139}
- PCI: hv: Do not set PCI_COMMAND_MEMORY to reduce VM boot time (Emanuele Giuseppe Esposito) [2150912 2082836]
- iavf: Fix cached head and tail value for iavf_get_tx_pending (Stefan Assmann) [2149742 2103944]
- iavf: Fix change VF's mac address (Stefan Assmann) [2149742 2103944]
- iavf: Fix race between iavf_close and iavf_reset_task (Stefan Assmann) [2149742 2103944]
- net: ethernet: move from strlcpy with unused retval to strscpy (Stefan Assmann) [2149742 2103944]
- iavf: Fix 'tc qdisc show' listing too many queues (Stefan Assmann) [2149742 2103944]
- iavf: Fix max_rate limiting (Stefan Assmann) [2149742 2103944]
- iavf: Check for duplicate TC flower filter before parsing (Stefan Assmann) [2149742 2103944]
- iavf: Fix handling of dummy receive descriptors (Stefan Assmann) [2149742 2103944]
- iavf: Disallow changing rx/tx-frames and rx/tx-frames-irq (Stefan Assmann) [2149742 2103944]
- intel/iavf:fix repeated words in comments (Stefan Assmann) [2149742 2103944]
- intel: remove unused macros (Stefan Assmann) [2149742 2103944]
- iavf: Add waiting for response from PF in set mac (Stefan Assmann) [2149742 2103944]</changelog>
  <changelog author="Chris White &lt;chwhite@redhat.com&gt; [4.18.0-425.11.1.rt7.221.el8_7]" date="1673352000">- [rt] build kernel-rt-4.18.0-425.11.1.rt7.221.el8_7 [2159806]
- NFSD: Protect against send buffer overflow in NFSv3 READ (Scott Mayhew) [2143174] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv2 READ (Scott Mayhew) [2143174] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv3 READDIR (Scott Mayhew) [2143174] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv2 READDIR (Scott Mayhew) [2143174] {CVE-2022-43945}
- SUNRPC: Fix svcxdr_init_encode's buflen calculation (Scott Mayhew) [2143174] {CVE-2022-43945}
- SUNRPC: Fix svcxdr_init_decode's end-of-buffer calculation (Scott Mayhew) [2143174] {CVE-2022-43945}
- panic, kexec: make __crash_kexec() NMI safe (Valentin Schneider) [2139580]
- kexec: turn all kexec_mutex acquisitions into trylocks (Valentin Schneider) [2139580]
- kexec: move locking into do_kexec_load (Valentin Schneider) [2139580]
- vdpa/mlx5: re-create forwarding rules after mac modified (Laurent Vivier) [2152912]
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry (Waiman Long) [2153653]
- irq: Call tick_irq_enter() inside HARDIRQ_OFFSET (Waiman Long) [2153653]
- irqtime: Move irqtime entry accounting after irq offset incrementation (Waiman Long) [2153653]
- sched/vtime: Consolidate IRQ time accounting (Waiman Long) [2153653]
- s390/vtime: Use the generic IRQ entry accounting (Waiman Long) [2153653]
- sched/cputime: Remove symbol exports from IRQ time accounting (Waiman Long) [2153653]
- genirq/irqdomain: Don't try to free an interrupt that has no mapping (Waiman Long) [2153653]
- genirq: Provide __irq_enter/exit_raw() (Waiman Long) [2153653]
- powerpc/time: Only set CONFIG_ARCH_HAS_SCALED_CPUTIME on PPC64 (Waiman Long) [2153653]
- powerpc/time: isolate scaled cputime accounting in dedicated functions. (Waiman Long) [2153653]
- PCI: hv: Fix synchronization between channel callback and hv_pci_bus_exit() (Mohammed Gamal) [2155280]
- PCI: hv: Fix synchronization between channel callback and hv_compose_msi_msg() (Mohammed Gamal) [2155280]
- PCI: hv: Use vmbus_requestor to generate transaction IDs for VMbus hardening (Mohammed Gamal) [2155280]
- net/mlx5e: TC, Reject forwarding from internal port to internal port (Mohammad Kabat) [2141959 2131345]
- hv_netvsc: Fix race between VF offering and VF association message from host (Mohammed Gamal) [2155272]
- x86/mce: Reduce number of machine checks taken during recovery (Prarit Bhargava) [2137592 2104388]
- cgroup/cpuset: Reduce cpuset_rwsem writer latency (Waiman Long) [2153108]
- rcu/exp: Mark current CPU as exp-QS in IPI loop second pass (Waiman Long) [2153108]
- rcu: Always inline rcu_dynticks_task*_{enter,exit}() (Waiman Long) [2153108]
- rcu: Fix existing exp request check in sync_sched_exp_online_cleanup() (Waiman Long) [2153108]
- rcu: Fix macro name CONFIG_TASKS_RCU_TRACE (Waiman Long) [2153108]
- rcu: Fix stall-warning deadlock due to non-release of rcu_node -&gt;lock (Waiman Long) [2153108]
- rcu: Fix to include first blocked task in stall warning (Waiman Long) [2153108]
- cgroup: Use cgroup_attach_{lock,unlock}() from cgroup_attach_task_all() (Waiman Long) [2153108]
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all() (Waiman Long) [2153108]
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock (Waiman Long) [2153108]
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree (Waiman Long) [2153108]
- cgroup/cpuset: Fix a race between cpuset_attach() and cpu hotplug (Waiman Long) [2153108]
- cgroup: reduce dependency on cgroup_mutex (Waiman Long) [2153108]
- sunrpc: Set sk_allocation to GFP_NOFS to avoid using current-&gt;task_frag. (Guillaume Nault) [2153230]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.12.1.rt7.222.el8_7]" date="1674129600">- [rt] build kernel-rt-4.18.0-425.12.1.rt7.222.el8_7 [2159806]
- x86/fpu: Prevent FPU state corruption (Oleksandr Natalenko) [2134586 2130890]
- x86/fpu: Drop fpregs lock before inheriting FPU permissions (Eder Zulian) [2154460 2153549]
- kernel-doc: fix undefined args variable (Jan Stancek) [2157905 2134954]
- mm: memcontrol: fix potential oom_lock recursion deadlock (Waiman Long) [2157922 2138886]
- memcg: prohibit unconditional exceeding the limit of dying tasks (Waiman Long) [2157922 2138886]
- mm, oom: do not trigger out_of_memory from the #PF (Waiman Long) [2157922 2138886]
- mm, oom: pagefault_out_of_memory: don't force global OOM for dying tasks (Waiman Long) [2157922 2138886]
- mm: memcontrol: don't count limit-setting reclaim as memory pressure (Waiman Long) [2157922 2138886]
- KVM: s390: vsie: Fix the initialization of the epoch extension (epdx) field (Thomas Huth) [2158813 2151854]
- net: mana: Fix race on per-CQ variable napi work_done (Emanuele Giuseppe Esposito) [2155437 2151722]
- mei: me: add adler lake point S DID (Prarit Bhargava) [2141783 2141602]
- PCI: hv: Only reuse existing IRTE allocation for Multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix the definition of vector in hv_compose_msi_msg() (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix interrupt mapping for multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Reuse existing IRTE allocation in compose_msi_msg() (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix hv_arch_irq_unmask() for multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix multi-MSI to allow more than one MSI vector (Emanuele Giuseppe Esposito) [2155289 2100275]
- drm/ast: Support multiple outputs (Jarod Wilson) [2149287 2147553]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.13.1.rt7.223.el8_7]" date="1675339200">- [rt] build kernel-rt-4.18.0-425.13.1.rt7.223.el8_7 [2159806]
- mm/cgroup/reclaim: fix dirty pages throttling on cgroup v1 (Waiman Long) [2160221]
- mm: vmscan: remove deadlock due to throttling failing to make progress (Waiman Long) [2160221]
- mm: vmscan: reduce throttling due to a failure to make progress -fix (Waiman Long) [2160221]
- mm: vmscan: Reduce throttling due to a failure to make progress (Waiman Long) [2160221]
- mm/vmscan: delay waking of tasks throttled on NOPROGRESS (Waiman Long) [2160221]
- mm/vmscan: increase the timeout if page reclaim is not making progress (Waiman Long) [2160221]
- mm/vmscan: centralise timeout values for reclaim_throttle (Waiman Long) [2160221]
- mm/page_alloc: remove the throttling logic from the page allocator (Waiman Long) [2160221]
- mm/writeback: throttle based on page writeback instead of congestion (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim when no progress is being made (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim and compaction when too may pages are isolated (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim until some writeback completes if congested (Waiman Long) [2160221]
- mm/vmscan.c: delete or fix duplicated words (Waiman Long) [2160221]
- mm,page_alloc: PF_WQ_WORKER threads must sleep at should_reclaim_retry() (Nico Pache) [2160221]
- ceph: avoid putting the realm twice when decoding snaps fails (Xiubo Li) [2155797 2139881]
- mm/mremap: hold the rmap lock in write mode when moving page table entries. (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap: use pmd/pud_poplulate to update page table entries (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap: don't enable optimized PUD move if page table levels is 2 (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap: convert huge PUD move to separate helper (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap: fix BUILD_BUG_ON() error in get_extent (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap.c: fix extent calculation (Waiman Long) [2140950] {CVE-2022-41222}
- x86: mremap speedup - Enable HAVE_MOVE_PUD (Waiman Long) [2140950] {CVE-2022-41222}
- mm: speedup mremap on 1GB or larger regions (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap: start addresses are properly aligned (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap: calculate extent in one place (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap: it is sure to have enough space when extent meets requirement (Waiman Long) [2140950] {CVE-2022-41222}
- s390/boot: add secure boot trailer (Tobias Huschle) [2151530 2141967]
- i40e: Fix VF hang when reset is triggered on another VF (Ivan Vecera) [2160460 2103801]
- i2c: ismt: Fix an out-of-bounds bug in ismt_access() (Prarit Bhargava) [2154388 2119066] {CVE-2022-2873}
- iavf: schedule watchdog immediately when changing primary MAC (Michal Schmidt) [2163257 2152493]
- iavf: Move netdev_update_features() into watchdog task (Michal Schmidt) [2163257 2152493]
- iavf: fix temporary deadlock and failure to set MAC address (Michal Schmidt) [2163257 2152493]
- iavf: Fix error handling in iavf_init_module() (Michal Schmidt) [2163257 2152493]
- iommu/vt-d: Clean up si_domain in the init_dmars() error path (Jerry Snitselaar) [2149474 2118428]
- x86/pci/xen: Use msi_msg shadow structs (Jerry Snitselaar) [2149474 2118428]
- iommu/intel: Use msi_msg shadow structs (Jerry Snitselaar) [2149474 2118428]
- PCI: MSI: Fix Kconfig dependencies for PCI_MSI_ARCH_FALLBACKS (Jerry Snitselaar) [2149474 2118428]
- x86/apic/msi: Unbreak DMAR and HPET MSI (Jerry Snitselaar) [2149474 2118428]
- iommu/amd: Remove domain search for PCI/MSI (Jerry Snitselaar) [2149474 2118428]
- iommu/vt-d: Remove domain search for PCI/MSI[X] (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Make most MSI ops XEN private (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Cleanup the arch_*_msi_irqs() leftovers (Jerry Snitselaar) [2149474 2118428]
- PCI/MSI: Make arch_.*_msi_irq[s] fallbacks selectable (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Wrap XEN MSI management into irqdomain (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Consolidate XEN-MSI init (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Rework MSI teardown (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Make xen_msi_init() static and rename it to xen_hvm_msi_init() (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Move apic_post_init() invocation to one place (Jerry Snitselaar) [2149474 2118428]
- x86/msi: Use generic MSI domain ops (Jerry Snitselaar) [2149474 2118428]
- x86/msi: Remove pointless vcpu_affinity callback (Jerry Snitselaar) [2149474 2118428]
- iommu/vt-d: Fix compile error with CONFIG_PCI_ATS not set (Myron Stowe) [2149474 2118428]
- iommu/vt-d: Cure VF irqdomain hickup (Myron Stowe) [2149474 2118428]
- x86/pci: Set default irq domain in pcibios_add_device() (Myron Stowe) [2149474 2118428]
- iommm/amd: Store irq domain in struct device (Myron Stowe) [2149474 2118428]
- iommm/vt-d: Store irq domain in struct device (Myron Stowe) [2149474 2118428]
- PCI/MSI: Provide pci_dev_has_special_msi_domain() helper (Myron Stowe) [2149474 2118428]
- x86/msi: Consolidate MSI allocation (Myron Stowe) [2149474 2118428]
- PCI/MSI: Rework pci_msi_domain_calc_hwirq() (Myron Stowe) [2149474 2118428]
- x86/irq: Consolidate UV domain allocation (Myron Stowe) [2149474 2118428]
- x86/irq: Consolidate DMAR irq allocation (Myron Stowe) [2149474 2118428]
- x86_ioapic_Consolidate_IOAPIC_allocation (Myron Stowe) [2149474 2118428]
- x86/msi: Consolidate HPET allocation (Myron Stowe) [2149474 2118428]
- iommu/irq_remapping: Consolidate irq domain lookup (Myron Stowe) [2149474 2118428]
- iommu/amd: Consolidate irq domain getter (Myron Stowe) [2149474 2118428]
- iommu/vt-d: Consolidate irq domain getter (Myron Stowe) [2149474 2118428]
- x86/irq: Add allocation type for parent domain retrieval (Myron Stowe) [2149474 2118428]
- irqdomain: Export irq_domain_update_bus_token (Myron Stowe) [2149474 2118428]
- gitlab-ci: use CI templates from production branch (Michael Hofmann)
- iavf: remove INITIAL_MAC_SET to allow gARP to work properly (Stefan Assmann) [2149745 1938635]
- Revert "scsi: iscsi: ql4xxx: Use per-session workqueue for unbinding" (Chris Leech) [2152734 2122624]
- Revert "scsi: iscsi: Use the session workqueue for recovery" (Chris Leech) [2152734 2122624]
- arm64/bpf: Remove 128MB limit for BPF JIT programs (Yauheni Kaliuta) [2152138 2140163]
- bpf: Define bpf_jit_alloc_exec_limit for arm64 JIT (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: add `type` and `data` fields (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: use `ex` for `exception_table_entry` (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: make fixup_exception() return bool (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: consolidate definitions (Yauheni Kaliuta) [2152138 2140163]
- arm64: kvm: use kvm_exception_table_entry (Yauheni Kaliuta) [2152138 2140163]
- be2net: Fix buffer overflow in be_get_module_eeprom (Josef Oskera) [2160182 2126917]
- sched: Switch to upstream migrate disable code (Crystal Wood) [2132062]
- tick: Fix timer storm since introduction of timersd (Valentin Schneider) [2127204]
- softirq: Use a dedicated thread for timer wakeups. (Valentin Schneider) [2127204]</changelog>
</package>
<package pkgid="998920b2be8f1b959c47fa5f14336b8ccbab3db44e96741ed5d72a518e6c124d" name="kernel-rt-devel" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="425.19.2.rt7.230.el8_7"/>
  <changelog author="Chris White &lt;chwhite@redhat.com&gt; [4.18.0-425.11.1.rt7.221.el8_7]" date="1673352000">- [rt] build kernel-rt-4.18.0-425.11.1.rt7.221.el8_7 [2159806]
- NFSD: Protect against send buffer overflow in NFSv3 READ (Scott Mayhew) [2143174] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv2 READ (Scott Mayhew) [2143174] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv3 READDIR (Scott Mayhew) [2143174] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv2 READDIR (Scott Mayhew) [2143174] {CVE-2022-43945}
- SUNRPC: Fix svcxdr_init_encode's buflen calculation (Scott Mayhew) [2143174] {CVE-2022-43945}
- SUNRPC: Fix svcxdr_init_decode's end-of-buffer calculation (Scott Mayhew) [2143174] {CVE-2022-43945}
- panic, kexec: make __crash_kexec() NMI safe (Valentin Schneider) [2139851]
- kexec: turn all kexec_mutex acquisitions into trylocks (Valentin Schneider) [2139580]
- kexec: move locking into do_kexec_load (Valentin Schneider) [2139580]
- vdpa/mlx5: re-create forwarding rules after mac modified (Laurent Vivier) [2152912]
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry (Waiman Long) [2153653]
- irq: Call tick_irq_enter() inside HARDIRQ_OFFSET (Waiman Long) [2153653]
- irqtime: Move irqtime entry accounting after irq offset incrementation (Waiman Long) [2153653]
- sched/vtime: Consolidate IRQ time accounting (Waiman Long) [2153653]
- s390/vtime: Use the generic IRQ entry accounting (Waiman Long) [2153653]
- sched/cputime: Remove symbol exports from IRQ time accounting (Waiman Long) [2153653]
- genirq/irqdomain: Don't try to free an interrupt that has no mapping (Waiman Long) [2153653]
- genirq: Provide __irq_enter/exit_raw() (Waiman Long) [2153653]
- powerpc/time: Only set CONFIG_ARCH_HAS_SCALED_CPUTIME on PPC64 (Waiman Long) [2153653]
- powerpc/time: isolate scaled cputime accounting in dedicated functions. (Waiman Long) [2153653]
- PCI: hv: Fix synchronization between channel callback and hv_pci_bus_exit() (Mohammed Gamal) [2155280]
- PCI: hv: Fix synchronization between channel callback and hv_compose_msi_msg() (Mohammed Gamal) [2155280]
- PCI: hv: Use vmbus_requestor to generate transaction IDs for VMbus hardening (Mohammed Gamal) [2155280]
- net/mlx5e: TC, Reject forwarding from internal port to internal port (Mohammad Kabat) [2141959 2131345]
- hv_netvsc: Fix race between VF offering and VF association message from host (Mohammed Gamal) [2155272]
- x86/mce: Reduce number of machine checks taken during recovery (Prarit Bhargava) [2137592 2104388]
- cgroup/cpuset: Reduce cpuset_rwsem writer latency (Waiman Long) [2153108]
- rcu/exp: Mark current CPU as exp-QS in IPI loop second pass (Waiman Long) [2153108]
- rcu: Always inline rcu_dynticks_task*_{enter,exit}() (Waiman Long) [2153108]
- rcu: Fix existing exp request check in sync_sched_exp_online_cleanup() (Waiman Long) [2153108]
- rcu: Fix macro name CONFIG_TASKS_RCU_TRACE (Waiman Long) [2153108]
- rcu: Fix stall-warning deadlock due to non-release of rcu_node -&gt;lock (Waiman Long) [2153108]
- rcu: Fix to include first blocked task in stall warning (Waiman Long) [2153108]
- cgroup: Use cgroup_attach_{lock,unlock}() from cgroup_attach_task_all() (Waiman Long) [2153108]
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all() (Waiman Long) [2153108]
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock (Waiman Long) [2153108]
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree (Waiman Long) [2153108]
- cgroup/cpuset: Fix a race between cpuset_attach() and cpu hotplug (Waiman Long) [2153108]
- cgroup: reduce dependency on cgroup_mutex (Waiman Long) [2153108]
- sunrpc: Set sk_allocation to GFP_NOFS to avoid using current-&gt;task_frag. (Guillaume Nault) [2153230]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.12.1.rt7.222.el8_7]" date="1674129600">- [rt] build kernel-rt-4.18.0-425.12.1.rt7.222.el8_7 [2159806]
- x86/fpu: Prevent FPU state corruption (Oleksandr Natalenko) [2134586 2130890]
- x86/fpu: Drop fpregs lock before inheriting FPU permissions (Eder Zulian) [2154469 2153549]
- kernel-doc: fix undefined args variable (Jan Stancek) [2157905 2134954]
- mm: memcontrol: fix potential oom_lock recursion deadlock (Waiman Long) [2157922 2138886]
- memcg: prohibit unconditional exceeding the limit of dying tasks (Waiman Long) [2157922 2138886]
- mm, oom: do not trigger out_of_memory from the #PF (Waiman Long) [2157922 2138886]
- mm, oom: pagefault_out_of_memory: don't force global OOM for dying tasks (Waiman Long) [2157922 2138886]
- mm: memcontrol: don't count limit-setting reclaim as memory pressure (Waiman Long) [2157922 2138886]
- KVM: s390: vsie: Fix the initialization of the epoch extension (epdx) field (Thomas Huth) [2158813 2151854]
- net: mana: Fix race on per-CQ variable napi work_done (Emanuele Giuseppe Esposito) [2155437 2151722]
- mei: me: add adler lake point S DID (Prarit Bhargava) [2141783 2141602]
- PCI: hv: Only reuse existing IRTE allocation for Multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix the definition of vector in hv_compose_msi_msg() (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix interrupt mapping for multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Reuse existing IRTE allocation in compose_msi_msg() (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix hv_arch_irq_unmask() for multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix multi-MSI to allow more than one MSI vector (Emanuele Giuseppe Esposito) [2155289 2100275]
- drm/ast: Support multiple outputs (Jarod Wilson) [2149287 2147553]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.13.1.rt7.223.el8_7]" date="1675339200">- [rt] build kernel-rt-4.18.0-425.13.1.rt7.223.el8_7 [2159806]
- mm/cgroup/reclaim: fix dirty pages throttling on cgroup v1 (Waiman Long) [2160221]
- mm: vmscan: remove deadlock due to throttling failing to make progress (Waiman Long) [2160221]
- mm: vmscan: reduce throttling due to a failure to make progress -fix (Waiman Long) [2160221]
- mm: vmscan: Reduce throttling due to a failure to make progress (Waiman Long) [2160221]
- mm/vmscan: delay waking of tasks throttled on NOPROGRESS (Waiman Long) [2160221]
- mm/vmscan: increase the timeout if page reclaim is not making progress (Waiman Long) [2160221]
- mm/vmscan: centralise timeout values for reclaim_throttle (Waiman Long) [2160221]
- mm/page_alloc: remove the throttling logic from the page allocator (Waiman Long) [2160221]
- mm/writeback: throttle based on page writeback instead of congestion (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim when no progress is being made (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim and compaction when too may pages are isolated (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim until some writeback completes if congested (Waiman Long) [2160221]
- mm/vmscan.c: delete or fix duplicated words (Waiman Long) [2160221]
- mm,page_alloc: PF_WQ_WORKER threads must sleep at should_reclaim_retry() (Nico Pache) [2160221]
- ceph: avoid putting the realm twice when decoding snaps fails (Xiubo Li) [2155797 2139881]
- mm/mremap: hold the rmap lock in write mode when moving page table entries. (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap: use pmd/pud_poplulate to update page table entries (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap: don't enable optimized PUD move if page table levels is 2 (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap: convert huge PUD move to separate helper (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap: fix BUILD_BUG_ON() error in get_extent (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap.c: fix extent calculation (Waiman Long) [2140950] {CVE-2022-41222}
- x86: mremap speedup - Enable HAVE_MOVE_PUD (Waiman Long) [2140950] {CVE-2022-41222}
- mm: speedup mremap on 1GB or larger regions (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap: start addresses are properly aligned (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap: calculate extent in one place (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap: it is sure to have enough space when extent meets requirement (Waiman Long) [2140950] {CVE-2022-41222}
- s390/boot: add secure boot trailer (Tobias Huschle) [2151530 2141967]
- i40e: Fix VF hang when reset is triggered on another VF (Ivan Vecera) [2160460 2103801]
- i2c: ismt: Fix an out-of-bounds bug in ismt_access() (Prarit Bhargava) [2154388 2119066] {CVE-2022-2873}
- iavf: schedule watchdog immediately when changing primary MAC (Michal Schmidt) [2163257 2152493]
- iavf: Move netdev_update_features() into watchdog task (Michal Schmidt) [2163257 2152493]
- iavf: fix temporary deadlock and failure to set MAC address (Michal Schmidt) [2163257 2152493]
- iavf: Fix error handling in iavf_init_module() (Michal Schmidt) [2163257 2152493]
- iommu/vt-d: Clean up si_domain in the init_dmars() error path (Jerry Snitselaar) [2149474 2118428]
- x86/pci/xen: Use msi_msg shadow structs (Jerry Snitselaar) [2149474 2118428]
- iommu/intel: Use msi_msg shadow structs (Jerry Snitselaar) [2149474 2118428]
- PCI: MSI: Fix Kconfig dependencies for PCI_MSI_ARCH_FALLBACKS (Jerry Snitselaar) [2149474 2118428]
- x86/apic/msi: Unbreak DMAR and HPET MSI (Jerry Snitselaar) [2149474 2118428]
- iommu/amd: Remove domain search for PCI/MSI (Jerry Snitselaar) [2149474 2118428]
- iommu/vt-d: Remove domain search for PCI/MSI[X] (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Make most MSI ops XEN private (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Cleanup the arch_*_msi_irqs() leftovers (Jerry Snitselaar) [2149474 2118428]
- PCI/MSI: Make arch_.*_msi_irq[s] fallbacks selectable (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Wrap XEN MSI management into irqdomain (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Consolidate XEN-MSI init (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Rework MSI teardown (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Make xen_msi_init() static and rename it to xen_hvm_msi_init() (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Move apic_post_init() invocation to one place (Jerry Snitselaar) [2149474 2118428]
- x86/msi: Use generic MSI domain ops (Jerry Snitselaar) [2149474 2118428]
- x86/msi: Remove pointless vcpu_affinity callback (Jerry Snitselaar) [2149474 2118428]
- iommu/vt-d: Fix compile error with CONFIG_PCI_ATS not set (Myron Stowe) [2149474 2118428]
- iommu/vt-d: Cure VF irqdomain hickup (Myron Stowe) [2149474 2118428]
- x86/pci: Set default irq domain in pcibios_add_device() (Myron Stowe) [2149474 2118428]
- iommm/amd: Store irq domain in struct device (Myron Stowe) [2149474 2118428]
- iommm/vt-d: Store irq domain in struct device (Myron Stowe) [2149474 2118428]
- PCI/MSI: Provide pci_dev_has_special_msi_domain() helper (Myron Stowe) [2149474 2118428]
- x86/msi: Consolidate MSI allocation (Myron Stowe) [2149474 2118428]
- PCI/MSI: Rework pci_msi_domain_calc_hwirq() (Myron Stowe) [2149474 2118428]
- x86/irq: Consolidate UV domain allocation (Myron Stowe) [2149474 2118428]
- x86/irq: Consolidate DMAR irq allocation (Myron Stowe) [2149474 2118428]
- x86_ioapic_Consolidate_IOAPIC_allocation (Myron Stowe) [2149474 2118428]
- x86/msi: Consolidate HPET allocation (Myron Stowe) [2149474 2118428]
- iommu/irq_remapping: Consolidate irq domain lookup (Myron Stowe) [2149474 2118428]
- iommu/amd: Consolidate irq domain getter (Myron Stowe) [2149474 2118428]
- iommu/vt-d: Consolidate irq domain getter (Myron Stowe) [2149474 2118428]
- x86/irq: Add allocation type for parent domain retrieval (Myron Stowe) [2149474 2118428]
- irqdomain: Export irq_domain_update_bus_token (Myron Stowe) [2149474 2118428]
- gitlab-ci: use CI templates from production branch (Michael Hofmann)
- iavf: remove INITIAL_MAC_SET to allow gARP to work properly (Stefan Assmann) [2149745 1938635]
- Revert "scsi: iscsi: ql4xxx: Use per-session workqueue for unbinding" (Chris Leech) [2152734 2122624]
- Revert "scsi: iscsi: Use the session workqueue for recovery" (Chris Leech) [2152734 2122624]
- arm64/bpf: Remove 128MB limit for BPF JIT programs (Yauheni Kaliuta) [2152138 2140163]
- bpf: Define bpf_jit_alloc_exec_limit for arm64 JIT (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: add `type` and `data` fields (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: use `ex` for `exception_table_entry` (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: make fixup_exception() return bool (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: consolidate definitions (Yauheni Kaliuta) [2152138 2140163]
- arm64: kvm: use kvm_exception_table_entry (Yauheni Kaliuta) [2152138 2140163]
- be2net: Fix buffer overflow in be_get_module_eeprom (Josef Oskera) [2160182 2126917]
- sched: Switch to upstream migrate disable code (Crystal Wood) [2132062]
- tick: Fix timer storm since introduction of timersd (Valentin Schneider) [2127204]
- softirq: Use a dedicated thread for timer wakeups. (Valentin Schneider) [2127204]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.14.1.rt7.224.el8_7]" date="1676030400">- [rt] build kernel-rt-4.18.0-425.14.1.rt7.224.el8_7 [2172278]
- ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems (Wei Huang) [2142170 2130653]
- KVM: x86: nSVM: implement nested LBR virtualization (Emanuele Giuseppe Esposito) [2166362 2155149]
- KVM: x86: nSVM: correctly virtualize LBR msrs when L2 is running (Emanuele Giuseppe Esposito) [2166362 2155149]
- kvm: x86: SVM: use vmcb* instead of svm-&gt;vmcb where it makes sense (Emanuele Giuseppe Esposito) [2166362 2155149]
- KVM: x86: nSVM: implement nested VMLOAD/VMSAVE (Emanuele Giuseppe Esposito) [2166362 2155149]
- IB/iser: Fix login with authentication (Kamal Heib) [2161750 2120676]
- act_mirred: use the backlog for nested calls to mirred ingress (Davide Caratti) [2164648 2131339] {CVE-2022-4269}
- net/sched: act_mirred: better wording on protection against excessive stack growth (Davide Caratti) [2164648 2131339] {CVE-2022-4269}
- redhat/configs: Set CONFIG_X86_AMD_PSTATE to 'm' (Prarit Bhargava) [2151275 2145246]
- KVM: x86: smm: preserve interrupt shadow in SMRAM (Maxim Levitsky) [2166368 2097144]
- KVM: x86: SVM: don't save SVM state to SMRAM when VM is not long mode capable (Maxim Levitsky) [2166368 2097144]
- KVM: x86: SVM: use smram structs (Maxim Levitsky) [2166368 2097144]
- KVM: svm: drop explicit return value of kvm_vcpu_map (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: use smram struct for 64 bit smram load/restore (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: use smram struct for 32 bit smram load/restore (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: use smram structs in the common code (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: add structs for KVM's smram layout (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: check for failures on smm entry (Maxim Levitsky) [2166368 2097144]
- KVM: x86: do not go through ctxt-&gt;ops when emulating rsm (Maxim Levitsky) [2166368 2097144]
- KVM: x86: move SMM exit to a new file (Maxim Levitsky) [2166368 2097144]
- KVM: x86: move SMM entry to a new file (Maxim Levitsky) [2166368 2097144]
- KVM: x86: start moving SMM-related functions to new files (Maxim Levitsky) [2166368 2097144]
- bug: introduce ASSERT_STRUCT_OFFSET (Maxim Levitsky) [2166368 2097144]
- KVM: x86: Rename and expose helper to detect if INIT/SIPI are allowed (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: number of GPRs in the SMRAM image depends on the image format (Maxim Levitsky) [2166368 2097144]
- KVM: x86: emulator: update the emulation mode after CR0 write (Maxim Levitsky) [2166368 2097144]
- KVM: x86: emulator: update the emulation mode after rsm (Maxim Levitsky) [2166368 2097144]
- KVM: x86: emulator: introduce emulator_recalc_and_set_mode (Maxim Levitsky) [2166368 2097144]
- KVM: x86: emulator: em_sysexit should update ctxt-&gt;mode (Maxim Levitsky) [2166368 2097144]
- KVM: x86: Bug the VM if the emulator accesses a non-existent GPR (Maxim Levitsky) [2166368 2097144]
- \KVM: x86: Reduce the number of emulator GPRs to '8' for 32-bit KVM (Maxim Levitsky) [2166368 2097144]
- KVM: x86: Use 16-bit fields to track dirty/valid emulator GPRs (Maxim Levitsky) [2166368 2097144]
- KVM: x86: Omit VCPU_REGS_RIP from emulator's _regs array (Maxim Levitsky) [2166368 2097144]
- \KVM: x86: Harden _regs accesses to guard against buggy input (Maxim Levitsky) [2166368 2097144]
- KVM: x86: Grab regs_dirty in local 'unsigned long' (Maxim Levitsky) [2166368 2097144]
- proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152577 2152578] {CVE-2022-4378}
- proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152577 2152578] {CVE-2022-4378}</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.15.1.rt7.225.el8_7]" date="1676548800">- [rt] build kernel-rt-4.18.0-425.15.1.rt7.225.el8_7 [2172278]
- net/mlx5e: Fix use-after-free when reverting termination table (Amir Tzin) [2167640 2112927]
- net/mlx5: Do not query pci info while pci disabled (Amir Tzin) [2167645 2129249]
- x86/fpu: Fix copy_xstate_to_uabi() to copy init states correctly (Dean Nelson) [2168384 2122850]
- x86/fpu: Exclude dynamic states from init_fpstate (Dean Nelson) [2168384 2122850]
- x86/fpu: Fix the init_fpstate size check with the actual size (Dean Nelson) [2168384 2122850]
- x86/fpu: Configure init_fpstate attributes orderly (Dean Nelson) [2168384 2122850]
- x86/fpu/xstate: Fix the ARCH_REQ_XCOMP_PERM implementation (Dean Nelson) [2168384 2122850]
- net/mlx5: E-Switch, properly handle ingress tagged packets on VST (Amir Tzin) [2166665 2096109]
- cpuhotplug: Fix KABI breakage (Prarit Bhargava) [2162763 2156529]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.16.1.rt7.226.el8_7]" date="1677153600">- [rt] build kernel-rt-4.18.0-425.16.1.rt7.226.el8_7 [2172278]
- ipv6: fix panic when fib_lookup_arg-&gt;result is fib6_info (Jiri Benc) [2167602 2140599]
- ceph: blocklist the kclient when receiving corrupted snap trace (Xiubo Li) [2168896 2162414]
- ceph: move mount state enum to super.h (Xiubo Li) [2168896 2162414]
- s390/kexec: fix ipl report address for kdump (Tobias Huschle) [2166296 2161328]
- mm, compaction: fix fast_isolate_around() to stay within boundaries (Daniel Vacek) [2170576 2149309]
- scsi: storvsc: Fix swiotlb bounce buffer leak in confidential VM (Emanuele Giuseppe Esposito) [2170228 2150659]
- netfilter: conntrack: handle tcp challenge acks during connection reuse (Florian Westphal) [2165587 2158726]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.17.1.rt7.227.el8_7]" date="1677844800">- [rt] build kernel-rt-4.18.0-425.17.1.rt7.227.el8_7 [2172278]
- net: mana: Add rmb after checking owner bits (Mohammed Gamal) [2173103 2139462]
- net: mana: Add support of XDP_REDIRECT action (Mohammed Gamal) [2173103 2139462]
- net: mana: Add the Linux MANA PF driver (Mohammed Gamal) [2173103 2139462]
- ice: fix lost multicast packets in promisc mode (Ken Cox) [2172550 2138215]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.18.1.rt7.228.el8_7]" date="1678708800">- [rt] build kernel-rt-4.18.0-425.18.1.rt7.228.el8_7 [2172278]
- futex: Resend potentially swallowed owner death notification (Rafael Aquini) [2170054]
- irq_work: Move lazy work execution to dedicated irq_work kthreads (Valentin Schneider) [2172163]
- irq_work: Sync the patches (Valentin Schneider) [2172163]
- irq_work: Also rcuwait for !IRQ_WORK_HARD_IRQ on PREEMPT_RT (Valentin Schneider) [2172163]
- irq_work: Allow irq_work_sync() to sleep if irq_work() no IRQ support. (Valentin Schneider) [2172163]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.19.1.rt7.229.el8_7]" date="1678968000">- [rt] build kernel-rt-4.18.0-425.19.1.rt7.229.el8_7 [2172278]
- s390/dasd: fix no record found for raw_track_access (Tobias Huschle) [2167776 2161270]
- locking/rwsem: Disable preemption in all down_read*() and up_read() code paths (Waiman Long) [2170939 2162139]
- locking/rwsem: Prevent non-first waiter from spinning in down_write() slowpath (Waiman Long) [2170939 2162139]
- locking/rwsem: Allow slowpath writer to ignore handoff bit if not set by first waiter (Waiman Long) [2170939 2162139]
- locking/rwsem: Always try to wake waiters in out_nolock path (Waiman Long) [2170939 2162139]
- locking/rwsem: No need to check for handoff bit if wait queue empty (Waiman Long) [2170939 2162139]
- locking/rwsem: Make handoff bit handling more consistent (Waiman Long) [2170939 2162139]
- locking/rwsem: Disable preemption while trying for rwsem lock (Waiman Long) [2170939 2162139]
- locking/rwsem: Conditionally wake waiters in reader/writer slowpaths (Waiman Long) [2170939 2162139]
- locking: Make owner_on_cpu() into &lt;linux/sched.h&gt; (Waiman Long) [2170939 2162139]
- locking/rwsem: Optimize down_read_trylock() under highly contended case (Waiman Long) [2170939 2162139]
- locking/rwsem: Fix comments about reader optimistic lock stealing conditions (Waiman Long) [2170939 2162139]
- locking/rwsem: Disable preemption for spinning region (Waiman Long) [2170939 2162139]
- locking: Remove rcu_read_{,un}lock() for preempt_{dis,en}able() (Waiman Long) [2170939 2162139]
- watchdog: fix UAF in reboot notifier handling in watchdog core code (Wander Lairson Costa) [2139770 2131308]
- netfilter: nf_conntrack_irc: Tighten matching on DCC message (Wander Lairson Costa) [2139770 2131308]
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF (Jaroslav Kysela) [2163405 2163406] {CVE-2023-0266}
- net/mlx5e: Fix enabling sriov while tc nic rules are offloaded (Amir Tzin) [2167647 2112925]
- net/mlx5: E-Switch, pair only capable devices (Amir Tzin) [2167647 2112925]
- net/mlx5: Fix mlx5_get_next_dev() peer device matching (Amir Tzin) [2167647 2112925]
- net/mlx5: Lag, filter non compatible devices (Amir Tzin) [2167647 2112925]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.19.2.rt7.230.el8_7]" date="1679054400">- [rt] build kernel-rt-4.18.0-425.19.2.rt7.230.el8_7.geb93 [2172278]
- ovl: fail on invalid uid/gid mapping at copy up (Miklos Szeredi) [2165341 2165342] {CVE-2023-0386}</changelog>
</package>
<package pkgid="b19dee98a8201635a4e95c161284a919d5ecb2a790a946ff436601dade8d553d" name="kernel-rt-modules" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="425.10.1.rt7.220.el8_7"/>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.1.1.rt7.211.el8]" date="1663588800">- [rt] build kernel-rt-4.18.0-425.1.1.rt7.211.el8 [2067251]
- i40e: Fix kernel crash during module removal (Ivan Vecera) [2091489]
- redhat: enable zstream release numbering for rhel 8.7 (Jarod Wilson)
- ice: Allow operation with reduced device MSI-X (Petr Oros) [2102844]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.2.1.rt7.212.el8]" date="1664280000">- [rt] build kernel-rt-4.18.0-425.2.1.rt7.212.el8 [2067251]
- EDAC/ghes: Set the DIMM label unconditionally (Aristeu Rozanski) [2109712]
- configs: enable CONFIG_HP_ILO for aarch64 (Mark Salter) [2123508]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.3.1.rt7.213.el8]" date="1664539200">- [rt] build kernel-rt-4.18.0-425.3.1.rt7.213.el8 [2067251]
- iwlwifi: limit fw version for AC9560 to avoid fw crash (Íñigo Huguet) [2129297]
- sfc: fix null pointer dereference in efx_hard_start_xmit (Íñigo Huguet) [2119638]
- sfc: fix TX channel offset when using legacy interrupts (Íñigo Huguet) [2119638]
- netfilter: conntrack: reduce timeout when receiving out-of-window fin or rst (Florian Westphal) [2047366]
- netfilter: conntrack: remove unneeded indent level (Florian Westphal) [2047366]
- netfilter: conntrack: ignore overly delayed tcp packets (Florian Westphal) [2047366]
- netfilter: conntrack: prepare tcp_in_window for ternary return value (Florian Westphal) [2047366]
- netfilter: conntrack: remove pr_debug callsites from tcp tracker (Florian Westphal) [2047366]
- netfilter: conntrack: work around exceeded receive window (Florian Westphal) [2047366]
- netfilter: conntrack: improve RST handling when tuple is re-used (Florian Westphal) [2047366]
- netfilter: conntrack: avoid misleading 'invalid' in log message (Florian Westphal) [2047366]
- netfilter: remove BUG_ON() after skb_header_pointer() (Florian Westphal) [2047366]
- iavf: Detach device during reset task (Petr Oros) [2069206]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.4.1.rt7.214.el8]" date="1665144000">- [rt] build kernel-rt-4.18.0-425.4.1.rt7.214.el8 [2067251]
- random: allow reseeding DRBG with getrandom (Daiki Ueno) [2121766]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.5.1.rt7.215.el8_7]" date="1667822400">- [rt] build kernel-rt-4.18.0-425.5.1.rt7.215.el8_7 [2137411]
- ice: Fix interface being down after reset with link-down-on-close flag on (Petr Oros) [2136216 2024110]
- ice: Fix crash by keep old cfg when update TCs more than queues (Petr Oros) [2130992 2129902]
- ice: Fix tunnel checksum offload with fragmented traffic (Petr Oros) [2130992 2129902]
- ice: handle E822 generic device ID in PLDM header (Petr Oros) [2130992 2129902]
- ice: ethtool: Prohibit improper channel config for DCB (Petr Oros) [2130992 2129902]
- ice: ethtool: advertise 1000M speeds properly (Petr Oros) [2130992 2129902]
- ice: Fix switchdev rules book keeping (Petr Oros) [2130992 2129902]
- ice: fix access-beyond-end in the switch code (Petr Oros) [2130992 2129902]
- eth: ice: silence the GCC 12 array-bounds warning (Petr Oros) [2130992 2129902]
- ice: Expose RSS indirection tables for queue groups via ethtool (Petr Oros) [2130992 2129902]
- Revert "ice: Hide bus-info in ethtool for PRs in switchdev mode" (Petr Oros) [2130992 2129902]
- ice: remove period on argument description in ice_for_each_vf (Petr Oros) [2130992 2129902]
- ice: add a function comment for ice_cfg_mac_antispoof (Petr Oros) [2130992 2129902]
- ice: fix wording in comment for ice_reset_vf (Petr Oros) [2130992 2129902]
- ice: remove return value comment for ice_reset_all_vfs (Petr Oros) [2130992 2129902]
- ice: always check VF VSI pointer values (Petr Oros) [2130992 2129902]
- ice: add newline to dev_dbg in ice_vf_fdir_dump_info (Petr Oros) [2130992 2129902]
- ice: get switch id on switchdev devices (Petr Oros) [2130992 2129902]
- ice: return ENOSPC when exceeding ICE_MAX_CHAIN_WORDS (Petr Oros) [2130992 2129902]
- ice: introduce common helper for retrieving VSI by vsi_num (Petr Oros) [2130992 2129902]
- ice: use min_t() to make code cleaner in ice_gnss (Petr Oros) [2130992 2129902]
- ice: Add mpls+tso support (Petr Oros) [2130992 2129902]
- ice: switch: convert packet template match code to rodata (Petr Oros) [2130992 2129902]
- ice: switch: use convenience macros to declare dummy pkt templates (Petr Oros) [2130992 2129902]
- ice: switch: use a struct to pass packet template params (Petr Oros) [2130992 2129902]
- ice: switch: unobscurify bitops loop in ice_fill_adv_dummy_packet() (Petr Oros) [2130992 2129902]
- ice: switch: add and use u16[] aliases to ice_adv_lkup_elem::{h, m}_u (Petr Oros) [2130992 2129902]
- ice: Support GTP-U and GTP-C offload in switchdev (Petr Oros) [2130992 2129902]
- ice: Remove useless DMA-32 fallback configuration (Petr Oros) [2130992 2129902]
- ice: switch to napi_build_skb() (Petr Oros) [2130992 2129902]
- redhat: switch to z-stream dist tag and build targets (Jarod Wilson)
- block: avoid sign extend problem with default queue flags mask (Nico Pache) [2135813]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.6.1.rt7.216.el8_7]" date="1668168000">- [rt] build kernel-rt-4.18.0-425.6.1.rt7.216.el8_7 [2137411]
- ice: Add low latency Tx timestamp read (Petr Oros) [2136036 2092425]
- ice: introduce ice_ptp_reset_cached_phctime function (Petr Oros) [2136036 2092425]
- ice: re-arrange some static functions in ice_ptp.c (Petr Oros) [2136036 2092425]
- ice: track and warn when PHC update is late (Petr Oros) [2136036 2092425]
- ice: track Tx timestamp stats similar to other Intel drivers (Petr Oros) [2136036 2092425]
- ice: implement adjfine with mul_u64_u64_div_u64 (Petr Oros) [2136036 2092425]
- ice: Add EXTTS feature to the feature bitmap (Petr Oros) [2136036 2092425]
- math: Export mul_u64_u64_div_u64 (Petr Oros) [2136036 2092425]
- vfio/type1: Unpin zero pages (Alex Williamson) [2128515 2123015]
- net: atlantic: remove aq_nic_deinit() when resume (Íñigo Huguet) [2131935 2130839]
- net: atlantic: remove deep parameter on suspend/resume functions (Íñigo Huguet) [2131935 2130839]
- CI: Use zstream builder container (Veronika Kabatova)
- CI: Add disttag override for 8.7 (Veronika Kabatova)</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.7.1.rt7.217.el8_7]" date="1669723200">- [rt] build kernel-rt-4.18.0-425.7.1.rt7.217.el8_7 [2137411]
- ice: Add additional CSR registers to ETHTOOL_GREGS (Petr Oros) [2136513 2131024]
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps (Petr Oros) [2137270 2106964]
- i40e: Fix VF set max MTU size (Petr Oros) [2137270 2106964]
- iavf: Fix set max MTU size with port VLAN and jumbo frames (Petr Oros) [2137270 2106964]
- iavf: Fix bad page state (Petr Oros) [2137270 2106964]
- Revert "scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels" (Jarod Wilson)
- scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels (Tomas Henzl) [2139216]
- Revert "ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems" (Jarod Wilson)
- ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems (Wei Huang) [2142170 2130653]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.8.1.rt7.218.el8_7]" date="1669982400">- [rt] build kernel-rt-4.18.0-425.8.1.rt7.218.el8_7 [2137411]
- scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels (Tomas Henzl) [2139216 2134535]
- RDMA/mlx5: Set local port to one when accessing counters (Mohammad Kabat) [2141957 2077119]
- drm/mgag200: Fix PLL setup for G200_SE_A rev &gt;=4 (Jocelyn Falempe) [2140152 2130159]
- iavf: Do not restart Tx queues after reset task failure (Petr Oros) [2149081 2134005]
- iavf: Fix a crash during reset task (Petr Oros) [2149081 2134005]
- scsi: core: Allow the ALUA transitioning state enough time (Tomas Henzl) [2147374 2084250]
- scsi: core: Return BLK_STS_TRANSPORT for ALUA transitioning (Tomas Henzl) [2147374 2084250]
- i40e: Fix DMA mappings leak (Ivan Vecera) [2138205 2077847]
- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2142724 2142725] {CVE-2022-2964}
- net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2142724 2142725] {CVE-2022-2964}</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.9.1.rt7.219.el8_7]" date="1670587200">- [rt] build kernel-rt-4.18.0-425.9.1.rt7.219.el8_7 [2137411]
- Documentation/admin-guide: Document nomodeset kernel parameter (Jocelyn Falempe) [2145218 2143952]
- drm: Move nomodeset kernel parameter to the DRM subsystem (Jocelyn Falempe) [2145218 2143952]
- wait: Fix __wait_event_hrtimeout for RT/DL tasks (Derek Barbosa) [2138953 2125233]
- scsi: zfcp: Fix missing auto port scan and thus missing target ports (Tobias Huschle) [2127849 2121089]
- net: Fix return value of qdisc ingress handling on success (Ivan Vecera) [2141878 2131361]</changelog>
  <changelog author="Chris White &lt;chwhite@redhat.com&gt; [4.18.0-425.10.1.rt7.220.el8_7]" date="1671192000">- [rt] build kernel-rt-4.18.0-425.10.1.rt7.220.el8_7 [2137411]
- scsi: target: loop: Fix handling of aborted TMRs (Maurizio Lombardi) [2144583 2141713]
- ice: virtchnl rss hena support (Petr Oros) [2148130]
- ice: Fix configuring VIRTCHNL_OP_CONFIG_VSI_QUEUES with unbalanced queues (Michal Schmidt) [2142017 2137378]
- ice: Add support Flex RXD (Michal Schmidt) [2138157 2131310]
- netfilter: flowtable: fix stuck flows on cleanup due to pending work (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: add function to invoke garbage collection immediately (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: pass flowtable to nf_flow_table_iterate() (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: separate replace, destroy and stats to different workqueues (Phil Sutter) [2134084 2131370]
- x86/paravirt: Add a dummy __x86_paravirt_patch_template() function (Waiman Long) [2152206 2144161]
- x86/paravirt: Fix kABI breakage in struct pv_mmu_ops (Waiman Long) [2152206 2144161]
- drm/i915: fix TLB invalidation for Gen12 video and compute engines (Wander Lairson Costa) [2148162 2148163] {CVE-2022-4139}
- PCI: hv: Do not set PCI_COMMAND_MEMORY to reduce VM boot time (Emanuele Giuseppe Esposito) [2150912 2082836]
- iavf: Fix cached head and tail value for iavf_get_tx_pending (Stefan Assmann) [2149742 2103944]
- iavf: Fix change VF's mac address (Stefan Assmann) [2149742 2103944]
- iavf: Fix race between iavf_close and iavf_reset_task (Stefan Assmann) [2149742 2103944]
- net: ethernet: move from strlcpy with unused retval to strscpy (Stefan Assmann) [2149742 2103944]
- iavf: Fix 'tc qdisc show' listing too many queues (Stefan Assmann) [2149742 2103944]
- iavf: Fix max_rate limiting (Stefan Assmann) [2149742 2103944]
- iavf: Check for duplicate TC flower filter before parsing (Stefan Assmann) [2149742 2103944]
- iavf: Fix handling of dummy receive descriptors (Stefan Assmann) [2149742 2103944]
- iavf: Disallow changing rx/tx-frames and rx/tx-frames-irq (Stefan Assmann) [2149742 2103944]
- intel/iavf:fix repeated words in comments (Stefan Assmann) [2149742 2103944]
- intel: remove unused macros (Stefan Assmann) [2149742 2103944]
- iavf: Add waiting for response from PF in set mac (Stefan Assmann) [2149742 2103944]</changelog>
</package>
<package pkgid="3db71fed26aea9a73ff7dac243a2785f288f585cddd9c279e8c7be264fe28ca1" name="kernel-rt-modules" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="425.13.1.rt7.223.el8_7"/>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.4.1.rt7.214.el8]" date="1665144000">- [rt] build kernel-rt-4.18.0-425.4.1.rt7.214.el8 [2067251]
- random: allow reseeding DRBG with getrandom (Daiki Ueno) [2121766]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.5.1.rt7.215.el8_7]" date="1667822400">- [rt] build kernel-rt-4.18.0-425.5.1.rt7.215.el8_7 [2137411]
- ice: Fix interface being down after reset with link-down-on-close flag on (Petr Oros) [2136216 2024110]
- ice: Fix crash by keep old cfg when update TCs more than queues (Petr Oros) [2130992 2129902]
- ice: Fix tunnel checksum offload with fragmented traffic (Petr Oros) [2130992 2129902]
- ice: handle E822 generic device ID in PLDM header (Petr Oros) [2130992 2129902]
- ice: ethtool: Prohibit improper channel config for DCB (Petr Oros) [2130992 2129902]
- ice: ethtool: advertise 1000M speeds properly (Petr Oros) [2130992 2129902]
- ice: Fix switchdev rules book keeping (Petr Oros) [2130992 2129902]
- ice: fix access-beyond-end in the switch code (Petr Oros) [2130992 2129902]
- eth: ice: silence the GCC 12 array-bounds warning (Petr Oros) [2130992 2129902]
- ice: Expose RSS indirection tables for queue groups via ethtool (Petr Oros) [2130992 2129902]
- Revert "ice: Hide bus-info in ethtool for PRs in switchdev mode" (Petr Oros) [2130992 2129902]
- ice: remove period on argument description in ice_for_each_vf (Petr Oros) [2130992 2129902]
- ice: add a function comment for ice_cfg_mac_antispoof (Petr Oros) [2130992 2129902]
- ice: fix wording in comment for ice_reset_vf (Petr Oros) [2130992 2129902]
- ice: remove return value comment for ice_reset_all_vfs (Petr Oros) [2130992 2129902]
- ice: always check VF VSI pointer values (Petr Oros) [2130992 2129902]
- ice: add newline to dev_dbg in ice_vf_fdir_dump_info (Petr Oros) [2130992 2129902]
- ice: get switch id on switchdev devices (Petr Oros) [2130992 2129902]
- ice: return ENOSPC when exceeding ICE_MAX_CHAIN_WORDS (Petr Oros) [2130992 2129902]
- ice: introduce common helper for retrieving VSI by vsi_num (Petr Oros) [2130992 2129902]
- ice: use min_t() to make code cleaner in ice_gnss (Petr Oros) [2130992 2129902]
- ice: Add mpls+tso support (Petr Oros) [2130992 2129902]
- ice: switch: convert packet template match code to rodata (Petr Oros) [2130992 2129902]
- ice: switch: use convenience macros to declare dummy pkt templates (Petr Oros) [2130992 2129902]
- ice: switch: use a struct to pass packet template params (Petr Oros) [2130992 2129902]
- ice: switch: unobscurify bitops loop in ice_fill_adv_dummy_packet() (Petr Oros) [2130992 2129902]
- ice: switch: add and use u16[] aliases to ice_adv_lkup_elem::{h, m}_u (Petr Oros) [2130992 2129902]
- ice: Support GTP-U and GTP-C offload in switchdev (Petr Oros) [2130992 2129902]
- ice: Remove useless DMA-32 fallback configuration (Petr Oros) [2130992 2129902]
- ice: switch to napi_build_skb() (Petr Oros) [2130992 2129902]
- redhat: switch to z-stream dist tag and build targets (Jarod Wilson)
- block: avoid sign extend problem with default queue flags mask (Nico Pache) [2135813]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.6.1.rt7.216.el8_7]" date="1668168000">- [rt] build kernel-rt-4.18.0-425.6.1.rt7.216.el8_7 [2137411]
- ice: Add low latency Tx timestamp read (Petr Oros) [2136036 2092425]
- ice: introduce ice_ptp_reset_cached_phctime function (Petr Oros) [2136036 2092425]
- ice: re-arrange some static functions in ice_ptp.c (Petr Oros) [2136036 2092425]
- ice: track and warn when PHC update is late (Petr Oros) [2136036 2092425]
- ice: track Tx timestamp stats similar to other Intel drivers (Petr Oros) [2136036 2092425]
- ice: implement adjfine with mul_u64_u64_div_u64 (Petr Oros) [2136036 2092425]
- ice: Add EXTTS feature to the feature bitmap (Petr Oros) [2136036 2092425]
- math: Export mul_u64_u64_div_u64 (Petr Oros) [2136036 2092425]
- vfio/type1: Unpin zero pages (Alex Williamson) [2128515 2123015]
- net: atlantic: remove aq_nic_deinit() when resume (Íñigo Huguet) [2131935 2130839]
- net: atlantic: remove deep parameter on suspend/resume functions (Íñigo Huguet) [2131935 2130839]
- CI: Use zstream builder container (Veronika Kabatova)
- CI: Add disttag override for 8.7 (Veronika Kabatova)</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.7.1.rt7.217.el8_7]" date="1669723200">- [rt] build kernel-rt-4.18.0-425.7.1.rt7.217.el8_7 [2137411]
- ice: Add additional CSR registers to ETHTOOL_GREGS (Petr Oros) [2136513 2131024]
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps (Petr Oros) [2137270 2106964]
- i40e: Fix VF set max MTU size (Petr Oros) [2137270 2106964]
- iavf: Fix set max MTU size with port VLAN and jumbo frames (Petr Oros) [2137270 2106964]
- iavf: Fix bad page state (Petr Oros) [2137270 2106964]
- Revert "scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels" (Jarod Wilson)
- scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels (Tomas Henzl) [2139216]
- Revert "ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems" (Jarod Wilson)
- ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems (Wei Huang) [2142170 2130653]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.8.1.rt7.218.el8_7]" date="1669982400">- [rt] build kernel-rt-4.18.0-425.8.1.rt7.218.el8_7 [2137411]
- scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels (Tomas Henzl) [2139216 2134535]
- RDMA/mlx5: Set local port to one when accessing counters (Mohammad Kabat) [2141957 2077119]
- drm/mgag200: Fix PLL setup for G200_SE_A rev &gt;=4 (Jocelyn Falempe) [2140152 2130159]
- iavf: Do not restart Tx queues after reset task failure (Petr Oros) [2149081 2134005]
- iavf: Fix a crash during reset task (Petr Oros) [2149081 2134005]
- scsi: core: Allow the ALUA transitioning state enough time (Tomas Henzl) [2147374 2084250]
- scsi: core: Return BLK_STS_TRANSPORT for ALUA transitioning (Tomas Henzl) [2147374 2084250]
- i40e: Fix DMA mappings leak (Ivan Vecera) [2138205 2077847]
- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2142724 2142725] {CVE-2022-2964}
- net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2142724 2142725] {CVE-2022-2964}</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.9.1.rt7.219.el8_7]" date="1670587200">- [rt] build kernel-rt-4.18.0-425.9.1.rt7.219.el8_7 [2137411]
- Documentation/admin-guide: Document nomodeset kernel parameter (Jocelyn Falempe) [2145218 2143952]
- drm: Move nomodeset kernel parameter to the DRM subsystem (Jocelyn Falempe) [2145218 2143952]
- wait: Fix __wait_event_hrtimeout for RT/DL tasks (Derek Barbosa) [2138953 2125233]
- scsi: zfcp: Fix missing auto port scan and thus missing target ports (Tobias Huschle) [2127849 2121089]
- net: Fix return value of qdisc ingress handling on success (Ivan Vecera) [2141878 2131361]</changelog>
  <changelog author="Chris White &lt;chwhite@redhat.com&gt; [4.18.0-425.10.1.rt7.220.el8_7]" date="1671192000">- [rt] build kernel-rt-4.18.0-425.10.1.rt7.220.el8_7 [2137411]
- scsi: target: loop: Fix handling of aborted TMRs (Maurizio Lombardi) [2144583 2141713]
- ice: virtchnl rss hena support (Petr Oros) [2148130]
- ice: Fix configuring VIRTCHNL_OP_CONFIG_VSI_QUEUES with unbalanced queues (Michal Schmidt) [2142017 2137378]
- ice: Add support Flex RXD (Michal Schmidt) [2138157 2131310]
- netfilter: flowtable: fix stuck flows on cleanup due to pending work (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: add function to invoke garbage collection immediately (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: pass flowtable to nf_flow_table_iterate() (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: separate replace, destroy and stats to different workqueues (Phil Sutter) [2134084 2131370]
- x86/paravirt: Add a dummy __x86_paravirt_patch_template() function (Waiman Long) [2152206 2144161]
- x86/paravirt: Fix kABI breakage in struct pv_mmu_ops (Waiman Long) [2152206 2144161]
- drm/i915: fix TLB invalidation for Gen12 video and compute engines (Wander Lairson Costa) [2148162 2148163] {CVE-2022-4139}
- PCI: hv: Do not set PCI_COMMAND_MEMORY to reduce VM boot time (Emanuele Giuseppe Esposito) [2150912 2082836]
- iavf: Fix cached head and tail value for iavf_get_tx_pending (Stefan Assmann) [2149742 2103944]
- iavf: Fix change VF's mac address (Stefan Assmann) [2149742 2103944]
- iavf: Fix race between iavf_close and iavf_reset_task (Stefan Assmann) [2149742 2103944]
- net: ethernet: move from strlcpy with unused retval to strscpy (Stefan Assmann) [2149742 2103944]
- iavf: Fix 'tc qdisc show' listing too many queues (Stefan Assmann) [2149742 2103944]
- iavf: Fix max_rate limiting (Stefan Assmann) [2149742 2103944]
- iavf: Check for duplicate TC flower filter before parsing (Stefan Assmann) [2149742 2103944]
- iavf: Fix handling of dummy receive descriptors (Stefan Assmann) [2149742 2103944]
- iavf: Disallow changing rx/tx-frames and rx/tx-frames-irq (Stefan Assmann) [2149742 2103944]
- intel/iavf:fix repeated words in comments (Stefan Assmann) [2149742 2103944]
- intel: remove unused macros (Stefan Assmann) [2149742 2103944]
- iavf: Add waiting for response from PF in set mac (Stefan Assmann) [2149742 2103944]</changelog>
  <changelog author="Chris White &lt;chwhite@redhat.com&gt; [4.18.0-425.11.1.rt7.221.el8_7]" date="1673352000">- [rt] build kernel-rt-4.18.0-425.11.1.rt7.221.el8_7 [2159806]
- NFSD: Protect against send buffer overflow in NFSv3 READ (Scott Mayhew) [2143174] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv2 READ (Scott Mayhew) [2143174] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv3 READDIR (Scott Mayhew) [2143174] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv2 READDIR (Scott Mayhew) [2143174] {CVE-2022-43945}
- SUNRPC: Fix svcxdr_init_encode's buflen calculation (Scott Mayhew) [2143174] {CVE-2022-43945}
- SUNRPC: Fix svcxdr_init_decode's end-of-buffer calculation (Scott Mayhew) [2143174] {CVE-2022-43945}
- panic, kexec: make __crash_kexec() NMI safe (Valentin Schneider) [2139580]
- kexec: turn all kexec_mutex acquisitions into trylocks (Valentin Schneider) [2139580]
- kexec: move locking into do_kexec_load (Valentin Schneider) [2139580]
- vdpa/mlx5: re-create forwarding rules after mac modified (Laurent Vivier) [2152912]
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry (Waiman Long) [2153653]
- irq: Call tick_irq_enter() inside HARDIRQ_OFFSET (Waiman Long) [2153653]
- irqtime: Move irqtime entry accounting after irq offset incrementation (Waiman Long) [2153653]
- sched/vtime: Consolidate IRQ time accounting (Waiman Long) [2153653]
- s390/vtime: Use the generic IRQ entry accounting (Waiman Long) [2153653]
- sched/cputime: Remove symbol exports from IRQ time accounting (Waiman Long) [2153653]
- genirq/irqdomain: Don't try to free an interrupt that has no mapping (Waiman Long) [2153653]
- genirq: Provide __irq_enter/exit_raw() (Waiman Long) [2153653]
- powerpc/time: Only set CONFIG_ARCH_HAS_SCALED_CPUTIME on PPC64 (Waiman Long) [2153653]
- powerpc/time: isolate scaled cputime accounting in dedicated functions. (Waiman Long) [2153653]
- PCI: hv: Fix synchronization between channel callback and hv_pci_bus_exit() (Mohammed Gamal) [2155280]
- PCI: hv: Fix synchronization between channel callback and hv_compose_msi_msg() (Mohammed Gamal) [2155280]
- PCI: hv: Use vmbus_requestor to generate transaction IDs for VMbus hardening (Mohammed Gamal) [2155280]
- net/mlx5e: TC, Reject forwarding from internal port to internal port (Mohammad Kabat) [2141959 2131345]
- hv_netvsc: Fix race between VF offering and VF association message from host (Mohammed Gamal) [2155272]
- x86/mce: Reduce number of machine checks taken during recovery (Prarit Bhargava) [2137592 2104388]
- cgroup/cpuset: Reduce cpuset_rwsem writer latency (Waiman Long) [2153108]
- rcu/exp: Mark current CPU as exp-QS in IPI loop second pass (Waiman Long) [2153108]
- rcu: Always inline rcu_dynticks_task*_{enter,exit}() (Waiman Long) [2153108]
- rcu: Fix existing exp request check in sync_sched_exp_online_cleanup() (Waiman Long) [2153108]
- rcu: Fix macro name CONFIG_TASKS_RCU_TRACE (Waiman Long) [2153108]
- rcu: Fix stall-warning deadlock due to non-release of rcu_node -&gt;lock (Waiman Long) [2153108]
- rcu: Fix to include first blocked task in stall warning (Waiman Long) [2153108]
- cgroup: Use cgroup_attach_{lock,unlock}() from cgroup_attach_task_all() (Waiman Long) [2153108]
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all() (Waiman Long) [2153108]
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock (Waiman Long) [2153108]
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree (Waiman Long) [2153108]
- cgroup/cpuset: Fix a race between cpuset_attach() and cpu hotplug (Waiman Long) [2153108]
- cgroup: reduce dependency on cgroup_mutex (Waiman Long) [2153108]
- sunrpc: Set sk_allocation to GFP_NOFS to avoid using current-&gt;task_frag. (Guillaume Nault) [2153230]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.12.1.rt7.222.el8_7]" date="1674129600">- [rt] build kernel-rt-4.18.0-425.12.1.rt7.222.el8_7 [2159806]
- x86/fpu: Prevent FPU state corruption (Oleksandr Natalenko) [2134586 2130890]
- x86/fpu: Drop fpregs lock before inheriting FPU permissions (Eder Zulian) [2154460 2153549]
- kernel-doc: fix undefined args variable (Jan Stancek) [2157905 2134954]
- mm: memcontrol: fix potential oom_lock recursion deadlock (Waiman Long) [2157922 2138886]
- memcg: prohibit unconditional exceeding the limit of dying tasks (Waiman Long) [2157922 2138886]
- mm, oom: do not trigger out_of_memory from the #PF (Waiman Long) [2157922 2138886]
- mm, oom: pagefault_out_of_memory: don't force global OOM for dying tasks (Waiman Long) [2157922 2138886]
- mm: memcontrol: don't count limit-setting reclaim as memory pressure (Waiman Long) [2157922 2138886]
- KVM: s390: vsie: Fix the initialization of the epoch extension (epdx) field (Thomas Huth) [2158813 2151854]
- net: mana: Fix race on per-CQ variable napi work_done (Emanuele Giuseppe Esposito) [2155437 2151722]
- mei: me: add adler lake point S DID (Prarit Bhargava) [2141783 2141602]
- PCI: hv: Only reuse existing IRTE allocation for Multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix the definition of vector in hv_compose_msi_msg() (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix interrupt mapping for multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Reuse existing IRTE allocation in compose_msi_msg() (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix hv_arch_irq_unmask() for multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix multi-MSI to allow more than one MSI vector (Emanuele Giuseppe Esposito) [2155289 2100275]
- drm/ast: Support multiple outputs (Jarod Wilson) [2149287 2147553]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.13.1.rt7.223.el8_7]" date="1675339200">- [rt] build kernel-rt-4.18.0-425.13.1.rt7.223.el8_7 [2159806]
- mm/cgroup/reclaim: fix dirty pages throttling on cgroup v1 (Waiman Long) [2160221]
- mm: vmscan: remove deadlock due to throttling failing to make progress (Waiman Long) [2160221]
- mm: vmscan: reduce throttling due to a failure to make progress -fix (Waiman Long) [2160221]
- mm: vmscan: Reduce throttling due to a failure to make progress (Waiman Long) [2160221]
- mm/vmscan: delay waking of tasks throttled on NOPROGRESS (Waiman Long) [2160221]
- mm/vmscan: increase the timeout if page reclaim is not making progress (Waiman Long) [2160221]
- mm/vmscan: centralise timeout values for reclaim_throttle (Waiman Long) [2160221]
- mm/page_alloc: remove the throttling logic from the page allocator (Waiman Long) [2160221]
- mm/writeback: throttle based on page writeback instead of congestion (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim when no progress is being made (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim and compaction when too may pages are isolated (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim until some writeback completes if congested (Waiman Long) [2160221]
- mm/vmscan.c: delete or fix duplicated words (Waiman Long) [2160221]
- mm,page_alloc: PF_WQ_WORKER threads must sleep at should_reclaim_retry() (Nico Pache) [2160221]
- ceph: avoid putting the realm twice when decoding snaps fails (Xiubo Li) [2155797 2139881]
- mm/mremap: hold the rmap lock in write mode when moving page table entries. (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap: use pmd/pud_poplulate to update page table entries (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap: don't enable optimized PUD move if page table levels is 2 (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap: convert huge PUD move to separate helper (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap: fix BUILD_BUG_ON() error in get_extent (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap.c: fix extent calculation (Waiman Long) [2140950] {CVE-2022-41222}
- x86: mremap speedup - Enable HAVE_MOVE_PUD (Waiman Long) [2140950] {CVE-2022-41222}
- mm: speedup mremap on 1GB or larger regions (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap: start addresses are properly aligned (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap: calculate extent in one place (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap: it is sure to have enough space when extent meets requirement (Waiman Long) [2140950] {CVE-2022-41222}
- s390/boot: add secure boot trailer (Tobias Huschle) [2151530 2141967]
- i40e: Fix VF hang when reset is triggered on another VF (Ivan Vecera) [2160460 2103801]
- i2c: ismt: Fix an out-of-bounds bug in ismt_access() (Prarit Bhargava) [2154388 2119066] {CVE-2022-2873}
- iavf: schedule watchdog immediately when changing primary MAC (Michal Schmidt) [2163257 2152493]
- iavf: Move netdev_update_features() into watchdog task (Michal Schmidt) [2163257 2152493]
- iavf: fix temporary deadlock and failure to set MAC address (Michal Schmidt) [2163257 2152493]
- iavf: Fix error handling in iavf_init_module() (Michal Schmidt) [2163257 2152493]
- iommu/vt-d: Clean up si_domain in the init_dmars() error path (Jerry Snitselaar) [2149474 2118428]
- x86/pci/xen: Use msi_msg shadow structs (Jerry Snitselaar) [2149474 2118428]
- iommu/intel: Use msi_msg shadow structs (Jerry Snitselaar) [2149474 2118428]
- PCI: MSI: Fix Kconfig dependencies for PCI_MSI_ARCH_FALLBACKS (Jerry Snitselaar) [2149474 2118428]
- x86/apic/msi: Unbreak DMAR and HPET MSI (Jerry Snitselaar) [2149474 2118428]
- iommu/amd: Remove domain search for PCI/MSI (Jerry Snitselaar) [2149474 2118428]
- iommu/vt-d: Remove domain search for PCI/MSI[X] (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Make most MSI ops XEN private (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Cleanup the arch_*_msi_irqs() leftovers (Jerry Snitselaar) [2149474 2118428]
- PCI/MSI: Make arch_.*_msi_irq[s] fallbacks selectable (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Wrap XEN MSI management into irqdomain (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Consolidate XEN-MSI init (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Rework MSI teardown (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Make xen_msi_init() static and rename it to xen_hvm_msi_init() (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Move apic_post_init() invocation to one place (Jerry Snitselaar) [2149474 2118428]
- x86/msi: Use generic MSI domain ops (Jerry Snitselaar) [2149474 2118428]
- x86/msi: Remove pointless vcpu_affinity callback (Jerry Snitselaar) [2149474 2118428]
- iommu/vt-d: Fix compile error with CONFIG_PCI_ATS not set (Myron Stowe) [2149474 2118428]
- iommu/vt-d: Cure VF irqdomain hickup (Myron Stowe) [2149474 2118428]
- x86/pci: Set default irq domain in pcibios_add_device() (Myron Stowe) [2149474 2118428]
- iommm/amd: Store irq domain in struct device (Myron Stowe) [2149474 2118428]
- iommm/vt-d: Store irq domain in struct device (Myron Stowe) [2149474 2118428]
- PCI/MSI: Provide pci_dev_has_special_msi_domain() helper (Myron Stowe) [2149474 2118428]
- x86/msi: Consolidate MSI allocation (Myron Stowe) [2149474 2118428]
- PCI/MSI: Rework pci_msi_domain_calc_hwirq() (Myron Stowe) [2149474 2118428]
- x86/irq: Consolidate UV domain allocation (Myron Stowe) [2149474 2118428]
- x86/irq: Consolidate DMAR irq allocation (Myron Stowe) [2149474 2118428]
- x86_ioapic_Consolidate_IOAPIC_allocation (Myron Stowe) [2149474 2118428]
- x86/msi: Consolidate HPET allocation (Myron Stowe) [2149474 2118428]
- iommu/irq_remapping: Consolidate irq domain lookup (Myron Stowe) [2149474 2118428]
- iommu/amd: Consolidate irq domain getter (Myron Stowe) [2149474 2118428]
- iommu/vt-d: Consolidate irq domain getter (Myron Stowe) [2149474 2118428]
- x86/irq: Add allocation type for parent domain retrieval (Myron Stowe) [2149474 2118428]
- irqdomain: Export irq_domain_update_bus_token (Myron Stowe) [2149474 2118428]
- gitlab-ci: use CI templates from production branch (Michael Hofmann)
- iavf: remove INITIAL_MAC_SET to allow gARP to work properly (Stefan Assmann) [2149745 1938635]
- Revert "scsi: iscsi: ql4xxx: Use per-session workqueue for unbinding" (Chris Leech) [2152734 2122624]
- Revert "scsi: iscsi: Use the session workqueue for recovery" (Chris Leech) [2152734 2122624]
- arm64/bpf: Remove 128MB limit for BPF JIT programs (Yauheni Kaliuta) [2152138 2140163]
- bpf: Define bpf_jit_alloc_exec_limit for arm64 JIT (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: add `type` and `data` fields (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: use `ex` for `exception_table_entry` (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: make fixup_exception() return bool (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: consolidate definitions (Yauheni Kaliuta) [2152138 2140163]
- arm64: kvm: use kvm_exception_table_entry (Yauheni Kaliuta) [2152138 2140163]
- be2net: Fix buffer overflow in be_get_module_eeprom (Josef Oskera) [2160182 2126917]
- sched: Switch to upstream migrate disable code (Crystal Wood) [2132062]
- tick: Fix timer storm since introduction of timersd (Valentin Schneider) [2127204]
- softirq: Use a dedicated thread for timer wakeups. (Valentin Schneider) [2127204]</changelog>
</package>
<package pkgid="11225dd5e5040208c509b870402fc5c030613df0c9a8aa1e8d9fc71066710e9c" name="kernel-rt-modules" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="425.19.2.rt7.230.el8_7"/>
  <changelog author="Chris White &lt;chwhite@redhat.com&gt; [4.18.0-425.11.1.rt7.221.el8_7]" date="1673352000">- [rt] build kernel-rt-4.18.0-425.11.1.rt7.221.el8_7 [2159806]
- NFSD: Protect against send buffer overflow in NFSv3 READ (Scott Mayhew) [2143174] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv2 READ (Scott Mayhew) [2143174] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv3 READDIR (Scott Mayhew) [2143174] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv2 READDIR (Scott Mayhew) [2143174] {CVE-2022-43945}
- SUNRPC: Fix svcxdr_init_encode's buflen calculation (Scott Mayhew) [2143174] {CVE-2022-43945}
- SUNRPC: Fix svcxdr_init_decode's end-of-buffer calculation (Scott Mayhew) [2143174] {CVE-2022-43945}
- panic, kexec: make __crash_kexec() NMI safe (Valentin Schneider) [2139851]
- kexec: turn all kexec_mutex acquisitions into trylocks (Valentin Schneider) [2139580]
- kexec: move locking into do_kexec_load (Valentin Schneider) [2139580]
- vdpa/mlx5: re-create forwarding rules after mac modified (Laurent Vivier) [2152912]
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry (Waiman Long) [2153653]
- irq: Call tick_irq_enter() inside HARDIRQ_OFFSET (Waiman Long) [2153653]
- irqtime: Move irqtime entry accounting after irq offset incrementation (Waiman Long) [2153653]
- sched/vtime: Consolidate IRQ time accounting (Waiman Long) [2153653]
- s390/vtime: Use the generic IRQ entry accounting (Waiman Long) [2153653]
- sched/cputime: Remove symbol exports from IRQ time accounting (Waiman Long) [2153653]
- genirq/irqdomain: Don't try to free an interrupt that has no mapping (Waiman Long) [2153653]
- genirq: Provide __irq_enter/exit_raw() (Waiman Long) [2153653]
- powerpc/time: Only set CONFIG_ARCH_HAS_SCALED_CPUTIME on PPC64 (Waiman Long) [2153653]
- powerpc/time: isolate scaled cputime accounting in dedicated functions. (Waiman Long) [2153653]
- PCI: hv: Fix synchronization between channel callback and hv_pci_bus_exit() (Mohammed Gamal) [2155280]
- PCI: hv: Fix synchronization between channel callback and hv_compose_msi_msg() (Mohammed Gamal) [2155280]
- PCI: hv: Use vmbus_requestor to generate transaction IDs for VMbus hardening (Mohammed Gamal) [2155280]
- net/mlx5e: TC, Reject forwarding from internal port to internal port (Mohammad Kabat) [2141959 2131345]
- hv_netvsc: Fix race between VF offering and VF association message from host (Mohammed Gamal) [2155272]
- x86/mce: Reduce number of machine checks taken during recovery (Prarit Bhargava) [2137592 2104388]
- cgroup/cpuset: Reduce cpuset_rwsem writer latency (Waiman Long) [2153108]
- rcu/exp: Mark current CPU as exp-QS in IPI loop second pass (Waiman Long) [2153108]
- rcu: Always inline rcu_dynticks_task*_{enter,exit}() (Waiman Long) [2153108]
- rcu: Fix existing exp request check in sync_sched_exp_online_cleanup() (Waiman Long) [2153108]
- rcu: Fix macro name CONFIG_TASKS_RCU_TRACE (Waiman Long) [2153108]
- rcu: Fix stall-warning deadlock due to non-release of rcu_node -&gt;lock (Waiman Long) [2153108]
- rcu: Fix to include first blocked task in stall warning (Waiman Long) [2153108]
- cgroup: Use cgroup_attach_{lock,unlock}() from cgroup_attach_task_all() (Waiman Long) [2153108]
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all() (Waiman Long) [2153108]
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock (Waiman Long) [2153108]
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree (Waiman Long) [2153108]
- cgroup/cpuset: Fix a race between cpuset_attach() and cpu hotplug (Waiman Long) [2153108]
- cgroup: reduce dependency on cgroup_mutex (Waiman Long) [2153108]
- sunrpc: Set sk_allocation to GFP_NOFS to avoid using current-&gt;task_frag. (Guillaume Nault) [2153230]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.12.1.rt7.222.el8_7]" date="1674129600">- [rt] build kernel-rt-4.18.0-425.12.1.rt7.222.el8_7 [2159806]
- x86/fpu: Prevent FPU state corruption (Oleksandr Natalenko) [2134586 2130890]
- x86/fpu: Drop fpregs lock before inheriting FPU permissions (Eder Zulian) [2154469 2153549]
- kernel-doc: fix undefined args variable (Jan Stancek) [2157905 2134954]
- mm: memcontrol: fix potential oom_lock recursion deadlock (Waiman Long) [2157922 2138886]
- memcg: prohibit unconditional exceeding the limit of dying tasks (Waiman Long) [2157922 2138886]
- mm, oom: do not trigger out_of_memory from the #PF (Waiman Long) [2157922 2138886]
- mm, oom: pagefault_out_of_memory: don't force global OOM for dying tasks (Waiman Long) [2157922 2138886]
- mm: memcontrol: don't count limit-setting reclaim as memory pressure (Waiman Long) [2157922 2138886]
- KVM: s390: vsie: Fix the initialization of the epoch extension (epdx) field (Thomas Huth) [2158813 2151854]
- net: mana: Fix race on per-CQ variable napi work_done (Emanuele Giuseppe Esposito) [2155437 2151722]
- mei: me: add adler lake point S DID (Prarit Bhargava) [2141783 2141602]
- PCI: hv: Only reuse existing IRTE allocation for Multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix the definition of vector in hv_compose_msi_msg() (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix interrupt mapping for multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Reuse existing IRTE allocation in compose_msi_msg() (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix hv_arch_irq_unmask() for multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix multi-MSI to allow more than one MSI vector (Emanuele Giuseppe Esposito) [2155289 2100275]
- drm/ast: Support multiple outputs (Jarod Wilson) [2149287 2147553]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.13.1.rt7.223.el8_7]" date="1675339200">- [rt] build kernel-rt-4.18.0-425.13.1.rt7.223.el8_7 [2159806]
- mm/cgroup/reclaim: fix dirty pages throttling on cgroup v1 (Waiman Long) [2160221]
- mm: vmscan: remove deadlock due to throttling failing to make progress (Waiman Long) [2160221]
- mm: vmscan: reduce throttling due to a failure to make progress -fix (Waiman Long) [2160221]
- mm: vmscan: Reduce throttling due to a failure to make progress (Waiman Long) [2160221]
- mm/vmscan: delay waking of tasks throttled on NOPROGRESS (Waiman Long) [2160221]
- mm/vmscan: increase the timeout if page reclaim is not making progress (Waiman Long) [2160221]
- mm/vmscan: centralise timeout values for reclaim_throttle (Waiman Long) [2160221]
- mm/page_alloc: remove the throttling logic from the page allocator (Waiman Long) [2160221]
- mm/writeback: throttle based on page writeback instead of congestion (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim when no progress is being made (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim and compaction when too may pages are isolated (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim until some writeback completes if congested (Waiman Long) [2160221]
- mm/vmscan.c: delete or fix duplicated words (Waiman Long) [2160221]
- mm,page_alloc: PF_WQ_WORKER threads must sleep at should_reclaim_retry() (Nico Pache) [2160221]
- ceph: avoid putting the realm twice when decoding snaps fails (Xiubo Li) [2155797 2139881]
- mm/mremap: hold the rmap lock in write mode when moving page table entries. (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap: use pmd/pud_poplulate to update page table entries (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap: don't enable optimized PUD move if page table levels is 2 (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap: convert huge PUD move to separate helper (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap: fix BUILD_BUG_ON() error in get_extent (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap.c: fix extent calculation (Waiman Long) [2140950] {CVE-2022-41222}
- x86: mremap speedup - Enable HAVE_MOVE_PUD (Waiman Long) [2140950] {CVE-2022-41222}
- mm: speedup mremap on 1GB or larger regions (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap: start addresses are properly aligned (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap: calculate extent in one place (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap: it is sure to have enough space when extent meets requirement (Waiman Long) [2140950] {CVE-2022-41222}
- s390/boot: add secure boot trailer (Tobias Huschle) [2151530 2141967]
- i40e: Fix VF hang when reset is triggered on another VF (Ivan Vecera) [2160460 2103801]
- i2c: ismt: Fix an out-of-bounds bug in ismt_access() (Prarit Bhargava) [2154388 2119066] {CVE-2022-2873}
- iavf: schedule watchdog immediately when changing primary MAC (Michal Schmidt) [2163257 2152493]
- iavf: Move netdev_update_features() into watchdog task (Michal Schmidt) [2163257 2152493]
- iavf: fix temporary deadlock and failure to set MAC address (Michal Schmidt) [2163257 2152493]
- iavf: Fix error handling in iavf_init_module() (Michal Schmidt) [2163257 2152493]
- iommu/vt-d: Clean up si_domain in the init_dmars() error path (Jerry Snitselaar) [2149474 2118428]
- x86/pci/xen: Use msi_msg shadow structs (Jerry Snitselaar) [2149474 2118428]
- iommu/intel: Use msi_msg shadow structs (Jerry Snitselaar) [2149474 2118428]
- PCI: MSI: Fix Kconfig dependencies for PCI_MSI_ARCH_FALLBACKS (Jerry Snitselaar) [2149474 2118428]
- x86/apic/msi: Unbreak DMAR and HPET MSI (Jerry Snitselaar) [2149474 2118428]
- iommu/amd: Remove domain search for PCI/MSI (Jerry Snitselaar) [2149474 2118428]
- iommu/vt-d: Remove domain search for PCI/MSI[X] (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Make most MSI ops XEN private (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Cleanup the arch_*_msi_irqs() leftovers (Jerry Snitselaar) [2149474 2118428]
- PCI/MSI: Make arch_.*_msi_irq[s] fallbacks selectable (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Wrap XEN MSI management into irqdomain (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Consolidate XEN-MSI init (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Rework MSI teardown (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Make xen_msi_init() static and rename it to xen_hvm_msi_init() (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Move apic_post_init() invocation to one place (Jerry Snitselaar) [2149474 2118428]
- x86/msi: Use generic MSI domain ops (Jerry Snitselaar) [2149474 2118428]
- x86/msi: Remove pointless vcpu_affinity callback (Jerry Snitselaar) [2149474 2118428]
- iommu/vt-d: Fix compile error with CONFIG_PCI_ATS not set (Myron Stowe) [2149474 2118428]
- iommu/vt-d: Cure VF irqdomain hickup (Myron Stowe) [2149474 2118428]
- x86/pci: Set default irq domain in pcibios_add_device() (Myron Stowe) [2149474 2118428]
- iommm/amd: Store irq domain in struct device (Myron Stowe) [2149474 2118428]
- iommm/vt-d: Store irq domain in struct device (Myron Stowe) [2149474 2118428]
- PCI/MSI: Provide pci_dev_has_special_msi_domain() helper (Myron Stowe) [2149474 2118428]
- x86/msi: Consolidate MSI allocation (Myron Stowe) [2149474 2118428]
- PCI/MSI: Rework pci_msi_domain_calc_hwirq() (Myron Stowe) [2149474 2118428]
- x86/irq: Consolidate UV domain allocation (Myron Stowe) [2149474 2118428]
- x86/irq: Consolidate DMAR irq allocation (Myron Stowe) [2149474 2118428]
- x86_ioapic_Consolidate_IOAPIC_allocation (Myron Stowe) [2149474 2118428]
- x86/msi: Consolidate HPET allocation (Myron Stowe) [2149474 2118428]
- iommu/irq_remapping: Consolidate irq domain lookup (Myron Stowe) [2149474 2118428]
- iommu/amd: Consolidate irq domain getter (Myron Stowe) [2149474 2118428]
- iommu/vt-d: Consolidate irq domain getter (Myron Stowe) [2149474 2118428]
- x86/irq: Add allocation type for parent domain retrieval (Myron Stowe) [2149474 2118428]
- irqdomain: Export irq_domain_update_bus_token (Myron Stowe) [2149474 2118428]
- gitlab-ci: use CI templates from production branch (Michael Hofmann)
- iavf: remove INITIAL_MAC_SET to allow gARP to work properly (Stefan Assmann) [2149745 1938635]
- Revert "scsi: iscsi: ql4xxx: Use per-session workqueue for unbinding" (Chris Leech) [2152734 2122624]
- Revert "scsi: iscsi: Use the session workqueue for recovery" (Chris Leech) [2152734 2122624]
- arm64/bpf: Remove 128MB limit for BPF JIT programs (Yauheni Kaliuta) [2152138 2140163]
- bpf: Define bpf_jit_alloc_exec_limit for arm64 JIT (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: add `type` and `data` fields (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: use `ex` for `exception_table_entry` (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: make fixup_exception() return bool (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: consolidate definitions (Yauheni Kaliuta) [2152138 2140163]
- arm64: kvm: use kvm_exception_table_entry (Yauheni Kaliuta) [2152138 2140163]
- be2net: Fix buffer overflow in be_get_module_eeprom (Josef Oskera) [2160182 2126917]
- sched: Switch to upstream migrate disable code (Crystal Wood) [2132062]
- tick: Fix timer storm since introduction of timersd (Valentin Schneider) [2127204]
- softirq: Use a dedicated thread for timer wakeups. (Valentin Schneider) [2127204]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.14.1.rt7.224.el8_7]" date="1676030400">- [rt] build kernel-rt-4.18.0-425.14.1.rt7.224.el8_7 [2172278]
- ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems (Wei Huang) [2142170 2130653]
- KVM: x86: nSVM: implement nested LBR virtualization (Emanuele Giuseppe Esposito) [2166362 2155149]
- KVM: x86: nSVM: correctly virtualize LBR msrs when L2 is running (Emanuele Giuseppe Esposito) [2166362 2155149]
- kvm: x86: SVM: use vmcb* instead of svm-&gt;vmcb where it makes sense (Emanuele Giuseppe Esposito) [2166362 2155149]
- KVM: x86: nSVM: implement nested VMLOAD/VMSAVE (Emanuele Giuseppe Esposito) [2166362 2155149]
- IB/iser: Fix login with authentication (Kamal Heib) [2161750 2120676]
- act_mirred: use the backlog for nested calls to mirred ingress (Davide Caratti) [2164648 2131339] {CVE-2022-4269}
- net/sched: act_mirred: better wording on protection against excessive stack growth (Davide Caratti) [2164648 2131339] {CVE-2022-4269}
- redhat/configs: Set CONFIG_X86_AMD_PSTATE to 'm' (Prarit Bhargava) [2151275 2145246]
- KVM: x86: smm: preserve interrupt shadow in SMRAM (Maxim Levitsky) [2166368 2097144]
- KVM: x86: SVM: don't save SVM state to SMRAM when VM is not long mode capable (Maxim Levitsky) [2166368 2097144]
- KVM: x86: SVM: use smram structs (Maxim Levitsky) [2166368 2097144]
- KVM: svm: drop explicit return value of kvm_vcpu_map (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: use smram struct for 64 bit smram load/restore (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: use smram struct for 32 bit smram load/restore (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: use smram structs in the common code (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: add structs for KVM's smram layout (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: check for failures on smm entry (Maxim Levitsky) [2166368 2097144]
- KVM: x86: do not go through ctxt-&gt;ops when emulating rsm (Maxim Levitsky) [2166368 2097144]
- KVM: x86: move SMM exit to a new file (Maxim Levitsky) [2166368 2097144]
- KVM: x86: move SMM entry to a new file (Maxim Levitsky) [2166368 2097144]
- KVM: x86: start moving SMM-related functions to new files (Maxim Levitsky) [2166368 2097144]
- bug: introduce ASSERT_STRUCT_OFFSET (Maxim Levitsky) [2166368 2097144]
- KVM: x86: Rename and expose helper to detect if INIT/SIPI are allowed (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: number of GPRs in the SMRAM image depends on the image format (Maxim Levitsky) [2166368 2097144]
- KVM: x86: emulator: update the emulation mode after CR0 write (Maxim Levitsky) [2166368 2097144]
- KVM: x86: emulator: update the emulation mode after rsm (Maxim Levitsky) [2166368 2097144]
- KVM: x86: emulator: introduce emulator_recalc_and_set_mode (Maxim Levitsky) [2166368 2097144]
- KVM: x86: emulator: em_sysexit should update ctxt-&gt;mode (Maxim Levitsky) [2166368 2097144]
- KVM: x86: Bug the VM if the emulator accesses a non-existent GPR (Maxim Levitsky) [2166368 2097144]
- \KVM: x86: Reduce the number of emulator GPRs to '8' for 32-bit KVM (Maxim Levitsky) [2166368 2097144]
- KVM: x86: Use 16-bit fields to track dirty/valid emulator GPRs (Maxim Levitsky) [2166368 2097144]
- KVM: x86: Omit VCPU_REGS_RIP from emulator's _regs array (Maxim Levitsky) [2166368 2097144]
- \KVM: x86: Harden _regs accesses to guard against buggy input (Maxim Levitsky) [2166368 2097144]
- KVM: x86: Grab regs_dirty in local 'unsigned long' (Maxim Levitsky) [2166368 2097144]
- proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152577 2152578] {CVE-2022-4378}
- proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152577 2152578] {CVE-2022-4378}</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.15.1.rt7.225.el8_7]" date="1676548800">- [rt] build kernel-rt-4.18.0-425.15.1.rt7.225.el8_7 [2172278]
- net/mlx5e: Fix use-after-free when reverting termination table (Amir Tzin) [2167640 2112927]
- net/mlx5: Do not query pci info while pci disabled (Amir Tzin) [2167645 2129249]
- x86/fpu: Fix copy_xstate_to_uabi() to copy init states correctly (Dean Nelson) [2168384 2122850]
- x86/fpu: Exclude dynamic states from init_fpstate (Dean Nelson) [2168384 2122850]
- x86/fpu: Fix the init_fpstate size check with the actual size (Dean Nelson) [2168384 2122850]
- x86/fpu: Configure init_fpstate attributes orderly (Dean Nelson) [2168384 2122850]
- x86/fpu/xstate: Fix the ARCH_REQ_XCOMP_PERM implementation (Dean Nelson) [2168384 2122850]
- net/mlx5: E-Switch, properly handle ingress tagged packets on VST (Amir Tzin) [2166665 2096109]
- cpuhotplug: Fix KABI breakage (Prarit Bhargava) [2162763 2156529]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.16.1.rt7.226.el8_7]" date="1677153600">- [rt] build kernel-rt-4.18.0-425.16.1.rt7.226.el8_7 [2172278]
- ipv6: fix panic when fib_lookup_arg-&gt;result is fib6_info (Jiri Benc) [2167602 2140599]
- ceph: blocklist the kclient when receiving corrupted snap trace (Xiubo Li) [2168896 2162414]
- ceph: move mount state enum to super.h (Xiubo Li) [2168896 2162414]
- s390/kexec: fix ipl report address for kdump (Tobias Huschle) [2166296 2161328]
- mm, compaction: fix fast_isolate_around() to stay within boundaries (Daniel Vacek) [2170576 2149309]
- scsi: storvsc: Fix swiotlb bounce buffer leak in confidential VM (Emanuele Giuseppe Esposito) [2170228 2150659]
- netfilter: conntrack: handle tcp challenge acks during connection reuse (Florian Westphal) [2165587 2158726]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.17.1.rt7.227.el8_7]" date="1677844800">- [rt] build kernel-rt-4.18.0-425.17.1.rt7.227.el8_7 [2172278]
- net: mana: Add rmb after checking owner bits (Mohammed Gamal) [2173103 2139462]
- net: mana: Add support of XDP_REDIRECT action (Mohammed Gamal) [2173103 2139462]
- net: mana: Add the Linux MANA PF driver (Mohammed Gamal) [2173103 2139462]
- ice: fix lost multicast packets in promisc mode (Ken Cox) [2172550 2138215]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.18.1.rt7.228.el8_7]" date="1678708800">- [rt] build kernel-rt-4.18.0-425.18.1.rt7.228.el8_7 [2172278]
- futex: Resend potentially swallowed owner death notification (Rafael Aquini) [2170054]
- irq_work: Move lazy work execution to dedicated irq_work kthreads (Valentin Schneider) [2172163]
- irq_work: Sync the patches (Valentin Schneider) [2172163]
- irq_work: Also rcuwait for !IRQ_WORK_HARD_IRQ on PREEMPT_RT (Valentin Schneider) [2172163]
- irq_work: Allow irq_work_sync() to sleep if irq_work() no IRQ support. (Valentin Schneider) [2172163]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.19.1.rt7.229.el8_7]" date="1678968000">- [rt] build kernel-rt-4.18.0-425.19.1.rt7.229.el8_7 [2172278]
- s390/dasd: fix no record found for raw_track_access (Tobias Huschle) [2167776 2161270]
- locking/rwsem: Disable preemption in all down_read*() and up_read() code paths (Waiman Long) [2170939 2162139]
- locking/rwsem: Prevent non-first waiter from spinning in down_write() slowpath (Waiman Long) [2170939 2162139]
- locking/rwsem: Allow slowpath writer to ignore handoff bit if not set by first waiter (Waiman Long) [2170939 2162139]
- locking/rwsem: Always try to wake waiters in out_nolock path (Waiman Long) [2170939 2162139]
- locking/rwsem: No need to check for handoff bit if wait queue empty (Waiman Long) [2170939 2162139]
- locking/rwsem: Make handoff bit handling more consistent (Waiman Long) [2170939 2162139]
- locking/rwsem: Disable preemption while trying for rwsem lock (Waiman Long) [2170939 2162139]
- locking/rwsem: Conditionally wake waiters in reader/writer slowpaths (Waiman Long) [2170939 2162139]
- locking: Make owner_on_cpu() into &lt;linux/sched.h&gt; (Waiman Long) [2170939 2162139]
- locking/rwsem: Optimize down_read_trylock() under highly contended case (Waiman Long) [2170939 2162139]
- locking/rwsem: Fix comments about reader optimistic lock stealing conditions (Waiman Long) [2170939 2162139]
- locking/rwsem: Disable preemption for spinning region (Waiman Long) [2170939 2162139]
- locking: Remove rcu_read_{,un}lock() for preempt_{dis,en}able() (Waiman Long) [2170939 2162139]
- watchdog: fix UAF in reboot notifier handling in watchdog core code (Wander Lairson Costa) [2139770 2131308]
- netfilter: nf_conntrack_irc: Tighten matching on DCC message (Wander Lairson Costa) [2139770 2131308]
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF (Jaroslav Kysela) [2163405 2163406] {CVE-2023-0266}
- net/mlx5e: Fix enabling sriov while tc nic rules are offloaded (Amir Tzin) [2167647 2112925]
- net/mlx5: E-Switch, pair only capable devices (Amir Tzin) [2167647 2112925]
- net/mlx5: Fix mlx5_get_next_dev() peer device matching (Amir Tzin) [2167647 2112925]
- net/mlx5: Lag, filter non compatible devices (Amir Tzin) [2167647 2112925]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.19.2.rt7.230.el8_7]" date="1679054400">- [rt] build kernel-rt-4.18.0-425.19.2.rt7.230.el8_7.geb93 [2172278]
- ovl: fail on invalid uid/gid mapping at copy up (Miklos Szeredi) [2165341 2165342] {CVE-2023-0386}</changelog>
</package>
<package pkgid="9b3fb705e17ebb4637a8e3ab48cdcbf52a91bc8635240b69dc151b96b346c022" name="kernel-rt-modules-extra" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="425.10.1.rt7.220.el8_7"/>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.1.1.rt7.211.el8]" date="1663588800">- [rt] build kernel-rt-4.18.0-425.1.1.rt7.211.el8 [2067251]
- i40e: Fix kernel crash during module removal (Ivan Vecera) [2091489]
- redhat: enable zstream release numbering for rhel 8.7 (Jarod Wilson)
- ice: Allow operation with reduced device MSI-X (Petr Oros) [2102844]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.2.1.rt7.212.el8]" date="1664280000">- [rt] build kernel-rt-4.18.0-425.2.1.rt7.212.el8 [2067251]
- EDAC/ghes: Set the DIMM label unconditionally (Aristeu Rozanski) [2109712]
- configs: enable CONFIG_HP_ILO for aarch64 (Mark Salter) [2123508]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.3.1.rt7.213.el8]" date="1664539200">- [rt] build kernel-rt-4.18.0-425.3.1.rt7.213.el8 [2067251]
- iwlwifi: limit fw version for AC9560 to avoid fw crash (Íñigo Huguet) [2129297]
- sfc: fix null pointer dereference in efx_hard_start_xmit (Íñigo Huguet) [2119638]
- sfc: fix TX channel offset when using legacy interrupts (Íñigo Huguet) [2119638]
- netfilter: conntrack: reduce timeout when receiving out-of-window fin or rst (Florian Westphal) [2047366]
- netfilter: conntrack: remove unneeded indent level (Florian Westphal) [2047366]
- netfilter: conntrack: ignore overly delayed tcp packets (Florian Westphal) [2047366]
- netfilter: conntrack: prepare tcp_in_window for ternary return value (Florian Westphal) [2047366]
- netfilter: conntrack: remove pr_debug callsites from tcp tracker (Florian Westphal) [2047366]
- netfilter: conntrack: work around exceeded receive window (Florian Westphal) [2047366]
- netfilter: conntrack: improve RST handling when tuple is re-used (Florian Westphal) [2047366]
- netfilter: conntrack: avoid misleading 'invalid' in log message (Florian Westphal) [2047366]
- netfilter: remove BUG_ON() after skb_header_pointer() (Florian Westphal) [2047366]
- iavf: Detach device during reset task (Petr Oros) [2069206]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.4.1.rt7.214.el8]" date="1665144000">- [rt] build kernel-rt-4.18.0-425.4.1.rt7.214.el8 [2067251]
- random: allow reseeding DRBG with getrandom (Daiki Ueno) [2121766]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.5.1.rt7.215.el8_7]" date="1667822400">- [rt] build kernel-rt-4.18.0-425.5.1.rt7.215.el8_7 [2137411]
- ice: Fix interface being down after reset with link-down-on-close flag on (Petr Oros) [2136216 2024110]
- ice: Fix crash by keep old cfg when update TCs more than queues (Petr Oros) [2130992 2129902]
- ice: Fix tunnel checksum offload with fragmented traffic (Petr Oros) [2130992 2129902]
- ice: handle E822 generic device ID in PLDM header (Petr Oros) [2130992 2129902]
- ice: ethtool: Prohibit improper channel config for DCB (Petr Oros) [2130992 2129902]
- ice: ethtool: advertise 1000M speeds properly (Petr Oros) [2130992 2129902]
- ice: Fix switchdev rules book keeping (Petr Oros) [2130992 2129902]
- ice: fix access-beyond-end in the switch code (Petr Oros) [2130992 2129902]
- eth: ice: silence the GCC 12 array-bounds warning (Petr Oros) [2130992 2129902]
- ice: Expose RSS indirection tables for queue groups via ethtool (Petr Oros) [2130992 2129902]
- Revert "ice: Hide bus-info in ethtool for PRs in switchdev mode" (Petr Oros) [2130992 2129902]
- ice: remove period on argument description in ice_for_each_vf (Petr Oros) [2130992 2129902]
- ice: add a function comment for ice_cfg_mac_antispoof (Petr Oros) [2130992 2129902]
- ice: fix wording in comment for ice_reset_vf (Petr Oros) [2130992 2129902]
- ice: remove return value comment for ice_reset_all_vfs (Petr Oros) [2130992 2129902]
- ice: always check VF VSI pointer values (Petr Oros) [2130992 2129902]
- ice: add newline to dev_dbg in ice_vf_fdir_dump_info (Petr Oros) [2130992 2129902]
- ice: get switch id on switchdev devices (Petr Oros) [2130992 2129902]
- ice: return ENOSPC when exceeding ICE_MAX_CHAIN_WORDS (Petr Oros) [2130992 2129902]
- ice: introduce common helper for retrieving VSI by vsi_num (Petr Oros) [2130992 2129902]
- ice: use min_t() to make code cleaner in ice_gnss (Petr Oros) [2130992 2129902]
- ice: Add mpls+tso support (Petr Oros) [2130992 2129902]
- ice: switch: convert packet template match code to rodata (Petr Oros) [2130992 2129902]
- ice: switch: use convenience macros to declare dummy pkt templates (Petr Oros) [2130992 2129902]
- ice: switch: use a struct to pass packet template params (Petr Oros) [2130992 2129902]
- ice: switch: unobscurify bitops loop in ice_fill_adv_dummy_packet() (Petr Oros) [2130992 2129902]
- ice: switch: add and use u16[] aliases to ice_adv_lkup_elem::{h, m}_u (Petr Oros) [2130992 2129902]
- ice: Support GTP-U and GTP-C offload in switchdev (Petr Oros) [2130992 2129902]
- ice: Remove useless DMA-32 fallback configuration (Petr Oros) [2130992 2129902]
- ice: switch to napi_build_skb() (Petr Oros) [2130992 2129902]
- redhat: switch to z-stream dist tag and build targets (Jarod Wilson)
- block: avoid sign extend problem with default queue flags mask (Nico Pache) [2135813]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.6.1.rt7.216.el8_7]" date="1668168000">- [rt] build kernel-rt-4.18.0-425.6.1.rt7.216.el8_7 [2137411]
- ice: Add low latency Tx timestamp read (Petr Oros) [2136036 2092425]
- ice: introduce ice_ptp_reset_cached_phctime function (Petr Oros) [2136036 2092425]
- ice: re-arrange some static functions in ice_ptp.c (Petr Oros) [2136036 2092425]
- ice: track and warn when PHC update is late (Petr Oros) [2136036 2092425]
- ice: track Tx timestamp stats similar to other Intel drivers (Petr Oros) [2136036 2092425]
- ice: implement adjfine with mul_u64_u64_div_u64 (Petr Oros) [2136036 2092425]
- ice: Add EXTTS feature to the feature bitmap (Petr Oros) [2136036 2092425]
- math: Export mul_u64_u64_div_u64 (Petr Oros) [2136036 2092425]
- vfio/type1: Unpin zero pages (Alex Williamson) [2128515 2123015]
- net: atlantic: remove aq_nic_deinit() when resume (Íñigo Huguet) [2131935 2130839]
- net: atlantic: remove deep parameter on suspend/resume functions (Íñigo Huguet) [2131935 2130839]
- CI: Use zstream builder container (Veronika Kabatova)
- CI: Add disttag override for 8.7 (Veronika Kabatova)</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.7.1.rt7.217.el8_7]" date="1669723200">- [rt] build kernel-rt-4.18.0-425.7.1.rt7.217.el8_7 [2137411]
- ice: Add additional CSR registers to ETHTOOL_GREGS (Petr Oros) [2136513 2131024]
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps (Petr Oros) [2137270 2106964]
- i40e: Fix VF set max MTU size (Petr Oros) [2137270 2106964]
- iavf: Fix set max MTU size with port VLAN and jumbo frames (Petr Oros) [2137270 2106964]
- iavf: Fix bad page state (Petr Oros) [2137270 2106964]
- Revert "scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels" (Jarod Wilson)
- scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels (Tomas Henzl) [2139216]
- Revert "ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems" (Jarod Wilson)
- ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems (Wei Huang) [2142170 2130653]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.8.1.rt7.218.el8_7]" date="1669982400">- [rt] build kernel-rt-4.18.0-425.8.1.rt7.218.el8_7 [2137411]
- scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels (Tomas Henzl) [2139216 2134535]
- RDMA/mlx5: Set local port to one when accessing counters (Mohammad Kabat) [2141957 2077119]
- drm/mgag200: Fix PLL setup for G200_SE_A rev &gt;=4 (Jocelyn Falempe) [2140152 2130159]
- iavf: Do not restart Tx queues after reset task failure (Petr Oros) [2149081 2134005]
- iavf: Fix a crash during reset task (Petr Oros) [2149081 2134005]
- scsi: core: Allow the ALUA transitioning state enough time (Tomas Henzl) [2147374 2084250]
- scsi: core: Return BLK_STS_TRANSPORT for ALUA transitioning (Tomas Henzl) [2147374 2084250]
- i40e: Fix DMA mappings leak (Ivan Vecera) [2138205 2077847]
- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2142724 2142725] {CVE-2022-2964}
- net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2142724 2142725] {CVE-2022-2964}</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.9.1.rt7.219.el8_7]" date="1670587200">- [rt] build kernel-rt-4.18.0-425.9.1.rt7.219.el8_7 [2137411]
- Documentation/admin-guide: Document nomodeset kernel parameter (Jocelyn Falempe) [2145218 2143952]
- drm: Move nomodeset kernel parameter to the DRM subsystem (Jocelyn Falempe) [2145218 2143952]
- wait: Fix __wait_event_hrtimeout for RT/DL tasks (Derek Barbosa) [2138953 2125233]
- scsi: zfcp: Fix missing auto port scan and thus missing target ports (Tobias Huschle) [2127849 2121089]
- net: Fix return value of qdisc ingress handling on success (Ivan Vecera) [2141878 2131361]</changelog>
  <changelog author="Chris White &lt;chwhite@redhat.com&gt; [4.18.0-425.10.1.rt7.220.el8_7]" date="1671192000">- [rt] build kernel-rt-4.18.0-425.10.1.rt7.220.el8_7 [2137411]
- scsi: target: loop: Fix handling of aborted TMRs (Maurizio Lombardi) [2144583 2141713]
- ice: virtchnl rss hena support (Petr Oros) [2148130]
- ice: Fix configuring VIRTCHNL_OP_CONFIG_VSI_QUEUES with unbalanced queues (Michal Schmidt) [2142017 2137378]
- ice: Add support Flex RXD (Michal Schmidt) [2138157 2131310]
- netfilter: flowtable: fix stuck flows on cleanup due to pending work (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: add function to invoke garbage collection immediately (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: pass flowtable to nf_flow_table_iterate() (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: separate replace, destroy and stats to different workqueues (Phil Sutter) [2134084 2131370]
- x86/paravirt: Add a dummy __x86_paravirt_patch_template() function (Waiman Long) [2152206 2144161]
- x86/paravirt: Fix kABI breakage in struct pv_mmu_ops (Waiman Long) [2152206 2144161]
- drm/i915: fix TLB invalidation for Gen12 video and compute engines (Wander Lairson Costa) [2148162 2148163] {CVE-2022-4139}
- PCI: hv: Do not set PCI_COMMAND_MEMORY to reduce VM boot time (Emanuele Giuseppe Esposito) [2150912 2082836]
- iavf: Fix cached head and tail value for iavf_get_tx_pending (Stefan Assmann) [2149742 2103944]
- iavf: Fix change VF's mac address (Stefan Assmann) [2149742 2103944]
- iavf: Fix race between iavf_close and iavf_reset_task (Stefan Assmann) [2149742 2103944]
- net: ethernet: move from strlcpy with unused retval to strscpy (Stefan Assmann) [2149742 2103944]
- iavf: Fix 'tc qdisc show' listing too many queues (Stefan Assmann) [2149742 2103944]
- iavf: Fix max_rate limiting (Stefan Assmann) [2149742 2103944]
- iavf: Check for duplicate TC flower filter before parsing (Stefan Assmann) [2149742 2103944]
- iavf: Fix handling of dummy receive descriptors (Stefan Assmann) [2149742 2103944]
- iavf: Disallow changing rx/tx-frames and rx/tx-frames-irq (Stefan Assmann) [2149742 2103944]
- intel/iavf:fix repeated words in comments (Stefan Assmann) [2149742 2103944]
- intel: remove unused macros (Stefan Assmann) [2149742 2103944]
- iavf: Add waiting for response from PF in set mac (Stefan Assmann) [2149742 2103944]</changelog>
</package>
<package pkgid="2acaf87c9a585e2eec222de76fdd07b0607005b715c231cd067120f1e1b545c8" name="kernel-rt-modules-extra" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="425.13.1.rt7.223.el8_7"/>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.4.1.rt7.214.el8]" date="1665144000">- [rt] build kernel-rt-4.18.0-425.4.1.rt7.214.el8 [2067251]
- random: allow reseeding DRBG with getrandom (Daiki Ueno) [2121766]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.5.1.rt7.215.el8_7]" date="1667822400">- [rt] build kernel-rt-4.18.0-425.5.1.rt7.215.el8_7 [2137411]
- ice: Fix interface being down after reset with link-down-on-close flag on (Petr Oros) [2136216 2024110]
- ice: Fix crash by keep old cfg when update TCs more than queues (Petr Oros) [2130992 2129902]
- ice: Fix tunnel checksum offload with fragmented traffic (Petr Oros) [2130992 2129902]
- ice: handle E822 generic device ID in PLDM header (Petr Oros) [2130992 2129902]
- ice: ethtool: Prohibit improper channel config for DCB (Petr Oros) [2130992 2129902]
- ice: ethtool: advertise 1000M speeds properly (Petr Oros) [2130992 2129902]
- ice: Fix switchdev rules book keeping (Petr Oros) [2130992 2129902]
- ice: fix access-beyond-end in the switch code (Petr Oros) [2130992 2129902]
- eth: ice: silence the GCC 12 array-bounds warning (Petr Oros) [2130992 2129902]
- ice: Expose RSS indirection tables for queue groups via ethtool (Petr Oros) [2130992 2129902]
- Revert "ice: Hide bus-info in ethtool for PRs in switchdev mode" (Petr Oros) [2130992 2129902]
- ice: remove period on argument description in ice_for_each_vf (Petr Oros) [2130992 2129902]
- ice: add a function comment for ice_cfg_mac_antispoof (Petr Oros) [2130992 2129902]
- ice: fix wording in comment for ice_reset_vf (Petr Oros) [2130992 2129902]
- ice: remove return value comment for ice_reset_all_vfs (Petr Oros) [2130992 2129902]
- ice: always check VF VSI pointer values (Petr Oros) [2130992 2129902]
- ice: add newline to dev_dbg in ice_vf_fdir_dump_info (Petr Oros) [2130992 2129902]
- ice: get switch id on switchdev devices (Petr Oros) [2130992 2129902]
- ice: return ENOSPC when exceeding ICE_MAX_CHAIN_WORDS (Petr Oros) [2130992 2129902]
- ice: introduce common helper for retrieving VSI by vsi_num (Petr Oros) [2130992 2129902]
- ice: use min_t() to make code cleaner in ice_gnss (Petr Oros) [2130992 2129902]
- ice: Add mpls+tso support (Petr Oros) [2130992 2129902]
- ice: switch: convert packet template match code to rodata (Petr Oros) [2130992 2129902]
- ice: switch: use convenience macros to declare dummy pkt templates (Petr Oros) [2130992 2129902]
- ice: switch: use a struct to pass packet template params (Petr Oros) [2130992 2129902]
- ice: switch: unobscurify bitops loop in ice_fill_adv_dummy_packet() (Petr Oros) [2130992 2129902]
- ice: switch: add and use u16[] aliases to ice_adv_lkup_elem::{h, m}_u (Petr Oros) [2130992 2129902]
- ice: Support GTP-U and GTP-C offload in switchdev (Petr Oros) [2130992 2129902]
- ice: Remove useless DMA-32 fallback configuration (Petr Oros) [2130992 2129902]
- ice: switch to napi_build_skb() (Petr Oros) [2130992 2129902]
- redhat: switch to z-stream dist tag and build targets (Jarod Wilson)
- block: avoid sign extend problem with default queue flags mask (Nico Pache) [2135813]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.6.1.rt7.216.el8_7]" date="1668168000">- [rt] build kernel-rt-4.18.0-425.6.1.rt7.216.el8_7 [2137411]
- ice: Add low latency Tx timestamp read (Petr Oros) [2136036 2092425]
- ice: introduce ice_ptp_reset_cached_phctime function (Petr Oros) [2136036 2092425]
- ice: re-arrange some static functions in ice_ptp.c (Petr Oros) [2136036 2092425]
- ice: track and warn when PHC update is late (Petr Oros) [2136036 2092425]
- ice: track Tx timestamp stats similar to other Intel drivers (Petr Oros) [2136036 2092425]
- ice: implement adjfine with mul_u64_u64_div_u64 (Petr Oros) [2136036 2092425]
- ice: Add EXTTS feature to the feature bitmap (Petr Oros) [2136036 2092425]
- math: Export mul_u64_u64_div_u64 (Petr Oros) [2136036 2092425]
- vfio/type1: Unpin zero pages (Alex Williamson) [2128515 2123015]
- net: atlantic: remove aq_nic_deinit() when resume (Íñigo Huguet) [2131935 2130839]
- net: atlantic: remove deep parameter on suspend/resume functions (Íñigo Huguet) [2131935 2130839]
- CI: Use zstream builder container (Veronika Kabatova)
- CI: Add disttag override for 8.7 (Veronika Kabatova)</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.7.1.rt7.217.el8_7]" date="1669723200">- [rt] build kernel-rt-4.18.0-425.7.1.rt7.217.el8_7 [2137411]
- ice: Add additional CSR registers to ETHTOOL_GREGS (Petr Oros) [2136513 2131024]
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps (Petr Oros) [2137270 2106964]
- i40e: Fix VF set max MTU size (Petr Oros) [2137270 2106964]
- iavf: Fix set max MTU size with port VLAN and jumbo frames (Petr Oros) [2137270 2106964]
- iavf: Fix bad page state (Petr Oros) [2137270 2106964]
- Revert "scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels" (Jarod Wilson)
- scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels (Tomas Henzl) [2139216]
- Revert "ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems" (Jarod Wilson)
- ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems (Wei Huang) [2142170 2130653]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.8.1.rt7.218.el8_7]" date="1669982400">- [rt] build kernel-rt-4.18.0-425.8.1.rt7.218.el8_7 [2137411]
- scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels (Tomas Henzl) [2139216 2134535]
- RDMA/mlx5: Set local port to one when accessing counters (Mohammad Kabat) [2141957 2077119]
- drm/mgag200: Fix PLL setup for G200_SE_A rev &gt;=4 (Jocelyn Falempe) [2140152 2130159]
- iavf: Do not restart Tx queues after reset task failure (Petr Oros) [2149081 2134005]
- iavf: Fix a crash during reset task (Petr Oros) [2149081 2134005]
- scsi: core: Allow the ALUA transitioning state enough time (Tomas Henzl) [2147374 2084250]
- scsi: core: Return BLK_STS_TRANSPORT for ALUA transitioning (Tomas Henzl) [2147374 2084250]
- i40e: Fix DMA mappings leak (Ivan Vecera) [2138205 2077847]
- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2142724 2142725] {CVE-2022-2964}
- net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2142724 2142725] {CVE-2022-2964}</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.9.1.rt7.219.el8_7]" date="1670587200">- [rt] build kernel-rt-4.18.0-425.9.1.rt7.219.el8_7 [2137411]
- Documentation/admin-guide: Document nomodeset kernel parameter (Jocelyn Falempe) [2145218 2143952]
- drm: Move nomodeset kernel parameter to the DRM subsystem (Jocelyn Falempe) [2145218 2143952]
- wait: Fix __wait_event_hrtimeout for RT/DL tasks (Derek Barbosa) [2138953 2125233]
- scsi: zfcp: Fix missing auto port scan and thus missing target ports (Tobias Huschle) [2127849 2121089]
- net: Fix return value of qdisc ingress handling on success (Ivan Vecera) [2141878 2131361]</changelog>
  <changelog author="Chris White &lt;chwhite@redhat.com&gt; [4.18.0-425.10.1.rt7.220.el8_7]" date="1671192000">- [rt] build kernel-rt-4.18.0-425.10.1.rt7.220.el8_7 [2137411]
- scsi: target: loop: Fix handling of aborted TMRs (Maurizio Lombardi) [2144583 2141713]
- ice: virtchnl rss hena support (Petr Oros) [2148130]
- ice: Fix configuring VIRTCHNL_OP_CONFIG_VSI_QUEUES with unbalanced queues (Michal Schmidt) [2142017 2137378]
- ice: Add support Flex RXD (Michal Schmidt) [2138157 2131310]
- netfilter: flowtable: fix stuck flows on cleanup due to pending work (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: add function to invoke garbage collection immediately (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: pass flowtable to nf_flow_table_iterate() (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: separate replace, destroy and stats to different workqueues (Phil Sutter) [2134084 2131370]
- x86/paravirt: Add a dummy __x86_paravirt_patch_template() function (Waiman Long) [2152206 2144161]
- x86/paravirt: Fix kABI breakage in struct pv_mmu_ops (Waiman Long) [2152206 2144161]
- drm/i915: fix TLB invalidation for Gen12 video and compute engines (Wander Lairson Costa) [2148162 2148163] {CVE-2022-4139}
- PCI: hv: Do not set PCI_COMMAND_MEMORY to reduce VM boot time (Emanuele Giuseppe Esposito) [2150912 2082836]
- iavf: Fix cached head and tail value for iavf_get_tx_pending (Stefan Assmann) [2149742 2103944]
- iavf: Fix change VF's mac address (Stefan Assmann) [2149742 2103944]
- iavf: Fix race between iavf_close and iavf_reset_task (Stefan Assmann) [2149742 2103944]
- net: ethernet: move from strlcpy with unused retval to strscpy (Stefan Assmann) [2149742 2103944]
- iavf: Fix 'tc qdisc show' listing too many queues (Stefan Assmann) [2149742 2103944]
- iavf: Fix max_rate limiting (Stefan Assmann) [2149742 2103944]
- iavf: Check for duplicate TC flower filter before parsing (Stefan Assmann) [2149742 2103944]
- iavf: Fix handling of dummy receive descriptors (Stefan Assmann) [2149742 2103944]
- iavf: Disallow changing rx/tx-frames and rx/tx-frames-irq (Stefan Assmann) [2149742 2103944]
- intel/iavf:fix repeated words in comments (Stefan Assmann) [2149742 2103944]
- intel: remove unused macros (Stefan Assmann) [2149742 2103944]
- iavf: Add waiting for response from PF in set mac (Stefan Assmann) [2149742 2103944]</changelog>
  <changelog author="Chris White &lt;chwhite@redhat.com&gt; [4.18.0-425.11.1.rt7.221.el8_7]" date="1673352000">- [rt] build kernel-rt-4.18.0-425.11.1.rt7.221.el8_7 [2159806]
- NFSD: Protect against send buffer overflow in NFSv3 READ (Scott Mayhew) [2143174] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv2 READ (Scott Mayhew) [2143174] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv3 READDIR (Scott Mayhew) [2143174] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv2 READDIR (Scott Mayhew) [2143174] {CVE-2022-43945}
- SUNRPC: Fix svcxdr_init_encode's buflen calculation (Scott Mayhew) [2143174] {CVE-2022-43945}
- SUNRPC: Fix svcxdr_init_decode's end-of-buffer calculation (Scott Mayhew) [2143174] {CVE-2022-43945}
- panic, kexec: make __crash_kexec() NMI safe (Valentin Schneider) [2139580]
- kexec: turn all kexec_mutex acquisitions into trylocks (Valentin Schneider) [2139580]
- kexec: move locking into do_kexec_load (Valentin Schneider) [2139580]
- vdpa/mlx5: re-create forwarding rules after mac modified (Laurent Vivier) [2152912]
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry (Waiman Long) [2153653]
- irq: Call tick_irq_enter() inside HARDIRQ_OFFSET (Waiman Long) [2153653]
- irqtime: Move irqtime entry accounting after irq offset incrementation (Waiman Long) [2153653]
- sched/vtime: Consolidate IRQ time accounting (Waiman Long) [2153653]
- s390/vtime: Use the generic IRQ entry accounting (Waiman Long) [2153653]
- sched/cputime: Remove symbol exports from IRQ time accounting (Waiman Long) [2153653]
- genirq/irqdomain: Don't try to free an interrupt that has no mapping (Waiman Long) [2153653]
- genirq: Provide __irq_enter/exit_raw() (Waiman Long) [2153653]
- powerpc/time: Only set CONFIG_ARCH_HAS_SCALED_CPUTIME on PPC64 (Waiman Long) [2153653]
- powerpc/time: isolate scaled cputime accounting in dedicated functions. (Waiman Long) [2153653]
- PCI: hv: Fix synchronization between channel callback and hv_pci_bus_exit() (Mohammed Gamal) [2155280]
- PCI: hv: Fix synchronization between channel callback and hv_compose_msi_msg() (Mohammed Gamal) [2155280]
- PCI: hv: Use vmbus_requestor to generate transaction IDs for VMbus hardening (Mohammed Gamal) [2155280]
- net/mlx5e: TC, Reject forwarding from internal port to internal port (Mohammad Kabat) [2141959 2131345]
- hv_netvsc: Fix race between VF offering and VF association message from host (Mohammed Gamal) [2155272]
- x86/mce: Reduce number of machine checks taken during recovery (Prarit Bhargava) [2137592 2104388]
- cgroup/cpuset: Reduce cpuset_rwsem writer latency (Waiman Long) [2153108]
- rcu/exp: Mark current CPU as exp-QS in IPI loop second pass (Waiman Long) [2153108]
- rcu: Always inline rcu_dynticks_task*_{enter,exit}() (Waiman Long) [2153108]
- rcu: Fix existing exp request check in sync_sched_exp_online_cleanup() (Waiman Long) [2153108]
- rcu: Fix macro name CONFIG_TASKS_RCU_TRACE (Waiman Long) [2153108]
- rcu: Fix stall-warning deadlock due to non-release of rcu_node -&gt;lock (Waiman Long) [2153108]
- rcu: Fix to include first blocked task in stall warning (Waiman Long) [2153108]
- cgroup: Use cgroup_attach_{lock,unlock}() from cgroup_attach_task_all() (Waiman Long) [2153108]
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all() (Waiman Long) [2153108]
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock (Waiman Long) [2153108]
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree (Waiman Long) [2153108]
- cgroup/cpuset: Fix a race between cpuset_attach() and cpu hotplug (Waiman Long) [2153108]
- cgroup: reduce dependency on cgroup_mutex (Waiman Long) [2153108]
- sunrpc: Set sk_allocation to GFP_NOFS to avoid using current-&gt;task_frag. (Guillaume Nault) [2153230]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.12.1.rt7.222.el8_7]" date="1674129600">- [rt] build kernel-rt-4.18.0-425.12.1.rt7.222.el8_7 [2159806]
- x86/fpu: Prevent FPU state corruption (Oleksandr Natalenko) [2134586 2130890]
- x86/fpu: Drop fpregs lock before inheriting FPU permissions (Eder Zulian) [2154460 2153549]
- kernel-doc: fix undefined args variable (Jan Stancek) [2157905 2134954]
- mm: memcontrol: fix potential oom_lock recursion deadlock (Waiman Long) [2157922 2138886]
- memcg: prohibit unconditional exceeding the limit of dying tasks (Waiman Long) [2157922 2138886]
- mm, oom: do not trigger out_of_memory from the #PF (Waiman Long) [2157922 2138886]
- mm, oom: pagefault_out_of_memory: don't force global OOM for dying tasks (Waiman Long) [2157922 2138886]
- mm: memcontrol: don't count limit-setting reclaim as memory pressure (Waiman Long) [2157922 2138886]
- KVM: s390: vsie: Fix the initialization of the epoch extension (epdx) field (Thomas Huth) [2158813 2151854]
- net: mana: Fix race on per-CQ variable napi work_done (Emanuele Giuseppe Esposito) [2155437 2151722]
- mei: me: add adler lake point S DID (Prarit Bhargava) [2141783 2141602]
- PCI: hv: Only reuse existing IRTE allocation for Multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix the definition of vector in hv_compose_msi_msg() (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix interrupt mapping for multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Reuse existing IRTE allocation in compose_msi_msg() (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix hv_arch_irq_unmask() for multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix multi-MSI to allow more than one MSI vector (Emanuele Giuseppe Esposito) [2155289 2100275]
- drm/ast: Support multiple outputs (Jarod Wilson) [2149287 2147553]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.13.1.rt7.223.el8_7]" date="1675339200">- [rt] build kernel-rt-4.18.0-425.13.1.rt7.223.el8_7 [2159806]
- mm/cgroup/reclaim: fix dirty pages throttling on cgroup v1 (Waiman Long) [2160221]
- mm: vmscan: remove deadlock due to throttling failing to make progress (Waiman Long) [2160221]
- mm: vmscan: reduce throttling due to a failure to make progress -fix (Waiman Long) [2160221]
- mm: vmscan: Reduce throttling due to a failure to make progress (Waiman Long) [2160221]
- mm/vmscan: delay waking of tasks throttled on NOPROGRESS (Waiman Long) [2160221]
- mm/vmscan: increase the timeout if page reclaim is not making progress (Waiman Long) [2160221]
- mm/vmscan: centralise timeout values for reclaim_throttle (Waiman Long) [2160221]
- mm/page_alloc: remove the throttling logic from the page allocator (Waiman Long) [2160221]
- mm/writeback: throttle based on page writeback instead of congestion (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim when no progress is being made (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim and compaction when too may pages are isolated (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim until some writeback completes if congested (Waiman Long) [2160221]
- mm/vmscan.c: delete or fix duplicated words (Waiman Long) [2160221]
- mm,page_alloc: PF_WQ_WORKER threads must sleep at should_reclaim_retry() (Nico Pache) [2160221]
- ceph: avoid putting the realm twice when decoding snaps fails (Xiubo Li) [2155797 2139881]
- mm/mremap: hold the rmap lock in write mode when moving page table entries. (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap: use pmd/pud_poplulate to update page table entries (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap: don't enable optimized PUD move if page table levels is 2 (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap: convert huge PUD move to separate helper (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap: fix BUILD_BUG_ON() error in get_extent (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap.c: fix extent calculation (Waiman Long) [2140950] {CVE-2022-41222}
- x86: mremap speedup - Enable HAVE_MOVE_PUD (Waiman Long) [2140950] {CVE-2022-41222}
- mm: speedup mremap on 1GB or larger regions (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap: start addresses are properly aligned (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap: calculate extent in one place (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap: it is sure to have enough space when extent meets requirement (Waiman Long) [2140950] {CVE-2022-41222}
- s390/boot: add secure boot trailer (Tobias Huschle) [2151530 2141967]
- i40e: Fix VF hang when reset is triggered on another VF (Ivan Vecera) [2160460 2103801]
- i2c: ismt: Fix an out-of-bounds bug in ismt_access() (Prarit Bhargava) [2154388 2119066] {CVE-2022-2873}
- iavf: schedule watchdog immediately when changing primary MAC (Michal Schmidt) [2163257 2152493]
- iavf: Move netdev_update_features() into watchdog task (Michal Schmidt) [2163257 2152493]
- iavf: fix temporary deadlock and failure to set MAC address (Michal Schmidt) [2163257 2152493]
- iavf: Fix error handling in iavf_init_module() (Michal Schmidt) [2163257 2152493]
- iommu/vt-d: Clean up si_domain in the init_dmars() error path (Jerry Snitselaar) [2149474 2118428]
- x86/pci/xen: Use msi_msg shadow structs (Jerry Snitselaar) [2149474 2118428]
- iommu/intel: Use msi_msg shadow structs (Jerry Snitselaar) [2149474 2118428]
- PCI: MSI: Fix Kconfig dependencies for PCI_MSI_ARCH_FALLBACKS (Jerry Snitselaar) [2149474 2118428]
- x86/apic/msi: Unbreak DMAR and HPET MSI (Jerry Snitselaar) [2149474 2118428]
- iommu/amd: Remove domain search for PCI/MSI (Jerry Snitselaar) [2149474 2118428]
- iommu/vt-d: Remove domain search for PCI/MSI[X] (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Make most MSI ops XEN private (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Cleanup the arch_*_msi_irqs() leftovers (Jerry Snitselaar) [2149474 2118428]
- PCI/MSI: Make arch_.*_msi_irq[s] fallbacks selectable (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Wrap XEN MSI management into irqdomain (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Consolidate XEN-MSI init (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Rework MSI teardown (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Make xen_msi_init() static and rename it to xen_hvm_msi_init() (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Move apic_post_init() invocation to one place (Jerry Snitselaar) [2149474 2118428]
- x86/msi: Use generic MSI domain ops (Jerry Snitselaar) [2149474 2118428]
- x86/msi: Remove pointless vcpu_affinity callback (Jerry Snitselaar) [2149474 2118428]
- iommu/vt-d: Fix compile error with CONFIG_PCI_ATS not set (Myron Stowe) [2149474 2118428]
- iommu/vt-d: Cure VF irqdomain hickup (Myron Stowe) [2149474 2118428]
- x86/pci: Set default irq domain in pcibios_add_device() (Myron Stowe) [2149474 2118428]
- iommm/amd: Store irq domain in struct device (Myron Stowe) [2149474 2118428]
- iommm/vt-d: Store irq domain in struct device (Myron Stowe) [2149474 2118428]
- PCI/MSI: Provide pci_dev_has_special_msi_domain() helper (Myron Stowe) [2149474 2118428]
- x86/msi: Consolidate MSI allocation (Myron Stowe) [2149474 2118428]
- PCI/MSI: Rework pci_msi_domain_calc_hwirq() (Myron Stowe) [2149474 2118428]
- x86/irq: Consolidate UV domain allocation (Myron Stowe) [2149474 2118428]
- x86/irq: Consolidate DMAR irq allocation (Myron Stowe) [2149474 2118428]
- x86_ioapic_Consolidate_IOAPIC_allocation (Myron Stowe) [2149474 2118428]
- x86/msi: Consolidate HPET allocation (Myron Stowe) [2149474 2118428]
- iommu/irq_remapping: Consolidate irq domain lookup (Myron Stowe) [2149474 2118428]
- iommu/amd: Consolidate irq domain getter (Myron Stowe) [2149474 2118428]
- iommu/vt-d: Consolidate irq domain getter (Myron Stowe) [2149474 2118428]
- x86/irq: Add allocation type for parent domain retrieval (Myron Stowe) [2149474 2118428]
- irqdomain: Export irq_domain_update_bus_token (Myron Stowe) [2149474 2118428]
- gitlab-ci: use CI templates from production branch (Michael Hofmann)
- iavf: remove INITIAL_MAC_SET to allow gARP to work properly (Stefan Assmann) [2149745 1938635]
- Revert "scsi: iscsi: ql4xxx: Use per-session workqueue for unbinding" (Chris Leech) [2152734 2122624]
- Revert "scsi: iscsi: Use the session workqueue for recovery" (Chris Leech) [2152734 2122624]
- arm64/bpf: Remove 128MB limit for BPF JIT programs (Yauheni Kaliuta) [2152138 2140163]
- bpf: Define bpf_jit_alloc_exec_limit for arm64 JIT (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: add `type` and `data` fields (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: use `ex` for `exception_table_entry` (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: make fixup_exception() return bool (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: consolidate definitions (Yauheni Kaliuta) [2152138 2140163]
- arm64: kvm: use kvm_exception_table_entry (Yauheni Kaliuta) [2152138 2140163]
- be2net: Fix buffer overflow in be_get_module_eeprom (Josef Oskera) [2160182 2126917]
- sched: Switch to upstream migrate disable code (Crystal Wood) [2132062]
- tick: Fix timer storm since introduction of timersd (Valentin Schneider) [2127204]
- softirq: Use a dedicated thread for timer wakeups. (Valentin Schneider) [2127204]</changelog>
</package>
<package pkgid="5f356c3f05f061f1be0b61af54bb4aec45b7d649468efc10a9c1074c0ee79217" name="kernel-rt-modules-extra" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="425.19.2.rt7.230.el8_7"/>
  <changelog author="Chris White &lt;chwhite@redhat.com&gt; [4.18.0-425.11.1.rt7.221.el8_7]" date="1673352000">- [rt] build kernel-rt-4.18.0-425.11.1.rt7.221.el8_7 [2159806]
- NFSD: Protect against send buffer overflow in NFSv3 READ (Scott Mayhew) [2143174] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv2 READ (Scott Mayhew) [2143174] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv3 READDIR (Scott Mayhew) [2143174] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv2 READDIR (Scott Mayhew) [2143174] {CVE-2022-43945}
- SUNRPC: Fix svcxdr_init_encode's buflen calculation (Scott Mayhew) [2143174] {CVE-2022-43945}
- SUNRPC: Fix svcxdr_init_decode's end-of-buffer calculation (Scott Mayhew) [2143174] {CVE-2022-43945}
- panic, kexec: make __crash_kexec() NMI safe (Valentin Schneider) [2139851]
- kexec: turn all kexec_mutex acquisitions into trylocks (Valentin Schneider) [2139580]
- kexec: move locking into do_kexec_load (Valentin Schneider) [2139580]
- vdpa/mlx5: re-create forwarding rules after mac modified (Laurent Vivier) [2152912]
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry (Waiman Long) [2153653]
- irq: Call tick_irq_enter() inside HARDIRQ_OFFSET (Waiman Long) [2153653]
- irqtime: Move irqtime entry accounting after irq offset incrementation (Waiman Long) [2153653]
- sched/vtime: Consolidate IRQ time accounting (Waiman Long) [2153653]
- s390/vtime: Use the generic IRQ entry accounting (Waiman Long) [2153653]
- sched/cputime: Remove symbol exports from IRQ time accounting (Waiman Long) [2153653]
- genirq/irqdomain: Don't try to free an interrupt that has no mapping (Waiman Long) [2153653]
- genirq: Provide __irq_enter/exit_raw() (Waiman Long) [2153653]
- powerpc/time: Only set CONFIG_ARCH_HAS_SCALED_CPUTIME on PPC64 (Waiman Long) [2153653]
- powerpc/time: isolate scaled cputime accounting in dedicated functions. (Waiman Long) [2153653]
- PCI: hv: Fix synchronization between channel callback and hv_pci_bus_exit() (Mohammed Gamal) [2155280]
- PCI: hv: Fix synchronization between channel callback and hv_compose_msi_msg() (Mohammed Gamal) [2155280]
- PCI: hv: Use vmbus_requestor to generate transaction IDs for VMbus hardening (Mohammed Gamal) [2155280]
- net/mlx5e: TC, Reject forwarding from internal port to internal port (Mohammad Kabat) [2141959 2131345]
- hv_netvsc: Fix race between VF offering and VF association message from host (Mohammed Gamal) [2155272]
- x86/mce: Reduce number of machine checks taken during recovery (Prarit Bhargava) [2137592 2104388]
- cgroup/cpuset: Reduce cpuset_rwsem writer latency (Waiman Long) [2153108]
- rcu/exp: Mark current CPU as exp-QS in IPI loop second pass (Waiman Long) [2153108]
- rcu: Always inline rcu_dynticks_task*_{enter,exit}() (Waiman Long) [2153108]
- rcu: Fix existing exp request check in sync_sched_exp_online_cleanup() (Waiman Long) [2153108]
- rcu: Fix macro name CONFIG_TASKS_RCU_TRACE (Waiman Long) [2153108]
- rcu: Fix stall-warning deadlock due to non-release of rcu_node -&gt;lock (Waiman Long) [2153108]
- rcu: Fix to include first blocked task in stall warning (Waiman Long) [2153108]
- cgroup: Use cgroup_attach_{lock,unlock}() from cgroup_attach_task_all() (Waiman Long) [2153108]
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all() (Waiman Long) [2153108]
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock (Waiman Long) [2153108]
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree (Waiman Long) [2153108]
- cgroup/cpuset: Fix a race between cpuset_attach() and cpu hotplug (Waiman Long) [2153108]
- cgroup: reduce dependency on cgroup_mutex (Waiman Long) [2153108]
- sunrpc: Set sk_allocation to GFP_NOFS to avoid using current-&gt;task_frag. (Guillaume Nault) [2153230]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.12.1.rt7.222.el8_7]" date="1674129600">- [rt] build kernel-rt-4.18.0-425.12.1.rt7.222.el8_7 [2159806]
- x86/fpu: Prevent FPU state corruption (Oleksandr Natalenko) [2134586 2130890]
- x86/fpu: Drop fpregs lock before inheriting FPU permissions (Eder Zulian) [2154469 2153549]
- kernel-doc: fix undefined args variable (Jan Stancek) [2157905 2134954]
- mm: memcontrol: fix potential oom_lock recursion deadlock (Waiman Long) [2157922 2138886]
- memcg: prohibit unconditional exceeding the limit of dying tasks (Waiman Long) [2157922 2138886]
- mm, oom: do not trigger out_of_memory from the #PF (Waiman Long) [2157922 2138886]
- mm, oom: pagefault_out_of_memory: don't force global OOM for dying tasks (Waiman Long) [2157922 2138886]
- mm: memcontrol: don't count limit-setting reclaim as memory pressure (Waiman Long) [2157922 2138886]
- KVM: s390: vsie: Fix the initialization of the epoch extension (epdx) field (Thomas Huth) [2158813 2151854]
- net: mana: Fix race on per-CQ variable napi work_done (Emanuele Giuseppe Esposito) [2155437 2151722]
- mei: me: add adler lake point S DID (Prarit Bhargava) [2141783 2141602]
- PCI: hv: Only reuse existing IRTE allocation for Multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix the definition of vector in hv_compose_msi_msg() (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix interrupt mapping for multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Reuse existing IRTE allocation in compose_msi_msg() (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix hv_arch_irq_unmask() for multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix multi-MSI to allow more than one MSI vector (Emanuele Giuseppe Esposito) [2155289 2100275]
- drm/ast: Support multiple outputs (Jarod Wilson) [2149287 2147553]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.13.1.rt7.223.el8_7]" date="1675339200">- [rt] build kernel-rt-4.18.0-425.13.1.rt7.223.el8_7 [2159806]
- mm/cgroup/reclaim: fix dirty pages throttling on cgroup v1 (Waiman Long) [2160221]
- mm: vmscan: remove deadlock due to throttling failing to make progress (Waiman Long) [2160221]
- mm: vmscan: reduce throttling due to a failure to make progress -fix (Waiman Long) [2160221]
- mm: vmscan: Reduce throttling due to a failure to make progress (Waiman Long) [2160221]
- mm/vmscan: delay waking of tasks throttled on NOPROGRESS (Waiman Long) [2160221]
- mm/vmscan: increase the timeout if page reclaim is not making progress (Waiman Long) [2160221]
- mm/vmscan: centralise timeout values for reclaim_throttle (Waiman Long) [2160221]
- mm/page_alloc: remove the throttling logic from the page allocator (Waiman Long) [2160221]
- mm/writeback: throttle based on page writeback instead of congestion (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim when no progress is being made (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim and compaction when too may pages are isolated (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim until some writeback completes if congested (Waiman Long) [2160221]
- mm/vmscan.c: delete or fix duplicated words (Waiman Long) [2160221]
- mm,page_alloc: PF_WQ_WORKER threads must sleep at should_reclaim_retry() (Nico Pache) [2160221]
- ceph: avoid putting the realm twice when decoding snaps fails (Xiubo Li) [2155797 2139881]
- mm/mremap: hold the rmap lock in write mode when moving page table entries. (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap: use pmd/pud_poplulate to update page table entries (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap: don't enable optimized PUD move if page table levels is 2 (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap: convert huge PUD move to separate helper (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap: fix BUILD_BUG_ON() error in get_extent (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap.c: fix extent calculation (Waiman Long) [2140950] {CVE-2022-41222}
- x86: mremap speedup - Enable HAVE_MOVE_PUD (Waiman Long) [2140950] {CVE-2022-41222}
- mm: speedup mremap on 1GB or larger regions (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap: start addresses are properly aligned (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap: calculate extent in one place (Waiman Long) [2140950] {CVE-2022-41222}
- mm/mremap: it is sure to have enough space when extent meets requirement (Waiman Long) [2140950] {CVE-2022-41222}
- s390/boot: add secure boot trailer (Tobias Huschle) [2151530 2141967]
- i40e: Fix VF hang when reset is triggered on another VF (Ivan Vecera) [2160460 2103801]
- i2c: ismt: Fix an out-of-bounds bug in ismt_access() (Prarit Bhargava) [2154388 2119066] {CVE-2022-2873}
- iavf: schedule watchdog immediately when changing primary MAC (Michal Schmidt) [2163257 2152493]
- iavf: Move netdev_update_features() into watchdog task (Michal Schmidt) [2163257 2152493]
- iavf: fix temporary deadlock and failure to set MAC address (Michal Schmidt) [2163257 2152493]
- iavf: Fix error handling in iavf_init_module() (Michal Schmidt) [2163257 2152493]
- iommu/vt-d: Clean up si_domain in the init_dmars() error path (Jerry Snitselaar) [2149474 2118428]
- x86/pci/xen: Use msi_msg shadow structs (Jerry Snitselaar) [2149474 2118428]
- iommu/intel: Use msi_msg shadow structs (Jerry Snitselaar) [2149474 2118428]
- PCI: MSI: Fix Kconfig dependencies for PCI_MSI_ARCH_FALLBACKS (Jerry Snitselaar) [2149474 2118428]
- x86/apic/msi: Unbreak DMAR and HPET MSI (Jerry Snitselaar) [2149474 2118428]
- iommu/amd: Remove domain search for PCI/MSI (Jerry Snitselaar) [2149474 2118428]
- iommu/vt-d: Remove domain search for PCI/MSI[X] (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Make most MSI ops XEN private (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Cleanup the arch_*_msi_irqs() leftovers (Jerry Snitselaar) [2149474 2118428]
- PCI/MSI: Make arch_.*_msi_irq[s] fallbacks selectable (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Wrap XEN MSI management into irqdomain (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Consolidate XEN-MSI init (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Rework MSI teardown (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Make xen_msi_init() static and rename it to xen_hvm_msi_init() (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Move apic_post_init() invocation to one place (Jerry Snitselaar) [2149474 2118428]
- x86/msi: Use generic MSI domain ops (Jerry Snitselaar) [2149474 2118428]
- x86/msi: Remove pointless vcpu_affinity callback (Jerry Snitselaar) [2149474 2118428]
- iommu/vt-d: Fix compile error with CONFIG_PCI_ATS not set (Myron Stowe) [2149474 2118428]
- iommu/vt-d: Cure VF irqdomain hickup (Myron Stowe) [2149474 2118428]
- x86/pci: Set default irq domain in pcibios_add_device() (Myron Stowe) [2149474 2118428]
- iommm/amd: Store irq domain in struct device (Myron Stowe) [2149474 2118428]
- iommm/vt-d: Store irq domain in struct device (Myron Stowe) [2149474 2118428]
- PCI/MSI: Provide pci_dev_has_special_msi_domain() helper (Myron Stowe) [2149474 2118428]
- x86/msi: Consolidate MSI allocation (Myron Stowe) [2149474 2118428]
- PCI/MSI: Rework pci_msi_domain_calc_hwirq() (Myron Stowe) [2149474 2118428]
- x86/irq: Consolidate UV domain allocation (Myron Stowe) [2149474 2118428]
- x86/irq: Consolidate DMAR irq allocation (Myron Stowe) [2149474 2118428]
- x86_ioapic_Consolidate_IOAPIC_allocation (Myron Stowe) [2149474 2118428]
- x86/msi: Consolidate HPET allocation (Myron Stowe) [2149474 2118428]
- iommu/irq_remapping: Consolidate irq domain lookup (Myron Stowe) [2149474 2118428]
- iommu/amd: Consolidate irq domain getter (Myron Stowe) [2149474 2118428]
- iommu/vt-d: Consolidate irq domain getter (Myron Stowe) [2149474 2118428]
- x86/irq: Add allocation type for parent domain retrieval (Myron Stowe) [2149474 2118428]
- irqdomain: Export irq_domain_update_bus_token (Myron Stowe) [2149474 2118428]
- gitlab-ci: use CI templates from production branch (Michael Hofmann)
- iavf: remove INITIAL_MAC_SET to allow gARP to work properly (Stefan Assmann) [2149745 1938635]
- Revert "scsi: iscsi: ql4xxx: Use per-session workqueue for unbinding" (Chris Leech) [2152734 2122624]
- Revert "scsi: iscsi: Use the session workqueue for recovery" (Chris Leech) [2152734 2122624]
- arm64/bpf: Remove 128MB limit for BPF JIT programs (Yauheni Kaliuta) [2152138 2140163]
- bpf: Define bpf_jit_alloc_exec_limit for arm64 JIT (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: add `type` and `data` fields (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: use `ex` for `exception_table_entry` (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: make fixup_exception() return bool (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: consolidate definitions (Yauheni Kaliuta) [2152138 2140163]
- arm64: kvm: use kvm_exception_table_entry (Yauheni Kaliuta) [2152138 2140163]
- be2net: Fix buffer overflow in be_get_module_eeprom (Josef Oskera) [2160182 2126917]
- sched: Switch to upstream migrate disable code (Crystal Wood) [2132062]
- tick: Fix timer storm since introduction of timersd (Valentin Schneider) [2127204]
- softirq: Use a dedicated thread for timer wakeups. (Valentin Schneider) [2127204]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.14.1.rt7.224.el8_7]" date="1676030400">- [rt] build kernel-rt-4.18.0-425.14.1.rt7.224.el8_7 [2172278]
- ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems (Wei Huang) [2142170 2130653]
- KVM: x86: nSVM: implement nested LBR virtualization (Emanuele Giuseppe Esposito) [2166362 2155149]
- KVM: x86: nSVM: correctly virtualize LBR msrs when L2 is running (Emanuele Giuseppe Esposito) [2166362 2155149]
- kvm: x86: SVM: use vmcb* instead of svm-&gt;vmcb where it makes sense (Emanuele Giuseppe Esposito) [2166362 2155149]
- KVM: x86: nSVM: implement nested VMLOAD/VMSAVE (Emanuele Giuseppe Esposito) [2166362 2155149]
- IB/iser: Fix login with authentication (Kamal Heib) [2161750 2120676]
- act_mirred: use the backlog for nested calls to mirred ingress (Davide Caratti) [2164648 2131339] {CVE-2022-4269}
- net/sched: act_mirred: better wording on protection against excessive stack growth (Davide Caratti) [2164648 2131339] {CVE-2022-4269}
- redhat/configs: Set CONFIG_X86_AMD_PSTATE to 'm' (Prarit Bhargava) [2151275 2145246]
- KVM: x86: smm: preserve interrupt shadow in SMRAM (Maxim Levitsky) [2166368 2097144]
- KVM: x86: SVM: don't save SVM state to SMRAM when VM is not long mode capable (Maxim Levitsky) [2166368 2097144]
- KVM: x86: SVM: use smram structs (Maxim Levitsky) [2166368 2097144]
- KVM: svm: drop explicit return value of kvm_vcpu_map (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: use smram struct for 64 bit smram load/restore (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: use smram struct for 32 bit smram load/restore (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: use smram structs in the common code (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: add structs for KVM's smram layout (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: check for failures on smm entry (Maxim Levitsky) [2166368 2097144]
- KVM: x86: do not go through ctxt-&gt;ops when emulating rsm (Maxim Levitsky) [2166368 2097144]
- KVM: x86: move SMM exit to a new file (Maxim Levitsky) [2166368 2097144]
- KVM: x86: move SMM entry to a new file (Maxim Levitsky) [2166368 2097144]
- KVM: x86: start moving SMM-related functions to new files (Maxim Levitsky) [2166368 2097144]
- bug: introduce ASSERT_STRUCT_OFFSET (Maxim Levitsky) [2166368 2097144]
- KVM: x86: Rename and expose helper to detect if INIT/SIPI are allowed (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: number of GPRs in the SMRAM image depends on the image format (Maxim Levitsky) [2166368 2097144]
- KVM: x86: emulator: update the emulation mode after CR0 write (Maxim Levitsky) [2166368 2097144]
- KVM: x86: emulator: update the emulation mode after rsm (Maxim Levitsky) [2166368 2097144]
- KVM: x86: emulator: introduce emulator_recalc_and_set_mode (Maxim Levitsky) [2166368 2097144]
- KVM: x86: emulator: em_sysexit should update ctxt-&gt;mode (Maxim Levitsky) [2166368 2097144]
- KVM: x86: Bug the VM if the emulator accesses a non-existent GPR (Maxim Levitsky) [2166368 2097144]
- \KVM: x86: Reduce the number of emulator GPRs to '8' for 32-bit KVM (Maxim Levitsky) [2166368 2097144]
- KVM: x86: Use 16-bit fields to track dirty/valid emulator GPRs (Maxim Levitsky) [2166368 2097144]
- KVM: x86: Omit VCPU_REGS_RIP from emulator's _regs array (Maxim Levitsky) [2166368 2097144]
- \KVM: x86: Harden _regs accesses to guard against buggy input (Maxim Levitsky) [2166368 2097144]
- KVM: x86: Grab regs_dirty in local 'unsigned long' (Maxim Levitsky) [2166368 2097144]
- proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152577 2152578] {CVE-2022-4378}
- proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152577 2152578] {CVE-2022-4378}</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.15.1.rt7.225.el8_7]" date="1676548800">- [rt] build kernel-rt-4.18.0-425.15.1.rt7.225.el8_7 [2172278]
- net/mlx5e: Fix use-after-free when reverting termination table (Amir Tzin) [2167640 2112927]
- net/mlx5: Do not query pci info while pci disabled (Amir Tzin) [2167645 2129249]
- x86/fpu: Fix copy_xstate_to_uabi() to copy init states correctly (Dean Nelson) [2168384 2122850]
- x86/fpu: Exclude dynamic states from init_fpstate (Dean Nelson) [2168384 2122850]
- x86/fpu: Fix the init_fpstate size check with the actual size (Dean Nelson) [2168384 2122850]
- x86/fpu: Configure init_fpstate attributes orderly (Dean Nelson) [2168384 2122850]
- x86/fpu/xstate: Fix the ARCH_REQ_XCOMP_PERM implementation (Dean Nelson) [2168384 2122850]
- net/mlx5: E-Switch, properly handle ingress tagged packets on VST (Amir Tzin) [2166665 2096109]
- cpuhotplug: Fix KABI breakage (Prarit Bhargava) [2162763 2156529]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.16.1.rt7.226.el8_7]" date="1677153600">- [rt] build kernel-rt-4.18.0-425.16.1.rt7.226.el8_7 [2172278]
- ipv6: fix panic when fib_lookup_arg-&gt;result is fib6_info (Jiri Benc) [2167602 2140599]
- ceph: blocklist the kclient when receiving corrupted snap trace (Xiubo Li) [2168896 2162414]
- ceph: move mount state enum to super.h (Xiubo Li) [2168896 2162414]
- s390/kexec: fix ipl report address for kdump (Tobias Huschle) [2166296 2161328]
- mm, compaction: fix fast_isolate_around() to stay within boundaries (Daniel Vacek) [2170576 2149309]
- scsi: storvsc: Fix swiotlb bounce buffer leak in confidential VM (Emanuele Giuseppe Esposito) [2170228 2150659]
- netfilter: conntrack: handle tcp challenge acks during connection reuse (Florian Westphal) [2165587 2158726]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.17.1.rt7.227.el8_7]" date="1677844800">- [rt] build kernel-rt-4.18.0-425.17.1.rt7.227.el8_7 [2172278]
- net: mana: Add rmb after checking owner bits (Mohammed Gamal) [2173103 2139462]
- net: mana: Add support of XDP_REDIRECT action (Mohammed Gamal) [2173103 2139462]
- net: mana: Add the Linux MANA PF driver (Mohammed Gamal) [2173103 2139462]
- ice: fix lost multicast packets in promisc mode (Ken Cox) [2172550 2138215]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.18.1.rt7.228.el8_7]" date="1678708800">- [rt] build kernel-rt-4.18.0-425.18.1.rt7.228.el8_7 [2172278]
- futex: Resend potentially swallowed owner death notification (Rafael Aquini) [2170054]
- irq_work: Move lazy work execution to dedicated irq_work kthreads (Valentin Schneider) [2172163]
- irq_work: Sync the patches (Valentin Schneider) [2172163]
- irq_work: Also rcuwait for !IRQ_WORK_HARD_IRQ on PREEMPT_RT (Valentin Schneider) [2172163]
- irq_work: Allow irq_work_sync() to sleep if irq_work() no IRQ support. (Valentin Schneider) [2172163]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.19.1.rt7.229.el8_7]" date="1678968000">- [rt] build kernel-rt-4.18.0-425.19.1.rt7.229.el8_7 [2172278]
- s390/dasd: fix no record found for raw_track_access (Tobias Huschle) [2167776 2161270]
- locking/rwsem: Disable preemption in all down_read*() and up_read() code paths (Waiman Long) [2170939 2162139]
- locking/rwsem: Prevent non-first waiter from spinning in down_write() slowpath (Waiman Long) [2170939 2162139]
- locking/rwsem: Allow slowpath writer to ignore handoff bit if not set by first waiter (Waiman Long) [2170939 2162139]
- locking/rwsem: Always try to wake waiters in out_nolock path (Waiman Long) [2170939 2162139]
- locking/rwsem: No need to check for handoff bit if wait queue empty (Waiman Long) [2170939 2162139]
- locking/rwsem: Make handoff bit handling more consistent (Waiman Long) [2170939 2162139]
- locking/rwsem: Disable preemption while trying for rwsem lock (Waiman Long) [2170939 2162139]
- locking/rwsem: Conditionally wake waiters in reader/writer slowpaths (Waiman Long) [2170939 2162139]
- locking: Make owner_on_cpu() into &lt;linux/sched.h&gt; (Waiman Long) [2170939 2162139]
- locking/rwsem: Optimize down_read_trylock() under highly contended case (Waiman Long) [2170939 2162139]
- locking/rwsem: Fix comments about reader optimistic lock stealing conditions (Waiman Long) [2170939 2162139]
- locking/rwsem: Disable preemption for spinning region (Waiman Long) [2170939 2162139]
- locking: Remove rcu_read_{,un}lock() for preempt_{dis,en}able() (Waiman Long) [2170939 2162139]
- watchdog: fix UAF in reboot notifier handling in watchdog core code (Wander Lairson Costa) [2139770 2131308]
- netfilter: nf_conntrack_irc: Tighten matching on DCC message (Wander Lairson Costa) [2139770 2131308]
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF (Jaroslav Kysela) [2163405 2163406] {CVE-2023-0266}
- net/mlx5e: Fix enabling sriov while tc nic rules are offloaded (Amir Tzin) [2167647 2112925]
- net/mlx5: E-Switch, pair only capable devices (Amir Tzin) [2167647 2112925]
- net/mlx5: Fix mlx5_get_next_dev() peer device matching (Amir Tzin) [2167647 2112925]
- net/mlx5: Lag, filter non compatible devices (Amir Tzin) [2167647 2112925]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.19.2.rt7.230.el8_7]" date="1679054400">- [rt] build kernel-rt-4.18.0-425.19.2.rt7.230.el8_7.geb93 [2172278]
- ovl: fail on invalid uid/gid mapping at copy up (Miklos Szeredi) [2165341 2165342] {CVE-2023-0386}</changelog>
</package>
<package pkgid="b45ff86717d8ecfd8a779bb4b59991f757573e1fd4ad6ffbeb6a72b3aaca4672" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="425.10.1.el8_7"/>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.1.1.el8]" date="1663588800">- i40e: Fix kernel crash during module removal (Ivan Vecera) [2091489]
- redhat: enable zstream release numbering for rhel 8.7 (Jarod Wilson)
- ice: Allow operation with reduced device MSI-X (Petr Oros) [2102844]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.2.1.el8]" date="1664193600">- EDAC/ghes: Set the DIMM label unconditionally (Aristeu Rozanski) [2109712]
- configs: enable CONFIG_HP_ILO for aarch64 (Mark Salter) [2123508]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.3.1.el8]" date="1664539200">- iwlwifi: limit fw version for AC9560 to avoid fw crash (Íñigo Huguet) [2129297]
- sfc: fix null pointer dereference in efx_hard_start_xmit (Íñigo Huguet) [2119638]
- sfc: fix TX channel offset when using legacy interrupts (Íñigo Huguet) [2119638]
- netfilter: conntrack: reduce timeout when receiving out-of-window fin or rst (Florian Westphal) [2047366]
- netfilter: conntrack: remove unneeded indent level (Florian Westphal) [2047366]
- netfilter: conntrack: ignore overly delayed tcp packets (Florian Westphal) [2047366]
- netfilter: conntrack: prepare tcp_in_window for ternary return value (Florian Westphal) [2047366]
- netfilter: conntrack: remove pr_debug callsites from tcp tracker (Florian Westphal) [2047366]
- netfilter: conntrack: work around exceeded receive window (Florian Westphal) [2047366]
- netfilter: conntrack: improve RST handling when tuple is re-used (Florian Westphal) [2047366]
- netfilter: conntrack: avoid misleading 'invalid' in log message (Florian Westphal) [2047366]
- netfilter: remove BUG_ON() after skb_header_pointer() (Florian Westphal) [2047366]
- iavf: Detach device during reset task (Petr Oros) [2069206]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.4.1.el8]" date="1665144000">- random: allow reseeding DRBG with getrandom (Daiki Ueno) [2121766]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.5.1.el8_7]" date="1667476800">- ice: Fix interface being down after reset with link-down-on-close flag on (Petr Oros) [2136216 2024110]
- ice: Fix crash by keep old cfg when update TCs more than queues (Petr Oros) [2130992 2129902]
- ice: Fix tunnel checksum offload with fragmented traffic (Petr Oros) [2130992 2129902]
- ice: handle E822 generic device ID in PLDM header (Petr Oros) [2130992 2129902]
- ice: ethtool: Prohibit improper channel config for DCB (Petr Oros) [2130992 2129902]
- ice: ethtool: advertise 1000M speeds properly (Petr Oros) [2130992 2129902]
- ice: Fix switchdev rules book keeping (Petr Oros) [2130992 2129902]
- ice: fix access-beyond-end in the switch code (Petr Oros) [2130992 2129902]
- eth: ice: silence the GCC 12 array-bounds warning (Petr Oros) [2130992 2129902]
- ice: Expose RSS indirection tables for queue groups via ethtool (Petr Oros) [2130992 2129902]
- Revert "ice: Hide bus-info in ethtool for PRs in switchdev mode" (Petr Oros) [2130992 2129902]
- ice: remove period on argument description in ice_for_each_vf (Petr Oros) [2130992 2129902]
- ice: add a function comment for ice_cfg_mac_antispoof (Petr Oros) [2130992 2129902]
- ice: fix wording in comment for ice_reset_vf (Petr Oros) [2130992 2129902]
- ice: remove return value comment for ice_reset_all_vfs (Petr Oros) [2130992 2129902]
- ice: always check VF VSI pointer values (Petr Oros) [2130992 2129902]
- ice: add newline to dev_dbg in ice_vf_fdir_dump_info (Petr Oros) [2130992 2129902]
- ice: get switch id on switchdev devices (Petr Oros) [2130992 2129902]
- ice: return ENOSPC when exceeding ICE_MAX_CHAIN_WORDS (Petr Oros) [2130992 2129902]
- ice: introduce common helper for retrieving VSI by vsi_num (Petr Oros) [2130992 2129902]
- ice: use min_t() to make code cleaner in ice_gnss (Petr Oros) [2130992 2129902]
- ice: Add mpls+tso support (Petr Oros) [2130992 2129902]
- ice: switch: convert packet template match code to rodata (Petr Oros) [2130992 2129902]
- ice: switch: use convenience macros to declare dummy pkt templates (Petr Oros) [2130992 2129902]
- ice: switch: use a struct to pass packet template params (Petr Oros) [2130992 2129902]
- ice: switch: unobscurify bitops loop in ice_fill_adv_dummy_packet() (Petr Oros) [2130992 2129902]
- ice: switch: add and use u16[] aliases to ice_adv_lkup_elem::{h, m}_u (Petr Oros) [2130992 2129902]
- ice: Support GTP-U and GTP-C offload in switchdev (Petr Oros) [2130992 2129902]
- ice: Remove useless DMA-32 fallback configuration (Petr Oros) [2130992 2129902]
- ice: switch to napi_build_skb() (Petr Oros) [2130992 2129902]
- redhat: switch to z-stream dist tag and build targets (Jarod Wilson)
- block: avoid sign extend problem with default queue flags mask (Nico Pache) [2135813]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.6.1.el8_7]" date="1668168000">- ice: Add low latency Tx timestamp read (Petr Oros) [2136036 2092425]
- ice: introduce ice_ptp_reset_cached_phctime function (Petr Oros) [2136036 2092425]
- ice: re-arrange some static functions in ice_ptp.c (Petr Oros) [2136036 2092425]
- ice: track and warn when PHC update is late (Petr Oros) [2136036 2092425]
- ice: track Tx timestamp stats similar to other Intel drivers (Petr Oros) [2136036 2092425]
- ice: implement adjfine with mul_u64_u64_div_u64 (Petr Oros) [2136036 2092425]
- ice: Add EXTTS feature to the feature bitmap (Petr Oros) [2136036 2092425]
- math: Export mul_u64_u64_div_u64 (Petr Oros) [2136036 2092425]
- vfio/type1: Unpin zero pages (Alex Williamson) [2128515 2123015]
- net: atlantic: remove aq_nic_deinit() when resume (Íñigo Huguet) [2131935 2130839]
- net: atlantic: remove deep parameter on suspend/resume functions (Íñigo Huguet) [2131935 2130839]
- CI: Use zstream builder container (Veronika Kabatova)
- CI: Add disttag override for 8.7 (Veronika Kabatova)</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.7.1.el8_7]" date="1669723200">- ice: Add additional CSR registers to ETHTOOL_GREGS (Petr Oros) [2136513 2131024]
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps (Petr Oros) [2137270 2106964]
- i40e: Fix VF set max MTU size (Petr Oros) [2137270 2106964]
- iavf: Fix set max MTU size with port VLAN and jumbo frames (Petr Oros) [2137270 2106964]
- iavf: Fix bad page state (Petr Oros) [2137270 2106964]
- Revert "scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels" (Jarod Wilson)
- scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels (Tomas Henzl) [2139216]
- Revert "ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems" (Jarod Wilson)
- ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems (Wei Huang) [2142170 2130653]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.8.1.el8_7]" date="1669982400">- scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels (Tomas Henzl) [2139216 2134535]
- RDMA/mlx5: Set local port to one when accessing counters (Mohammad Kabat) [2141957 2077119]
- drm/mgag200: Fix PLL setup for G200_SE_A rev &gt;=4 (Jocelyn Falempe) [2140152 2130159]
- iavf: Do not restart Tx queues after reset task failure (Petr Oros) [2149081 2134005]
- iavf: Fix a crash during reset task (Petr Oros) [2149081 2134005]
- scsi: core: Allow the ALUA transitioning state enough time (Tomas Henzl) [2147374 2084250]
- scsi: core: Return BLK_STS_TRANSPORT for ALUA transitioning (Tomas Henzl) [2147374 2084250]
- i40e: Fix DMA mappings leak (Ivan Vecera) [2138205 2077847]
- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2142724 2142725] {CVE-2022-2964}
- net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2142724 2142725] {CVE-2022-2964}</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.9.1.el8_7]" date="1670587200">- Documentation/admin-guide: Document nomodeset kernel parameter (Jocelyn Falempe) [2145218 2143952]
- drm: Move nomodeset kernel parameter to the DRM subsystem (Jocelyn Falempe) [2145218 2143952]
- wait: Fix __wait_event_hrtimeout for RT/DL tasks (Derek Barbosa) [2138953 2125233]
- scsi: zfcp: Fix missing auto port scan and thus missing target ports (Tobias Huschle) [2127849 2121089]
- net: Fix return value of qdisc ingress handling on success (Ivan Vecera) [2141878 2131361]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.10.1.el8_7]" date="1671019200">- scsi: target: loop: Fix handling of aborted TMRs (Maurizio Lombardi) [2144583 2141713]
- ice: virtchnl rss hena support (Petr Oros) [2148130]
- ice: Fix configuring VIRTCHNL_OP_CONFIG_VSI_QUEUES with unbalanced queues (Michal Schmidt) [2142017 2137378]
- ice: Add support Flex RXD (Michal Schmidt) [2138157 2131310]
- netfilter: flowtable: fix stuck flows on cleanup due to pending work (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: add function to invoke garbage collection immediately (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: pass flowtable to nf_flow_table_iterate() (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: separate replace, destroy and stats to different workqueues (Phil Sutter) [2134084 2131370]
- x86/paravirt: Add a dummy __x86_paravirt_patch_template() function (Waiman Long) [2152206 2144161]
- x86/paravirt: Fix kABI breakage in struct pv_mmu_ops (Waiman Long) [2152206 2144161]
- drm/i915: fix TLB invalidation for Gen12 video and compute engines (Wander Lairson Costa) [2148149 2148150] {CVE-2022-4139}
- PCI: hv: Do not set PCI_COMMAND_MEMORY to reduce VM boot time (Emanuele Giuseppe Esposito) [2150912 2082836]
- iavf: Fix cached head and tail value for iavf_get_tx_pending (Stefan Assmann) [2149742 2103944]
- iavf: Fix change VF's mac address (Stefan Assmann) [2149742 2103944]
- iavf: Fix race between iavf_close and iavf_reset_task (Stefan Assmann) [2149742 2103944]
- net: ethernet: move from strlcpy with unused retval to strscpy (Stefan Assmann) [2149742 2103944]
- iavf: Fix 'tc qdisc show' listing too many queues (Stefan Assmann) [2149742 2103944]
- iavf: Fix max_rate limiting (Stefan Assmann) [2149742 2103944]
- iavf: Check for duplicate TC flower filter before parsing (Stefan Assmann) [2149742 2103944]
- iavf: Fix handling of dummy receive descriptors (Stefan Assmann) [2149742 2103944]
- iavf: Disallow changing rx/tx-frames and rx/tx-frames-irq (Stefan Assmann) [2149742 2103944]
- intel/iavf:fix repeated words in comments (Stefan Assmann) [2149742 2103944]
- intel: remove unused macros (Stefan Assmann) [2149742 2103944]
- iavf: Add waiting for response from PF in set mac (Stefan Assmann) [2149742 2103944]</changelog>
</package>
<package pkgid="e6edae425f1e845f709920e87d5dd0c8a849dcb426129f2dbfe7ead76600b83e" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="425.13.1.el8_7"/>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.4.1.el8]" date="1665144000">- random: allow reseeding DRBG with getrandom (Daiki Ueno) [2121766]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.5.1.el8_7]" date="1667476800">- ice: Fix interface being down after reset with link-down-on-close flag on (Petr Oros) [2136216 2024110]
- ice: Fix crash by keep old cfg when update TCs more than queues (Petr Oros) [2130992 2129902]
- ice: Fix tunnel checksum offload with fragmented traffic (Petr Oros) [2130992 2129902]
- ice: handle E822 generic device ID in PLDM header (Petr Oros) [2130992 2129902]
- ice: ethtool: Prohibit improper channel config for DCB (Petr Oros) [2130992 2129902]
- ice: ethtool: advertise 1000M speeds properly (Petr Oros) [2130992 2129902]
- ice: Fix switchdev rules book keeping (Petr Oros) [2130992 2129902]
- ice: fix access-beyond-end in the switch code (Petr Oros) [2130992 2129902]
- eth: ice: silence the GCC 12 array-bounds warning (Petr Oros) [2130992 2129902]
- ice: Expose RSS indirection tables for queue groups via ethtool (Petr Oros) [2130992 2129902]
- Revert "ice: Hide bus-info in ethtool for PRs in switchdev mode" (Petr Oros) [2130992 2129902]
- ice: remove period on argument description in ice_for_each_vf (Petr Oros) [2130992 2129902]
- ice: add a function comment for ice_cfg_mac_antispoof (Petr Oros) [2130992 2129902]
- ice: fix wording in comment for ice_reset_vf (Petr Oros) [2130992 2129902]
- ice: remove return value comment for ice_reset_all_vfs (Petr Oros) [2130992 2129902]
- ice: always check VF VSI pointer values (Petr Oros) [2130992 2129902]
- ice: add newline to dev_dbg in ice_vf_fdir_dump_info (Petr Oros) [2130992 2129902]
- ice: get switch id on switchdev devices (Petr Oros) [2130992 2129902]
- ice: return ENOSPC when exceeding ICE_MAX_CHAIN_WORDS (Petr Oros) [2130992 2129902]
- ice: introduce common helper for retrieving VSI by vsi_num (Petr Oros) [2130992 2129902]
- ice: use min_t() to make code cleaner in ice_gnss (Petr Oros) [2130992 2129902]
- ice: Add mpls+tso support (Petr Oros) [2130992 2129902]
- ice: switch: convert packet template match code to rodata (Petr Oros) [2130992 2129902]
- ice: switch: use convenience macros to declare dummy pkt templates (Petr Oros) [2130992 2129902]
- ice: switch: use a struct to pass packet template params (Petr Oros) [2130992 2129902]
- ice: switch: unobscurify bitops loop in ice_fill_adv_dummy_packet() (Petr Oros) [2130992 2129902]
- ice: switch: add and use u16[] aliases to ice_adv_lkup_elem::{h, m}_u (Petr Oros) [2130992 2129902]
- ice: Support GTP-U and GTP-C offload in switchdev (Petr Oros) [2130992 2129902]
- ice: Remove useless DMA-32 fallback configuration (Petr Oros) [2130992 2129902]
- ice: switch to napi_build_skb() (Petr Oros) [2130992 2129902]
- redhat: switch to z-stream dist tag and build targets (Jarod Wilson)
- block: avoid sign extend problem with default queue flags mask (Nico Pache) [2135813]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.6.1.el8_7]" date="1668168000">- ice: Add low latency Tx timestamp read (Petr Oros) [2136036 2092425]
- ice: introduce ice_ptp_reset_cached_phctime function (Petr Oros) [2136036 2092425]
- ice: re-arrange some static functions in ice_ptp.c (Petr Oros) [2136036 2092425]
- ice: track and warn when PHC update is late (Petr Oros) [2136036 2092425]
- ice: track Tx timestamp stats similar to other Intel drivers (Petr Oros) [2136036 2092425]
- ice: implement adjfine with mul_u64_u64_div_u64 (Petr Oros) [2136036 2092425]
- ice: Add EXTTS feature to the feature bitmap (Petr Oros) [2136036 2092425]
- math: Export mul_u64_u64_div_u64 (Petr Oros) [2136036 2092425]
- vfio/type1: Unpin zero pages (Alex Williamson) [2128515 2123015]
- net: atlantic: remove aq_nic_deinit() when resume (Íñigo Huguet) [2131935 2130839]
- net: atlantic: remove deep parameter on suspend/resume functions (Íñigo Huguet) [2131935 2130839]
- CI: Use zstream builder container (Veronika Kabatova)
- CI: Add disttag override for 8.7 (Veronika Kabatova)</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.7.1.el8_7]" date="1669723200">- ice: Add additional CSR registers to ETHTOOL_GREGS (Petr Oros) [2136513 2131024]
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps (Petr Oros) [2137270 2106964]
- i40e: Fix VF set max MTU size (Petr Oros) [2137270 2106964]
- iavf: Fix set max MTU size with port VLAN and jumbo frames (Petr Oros) [2137270 2106964]
- iavf: Fix bad page state (Petr Oros) [2137270 2106964]
- Revert "scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels" (Jarod Wilson)
- scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels (Tomas Henzl) [2139216]
- Revert "ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems" (Jarod Wilson)
- ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems (Wei Huang) [2142170 2130653]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.8.1.el8_7]" date="1669982400">- scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels (Tomas Henzl) [2139216 2134535]
- RDMA/mlx5: Set local port to one when accessing counters (Mohammad Kabat) [2141957 2077119]
- drm/mgag200: Fix PLL setup for G200_SE_A rev &gt;=4 (Jocelyn Falempe) [2140152 2130159]
- iavf: Do not restart Tx queues after reset task failure (Petr Oros) [2149081 2134005]
- iavf: Fix a crash during reset task (Petr Oros) [2149081 2134005]
- scsi: core: Allow the ALUA transitioning state enough time (Tomas Henzl) [2147374 2084250]
- scsi: core: Return BLK_STS_TRANSPORT for ALUA transitioning (Tomas Henzl) [2147374 2084250]
- i40e: Fix DMA mappings leak (Ivan Vecera) [2138205 2077847]
- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2142724 2142725] {CVE-2022-2964}
- net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2142724 2142725] {CVE-2022-2964}</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.9.1.el8_7]" date="1670587200">- Documentation/admin-guide: Document nomodeset kernel parameter (Jocelyn Falempe) [2145218 2143952]
- drm: Move nomodeset kernel parameter to the DRM subsystem (Jocelyn Falempe) [2145218 2143952]
- wait: Fix __wait_event_hrtimeout for RT/DL tasks (Derek Barbosa) [2138953 2125233]
- scsi: zfcp: Fix missing auto port scan and thus missing target ports (Tobias Huschle) [2127849 2121089]
- net: Fix return value of qdisc ingress handling on success (Ivan Vecera) [2141878 2131361]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.10.1.el8_7]" date="1671019200">- scsi: target: loop: Fix handling of aborted TMRs (Maurizio Lombardi) [2144583 2141713]
- ice: virtchnl rss hena support (Petr Oros) [2148130]
- ice: Fix configuring VIRTCHNL_OP_CONFIG_VSI_QUEUES with unbalanced queues (Michal Schmidt) [2142017 2137378]
- ice: Add support Flex RXD (Michal Schmidt) [2138157 2131310]
- netfilter: flowtable: fix stuck flows on cleanup due to pending work (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: add function to invoke garbage collection immediately (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: pass flowtable to nf_flow_table_iterate() (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: separate replace, destroy and stats to different workqueues (Phil Sutter) [2134084 2131370]
- x86/paravirt: Add a dummy __x86_paravirt_patch_template() function (Waiman Long) [2152206 2144161]
- x86/paravirt: Fix kABI breakage in struct pv_mmu_ops (Waiman Long) [2152206 2144161]
- drm/i915: fix TLB invalidation for Gen12 video and compute engines (Wander Lairson Costa) [2148149 2148150] {CVE-2022-4139}
- PCI: hv: Do not set PCI_COMMAND_MEMORY to reduce VM boot time (Emanuele Giuseppe Esposito) [2150912 2082836]
- iavf: Fix cached head and tail value for iavf_get_tx_pending (Stefan Assmann) [2149742 2103944]
- iavf: Fix change VF's mac address (Stefan Assmann) [2149742 2103944]
- iavf: Fix race between iavf_close and iavf_reset_task (Stefan Assmann) [2149742 2103944]
- net: ethernet: move from strlcpy with unused retval to strscpy (Stefan Assmann) [2149742 2103944]
- iavf: Fix 'tc qdisc show' listing too many queues (Stefan Assmann) [2149742 2103944]
- iavf: Fix max_rate limiting (Stefan Assmann) [2149742 2103944]
- iavf: Check for duplicate TC flower filter before parsing (Stefan Assmann) [2149742 2103944]
- iavf: Fix handling of dummy receive descriptors (Stefan Assmann) [2149742 2103944]
- iavf: Disallow changing rx/tx-frames and rx/tx-frames-irq (Stefan Assmann) [2149742 2103944]
- intel/iavf:fix repeated words in comments (Stefan Assmann) [2149742 2103944]
- intel: remove unused macros (Stefan Assmann) [2149742 2103944]
- iavf: Add waiting for response from PF in set mac (Stefan Assmann) [2149742 2103944]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.11.1.el8_7]" date="1673006400">- NFSD: Protect against send buffer overflow in NFSv3 READ (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv2 READ (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv3 READDIR (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv2 READDIR (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- SUNRPC: Fix svcxdr_init_encode's buflen calculation (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- SUNRPC: Fix svcxdr_init_decode's end-of-buffer calculation (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- panic, kexec: make __crash_kexec() NMI safe (Valentin Schneider) [2139580 2134126]
- kexec: turn all kexec_mutex acquisitions into trylocks (Valentin Schneider) [2139580 2134126]
- kexec: move locking into do_kexec_load (Valentin Schneider) [2139580 2134126]
- vdpa/mlx5: re-create forwarding rules after mac modified (Laurent Vivier) [2152912 2145136]
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry (Waiman Long) [2153653 2108387]
- irq: Call tick_irq_enter() inside HARDIRQ_OFFSET (Waiman Long) [2153653 2108387]
- irqtime: Move irqtime entry accounting after irq offset incrementation (Waiman Long) [2153653 2108387]
- sched/vtime: Consolidate IRQ time accounting (Waiman Long) [2153653 2108387]
- s390/vtime: Use the generic IRQ entry accounting (Waiman Long) [2153653 2108387]
- sched/cputime: Remove symbol exports from IRQ time accounting (Waiman Long) [2153653 2108387]
- genirq/irqdomain: Don't try to free an interrupt that has no mapping (Waiman Long) [2153653 2108387]
- genirq: Provide __irq_enter/exit_raw() (Waiman Long) [2153653 2108387]
- powerpc/time: Only set CONFIG_ARCH_HAS_SCALED_CPUTIME on PPC64 (Waiman Long) [2153653 2108387]
- powerpc/time: isolate scaled cputime accounting in dedicated functions. (Waiman Long) [2153653 2108387]
- PCI: hv: Fix synchronization between channel callback and hv_pci_bus_exit() (Mohammed Gamal) [2155280 2144708]
- PCI: hv: Fix synchronization between channel callback and hv_compose_msi_msg() (Mohammed Gamal) [2155280 2144708]
- PCI: hv: Use vmbus_requestor to generate transaction IDs for VMbus hardening (Mohammed Gamal) [2155280 2144708]
- net/mlx5e: TC, Reject forwarding from internal port to internal port (Mohammad Kabat) [2141959 2131345]
- hv_netvsc: Fix race between VF offering and VF association message from host (Mohammed Gamal) [2155272 2149279]
- x86/mce: Reduce number of machine checks taken during recovery (Prarit Bhargava) [2137592 2104388]
- cgroup/cpuset: Reduce cpuset_rwsem writer latency (Waiman Long) [2153108 2149031]
- rcu/exp: Mark current CPU as exp-QS in IPI loop second pass (Waiman Long) [2153108 2149031]
- rcu: Always inline rcu_dynticks_task*_{enter,exit}() (Waiman Long) [2153108 2149031]
- rcu: Fix existing exp request check in sync_sched_exp_online_cleanup() (Waiman Long) [2153108 2149031]
- rcu: Fix macro name CONFIG_TASKS_RCU_TRACE (Waiman Long) [2153108 2149031]
- rcu: Fix stall-warning deadlock due to non-release of rcu_node -&gt;lock (Waiman Long) [2153108 2149031]
- rcu: Fix to include first blocked task in stall warning (Waiman Long) [2153108 2149031]
- cgroup: Use cgroup_attach_{lock,unlock}() from cgroup_attach_task_all() (Waiman Long) [2153108 2149031]
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all() (Waiman Long) [2153108 2149031]
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock (Waiman Long) [2153108 2149031]
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree (Waiman Long) [2153108 2149031]
- cgroup/cpuset: Fix a race between cpuset_attach() and cpu hotplug (Waiman Long) [2153108 2149031]
- cgroup: reduce dependency on cgroup_mutex (Waiman Long) [2153108 2149031]
- sunrpc: Set sk_allocation to GFP_NOFS to avoid using current-&gt;task_frag. (Guillaume Nault) [2153230 2089660]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.12.1.el8_7]" date="1674129600">- x86/fpu: Prevent FPU state corruption (Oleksandr Natalenko) [2134586 2130890]
- x86/fpu: Drop fpregs lock before inheriting FPU permissions (Eder Zulian) [2154460 2153549]
- kernel-doc: fix undefined args variable (Jan Stancek) [2157905 2134954]
- mm: memcontrol: fix potential oom_lock recursion deadlock (Waiman Long) [2157922 2138886]
- memcg: prohibit unconditional exceeding the limit of dying tasks (Waiman Long) [2157922 2138886]
- mm, oom: do not trigger out_of_memory from the #PF (Waiman Long) [2157922 2138886]
- mm, oom: pagefault_out_of_memory: don't force global OOM for dying tasks (Waiman Long) [2157922 2138886]
- mm: memcontrol: don't count limit-setting reclaim as memory pressure (Waiman Long) [2157922 2138886]
- KVM: s390: vsie: Fix the initialization of the epoch extension (epdx) field (Thomas Huth) [2158813 2151854]
- net: mana: Fix race on per-CQ variable napi work_done (Emanuele Giuseppe Esposito) [2155437 2151722]
- mei: me: add adler lake point S DID (Prarit Bhargava) [2141783 2141602]
- PCI: hv: Only reuse existing IRTE allocation for Multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix the definition of vector in hv_compose_msi_msg() (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix interrupt mapping for multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Reuse existing IRTE allocation in compose_msi_msg() (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix hv_arch_irq_unmask() for multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix multi-MSI to allow more than one MSI vector (Emanuele Giuseppe Esposito) [2155289 2100275]
- drm/ast: Support multiple outputs (Jarod Wilson) [2149287 2147553]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.13.1.el8_7]" date="1675339200">- mm/cgroup/reclaim: fix dirty pages throttling on cgroup v1 (Waiman Long) [2160221]
- mm: vmscan: remove deadlock due to throttling failing to make progress (Waiman Long) [2160221]
- mm: vmscan: reduce throttling due to a failure to make progress -fix (Waiman Long) [2160221]
- mm: vmscan: Reduce throttling due to a failure to make progress (Waiman Long) [2160221]
- mm/vmscan: delay waking of tasks throttled on NOPROGRESS (Waiman Long) [2160221]
- mm/vmscan: increase the timeout if page reclaim is not making progress (Waiman Long) [2160221]
- mm/vmscan: centralise timeout values for reclaim_throttle (Waiman Long) [2160221]
- mm/page_alloc: remove the throttling logic from the page allocator (Waiman Long) [2160221]
- mm/writeback: throttle based on page writeback instead of congestion (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim when no progress is being made (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim and compaction when too may pages are isolated (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim until some writeback completes if congested (Waiman Long) [2160221]
- mm/vmscan.c: delete or fix duplicated words (Waiman Long) [2160221]
- mm,page_alloc: PF_WQ_WORKER threads must sleep at should_reclaim_retry() (Nico Pache) [2160221]
- ceph: avoid putting the realm twice when decoding snaps fails (Xiubo Li) [2155797 2139881]
- mm/mremap: hold the rmap lock in write mode when moving page table entries. (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: use pmd/pud_poplulate to update page table entries (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: don't enable optimized PUD move if page table levels is 2 (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: convert huge PUD move to separate helper (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: fix BUILD_BUG_ON() error in get_extent (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap.c: fix extent calculation (Waiman Long) [2140944] {CVE-2022-41222}
- x86: mremap speedup - Enable HAVE_MOVE_PUD (Waiman Long) [2140944] {CVE-2022-41222}
- mm: speedup mremap on 1GB or larger regions (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: start addresses are properly aligned (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: calculate extent in one place (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: it is sure to have enough space when extent meets requirement (Waiman Long) [2140944] {CVE-2022-41222}
- s390/boot: add secure boot trailer (Tobias Huschle) [2151530 2141967]
- i40e: Fix VF hang when reset is triggered on another VF (Ivan Vecera) [2160460 2103801]
- i2c: ismt: Fix an out-of-bounds bug in ismt_access() (Prarit Bhargava) [2154388 2119066] {CVE-2022-2873}
- iavf: schedule watchdog immediately when changing primary MAC (Michal Schmidt) [2163257 2152493]
- iavf: Move netdev_update_features() into watchdog task (Michal Schmidt) [2163257 2152493]
- iavf: fix temporary deadlock and failure to set MAC address (Michal Schmidt) [2163257 2152493]
- iavf: Fix error handling in iavf_init_module() (Michal Schmidt) [2163257 2152493]
- iommu/vt-d: Clean up si_domain in the init_dmars() error path (Jerry Snitselaar) [2149474 2118428]
- x86/pci/xen: Use msi_msg shadow structs (Jerry Snitselaar) [2149474 2118428]
- iommu/intel: Use msi_msg shadow structs (Jerry Snitselaar) [2149474 2118428]
- PCI: MSI: Fix Kconfig dependencies for PCI_MSI_ARCH_FALLBACKS (Jerry Snitselaar) [2149474 2118428]
- x86/apic/msi: Unbreak DMAR and HPET MSI (Jerry Snitselaar) [2149474 2118428]
- iommu/amd: Remove domain search for PCI/MSI (Jerry Snitselaar) [2149474 2118428]
- iommu/vt-d: Remove domain search for PCI/MSI[X] (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Make most MSI ops XEN private (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Cleanup the arch_*_msi_irqs() leftovers (Jerry Snitselaar) [2149474 2118428]
- PCI/MSI: Make arch_.*_msi_irq[s] fallbacks selectable (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Wrap XEN MSI management into irqdomain (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Consolidate XEN-MSI init (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Rework MSI teardown (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Make xen_msi_init() static and rename it to xen_hvm_msi_init() (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Move apic_post_init() invocation to one place (Jerry Snitselaar) [2149474 2118428]
- x86/msi: Use generic MSI domain ops (Jerry Snitselaar) [2149474 2118428]
- x86/msi: Remove pointless vcpu_affinity callback (Jerry Snitselaar) [2149474 2118428]
- iommu/vt-d: Fix compile error with CONFIG_PCI_ATS not set (Myron Stowe) [2149474 2118428]
- iommu/vt-d: Cure VF irqdomain hickup (Myron Stowe) [2149474 2118428]
- x86/pci: Set default irq domain in pcibios_add_device() (Myron Stowe) [2149474 2118428]
- iommm/amd: Store irq domain in struct device (Myron Stowe) [2149474 2118428]
- iommm/vt-d: Store irq domain in struct device (Myron Stowe) [2149474 2118428]
- PCI/MSI: Provide pci_dev_has_special_msi_domain() helper (Myron Stowe) [2149474 2118428]
- x86/msi: Consolidate MSI allocation (Myron Stowe) [2149474 2118428]
- PCI/MSI: Rework pci_msi_domain_calc_hwirq() (Myron Stowe) [2149474 2118428]
- x86/irq: Consolidate UV domain allocation (Myron Stowe) [2149474 2118428]
- x86/irq: Consolidate DMAR irq allocation (Myron Stowe) [2149474 2118428]
- x86_ioapic_Consolidate_IOAPIC_allocation (Myron Stowe) [2149474 2118428]
- x86/msi: Consolidate HPET allocation (Myron Stowe) [2149474 2118428]
- iommu/irq_remapping: Consolidate irq domain lookup (Myron Stowe) [2149474 2118428]
- iommu/amd: Consolidate irq domain getter (Myron Stowe) [2149474 2118428]
- iommu/vt-d: Consolidate irq domain getter (Myron Stowe) [2149474 2118428]
- x86/irq: Add allocation type for parent domain retrieval (Myron Stowe) [2149474 2118428]
- irqdomain: Export irq_domain_update_bus_token (Myron Stowe) [2149474 2118428]
- gitlab-ci: use CI templates from production branch (Michael Hofmann)
- iavf: remove INITIAL_MAC_SET to allow gARP to work properly (Stefan Assmann) [2149745 1938635]
- Revert "scsi: iscsi: ql4xxx: Use per-session workqueue for unbinding" (Chris Leech) [2152734 2122624]
- Revert "scsi: iscsi: Use the session workqueue for recovery" (Chris Leech) [2152734 2122624]
- arm64/bpf: Remove 128MB limit for BPF JIT programs (Yauheni Kaliuta) [2152138 2140163]
- bpf: Define bpf_jit_alloc_exec_limit for arm64 JIT (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: add `type` and `data` fields (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: use `ex` for `exception_table_entry` (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: make fixup_exception() return bool (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: consolidate definitions (Yauheni Kaliuta) [2152138 2140163]
- arm64: kvm: use kvm_exception_table_entry (Yauheni Kaliuta) [2152138 2140163]
- be2net: Fix buffer overflow in be_get_module_eeprom (Josef Oskera) [2160182 2126917]</changelog>
</package>
<package pkgid="30595899046ea9d080837292270176ca74df216b9ab733e0c6add55e7524c58d" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="425.19.2.el8_7"/>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.11.1.el8_7]" date="1673006400">- NFSD: Protect against send buffer overflow in NFSv3 READ (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv2 READ (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv3 READDIR (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv2 READDIR (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- SUNRPC: Fix svcxdr_init_encode's buflen calculation (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- SUNRPC: Fix svcxdr_init_decode's end-of-buffer calculation (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- panic, kexec: make __crash_kexec() NMI safe (Valentin Schneider) [2139580 2134126]
- kexec: turn all kexec_mutex acquisitions into trylocks (Valentin Schneider) [2139580 2134126]
- kexec: move locking into do_kexec_load (Valentin Schneider) [2139580 2134126]
- vdpa/mlx5: re-create forwarding rules after mac modified (Laurent Vivier) [2152912 2145136]
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry (Waiman Long) [2153653 2108387]
- irq: Call tick_irq_enter() inside HARDIRQ_OFFSET (Waiman Long) [2153653 2108387]
- irqtime: Move irqtime entry accounting after irq offset incrementation (Waiman Long) [2153653 2108387]
- sched/vtime: Consolidate IRQ time accounting (Waiman Long) [2153653 2108387]
- s390/vtime: Use the generic IRQ entry accounting (Waiman Long) [2153653 2108387]
- sched/cputime: Remove symbol exports from IRQ time accounting (Waiman Long) [2153653 2108387]
- genirq/irqdomain: Don't try to free an interrupt that has no mapping (Waiman Long) [2153653 2108387]
- genirq: Provide __irq_enter/exit_raw() (Waiman Long) [2153653 2108387]
- powerpc/time: Only set CONFIG_ARCH_HAS_SCALED_CPUTIME on PPC64 (Waiman Long) [2153653 2108387]
- powerpc/time: isolate scaled cputime accounting in dedicated functions. (Waiman Long) [2153653 2108387]
- PCI: hv: Fix synchronization between channel callback and hv_pci_bus_exit() (Mohammed Gamal) [2155280 2144708]
- PCI: hv: Fix synchronization between channel callback and hv_compose_msi_msg() (Mohammed Gamal) [2155280 2144708]
- PCI: hv: Use vmbus_requestor to generate transaction IDs for VMbus hardening (Mohammed Gamal) [2155280 2144708]
- net/mlx5e: TC, Reject forwarding from internal port to internal port (Mohammad Kabat) [2141959 2131345]
- hv_netvsc: Fix race between VF offering and VF association message from host (Mohammed Gamal) [2155272 2149279]
- x86/mce: Reduce number of machine checks taken during recovery (Prarit Bhargava) [2137592 2104388]
- cgroup/cpuset: Reduce cpuset_rwsem writer latency (Waiman Long) [2153108 2149031]
- rcu/exp: Mark current CPU as exp-QS in IPI loop second pass (Waiman Long) [2153108 2149031]
- rcu: Always inline rcu_dynticks_task*_{enter,exit}() (Waiman Long) [2153108 2149031]
- rcu: Fix existing exp request check in sync_sched_exp_online_cleanup() (Waiman Long) [2153108 2149031]
- rcu: Fix macro name CONFIG_TASKS_RCU_TRACE (Waiman Long) [2153108 2149031]
- rcu: Fix stall-warning deadlock due to non-release of rcu_node -&gt;lock (Waiman Long) [2153108 2149031]
- rcu: Fix to include first blocked task in stall warning (Waiman Long) [2153108 2149031]
- cgroup: Use cgroup_attach_{lock,unlock}() from cgroup_attach_task_all() (Waiman Long) [2153108 2149031]
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all() (Waiman Long) [2153108 2149031]
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock (Waiman Long) [2153108 2149031]
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree (Waiman Long) [2153108 2149031]
- cgroup/cpuset: Fix a race between cpuset_attach() and cpu hotplug (Waiman Long) [2153108 2149031]
- cgroup: reduce dependency on cgroup_mutex (Waiman Long) [2153108 2149031]
- sunrpc: Set sk_allocation to GFP_NOFS to avoid using current-&gt;task_frag. (Guillaume Nault) [2153230 2089660]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.12.1.el8_7]" date="1674129600">- x86/fpu: Prevent FPU state corruption (Oleksandr Natalenko) [2134586 2130890]
- x86/fpu: Drop fpregs lock before inheriting FPU permissions (Eder Zulian) [2154460 2153549]
- kernel-doc: fix undefined args variable (Jan Stancek) [2157905 2134954]
- mm: memcontrol: fix potential oom_lock recursion deadlock (Waiman Long) [2157922 2138886]
- memcg: prohibit unconditional exceeding the limit of dying tasks (Waiman Long) [2157922 2138886]
- mm, oom: do not trigger out_of_memory from the #PF (Waiman Long) [2157922 2138886]
- mm, oom: pagefault_out_of_memory: don't force global OOM for dying tasks (Waiman Long) [2157922 2138886]
- mm: memcontrol: don't count limit-setting reclaim as memory pressure (Waiman Long) [2157922 2138886]
- KVM: s390: vsie: Fix the initialization of the epoch extension (epdx) field (Thomas Huth) [2158813 2151854]
- net: mana: Fix race on per-CQ variable napi work_done (Emanuele Giuseppe Esposito) [2155437 2151722]
- mei: me: add adler lake point S DID (Prarit Bhargava) [2141783 2141602]
- PCI: hv: Only reuse existing IRTE allocation for Multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix the definition of vector in hv_compose_msi_msg() (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix interrupt mapping for multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Reuse existing IRTE allocation in compose_msi_msg() (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix hv_arch_irq_unmask() for multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix multi-MSI to allow more than one MSI vector (Emanuele Giuseppe Esposito) [2155289 2100275]
- drm/ast: Support multiple outputs (Jarod Wilson) [2149287 2147553]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.13.1.el8_7]" date="1675339200">- mm/cgroup/reclaim: fix dirty pages throttling on cgroup v1 (Waiman Long) [2160221]
- mm: vmscan: remove deadlock due to throttling failing to make progress (Waiman Long) [2160221]
- mm: vmscan: reduce throttling due to a failure to make progress -fix (Waiman Long) [2160221]
- mm: vmscan: Reduce throttling due to a failure to make progress (Waiman Long) [2160221]
- mm/vmscan: delay waking of tasks throttled on NOPROGRESS (Waiman Long) [2160221]
- mm/vmscan: increase the timeout if page reclaim is not making progress (Waiman Long) [2160221]
- mm/vmscan: centralise timeout values for reclaim_throttle (Waiman Long) [2160221]
- mm/page_alloc: remove the throttling logic from the page allocator (Waiman Long) [2160221]
- mm/writeback: throttle based on page writeback instead of congestion (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim when no progress is being made (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim and compaction when too may pages are isolated (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim until some writeback completes if congested (Waiman Long) [2160221]
- mm/vmscan.c: delete or fix duplicated words (Waiman Long) [2160221]
- mm,page_alloc: PF_WQ_WORKER threads must sleep at should_reclaim_retry() (Nico Pache) [2160221]
- ceph: avoid putting the realm twice when decoding snaps fails (Xiubo Li) [2155797 2139881]
- mm/mremap: hold the rmap lock in write mode when moving page table entries. (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: use pmd/pud_poplulate to update page table entries (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: don't enable optimized PUD move if page table levels is 2 (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: convert huge PUD move to separate helper (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: fix BUILD_BUG_ON() error in get_extent (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap.c: fix extent calculation (Waiman Long) [2140944] {CVE-2022-41222}
- x86: mremap speedup - Enable HAVE_MOVE_PUD (Waiman Long) [2140944] {CVE-2022-41222}
- mm: speedup mremap on 1GB or larger regions (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: start addresses are properly aligned (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: calculate extent in one place (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: it is sure to have enough space when extent meets requirement (Waiman Long) [2140944] {CVE-2022-41222}
- s390/boot: add secure boot trailer (Tobias Huschle) [2151530 2141967]
- i40e: Fix VF hang when reset is triggered on another VF (Ivan Vecera) [2160460 2103801]
- i2c: ismt: Fix an out-of-bounds bug in ismt_access() (Prarit Bhargava) [2154388 2119066] {CVE-2022-2873}
- iavf: schedule watchdog immediately when changing primary MAC (Michal Schmidt) [2163257 2152493]
- iavf: Move netdev_update_features() into watchdog task (Michal Schmidt) [2163257 2152493]
- iavf: fix temporary deadlock and failure to set MAC address (Michal Schmidt) [2163257 2152493]
- iavf: Fix error handling in iavf_init_module() (Michal Schmidt) [2163257 2152493]
- iommu/vt-d: Clean up si_domain in the init_dmars() error path (Jerry Snitselaar) [2149474 2118428]
- x86/pci/xen: Use msi_msg shadow structs (Jerry Snitselaar) [2149474 2118428]
- iommu/intel: Use msi_msg shadow structs (Jerry Snitselaar) [2149474 2118428]
- PCI: MSI: Fix Kconfig dependencies for PCI_MSI_ARCH_FALLBACKS (Jerry Snitselaar) [2149474 2118428]
- x86/apic/msi: Unbreak DMAR and HPET MSI (Jerry Snitselaar) [2149474 2118428]
- iommu/amd: Remove domain search for PCI/MSI (Jerry Snitselaar) [2149474 2118428]
- iommu/vt-d: Remove domain search for PCI/MSI[X] (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Make most MSI ops XEN private (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Cleanup the arch_*_msi_irqs() leftovers (Jerry Snitselaar) [2149474 2118428]
- PCI/MSI: Make arch_.*_msi_irq[s] fallbacks selectable (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Wrap XEN MSI management into irqdomain (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Consolidate XEN-MSI init (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Rework MSI teardown (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Make xen_msi_init() static and rename it to xen_hvm_msi_init() (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Move apic_post_init() invocation to one place (Jerry Snitselaar) [2149474 2118428]
- x86/msi: Use generic MSI domain ops (Jerry Snitselaar) [2149474 2118428]
- x86/msi: Remove pointless vcpu_affinity callback (Jerry Snitselaar) [2149474 2118428]
- iommu/vt-d: Fix compile error with CONFIG_PCI_ATS not set (Myron Stowe) [2149474 2118428]
- iommu/vt-d: Cure VF irqdomain hickup (Myron Stowe) [2149474 2118428]
- x86/pci: Set default irq domain in pcibios_add_device() (Myron Stowe) [2149474 2118428]
- iommm/amd: Store irq domain in struct device (Myron Stowe) [2149474 2118428]
- iommm/vt-d: Store irq domain in struct device (Myron Stowe) [2149474 2118428]
- PCI/MSI: Provide pci_dev_has_special_msi_domain() helper (Myron Stowe) [2149474 2118428]
- x86/msi: Consolidate MSI allocation (Myron Stowe) [2149474 2118428]
- PCI/MSI: Rework pci_msi_domain_calc_hwirq() (Myron Stowe) [2149474 2118428]
- x86/irq: Consolidate UV domain allocation (Myron Stowe) [2149474 2118428]
- x86/irq: Consolidate DMAR irq allocation (Myron Stowe) [2149474 2118428]
- x86_ioapic_Consolidate_IOAPIC_allocation (Myron Stowe) [2149474 2118428]
- x86/msi: Consolidate HPET allocation (Myron Stowe) [2149474 2118428]
- iommu/irq_remapping: Consolidate irq domain lookup (Myron Stowe) [2149474 2118428]
- iommu/amd: Consolidate irq domain getter (Myron Stowe) [2149474 2118428]
- iommu/vt-d: Consolidate irq domain getter (Myron Stowe) [2149474 2118428]
- x86/irq: Add allocation type for parent domain retrieval (Myron Stowe) [2149474 2118428]
- irqdomain: Export irq_domain_update_bus_token (Myron Stowe) [2149474 2118428]
- gitlab-ci: use CI templates from production branch (Michael Hofmann)
- iavf: remove INITIAL_MAC_SET to allow gARP to work properly (Stefan Assmann) [2149745 1938635]
- Revert "scsi: iscsi: ql4xxx: Use per-session workqueue for unbinding" (Chris Leech) [2152734 2122624]
- Revert "scsi: iscsi: Use the session workqueue for recovery" (Chris Leech) [2152734 2122624]
- arm64/bpf: Remove 128MB limit for BPF JIT programs (Yauheni Kaliuta) [2152138 2140163]
- bpf: Define bpf_jit_alloc_exec_limit for arm64 JIT (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: add `type` and `data` fields (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: use `ex` for `exception_table_entry` (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: make fixup_exception() return bool (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: consolidate definitions (Yauheni Kaliuta) [2152138 2140163]
- arm64: kvm: use kvm_exception_table_entry (Yauheni Kaliuta) [2152138 2140163]
- be2net: Fix buffer overflow in be_get_module_eeprom (Josef Oskera) [2160182 2126917]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.14.1.el8_7]" date="1676030400">- ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems (Wei Huang) [2142170 2130653]
- KVM: x86: nSVM: implement nested LBR virtualization (Emanuele Giuseppe Esposito) [2166362 2155149]
- KVM: x86: nSVM: correctly virtualize LBR msrs when L2 is running (Emanuele Giuseppe Esposito) [2166362 2155149]
- kvm: x86: SVM: use vmcb* instead of svm-&gt;vmcb where it makes sense (Emanuele Giuseppe Esposito) [2166362 2155149]
- KVM: x86: nSVM: implement nested VMLOAD/VMSAVE (Emanuele Giuseppe Esposito) [2166362 2155149]
- IB/iser: Fix login with authentication (Kamal Heib) [2161750 2120676]
- act_mirred: use the backlog for nested calls to mirred ingress (Davide Caratti) [2164648 2131339] {CVE-2022-4269}
- net/sched: act_mirred: better wording on protection against excessive stack growth (Davide Caratti) [2164648 2131339] {CVE-2022-4269}
- redhat/configs: Set CONFIG_X86_AMD_PSTATE to 'm' (Prarit Bhargava) [2151275 2145246]
- KVM: x86: smm: preserve interrupt shadow in SMRAM (Maxim Levitsky) [2166368 2097144]
- KVM: x86: SVM: don't save SVM state to SMRAM when VM is not long mode capable (Maxim Levitsky) [2166368 2097144]
- KVM: x86: SVM: use smram structs (Maxim Levitsky) [2166368 2097144]
- KVM: svm: drop explicit return value of kvm_vcpu_map (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: use smram struct for 64 bit smram load/restore (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: use smram struct for 32 bit smram load/restore (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: use smram structs in the common code (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: add structs for KVM's smram layout (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: check for failures on smm entry (Maxim Levitsky) [2166368 2097144]
- KVM: x86: do not go through ctxt-&gt;ops when emulating rsm (Maxim Levitsky) [2166368 2097144]
- KVM: x86: move SMM exit to a new file (Maxim Levitsky) [2166368 2097144]
- KVM: x86: move SMM entry to a new file (Maxim Levitsky) [2166368 2097144]
- KVM: x86: start moving SMM-related functions to new files (Maxim Levitsky) [2166368 2097144]
- bug: introduce ASSERT_STRUCT_OFFSET (Maxim Levitsky) [2166368 2097144]
- KVM: x86: Rename and expose helper to detect if INIT/SIPI are allowed (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: number of GPRs in the SMRAM image depends on the image format (Maxim Levitsky) [2166368 2097144]
- KVM: x86: emulator: update the emulation mode after CR0 write (Maxim Levitsky) [2166368 2097144]
- KVM: x86: emulator: update the emulation mode after rsm (Maxim Levitsky) [2166368 2097144]
- KVM: x86: emulator: introduce emulator_recalc_and_set_mode (Maxim Levitsky) [2166368 2097144]
- KVM: x86: emulator: em_sysexit should update ctxt-&gt;mode (Maxim Levitsky) [2166368 2097144]
- KVM: x86: Bug the VM if the emulator accesses a non-existent GPR (Maxim Levitsky) [2166368 2097144]
- \KVM: x86: Reduce the number of emulator GPRs to '8' for 32-bit KVM (Maxim Levitsky) [2166368 2097144]
- KVM: x86: Use 16-bit fields to track dirty/valid emulator GPRs (Maxim Levitsky) [2166368 2097144]
- KVM: x86: Omit VCPU_REGS_RIP from emulator's _regs array (Maxim Levitsky) [2166368 2097144]
- \KVM: x86: Harden _regs accesses to guard against buggy input (Maxim Levitsky) [2166368 2097144]
- KVM: x86: Grab regs_dirty in local 'unsigned long' (Maxim Levitsky) [2166368 2097144]
- proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152571 2152572] {CVE-2022-4378}
- proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152571 2152572] {CVE-2022-4378}</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.15.1.el8_7]" date="1676548800">- net/mlx5e: Fix use-after-free when reverting termination table (Amir Tzin) [2167640 2112927]
- net/mlx5: Do not query pci info while pci disabled (Amir Tzin) [2167645 2129249]
- x86/fpu: Fix copy_xstate_to_uabi() to copy init states correctly (Dean Nelson) [2168384 2122850]
- x86/fpu: Exclude dynamic states from init_fpstate (Dean Nelson) [2168384 2122850]
- x86/fpu: Fix the init_fpstate size check with the actual size (Dean Nelson) [2168384 2122850]
- x86/fpu: Configure init_fpstate attributes orderly (Dean Nelson) [2168384 2122850]
- x86/fpu/xstate: Fix the ARCH_REQ_XCOMP_PERM implementation (Dean Nelson) [2168384 2122850]
- net/mlx5: E-Switch, properly handle ingress tagged packets on VST (Amir Tzin) [2166665 2096109]
- cpuhotplug: Fix KABI breakage (Prarit Bhargava) [2162763 2156529]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.16.1.el8_7]" date="1677153600">- ipv6: fix panic when fib_lookup_arg-&gt;result is fib6_info (Jiri Benc) [2167602 2140599]
- ceph: blocklist the kclient when receiving corrupted snap trace (Xiubo Li) [2168896 2162414]
- ceph: move mount state enum to super.h (Xiubo Li) [2168896 2162414]
- s390/kexec: fix ipl report address for kdump (Tobias Huschle) [2166296 2161328]
- mm, compaction: fix fast_isolate_around() to stay within boundaries (Daniel Vacek) [2170576 2149309]
- scsi: storvsc: Fix swiotlb bounce buffer leak in confidential VM (Emanuele Giuseppe Esposito) [2170228 2150659]
- netfilter: conntrack: handle tcp challenge acks during connection reuse (Florian Westphal) [2165587 2158726]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.17.1.el8_7]" date="1677844800">- net: mana: Add rmb after checking owner bits (Mohammed Gamal) [2173103 2139462]
- net: mana: Add support of XDP_REDIRECT action (Mohammed Gamal) [2173103 2139462]
- net: mana: Add the Linux MANA PF driver (Mohammed Gamal) [2173103 2139462]
- ice: fix lost multicast packets in promisc mode (Ken Cox) [2172550 2138215]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.18.0-425.18.1.el8_7]" date="1678449600">- futex: Resend potentially swallowed owner death notification (Rafael Aquini) [2170054 2161526]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.19.1.el8_7]" date="1678968000">- s390/dasd: fix no record found for raw_track_access (Tobias Huschle) [2167776 2161270]
- locking/rwsem: Disable preemption in all down_read*() and up_read() code paths (Waiman Long) [2170939 2162139]
- locking/rwsem: Prevent non-first waiter from spinning in down_write() slowpath (Waiman Long) [2170939 2162139]
- locking/rwsem: Allow slowpath writer to ignore handoff bit if not set by first waiter (Waiman Long) [2170939 2162139]
- locking/rwsem: Always try to wake waiters in out_nolock path (Waiman Long) [2170939 2162139]
- locking/rwsem: No need to check for handoff bit if wait queue empty (Waiman Long) [2170939 2162139]
- locking/rwsem: Make handoff bit handling more consistent (Waiman Long) [2170939 2162139]
- locking/rwsem: Disable preemption while trying for rwsem lock (Waiman Long) [2170939 2162139]
- locking/rwsem: Conditionally wake waiters in reader/writer slowpaths (Waiman Long) [2170939 2162139]
- locking: Make owner_on_cpu() into &lt;linux/sched.h&gt; (Waiman Long) [2170939 2162139]
- locking/rwsem: Optimize down_read_trylock() under highly contended case (Waiman Long) [2170939 2162139]
- locking/rwsem: Fix comments about reader optimistic lock stealing conditions (Waiman Long) [2170939 2162139]
- locking/rwsem: Disable preemption for spinning region (Waiman Long) [2170939 2162139]
- locking: Remove rcu_read_{,un}lock() for preempt_{dis,en}able() (Waiman Long) [2170939 2162139]
- watchdog: fix UAF in reboot notifier handling in watchdog core code (Wander Lairson Costa) [2139770 2131308]
- netfilter: nf_conntrack_irc: Tighten matching on DCC message (Wander Lairson Costa) [2139770 2131308]
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF (Jaroslav Kysela) [2163400 2163401] {CVE-2023-0266}
- net/mlx5e: Fix enabling sriov while tc nic rules are offloaded (Amir Tzin) [2167647 2112925]
- net/mlx5: E-Switch, pair only capable devices (Amir Tzin) [2167647 2112925]
- net/mlx5: Fix mlx5_get_next_dev() peer device matching (Amir Tzin) [2167647 2112925]
- net/mlx5: Lag, filter non compatible devices (Amir Tzin) [2167647 2112925]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.19.2.el8_7.gf5e8]" date="1678968001">- ovl: fail on invalid uid/gid mapping at copy up (Miklos Szeredi) [2165341 2165342] {CVE-2023-0386}</changelog>
</package>
<package pkgid="d638b3fd82df43865ced1ea8ec043eda145810234c30cee044ec1086549c63c2" name="kernel-tools-libs" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="425.10.1.el8_7"/>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.1.1.el8]" date="1663588800">- i40e: Fix kernel crash during module removal (Ivan Vecera) [2091489]
- redhat: enable zstream release numbering for rhel 8.7 (Jarod Wilson)
- ice: Allow operation with reduced device MSI-X (Petr Oros) [2102844]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.2.1.el8]" date="1664193600">- EDAC/ghes: Set the DIMM label unconditionally (Aristeu Rozanski) [2109712]
- configs: enable CONFIG_HP_ILO for aarch64 (Mark Salter) [2123508]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.3.1.el8]" date="1664539200">- iwlwifi: limit fw version for AC9560 to avoid fw crash (Íñigo Huguet) [2129297]
- sfc: fix null pointer dereference in efx_hard_start_xmit (Íñigo Huguet) [2119638]
- sfc: fix TX channel offset when using legacy interrupts (Íñigo Huguet) [2119638]
- netfilter: conntrack: reduce timeout when receiving out-of-window fin or rst (Florian Westphal) [2047366]
- netfilter: conntrack: remove unneeded indent level (Florian Westphal) [2047366]
- netfilter: conntrack: ignore overly delayed tcp packets (Florian Westphal) [2047366]
- netfilter: conntrack: prepare tcp_in_window for ternary return value (Florian Westphal) [2047366]
- netfilter: conntrack: remove pr_debug callsites from tcp tracker (Florian Westphal) [2047366]
- netfilter: conntrack: work around exceeded receive window (Florian Westphal) [2047366]
- netfilter: conntrack: improve RST handling when tuple is re-used (Florian Westphal) [2047366]
- netfilter: conntrack: avoid misleading 'invalid' in log message (Florian Westphal) [2047366]
- netfilter: remove BUG_ON() after skb_header_pointer() (Florian Westphal) [2047366]
- iavf: Detach device during reset task (Petr Oros) [2069206]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.4.1.el8]" date="1665144000">- random: allow reseeding DRBG with getrandom (Daiki Ueno) [2121766]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.5.1.el8_7]" date="1667476800">- ice: Fix interface being down after reset with link-down-on-close flag on (Petr Oros) [2136216 2024110]
- ice: Fix crash by keep old cfg when update TCs more than queues (Petr Oros) [2130992 2129902]
- ice: Fix tunnel checksum offload with fragmented traffic (Petr Oros) [2130992 2129902]
- ice: handle E822 generic device ID in PLDM header (Petr Oros) [2130992 2129902]
- ice: ethtool: Prohibit improper channel config for DCB (Petr Oros) [2130992 2129902]
- ice: ethtool: advertise 1000M speeds properly (Petr Oros) [2130992 2129902]
- ice: Fix switchdev rules book keeping (Petr Oros) [2130992 2129902]
- ice: fix access-beyond-end in the switch code (Petr Oros) [2130992 2129902]
- eth: ice: silence the GCC 12 array-bounds warning (Petr Oros) [2130992 2129902]
- ice: Expose RSS indirection tables for queue groups via ethtool (Petr Oros) [2130992 2129902]
- Revert "ice: Hide bus-info in ethtool for PRs in switchdev mode" (Petr Oros) [2130992 2129902]
- ice: remove period on argument description in ice_for_each_vf (Petr Oros) [2130992 2129902]
- ice: add a function comment for ice_cfg_mac_antispoof (Petr Oros) [2130992 2129902]
- ice: fix wording in comment for ice_reset_vf (Petr Oros) [2130992 2129902]
- ice: remove return value comment for ice_reset_all_vfs (Petr Oros) [2130992 2129902]
- ice: always check VF VSI pointer values (Petr Oros) [2130992 2129902]
- ice: add newline to dev_dbg in ice_vf_fdir_dump_info (Petr Oros) [2130992 2129902]
- ice: get switch id on switchdev devices (Petr Oros) [2130992 2129902]
- ice: return ENOSPC when exceeding ICE_MAX_CHAIN_WORDS (Petr Oros) [2130992 2129902]
- ice: introduce common helper for retrieving VSI by vsi_num (Petr Oros) [2130992 2129902]
- ice: use min_t() to make code cleaner in ice_gnss (Petr Oros) [2130992 2129902]
- ice: Add mpls+tso support (Petr Oros) [2130992 2129902]
- ice: switch: convert packet template match code to rodata (Petr Oros) [2130992 2129902]
- ice: switch: use convenience macros to declare dummy pkt templates (Petr Oros) [2130992 2129902]
- ice: switch: use a struct to pass packet template params (Petr Oros) [2130992 2129902]
- ice: switch: unobscurify bitops loop in ice_fill_adv_dummy_packet() (Petr Oros) [2130992 2129902]
- ice: switch: add and use u16[] aliases to ice_adv_lkup_elem::{h, m}_u (Petr Oros) [2130992 2129902]
- ice: Support GTP-U and GTP-C offload in switchdev (Petr Oros) [2130992 2129902]
- ice: Remove useless DMA-32 fallback configuration (Petr Oros) [2130992 2129902]
- ice: switch to napi_build_skb() (Petr Oros) [2130992 2129902]
- redhat: switch to z-stream dist tag and build targets (Jarod Wilson)
- block: avoid sign extend problem with default queue flags mask (Nico Pache) [2135813]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.6.1.el8_7]" date="1668168000">- ice: Add low latency Tx timestamp read (Petr Oros) [2136036 2092425]
- ice: introduce ice_ptp_reset_cached_phctime function (Petr Oros) [2136036 2092425]
- ice: re-arrange some static functions in ice_ptp.c (Petr Oros) [2136036 2092425]
- ice: track and warn when PHC update is late (Petr Oros) [2136036 2092425]
- ice: track Tx timestamp stats similar to other Intel drivers (Petr Oros) [2136036 2092425]
- ice: implement adjfine with mul_u64_u64_div_u64 (Petr Oros) [2136036 2092425]
- ice: Add EXTTS feature to the feature bitmap (Petr Oros) [2136036 2092425]
- math: Export mul_u64_u64_div_u64 (Petr Oros) [2136036 2092425]
- vfio/type1: Unpin zero pages (Alex Williamson) [2128515 2123015]
- net: atlantic: remove aq_nic_deinit() when resume (Íñigo Huguet) [2131935 2130839]
- net: atlantic: remove deep parameter on suspend/resume functions (Íñigo Huguet) [2131935 2130839]
- CI: Use zstream builder container (Veronika Kabatova)
- CI: Add disttag override for 8.7 (Veronika Kabatova)</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.7.1.el8_7]" date="1669723200">- ice: Add additional CSR registers to ETHTOOL_GREGS (Petr Oros) [2136513 2131024]
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps (Petr Oros) [2137270 2106964]
- i40e: Fix VF set max MTU size (Petr Oros) [2137270 2106964]
- iavf: Fix set max MTU size with port VLAN and jumbo frames (Petr Oros) [2137270 2106964]
- iavf: Fix bad page state (Petr Oros) [2137270 2106964]
- Revert "scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels" (Jarod Wilson)
- scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels (Tomas Henzl) [2139216]
- Revert "ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems" (Jarod Wilson)
- ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems (Wei Huang) [2142170 2130653]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.8.1.el8_7]" date="1669982400">- scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels (Tomas Henzl) [2139216 2134535]
- RDMA/mlx5: Set local port to one when accessing counters (Mohammad Kabat) [2141957 2077119]
- drm/mgag200: Fix PLL setup for G200_SE_A rev &gt;=4 (Jocelyn Falempe) [2140152 2130159]
- iavf: Do not restart Tx queues after reset task failure (Petr Oros) [2149081 2134005]
- iavf: Fix a crash during reset task (Petr Oros) [2149081 2134005]
- scsi: core: Allow the ALUA transitioning state enough time (Tomas Henzl) [2147374 2084250]
- scsi: core: Return BLK_STS_TRANSPORT for ALUA transitioning (Tomas Henzl) [2147374 2084250]
- i40e: Fix DMA mappings leak (Ivan Vecera) [2138205 2077847]
- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2142724 2142725] {CVE-2022-2964}
- net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2142724 2142725] {CVE-2022-2964}</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.9.1.el8_7]" date="1670587200">- Documentation/admin-guide: Document nomodeset kernel parameter (Jocelyn Falempe) [2145218 2143952]
- drm: Move nomodeset kernel parameter to the DRM subsystem (Jocelyn Falempe) [2145218 2143952]
- wait: Fix __wait_event_hrtimeout for RT/DL tasks (Derek Barbosa) [2138953 2125233]
- scsi: zfcp: Fix missing auto port scan and thus missing target ports (Tobias Huschle) [2127849 2121089]
- net: Fix return value of qdisc ingress handling on success (Ivan Vecera) [2141878 2131361]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.10.1.el8_7]" date="1671019200">- scsi: target: loop: Fix handling of aborted TMRs (Maurizio Lombardi) [2144583 2141713]
- ice: virtchnl rss hena support (Petr Oros) [2148130]
- ice: Fix configuring VIRTCHNL_OP_CONFIG_VSI_QUEUES with unbalanced queues (Michal Schmidt) [2142017 2137378]
- ice: Add support Flex RXD (Michal Schmidt) [2138157 2131310]
- netfilter: flowtable: fix stuck flows on cleanup due to pending work (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: add function to invoke garbage collection immediately (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: pass flowtable to nf_flow_table_iterate() (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: separate replace, destroy and stats to different workqueues (Phil Sutter) [2134084 2131370]
- x86/paravirt: Add a dummy __x86_paravirt_patch_template() function (Waiman Long) [2152206 2144161]
- x86/paravirt: Fix kABI breakage in struct pv_mmu_ops (Waiman Long) [2152206 2144161]
- drm/i915: fix TLB invalidation for Gen12 video and compute engines (Wander Lairson Costa) [2148149 2148150] {CVE-2022-4139}
- PCI: hv: Do not set PCI_COMMAND_MEMORY to reduce VM boot time (Emanuele Giuseppe Esposito) [2150912 2082836]
- iavf: Fix cached head and tail value for iavf_get_tx_pending (Stefan Assmann) [2149742 2103944]
- iavf: Fix change VF's mac address (Stefan Assmann) [2149742 2103944]
- iavf: Fix race between iavf_close and iavf_reset_task (Stefan Assmann) [2149742 2103944]
- net: ethernet: move from strlcpy with unused retval to strscpy (Stefan Assmann) [2149742 2103944]
- iavf: Fix 'tc qdisc show' listing too many queues (Stefan Assmann) [2149742 2103944]
- iavf: Fix max_rate limiting (Stefan Assmann) [2149742 2103944]
- iavf: Check for duplicate TC flower filter before parsing (Stefan Assmann) [2149742 2103944]
- iavf: Fix handling of dummy receive descriptors (Stefan Assmann) [2149742 2103944]
- iavf: Disallow changing rx/tx-frames and rx/tx-frames-irq (Stefan Assmann) [2149742 2103944]
- intel/iavf:fix repeated words in comments (Stefan Assmann) [2149742 2103944]
- intel: remove unused macros (Stefan Assmann) [2149742 2103944]
- iavf: Add waiting for response from PF in set mac (Stefan Assmann) [2149742 2103944]</changelog>
</package>
<package pkgid="16eb4d9a8d07ef03b57e7996bc5311778b43e54a1bbf4633496e662082f20028" name="kernel-tools-libs" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="425.13.1.el8_7"/>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.4.1.el8]" date="1665144000">- random: allow reseeding DRBG with getrandom (Daiki Ueno) [2121766]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.5.1.el8_7]" date="1667476800">- ice: Fix interface being down after reset with link-down-on-close flag on (Petr Oros) [2136216 2024110]
- ice: Fix crash by keep old cfg when update TCs more than queues (Petr Oros) [2130992 2129902]
- ice: Fix tunnel checksum offload with fragmented traffic (Petr Oros) [2130992 2129902]
- ice: handle E822 generic device ID in PLDM header (Petr Oros) [2130992 2129902]
- ice: ethtool: Prohibit improper channel config for DCB (Petr Oros) [2130992 2129902]
- ice: ethtool: advertise 1000M speeds properly (Petr Oros) [2130992 2129902]
- ice: Fix switchdev rules book keeping (Petr Oros) [2130992 2129902]
- ice: fix access-beyond-end in the switch code (Petr Oros) [2130992 2129902]
- eth: ice: silence the GCC 12 array-bounds warning (Petr Oros) [2130992 2129902]
- ice: Expose RSS indirection tables for queue groups via ethtool (Petr Oros) [2130992 2129902]
- Revert "ice: Hide bus-info in ethtool for PRs in switchdev mode" (Petr Oros) [2130992 2129902]
- ice: remove period on argument description in ice_for_each_vf (Petr Oros) [2130992 2129902]
- ice: add a function comment for ice_cfg_mac_antispoof (Petr Oros) [2130992 2129902]
- ice: fix wording in comment for ice_reset_vf (Petr Oros) [2130992 2129902]
- ice: remove return value comment for ice_reset_all_vfs (Petr Oros) [2130992 2129902]
- ice: always check VF VSI pointer values (Petr Oros) [2130992 2129902]
- ice: add newline to dev_dbg in ice_vf_fdir_dump_info (Petr Oros) [2130992 2129902]
- ice: get switch id on switchdev devices (Petr Oros) [2130992 2129902]
- ice: return ENOSPC when exceeding ICE_MAX_CHAIN_WORDS (Petr Oros) [2130992 2129902]
- ice: introduce common helper for retrieving VSI by vsi_num (Petr Oros) [2130992 2129902]
- ice: use min_t() to make code cleaner in ice_gnss (Petr Oros) [2130992 2129902]
- ice: Add mpls+tso support (Petr Oros) [2130992 2129902]
- ice: switch: convert packet template match code to rodata (Petr Oros) [2130992 2129902]
- ice: switch: use convenience macros to declare dummy pkt templates (Petr Oros) [2130992 2129902]
- ice: switch: use a struct to pass packet template params (Petr Oros) [2130992 2129902]
- ice: switch: unobscurify bitops loop in ice_fill_adv_dummy_packet() (Petr Oros) [2130992 2129902]
- ice: switch: add and use u16[] aliases to ice_adv_lkup_elem::{h, m}_u (Petr Oros) [2130992 2129902]
- ice: Support GTP-U and GTP-C offload in switchdev (Petr Oros) [2130992 2129902]
- ice: Remove useless DMA-32 fallback configuration (Petr Oros) [2130992 2129902]
- ice: switch to napi_build_skb() (Petr Oros) [2130992 2129902]
- redhat: switch to z-stream dist tag and build targets (Jarod Wilson)
- block: avoid sign extend problem with default queue flags mask (Nico Pache) [2135813]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.6.1.el8_7]" date="1668168000">- ice: Add low latency Tx timestamp read (Petr Oros) [2136036 2092425]
- ice: introduce ice_ptp_reset_cached_phctime function (Petr Oros) [2136036 2092425]
- ice: re-arrange some static functions in ice_ptp.c (Petr Oros) [2136036 2092425]
- ice: track and warn when PHC update is late (Petr Oros) [2136036 2092425]
- ice: track Tx timestamp stats similar to other Intel drivers (Petr Oros) [2136036 2092425]
- ice: implement adjfine with mul_u64_u64_div_u64 (Petr Oros) [2136036 2092425]
- ice: Add EXTTS feature to the feature bitmap (Petr Oros) [2136036 2092425]
- math: Export mul_u64_u64_div_u64 (Petr Oros) [2136036 2092425]
- vfio/type1: Unpin zero pages (Alex Williamson) [2128515 2123015]
- net: atlantic: remove aq_nic_deinit() when resume (Íñigo Huguet) [2131935 2130839]
- net: atlantic: remove deep parameter on suspend/resume functions (Íñigo Huguet) [2131935 2130839]
- CI: Use zstream builder container (Veronika Kabatova)
- CI: Add disttag override for 8.7 (Veronika Kabatova)</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.7.1.el8_7]" date="1669723200">- ice: Add additional CSR registers to ETHTOOL_GREGS (Petr Oros) [2136513 2131024]
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps (Petr Oros) [2137270 2106964]
- i40e: Fix VF set max MTU size (Petr Oros) [2137270 2106964]
- iavf: Fix set max MTU size with port VLAN and jumbo frames (Petr Oros) [2137270 2106964]
- iavf: Fix bad page state (Petr Oros) [2137270 2106964]
- Revert "scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels" (Jarod Wilson)
- scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels (Tomas Henzl) [2139216]
- Revert "ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems" (Jarod Wilson)
- ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems (Wei Huang) [2142170 2130653]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.8.1.el8_7]" date="1669982400">- scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels (Tomas Henzl) [2139216 2134535]
- RDMA/mlx5: Set local port to one when accessing counters (Mohammad Kabat) [2141957 2077119]
- drm/mgag200: Fix PLL setup for G200_SE_A rev &gt;=4 (Jocelyn Falempe) [2140152 2130159]
- iavf: Do not restart Tx queues after reset task failure (Petr Oros) [2149081 2134005]
- iavf: Fix a crash during reset task (Petr Oros) [2149081 2134005]
- scsi: core: Allow the ALUA transitioning state enough time (Tomas Henzl) [2147374 2084250]
- scsi: core: Return BLK_STS_TRANSPORT for ALUA transitioning (Tomas Henzl) [2147374 2084250]
- i40e: Fix DMA mappings leak (Ivan Vecera) [2138205 2077847]
- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2142724 2142725] {CVE-2022-2964}
- net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2142724 2142725] {CVE-2022-2964}</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.9.1.el8_7]" date="1670587200">- Documentation/admin-guide: Document nomodeset kernel parameter (Jocelyn Falempe) [2145218 2143952]
- drm: Move nomodeset kernel parameter to the DRM subsystem (Jocelyn Falempe) [2145218 2143952]
- wait: Fix __wait_event_hrtimeout for RT/DL tasks (Derek Barbosa) [2138953 2125233]
- scsi: zfcp: Fix missing auto port scan and thus missing target ports (Tobias Huschle) [2127849 2121089]
- net: Fix return value of qdisc ingress handling on success (Ivan Vecera) [2141878 2131361]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.10.1.el8_7]" date="1671019200">- scsi: target: loop: Fix handling of aborted TMRs (Maurizio Lombardi) [2144583 2141713]
- ice: virtchnl rss hena support (Petr Oros) [2148130]
- ice: Fix configuring VIRTCHNL_OP_CONFIG_VSI_QUEUES with unbalanced queues (Michal Schmidt) [2142017 2137378]
- ice: Add support Flex RXD (Michal Schmidt) [2138157 2131310]
- netfilter: flowtable: fix stuck flows on cleanup due to pending work (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: add function to invoke garbage collection immediately (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: pass flowtable to nf_flow_table_iterate() (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: separate replace, destroy and stats to different workqueues (Phil Sutter) [2134084 2131370]
- x86/paravirt: Add a dummy __x86_paravirt_patch_template() function (Waiman Long) [2152206 2144161]
- x86/paravirt: Fix kABI breakage in struct pv_mmu_ops (Waiman Long) [2152206 2144161]
- drm/i915: fix TLB invalidation for Gen12 video and compute engines (Wander Lairson Costa) [2148149 2148150] {CVE-2022-4139}
- PCI: hv: Do not set PCI_COMMAND_MEMORY to reduce VM boot time (Emanuele Giuseppe Esposito) [2150912 2082836]
- iavf: Fix cached head and tail value for iavf_get_tx_pending (Stefan Assmann) [2149742 2103944]
- iavf: Fix change VF's mac address (Stefan Assmann) [2149742 2103944]
- iavf: Fix race between iavf_close and iavf_reset_task (Stefan Assmann) [2149742 2103944]
- net: ethernet: move from strlcpy with unused retval to strscpy (Stefan Assmann) [2149742 2103944]
- iavf: Fix 'tc qdisc show' listing too many queues (Stefan Assmann) [2149742 2103944]
- iavf: Fix max_rate limiting (Stefan Assmann) [2149742 2103944]
- iavf: Check for duplicate TC flower filter before parsing (Stefan Assmann) [2149742 2103944]
- iavf: Fix handling of dummy receive descriptors (Stefan Assmann) [2149742 2103944]
- iavf: Disallow changing rx/tx-frames and rx/tx-frames-irq (Stefan Assmann) [2149742 2103944]
- intel/iavf:fix repeated words in comments (Stefan Assmann) [2149742 2103944]
- intel: remove unused macros (Stefan Assmann) [2149742 2103944]
- iavf: Add waiting for response from PF in set mac (Stefan Assmann) [2149742 2103944]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.11.1.el8_7]" date="1673006400">- NFSD: Protect against send buffer overflow in NFSv3 READ (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv2 READ (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv3 READDIR (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv2 READDIR (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- SUNRPC: Fix svcxdr_init_encode's buflen calculation (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- SUNRPC: Fix svcxdr_init_decode's end-of-buffer calculation (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- panic, kexec: make __crash_kexec() NMI safe (Valentin Schneider) [2139580 2134126]
- kexec: turn all kexec_mutex acquisitions into trylocks (Valentin Schneider) [2139580 2134126]
- kexec: move locking into do_kexec_load (Valentin Schneider) [2139580 2134126]
- vdpa/mlx5: re-create forwarding rules after mac modified (Laurent Vivier) [2152912 2145136]
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry (Waiman Long) [2153653 2108387]
- irq: Call tick_irq_enter() inside HARDIRQ_OFFSET (Waiman Long) [2153653 2108387]
- irqtime: Move irqtime entry accounting after irq offset incrementation (Waiman Long) [2153653 2108387]
- sched/vtime: Consolidate IRQ time accounting (Waiman Long) [2153653 2108387]
- s390/vtime: Use the generic IRQ entry accounting (Waiman Long) [2153653 2108387]
- sched/cputime: Remove symbol exports from IRQ time accounting (Waiman Long) [2153653 2108387]
- genirq/irqdomain: Don't try to free an interrupt that has no mapping (Waiman Long) [2153653 2108387]
- genirq: Provide __irq_enter/exit_raw() (Waiman Long) [2153653 2108387]
- powerpc/time: Only set CONFIG_ARCH_HAS_SCALED_CPUTIME on PPC64 (Waiman Long) [2153653 2108387]
- powerpc/time: isolate scaled cputime accounting in dedicated functions. (Waiman Long) [2153653 2108387]
- PCI: hv: Fix synchronization between channel callback and hv_pci_bus_exit() (Mohammed Gamal) [2155280 2144708]
- PCI: hv: Fix synchronization between channel callback and hv_compose_msi_msg() (Mohammed Gamal) [2155280 2144708]
- PCI: hv: Use vmbus_requestor to generate transaction IDs for VMbus hardening (Mohammed Gamal) [2155280 2144708]
- net/mlx5e: TC, Reject forwarding from internal port to internal port (Mohammad Kabat) [2141959 2131345]
- hv_netvsc: Fix race between VF offering and VF association message from host (Mohammed Gamal) [2155272 2149279]
- x86/mce: Reduce number of machine checks taken during recovery (Prarit Bhargava) [2137592 2104388]
- cgroup/cpuset: Reduce cpuset_rwsem writer latency (Waiman Long) [2153108 2149031]
- rcu/exp: Mark current CPU as exp-QS in IPI loop second pass (Waiman Long) [2153108 2149031]
- rcu: Always inline rcu_dynticks_task*_{enter,exit}() (Waiman Long) [2153108 2149031]
- rcu: Fix existing exp request check in sync_sched_exp_online_cleanup() (Waiman Long) [2153108 2149031]
- rcu: Fix macro name CONFIG_TASKS_RCU_TRACE (Waiman Long) [2153108 2149031]
- rcu: Fix stall-warning deadlock due to non-release of rcu_node -&gt;lock (Waiman Long) [2153108 2149031]
- rcu: Fix to include first blocked task in stall warning (Waiman Long) [2153108 2149031]
- cgroup: Use cgroup_attach_{lock,unlock}() from cgroup_attach_task_all() (Waiman Long) [2153108 2149031]
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all() (Waiman Long) [2153108 2149031]
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock (Waiman Long) [2153108 2149031]
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree (Waiman Long) [2153108 2149031]
- cgroup/cpuset: Fix a race between cpuset_attach() and cpu hotplug (Waiman Long) [2153108 2149031]
- cgroup: reduce dependency on cgroup_mutex (Waiman Long) [2153108 2149031]
- sunrpc: Set sk_allocation to GFP_NOFS to avoid using current-&gt;task_frag. (Guillaume Nault) [2153230 2089660]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.12.1.el8_7]" date="1674129600">- x86/fpu: Prevent FPU state corruption (Oleksandr Natalenko) [2134586 2130890]
- x86/fpu: Drop fpregs lock before inheriting FPU permissions (Eder Zulian) [2154460 2153549]
- kernel-doc: fix undefined args variable (Jan Stancek) [2157905 2134954]
- mm: memcontrol: fix potential oom_lock recursion deadlock (Waiman Long) [2157922 2138886]
- memcg: prohibit unconditional exceeding the limit of dying tasks (Waiman Long) [2157922 2138886]
- mm, oom: do not trigger out_of_memory from the #PF (Waiman Long) [2157922 2138886]
- mm, oom: pagefault_out_of_memory: don't force global OOM for dying tasks (Waiman Long) [2157922 2138886]
- mm: memcontrol: don't count limit-setting reclaim as memory pressure (Waiman Long) [2157922 2138886]
- KVM: s390: vsie: Fix the initialization of the epoch extension (epdx) field (Thomas Huth) [2158813 2151854]
- net: mana: Fix race on per-CQ variable napi work_done (Emanuele Giuseppe Esposito) [2155437 2151722]
- mei: me: add adler lake point S DID (Prarit Bhargava) [2141783 2141602]
- PCI: hv: Only reuse existing IRTE allocation for Multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix the definition of vector in hv_compose_msi_msg() (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix interrupt mapping for multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Reuse existing IRTE allocation in compose_msi_msg() (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix hv_arch_irq_unmask() for multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix multi-MSI to allow more than one MSI vector (Emanuele Giuseppe Esposito) [2155289 2100275]
- drm/ast: Support multiple outputs (Jarod Wilson) [2149287 2147553]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.13.1.el8_7]" date="1675339200">- mm/cgroup/reclaim: fix dirty pages throttling on cgroup v1 (Waiman Long) [2160221]
- mm: vmscan: remove deadlock due to throttling failing to make progress (Waiman Long) [2160221]
- mm: vmscan: reduce throttling due to a failure to make progress -fix (Waiman Long) [2160221]
- mm: vmscan: Reduce throttling due to a failure to make progress (Waiman Long) [2160221]
- mm/vmscan: delay waking of tasks throttled on NOPROGRESS (Waiman Long) [2160221]
- mm/vmscan: increase the timeout if page reclaim is not making progress (Waiman Long) [2160221]
- mm/vmscan: centralise timeout values for reclaim_throttle (Waiman Long) [2160221]
- mm/page_alloc: remove the throttling logic from the page allocator (Waiman Long) [2160221]
- mm/writeback: throttle based on page writeback instead of congestion (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim when no progress is being made (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim and compaction when too may pages are isolated (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim until some writeback completes if congested (Waiman Long) [2160221]
- mm/vmscan.c: delete or fix duplicated words (Waiman Long) [2160221]
- mm,page_alloc: PF_WQ_WORKER threads must sleep at should_reclaim_retry() (Nico Pache) [2160221]
- ceph: avoid putting the realm twice when decoding snaps fails (Xiubo Li) [2155797 2139881]
- mm/mremap: hold the rmap lock in write mode when moving page table entries. (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: use pmd/pud_poplulate to update page table entries (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: don't enable optimized PUD move if page table levels is 2 (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: convert huge PUD move to separate helper (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: fix BUILD_BUG_ON() error in get_extent (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap.c: fix extent calculation (Waiman Long) [2140944] {CVE-2022-41222}
- x86: mremap speedup - Enable HAVE_MOVE_PUD (Waiman Long) [2140944] {CVE-2022-41222}
- mm: speedup mremap on 1GB or larger regions (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: start addresses are properly aligned (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: calculate extent in one place (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: it is sure to have enough space when extent meets requirement (Waiman Long) [2140944] {CVE-2022-41222}
- s390/boot: add secure boot trailer (Tobias Huschle) [2151530 2141967]
- i40e: Fix VF hang when reset is triggered on another VF (Ivan Vecera) [2160460 2103801]
- i2c: ismt: Fix an out-of-bounds bug in ismt_access() (Prarit Bhargava) [2154388 2119066] {CVE-2022-2873}
- iavf: schedule watchdog immediately when changing primary MAC (Michal Schmidt) [2163257 2152493]
- iavf: Move netdev_update_features() into watchdog task (Michal Schmidt) [2163257 2152493]
- iavf: fix temporary deadlock and failure to set MAC address (Michal Schmidt) [2163257 2152493]
- iavf: Fix error handling in iavf_init_module() (Michal Schmidt) [2163257 2152493]
- iommu/vt-d: Clean up si_domain in the init_dmars() error path (Jerry Snitselaar) [2149474 2118428]
- x86/pci/xen: Use msi_msg shadow structs (Jerry Snitselaar) [2149474 2118428]
- iommu/intel: Use msi_msg shadow structs (Jerry Snitselaar) [2149474 2118428]
- PCI: MSI: Fix Kconfig dependencies for PCI_MSI_ARCH_FALLBACKS (Jerry Snitselaar) [2149474 2118428]
- x86/apic/msi: Unbreak DMAR and HPET MSI (Jerry Snitselaar) [2149474 2118428]
- iommu/amd: Remove domain search for PCI/MSI (Jerry Snitselaar) [2149474 2118428]
- iommu/vt-d: Remove domain search for PCI/MSI[X] (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Make most MSI ops XEN private (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Cleanup the arch_*_msi_irqs() leftovers (Jerry Snitselaar) [2149474 2118428]
- PCI/MSI: Make arch_.*_msi_irq[s] fallbacks selectable (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Wrap XEN MSI management into irqdomain (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Consolidate XEN-MSI init (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Rework MSI teardown (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Make xen_msi_init() static and rename it to xen_hvm_msi_init() (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Move apic_post_init() invocation to one place (Jerry Snitselaar) [2149474 2118428]
- x86/msi: Use generic MSI domain ops (Jerry Snitselaar) [2149474 2118428]
- x86/msi: Remove pointless vcpu_affinity callback (Jerry Snitselaar) [2149474 2118428]
- iommu/vt-d: Fix compile error with CONFIG_PCI_ATS not set (Myron Stowe) [2149474 2118428]
- iommu/vt-d: Cure VF irqdomain hickup (Myron Stowe) [2149474 2118428]
- x86/pci: Set default irq domain in pcibios_add_device() (Myron Stowe) [2149474 2118428]
- iommm/amd: Store irq domain in struct device (Myron Stowe) [2149474 2118428]
- iommm/vt-d: Store irq domain in struct device (Myron Stowe) [2149474 2118428]
- PCI/MSI: Provide pci_dev_has_special_msi_domain() helper (Myron Stowe) [2149474 2118428]
- x86/msi: Consolidate MSI allocation (Myron Stowe) [2149474 2118428]
- PCI/MSI: Rework pci_msi_domain_calc_hwirq() (Myron Stowe) [2149474 2118428]
- x86/irq: Consolidate UV domain allocation (Myron Stowe) [2149474 2118428]
- x86/irq: Consolidate DMAR irq allocation (Myron Stowe) [2149474 2118428]
- x86_ioapic_Consolidate_IOAPIC_allocation (Myron Stowe) [2149474 2118428]
- x86/msi: Consolidate HPET allocation (Myron Stowe) [2149474 2118428]
- iommu/irq_remapping: Consolidate irq domain lookup (Myron Stowe) [2149474 2118428]
- iommu/amd: Consolidate irq domain getter (Myron Stowe) [2149474 2118428]
- iommu/vt-d: Consolidate irq domain getter (Myron Stowe) [2149474 2118428]
- x86/irq: Add allocation type for parent domain retrieval (Myron Stowe) [2149474 2118428]
- irqdomain: Export irq_domain_update_bus_token (Myron Stowe) [2149474 2118428]
- gitlab-ci: use CI templates from production branch (Michael Hofmann)
- iavf: remove INITIAL_MAC_SET to allow gARP to work properly (Stefan Assmann) [2149745 1938635]
- Revert "scsi: iscsi: ql4xxx: Use per-session workqueue for unbinding" (Chris Leech) [2152734 2122624]
- Revert "scsi: iscsi: Use the session workqueue for recovery" (Chris Leech) [2152734 2122624]
- arm64/bpf: Remove 128MB limit for BPF JIT programs (Yauheni Kaliuta) [2152138 2140163]
- bpf: Define bpf_jit_alloc_exec_limit for arm64 JIT (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: add `type` and `data` fields (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: use `ex` for `exception_table_entry` (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: make fixup_exception() return bool (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: consolidate definitions (Yauheni Kaliuta) [2152138 2140163]
- arm64: kvm: use kvm_exception_table_entry (Yauheni Kaliuta) [2152138 2140163]
- be2net: Fix buffer overflow in be_get_module_eeprom (Josef Oskera) [2160182 2126917]</changelog>
</package>
<package pkgid="4c99d0776bb8fad12b49ded39cd728fccd2ec7dc12ef349a3fb4eb96872a696c" name="kernel-tools-libs" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="425.19.2.el8_7"/>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.11.1.el8_7]" date="1673006400">- NFSD: Protect against send buffer overflow in NFSv3 READ (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv2 READ (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv3 READDIR (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv2 READDIR (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- SUNRPC: Fix svcxdr_init_encode's buflen calculation (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- SUNRPC: Fix svcxdr_init_decode's end-of-buffer calculation (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- panic, kexec: make __crash_kexec() NMI safe (Valentin Schneider) [2139580 2134126]
- kexec: turn all kexec_mutex acquisitions into trylocks (Valentin Schneider) [2139580 2134126]
- kexec: move locking into do_kexec_load (Valentin Schneider) [2139580 2134126]
- vdpa/mlx5: re-create forwarding rules after mac modified (Laurent Vivier) [2152912 2145136]
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry (Waiman Long) [2153653 2108387]
- irq: Call tick_irq_enter() inside HARDIRQ_OFFSET (Waiman Long) [2153653 2108387]
- irqtime: Move irqtime entry accounting after irq offset incrementation (Waiman Long) [2153653 2108387]
- sched/vtime: Consolidate IRQ time accounting (Waiman Long) [2153653 2108387]
- s390/vtime: Use the generic IRQ entry accounting (Waiman Long) [2153653 2108387]
- sched/cputime: Remove symbol exports from IRQ time accounting (Waiman Long) [2153653 2108387]
- genirq/irqdomain: Don't try to free an interrupt that has no mapping (Waiman Long) [2153653 2108387]
- genirq: Provide __irq_enter/exit_raw() (Waiman Long) [2153653 2108387]
- powerpc/time: Only set CONFIG_ARCH_HAS_SCALED_CPUTIME on PPC64 (Waiman Long) [2153653 2108387]
- powerpc/time: isolate scaled cputime accounting in dedicated functions. (Waiman Long) [2153653 2108387]
- PCI: hv: Fix synchronization between channel callback and hv_pci_bus_exit() (Mohammed Gamal) [2155280 2144708]
- PCI: hv: Fix synchronization between channel callback and hv_compose_msi_msg() (Mohammed Gamal) [2155280 2144708]
- PCI: hv: Use vmbus_requestor to generate transaction IDs for VMbus hardening (Mohammed Gamal) [2155280 2144708]
- net/mlx5e: TC, Reject forwarding from internal port to internal port (Mohammad Kabat) [2141959 2131345]
- hv_netvsc: Fix race between VF offering and VF association message from host (Mohammed Gamal) [2155272 2149279]
- x86/mce: Reduce number of machine checks taken during recovery (Prarit Bhargava) [2137592 2104388]
- cgroup/cpuset: Reduce cpuset_rwsem writer latency (Waiman Long) [2153108 2149031]
- rcu/exp: Mark current CPU as exp-QS in IPI loop second pass (Waiman Long) [2153108 2149031]
- rcu: Always inline rcu_dynticks_task*_{enter,exit}() (Waiman Long) [2153108 2149031]
- rcu: Fix existing exp request check in sync_sched_exp_online_cleanup() (Waiman Long) [2153108 2149031]
- rcu: Fix macro name CONFIG_TASKS_RCU_TRACE (Waiman Long) [2153108 2149031]
- rcu: Fix stall-warning deadlock due to non-release of rcu_node -&gt;lock (Waiman Long) [2153108 2149031]
- rcu: Fix to include first blocked task in stall warning (Waiman Long) [2153108 2149031]
- cgroup: Use cgroup_attach_{lock,unlock}() from cgroup_attach_task_all() (Waiman Long) [2153108 2149031]
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all() (Waiman Long) [2153108 2149031]
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock (Waiman Long) [2153108 2149031]
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree (Waiman Long) [2153108 2149031]
- cgroup/cpuset: Fix a race between cpuset_attach() and cpu hotplug (Waiman Long) [2153108 2149031]
- cgroup: reduce dependency on cgroup_mutex (Waiman Long) [2153108 2149031]
- sunrpc: Set sk_allocation to GFP_NOFS to avoid using current-&gt;task_frag. (Guillaume Nault) [2153230 2089660]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.12.1.el8_7]" date="1674129600">- x86/fpu: Prevent FPU state corruption (Oleksandr Natalenko) [2134586 2130890]
- x86/fpu: Drop fpregs lock before inheriting FPU permissions (Eder Zulian) [2154460 2153549]
- kernel-doc: fix undefined args variable (Jan Stancek) [2157905 2134954]
- mm: memcontrol: fix potential oom_lock recursion deadlock (Waiman Long) [2157922 2138886]
- memcg: prohibit unconditional exceeding the limit of dying tasks (Waiman Long) [2157922 2138886]
- mm, oom: do not trigger out_of_memory from the #PF (Waiman Long) [2157922 2138886]
- mm, oom: pagefault_out_of_memory: don't force global OOM for dying tasks (Waiman Long) [2157922 2138886]
- mm: memcontrol: don't count limit-setting reclaim as memory pressure (Waiman Long) [2157922 2138886]
- KVM: s390: vsie: Fix the initialization of the epoch extension (epdx) field (Thomas Huth) [2158813 2151854]
- net: mana: Fix race on per-CQ variable napi work_done (Emanuele Giuseppe Esposito) [2155437 2151722]
- mei: me: add adler lake point S DID (Prarit Bhargava) [2141783 2141602]
- PCI: hv: Only reuse existing IRTE allocation for Multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix the definition of vector in hv_compose_msi_msg() (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix interrupt mapping for multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Reuse existing IRTE allocation in compose_msi_msg() (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix hv_arch_irq_unmask() for multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix multi-MSI to allow more than one MSI vector (Emanuele Giuseppe Esposito) [2155289 2100275]
- drm/ast: Support multiple outputs (Jarod Wilson) [2149287 2147553]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.13.1.el8_7]" date="1675339200">- mm/cgroup/reclaim: fix dirty pages throttling on cgroup v1 (Waiman Long) [2160221]
- mm: vmscan: remove deadlock due to throttling failing to make progress (Waiman Long) [2160221]
- mm: vmscan: reduce throttling due to a failure to make progress -fix (Waiman Long) [2160221]
- mm: vmscan: Reduce throttling due to a failure to make progress (Waiman Long) [2160221]
- mm/vmscan: delay waking of tasks throttled on NOPROGRESS (Waiman Long) [2160221]
- mm/vmscan: increase the timeout if page reclaim is not making progress (Waiman Long) [2160221]
- mm/vmscan: centralise timeout values for reclaim_throttle (Waiman Long) [2160221]
- mm/page_alloc: remove the throttling logic from the page allocator (Waiman Long) [2160221]
- mm/writeback: throttle based on page writeback instead of congestion (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim when no progress is being made (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim and compaction when too may pages are isolated (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim until some writeback completes if congested (Waiman Long) [2160221]
- mm/vmscan.c: delete or fix duplicated words (Waiman Long) [2160221]
- mm,page_alloc: PF_WQ_WORKER threads must sleep at should_reclaim_retry() (Nico Pache) [2160221]
- ceph: avoid putting the realm twice when decoding snaps fails (Xiubo Li) [2155797 2139881]
- mm/mremap: hold the rmap lock in write mode when moving page table entries. (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: use pmd/pud_poplulate to update page table entries (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: don't enable optimized PUD move if page table levels is 2 (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: convert huge PUD move to separate helper (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: fix BUILD_BUG_ON() error in get_extent (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap.c: fix extent calculation (Waiman Long) [2140944] {CVE-2022-41222}
- x86: mremap speedup - Enable HAVE_MOVE_PUD (Waiman Long) [2140944] {CVE-2022-41222}
- mm: speedup mremap on 1GB or larger regions (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: start addresses are properly aligned (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: calculate extent in one place (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: it is sure to have enough space when extent meets requirement (Waiman Long) [2140944] {CVE-2022-41222}
- s390/boot: add secure boot trailer (Tobias Huschle) [2151530 2141967]
- i40e: Fix VF hang when reset is triggered on another VF (Ivan Vecera) [2160460 2103801]
- i2c: ismt: Fix an out-of-bounds bug in ismt_access() (Prarit Bhargava) [2154388 2119066] {CVE-2022-2873}
- iavf: schedule watchdog immediately when changing primary MAC (Michal Schmidt) [2163257 2152493]
- iavf: Move netdev_update_features() into watchdog task (Michal Schmidt) [2163257 2152493]
- iavf: fix temporary deadlock and failure to set MAC address (Michal Schmidt) [2163257 2152493]
- iavf: Fix error handling in iavf_init_module() (Michal Schmidt) [2163257 2152493]
- iommu/vt-d: Clean up si_domain in the init_dmars() error path (Jerry Snitselaar) [2149474 2118428]
- x86/pci/xen: Use msi_msg shadow structs (Jerry Snitselaar) [2149474 2118428]
- iommu/intel: Use msi_msg shadow structs (Jerry Snitselaar) [2149474 2118428]
- PCI: MSI: Fix Kconfig dependencies for PCI_MSI_ARCH_FALLBACKS (Jerry Snitselaar) [2149474 2118428]
- x86/apic/msi: Unbreak DMAR and HPET MSI (Jerry Snitselaar) [2149474 2118428]
- iommu/amd: Remove domain search for PCI/MSI (Jerry Snitselaar) [2149474 2118428]
- iommu/vt-d: Remove domain search for PCI/MSI[X] (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Make most MSI ops XEN private (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Cleanup the arch_*_msi_irqs() leftovers (Jerry Snitselaar) [2149474 2118428]
- PCI/MSI: Make arch_.*_msi_irq[s] fallbacks selectable (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Wrap XEN MSI management into irqdomain (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Consolidate XEN-MSI init (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Rework MSI teardown (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Make xen_msi_init() static and rename it to xen_hvm_msi_init() (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Move apic_post_init() invocation to one place (Jerry Snitselaar) [2149474 2118428]
- x86/msi: Use generic MSI domain ops (Jerry Snitselaar) [2149474 2118428]
- x86/msi: Remove pointless vcpu_affinity callback (Jerry Snitselaar) [2149474 2118428]
- iommu/vt-d: Fix compile error with CONFIG_PCI_ATS not set (Myron Stowe) [2149474 2118428]
- iommu/vt-d: Cure VF irqdomain hickup (Myron Stowe) [2149474 2118428]
- x86/pci: Set default irq domain in pcibios_add_device() (Myron Stowe) [2149474 2118428]
- iommm/amd: Store irq domain in struct device (Myron Stowe) [2149474 2118428]
- iommm/vt-d: Store irq domain in struct device (Myron Stowe) [2149474 2118428]
- PCI/MSI: Provide pci_dev_has_special_msi_domain() helper (Myron Stowe) [2149474 2118428]
- x86/msi: Consolidate MSI allocation (Myron Stowe) [2149474 2118428]
- PCI/MSI: Rework pci_msi_domain_calc_hwirq() (Myron Stowe) [2149474 2118428]
- x86/irq: Consolidate UV domain allocation (Myron Stowe) [2149474 2118428]
- x86/irq: Consolidate DMAR irq allocation (Myron Stowe) [2149474 2118428]
- x86_ioapic_Consolidate_IOAPIC_allocation (Myron Stowe) [2149474 2118428]
- x86/msi: Consolidate HPET allocation (Myron Stowe) [2149474 2118428]
- iommu/irq_remapping: Consolidate irq domain lookup (Myron Stowe) [2149474 2118428]
- iommu/amd: Consolidate irq domain getter (Myron Stowe) [2149474 2118428]
- iommu/vt-d: Consolidate irq domain getter (Myron Stowe) [2149474 2118428]
- x86/irq: Add allocation type for parent domain retrieval (Myron Stowe) [2149474 2118428]
- irqdomain: Export irq_domain_update_bus_token (Myron Stowe) [2149474 2118428]
- gitlab-ci: use CI templates from production branch (Michael Hofmann)
- iavf: remove INITIAL_MAC_SET to allow gARP to work properly (Stefan Assmann) [2149745 1938635]
- Revert "scsi: iscsi: ql4xxx: Use per-session workqueue for unbinding" (Chris Leech) [2152734 2122624]
- Revert "scsi: iscsi: Use the session workqueue for recovery" (Chris Leech) [2152734 2122624]
- arm64/bpf: Remove 128MB limit for BPF JIT programs (Yauheni Kaliuta) [2152138 2140163]
- bpf: Define bpf_jit_alloc_exec_limit for arm64 JIT (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: add `type` and `data` fields (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: use `ex` for `exception_table_entry` (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: make fixup_exception() return bool (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: consolidate definitions (Yauheni Kaliuta) [2152138 2140163]
- arm64: kvm: use kvm_exception_table_entry (Yauheni Kaliuta) [2152138 2140163]
- be2net: Fix buffer overflow in be_get_module_eeprom (Josef Oskera) [2160182 2126917]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.14.1.el8_7]" date="1676030400">- ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems (Wei Huang) [2142170 2130653]
- KVM: x86: nSVM: implement nested LBR virtualization (Emanuele Giuseppe Esposito) [2166362 2155149]
- KVM: x86: nSVM: correctly virtualize LBR msrs when L2 is running (Emanuele Giuseppe Esposito) [2166362 2155149]
- kvm: x86: SVM: use vmcb* instead of svm-&gt;vmcb where it makes sense (Emanuele Giuseppe Esposito) [2166362 2155149]
- KVM: x86: nSVM: implement nested VMLOAD/VMSAVE (Emanuele Giuseppe Esposito) [2166362 2155149]
- IB/iser: Fix login with authentication (Kamal Heib) [2161750 2120676]
- act_mirred: use the backlog for nested calls to mirred ingress (Davide Caratti) [2164648 2131339] {CVE-2022-4269}
- net/sched: act_mirred: better wording on protection against excessive stack growth (Davide Caratti) [2164648 2131339] {CVE-2022-4269}
- redhat/configs: Set CONFIG_X86_AMD_PSTATE to 'm' (Prarit Bhargava) [2151275 2145246]
- KVM: x86: smm: preserve interrupt shadow in SMRAM (Maxim Levitsky) [2166368 2097144]
- KVM: x86: SVM: don't save SVM state to SMRAM when VM is not long mode capable (Maxim Levitsky) [2166368 2097144]
- KVM: x86: SVM: use smram structs (Maxim Levitsky) [2166368 2097144]
- KVM: svm: drop explicit return value of kvm_vcpu_map (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: use smram struct for 64 bit smram load/restore (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: use smram struct for 32 bit smram load/restore (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: use smram structs in the common code (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: add structs for KVM's smram layout (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: check for failures on smm entry (Maxim Levitsky) [2166368 2097144]
- KVM: x86: do not go through ctxt-&gt;ops when emulating rsm (Maxim Levitsky) [2166368 2097144]
- KVM: x86: move SMM exit to a new file (Maxim Levitsky) [2166368 2097144]
- KVM: x86: move SMM entry to a new file (Maxim Levitsky) [2166368 2097144]
- KVM: x86: start moving SMM-related functions to new files (Maxim Levitsky) [2166368 2097144]
- bug: introduce ASSERT_STRUCT_OFFSET (Maxim Levitsky) [2166368 2097144]
- KVM: x86: Rename and expose helper to detect if INIT/SIPI are allowed (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: number of GPRs in the SMRAM image depends on the image format (Maxim Levitsky) [2166368 2097144]
- KVM: x86: emulator: update the emulation mode after CR0 write (Maxim Levitsky) [2166368 2097144]
- KVM: x86: emulator: update the emulation mode after rsm (Maxim Levitsky) [2166368 2097144]
- KVM: x86: emulator: introduce emulator_recalc_and_set_mode (Maxim Levitsky) [2166368 2097144]
- KVM: x86: emulator: em_sysexit should update ctxt-&gt;mode (Maxim Levitsky) [2166368 2097144]
- KVM: x86: Bug the VM if the emulator accesses a non-existent GPR (Maxim Levitsky) [2166368 2097144]
- \KVM: x86: Reduce the number of emulator GPRs to '8' for 32-bit KVM (Maxim Levitsky) [2166368 2097144]
- KVM: x86: Use 16-bit fields to track dirty/valid emulator GPRs (Maxim Levitsky) [2166368 2097144]
- KVM: x86: Omit VCPU_REGS_RIP from emulator's _regs array (Maxim Levitsky) [2166368 2097144]
- \KVM: x86: Harden _regs accesses to guard against buggy input (Maxim Levitsky) [2166368 2097144]
- KVM: x86: Grab regs_dirty in local 'unsigned long' (Maxim Levitsky) [2166368 2097144]
- proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152571 2152572] {CVE-2022-4378}
- proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152571 2152572] {CVE-2022-4378}</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.15.1.el8_7]" date="1676548800">- net/mlx5e: Fix use-after-free when reverting termination table (Amir Tzin) [2167640 2112927]
- net/mlx5: Do not query pci info while pci disabled (Amir Tzin) [2167645 2129249]
- x86/fpu: Fix copy_xstate_to_uabi() to copy init states correctly (Dean Nelson) [2168384 2122850]
- x86/fpu: Exclude dynamic states from init_fpstate (Dean Nelson) [2168384 2122850]
- x86/fpu: Fix the init_fpstate size check with the actual size (Dean Nelson) [2168384 2122850]
- x86/fpu: Configure init_fpstate attributes orderly (Dean Nelson) [2168384 2122850]
- x86/fpu/xstate: Fix the ARCH_REQ_XCOMP_PERM implementation (Dean Nelson) [2168384 2122850]
- net/mlx5: E-Switch, properly handle ingress tagged packets on VST (Amir Tzin) [2166665 2096109]
- cpuhotplug: Fix KABI breakage (Prarit Bhargava) [2162763 2156529]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.16.1.el8_7]" date="1677153600">- ipv6: fix panic when fib_lookup_arg-&gt;result is fib6_info (Jiri Benc) [2167602 2140599]
- ceph: blocklist the kclient when receiving corrupted snap trace (Xiubo Li) [2168896 2162414]
- ceph: move mount state enum to super.h (Xiubo Li) [2168896 2162414]
- s390/kexec: fix ipl report address for kdump (Tobias Huschle) [2166296 2161328]
- mm, compaction: fix fast_isolate_around() to stay within boundaries (Daniel Vacek) [2170576 2149309]
- scsi: storvsc: Fix swiotlb bounce buffer leak in confidential VM (Emanuele Giuseppe Esposito) [2170228 2150659]
- netfilter: conntrack: handle tcp challenge acks during connection reuse (Florian Westphal) [2165587 2158726]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.17.1.el8_7]" date="1677844800">- net: mana: Add rmb after checking owner bits (Mohammed Gamal) [2173103 2139462]
- net: mana: Add support of XDP_REDIRECT action (Mohammed Gamal) [2173103 2139462]
- net: mana: Add the Linux MANA PF driver (Mohammed Gamal) [2173103 2139462]
- ice: fix lost multicast packets in promisc mode (Ken Cox) [2172550 2138215]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.18.0-425.18.1.el8_7]" date="1678449600">- futex: Resend potentially swallowed owner death notification (Rafael Aquini) [2170054 2161526]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.19.1.el8_7]" date="1678968000">- s390/dasd: fix no record found for raw_track_access (Tobias Huschle) [2167776 2161270]
- locking/rwsem: Disable preemption in all down_read*() and up_read() code paths (Waiman Long) [2170939 2162139]
- locking/rwsem: Prevent non-first waiter from spinning in down_write() slowpath (Waiman Long) [2170939 2162139]
- locking/rwsem: Allow slowpath writer to ignore handoff bit if not set by first waiter (Waiman Long) [2170939 2162139]
- locking/rwsem: Always try to wake waiters in out_nolock path (Waiman Long) [2170939 2162139]
- locking/rwsem: No need to check for handoff bit if wait queue empty (Waiman Long) [2170939 2162139]
- locking/rwsem: Make handoff bit handling more consistent (Waiman Long) [2170939 2162139]
- locking/rwsem: Disable preemption while trying for rwsem lock (Waiman Long) [2170939 2162139]
- locking/rwsem: Conditionally wake waiters in reader/writer slowpaths (Waiman Long) [2170939 2162139]
- locking: Make owner_on_cpu() into &lt;linux/sched.h&gt; (Waiman Long) [2170939 2162139]
- locking/rwsem: Optimize down_read_trylock() under highly contended case (Waiman Long) [2170939 2162139]
- locking/rwsem: Fix comments about reader optimistic lock stealing conditions (Waiman Long) [2170939 2162139]
- locking/rwsem: Disable preemption for spinning region (Waiman Long) [2170939 2162139]
- locking: Remove rcu_read_{,un}lock() for preempt_{dis,en}able() (Waiman Long) [2170939 2162139]
- watchdog: fix UAF in reboot notifier handling in watchdog core code (Wander Lairson Costa) [2139770 2131308]
- netfilter: nf_conntrack_irc: Tighten matching on DCC message (Wander Lairson Costa) [2139770 2131308]
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF (Jaroslav Kysela) [2163400 2163401] {CVE-2023-0266}
- net/mlx5e: Fix enabling sriov while tc nic rules are offloaded (Amir Tzin) [2167647 2112925]
- net/mlx5: E-Switch, pair only capable devices (Amir Tzin) [2167647 2112925]
- net/mlx5: Fix mlx5_get_next_dev() peer device matching (Amir Tzin) [2167647 2112925]
- net/mlx5: Lag, filter non compatible devices (Amir Tzin) [2167647 2112925]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.19.2.el8_7.gf5e8]" date="1678968001">- ovl: fail on invalid uid/gid mapping at copy up (Miklos Szeredi) [2165341 2165342] {CVE-2023-0386}</changelog>
</package>
<package pkgid="9c5f8f60b7b211044098eba77107220bc0d292a3b2a72c5350ad6b0ea24a7e36" name="kmod-kvdo" arch="x86_64">
  <version epoch="0" ver="6.2.7.17" rel="88.el8_7"/>
  <changelog author="- Andy Walsh &lt;awalsh@redhat.com&gt; - 6.2.5.72-80" date="1630065600">- Bumped NVR for new 4.18 kernel
- Related: rhbz#1939279</changelog>
  <changelog author="- Andy Walsh &lt;awalsh@redhat.com&gt; - 6.2.5.72-81.8_6" date="1633953600">- Bumped NVR for new 4.18 kernel
- Relates: rhbz#2000909</changelog>
  <changelog author="- Andy Walsh &lt;awalsh@redhat.com&gt; - 6.2.6.3-82" date="1635940800">- Fixed a bug which prevented the resumption of a suspended read-only vdo.
- Resolves: rhbz#1996893</changelog>
  <changelog author="- Andy Walsh &lt;awalsh@redhat.com&gt; - 6.2.6.3-83" date="1643889600">- Adjusted kernel dependencies to grab the right packages.
- Resolves: rhbz#2011426
- Rebuilt for latest kernel.
- Relates: rhbz#2000909</changelog>
  <changelog author="- Andy Walsh &lt;awalsh@redhat.com&gt; - 6.2.6.14-83" date="1644580800">- Fixed stack frame warnings when building with the debug kernel.
- Resolves: rhbz#1767236</changelog>
  <changelog author="- Susan LeGendre-McGhee &lt;slegendr@redhat.com&gt; - 6.2.6.14-85" date="1657195200">- Bumped NVR for new 4.18 kernel.
- Related: rhbz#2060475</changelog>
  <changelog author="- Susan LeGendre-McGhee &lt;slegendr@redhat.com&gt; - 6.2.6.14-86" date="1657540800">- Rebuild for latest 4.18 kernel.
- Related: rhbz#2060475</changelog>
  <changelog author="- Andy Walsh &lt;awalsh@redhat.com&gt; - 6.2.7.17-86" date="1658145600">- Fixed bug which could result in empty flushes being issued to the storage
  below vdo while suspended.
- Resolves: rhbz#2013056
- Fixed syntax mismatch which prevented lvm from being able to configure a
  512MB UDS index.
- Resolves: rhbz#2073203
- Fixed a race handling timeouts of dedupe index queries.
- Resolves: rhbz#2092075</changelog>
  <changelog author="- Andy Walsh &lt;awalsh@redhat.com&gt; - 6.2.7.17-87" date="1660219200">- Rebuilt for latest 4.18 kernel.
- Related: rhbz#2060475</changelog>
  <changelog author="- Susan LeGendre-McGhee &lt;slegendr@redhat.com&gt; - 6.2.7.17-88" date="1673006400">- Rebuilt for new 4.18 z-stream kernel.
- Resolves: rhbz#2158783</changelog>
</package>
<package pkgid="9557dbbc8ca61bab6422bb5b7a732c9918c208417bedd3f0cd02a59f3e279bee" name="kmod-redhat-oracleasm" arch="x86_64">
  <version epoch="8" ver="2.0.8" rel="15.1.el8_7"/>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; 2.0.8-7" date="1609243200">- Rebuild against kernel-4.18.0-268.el8.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; 2.0.8-8" date="1609761600">- Check for symvers.gz presence in /lib/modules/KVER in addition to boot
  (#1912195).</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; 2.0.8-9" date="1610884800">- Rebuild against kernel-4.18.0-275.el8.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; 2.0.8-10" date="1612785600">- Rebuild against kernel-4.18.0-282.el8 (#1924967).</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; 2.0.8-11" date="1613044800">- Rebuild against kernel-4.18.0-286.el8.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; 2.0.8-12" date="1626177600">- Rebuild against kernel-4.18.0-321.el8.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; 2.0.8-13" date="1645444800">- Update bdi-&gt;capabilities assignment due to change in the value semantics
  (#2060479).</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; 2.0.8-14" date="1658145600">- Add Obsoletes: tag for old kernel-specific sub-packages (#1974732).</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; 2.0.8-15" date="1661774400">- Rebuild against kernel-4.18.0-423.el8 (#2117753).</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; 2.0.8-15.1" date="1672833600">- Build against kernel-4.18.0-425.10.1.el8_7 in addition to GA kernel
  (#2155759).</changelog>
</package>
<package pkgid="db0f998f606b3e77a9ba2eb3415d470a9621e078850faf57251e547758d26cf8" name="kmod-redhat-oracleasm-kernel_4_18_0_425_10_1" arch="x86_64">
  <version epoch="8" ver="2.0.8" rel="15.1.el8_7"/>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; 2.0.8-7" date="1609243200">- Rebuild against kernel-4.18.0-268.el8.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; 2.0.8-8" date="1609761600">- Check for symvers.gz presence in /lib/modules/KVER in addition to boot
  (#1912195).</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; 2.0.8-9" date="1610884800">- Rebuild against kernel-4.18.0-275.el8.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; 2.0.8-10" date="1612785600">- Rebuild against kernel-4.18.0-282.el8 (#1924967).</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; 2.0.8-11" date="1613044800">- Rebuild against kernel-4.18.0-286.el8.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; 2.0.8-12" date="1626177600">- Rebuild against kernel-4.18.0-321.el8.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; 2.0.8-13" date="1645444800">- Update bdi-&gt;capabilities assignment due to change in the value semantics
  (#2060479).</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; 2.0.8-14" date="1658145600">- Add Obsoletes: tag for old kernel-specific sub-packages (#1974732).</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; 2.0.8-15" date="1661774400">- Rebuild against kernel-4.18.0-423.el8 (#2117753).</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; 2.0.8-15.1" date="1672833600">- Build against kernel-4.18.0-425.10.1.el8_7 in addition to GA kernel
  (#2155759).</changelog>
</package>
<package pkgid="a6d7c1990d2e37626714383097150c7eb0e83f86016a17070d693129b633e6d0" name="kmod-redhat-oracleasm-kernel_4_18_0_425_3_1" arch="x86_64">
  <version epoch="8" ver="2.0.8" rel="15.1.el8_7"/>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; 2.0.8-7" date="1609243200">- Rebuild against kernel-4.18.0-268.el8.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; 2.0.8-8" date="1609761600">- Check for symvers.gz presence in /lib/modules/KVER in addition to boot
  (#1912195).</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; 2.0.8-9" date="1610884800">- Rebuild against kernel-4.18.0-275.el8.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; 2.0.8-10" date="1612785600">- Rebuild against kernel-4.18.0-282.el8 (#1924967).</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; 2.0.8-11" date="1613044800">- Rebuild against kernel-4.18.0-286.el8.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; 2.0.8-12" date="1626177600">- Rebuild against kernel-4.18.0-321.el8.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; 2.0.8-13" date="1645444800">- Update bdi-&gt;capabilities assignment due to change in the value semantics
  (#2060479).</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; 2.0.8-14" date="1658145600">- Add Obsoletes: tag for old kernel-specific sub-packages (#1974732).</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; 2.0.8-15" date="1661774400">- Rebuild against kernel-4.18.0-423.el8 (#2117753).</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; 2.0.8-15.1" date="1672833600">- Build against kernel-4.18.0-425.10.1.el8_7 in addition to GA kernel
  (#2155759).</changelog>
</package>
<package pkgid="0440d98ded16c4de5a1019e146227077ee1fa403f6ff73ce9035065a6f3bcbbb" name="kpartx" arch="x86_64">
  <version epoch="0" ver="0.8.4" rel="28.el8_7.1"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-20" date="1637236800">- Add 0079-libmultipath-use-typedef-for-keyword-handler-and-pri.patch
- Add 0080-libmultipath-print-the-correct-file-when-parsing-fai.patch
- Add 0081-libmultipath-pass-file-and-line-number-to-keyword-ha.patch
- Add 0082-libmultipath-make-set_int-take-a-range-for-valid-val.patch
- Add 0083-libmultipath-improve-checks-for-set_str.patch
- Add 0084-libmultipath-split-set_int-to-enable-reuse.patch
- Add 0085-libmultipath-cleanup-invalid-config-handling.patch
- Add 0086-libmultipath-don-t-return-error-on-invalid-values.patch
  * Above 8 patches fix bz #1900595
- Add 0087-multipathd-avoid-unnecessary-path-read-only-reloads.patch
  * Fixes bz #2009624
- Resolves: bz #1900595, #2009624, #2021823</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-21" date="1642507200">- Add 0088-libmultipath-make-helper-function-to-trigger-path-ue.patch
- Add 0089-multipathd-trigger-udev-change-on-path-addition.patch
- Resolves: bz #1862032</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-22" date="1644235200">- Add 0090-RH-add-support-to-mpathconf-for-setting-arbitrary-de.patch
- Resolves: bz #1981240</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-23" date="1652184000">- Add 0091-multipath-tools-add-HPE-MSA-1060-2060-to-hwtable.patch
  * Partial fix for bz #2058222
- Add 0092-multipath-tools-update-mpp-force_readonly-in-ev_add_.patch
  * Fixes bz #2065468
- Add 0093-updated-HPE-MSA-builtin-config.patch
  * Fixes bz #2058222
- Resolves bz #2065468, #2058222</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-24" date="1652702400">- Add 0094-multipath-return-failure-on-an-invalid-remove-comman.patch
  * Fixes bz #2052054
- Add 0095-libmultipath-steal-the-src-string-pointer-in-merge_s.patch
- Add 0096-libmultipath-enable-linear-ordering-of-bus-proto-tup.patch
- Add 0097-libmultipath-use-bus_protocol_id-in-snprint_path_pro.patch
- Add 0098-libmultipath-make-protocol_name-global.patch
- Add 0099-libmultipath-add-a-protocol-subsection-to-multipath..patch
- Add 0100-libmultipath-Set-the-scsi-timeout-parameters-by-path.patch
- Add 0101-libmultipath-check-the-overrides-pctable-for-path-va.patch
- Add 0102-libmultipath-fix-eh_deadline-documentation.patch
- Add 0103-libmultipath-Add-documentation-for-the-protocol-subs.patch
- Add 0104-libmultipath-use-symbolic-value-for-invalid-pcentry.patch
  * The above 10 patches implement feature from bz #2065477
- Resolves: bz #2052054, #2065477</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-25" date="1652788800">- Add 0105-multipathd-handle-fpin-events.patch
- Add 0106-multipathd-disallow-changing-to-from-fpin-marginal-p.patch
- Resolves: bz #2083077</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-26" date="1654689600">- Add 0107-libmultipath-unset-detect_checker-for-clariion-Unity.patch
- Resolves: bz #2082205</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-27" date="1660910400">- Add 0108-multipathd-Add-missing-ctype-include.patch
- Add 0109-multipathd-replace-libreadline-with-libedit.patch
  * replace readline with libedit, to avoid license conflicts
- Resolves: bz #2119887</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-28" date="1661342400">- Add 0110-multipath-fix-systemd-timers-in-the-initramfs.patch
- Resolves: bz #1916168</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-28.1" date="1665662400">- Add 0111-multipathd-ignore-duplicated-multipathd-command-keys.patch
- Resolves: bz #2133995</changelog>
</package>
<package pkgid="f366782d5949f28449be5ded866c7c1d749bc3e6e5662e366ac44a7844376896" name="kpartx" arch="x86_64">
  <version epoch="0" ver="0.8.4" rel="28.el8_7.3"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-22" date="1644235200">- Add 0090-RH-add-support-to-mpathconf-for-setting-arbitrary-de.patch
- Resolves: bz #1981240</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-23" date="1652184000">- Add 0091-multipath-tools-add-HPE-MSA-1060-2060-to-hwtable.patch
  * Partial fix for bz #2058222
- Add 0092-multipath-tools-update-mpp-force_readonly-in-ev_add_.patch
  * Fixes bz #2065468
- Add 0093-updated-HPE-MSA-builtin-config.patch
  * Fixes bz #2058222
- Resolves bz #2065468, #2058222</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-24" date="1652702400">- Add 0094-multipath-return-failure-on-an-invalid-remove-comman.patch
  * Fixes bz #2052054
- Add 0095-libmultipath-steal-the-src-string-pointer-in-merge_s.patch
- Add 0096-libmultipath-enable-linear-ordering-of-bus-proto-tup.patch
- Add 0097-libmultipath-use-bus_protocol_id-in-snprint_path_pro.patch
- Add 0098-libmultipath-make-protocol_name-global.patch
- Add 0099-libmultipath-add-a-protocol-subsection-to-multipath..patch
- Add 0100-libmultipath-Set-the-scsi-timeout-parameters-by-path.patch
- Add 0101-libmultipath-check-the-overrides-pctable-for-path-va.patch
- Add 0102-libmultipath-fix-eh_deadline-documentation.patch
- Add 0103-libmultipath-Add-documentation-for-the-protocol-subs.patch
- Add 0104-libmultipath-use-symbolic-value-for-invalid-pcentry.patch
  * The above 10 patches implement feature from bz #2065477
- Resolves: bz #2052054, #2065477</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-25" date="1652788800">- Add 0105-multipathd-handle-fpin-events.patch
- Add 0106-multipathd-disallow-changing-to-from-fpin-marginal-p.patch
- Resolves: bz #2083077</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-26" date="1654689600">- Add 0107-libmultipath-unset-detect_checker-for-clariion-Unity.patch
- Resolves: bz #2082205</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-27" date="1660910400">- Add 0108-multipathd-Add-missing-ctype-include.patch
- Add 0109-multipathd-replace-libreadline-with-libedit.patch
  * replace readline with libedit, to avoid license conflicts
- Resolves: bz #2119887</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-28" date="1661342400">- Add 0110-multipath-fix-systemd-timers-in-the-initramfs.patch
- Resolves: bz #1916168</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-28.1" date="1665662400">- Add 0111-multipathd-ignore-duplicated-multipathd-command-keys.patch
- Resolves: bz #2133995</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-28.2" date="1666267200">- Rebuild for rhel-8.7.0
- Related: bz #2133995</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-28.3" date="1673956800">- Add 0112-libmultipath-copy-mpp-hwe-from-pp-hwe.patch
- Resolves: bz #2161393</changelog>
</package>
<package pkgid="28b53066f5842fc22fac9e5dfe72b8d718ebc526054d5586d9e79ec061ea88e4" name="krb5-devel" arch="i686">
  <version epoch="0" ver="1.18.2" rel="22.el8_7"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.18.2-10" date="1620043200">- Update tmpfiles dropin to use /run instead of /var/run
- Resolves: #1945679</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.18.2-11" date="1623326400">- Add APIs for marshalling credentials
- Resolves: #1964619</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.18.2-12" date="1623326401">- Backport KCM performance enablements
- Resolves: #1956388</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.18.2-13" date="1626782400">- Fix KDC null deref on bad encrypted challenge (CVE-2021-36222)
- Resolves: #1983729</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.18.2-14" date="1629892800">- Fix KDC null deref on TGS inner body null server (CVE-2021-37750)
- Resolves: #1997601</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.18.2-15" date="1647864000">- Backport usage of SHA-256 instead of SHA-1 for PKINIT CMS digest
- Resolves: #2066316</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.18.2-18" date="1649851200">- Fix kprop for propagating dump files larger than 4GB
- Resolves: #2026462</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.18.2-19" date="1651060800">- Try harder to avoid password change replay errors
- Resolves: #2077563</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.18.2-21" date="1656676800">- Backport fix of memory use after free during libkrad cleanup
- Backport support for larger RADIUS attributes in libkrad
- Resolves: rhbz#2103125</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1." date="1667908800">- Fix integer overflows in PAC parsing (CVE-2022-42898)
- Resolves: rhbz#2140967</changelog>
</package>
<package pkgid="d5d57968039d120e985ef12bbc874ae5e7192daa45be92edcaa36786ab9d57e9" name="krb5-devel" arch="x86_64">
  <version epoch="0" ver="1.18.2" rel="22.el8_7"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.18.2-10" date="1620043200">- Update tmpfiles dropin to use /run instead of /var/run
- Resolves: #1945679</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.18.2-11" date="1623326400">- Add APIs for marshalling credentials
- Resolves: #1964619</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.18.2-12" date="1623326401">- Backport KCM performance enablements
- Resolves: #1956388</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.18.2-13" date="1626782400">- Fix KDC null deref on bad encrypted challenge (CVE-2021-36222)
- Resolves: #1983729</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.18.2-14" date="1629892800">- Fix KDC null deref on TGS inner body null server (CVE-2021-37750)
- Resolves: #1997601</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.18.2-15" date="1647864000">- Backport usage of SHA-256 instead of SHA-1 for PKINIT CMS digest
- Resolves: #2066316</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.18.2-18" date="1649851200">- Fix kprop for propagating dump files larger than 4GB
- Resolves: #2026462</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.18.2-19" date="1651060800">- Try harder to avoid password change replay errors
- Resolves: #2077563</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.18.2-21" date="1656676800">- Backport fix of memory use after free during libkrad cleanup
- Backport support for larger RADIUS attributes in libkrad
- Resolves: rhbz#2103125</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1." date="1667908800">- Fix integer overflows in PAC parsing (CVE-2022-42898)
- Resolves: rhbz#2140967</changelog>
</package>
<package pkgid="93bc56f57c4fce3a62bd9eb9c139a1f1d9e0479a1267095a432612eb55ce9676" name="krb5-libs" arch="i686">
  <version epoch="0" ver="1.18.2" rel="22.el8_7"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.18.2-10" date="1620043200">- Update tmpfiles dropin to use /run instead of /var/run
- Resolves: #1945679</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.18.2-11" date="1623326400">- Add APIs for marshalling credentials
- Resolves: #1964619</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.18.2-12" date="1623326401">- Backport KCM performance enablements
- Resolves: #1956388</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.18.2-13" date="1626782400">- Fix KDC null deref on bad encrypted challenge (CVE-2021-36222)
- Resolves: #1983729</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.18.2-14" date="1629892800">- Fix KDC null deref on TGS inner body null server (CVE-2021-37750)
- Resolves: #1997601</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.18.2-15" date="1647864000">- Backport usage of SHA-256 instead of SHA-1 for PKINIT CMS digest
- Resolves: #2066316</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.18.2-18" date="1649851200">- Fix kprop for propagating dump files larger than 4GB
- Resolves: #2026462</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.18.2-19" date="1651060800">- Try harder to avoid password change replay errors
- Resolves: #2077563</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.18.2-21" date="1656676800">- Backport fix of memory use after free during libkrad cleanup
- Backport support for larger RADIUS attributes in libkrad
- Resolves: rhbz#2103125</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1." date="1667908800">- Fix integer overflows in PAC parsing (CVE-2022-42898)
- Resolves: rhbz#2140967</changelog>
</package>
<package pkgid="f8c2055833793332c23ca85d80486934fce26b0a7256b630521e90991ddc2344" name="krb5-libs" arch="x86_64">
  <version epoch="0" ver="1.18.2" rel="22.el8_7"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.18.2-10" date="1620043200">- Update tmpfiles dropin to use /run instead of /var/run
- Resolves: #1945679</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.18.2-11" date="1623326400">- Add APIs for marshalling credentials
- Resolves: #1964619</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.18.2-12" date="1623326401">- Backport KCM performance enablements
- Resolves: #1956388</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.18.2-13" date="1626782400">- Fix KDC null deref on bad encrypted challenge (CVE-2021-36222)
- Resolves: #1983729</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.18.2-14" date="1629892800">- Fix KDC null deref on TGS inner body null server (CVE-2021-37750)
- Resolves: #1997601</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.18.2-15" date="1647864000">- Backport usage of SHA-256 instead of SHA-1 for PKINIT CMS digest
- Resolves: #2066316</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.18.2-18" date="1649851200">- Fix kprop for propagating dump files larger than 4GB
- Resolves: #2026462</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.18.2-19" date="1651060800">- Try harder to avoid password change replay errors
- Resolves: #2077563</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.18.2-21" date="1656676800">- Backport fix of memory use after free during libkrad cleanup
- Backport support for larger RADIUS attributes in libkrad
- Resolves: rhbz#2103125</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1." date="1667908800">- Fix integer overflows in PAC parsing (CVE-2022-42898)
- Resolves: rhbz#2140967</changelog>
</package>
<package pkgid="7eaeede97b210f132f5ea00b62cbdf398b0ce6e3878f139258c5852909da8c7b" name="krb5-pkinit" arch="i686">
  <version epoch="0" ver="1.18.2" rel="22.el8_7"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.18.2-10" date="1620043200">- Update tmpfiles dropin to use /run instead of /var/run
- Resolves: #1945679</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.18.2-11" date="1623326400">- Add APIs for marshalling credentials
- Resolves: #1964619</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.18.2-12" date="1623326401">- Backport KCM performance enablements
- Resolves: #1956388</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.18.2-13" date="1626782400">- Fix KDC null deref on bad encrypted challenge (CVE-2021-36222)
- Resolves: #1983729</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.18.2-14" date="1629892800">- Fix KDC null deref on TGS inner body null server (CVE-2021-37750)
- Resolves: #1997601</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.18.2-15" date="1647864000">- Backport usage of SHA-256 instead of SHA-1 for PKINIT CMS digest
- Resolves: #2066316</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.18.2-18" date="1649851200">- Fix kprop for propagating dump files larger than 4GB
- Resolves: #2026462</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.18.2-19" date="1651060800">- Try harder to avoid password change replay errors
- Resolves: #2077563</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.18.2-21" date="1656676800">- Backport fix of memory use after free during libkrad cleanup
- Backport support for larger RADIUS attributes in libkrad
- Resolves: rhbz#2103125</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1." date="1667908800">- Fix integer overflows in PAC parsing (CVE-2022-42898)
- Resolves: rhbz#2140967</changelog>
</package>
<package pkgid="bbe61c2de80e823b40a16d58d2eba67304f3c2ada8ebd9072d71633eb95b0300" name="krb5-pkinit" arch="x86_64">
  <version epoch="0" ver="1.18.2" rel="22.el8_7"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.18.2-10" date="1620043200">- Update tmpfiles dropin to use /run instead of /var/run
- Resolves: #1945679</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.18.2-11" date="1623326400">- Add APIs for marshalling credentials
- Resolves: #1964619</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.18.2-12" date="1623326401">- Backport KCM performance enablements
- Resolves: #1956388</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.18.2-13" date="1626782400">- Fix KDC null deref on bad encrypted challenge (CVE-2021-36222)
- Resolves: #1983729</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.18.2-14" date="1629892800">- Fix KDC null deref on TGS inner body null server (CVE-2021-37750)
- Resolves: #1997601</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.18.2-15" date="1647864000">- Backport usage of SHA-256 instead of SHA-1 for PKINIT CMS digest
- Resolves: #2066316</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.18.2-18" date="1649851200">- Fix kprop for propagating dump files larger than 4GB
- Resolves: #2026462</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.18.2-19" date="1651060800">- Try harder to avoid password change replay errors
- Resolves: #2077563</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.18.2-21" date="1656676800">- Backport fix of memory use after free during libkrad cleanup
- Backport support for larger RADIUS attributes in libkrad
- Resolves: rhbz#2103125</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1." date="1667908800">- Fix integer overflows in PAC parsing (CVE-2022-42898)
- Resolves: rhbz#2140967</changelog>
</package>
<package pkgid="ed50cbf8d90bb803b7bc7e2fa6c5b762f11881fe3ed247ffde13fb516ecbe09c" name="krb5-server" arch="i686">
  <version epoch="0" ver="1.18.2" rel="22.el8_7"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.18.2-10" date="1620043200">- Update tmpfiles dropin to use /run instead of /var/run
- Resolves: #1945679</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.18.2-11" date="1623326400">- Add APIs for marshalling credentials
- Resolves: #1964619</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.18.2-12" date="1623326401">- Backport KCM performance enablements
- Resolves: #1956388</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.18.2-13" date="1626782400">- Fix KDC null deref on bad encrypted challenge (CVE-2021-36222)
- Resolves: #1983729</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.18.2-14" date="1629892800">- Fix KDC null deref on TGS inner body null server (CVE-2021-37750)
- Resolves: #1997601</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.18.2-15" date="1647864000">- Backport usage of SHA-256 instead of SHA-1 for PKINIT CMS digest
- Resolves: #2066316</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.18.2-18" date="1649851200">- Fix kprop for propagating dump files larger than 4GB
- Resolves: #2026462</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.18.2-19" date="1651060800">- Try harder to avoid password change replay errors
- Resolves: #2077563</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.18.2-21" date="1656676800">- Backport fix of memory use after free during libkrad cleanup
- Backport support for larger RADIUS attributes in libkrad
- Resolves: rhbz#2103125</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1." date="1667908800">- Fix integer overflows in PAC parsing (CVE-2022-42898)
- Resolves: rhbz#2140967</changelog>
</package>
<package pkgid="493879270fce6bab9172ced2aba58faa592e88979cd7aca04c297b504a8a1da8" name="krb5-server" arch="x86_64">
  <version epoch="0" ver="1.18.2" rel="22.el8_7"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.18.2-10" date="1620043200">- Update tmpfiles dropin to use /run instead of /var/run
- Resolves: #1945679</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.18.2-11" date="1623326400">- Add APIs for marshalling credentials
- Resolves: #1964619</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.18.2-12" date="1623326401">- Backport KCM performance enablements
- Resolves: #1956388</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.18.2-13" date="1626782400">- Fix KDC null deref on bad encrypted challenge (CVE-2021-36222)
- Resolves: #1983729</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.18.2-14" date="1629892800">- Fix KDC null deref on TGS inner body null server (CVE-2021-37750)
- Resolves: #1997601</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.18.2-15" date="1647864000">- Backport usage of SHA-256 instead of SHA-1 for PKINIT CMS digest
- Resolves: #2066316</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.18.2-18" date="1649851200">- Fix kprop for propagating dump files larger than 4GB
- Resolves: #2026462</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.18.2-19" date="1651060800">- Try harder to avoid password change replay errors
- Resolves: #2077563</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.18.2-21" date="1656676800">- Backport fix of memory use after free during libkrad cleanup
- Backport support for larger RADIUS attributes in libkrad
- Resolves: rhbz#2103125</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1." date="1667908800">- Fix integer overflows in PAC parsing (CVE-2022-42898)
- Resolves: rhbz#2140967</changelog>
</package>
<package pkgid="a4def942adb0d02f7303592834dd45e1fa7b5c2f1bed92f70790032e88d3ae88" name="krb5-server-ldap" arch="i686">
  <version epoch="0" ver="1.18.2" rel="22.el8_7"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.18.2-10" date="1620043200">- Update tmpfiles dropin to use /run instead of /var/run
- Resolves: #1945679</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.18.2-11" date="1623326400">- Add APIs for marshalling credentials
- Resolves: #1964619</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.18.2-12" date="1623326401">- Backport KCM performance enablements
- Resolves: #1956388</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.18.2-13" date="1626782400">- Fix KDC null deref on bad encrypted challenge (CVE-2021-36222)
- Resolves: #1983729</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.18.2-14" date="1629892800">- Fix KDC null deref on TGS inner body null server (CVE-2021-37750)
- Resolves: #1997601</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.18.2-15" date="1647864000">- Backport usage of SHA-256 instead of SHA-1 for PKINIT CMS digest
- Resolves: #2066316</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.18.2-18" date="1649851200">- Fix kprop for propagating dump files larger than 4GB
- Resolves: #2026462</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.18.2-19" date="1651060800">- Try harder to avoid password change replay errors
- Resolves: #2077563</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.18.2-21" date="1656676800">- Backport fix of memory use after free during libkrad cleanup
- Backport support for larger RADIUS attributes in libkrad
- Resolves: rhbz#2103125</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1." date="1667908800">- Fix integer overflows in PAC parsing (CVE-2022-42898)
- Resolves: rhbz#2140967</changelog>
</package>
<package pkgid="ee8954ffdae83b0b32f1a5de76c7d854c68526c8897bc887a786b54ef7fa3660" name="krb5-server-ldap" arch="x86_64">
  <version epoch="0" ver="1.18.2" rel="22.el8_7"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.18.2-10" date="1620043200">- Update tmpfiles dropin to use /run instead of /var/run
- Resolves: #1945679</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.18.2-11" date="1623326400">- Add APIs for marshalling credentials
- Resolves: #1964619</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.18.2-12" date="1623326401">- Backport KCM performance enablements
- Resolves: #1956388</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.18.2-13" date="1626782400">- Fix KDC null deref on bad encrypted challenge (CVE-2021-36222)
- Resolves: #1983729</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.18.2-14" date="1629892800">- Fix KDC null deref on TGS inner body null server (CVE-2021-37750)
- Resolves: #1997601</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.18.2-15" date="1647864000">- Backport usage of SHA-256 instead of SHA-1 for PKINIT CMS digest
- Resolves: #2066316</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.18.2-18" date="1649851200">- Fix kprop for propagating dump files larger than 4GB
- Resolves: #2026462</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.18.2-19" date="1651060800">- Try harder to avoid password change replay errors
- Resolves: #2077563</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.18.2-21" date="1656676800">- Backport fix of memory use after free during libkrad cleanup
- Backport support for larger RADIUS attributes in libkrad
- Resolves: rhbz#2103125</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1." date="1667908800">- Fix integer overflows in PAC parsing (CVE-2022-42898)
- Resolves: rhbz#2140967</changelog>
</package>
<package pkgid="200552be8cc9d90e2fc1b0d7cb8f97c81ab8849dd56a08da788dca9dde2c4781" name="krb5-workstation" arch="x86_64">
  <version epoch="0" ver="1.18.2" rel="22.el8_7"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.18.2-10" date="1620043200">- Update tmpfiles dropin to use /run instead of /var/run
- Resolves: #1945679</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.18.2-11" date="1623326400">- Add APIs for marshalling credentials
- Resolves: #1964619</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.18.2-12" date="1623326401">- Backport KCM performance enablements
- Resolves: #1956388</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.18.2-13" date="1626782400">- Fix KDC null deref on bad encrypted challenge (CVE-2021-36222)
- Resolves: #1983729</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.18.2-14" date="1629892800">- Fix KDC null deref on TGS inner body null server (CVE-2021-37750)
- Resolves: #1997601</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.18.2-15" date="1647864000">- Backport usage of SHA-256 instead of SHA-1 for PKINIT CMS digest
- Resolves: #2066316</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.18.2-18" date="1649851200">- Fix kprop for propagating dump files larger than 4GB
- Resolves: #2026462</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.18.2-19" date="1651060800">- Try harder to avoid password change replay errors
- Resolves: #2077563</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.18.2-21" date="1656676800">- Backport fix of memory use after free during libkrad cleanup
- Backport support for larger RADIUS attributes in libkrad
- Resolves: rhbz#2103125</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1." date="1667908800">- Fix integer overflows in PAC parsing (CVE-2022-42898)
- Resolves: rhbz#2140967</changelog>
</package>
<package pkgid="39905a8db5d44761662c0aaac6e8f1a123a73b7c8623f6fa01c54ce98c78becb" name="libasan" arch="i686">
  <version epoch="0" ver="8.5.0" rel="16.el8_7"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-7" date="1639137600">- backport PCH tweaks (#2030878)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-8" date="1643025600">- aarch64: Add -mtune=neoverse-512tvb (#1845932)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-9" date="1643025601">- apply cprop_hardreg fix for narrow mode != lowpart targets (#2028609)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-10" date="1643284800">- fix typo in the cprop_hardreg patch (#2028609)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-11" date="1648641600">- Add a plugin-annobin subpackage.  (#2067150)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-12" date="1648814400">- Fix nop generation in annobin plugin.  (#2067150)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-13" date="1650456000">- require docbook-style-xsl instead of docbook5-style-xsl (#2073888)
- backport Default widths with -fdec-format-defaults patch (#2074614)</changelog>
  <changelog author="Jonathan Wakely &lt;jwakely@redhat.com&gt; 8.5.0-14" date="1657281600">- backport std::regex check for invalid range (#2001788)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-15" date="1658318400">- backport straight-line-speculation mitigation (#2108721)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-16" date="1668772800">- fix deserialization for std::normal_distribution (#2144075,
  PR libstdc++/105502)</changelog>
</package>
<package pkgid="ff666efc9e7ac8fb3151d5ddd0f5a947cd931db05732300a5fd7bf7a4d7124bd" name="libasan" arch="x86_64">
  <version epoch="0" ver="8.5.0" rel="16.el8_7"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-7" date="1639137600">- backport PCH tweaks (#2030878)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-8" date="1643025600">- aarch64: Add -mtune=neoverse-512tvb (#1845932)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-9" date="1643025601">- apply cprop_hardreg fix for narrow mode != lowpart targets (#2028609)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-10" date="1643284800">- fix typo in the cprop_hardreg patch (#2028609)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-11" date="1648641600">- Add a plugin-annobin subpackage.  (#2067150)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-12" date="1648814400">- Fix nop generation in annobin plugin.  (#2067150)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-13" date="1650456000">- require docbook-style-xsl instead of docbook5-style-xsl (#2073888)
- backport Default widths with -fdec-format-defaults patch (#2074614)</changelog>
  <changelog author="Jonathan Wakely &lt;jwakely@redhat.com&gt; 8.5.0-14" date="1657281600">- backport std::regex check for invalid range (#2001788)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-15" date="1658318400">- backport straight-line-speculation mitigation (#2108721)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-16" date="1668772800">- fix deserialization for std::normal_distribution (#2144075,
  PR libstdc++/105502)</changelog>
</package>
<package pkgid="7b748556ca79bf095b59d0a1351778224b610e35e890716d893bcbdf71b32b6e" name="libatomic" arch="i686">
  <version epoch="0" ver="8.5.0" rel="16.el8_7"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-7" date="1639137600">- backport PCH tweaks (#2030878)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-8" date="1643025600">- aarch64: Add -mtune=neoverse-512tvb (#1845932)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-9" date="1643025601">- apply cprop_hardreg fix for narrow mode != lowpart targets (#2028609)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-10" date="1643284800">- fix typo in the cprop_hardreg patch (#2028609)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-11" date="1648641600">- Add a plugin-annobin subpackage.  (#2067150)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-12" date="1648814400">- Fix nop generation in annobin plugin.  (#2067150)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-13" date="1650456000">- require docbook-style-xsl instead of docbook5-style-xsl (#2073888)
- backport Default widths with -fdec-format-defaults patch (#2074614)</changelog>
  <changelog author="Jonathan Wakely &lt;jwakely@redhat.com&gt; 8.5.0-14" date="1657281600">- backport std::regex check for invalid range (#2001788)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-15" date="1658318400">- backport straight-line-speculation mitigation (#2108721)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-16" date="1668772800">- fix deserialization for std::normal_distribution (#2144075,
  PR libstdc++/105502)</changelog>
</package>
<package pkgid="d26dee5cde7481a5df30250e079007c1700fe2bfb0b0b3bdc889429513e2262c" name="libatomic" arch="x86_64">
  <version epoch="0" ver="8.5.0" rel="16.el8_7"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-7" date="1639137600">- backport PCH tweaks (#2030878)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-8" date="1643025600">- aarch64: Add -mtune=neoverse-512tvb (#1845932)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-9" date="1643025601">- apply cprop_hardreg fix for narrow mode != lowpart targets (#2028609)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-10" date="1643284800">- fix typo in the cprop_hardreg patch (#2028609)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-11" date="1648641600">- Add a plugin-annobin subpackage.  (#2067150)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-12" date="1648814400">- Fix nop generation in annobin plugin.  (#2067150)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-13" date="1650456000">- require docbook-style-xsl instead of docbook5-style-xsl (#2073888)
- backport Default widths with -fdec-format-defaults patch (#2074614)</changelog>
  <changelog author="Jonathan Wakely &lt;jwakely@redhat.com&gt; 8.5.0-14" date="1657281600">- backport std::regex check for invalid range (#2001788)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-15" date="1658318400">- backport straight-line-speculation mitigation (#2108721)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-16" date="1668772800">- fix deserialization for std::normal_distribution (#2144075,
  PR libstdc++/105502)</changelog>
</package>
<package pkgid="13914187da4a739be3a60a9af63ec203c4d8bd76197c87d34fee246248c7aa09" name="libatomic-static" arch="i686">
  <version epoch="0" ver="8.5.0" rel="16.el8_7"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-7" date="1639137600">- backport PCH tweaks (#2030878)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-8" date="1643025600">- aarch64: Add -mtune=neoverse-512tvb (#1845932)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-9" date="1643025601">- apply cprop_hardreg fix for narrow mode != lowpart targets (#2028609)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-10" date="1643284800">- fix typo in the cprop_hardreg patch (#2028609)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-11" date="1648641600">- Add a plugin-annobin subpackage.  (#2067150)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-12" date="1648814400">- Fix nop generation in annobin plugin.  (#2067150)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-13" date="1650456000">- require docbook-style-xsl instead of docbook5-style-xsl (#2073888)
- backport Default widths with -fdec-format-defaults patch (#2074614)</changelog>
  <changelog author="Jonathan Wakely &lt;jwakely@redhat.com&gt; 8.5.0-14" date="1657281600">- backport std::regex check for invalid range (#2001788)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-15" date="1658318400">- backport straight-line-speculation mitigation (#2108721)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-16" date="1668772800">- fix deserialization for std::normal_distribution (#2144075,
  PR libstdc++/105502)</changelog>
</package>
<package pkgid="2056b76f12751f532d07edffa14eb71f9cd8f4ebaaa487e8e9faeacc2dc6feba" name="libatomic-static" arch="x86_64">
  <version epoch="0" ver="8.5.0" rel="16.el8_7"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-7" date="1639137600">- backport PCH tweaks (#2030878)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-8" date="1643025600">- aarch64: Add -mtune=neoverse-512tvb (#1845932)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-9" date="1643025601">- apply cprop_hardreg fix for narrow mode != lowpart targets (#2028609)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-10" date="1643284800">- fix typo in the cprop_hardreg patch (#2028609)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-11" date="1648641600">- Add a plugin-annobin subpackage.  (#2067150)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-12" date="1648814400">- Fix nop generation in annobin plugin.  (#2067150)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-13" date="1650456000">- require docbook-style-xsl instead of docbook5-style-xsl (#2073888)
- backport Default widths with -fdec-format-defaults patch (#2074614)</changelog>
  <changelog author="Jonathan Wakely &lt;jwakely@redhat.com&gt; 8.5.0-14" date="1657281600">- backport std::regex check for invalid range (#2001788)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-15" date="1658318400">- backport straight-line-speculation mitigation (#2108721)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-16" date="1668772800">- fix deserialization for std::normal_distribution (#2144075,
  PR libstdc++/105502)</changelog>
</package>
<package pkgid="d1c519efbb6d5538dcd4a0984e0d78a846a5ab8f3f39eb089513b9073cfb4dbf" name="libblkid" arch="i686">
  <version epoch="0" ver="2.32.1" rel="39.el8_7"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-29" date="1638878400">- fix #1988955 - script command continues without stopping.
- fix #2041498 - incorrect partition size calculation for BLKPG_* ioctls
- fix #2011602 - logger from util-linux incorrectly handles long messages
- fix #1916151 - [RFE] spread fstrim.timer across time
- fix #1894192 - Update or backport setpriv --pdeathsig
- fix #2026511 - blkid fails to complete when targeting  non-block devices</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-30" date="1641211200">- update lib-sys-add-sysfs_chrdev_devno_to_devname.patch (#2026511)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-31" date="1641902400">- improve #2026511 fix - blkid fails to complete when targeting non-block devices
- fix #1950187 - Ambient capabilities failed to applied to non-root user</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-32" date="1642420800">- change bug number (#2016229 to #2041498)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-34" date="1642420801">- rebuild after revert</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-35" date="1646740800">- fix #2058176 - losetup Retry LOOP_SET_STATUS64 on EAGAIN</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-36" date="1657800000">- fix #2060030 - Please backport patches for atari partition detection to RHEL 8
- fix #2069187 - Internal testsuite for lscpu failed on aarch64
- fix #2093166 - lslogins reports incorrect "Password is locked" status
- fix #2059241 - rpm -V / --verify reports bad user/group/mtime for /run/uuidd
- fix #2044592 - Move /var/log/lastlog ownership to systemd</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-37" date="1657886400">- update atari partition tests (related to #2060030)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-38" date="1661169600">- improve tmpfiles.d use in spec file (related to #2059241)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-39" date="1668600000">- fix #2141969 - Add --cont-clock feature for libuuid and uuidd</changelog>
</package>
<package pkgid="294875ff139623aaccbe87dae821810bf67827dcdbbfa6de8afa908ae2dc4c9d" name="libblkid" arch="x86_64">
  <version epoch="0" ver="2.32.1" rel="39.el8_7"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-29" date="1638878400">- fix #1988955 - script command continues without stopping.
- fix #2041498 - incorrect partition size calculation for BLKPG_* ioctls
- fix #2011602 - logger from util-linux incorrectly handles long messages
- fix #1916151 - [RFE] spread fstrim.timer across time
- fix #1894192 - Update or backport setpriv --pdeathsig
- fix #2026511 - blkid fails to complete when targeting  non-block devices</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-30" date="1641211200">- update lib-sys-add-sysfs_chrdev_devno_to_devname.patch (#2026511)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-31" date="1641902400">- improve #2026511 fix - blkid fails to complete when targeting non-block devices
- fix #1950187 - Ambient capabilities failed to applied to non-root user</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-32" date="1642420800">- change bug number (#2016229 to #2041498)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-34" date="1642420801">- rebuild after revert</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-35" date="1646740800">- fix #2058176 - losetup Retry LOOP_SET_STATUS64 on EAGAIN</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-36" date="1657800000">- fix #2060030 - Please backport patches for atari partition detection to RHEL 8
- fix #2069187 - Internal testsuite for lscpu failed on aarch64
- fix #2093166 - lslogins reports incorrect "Password is locked" status
- fix #2059241 - rpm -V / --verify reports bad user/group/mtime for /run/uuidd
- fix #2044592 - Move /var/log/lastlog ownership to systemd</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-37" date="1657886400">- update atari partition tests (related to #2060030)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-38" date="1661169600">- improve tmpfiles.d use in spec file (related to #2059241)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-39" date="1668600000">- fix #2141969 - Add --cont-clock feature for libuuid and uuidd</changelog>
</package>
<package pkgid="257239f4a12741ff62c1b6793979c944b5a64a0ee0ad2d3be9f644faf7bc19c7" name="libblkid-devel" arch="i686">
  <version epoch="0" ver="2.32.1" rel="39.el8_7"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-29" date="1638878400">- fix #1988955 - script command continues without stopping.
- fix #2041498 - incorrect partition size calculation for BLKPG_* ioctls
- fix #2011602 - logger from util-linux incorrectly handles long messages
- fix #1916151 - [RFE] spread fstrim.timer across time
- fix #1894192 - Update or backport setpriv --pdeathsig
- fix #2026511 - blkid fails to complete when targeting  non-block devices</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-30" date="1641211200">- update lib-sys-add-sysfs_chrdev_devno_to_devname.patch (#2026511)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-31" date="1641902400">- improve #2026511 fix - blkid fails to complete when targeting non-block devices
- fix #1950187 - Ambient capabilities failed to applied to non-root user</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-32" date="1642420800">- change bug number (#2016229 to #2041498)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-34" date="1642420801">- rebuild after revert</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-35" date="1646740800">- fix #2058176 - losetup Retry LOOP_SET_STATUS64 on EAGAIN</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-36" date="1657800000">- fix #2060030 - Please backport patches for atari partition detection to RHEL 8
- fix #2069187 - Internal testsuite for lscpu failed on aarch64
- fix #2093166 - lslogins reports incorrect "Password is locked" status
- fix #2059241 - rpm -V / --verify reports bad user/group/mtime for /run/uuidd
- fix #2044592 - Move /var/log/lastlog ownership to systemd</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-37" date="1657886400">- update atari partition tests (related to #2060030)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-38" date="1661169600">- improve tmpfiles.d use in spec file (related to #2059241)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-39" date="1668600000">- fix #2141969 - Add --cont-clock feature for libuuid and uuidd</changelog>
</package>
<package pkgid="c9f201fe6ddd8374b9b7abf177dddf7f97c8cf7cd309c2afe02d10f2791f4304" name="libblkid-devel" arch="x86_64">
  <version epoch="0" ver="2.32.1" rel="39.el8_7"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-29" date="1638878400">- fix #1988955 - script command continues without stopping.
- fix #2041498 - incorrect partition size calculation for BLKPG_* ioctls
- fix #2011602 - logger from util-linux incorrectly handles long messages
- fix #1916151 - [RFE] spread fstrim.timer across time
- fix #1894192 - Update or backport setpriv --pdeathsig
- fix #2026511 - blkid fails to complete when targeting  non-block devices</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-30" date="1641211200">- update lib-sys-add-sysfs_chrdev_devno_to_devname.patch (#2026511)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-31" date="1641902400">- improve #2026511 fix - blkid fails to complete when targeting non-block devices
- fix #1950187 - Ambient capabilities failed to applied to non-root user</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-32" date="1642420800">- change bug number (#2016229 to #2041498)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-34" date="1642420801">- rebuild after revert</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-35" date="1646740800">- fix #2058176 - losetup Retry LOOP_SET_STATUS64 on EAGAIN</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-36" date="1657800000">- fix #2060030 - Please backport patches for atari partition detection to RHEL 8
- fix #2069187 - Internal testsuite for lscpu failed on aarch64
- fix #2093166 - lslogins reports incorrect "Password is locked" status
- fix #2059241 - rpm -V / --verify reports bad user/group/mtime for /run/uuidd
- fix #2044592 - Move /var/log/lastlog ownership to systemd</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-37" date="1657886400">- update atari partition tests (related to #2060030)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-38" date="1661169600">- improve tmpfiles.d use in spec file (related to #2059241)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-39" date="1668600000">- fix #2141969 - Add --cont-clock feature for libuuid and uuidd</changelog>
</package>
<package pkgid="7a2231a59e832b4b47dd940d7f811bf72a373f7df073960587f926145fca6b22" name="libcurl" arch="i686">
  <version epoch="0" ver="7.61.1" rel="25.el8_7.1"/>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-17" date="1605182400">- validate an ssl connection using an intermediate certificate (#1895355)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-18" date="1611835200">- http: send payload when (proxy) authentication is done (#1918692)
- curl: Inferior OCSP verification (CVE-2020-8286)
- libcurl: FTP wildcard stack overflow (CVE-2020-8285)
- curl: trusting FTP PASV responses (CVE-2020-8284)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-19" date="1619179200">- make `curl --head file://` work as expected (#1947493)
- prevent automatic referer from leaking credentials (CVE-2021-22876)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-20" date="1619179201">- fix a cppcheck's false positive in 0029-curl-7.61.1-CVE-2021-22876.patch</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-21" date="1628164800">- fix TELNET stack contents disclosure again (CVE-2021-22925)
- fix TELNET stack contents disclosure (CVE-2021-22898)
- fix bad connection reuse due to flawed path name checks (CVE-2021-22924)
- disable metalink support to fix the following vulnerabilities
    CVE-2021-22923 - metalink download sends credentials
    CVE-2021-22922 - wrong content via metalink not discarded</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-22" date="1631880000">- fix STARTTLS protocol injection via MITM (CVE-2021-22947)
- fix protocol downgrade required TLS bypass (CVE-2021-22946)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-23" date="1651147200">- fix credential leak on redirect (CVE-2022-27774)
- fix auth/cookie leak on redirect (CVE-2022-27776)
- fix OAUTH2 bearer bypass in connection re-use (CVE-2022-22576)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-24" date="1652270400">- fix too eager reuse of TLS and SSH connections (CVE-2022-27782)
- fix invalid type in printf() argument detected by Coverity</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-25" date="1656504000">- setopt: enable CURLOPT_SSH_KNOWNHOSTS and CURLOPT_SSH_KEYFUNCTION (#2063703)
- fix HTTP compression denial of service (CVE-2022-32206)
- fix FTP-KRB bad message verification (CVE-2022-32208)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-25.el8_7.1" date="1668772800">- upon HTTP_1_1_REQUIRED, retry the request with HTTP/1.1 (#2139337)</changelog>
</package>
<package pkgid="9b2906c1ac41d1fe06c7ef105b3662f5d2a2ed20b2e820d4e36ee91e7de5fe60" name="libcurl" arch="x86_64">
  <version epoch="0" ver="7.61.1" rel="25.el8_7.1"/>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-17" date="1605182400">- validate an ssl connection using an intermediate certificate (#1895355)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-18" date="1611835200">- http: send payload when (proxy) authentication is done (#1918692)
- curl: Inferior OCSP verification (CVE-2020-8286)
- libcurl: FTP wildcard stack overflow (CVE-2020-8285)
- curl: trusting FTP PASV responses (CVE-2020-8284)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-19" date="1619179200">- make `curl --head file://` work as expected (#1947493)
- prevent automatic referer from leaking credentials (CVE-2021-22876)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-20" date="1619179201">- fix a cppcheck's false positive in 0029-curl-7.61.1-CVE-2021-22876.patch</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-21" date="1628164800">- fix TELNET stack contents disclosure again (CVE-2021-22925)
- fix TELNET stack contents disclosure (CVE-2021-22898)
- fix bad connection reuse due to flawed path name checks (CVE-2021-22924)
- disable metalink support to fix the following vulnerabilities
    CVE-2021-22923 - metalink download sends credentials
    CVE-2021-22922 - wrong content via metalink not discarded</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-22" date="1631880000">- fix STARTTLS protocol injection via MITM (CVE-2021-22947)
- fix protocol downgrade required TLS bypass (CVE-2021-22946)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-23" date="1651147200">- fix credential leak on redirect (CVE-2022-27774)
- fix auth/cookie leak on redirect (CVE-2022-27776)
- fix OAUTH2 bearer bypass in connection re-use (CVE-2022-22576)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-24" date="1652270400">- fix too eager reuse of TLS and SSH connections (CVE-2022-27782)
- fix invalid type in printf() argument detected by Coverity</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-25" date="1656504000">- setopt: enable CURLOPT_SSH_KNOWNHOSTS and CURLOPT_SSH_KEYFUNCTION (#2063703)
- fix HTTP compression denial of service (CVE-2022-32206)
- fix FTP-KRB bad message verification (CVE-2022-32208)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-25.el8_7.1" date="1668772800">- upon HTTP_1_1_REQUIRED, retry the request with HTTP/1.1 (#2139337)</changelog>
</package>
<package pkgid="67e6cca4bc6f143795108ce9078afb1f0e4c113119ea08bd05a07f439552354d" name="libcurl" arch="i686">
  <version epoch="0" ver="7.61.1" rel="25.el8_7.2"/>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-18" date="1611835200">- http: send payload when (proxy) authentication is done (#1918692)
- curl: Inferior OCSP verification (CVE-2020-8286)
- libcurl: FTP wildcard stack overflow (CVE-2020-8285)
- curl: trusting FTP PASV responses (CVE-2020-8284)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-19" date="1619179200">- make `curl --head file://` work as expected (#1947493)
- prevent automatic referer from leaking credentials (CVE-2021-22876)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-20" date="1619179201">- fix a cppcheck's false positive in 0029-curl-7.61.1-CVE-2021-22876.patch</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-21" date="1628164800">- fix TELNET stack contents disclosure again (CVE-2021-22925)
- fix TELNET stack contents disclosure (CVE-2021-22898)
- fix bad connection reuse due to flawed path name checks (CVE-2021-22924)
- disable metalink support to fix the following vulnerabilities
    CVE-2021-22923 - metalink download sends credentials
    CVE-2021-22922 - wrong content via metalink not discarded</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-22" date="1631880000">- fix STARTTLS protocol injection via MITM (CVE-2021-22947)
- fix protocol downgrade required TLS bypass (CVE-2021-22946)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-23" date="1651147200">- fix credential leak on redirect (CVE-2022-27774)
- fix auth/cookie leak on redirect (CVE-2022-27776)
- fix OAUTH2 bearer bypass in connection re-use (CVE-2022-22576)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-24" date="1652270400">- fix too eager reuse of TLS and SSH connections (CVE-2022-27782)
- fix invalid type in printf() argument detected by Coverity</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-25" date="1656504000">- setopt: enable CURLOPT_SSH_KNOWNHOSTS and CURLOPT_SSH_KEYFUNCTION (#2063703)
- fix HTTP compression denial of service (CVE-2022-32206)
- fix FTP-KRB bad message verification (CVE-2022-32208)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-25.el8_7.1" date="1668772800">- upon HTTP_1_1_REQUIRED, retry the request with HTTP/1.1 (#2139337)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-25.el8_7.2" date="1675771200">- h2: lower initial window size to 32 MiB (#2166254)</changelog>
</package>
<package pkgid="1d6cbab58e256d1a72127bd8c3f51c505a2577db5e303b679fe4266f15e1a7c7" name="libcurl" arch="x86_64">
  <version epoch="0" ver="7.61.1" rel="25.el8_7.2"/>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-18" date="1611835200">- http: send payload when (proxy) authentication is done (#1918692)
- curl: Inferior OCSP verification (CVE-2020-8286)
- libcurl: FTP wildcard stack overflow (CVE-2020-8285)
- curl: trusting FTP PASV responses (CVE-2020-8284)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-19" date="1619179200">- make `curl --head file://` work as expected (#1947493)
- prevent automatic referer from leaking credentials (CVE-2021-22876)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-20" date="1619179201">- fix a cppcheck's false positive in 0029-curl-7.61.1-CVE-2021-22876.patch</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-21" date="1628164800">- fix TELNET stack contents disclosure again (CVE-2021-22925)
- fix TELNET stack contents disclosure (CVE-2021-22898)
- fix bad connection reuse due to flawed path name checks (CVE-2021-22924)
- disable metalink support to fix the following vulnerabilities
    CVE-2021-22923 - metalink download sends credentials
    CVE-2021-22922 - wrong content via metalink not discarded</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-22" date="1631880000">- fix STARTTLS protocol injection via MITM (CVE-2021-22947)
- fix protocol downgrade required TLS bypass (CVE-2021-22946)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-23" date="1651147200">- fix credential leak on redirect (CVE-2022-27774)
- fix auth/cookie leak on redirect (CVE-2022-27776)
- fix OAUTH2 bearer bypass in connection re-use (CVE-2022-22576)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-24" date="1652270400">- fix too eager reuse of TLS and SSH connections (CVE-2022-27782)
- fix invalid type in printf() argument detected by Coverity</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-25" date="1656504000">- setopt: enable CURLOPT_SSH_KNOWNHOSTS and CURLOPT_SSH_KEYFUNCTION (#2063703)
- fix HTTP compression denial of service (CVE-2022-32206)
- fix FTP-KRB bad message verification (CVE-2022-32208)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-25.el8_7.1" date="1668772800">- upon HTTP_1_1_REQUIRED, retry the request with HTTP/1.1 (#2139337)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-25.el8_7.2" date="1675771200">- h2: lower initial window size to 32 MiB (#2166254)</changelog>
</package>
<package pkgid="3988cd28111d78ee80b13d24fd5d42b919c9ac81a1baa466890c62912d45bddf" name="libcurl" arch="i686">
  <version epoch="0" ver="7.61.1" rel="25.el8_7.3"/>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-19" date="1619179200">- make `curl --head file://` work as expected (#1947493)
- prevent automatic referer from leaking credentials (CVE-2021-22876)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-20" date="1619179201">- fix a cppcheck's false positive in 0029-curl-7.61.1-CVE-2021-22876.patch</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-21" date="1628164800">- fix TELNET stack contents disclosure again (CVE-2021-22925)
- fix TELNET stack contents disclosure (CVE-2021-22898)
- fix bad connection reuse due to flawed path name checks (CVE-2021-22924)
- disable metalink support to fix the following vulnerabilities
    CVE-2021-22923 - metalink download sends credentials
    CVE-2021-22922 - wrong content via metalink not discarded</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-22" date="1631880000">- fix STARTTLS protocol injection via MITM (CVE-2021-22947)
- fix protocol downgrade required TLS bypass (CVE-2021-22946)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-23" date="1651147200">- fix credential leak on redirect (CVE-2022-27774)
- fix auth/cookie leak on redirect (CVE-2022-27776)
- fix OAUTH2 bearer bypass in connection re-use (CVE-2022-22576)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-24" date="1652270400">- fix too eager reuse of TLS and SSH connections (CVE-2022-27782)
- fix invalid type in printf() argument detected by Coverity</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-25" date="1656504000">- setopt: enable CURLOPT_SSH_KNOWNHOSTS and CURLOPT_SSH_KEYFUNCTION (#2063703)
- fix HTTP compression denial of service (CVE-2022-32206)
- fix FTP-KRB bad message verification (CVE-2022-32208)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-25.el8_7.1" date="1668772800">- upon HTTP_1_1_REQUIRED, retry the request with HTTP/1.1 (#2139337)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-25.el8_7.2" date="1675771200">- h2: lower initial window size to 32 MiB (#2166254)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-25.el8_7.3" date="1676462400">- fix HTTP multi-header compression denial of service (CVE-2023-23916)</changelog>
</package>
<package pkgid="179a84eedc041067a94bca6141a066511cefc8943c67329d64426677d8749747" name="libcurl" arch="x86_64">
  <version epoch="0" ver="7.61.1" rel="25.el8_7.3"/>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-19" date="1619179200">- make `curl --head file://` work as expected (#1947493)
- prevent automatic referer from leaking credentials (CVE-2021-22876)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-20" date="1619179201">- fix a cppcheck's false positive in 0029-curl-7.61.1-CVE-2021-22876.patch</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-21" date="1628164800">- fix TELNET stack contents disclosure again (CVE-2021-22925)
- fix TELNET stack contents disclosure (CVE-2021-22898)
- fix bad connection reuse due to flawed path name checks (CVE-2021-22924)
- disable metalink support to fix the following vulnerabilities
    CVE-2021-22923 - metalink download sends credentials
    CVE-2021-22922 - wrong content via metalink not discarded</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-22" date="1631880000">- fix STARTTLS protocol injection via MITM (CVE-2021-22947)
- fix protocol downgrade required TLS bypass (CVE-2021-22946)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-23" date="1651147200">- fix credential leak on redirect (CVE-2022-27774)
- fix auth/cookie leak on redirect (CVE-2022-27776)
- fix OAUTH2 bearer bypass in connection re-use (CVE-2022-22576)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-24" date="1652270400">- fix too eager reuse of TLS and SSH connections (CVE-2022-27782)
- fix invalid type in printf() argument detected by Coverity</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-25" date="1656504000">- setopt: enable CURLOPT_SSH_KNOWNHOSTS and CURLOPT_SSH_KEYFUNCTION (#2063703)
- fix HTTP compression denial of service (CVE-2022-32206)
- fix FTP-KRB bad message verification (CVE-2022-32208)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-25.el8_7.1" date="1668772800">- upon HTTP_1_1_REQUIRED, retry the request with HTTP/1.1 (#2139337)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-25.el8_7.2" date="1675771200">- h2: lower initial window size to 32 MiB (#2166254)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-25.el8_7.3" date="1676462400">- fix HTTP multi-header compression denial of service (CVE-2023-23916)</changelog>
</package>
<package pkgid="66253ab0fc6c9a3b393b8e85bb72e279b1472cb98bcb0154c52b54cd72d758f6" name="libcurl-devel" arch="i686">
  <version epoch="0" ver="7.61.1" rel="25.el8_7.1"/>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-17" date="1605182400">- validate an ssl connection using an intermediate certificate (#1895355)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-18" date="1611835200">- http: send payload when (proxy) authentication is done (#1918692)
- curl: Inferior OCSP verification (CVE-2020-8286)
- libcurl: FTP wildcard stack overflow (CVE-2020-8285)
- curl: trusting FTP PASV responses (CVE-2020-8284)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-19" date="1619179200">- make `curl --head file://` work as expected (#1947493)
- prevent automatic referer from leaking credentials (CVE-2021-22876)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-20" date="1619179201">- fix a cppcheck's false positive in 0029-curl-7.61.1-CVE-2021-22876.patch</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-21" date="1628164800">- fix TELNET stack contents disclosure again (CVE-2021-22925)
- fix TELNET stack contents disclosure (CVE-2021-22898)
- fix bad connection reuse due to flawed path name checks (CVE-2021-22924)
- disable metalink support to fix the following vulnerabilities
    CVE-2021-22923 - metalink download sends credentials
    CVE-2021-22922 - wrong content via metalink not discarded</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-22" date="1631880000">- fix STARTTLS protocol injection via MITM (CVE-2021-22947)
- fix protocol downgrade required TLS bypass (CVE-2021-22946)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-23" date="1651147200">- fix credential leak on redirect (CVE-2022-27774)
- fix auth/cookie leak on redirect (CVE-2022-27776)
- fix OAUTH2 bearer bypass in connection re-use (CVE-2022-22576)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-24" date="1652270400">- fix too eager reuse of TLS and SSH connections (CVE-2022-27782)
- fix invalid type in printf() argument detected by Coverity</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-25" date="1656504000">- setopt: enable CURLOPT_SSH_KNOWNHOSTS and CURLOPT_SSH_KEYFUNCTION (#2063703)
- fix HTTP compression denial of service (CVE-2022-32206)
- fix FTP-KRB bad message verification (CVE-2022-32208)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-25.el8_7.1" date="1668772800">- upon HTTP_1_1_REQUIRED, retry the request with HTTP/1.1 (#2139337)</changelog>
</package>
<package pkgid="1fc86169d940e58dbc40da261a8a25d4c5c9db162c63839ebcf0a542bf669170" name="libcurl-devel" arch="x86_64">
  <version epoch="0" ver="7.61.1" rel="25.el8_7.1"/>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-17" date="1605182400">- validate an ssl connection using an intermediate certificate (#1895355)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-18" date="1611835200">- http: send payload when (proxy) authentication is done (#1918692)
- curl: Inferior OCSP verification (CVE-2020-8286)
- libcurl: FTP wildcard stack overflow (CVE-2020-8285)
- curl: trusting FTP PASV responses (CVE-2020-8284)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-19" date="1619179200">- make `curl --head file://` work as expected (#1947493)
- prevent automatic referer from leaking credentials (CVE-2021-22876)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-20" date="1619179201">- fix a cppcheck's false positive in 0029-curl-7.61.1-CVE-2021-22876.patch</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-21" date="1628164800">- fix TELNET stack contents disclosure again (CVE-2021-22925)
- fix TELNET stack contents disclosure (CVE-2021-22898)
- fix bad connection reuse due to flawed path name checks (CVE-2021-22924)
- disable metalink support to fix the following vulnerabilities
    CVE-2021-22923 - metalink download sends credentials
    CVE-2021-22922 - wrong content via metalink not discarded</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-22" date="1631880000">- fix STARTTLS protocol injection via MITM (CVE-2021-22947)
- fix protocol downgrade required TLS bypass (CVE-2021-22946)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-23" date="1651147200">- fix credential leak on redirect (CVE-2022-27774)
- fix auth/cookie leak on redirect (CVE-2022-27776)
- fix OAUTH2 bearer bypass in connection re-use (CVE-2022-22576)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-24" date="1652270400">- fix too eager reuse of TLS and SSH connections (CVE-2022-27782)
- fix invalid type in printf() argument detected by Coverity</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-25" date="1656504000">- setopt: enable CURLOPT_SSH_KNOWNHOSTS and CURLOPT_SSH_KEYFUNCTION (#2063703)
- fix HTTP compression denial of service (CVE-2022-32206)
- fix FTP-KRB bad message verification (CVE-2022-32208)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-25.el8_7.1" date="1668772800">- upon HTTP_1_1_REQUIRED, retry the request with HTTP/1.1 (#2139337)</changelog>
</package>
<package pkgid="3b2187b4aaa3624b28e381ef0bddd6514553f36dda2d8bb387b3cf5e740a606f" name="libcurl-devel" arch="i686">
  <version epoch="0" ver="7.61.1" rel="25.el8_7.2"/>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-18" date="1611835200">- http: send payload when (proxy) authentication is done (#1918692)
- curl: Inferior OCSP verification (CVE-2020-8286)
- libcurl: FTP wildcard stack overflow (CVE-2020-8285)
- curl: trusting FTP PASV responses (CVE-2020-8284)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-19" date="1619179200">- make `curl --head file://` work as expected (#1947493)
- prevent automatic referer from leaking credentials (CVE-2021-22876)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-20" date="1619179201">- fix a cppcheck's false positive in 0029-curl-7.61.1-CVE-2021-22876.patch</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-21" date="1628164800">- fix TELNET stack contents disclosure again (CVE-2021-22925)
- fix TELNET stack contents disclosure (CVE-2021-22898)
- fix bad connection reuse due to flawed path name checks (CVE-2021-22924)
- disable metalink support to fix the following vulnerabilities
    CVE-2021-22923 - metalink download sends credentials
    CVE-2021-22922 - wrong content via metalink not discarded</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-22" date="1631880000">- fix STARTTLS protocol injection via MITM (CVE-2021-22947)
- fix protocol downgrade required TLS bypass (CVE-2021-22946)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-23" date="1651147200">- fix credential leak on redirect (CVE-2022-27774)
- fix auth/cookie leak on redirect (CVE-2022-27776)
- fix OAUTH2 bearer bypass in connection re-use (CVE-2022-22576)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-24" date="1652270400">- fix too eager reuse of TLS and SSH connections (CVE-2022-27782)
- fix invalid type in printf() argument detected by Coverity</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-25" date="1656504000">- setopt: enable CURLOPT_SSH_KNOWNHOSTS and CURLOPT_SSH_KEYFUNCTION (#2063703)
- fix HTTP compression denial of service (CVE-2022-32206)
- fix FTP-KRB bad message verification (CVE-2022-32208)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-25.el8_7.1" date="1668772800">- upon HTTP_1_1_REQUIRED, retry the request with HTTP/1.1 (#2139337)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-25.el8_7.2" date="1675771200">- h2: lower initial window size to 32 MiB (#2166254)</changelog>
</package>
<package pkgid="58571354d1eacd525504cc19852c8f2a6b20e3bae638dd5fe735984c4b8e8248" name="libcurl-devel" arch="x86_64">
  <version epoch="0" ver="7.61.1" rel="25.el8_7.2"/>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-18" date="1611835200">- http: send payload when (proxy) authentication is done (#1918692)
- curl: Inferior OCSP verification (CVE-2020-8286)
- libcurl: FTP wildcard stack overflow (CVE-2020-8285)
- curl: trusting FTP PASV responses (CVE-2020-8284)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-19" date="1619179200">- make `curl --head file://` work as expected (#1947493)
- prevent automatic referer from leaking credentials (CVE-2021-22876)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-20" date="1619179201">- fix a cppcheck's false positive in 0029-curl-7.61.1-CVE-2021-22876.patch</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-21" date="1628164800">- fix TELNET stack contents disclosure again (CVE-2021-22925)
- fix TELNET stack contents disclosure (CVE-2021-22898)
- fix bad connection reuse due to flawed path name checks (CVE-2021-22924)
- disable metalink support to fix the following vulnerabilities
    CVE-2021-22923 - metalink download sends credentials
    CVE-2021-22922 - wrong content via metalink not discarded</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-22" date="1631880000">- fix STARTTLS protocol injection via MITM (CVE-2021-22947)
- fix protocol downgrade required TLS bypass (CVE-2021-22946)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-23" date="1651147200">- fix credential leak on redirect (CVE-2022-27774)
- fix auth/cookie leak on redirect (CVE-2022-27776)
- fix OAUTH2 bearer bypass in connection re-use (CVE-2022-22576)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-24" date="1652270400">- fix too eager reuse of TLS and SSH connections (CVE-2022-27782)
- fix invalid type in printf() argument detected by Coverity</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-25" date="1656504000">- setopt: enable CURLOPT_SSH_KNOWNHOSTS and CURLOPT_SSH_KEYFUNCTION (#2063703)
- fix HTTP compression denial of service (CVE-2022-32206)
- fix FTP-KRB bad message verification (CVE-2022-32208)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-25.el8_7.1" date="1668772800">- upon HTTP_1_1_REQUIRED, retry the request with HTTP/1.1 (#2139337)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-25.el8_7.2" date="1675771200">- h2: lower initial window size to 32 MiB (#2166254)</changelog>
</package>
<package pkgid="e780bb1b8d84125dfaf808b47869a6b55fb65ca3ad4889609fe5422460d30796" name="libcurl-devel" arch="i686">
  <version epoch="0" ver="7.61.1" rel="25.el8_7.3"/>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-19" date="1619179200">- make `curl --head file://` work as expected (#1947493)
- prevent automatic referer from leaking credentials (CVE-2021-22876)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-20" date="1619179201">- fix a cppcheck's false positive in 0029-curl-7.61.1-CVE-2021-22876.patch</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-21" date="1628164800">- fix TELNET stack contents disclosure again (CVE-2021-22925)
- fix TELNET stack contents disclosure (CVE-2021-22898)
- fix bad connection reuse due to flawed path name checks (CVE-2021-22924)
- disable metalink support to fix the following vulnerabilities
    CVE-2021-22923 - metalink download sends credentials
    CVE-2021-22922 - wrong content via metalink not discarded</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-22" date="1631880000">- fix STARTTLS protocol injection via MITM (CVE-2021-22947)
- fix protocol downgrade required TLS bypass (CVE-2021-22946)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-23" date="1651147200">- fix credential leak on redirect (CVE-2022-27774)
- fix auth/cookie leak on redirect (CVE-2022-27776)
- fix OAUTH2 bearer bypass in connection re-use (CVE-2022-22576)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-24" date="1652270400">- fix too eager reuse of TLS and SSH connections (CVE-2022-27782)
- fix invalid type in printf() argument detected by Coverity</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-25" date="1656504000">- setopt: enable CURLOPT_SSH_KNOWNHOSTS and CURLOPT_SSH_KEYFUNCTION (#2063703)
- fix HTTP compression denial of service (CVE-2022-32206)
- fix FTP-KRB bad message verification (CVE-2022-32208)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-25.el8_7.1" date="1668772800">- upon HTTP_1_1_REQUIRED, retry the request with HTTP/1.1 (#2139337)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-25.el8_7.2" date="1675771200">- h2: lower initial window size to 32 MiB (#2166254)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-25.el8_7.3" date="1676462400">- fix HTTP multi-header compression denial of service (CVE-2023-23916)</changelog>
</package>
<package pkgid="06c1efc5f91d8e4167b7d6b8e0db9139751ef495a1ad2623300d4c5faf3b3264" name="libcurl-devel" arch="x86_64">
  <version epoch="0" ver="7.61.1" rel="25.el8_7.3"/>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-19" date="1619179200">- make `curl --head file://` work as expected (#1947493)
- prevent automatic referer from leaking credentials (CVE-2021-22876)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-20" date="1619179201">- fix a cppcheck's false positive in 0029-curl-7.61.1-CVE-2021-22876.patch</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-21" date="1628164800">- fix TELNET stack contents disclosure again (CVE-2021-22925)
- fix TELNET stack contents disclosure (CVE-2021-22898)
- fix bad connection reuse due to flawed path name checks (CVE-2021-22924)
- disable metalink support to fix the following vulnerabilities
    CVE-2021-22923 - metalink download sends credentials
    CVE-2021-22922 - wrong content via metalink not discarded</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-22" date="1631880000">- fix STARTTLS protocol injection via MITM (CVE-2021-22947)
- fix protocol downgrade required TLS bypass (CVE-2021-22946)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-23" date="1651147200">- fix credential leak on redirect (CVE-2022-27774)
- fix auth/cookie leak on redirect (CVE-2022-27776)
- fix OAUTH2 bearer bypass in connection re-use (CVE-2022-22576)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-24" date="1652270400">- fix too eager reuse of TLS and SSH connections (CVE-2022-27782)
- fix invalid type in printf() argument detected by Coverity</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-25" date="1656504000">- setopt: enable CURLOPT_SSH_KNOWNHOSTS and CURLOPT_SSH_KEYFUNCTION (#2063703)
- fix HTTP compression denial of service (CVE-2022-32206)
- fix FTP-KRB bad message verification (CVE-2022-32208)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-25.el8_7.1" date="1668772800">- upon HTTP_1_1_REQUIRED, retry the request with HTTP/1.1 (#2139337)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-25.el8_7.2" date="1675771200">- h2: lower initial window size to 32 MiB (#2166254)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-25.el8_7.3" date="1676462400">- fix HTTP multi-header compression denial of service (CVE-2023-23916)</changelog>
</package>
<package pkgid="767fbb89e85fd01baa09ff025028a4065aec95c12939864e80191e984c8557a9" name="libcurl-minimal" arch="i686">
  <version epoch="0" ver="7.61.1" rel="25.el8_7.1"/>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-17" date="1605182400">- validate an ssl connection using an intermediate certificate (#1895355)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-18" date="1611835200">- http: send payload when (proxy) authentication is done (#1918692)
- curl: Inferior OCSP verification (CVE-2020-8286)
- libcurl: FTP wildcard stack overflow (CVE-2020-8285)
- curl: trusting FTP PASV responses (CVE-2020-8284)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-19" date="1619179200">- make `curl --head file://` work as expected (#1947493)
- prevent automatic referer from leaking credentials (CVE-2021-22876)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-20" date="1619179201">- fix a cppcheck's false positive in 0029-curl-7.61.1-CVE-2021-22876.patch</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-21" date="1628164800">- fix TELNET stack contents disclosure again (CVE-2021-22925)
- fix TELNET stack contents disclosure (CVE-2021-22898)
- fix bad connection reuse due to flawed path name checks (CVE-2021-22924)
- disable metalink support to fix the following vulnerabilities
    CVE-2021-22923 - metalink download sends credentials
    CVE-2021-22922 - wrong content via metalink not discarded</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-22" date="1631880000">- fix STARTTLS protocol injection via MITM (CVE-2021-22947)
- fix protocol downgrade required TLS bypass (CVE-2021-22946)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-23" date="1651147200">- fix credential leak on redirect (CVE-2022-27774)
- fix auth/cookie leak on redirect (CVE-2022-27776)
- fix OAUTH2 bearer bypass in connection re-use (CVE-2022-22576)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-24" date="1652270400">- fix too eager reuse of TLS and SSH connections (CVE-2022-27782)
- fix invalid type in printf() argument detected by Coverity</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-25" date="1656504000">- setopt: enable CURLOPT_SSH_KNOWNHOSTS and CURLOPT_SSH_KEYFUNCTION (#2063703)
- fix HTTP compression denial of service (CVE-2022-32206)
- fix FTP-KRB bad message verification (CVE-2022-32208)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-25.el8_7.1" date="1668772800">- upon HTTP_1_1_REQUIRED, retry the request with HTTP/1.1 (#2139337)</changelog>
</package>
<package pkgid="c618b4c6908186219055a87ad16cdccd4801acc5959c81d8811faed80f087bd4" name="libcurl-minimal" arch="x86_64">
  <version epoch="0" ver="7.61.1" rel="25.el8_7.1"/>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-17" date="1605182400">- validate an ssl connection using an intermediate certificate (#1895355)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-18" date="1611835200">- http: send payload when (proxy) authentication is done (#1918692)
- curl: Inferior OCSP verification (CVE-2020-8286)
- libcurl: FTP wildcard stack overflow (CVE-2020-8285)
- curl: trusting FTP PASV responses (CVE-2020-8284)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-19" date="1619179200">- make `curl --head file://` work as expected (#1947493)
- prevent automatic referer from leaking credentials (CVE-2021-22876)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-20" date="1619179201">- fix a cppcheck's false positive in 0029-curl-7.61.1-CVE-2021-22876.patch</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-21" date="1628164800">- fix TELNET stack contents disclosure again (CVE-2021-22925)
- fix TELNET stack contents disclosure (CVE-2021-22898)
- fix bad connection reuse due to flawed path name checks (CVE-2021-22924)
- disable metalink support to fix the following vulnerabilities
    CVE-2021-22923 - metalink download sends credentials
    CVE-2021-22922 - wrong content via metalink not discarded</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-22" date="1631880000">- fix STARTTLS protocol injection via MITM (CVE-2021-22947)
- fix protocol downgrade required TLS bypass (CVE-2021-22946)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-23" date="1651147200">- fix credential leak on redirect (CVE-2022-27774)
- fix auth/cookie leak on redirect (CVE-2022-27776)
- fix OAUTH2 bearer bypass in connection re-use (CVE-2022-22576)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-24" date="1652270400">- fix too eager reuse of TLS and SSH connections (CVE-2022-27782)
- fix invalid type in printf() argument detected by Coverity</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-25" date="1656504000">- setopt: enable CURLOPT_SSH_KNOWNHOSTS and CURLOPT_SSH_KEYFUNCTION (#2063703)
- fix HTTP compression denial of service (CVE-2022-32206)
- fix FTP-KRB bad message verification (CVE-2022-32208)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-25.el8_7.1" date="1668772800">- upon HTTP_1_1_REQUIRED, retry the request with HTTP/1.1 (#2139337)</changelog>
</package>
<package pkgid="ce1aa2f9025847b79471cb338f53662c21234bfb1cbd051b0d105435ac82aa14" name="libcurl-minimal" arch="i686">
  <version epoch="0" ver="7.61.1" rel="25.el8_7.2"/>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-18" date="1611835200">- http: send payload when (proxy) authentication is done (#1918692)
- curl: Inferior OCSP verification (CVE-2020-8286)
- libcurl: FTP wildcard stack overflow (CVE-2020-8285)
- curl: trusting FTP PASV responses (CVE-2020-8284)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-19" date="1619179200">- make `curl --head file://` work as expected (#1947493)
- prevent automatic referer from leaking credentials (CVE-2021-22876)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-20" date="1619179201">- fix a cppcheck's false positive in 0029-curl-7.61.1-CVE-2021-22876.patch</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-21" date="1628164800">- fix TELNET stack contents disclosure again (CVE-2021-22925)
- fix TELNET stack contents disclosure (CVE-2021-22898)
- fix bad connection reuse due to flawed path name checks (CVE-2021-22924)
- disable metalink support to fix the following vulnerabilities
    CVE-2021-22923 - metalink download sends credentials
    CVE-2021-22922 - wrong content via metalink not discarded</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-22" date="1631880000">- fix STARTTLS protocol injection via MITM (CVE-2021-22947)
- fix protocol downgrade required TLS bypass (CVE-2021-22946)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-23" date="1651147200">- fix credential leak on redirect (CVE-2022-27774)
- fix auth/cookie leak on redirect (CVE-2022-27776)
- fix OAUTH2 bearer bypass in connection re-use (CVE-2022-22576)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-24" date="1652270400">- fix too eager reuse of TLS and SSH connections (CVE-2022-27782)
- fix invalid type in printf() argument detected by Coverity</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-25" date="1656504000">- setopt: enable CURLOPT_SSH_KNOWNHOSTS and CURLOPT_SSH_KEYFUNCTION (#2063703)
- fix HTTP compression denial of service (CVE-2022-32206)
- fix FTP-KRB bad message verification (CVE-2022-32208)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-25.el8_7.1" date="1668772800">- upon HTTP_1_1_REQUIRED, retry the request with HTTP/1.1 (#2139337)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-25.el8_7.2" date="1675771200">- h2: lower initial window size to 32 MiB (#2166254)</changelog>
</package>
<package pkgid="bbd3f952e3bd8658140f77ecc88720946d5e7ab074c38ae579e8e356af956286" name="libcurl-minimal" arch="x86_64">
  <version epoch="0" ver="7.61.1" rel="25.el8_7.2"/>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-18" date="1611835200">- http: send payload when (proxy) authentication is done (#1918692)
- curl: Inferior OCSP verification (CVE-2020-8286)
- libcurl: FTP wildcard stack overflow (CVE-2020-8285)
- curl: trusting FTP PASV responses (CVE-2020-8284)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-19" date="1619179200">- make `curl --head file://` work as expected (#1947493)
- prevent automatic referer from leaking credentials (CVE-2021-22876)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-20" date="1619179201">- fix a cppcheck's false positive in 0029-curl-7.61.1-CVE-2021-22876.patch</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-21" date="1628164800">- fix TELNET stack contents disclosure again (CVE-2021-22925)
- fix TELNET stack contents disclosure (CVE-2021-22898)
- fix bad connection reuse due to flawed path name checks (CVE-2021-22924)
- disable metalink support to fix the following vulnerabilities
    CVE-2021-22923 - metalink download sends credentials
    CVE-2021-22922 - wrong content via metalink not discarded</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-22" date="1631880000">- fix STARTTLS protocol injection via MITM (CVE-2021-22947)
- fix protocol downgrade required TLS bypass (CVE-2021-22946)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-23" date="1651147200">- fix credential leak on redirect (CVE-2022-27774)
- fix auth/cookie leak on redirect (CVE-2022-27776)
- fix OAUTH2 bearer bypass in connection re-use (CVE-2022-22576)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-24" date="1652270400">- fix too eager reuse of TLS and SSH connections (CVE-2022-27782)
- fix invalid type in printf() argument detected by Coverity</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-25" date="1656504000">- setopt: enable CURLOPT_SSH_KNOWNHOSTS and CURLOPT_SSH_KEYFUNCTION (#2063703)
- fix HTTP compression denial of service (CVE-2022-32206)
- fix FTP-KRB bad message verification (CVE-2022-32208)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-25.el8_7.1" date="1668772800">- upon HTTP_1_1_REQUIRED, retry the request with HTTP/1.1 (#2139337)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-25.el8_7.2" date="1675771200">- h2: lower initial window size to 32 MiB (#2166254)</changelog>
</package>
<package pkgid="a2f274e3b3aeb52705ea42377ede0579f6337813c7fbacc4f6d915f90cd5acb2" name="libcurl-minimal" arch="i686">
  <version epoch="0" ver="7.61.1" rel="25.el8_7.3"/>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-19" date="1619179200">- make `curl --head file://` work as expected (#1947493)
- prevent automatic referer from leaking credentials (CVE-2021-22876)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-20" date="1619179201">- fix a cppcheck's false positive in 0029-curl-7.61.1-CVE-2021-22876.patch</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-21" date="1628164800">- fix TELNET stack contents disclosure again (CVE-2021-22925)
- fix TELNET stack contents disclosure (CVE-2021-22898)
- fix bad connection reuse due to flawed path name checks (CVE-2021-22924)
- disable metalink support to fix the following vulnerabilities
    CVE-2021-22923 - metalink download sends credentials
    CVE-2021-22922 - wrong content via metalink not discarded</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-22" date="1631880000">- fix STARTTLS protocol injection via MITM (CVE-2021-22947)
- fix protocol downgrade required TLS bypass (CVE-2021-22946)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-23" date="1651147200">- fix credential leak on redirect (CVE-2022-27774)
- fix auth/cookie leak on redirect (CVE-2022-27776)
- fix OAUTH2 bearer bypass in connection re-use (CVE-2022-22576)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-24" date="1652270400">- fix too eager reuse of TLS and SSH connections (CVE-2022-27782)
- fix invalid type in printf() argument detected by Coverity</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-25" date="1656504000">- setopt: enable CURLOPT_SSH_KNOWNHOSTS and CURLOPT_SSH_KEYFUNCTION (#2063703)
- fix HTTP compression denial of service (CVE-2022-32206)
- fix FTP-KRB bad message verification (CVE-2022-32208)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-25.el8_7.1" date="1668772800">- upon HTTP_1_1_REQUIRED, retry the request with HTTP/1.1 (#2139337)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-25.el8_7.2" date="1675771200">- h2: lower initial window size to 32 MiB (#2166254)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-25.el8_7.3" date="1676462400">- fix HTTP multi-header compression denial of service (CVE-2023-23916)</changelog>
</package>
<package pkgid="e38f4ef18483dc3c8feb61b8a80892af7bb468d0185143315c6a7c3103ddb99f" name="libcurl-minimal" arch="x86_64">
  <version epoch="0" ver="7.61.1" rel="25.el8_7.3"/>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-19" date="1619179200">- make `curl --head file://` work as expected (#1947493)
- prevent automatic referer from leaking credentials (CVE-2021-22876)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-20" date="1619179201">- fix a cppcheck's false positive in 0029-curl-7.61.1-CVE-2021-22876.patch</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-21" date="1628164800">- fix TELNET stack contents disclosure again (CVE-2021-22925)
- fix TELNET stack contents disclosure (CVE-2021-22898)
- fix bad connection reuse due to flawed path name checks (CVE-2021-22924)
- disable metalink support to fix the following vulnerabilities
    CVE-2021-22923 - metalink download sends credentials
    CVE-2021-22922 - wrong content via metalink not discarded</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-22" date="1631880000">- fix STARTTLS protocol injection via MITM (CVE-2021-22947)
- fix protocol downgrade required TLS bypass (CVE-2021-22946)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-23" date="1651147200">- fix credential leak on redirect (CVE-2022-27774)
- fix auth/cookie leak on redirect (CVE-2022-27776)
- fix OAUTH2 bearer bypass in connection re-use (CVE-2022-22576)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-24" date="1652270400">- fix too eager reuse of TLS and SSH connections (CVE-2022-27782)
- fix invalid type in printf() argument detected by Coverity</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-25" date="1656504000">- setopt: enable CURLOPT_SSH_KNOWNHOSTS and CURLOPT_SSH_KEYFUNCTION (#2063703)
- fix HTTP compression denial of service (CVE-2022-32206)
- fix FTP-KRB bad message verification (CVE-2022-32208)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-25.el8_7.1" date="1668772800">- upon HTTP_1_1_REQUIRED, retry the request with HTTP/1.1 (#2139337)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-25.el8_7.2" date="1675771200">- h2: lower initial window size to 32 MiB (#2166254)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-25.el8_7.3" date="1676462400">- fix HTTP multi-header compression denial of service (CVE-2023-23916)</changelog>
</package>
<package pkgid="f768f7c0e8e693f3b1d22f7dc8cfdda9e81ebfa9da6ac487ad8c182b22e7fc41" name="libdmmp" arch="i686">
  <version epoch="0" ver="0.8.4" rel="28.el8_7.1"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-20" date="1637236800">- Add 0079-libmultipath-use-typedef-for-keyword-handler-and-pri.patch
- Add 0080-libmultipath-print-the-correct-file-when-parsing-fai.patch
- Add 0081-libmultipath-pass-file-and-line-number-to-keyword-ha.patch
- Add 0082-libmultipath-make-set_int-take-a-range-for-valid-val.patch
- Add 0083-libmultipath-improve-checks-for-set_str.patch
- Add 0084-libmultipath-split-set_int-to-enable-reuse.patch
- Add 0085-libmultipath-cleanup-invalid-config-handling.patch
- Add 0086-libmultipath-don-t-return-error-on-invalid-values.patch
  * Above 8 patches fix bz #1900595
- Add 0087-multipathd-avoid-unnecessary-path-read-only-reloads.patch
  * Fixes bz #2009624
- Resolves: bz #1900595, #2009624, #2021823</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-21" date="1642507200">- Add 0088-libmultipath-make-helper-function-to-trigger-path-ue.patch
- Add 0089-multipathd-trigger-udev-change-on-path-addition.patch
- Resolves: bz #1862032</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-22" date="1644235200">- Add 0090-RH-add-support-to-mpathconf-for-setting-arbitrary-de.patch
- Resolves: bz #1981240</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-23" date="1652184000">- Add 0091-multipath-tools-add-HPE-MSA-1060-2060-to-hwtable.patch
  * Partial fix for bz #2058222
- Add 0092-multipath-tools-update-mpp-force_readonly-in-ev_add_.patch
  * Fixes bz #2065468
- Add 0093-updated-HPE-MSA-builtin-config.patch
  * Fixes bz #2058222
- Resolves bz #2065468, #2058222</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-24" date="1652702400">- Add 0094-multipath-return-failure-on-an-invalid-remove-comman.patch
  * Fixes bz #2052054
- Add 0095-libmultipath-steal-the-src-string-pointer-in-merge_s.patch
- Add 0096-libmultipath-enable-linear-ordering-of-bus-proto-tup.patch
- Add 0097-libmultipath-use-bus_protocol_id-in-snprint_path_pro.patch
- Add 0098-libmultipath-make-protocol_name-global.patch
- Add 0099-libmultipath-add-a-protocol-subsection-to-multipath..patch
- Add 0100-libmultipath-Set-the-scsi-timeout-parameters-by-path.patch
- Add 0101-libmultipath-check-the-overrides-pctable-for-path-va.patch
- Add 0102-libmultipath-fix-eh_deadline-documentation.patch
- Add 0103-libmultipath-Add-documentation-for-the-protocol-subs.patch
- Add 0104-libmultipath-use-symbolic-value-for-invalid-pcentry.patch
  * The above 10 patches implement feature from bz #2065477
- Resolves: bz #2052054, #2065477</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-25" date="1652788800">- Add 0105-multipathd-handle-fpin-events.patch
- Add 0106-multipathd-disallow-changing-to-from-fpin-marginal-p.patch
- Resolves: bz #2083077</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-26" date="1654689600">- Add 0107-libmultipath-unset-detect_checker-for-clariion-Unity.patch
- Resolves: bz #2082205</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-27" date="1660910400">- Add 0108-multipathd-Add-missing-ctype-include.patch
- Add 0109-multipathd-replace-libreadline-with-libedit.patch
  * replace readline with libedit, to avoid license conflicts
- Resolves: bz #2119887</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-28" date="1661342400">- Add 0110-multipath-fix-systemd-timers-in-the-initramfs.patch
- Resolves: bz #1916168</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-28.1" date="1665662400">- Add 0111-multipathd-ignore-duplicated-multipathd-command-keys.patch
- Resolves: bz #2133995</changelog>
</package>
<package pkgid="e9ccfd0ee4598231790d8191e671ab303c2122f71be5df4920c0aa3c8603522b" name="libdmmp" arch="x86_64">
  <version epoch="0" ver="0.8.4" rel="28.el8_7.1"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-20" date="1637236800">- Add 0079-libmultipath-use-typedef-for-keyword-handler-and-pri.patch
- Add 0080-libmultipath-print-the-correct-file-when-parsing-fai.patch
- Add 0081-libmultipath-pass-file-and-line-number-to-keyword-ha.patch
- Add 0082-libmultipath-make-set_int-take-a-range-for-valid-val.patch
- Add 0083-libmultipath-improve-checks-for-set_str.patch
- Add 0084-libmultipath-split-set_int-to-enable-reuse.patch
- Add 0085-libmultipath-cleanup-invalid-config-handling.patch
- Add 0086-libmultipath-don-t-return-error-on-invalid-values.patch
  * Above 8 patches fix bz #1900595
- Add 0087-multipathd-avoid-unnecessary-path-read-only-reloads.patch
  * Fixes bz #2009624
- Resolves: bz #1900595, #2009624, #2021823</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-21" date="1642507200">- Add 0088-libmultipath-make-helper-function-to-trigger-path-ue.patch
- Add 0089-multipathd-trigger-udev-change-on-path-addition.patch
- Resolves: bz #1862032</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-22" date="1644235200">- Add 0090-RH-add-support-to-mpathconf-for-setting-arbitrary-de.patch
- Resolves: bz #1981240</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-23" date="1652184000">- Add 0091-multipath-tools-add-HPE-MSA-1060-2060-to-hwtable.patch
  * Partial fix for bz #2058222
- Add 0092-multipath-tools-update-mpp-force_readonly-in-ev_add_.patch
  * Fixes bz #2065468
- Add 0093-updated-HPE-MSA-builtin-config.patch
  * Fixes bz #2058222
- Resolves bz #2065468, #2058222</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-24" date="1652702400">- Add 0094-multipath-return-failure-on-an-invalid-remove-comman.patch
  * Fixes bz #2052054
- Add 0095-libmultipath-steal-the-src-string-pointer-in-merge_s.patch
- Add 0096-libmultipath-enable-linear-ordering-of-bus-proto-tup.patch
- Add 0097-libmultipath-use-bus_protocol_id-in-snprint_path_pro.patch
- Add 0098-libmultipath-make-protocol_name-global.patch
- Add 0099-libmultipath-add-a-protocol-subsection-to-multipath..patch
- Add 0100-libmultipath-Set-the-scsi-timeout-parameters-by-path.patch
- Add 0101-libmultipath-check-the-overrides-pctable-for-path-va.patch
- Add 0102-libmultipath-fix-eh_deadline-documentation.patch
- Add 0103-libmultipath-Add-documentation-for-the-protocol-subs.patch
- Add 0104-libmultipath-use-symbolic-value-for-invalid-pcentry.patch
  * The above 10 patches implement feature from bz #2065477
- Resolves: bz #2052054, #2065477</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-25" date="1652788800">- Add 0105-multipathd-handle-fpin-events.patch
- Add 0106-multipathd-disallow-changing-to-from-fpin-marginal-p.patch
- Resolves: bz #2083077</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-26" date="1654689600">- Add 0107-libmultipath-unset-detect_checker-for-clariion-Unity.patch
- Resolves: bz #2082205</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-27" date="1660910400">- Add 0108-multipathd-Add-missing-ctype-include.patch
- Add 0109-multipathd-replace-libreadline-with-libedit.patch
  * replace readline with libedit, to avoid license conflicts
- Resolves: bz #2119887</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-28" date="1661342400">- Add 0110-multipath-fix-systemd-timers-in-the-initramfs.patch
- Resolves: bz #1916168</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-28.1" date="1665662400">- Add 0111-multipathd-ignore-duplicated-multipathd-command-keys.patch
- Resolves: bz #2133995</changelog>
</package>
<package pkgid="2663fa021c09b2c2f7639d0c8b7a441046803c33bbf59302bf9bc698daaef17a" name="libdmmp" arch="i686">
  <version epoch="0" ver="0.8.4" rel="28.el8_7.3"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-22" date="1644235200">- Add 0090-RH-add-support-to-mpathconf-for-setting-arbitrary-de.patch
- Resolves: bz #1981240</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-23" date="1652184000">- Add 0091-multipath-tools-add-HPE-MSA-1060-2060-to-hwtable.patch
  * Partial fix for bz #2058222
- Add 0092-multipath-tools-update-mpp-force_readonly-in-ev_add_.patch
  * Fixes bz #2065468
- Add 0093-updated-HPE-MSA-builtin-config.patch
  * Fixes bz #2058222
- Resolves bz #2065468, #2058222</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-24" date="1652702400">- Add 0094-multipath-return-failure-on-an-invalid-remove-comman.patch
  * Fixes bz #2052054
- Add 0095-libmultipath-steal-the-src-string-pointer-in-merge_s.patch
- Add 0096-libmultipath-enable-linear-ordering-of-bus-proto-tup.patch
- Add 0097-libmultipath-use-bus_protocol_id-in-snprint_path_pro.patch
- Add 0098-libmultipath-make-protocol_name-global.patch
- Add 0099-libmultipath-add-a-protocol-subsection-to-multipath..patch
- Add 0100-libmultipath-Set-the-scsi-timeout-parameters-by-path.patch
- Add 0101-libmultipath-check-the-overrides-pctable-for-path-va.patch
- Add 0102-libmultipath-fix-eh_deadline-documentation.patch
- Add 0103-libmultipath-Add-documentation-for-the-protocol-subs.patch
- Add 0104-libmultipath-use-symbolic-value-for-invalid-pcentry.patch
  * The above 10 patches implement feature from bz #2065477
- Resolves: bz #2052054, #2065477</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-25" date="1652788800">- Add 0105-multipathd-handle-fpin-events.patch
- Add 0106-multipathd-disallow-changing-to-from-fpin-marginal-p.patch
- Resolves: bz #2083077</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-26" date="1654689600">- Add 0107-libmultipath-unset-detect_checker-for-clariion-Unity.patch
- Resolves: bz #2082205</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-27" date="1660910400">- Add 0108-multipathd-Add-missing-ctype-include.patch
- Add 0109-multipathd-replace-libreadline-with-libedit.patch
  * replace readline with libedit, to avoid license conflicts
- Resolves: bz #2119887</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-28" date="1661342400">- Add 0110-multipath-fix-systemd-timers-in-the-initramfs.patch
- Resolves: bz #1916168</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-28.1" date="1665662400">- Add 0111-multipathd-ignore-duplicated-multipathd-command-keys.patch
- Resolves: bz #2133995</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-28.2" date="1666267200">- Rebuild for rhel-8.7.0
- Related: bz #2133995</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-28.3" date="1673956800">- Add 0112-libmultipath-copy-mpp-hwe-from-pp-hwe.patch
- Resolves: bz #2161393</changelog>
</package>
<package pkgid="be72cb7e074af83ebae823f8fa1089e34fcae0d9e0b94f988049135eded75b93" name="libdmmp" arch="x86_64">
  <version epoch="0" ver="0.8.4" rel="28.el8_7.3"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-22" date="1644235200">- Add 0090-RH-add-support-to-mpathconf-for-setting-arbitrary-de.patch
- Resolves: bz #1981240</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-23" date="1652184000">- Add 0091-multipath-tools-add-HPE-MSA-1060-2060-to-hwtable.patch
  * Partial fix for bz #2058222
- Add 0092-multipath-tools-update-mpp-force_readonly-in-ev_add_.patch
  * Fixes bz #2065468
- Add 0093-updated-HPE-MSA-builtin-config.patch
  * Fixes bz #2058222
- Resolves bz #2065468, #2058222</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-24" date="1652702400">- Add 0094-multipath-return-failure-on-an-invalid-remove-comman.patch
  * Fixes bz #2052054
- Add 0095-libmultipath-steal-the-src-string-pointer-in-merge_s.patch
- Add 0096-libmultipath-enable-linear-ordering-of-bus-proto-tup.patch
- Add 0097-libmultipath-use-bus_protocol_id-in-snprint_path_pro.patch
- Add 0098-libmultipath-make-protocol_name-global.patch
- Add 0099-libmultipath-add-a-protocol-subsection-to-multipath..patch
- Add 0100-libmultipath-Set-the-scsi-timeout-parameters-by-path.patch
- Add 0101-libmultipath-check-the-overrides-pctable-for-path-va.patch
- Add 0102-libmultipath-fix-eh_deadline-documentation.patch
- Add 0103-libmultipath-Add-documentation-for-the-protocol-subs.patch
- Add 0104-libmultipath-use-symbolic-value-for-invalid-pcentry.patch
  * The above 10 patches implement feature from bz #2065477
- Resolves: bz #2052054, #2065477</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-25" date="1652788800">- Add 0105-multipathd-handle-fpin-events.patch
- Add 0106-multipathd-disallow-changing-to-from-fpin-marginal-p.patch
- Resolves: bz #2083077</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-26" date="1654689600">- Add 0107-libmultipath-unset-detect_checker-for-clariion-Unity.patch
- Resolves: bz #2082205</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-27" date="1660910400">- Add 0108-multipathd-Add-missing-ctype-include.patch
- Add 0109-multipathd-replace-libreadline-with-libedit.patch
  * replace readline with libedit, to avoid license conflicts
- Resolves: bz #2119887</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-28" date="1661342400">- Add 0110-multipath-fix-systemd-timers-in-the-initramfs.patch
- Resolves: bz #1916168</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-28.1" date="1665662400">- Add 0111-multipathd-ignore-duplicated-multipathd-command-keys.patch
- Resolves: bz #2133995</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-28.2" date="1666267200">- Rebuild for rhel-8.7.0
- Related: bz #2133995</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-28.3" date="1673956800">- Add 0112-libmultipath-copy-mpp-hwe-from-pp-hwe.patch
- Resolves: bz #2161393</changelog>
</package>
<package pkgid="4ca367e443361136fe0ce08f21af0b1776cc36a56eb6878251203d2a5ef5948a" name="libertas-sd8686-firmware" arch="noarch">
  <version epoch="0" ver="20220726" rel="111.git150864a4.el8_7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20201218-102.git05789708" date="1611748800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1918613)</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; - 20210702-103.gitd79c2677" date="1625227200">- Update to latest upstream linux-firmware image for assorted updates
- Include support for the Qualcomm AX500-DBS (QCA6390) 802.11ax Wireless (rhbz 1725913)
- Firmware for Chelsio T4/T5/T6 adapters (rhbz 1961398)
- Incorrect NVIDIA GPU firmware used for TU102 and TU104 GPUs (rhbz 1965312)
- Package the new iwl7260 ucode files and also the new binary format PNVM</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; - 20211007-104.git7a300505" date="1633608000">- Update to latest upstream linux-firmware image for assorted updates
- Certain amdgpu firmware files cause random hangs with AMD Picasso/Raven Ridge APUs (rhbz 2000879)
- Support Intel CNVi AX211 Garfield Peak2 on ADL - Bluetooth (rhbz 1923179)
- Support Intel CNVi AX211 Garfield Peak2 on ADL - WIFI (rhbz 1923175)</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; - 20211119-105.gitf5d51956" date="1638792000">- Update to latest upstream linux-firmware image for assorted updates
- Update to latest AMD GPU firmware (rhbz 1986660)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; - 20220209-106.git6342082c" date="1644494400">- Update to latest upstream linux-firmware image for assorted updates
- Include AMD GPU firmware fix (rhbz 2031172)
- Support QCA WCN6856 v2.1 Module: Bluetooth firmware (rhbz 2007904)</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; - 20220517-107.git251d2900" date="1652875200">- Update to latest upstream linux-firmware image for assorted updates
- Include latest qed firmware update (rhbz 2040269)
- Include latest bnx2x firmware update (rhbz 2040273)
- Include latest ice firmware update (rhbz 2059384, rhbz 2081543)
- Include latest Qualcomm firmware update (rhbz 2062871)</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; - 20220517-108.git251d2900" date="1654257600">- Bump NVR due to conflict with late 8.6 iwl firmware package versioning</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; - 20220713-109.gitdfa29317" date="1657713600">- Update to latest upstream linux-firmware image for assorted updates
- Include even newer qed firmware update (rhbz 2040269)</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; - 20220726-110.git150864a4" date="1658836800">- Omit unused password-protected vxge firmware files from package (rhbz 2108051)
- Pick up latest AMD GPU firmwares</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; - 20220726-111.git150864a4" date="1676635200">- Update AMD GPU firmware for multiple monitor fixes (rhbz 2165148)</changelog>
</package>
<package pkgid="9b8dd8654c89e51061fc6b37206058a9ae7e749e2d6833d33717ab1196c5cee1" name="libertas-sd8787-firmware" arch="noarch">
  <version epoch="0" ver="20220726" rel="111.git150864a4.el8_7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20201218-102.git05789708" date="1611748800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1918613)</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; - 20210702-103.gitd79c2677" date="1625227200">- Update to latest upstream linux-firmware image for assorted updates
- Include support for the Qualcomm AX500-DBS (QCA6390) 802.11ax Wireless (rhbz 1725913)
- Firmware for Chelsio T4/T5/T6 adapters (rhbz 1961398)
- Incorrect NVIDIA GPU firmware used for TU102 and TU104 GPUs (rhbz 1965312)
- Package the new iwl7260 ucode files and also the new binary format PNVM</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; - 20211007-104.git7a300505" date="1633608000">- Update to latest upstream linux-firmware image for assorted updates
- Certain amdgpu firmware files cause random hangs with AMD Picasso/Raven Ridge APUs (rhbz 2000879)
- Support Intel CNVi AX211 Garfield Peak2 on ADL - Bluetooth (rhbz 1923179)
- Support Intel CNVi AX211 Garfield Peak2 on ADL - WIFI (rhbz 1923175)</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; - 20211119-105.gitf5d51956" date="1638792000">- Update to latest upstream linux-firmware image for assorted updates
- Update to latest AMD GPU firmware (rhbz 1986660)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; - 20220209-106.git6342082c" date="1644494400">- Update to latest upstream linux-firmware image for assorted updates
- Include AMD GPU firmware fix (rhbz 2031172)
- Support QCA WCN6856 v2.1 Module: Bluetooth firmware (rhbz 2007904)</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; - 20220517-107.git251d2900" date="1652875200">- Update to latest upstream linux-firmware image for assorted updates
- Include latest qed firmware update (rhbz 2040269)
- Include latest bnx2x firmware update (rhbz 2040273)
- Include latest ice firmware update (rhbz 2059384, rhbz 2081543)
- Include latest Qualcomm firmware update (rhbz 2062871)</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; - 20220517-108.git251d2900" date="1654257600">- Bump NVR due to conflict with late 8.6 iwl firmware package versioning</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; - 20220713-109.gitdfa29317" date="1657713600">- Update to latest upstream linux-firmware image for assorted updates
- Include even newer qed firmware update (rhbz 2040269)</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; - 20220726-110.git150864a4" date="1658836800">- Omit unused password-protected vxge firmware files from package (rhbz 2108051)
- Pick up latest AMD GPU firmwares</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; - 20220726-111.git150864a4" date="1676635200">- Update AMD GPU firmware for multiple monitor fixes (rhbz 2165148)</changelog>
</package>
<package pkgid="3152d240d624f96921f85450ad81011be387129e4a5e8e3a4c7e6d49372a6c5d" name="libertas-usb8388-firmware" arch="noarch">
  <version epoch="2" ver="20220726" rel="111.git150864a4.el8_7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20201218-102.git05789708" date="1611748800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1918613)</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; - 20210702-103.gitd79c2677" date="1625227200">- Update to latest upstream linux-firmware image for assorted updates
- Include support for the Qualcomm AX500-DBS (QCA6390) 802.11ax Wireless (rhbz 1725913)
- Firmware for Chelsio T4/T5/T6 adapters (rhbz 1961398)
- Incorrect NVIDIA GPU firmware used for TU102 and TU104 GPUs (rhbz 1965312)
- Package the new iwl7260 ucode files and also the new binary format PNVM</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; - 20211007-104.git7a300505" date="1633608000">- Update to latest upstream linux-firmware image for assorted updates
- Certain amdgpu firmware files cause random hangs with AMD Picasso/Raven Ridge APUs (rhbz 2000879)
- Support Intel CNVi AX211 Garfield Peak2 on ADL - Bluetooth (rhbz 1923179)
- Support Intel CNVi AX211 Garfield Peak2 on ADL - WIFI (rhbz 1923175)</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; - 20211119-105.gitf5d51956" date="1638792000">- Update to latest upstream linux-firmware image for assorted updates
- Update to latest AMD GPU firmware (rhbz 1986660)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; - 20220209-106.git6342082c" date="1644494400">- Update to latest upstream linux-firmware image for assorted updates
- Include AMD GPU firmware fix (rhbz 2031172)
- Support QCA WCN6856 v2.1 Module: Bluetooth firmware (rhbz 2007904)</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; - 20220517-107.git251d2900" date="1652875200">- Update to latest upstream linux-firmware image for assorted updates
- Include latest qed firmware update (rhbz 2040269)
- Include latest bnx2x firmware update (rhbz 2040273)
- Include latest ice firmware update (rhbz 2059384, rhbz 2081543)
- Include latest Qualcomm firmware update (rhbz 2062871)</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; - 20220517-108.git251d2900" date="1654257600">- Bump NVR due to conflict with late 8.6 iwl firmware package versioning</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; - 20220713-109.gitdfa29317" date="1657713600">- Update to latest upstream linux-firmware image for assorted updates
- Include even newer qed firmware update (rhbz 2040269)</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; - 20220726-110.git150864a4" date="1658836800">- Omit unused password-protected vxge firmware files from package (rhbz 2108051)
- Pick up latest AMD GPU firmwares</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; - 20220726-111.git150864a4" date="1676635200">- Update AMD GPU firmware for multiple monitor fixes (rhbz 2165148)</changelog>
</package>
<package pkgid="49d2938b586a928d1e342b771289314d513e51d220f847e9c1de31f908e4cbce" name="libertas-usb8388-olpc-firmware" arch="noarch">
  <version epoch="0" ver="20220726" rel="111.git150864a4.el8_7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20201218-102.git05789708" date="1611748800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1918613)</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; - 20210702-103.gitd79c2677" date="1625227200">- Update to latest upstream linux-firmware image for assorted updates
- Include support for the Qualcomm AX500-DBS (QCA6390) 802.11ax Wireless (rhbz 1725913)
- Firmware for Chelsio T4/T5/T6 adapters (rhbz 1961398)
- Incorrect NVIDIA GPU firmware used for TU102 and TU104 GPUs (rhbz 1965312)
- Package the new iwl7260 ucode files and also the new binary format PNVM</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; - 20211007-104.git7a300505" date="1633608000">- Update to latest upstream linux-firmware image for assorted updates
- Certain amdgpu firmware files cause random hangs with AMD Picasso/Raven Ridge APUs (rhbz 2000879)
- Support Intel CNVi AX211 Garfield Peak2 on ADL - Bluetooth (rhbz 1923179)
- Support Intel CNVi AX211 Garfield Peak2 on ADL - WIFI (rhbz 1923175)</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; - 20211119-105.gitf5d51956" date="1638792000">- Update to latest upstream linux-firmware image for assorted updates
- Update to latest AMD GPU firmware (rhbz 1986660)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; - 20220209-106.git6342082c" date="1644494400">- Update to latest upstream linux-firmware image for assorted updates
- Include AMD GPU firmware fix (rhbz 2031172)
- Support QCA WCN6856 v2.1 Module: Bluetooth firmware (rhbz 2007904)</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; - 20220517-107.git251d2900" date="1652875200">- Update to latest upstream linux-firmware image for assorted updates
- Include latest qed firmware update (rhbz 2040269)
- Include latest bnx2x firmware update (rhbz 2040273)
- Include latest ice firmware update (rhbz 2059384, rhbz 2081543)
- Include latest Qualcomm firmware update (rhbz 2062871)</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; - 20220517-108.git251d2900" date="1654257600">- Bump NVR due to conflict with late 8.6 iwl firmware package versioning</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; - 20220713-109.gitdfa29317" date="1657713600">- Update to latest upstream linux-firmware image for assorted updates
- Include even newer qed firmware update (rhbz 2040269)</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; - 20220726-110.git150864a4" date="1658836800">- Omit unused password-protected vxge firmware files from package (rhbz 2108051)
- Pick up latest AMD GPU firmwares</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; - 20220726-111.git150864a4" date="1676635200">- Update AMD GPU firmware for multiple monitor fixes (rhbz 2165148)</changelog>
</package>
<package pkgid="917fee28e517f938bb8832e864972427698c3b587adc245a1df5d29cede773d1" name="libfdisk" arch="i686">
  <version epoch="0" ver="2.32.1" rel="39.el8_7"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-29" date="1638878400">- fix #1988955 - script command continues without stopping.
- fix #2041498 - incorrect partition size calculation for BLKPG_* ioctls
- fix #2011602 - logger from util-linux incorrectly handles long messages
- fix #1916151 - [RFE] spread fstrim.timer across time
- fix #1894192 - Update or backport setpriv --pdeathsig
- fix #2026511 - blkid fails to complete when targeting  non-block devices</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-30" date="1641211200">- update lib-sys-add-sysfs_chrdev_devno_to_devname.patch (#2026511)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-31" date="1641902400">- improve #2026511 fix - blkid fails to complete when targeting non-block devices
- fix #1950187 - Ambient capabilities failed to applied to non-root user</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-32" date="1642420800">- change bug number (#2016229 to #2041498)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-34" date="1642420801">- rebuild after revert</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-35" date="1646740800">- fix #2058176 - losetup Retry LOOP_SET_STATUS64 on EAGAIN</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-36" date="1657800000">- fix #2060030 - Please backport patches for atari partition detection to RHEL 8
- fix #2069187 - Internal testsuite for lscpu failed on aarch64
- fix #2093166 - lslogins reports incorrect "Password is locked" status
- fix #2059241 - rpm -V / --verify reports bad user/group/mtime for /run/uuidd
- fix #2044592 - Move /var/log/lastlog ownership to systemd</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-37" date="1657886400">- update atari partition tests (related to #2060030)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-38" date="1661169600">- improve tmpfiles.d use in spec file (related to #2059241)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-39" date="1668600000">- fix #2141969 - Add --cont-clock feature for libuuid and uuidd</changelog>
</package>
<package pkgid="c2261107f31654688e12c04b3a269c07e872046eaef38264ecf9b99cc8a9b9a9" name="libfdisk" arch="x86_64">
  <version epoch="0" ver="2.32.1" rel="39.el8_7"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-29" date="1638878400">- fix #1988955 - script command continues without stopping.
- fix #2041498 - incorrect partition size calculation for BLKPG_* ioctls
- fix #2011602 - logger from util-linux incorrectly handles long messages
- fix #1916151 - [RFE] spread fstrim.timer across time
- fix #1894192 - Update or backport setpriv --pdeathsig
- fix #2026511 - blkid fails to complete when targeting  non-block devices</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-30" date="1641211200">- update lib-sys-add-sysfs_chrdev_devno_to_devname.patch (#2026511)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-31" date="1641902400">- improve #2026511 fix - blkid fails to complete when targeting non-block devices
- fix #1950187 - Ambient capabilities failed to applied to non-root user</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-32" date="1642420800">- change bug number (#2016229 to #2041498)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-34" date="1642420801">- rebuild after revert</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-35" date="1646740800">- fix #2058176 - losetup Retry LOOP_SET_STATUS64 on EAGAIN</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-36" date="1657800000">- fix #2060030 - Please backport patches for atari partition detection to RHEL 8
- fix #2069187 - Internal testsuite for lscpu failed on aarch64
- fix #2093166 - lslogins reports incorrect "Password is locked" status
- fix #2059241 - rpm -V / --verify reports bad user/group/mtime for /run/uuidd
- fix #2044592 - Move /var/log/lastlog ownership to systemd</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-37" date="1657886400">- update atari partition tests (related to #2060030)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-38" date="1661169600">- improve tmpfiles.d use in spec file (related to #2059241)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-39" date="1668600000">- fix #2141969 - Add --cont-clock feature for libuuid and uuidd</changelog>
</package>
<package pkgid="655ab27d2456bcdccbf6767da5da1273faa71d1dd0aad9e8a1fb701cf0cdf3e2" name="libfdisk-devel" arch="i686">
  <version epoch="0" ver="2.32.1" rel="39.el8_7"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-29" date="1638878400">- fix #1988955 - script command continues without stopping.
- fix #2041498 - incorrect partition size calculation for BLKPG_* ioctls
- fix #2011602 - logger from util-linux incorrectly handles long messages
- fix #1916151 - [RFE] spread fstrim.timer across time
- fix #1894192 - Update or backport setpriv --pdeathsig
- fix #2026511 - blkid fails to complete when targeting  non-block devices</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-30" date="1641211200">- update lib-sys-add-sysfs_chrdev_devno_to_devname.patch (#2026511)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-31" date="1641902400">- improve #2026511 fix - blkid fails to complete when targeting non-block devices
- fix #1950187 - Ambient capabilities failed to applied to non-root user</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-32" date="1642420800">- change bug number (#2016229 to #2041498)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-34" date="1642420801">- rebuild after revert</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-35" date="1646740800">- fix #2058176 - losetup Retry LOOP_SET_STATUS64 on EAGAIN</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-36" date="1657800000">- fix #2060030 - Please backport patches for atari partition detection to RHEL 8
- fix #2069187 - Internal testsuite for lscpu failed on aarch64
- fix #2093166 - lslogins reports incorrect "Password is locked" status
- fix #2059241 - rpm -V / --verify reports bad user/group/mtime for /run/uuidd
- fix #2044592 - Move /var/log/lastlog ownership to systemd</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-37" date="1657886400">- update atari partition tests (related to #2060030)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-38" date="1661169600">- improve tmpfiles.d use in spec file (related to #2059241)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-39" date="1668600000">- fix #2141969 - Add --cont-clock feature for libuuid and uuidd</changelog>
</package>
<package pkgid="abbc3f7de0c03161a8a1d570d775f8022e82cc2775f1764e59dd352eecb9b03f" name="libfdisk-devel" arch="x86_64">
  <version epoch="0" ver="2.32.1" rel="39.el8_7"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-29" date="1638878400">- fix #1988955 - script command continues without stopping.
- fix #2041498 - incorrect partition size calculation for BLKPG_* ioctls
- fix #2011602 - logger from util-linux incorrectly handles long messages
- fix #1916151 - [RFE] spread fstrim.timer across time
- fix #1894192 - Update or backport setpriv --pdeathsig
- fix #2026511 - blkid fails to complete when targeting  non-block devices</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-30" date="1641211200">- update lib-sys-add-sysfs_chrdev_devno_to_devname.patch (#2026511)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-31" date="1641902400">- improve #2026511 fix - blkid fails to complete when targeting non-block devices
- fix #1950187 - Ambient capabilities failed to applied to non-root user</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-32" date="1642420800">- change bug number (#2016229 to #2041498)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-34" date="1642420801">- rebuild after revert</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-35" date="1646740800">- fix #2058176 - losetup Retry LOOP_SET_STATUS64 on EAGAIN</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-36" date="1657800000">- fix #2060030 - Please backport patches for atari partition detection to RHEL 8
- fix #2069187 - Internal testsuite for lscpu failed on aarch64
- fix #2093166 - lslogins reports incorrect "Password is locked" status
- fix #2059241 - rpm -V / --verify reports bad user/group/mtime for /run/uuidd
- fix #2044592 - Move /var/log/lastlog ownership to systemd</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-37" date="1657886400">- update atari partition tests (related to #2060030)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-38" date="1661169600">- improve tmpfiles.d use in spec file (related to #2059241)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-39" date="1668600000">- fix #2141969 - Add --cont-clock feature for libuuid and uuidd</changelog>
</package>
<package pkgid="3fb86fcc3d95fe5f628afa90d7e93562f5ecfcd74257c16c6d23bb274b1d2058" name="libgcc" arch="i686">
  <version epoch="0" ver="8.5.0" rel="16.el8_7"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-7" date="1639137600">- backport PCH tweaks (#2030878)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-8" date="1643025600">- aarch64: Add -mtune=neoverse-512tvb (#1845932)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-9" date="1643025601">- apply cprop_hardreg fix for narrow mode != lowpart targets (#2028609)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-10" date="1643284800">- fix typo in the cprop_hardreg patch (#2028609)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-11" date="1648641600">- Add a plugin-annobin subpackage.  (#2067150)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-12" date="1648814400">- Fix nop generation in annobin plugin.  (#2067150)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-13" date="1650456000">- require docbook-style-xsl instead of docbook5-style-xsl (#2073888)
- backport Default widths with -fdec-format-defaults patch (#2074614)</changelog>
  <changelog author="Jonathan Wakely &lt;jwakely@redhat.com&gt; 8.5.0-14" date="1657281600">- backport std::regex check for invalid range (#2001788)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-15" date="1658318400">- backport straight-line-speculation mitigation (#2108721)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-16" date="1668772800">- fix deserialization for std::normal_distribution (#2144075,
  PR libstdc++/105502)</changelog>
</package>
<package pkgid="8b620ac7d8615951867d171f0ac59a277d9f351c07f8a1764b471e3137ea70b9" name="libgcc" arch="x86_64">
  <version epoch="0" ver="8.5.0" rel="16.el8_7"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-7" date="1639137600">- backport PCH tweaks (#2030878)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-8" date="1643025600">- aarch64: Add -mtune=neoverse-512tvb (#1845932)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-9" date="1643025601">- apply cprop_hardreg fix for narrow mode != lowpart targets (#2028609)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-10" date="1643284800">- fix typo in the cprop_hardreg patch (#2028609)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-11" date="1648641600">- Add a plugin-annobin subpackage.  (#2067150)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-12" date="1648814400">- Fix nop generation in annobin plugin.  (#2067150)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-13" date="1650456000">- require docbook-style-xsl instead of docbook5-style-xsl (#2073888)
- backport Default widths with -fdec-format-defaults patch (#2074614)</changelog>
  <changelog author="Jonathan Wakely &lt;jwakely@redhat.com&gt; 8.5.0-14" date="1657281600">- backport std::regex check for invalid range (#2001788)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-15" date="1658318400">- backport straight-line-speculation mitigation (#2108721)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-16" date="1668772800">- fix deserialization for std::normal_distribution (#2144075,
  PR libstdc++/105502)</changelog>
</package>
<package pkgid="3a5d4abefcb9845d8fffbec6e9dfe6b786d61e2527733d2ac23e6004c6444ac6" name="libgfortran" arch="i686">
  <version epoch="0" ver="8.5.0" rel="16.el8_7"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-7" date="1639137600">- backport PCH tweaks (#2030878)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-8" date="1643025600">- aarch64: Add -mtune=neoverse-512tvb (#1845932)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-9" date="1643025601">- apply cprop_hardreg fix for narrow mode != lowpart targets (#2028609)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-10" date="1643284800">- fix typo in the cprop_hardreg patch (#2028609)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-11" date="1648641600">- Add a plugin-annobin subpackage.  (#2067150)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-12" date="1648814400">- Fix nop generation in annobin plugin.  (#2067150)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-13" date="1650456000">- require docbook-style-xsl instead of docbook5-style-xsl (#2073888)
- backport Default widths with -fdec-format-defaults patch (#2074614)</changelog>
  <changelog author="Jonathan Wakely &lt;jwakely@redhat.com&gt; 8.5.0-14" date="1657281600">- backport std::regex check for invalid range (#2001788)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-15" date="1658318400">- backport straight-line-speculation mitigation (#2108721)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-16" date="1668772800">- fix deserialization for std::normal_distribution (#2144075,
  PR libstdc++/105502)</changelog>
</package>
<package pkgid="e42de57db536ff992db9417fba2cfd61f1bdfda40c416bddf1cfdc3d5d1bc7fa" name="libgfortran" arch="x86_64">
  <version epoch="0" ver="8.5.0" rel="16.el8_7"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-7" date="1639137600">- backport PCH tweaks (#2030878)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-8" date="1643025600">- aarch64: Add -mtune=neoverse-512tvb (#1845932)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-9" date="1643025601">- apply cprop_hardreg fix for narrow mode != lowpart targets (#2028609)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-10" date="1643284800">- fix typo in the cprop_hardreg patch (#2028609)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-11" date="1648641600">- Add a plugin-annobin subpackage.  (#2067150)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-12" date="1648814400">- Fix nop generation in annobin plugin.  (#2067150)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-13" date="1650456000">- require docbook-style-xsl instead of docbook5-style-xsl (#2073888)
- backport Default widths with -fdec-format-defaults patch (#2074614)</changelog>
  <changelog author="Jonathan Wakely &lt;jwakely@redhat.com&gt; 8.5.0-14" date="1657281600">- backport std::regex check for invalid range (#2001788)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-15" date="1658318400">- backport straight-line-speculation mitigation (#2108721)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-16" date="1668772800">- fix deserialization for std::normal_distribution (#2144075,
  PR libstdc++/105502)</changelog>
</package>
<package pkgid="847f71053171d00eda915e4b35096c8ba0acf7f8854d7d1c7b3378f3981f492f" name="libgomp" arch="i686">
  <version epoch="0" ver="8.5.0" rel="16.el8_7"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-7" date="1639137600">- backport PCH tweaks (#2030878)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-8" date="1643025600">- aarch64: Add -mtune=neoverse-512tvb (#1845932)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-9" date="1643025601">- apply cprop_hardreg fix for narrow mode != lowpart targets (#2028609)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-10" date="1643284800">- fix typo in the cprop_hardreg patch (#2028609)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-11" date="1648641600">- Add a plugin-annobin subpackage.  (#2067150)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-12" date="1648814400">- Fix nop generation in annobin plugin.  (#2067150)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-13" date="1650456000">- require docbook-style-xsl instead of docbook5-style-xsl (#2073888)
- backport Default widths with -fdec-format-defaults patch (#2074614)</changelog>
  <changelog author="Jonathan Wakely &lt;jwakely@redhat.com&gt; 8.5.0-14" date="1657281600">- backport std::regex check for invalid range (#2001788)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-15" date="1658318400">- backport straight-line-speculation mitigation (#2108721)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-16" date="1668772800">- fix deserialization for std::normal_distribution (#2144075,
  PR libstdc++/105502)</changelog>
</package>
<package pkgid="4ea262b607b1053bf34f68422b34cb0d19f4a4ee152145d8eb78c7d86a778ed1" name="libgomp" arch="x86_64">
  <version epoch="0" ver="8.5.0" rel="16.el8_7"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-7" date="1639137600">- backport PCH tweaks (#2030878)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-8" date="1643025600">- aarch64: Add -mtune=neoverse-512tvb (#1845932)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-9" date="1643025601">- apply cprop_hardreg fix for narrow mode != lowpart targets (#2028609)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-10" date="1643284800">- fix typo in the cprop_hardreg patch (#2028609)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-11" date="1648641600">- Add a plugin-annobin subpackage.  (#2067150)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-12" date="1648814400">- Fix nop generation in annobin plugin.  (#2067150)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-13" date="1650456000">- require docbook-style-xsl instead of docbook5-style-xsl (#2073888)
- backport Default widths with -fdec-format-defaults patch (#2074614)</changelog>
  <changelog author="Jonathan Wakely &lt;jwakely@redhat.com&gt; 8.5.0-14" date="1657281600">- backport std::regex check for invalid range (#2001788)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-15" date="1658318400">- backport straight-line-speculation mitigation (#2108721)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-16" date="1668772800">- fix deserialization for std::normal_distribution (#2144075,
  PR libstdc++/105502)</changelog>
</package>
<package pkgid="e85cc7cf96e8628051b425ed23f06691a6e5e96027db8bb62165456cc2393041" name="libgomp-offload-nvptx" arch="x86_64">
  <version epoch="0" ver="8.5.0" rel="16.el8_7"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-7" date="1639137600">- backport PCH tweaks (#2030878)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-8" date="1643025600">- aarch64: Add -mtune=neoverse-512tvb (#1845932)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-9" date="1643025601">- apply cprop_hardreg fix for narrow mode != lowpart targets (#2028609)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-10" date="1643284800">- fix typo in the cprop_hardreg patch (#2028609)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-11" date="1648641600">- Add a plugin-annobin subpackage.  (#2067150)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-12" date="1648814400">- Fix nop generation in annobin plugin.  (#2067150)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-13" date="1650456000">- require docbook-style-xsl instead of docbook5-style-xsl (#2073888)
- backport Default widths with -fdec-format-defaults patch (#2074614)</changelog>
  <changelog author="Jonathan Wakely &lt;jwakely@redhat.com&gt; 8.5.0-14" date="1657281600">- backport std::regex check for invalid range (#2001788)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-15" date="1658318400">- backport straight-line-speculation mitigation (#2108721)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-16" date="1668772800">- fix deserialization for std::normal_distribution (#2144075,
  PR libstdc++/105502)</changelog>
</package>
<package pkgid="1be035ffdbf24a82d3f715be75d12162d91706e4e11018308ff226be28d85df8" name="libipa_hbac" arch="i686">
  <version epoch="0" ver="2.7.3" rel="4.el8_7.1"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.6.2-1" date="1640606400">- Resolves: rhbz#2011216 - Rebase SSSD for RHEL 8.6
- Resolves: rhbz#2013260 - [RHEL8] Add ability to parse child log files
- Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries
- Resolves: rhbz#1859315 - sssd does not use kerberos port that is set.
- Resolves: rhbz#1961182 - Passwordless (GSSAPI) SSH not working due to missing "includedir /var/lib/sss/pubconf/krb5.include.d" directive in /etc/krb5.conf
- Resolves: rhbz#2008829 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2012263 - pam responder does not call initgroups to refresh the user entry
- Resolves: rhbz#2012308 - Add client certificate validation D-Bus API
- Resolves: rhbz#2012327 - Groups are missing while performing id lookup as SSSD switching to offline mode due to the wrong domain name in the ldap-pings(netlogon).
- Resolves: rhbz#2013028 - [RFE] Health and Support Analyzer: Add sssctl sub-command to select and display a single request from the logs
- Resolves: rhbz#2013259 - [RHEL8] Add tevent chain ID logic into responders
- Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.6.2-2" date="1641297600">- Resolves: rhbz#2013260 - [RHEL8] Add ability to parse child log files (additional patch)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.6.2-3" date="1642420800">- Resolves: rhbz#2039892 - 2.6.2 regression: Daemon crashes when resolving AD user names
- Resolves: rhbz#1859315 - sssd does not use kerberos port that is set.
- Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries
- Resolves: rhbz#2035245 - AD Domain in the AD Forest Missing after sssd latest update
- Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.0-2" date="1652875200">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2026799 - SSSD authenticating to LDAP with obfuscated password produces Invalid authtoken type message causing sssd_be to go offline (cross inter_ference of different provider plugins options)
- Resolves: rhbz#2033347 - sssd error triggers backtrace : [write_krb5info_file_from_fo_server] (0x0020): [RID#73501] There is no server that can be written into kdc info file.
- Resolves: rhbz#2056483 - [RFE] Add sssd internal krb5 plugin for authentication against external IdP via OAuth2
- Resolves: rhbz#2062689 - [Improvement] Add user and group version of sss_nss_getorigbyname()
- Resolves: rhbz#2065692 - [RHEL8] Ship new sub-package called sssd-idp into sssd
- Resolves: rhbz#2072050 - sssd_nss exiting (due to missing 'sssd' local user) making SSSD service to restart in a loop
- Resolves: rhbz#2072931 - Use right sdap_domain in ad_domain_info_send
- Resolves: rhbz#2087088 - sssd does not enforce smartcard auth for kde screen locker
- Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol
- Resolves: rhbz#2087745 - 2FA prompting setting ineffective
- Resolves: rhbz#2087746 - sssd fails GPO-based access if AD have setup with Japanese language</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.2-1" date="1655726400">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2098620 - sdap_nested_group_deref_direct_process() triggers internal watchdog for large data sets
- Resolves: rhbz#2098619 - [Improvement] add SSSD support for more than one CRL PEM file name with parameters certificate_verification and crl_file
- Resolves: rhbz#2088817 - pam_sss_gss ceased to work after upgrade to 8.6
- Resolves: rhbz#2098616 - Add idp authentication indicator in man page of sssd.conf
- Resolves: rhbz#2056035 - 'getent hosts' not return hosts if they have more than one CN in LDAP
- Resolves: rhbz#2098615 - Regression "Missing internal domain data." when setting ad_domain to incorrect
- Resolves: rhbz#2098617 - Harden kerberos ticket validation
- Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-1" date="1657713600">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2063016 - [sssd] RHEL 8.7 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-2" date="1660132800">- Resolves: rhbz#2116488 - virsh command will hang after the host run several auto test cases
- Resolves: rhbz#2116486 - [regression] sssctl analyze fails to parse PAM related sssd logs
- Resolves: rhbz#2116487 - cache_req_data_set_hybrid_lookup: cache_req_data should never be NULL</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-3" date="1661256000">- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8
- Resolves: rhbz#2119726 - sssctl analyze --logdir option requires sssd to be configured
- Resolves: rhbz#2120669 - Incorrect request ID tracking from responder to backend</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4" date="1661515200">- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4.1" date="1665662400">- Resolves: rhbz#2128544 - Cannot SSH with AD user to ipa-client (`krb5_validate` and `pac_check` settings conflict) [rhel-8.7.0.z]</changelog>
</package>
<package pkgid="c5372e40ed0471d034617caeac995c8a9ba378a14670621be89ac28b21cf3b50" name="libipa_hbac" arch="x86_64">
  <version epoch="0" ver="2.7.3" rel="4.el8_7.1"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.6.2-1" date="1640606400">- Resolves: rhbz#2011216 - Rebase SSSD for RHEL 8.6
- Resolves: rhbz#2013260 - [RHEL8] Add ability to parse child log files
- Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries
- Resolves: rhbz#1859315 - sssd does not use kerberos port that is set.
- Resolves: rhbz#1961182 - Passwordless (GSSAPI) SSH not working due to missing "includedir /var/lib/sss/pubconf/krb5.include.d" directive in /etc/krb5.conf
- Resolves: rhbz#2008829 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2012263 - pam responder does not call initgroups to refresh the user entry
- Resolves: rhbz#2012308 - Add client certificate validation D-Bus API
- Resolves: rhbz#2012327 - Groups are missing while performing id lookup as SSSD switching to offline mode due to the wrong domain name in the ldap-pings(netlogon).
- Resolves: rhbz#2013028 - [RFE] Health and Support Analyzer: Add sssctl sub-command to select and display a single request from the logs
- Resolves: rhbz#2013259 - [RHEL8] Add tevent chain ID logic into responders
- Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.6.2-2" date="1641297600">- Resolves: rhbz#2013260 - [RHEL8] Add ability to parse child log files (additional patch)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.6.2-3" date="1642420800">- Resolves: rhbz#2039892 - 2.6.2 regression: Daemon crashes when resolving AD user names
- Resolves: rhbz#1859315 - sssd does not use kerberos port that is set.
- Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries
- Resolves: rhbz#2035245 - AD Domain in the AD Forest Missing after sssd latest update
- Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.0-2" date="1652875200">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2026799 - SSSD authenticating to LDAP with obfuscated password produces Invalid authtoken type message causing sssd_be to go offline (cross inter_ference of different provider plugins options)
- Resolves: rhbz#2033347 - sssd error triggers backtrace : [write_krb5info_file_from_fo_server] (0x0020): [RID#73501] There is no server that can be written into kdc info file.
- Resolves: rhbz#2056483 - [RFE] Add sssd internal krb5 plugin for authentication against external IdP via OAuth2
- Resolves: rhbz#2062689 - [Improvement] Add user and group version of sss_nss_getorigbyname()
- Resolves: rhbz#2065692 - [RHEL8] Ship new sub-package called sssd-idp into sssd
- Resolves: rhbz#2072050 - sssd_nss exiting (due to missing 'sssd' local user) making SSSD service to restart in a loop
- Resolves: rhbz#2072931 - Use right sdap_domain in ad_domain_info_send
- Resolves: rhbz#2087088 - sssd does not enforce smartcard auth for kde screen locker
- Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol
- Resolves: rhbz#2087745 - 2FA prompting setting ineffective
- Resolves: rhbz#2087746 - sssd fails GPO-based access if AD have setup with Japanese language</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.2-1" date="1655726400">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2098620 - sdap_nested_group_deref_direct_process() triggers internal watchdog for large data sets
- Resolves: rhbz#2098619 - [Improvement] add SSSD support for more than one CRL PEM file name with parameters certificate_verification and crl_file
- Resolves: rhbz#2088817 - pam_sss_gss ceased to work after upgrade to 8.6
- Resolves: rhbz#2098616 - Add idp authentication indicator in man page of sssd.conf
- Resolves: rhbz#2056035 - 'getent hosts' not return hosts if they have more than one CN in LDAP
- Resolves: rhbz#2098615 - Regression "Missing internal domain data." when setting ad_domain to incorrect
- Resolves: rhbz#2098617 - Harden kerberos ticket validation
- Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-1" date="1657713600">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2063016 - [sssd] RHEL 8.7 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-2" date="1660132800">- Resolves: rhbz#2116488 - virsh command will hang after the host run several auto test cases
- Resolves: rhbz#2116486 - [regression] sssctl analyze fails to parse PAM related sssd logs
- Resolves: rhbz#2116487 - cache_req_data_set_hybrid_lookup: cache_req_data should never be NULL</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-3" date="1661256000">- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8
- Resolves: rhbz#2119726 - sssctl analyze --logdir option requires sssd to be configured
- Resolves: rhbz#2120669 - Incorrect request ID tracking from responder to backend</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4" date="1661515200">- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4.1" date="1665662400">- Resolves: rhbz#2128544 - Cannot SSH with AD user to ipa-client (`krb5_validate` and `pac_check` settings conflict) [rhel-8.7.0.z]</changelog>
</package>
<package pkgid="12bbb413b289107b1f38236f631ae49dd7bb0242e2b60745aa82b4cb11bb80e7" name="libipa_hbac" arch="i686">
  <version epoch="0" ver="2.7.3" rel="4.el8_7.3"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.6.2-3" date="1642420800">- Resolves: rhbz#2039892 - 2.6.2 regression: Daemon crashes when resolving AD user names
- Resolves: rhbz#1859315 - sssd does not use kerberos port that is set.
- Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries
- Resolves: rhbz#2035245 - AD Domain in the AD Forest Missing after sssd latest update
- Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.0-2" date="1652875200">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2026799 - SSSD authenticating to LDAP with obfuscated password produces Invalid authtoken type message causing sssd_be to go offline (cross inter_ference of different provider plugins options)
- Resolves: rhbz#2033347 - sssd error triggers backtrace : [write_krb5info_file_from_fo_server] (0x0020): [RID#73501] There is no server that can be written into kdc info file.
- Resolves: rhbz#2056483 - [RFE] Add sssd internal krb5 plugin for authentication against external IdP via OAuth2
- Resolves: rhbz#2062689 - [Improvement] Add user and group version of sss_nss_getorigbyname()
- Resolves: rhbz#2065692 - [RHEL8] Ship new sub-package called sssd-idp into sssd
- Resolves: rhbz#2072050 - sssd_nss exiting (due to missing 'sssd' local user) making SSSD service to restart in a loop
- Resolves: rhbz#2072931 - Use right sdap_domain in ad_domain_info_send
- Resolves: rhbz#2087088 - sssd does not enforce smartcard auth for kde screen locker
- Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol
- Resolves: rhbz#2087745 - 2FA prompting setting ineffective
- Resolves: rhbz#2087746 - sssd fails GPO-based access if AD have setup with Japanese language</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.2-1" date="1655726400">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2098620 - sdap_nested_group_deref_direct_process() triggers internal watchdog for large data sets
- Resolves: rhbz#2098619 - [Improvement] add SSSD support for more than one CRL PEM file name with parameters certificate_verification and crl_file
- Resolves: rhbz#2088817 - pam_sss_gss ceased to work after upgrade to 8.6
- Resolves: rhbz#2098616 - Add idp authentication indicator in man page of sssd.conf
- Resolves: rhbz#2056035 - 'getent hosts' not return hosts if they have more than one CN in LDAP
- Resolves: rhbz#2098615 - Regression "Missing internal domain data." when setting ad_domain to incorrect
- Resolves: rhbz#2098617 - Harden kerberos ticket validation
- Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-1" date="1657713600">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2063016 - [sssd] RHEL 8.7 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-2" date="1660132800">- Resolves: rhbz#2116488 - virsh command will hang after the host run several auto test cases
- Resolves: rhbz#2116486 - [regression] sssctl analyze fails to parse PAM related sssd logs
- Resolves: rhbz#2116487 - cache_req_data_set_hybrid_lookup: cache_req_data should never be NULL</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-3" date="1661256000">- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8
- Resolves: rhbz#2119726 - sssctl analyze --logdir option requires sssd to be configured
- Resolves: rhbz#2120669 - Incorrect request ID tracking from responder to backend</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4" date="1661515200">- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4.1" date="1665662400">- Resolves: rhbz#2128544 - Cannot SSH with AD user to ipa-client (`krb5_validate` and `pac_check` settings conflict) [rhel-8.7.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4.2" date="1670587200">- Resolves: rhbz#2139871 - Analyzer: Optimize and remove duplicate messages in verbose list [rhel-8.7.0.z]
- Resolves: rhbz#2142961 - SSSD: `sssctl analyze` command shouldn't require 'root' privileged [rhel-8.7.0.z]
- Resolves: rhbz#2148989 - UPN check cannot be disabled explicitly but requires krb5_validate = false' as a work-around [rhel-8.7.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4.3" date="1671105600">- Resolves: rhbz#2152883 - authenticating against external IdP services okta (native app) with OAuth client secret failed [rhel-8.7.0.z]</changelog>
</package>
<package pkgid="0745f97ceded76733f65fe923965a0748108ad2512adde3e8e783066bff595db" name="libipa_hbac" arch="x86_64">
  <version epoch="0" ver="2.7.3" rel="4.el8_7.3"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.6.2-3" date="1642420800">- Resolves: rhbz#2039892 - 2.6.2 regression: Daemon crashes when resolving AD user names
- Resolves: rhbz#1859315 - sssd does not use kerberos port that is set.
- Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries
- Resolves: rhbz#2035245 - AD Domain in the AD Forest Missing after sssd latest update
- Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.0-2" date="1652875200">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2026799 - SSSD authenticating to LDAP with obfuscated password produces Invalid authtoken type message causing sssd_be to go offline (cross inter_ference of different provider plugins options)
- Resolves: rhbz#2033347 - sssd error triggers backtrace : [write_krb5info_file_from_fo_server] (0x0020): [RID#73501] There is no server that can be written into kdc info file.
- Resolves: rhbz#2056483 - [RFE] Add sssd internal krb5 plugin for authentication against external IdP via OAuth2
- Resolves: rhbz#2062689 - [Improvement] Add user and group version of sss_nss_getorigbyname()
- Resolves: rhbz#2065692 - [RHEL8] Ship new sub-package called sssd-idp into sssd
- Resolves: rhbz#2072050 - sssd_nss exiting (due to missing 'sssd' local user) making SSSD service to restart in a loop
- Resolves: rhbz#2072931 - Use right sdap_domain in ad_domain_info_send
- Resolves: rhbz#2087088 - sssd does not enforce smartcard auth for kde screen locker
- Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol
- Resolves: rhbz#2087745 - 2FA prompting setting ineffective
- Resolves: rhbz#2087746 - sssd fails GPO-based access if AD have setup with Japanese language</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.2-1" date="1655726400">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2098620 - sdap_nested_group_deref_direct_process() triggers internal watchdog for large data sets
- Resolves: rhbz#2098619 - [Improvement] add SSSD support for more than one CRL PEM file name with parameters certificate_verification and crl_file
- Resolves: rhbz#2088817 - pam_sss_gss ceased to work after upgrade to 8.6
- Resolves: rhbz#2098616 - Add idp authentication indicator in man page of sssd.conf
- Resolves: rhbz#2056035 - 'getent hosts' not return hosts if they have more than one CN in LDAP
- Resolves: rhbz#2098615 - Regression "Missing internal domain data." when setting ad_domain to incorrect
- Resolves: rhbz#2098617 - Harden kerberos ticket validation
- Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-1" date="1657713600">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2063016 - [sssd] RHEL 8.7 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-2" date="1660132800">- Resolves: rhbz#2116488 - virsh command will hang after the host run several auto test cases
- Resolves: rhbz#2116486 - [regression] sssctl analyze fails to parse PAM related sssd logs
- Resolves: rhbz#2116487 - cache_req_data_set_hybrid_lookup: cache_req_data should never be NULL</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-3" date="1661256000">- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8
- Resolves: rhbz#2119726 - sssctl analyze --logdir option requires sssd to be configured
- Resolves: rhbz#2120669 - Incorrect request ID tracking from responder to backend</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4" date="1661515200">- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4.1" date="1665662400">- Resolves: rhbz#2128544 - Cannot SSH with AD user to ipa-client (`krb5_validate` and `pac_check` settings conflict) [rhel-8.7.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4.2" date="1670587200">- Resolves: rhbz#2139871 - Analyzer: Optimize and remove duplicate messages in verbose list [rhel-8.7.0.z]
- Resolves: rhbz#2142961 - SSSD: `sssctl analyze` command shouldn't require 'root' privileged [rhel-8.7.0.z]
- Resolves: rhbz#2148989 - UPN check cannot be disabled explicitly but requires krb5_validate = false' as a work-around [rhel-8.7.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4.3" date="1671105600">- Resolves: rhbz#2152883 - authenticating against external IdP services okta (native app) with OAuth client secret failed [rhel-8.7.0.z]</changelog>
</package>
<package pkgid="8285cffe12670dc21ba71d1e47d223871ce3fdd47725330bd5c345e8fa82c403" name="libitm" arch="i686">
  <version epoch="0" ver="8.5.0" rel="16.el8_7"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-7" date="1639137600">- backport PCH tweaks (#2030878)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-8" date="1643025600">- aarch64: Add -mtune=neoverse-512tvb (#1845932)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-9" date="1643025601">- apply cprop_hardreg fix for narrow mode != lowpart targets (#2028609)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-10" date="1643284800">- fix typo in the cprop_hardreg patch (#2028609)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-11" date="1648641600">- Add a plugin-annobin subpackage.  (#2067150)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-12" date="1648814400">- Fix nop generation in annobin plugin.  (#2067150)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-13" date="1650456000">- require docbook-style-xsl instead of docbook5-style-xsl (#2073888)
- backport Default widths with -fdec-format-defaults patch (#2074614)</changelog>
  <changelog author="Jonathan Wakely &lt;jwakely@redhat.com&gt; 8.5.0-14" date="1657281600">- backport std::regex check for invalid range (#2001788)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-15" date="1658318400">- backport straight-line-speculation mitigation (#2108721)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-16" date="1668772800">- fix deserialization for std::normal_distribution (#2144075,
  PR libstdc++/105502)</changelog>
</package>
<package pkgid="777edc9ed9ce524a4349dc2ec246f7e322bb599f57fc42c490c773bfd0e70774" name="libitm" arch="x86_64">
  <version epoch="0" ver="8.5.0" rel="16.el8_7"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-7" date="1639137600">- backport PCH tweaks (#2030878)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-8" date="1643025600">- aarch64: Add -mtune=neoverse-512tvb (#1845932)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-9" date="1643025601">- apply cprop_hardreg fix for narrow mode != lowpart targets (#2028609)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-10" date="1643284800">- fix typo in the cprop_hardreg patch (#2028609)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-11" date="1648641600">- Add a plugin-annobin subpackage.  (#2067150)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-12" date="1648814400">- Fix nop generation in annobin plugin.  (#2067150)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-13" date="1650456000">- require docbook-style-xsl instead of docbook5-style-xsl (#2073888)
- backport Default widths with -fdec-format-defaults patch (#2074614)</changelog>
  <changelog author="Jonathan Wakely &lt;jwakely@redhat.com&gt; 8.5.0-14" date="1657281600">- backport std::regex check for invalid range (#2001788)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-15" date="1658318400">- backport straight-line-speculation mitigation (#2108721)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-16" date="1668772800">- fix deserialization for std::normal_distribution (#2144075,
  PR libstdc++/105502)</changelog>
</package>
<package pkgid="9667afb8449d5047667a13cddcff52e5123cd3424bb1a6b5348a053f11e5804b" name="libkadm5" arch="i686">
  <version epoch="0" ver="1.18.2" rel="22.el8_7"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.18.2-10" date="1620043200">- Update tmpfiles dropin to use /run instead of /var/run
- Resolves: #1945679</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.18.2-11" date="1623326400">- Add APIs for marshalling credentials
- Resolves: #1964619</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.18.2-12" date="1623326401">- Backport KCM performance enablements
- Resolves: #1956388</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.18.2-13" date="1626782400">- Fix KDC null deref on bad encrypted challenge (CVE-2021-36222)
- Resolves: #1983729</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.18.2-14" date="1629892800">- Fix KDC null deref on TGS inner body null server (CVE-2021-37750)
- Resolves: #1997601</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.18.2-15" date="1647864000">- Backport usage of SHA-256 instead of SHA-1 for PKINIT CMS digest
- Resolves: #2066316</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.18.2-18" date="1649851200">- Fix kprop for propagating dump files larger than 4GB
- Resolves: #2026462</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.18.2-19" date="1651060800">- Try harder to avoid password change replay errors
- Resolves: #2077563</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.18.2-21" date="1656676800">- Backport fix of memory use after free during libkrad cleanup
- Backport support for larger RADIUS attributes in libkrad
- Resolves: rhbz#2103125</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1." date="1667908800">- Fix integer overflows in PAC parsing (CVE-2022-42898)
- Resolves: rhbz#2140967</changelog>
</package>
<package pkgid="79445295a4e6a2db45b13e3d04fb00aaa395687f8c1ab04354e2e55ba30404cc" name="libkadm5" arch="x86_64">
  <version epoch="0" ver="1.18.2" rel="22.el8_7"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.18.2-10" date="1620043200">- Update tmpfiles dropin to use /run instead of /var/run
- Resolves: #1945679</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.18.2-11" date="1623326400">- Add APIs for marshalling credentials
- Resolves: #1964619</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.18.2-12" date="1623326401">- Backport KCM performance enablements
- Resolves: #1956388</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.18.2-13" date="1626782400">- Fix KDC null deref on bad encrypted challenge (CVE-2021-36222)
- Resolves: #1983729</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.18.2-14" date="1629892800">- Fix KDC null deref on TGS inner body null server (CVE-2021-37750)
- Resolves: #1997601</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.18.2-15" date="1647864000">- Backport usage of SHA-256 instead of SHA-1 for PKINIT CMS digest
- Resolves: #2066316</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.18.2-18" date="1649851200">- Fix kprop for propagating dump files larger than 4GB
- Resolves: #2026462</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.18.2-19" date="1651060800">- Try harder to avoid password change replay errors
- Resolves: #2077563</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.18.2-21" date="1656676800">- Backport fix of memory use after free during libkrad cleanup
- Backport support for larger RADIUS attributes in libkrad
- Resolves: rhbz#2103125</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1." date="1667908800">- Fix integer overflows in PAC parsing (CVE-2022-42898)
- Resolves: rhbz#2140967</changelog>
</package>
<package pkgid="cd136c7f6ef2428b7e1688a6bb5d327d7b37384c762eb185ca136d18887de524" name="libksba" arch="i686">
  <version epoch="0" ver="1.3.5" rel="9.el8_7"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.3.4-1" date="1463054400">- new upstream release fixing minor security issues</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.3.5-1" date="1472472000">- new upstream release fixing minor security issues</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.3.5-2" date="1486036800">- mark license files as such in the file list (#1418513)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.5-3" date="1486728000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.5-4" date="1501070400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.5-5" date="1501761600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild</changelog>
  <changelog author="Igor Gnatenko &lt;ignatenkobrain@fedoraproject.org&gt; - 1.3.5-6" date="1517659200">- Switch to %ldconfig_scriptlets</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.5-7" date="1518004800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.3.5-8" date="1666180800">- Fix for CVE-2022-3515 (#2135702)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.3.5-9" date="1674648000">- Fix for CVE-2022-47629 (#2161571)</changelog>
</package>
<package pkgid="e9eb62fd2406cd24cb0dd4d17957219fbc41596c9543c5ec2c8edb2e4e43a22d" name="libksba" arch="x86_64">
  <version epoch="0" ver="1.3.5" rel="9.el8_7"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.3.4-1" date="1463054400">- new upstream release fixing minor security issues</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.3.5-1" date="1472472000">- new upstream release fixing minor security issues</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.3.5-2" date="1486036800">- mark license files as such in the file list (#1418513)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.5-3" date="1486728000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.5-4" date="1501070400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.5-5" date="1501761600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild</changelog>
  <changelog author="Igor Gnatenko &lt;ignatenkobrain@fedoraproject.org&gt; - 1.3.5-6" date="1517659200">- Switch to %ldconfig_scriptlets</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.5-7" date="1518004800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.3.5-8" date="1666180800">- Fix for CVE-2022-3515 (#2135702)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.3.5-9" date="1674648000">- Fix for CVE-2022-47629 (#2161571)</changelog>
</package>
<package pkgid="1fc202882b34b1a9ac8e522bea1299194d0854b1c5a53d5d0f083b518879d931" name="liblsan" arch="x86_64">
  <version epoch="0" ver="8.5.0" rel="16.el8_7"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-7" date="1639137600">- backport PCH tweaks (#2030878)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-8" date="1643025600">- aarch64: Add -mtune=neoverse-512tvb (#1845932)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-9" date="1643025601">- apply cprop_hardreg fix for narrow mode != lowpart targets (#2028609)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-10" date="1643284800">- fix typo in the cprop_hardreg patch (#2028609)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-11" date="1648641600">- Add a plugin-annobin subpackage.  (#2067150)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-12" date="1648814400">- Fix nop generation in annobin plugin.  (#2067150)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-13" date="1650456000">- require docbook-style-xsl instead of docbook5-style-xsl (#2073888)
- backport Default widths with -fdec-format-defaults patch (#2074614)</changelog>
  <changelog author="Jonathan Wakely &lt;jwakely@redhat.com&gt; 8.5.0-14" date="1657281600">- backport std::regex check for invalid range (#2001788)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-15" date="1658318400">- backport straight-line-speculation mitigation (#2108721)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-16" date="1668772800">- fix deserialization for std::normal_distribution (#2144075,
  PR libstdc++/105502)</changelog>
</package>
<package pkgid="5be35264fdbc6083bbf68f2fca3c646958119630b6b78499d077b184004f1d1d" name="libmount" arch="i686">
  <version epoch="0" ver="2.32.1" rel="39.el8_7"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-29" date="1638878400">- fix #1988955 - script command continues without stopping.
- fix #2041498 - incorrect partition size calculation for BLKPG_* ioctls
- fix #2011602 - logger from util-linux incorrectly handles long messages
- fix #1916151 - [RFE] spread fstrim.timer across time
- fix #1894192 - Update or backport setpriv --pdeathsig
- fix #2026511 - blkid fails to complete when targeting  non-block devices</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-30" date="1641211200">- update lib-sys-add-sysfs_chrdev_devno_to_devname.patch (#2026511)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-31" date="1641902400">- improve #2026511 fix - blkid fails to complete when targeting non-block devices
- fix #1950187 - Ambient capabilities failed to applied to non-root user</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-32" date="1642420800">- change bug number (#2016229 to #2041498)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-34" date="1642420801">- rebuild after revert</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-35" date="1646740800">- fix #2058176 - losetup Retry LOOP_SET_STATUS64 on EAGAIN</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-36" date="1657800000">- fix #2060030 - Please backport patches for atari partition detection to RHEL 8
- fix #2069187 - Internal testsuite for lscpu failed on aarch64
- fix #2093166 - lslogins reports incorrect "Password is locked" status
- fix #2059241 - rpm -V / --verify reports bad user/group/mtime for /run/uuidd
- fix #2044592 - Move /var/log/lastlog ownership to systemd</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-37" date="1657886400">- update atari partition tests (related to #2060030)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-38" date="1661169600">- improve tmpfiles.d use in spec file (related to #2059241)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-39" date="1668600000">- fix #2141969 - Add --cont-clock feature for libuuid and uuidd</changelog>
</package>
<package pkgid="d3ee6f9049c32e54271ce40512395d422e0423dd976fb6e393a7073399c9009c" name="libmount" arch="x86_64">
  <version epoch="0" ver="2.32.1" rel="39.el8_7"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-29" date="1638878400">- fix #1988955 - script command continues without stopping.
- fix #2041498 - incorrect partition size calculation for BLKPG_* ioctls
- fix #2011602 - logger from util-linux incorrectly handles long messages
- fix #1916151 - [RFE] spread fstrim.timer across time
- fix #1894192 - Update or backport setpriv --pdeathsig
- fix #2026511 - blkid fails to complete when targeting  non-block devices</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-30" date="1641211200">- update lib-sys-add-sysfs_chrdev_devno_to_devname.patch (#2026511)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-31" date="1641902400">- improve #2026511 fix - blkid fails to complete when targeting non-block devices
- fix #1950187 - Ambient capabilities failed to applied to non-root user</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-32" date="1642420800">- change bug number (#2016229 to #2041498)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-34" date="1642420801">- rebuild after revert</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-35" date="1646740800">- fix #2058176 - losetup Retry LOOP_SET_STATUS64 on EAGAIN</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-36" date="1657800000">- fix #2060030 - Please backport patches for atari partition detection to RHEL 8
- fix #2069187 - Internal testsuite for lscpu failed on aarch64
- fix #2093166 - lslogins reports incorrect "Password is locked" status
- fix #2059241 - rpm -V / --verify reports bad user/group/mtime for /run/uuidd
- fix #2044592 - Move /var/log/lastlog ownership to systemd</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-37" date="1657886400">- update atari partition tests (related to #2060030)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-38" date="1661169600">- improve tmpfiles.d use in spec file (related to #2059241)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-39" date="1668600000">- fix #2141969 - Add --cont-clock feature for libuuid and uuidd</changelog>
</package>
<package pkgid="8c4c8851b5abac1c6d1e2e5b8afd4ca0f0323fe50ff507b4e395560c41118ade" name="libnfsidmap" arch="i686">
  <version epoch="1" ver="2.3.3" rel="57.el8_7.1"/>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 2.3.3-49" date="1644840000">- mount.nfs Fix error reporting for already mounted shares (bz 1946346)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 2.3.3-50" date="1645272000">- mount.nfs: Fix Typo auto negotiating code. (bz 1946346)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 2.3.3-51" date="1646654400">- libnfsidmap: Turn off default verbosity (bz 2057612)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 2.3.3-52" date="1653393600">- manpage: Add a description of the softreval/nosoftreval (bz 2073476)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 2.3.3-53" date="1653998400">- rpcctl: Add a rpcctl.py tool (bz 2087187)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 2.3.3-54" date="1655208000">- Create the nfsrahead command (bz 1946283)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 2.3.3-55" date="1656331200">- rpcctl: Remove subparser required option as that was added in py3.7 (bz 2087187)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 2.3.3-56" date="1656590400">- rpcctl: 'PosixPath' object has no attribute 'readlink' (bz 2087187)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 2.3.3-57" date="1659441600">- rpc-statd.service: Stop rpcbind and rpc.stat in an exit race (bz 2100395)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 2.3.3-57_7.1" date="1670414400">- mountd: Check 'nfsd/clients' directory presence (bz 2150899)</changelog>
</package>
<package pkgid="e55c9d0dbdd7a031de59352ca640736bc504820ad86110a739a26066cdd8c51c" name="libnfsidmap" arch="x86_64">
  <version epoch="1" ver="2.3.3" rel="57.el8_7.1"/>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 2.3.3-49" date="1644840000">- mount.nfs Fix error reporting for already mounted shares (bz 1946346)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 2.3.3-50" date="1645272000">- mount.nfs: Fix Typo auto negotiating code. (bz 1946346)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 2.3.3-51" date="1646654400">- libnfsidmap: Turn off default verbosity (bz 2057612)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 2.3.3-52" date="1653393600">- manpage: Add a description of the softreval/nosoftreval (bz 2073476)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 2.3.3-53" date="1653998400">- rpcctl: Add a rpcctl.py tool (bz 2087187)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 2.3.3-54" date="1655208000">- Create the nfsrahead command (bz 1946283)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 2.3.3-55" date="1656331200">- rpcctl: Remove subparser required option as that was added in py3.7 (bz 2087187)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 2.3.3-56" date="1656590400">- rpcctl: 'PosixPath' object has no attribute 'readlink' (bz 2087187)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 2.3.3-57" date="1659441600">- rpc-statd.service: Stop rpcbind and rpc.stat in an exit race (bz 2100395)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 2.3.3-57_7.1" date="1670414400">- mountd: Check 'nfsd/clients' directory presence (bz 2150899)</changelog>
</package>
<package pkgid="0c5b4ec29efdf25003070ec78ecb34e019b9e43a1ea954676cf515344e087440" name="libqb" arch="i686">
  <version epoch="0" ver="1.0.3" rel="13.el8_7"/>
  <changelog author="Igor Gnatenko &lt;ignatenkobrain@fedoraproject.org&gt; - 1.0.3-3" date="1518177600">- Escape macros in %changelog</changelog>
  <changelog author="Adam Williamson &lt;awilliam@redhat.com&gt; - 1.0.3-4" date="1520424000">- Rebuild to fix GCC 8 mis-compilation
  See https://da.gd/YJVwk ("GCC 8 ABI change on x86_64")</changelog>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; - 1.0.3-5" date="1528200000">- Rebuild with newer binutils (hopefully to fix pacemaker/corosync linkage issue)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 1.0.3-6" date="1532952000">- Rebuild with fixed binutils</changelog>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; - 1.0.3-7" date="1537185600">- Remove linker magic in the logging code.
  Resolves: rhbz#1615945</changelog>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; - 1.0.3-8" date="1553774400">- Add RHEL-8.1 gating tests
  Resolves: rhbz#1682119</changelog>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; - 1.0.3-9" date="1559822400">Improve security of SHM files used for IPCs
  Resolves: rhbz#1714854</changelog>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; - 1.0.3-10" date="1560168000">Avoid deadlock in IPC connections
  Resolves: rhbz#1718773</changelog>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; - 1.0.3-11" date="1589976000">Correctly set socket directory permissions when
  qb_ipcs_connection_auth_set() is called
  Resolves: rhbz#1836146</changelog>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; - 1.0.3-13" date="1670846400">ipc: Retry receiving credentials if the the message is short
  Resolves: rhbz#2151300</changelog>
</package>
<package pkgid="dd671454d50f1338d79e0dfd0e1f7ef8fbfdc44b2d5126a0587185ca5ca07370" name="libqb" arch="x86_64">
  <version epoch="0" ver="1.0.3" rel="13.el8_7"/>
  <changelog author="Igor Gnatenko &lt;ignatenkobrain@fedoraproject.org&gt; - 1.0.3-3" date="1518177600">- Escape macros in %changelog</changelog>
  <changelog author="Adam Williamson &lt;awilliam@redhat.com&gt; - 1.0.3-4" date="1520424000">- Rebuild to fix GCC 8 mis-compilation
  See https://da.gd/YJVwk ("GCC 8 ABI change on x86_64")</changelog>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; - 1.0.3-5" date="1528200000">- Rebuild with newer binutils (hopefully to fix pacemaker/corosync linkage issue)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 1.0.3-6" date="1532952000">- Rebuild with fixed binutils</changelog>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; - 1.0.3-7" date="1537185600">- Remove linker magic in the logging code.
  Resolves: rhbz#1615945</changelog>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; - 1.0.3-8" date="1553774400">- Add RHEL-8.1 gating tests
  Resolves: rhbz#1682119</changelog>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; - 1.0.3-9" date="1559822400">Improve security of SHM files used for IPCs
  Resolves: rhbz#1714854</changelog>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; - 1.0.3-10" date="1560168000">Avoid deadlock in IPC connections
  Resolves: rhbz#1718773</changelog>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; - 1.0.3-11" date="1589976000">Correctly set socket directory permissions when
  qb_ipcs_connection_auth_set() is called
  Resolves: rhbz#1836146</changelog>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; - 1.0.3-13" date="1670846400">ipc: Retry receiving credentials if the the message is short
  Resolves: rhbz#2151300</changelog>
</package>
<package pkgid="0e8db59f43e8a34b4c0faf795ed1f08c3cca6a9fa21dc31fbcacd017dbca8c29" name="libqb-devel" arch="i686">
  <version epoch="0" ver="1.0.3" rel="13.el8_7"/>
  <changelog author="Igor Gnatenko &lt;ignatenkobrain@fedoraproject.org&gt; - 1.0.3-3" date="1518177600">- Escape macros in %changelog</changelog>
  <changelog author="Adam Williamson &lt;awilliam@redhat.com&gt; - 1.0.3-4" date="1520424000">- Rebuild to fix GCC 8 mis-compilation
  See https://da.gd/YJVwk ("GCC 8 ABI change on x86_64")</changelog>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; - 1.0.3-5" date="1528200000">- Rebuild with newer binutils (hopefully to fix pacemaker/corosync linkage issue)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 1.0.3-6" date="1532952000">- Rebuild with fixed binutils</changelog>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; - 1.0.3-7" date="1537185600">- Remove linker magic in the logging code.
  Resolves: rhbz#1615945</changelog>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; - 1.0.3-8" date="1553774400">- Add RHEL-8.1 gating tests
  Resolves: rhbz#1682119</changelog>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; - 1.0.3-9" date="1559822400">Improve security of SHM files used for IPCs
  Resolves: rhbz#1714854</changelog>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; - 1.0.3-10" date="1560168000">Avoid deadlock in IPC connections
  Resolves: rhbz#1718773</changelog>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; - 1.0.3-11" date="1589976000">Correctly set socket directory permissions when
  qb_ipcs_connection_auth_set() is called
  Resolves: rhbz#1836146</changelog>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; - 1.0.3-13" date="1670846400">ipc: Retry receiving credentials if the the message is short
  Resolves: rhbz#2151300</changelog>
</package>
<package pkgid="605f9199503ba63697613e0ea01ba2600b007badb5e554da61adca538a7d36c8" name="libqb-devel" arch="x86_64">
  <version epoch="0" ver="1.0.3" rel="13.el8_7"/>
  <changelog author="Igor Gnatenko &lt;ignatenkobrain@fedoraproject.org&gt; - 1.0.3-3" date="1518177600">- Escape macros in %changelog</changelog>
  <changelog author="Adam Williamson &lt;awilliam@redhat.com&gt; - 1.0.3-4" date="1520424000">- Rebuild to fix GCC 8 mis-compilation
  See https://da.gd/YJVwk ("GCC 8 ABI change on x86_64")</changelog>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; - 1.0.3-5" date="1528200000">- Rebuild with newer binutils (hopefully to fix pacemaker/corosync linkage issue)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 1.0.3-6" date="1532952000">- Rebuild with fixed binutils</changelog>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; - 1.0.3-7" date="1537185600">- Remove linker magic in the logging code.
  Resolves: rhbz#1615945</changelog>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; - 1.0.3-8" date="1553774400">- Add RHEL-8.1 gating tests
  Resolves: rhbz#1682119</changelog>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; - 1.0.3-9" date="1559822400">Improve security of SHM files used for IPCs
  Resolves: rhbz#1714854</changelog>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; - 1.0.3-10" date="1560168000">Avoid deadlock in IPC connections
  Resolves: rhbz#1718773</changelog>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; - 1.0.3-11" date="1589976000">Correctly set socket directory permissions when
  qb_ipcs_connection_auth_set() is called
  Resolves: rhbz#1836146</changelog>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; - 1.0.3-13" date="1670846400">ipc: Retry receiving credentials if the the message is short
  Resolves: rhbz#2151300</changelog>
</package>
<package pkgid="7710e524c20a76bd77925527b616e7bf3ee5f29498ee37ea40fd6eeec57a04a9" name="libquadmath" arch="i686">
  <version epoch="0" ver="8.5.0" rel="16.el8_7"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-7" date="1639137600">- backport PCH tweaks (#2030878)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-8" date="1643025600">- aarch64: Add -mtune=neoverse-512tvb (#1845932)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-9" date="1643025601">- apply cprop_hardreg fix for narrow mode != lowpart targets (#2028609)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-10" date="1643284800">- fix typo in the cprop_hardreg patch (#2028609)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-11" date="1648641600">- Add a plugin-annobin subpackage.  (#2067150)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-12" date="1648814400">- Fix nop generation in annobin plugin.  (#2067150)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-13" date="1650456000">- require docbook-style-xsl instead of docbook5-style-xsl (#2073888)
- backport Default widths with -fdec-format-defaults patch (#2074614)</changelog>
  <changelog author="Jonathan Wakely &lt;jwakely@redhat.com&gt; 8.5.0-14" date="1657281600">- backport std::regex check for invalid range (#2001788)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-15" date="1658318400">- backport straight-line-speculation mitigation (#2108721)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-16" date="1668772800">- fix deserialization for std::normal_distribution (#2144075,
  PR libstdc++/105502)</changelog>
</package>
<package pkgid="d7626549b8597606523bc7d64fb67ddfd09d6a38572e758910cef9cdc954c9b7" name="libquadmath" arch="x86_64">
  <version epoch="0" ver="8.5.0" rel="16.el8_7"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-7" date="1639137600">- backport PCH tweaks (#2030878)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-8" date="1643025600">- aarch64: Add -mtune=neoverse-512tvb (#1845932)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-9" date="1643025601">- apply cprop_hardreg fix for narrow mode != lowpart targets (#2028609)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-10" date="1643284800">- fix typo in the cprop_hardreg patch (#2028609)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-11" date="1648641600">- Add a plugin-annobin subpackage.  (#2067150)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-12" date="1648814400">- Fix nop generation in annobin plugin.  (#2067150)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-13" date="1650456000">- require docbook-style-xsl instead of docbook5-style-xsl (#2073888)
- backport Default widths with -fdec-format-defaults patch (#2074614)</changelog>
  <changelog author="Jonathan Wakely &lt;jwakely@redhat.com&gt; 8.5.0-14" date="1657281600">- backport std::regex check for invalid range (#2001788)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-15" date="1658318400">- backport straight-line-speculation mitigation (#2108721)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-16" date="1668772800">- fix deserialization for std::normal_distribution (#2144075,
  PR libstdc++/105502)</changelog>
</package>
<package pkgid="6a1ca31d0dd954269e8803f9d366901de320cb57d203f95c6598da1ce38c8672" name="libsmartcols" arch="i686">
  <version epoch="0" ver="2.32.1" rel="39.el8_7"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-29" date="1638878400">- fix #1988955 - script command continues without stopping.
- fix #2041498 - incorrect partition size calculation for BLKPG_* ioctls
- fix #2011602 - logger from util-linux incorrectly handles long messages
- fix #1916151 - [RFE] spread fstrim.timer across time
- fix #1894192 - Update or backport setpriv --pdeathsig
- fix #2026511 - blkid fails to complete when targeting  non-block devices</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-30" date="1641211200">- update lib-sys-add-sysfs_chrdev_devno_to_devname.patch (#2026511)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-31" date="1641902400">- improve #2026511 fix - blkid fails to complete when targeting non-block devices
- fix #1950187 - Ambient capabilities failed to applied to non-root user</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-32" date="1642420800">- change bug number (#2016229 to #2041498)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-34" date="1642420801">- rebuild after revert</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-35" date="1646740800">- fix #2058176 - losetup Retry LOOP_SET_STATUS64 on EAGAIN</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-36" date="1657800000">- fix #2060030 - Please backport patches for atari partition detection to RHEL 8
- fix #2069187 - Internal testsuite for lscpu failed on aarch64
- fix #2093166 - lslogins reports incorrect "Password is locked" status
- fix #2059241 - rpm -V / --verify reports bad user/group/mtime for /run/uuidd
- fix #2044592 - Move /var/log/lastlog ownership to systemd</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-37" date="1657886400">- update atari partition tests (related to #2060030)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-38" date="1661169600">- improve tmpfiles.d use in spec file (related to #2059241)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-39" date="1668600000">- fix #2141969 - Add --cont-clock feature for libuuid and uuidd</changelog>
</package>
<package pkgid="3c5dac22ef495dea65c2e33d4159dc61d7af027d5883c40f7ca0f055c2afe3d1" name="libsmartcols" arch="x86_64">
  <version epoch="0" ver="2.32.1" rel="39.el8_7"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-29" date="1638878400">- fix #1988955 - script command continues without stopping.
- fix #2041498 - incorrect partition size calculation for BLKPG_* ioctls
- fix #2011602 - logger from util-linux incorrectly handles long messages
- fix #1916151 - [RFE] spread fstrim.timer across time
- fix #1894192 - Update or backport setpriv --pdeathsig
- fix #2026511 - blkid fails to complete when targeting  non-block devices</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-30" date="1641211200">- update lib-sys-add-sysfs_chrdev_devno_to_devname.patch (#2026511)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-31" date="1641902400">- improve #2026511 fix - blkid fails to complete when targeting non-block devices
- fix #1950187 - Ambient capabilities failed to applied to non-root user</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-32" date="1642420800">- change bug number (#2016229 to #2041498)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-34" date="1642420801">- rebuild after revert</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-35" date="1646740800">- fix #2058176 - losetup Retry LOOP_SET_STATUS64 on EAGAIN</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-36" date="1657800000">- fix #2060030 - Please backport patches for atari partition detection to RHEL 8
- fix #2069187 - Internal testsuite for lscpu failed on aarch64
- fix #2093166 - lslogins reports incorrect "Password is locked" status
- fix #2059241 - rpm -V / --verify reports bad user/group/mtime for /run/uuidd
- fix #2044592 - Move /var/log/lastlog ownership to systemd</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-37" date="1657886400">- update atari partition tests (related to #2060030)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-38" date="1661169600">- improve tmpfiles.d use in spec file (related to #2059241)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-39" date="1668600000">- fix #2141969 - Add --cont-clock feature for libuuid and uuidd</changelog>
</package>
<package pkgid="04daf452e10926b0b112623cf0892bec67d76e40b95633f7fbc6f431209c252e" name="libsmartcols-devel" arch="i686">
  <version epoch="0" ver="2.32.1" rel="39.el8_7"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-29" date="1638878400">- fix #1988955 - script command continues without stopping.
- fix #2041498 - incorrect partition size calculation for BLKPG_* ioctls
- fix #2011602 - logger from util-linux incorrectly handles long messages
- fix #1916151 - [RFE] spread fstrim.timer across time
- fix #1894192 - Update or backport setpriv --pdeathsig
- fix #2026511 - blkid fails to complete when targeting  non-block devices</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-30" date="1641211200">- update lib-sys-add-sysfs_chrdev_devno_to_devname.patch (#2026511)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-31" date="1641902400">- improve #2026511 fix - blkid fails to complete when targeting non-block devices
- fix #1950187 - Ambient capabilities failed to applied to non-root user</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-32" date="1642420800">- change bug number (#2016229 to #2041498)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-34" date="1642420801">- rebuild after revert</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-35" date="1646740800">- fix #2058176 - losetup Retry LOOP_SET_STATUS64 on EAGAIN</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-36" date="1657800000">- fix #2060030 - Please backport patches for atari partition detection to RHEL 8
- fix #2069187 - Internal testsuite for lscpu failed on aarch64
- fix #2093166 - lslogins reports incorrect "Password is locked" status
- fix #2059241 - rpm -V / --verify reports bad user/group/mtime for /run/uuidd
- fix #2044592 - Move /var/log/lastlog ownership to systemd</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-37" date="1657886400">- update atari partition tests (related to #2060030)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-38" date="1661169600">- improve tmpfiles.d use in spec file (related to #2059241)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-39" date="1668600000">- fix #2141969 - Add --cont-clock feature for libuuid and uuidd</changelog>
</package>
<package pkgid="93ea7fee95efa42060731e8e76cdbbad9660687a12a50c7af42bd1420eedf86b" name="libsmartcols-devel" arch="x86_64">
  <version epoch="0" ver="2.32.1" rel="39.el8_7"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-29" date="1638878400">- fix #1988955 - script command continues without stopping.
- fix #2041498 - incorrect partition size calculation for BLKPG_* ioctls
- fix #2011602 - logger from util-linux incorrectly handles long messages
- fix #1916151 - [RFE] spread fstrim.timer across time
- fix #1894192 - Update or backport setpriv --pdeathsig
- fix #2026511 - blkid fails to complete when targeting  non-block devices</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-30" date="1641211200">- update lib-sys-add-sysfs_chrdev_devno_to_devname.patch (#2026511)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-31" date="1641902400">- improve #2026511 fix - blkid fails to complete when targeting non-block devices
- fix #1950187 - Ambient capabilities failed to applied to non-root user</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-32" date="1642420800">- change bug number (#2016229 to #2041498)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-34" date="1642420801">- rebuild after revert</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-35" date="1646740800">- fix #2058176 - losetup Retry LOOP_SET_STATUS64 on EAGAIN</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-36" date="1657800000">- fix #2060030 - Please backport patches for atari partition detection to RHEL 8
- fix #2069187 - Internal testsuite for lscpu failed on aarch64
- fix #2093166 - lslogins reports incorrect "Password is locked" status
- fix #2059241 - rpm -V / --verify reports bad user/group/mtime for /run/uuidd
- fix #2044592 - Move /var/log/lastlog ownership to systemd</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-37" date="1657886400">- update atari partition tests (related to #2060030)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-38" date="1661169600">- improve tmpfiles.d use in spec file (related to #2059241)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-39" date="1668600000">- fix #2141969 - Add --cont-clock feature for libuuid and uuidd</changelog>
</package>
<package pkgid="ef7c847a87e77ca8c1af591593fd60d2fcd9a35e61d3f1da9a2196afe622a6fa" name="libsmbclient" arch="i686">
  <version epoch="0" ver="4.16.4" rel="4.el8_7"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.15.5-7" date="1650456000">- resolves: rhbz#2076505 - PAM Kerberos authentication fails with a clock skew error</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.15.5-8" date="1651060800">- resolves: rhbz#2070522 - Fix UPNs handling in lookup_name*() calls</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.1-0" date="1651492800">- Update to Samba 4.16.1
- resolves: rhbz#2077468 Rebase Samba to the the latest 4.16.x release</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.2-0" date="1655121600">- Fix rpminspect abidiff
- related: rhbz#2077468 - Rebase Samba to 4.16.2</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.2-1" date="1655208000">- resolves: rhbz#2084162 - Fix printer displays only after 300 seconds timeout</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.3-0" date="1658145600">- related: rhbz#2077468 - Rebase Samba to 4.16.3
- resolves: rhbz#2106672 - The pcap background queue process should not be stopped
- resolves: rhbz#2106263 - Fix crash in rpcd_classic
- resolves: rhbz#2100093 - Fix net ads info returns LDAP server and LDAP server name</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-1" date="1659009600">- Rebase to version 4.16.4
- resolves: rhbz#2108331 - Fix CVE-2022-32742</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-2" date="1661428800">- resolves: rhbz#2120956 - Do not require samba package in python3-samba</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-3" date="1671537600">- resolves: rhbz#2154369 - Fix CVE-2022-38023</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-4" date="1673870400">- related: rhbz#2154369 - Add additional patch for CVE-2022-38023</changelog>
</package>
<package pkgid="e09959d6afd9eeb6547221f77812f3b39ced421c7d076794fb15eba0145c3108" name="libsmbclient" arch="x86_64">
  <version epoch="0" ver="4.16.4" rel="4.el8_7"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.15.5-7" date="1650456000">- resolves: rhbz#2076505 - PAM Kerberos authentication fails with a clock skew error</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.15.5-8" date="1651060800">- resolves: rhbz#2070522 - Fix UPNs handling in lookup_name*() calls</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.1-0" date="1651492800">- Update to Samba 4.16.1
- resolves: rhbz#2077468 Rebase Samba to the the latest 4.16.x release</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.2-0" date="1655121600">- Fix rpminspect abidiff
- related: rhbz#2077468 - Rebase Samba to 4.16.2</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.2-1" date="1655208000">- resolves: rhbz#2084162 - Fix printer displays only after 300 seconds timeout</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.3-0" date="1658145600">- related: rhbz#2077468 - Rebase Samba to 4.16.3
- resolves: rhbz#2106672 - The pcap background queue process should not be stopped
- resolves: rhbz#2106263 - Fix crash in rpcd_classic
- resolves: rhbz#2100093 - Fix net ads info returns LDAP server and LDAP server name</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-1" date="1659009600">- Rebase to version 4.16.4
- resolves: rhbz#2108331 - Fix CVE-2022-32742</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-2" date="1661428800">- resolves: rhbz#2120956 - Do not require samba package in python3-samba</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-3" date="1671537600">- resolves: rhbz#2154369 - Fix CVE-2022-38023</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-4" date="1673870400">- related: rhbz#2154369 - Add additional patch for CVE-2022-38023</changelog>
</package>
<package pkgid="b2c45c10bc0d9ffacfbe16aad844c5b929a6f2e3e8ebc1173f2e23dbd60776e5" name="libsmbclient" arch="i686">
  <version epoch="0" ver="4.16.4" rel="6.el8_7"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.1-0" date="1651492800">- Update to Samba 4.16.1
- resolves: rhbz#2077468 Rebase Samba to the the latest 4.16.x release</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.2-0" date="1655121600">- Fix rpminspect abidiff
- related: rhbz#2077468 - Rebase Samba to 4.16.2</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.2-1" date="1655208000">- resolves: rhbz#2084162 - Fix printer displays only after 300 seconds timeout</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.3-0" date="1658145600">- related: rhbz#2077468 - Rebase Samba to 4.16.3
- resolves: rhbz#2106672 - The pcap background queue process should not be stopped
- resolves: rhbz#2106263 - Fix crash in rpcd_classic
- resolves: rhbz#2100093 - Fix net ads info returns LDAP server and LDAP server name</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-1" date="1659009600">- Rebase to version 4.16.4
- resolves: rhbz#2108331 - Fix CVE-2022-32742</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-2" date="1661428800">- resolves: rhbz#2120956 - Do not require samba package in python3-samba</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-3" date="1671537600">- resolves: rhbz#2154369 - Fix CVE-2022-38023</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-4" date="1673870400">- related: rhbz#2154369 - Add additional patch for CVE-2022-38023</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.4-5" date="1676548800">- resolves: rhbz#2170394 - Fix share enum
- resolves: rhbz#2170467 - Add to package ctdb dependency for package samba-winbind-clients
- resolves: rhbz#2170468 - Add package dcerpc - fix winbind to retrieve user groups from AD
- resolves: rhbz#2170469 - Create package samba-tools</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.4-6" date="1676548801">- resolves: rhbz#2170468 - Remove libnetapi dependency from dcerpc</changelog>
</package>
<package pkgid="c5ca3e1e39c78cc2edbe52da1f6c350d6eb56d34d60a32491d27a63a0ae80dc8" name="libsmbclient" arch="x86_64">
  <version epoch="0" ver="4.16.4" rel="6.el8_7"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.1-0" date="1651492800">- Update to Samba 4.16.1
- resolves: rhbz#2077468 Rebase Samba to the the latest 4.16.x release</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.2-0" date="1655121600">- Fix rpminspect abidiff
- related: rhbz#2077468 - Rebase Samba to 4.16.2</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.2-1" date="1655208000">- resolves: rhbz#2084162 - Fix printer displays only after 300 seconds timeout</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.3-0" date="1658145600">- related: rhbz#2077468 - Rebase Samba to 4.16.3
- resolves: rhbz#2106672 - The pcap background queue process should not be stopped
- resolves: rhbz#2106263 - Fix crash in rpcd_classic
- resolves: rhbz#2100093 - Fix net ads info returns LDAP server and LDAP server name</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-1" date="1659009600">- Rebase to version 4.16.4
- resolves: rhbz#2108331 - Fix CVE-2022-32742</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-2" date="1661428800">- resolves: rhbz#2120956 - Do not require samba package in python3-samba</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-3" date="1671537600">- resolves: rhbz#2154369 - Fix CVE-2022-38023</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-4" date="1673870400">- related: rhbz#2154369 - Add additional patch for CVE-2022-38023</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.4-5" date="1676548800">- resolves: rhbz#2170394 - Fix share enum
- resolves: rhbz#2170467 - Add to package ctdb dependency for package samba-winbind-clients
- resolves: rhbz#2170468 - Add package dcerpc - fix winbind to retrieve user groups from AD
- resolves: rhbz#2170469 - Create package samba-tools</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.4-6" date="1676548801">- resolves: rhbz#2170468 - Remove libnetapi dependency from dcerpc</changelog>
</package>
<package pkgid="fae0753a86f3c5cb9205adde7307d06bfa39f14e8abec3637ae965f8ffc5785e" name="libsolv" arch="i686">
  <version epoch="0" ver="0.7.20" rel="4.el8_7"/>
  <changelog author="Ales Matej &lt;amatej@redhat.org&gt; - 0.7.11-1" date="1586174400">- Update to 0.7.11
- selected bug fixes:
  * support arch&lt;-&gt;noarch package changes when creating patch
    conflicts from the updateinfo data
  * also support other rpm database types
  * fixed solv_zchunk decoding error if large chunks are used
  * treat retracted pathes as irrelevant
  * made add_update_target work with multiversion installs
- new features
  * support for SOLVER_BLACKLIST jobs that block the installation of matched
    packages unless they are directly selected by an SOLVER_INSTALL job
  * libsolv now also parses the patch status in the updateinfo parser
  * new solvable_matchessolvable() function
  * support conda constrains dependencies
  * new rpm_stat_database() function
  * new rpm_hash_database_state() function</changelog>
  <changelog author="Nicola Sella &lt;nsella@redhat.com&gt; - 0.7.16-1" date="1605096000">- Update to 0.7.16
- selected bug fixes:
  * make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]
  * fix add_complex_recommends() selecting conflicted packages in
    rare cases leading to crashes
  * improve choicerule generation so that package updates are
    prefered in more cases
  * fix deduceq2addedmap clearing bits outside of the map
  * conda: feature depriorization and fix startswith implementation
  * Fix solvable swapping messing up idarrays
  * fix ruleinfo of complex dependencies returning the wrong origin
  * fix solv_zchunk decoding error if large chunks are used
    [bnc#1159314]
- new features
  * new testcase_mangle_repo_names() function
  * new solv_fmemopen() function
  * Enable zstd compression support for sle15 and sle15-sp2
  * Support blacklisted packages in solver_findproblemrule()
    [bnc#1172135]
  * Support rules with multiple negative literals in choice rule
    generation
  * build with -DENABLE_RPMDB_LIBRPM=1 on SUSE to support
    multiple rpm database backends
  * added two new function to make libzypp independent of the rpm
    database format
  * support conda constrains dependencies</changelog>
  <changelog author="Nicola Sella &lt;nsella@redhat.com&gt; - 0.7.16-2" date="1610625600">- Enable zstd compression in libsolv</changelog>
  <changelog author="Pavla Kratochvilova &lt;pkratoch@redhat.org&gt; - 0.7.17-1" date="1619697600">- Update to 0.7.17
- selected bug fixes:
  * repo_write: fix handling of nested flexarray
  * improve choicerule generation a bit more to cover more cases
  * harden testcase parser against repos being added too late
  * support python-3.10
  * check /var/lib/rpm macro in rpmdb code
- new features:
  * handle default/visible/langonly attributes in comps parser
  * support multiple collections in updateinfo parser
  * add '-D' option in rpmdb2solv to set the dbpath</changelog>
  <changelog author="Pavla Kratochvilova &lt;pkratoch@redhat.org&gt; - 0.7.17-2" date="1619784000">- Fix rpm dependency</changelog>
  <changelog author="Pavla Kratochvilova &lt;pkratoch@redhat.org&gt; - 0.7.19-1" date="1627387200">- Update to 0.7.19
- repo_add_conda: add flag to skip v2 packages
- fix rare segfault in resolve_jobrules() that could happen if new rules are learnt
- fix error handling in solv_xfopen_fd()
- fix memory leaks</changelog>
  <changelog author="Pavla Kratochvilova &lt;pkratoch@redhat.com&gt; - 0.7.20-1" date="1636459200">- Update to 0.7.20
- new SOLVER_EXCLUDEFROMWEAK job to ignore pkgs for weak dependencies
- support for environments in comps parser
- fix misparsing of '&amp;' in attributes with libxml2
- choice rules: treat orphaned packages as newest
- fix compatibility with Python 3.10</changelog>
  <changelog author="Lukas Hrazky &lt;lhrazky@redhat.com&gt; - 0.7.20-2" date="1651665600">- Add support for storing user data in a solv file
- Improve choice rule generation</changelog>
  <changelog author="Lukas Hrazky &lt;lhrazky@redhat.com&gt; - 0.7.20-3" date="1651752000">- Allow accessing toolversion at runtime and increase it</changelog>
  <changelog author="Nicola Sella &lt;nsella@redhat.com&gt; - 0.7.20-4" date="1670846400">- Drop patch to fix pick of old build (RhBug:2151895)</changelog>
</package>
<package pkgid="63dde70b9307c452a674a93c78c29450ff090fd9eb783c6a9ac4de85c35531ae" name="libsolv" arch="x86_64">
  <version epoch="0" ver="0.7.20" rel="4.el8_7"/>
  <changelog author="Ales Matej &lt;amatej@redhat.org&gt; - 0.7.11-1" date="1586174400">- Update to 0.7.11
- selected bug fixes:
  * support arch&lt;-&gt;noarch package changes when creating patch
    conflicts from the updateinfo data
  * also support other rpm database types
  * fixed solv_zchunk decoding error if large chunks are used
  * treat retracted pathes as irrelevant
  * made add_update_target work with multiversion installs
- new features
  * support for SOLVER_BLACKLIST jobs that block the installation of matched
    packages unless they are directly selected by an SOLVER_INSTALL job
  * libsolv now also parses the patch status in the updateinfo parser
  * new solvable_matchessolvable() function
  * support conda constrains dependencies
  * new rpm_stat_database() function
  * new rpm_hash_database_state() function</changelog>
  <changelog author="Nicola Sella &lt;nsella@redhat.com&gt; - 0.7.16-1" date="1605096000">- Update to 0.7.16
- selected bug fixes:
  * make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]
  * fix add_complex_recommends() selecting conflicted packages in
    rare cases leading to crashes
  * improve choicerule generation so that package updates are
    prefered in more cases
  * fix deduceq2addedmap clearing bits outside of the map
  * conda: feature depriorization and fix startswith implementation
  * Fix solvable swapping messing up idarrays
  * fix ruleinfo of complex dependencies returning the wrong origin
  * fix solv_zchunk decoding error if large chunks are used
    [bnc#1159314]
- new features
  * new testcase_mangle_repo_names() function
  * new solv_fmemopen() function
  * Enable zstd compression support for sle15 and sle15-sp2
  * Support blacklisted packages in solver_findproblemrule()
    [bnc#1172135]
  * Support rules with multiple negative literals in choice rule
    generation
  * build with -DENABLE_RPMDB_LIBRPM=1 on SUSE to support
    multiple rpm database backends
  * added two new function to make libzypp independent of the rpm
    database format
  * support conda constrains dependencies</changelog>
  <changelog author="Nicola Sella &lt;nsella@redhat.com&gt; - 0.7.16-2" date="1610625600">- Enable zstd compression in libsolv</changelog>
  <changelog author="Pavla Kratochvilova &lt;pkratoch@redhat.org&gt; - 0.7.17-1" date="1619697600">- Update to 0.7.17
- selected bug fixes:
  * repo_write: fix handling of nested flexarray
  * improve choicerule generation a bit more to cover more cases
  * harden testcase parser against repos being added too late
  * support python-3.10
  * check /var/lib/rpm macro in rpmdb code
- new features:
  * handle default/visible/langonly attributes in comps parser
  * support multiple collections in updateinfo parser
  * add '-D' option in rpmdb2solv to set the dbpath</changelog>
  <changelog author="Pavla Kratochvilova &lt;pkratoch@redhat.org&gt; - 0.7.17-2" date="1619784000">- Fix rpm dependency</changelog>
  <changelog author="Pavla Kratochvilova &lt;pkratoch@redhat.org&gt; - 0.7.19-1" date="1627387200">- Update to 0.7.19
- repo_add_conda: add flag to skip v2 packages
- fix rare segfault in resolve_jobrules() that could happen if new rules are learnt
- fix error handling in solv_xfopen_fd()
- fix memory leaks</changelog>
  <changelog author="Pavla Kratochvilova &lt;pkratoch@redhat.com&gt; - 0.7.20-1" date="1636459200">- Update to 0.7.20
- new SOLVER_EXCLUDEFROMWEAK job to ignore pkgs for weak dependencies
- support for environments in comps parser
- fix misparsing of '&amp;' in attributes with libxml2
- choice rules: treat orphaned packages as newest
- fix compatibility with Python 3.10</changelog>
  <changelog author="Lukas Hrazky &lt;lhrazky@redhat.com&gt; - 0.7.20-2" date="1651665600">- Add support for storing user data in a solv file
- Improve choice rule generation</changelog>
  <changelog author="Lukas Hrazky &lt;lhrazky@redhat.com&gt; - 0.7.20-3" date="1651752000">- Allow accessing toolversion at runtime and increase it</changelog>
  <changelog author="Nicola Sella &lt;nsella@redhat.com&gt; - 0.7.20-4" date="1670846400">- Drop patch to fix pick of old build (RhBug:2151895)</changelog>
</package>
<package pkgid="13b76d1b51169f20a47d609adabcdf0826fbdce442c8caebf366fdc5b373d544" name="libsss_autofs" arch="x86_64">
  <version epoch="0" ver="2.7.3" rel="4.el8_7.1"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.6.2-1" date="1640606400">- Resolves: rhbz#2011216 - Rebase SSSD for RHEL 8.6
- Resolves: rhbz#2013260 - [RHEL8] Add ability to parse child log files
- Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries
- Resolves: rhbz#1859315 - sssd does not use kerberos port that is set.
- Resolves: rhbz#1961182 - Passwordless (GSSAPI) SSH not working due to missing "includedir /var/lib/sss/pubconf/krb5.include.d" directive in /etc/krb5.conf
- Resolves: rhbz#2008829 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2012263 - pam responder does not call initgroups to refresh the user entry
- Resolves: rhbz#2012308 - Add client certificate validation D-Bus API
- Resolves: rhbz#2012327 - Groups are missing while performing id lookup as SSSD switching to offline mode due to the wrong domain name in the ldap-pings(netlogon).
- Resolves: rhbz#2013028 - [RFE] Health and Support Analyzer: Add sssctl sub-command to select and display a single request from the logs
- Resolves: rhbz#2013259 - [RHEL8] Add tevent chain ID logic into responders
- Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.6.2-2" date="1641297600">- Resolves: rhbz#2013260 - [RHEL8] Add ability to parse child log files (additional patch)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.6.2-3" date="1642420800">- Resolves: rhbz#2039892 - 2.6.2 regression: Daemon crashes when resolving AD user names
- Resolves: rhbz#1859315 - sssd does not use kerberos port that is set.
- Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries
- Resolves: rhbz#2035245 - AD Domain in the AD Forest Missing after sssd latest update
- Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.0-2" date="1652875200">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2026799 - SSSD authenticating to LDAP with obfuscated password produces Invalid authtoken type message causing sssd_be to go offline (cross inter_ference of different provider plugins options)
- Resolves: rhbz#2033347 - sssd error triggers backtrace : [write_krb5info_file_from_fo_server] (0x0020): [RID#73501] There is no server that can be written into kdc info file.
- Resolves: rhbz#2056483 - [RFE] Add sssd internal krb5 plugin for authentication against external IdP via OAuth2
- Resolves: rhbz#2062689 - [Improvement] Add user and group version of sss_nss_getorigbyname()
- Resolves: rhbz#2065692 - [RHEL8] Ship new sub-package called sssd-idp into sssd
- Resolves: rhbz#2072050 - sssd_nss exiting (due to missing 'sssd' local user) making SSSD service to restart in a loop
- Resolves: rhbz#2072931 - Use right sdap_domain in ad_domain_info_send
- Resolves: rhbz#2087088 - sssd does not enforce smartcard auth for kde screen locker
- Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol
- Resolves: rhbz#2087745 - 2FA prompting setting ineffective
- Resolves: rhbz#2087746 - sssd fails GPO-based access if AD have setup with Japanese language</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.2-1" date="1655726400">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2098620 - sdap_nested_group_deref_direct_process() triggers internal watchdog for large data sets
- Resolves: rhbz#2098619 - [Improvement] add SSSD support for more than one CRL PEM file name with parameters certificate_verification and crl_file
- Resolves: rhbz#2088817 - pam_sss_gss ceased to work after upgrade to 8.6
- Resolves: rhbz#2098616 - Add idp authentication indicator in man page of sssd.conf
- Resolves: rhbz#2056035 - 'getent hosts' not return hosts if they have more than one CN in LDAP
- Resolves: rhbz#2098615 - Regression "Missing internal domain data." when setting ad_domain to incorrect
- Resolves: rhbz#2098617 - Harden kerberos ticket validation
- Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-1" date="1657713600">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2063016 - [sssd] RHEL 8.7 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-2" date="1660132800">- Resolves: rhbz#2116488 - virsh command will hang after the host run several auto test cases
- Resolves: rhbz#2116486 - [regression] sssctl analyze fails to parse PAM related sssd logs
- Resolves: rhbz#2116487 - cache_req_data_set_hybrid_lookup: cache_req_data should never be NULL</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-3" date="1661256000">- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8
- Resolves: rhbz#2119726 - sssctl analyze --logdir option requires sssd to be configured
- Resolves: rhbz#2120669 - Incorrect request ID tracking from responder to backend</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4" date="1661515200">- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4.1" date="1665662400">- Resolves: rhbz#2128544 - Cannot SSH with AD user to ipa-client (`krb5_validate` and `pac_check` settings conflict) [rhel-8.7.0.z]</changelog>
</package>
<package pkgid="f8197fc1264949c7613ae2a433f1e94f4441c4fde6367243731eeeff764e1426" name="libsss_autofs" arch="x86_64">
  <version epoch="0" ver="2.7.3" rel="4.el8_7.3"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.6.2-3" date="1642420800">- Resolves: rhbz#2039892 - 2.6.2 regression: Daemon crashes when resolving AD user names
- Resolves: rhbz#1859315 - sssd does not use kerberos port that is set.
- Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries
- Resolves: rhbz#2035245 - AD Domain in the AD Forest Missing after sssd latest update
- Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.0-2" date="1652875200">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2026799 - SSSD authenticating to LDAP with obfuscated password produces Invalid authtoken type message causing sssd_be to go offline (cross inter_ference of different provider plugins options)
- Resolves: rhbz#2033347 - sssd error triggers backtrace : [write_krb5info_file_from_fo_server] (0x0020): [RID#73501] There is no server that can be written into kdc info file.
- Resolves: rhbz#2056483 - [RFE] Add sssd internal krb5 plugin for authentication against external IdP via OAuth2
- Resolves: rhbz#2062689 - [Improvement] Add user and group version of sss_nss_getorigbyname()
- Resolves: rhbz#2065692 - [RHEL8] Ship new sub-package called sssd-idp into sssd
- Resolves: rhbz#2072050 - sssd_nss exiting (due to missing 'sssd' local user) making SSSD service to restart in a loop
- Resolves: rhbz#2072931 - Use right sdap_domain in ad_domain_info_send
- Resolves: rhbz#2087088 - sssd does not enforce smartcard auth for kde screen locker
- Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol
- Resolves: rhbz#2087745 - 2FA prompting setting ineffective
- Resolves: rhbz#2087746 - sssd fails GPO-based access if AD have setup with Japanese language</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.2-1" date="1655726400">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2098620 - sdap_nested_group_deref_direct_process() triggers internal watchdog for large data sets
- Resolves: rhbz#2098619 - [Improvement] add SSSD support for more than one CRL PEM file name with parameters certificate_verification and crl_file
- Resolves: rhbz#2088817 - pam_sss_gss ceased to work after upgrade to 8.6
- Resolves: rhbz#2098616 - Add idp authentication indicator in man page of sssd.conf
- Resolves: rhbz#2056035 - 'getent hosts' not return hosts if they have more than one CN in LDAP
- Resolves: rhbz#2098615 - Regression "Missing internal domain data." when setting ad_domain to incorrect
- Resolves: rhbz#2098617 - Harden kerberos ticket validation
- Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-1" date="1657713600">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2063016 - [sssd] RHEL 8.7 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-2" date="1660132800">- Resolves: rhbz#2116488 - virsh command will hang after the host run several auto test cases
- Resolves: rhbz#2116486 - [regression] sssctl analyze fails to parse PAM related sssd logs
- Resolves: rhbz#2116487 - cache_req_data_set_hybrid_lookup: cache_req_data should never be NULL</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-3" date="1661256000">- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8
- Resolves: rhbz#2119726 - sssctl analyze --logdir option requires sssd to be configured
- Resolves: rhbz#2120669 - Incorrect request ID tracking from responder to backend</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4" date="1661515200">- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4.1" date="1665662400">- Resolves: rhbz#2128544 - Cannot SSH with AD user to ipa-client (`krb5_validate` and `pac_check` settings conflict) [rhel-8.7.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4.2" date="1670587200">- Resolves: rhbz#2139871 - Analyzer: Optimize and remove duplicate messages in verbose list [rhel-8.7.0.z]
- Resolves: rhbz#2142961 - SSSD: `sssctl analyze` command shouldn't require 'root' privileged [rhel-8.7.0.z]
- Resolves: rhbz#2148989 - UPN check cannot be disabled explicitly but requires krb5_validate = false' as a work-around [rhel-8.7.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4.3" date="1671105600">- Resolves: rhbz#2152883 - authenticating against external IdP services okta (native app) with OAuth client secret failed [rhel-8.7.0.z]</changelog>
</package>
<package pkgid="6be318a2c5502c58d2e630602b7d866b6a1df59186453af316345f5a90fd9b80" name="libsss_certmap" arch="i686">
  <version epoch="0" ver="2.7.3" rel="4.el8_7.1"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.6.2-1" date="1640606400">- Resolves: rhbz#2011216 - Rebase SSSD for RHEL 8.6
- Resolves: rhbz#2013260 - [RHEL8] Add ability to parse child log files
- Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries
- Resolves: rhbz#1859315 - sssd does not use kerberos port that is set.
- Resolves: rhbz#1961182 - Passwordless (GSSAPI) SSH not working due to missing "includedir /var/lib/sss/pubconf/krb5.include.d" directive in /etc/krb5.conf
- Resolves: rhbz#2008829 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2012263 - pam responder does not call initgroups to refresh the user entry
- Resolves: rhbz#2012308 - Add client certificate validation D-Bus API
- Resolves: rhbz#2012327 - Groups are missing while performing id lookup as SSSD switching to offline mode due to the wrong domain name in the ldap-pings(netlogon).
- Resolves: rhbz#2013028 - [RFE] Health and Support Analyzer: Add sssctl sub-command to select and display a single request from the logs
- Resolves: rhbz#2013259 - [RHEL8] Add tevent chain ID logic into responders
- Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.6.2-2" date="1641297600">- Resolves: rhbz#2013260 - [RHEL8] Add ability to parse child log files (additional patch)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.6.2-3" date="1642420800">- Resolves: rhbz#2039892 - 2.6.2 regression: Daemon crashes when resolving AD user names
- Resolves: rhbz#1859315 - sssd does not use kerberos port that is set.
- Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries
- Resolves: rhbz#2035245 - AD Domain in the AD Forest Missing after sssd latest update
- Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.0-2" date="1652875200">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2026799 - SSSD authenticating to LDAP with obfuscated password produces Invalid authtoken type message causing sssd_be to go offline (cross inter_ference of different provider plugins options)
- Resolves: rhbz#2033347 - sssd error triggers backtrace : [write_krb5info_file_from_fo_server] (0x0020): [RID#73501] There is no server that can be written into kdc info file.
- Resolves: rhbz#2056483 - [RFE] Add sssd internal krb5 plugin for authentication against external IdP via OAuth2
- Resolves: rhbz#2062689 - [Improvement] Add user and group version of sss_nss_getorigbyname()
- Resolves: rhbz#2065692 - [RHEL8] Ship new sub-package called sssd-idp into sssd
- Resolves: rhbz#2072050 - sssd_nss exiting (due to missing 'sssd' local user) making SSSD service to restart in a loop
- Resolves: rhbz#2072931 - Use right sdap_domain in ad_domain_info_send
- Resolves: rhbz#2087088 - sssd does not enforce smartcard auth for kde screen locker
- Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol
- Resolves: rhbz#2087745 - 2FA prompting setting ineffective
- Resolves: rhbz#2087746 - sssd fails GPO-based access if AD have setup with Japanese language</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.2-1" date="1655726400">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2098620 - sdap_nested_group_deref_direct_process() triggers internal watchdog for large data sets
- Resolves: rhbz#2098619 - [Improvement] add SSSD support for more than one CRL PEM file name with parameters certificate_verification and crl_file
- Resolves: rhbz#2088817 - pam_sss_gss ceased to work after upgrade to 8.6
- Resolves: rhbz#2098616 - Add idp authentication indicator in man page of sssd.conf
- Resolves: rhbz#2056035 - 'getent hosts' not return hosts if they have more than one CN in LDAP
- Resolves: rhbz#2098615 - Regression "Missing internal domain data." when setting ad_domain to incorrect
- Resolves: rhbz#2098617 - Harden kerberos ticket validation
- Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-1" date="1657713600">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2063016 - [sssd] RHEL 8.7 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-2" date="1660132800">- Resolves: rhbz#2116488 - virsh command will hang after the host run several auto test cases
- Resolves: rhbz#2116486 - [regression] sssctl analyze fails to parse PAM related sssd logs
- Resolves: rhbz#2116487 - cache_req_data_set_hybrid_lookup: cache_req_data should never be NULL</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-3" date="1661256000">- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8
- Resolves: rhbz#2119726 - sssctl analyze --logdir option requires sssd to be configured
- Resolves: rhbz#2120669 - Incorrect request ID tracking from responder to backend</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4" date="1661515200">- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4.1" date="1665662400">- Resolves: rhbz#2128544 - Cannot SSH with AD user to ipa-client (`krb5_validate` and `pac_check` settings conflict) [rhel-8.7.0.z]</changelog>
</package>
<package pkgid="58a1c204a769bbeaea2a3a2cfca0fbc86312e809d1312917ccae52fef498d07b" name="libsss_certmap" arch="x86_64">
  <version epoch="0" ver="2.7.3" rel="4.el8_7.1"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.6.2-1" date="1640606400">- Resolves: rhbz#2011216 - Rebase SSSD for RHEL 8.6
- Resolves: rhbz#2013260 - [RHEL8] Add ability to parse child log files
- Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries
- Resolves: rhbz#1859315 - sssd does not use kerberos port that is set.
- Resolves: rhbz#1961182 - Passwordless (GSSAPI) SSH not working due to missing "includedir /var/lib/sss/pubconf/krb5.include.d" directive in /etc/krb5.conf
- Resolves: rhbz#2008829 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2012263 - pam responder does not call initgroups to refresh the user entry
- Resolves: rhbz#2012308 - Add client certificate validation D-Bus API
- Resolves: rhbz#2012327 - Groups are missing while performing id lookup as SSSD switching to offline mode due to the wrong domain name in the ldap-pings(netlogon).
- Resolves: rhbz#2013028 - [RFE] Health and Support Analyzer: Add sssctl sub-command to select and display a single request from the logs
- Resolves: rhbz#2013259 - [RHEL8] Add tevent chain ID logic into responders
- Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.6.2-2" date="1641297600">- Resolves: rhbz#2013260 - [RHEL8] Add ability to parse child log files (additional patch)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.6.2-3" date="1642420800">- Resolves: rhbz#2039892 - 2.6.2 regression: Daemon crashes when resolving AD user names
- Resolves: rhbz#1859315 - sssd does not use kerberos port that is set.
- Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries
- Resolves: rhbz#2035245 - AD Domain in the AD Forest Missing after sssd latest update
- Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.0-2" date="1652875200">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2026799 - SSSD authenticating to LDAP with obfuscated password produces Invalid authtoken type message causing sssd_be to go offline (cross inter_ference of different provider plugins options)
- Resolves: rhbz#2033347 - sssd error triggers backtrace : [write_krb5info_file_from_fo_server] (0x0020): [RID#73501] There is no server that can be written into kdc info file.
- Resolves: rhbz#2056483 - [RFE] Add sssd internal krb5 plugin for authentication against external IdP via OAuth2
- Resolves: rhbz#2062689 - [Improvement] Add user and group version of sss_nss_getorigbyname()
- Resolves: rhbz#2065692 - [RHEL8] Ship new sub-package called sssd-idp into sssd
- Resolves: rhbz#2072050 - sssd_nss exiting (due to missing 'sssd' local user) making SSSD service to restart in a loop
- Resolves: rhbz#2072931 - Use right sdap_domain in ad_domain_info_send
- Resolves: rhbz#2087088 - sssd does not enforce smartcard auth for kde screen locker
- Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol
- Resolves: rhbz#2087745 - 2FA prompting setting ineffective
- Resolves: rhbz#2087746 - sssd fails GPO-based access if AD have setup with Japanese language</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.2-1" date="1655726400">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2098620 - sdap_nested_group_deref_direct_process() triggers internal watchdog for large data sets
- Resolves: rhbz#2098619 - [Improvement] add SSSD support for more than one CRL PEM file name with parameters certificate_verification and crl_file
- Resolves: rhbz#2088817 - pam_sss_gss ceased to work after upgrade to 8.6
- Resolves: rhbz#2098616 - Add idp authentication indicator in man page of sssd.conf
- Resolves: rhbz#2056035 - 'getent hosts' not return hosts if they have more than one CN in LDAP
- Resolves: rhbz#2098615 - Regression "Missing internal domain data." when setting ad_domain to incorrect
- Resolves: rhbz#2098617 - Harden kerberos ticket validation
- Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-1" date="1657713600">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2063016 - [sssd] RHEL 8.7 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-2" date="1660132800">- Resolves: rhbz#2116488 - virsh command will hang after the host run several auto test cases
- Resolves: rhbz#2116486 - [regression] sssctl analyze fails to parse PAM related sssd logs
- Resolves: rhbz#2116487 - cache_req_data_set_hybrid_lookup: cache_req_data should never be NULL</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-3" date="1661256000">- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8
- Resolves: rhbz#2119726 - sssctl analyze --logdir option requires sssd to be configured
- Resolves: rhbz#2120669 - Incorrect request ID tracking from responder to backend</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4" date="1661515200">- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4.1" date="1665662400">- Resolves: rhbz#2128544 - Cannot SSH with AD user to ipa-client (`krb5_validate` and `pac_check` settings conflict) [rhel-8.7.0.z]</changelog>
</package>
<package pkgid="aeaea861db1715faf262d21a773dc5b6aee41ad6e301f177e6c46bf6564f687c" name="libsss_certmap" arch="i686">
  <version epoch="0" ver="2.7.3" rel="4.el8_7.3"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.6.2-3" date="1642420800">- Resolves: rhbz#2039892 - 2.6.2 regression: Daemon crashes when resolving AD user names
- Resolves: rhbz#1859315 - sssd does not use kerberos port that is set.
- Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries
- Resolves: rhbz#2035245 - AD Domain in the AD Forest Missing after sssd latest update
- Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.0-2" date="1652875200">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2026799 - SSSD authenticating to LDAP with obfuscated password produces Invalid authtoken type message causing sssd_be to go offline (cross inter_ference of different provider plugins options)
- Resolves: rhbz#2033347 - sssd error triggers backtrace : [write_krb5info_file_from_fo_server] (0x0020): [RID#73501] There is no server that can be written into kdc info file.
- Resolves: rhbz#2056483 - [RFE] Add sssd internal krb5 plugin for authentication against external IdP via OAuth2
- Resolves: rhbz#2062689 - [Improvement] Add user and group version of sss_nss_getorigbyname()
- Resolves: rhbz#2065692 - [RHEL8] Ship new sub-package called sssd-idp into sssd
- Resolves: rhbz#2072050 - sssd_nss exiting (due to missing 'sssd' local user) making SSSD service to restart in a loop
- Resolves: rhbz#2072931 - Use right sdap_domain in ad_domain_info_send
- Resolves: rhbz#2087088 - sssd does not enforce smartcard auth for kde screen locker
- Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol
- Resolves: rhbz#2087745 - 2FA prompting setting ineffective
- Resolves: rhbz#2087746 - sssd fails GPO-based access if AD have setup with Japanese language</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.2-1" date="1655726400">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2098620 - sdap_nested_group_deref_direct_process() triggers internal watchdog for large data sets
- Resolves: rhbz#2098619 - [Improvement] add SSSD support for more than one CRL PEM file name with parameters certificate_verification and crl_file
- Resolves: rhbz#2088817 - pam_sss_gss ceased to work after upgrade to 8.6
- Resolves: rhbz#2098616 - Add idp authentication indicator in man page of sssd.conf
- Resolves: rhbz#2056035 - 'getent hosts' not return hosts if they have more than one CN in LDAP
- Resolves: rhbz#2098615 - Regression "Missing internal domain data." when setting ad_domain to incorrect
- Resolves: rhbz#2098617 - Harden kerberos ticket validation
- Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-1" date="1657713600">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2063016 - [sssd] RHEL 8.7 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-2" date="1660132800">- Resolves: rhbz#2116488 - virsh command will hang after the host run several auto test cases
- Resolves: rhbz#2116486 - [regression] sssctl analyze fails to parse PAM related sssd logs
- Resolves: rhbz#2116487 - cache_req_data_set_hybrid_lookup: cache_req_data should never be NULL</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-3" date="1661256000">- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8
- Resolves: rhbz#2119726 - sssctl analyze --logdir option requires sssd to be configured
- Resolves: rhbz#2120669 - Incorrect request ID tracking from responder to backend</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4" date="1661515200">- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4.1" date="1665662400">- Resolves: rhbz#2128544 - Cannot SSH with AD user to ipa-client (`krb5_validate` and `pac_check` settings conflict) [rhel-8.7.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4.2" date="1670587200">- Resolves: rhbz#2139871 - Analyzer: Optimize and remove duplicate messages in verbose list [rhel-8.7.0.z]
- Resolves: rhbz#2142961 - SSSD: `sssctl analyze` command shouldn't require 'root' privileged [rhel-8.7.0.z]
- Resolves: rhbz#2148989 - UPN check cannot be disabled explicitly but requires krb5_validate = false' as a work-around [rhel-8.7.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4.3" date="1671105600">- Resolves: rhbz#2152883 - authenticating against external IdP services okta (native app) with OAuth client secret failed [rhel-8.7.0.z]</changelog>
</package>
<package pkgid="4acb7d9d6e5516836678aa832c5d1227ef1cd7cf35e03a20575eaa14df085f96" name="libsss_certmap" arch="x86_64">
  <version epoch="0" ver="2.7.3" rel="4.el8_7.3"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.6.2-3" date="1642420800">- Resolves: rhbz#2039892 - 2.6.2 regression: Daemon crashes when resolving AD user names
- Resolves: rhbz#1859315 - sssd does not use kerberos port that is set.
- Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries
- Resolves: rhbz#2035245 - AD Domain in the AD Forest Missing after sssd latest update
- Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.0-2" date="1652875200">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2026799 - SSSD authenticating to LDAP with obfuscated password produces Invalid authtoken type message causing sssd_be to go offline (cross inter_ference of different provider plugins options)
- Resolves: rhbz#2033347 - sssd error triggers backtrace : [write_krb5info_file_from_fo_server] (0x0020): [RID#73501] There is no server that can be written into kdc info file.
- Resolves: rhbz#2056483 - [RFE] Add sssd internal krb5 plugin for authentication against external IdP via OAuth2
- Resolves: rhbz#2062689 - [Improvement] Add user and group version of sss_nss_getorigbyname()
- Resolves: rhbz#2065692 - [RHEL8] Ship new sub-package called sssd-idp into sssd
- Resolves: rhbz#2072050 - sssd_nss exiting (due to missing 'sssd' local user) making SSSD service to restart in a loop
- Resolves: rhbz#2072931 - Use right sdap_domain in ad_domain_info_send
- Resolves: rhbz#2087088 - sssd does not enforce smartcard auth for kde screen locker
- Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol
- Resolves: rhbz#2087745 - 2FA prompting setting ineffective
- Resolves: rhbz#2087746 - sssd fails GPO-based access if AD have setup with Japanese language</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.2-1" date="1655726400">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2098620 - sdap_nested_group_deref_direct_process() triggers internal watchdog for large data sets
- Resolves: rhbz#2098619 - [Improvement] add SSSD support for more than one CRL PEM file name with parameters certificate_verification and crl_file
- Resolves: rhbz#2088817 - pam_sss_gss ceased to work after upgrade to 8.6
- Resolves: rhbz#2098616 - Add idp authentication indicator in man page of sssd.conf
- Resolves: rhbz#2056035 - 'getent hosts' not return hosts if they have more than one CN in LDAP
- Resolves: rhbz#2098615 - Regression "Missing internal domain data." when setting ad_domain to incorrect
- Resolves: rhbz#2098617 - Harden kerberos ticket validation
- Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-1" date="1657713600">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2063016 - [sssd] RHEL 8.7 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-2" date="1660132800">- Resolves: rhbz#2116488 - virsh command will hang after the host run several auto test cases
- Resolves: rhbz#2116486 - [regression] sssctl analyze fails to parse PAM related sssd logs
- Resolves: rhbz#2116487 - cache_req_data_set_hybrid_lookup: cache_req_data should never be NULL</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-3" date="1661256000">- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8
- Resolves: rhbz#2119726 - sssctl analyze --logdir option requires sssd to be configured
- Resolves: rhbz#2120669 - Incorrect request ID tracking from responder to backend</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4" date="1661515200">- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4.1" date="1665662400">- Resolves: rhbz#2128544 - Cannot SSH with AD user to ipa-client (`krb5_validate` and `pac_check` settings conflict) [rhel-8.7.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4.2" date="1670587200">- Resolves: rhbz#2139871 - Analyzer: Optimize and remove duplicate messages in verbose list [rhel-8.7.0.z]
- Resolves: rhbz#2142961 - SSSD: `sssctl analyze` command shouldn't require 'root' privileged [rhel-8.7.0.z]
- Resolves: rhbz#2148989 - UPN check cannot be disabled explicitly but requires krb5_validate = false' as a work-around [rhel-8.7.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4.3" date="1671105600">- Resolves: rhbz#2152883 - authenticating against external IdP services okta (native app) with OAuth client secret failed [rhel-8.7.0.z]</changelog>
</package>
<package pkgid="736c5628899fdb921741ebdaed92ccb410c16814e21f7ffb20befc8c294891cb" name="libsss_idmap" arch="i686">
  <version epoch="0" ver="2.7.3" rel="4.el8_7.1"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.6.2-1" date="1640606400">- Resolves: rhbz#2011216 - Rebase SSSD for RHEL 8.6
- Resolves: rhbz#2013260 - [RHEL8] Add ability to parse child log files
- Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries
- Resolves: rhbz#1859315 - sssd does not use kerberos port that is set.
- Resolves: rhbz#1961182 - Passwordless (GSSAPI) SSH not working due to missing "includedir /var/lib/sss/pubconf/krb5.include.d" directive in /etc/krb5.conf
- Resolves: rhbz#2008829 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2012263 - pam responder does not call initgroups to refresh the user entry
- Resolves: rhbz#2012308 - Add client certificate validation D-Bus API
- Resolves: rhbz#2012327 - Groups are missing while performing id lookup as SSSD switching to offline mode due to the wrong domain name in the ldap-pings(netlogon).
- Resolves: rhbz#2013028 - [RFE] Health and Support Analyzer: Add sssctl sub-command to select and display a single request from the logs
- Resolves: rhbz#2013259 - [RHEL8] Add tevent chain ID logic into responders
- Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.6.2-2" date="1641297600">- Resolves: rhbz#2013260 - [RHEL8] Add ability to parse child log files (additional patch)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.6.2-3" date="1642420800">- Resolves: rhbz#2039892 - 2.6.2 regression: Daemon crashes when resolving AD user names
- Resolves: rhbz#1859315 - sssd does not use kerberos port that is set.
- Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries
- Resolves: rhbz#2035245 - AD Domain in the AD Forest Missing after sssd latest update
- Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.0-2" date="1652875200">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2026799 - SSSD authenticating to LDAP with obfuscated password produces Invalid authtoken type message causing sssd_be to go offline (cross inter_ference of different provider plugins options)
- Resolves: rhbz#2033347 - sssd error triggers backtrace : [write_krb5info_file_from_fo_server] (0x0020): [RID#73501] There is no server that can be written into kdc info file.
- Resolves: rhbz#2056483 - [RFE] Add sssd internal krb5 plugin for authentication against external IdP via OAuth2
- Resolves: rhbz#2062689 - [Improvement] Add user and group version of sss_nss_getorigbyname()
- Resolves: rhbz#2065692 - [RHEL8] Ship new sub-package called sssd-idp into sssd
- Resolves: rhbz#2072050 - sssd_nss exiting (due to missing 'sssd' local user) making SSSD service to restart in a loop
- Resolves: rhbz#2072931 - Use right sdap_domain in ad_domain_info_send
- Resolves: rhbz#2087088 - sssd does not enforce smartcard auth for kde screen locker
- Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol
- Resolves: rhbz#2087745 - 2FA prompting setting ineffective
- Resolves: rhbz#2087746 - sssd fails GPO-based access if AD have setup with Japanese language</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.2-1" date="1655726400">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2098620 - sdap_nested_group_deref_direct_process() triggers internal watchdog for large data sets
- Resolves: rhbz#2098619 - [Improvement] add SSSD support for more than one CRL PEM file name with parameters certificate_verification and crl_file
- Resolves: rhbz#2088817 - pam_sss_gss ceased to work after upgrade to 8.6
- Resolves: rhbz#2098616 - Add idp authentication indicator in man page of sssd.conf
- Resolves: rhbz#2056035 - 'getent hosts' not return hosts if they have more than one CN in LDAP
- Resolves: rhbz#2098615 - Regression "Missing internal domain data." when setting ad_domain to incorrect
- Resolves: rhbz#2098617 - Harden kerberos ticket validation
- Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-1" date="1657713600">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2063016 - [sssd] RHEL 8.7 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-2" date="1660132800">- Resolves: rhbz#2116488 - virsh command will hang after the host run several auto test cases
- Resolves: rhbz#2116486 - [regression] sssctl analyze fails to parse PAM related sssd logs
- Resolves: rhbz#2116487 - cache_req_data_set_hybrid_lookup: cache_req_data should never be NULL</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-3" date="1661256000">- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8
- Resolves: rhbz#2119726 - sssctl analyze --logdir option requires sssd to be configured
- Resolves: rhbz#2120669 - Incorrect request ID tracking from responder to backend</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4" date="1661515200">- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4.1" date="1665662400">- Resolves: rhbz#2128544 - Cannot SSH with AD user to ipa-client (`krb5_validate` and `pac_check` settings conflict) [rhel-8.7.0.z]</changelog>
</package>
<package pkgid="c73c35a51675fa224b0f81197a38ef7062cc9d03bb79a312d4463d072d93a11b" name="libsss_idmap" arch="x86_64">
  <version epoch="0" ver="2.7.3" rel="4.el8_7.1"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.6.2-1" date="1640606400">- Resolves: rhbz#2011216 - Rebase SSSD for RHEL 8.6
- Resolves: rhbz#2013260 - [RHEL8] Add ability to parse child log files
- Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries
- Resolves: rhbz#1859315 - sssd does not use kerberos port that is set.
- Resolves: rhbz#1961182 - Passwordless (GSSAPI) SSH not working due to missing "includedir /var/lib/sss/pubconf/krb5.include.d" directive in /etc/krb5.conf
- Resolves: rhbz#2008829 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2012263 - pam responder does not call initgroups to refresh the user entry
- Resolves: rhbz#2012308 - Add client certificate validation D-Bus API
- Resolves: rhbz#2012327 - Groups are missing while performing id lookup as SSSD switching to offline mode due to the wrong domain name in the ldap-pings(netlogon).
- Resolves: rhbz#2013028 - [RFE] Health and Support Analyzer: Add sssctl sub-command to select and display a single request from the logs
- Resolves: rhbz#2013259 - [RHEL8] Add tevent chain ID logic into responders
- Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.6.2-2" date="1641297600">- Resolves: rhbz#2013260 - [RHEL8] Add ability to parse child log files (additional patch)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.6.2-3" date="1642420800">- Resolves: rhbz#2039892 - 2.6.2 regression: Daemon crashes when resolving AD user names
- Resolves: rhbz#1859315 - sssd does not use kerberos port that is set.
- Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries
- Resolves: rhbz#2035245 - AD Domain in the AD Forest Missing after sssd latest update
- Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.0-2" date="1652875200">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2026799 - SSSD authenticating to LDAP with obfuscated password produces Invalid authtoken type message causing sssd_be to go offline (cross inter_ference of different provider plugins options)
- Resolves: rhbz#2033347 - sssd error triggers backtrace : [write_krb5info_file_from_fo_server] (0x0020): [RID#73501] There is no server that can be written into kdc info file.
- Resolves: rhbz#2056483 - [RFE] Add sssd internal krb5 plugin for authentication against external IdP via OAuth2
- Resolves: rhbz#2062689 - [Improvement] Add user and group version of sss_nss_getorigbyname()
- Resolves: rhbz#2065692 - [RHEL8] Ship new sub-package called sssd-idp into sssd
- Resolves: rhbz#2072050 - sssd_nss exiting (due to missing 'sssd' local user) making SSSD service to restart in a loop
- Resolves: rhbz#2072931 - Use right sdap_domain in ad_domain_info_send
- Resolves: rhbz#2087088 - sssd does not enforce smartcard auth for kde screen locker
- Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol
- Resolves: rhbz#2087745 - 2FA prompting setting ineffective
- Resolves: rhbz#2087746 - sssd fails GPO-based access if AD have setup with Japanese language</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.2-1" date="1655726400">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2098620 - sdap_nested_group_deref_direct_process() triggers internal watchdog for large data sets
- Resolves: rhbz#2098619 - [Improvement] add SSSD support for more than one CRL PEM file name with parameters certificate_verification and crl_file
- Resolves: rhbz#2088817 - pam_sss_gss ceased to work after upgrade to 8.6
- Resolves: rhbz#2098616 - Add idp authentication indicator in man page of sssd.conf
- Resolves: rhbz#2056035 - 'getent hosts' not return hosts if they have more than one CN in LDAP
- Resolves: rhbz#2098615 - Regression "Missing internal domain data." when setting ad_domain to incorrect
- Resolves: rhbz#2098617 - Harden kerberos ticket validation
- Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-1" date="1657713600">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2063016 - [sssd] RHEL 8.7 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-2" date="1660132800">- Resolves: rhbz#2116488 - virsh command will hang after the host run several auto test cases
- Resolves: rhbz#2116486 - [regression] sssctl analyze fails to parse PAM related sssd logs
- Resolves: rhbz#2116487 - cache_req_data_set_hybrid_lookup: cache_req_data should never be NULL</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-3" date="1661256000">- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8
- Resolves: rhbz#2119726 - sssctl analyze --logdir option requires sssd to be configured
- Resolves: rhbz#2120669 - Incorrect request ID tracking from responder to backend</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4" date="1661515200">- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4.1" date="1665662400">- Resolves: rhbz#2128544 - Cannot SSH with AD user to ipa-client (`krb5_validate` and `pac_check` settings conflict) [rhel-8.7.0.z]</changelog>
</package>
<package pkgid="7c3883b7f20034fb44a9770d6c72b4394f44d54b9c0f2a9655991b6db39b8064" name="libsss_idmap" arch="i686">
  <version epoch="0" ver="2.7.3" rel="4.el8_7.3"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.6.2-3" date="1642420800">- Resolves: rhbz#2039892 - 2.6.2 regression: Daemon crashes when resolving AD user names
- Resolves: rhbz#1859315 - sssd does not use kerberos port that is set.
- Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries
- Resolves: rhbz#2035245 - AD Domain in the AD Forest Missing after sssd latest update
- Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.0-2" date="1652875200">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2026799 - SSSD authenticating to LDAP with obfuscated password produces Invalid authtoken type message causing sssd_be to go offline (cross inter_ference of different provider plugins options)
- Resolves: rhbz#2033347 - sssd error triggers backtrace : [write_krb5info_file_from_fo_server] (0x0020): [RID#73501] There is no server that can be written into kdc info file.
- Resolves: rhbz#2056483 - [RFE] Add sssd internal krb5 plugin for authentication against external IdP via OAuth2
- Resolves: rhbz#2062689 - [Improvement] Add user and group version of sss_nss_getorigbyname()
- Resolves: rhbz#2065692 - [RHEL8] Ship new sub-package called sssd-idp into sssd
- Resolves: rhbz#2072050 - sssd_nss exiting (due to missing 'sssd' local user) making SSSD service to restart in a loop
- Resolves: rhbz#2072931 - Use right sdap_domain in ad_domain_info_send
- Resolves: rhbz#2087088 - sssd does not enforce smartcard auth for kde screen locker
- Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol
- Resolves: rhbz#2087745 - 2FA prompting setting ineffective
- Resolves: rhbz#2087746 - sssd fails GPO-based access if AD have setup with Japanese language</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.2-1" date="1655726400">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2098620 - sdap_nested_group_deref_direct_process() triggers internal watchdog for large data sets
- Resolves: rhbz#2098619 - [Improvement] add SSSD support for more than one CRL PEM file name with parameters certificate_verification and crl_file
- Resolves: rhbz#2088817 - pam_sss_gss ceased to work after upgrade to 8.6
- Resolves: rhbz#2098616 - Add idp authentication indicator in man page of sssd.conf
- Resolves: rhbz#2056035 - 'getent hosts' not return hosts if they have more than one CN in LDAP
- Resolves: rhbz#2098615 - Regression "Missing internal domain data." when setting ad_domain to incorrect
- Resolves: rhbz#2098617 - Harden kerberos ticket validation
- Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-1" date="1657713600">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2063016 - [sssd] RHEL 8.7 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-2" date="1660132800">- Resolves: rhbz#2116488 - virsh command will hang after the host run several auto test cases
- Resolves: rhbz#2116486 - [regression] sssctl analyze fails to parse PAM related sssd logs
- Resolves: rhbz#2116487 - cache_req_data_set_hybrid_lookup: cache_req_data should never be NULL</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-3" date="1661256000">- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8
- Resolves: rhbz#2119726 - sssctl analyze --logdir option requires sssd to be configured
- Resolves: rhbz#2120669 - Incorrect request ID tracking from responder to backend</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4" date="1661515200">- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4.1" date="1665662400">- Resolves: rhbz#2128544 - Cannot SSH with AD user to ipa-client (`krb5_validate` and `pac_check` settings conflict) [rhel-8.7.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4.2" date="1670587200">- Resolves: rhbz#2139871 - Analyzer: Optimize and remove duplicate messages in verbose list [rhel-8.7.0.z]
- Resolves: rhbz#2142961 - SSSD: `sssctl analyze` command shouldn't require 'root' privileged [rhel-8.7.0.z]
- Resolves: rhbz#2148989 - UPN check cannot be disabled explicitly but requires krb5_validate = false' as a work-around [rhel-8.7.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4.3" date="1671105600">- Resolves: rhbz#2152883 - authenticating against external IdP services okta (native app) with OAuth client secret failed [rhel-8.7.0.z]</changelog>
</package>
<package pkgid="c5d221b2e6b7c9114a34235591122c94671d41dc8255689d5b4cab7e53ef1432" name="libsss_idmap" arch="x86_64">
  <version epoch="0" ver="2.7.3" rel="4.el8_7.3"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.6.2-3" date="1642420800">- Resolves: rhbz#2039892 - 2.6.2 regression: Daemon crashes when resolving AD user names
- Resolves: rhbz#1859315 - sssd does not use kerberos port that is set.
- Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries
- Resolves: rhbz#2035245 - AD Domain in the AD Forest Missing after sssd latest update
- Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.0-2" date="1652875200">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2026799 - SSSD authenticating to LDAP with obfuscated password produces Invalid authtoken type message causing sssd_be to go offline (cross inter_ference of different provider plugins options)
- Resolves: rhbz#2033347 - sssd error triggers backtrace : [write_krb5info_file_from_fo_server] (0x0020): [RID#73501] There is no server that can be written into kdc info file.
- Resolves: rhbz#2056483 - [RFE] Add sssd internal krb5 plugin for authentication against external IdP via OAuth2
- Resolves: rhbz#2062689 - [Improvement] Add user and group version of sss_nss_getorigbyname()
- Resolves: rhbz#2065692 - [RHEL8] Ship new sub-package called sssd-idp into sssd
- Resolves: rhbz#2072050 - sssd_nss exiting (due to missing 'sssd' local user) making SSSD service to restart in a loop
- Resolves: rhbz#2072931 - Use right sdap_domain in ad_domain_info_send
- Resolves: rhbz#2087088 - sssd does not enforce smartcard auth for kde screen locker
- Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol
- Resolves: rhbz#2087745 - 2FA prompting setting ineffective
- Resolves: rhbz#2087746 - sssd fails GPO-based access if AD have setup with Japanese language</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.2-1" date="1655726400">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2098620 - sdap_nested_group_deref_direct_process() triggers internal watchdog for large data sets
- Resolves: rhbz#2098619 - [Improvement] add SSSD support for more than one CRL PEM file name with parameters certificate_verification and crl_file
- Resolves: rhbz#2088817 - pam_sss_gss ceased to work after upgrade to 8.6
- Resolves: rhbz#2098616 - Add idp authentication indicator in man page of sssd.conf
- Resolves: rhbz#2056035 - 'getent hosts' not return hosts if they have more than one CN in LDAP
- Resolves: rhbz#2098615 - Regression "Missing internal domain data." when setting ad_domain to incorrect
- Resolves: rhbz#2098617 - Harden kerberos ticket validation
- Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-1" date="1657713600">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2063016 - [sssd] RHEL 8.7 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-2" date="1660132800">- Resolves: rhbz#2116488 - virsh command will hang after the host run several auto test cases
- Resolves: rhbz#2116486 - [regression] sssctl analyze fails to parse PAM related sssd logs
- Resolves: rhbz#2116487 - cache_req_data_set_hybrid_lookup: cache_req_data should never be NULL</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-3" date="1661256000">- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8
- Resolves: rhbz#2119726 - sssctl analyze --logdir option requires sssd to be configured
- Resolves: rhbz#2120669 - Incorrect request ID tracking from responder to backend</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4" date="1661515200">- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4.1" date="1665662400">- Resolves: rhbz#2128544 - Cannot SSH with AD user to ipa-client (`krb5_validate` and `pac_check` settings conflict) [rhel-8.7.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4.2" date="1670587200">- Resolves: rhbz#2139871 - Analyzer: Optimize and remove duplicate messages in verbose list [rhel-8.7.0.z]
- Resolves: rhbz#2142961 - SSSD: `sssctl analyze` command shouldn't require 'root' privileged [rhel-8.7.0.z]
- Resolves: rhbz#2148989 - UPN check cannot be disabled explicitly but requires krb5_validate = false' as a work-around [rhel-8.7.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4.3" date="1671105600">- Resolves: rhbz#2152883 - authenticating against external IdP services okta (native app) with OAuth client secret failed [rhel-8.7.0.z]</changelog>
</package>
<package pkgid="921fdd010f5dd27d594b01ebc9a81f069ace04c976124abc152adb1b3ffdfa73" name="libsss_nss_idmap" arch="i686">
  <version epoch="0" ver="2.7.3" rel="4.el8_7.1"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.6.2-1" date="1640606400">- Resolves: rhbz#2011216 - Rebase SSSD for RHEL 8.6
- Resolves: rhbz#2013260 - [RHEL8] Add ability to parse child log files
- Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries
- Resolves: rhbz#1859315 - sssd does not use kerberos port that is set.
- Resolves: rhbz#1961182 - Passwordless (GSSAPI) SSH not working due to missing "includedir /var/lib/sss/pubconf/krb5.include.d" directive in /etc/krb5.conf
- Resolves: rhbz#2008829 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2012263 - pam responder does not call initgroups to refresh the user entry
- Resolves: rhbz#2012308 - Add client certificate validation D-Bus API
- Resolves: rhbz#2012327 - Groups are missing while performing id lookup as SSSD switching to offline mode due to the wrong domain name in the ldap-pings(netlogon).
- Resolves: rhbz#2013028 - [RFE] Health and Support Analyzer: Add sssctl sub-command to select and display a single request from the logs
- Resolves: rhbz#2013259 - [RHEL8] Add tevent chain ID logic into responders
- Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.6.2-2" date="1641297600">- Resolves: rhbz#2013260 - [RHEL8] Add ability to parse child log files (additional patch)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.6.2-3" date="1642420800">- Resolves: rhbz#2039892 - 2.6.2 regression: Daemon crashes when resolving AD user names
- Resolves: rhbz#1859315 - sssd does not use kerberos port that is set.
- Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries
- Resolves: rhbz#2035245 - AD Domain in the AD Forest Missing after sssd latest update
- Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.0-2" date="1652875200">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2026799 - SSSD authenticating to LDAP with obfuscated password produces Invalid authtoken type message causing sssd_be to go offline (cross inter_ference of different provider plugins options)
- Resolves: rhbz#2033347 - sssd error triggers backtrace : [write_krb5info_file_from_fo_server] (0x0020): [RID#73501] There is no server that can be written into kdc info file.
- Resolves: rhbz#2056483 - [RFE] Add sssd internal krb5 plugin for authentication against external IdP via OAuth2
- Resolves: rhbz#2062689 - [Improvement] Add user and group version of sss_nss_getorigbyname()
- Resolves: rhbz#2065692 - [RHEL8] Ship new sub-package called sssd-idp into sssd
- Resolves: rhbz#2072050 - sssd_nss exiting (due to missing 'sssd' local user) making SSSD service to restart in a loop
- Resolves: rhbz#2072931 - Use right sdap_domain in ad_domain_info_send
- Resolves: rhbz#2087088 - sssd does not enforce smartcard auth for kde screen locker
- Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol
- Resolves: rhbz#2087745 - 2FA prompting setting ineffective
- Resolves: rhbz#2087746 - sssd fails GPO-based access if AD have setup with Japanese language</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.2-1" date="1655726400">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2098620 - sdap_nested_group_deref_direct_process() triggers internal watchdog for large data sets
- Resolves: rhbz#2098619 - [Improvement] add SSSD support for more than one CRL PEM file name with parameters certificate_verification and crl_file
- Resolves: rhbz#2088817 - pam_sss_gss ceased to work after upgrade to 8.6
- Resolves: rhbz#2098616 - Add idp authentication indicator in man page of sssd.conf
- Resolves: rhbz#2056035 - 'getent hosts' not return hosts if they have more than one CN in LDAP
- Resolves: rhbz#2098615 - Regression "Missing internal domain data." when setting ad_domain to incorrect
- Resolves: rhbz#2098617 - Harden kerberos ticket validation
- Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-1" date="1657713600">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2063016 - [sssd] RHEL 8.7 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-2" date="1660132800">- Resolves: rhbz#2116488 - virsh command will hang after the host run several auto test cases
- Resolves: rhbz#2116486 - [regression] sssctl analyze fails to parse PAM related sssd logs
- Resolves: rhbz#2116487 - cache_req_data_set_hybrid_lookup: cache_req_data should never be NULL</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-3" date="1661256000">- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8
- Resolves: rhbz#2119726 - sssctl analyze --logdir option requires sssd to be configured
- Resolves: rhbz#2120669 - Incorrect request ID tracking from responder to backend</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4" date="1661515200">- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4.1" date="1665662400">- Resolves: rhbz#2128544 - Cannot SSH with AD user to ipa-client (`krb5_validate` and `pac_check` settings conflict) [rhel-8.7.0.z]</changelog>
</package>
<package pkgid="9d03cc9156f8912984cf0aa81ef9109a1fe289cd57b75cc7f534859ab32b985c" name="libsss_nss_idmap" arch="x86_64">
  <version epoch="0" ver="2.7.3" rel="4.el8_7.1"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.6.2-1" date="1640606400">- Resolves: rhbz#2011216 - Rebase SSSD for RHEL 8.6
- Resolves: rhbz#2013260 - [RHEL8] Add ability to parse child log files
- Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries
- Resolves: rhbz#1859315 - sssd does not use kerberos port that is set.
- Resolves: rhbz#1961182 - Passwordless (GSSAPI) SSH not working due to missing "includedir /var/lib/sss/pubconf/krb5.include.d" directive in /etc/krb5.conf
- Resolves: rhbz#2008829 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2012263 - pam responder does not call initgroups to refresh the user entry
- Resolves: rhbz#2012308 - Add client certificate validation D-Bus API
- Resolves: rhbz#2012327 - Groups are missing while performing id lookup as SSSD switching to offline mode due to the wrong domain name in the ldap-pings(netlogon).
- Resolves: rhbz#2013028 - [RFE] Health and Support Analyzer: Add sssctl sub-command to select and display a single request from the logs
- Resolves: rhbz#2013259 - [RHEL8] Add tevent chain ID logic into responders
- Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.6.2-2" date="1641297600">- Resolves: rhbz#2013260 - [RHEL8] Add ability to parse child log files (additional patch)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.6.2-3" date="1642420800">- Resolves: rhbz#2039892 - 2.6.2 regression: Daemon crashes when resolving AD user names
- Resolves: rhbz#1859315 - sssd does not use kerberos port that is set.
- Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries
- Resolves: rhbz#2035245 - AD Domain in the AD Forest Missing after sssd latest update
- Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.0-2" date="1652875200">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2026799 - SSSD authenticating to LDAP with obfuscated password produces Invalid authtoken type message causing sssd_be to go offline (cross inter_ference of different provider plugins options)
- Resolves: rhbz#2033347 - sssd error triggers backtrace : [write_krb5info_file_from_fo_server] (0x0020): [RID#73501] There is no server that can be written into kdc info file.
- Resolves: rhbz#2056483 - [RFE] Add sssd internal krb5 plugin for authentication against external IdP via OAuth2
- Resolves: rhbz#2062689 - [Improvement] Add user and group version of sss_nss_getorigbyname()
- Resolves: rhbz#2065692 - [RHEL8] Ship new sub-package called sssd-idp into sssd
- Resolves: rhbz#2072050 - sssd_nss exiting (due to missing 'sssd' local user) making SSSD service to restart in a loop
- Resolves: rhbz#2072931 - Use right sdap_domain in ad_domain_info_send
- Resolves: rhbz#2087088 - sssd does not enforce smartcard auth for kde screen locker
- Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol
- Resolves: rhbz#2087745 - 2FA prompting setting ineffective
- Resolves: rhbz#2087746 - sssd fails GPO-based access if AD have setup with Japanese language</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.2-1" date="1655726400">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2098620 - sdap_nested_group_deref_direct_process() triggers internal watchdog for large data sets
- Resolves: rhbz#2098619 - [Improvement] add SSSD support for more than one CRL PEM file name with parameters certificate_verification and crl_file
- Resolves: rhbz#2088817 - pam_sss_gss ceased to work after upgrade to 8.6
- Resolves: rhbz#2098616 - Add idp authentication indicator in man page of sssd.conf
- Resolves: rhbz#2056035 - 'getent hosts' not return hosts if they have more than one CN in LDAP
- Resolves: rhbz#2098615 - Regression "Missing internal domain data." when setting ad_domain to incorrect
- Resolves: rhbz#2098617 - Harden kerberos ticket validation
- Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-1" date="1657713600">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2063016 - [sssd] RHEL 8.7 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-2" date="1660132800">- Resolves: rhbz#2116488 - virsh command will hang after the host run several auto test cases
- Resolves: rhbz#2116486 - [regression] sssctl analyze fails to parse PAM related sssd logs
- Resolves: rhbz#2116487 - cache_req_data_set_hybrid_lookup: cache_req_data should never be NULL</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-3" date="1661256000">- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8
- Resolves: rhbz#2119726 - sssctl analyze --logdir option requires sssd to be configured
- Resolves: rhbz#2120669 - Incorrect request ID tracking from responder to backend</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4" date="1661515200">- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4.1" date="1665662400">- Resolves: rhbz#2128544 - Cannot SSH with AD user to ipa-client (`krb5_validate` and `pac_check` settings conflict) [rhel-8.7.0.z]</changelog>
</package>
<package pkgid="9ac42e21beee38baa6bdf4a8dd9d240915a3c2110f36b6a097fa862a6ea6142d" name="libsss_nss_idmap" arch="i686">
  <version epoch="0" ver="2.7.3" rel="4.el8_7.3"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.6.2-3" date="1642420800">- Resolves: rhbz#2039892 - 2.6.2 regression: Daemon crashes when resolving AD user names
- Resolves: rhbz#1859315 - sssd does not use kerberos port that is set.
- Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries
- Resolves: rhbz#2035245 - AD Domain in the AD Forest Missing after sssd latest update
- Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.0-2" date="1652875200">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2026799 - SSSD authenticating to LDAP with obfuscated password produces Invalid authtoken type message causing sssd_be to go offline (cross inter_ference of different provider plugins options)
- Resolves: rhbz#2033347 - sssd error triggers backtrace : [write_krb5info_file_from_fo_server] (0x0020): [RID#73501] There is no server that can be written into kdc info file.
- Resolves: rhbz#2056483 - [RFE] Add sssd internal krb5 plugin for authentication against external IdP via OAuth2
- Resolves: rhbz#2062689 - [Improvement] Add user and group version of sss_nss_getorigbyname()
- Resolves: rhbz#2065692 - [RHEL8] Ship new sub-package called sssd-idp into sssd
- Resolves: rhbz#2072050 - sssd_nss exiting (due to missing 'sssd' local user) making SSSD service to restart in a loop
- Resolves: rhbz#2072931 - Use right sdap_domain in ad_domain_info_send
- Resolves: rhbz#2087088 - sssd does not enforce smartcard auth for kde screen locker
- Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol
- Resolves: rhbz#2087745 - 2FA prompting setting ineffective
- Resolves: rhbz#2087746 - sssd fails GPO-based access if AD have setup with Japanese language</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.2-1" date="1655726400">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2098620 - sdap_nested_group_deref_direct_process() triggers internal watchdog for large data sets
- Resolves: rhbz#2098619 - [Improvement] add SSSD support for more than one CRL PEM file name with parameters certificate_verification and crl_file
- Resolves: rhbz#2088817 - pam_sss_gss ceased to work after upgrade to 8.6
- Resolves: rhbz#2098616 - Add idp authentication indicator in man page of sssd.conf
- Resolves: rhbz#2056035 - 'getent hosts' not return hosts if they have more than one CN in LDAP
- Resolves: rhbz#2098615 - Regression "Missing internal domain data." when setting ad_domain to incorrect
- Resolves: rhbz#2098617 - Harden kerberos ticket validation
- Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-1" date="1657713600">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2063016 - [sssd] RHEL 8.7 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-2" date="1660132800">- Resolves: rhbz#2116488 - virsh command will hang after the host run several auto test cases
- Resolves: rhbz#2116486 - [regression] sssctl analyze fails to parse PAM related sssd logs
- Resolves: rhbz#2116487 - cache_req_data_set_hybrid_lookup: cache_req_data should never be NULL</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-3" date="1661256000">- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8
- Resolves: rhbz#2119726 - sssctl analyze --logdir option requires sssd to be configured
- Resolves: rhbz#2120669 - Incorrect request ID tracking from responder to backend</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4" date="1661515200">- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4.1" date="1665662400">- Resolves: rhbz#2128544 - Cannot SSH with AD user to ipa-client (`krb5_validate` and `pac_check` settings conflict) [rhel-8.7.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4.2" date="1670587200">- Resolves: rhbz#2139871 - Analyzer: Optimize and remove duplicate messages in verbose list [rhel-8.7.0.z]
- Resolves: rhbz#2142961 - SSSD: `sssctl analyze` command shouldn't require 'root' privileged [rhel-8.7.0.z]
- Resolves: rhbz#2148989 - UPN check cannot be disabled explicitly but requires krb5_validate = false' as a work-around [rhel-8.7.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4.3" date="1671105600">- Resolves: rhbz#2152883 - authenticating against external IdP services okta (native app) with OAuth client secret failed [rhel-8.7.0.z]</changelog>
</package>
<package pkgid="92a8c7089d0ea06b90824ad9427a708ae2b5937bb46e4fc2423286d821fad5a0" name="libsss_nss_idmap" arch="x86_64">
  <version epoch="0" ver="2.7.3" rel="4.el8_7.3"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.6.2-3" date="1642420800">- Resolves: rhbz#2039892 - 2.6.2 regression: Daemon crashes when resolving AD user names
- Resolves: rhbz#1859315 - sssd does not use kerberos port that is set.
- Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries
- Resolves: rhbz#2035245 - AD Domain in the AD Forest Missing after sssd latest update
- Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.0-2" date="1652875200">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2026799 - SSSD authenticating to LDAP with obfuscated password produces Invalid authtoken type message causing sssd_be to go offline (cross inter_ference of different provider plugins options)
- Resolves: rhbz#2033347 - sssd error triggers backtrace : [write_krb5info_file_from_fo_server] (0x0020): [RID#73501] There is no server that can be written into kdc info file.
- Resolves: rhbz#2056483 - [RFE] Add sssd internal krb5 plugin for authentication against external IdP via OAuth2
- Resolves: rhbz#2062689 - [Improvement] Add user and group version of sss_nss_getorigbyname()
- Resolves: rhbz#2065692 - [RHEL8] Ship new sub-package called sssd-idp into sssd
- Resolves: rhbz#2072050 - sssd_nss exiting (due to missing 'sssd' local user) making SSSD service to restart in a loop
- Resolves: rhbz#2072931 - Use right sdap_domain in ad_domain_info_send
- Resolves: rhbz#2087088 - sssd does not enforce smartcard auth for kde screen locker
- Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol
- Resolves: rhbz#2087745 - 2FA prompting setting ineffective
- Resolves: rhbz#2087746 - sssd fails GPO-based access if AD have setup with Japanese language</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.2-1" date="1655726400">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2098620 - sdap_nested_group_deref_direct_process() triggers internal watchdog for large data sets
- Resolves: rhbz#2098619 - [Improvement] add SSSD support for more than one CRL PEM file name with parameters certificate_verification and crl_file
- Resolves: rhbz#2088817 - pam_sss_gss ceased to work after upgrade to 8.6
- Resolves: rhbz#2098616 - Add idp authentication indicator in man page of sssd.conf
- Resolves: rhbz#2056035 - 'getent hosts' not return hosts if they have more than one CN in LDAP
- Resolves: rhbz#2098615 - Regression "Missing internal domain data." when setting ad_domain to incorrect
- Resolves: rhbz#2098617 - Harden kerberos ticket validation
- Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-1" date="1657713600">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2063016 - [sssd] RHEL 8.7 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-2" date="1660132800">- Resolves: rhbz#2116488 - virsh command will hang after the host run several auto test cases
- Resolves: rhbz#2116486 - [regression] sssctl analyze fails to parse PAM related sssd logs
- Resolves: rhbz#2116487 - cache_req_data_set_hybrid_lookup: cache_req_data should never be NULL</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-3" date="1661256000">- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8
- Resolves: rhbz#2119726 - sssctl analyze --logdir option requires sssd to be configured
- Resolves: rhbz#2120669 - Incorrect request ID tracking from responder to backend</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4" date="1661515200">- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4.1" date="1665662400">- Resolves: rhbz#2128544 - Cannot SSH with AD user to ipa-client (`krb5_validate` and `pac_check` settings conflict) [rhel-8.7.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4.2" date="1670587200">- Resolves: rhbz#2139871 - Analyzer: Optimize and remove duplicate messages in verbose list [rhel-8.7.0.z]
- Resolves: rhbz#2142961 - SSSD: `sssctl analyze` command shouldn't require 'root' privileged [rhel-8.7.0.z]
- Resolves: rhbz#2148989 - UPN check cannot be disabled explicitly but requires krb5_validate = false' as a work-around [rhel-8.7.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4.3" date="1671105600">- Resolves: rhbz#2152883 - authenticating against external IdP services okta (native app) with OAuth client secret failed [rhel-8.7.0.z]</changelog>
</package>
<package pkgid="85511fe36db358c69f05d2691ab7af7cf0f8265bcf6e88c8a693cc3b47513244" name="libsss_simpleifp" arch="i686">
  <version epoch="0" ver="2.7.3" rel="4.el8_7.1"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.6.2-1" date="1640606400">- Resolves: rhbz#2011216 - Rebase SSSD for RHEL 8.6
- Resolves: rhbz#2013260 - [RHEL8] Add ability to parse child log files
- Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries
- Resolves: rhbz#1859315 - sssd does not use kerberos port that is set.
- Resolves: rhbz#1961182 - Passwordless (GSSAPI) SSH not working due to missing "includedir /var/lib/sss/pubconf/krb5.include.d" directive in /etc/krb5.conf
- Resolves: rhbz#2008829 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2012263 - pam responder does not call initgroups to refresh the user entry
- Resolves: rhbz#2012308 - Add client certificate validation D-Bus API
- Resolves: rhbz#2012327 - Groups are missing while performing id lookup as SSSD switching to offline mode due to the wrong domain name in the ldap-pings(netlogon).
- Resolves: rhbz#2013028 - [RFE] Health and Support Analyzer: Add sssctl sub-command to select and display a single request from the logs
- Resolves: rhbz#2013259 - [RHEL8] Add tevent chain ID logic into responders
- Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.6.2-2" date="1641297600">- Resolves: rhbz#2013260 - [RHEL8] Add ability to parse child log files (additional patch)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.6.2-3" date="1642420800">- Resolves: rhbz#2039892 - 2.6.2 regression: Daemon crashes when resolving AD user names
- Resolves: rhbz#1859315 - sssd does not use kerberos port that is set.
- Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries
- Resolves: rhbz#2035245 - AD Domain in the AD Forest Missing after sssd latest update
- Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.0-2" date="1652875200">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2026799 - SSSD authenticating to LDAP with obfuscated password produces Invalid authtoken type message causing sssd_be to go offline (cross inter_ference of different provider plugins options)
- Resolves: rhbz#2033347 - sssd error triggers backtrace : [write_krb5info_file_from_fo_server] (0x0020): [RID#73501] There is no server that can be written into kdc info file.
- Resolves: rhbz#2056483 - [RFE] Add sssd internal krb5 plugin for authentication against external IdP via OAuth2
- Resolves: rhbz#2062689 - [Improvement] Add user and group version of sss_nss_getorigbyname()
- Resolves: rhbz#2065692 - [RHEL8] Ship new sub-package called sssd-idp into sssd
- Resolves: rhbz#2072050 - sssd_nss exiting (due to missing 'sssd' local user) making SSSD service to restart in a loop
- Resolves: rhbz#2072931 - Use right sdap_domain in ad_domain_info_send
- Resolves: rhbz#2087088 - sssd does not enforce smartcard auth for kde screen locker
- Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol
- Resolves: rhbz#2087745 - 2FA prompting setting ineffective
- Resolves: rhbz#2087746 - sssd fails GPO-based access if AD have setup with Japanese language</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.2-1" date="1655726400">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2098620 - sdap_nested_group_deref_direct_process() triggers internal watchdog for large data sets
- Resolves: rhbz#2098619 - [Improvement] add SSSD support for more than one CRL PEM file name with parameters certificate_verification and crl_file
- Resolves: rhbz#2088817 - pam_sss_gss ceased to work after upgrade to 8.6
- Resolves: rhbz#2098616 - Add idp authentication indicator in man page of sssd.conf
- Resolves: rhbz#2056035 - 'getent hosts' not return hosts if they have more than one CN in LDAP
- Resolves: rhbz#2098615 - Regression "Missing internal domain data." when setting ad_domain to incorrect
- Resolves: rhbz#2098617 - Harden kerberos ticket validation
- Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-1" date="1657713600">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2063016 - [sssd] RHEL 8.7 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-2" date="1660132800">- Resolves: rhbz#2116488 - virsh command will hang after the host run several auto test cases
- Resolves: rhbz#2116486 - [regression] sssctl analyze fails to parse PAM related sssd logs
- Resolves: rhbz#2116487 - cache_req_data_set_hybrid_lookup: cache_req_data should never be NULL</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-3" date="1661256000">- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8
- Resolves: rhbz#2119726 - sssctl analyze --logdir option requires sssd to be configured
- Resolves: rhbz#2120669 - Incorrect request ID tracking from responder to backend</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4" date="1661515200">- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4.1" date="1665662400">- Resolves: rhbz#2128544 - Cannot SSH with AD user to ipa-client (`krb5_validate` and `pac_check` settings conflict) [rhel-8.7.0.z]</changelog>
</package>
<package pkgid="fe2f09b0c85d5d6405389c348c11c4620a75d567bd999ea386285d2eebf70f69" name="libsss_simpleifp" arch="x86_64">
  <version epoch="0" ver="2.7.3" rel="4.el8_7.1"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.6.2-1" date="1640606400">- Resolves: rhbz#2011216 - Rebase SSSD for RHEL 8.6
- Resolves: rhbz#2013260 - [RHEL8] Add ability to parse child log files
- Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries
- Resolves: rhbz#1859315 - sssd does not use kerberos port that is set.
- Resolves: rhbz#1961182 - Passwordless (GSSAPI) SSH not working due to missing "includedir /var/lib/sss/pubconf/krb5.include.d" directive in /etc/krb5.conf
- Resolves: rhbz#2008829 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2012263 - pam responder does not call initgroups to refresh the user entry
- Resolves: rhbz#2012308 - Add client certificate validation D-Bus API
- Resolves: rhbz#2012327 - Groups are missing while performing id lookup as SSSD switching to offline mode due to the wrong domain name in the ldap-pings(netlogon).
- Resolves: rhbz#2013028 - [RFE] Health and Support Analyzer: Add sssctl sub-command to select and display a single request from the logs
- Resolves: rhbz#2013259 - [RHEL8] Add tevent chain ID logic into responders
- Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.6.2-2" date="1641297600">- Resolves: rhbz#2013260 - [RHEL8] Add ability to parse child log files (additional patch)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.6.2-3" date="1642420800">- Resolves: rhbz#2039892 - 2.6.2 regression: Daemon crashes when resolving AD user names
- Resolves: rhbz#1859315 - sssd does not use kerberos port that is set.
- Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries
- Resolves: rhbz#2035245 - AD Domain in the AD Forest Missing after sssd latest update
- Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.0-2" date="1652875200">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2026799 - SSSD authenticating to LDAP with obfuscated password produces Invalid authtoken type message causing sssd_be to go offline (cross inter_ference of different provider plugins options)
- Resolves: rhbz#2033347 - sssd error triggers backtrace : [write_krb5info_file_from_fo_server] (0x0020): [RID#73501] There is no server that can be written into kdc info file.
- Resolves: rhbz#2056483 - [RFE] Add sssd internal krb5 plugin for authentication against external IdP via OAuth2
- Resolves: rhbz#2062689 - [Improvement] Add user and group version of sss_nss_getorigbyname()
- Resolves: rhbz#2065692 - [RHEL8] Ship new sub-package called sssd-idp into sssd
- Resolves: rhbz#2072050 - sssd_nss exiting (due to missing 'sssd' local user) making SSSD service to restart in a loop
- Resolves: rhbz#2072931 - Use right sdap_domain in ad_domain_info_send
- Resolves: rhbz#2087088 - sssd does not enforce smartcard auth for kde screen locker
- Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol
- Resolves: rhbz#2087745 - 2FA prompting setting ineffective
- Resolves: rhbz#2087746 - sssd fails GPO-based access if AD have setup with Japanese language</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.2-1" date="1655726400">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2098620 - sdap_nested_group_deref_direct_process() triggers internal watchdog for large data sets
- Resolves: rhbz#2098619 - [Improvement] add SSSD support for more than one CRL PEM file name with parameters certificate_verification and crl_file
- Resolves: rhbz#2088817 - pam_sss_gss ceased to work after upgrade to 8.6
- Resolves: rhbz#2098616 - Add idp authentication indicator in man page of sssd.conf
- Resolves: rhbz#2056035 - 'getent hosts' not return hosts if they have more than one CN in LDAP
- Resolves: rhbz#2098615 - Regression "Missing internal domain data." when setting ad_domain to incorrect
- Resolves: rhbz#2098617 - Harden kerberos ticket validation
- Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-1" date="1657713600">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2063016 - [sssd] RHEL 8.7 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-2" date="1660132800">- Resolves: rhbz#2116488 - virsh command will hang after the host run several auto test cases
- Resolves: rhbz#2116486 - [regression] sssctl analyze fails to parse PAM related sssd logs
- Resolves: rhbz#2116487 - cache_req_data_set_hybrid_lookup: cache_req_data should never be NULL</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-3" date="1661256000">- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8
- Resolves: rhbz#2119726 - sssctl analyze --logdir option requires sssd to be configured
- Resolves: rhbz#2120669 - Incorrect request ID tracking from responder to backend</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4" date="1661515200">- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4.1" date="1665662400">- Resolves: rhbz#2128544 - Cannot SSH with AD user to ipa-client (`krb5_validate` and `pac_check` settings conflict) [rhel-8.7.0.z]</changelog>
</package>
<package pkgid="30e7b5806e4ae9df9571078480102a3ba775bc13e8fb277331c70048451f7355" name="libsss_simpleifp" arch="i686">
  <version epoch="0" ver="2.7.3" rel="4.el8_7.3"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.6.2-3" date="1642420800">- Resolves: rhbz#2039892 - 2.6.2 regression: Daemon crashes when resolving AD user names
- Resolves: rhbz#1859315 - sssd does not use kerberos port that is set.
- Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries
- Resolves: rhbz#2035245 - AD Domain in the AD Forest Missing after sssd latest update
- Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.0-2" date="1652875200">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2026799 - SSSD authenticating to LDAP with obfuscated password produces Invalid authtoken type message causing sssd_be to go offline (cross inter_ference of different provider plugins options)
- Resolves: rhbz#2033347 - sssd error triggers backtrace : [write_krb5info_file_from_fo_server] (0x0020): [RID#73501] There is no server that can be written into kdc info file.
- Resolves: rhbz#2056483 - [RFE] Add sssd internal krb5 plugin for authentication against external IdP via OAuth2
- Resolves: rhbz#2062689 - [Improvement] Add user and group version of sss_nss_getorigbyname()
- Resolves: rhbz#2065692 - [RHEL8] Ship new sub-package called sssd-idp into sssd
- Resolves: rhbz#2072050 - sssd_nss exiting (due to missing 'sssd' local user) making SSSD service to restart in a loop
- Resolves: rhbz#2072931 - Use right sdap_domain in ad_domain_info_send
- Resolves: rhbz#2087088 - sssd does not enforce smartcard auth for kde screen locker
- Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol
- Resolves: rhbz#2087745 - 2FA prompting setting ineffective
- Resolves: rhbz#2087746 - sssd fails GPO-based access if AD have setup with Japanese language</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.2-1" date="1655726400">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2098620 - sdap_nested_group_deref_direct_process() triggers internal watchdog for large data sets
- Resolves: rhbz#2098619 - [Improvement] add SSSD support for more than one CRL PEM file name with parameters certificate_verification and crl_file
- Resolves: rhbz#2088817 - pam_sss_gss ceased to work after upgrade to 8.6
- Resolves: rhbz#2098616 - Add idp authentication indicator in man page of sssd.conf
- Resolves: rhbz#2056035 - 'getent hosts' not return hosts if they have more than one CN in LDAP
- Resolves: rhbz#2098615 - Regression "Missing internal domain data." when setting ad_domain to incorrect
- Resolves: rhbz#2098617 - Harden kerberos ticket validation
- Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-1" date="1657713600">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2063016 - [sssd] RHEL 8.7 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-2" date="1660132800">- Resolves: rhbz#2116488 - virsh command will hang after the host run several auto test cases
- Resolves: rhbz#2116486 - [regression] sssctl analyze fails to parse PAM related sssd logs
- Resolves: rhbz#2116487 - cache_req_data_set_hybrid_lookup: cache_req_data should never be NULL</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-3" date="1661256000">- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8
- Resolves: rhbz#2119726 - sssctl analyze --logdir option requires sssd to be configured
- Resolves: rhbz#2120669 - Incorrect request ID tracking from responder to backend</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4" date="1661515200">- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4.1" date="1665662400">- Resolves: rhbz#2128544 - Cannot SSH with AD user to ipa-client (`krb5_validate` and `pac_check` settings conflict) [rhel-8.7.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4.2" date="1670587200">- Resolves: rhbz#2139871 - Analyzer: Optimize and remove duplicate messages in verbose list [rhel-8.7.0.z]
- Resolves: rhbz#2142961 - SSSD: `sssctl analyze` command shouldn't require 'root' privileged [rhel-8.7.0.z]
- Resolves: rhbz#2148989 - UPN check cannot be disabled explicitly but requires krb5_validate = false' as a work-around [rhel-8.7.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4.3" date="1671105600">- Resolves: rhbz#2152883 - authenticating against external IdP services okta (native app) with OAuth client secret failed [rhel-8.7.0.z]</changelog>
</package>
<package pkgid="87a1140b2ba6018d63375627e7a48381495cf1dd19efb3eecf66aecee115697c" name="libsss_simpleifp" arch="x86_64">
  <version epoch="0" ver="2.7.3" rel="4.el8_7.3"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.6.2-3" date="1642420800">- Resolves: rhbz#2039892 - 2.6.2 regression: Daemon crashes when resolving AD user names
- Resolves: rhbz#1859315 - sssd does not use kerberos port that is set.
- Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries
- Resolves: rhbz#2035245 - AD Domain in the AD Forest Missing after sssd latest update
- Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.0-2" date="1652875200">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2026799 - SSSD authenticating to LDAP with obfuscated password produces Invalid authtoken type message causing sssd_be to go offline (cross inter_ference of different provider plugins options)
- Resolves: rhbz#2033347 - sssd error triggers backtrace : [write_krb5info_file_from_fo_server] (0x0020): [RID#73501] There is no server that can be written into kdc info file.
- Resolves: rhbz#2056483 - [RFE] Add sssd internal krb5 plugin for authentication against external IdP via OAuth2
- Resolves: rhbz#2062689 - [Improvement] Add user and group version of sss_nss_getorigbyname()
- Resolves: rhbz#2065692 - [RHEL8] Ship new sub-package called sssd-idp into sssd
- Resolves: rhbz#2072050 - sssd_nss exiting (due to missing 'sssd' local user) making SSSD service to restart in a loop
- Resolves: rhbz#2072931 - Use right sdap_domain in ad_domain_info_send
- Resolves: rhbz#2087088 - sssd does not enforce smartcard auth for kde screen locker
- Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol
- Resolves: rhbz#2087745 - 2FA prompting setting ineffective
- Resolves: rhbz#2087746 - sssd fails GPO-based access if AD have setup with Japanese language</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.2-1" date="1655726400">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2098620 - sdap_nested_group_deref_direct_process() triggers internal watchdog for large data sets
- Resolves: rhbz#2098619 - [Improvement] add SSSD support for more than one CRL PEM file name with parameters certificate_verification and crl_file
- Resolves: rhbz#2088817 - pam_sss_gss ceased to work after upgrade to 8.6
- Resolves: rhbz#2098616 - Add idp authentication indicator in man page of sssd.conf
- Resolves: rhbz#2056035 - 'getent hosts' not return hosts if they have more than one CN in LDAP
- Resolves: rhbz#2098615 - Regression "Missing internal domain data." when setting ad_domain to incorrect
- Resolves: rhbz#2098617 - Harden kerberos ticket validation
- Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-1" date="1657713600">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2063016 - [sssd] RHEL 8.7 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-2" date="1660132800">- Resolves: rhbz#2116488 - virsh command will hang after the host run several auto test cases
- Resolves: rhbz#2116486 - [regression] sssctl analyze fails to parse PAM related sssd logs
- Resolves: rhbz#2116487 - cache_req_data_set_hybrid_lookup: cache_req_data should never be NULL</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-3" date="1661256000">- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8
- Resolves: rhbz#2119726 - sssctl analyze --logdir option requires sssd to be configured
- Resolves: rhbz#2120669 - Incorrect request ID tracking from responder to backend</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4" date="1661515200">- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4.1" date="1665662400">- Resolves: rhbz#2128544 - Cannot SSH with AD user to ipa-client (`krb5_validate` and `pac_check` settings conflict) [rhel-8.7.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4.2" date="1670587200">- Resolves: rhbz#2139871 - Analyzer: Optimize and remove duplicate messages in verbose list [rhel-8.7.0.z]
- Resolves: rhbz#2142961 - SSSD: `sssctl analyze` command shouldn't require 'root' privileged [rhel-8.7.0.z]
- Resolves: rhbz#2148989 - UPN check cannot be disabled explicitly but requires krb5_validate = false' as a work-around [rhel-8.7.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4.3" date="1671105600">- Resolves: rhbz#2152883 - authenticating against external IdP services okta (native app) with OAuth client secret failed [rhel-8.7.0.z]</changelog>
</package>
<package pkgid="28a92ab77cabfb3a81dffe865f2055b2df7fc9eb3610730144a77ac0738e4507" name="libsss_sudo" arch="x86_64">
  <version epoch="0" ver="2.7.3" rel="4.el8_7.1"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.6.2-1" date="1640606400">- Resolves: rhbz#2011216 - Rebase SSSD for RHEL 8.6
- Resolves: rhbz#2013260 - [RHEL8] Add ability to parse child log files
- Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries
- Resolves: rhbz#1859315 - sssd does not use kerberos port that is set.
- Resolves: rhbz#1961182 - Passwordless (GSSAPI) SSH not working due to missing "includedir /var/lib/sss/pubconf/krb5.include.d" directive in /etc/krb5.conf
- Resolves: rhbz#2008829 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2012263 - pam responder does not call initgroups to refresh the user entry
- Resolves: rhbz#2012308 - Add client certificate validation D-Bus API
- Resolves: rhbz#2012327 - Groups are missing while performing id lookup as SSSD switching to offline mode due to the wrong domain name in the ldap-pings(netlogon).
- Resolves: rhbz#2013028 - [RFE] Health and Support Analyzer: Add sssctl sub-command to select and display a single request from the logs
- Resolves: rhbz#2013259 - [RHEL8] Add tevent chain ID logic into responders
- Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.6.2-2" date="1641297600">- Resolves: rhbz#2013260 - [RHEL8] Add ability to parse child log files (additional patch)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.6.2-3" date="1642420800">- Resolves: rhbz#2039892 - 2.6.2 regression: Daemon crashes when resolving AD user names
- Resolves: rhbz#1859315 - sssd does not use kerberos port that is set.
- Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries
- Resolves: rhbz#2035245 - AD Domain in the AD Forest Missing after sssd latest update
- Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.0-2" date="1652875200">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2026799 - SSSD authenticating to LDAP with obfuscated password produces Invalid authtoken type message causing sssd_be to go offline (cross inter_ference of different provider plugins options)
- Resolves: rhbz#2033347 - sssd error triggers backtrace : [write_krb5info_file_from_fo_server] (0x0020): [RID#73501] There is no server that can be written into kdc info file.
- Resolves: rhbz#2056483 - [RFE] Add sssd internal krb5 plugin for authentication against external IdP via OAuth2
- Resolves: rhbz#2062689 - [Improvement] Add user and group version of sss_nss_getorigbyname()
- Resolves: rhbz#2065692 - [RHEL8] Ship new sub-package called sssd-idp into sssd
- Resolves: rhbz#2072050 - sssd_nss exiting (due to missing 'sssd' local user) making SSSD service to restart in a loop
- Resolves: rhbz#2072931 - Use right sdap_domain in ad_domain_info_send
- Resolves: rhbz#2087088 - sssd does not enforce smartcard auth for kde screen locker
- Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol
- Resolves: rhbz#2087745 - 2FA prompting setting ineffective
- Resolves: rhbz#2087746 - sssd fails GPO-based access if AD have setup with Japanese language</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.2-1" date="1655726400">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2098620 - sdap_nested_group_deref_direct_process() triggers internal watchdog for large data sets
- Resolves: rhbz#2098619 - [Improvement] add SSSD support for more than one CRL PEM file name with parameters certificate_verification and crl_file
- Resolves: rhbz#2088817 - pam_sss_gss ceased to work after upgrade to 8.6
- Resolves: rhbz#2098616 - Add idp authentication indicator in man page of sssd.conf
- Resolves: rhbz#2056035 - 'getent hosts' not return hosts if they have more than one CN in LDAP
- Resolves: rhbz#2098615 - Regression "Missing internal domain data." when setting ad_domain to incorrect
- Resolves: rhbz#2098617 - Harden kerberos ticket validation
- Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-1" date="1657713600">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2063016 - [sssd] RHEL 8.7 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-2" date="1660132800">- Resolves: rhbz#2116488 - virsh command will hang after the host run several auto test cases
- Resolves: rhbz#2116486 - [regression] sssctl analyze fails to parse PAM related sssd logs
- Resolves: rhbz#2116487 - cache_req_data_set_hybrid_lookup: cache_req_data should never be NULL</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-3" date="1661256000">- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8
- Resolves: rhbz#2119726 - sssctl analyze --logdir option requires sssd to be configured
- Resolves: rhbz#2120669 - Incorrect request ID tracking from responder to backend</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4" date="1661515200">- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4.1" date="1665662400">- Resolves: rhbz#2128544 - Cannot SSH with AD user to ipa-client (`krb5_validate` and `pac_check` settings conflict) [rhel-8.7.0.z]</changelog>
</package>
<package pkgid="8eee3fbf462d9cfdd600f75eb9235647644483852ee8208f12e2ec062881adb1" name="libsss_sudo" arch="x86_64">
  <version epoch="0" ver="2.7.3" rel="4.el8_7.3"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.6.2-3" date="1642420800">- Resolves: rhbz#2039892 - 2.6.2 regression: Daemon crashes when resolving AD user names
- Resolves: rhbz#1859315 - sssd does not use kerberos port that is set.
- Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries
- Resolves: rhbz#2035245 - AD Domain in the AD Forest Missing after sssd latest update
- Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.0-2" date="1652875200">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2026799 - SSSD authenticating to LDAP with obfuscated password produces Invalid authtoken type message causing sssd_be to go offline (cross inter_ference of different provider plugins options)
- Resolves: rhbz#2033347 - sssd error triggers backtrace : [write_krb5info_file_from_fo_server] (0x0020): [RID#73501] There is no server that can be written into kdc info file.
- Resolves: rhbz#2056483 - [RFE] Add sssd internal krb5 plugin for authentication against external IdP via OAuth2
- Resolves: rhbz#2062689 - [Improvement] Add user and group version of sss_nss_getorigbyname()
- Resolves: rhbz#2065692 - [RHEL8] Ship new sub-package called sssd-idp into sssd
- Resolves: rhbz#2072050 - sssd_nss exiting (due to missing 'sssd' local user) making SSSD service to restart in a loop
- Resolves: rhbz#2072931 - Use right sdap_domain in ad_domain_info_send
- Resolves: rhbz#2087088 - sssd does not enforce smartcard auth for kde screen locker
- Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol
- Resolves: rhbz#2087745 - 2FA prompting setting ineffective
- Resolves: rhbz#2087746 - sssd fails GPO-based access if AD have setup with Japanese language</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.2-1" date="1655726400">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2098620 - sdap_nested_group_deref_direct_process() triggers internal watchdog for large data sets
- Resolves: rhbz#2098619 - [Improvement] add SSSD support for more than one CRL PEM file name with parameters certificate_verification and crl_file
- Resolves: rhbz#2088817 - pam_sss_gss ceased to work after upgrade to 8.6
- Resolves: rhbz#2098616 - Add idp authentication indicator in man page of sssd.conf
- Resolves: rhbz#2056035 - 'getent hosts' not return hosts if they have more than one CN in LDAP
- Resolves: rhbz#2098615 - Regression "Missing internal domain data." when setting ad_domain to incorrect
- Resolves: rhbz#2098617 - Harden kerberos ticket validation
- Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-1" date="1657713600">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2063016 - [sssd] RHEL 8.7 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-2" date="1660132800">- Resolves: rhbz#2116488 - virsh command will hang after the host run several auto test cases
- Resolves: rhbz#2116486 - [regression] sssctl analyze fails to parse PAM related sssd logs
- Resolves: rhbz#2116487 - cache_req_data_set_hybrid_lookup: cache_req_data should never be NULL</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-3" date="1661256000">- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8
- Resolves: rhbz#2119726 - sssctl analyze --logdir option requires sssd to be configured
- Resolves: rhbz#2120669 - Incorrect request ID tracking from responder to backend</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4" date="1661515200">- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4.1" date="1665662400">- Resolves: rhbz#2128544 - Cannot SSH with AD user to ipa-client (`krb5_validate` and `pac_check` settings conflict) [rhel-8.7.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4.2" date="1670587200">- Resolves: rhbz#2139871 - Analyzer: Optimize and remove duplicate messages in verbose list [rhel-8.7.0.z]
- Resolves: rhbz#2142961 - SSSD: `sssctl analyze` command shouldn't require 'root' privileged [rhel-8.7.0.z]
- Resolves: rhbz#2148989 - UPN check cannot be disabled explicitly but requires krb5_validate = false' as a work-around [rhel-8.7.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4.3" date="1671105600">- Resolves: rhbz#2152883 - authenticating against external IdP services okta (native app) with OAuth client secret failed [rhel-8.7.0.z]</changelog>
</package>
<package pkgid="2884e1563a179a33a67f59038a8c7fca381bf131d9467a5ff1704c19bac6c69d" name="libstdc++" arch="i686">
  <version epoch="0" ver="8.5.0" rel="16.el8_7"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-7" date="1639137600">- backport PCH tweaks (#2030878)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-8" date="1643025600">- aarch64: Add -mtune=neoverse-512tvb (#1845932)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-9" date="1643025601">- apply cprop_hardreg fix for narrow mode != lowpart targets (#2028609)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-10" date="1643284800">- fix typo in the cprop_hardreg patch (#2028609)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-11" date="1648641600">- Add a plugin-annobin subpackage.  (#2067150)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-12" date="1648814400">- Fix nop generation in annobin plugin.  (#2067150)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-13" date="1650456000">- require docbook-style-xsl instead of docbook5-style-xsl (#2073888)
- backport Default widths with -fdec-format-defaults patch (#2074614)</changelog>
  <changelog author="Jonathan Wakely &lt;jwakely@redhat.com&gt; 8.5.0-14" date="1657281600">- backport std::regex check for invalid range (#2001788)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-15" date="1658318400">- backport straight-line-speculation mitigation (#2108721)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-16" date="1668772800">- fix deserialization for std::normal_distribution (#2144075,
  PR libstdc++/105502)</changelog>
</package>
<package pkgid="f5d95241af85945fe1d8b256622923a9d274612e63d20a77598fff6ae156bb7f" name="libstdc++" arch="x86_64">
  <version epoch="0" ver="8.5.0" rel="16.el8_7"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-7" date="1639137600">- backport PCH tweaks (#2030878)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-8" date="1643025600">- aarch64: Add -mtune=neoverse-512tvb (#1845932)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-9" date="1643025601">- apply cprop_hardreg fix for narrow mode != lowpart targets (#2028609)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-10" date="1643284800">- fix typo in the cprop_hardreg patch (#2028609)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-11" date="1648641600">- Add a plugin-annobin subpackage.  (#2067150)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-12" date="1648814400">- Fix nop generation in annobin plugin.  (#2067150)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-13" date="1650456000">- require docbook-style-xsl instead of docbook5-style-xsl (#2073888)
- backport Default widths with -fdec-format-defaults patch (#2074614)</changelog>
  <changelog author="Jonathan Wakely &lt;jwakely@redhat.com&gt; 8.5.0-14" date="1657281600">- backport std::regex check for invalid range (#2001788)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-15" date="1658318400">- backport straight-line-speculation mitigation (#2108721)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-16" date="1668772800">- fix deserialization for std::normal_distribution (#2144075,
  PR libstdc++/105502)</changelog>
</package>
<package pkgid="a378922c4bea14490a62f8718bf23901290f949dd8c1ecece7064b13731a88f3" name="libtasn1" arch="i686">
  <version epoch="0" ver="4.13" rel="4.el8_7"/>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; 4.9-2" date="1478520000">- Move development related docs to devel sub package
- Cleanup spec and macros
- Update valgrind ExclusiveArch</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; - 4.10-1" date="1484654400">- Update to 4.10 (#1413792)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.10-2" date="1486728000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; - 4.12-1" date="1496059200">- Update to 4.12 (#1456190)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.12-2" date="1501070400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.12-3" date="1501761600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; - 4.13-1" date="1516190400">- Update to 4.13 (#1535261)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.13-2" date="1518004800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 4.13-3" date="1533297600">- Honor %{valgrind_arches}</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 4.13-4" date="1669809600">- Resolves: rhbz#2140600</changelog>
</package>
<package pkgid="fcfb6704fd829b7a8a468765aeab4296378fc9bf31a8592e567d9bb184a74be2" name="libtasn1" arch="x86_64">
  <version epoch="0" ver="4.13" rel="4.el8_7"/>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; 4.9-2" date="1478520000">- Move development related docs to devel sub package
- Cleanup spec and macros
- Update valgrind ExclusiveArch</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; - 4.10-1" date="1484654400">- Update to 4.10 (#1413792)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.10-2" date="1486728000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; - 4.12-1" date="1496059200">- Update to 4.12 (#1456190)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.12-2" date="1501070400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.12-3" date="1501761600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; - 4.13-1" date="1516190400">- Update to 4.13 (#1535261)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.13-2" date="1518004800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 4.13-3" date="1533297600">- Honor %{valgrind_arches}</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 4.13-4" date="1669809600">- Resolves: rhbz#2140600</changelog>
</package>
<package pkgid="0e6f43af9acc1580f7cc2053571794c17deead21cdf1333a525df2b5c266a0a9" name="libtsan" arch="x86_64">
  <version epoch="0" ver="8.5.0" rel="16.el8_7"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-7" date="1639137600">- backport PCH tweaks (#2030878)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-8" date="1643025600">- aarch64: Add -mtune=neoverse-512tvb (#1845932)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-9" date="1643025601">- apply cprop_hardreg fix for narrow mode != lowpart targets (#2028609)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-10" date="1643284800">- fix typo in the cprop_hardreg patch (#2028609)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-11" date="1648641600">- Add a plugin-annobin subpackage.  (#2067150)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-12" date="1648814400">- Fix nop generation in annobin plugin.  (#2067150)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-13" date="1650456000">- require docbook-style-xsl instead of docbook5-style-xsl (#2073888)
- backport Default widths with -fdec-format-defaults patch (#2074614)</changelog>
  <changelog author="Jonathan Wakely &lt;jwakely@redhat.com&gt; 8.5.0-14" date="1657281600">- backport std::regex check for invalid range (#2001788)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-15" date="1658318400">- backport straight-line-speculation mitigation (#2108721)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-16" date="1668772800">- fix deserialization for std::normal_distribution (#2144075,
  PR libstdc++/105502)</changelog>
</package>
<package pkgid="da3e795164d94c46bf499597dfd26eb78f8007011427abae10d6127d2a12a88e" name="libubsan" arch="i686">
  <version epoch="0" ver="8.5.0" rel="16.el8_7"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-7" date="1639137600">- backport PCH tweaks (#2030878)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-8" date="1643025600">- aarch64: Add -mtune=neoverse-512tvb (#1845932)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-9" date="1643025601">- apply cprop_hardreg fix for narrow mode != lowpart targets (#2028609)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-10" date="1643284800">- fix typo in the cprop_hardreg patch (#2028609)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-11" date="1648641600">- Add a plugin-annobin subpackage.  (#2067150)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-12" date="1648814400">- Fix nop generation in annobin plugin.  (#2067150)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-13" date="1650456000">- require docbook-style-xsl instead of docbook5-style-xsl (#2073888)
- backport Default widths with -fdec-format-defaults patch (#2074614)</changelog>
  <changelog author="Jonathan Wakely &lt;jwakely@redhat.com&gt; 8.5.0-14" date="1657281600">- backport std::regex check for invalid range (#2001788)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-15" date="1658318400">- backport straight-line-speculation mitigation (#2108721)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-16" date="1668772800">- fix deserialization for std::normal_distribution (#2144075,
  PR libstdc++/105502)</changelog>
</package>
<package pkgid="4a8a9a416db9371d7755250f52371819dfba7a15dc2c92d28844cfc8bd4703d0" name="libubsan" arch="x86_64">
  <version epoch="0" ver="8.5.0" rel="16.el8_7"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-7" date="1639137600">- backport PCH tweaks (#2030878)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-8" date="1643025600">- aarch64: Add -mtune=neoverse-512tvb (#1845932)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-9" date="1643025601">- apply cprop_hardreg fix for narrow mode != lowpart targets (#2028609)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-10" date="1643284800">- fix typo in the cprop_hardreg patch (#2028609)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-11" date="1648641600">- Add a plugin-annobin subpackage.  (#2067150)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-12" date="1648814400">- Fix nop generation in annobin plugin.  (#2067150)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-13" date="1650456000">- require docbook-style-xsl instead of docbook5-style-xsl (#2073888)
- backport Default widths with -fdec-format-defaults patch (#2074614)</changelog>
  <changelog author="Jonathan Wakely &lt;jwakely@redhat.com&gt; 8.5.0-14" date="1657281600">- backport std::regex check for invalid range (#2001788)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-15" date="1658318400">- backport straight-line-speculation mitigation (#2108721)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-16" date="1668772800">- fix deserialization for std::normal_distribution (#2144075,
  PR libstdc++/105502)</changelog>
</package>
<package pkgid="7ec848a7645fc40b3c5f95ca554eafeee9183529189644497c8de18975f45526" name="libuuid" arch="i686">
  <version epoch="0" ver="2.32.1" rel="39.el8_7"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-29" date="1638878400">- fix #1988955 - script command continues without stopping.
- fix #2041498 - incorrect partition size calculation for BLKPG_* ioctls
- fix #2011602 - logger from util-linux incorrectly handles long messages
- fix #1916151 - [RFE] spread fstrim.timer across time
- fix #1894192 - Update or backport setpriv --pdeathsig
- fix #2026511 - blkid fails to complete when targeting  non-block devices</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-30" date="1641211200">- update lib-sys-add-sysfs_chrdev_devno_to_devname.patch (#2026511)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-31" date="1641902400">- improve #2026511 fix - blkid fails to complete when targeting non-block devices
- fix #1950187 - Ambient capabilities failed to applied to non-root user</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-32" date="1642420800">- change bug number (#2016229 to #2041498)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-34" date="1642420801">- rebuild after revert</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-35" date="1646740800">- fix #2058176 - losetup Retry LOOP_SET_STATUS64 on EAGAIN</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-36" date="1657800000">- fix #2060030 - Please backport patches for atari partition detection to RHEL 8
- fix #2069187 - Internal testsuite for lscpu failed on aarch64
- fix #2093166 - lslogins reports incorrect "Password is locked" status
- fix #2059241 - rpm -V / --verify reports bad user/group/mtime for /run/uuidd
- fix #2044592 - Move /var/log/lastlog ownership to systemd</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-37" date="1657886400">- update atari partition tests (related to #2060030)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-38" date="1661169600">- improve tmpfiles.d use in spec file (related to #2059241)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-39" date="1668600000">- fix #2141969 - Add --cont-clock feature for libuuid and uuidd</changelog>
</package>
<package pkgid="5af87fafe814d6eeaed72795ad1ee6b012038f28755154937c207f208acb6ca9" name="libuuid" arch="x86_64">
  <version epoch="0" ver="2.32.1" rel="39.el8_7"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-29" date="1638878400">- fix #1988955 - script command continues without stopping.
- fix #2041498 - incorrect partition size calculation for BLKPG_* ioctls
- fix #2011602 - logger from util-linux incorrectly handles long messages
- fix #1916151 - [RFE] spread fstrim.timer across time
- fix #1894192 - Update or backport setpriv --pdeathsig
- fix #2026511 - blkid fails to complete when targeting  non-block devices</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-30" date="1641211200">- update lib-sys-add-sysfs_chrdev_devno_to_devname.patch (#2026511)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-31" date="1641902400">- improve #2026511 fix - blkid fails to complete when targeting non-block devices
- fix #1950187 - Ambient capabilities failed to applied to non-root user</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-32" date="1642420800">- change bug number (#2016229 to #2041498)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-34" date="1642420801">- rebuild after revert</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-35" date="1646740800">- fix #2058176 - losetup Retry LOOP_SET_STATUS64 on EAGAIN</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-36" date="1657800000">- fix #2060030 - Please backport patches for atari partition detection to RHEL 8
- fix #2069187 - Internal testsuite for lscpu failed on aarch64
- fix #2093166 - lslogins reports incorrect "Password is locked" status
- fix #2059241 - rpm -V / --verify reports bad user/group/mtime for /run/uuidd
- fix #2044592 - Move /var/log/lastlog ownership to systemd</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-37" date="1657886400">- update atari partition tests (related to #2060030)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-38" date="1661169600">- improve tmpfiles.d use in spec file (related to #2059241)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-39" date="1668600000">- fix #2141969 - Add --cont-clock feature for libuuid and uuidd</changelog>
</package>
<package pkgid="246894d669d181dd8f951e32c96b9d6c45e7986c5cf268a07d281728dc24c5ab" name="libuuid-devel" arch="i686">
  <version epoch="0" ver="2.32.1" rel="39.el8_7"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-29" date="1638878400">- fix #1988955 - script command continues without stopping.
- fix #2041498 - incorrect partition size calculation for BLKPG_* ioctls
- fix #2011602 - logger from util-linux incorrectly handles long messages
- fix #1916151 - [RFE] spread fstrim.timer across time
- fix #1894192 - Update or backport setpriv --pdeathsig
- fix #2026511 - blkid fails to complete when targeting  non-block devices</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-30" date="1641211200">- update lib-sys-add-sysfs_chrdev_devno_to_devname.patch (#2026511)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-31" date="1641902400">- improve #2026511 fix - blkid fails to complete when targeting non-block devices
- fix #1950187 - Ambient capabilities failed to applied to non-root user</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-32" date="1642420800">- change bug number (#2016229 to #2041498)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-34" date="1642420801">- rebuild after revert</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-35" date="1646740800">- fix #2058176 - losetup Retry LOOP_SET_STATUS64 on EAGAIN</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-36" date="1657800000">- fix #2060030 - Please backport patches for atari partition detection to RHEL 8
- fix #2069187 - Internal testsuite for lscpu failed on aarch64
- fix #2093166 - lslogins reports incorrect "Password is locked" status
- fix #2059241 - rpm -V / --verify reports bad user/group/mtime for /run/uuidd
- fix #2044592 - Move /var/log/lastlog ownership to systemd</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-37" date="1657886400">- update atari partition tests (related to #2060030)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-38" date="1661169600">- improve tmpfiles.d use in spec file (related to #2059241)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-39" date="1668600000">- fix #2141969 - Add --cont-clock feature for libuuid and uuidd</changelog>
</package>
<package pkgid="ba70a90e158881e5a478c3b02ace38de5c266623e364d625fa54044b25a1f286" name="libuuid-devel" arch="x86_64">
  <version epoch="0" ver="2.32.1" rel="39.el8_7"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-29" date="1638878400">- fix #1988955 - script command continues without stopping.
- fix #2041498 - incorrect partition size calculation for BLKPG_* ioctls
- fix #2011602 - logger from util-linux incorrectly handles long messages
- fix #1916151 - [RFE] spread fstrim.timer across time
- fix #1894192 - Update or backport setpriv --pdeathsig
- fix #2026511 - blkid fails to complete when targeting  non-block devices</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-30" date="1641211200">- update lib-sys-add-sysfs_chrdev_devno_to_devname.patch (#2026511)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-31" date="1641902400">- improve #2026511 fix - blkid fails to complete when targeting non-block devices
- fix #1950187 - Ambient capabilities failed to applied to non-root user</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-32" date="1642420800">- change bug number (#2016229 to #2041498)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-34" date="1642420801">- rebuild after revert</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-35" date="1646740800">- fix #2058176 - losetup Retry LOOP_SET_STATUS64 on EAGAIN</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-36" date="1657800000">- fix #2060030 - Please backport patches for atari partition detection to RHEL 8
- fix #2069187 - Internal testsuite for lscpu failed on aarch64
- fix #2093166 - lslogins reports incorrect "Password is locked" status
- fix #2059241 - rpm -V / --verify reports bad user/group/mtime for /run/uuidd
- fix #2044592 - Move /var/log/lastlog ownership to systemd</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-37" date="1657886400">- update atari partition tests (related to #2060030)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-38" date="1661169600">- improve tmpfiles.d use in spec file (related to #2059241)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-39" date="1668600000">- fix #2141969 - Add --cont-clock feature for libuuid and uuidd</changelog>
</package>
<package pkgid="2727d369657bfdf294868e78258d2cf34f04e6214e7be1025613cd743cb4a8be" name="libwbclient" arch="i686">
  <version epoch="0" ver="4.16.4" rel="4.el8_7"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.15.5-7" date="1650456000">- resolves: rhbz#2076505 - PAM Kerberos authentication fails with a clock skew error</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.15.5-8" date="1651060800">- resolves: rhbz#2070522 - Fix UPNs handling in lookup_name*() calls</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.1-0" date="1651492800">- Update to Samba 4.16.1
- resolves: rhbz#2077468 Rebase Samba to the the latest 4.16.x release</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.2-0" date="1655121600">- Fix rpminspect abidiff
- related: rhbz#2077468 - Rebase Samba to 4.16.2</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.2-1" date="1655208000">- resolves: rhbz#2084162 - Fix printer displays only after 300 seconds timeout</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.3-0" date="1658145600">- related: rhbz#2077468 - Rebase Samba to 4.16.3
- resolves: rhbz#2106672 - The pcap background queue process should not be stopped
- resolves: rhbz#2106263 - Fix crash in rpcd_classic
- resolves: rhbz#2100093 - Fix net ads info returns LDAP server and LDAP server name</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-1" date="1659009600">- Rebase to version 4.16.4
- resolves: rhbz#2108331 - Fix CVE-2022-32742</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-2" date="1661428800">- resolves: rhbz#2120956 - Do not require samba package in python3-samba</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-3" date="1671537600">- resolves: rhbz#2154369 - Fix CVE-2022-38023</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-4" date="1673870400">- related: rhbz#2154369 - Add additional patch for CVE-2022-38023</changelog>
</package>
<package pkgid="2f3c6189d064a0631631f6d0b5bf632b443ca959c59576412fa9eddc610c4efb" name="libwbclient" arch="x86_64">
  <version epoch="0" ver="4.16.4" rel="4.el8_7"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.15.5-7" date="1650456000">- resolves: rhbz#2076505 - PAM Kerberos authentication fails with a clock skew error</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.15.5-8" date="1651060800">- resolves: rhbz#2070522 - Fix UPNs handling in lookup_name*() calls</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.1-0" date="1651492800">- Update to Samba 4.16.1
- resolves: rhbz#2077468 Rebase Samba to the the latest 4.16.x release</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.2-0" date="1655121600">- Fix rpminspect abidiff
- related: rhbz#2077468 - Rebase Samba to 4.16.2</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.2-1" date="1655208000">- resolves: rhbz#2084162 - Fix printer displays only after 300 seconds timeout</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.3-0" date="1658145600">- related: rhbz#2077468 - Rebase Samba to 4.16.3
- resolves: rhbz#2106672 - The pcap background queue process should not be stopped
- resolves: rhbz#2106263 - Fix crash in rpcd_classic
- resolves: rhbz#2100093 - Fix net ads info returns LDAP server and LDAP server name</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-1" date="1659009600">- Rebase to version 4.16.4
- resolves: rhbz#2108331 - Fix CVE-2022-32742</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-2" date="1661428800">- resolves: rhbz#2120956 - Do not require samba package in python3-samba</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-3" date="1671537600">- resolves: rhbz#2154369 - Fix CVE-2022-38023</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-4" date="1673870400">- related: rhbz#2154369 - Add additional patch for CVE-2022-38023</changelog>
</package>
<package pkgid="fd4045f18cf4f1c77ab6cf05039309d17fa6bb7b17205d89c5657dff80a79b50" name="libwbclient" arch="i686">
  <version epoch="0" ver="4.16.4" rel="6.el8_7"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.1-0" date="1651492800">- Update to Samba 4.16.1
- resolves: rhbz#2077468 Rebase Samba to the the latest 4.16.x release</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.2-0" date="1655121600">- Fix rpminspect abidiff
- related: rhbz#2077468 - Rebase Samba to 4.16.2</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.2-1" date="1655208000">- resolves: rhbz#2084162 - Fix printer displays only after 300 seconds timeout</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.3-0" date="1658145600">- related: rhbz#2077468 - Rebase Samba to 4.16.3
- resolves: rhbz#2106672 - The pcap background queue process should not be stopped
- resolves: rhbz#2106263 - Fix crash in rpcd_classic
- resolves: rhbz#2100093 - Fix net ads info returns LDAP server and LDAP server name</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-1" date="1659009600">- Rebase to version 4.16.4
- resolves: rhbz#2108331 - Fix CVE-2022-32742</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-2" date="1661428800">- resolves: rhbz#2120956 - Do not require samba package in python3-samba</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-3" date="1671537600">- resolves: rhbz#2154369 - Fix CVE-2022-38023</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-4" date="1673870400">- related: rhbz#2154369 - Add additional patch for CVE-2022-38023</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.4-5" date="1676548800">- resolves: rhbz#2170394 - Fix share enum
- resolves: rhbz#2170467 - Add to package ctdb dependency for package samba-winbind-clients
- resolves: rhbz#2170468 - Add package dcerpc - fix winbind to retrieve user groups from AD
- resolves: rhbz#2170469 - Create package samba-tools</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.4-6" date="1676548801">- resolves: rhbz#2170468 - Remove libnetapi dependency from dcerpc</changelog>
</package>
<package pkgid="eddec47999602e968dd3b888b8b730c1704e895a1164894155d6dcf20099c62e" name="libwbclient" arch="x86_64">
  <version epoch="0" ver="4.16.4" rel="6.el8_7"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.1-0" date="1651492800">- Update to Samba 4.16.1
- resolves: rhbz#2077468 Rebase Samba to the the latest 4.16.x release</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.2-0" date="1655121600">- Fix rpminspect abidiff
- related: rhbz#2077468 - Rebase Samba to 4.16.2</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.2-1" date="1655208000">- resolves: rhbz#2084162 - Fix printer displays only after 300 seconds timeout</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.3-0" date="1658145600">- related: rhbz#2077468 - Rebase Samba to 4.16.3
- resolves: rhbz#2106672 - The pcap background queue process should not be stopped
- resolves: rhbz#2106263 - Fix crash in rpcd_classic
- resolves: rhbz#2100093 - Fix net ads info returns LDAP server and LDAP server name</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-1" date="1659009600">- Rebase to version 4.16.4
- resolves: rhbz#2108331 - Fix CVE-2022-32742</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-2" date="1661428800">- resolves: rhbz#2120956 - Do not require samba package in python3-samba</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-3" date="1671537600">- resolves: rhbz#2154369 - Fix CVE-2022-38023</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-4" date="1673870400">- related: rhbz#2154369 - Add additional patch for CVE-2022-38023</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.4-5" date="1676548800">- resolves: rhbz#2170394 - Fix share enum
- resolves: rhbz#2170467 - Add to package ctdb dependency for package samba-winbind-clients
- resolves: rhbz#2170468 - Add package dcerpc - fix winbind to retrieve user groups from AD
- resolves: rhbz#2170469 - Create package samba-tools</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.4-6" date="1676548801">- resolves: rhbz#2170468 - Remove libnetapi dependency from dcerpc</changelog>
</package>
<package pkgid="54891a417568237369875c3075e7f9dbb828df7718a3108979f812b8be09bc81" name="libxml2" arch="i686">
  <version epoch="0" ver="2.9.7" rel="15.el8_7.1"/>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.7-7" date="1571918400">- Fix CVE-2018-14404 (#1595989)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.7-8" date="1579521600">- Fix CVE-2019-19956 (#1793001)
- Fix CVE-2020-7595 (#1799786)
- Fix CVE-2019-20388 (#1810058)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.7-9" date="1603108800">- Fix CVE-2020-24977 (#1878252)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.7-10" date="1620388800">- Fix CVE-2021-3516 (#1956976)
- Fix CVE-2021-3517 (#1957001)
- Fix CVE-2021-3518 (#1957028)
- Fix CVE-2021-3537 (#1957284)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.7-11" date="1621425600">- Fix CVE-2021-3541 (#1958783)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.7-12" date="1645704000">- Fix CVE-2022-23308 (#2057664)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.7-13" date="1645704001">- Bump release (#2057664)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.7-14" date="1652356800">- Fix CVE-2022-29824 (#2082298)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.7-15" date="1661342400">- Fix CVE-2016-3709 (#2120781)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.7-15.1" date="1667390400">- Fix CVE-2022-40303 (#2136562)
- Fix CVE-2022-40304 (#2136567)</changelog>
</package>
<package pkgid="0f3d84f4ce3501d088e1141d14c00d7272a1e56f4b4749280cd732a7e3c34eca" name="libxml2" arch="x86_64">
  <version epoch="0" ver="2.9.7" rel="15.el8_7.1"/>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.7-7" date="1571918400">- Fix CVE-2018-14404 (#1595989)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.7-8" date="1579521600">- Fix CVE-2019-19956 (#1793001)
- Fix CVE-2020-7595 (#1799786)
- Fix CVE-2019-20388 (#1810058)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.7-9" date="1603108800">- Fix CVE-2020-24977 (#1878252)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.7-10" date="1620388800">- Fix CVE-2021-3516 (#1956976)
- Fix CVE-2021-3517 (#1957001)
- Fix CVE-2021-3518 (#1957028)
- Fix CVE-2021-3537 (#1957284)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.7-11" date="1621425600">- Fix CVE-2021-3541 (#1958783)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.7-12" date="1645704000">- Fix CVE-2022-23308 (#2057664)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.7-13" date="1645704001">- Bump release (#2057664)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.7-14" date="1652356800">- Fix CVE-2022-29824 (#2082298)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.7-15" date="1661342400">- Fix CVE-2016-3709 (#2120781)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.7-15.1" date="1667390400">- Fix CVE-2022-40303 (#2136562)
- Fix CVE-2022-40304 (#2136567)</changelog>
</package>
<package pkgid="32dd75a95ef9ec4b110a5e1b4333c357534048357a935e044d55ae48f0570602" name="linux-firmware" arch="noarch">
  <version epoch="0" ver="20220726" rel="111.git150864a4.el8_7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20201218-102.git05789708" date="1611748800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1918613)</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; - 20210702-103.gitd79c2677" date="1625227200">- Update to latest upstream linux-firmware image for assorted updates
- Include support for the Qualcomm AX500-DBS (QCA6390) 802.11ax Wireless (rhbz 1725913)
- Firmware for Chelsio T4/T5/T6 adapters (rhbz 1961398)
- Incorrect NVIDIA GPU firmware used for TU102 and TU104 GPUs (rhbz 1965312)
- Package the new iwl7260 ucode files and also the new binary format PNVM</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; - 20211007-104.git7a300505" date="1633608000">- Update to latest upstream linux-firmware image for assorted updates
- Certain amdgpu firmware files cause random hangs with AMD Picasso/Raven Ridge APUs (rhbz 2000879)
- Support Intel CNVi AX211 Garfield Peak2 on ADL - Bluetooth (rhbz 1923179)
- Support Intel CNVi AX211 Garfield Peak2 on ADL - WIFI (rhbz 1923175)</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; - 20211119-105.gitf5d51956" date="1638792000">- Update to latest upstream linux-firmware image for assorted updates
- Update to latest AMD GPU firmware (rhbz 1986660)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; - 20220209-106.git6342082c" date="1644494400">- Update to latest upstream linux-firmware image for assorted updates
- Include AMD GPU firmware fix (rhbz 2031172)
- Support QCA WCN6856 v2.1 Module: Bluetooth firmware (rhbz 2007904)</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; - 20220517-107.git251d2900" date="1652875200">- Update to latest upstream linux-firmware image for assorted updates
- Include latest qed firmware update (rhbz 2040269)
- Include latest bnx2x firmware update (rhbz 2040273)
- Include latest ice firmware update (rhbz 2059384, rhbz 2081543)
- Include latest Qualcomm firmware update (rhbz 2062871)</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; - 20220517-108.git251d2900" date="1654257600">- Bump NVR due to conflict with late 8.6 iwl firmware package versioning</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; - 20220713-109.gitdfa29317" date="1657713600">- Update to latest upstream linux-firmware image for assorted updates
- Include even newer qed firmware update (rhbz 2040269)</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; - 20220726-110.git150864a4" date="1658836800">- Omit unused password-protected vxge firmware files from package (rhbz 2108051)
- Pick up latest AMD GPU firmwares</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; - 20220726-111.git150864a4" date="1676635200">- Update AMD GPU firmware for multiple monitor fixes (rhbz 2165148)</changelog>
</package>
<package pkgid="466add1c7468e212530a709f0015a99a6b6b062d5a36bec37474ebe43d2d461e" name="net-snmp-libs" arch="i686">
  <version epoch="1" ver="5.8" rel="25.el8_7.1"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.8-17" date="1597147200">- add math library in LDFLAGS (#1846252)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.8-18" date="1605096000">- fix CVE-2020-15862 (#1875497)
- fix bulk responses for invalid PID (#1817190)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.8-19" date="1606824000">- revert permission of config files to 600 (#1601060)
- fix error message when the address specified by clientaddr option
  is wrong or cannot be bound (#1877375)
- log error with /proc/net/if_inet6 only when IPv6 is enabled (#1824367)
- fix issue with quoting empty passphrase (#1817225)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.8-20" date="1609848000">- fix issue with parsing of long traps (#1912242)
- modify fix for #1877375</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.8-21" date="1623240000">- prevent parsing IP address twice (#1768908)
- add support for digests detected from ECC certs (#1919714)
- fix broken ErrorMsg at ucd-snmp (#1933150)
- add support for intermediate certs (#1914656)
- fix crash of certs with longer extension (#1908718)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.8-22" date="1624881600">- update engineTime when sending traps (#1973252)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.8-23" date="1633953600">- net-snmp-cert gencert create SHA512 (#1908331)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.8-24" date="1639051200">- fix dereferencing null pointer (#2021403)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.8-25" date="1645444800">- fix segfault with error on subcontainer (#2051370)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.8-25.1" date="1666094400">- backport memory leak fixes (#2134764)</changelog>
</package>
<package pkgid="7f864a7efed09eea7cffefef98b1389fcd41d8c762f2c827e4c7dc7d0a0a456a" name="net-snmp-libs" arch="x86_64">
  <version epoch="1" ver="5.8" rel="25.el8_7.1"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.8-17" date="1597147200">- add math library in LDFLAGS (#1846252)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.8-18" date="1605096000">- fix CVE-2020-15862 (#1875497)
- fix bulk responses for invalid PID (#1817190)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.8-19" date="1606824000">- revert permission of config files to 600 (#1601060)
- fix error message when the address specified by clientaddr option
  is wrong or cannot be bound (#1877375)
- log error with /proc/net/if_inet6 only when IPv6 is enabled (#1824367)
- fix issue with quoting empty passphrase (#1817225)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.8-20" date="1609848000">- fix issue with parsing of long traps (#1912242)
- modify fix for #1877375</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.8-21" date="1623240000">- prevent parsing IP address twice (#1768908)
- add support for digests detected from ECC certs (#1919714)
- fix broken ErrorMsg at ucd-snmp (#1933150)
- add support for intermediate certs (#1914656)
- fix crash of certs with longer extension (#1908718)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.8-22" date="1624881600">- update engineTime when sending traps (#1973252)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.8-23" date="1633953600">- net-snmp-cert gencert create SHA512 (#1908331)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.8-24" date="1639051200">- fix dereferencing null pointer (#2021403)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.8-25" date="1645444800">- fix segfault with error on subcontainer (#2051370)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.8-25.1" date="1666094400">- backport memory leak fixes (#2134764)</changelog>
</package>
<package pkgid="90aac0a0810a3898bdd3abc284437b1e53699f4167805feee9c0312321b37d84" name="nfs-utils" arch="x86_64">
  <version epoch="1" ver="2.3.3" rel="57.el8_7.1"/>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 2.3.3-49" date="1644840000">- mount.nfs Fix error reporting for already mounted shares (bz 1946346)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 2.3.3-50" date="1645272000">- mount.nfs: Fix Typo auto negotiating code. (bz 1946346)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 2.3.3-51" date="1646654400">- libnfsidmap: Turn off default verbosity (bz 2057612)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 2.3.3-52" date="1653393600">- manpage: Add a description of the softreval/nosoftreval (bz 2073476)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 2.3.3-53" date="1653998400">- rpcctl: Add a rpcctl.py tool (bz 2087187)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 2.3.3-54" date="1655208000">- Create the nfsrahead command (bz 1946283)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 2.3.3-55" date="1656331200">- rpcctl: Remove subparser required option as that was added in py3.7 (bz 2087187)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 2.3.3-56" date="1656590400">- rpcctl: 'PosixPath' object has no attribute 'readlink' (bz 2087187)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 2.3.3-57" date="1659441600">- rpc-statd.service: Stop rpcbind and rpc.stat in an exit race (bz 2100395)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 2.3.3-57_7.1" date="1670414400">- mountd: Check 'nfsd/clients' directory presence (bz 2150899)</changelog>
</package>
<package pkgid="ea38671122b9e328dfeb460d35d105333b1030364f1c687400f0dba1191fd6fe" name="opencryptoki" arch="x86_64">
  <version epoch="0" ver="3.18.0" rel="5.el8_7"/>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.16.0-6" date="1631534400">- Fix: Could not open /run/lock/opencryptoki/LCK..APIlock</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.17.0-1" date="1634644800">- Resolves: #1984993, rebase to 3.17.0
- Resolves: #1984870, openCryptoki key management tool</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.17.0-2" date="1636459200">- Related: #1984993, add missing p11sak_defined_attrs.conf</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.17.0-3" date="1642420800">- Resolves: #2040677, API: Unlock GlobMutex if user and group check fails</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.17.0-4" date="1650024000">- Resolves: #2066762, Dilithium support not available</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.18.0-1" date="1653393600">- Resolves: #2043845, rebase to 3.18.0
- Resolves: #2043854, add crypto counters
- Resolves: #2043855, support crypto profiles</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.18.0-2" date="1654603200">- Related: #2043854, fix json output</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.18.0-3" date="1659355200">- Related: #2043854, do not touch opencryptoki.conf if it is in place already and even if it is unchanged
- Resolves: #2112785, EP11: Fix C_GetMechanismList returning CKR_BUFFER_TOO_SMALL</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.18.0-4" date="1666180800">- Resolves: #2129059, C_GenerateKeyPair() fails after generating &gt; 500 RSA keys with CEX7 crypto cards</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.18.0-5" date="1666267200">- Related: #2129059, rebased the patch</changelog>
</package>
<package pkgid="788332cbf336f10ba800d0648bb0376402cb9a8e1c02df229366737d24e9db50" name="opencryptoki-icsftok" arch="x86_64">
  <version epoch="0" ver="3.18.0" rel="5.el8_7"/>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.16.0-6" date="1631534400">- Fix: Could not open /run/lock/opencryptoki/LCK..APIlock</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.17.0-1" date="1634644800">- Resolves: #1984993, rebase to 3.17.0
- Resolves: #1984870, openCryptoki key management tool</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.17.0-2" date="1636459200">- Related: #1984993, add missing p11sak_defined_attrs.conf</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.17.0-3" date="1642420800">- Resolves: #2040677, API: Unlock GlobMutex if user and group check fails</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.17.0-4" date="1650024000">- Resolves: #2066762, Dilithium support not available</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.18.0-1" date="1653393600">- Resolves: #2043845, rebase to 3.18.0
- Resolves: #2043854, add crypto counters
- Resolves: #2043855, support crypto profiles</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.18.0-2" date="1654603200">- Related: #2043854, fix json output</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.18.0-3" date="1659355200">- Related: #2043854, do not touch opencryptoki.conf if it is in place already and even if it is unchanged
- Resolves: #2112785, EP11: Fix C_GetMechanismList returning CKR_BUFFER_TOO_SMALL</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.18.0-4" date="1666180800">- Resolves: #2129059, C_GenerateKeyPair() fails after generating &gt; 500 RSA keys with CEX7 crypto cards</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.18.0-5" date="1666267200">- Related: #2129059, rebased the patch</changelog>
</package>
<package pkgid="8429d58be285326dee8b79300175037ee6e3929df719c3eb6aebce60b3c83b7f" name="opencryptoki-libs" arch="i686">
  <version epoch="0" ver="3.18.0" rel="5.el8_7"/>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.16.0-6" date="1631534400">- Fix: Could not open /run/lock/opencryptoki/LCK..APIlock</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.17.0-1" date="1634644800">- Resolves: #1984993, rebase to 3.17.0
- Resolves: #1984870, openCryptoki key management tool</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.17.0-2" date="1636459200">- Related: #1984993, add missing p11sak_defined_attrs.conf</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.17.0-3" date="1642420800">- Resolves: #2040677, API: Unlock GlobMutex if user and group check fails</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.17.0-4" date="1650024000">- Resolves: #2066762, Dilithium support not available</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.18.0-1" date="1653393600">- Resolves: #2043845, rebase to 3.18.0
- Resolves: #2043854, add crypto counters
- Resolves: #2043855, support crypto profiles</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.18.0-2" date="1654603200">- Related: #2043854, fix json output</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.18.0-3" date="1659355200">- Related: #2043854, do not touch opencryptoki.conf if it is in place already and even if it is unchanged
- Resolves: #2112785, EP11: Fix C_GetMechanismList returning CKR_BUFFER_TOO_SMALL</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.18.0-4" date="1666180800">- Resolves: #2129059, C_GenerateKeyPair() fails after generating &gt; 500 RSA keys with CEX7 crypto cards</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.18.0-5" date="1666267200">- Related: #2129059, rebased the patch</changelog>
</package>
<package pkgid="b3317f3a254f9024192c9775106832e4039abeef48ad837123409bf167f9aed5" name="opencryptoki-libs" arch="x86_64">
  <version epoch="0" ver="3.18.0" rel="5.el8_7"/>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.16.0-6" date="1631534400">- Fix: Could not open /run/lock/opencryptoki/LCK..APIlock</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.17.0-1" date="1634644800">- Resolves: #1984993, rebase to 3.17.0
- Resolves: #1984870, openCryptoki key management tool</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.17.0-2" date="1636459200">- Related: #1984993, add missing p11sak_defined_attrs.conf</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.17.0-3" date="1642420800">- Resolves: #2040677, API: Unlock GlobMutex if user and group check fails</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.17.0-4" date="1650024000">- Resolves: #2066762, Dilithium support not available</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.18.0-1" date="1653393600">- Resolves: #2043845, rebase to 3.18.0
- Resolves: #2043854, add crypto counters
- Resolves: #2043855, support crypto profiles</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.18.0-2" date="1654603200">- Related: #2043854, fix json output</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.18.0-3" date="1659355200">- Related: #2043854, do not touch opencryptoki.conf if it is in place already and even if it is unchanged
- Resolves: #2112785, EP11: Fix C_GetMechanismList returning CKR_BUFFER_TOO_SMALL</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.18.0-4" date="1666180800">- Resolves: #2129059, C_GenerateKeyPair() fails after generating &gt; 500 RSA keys with CEX7 crypto cards</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.18.0-5" date="1666267200">- Related: #2129059, rebased the patch</changelog>
</package>
<package pkgid="1a77c0d42a61003cf3600a8dc6857da372334ebd2ecf26121f12c51aeabdae0e" name="opencryptoki-swtok" arch="x86_64">
  <version epoch="0" ver="3.18.0" rel="5.el8_7"/>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.16.0-6" date="1631534400">- Fix: Could not open /run/lock/opencryptoki/LCK..APIlock</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.17.0-1" date="1634644800">- Resolves: #1984993, rebase to 3.17.0
- Resolves: #1984870, openCryptoki key management tool</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.17.0-2" date="1636459200">- Related: #1984993, add missing p11sak_defined_attrs.conf</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.17.0-3" date="1642420800">- Resolves: #2040677, API: Unlock GlobMutex if user and group check fails</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.17.0-4" date="1650024000">- Resolves: #2066762, Dilithium support not available</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.18.0-1" date="1653393600">- Resolves: #2043845, rebase to 3.18.0
- Resolves: #2043854, add crypto counters
- Resolves: #2043855, support crypto profiles</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.18.0-2" date="1654603200">- Related: #2043854, fix json output</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.18.0-3" date="1659355200">- Related: #2043854, do not touch opencryptoki.conf if it is in place already and even if it is unchanged
- Resolves: #2112785, EP11: Fix C_GetMechanismList returning CKR_BUFFER_TOO_SMALL</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.18.0-4" date="1666180800">- Resolves: #2129059, C_GenerateKeyPair() fails after generating &gt; 500 RSA keys with CEX7 crypto cards</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.18.0-5" date="1666267200">- Related: #2129059, rebased the patch</changelog>
</package>
<package pkgid="755c02a5bd48fd7c640defeba5a04cd9d7a4072e833792fff20870d759ddf122" name="opencryptoki-tpmtok" arch="x86_64">
  <version epoch="0" ver="3.18.0" rel="5.el8_7"/>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.16.0-6" date="1631534400">- Fix: Could not open /run/lock/opencryptoki/LCK..APIlock</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.17.0-1" date="1634644800">- Resolves: #1984993, rebase to 3.17.0
- Resolves: #1984870, openCryptoki key management tool</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.17.0-2" date="1636459200">- Related: #1984993, add missing p11sak_defined_attrs.conf</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.17.0-3" date="1642420800">- Resolves: #2040677, API: Unlock GlobMutex if user and group check fails</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.17.0-4" date="1650024000">- Resolves: #2066762, Dilithium support not available</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.18.0-1" date="1653393600">- Resolves: #2043845, rebase to 3.18.0
- Resolves: #2043854, add crypto counters
- Resolves: #2043855, support crypto profiles</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.18.0-2" date="1654603200">- Related: #2043854, fix json output</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.18.0-3" date="1659355200">- Related: #2043854, do not touch opencryptoki.conf if it is in place already and even if it is unchanged
- Resolves: #2112785, EP11: Fix C_GetMechanismList returning CKR_BUFFER_TOO_SMALL</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.18.0-4" date="1666180800">- Resolves: #2129059, C_GenerateKeyPair() fails after generating &gt; 500 RSA keys with CEX7 crypto cards</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.18.0-5" date="1666267200">- Related: #2129059, rebased the patch</changelog>
</package>
<package pkgid="f41e9cae12b12265f787d1343d16666647903e79b02ddb439d83ab9eb1cef695" name="openssh" arch="x86_64">
  <version epoch="0" ver="8.0p1" rel="17.el8_7"/>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 8.0p1-8" date="1619438400">- ssh doesn't restore the blocking mode on standard output (#1942901)</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 8.0p1-9" date="1622635200">- CVE-2020-14145 openssh: Observable Discrepancy leading to an information
  leak in the algorithm negotiation (#1882252)
- Hostbased ssh authentication fails if session ID contains a '/' (#1944125)</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 8.0p1-10" date="1624276800">- sshd -T requires -C when "Match" is used in sshd_config (#1836277)</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 8.0p1-11" date="1633089600">- CVE-2021-41617 upstream fix (#2008885)</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 8.0p1-12" date="1634731200">- Add support for "Include" directive in sshd_config file (#1926103)</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 8.0p1-13" date="1635249600">- Upstream: ClientAliveCountMax=0 disable the connection killing behaviour (#2015828)</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 8.0p1-14" date="1654084800">- Upstream: add a local implementation of BSD realpath() for sftp-server (#2064249)
- Change product name from Fedora to RHEL in openssh-7.8p1-UsePAM-warning.patch (#1953807)
- Include caveat for crypto-policy in sshd manpage (#2044354)
- Change log level of FIPS specific log message to verbose (#2050511)
- Clarify force_file_perms (-m) documentation in sftp-server manpage (#1862504)
- Minimize the use of SHA1 as a proof of possession for RSA key (#2093897)</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 8.0p1-15" date="1655985600">- Fix new issues found by static analyzers</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 8.0p1-16" date="1656504000">- Omit client side from minimize-sha1-use.patch to prevent regression (#2093897)</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 8.0p1-17" date="1674475200">- Fix parsing of IPv6 IPs in sftp client (#2162733)</changelog>
</package>
<package pkgid="fb6ec49457aa80ca9913f634e4d88b38e7a32d05dda33e9c576a155d9148a76a" name="openssh-cavs" arch="x86_64">
  <version epoch="0" ver="8.0p1" rel="17.el8_7"/>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 8.0p1-8" date="1619438400">- ssh doesn't restore the blocking mode on standard output (#1942901)</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 8.0p1-9" date="1622635200">- CVE-2020-14145 openssh: Observable Discrepancy leading to an information
  leak in the algorithm negotiation (#1882252)
- Hostbased ssh authentication fails if session ID contains a '/' (#1944125)</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 8.0p1-10" date="1624276800">- sshd -T requires -C when "Match" is used in sshd_config (#1836277)</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 8.0p1-11" date="1633089600">- CVE-2021-41617 upstream fix (#2008885)</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 8.0p1-12" date="1634731200">- Add support for "Include" directive in sshd_config file (#1926103)</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 8.0p1-13" date="1635249600">- Upstream: ClientAliveCountMax=0 disable the connection killing behaviour (#2015828)</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 8.0p1-14" date="1654084800">- Upstream: add a local implementation of BSD realpath() for sftp-server (#2064249)
- Change product name from Fedora to RHEL in openssh-7.8p1-UsePAM-warning.patch (#1953807)
- Include caveat for crypto-policy in sshd manpage (#2044354)
- Change log level of FIPS specific log message to verbose (#2050511)
- Clarify force_file_perms (-m) documentation in sftp-server manpage (#1862504)
- Minimize the use of SHA1 as a proof of possession for RSA key (#2093897)</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 8.0p1-15" date="1655985600">- Fix new issues found by static analyzers</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 8.0p1-16" date="1656504000">- Omit client side from minimize-sha1-use.patch to prevent regression (#2093897)</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 8.0p1-17" date="1674475200">- Fix parsing of IPv6 IPs in sftp client (#2162733)</changelog>
</package>
<package pkgid="da220e3f648624a9d8d1188066f7cef527aa49059371ff1c32fa2362b9028313" name="openssh-clients" arch="x86_64">
  <version epoch="0" ver="8.0p1" rel="17.el8_7"/>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 8.0p1-8" date="1619438400">- ssh doesn't restore the blocking mode on standard output (#1942901)</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 8.0p1-9" date="1622635200">- CVE-2020-14145 openssh: Observable Discrepancy leading to an information
  leak in the algorithm negotiation (#1882252)
- Hostbased ssh authentication fails if session ID contains a '/' (#1944125)</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 8.0p1-10" date="1624276800">- sshd -T requires -C when "Match" is used in sshd_config (#1836277)</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 8.0p1-11" date="1633089600">- CVE-2021-41617 upstream fix (#2008885)</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 8.0p1-12" date="1634731200">- Add support for "Include" directive in sshd_config file (#1926103)</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 8.0p1-13" date="1635249600">- Upstream: ClientAliveCountMax=0 disable the connection killing behaviour (#2015828)</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 8.0p1-14" date="1654084800">- Upstream: add a local implementation of BSD realpath() for sftp-server (#2064249)
- Change product name from Fedora to RHEL in openssh-7.8p1-UsePAM-warning.patch (#1953807)
- Include caveat for crypto-policy in sshd manpage (#2044354)
- Change log level of FIPS specific log message to verbose (#2050511)
- Clarify force_file_perms (-m) documentation in sftp-server manpage (#1862504)
- Minimize the use of SHA1 as a proof of possession for RSA key (#2093897)</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 8.0p1-15" date="1655985600">- Fix new issues found by static analyzers</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 8.0p1-16" date="1656504000">- Omit client side from minimize-sha1-use.patch to prevent regression (#2093897)</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 8.0p1-17" date="1674475200">- Fix parsing of IPv6 IPs in sftp client (#2162733)</changelog>
</package>
<package pkgid="323bbb0978c076fbd52b2c496b6864311e2b2370669e3541764f446cbabfdc68" name="openssh-keycat" arch="x86_64">
  <version epoch="0" ver="8.0p1" rel="17.el8_7"/>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 8.0p1-8" date="1619438400">- ssh doesn't restore the blocking mode on standard output (#1942901)</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 8.0p1-9" date="1622635200">- CVE-2020-14145 openssh: Observable Discrepancy leading to an information
  leak in the algorithm negotiation (#1882252)
- Hostbased ssh authentication fails if session ID contains a '/' (#1944125)</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 8.0p1-10" date="1624276800">- sshd -T requires -C when "Match" is used in sshd_config (#1836277)</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 8.0p1-11" date="1633089600">- CVE-2021-41617 upstream fix (#2008885)</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 8.0p1-12" date="1634731200">- Add support for "Include" directive in sshd_config file (#1926103)</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 8.0p1-13" date="1635249600">- Upstream: ClientAliveCountMax=0 disable the connection killing behaviour (#2015828)</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 8.0p1-14" date="1654084800">- Upstream: add a local implementation of BSD realpath() for sftp-server (#2064249)
- Change product name from Fedora to RHEL in openssh-7.8p1-UsePAM-warning.patch (#1953807)
- Include caveat for crypto-policy in sshd manpage (#2044354)
- Change log level of FIPS specific log message to verbose (#2050511)
- Clarify force_file_perms (-m) documentation in sftp-server manpage (#1862504)
- Minimize the use of SHA1 as a proof of possession for RSA key (#2093897)</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 8.0p1-15" date="1655985600">- Fix new issues found by static analyzers</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 8.0p1-16" date="1656504000">- Omit client side from minimize-sha1-use.patch to prevent regression (#2093897)</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 8.0p1-17" date="1674475200">- Fix parsing of IPv6 IPs in sftp client (#2162733)</changelog>
</package>
<package pkgid="a13e80a3015d313d8562963ba930d01d7fd4f692c2da085f43cca9633d733ce3" name="openssh-ldap" arch="x86_64">
  <version epoch="0" ver="8.0p1" rel="17.el8_7"/>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 8.0p1-8" date="1619438400">- ssh doesn't restore the blocking mode on standard output (#1942901)</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 8.0p1-9" date="1622635200">- CVE-2020-14145 openssh: Observable Discrepancy leading to an information
  leak in the algorithm negotiation (#1882252)
- Hostbased ssh authentication fails if session ID contains a '/' (#1944125)</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 8.0p1-10" date="1624276800">- sshd -T requires -C when "Match" is used in sshd_config (#1836277)</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 8.0p1-11" date="1633089600">- CVE-2021-41617 upstream fix (#2008885)</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 8.0p1-12" date="1634731200">- Add support for "Include" directive in sshd_config file (#1926103)</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 8.0p1-13" date="1635249600">- Upstream: ClientAliveCountMax=0 disable the connection killing behaviour (#2015828)</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 8.0p1-14" date="1654084800">- Upstream: add a local implementation of BSD realpath() for sftp-server (#2064249)
- Change product name from Fedora to RHEL in openssh-7.8p1-UsePAM-warning.patch (#1953807)
- Include caveat for crypto-policy in sshd manpage (#2044354)
- Change log level of FIPS specific log message to verbose (#2050511)
- Clarify force_file_perms (-m) documentation in sftp-server manpage (#1862504)
- Minimize the use of SHA1 as a proof of possession for RSA key (#2093897)</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 8.0p1-15" date="1655985600">- Fix new issues found by static analyzers</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 8.0p1-16" date="1656504000">- Omit client side from minimize-sha1-use.patch to prevent regression (#2093897)</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 8.0p1-17" date="1674475200">- Fix parsing of IPv6 IPs in sftp client (#2162733)</changelog>
</package>
<package pkgid="dea8609cef4d046f186fa259457219f5e1e235f953de8443ee44b9ea6223eb6d" name="openssh-server" arch="x86_64">
  <version epoch="0" ver="8.0p1" rel="17.el8_7"/>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 8.0p1-8" date="1619438400">- ssh doesn't restore the blocking mode on standard output (#1942901)</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 8.0p1-9" date="1622635200">- CVE-2020-14145 openssh: Observable Discrepancy leading to an information
  leak in the algorithm negotiation (#1882252)
- Hostbased ssh authentication fails if session ID contains a '/' (#1944125)</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 8.0p1-10" date="1624276800">- sshd -T requires -C when "Match" is used in sshd_config (#1836277)</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 8.0p1-11" date="1633089600">- CVE-2021-41617 upstream fix (#2008885)</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 8.0p1-12" date="1634731200">- Add support for "Include" directive in sshd_config file (#1926103)</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 8.0p1-13" date="1635249600">- Upstream: ClientAliveCountMax=0 disable the connection killing behaviour (#2015828)</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 8.0p1-14" date="1654084800">- Upstream: add a local implementation of BSD realpath() for sftp-server (#2064249)
- Change product name from Fedora to RHEL in openssh-7.8p1-UsePAM-warning.patch (#1953807)
- Include caveat for crypto-policy in sshd manpage (#2044354)
- Change log level of FIPS specific log message to verbose (#2050511)
- Clarify force_file_perms (-m) documentation in sftp-server manpage (#1862504)
- Minimize the use of SHA1 as a proof of possession for RSA key (#2093897)</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 8.0p1-15" date="1655985600">- Fix new issues found by static analyzers</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 8.0p1-16" date="1656504000">- Omit client side from minimize-sha1-use.patch to prevent regression (#2093897)</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 8.0p1-17" date="1674475200">- Fix parsing of IPv6 IPs in sftp client (#2162733)</changelog>
</package>
<package pkgid="73d10602c6d0d535c9581f37306842b7c3fe2f7416afd9da165ba44343821b9e" name="openssl" arch="x86_64">
  <version epoch="1" ver="1.1.1k" rel="9.el8_7"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; 1.1.1g-16" date="1619438400">- Use AI_ADDRCONFIG only when explicit host name is given
- Allow only curves defined in RFC 8446 in TLS 1.3</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.1.1k-1" date="1621857600">- Update to version 1.1.1k</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:1.1.1k-2" date="1624449600">- Fixes FIPS_selftest to work in FIPS mode. Resolves: rhbz#1940085
- Using safe primes for FIPS DH self-test</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; - 1:1.1.1k-3" date="1624536000">- Cleansup the peer point formats on renegotiation
- Resolves rhbz#1965362</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; - 1:1.1.1k-4" date="1626436800">- Fixes bugs in s390x AES code.
- Uses the first detected address family if IPv6 is not available
- Reverts the changes in https://github.com/openssl/openssl/pull/13305
  as it introduces a regression if server has a DSA key pair, the handshake fails
  when the protocol is not explicitly set to TLS 1.2. However, if the patch is reverted,
  it has an effect on the "ssl_reject_handshake" feature in nginx. Although, this feature
  will continue to work, TLS 1.3 protocol becomes unavailable/disabled. This is already
  known - https://trac.nginx.org/nginx/ticket/2071#comment:1
  As per https://github.com/openssl/openssl/issues/16075#issuecomment-879939938, nginx
  could early callback instead of servername callback.
- Resolves: rhbz#1978214
- Related: rhbz#1934534</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; - 1:1.1.1k-5" date="1637064000">- Fixes CVE-2021-3712 openssl: Read buffer overruns processing ASN.1 strings
- Resolves: rhbz#2005402</changelog>
  <changelog author="Clemens Lang &lt;cllang@redhat.com&gt; - 1:1.1.1k-6" date="1648036800">- Fixes CVE-2022-0778 openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates
- Resolves: rhbz#2067146</changelog>
  <changelog author="Clemens Lang &lt;cllang@redhat.com&gt; - 1:1.1.1k-7" date="1657022400">- Fix CVE-2022-2097: AES OCB fails to encrypt some bytes on 32-bit x86
  Resolves: CVE-2022-2097
- Update expired certificates used in the testsuite
  Resolves: rhbz#2092462
- Fix CVE-2022-1292: openssl: c_rehash script allows command injection
  Resolves: rhbz#2090372
- Fix CVE-2022-2068: the c_rehash script allows command injection
  Resolves: rhbz#2098279</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:1.1.1k-8" date="1658404800">- Fix no-ec build
  Resolves: rhbz#2071020</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:1.1.1k-9" date="1675857600">- Fixed Timing Oracle in RSA Decryption
  Resolves: CVE-2022-4304
- Fixed Double free after calling PEM_read_bio_ex
  Resolves: CVE-2022-4450
- Fixed Use-after-free following BIO_new_NDEF
  Resolves: CVE-2023-0215
- Fixed X.400 address type confusion in X.509 GeneralName
  Resolves: CVE-2023-0286</changelog>
</package>
<package pkgid="573f071cb52404178e86d655e8d3f4af4710cfd2742955bd5efc635b7a75fe24" name="openssl-devel" arch="i686">
  <version epoch="1" ver="1.1.1k" rel="9.el8_7"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; 1.1.1g-16" date="1619438400">- Use AI_ADDRCONFIG only when explicit host name is given
- Allow only curves defined in RFC 8446 in TLS 1.3</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.1.1k-1" date="1621857600">- Update to version 1.1.1k</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:1.1.1k-2" date="1624449600">- Fixes FIPS_selftest to work in FIPS mode. Resolves: rhbz#1940085
- Using safe primes for FIPS DH self-test</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; - 1:1.1.1k-3" date="1624536000">- Cleansup the peer point formats on renegotiation
- Resolves rhbz#1965362</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; - 1:1.1.1k-4" date="1626436800">- Fixes bugs in s390x AES code.
- Uses the first detected address family if IPv6 is not available
- Reverts the changes in https://github.com/openssl/openssl/pull/13305
  as it introduces a regression if server has a DSA key pair, the handshake fails
  when the protocol is not explicitly set to TLS 1.2. However, if the patch is reverted,
  it has an effect on the "ssl_reject_handshake" feature in nginx. Although, this feature
  will continue to work, TLS 1.3 protocol becomes unavailable/disabled. This is already
  known - https://trac.nginx.org/nginx/ticket/2071#comment:1
  As per https://github.com/openssl/openssl/issues/16075#issuecomment-879939938, nginx
  could early callback instead of servername callback.
- Resolves: rhbz#1978214
- Related: rhbz#1934534</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; - 1:1.1.1k-5" date="1637064000">- Fixes CVE-2021-3712 openssl: Read buffer overruns processing ASN.1 strings
- Resolves: rhbz#2005402</changelog>
  <changelog author="Clemens Lang &lt;cllang@redhat.com&gt; - 1:1.1.1k-6" date="1648036800">- Fixes CVE-2022-0778 openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates
- Resolves: rhbz#2067146</changelog>
  <changelog author="Clemens Lang &lt;cllang@redhat.com&gt; - 1:1.1.1k-7" date="1657022400">- Fix CVE-2022-2097: AES OCB fails to encrypt some bytes on 32-bit x86
  Resolves: CVE-2022-2097
- Update expired certificates used in the testsuite
  Resolves: rhbz#2092462
- Fix CVE-2022-1292: openssl: c_rehash script allows command injection
  Resolves: rhbz#2090372
- Fix CVE-2022-2068: the c_rehash script allows command injection
  Resolves: rhbz#2098279</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:1.1.1k-8" date="1658404800">- Fix no-ec build
  Resolves: rhbz#2071020</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:1.1.1k-9" date="1675857600">- Fixed Timing Oracle in RSA Decryption
  Resolves: CVE-2022-4304
- Fixed Double free after calling PEM_read_bio_ex
  Resolves: CVE-2022-4450
- Fixed Use-after-free following BIO_new_NDEF
  Resolves: CVE-2023-0215
- Fixed X.400 address type confusion in X.509 GeneralName
  Resolves: CVE-2023-0286</changelog>
</package>
<package pkgid="4572bd8ceac2a49c8278747859d2c6295fd530595344f40dc396ff820b04e067" name="openssl-devel" arch="x86_64">
  <version epoch="1" ver="1.1.1k" rel="9.el8_7"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; 1.1.1g-16" date="1619438400">- Use AI_ADDRCONFIG only when explicit host name is given
- Allow only curves defined in RFC 8446 in TLS 1.3</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.1.1k-1" date="1621857600">- Update to version 1.1.1k</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:1.1.1k-2" date="1624449600">- Fixes FIPS_selftest to work in FIPS mode. Resolves: rhbz#1940085
- Using safe primes for FIPS DH self-test</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; - 1:1.1.1k-3" date="1624536000">- Cleansup the peer point formats on renegotiation
- Resolves rhbz#1965362</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; - 1:1.1.1k-4" date="1626436800">- Fixes bugs in s390x AES code.
- Uses the first detected address family if IPv6 is not available
- Reverts the changes in https://github.com/openssl/openssl/pull/13305
  as it introduces a regression if server has a DSA key pair, the handshake fails
  when the protocol is not explicitly set to TLS 1.2. However, if the patch is reverted,
  it has an effect on the "ssl_reject_handshake" feature in nginx. Although, this feature
  will continue to work, TLS 1.3 protocol becomes unavailable/disabled. This is already
  known - https://trac.nginx.org/nginx/ticket/2071#comment:1
  As per https://github.com/openssl/openssl/issues/16075#issuecomment-879939938, nginx
  could early callback instead of servername callback.
- Resolves: rhbz#1978214
- Related: rhbz#1934534</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; - 1:1.1.1k-5" date="1637064000">- Fixes CVE-2021-3712 openssl: Read buffer overruns processing ASN.1 strings
- Resolves: rhbz#2005402</changelog>
  <changelog author="Clemens Lang &lt;cllang@redhat.com&gt; - 1:1.1.1k-6" date="1648036800">- Fixes CVE-2022-0778 openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates
- Resolves: rhbz#2067146</changelog>
  <changelog author="Clemens Lang &lt;cllang@redhat.com&gt; - 1:1.1.1k-7" date="1657022400">- Fix CVE-2022-2097: AES OCB fails to encrypt some bytes on 32-bit x86
  Resolves: CVE-2022-2097
- Update expired certificates used in the testsuite
  Resolves: rhbz#2092462
- Fix CVE-2022-1292: openssl: c_rehash script allows command injection
  Resolves: rhbz#2090372
- Fix CVE-2022-2068: the c_rehash script allows command injection
  Resolves: rhbz#2098279</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:1.1.1k-8" date="1658404800">- Fix no-ec build
  Resolves: rhbz#2071020</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:1.1.1k-9" date="1675857600">- Fixed Timing Oracle in RSA Decryption
  Resolves: CVE-2022-4304
- Fixed Double free after calling PEM_read_bio_ex
  Resolves: CVE-2022-4450
- Fixed Use-after-free following BIO_new_NDEF
  Resolves: CVE-2023-0215
- Fixed X.400 address type confusion in X.509 GeneralName
  Resolves: CVE-2023-0286</changelog>
</package>
<package pkgid="fa7397d8a4b3530dd4e69c5a1f79cfc075b154fc2e02b2b8b765240d94ae00e4" name="openssl-libs" arch="i686">
  <version epoch="1" ver="1.1.1k" rel="9.el8_7"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; 1.1.1g-16" date="1619438400">- Use AI_ADDRCONFIG only when explicit host name is given
- Allow only curves defined in RFC 8446 in TLS 1.3</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.1.1k-1" date="1621857600">- Update to version 1.1.1k</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:1.1.1k-2" date="1624449600">- Fixes FIPS_selftest to work in FIPS mode. Resolves: rhbz#1940085
- Using safe primes for FIPS DH self-test</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; - 1:1.1.1k-3" date="1624536000">- Cleansup the peer point formats on renegotiation
- Resolves rhbz#1965362</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; - 1:1.1.1k-4" date="1626436800">- Fixes bugs in s390x AES code.
- Uses the first detected address family if IPv6 is not available
- Reverts the changes in https://github.com/openssl/openssl/pull/13305
  as it introduces a regression if server has a DSA key pair, the handshake fails
  when the protocol is not explicitly set to TLS 1.2. However, if the patch is reverted,
  it has an effect on the "ssl_reject_handshake" feature in nginx. Although, this feature
  will continue to work, TLS 1.3 protocol becomes unavailable/disabled. This is already
  known - https://trac.nginx.org/nginx/ticket/2071#comment:1
  As per https://github.com/openssl/openssl/issues/16075#issuecomment-879939938, nginx
  could early callback instead of servername callback.
- Resolves: rhbz#1978214
- Related: rhbz#1934534</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; - 1:1.1.1k-5" date="1637064000">- Fixes CVE-2021-3712 openssl: Read buffer overruns processing ASN.1 strings
- Resolves: rhbz#2005402</changelog>
  <changelog author="Clemens Lang &lt;cllang@redhat.com&gt; - 1:1.1.1k-6" date="1648036800">- Fixes CVE-2022-0778 openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates
- Resolves: rhbz#2067146</changelog>
  <changelog author="Clemens Lang &lt;cllang@redhat.com&gt; - 1:1.1.1k-7" date="1657022400">- Fix CVE-2022-2097: AES OCB fails to encrypt some bytes on 32-bit x86
  Resolves: CVE-2022-2097
- Update expired certificates used in the testsuite
  Resolves: rhbz#2092462
- Fix CVE-2022-1292: openssl: c_rehash script allows command injection
  Resolves: rhbz#2090372
- Fix CVE-2022-2068: the c_rehash script allows command injection
  Resolves: rhbz#2098279</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:1.1.1k-8" date="1658404800">- Fix no-ec build
  Resolves: rhbz#2071020</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:1.1.1k-9" date="1675857600">- Fixed Timing Oracle in RSA Decryption
  Resolves: CVE-2022-4304
- Fixed Double free after calling PEM_read_bio_ex
  Resolves: CVE-2022-4450
- Fixed Use-after-free following BIO_new_NDEF
  Resolves: CVE-2023-0215
- Fixed X.400 address type confusion in X.509 GeneralName
  Resolves: CVE-2023-0286</changelog>
</package>
<package pkgid="5e7bd342d3e884d91ee634e5476b728fd180799e844cf1d5824f062b3a5754b7" name="openssl-libs" arch="x86_64">
  <version epoch="1" ver="1.1.1k" rel="9.el8_7"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; 1.1.1g-16" date="1619438400">- Use AI_ADDRCONFIG only when explicit host name is given
- Allow only curves defined in RFC 8446 in TLS 1.3</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.1.1k-1" date="1621857600">- Update to version 1.1.1k</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:1.1.1k-2" date="1624449600">- Fixes FIPS_selftest to work in FIPS mode. Resolves: rhbz#1940085
- Using safe primes for FIPS DH self-test</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; - 1:1.1.1k-3" date="1624536000">- Cleansup the peer point formats on renegotiation
- Resolves rhbz#1965362</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; - 1:1.1.1k-4" date="1626436800">- Fixes bugs in s390x AES code.
- Uses the first detected address family if IPv6 is not available
- Reverts the changes in https://github.com/openssl/openssl/pull/13305
  as it introduces a regression if server has a DSA key pair, the handshake fails
  when the protocol is not explicitly set to TLS 1.2. However, if the patch is reverted,
  it has an effect on the "ssl_reject_handshake" feature in nginx. Although, this feature
  will continue to work, TLS 1.3 protocol becomes unavailable/disabled. This is already
  known - https://trac.nginx.org/nginx/ticket/2071#comment:1
  As per https://github.com/openssl/openssl/issues/16075#issuecomment-879939938, nginx
  could early callback instead of servername callback.
- Resolves: rhbz#1978214
- Related: rhbz#1934534</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; - 1:1.1.1k-5" date="1637064000">- Fixes CVE-2021-3712 openssl: Read buffer overruns processing ASN.1 strings
- Resolves: rhbz#2005402</changelog>
  <changelog author="Clemens Lang &lt;cllang@redhat.com&gt; - 1:1.1.1k-6" date="1648036800">- Fixes CVE-2022-0778 openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates
- Resolves: rhbz#2067146</changelog>
  <changelog author="Clemens Lang &lt;cllang@redhat.com&gt; - 1:1.1.1k-7" date="1657022400">- Fix CVE-2022-2097: AES OCB fails to encrypt some bytes on 32-bit x86
  Resolves: CVE-2022-2097
- Update expired certificates used in the testsuite
  Resolves: rhbz#2092462
- Fix CVE-2022-1292: openssl: c_rehash script allows command injection
  Resolves: rhbz#2090372
- Fix CVE-2022-2068: the c_rehash script allows command injection
  Resolves: rhbz#2098279</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:1.1.1k-8" date="1658404800">- Fix no-ec build
  Resolves: rhbz#2071020</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:1.1.1k-9" date="1675857600">- Fixed Timing Oracle in RSA Decryption
  Resolves: CVE-2022-4304
- Fixed Double free after calling PEM_read_bio_ex
  Resolves: CVE-2022-4450
- Fixed Use-after-free following BIO_new_NDEF
  Resolves: CVE-2023-0215
- Fixed X.400 address type confusion in X.509 GeneralName
  Resolves: CVE-2023-0286</changelog>
</package>
<package pkgid="f3393a57db6e955aab976a5cc9542533928bd926ad504d9d81ce1c94269d1ccc" name="openssl-perl" arch="x86_64">
  <version epoch="1" ver="1.1.1k" rel="9.el8_7"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; 1.1.1g-16" date="1619438400">- Use AI_ADDRCONFIG only when explicit host name is given
- Allow only curves defined in RFC 8446 in TLS 1.3</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.1.1k-1" date="1621857600">- Update to version 1.1.1k</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:1.1.1k-2" date="1624449600">- Fixes FIPS_selftest to work in FIPS mode. Resolves: rhbz#1940085
- Using safe primes for FIPS DH self-test</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; - 1:1.1.1k-3" date="1624536000">- Cleansup the peer point formats on renegotiation
- Resolves rhbz#1965362</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; - 1:1.1.1k-4" date="1626436800">- Fixes bugs in s390x AES code.
- Uses the first detected address family if IPv6 is not available
- Reverts the changes in https://github.com/openssl/openssl/pull/13305
  as it introduces a regression if server has a DSA key pair, the handshake fails
  when the protocol is not explicitly set to TLS 1.2. However, if the patch is reverted,
  it has an effect on the "ssl_reject_handshake" feature in nginx. Although, this feature
  will continue to work, TLS 1.3 protocol becomes unavailable/disabled. This is already
  known - https://trac.nginx.org/nginx/ticket/2071#comment:1
  As per https://github.com/openssl/openssl/issues/16075#issuecomment-879939938, nginx
  could early callback instead of servername callback.
- Resolves: rhbz#1978214
- Related: rhbz#1934534</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; - 1:1.1.1k-5" date="1637064000">- Fixes CVE-2021-3712 openssl: Read buffer overruns processing ASN.1 strings
- Resolves: rhbz#2005402</changelog>
  <changelog author="Clemens Lang &lt;cllang@redhat.com&gt; - 1:1.1.1k-6" date="1648036800">- Fixes CVE-2022-0778 openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates
- Resolves: rhbz#2067146</changelog>
  <changelog author="Clemens Lang &lt;cllang@redhat.com&gt; - 1:1.1.1k-7" date="1657022400">- Fix CVE-2022-2097: AES OCB fails to encrypt some bytes on 32-bit x86
  Resolves: CVE-2022-2097
- Update expired certificates used in the testsuite
  Resolves: rhbz#2092462
- Fix CVE-2022-1292: openssl: c_rehash script allows command injection
  Resolves: rhbz#2090372
- Fix CVE-2022-2068: the c_rehash script allows command injection
  Resolves: rhbz#2098279</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:1.1.1k-8" date="1658404800">- Fix no-ec build
  Resolves: rhbz#2071020</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:1.1.1k-9" date="1675857600">- Fixed Timing Oracle in RSA Decryption
  Resolves: CVE-2022-4304
- Fixed Double free after calling PEM_read_bio_ex
  Resolves: CVE-2022-4450
- Fixed Use-after-free following BIO_new_NDEF
  Resolves: CVE-2023-0215
- Fixed X.400 address type confusion in X.509 GeneralName
  Resolves: CVE-2023-0286</changelog>
</package>
<package pkgid="b4a8fd1042aaba472993887bd07b08e3355fb9b60b3f71564c707713df6359d4" name="pam_ssh_agent_auth" arch="x86_64">
  <version epoch="0" ver="0.10.3" rel="7.17.el8_7"/>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 8.0p1-8" date="1619438400">- ssh doesn't restore the blocking mode on standard output (#1942901)</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 8.0p1-9" date="1622635200">- CVE-2020-14145 openssh: Observable Discrepancy leading to an information
  leak in the algorithm negotiation (#1882252)
- Hostbased ssh authentication fails if session ID contains a '/' (#1944125)</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 8.0p1-10" date="1624276800">- sshd -T requires -C when "Match" is used in sshd_config (#1836277)</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 8.0p1-11" date="1633089600">- CVE-2021-41617 upstream fix (#2008885)</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 8.0p1-12" date="1634731200">- Add support for "Include" directive in sshd_config file (#1926103)</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 8.0p1-13" date="1635249600">- Upstream: ClientAliveCountMax=0 disable the connection killing behaviour (#2015828)</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 8.0p1-14" date="1654084800">- Upstream: add a local implementation of BSD realpath() for sftp-server (#2064249)
- Change product name from Fedora to RHEL in openssh-7.8p1-UsePAM-warning.patch (#1953807)
- Include caveat for crypto-policy in sshd manpage (#2044354)
- Change log level of FIPS specific log message to verbose (#2050511)
- Clarify force_file_perms (-m) documentation in sftp-server manpage (#1862504)
- Minimize the use of SHA1 as a proof of possession for RSA key (#2093897)</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 8.0p1-15" date="1655985600">- Fix new issues found by static analyzers</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 8.0p1-16" date="1656504000">- Omit client side from minimize-sha1-use.patch to prevent regression (#2093897)</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 8.0p1-17" date="1674475200">- Fix parsing of IPv6 IPs in sftp client (#2162733)</changelog>
</package>
<package pkgid="c259a79bfb5154d4af4807feab5154db5f1227dd47da6c32c5f780a48cca66f9" name="perf" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="425.10.1.el8_7"/>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.1.1.el8]" date="1663588800">- i40e: Fix kernel crash during module removal (Ivan Vecera) [2091489]
- redhat: enable zstream release numbering for rhel 8.7 (Jarod Wilson)
- ice: Allow operation with reduced device MSI-X (Petr Oros) [2102844]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.2.1.el8]" date="1664193600">- EDAC/ghes: Set the DIMM label unconditionally (Aristeu Rozanski) [2109712]
- configs: enable CONFIG_HP_ILO for aarch64 (Mark Salter) [2123508]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.3.1.el8]" date="1664539200">- iwlwifi: limit fw version for AC9560 to avoid fw crash (Íñigo Huguet) [2129297]
- sfc: fix null pointer dereference in efx_hard_start_xmit (Íñigo Huguet) [2119638]
- sfc: fix TX channel offset when using legacy interrupts (Íñigo Huguet) [2119638]
- netfilter: conntrack: reduce timeout when receiving out-of-window fin or rst (Florian Westphal) [2047366]
- netfilter: conntrack: remove unneeded indent level (Florian Westphal) [2047366]
- netfilter: conntrack: ignore overly delayed tcp packets (Florian Westphal) [2047366]
- netfilter: conntrack: prepare tcp_in_window for ternary return value (Florian Westphal) [2047366]
- netfilter: conntrack: remove pr_debug callsites from tcp tracker (Florian Westphal) [2047366]
- netfilter: conntrack: work around exceeded receive window (Florian Westphal) [2047366]
- netfilter: conntrack: improve RST handling when tuple is re-used (Florian Westphal) [2047366]
- netfilter: conntrack: avoid misleading 'invalid' in log message (Florian Westphal) [2047366]
- netfilter: remove BUG_ON() after skb_header_pointer() (Florian Westphal) [2047366]
- iavf: Detach device during reset task (Petr Oros) [2069206]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.4.1.el8]" date="1665144000">- random: allow reseeding DRBG with getrandom (Daiki Ueno) [2121766]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.5.1.el8_7]" date="1667476800">- ice: Fix interface being down after reset with link-down-on-close flag on (Petr Oros) [2136216 2024110]
- ice: Fix crash by keep old cfg when update TCs more than queues (Petr Oros) [2130992 2129902]
- ice: Fix tunnel checksum offload with fragmented traffic (Petr Oros) [2130992 2129902]
- ice: handle E822 generic device ID in PLDM header (Petr Oros) [2130992 2129902]
- ice: ethtool: Prohibit improper channel config for DCB (Petr Oros) [2130992 2129902]
- ice: ethtool: advertise 1000M speeds properly (Petr Oros) [2130992 2129902]
- ice: Fix switchdev rules book keeping (Petr Oros) [2130992 2129902]
- ice: fix access-beyond-end in the switch code (Petr Oros) [2130992 2129902]
- eth: ice: silence the GCC 12 array-bounds warning (Petr Oros) [2130992 2129902]
- ice: Expose RSS indirection tables for queue groups via ethtool (Petr Oros) [2130992 2129902]
- Revert "ice: Hide bus-info in ethtool for PRs in switchdev mode" (Petr Oros) [2130992 2129902]
- ice: remove period on argument description in ice_for_each_vf (Petr Oros) [2130992 2129902]
- ice: add a function comment for ice_cfg_mac_antispoof (Petr Oros) [2130992 2129902]
- ice: fix wording in comment for ice_reset_vf (Petr Oros) [2130992 2129902]
- ice: remove return value comment for ice_reset_all_vfs (Petr Oros) [2130992 2129902]
- ice: always check VF VSI pointer values (Petr Oros) [2130992 2129902]
- ice: add newline to dev_dbg in ice_vf_fdir_dump_info (Petr Oros) [2130992 2129902]
- ice: get switch id on switchdev devices (Petr Oros) [2130992 2129902]
- ice: return ENOSPC when exceeding ICE_MAX_CHAIN_WORDS (Petr Oros) [2130992 2129902]
- ice: introduce common helper for retrieving VSI by vsi_num (Petr Oros) [2130992 2129902]
- ice: use min_t() to make code cleaner in ice_gnss (Petr Oros) [2130992 2129902]
- ice: Add mpls+tso support (Petr Oros) [2130992 2129902]
- ice: switch: convert packet template match code to rodata (Petr Oros) [2130992 2129902]
- ice: switch: use convenience macros to declare dummy pkt templates (Petr Oros) [2130992 2129902]
- ice: switch: use a struct to pass packet template params (Petr Oros) [2130992 2129902]
- ice: switch: unobscurify bitops loop in ice_fill_adv_dummy_packet() (Petr Oros) [2130992 2129902]
- ice: switch: add and use u16[] aliases to ice_adv_lkup_elem::{h, m}_u (Petr Oros) [2130992 2129902]
- ice: Support GTP-U and GTP-C offload in switchdev (Petr Oros) [2130992 2129902]
- ice: Remove useless DMA-32 fallback configuration (Petr Oros) [2130992 2129902]
- ice: switch to napi_build_skb() (Petr Oros) [2130992 2129902]
- redhat: switch to z-stream dist tag and build targets (Jarod Wilson)
- block: avoid sign extend problem with default queue flags mask (Nico Pache) [2135813]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.6.1.el8_7]" date="1668168000">- ice: Add low latency Tx timestamp read (Petr Oros) [2136036 2092425]
- ice: introduce ice_ptp_reset_cached_phctime function (Petr Oros) [2136036 2092425]
- ice: re-arrange some static functions in ice_ptp.c (Petr Oros) [2136036 2092425]
- ice: track and warn when PHC update is late (Petr Oros) [2136036 2092425]
- ice: track Tx timestamp stats similar to other Intel drivers (Petr Oros) [2136036 2092425]
- ice: implement adjfine with mul_u64_u64_div_u64 (Petr Oros) [2136036 2092425]
- ice: Add EXTTS feature to the feature bitmap (Petr Oros) [2136036 2092425]
- math: Export mul_u64_u64_div_u64 (Petr Oros) [2136036 2092425]
- vfio/type1: Unpin zero pages (Alex Williamson) [2128515 2123015]
- net: atlantic: remove aq_nic_deinit() when resume (Íñigo Huguet) [2131935 2130839]
- net: atlantic: remove deep parameter on suspend/resume functions (Íñigo Huguet) [2131935 2130839]
- CI: Use zstream builder container (Veronika Kabatova)
- CI: Add disttag override for 8.7 (Veronika Kabatova)</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.7.1.el8_7]" date="1669723200">- ice: Add additional CSR registers to ETHTOOL_GREGS (Petr Oros) [2136513 2131024]
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps (Petr Oros) [2137270 2106964]
- i40e: Fix VF set max MTU size (Petr Oros) [2137270 2106964]
- iavf: Fix set max MTU size with port VLAN and jumbo frames (Petr Oros) [2137270 2106964]
- iavf: Fix bad page state (Petr Oros) [2137270 2106964]
- Revert "scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels" (Jarod Wilson)
- scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels (Tomas Henzl) [2139216]
- Revert "ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems" (Jarod Wilson)
- ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems (Wei Huang) [2142170 2130653]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.8.1.el8_7]" date="1669982400">- scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels (Tomas Henzl) [2139216 2134535]
- RDMA/mlx5: Set local port to one when accessing counters (Mohammad Kabat) [2141957 2077119]
- drm/mgag200: Fix PLL setup for G200_SE_A rev &gt;=4 (Jocelyn Falempe) [2140152 2130159]
- iavf: Do not restart Tx queues after reset task failure (Petr Oros) [2149081 2134005]
- iavf: Fix a crash during reset task (Petr Oros) [2149081 2134005]
- scsi: core: Allow the ALUA transitioning state enough time (Tomas Henzl) [2147374 2084250]
- scsi: core: Return BLK_STS_TRANSPORT for ALUA transitioning (Tomas Henzl) [2147374 2084250]
- i40e: Fix DMA mappings leak (Ivan Vecera) [2138205 2077847]
- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2142724 2142725] {CVE-2022-2964}
- net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2142724 2142725] {CVE-2022-2964}</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.9.1.el8_7]" date="1670587200">- Documentation/admin-guide: Document nomodeset kernel parameter (Jocelyn Falempe) [2145218 2143952]
- drm: Move nomodeset kernel parameter to the DRM subsystem (Jocelyn Falempe) [2145218 2143952]
- wait: Fix __wait_event_hrtimeout for RT/DL tasks (Derek Barbosa) [2138953 2125233]
- scsi: zfcp: Fix missing auto port scan and thus missing target ports (Tobias Huschle) [2127849 2121089]
- net: Fix return value of qdisc ingress handling on success (Ivan Vecera) [2141878 2131361]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.10.1.el8_7]" date="1671019200">- scsi: target: loop: Fix handling of aborted TMRs (Maurizio Lombardi) [2144583 2141713]
- ice: virtchnl rss hena support (Petr Oros) [2148130]
- ice: Fix configuring VIRTCHNL_OP_CONFIG_VSI_QUEUES with unbalanced queues (Michal Schmidt) [2142017 2137378]
- ice: Add support Flex RXD (Michal Schmidt) [2138157 2131310]
- netfilter: flowtable: fix stuck flows on cleanup due to pending work (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: add function to invoke garbage collection immediately (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: pass flowtable to nf_flow_table_iterate() (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: separate replace, destroy and stats to different workqueues (Phil Sutter) [2134084 2131370]
- x86/paravirt: Add a dummy __x86_paravirt_patch_template() function (Waiman Long) [2152206 2144161]
- x86/paravirt: Fix kABI breakage in struct pv_mmu_ops (Waiman Long) [2152206 2144161]
- drm/i915: fix TLB invalidation for Gen12 video and compute engines (Wander Lairson Costa) [2148149 2148150] {CVE-2022-4139}
- PCI: hv: Do not set PCI_COMMAND_MEMORY to reduce VM boot time (Emanuele Giuseppe Esposito) [2150912 2082836]
- iavf: Fix cached head and tail value for iavf_get_tx_pending (Stefan Assmann) [2149742 2103944]
- iavf: Fix change VF's mac address (Stefan Assmann) [2149742 2103944]
- iavf: Fix race between iavf_close and iavf_reset_task (Stefan Assmann) [2149742 2103944]
- net: ethernet: move from strlcpy with unused retval to strscpy (Stefan Assmann) [2149742 2103944]
- iavf: Fix 'tc qdisc show' listing too many queues (Stefan Assmann) [2149742 2103944]
- iavf: Fix max_rate limiting (Stefan Assmann) [2149742 2103944]
- iavf: Check for duplicate TC flower filter before parsing (Stefan Assmann) [2149742 2103944]
- iavf: Fix handling of dummy receive descriptors (Stefan Assmann) [2149742 2103944]
- iavf: Disallow changing rx/tx-frames and rx/tx-frames-irq (Stefan Assmann) [2149742 2103944]
- intel/iavf:fix repeated words in comments (Stefan Assmann) [2149742 2103944]
- intel: remove unused macros (Stefan Assmann) [2149742 2103944]
- iavf: Add waiting for response from PF in set mac (Stefan Assmann) [2149742 2103944]</changelog>
</package>
<package pkgid="2cf43e23ab635798a490abe8aaa1c8f12316f6cbe5f523b388180f2575e3cf86" name="perf" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="425.13.1.el8_7"/>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.4.1.el8]" date="1665144000">- random: allow reseeding DRBG with getrandom (Daiki Ueno) [2121766]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.5.1.el8_7]" date="1667476800">- ice: Fix interface being down after reset with link-down-on-close flag on (Petr Oros) [2136216 2024110]
- ice: Fix crash by keep old cfg when update TCs more than queues (Petr Oros) [2130992 2129902]
- ice: Fix tunnel checksum offload with fragmented traffic (Petr Oros) [2130992 2129902]
- ice: handle E822 generic device ID in PLDM header (Petr Oros) [2130992 2129902]
- ice: ethtool: Prohibit improper channel config for DCB (Petr Oros) [2130992 2129902]
- ice: ethtool: advertise 1000M speeds properly (Petr Oros) [2130992 2129902]
- ice: Fix switchdev rules book keeping (Petr Oros) [2130992 2129902]
- ice: fix access-beyond-end in the switch code (Petr Oros) [2130992 2129902]
- eth: ice: silence the GCC 12 array-bounds warning (Petr Oros) [2130992 2129902]
- ice: Expose RSS indirection tables for queue groups via ethtool (Petr Oros) [2130992 2129902]
- Revert "ice: Hide bus-info in ethtool for PRs in switchdev mode" (Petr Oros) [2130992 2129902]
- ice: remove period on argument description in ice_for_each_vf (Petr Oros) [2130992 2129902]
- ice: add a function comment for ice_cfg_mac_antispoof (Petr Oros) [2130992 2129902]
- ice: fix wording in comment for ice_reset_vf (Petr Oros) [2130992 2129902]
- ice: remove return value comment for ice_reset_all_vfs (Petr Oros) [2130992 2129902]
- ice: always check VF VSI pointer values (Petr Oros) [2130992 2129902]
- ice: add newline to dev_dbg in ice_vf_fdir_dump_info (Petr Oros) [2130992 2129902]
- ice: get switch id on switchdev devices (Petr Oros) [2130992 2129902]
- ice: return ENOSPC when exceeding ICE_MAX_CHAIN_WORDS (Petr Oros) [2130992 2129902]
- ice: introduce common helper for retrieving VSI by vsi_num (Petr Oros) [2130992 2129902]
- ice: use min_t() to make code cleaner in ice_gnss (Petr Oros) [2130992 2129902]
- ice: Add mpls+tso support (Petr Oros) [2130992 2129902]
- ice: switch: convert packet template match code to rodata (Petr Oros) [2130992 2129902]
- ice: switch: use convenience macros to declare dummy pkt templates (Petr Oros) [2130992 2129902]
- ice: switch: use a struct to pass packet template params (Petr Oros) [2130992 2129902]
- ice: switch: unobscurify bitops loop in ice_fill_adv_dummy_packet() (Petr Oros) [2130992 2129902]
- ice: switch: add and use u16[] aliases to ice_adv_lkup_elem::{h, m}_u (Petr Oros) [2130992 2129902]
- ice: Support GTP-U and GTP-C offload in switchdev (Petr Oros) [2130992 2129902]
- ice: Remove useless DMA-32 fallback configuration (Petr Oros) [2130992 2129902]
- ice: switch to napi_build_skb() (Petr Oros) [2130992 2129902]
- redhat: switch to z-stream dist tag and build targets (Jarod Wilson)
- block: avoid sign extend problem with default queue flags mask (Nico Pache) [2135813]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.6.1.el8_7]" date="1668168000">- ice: Add low latency Tx timestamp read (Petr Oros) [2136036 2092425]
- ice: introduce ice_ptp_reset_cached_phctime function (Petr Oros) [2136036 2092425]
- ice: re-arrange some static functions in ice_ptp.c (Petr Oros) [2136036 2092425]
- ice: track and warn when PHC update is late (Petr Oros) [2136036 2092425]
- ice: track Tx timestamp stats similar to other Intel drivers (Petr Oros) [2136036 2092425]
- ice: implement adjfine with mul_u64_u64_div_u64 (Petr Oros) [2136036 2092425]
- ice: Add EXTTS feature to the feature bitmap (Petr Oros) [2136036 2092425]
- math: Export mul_u64_u64_div_u64 (Petr Oros) [2136036 2092425]
- vfio/type1: Unpin zero pages (Alex Williamson) [2128515 2123015]
- net: atlantic: remove aq_nic_deinit() when resume (Íñigo Huguet) [2131935 2130839]
- net: atlantic: remove deep parameter on suspend/resume functions (Íñigo Huguet) [2131935 2130839]
- CI: Use zstream builder container (Veronika Kabatova)
- CI: Add disttag override for 8.7 (Veronika Kabatova)</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.7.1.el8_7]" date="1669723200">- ice: Add additional CSR registers to ETHTOOL_GREGS (Petr Oros) [2136513 2131024]
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps (Petr Oros) [2137270 2106964]
- i40e: Fix VF set max MTU size (Petr Oros) [2137270 2106964]
- iavf: Fix set max MTU size with port VLAN and jumbo frames (Petr Oros) [2137270 2106964]
- iavf: Fix bad page state (Petr Oros) [2137270 2106964]
- Revert "scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels" (Jarod Wilson)
- scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels (Tomas Henzl) [2139216]
- Revert "ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems" (Jarod Wilson)
- ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems (Wei Huang) [2142170 2130653]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.8.1.el8_7]" date="1669982400">- scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels (Tomas Henzl) [2139216 2134535]
- RDMA/mlx5: Set local port to one when accessing counters (Mohammad Kabat) [2141957 2077119]
- drm/mgag200: Fix PLL setup for G200_SE_A rev &gt;=4 (Jocelyn Falempe) [2140152 2130159]
- iavf: Do not restart Tx queues after reset task failure (Petr Oros) [2149081 2134005]
- iavf: Fix a crash during reset task (Petr Oros) [2149081 2134005]
- scsi: core: Allow the ALUA transitioning state enough time (Tomas Henzl) [2147374 2084250]
- scsi: core: Return BLK_STS_TRANSPORT for ALUA transitioning (Tomas Henzl) [2147374 2084250]
- i40e: Fix DMA mappings leak (Ivan Vecera) [2138205 2077847]
- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2142724 2142725] {CVE-2022-2964}
- net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2142724 2142725] {CVE-2022-2964}</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.9.1.el8_7]" date="1670587200">- Documentation/admin-guide: Document nomodeset kernel parameter (Jocelyn Falempe) [2145218 2143952]
- drm: Move nomodeset kernel parameter to the DRM subsystem (Jocelyn Falempe) [2145218 2143952]
- wait: Fix __wait_event_hrtimeout for RT/DL tasks (Derek Barbosa) [2138953 2125233]
- scsi: zfcp: Fix missing auto port scan and thus missing target ports (Tobias Huschle) [2127849 2121089]
- net: Fix return value of qdisc ingress handling on success (Ivan Vecera) [2141878 2131361]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.10.1.el8_7]" date="1671019200">- scsi: target: loop: Fix handling of aborted TMRs (Maurizio Lombardi) [2144583 2141713]
- ice: virtchnl rss hena support (Petr Oros) [2148130]
- ice: Fix configuring VIRTCHNL_OP_CONFIG_VSI_QUEUES with unbalanced queues (Michal Schmidt) [2142017 2137378]
- ice: Add support Flex RXD (Michal Schmidt) [2138157 2131310]
- netfilter: flowtable: fix stuck flows on cleanup due to pending work (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: add function to invoke garbage collection immediately (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: pass flowtable to nf_flow_table_iterate() (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: separate replace, destroy and stats to different workqueues (Phil Sutter) [2134084 2131370]
- x86/paravirt: Add a dummy __x86_paravirt_patch_template() function (Waiman Long) [2152206 2144161]
- x86/paravirt: Fix kABI breakage in struct pv_mmu_ops (Waiman Long) [2152206 2144161]
- drm/i915: fix TLB invalidation for Gen12 video and compute engines (Wander Lairson Costa) [2148149 2148150] {CVE-2022-4139}
- PCI: hv: Do not set PCI_COMMAND_MEMORY to reduce VM boot time (Emanuele Giuseppe Esposito) [2150912 2082836]
- iavf: Fix cached head and tail value for iavf_get_tx_pending (Stefan Assmann) [2149742 2103944]
- iavf: Fix change VF's mac address (Stefan Assmann) [2149742 2103944]
- iavf: Fix race between iavf_close and iavf_reset_task (Stefan Assmann) [2149742 2103944]
- net: ethernet: move from strlcpy with unused retval to strscpy (Stefan Assmann) [2149742 2103944]
- iavf: Fix 'tc qdisc show' listing too many queues (Stefan Assmann) [2149742 2103944]
- iavf: Fix max_rate limiting (Stefan Assmann) [2149742 2103944]
- iavf: Check for duplicate TC flower filter before parsing (Stefan Assmann) [2149742 2103944]
- iavf: Fix handling of dummy receive descriptors (Stefan Assmann) [2149742 2103944]
- iavf: Disallow changing rx/tx-frames and rx/tx-frames-irq (Stefan Assmann) [2149742 2103944]
- intel/iavf:fix repeated words in comments (Stefan Assmann) [2149742 2103944]
- intel: remove unused macros (Stefan Assmann) [2149742 2103944]
- iavf: Add waiting for response from PF in set mac (Stefan Assmann) [2149742 2103944]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.11.1.el8_7]" date="1673006400">- NFSD: Protect against send buffer overflow in NFSv3 READ (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv2 READ (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv3 READDIR (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv2 READDIR (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- SUNRPC: Fix svcxdr_init_encode's buflen calculation (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- SUNRPC: Fix svcxdr_init_decode's end-of-buffer calculation (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- panic, kexec: make __crash_kexec() NMI safe (Valentin Schneider) [2139580 2134126]
- kexec: turn all kexec_mutex acquisitions into trylocks (Valentin Schneider) [2139580 2134126]
- kexec: move locking into do_kexec_load (Valentin Schneider) [2139580 2134126]
- vdpa/mlx5: re-create forwarding rules after mac modified (Laurent Vivier) [2152912 2145136]
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry (Waiman Long) [2153653 2108387]
- irq: Call tick_irq_enter() inside HARDIRQ_OFFSET (Waiman Long) [2153653 2108387]
- irqtime: Move irqtime entry accounting after irq offset incrementation (Waiman Long) [2153653 2108387]
- sched/vtime: Consolidate IRQ time accounting (Waiman Long) [2153653 2108387]
- s390/vtime: Use the generic IRQ entry accounting (Waiman Long) [2153653 2108387]
- sched/cputime: Remove symbol exports from IRQ time accounting (Waiman Long) [2153653 2108387]
- genirq/irqdomain: Don't try to free an interrupt that has no mapping (Waiman Long) [2153653 2108387]
- genirq: Provide __irq_enter/exit_raw() (Waiman Long) [2153653 2108387]
- powerpc/time: Only set CONFIG_ARCH_HAS_SCALED_CPUTIME on PPC64 (Waiman Long) [2153653 2108387]
- powerpc/time: isolate scaled cputime accounting in dedicated functions. (Waiman Long) [2153653 2108387]
- PCI: hv: Fix synchronization between channel callback and hv_pci_bus_exit() (Mohammed Gamal) [2155280 2144708]
- PCI: hv: Fix synchronization between channel callback and hv_compose_msi_msg() (Mohammed Gamal) [2155280 2144708]
- PCI: hv: Use vmbus_requestor to generate transaction IDs for VMbus hardening (Mohammed Gamal) [2155280 2144708]
- net/mlx5e: TC, Reject forwarding from internal port to internal port (Mohammad Kabat) [2141959 2131345]
- hv_netvsc: Fix race between VF offering and VF association message from host (Mohammed Gamal) [2155272 2149279]
- x86/mce: Reduce number of machine checks taken during recovery (Prarit Bhargava) [2137592 2104388]
- cgroup/cpuset: Reduce cpuset_rwsem writer latency (Waiman Long) [2153108 2149031]
- rcu/exp: Mark current CPU as exp-QS in IPI loop second pass (Waiman Long) [2153108 2149031]
- rcu: Always inline rcu_dynticks_task*_{enter,exit}() (Waiman Long) [2153108 2149031]
- rcu: Fix existing exp request check in sync_sched_exp_online_cleanup() (Waiman Long) [2153108 2149031]
- rcu: Fix macro name CONFIG_TASKS_RCU_TRACE (Waiman Long) [2153108 2149031]
- rcu: Fix stall-warning deadlock due to non-release of rcu_node -&gt;lock (Waiman Long) [2153108 2149031]
- rcu: Fix to include first blocked task in stall warning (Waiman Long) [2153108 2149031]
- cgroup: Use cgroup_attach_{lock,unlock}() from cgroup_attach_task_all() (Waiman Long) [2153108 2149031]
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all() (Waiman Long) [2153108 2149031]
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock (Waiman Long) [2153108 2149031]
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree (Waiman Long) [2153108 2149031]
- cgroup/cpuset: Fix a race between cpuset_attach() and cpu hotplug (Waiman Long) [2153108 2149031]
- cgroup: reduce dependency on cgroup_mutex (Waiman Long) [2153108 2149031]
- sunrpc: Set sk_allocation to GFP_NOFS to avoid using current-&gt;task_frag. (Guillaume Nault) [2153230 2089660]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.12.1.el8_7]" date="1674129600">- x86/fpu: Prevent FPU state corruption (Oleksandr Natalenko) [2134586 2130890]
- x86/fpu: Drop fpregs lock before inheriting FPU permissions (Eder Zulian) [2154460 2153549]
- kernel-doc: fix undefined args variable (Jan Stancek) [2157905 2134954]
- mm: memcontrol: fix potential oom_lock recursion deadlock (Waiman Long) [2157922 2138886]
- memcg: prohibit unconditional exceeding the limit of dying tasks (Waiman Long) [2157922 2138886]
- mm, oom: do not trigger out_of_memory from the #PF (Waiman Long) [2157922 2138886]
- mm, oom: pagefault_out_of_memory: don't force global OOM for dying tasks (Waiman Long) [2157922 2138886]
- mm: memcontrol: don't count limit-setting reclaim as memory pressure (Waiman Long) [2157922 2138886]
- KVM: s390: vsie: Fix the initialization of the epoch extension (epdx) field (Thomas Huth) [2158813 2151854]
- net: mana: Fix race on per-CQ variable napi work_done (Emanuele Giuseppe Esposito) [2155437 2151722]
- mei: me: add adler lake point S DID (Prarit Bhargava) [2141783 2141602]
- PCI: hv: Only reuse existing IRTE allocation for Multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix the definition of vector in hv_compose_msi_msg() (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix interrupt mapping for multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Reuse existing IRTE allocation in compose_msi_msg() (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix hv_arch_irq_unmask() for multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix multi-MSI to allow more than one MSI vector (Emanuele Giuseppe Esposito) [2155289 2100275]
- drm/ast: Support multiple outputs (Jarod Wilson) [2149287 2147553]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.13.1.el8_7]" date="1675339200">- mm/cgroup/reclaim: fix dirty pages throttling on cgroup v1 (Waiman Long) [2160221]
- mm: vmscan: remove deadlock due to throttling failing to make progress (Waiman Long) [2160221]
- mm: vmscan: reduce throttling due to a failure to make progress -fix (Waiman Long) [2160221]
- mm: vmscan: Reduce throttling due to a failure to make progress (Waiman Long) [2160221]
- mm/vmscan: delay waking of tasks throttled on NOPROGRESS (Waiman Long) [2160221]
- mm/vmscan: increase the timeout if page reclaim is not making progress (Waiman Long) [2160221]
- mm/vmscan: centralise timeout values for reclaim_throttle (Waiman Long) [2160221]
- mm/page_alloc: remove the throttling logic from the page allocator (Waiman Long) [2160221]
- mm/writeback: throttle based on page writeback instead of congestion (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim when no progress is being made (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim and compaction when too may pages are isolated (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim until some writeback completes if congested (Waiman Long) [2160221]
- mm/vmscan.c: delete or fix duplicated words (Waiman Long) [2160221]
- mm,page_alloc: PF_WQ_WORKER threads must sleep at should_reclaim_retry() (Nico Pache) [2160221]
- ceph: avoid putting the realm twice when decoding snaps fails (Xiubo Li) [2155797 2139881]
- mm/mremap: hold the rmap lock in write mode when moving page table entries. (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: use pmd/pud_poplulate to update page table entries (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: don't enable optimized PUD move if page table levels is 2 (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: convert huge PUD move to separate helper (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: fix BUILD_BUG_ON() error in get_extent (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap.c: fix extent calculation (Waiman Long) [2140944] {CVE-2022-41222}
- x86: mremap speedup - Enable HAVE_MOVE_PUD (Waiman Long) [2140944] {CVE-2022-41222}
- mm: speedup mremap on 1GB or larger regions (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: start addresses are properly aligned (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: calculate extent in one place (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: it is sure to have enough space when extent meets requirement (Waiman Long) [2140944] {CVE-2022-41222}
- s390/boot: add secure boot trailer (Tobias Huschle) [2151530 2141967]
- i40e: Fix VF hang when reset is triggered on another VF (Ivan Vecera) [2160460 2103801]
- i2c: ismt: Fix an out-of-bounds bug in ismt_access() (Prarit Bhargava) [2154388 2119066] {CVE-2022-2873}
- iavf: schedule watchdog immediately when changing primary MAC (Michal Schmidt) [2163257 2152493]
- iavf: Move netdev_update_features() into watchdog task (Michal Schmidt) [2163257 2152493]
- iavf: fix temporary deadlock and failure to set MAC address (Michal Schmidt) [2163257 2152493]
- iavf: Fix error handling in iavf_init_module() (Michal Schmidt) [2163257 2152493]
- iommu/vt-d: Clean up si_domain in the init_dmars() error path (Jerry Snitselaar) [2149474 2118428]
- x86/pci/xen: Use msi_msg shadow structs (Jerry Snitselaar) [2149474 2118428]
- iommu/intel: Use msi_msg shadow structs (Jerry Snitselaar) [2149474 2118428]
- PCI: MSI: Fix Kconfig dependencies for PCI_MSI_ARCH_FALLBACKS (Jerry Snitselaar) [2149474 2118428]
- x86/apic/msi: Unbreak DMAR and HPET MSI (Jerry Snitselaar) [2149474 2118428]
- iommu/amd: Remove domain search for PCI/MSI (Jerry Snitselaar) [2149474 2118428]
- iommu/vt-d: Remove domain search for PCI/MSI[X] (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Make most MSI ops XEN private (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Cleanup the arch_*_msi_irqs() leftovers (Jerry Snitselaar) [2149474 2118428]
- PCI/MSI: Make arch_.*_msi_irq[s] fallbacks selectable (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Wrap XEN MSI management into irqdomain (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Consolidate XEN-MSI init (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Rework MSI teardown (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Make xen_msi_init() static and rename it to xen_hvm_msi_init() (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Move apic_post_init() invocation to one place (Jerry Snitselaar) [2149474 2118428]
- x86/msi: Use generic MSI domain ops (Jerry Snitselaar) [2149474 2118428]
- x86/msi: Remove pointless vcpu_affinity callback (Jerry Snitselaar) [2149474 2118428]
- iommu/vt-d: Fix compile error with CONFIG_PCI_ATS not set (Myron Stowe) [2149474 2118428]
- iommu/vt-d: Cure VF irqdomain hickup (Myron Stowe) [2149474 2118428]
- x86/pci: Set default irq domain in pcibios_add_device() (Myron Stowe) [2149474 2118428]
- iommm/amd: Store irq domain in struct device (Myron Stowe) [2149474 2118428]
- iommm/vt-d: Store irq domain in struct device (Myron Stowe) [2149474 2118428]
- PCI/MSI: Provide pci_dev_has_special_msi_domain() helper (Myron Stowe) [2149474 2118428]
- x86/msi: Consolidate MSI allocation (Myron Stowe) [2149474 2118428]
- PCI/MSI: Rework pci_msi_domain_calc_hwirq() (Myron Stowe) [2149474 2118428]
- x86/irq: Consolidate UV domain allocation (Myron Stowe) [2149474 2118428]
- x86/irq: Consolidate DMAR irq allocation (Myron Stowe) [2149474 2118428]
- x86_ioapic_Consolidate_IOAPIC_allocation (Myron Stowe) [2149474 2118428]
- x86/msi: Consolidate HPET allocation (Myron Stowe) [2149474 2118428]
- iommu/irq_remapping: Consolidate irq domain lookup (Myron Stowe) [2149474 2118428]
- iommu/amd: Consolidate irq domain getter (Myron Stowe) [2149474 2118428]
- iommu/vt-d: Consolidate irq domain getter (Myron Stowe) [2149474 2118428]
- x86/irq: Add allocation type for parent domain retrieval (Myron Stowe) [2149474 2118428]
- irqdomain: Export irq_domain_update_bus_token (Myron Stowe) [2149474 2118428]
- gitlab-ci: use CI templates from production branch (Michael Hofmann)
- iavf: remove INITIAL_MAC_SET to allow gARP to work properly (Stefan Assmann) [2149745 1938635]
- Revert "scsi: iscsi: ql4xxx: Use per-session workqueue for unbinding" (Chris Leech) [2152734 2122624]
- Revert "scsi: iscsi: Use the session workqueue for recovery" (Chris Leech) [2152734 2122624]
- arm64/bpf: Remove 128MB limit for BPF JIT programs (Yauheni Kaliuta) [2152138 2140163]
- bpf: Define bpf_jit_alloc_exec_limit for arm64 JIT (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: add `type` and `data` fields (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: use `ex` for `exception_table_entry` (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: make fixup_exception() return bool (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: consolidate definitions (Yauheni Kaliuta) [2152138 2140163]
- arm64: kvm: use kvm_exception_table_entry (Yauheni Kaliuta) [2152138 2140163]
- be2net: Fix buffer overflow in be_get_module_eeprom (Josef Oskera) [2160182 2126917]</changelog>
</package>
<package pkgid="0d411cb89ed9146f50f0cf1e7915330fcff7058fceca442cf0d1726a8d48f8c7" name="perf" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="425.19.2.el8_7"/>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.11.1.el8_7]" date="1673006400">- NFSD: Protect against send buffer overflow in NFSv3 READ (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv2 READ (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv3 READDIR (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv2 READDIR (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- SUNRPC: Fix svcxdr_init_encode's buflen calculation (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- SUNRPC: Fix svcxdr_init_decode's end-of-buffer calculation (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- panic, kexec: make __crash_kexec() NMI safe (Valentin Schneider) [2139580 2134126]
- kexec: turn all kexec_mutex acquisitions into trylocks (Valentin Schneider) [2139580 2134126]
- kexec: move locking into do_kexec_load (Valentin Schneider) [2139580 2134126]
- vdpa/mlx5: re-create forwarding rules after mac modified (Laurent Vivier) [2152912 2145136]
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry (Waiman Long) [2153653 2108387]
- irq: Call tick_irq_enter() inside HARDIRQ_OFFSET (Waiman Long) [2153653 2108387]
- irqtime: Move irqtime entry accounting after irq offset incrementation (Waiman Long) [2153653 2108387]
- sched/vtime: Consolidate IRQ time accounting (Waiman Long) [2153653 2108387]
- s390/vtime: Use the generic IRQ entry accounting (Waiman Long) [2153653 2108387]
- sched/cputime: Remove symbol exports from IRQ time accounting (Waiman Long) [2153653 2108387]
- genirq/irqdomain: Don't try to free an interrupt that has no mapping (Waiman Long) [2153653 2108387]
- genirq: Provide __irq_enter/exit_raw() (Waiman Long) [2153653 2108387]
- powerpc/time: Only set CONFIG_ARCH_HAS_SCALED_CPUTIME on PPC64 (Waiman Long) [2153653 2108387]
- powerpc/time: isolate scaled cputime accounting in dedicated functions. (Waiman Long) [2153653 2108387]
- PCI: hv: Fix synchronization between channel callback and hv_pci_bus_exit() (Mohammed Gamal) [2155280 2144708]
- PCI: hv: Fix synchronization between channel callback and hv_compose_msi_msg() (Mohammed Gamal) [2155280 2144708]
- PCI: hv: Use vmbus_requestor to generate transaction IDs for VMbus hardening (Mohammed Gamal) [2155280 2144708]
- net/mlx5e: TC, Reject forwarding from internal port to internal port (Mohammad Kabat) [2141959 2131345]
- hv_netvsc: Fix race between VF offering and VF association message from host (Mohammed Gamal) [2155272 2149279]
- x86/mce: Reduce number of machine checks taken during recovery (Prarit Bhargava) [2137592 2104388]
- cgroup/cpuset: Reduce cpuset_rwsem writer latency (Waiman Long) [2153108 2149031]
- rcu/exp: Mark current CPU as exp-QS in IPI loop second pass (Waiman Long) [2153108 2149031]
- rcu: Always inline rcu_dynticks_task*_{enter,exit}() (Waiman Long) [2153108 2149031]
- rcu: Fix existing exp request check in sync_sched_exp_online_cleanup() (Waiman Long) [2153108 2149031]
- rcu: Fix macro name CONFIG_TASKS_RCU_TRACE (Waiman Long) [2153108 2149031]
- rcu: Fix stall-warning deadlock due to non-release of rcu_node -&gt;lock (Waiman Long) [2153108 2149031]
- rcu: Fix to include first blocked task in stall warning (Waiman Long) [2153108 2149031]
- cgroup: Use cgroup_attach_{lock,unlock}() from cgroup_attach_task_all() (Waiman Long) [2153108 2149031]
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all() (Waiman Long) [2153108 2149031]
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock (Waiman Long) [2153108 2149031]
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree (Waiman Long) [2153108 2149031]
- cgroup/cpuset: Fix a race between cpuset_attach() and cpu hotplug (Waiman Long) [2153108 2149031]
- cgroup: reduce dependency on cgroup_mutex (Waiman Long) [2153108 2149031]
- sunrpc: Set sk_allocation to GFP_NOFS to avoid using current-&gt;task_frag. (Guillaume Nault) [2153230 2089660]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.12.1.el8_7]" date="1674129600">- x86/fpu: Prevent FPU state corruption (Oleksandr Natalenko) [2134586 2130890]
- x86/fpu: Drop fpregs lock before inheriting FPU permissions (Eder Zulian) [2154460 2153549]
- kernel-doc: fix undefined args variable (Jan Stancek) [2157905 2134954]
- mm: memcontrol: fix potential oom_lock recursion deadlock (Waiman Long) [2157922 2138886]
- memcg: prohibit unconditional exceeding the limit of dying tasks (Waiman Long) [2157922 2138886]
- mm, oom: do not trigger out_of_memory from the #PF (Waiman Long) [2157922 2138886]
- mm, oom: pagefault_out_of_memory: don't force global OOM for dying tasks (Waiman Long) [2157922 2138886]
- mm: memcontrol: don't count limit-setting reclaim as memory pressure (Waiman Long) [2157922 2138886]
- KVM: s390: vsie: Fix the initialization of the epoch extension (epdx) field (Thomas Huth) [2158813 2151854]
- net: mana: Fix race on per-CQ variable napi work_done (Emanuele Giuseppe Esposito) [2155437 2151722]
- mei: me: add adler lake point S DID (Prarit Bhargava) [2141783 2141602]
- PCI: hv: Only reuse existing IRTE allocation for Multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix the definition of vector in hv_compose_msi_msg() (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix interrupt mapping for multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Reuse existing IRTE allocation in compose_msi_msg() (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix hv_arch_irq_unmask() for multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix multi-MSI to allow more than one MSI vector (Emanuele Giuseppe Esposito) [2155289 2100275]
- drm/ast: Support multiple outputs (Jarod Wilson) [2149287 2147553]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.13.1.el8_7]" date="1675339200">- mm/cgroup/reclaim: fix dirty pages throttling on cgroup v1 (Waiman Long) [2160221]
- mm: vmscan: remove deadlock due to throttling failing to make progress (Waiman Long) [2160221]
- mm: vmscan: reduce throttling due to a failure to make progress -fix (Waiman Long) [2160221]
- mm: vmscan: Reduce throttling due to a failure to make progress (Waiman Long) [2160221]
- mm/vmscan: delay waking of tasks throttled on NOPROGRESS (Waiman Long) [2160221]
- mm/vmscan: increase the timeout if page reclaim is not making progress (Waiman Long) [2160221]
- mm/vmscan: centralise timeout values for reclaim_throttle (Waiman Long) [2160221]
- mm/page_alloc: remove the throttling logic from the page allocator (Waiman Long) [2160221]
- mm/writeback: throttle based on page writeback instead of congestion (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim when no progress is being made (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim and compaction when too may pages are isolated (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim until some writeback completes if congested (Waiman Long) [2160221]
- mm/vmscan.c: delete or fix duplicated words (Waiman Long) [2160221]
- mm,page_alloc: PF_WQ_WORKER threads must sleep at should_reclaim_retry() (Nico Pache) [2160221]
- ceph: avoid putting the realm twice when decoding snaps fails (Xiubo Li) [2155797 2139881]
- mm/mremap: hold the rmap lock in write mode when moving page table entries. (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: use pmd/pud_poplulate to update page table entries (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: don't enable optimized PUD move if page table levels is 2 (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: convert huge PUD move to separate helper (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: fix BUILD_BUG_ON() error in get_extent (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap.c: fix extent calculation (Waiman Long) [2140944] {CVE-2022-41222}
- x86: mremap speedup - Enable HAVE_MOVE_PUD (Waiman Long) [2140944] {CVE-2022-41222}
- mm: speedup mremap on 1GB or larger regions (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: start addresses are properly aligned (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: calculate extent in one place (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: it is sure to have enough space when extent meets requirement (Waiman Long) [2140944] {CVE-2022-41222}
- s390/boot: add secure boot trailer (Tobias Huschle) [2151530 2141967]
- i40e: Fix VF hang when reset is triggered on another VF (Ivan Vecera) [2160460 2103801]
- i2c: ismt: Fix an out-of-bounds bug in ismt_access() (Prarit Bhargava) [2154388 2119066] {CVE-2022-2873}
- iavf: schedule watchdog immediately when changing primary MAC (Michal Schmidt) [2163257 2152493]
- iavf: Move netdev_update_features() into watchdog task (Michal Schmidt) [2163257 2152493]
- iavf: fix temporary deadlock and failure to set MAC address (Michal Schmidt) [2163257 2152493]
- iavf: Fix error handling in iavf_init_module() (Michal Schmidt) [2163257 2152493]
- iommu/vt-d: Clean up si_domain in the init_dmars() error path (Jerry Snitselaar) [2149474 2118428]
- x86/pci/xen: Use msi_msg shadow structs (Jerry Snitselaar) [2149474 2118428]
- iommu/intel: Use msi_msg shadow structs (Jerry Snitselaar) [2149474 2118428]
- PCI: MSI: Fix Kconfig dependencies for PCI_MSI_ARCH_FALLBACKS (Jerry Snitselaar) [2149474 2118428]
- x86/apic/msi: Unbreak DMAR and HPET MSI (Jerry Snitselaar) [2149474 2118428]
- iommu/amd: Remove domain search for PCI/MSI (Jerry Snitselaar) [2149474 2118428]
- iommu/vt-d: Remove domain search for PCI/MSI[X] (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Make most MSI ops XEN private (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Cleanup the arch_*_msi_irqs() leftovers (Jerry Snitselaar) [2149474 2118428]
- PCI/MSI: Make arch_.*_msi_irq[s] fallbacks selectable (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Wrap XEN MSI management into irqdomain (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Consolidate XEN-MSI init (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Rework MSI teardown (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Make xen_msi_init() static and rename it to xen_hvm_msi_init() (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Move apic_post_init() invocation to one place (Jerry Snitselaar) [2149474 2118428]
- x86/msi: Use generic MSI domain ops (Jerry Snitselaar) [2149474 2118428]
- x86/msi: Remove pointless vcpu_affinity callback (Jerry Snitselaar) [2149474 2118428]
- iommu/vt-d: Fix compile error with CONFIG_PCI_ATS not set (Myron Stowe) [2149474 2118428]
- iommu/vt-d: Cure VF irqdomain hickup (Myron Stowe) [2149474 2118428]
- x86/pci: Set default irq domain in pcibios_add_device() (Myron Stowe) [2149474 2118428]
- iommm/amd: Store irq domain in struct device (Myron Stowe) [2149474 2118428]
- iommm/vt-d: Store irq domain in struct device (Myron Stowe) [2149474 2118428]
- PCI/MSI: Provide pci_dev_has_special_msi_domain() helper (Myron Stowe) [2149474 2118428]
- x86/msi: Consolidate MSI allocation (Myron Stowe) [2149474 2118428]
- PCI/MSI: Rework pci_msi_domain_calc_hwirq() (Myron Stowe) [2149474 2118428]
- x86/irq: Consolidate UV domain allocation (Myron Stowe) [2149474 2118428]
- x86/irq: Consolidate DMAR irq allocation (Myron Stowe) [2149474 2118428]
- x86_ioapic_Consolidate_IOAPIC_allocation (Myron Stowe) [2149474 2118428]
- x86/msi: Consolidate HPET allocation (Myron Stowe) [2149474 2118428]
- iommu/irq_remapping: Consolidate irq domain lookup (Myron Stowe) [2149474 2118428]
- iommu/amd: Consolidate irq domain getter (Myron Stowe) [2149474 2118428]
- iommu/vt-d: Consolidate irq domain getter (Myron Stowe) [2149474 2118428]
- x86/irq: Add allocation type for parent domain retrieval (Myron Stowe) [2149474 2118428]
- irqdomain: Export irq_domain_update_bus_token (Myron Stowe) [2149474 2118428]
- gitlab-ci: use CI templates from production branch (Michael Hofmann)
- iavf: remove INITIAL_MAC_SET to allow gARP to work properly (Stefan Assmann) [2149745 1938635]
- Revert "scsi: iscsi: ql4xxx: Use per-session workqueue for unbinding" (Chris Leech) [2152734 2122624]
- Revert "scsi: iscsi: Use the session workqueue for recovery" (Chris Leech) [2152734 2122624]
- arm64/bpf: Remove 128MB limit for BPF JIT programs (Yauheni Kaliuta) [2152138 2140163]
- bpf: Define bpf_jit_alloc_exec_limit for arm64 JIT (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: add `type` and `data` fields (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: use `ex` for `exception_table_entry` (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: make fixup_exception() return bool (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: consolidate definitions (Yauheni Kaliuta) [2152138 2140163]
- arm64: kvm: use kvm_exception_table_entry (Yauheni Kaliuta) [2152138 2140163]
- be2net: Fix buffer overflow in be_get_module_eeprom (Josef Oskera) [2160182 2126917]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.14.1.el8_7]" date="1676030400">- ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems (Wei Huang) [2142170 2130653]
- KVM: x86: nSVM: implement nested LBR virtualization (Emanuele Giuseppe Esposito) [2166362 2155149]
- KVM: x86: nSVM: correctly virtualize LBR msrs when L2 is running (Emanuele Giuseppe Esposito) [2166362 2155149]
- kvm: x86: SVM: use vmcb* instead of svm-&gt;vmcb where it makes sense (Emanuele Giuseppe Esposito) [2166362 2155149]
- KVM: x86: nSVM: implement nested VMLOAD/VMSAVE (Emanuele Giuseppe Esposito) [2166362 2155149]
- IB/iser: Fix login with authentication (Kamal Heib) [2161750 2120676]
- act_mirred: use the backlog for nested calls to mirred ingress (Davide Caratti) [2164648 2131339] {CVE-2022-4269}
- net/sched: act_mirred: better wording on protection against excessive stack growth (Davide Caratti) [2164648 2131339] {CVE-2022-4269}
- redhat/configs: Set CONFIG_X86_AMD_PSTATE to 'm' (Prarit Bhargava) [2151275 2145246]
- KVM: x86: smm: preserve interrupt shadow in SMRAM (Maxim Levitsky) [2166368 2097144]
- KVM: x86: SVM: don't save SVM state to SMRAM when VM is not long mode capable (Maxim Levitsky) [2166368 2097144]
- KVM: x86: SVM: use smram structs (Maxim Levitsky) [2166368 2097144]
- KVM: svm: drop explicit return value of kvm_vcpu_map (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: use smram struct for 64 bit smram load/restore (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: use smram struct for 32 bit smram load/restore (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: use smram structs in the common code (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: add structs for KVM's smram layout (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: check for failures on smm entry (Maxim Levitsky) [2166368 2097144]
- KVM: x86: do not go through ctxt-&gt;ops when emulating rsm (Maxim Levitsky) [2166368 2097144]
- KVM: x86: move SMM exit to a new file (Maxim Levitsky) [2166368 2097144]
- KVM: x86: move SMM entry to a new file (Maxim Levitsky) [2166368 2097144]
- KVM: x86: start moving SMM-related functions to new files (Maxim Levitsky) [2166368 2097144]
- bug: introduce ASSERT_STRUCT_OFFSET (Maxim Levitsky) [2166368 2097144]
- KVM: x86: Rename and expose helper to detect if INIT/SIPI are allowed (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: number of GPRs in the SMRAM image depends on the image format (Maxim Levitsky) [2166368 2097144]
- KVM: x86: emulator: update the emulation mode after CR0 write (Maxim Levitsky) [2166368 2097144]
- KVM: x86: emulator: update the emulation mode after rsm (Maxim Levitsky) [2166368 2097144]
- KVM: x86: emulator: introduce emulator_recalc_and_set_mode (Maxim Levitsky) [2166368 2097144]
- KVM: x86: emulator: em_sysexit should update ctxt-&gt;mode (Maxim Levitsky) [2166368 2097144]
- KVM: x86: Bug the VM if the emulator accesses a non-existent GPR (Maxim Levitsky) [2166368 2097144]
- \KVM: x86: Reduce the number of emulator GPRs to '8' for 32-bit KVM (Maxim Levitsky) [2166368 2097144]
- KVM: x86: Use 16-bit fields to track dirty/valid emulator GPRs (Maxim Levitsky) [2166368 2097144]
- KVM: x86: Omit VCPU_REGS_RIP from emulator's _regs array (Maxim Levitsky) [2166368 2097144]
- \KVM: x86: Harden _regs accesses to guard against buggy input (Maxim Levitsky) [2166368 2097144]
- KVM: x86: Grab regs_dirty in local 'unsigned long' (Maxim Levitsky) [2166368 2097144]
- proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152571 2152572] {CVE-2022-4378}
- proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152571 2152572] {CVE-2022-4378}</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.15.1.el8_7]" date="1676548800">- net/mlx5e: Fix use-after-free when reverting termination table (Amir Tzin) [2167640 2112927]
- net/mlx5: Do not query pci info while pci disabled (Amir Tzin) [2167645 2129249]
- x86/fpu: Fix copy_xstate_to_uabi() to copy init states correctly (Dean Nelson) [2168384 2122850]
- x86/fpu: Exclude dynamic states from init_fpstate (Dean Nelson) [2168384 2122850]
- x86/fpu: Fix the init_fpstate size check with the actual size (Dean Nelson) [2168384 2122850]
- x86/fpu: Configure init_fpstate attributes orderly (Dean Nelson) [2168384 2122850]
- x86/fpu/xstate: Fix the ARCH_REQ_XCOMP_PERM implementation (Dean Nelson) [2168384 2122850]
- net/mlx5: E-Switch, properly handle ingress tagged packets on VST (Amir Tzin) [2166665 2096109]
- cpuhotplug: Fix KABI breakage (Prarit Bhargava) [2162763 2156529]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.16.1.el8_7]" date="1677153600">- ipv6: fix panic when fib_lookup_arg-&gt;result is fib6_info (Jiri Benc) [2167602 2140599]
- ceph: blocklist the kclient when receiving corrupted snap trace (Xiubo Li) [2168896 2162414]
- ceph: move mount state enum to super.h (Xiubo Li) [2168896 2162414]
- s390/kexec: fix ipl report address for kdump (Tobias Huschle) [2166296 2161328]
- mm, compaction: fix fast_isolate_around() to stay within boundaries (Daniel Vacek) [2170576 2149309]
- scsi: storvsc: Fix swiotlb bounce buffer leak in confidential VM (Emanuele Giuseppe Esposito) [2170228 2150659]
- netfilter: conntrack: handle tcp challenge acks during connection reuse (Florian Westphal) [2165587 2158726]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.17.1.el8_7]" date="1677844800">- net: mana: Add rmb after checking owner bits (Mohammed Gamal) [2173103 2139462]
- net: mana: Add support of XDP_REDIRECT action (Mohammed Gamal) [2173103 2139462]
- net: mana: Add the Linux MANA PF driver (Mohammed Gamal) [2173103 2139462]
- ice: fix lost multicast packets in promisc mode (Ken Cox) [2172550 2138215]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.18.0-425.18.1.el8_7]" date="1678449600">- futex: Resend potentially swallowed owner death notification (Rafael Aquini) [2170054 2161526]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.19.1.el8_7]" date="1678968000">- s390/dasd: fix no record found for raw_track_access (Tobias Huschle) [2167776 2161270]
- locking/rwsem: Disable preemption in all down_read*() and up_read() code paths (Waiman Long) [2170939 2162139]
- locking/rwsem: Prevent non-first waiter from spinning in down_write() slowpath (Waiman Long) [2170939 2162139]
- locking/rwsem: Allow slowpath writer to ignore handoff bit if not set by first waiter (Waiman Long) [2170939 2162139]
- locking/rwsem: Always try to wake waiters in out_nolock path (Waiman Long) [2170939 2162139]
- locking/rwsem: No need to check for handoff bit if wait queue empty (Waiman Long) [2170939 2162139]
- locking/rwsem: Make handoff bit handling more consistent (Waiman Long) [2170939 2162139]
- locking/rwsem: Disable preemption while trying for rwsem lock (Waiman Long) [2170939 2162139]
- locking/rwsem: Conditionally wake waiters in reader/writer slowpaths (Waiman Long) [2170939 2162139]
- locking: Make owner_on_cpu() into &lt;linux/sched.h&gt; (Waiman Long) [2170939 2162139]
- locking/rwsem: Optimize down_read_trylock() under highly contended case (Waiman Long) [2170939 2162139]
- locking/rwsem: Fix comments about reader optimistic lock stealing conditions (Waiman Long) [2170939 2162139]
- locking/rwsem: Disable preemption for spinning region (Waiman Long) [2170939 2162139]
- locking: Remove rcu_read_{,un}lock() for preempt_{dis,en}able() (Waiman Long) [2170939 2162139]
- watchdog: fix UAF in reboot notifier handling in watchdog core code (Wander Lairson Costa) [2139770 2131308]
- netfilter: nf_conntrack_irc: Tighten matching on DCC message (Wander Lairson Costa) [2139770 2131308]
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF (Jaroslav Kysela) [2163400 2163401] {CVE-2023-0266}
- net/mlx5e: Fix enabling sriov while tc nic rules are offloaded (Amir Tzin) [2167647 2112925]
- net/mlx5: E-Switch, pair only capable devices (Amir Tzin) [2167647 2112925]
- net/mlx5: Fix mlx5_get_next_dev() peer device matching (Amir Tzin) [2167647 2112925]
- net/mlx5: Lag, filter non compatible devices (Amir Tzin) [2167647 2112925]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.19.2.el8_7.gf5e8]" date="1678968001">- ovl: fail on invalid uid/gid mapping at copy up (Miklos Szeredi) [2165341 2165342] {CVE-2023-0386}</changelog>
</package>
<package pkgid="9f86155782ec635646631741d7a8fcaef0c95d5a5a36d031e00e6e52f11bd0d3" name="platform-python" arch="x86_64">
  <version epoch="0" ver="3.6.8" rel="48.el8_7.1"/>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 3.6.8-40" date="1627560000">- Adjusted the postun scriptlets to enable upgrading to RHEL 9
- Resolves: rhbz#1933055</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 3.6.8-41" date="1631188800">- Security fix for CVE-2021-3733: Denial of service when identifying crafted invalid RFCs
Resolves: rhbz#1995234</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 3.6.8-42" date="1631880000">- Security fix for CVE-2021-3737
Resolves: rhbz#1995162</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-43" date="1633953600">- Change shouldRollover() methods of logging.handlers to only rollover regular files
Resolves: rhbz#2009200</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-44" date="1634040000">- Use the monotonic clock for theading.Condition
- Use the monotonic clock for the global interpreter lock
Resolves: rhbz#2003758</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-45" date="1641556800">- Security fix for CVE-2021-4189: ftplib should not use the host from the PASV response
Resolves: rhbz#2036020</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-46" date="1646827200">- Security fix for CVE-2022-0391: urlparse does not sanitize URLs containing ASCII newline and tabs
- Fix the test suite support for Expat &gt;= 2.4.5
Resolves: rhbz#2047376, rhbz#2060435</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-47" date="1655208000">- Security fix for CVE-2015-20107
Resolves: rhbz#2075390</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-48" date="1666267200">- Release bump
Resolves: rhbz#2136436</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-48.1" date="1671624000">- Security fixes for CVE-2020-10735, CVE-2021-28861 and CVE-2022-45061
Resolves: rhbz#1834423, rhbz#2120642, rhbz#2144072</changelog>
</package>
<package pkgid="9525a0b0d760daa2034d3d0833c18a391f631a3e98b746a4cbc834dd312d3e34" name="platform-python-setuptools" arch="noarch">
  <version epoch="0" ver="39.2.0" rel="6.el8_7.1"/>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 38.4.0-4" date="1521028800">- Skip test_virtualenv due to broken executable detection</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 39.0.1-1" date="1521547200">- update to 39.0.1 Fixes bug #1531527</changelog>
  <changelog author="Petr Viktorin &lt;pviktori@redhat.com&gt; - 39.0.1-2" date="1528372800">- Remove test requirements on python2 packages and some exotic packages
- Skip tests on Python 2</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 39.2.0-1" date="1529409600">- update to 39.2.0 Fixes bug #1572889</changelog>
  <changelog author="Petr Viktorin &lt;pviktori@redhat.com&gt; - 39.2.0-2" date="1529668800">- Do not use wheel on Python 2</changelog>
  <changelog author="Petr Viktorin &lt;pviktori@redhat.com&gt; - 39.2.0-3" date="1529928000">- Allow Python 2 for build
  see https://hurl.corp.redhat.com/rhel8-py2</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 39.2.0-4" date="1540209600">- New subpackage platform-python-setuptools without files from /usr/bin/*
- python3-setuptools contains only files from /usr/bin/* and depends
  on platform-python-setuptools
- Resolves: rhbz#1641973</changelog>
  <changelog author="Petr Viktorin &lt;pviktori@redhat.com&gt; - 39.2.0-5" date="1555502400">- Add subpackages with wheels
Resolves: rhbz#1718032</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 39.2.0-6" date="1585137600">- Create /usr/local/lib/pythonX.Y when needed
Resolves: rhbz#1808301</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 39.2.0-6.1" date="1673438400">- Security fix for CVE-2022-40897
Resolves: rhbz#2158559</changelog>
</package>
<package pkgid="aea446e27e73996dd669585d749559545012bb311516a713b7b6238e5cbb062a" name="python3-libipa_hbac" arch="x86_64">
  <version epoch="0" ver="2.7.3" rel="4.el8_7.1"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.6.2-1" date="1640606400">- Resolves: rhbz#2011216 - Rebase SSSD for RHEL 8.6
- Resolves: rhbz#2013260 - [RHEL8] Add ability to parse child log files
- Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries
- Resolves: rhbz#1859315 - sssd does not use kerberos port that is set.
- Resolves: rhbz#1961182 - Passwordless (GSSAPI) SSH not working due to missing "includedir /var/lib/sss/pubconf/krb5.include.d" directive in /etc/krb5.conf
- Resolves: rhbz#2008829 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2012263 - pam responder does not call initgroups to refresh the user entry
- Resolves: rhbz#2012308 - Add client certificate validation D-Bus API
- Resolves: rhbz#2012327 - Groups are missing while performing id lookup as SSSD switching to offline mode due to the wrong domain name in the ldap-pings(netlogon).
- Resolves: rhbz#2013028 - [RFE] Health and Support Analyzer: Add sssctl sub-command to select and display a single request from the logs
- Resolves: rhbz#2013259 - [RHEL8] Add tevent chain ID logic into responders
- Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.6.2-2" date="1641297600">- Resolves: rhbz#2013260 - [RHEL8] Add ability to parse child log files (additional patch)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.6.2-3" date="1642420800">- Resolves: rhbz#2039892 - 2.6.2 regression: Daemon crashes when resolving AD user names
- Resolves: rhbz#1859315 - sssd does not use kerberos port that is set.
- Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries
- Resolves: rhbz#2035245 - AD Domain in the AD Forest Missing after sssd latest update
- Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.0-2" date="1652875200">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2026799 - SSSD authenticating to LDAP with obfuscated password produces Invalid authtoken type message causing sssd_be to go offline (cross inter_ference of different provider plugins options)
- Resolves: rhbz#2033347 - sssd error triggers backtrace : [write_krb5info_file_from_fo_server] (0x0020): [RID#73501] There is no server that can be written into kdc info file.
- Resolves: rhbz#2056483 - [RFE] Add sssd internal krb5 plugin for authentication against external IdP via OAuth2
- Resolves: rhbz#2062689 - [Improvement] Add user and group version of sss_nss_getorigbyname()
- Resolves: rhbz#2065692 - [RHEL8] Ship new sub-package called sssd-idp into sssd
- Resolves: rhbz#2072050 - sssd_nss exiting (due to missing 'sssd' local user) making SSSD service to restart in a loop
- Resolves: rhbz#2072931 - Use right sdap_domain in ad_domain_info_send
- Resolves: rhbz#2087088 - sssd does not enforce smartcard auth for kde screen locker
- Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol
- Resolves: rhbz#2087745 - 2FA prompting setting ineffective
- Resolves: rhbz#2087746 - sssd fails GPO-based access if AD have setup with Japanese language</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.2-1" date="1655726400">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2098620 - sdap_nested_group_deref_direct_process() triggers internal watchdog for large data sets
- Resolves: rhbz#2098619 - [Improvement] add SSSD support for more than one CRL PEM file name with parameters certificate_verification and crl_file
- Resolves: rhbz#2088817 - pam_sss_gss ceased to work after upgrade to 8.6
- Resolves: rhbz#2098616 - Add idp authentication indicator in man page of sssd.conf
- Resolves: rhbz#2056035 - 'getent hosts' not return hosts if they have more than one CN in LDAP
- Resolves: rhbz#2098615 - Regression "Missing internal domain data." when setting ad_domain to incorrect
- Resolves: rhbz#2098617 - Harden kerberos ticket validation
- Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-1" date="1657713600">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2063016 - [sssd] RHEL 8.7 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-2" date="1660132800">- Resolves: rhbz#2116488 - virsh command will hang after the host run several auto test cases
- Resolves: rhbz#2116486 - [regression] sssctl analyze fails to parse PAM related sssd logs
- Resolves: rhbz#2116487 - cache_req_data_set_hybrid_lookup: cache_req_data should never be NULL</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-3" date="1661256000">- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8
- Resolves: rhbz#2119726 - sssctl analyze --logdir option requires sssd to be configured
- Resolves: rhbz#2120669 - Incorrect request ID tracking from responder to backend</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4" date="1661515200">- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4.1" date="1665662400">- Resolves: rhbz#2128544 - Cannot SSH with AD user to ipa-client (`krb5_validate` and `pac_check` settings conflict) [rhel-8.7.0.z]</changelog>
</package>
<package pkgid="86625187da0df1053128fe5534d669375bafbdb6fb7dcb3f374015bc94414c15" name="python3-libipa_hbac" arch="x86_64">
  <version epoch="0" ver="2.7.3" rel="4.el8_7.3"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.6.2-3" date="1642420800">- Resolves: rhbz#2039892 - 2.6.2 regression: Daemon crashes when resolving AD user names
- Resolves: rhbz#1859315 - sssd does not use kerberos port that is set.
- Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries
- Resolves: rhbz#2035245 - AD Domain in the AD Forest Missing after sssd latest update
- Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.0-2" date="1652875200">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2026799 - SSSD authenticating to LDAP with obfuscated password produces Invalid authtoken type message causing sssd_be to go offline (cross inter_ference of different provider plugins options)
- Resolves: rhbz#2033347 - sssd error triggers backtrace : [write_krb5info_file_from_fo_server] (0x0020): [RID#73501] There is no server that can be written into kdc info file.
- Resolves: rhbz#2056483 - [RFE] Add sssd internal krb5 plugin for authentication against external IdP via OAuth2
- Resolves: rhbz#2062689 - [Improvement] Add user and group version of sss_nss_getorigbyname()
- Resolves: rhbz#2065692 - [RHEL8] Ship new sub-package called sssd-idp into sssd
- Resolves: rhbz#2072050 - sssd_nss exiting (due to missing 'sssd' local user) making SSSD service to restart in a loop
- Resolves: rhbz#2072931 - Use right sdap_domain in ad_domain_info_send
- Resolves: rhbz#2087088 - sssd does not enforce smartcard auth for kde screen locker
- Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol
- Resolves: rhbz#2087745 - 2FA prompting setting ineffective
- Resolves: rhbz#2087746 - sssd fails GPO-based access if AD have setup with Japanese language</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.2-1" date="1655726400">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2098620 - sdap_nested_group_deref_direct_process() triggers internal watchdog for large data sets
- Resolves: rhbz#2098619 - [Improvement] add SSSD support for more than one CRL PEM file name with parameters certificate_verification and crl_file
- Resolves: rhbz#2088817 - pam_sss_gss ceased to work after upgrade to 8.6
- Resolves: rhbz#2098616 - Add idp authentication indicator in man page of sssd.conf
- Resolves: rhbz#2056035 - 'getent hosts' not return hosts if they have more than one CN in LDAP
- Resolves: rhbz#2098615 - Regression "Missing internal domain data." when setting ad_domain to incorrect
- Resolves: rhbz#2098617 - Harden kerberos ticket validation
- Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-1" date="1657713600">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2063016 - [sssd] RHEL 8.7 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-2" date="1660132800">- Resolves: rhbz#2116488 - virsh command will hang after the host run several auto test cases
- Resolves: rhbz#2116486 - [regression] sssctl analyze fails to parse PAM related sssd logs
- Resolves: rhbz#2116487 - cache_req_data_set_hybrid_lookup: cache_req_data should never be NULL</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-3" date="1661256000">- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8
- Resolves: rhbz#2119726 - sssctl analyze --logdir option requires sssd to be configured
- Resolves: rhbz#2120669 - Incorrect request ID tracking from responder to backend</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4" date="1661515200">- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4.1" date="1665662400">- Resolves: rhbz#2128544 - Cannot SSH with AD user to ipa-client (`krb5_validate` and `pac_check` settings conflict) [rhel-8.7.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4.2" date="1670587200">- Resolves: rhbz#2139871 - Analyzer: Optimize and remove duplicate messages in verbose list [rhel-8.7.0.z]
- Resolves: rhbz#2142961 - SSSD: `sssctl analyze` command shouldn't require 'root' privileged [rhel-8.7.0.z]
- Resolves: rhbz#2148989 - UPN check cannot be disabled explicitly but requires krb5_validate = false' as a work-around [rhel-8.7.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4.3" date="1671105600">- Resolves: rhbz#2152883 - authenticating against external IdP services okta (native app) with OAuth client secret failed [rhel-8.7.0.z]</changelog>
</package>
<package pkgid="96cc074a001e330ef9d8c342ea66b27fe2caac673f6ac0d61c8671d04c5a11f3" name="python3-libs" arch="i686">
  <version epoch="0" ver="3.6.8" rel="48.el8_7.1"/>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 3.6.8-40" date="1627560000">- Adjusted the postun scriptlets to enable upgrading to RHEL 9
- Resolves: rhbz#1933055</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 3.6.8-41" date="1631188800">- Security fix for CVE-2021-3733: Denial of service when identifying crafted invalid RFCs
Resolves: rhbz#1995234</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 3.6.8-42" date="1631880000">- Security fix for CVE-2021-3737
Resolves: rhbz#1995162</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-43" date="1633953600">- Change shouldRollover() methods of logging.handlers to only rollover regular files
Resolves: rhbz#2009200</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-44" date="1634040000">- Use the monotonic clock for theading.Condition
- Use the monotonic clock for the global interpreter lock
Resolves: rhbz#2003758</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-45" date="1641556800">- Security fix for CVE-2021-4189: ftplib should not use the host from the PASV response
Resolves: rhbz#2036020</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-46" date="1646827200">- Security fix for CVE-2022-0391: urlparse does not sanitize URLs containing ASCII newline and tabs
- Fix the test suite support for Expat &gt;= 2.4.5
Resolves: rhbz#2047376, rhbz#2060435</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-47" date="1655208000">- Security fix for CVE-2015-20107
Resolves: rhbz#2075390</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-48" date="1666267200">- Release bump
Resolves: rhbz#2136436</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-48.1" date="1671624000">- Security fixes for CVE-2020-10735, CVE-2021-28861 and CVE-2022-45061
Resolves: rhbz#1834423, rhbz#2120642, rhbz#2144072</changelog>
</package>
<package pkgid="58e1dde9ec42b10269be1f5ed6695849e16b2c0fec159ee9ad414840cc7a4d1f" name="python3-libs" arch="x86_64">
  <version epoch="0" ver="3.6.8" rel="48.el8_7.1"/>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 3.6.8-40" date="1627560000">- Adjusted the postun scriptlets to enable upgrading to RHEL 9
- Resolves: rhbz#1933055</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 3.6.8-41" date="1631188800">- Security fix for CVE-2021-3733: Denial of service when identifying crafted invalid RFCs
Resolves: rhbz#1995234</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 3.6.8-42" date="1631880000">- Security fix for CVE-2021-3737
Resolves: rhbz#1995162</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-43" date="1633953600">- Change shouldRollover() methods of logging.handlers to only rollover regular files
Resolves: rhbz#2009200</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-44" date="1634040000">- Use the monotonic clock for theading.Condition
- Use the monotonic clock for the global interpreter lock
Resolves: rhbz#2003758</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-45" date="1641556800">- Security fix for CVE-2021-4189: ftplib should not use the host from the PASV response
Resolves: rhbz#2036020</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-46" date="1646827200">- Security fix for CVE-2022-0391: urlparse does not sanitize URLs containing ASCII newline and tabs
- Fix the test suite support for Expat &gt;= 2.4.5
Resolves: rhbz#2047376, rhbz#2060435</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-47" date="1655208000">- Security fix for CVE-2015-20107
Resolves: rhbz#2075390</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-48" date="1666267200">- Release bump
Resolves: rhbz#2136436</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-48.1" date="1671624000">- Security fixes for CVE-2020-10735, CVE-2021-28861 and CVE-2022-45061
Resolves: rhbz#1834423, rhbz#2120642, rhbz#2144072</changelog>
</package>
<package pkgid="af5679cad2bc76aee57a06f85e6625c0bc4d3036ecb51642082e9110e0ded701" name="python3-libsss_nss_idmap" arch="x86_64">
  <version epoch="0" ver="2.7.3" rel="4.el8_7.1"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.6.2-1" date="1640606400">- Resolves: rhbz#2011216 - Rebase SSSD for RHEL 8.6
- Resolves: rhbz#2013260 - [RHEL8] Add ability to parse child log files
- Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries
- Resolves: rhbz#1859315 - sssd does not use kerberos port that is set.
- Resolves: rhbz#1961182 - Passwordless (GSSAPI) SSH not working due to missing "includedir /var/lib/sss/pubconf/krb5.include.d" directive in /etc/krb5.conf
- Resolves: rhbz#2008829 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2012263 - pam responder does not call initgroups to refresh the user entry
- Resolves: rhbz#2012308 - Add client certificate validation D-Bus API
- Resolves: rhbz#2012327 - Groups are missing while performing id lookup as SSSD switching to offline mode due to the wrong domain name in the ldap-pings(netlogon).
- Resolves: rhbz#2013028 - [RFE] Health and Support Analyzer: Add sssctl sub-command to select and display a single request from the logs
- Resolves: rhbz#2013259 - [RHEL8] Add tevent chain ID logic into responders
- Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.6.2-2" date="1641297600">- Resolves: rhbz#2013260 - [RHEL8] Add ability to parse child log files (additional patch)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.6.2-3" date="1642420800">- Resolves: rhbz#2039892 - 2.6.2 regression: Daemon crashes when resolving AD user names
- Resolves: rhbz#1859315 - sssd does not use kerberos port that is set.
- Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries
- Resolves: rhbz#2035245 - AD Domain in the AD Forest Missing after sssd latest update
- Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.0-2" date="1652875200">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2026799 - SSSD authenticating to LDAP with obfuscated password produces Invalid authtoken type message causing sssd_be to go offline (cross inter_ference of different provider plugins options)
- Resolves: rhbz#2033347 - sssd error triggers backtrace : [write_krb5info_file_from_fo_server] (0x0020): [RID#73501] There is no server that can be written into kdc info file.
- Resolves: rhbz#2056483 - [RFE] Add sssd internal krb5 plugin for authentication against external IdP via OAuth2
- Resolves: rhbz#2062689 - [Improvement] Add user and group version of sss_nss_getorigbyname()
- Resolves: rhbz#2065692 - [RHEL8] Ship new sub-package called sssd-idp into sssd
- Resolves: rhbz#2072050 - sssd_nss exiting (due to missing 'sssd' local user) making SSSD service to restart in a loop
- Resolves: rhbz#2072931 - Use right sdap_domain in ad_domain_info_send
- Resolves: rhbz#2087088 - sssd does not enforce smartcard auth for kde screen locker
- Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol
- Resolves: rhbz#2087745 - 2FA prompting setting ineffective
- Resolves: rhbz#2087746 - sssd fails GPO-based access if AD have setup with Japanese language</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.2-1" date="1655726400">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2098620 - sdap_nested_group_deref_direct_process() triggers internal watchdog for large data sets
- Resolves: rhbz#2098619 - [Improvement] add SSSD support for more than one CRL PEM file name with parameters certificate_verification and crl_file
- Resolves: rhbz#2088817 - pam_sss_gss ceased to work after upgrade to 8.6
- Resolves: rhbz#2098616 - Add idp authentication indicator in man page of sssd.conf
- Resolves: rhbz#2056035 - 'getent hosts' not return hosts if they have more than one CN in LDAP
- Resolves: rhbz#2098615 - Regression "Missing internal domain data." when setting ad_domain to incorrect
- Resolves: rhbz#2098617 - Harden kerberos ticket validation
- Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-1" date="1657713600">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2063016 - [sssd] RHEL 8.7 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-2" date="1660132800">- Resolves: rhbz#2116488 - virsh command will hang after the host run several auto test cases
- Resolves: rhbz#2116486 - [regression] sssctl analyze fails to parse PAM related sssd logs
- Resolves: rhbz#2116487 - cache_req_data_set_hybrid_lookup: cache_req_data should never be NULL</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-3" date="1661256000">- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8
- Resolves: rhbz#2119726 - sssctl analyze --logdir option requires sssd to be configured
- Resolves: rhbz#2120669 - Incorrect request ID tracking from responder to backend</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4" date="1661515200">- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4.1" date="1665662400">- Resolves: rhbz#2128544 - Cannot SSH with AD user to ipa-client (`krb5_validate` and `pac_check` settings conflict) [rhel-8.7.0.z]</changelog>
</package>
<package pkgid="8086ad54dc2fd6360dfc3244033bb15df364ec705792c923ad4e4d26c25ba828" name="python3-libsss_nss_idmap" arch="x86_64">
  <version epoch="0" ver="2.7.3" rel="4.el8_7.3"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.6.2-3" date="1642420800">- Resolves: rhbz#2039892 - 2.6.2 regression: Daemon crashes when resolving AD user names
- Resolves: rhbz#1859315 - sssd does not use kerberos port that is set.
- Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries
- Resolves: rhbz#2035245 - AD Domain in the AD Forest Missing after sssd latest update
- Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.0-2" date="1652875200">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2026799 - SSSD authenticating to LDAP with obfuscated password produces Invalid authtoken type message causing sssd_be to go offline (cross inter_ference of different provider plugins options)
- Resolves: rhbz#2033347 - sssd error triggers backtrace : [write_krb5info_file_from_fo_server] (0x0020): [RID#73501] There is no server that can be written into kdc info file.
- Resolves: rhbz#2056483 - [RFE] Add sssd internal krb5 plugin for authentication against external IdP via OAuth2
- Resolves: rhbz#2062689 - [Improvement] Add user and group version of sss_nss_getorigbyname()
- Resolves: rhbz#2065692 - [RHEL8] Ship new sub-package called sssd-idp into sssd
- Resolves: rhbz#2072050 - sssd_nss exiting (due to missing 'sssd' local user) making SSSD service to restart in a loop
- Resolves: rhbz#2072931 - Use right sdap_domain in ad_domain_info_send
- Resolves: rhbz#2087088 - sssd does not enforce smartcard auth for kde screen locker
- Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol
- Resolves: rhbz#2087745 - 2FA prompting setting ineffective
- Resolves: rhbz#2087746 - sssd fails GPO-based access if AD have setup with Japanese language</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.2-1" date="1655726400">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2098620 - sdap_nested_group_deref_direct_process() triggers internal watchdog for large data sets
- Resolves: rhbz#2098619 - [Improvement] add SSSD support for more than one CRL PEM file name with parameters certificate_verification and crl_file
- Resolves: rhbz#2088817 - pam_sss_gss ceased to work after upgrade to 8.6
- Resolves: rhbz#2098616 - Add idp authentication indicator in man page of sssd.conf
- Resolves: rhbz#2056035 - 'getent hosts' not return hosts if they have more than one CN in LDAP
- Resolves: rhbz#2098615 - Regression "Missing internal domain data." when setting ad_domain to incorrect
- Resolves: rhbz#2098617 - Harden kerberos ticket validation
- Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-1" date="1657713600">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2063016 - [sssd] RHEL 8.7 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-2" date="1660132800">- Resolves: rhbz#2116488 - virsh command will hang after the host run several auto test cases
- Resolves: rhbz#2116486 - [regression] sssctl analyze fails to parse PAM related sssd logs
- Resolves: rhbz#2116487 - cache_req_data_set_hybrid_lookup: cache_req_data should never be NULL</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-3" date="1661256000">- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8
- Resolves: rhbz#2119726 - sssctl analyze --logdir option requires sssd to be configured
- Resolves: rhbz#2120669 - Incorrect request ID tracking from responder to backend</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4" date="1661515200">- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4.1" date="1665662400">- Resolves: rhbz#2128544 - Cannot SSH with AD user to ipa-client (`krb5_validate` and `pac_check` settings conflict) [rhel-8.7.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4.2" date="1670587200">- Resolves: rhbz#2139871 - Analyzer: Optimize and remove duplicate messages in verbose list [rhel-8.7.0.z]
- Resolves: rhbz#2142961 - SSSD: `sssctl analyze` command shouldn't require 'root' privileged [rhel-8.7.0.z]
- Resolves: rhbz#2148989 - UPN check cannot be disabled explicitly but requires krb5_validate = false' as a work-around [rhel-8.7.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4.3" date="1671105600">- Resolves: rhbz#2152883 - authenticating against external IdP services okta (native app) with OAuth client secret failed [rhel-8.7.0.z]</changelog>
</package>
<package pkgid="eb02ed743249dc38f253a62e446f3c8da78eec584d25c090d26b2f5c6ef3f1b1" name="python3-libxml2" arch="x86_64">
  <version epoch="0" ver="2.9.7" rel="15.el8_7.1"/>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.7-7" date="1571918400">- Fix CVE-2018-14404 (#1595989)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.7-8" date="1579521600">- Fix CVE-2019-19956 (#1793001)
- Fix CVE-2020-7595 (#1799786)
- Fix CVE-2019-20388 (#1810058)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.7-9" date="1603108800">- Fix CVE-2020-24977 (#1878252)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.7-10" date="1620388800">- Fix CVE-2021-3516 (#1956976)
- Fix CVE-2021-3517 (#1957001)
- Fix CVE-2021-3518 (#1957028)
- Fix CVE-2021-3537 (#1957284)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.7-11" date="1621425600">- Fix CVE-2021-3541 (#1958783)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.7-12" date="1645704000">- Fix CVE-2022-23308 (#2057664)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.7-13" date="1645704001">- Bump release (#2057664)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.7-14" date="1652356800">- Fix CVE-2022-29824 (#2082298)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.7-15" date="1661342400">- Fix CVE-2016-3709 (#2120781)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.7-15.1" date="1667390400">- Fix CVE-2022-40303 (#2136562)
- Fix CVE-2022-40304 (#2136567)</changelog>
</package>
<package pkgid="69451a2f368f53f0375944833c5b33052bb296208705a6699b47ed6cc9b8ed11" name="python3-perf" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="425.10.1.el8_7"/>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.1.1.el8]" date="1663588800">- i40e: Fix kernel crash during module removal (Ivan Vecera) [2091489]
- redhat: enable zstream release numbering for rhel 8.7 (Jarod Wilson)
- ice: Allow operation with reduced device MSI-X (Petr Oros) [2102844]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.2.1.el8]" date="1664193600">- EDAC/ghes: Set the DIMM label unconditionally (Aristeu Rozanski) [2109712]
- configs: enable CONFIG_HP_ILO for aarch64 (Mark Salter) [2123508]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.3.1.el8]" date="1664539200">- iwlwifi: limit fw version for AC9560 to avoid fw crash (Íñigo Huguet) [2129297]
- sfc: fix null pointer dereference in efx_hard_start_xmit (Íñigo Huguet) [2119638]
- sfc: fix TX channel offset when using legacy interrupts (Íñigo Huguet) [2119638]
- netfilter: conntrack: reduce timeout when receiving out-of-window fin or rst (Florian Westphal) [2047366]
- netfilter: conntrack: remove unneeded indent level (Florian Westphal) [2047366]
- netfilter: conntrack: ignore overly delayed tcp packets (Florian Westphal) [2047366]
- netfilter: conntrack: prepare tcp_in_window for ternary return value (Florian Westphal) [2047366]
- netfilter: conntrack: remove pr_debug callsites from tcp tracker (Florian Westphal) [2047366]
- netfilter: conntrack: work around exceeded receive window (Florian Westphal) [2047366]
- netfilter: conntrack: improve RST handling when tuple is re-used (Florian Westphal) [2047366]
- netfilter: conntrack: avoid misleading 'invalid' in log message (Florian Westphal) [2047366]
- netfilter: remove BUG_ON() after skb_header_pointer() (Florian Westphal) [2047366]
- iavf: Detach device during reset task (Petr Oros) [2069206]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.4.1.el8]" date="1665144000">- random: allow reseeding DRBG with getrandom (Daiki Ueno) [2121766]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.5.1.el8_7]" date="1667476800">- ice: Fix interface being down after reset with link-down-on-close flag on (Petr Oros) [2136216 2024110]
- ice: Fix crash by keep old cfg when update TCs more than queues (Petr Oros) [2130992 2129902]
- ice: Fix tunnel checksum offload with fragmented traffic (Petr Oros) [2130992 2129902]
- ice: handle E822 generic device ID in PLDM header (Petr Oros) [2130992 2129902]
- ice: ethtool: Prohibit improper channel config for DCB (Petr Oros) [2130992 2129902]
- ice: ethtool: advertise 1000M speeds properly (Petr Oros) [2130992 2129902]
- ice: Fix switchdev rules book keeping (Petr Oros) [2130992 2129902]
- ice: fix access-beyond-end in the switch code (Petr Oros) [2130992 2129902]
- eth: ice: silence the GCC 12 array-bounds warning (Petr Oros) [2130992 2129902]
- ice: Expose RSS indirection tables for queue groups via ethtool (Petr Oros) [2130992 2129902]
- Revert "ice: Hide bus-info in ethtool for PRs in switchdev mode" (Petr Oros) [2130992 2129902]
- ice: remove period on argument description in ice_for_each_vf (Petr Oros) [2130992 2129902]
- ice: add a function comment for ice_cfg_mac_antispoof (Petr Oros) [2130992 2129902]
- ice: fix wording in comment for ice_reset_vf (Petr Oros) [2130992 2129902]
- ice: remove return value comment for ice_reset_all_vfs (Petr Oros) [2130992 2129902]
- ice: always check VF VSI pointer values (Petr Oros) [2130992 2129902]
- ice: add newline to dev_dbg in ice_vf_fdir_dump_info (Petr Oros) [2130992 2129902]
- ice: get switch id on switchdev devices (Petr Oros) [2130992 2129902]
- ice: return ENOSPC when exceeding ICE_MAX_CHAIN_WORDS (Petr Oros) [2130992 2129902]
- ice: introduce common helper for retrieving VSI by vsi_num (Petr Oros) [2130992 2129902]
- ice: use min_t() to make code cleaner in ice_gnss (Petr Oros) [2130992 2129902]
- ice: Add mpls+tso support (Petr Oros) [2130992 2129902]
- ice: switch: convert packet template match code to rodata (Petr Oros) [2130992 2129902]
- ice: switch: use convenience macros to declare dummy pkt templates (Petr Oros) [2130992 2129902]
- ice: switch: use a struct to pass packet template params (Petr Oros) [2130992 2129902]
- ice: switch: unobscurify bitops loop in ice_fill_adv_dummy_packet() (Petr Oros) [2130992 2129902]
- ice: switch: add and use u16[] aliases to ice_adv_lkup_elem::{h, m}_u (Petr Oros) [2130992 2129902]
- ice: Support GTP-U and GTP-C offload in switchdev (Petr Oros) [2130992 2129902]
- ice: Remove useless DMA-32 fallback configuration (Petr Oros) [2130992 2129902]
- ice: switch to napi_build_skb() (Petr Oros) [2130992 2129902]
- redhat: switch to z-stream dist tag and build targets (Jarod Wilson)
- block: avoid sign extend problem with default queue flags mask (Nico Pache) [2135813]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.6.1.el8_7]" date="1668168000">- ice: Add low latency Tx timestamp read (Petr Oros) [2136036 2092425]
- ice: introduce ice_ptp_reset_cached_phctime function (Petr Oros) [2136036 2092425]
- ice: re-arrange some static functions in ice_ptp.c (Petr Oros) [2136036 2092425]
- ice: track and warn when PHC update is late (Petr Oros) [2136036 2092425]
- ice: track Tx timestamp stats similar to other Intel drivers (Petr Oros) [2136036 2092425]
- ice: implement adjfine with mul_u64_u64_div_u64 (Petr Oros) [2136036 2092425]
- ice: Add EXTTS feature to the feature bitmap (Petr Oros) [2136036 2092425]
- math: Export mul_u64_u64_div_u64 (Petr Oros) [2136036 2092425]
- vfio/type1: Unpin zero pages (Alex Williamson) [2128515 2123015]
- net: atlantic: remove aq_nic_deinit() when resume (Íñigo Huguet) [2131935 2130839]
- net: atlantic: remove deep parameter on suspend/resume functions (Íñigo Huguet) [2131935 2130839]
- CI: Use zstream builder container (Veronika Kabatova)
- CI: Add disttag override for 8.7 (Veronika Kabatova)</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.7.1.el8_7]" date="1669723200">- ice: Add additional CSR registers to ETHTOOL_GREGS (Petr Oros) [2136513 2131024]
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps (Petr Oros) [2137270 2106964]
- i40e: Fix VF set max MTU size (Petr Oros) [2137270 2106964]
- iavf: Fix set max MTU size with port VLAN and jumbo frames (Petr Oros) [2137270 2106964]
- iavf: Fix bad page state (Petr Oros) [2137270 2106964]
- Revert "scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels" (Jarod Wilson)
- scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels (Tomas Henzl) [2139216]
- Revert "ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems" (Jarod Wilson)
- ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems (Wei Huang) [2142170 2130653]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.8.1.el8_7]" date="1669982400">- scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels (Tomas Henzl) [2139216 2134535]
- RDMA/mlx5: Set local port to one when accessing counters (Mohammad Kabat) [2141957 2077119]
- drm/mgag200: Fix PLL setup for G200_SE_A rev &gt;=4 (Jocelyn Falempe) [2140152 2130159]
- iavf: Do not restart Tx queues after reset task failure (Petr Oros) [2149081 2134005]
- iavf: Fix a crash during reset task (Petr Oros) [2149081 2134005]
- scsi: core: Allow the ALUA transitioning state enough time (Tomas Henzl) [2147374 2084250]
- scsi: core: Return BLK_STS_TRANSPORT for ALUA transitioning (Tomas Henzl) [2147374 2084250]
- i40e: Fix DMA mappings leak (Ivan Vecera) [2138205 2077847]
- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2142724 2142725] {CVE-2022-2964}
- net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2142724 2142725] {CVE-2022-2964}</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.9.1.el8_7]" date="1670587200">- Documentation/admin-guide: Document nomodeset kernel parameter (Jocelyn Falempe) [2145218 2143952]
- drm: Move nomodeset kernel parameter to the DRM subsystem (Jocelyn Falempe) [2145218 2143952]
- wait: Fix __wait_event_hrtimeout for RT/DL tasks (Derek Barbosa) [2138953 2125233]
- scsi: zfcp: Fix missing auto port scan and thus missing target ports (Tobias Huschle) [2127849 2121089]
- net: Fix return value of qdisc ingress handling on success (Ivan Vecera) [2141878 2131361]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.10.1.el8_7]" date="1671019200">- scsi: target: loop: Fix handling of aborted TMRs (Maurizio Lombardi) [2144583 2141713]
- ice: virtchnl rss hena support (Petr Oros) [2148130]
- ice: Fix configuring VIRTCHNL_OP_CONFIG_VSI_QUEUES with unbalanced queues (Michal Schmidt) [2142017 2137378]
- ice: Add support Flex RXD (Michal Schmidt) [2138157 2131310]
- netfilter: flowtable: fix stuck flows on cleanup due to pending work (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: add function to invoke garbage collection immediately (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: pass flowtable to nf_flow_table_iterate() (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: separate replace, destroy and stats to different workqueues (Phil Sutter) [2134084 2131370]
- x86/paravirt: Add a dummy __x86_paravirt_patch_template() function (Waiman Long) [2152206 2144161]
- x86/paravirt: Fix kABI breakage in struct pv_mmu_ops (Waiman Long) [2152206 2144161]
- drm/i915: fix TLB invalidation for Gen12 video and compute engines (Wander Lairson Costa) [2148149 2148150] {CVE-2022-4139}
- PCI: hv: Do not set PCI_COMMAND_MEMORY to reduce VM boot time (Emanuele Giuseppe Esposito) [2150912 2082836]
- iavf: Fix cached head and tail value for iavf_get_tx_pending (Stefan Assmann) [2149742 2103944]
- iavf: Fix change VF's mac address (Stefan Assmann) [2149742 2103944]
- iavf: Fix race between iavf_close and iavf_reset_task (Stefan Assmann) [2149742 2103944]
- net: ethernet: move from strlcpy with unused retval to strscpy (Stefan Assmann) [2149742 2103944]
- iavf: Fix 'tc qdisc show' listing too many queues (Stefan Assmann) [2149742 2103944]
- iavf: Fix max_rate limiting (Stefan Assmann) [2149742 2103944]
- iavf: Check for duplicate TC flower filter before parsing (Stefan Assmann) [2149742 2103944]
- iavf: Fix handling of dummy receive descriptors (Stefan Assmann) [2149742 2103944]
- iavf: Disallow changing rx/tx-frames and rx/tx-frames-irq (Stefan Assmann) [2149742 2103944]
- intel/iavf:fix repeated words in comments (Stefan Assmann) [2149742 2103944]
- intel: remove unused macros (Stefan Assmann) [2149742 2103944]
- iavf: Add waiting for response from PF in set mac (Stefan Assmann) [2149742 2103944]</changelog>
</package>
<package pkgid="73c2496dd380fb56d6c0dcacccab8896bacba6611883c97ea05b2a52ce5b1120" name="python3-perf" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="425.13.1.el8_7"/>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.4.1.el8]" date="1665144000">- random: allow reseeding DRBG with getrandom (Daiki Ueno) [2121766]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.5.1.el8_7]" date="1667476800">- ice: Fix interface being down after reset with link-down-on-close flag on (Petr Oros) [2136216 2024110]
- ice: Fix crash by keep old cfg when update TCs more than queues (Petr Oros) [2130992 2129902]
- ice: Fix tunnel checksum offload with fragmented traffic (Petr Oros) [2130992 2129902]
- ice: handle E822 generic device ID in PLDM header (Petr Oros) [2130992 2129902]
- ice: ethtool: Prohibit improper channel config for DCB (Petr Oros) [2130992 2129902]
- ice: ethtool: advertise 1000M speeds properly (Petr Oros) [2130992 2129902]
- ice: Fix switchdev rules book keeping (Petr Oros) [2130992 2129902]
- ice: fix access-beyond-end in the switch code (Petr Oros) [2130992 2129902]
- eth: ice: silence the GCC 12 array-bounds warning (Petr Oros) [2130992 2129902]
- ice: Expose RSS indirection tables for queue groups via ethtool (Petr Oros) [2130992 2129902]
- Revert "ice: Hide bus-info in ethtool for PRs in switchdev mode" (Petr Oros) [2130992 2129902]
- ice: remove period on argument description in ice_for_each_vf (Petr Oros) [2130992 2129902]
- ice: add a function comment for ice_cfg_mac_antispoof (Petr Oros) [2130992 2129902]
- ice: fix wording in comment for ice_reset_vf (Petr Oros) [2130992 2129902]
- ice: remove return value comment for ice_reset_all_vfs (Petr Oros) [2130992 2129902]
- ice: always check VF VSI pointer values (Petr Oros) [2130992 2129902]
- ice: add newline to dev_dbg in ice_vf_fdir_dump_info (Petr Oros) [2130992 2129902]
- ice: get switch id on switchdev devices (Petr Oros) [2130992 2129902]
- ice: return ENOSPC when exceeding ICE_MAX_CHAIN_WORDS (Petr Oros) [2130992 2129902]
- ice: introduce common helper for retrieving VSI by vsi_num (Petr Oros) [2130992 2129902]
- ice: use min_t() to make code cleaner in ice_gnss (Petr Oros) [2130992 2129902]
- ice: Add mpls+tso support (Petr Oros) [2130992 2129902]
- ice: switch: convert packet template match code to rodata (Petr Oros) [2130992 2129902]
- ice: switch: use convenience macros to declare dummy pkt templates (Petr Oros) [2130992 2129902]
- ice: switch: use a struct to pass packet template params (Petr Oros) [2130992 2129902]
- ice: switch: unobscurify bitops loop in ice_fill_adv_dummy_packet() (Petr Oros) [2130992 2129902]
- ice: switch: add and use u16[] aliases to ice_adv_lkup_elem::{h, m}_u (Petr Oros) [2130992 2129902]
- ice: Support GTP-U and GTP-C offload in switchdev (Petr Oros) [2130992 2129902]
- ice: Remove useless DMA-32 fallback configuration (Petr Oros) [2130992 2129902]
- ice: switch to napi_build_skb() (Petr Oros) [2130992 2129902]
- redhat: switch to z-stream dist tag and build targets (Jarod Wilson)
- block: avoid sign extend problem with default queue flags mask (Nico Pache) [2135813]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.6.1.el8_7]" date="1668168000">- ice: Add low latency Tx timestamp read (Petr Oros) [2136036 2092425]
- ice: introduce ice_ptp_reset_cached_phctime function (Petr Oros) [2136036 2092425]
- ice: re-arrange some static functions in ice_ptp.c (Petr Oros) [2136036 2092425]
- ice: track and warn when PHC update is late (Petr Oros) [2136036 2092425]
- ice: track Tx timestamp stats similar to other Intel drivers (Petr Oros) [2136036 2092425]
- ice: implement adjfine with mul_u64_u64_div_u64 (Petr Oros) [2136036 2092425]
- ice: Add EXTTS feature to the feature bitmap (Petr Oros) [2136036 2092425]
- math: Export mul_u64_u64_div_u64 (Petr Oros) [2136036 2092425]
- vfio/type1: Unpin zero pages (Alex Williamson) [2128515 2123015]
- net: atlantic: remove aq_nic_deinit() when resume (Íñigo Huguet) [2131935 2130839]
- net: atlantic: remove deep parameter on suspend/resume functions (Íñigo Huguet) [2131935 2130839]
- CI: Use zstream builder container (Veronika Kabatova)
- CI: Add disttag override for 8.7 (Veronika Kabatova)</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.7.1.el8_7]" date="1669723200">- ice: Add additional CSR registers to ETHTOOL_GREGS (Petr Oros) [2136513 2131024]
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps (Petr Oros) [2137270 2106964]
- i40e: Fix VF set max MTU size (Petr Oros) [2137270 2106964]
- iavf: Fix set max MTU size with port VLAN and jumbo frames (Petr Oros) [2137270 2106964]
- iavf: Fix bad page state (Petr Oros) [2137270 2106964]
- Revert "scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels" (Jarod Wilson)
- scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels (Tomas Henzl) [2139216]
- Revert "ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems" (Jarod Wilson)
- ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems (Wei Huang) [2142170 2130653]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.8.1.el8_7]" date="1669982400">- scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels (Tomas Henzl) [2139216 2134535]
- RDMA/mlx5: Set local port to one when accessing counters (Mohammad Kabat) [2141957 2077119]
- drm/mgag200: Fix PLL setup for G200_SE_A rev &gt;=4 (Jocelyn Falempe) [2140152 2130159]
- iavf: Do not restart Tx queues after reset task failure (Petr Oros) [2149081 2134005]
- iavf: Fix a crash during reset task (Petr Oros) [2149081 2134005]
- scsi: core: Allow the ALUA transitioning state enough time (Tomas Henzl) [2147374 2084250]
- scsi: core: Return BLK_STS_TRANSPORT for ALUA transitioning (Tomas Henzl) [2147374 2084250]
- i40e: Fix DMA mappings leak (Ivan Vecera) [2138205 2077847]
- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2142724 2142725] {CVE-2022-2964}
- net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2142724 2142725] {CVE-2022-2964}</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.9.1.el8_7]" date="1670587200">- Documentation/admin-guide: Document nomodeset kernel parameter (Jocelyn Falempe) [2145218 2143952]
- drm: Move nomodeset kernel parameter to the DRM subsystem (Jocelyn Falempe) [2145218 2143952]
- wait: Fix __wait_event_hrtimeout for RT/DL tasks (Derek Barbosa) [2138953 2125233]
- scsi: zfcp: Fix missing auto port scan and thus missing target ports (Tobias Huschle) [2127849 2121089]
- net: Fix return value of qdisc ingress handling on success (Ivan Vecera) [2141878 2131361]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.10.1.el8_7]" date="1671019200">- scsi: target: loop: Fix handling of aborted TMRs (Maurizio Lombardi) [2144583 2141713]
- ice: virtchnl rss hena support (Petr Oros) [2148130]
- ice: Fix configuring VIRTCHNL_OP_CONFIG_VSI_QUEUES with unbalanced queues (Michal Schmidt) [2142017 2137378]
- ice: Add support Flex RXD (Michal Schmidt) [2138157 2131310]
- netfilter: flowtable: fix stuck flows on cleanup due to pending work (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: add function to invoke garbage collection immediately (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: pass flowtable to nf_flow_table_iterate() (Phil Sutter) [2134084 2131370]
- netfilter: flowtable: separate replace, destroy and stats to different workqueues (Phil Sutter) [2134084 2131370]
- x86/paravirt: Add a dummy __x86_paravirt_patch_template() function (Waiman Long) [2152206 2144161]
- x86/paravirt: Fix kABI breakage in struct pv_mmu_ops (Waiman Long) [2152206 2144161]
- drm/i915: fix TLB invalidation for Gen12 video and compute engines (Wander Lairson Costa) [2148149 2148150] {CVE-2022-4139}
- PCI: hv: Do not set PCI_COMMAND_MEMORY to reduce VM boot time (Emanuele Giuseppe Esposito) [2150912 2082836]
- iavf: Fix cached head and tail value for iavf_get_tx_pending (Stefan Assmann) [2149742 2103944]
- iavf: Fix change VF's mac address (Stefan Assmann) [2149742 2103944]
- iavf: Fix race between iavf_close and iavf_reset_task (Stefan Assmann) [2149742 2103944]
- net: ethernet: move from strlcpy with unused retval to strscpy (Stefan Assmann) [2149742 2103944]
- iavf: Fix 'tc qdisc show' listing too many queues (Stefan Assmann) [2149742 2103944]
- iavf: Fix max_rate limiting (Stefan Assmann) [2149742 2103944]
- iavf: Check for duplicate TC flower filter before parsing (Stefan Assmann) [2149742 2103944]
- iavf: Fix handling of dummy receive descriptors (Stefan Assmann) [2149742 2103944]
- iavf: Disallow changing rx/tx-frames and rx/tx-frames-irq (Stefan Assmann) [2149742 2103944]
- intel/iavf:fix repeated words in comments (Stefan Assmann) [2149742 2103944]
- intel: remove unused macros (Stefan Assmann) [2149742 2103944]
- iavf: Add waiting for response from PF in set mac (Stefan Assmann) [2149742 2103944]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.11.1.el8_7]" date="1673006400">- NFSD: Protect against send buffer overflow in NFSv3 READ (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv2 READ (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv3 READDIR (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv2 READDIR (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- SUNRPC: Fix svcxdr_init_encode's buflen calculation (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- SUNRPC: Fix svcxdr_init_decode's end-of-buffer calculation (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- panic, kexec: make __crash_kexec() NMI safe (Valentin Schneider) [2139580 2134126]
- kexec: turn all kexec_mutex acquisitions into trylocks (Valentin Schneider) [2139580 2134126]
- kexec: move locking into do_kexec_load (Valentin Schneider) [2139580 2134126]
- vdpa/mlx5: re-create forwarding rules after mac modified (Laurent Vivier) [2152912 2145136]
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry (Waiman Long) [2153653 2108387]
- irq: Call tick_irq_enter() inside HARDIRQ_OFFSET (Waiman Long) [2153653 2108387]
- irqtime: Move irqtime entry accounting after irq offset incrementation (Waiman Long) [2153653 2108387]
- sched/vtime: Consolidate IRQ time accounting (Waiman Long) [2153653 2108387]
- s390/vtime: Use the generic IRQ entry accounting (Waiman Long) [2153653 2108387]
- sched/cputime: Remove symbol exports from IRQ time accounting (Waiman Long) [2153653 2108387]
- genirq/irqdomain: Don't try to free an interrupt that has no mapping (Waiman Long) [2153653 2108387]
- genirq: Provide __irq_enter/exit_raw() (Waiman Long) [2153653 2108387]
- powerpc/time: Only set CONFIG_ARCH_HAS_SCALED_CPUTIME on PPC64 (Waiman Long) [2153653 2108387]
- powerpc/time: isolate scaled cputime accounting in dedicated functions. (Waiman Long) [2153653 2108387]
- PCI: hv: Fix synchronization between channel callback and hv_pci_bus_exit() (Mohammed Gamal) [2155280 2144708]
- PCI: hv: Fix synchronization between channel callback and hv_compose_msi_msg() (Mohammed Gamal) [2155280 2144708]
- PCI: hv: Use vmbus_requestor to generate transaction IDs for VMbus hardening (Mohammed Gamal) [2155280 2144708]
- net/mlx5e: TC, Reject forwarding from internal port to internal port (Mohammad Kabat) [2141959 2131345]
- hv_netvsc: Fix race between VF offering and VF association message from host (Mohammed Gamal) [2155272 2149279]
- x86/mce: Reduce number of machine checks taken during recovery (Prarit Bhargava) [2137592 2104388]
- cgroup/cpuset: Reduce cpuset_rwsem writer latency (Waiman Long) [2153108 2149031]
- rcu/exp: Mark current CPU as exp-QS in IPI loop second pass (Waiman Long) [2153108 2149031]
- rcu: Always inline rcu_dynticks_task*_{enter,exit}() (Waiman Long) [2153108 2149031]
- rcu: Fix existing exp request check in sync_sched_exp_online_cleanup() (Waiman Long) [2153108 2149031]
- rcu: Fix macro name CONFIG_TASKS_RCU_TRACE (Waiman Long) [2153108 2149031]
- rcu: Fix stall-warning deadlock due to non-release of rcu_node -&gt;lock (Waiman Long) [2153108 2149031]
- rcu: Fix to include first blocked task in stall warning (Waiman Long) [2153108 2149031]
- cgroup: Use cgroup_attach_{lock,unlock}() from cgroup_attach_task_all() (Waiman Long) [2153108 2149031]
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all() (Waiman Long) [2153108 2149031]
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock (Waiman Long) [2153108 2149031]
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree (Waiman Long) [2153108 2149031]
- cgroup/cpuset: Fix a race between cpuset_attach() and cpu hotplug (Waiman Long) [2153108 2149031]
- cgroup: reduce dependency on cgroup_mutex (Waiman Long) [2153108 2149031]
- sunrpc: Set sk_allocation to GFP_NOFS to avoid using current-&gt;task_frag. (Guillaume Nault) [2153230 2089660]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.12.1.el8_7]" date="1674129600">- x86/fpu: Prevent FPU state corruption (Oleksandr Natalenko) [2134586 2130890]
- x86/fpu: Drop fpregs lock before inheriting FPU permissions (Eder Zulian) [2154460 2153549]
- kernel-doc: fix undefined args variable (Jan Stancek) [2157905 2134954]
- mm: memcontrol: fix potential oom_lock recursion deadlock (Waiman Long) [2157922 2138886]
- memcg: prohibit unconditional exceeding the limit of dying tasks (Waiman Long) [2157922 2138886]
- mm, oom: do not trigger out_of_memory from the #PF (Waiman Long) [2157922 2138886]
- mm, oom: pagefault_out_of_memory: don't force global OOM for dying tasks (Waiman Long) [2157922 2138886]
- mm: memcontrol: don't count limit-setting reclaim as memory pressure (Waiman Long) [2157922 2138886]
- KVM: s390: vsie: Fix the initialization of the epoch extension (epdx) field (Thomas Huth) [2158813 2151854]
- net: mana: Fix race on per-CQ variable napi work_done (Emanuele Giuseppe Esposito) [2155437 2151722]
- mei: me: add adler lake point S DID (Prarit Bhargava) [2141783 2141602]
- PCI: hv: Only reuse existing IRTE allocation for Multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix the definition of vector in hv_compose_msi_msg() (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix interrupt mapping for multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Reuse existing IRTE allocation in compose_msi_msg() (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix hv_arch_irq_unmask() for multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix multi-MSI to allow more than one MSI vector (Emanuele Giuseppe Esposito) [2155289 2100275]
- drm/ast: Support multiple outputs (Jarod Wilson) [2149287 2147553]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.13.1.el8_7]" date="1675339200">- mm/cgroup/reclaim: fix dirty pages throttling on cgroup v1 (Waiman Long) [2160221]
- mm: vmscan: remove deadlock due to throttling failing to make progress (Waiman Long) [2160221]
- mm: vmscan: reduce throttling due to a failure to make progress -fix (Waiman Long) [2160221]
- mm: vmscan: Reduce throttling due to a failure to make progress (Waiman Long) [2160221]
- mm/vmscan: delay waking of tasks throttled on NOPROGRESS (Waiman Long) [2160221]
- mm/vmscan: increase the timeout if page reclaim is not making progress (Waiman Long) [2160221]
- mm/vmscan: centralise timeout values for reclaim_throttle (Waiman Long) [2160221]
- mm/page_alloc: remove the throttling logic from the page allocator (Waiman Long) [2160221]
- mm/writeback: throttle based on page writeback instead of congestion (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim when no progress is being made (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim and compaction when too may pages are isolated (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim until some writeback completes if congested (Waiman Long) [2160221]
- mm/vmscan.c: delete or fix duplicated words (Waiman Long) [2160221]
- mm,page_alloc: PF_WQ_WORKER threads must sleep at should_reclaim_retry() (Nico Pache) [2160221]
- ceph: avoid putting the realm twice when decoding snaps fails (Xiubo Li) [2155797 2139881]
- mm/mremap: hold the rmap lock in write mode when moving page table entries. (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: use pmd/pud_poplulate to update page table entries (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: don't enable optimized PUD move if page table levels is 2 (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: convert huge PUD move to separate helper (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: fix BUILD_BUG_ON() error in get_extent (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap.c: fix extent calculation (Waiman Long) [2140944] {CVE-2022-41222}
- x86: mremap speedup - Enable HAVE_MOVE_PUD (Waiman Long) [2140944] {CVE-2022-41222}
- mm: speedup mremap on 1GB or larger regions (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: start addresses are properly aligned (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: calculate extent in one place (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: it is sure to have enough space when extent meets requirement (Waiman Long) [2140944] {CVE-2022-41222}
- s390/boot: add secure boot trailer (Tobias Huschle) [2151530 2141967]
- i40e: Fix VF hang when reset is triggered on another VF (Ivan Vecera) [2160460 2103801]
- i2c: ismt: Fix an out-of-bounds bug in ismt_access() (Prarit Bhargava) [2154388 2119066] {CVE-2022-2873}
- iavf: schedule watchdog immediately when changing primary MAC (Michal Schmidt) [2163257 2152493]
- iavf: Move netdev_update_features() into watchdog task (Michal Schmidt) [2163257 2152493]
- iavf: fix temporary deadlock and failure to set MAC address (Michal Schmidt) [2163257 2152493]
- iavf: Fix error handling in iavf_init_module() (Michal Schmidt) [2163257 2152493]
- iommu/vt-d: Clean up si_domain in the init_dmars() error path (Jerry Snitselaar) [2149474 2118428]
- x86/pci/xen: Use msi_msg shadow structs (Jerry Snitselaar) [2149474 2118428]
- iommu/intel: Use msi_msg shadow structs (Jerry Snitselaar) [2149474 2118428]
- PCI: MSI: Fix Kconfig dependencies for PCI_MSI_ARCH_FALLBACKS (Jerry Snitselaar) [2149474 2118428]
- x86/apic/msi: Unbreak DMAR and HPET MSI (Jerry Snitselaar) [2149474 2118428]
- iommu/amd: Remove domain search for PCI/MSI (Jerry Snitselaar) [2149474 2118428]
- iommu/vt-d: Remove domain search for PCI/MSI[X] (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Make most MSI ops XEN private (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Cleanup the arch_*_msi_irqs() leftovers (Jerry Snitselaar) [2149474 2118428]
- PCI/MSI: Make arch_.*_msi_irq[s] fallbacks selectable (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Wrap XEN MSI management into irqdomain (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Consolidate XEN-MSI init (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Rework MSI teardown (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Make xen_msi_init() static and rename it to xen_hvm_msi_init() (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Move apic_post_init() invocation to one place (Jerry Snitselaar) [2149474 2118428]
- x86/msi: Use generic MSI domain ops (Jerry Snitselaar) [2149474 2118428]
- x86/msi: Remove pointless vcpu_affinity callback (Jerry Snitselaar) [2149474 2118428]
- iommu/vt-d: Fix compile error with CONFIG_PCI_ATS not set (Myron Stowe) [2149474 2118428]
- iommu/vt-d: Cure VF irqdomain hickup (Myron Stowe) [2149474 2118428]
- x86/pci: Set default irq domain in pcibios_add_device() (Myron Stowe) [2149474 2118428]
- iommm/amd: Store irq domain in struct device (Myron Stowe) [2149474 2118428]
- iommm/vt-d: Store irq domain in struct device (Myron Stowe) [2149474 2118428]
- PCI/MSI: Provide pci_dev_has_special_msi_domain() helper (Myron Stowe) [2149474 2118428]
- x86/msi: Consolidate MSI allocation (Myron Stowe) [2149474 2118428]
- PCI/MSI: Rework pci_msi_domain_calc_hwirq() (Myron Stowe) [2149474 2118428]
- x86/irq: Consolidate UV domain allocation (Myron Stowe) [2149474 2118428]
- x86/irq: Consolidate DMAR irq allocation (Myron Stowe) [2149474 2118428]
- x86_ioapic_Consolidate_IOAPIC_allocation (Myron Stowe) [2149474 2118428]
- x86/msi: Consolidate HPET allocation (Myron Stowe) [2149474 2118428]
- iommu/irq_remapping: Consolidate irq domain lookup (Myron Stowe) [2149474 2118428]
- iommu/amd: Consolidate irq domain getter (Myron Stowe) [2149474 2118428]
- iommu/vt-d: Consolidate irq domain getter (Myron Stowe) [2149474 2118428]
- x86/irq: Add allocation type for parent domain retrieval (Myron Stowe) [2149474 2118428]
- irqdomain: Export irq_domain_update_bus_token (Myron Stowe) [2149474 2118428]
- gitlab-ci: use CI templates from production branch (Michael Hofmann)
- iavf: remove INITIAL_MAC_SET to allow gARP to work properly (Stefan Assmann) [2149745 1938635]
- Revert "scsi: iscsi: ql4xxx: Use per-session workqueue for unbinding" (Chris Leech) [2152734 2122624]
- Revert "scsi: iscsi: Use the session workqueue for recovery" (Chris Leech) [2152734 2122624]
- arm64/bpf: Remove 128MB limit for BPF JIT programs (Yauheni Kaliuta) [2152138 2140163]
- bpf: Define bpf_jit_alloc_exec_limit for arm64 JIT (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: add `type` and `data` fields (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: use `ex` for `exception_table_entry` (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: make fixup_exception() return bool (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: consolidate definitions (Yauheni Kaliuta) [2152138 2140163]
- arm64: kvm: use kvm_exception_table_entry (Yauheni Kaliuta) [2152138 2140163]
- be2net: Fix buffer overflow in be_get_module_eeprom (Josef Oskera) [2160182 2126917]</changelog>
</package>
<package pkgid="0a3042708fbe11e5af7832dda1885621704702c511177472d86dd5281b720966" name="python3-perf" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="425.19.2.el8_7"/>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.11.1.el8_7]" date="1673006400">- NFSD: Protect against send buffer overflow in NFSv3 READ (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv2 READ (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv3 READDIR (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- NFSD: Protect against send buffer overflow in NFSv2 READDIR (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- SUNRPC: Fix svcxdr_init_encode's buflen calculation (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- SUNRPC: Fix svcxdr_init_decode's end-of-buffer calculation (Scott Mayhew) [2143172 2141774] {CVE-2022-43945}
- panic, kexec: make __crash_kexec() NMI safe (Valentin Schneider) [2139580 2134126]
- kexec: turn all kexec_mutex acquisitions into trylocks (Valentin Schneider) [2139580 2134126]
- kexec: move locking into do_kexec_load (Valentin Schneider) [2139580 2134126]
- vdpa/mlx5: re-create forwarding rules after mac modified (Laurent Vivier) [2152912 2145136]
- timers/nohz: Last resort update jiffies on nohz_full IRQ entry (Waiman Long) [2153653 2108387]
- irq: Call tick_irq_enter() inside HARDIRQ_OFFSET (Waiman Long) [2153653 2108387]
- irqtime: Move irqtime entry accounting after irq offset incrementation (Waiman Long) [2153653 2108387]
- sched/vtime: Consolidate IRQ time accounting (Waiman Long) [2153653 2108387]
- s390/vtime: Use the generic IRQ entry accounting (Waiman Long) [2153653 2108387]
- sched/cputime: Remove symbol exports from IRQ time accounting (Waiman Long) [2153653 2108387]
- genirq/irqdomain: Don't try to free an interrupt that has no mapping (Waiman Long) [2153653 2108387]
- genirq: Provide __irq_enter/exit_raw() (Waiman Long) [2153653 2108387]
- powerpc/time: Only set CONFIG_ARCH_HAS_SCALED_CPUTIME on PPC64 (Waiman Long) [2153653 2108387]
- powerpc/time: isolate scaled cputime accounting in dedicated functions. (Waiman Long) [2153653 2108387]
- PCI: hv: Fix synchronization between channel callback and hv_pci_bus_exit() (Mohammed Gamal) [2155280 2144708]
- PCI: hv: Fix synchronization between channel callback and hv_compose_msi_msg() (Mohammed Gamal) [2155280 2144708]
- PCI: hv: Use vmbus_requestor to generate transaction IDs for VMbus hardening (Mohammed Gamal) [2155280 2144708]
- net/mlx5e: TC, Reject forwarding from internal port to internal port (Mohammad Kabat) [2141959 2131345]
- hv_netvsc: Fix race between VF offering and VF association message from host (Mohammed Gamal) [2155272 2149279]
- x86/mce: Reduce number of machine checks taken during recovery (Prarit Bhargava) [2137592 2104388]
- cgroup/cpuset: Reduce cpuset_rwsem writer latency (Waiman Long) [2153108 2149031]
- rcu/exp: Mark current CPU as exp-QS in IPI loop second pass (Waiman Long) [2153108 2149031]
- rcu: Always inline rcu_dynticks_task*_{enter,exit}() (Waiman Long) [2153108 2149031]
- rcu: Fix existing exp request check in sync_sched_exp_online_cleanup() (Waiman Long) [2153108 2149031]
- rcu: Fix macro name CONFIG_TASKS_RCU_TRACE (Waiman Long) [2153108 2149031]
- rcu: Fix stall-warning deadlock due to non-release of rcu_node -&gt;lock (Waiman Long) [2153108 2149031]
- rcu: Fix to include first blocked task in stall warning (Waiman Long) [2153108 2149031]
- cgroup: Use cgroup_attach_{lock,unlock}() from cgroup_attach_task_all() (Waiman Long) [2153108 2149031]
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all() (Waiman Long) [2153108 2149031]
- cgroup: Fix threadgroup_rwsem &lt;-&gt; cpus_read_lock() deadlock (Waiman Long) [2153108 2149031]
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree (Waiman Long) [2153108 2149031]
- cgroup/cpuset: Fix a race between cpuset_attach() and cpu hotplug (Waiman Long) [2153108 2149031]
- cgroup: reduce dependency on cgroup_mutex (Waiman Long) [2153108 2149031]
- sunrpc: Set sk_allocation to GFP_NOFS to avoid using current-&gt;task_frag. (Guillaume Nault) [2153230 2089660]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.12.1.el8_7]" date="1674129600">- x86/fpu: Prevent FPU state corruption (Oleksandr Natalenko) [2134586 2130890]
- x86/fpu: Drop fpregs lock before inheriting FPU permissions (Eder Zulian) [2154460 2153549]
- kernel-doc: fix undefined args variable (Jan Stancek) [2157905 2134954]
- mm: memcontrol: fix potential oom_lock recursion deadlock (Waiman Long) [2157922 2138886]
- memcg: prohibit unconditional exceeding the limit of dying tasks (Waiman Long) [2157922 2138886]
- mm, oom: do not trigger out_of_memory from the #PF (Waiman Long) [2157922 2138886]
- mm, oom: pagefault_out_of_memory: don't force global OOM for dying tasks (Waiman Long) [2157922 2138886]
- mm: memcontrol: don't count limit-setting reclaim as memory pressure (Waiman Long) [2157922 2138886]
- KVM: s390: vsie: Fix the initialization of the epoch extension (epdx) field (Thomas Huth) [2158813 2151854]
- net: mana: Fix race on per-CQ variable napi work_done (Emanuele Giuseppe Esposito) [2155437 2151722]
- mei: me: add adler lake point S DID (Prarit Bhargava) [2141783 2141602]
- PCI: hv: Only reuse existing IRTE allocation for Multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix the definition of vector in hv_compose_msi_msg() (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix interrupt mapping for multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Reuse existing IRTE allocation in compose_msi_msg() (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix hv_arch_irq_unmask() for multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275]
- PCI: hv: Fix multi-MSI to allow more than one MSI vector (Emanuele Giuseppe Esposito) [2155289 2100275]
- drm/ast: Support multiple outputs (Jarod Wilson) [2149287 2147553]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.13.1.el8_7]" date="1675339200">- mm/cgroup/reclaim: fix dirty pages throttling on cgroup v1 (Waiman Long) [2160221]
- mm: vmscan: remove deadlock due to throttling failing to make progress (Waiman Long) [2160221]
- mm: vmscan: reduce throttling due to a failure to make progress -fix (Waiman Long) [2160221]
- mm: vmscan: Reduce throttling due to a failure to make progress (Waiman Long) [2160221]
- mm/vmscan: delay waking of tasks throttled on NOPROGRESS (Waiman Long) [2160221]
- mm/vmscan: increase the timeout if page reclaim is not making progress (Waiman Long) [2160221]
- mm/vmscan: centralise timeout values for reclaim_throttle (Waiman Long) [2160221]
- mm/page_alloc: remove the throttling logic from the page allocator (Waiman Long) [2160221]
- mm/writeback: throttle based on page writeback instead of congestion (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim when no progress is being made (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim and compaction when too may pages are isolated (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim until some writeback completes if congested (Waiman Long) [2160221]
- mm/vmscan.c: delete or fix duplicated words (Waiman Long) [2160221]
- mm,page_alloc: PF_WQ_WORKER threads must sleep at should_reclaim_retry() (Nico Pache) [2160221]
- ceph: avoid putting the realm twice when decoding snaps fails (Xiubo Li) [2155797 2139881]
- mm/mremap: hold the rmap lock in write mode when moving page table entries. (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: use pmd/pud_poplulate to update page table entries (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: don't enable optimized PUD move if page table levels is 2 (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: convert huge PUD move to separate helper (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: fix BUILD_BUG_ON() error in get_extent (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap.c: fix extent calculation (Waiman Long) [2140944] {CVE-2022-41222}
- x86: mremap speedup - Enable HAVE_MOVE_PUD (Waiman Long) [2140944] {CVE-2022-41222}
- mm: speedup mremap on 1GB or larger regions (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: start addresses are properly aligned (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: calculate extent in one place (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: it is sure to have enough space when extent meets requirement (Waiman Long) [2140944] {CVE-2022-41222}
- s390/boot: add secure boot trailer (Tobias Huschle) [2151530 2141967]
- i40e: Fix VF hang when reset is triggered on another VF (Ivan Vecera) [2160460 2103801]
- i2c: ismt: Fix an out-of-bounds bug in ismt_access() (Prarit Bhargava) [2154388 2119066] {CVE-2022-2873}
- iavf: schedule watchdog immediately when changing primary MAC (Michal Schmidt) [2163257 2152493]
- iavf: Move netdev_update_features() into watchdog task (Michal Schmidt) [2163257 2152493]
- iavf: fix temporary deadlock and failure to set MAC address (Michal Schmidt) [2163257 2152493]
- iavf: Fix error handling in iavf_init_module() (Michal Schmidt) [2163257 2152493]
- iommu/vt-d: Clean up si_domain in the init_dmars() error path (Jerry Snitselaar) [2149474 2118428]
- x86/pci/xen: Use msi_msg shadow structs (Jerry Snitselaar) [2149474 2118428]
- iommu/intel: Use msi_msg shadow structs (Jerry Snitselaar) [2149474 2118428]
- PCI: MSI: Fix Kconfig dependencies for PCI_MSI_ARCH_FALLBACKS (Jerry Snitselaar) [2149474 2118428]
- x86/apic/msi: Unbreak DMAR and HPET MSI (Jerry Snitselaar) [2149474 2118428]
- iommu/amd: Remove domain search for PCI/MSI (Jerry Snitselaar) [2149474 2118428]
- iommu/vt-d: Remove domain search for PCI/MSI[X] (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Make most MSI ops XEN private (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Cleanup the arch_*_msi_irqs() leftovers (Jerry Snitselaar) [2149474 2118428]
- PCI/MSI: Make arch_.*_msi_irq[s] fallbacks selectable (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Wrap XEN MSI management into irqdomain (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Consolidate XEN-MSI init (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Rework MSI teardown (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Make xen_msi_init() static and rename it to xen_hvm_msi_init() (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Move apic_post_init() invocation to one place (Jerry Snitselaar) [2149474 2118428]
- x86/msi: Use generic MSI domain ops (Jerry Snitselaar) [2149474 2118428]
- x86/msi: Remove pointless vcpu_affinity callback (Jerry Snitselaar) [2149474 2118428]
- iommu/vt-d: Fix compile error with CONFIG_PCI_ATS not set (Myron Stowe) [2149474 2118428]
- iommu/vt-d: Cure VF irqdomain hickup (Myron Stowe) [2149474 2118428]
- x86/pci: Set default irq domain in pcibios_add_device() (Myron Stowe) [2149474 2118428]
- iommm/amd: Store irq domain in struct device (Myron Stowe) [2149474 2118428]
- iommm/vt-d: Store irq domain in struct device (Myron Stowe) [2149474 2118428]
- PCI/MSI: Provide pci_dev_has_special_msi_domain() helper (Myron Stowe) [2149474 2118428]
- x86/msi: Consolidate MSI allocation (Myron Stowe) [2149474 2118428]
- PCI/MSI: Rework pci_msi_domain_calc_hwirq() (Myron Stowe) [2149474 2118428]
- x86/irq: Consolidate UV domain allocation (Myron Stowe) [2149474 2118428]
- x86/irq: Consolidate DMAR irq allocation (Myron Stowe) [2149474 2118428]
- x86_ioapic_Consolidate_IOAPIC_allocation (Myron Stowe) [2149474 2118428]
- x86/msi: Consolidate HPET allocation (Myron Stowe) [2149474 2118428]
- iommu/irq_remapping: Consolidate irq domain lookup (Myron Stowe) [2149474 2118428]
- iommu/amd: Consolidate irq domain getter (Myron Stowe) [2149474 2118428]
- iommu/vt-d: Consolidate irq domain getter (Myron Stowe) [2149474 2118428]
- x86/irq: Add allocation type for parent domain retrieval (Myron Stowe) [2149474 2118428]
- irqdomain: Export irq_domain_update_bus_token (Myron Stowe) [2149474 2118428]
- gitlab-ci: use CI templates from production branch (Michael Hofmann)
- iavf: remove INITIAL_MAC_SET to allow gARP to work properly (Stefan Assmann) [2149745 1938635]
- Revert "scsi: iscsi: ql4xxx: Use per-session workqueue for unbinding" (Chris Leech) [2152734 2122624]
- Revert "scsi: iscsi: Use the session workqueue for recovery" (Chris Leech) [2152734 2122624]
- arm64/bpf: Remove 128MB limit for BPF JIT programs (Yauheni Kaliuta) [2152138 2140163]
- bpf: Define bpf_jit_alloc_exec_limit for arm64 JIT (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: add `type` and `data` fields (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: use `ex` for `exception_table_entry` (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: make fixup_exception() return bool (Yauheni Kaliuta) [2152138 2140163]
- arm64: extable: consolidate definitions (Yauheni Kaliuta) [2152138 2140163]
- arm64: kvm: use kvm_exception_table_entry (Yauheni Kaliuta) [2152138 2140163]
- be2net: Fix buffer overflow in be_get_module_eeprom (Josef Oskera) [2160182 2126917]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.14.1.el8_7]" date="1676030400">- ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems (Wei Huang) [2142170 2130653]
- KVM: x86: nSVM: implement nested LBR virtualization (Emanuele Giuseppe Esposito) [2166362 2155149]
- KVM: x86: nSVM: correctly virtualize LBR msrs when L2 is running (Emanuele Giuseppe Esposito) [2166362 2155149]
- kvm: x86: SVM: use vmcb* instead of svm-&gt;vmcb where it makes sense (Emanuele Giuseppe Esposito) [2166362 2155149]
- KVM: x86: nSVM: implement nested VMLOAD/VMSAVE (Emanuele Giuseppe Esposito) [2166362 2155149]
- IB/iser: Fix login with authentication (Kamal Heib) [2161750 2120676]
- act_mirred: use the backlog for nested calls to mirred ingress (Davide Caratti) [2164648 2131339] {CVE-2022-4269}
- net/sched: act_mirred: better wording on protection against excessive stack growth (Davide Caratti) [2164648 2131339] {CVE-2022-4269}
- redhat/configs: Set CONFIG_X86_AMD_PSTATE to 'm' (Prarit Bhargava) [2151275 2145246]
- KVM: x86: smm: preserve interrupt shadow in SMRAM (Maxim Levitsky) [2166368 2097144]
- KVM: x86: SVM: don't save SVM state to SMRAM when VM is not long mode capable (Maxim Levitsky) [2166368 2097144]
- KVM: x86: SVM: use smram structs (Maxim Levitsky) [2166368 2097144]
- KVM: svm: drop explicit return value of kvm_vcpu_map (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: use smram struct for 64 bit smram load/restore (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: use smram struct for 32 bit smram load/restore (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: use smram structs in the common code (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: add structs for KVM's smram layout (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: check for failures on smm entry (Maxim Levitsky) [2166368 2097144]
- KVM: x86: do not go through ctxt-&gt;ops when emulating rsm (Maxim Levitsky) [2166368 2097144]
- KVM: x86: move SMM exit to a new file (Maxim Levitsky) [2166368 2097144]
- KVM: x86: move SMM entry to a new file (Maxim Levitsky) [2166368 2097144]
- KVM: x86: start moving SMM-related functions to new files (Maxim Levitsky) [2166368 2097144]
- bug: introduce ASSERT_STRUCT_OFFSET (Maxim Levitsky) [2166368 2097144]
- KVM: x86: Rename and expose helper to detect if INIT/SIPI are allowed (Maxim Levitsky) [2166368 2097144]
- KVM: x86: smm: number of GPRs in the SMRAM image depends on the image format (Maxim Levitsky) [2166368 2097144]
- KVM: x86: emulator: update the emulation mode after CR0 write (Maxim Levitsky) [2166368 2097144]
- KVM: x86: emulator: update the emulation mode after rsm (Maxim Levitsky) [2166368 2097144]
- KVM: x86: emulator: introduce emulator_recalc_and_set_mode (Maxim Levitsky) [2166368 2097144]
- KVM: x86: emulator: em_sysexit should update ctxt-&gt;mode (Maxim Levitsky) [2166368 2097144]
- KVM: x86: Bug the VM if the emulator accesses a non-existent GPR (Maxim Levitsky) [2166368 2097144]
- \KVM: x86: Reduce the number of emulator GPRs to '8' for 32-bit KVM (Maxim Levitsky) [2166368 2097144]
- KVM: x86: Use 16-bit fields to track dirty/valid emulator GPRs (Maxim Levitsky) [2166368 2097144]
- KVM: x86: Omit VCPU_REGS_RIP from emulator's _regs array (Maxim Levitsky) [2166368 2097144]
- \KVM: x86: Harden _regs accesses to guard against buggy input (Maxim Levitsky) [2166368 2097144]
- KVM: x86: Grab regs_dirty in local 'unsigned long' (Maxim Levitsky) [2166368 2097144]
- proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152571 2152572] {CVE-2022-4378}
- proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152571 2152572] {CVE-2022-4378}</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.15.1.el8_7]" date="1676548800">- net/mlx5e: Fix use-after-free when reverting termination table (Amir Tzin) [2167640 2112927]
- net/mlx5: Do not query pci info while pci disabled (Amir Tzin) [2167645 2129249]
- x86/fpu: Fix copy_xstate_to_uabi() to copy init states correctly (Dean Nelson) [2168384 2122850]
- x86/fpu: Exclude dynamic states from init_fpstate (Dean Nelson) [2168384 2122850]
- x86/fpu: Fix the init_fpstate size check with the actual size (Dean Nelson) [2168384 2122850]
- x86/fpu: Configure init_fpstate attributes orderly (Dean Nelson) [2168384 2122850]
- x86/fpu/xstate: Fix the ARCH_REQ_XCOMP_PERM implementation (Dean Nelson) [2168384 2122850]
- net/mlx5: E-Switch, properly handle ingress tagged packets on VST (Amir Tzin) [2166665 2096109]
- cpuhotplug: Fix KABI breakage (Prarit Bhargava) [2162763 2156529]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.16.1.el8_7]" date="1677153600">- ipv6: fix panic when fib_lookup_arg-&gt;result is fib6_info (Jiri Benc) [2167602 2140599]
- ceph: blocklist the kclient when receiving corrupted snap trace (Xiubo Li) [2168896 2162414]
- ceph: move mount state enum to super.h (Xiubo Li) [2168896 2162414]
- s390/kexec: fix ipl report address for kdump (Tobias Huschle) [2166296 2161328]
- mm, compaction: fix fast_isolate_around() to stay within boundaries (Daniel Vacek) [2170576 2149309]
- scsi: storvsc: Fix swiotlb bounce buffer leak in confidential VM (Emanuele Giuseppe Esposito) [2170228 2150659]
- netfilter: conntrack: handle tcp challenge acks during connection reuse (Florian Westphal) [2165587 2158726]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.17.1.el8_7]" date="1677844800">- net: mana: Add rmb after checking owner bits (Mohammed Gamal) [2173103 2139462]
- net: mana: Add support of XDP_REDIRECT action (Mohammed Gamal) [2173103 2139462]
- net: mana: Add the Linux MANA PF driver (Mohammed Gamal) [2173103 2139462]
- ice: fix lost multicast packets in promisc mode (Ken Cox) [2172550 2138215]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.18.0-425.18.1.el8_7]" date="1678449600">- futex: Resend potentially swallowed owner death notification (Rafael Aquini) [2170054 2161526]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.19.1.el8_7]" date="1678968000">- s390/dasd: fix no record found for raw_track_access (Tobias Huschle) [2167776 2161270]
- locking/rwsem: Disable preemption in all down_read*() and up_read() code paths (Waiman Long) [2170939 2162139]
- locking/rwsem: Prevent non-first waiter from spinning in down_write() slowpath (Waiman Long) [2170939 2162139]
- locking/rwsem: Allow slowpath writer to ignore handoff bit if not set by first waiter (Waiman Long) [2170939 2162139]
- locking/rwsem: Always try to wake waiters in out_nolock path (Waiman Long) [2170939 2162139]
- locking/rwsem: No need to check for handoff bit if wait queue empty (Waiman Long) [2170939 2162139]
- locking/rwsem: Make handoff bit handling more consistent (Waiman Long) [2170939 2162139]
- locking/rwsem: Disable preemption while trying for rwsem lock (Waiman Long) [2170939 2162139]
- locking/rwsem: Conditionally wake waiters in reader/writer slowpaths (Waiman Long) [2170939 2162139]
- locking: Make owner_on_cpu() into &lt;linux/sched.h&gt; (Waiman Long) [2170939 2162139]
- locking/rwsem: Optimize down_read_trylock() under highly contended case (Waiman Long) [2170939 2162139]
- locking/rwsem: Fix comments about reader optimistic lock stealing conditions (Waiman Long) [2170939 2162139]
- locking/rwsem: Disable preemption for spinning region (Waiman Long) [2170939 2162139]
- locking: Remove rcu_read_{,un}lock() for preempt_{dis,en}able() (Waiman Long) [2170939 2162139]
- watchdog: fix UAF in reboot notifier handling in watchdog core code (Wander Lairson Costa) [2139770 2131308]
- netfilter: nf_conntrack_irc: Tighten matching on DCC message (Wander Lairson Costa) [2139770 2131308]
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF (Jaroslav Kysela) [2163400 2163401] {CVE-2023-0266}
- net/mlx5e: Fix enabling sriov while tc nic rules are offloaded (Amir Tzin) [2167647 2112925]
- net/mlx5: E-Switch, pair only capable devices (Amir Tzin) [2167647 2112925]
- net/mlx5: Fix mlx5_get_next_dev() peer device matching (Amir Tzin) [2167647 2112925]
- net/mlx5: Lag, filter non compatible devices (Amir Tzin) [2167647 2112925]</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; [4.18.0-425.19.2.el8_7.gf5e8]" date="1678968001">- ovl: fail on invalid uid/gid mapping at copy up (Miklos Szeredi) [2165341 2165342] {CVE-2023-0386}</changelog>
</package>
<package pkgid="331261d3649bd6948ae23e42aad273e66821fcc9c0d185af21813eb6fee4e714" name="python3-samba" arch="i686">
  <version epoch="0" ver="4.16.4" rel="4.el8_7"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.15.5-7" date="1650456000">- resolves: rhbz#2076505 - PAM Kerberos authentication fails with a clock skew error</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.15.5-8" date="1651060800">- resolves: rhbz#2070522 - Fix UPNs handling in lookup_name*() calls</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.1-0" date="1651492800">- Update to Samba 4.16.1
- resolves: rhbz#2077468 Rebase Samba to the the latest 4.16.x release</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.2-0" date="1655121600">- Fix rpminspect abidiff
- related: rhbz#2077468 - Rebase Samba to 4.16.2</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.2-1" date="1655208000">- resolves: rhbz#2084162 - Fix printer displays only after 300 seconds timeout</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.3-0" date="1658145600">- related: rhbz#2077468 - Rebase Samba to 4.16.3
- resolves: rhbz#2106672 - The pcap background queue process should not be stopped
- resolves: rhbz#2106263 - Fix crash in rpcd_classic
- resolves: rhbz#2100093 - Fix net ads info returns LDAP server and LDAP server name</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-1" date="1659009600">- Rebase to version 4.16.4
- resolves: rhbz#2108331 - Fix CVE-2022-32742</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-2" date="1661428800">- resolves: rhbz#2120956 - Do not require samba package in python3-samba</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-3" date="1671537600">- resolves: rhbz#2154369 - Fix CVE-2022-38023</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-4" date="1673870400">- related: rhbz#2154369 - Add additional patch for CVE-2022-38023</changelog>
</package>
<package pkgid="c5d9f54c422b4da7a6f9f365b967f3dd71f5d887df9c9d41466f0438051667d1" name="python3-samba" arch="x86_64">
  <version epoch="0" ver="4.16.4" rel="4.el8_7"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.15.5-7" date="1650456000">- resolves: rhbz#2076505 - PAM Kerberos authentication fails with a clock skew error</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.15.5-8" date="1651060800">- resolves: rhbz#2070522 - Fix UPNs handling in lookup_name*() calls</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.1-0" date="1651492800">- Update to Samba 4.16.1
- resolves: rhbz#2077468 Rebase Samba to the the latest 4.16.x release</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.2-0" date="1655121600">- Fix rpminspect abidiff
- related: rhbz#2077468 - Rebase Samba to 4.16.2</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.2-1" date="1655208000">- resolves: rhbz#2084162 - Fix printer displays only after 300 seconds timeout</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.3-0" date="1658145600">- related: rhbz#2077468 - Rebase Samba to 4.16.3
- resolves: rhbz#2106672 - The pcap background queue process should not be stopped
- resolves: rhbz#2106263 - Fix crash in rpcd_classic
- resolves: rhbz#2100093 - Fix net ads info returns LDAP server and LDAP server name</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-1" date="1659009600">- Rebase to version 4.16.4
- resolves: rhbz#2108331 - Fix CVE-2022-32742</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-2" date="1661428800">- resolves: rhbz#2120956 - Do not require samba package in python3-samba</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-3" date="1671537600">- resolves: rhbz#2154369 - Fix CVE-2022-38023</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-4" date="1673870400">- related: rhbz#2154369 - Add additional patch for CVE-2022-38023</changelog>
</package>
<package pkgid="16c572dadd9ae57f154c0a4016fb0a3af3861fc9f53356fc1550dd39d5f57a8e" name="python3-samba" arch="i686">
  <version epoch="0" ver="4.16.4" rel="6.el8_7"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.1-0" date="1651492800">- Update to Samba 4.16.1
- resolves: rhbz#2077468 Rebase Samba to the the latest 4.16.x release</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.2-0" date="1655121600">- Fix rpminspect abidiff
- related: rhbz#2077468 - Rebase Samba to 4.16.2</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.2-1" date="1655208000">- resolves: rhbz#2084162 - Fix printer displays only after 300 seconds timeout</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.3-0" date="1658145600">- related: rhbz#2077468 - Rebase Samba to 4.16.3
- resolves: rhbz#2106672 - The pcap background queue process should not be stopped
- resolves: rhbz#2106263 - Fix crash in rpcd_classic
- resolves: rhbz#2100093 - Fix net ads info returns LDAP server and LDAP server name</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-1" date="1659009600">- Rebase to version 4.16.4
- resolves: rhbz#2108331 - Fix CVE-2022-32742</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-2" date="1661428800">- resolves: rhbz#2120956 - Do not require samba package in python3-samba</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-3" date="1671537600">- resolves: rhbz#2154369 - Fix CVE-2022-38023</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-4" date="1673870400">- related: rhbz#2154369 - Add additional patch for CVE-2022-38023</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.4-5" date="1676548800">- resolves: rhbz#2170394 - Fix share enum
- resolves: rhbz#2170467 - Add to package ctdb dependency for package samba-winbind-clients
- resolves: rhbz#2170468 - Add package dcerpc - fix winbind to retrieve user groups from AD
- resolves: rhbz#2170469 - Create package samba-tools</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.4-6" date="1676548801">- resolves: rhbz#2170468 - Remove libnetapi dependency from dcerpc</changelog>
</package>
<package pkgid="577d9750ae57ed6d2304b9acfe13e55b96d86cdb48d30da6619f584e52e0e9d6" name="python3-samba" arch="x86_64">
  <version epoch="0" ver="4.16.4" rel="6.el8_7"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.1-0" date="1651492800">- Update to Samba 4.16.1
- resolves: rhbz#2077468 Rebase Samba to the the latest 4.16.x release</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.2-0" date="1655121600">- Fix rpminspect abidiff
- related: rhbz#2077468 - Rebase Samba to 4.16.2</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.2-1" date="1655208000">- resolves: rhbz#2084162 - Fix printer displays only after 300 seconds timeout</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.3-0" date="1658145600">- related: rhbz#2077468 - Rebase Samba to 4.16.3
- resolves: rhbz#2106672 - The pcap background queue process should not be stopped
- resolves: rhbz#2106263 - Fix crash in rpcd_classic
- resolves: rhbz#2100093 - Fix net ads info returns LDAP server and LDAP server name</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-1" date="1659009600">- Rebase to version 4.16.4
- resolves: rhbz#2108331 - Fix CVE-2022-32742</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-2" date="1661428800">- resolves: rhbz#2120956 - Do not require samba package in python3-samba</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-3" date="1671537600">- resolves: rhbz#2154369 - Fix CVE-2022-38023</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-4" date="1673870400">- related: rhbz#2154369 - Add additional patch for CVE-2022-38023</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.4-5" date="1676548800">- resolves: rhbz#2170394 - Fix share enum
- resolves: rhbz#2170467 - Add to package ctdb dependency for package samba-winbind-clients
- resolves: rhbz#2170468 - Add package dcerpc - fix winbind to retrieve user groups from AD
- resolves: rhbz#2170469 - Create package samba-tools</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.4-6" date="1676548801">- resolves: rhbz#2170468 - Remove libnetapi dependency from dcerpc</changelog>
</package>
<package pkgid="997660a67c45d4407af1d84938c3c63ba6fa37729d985fa3108fad779a180ee1" name="python3-samba-dc" arch="x86_64">
  <version epoch="0" ver="4.16.4" rel="6.el8_7"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.1-0" date="1651492800">- Update to Samba 4.16.1
- resolves: rhbz#2077468 Rebase Samba to the the latest 4.16.x release</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.2-0" date="1655121600">- Fix rpminspect abidiff
- related: rhbz#2077468 - Rebase Samba to 4.16.2</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.2-1" date="1655208000">- resolves: rhbz#2084162 - Fix printer displays only after 300 seconds timeout</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.3-0" date="1658145600">- related: rhbz#2077468 - Rebase Samba to 4.16.3
- resolves: rhbz#2106672 - The pcap background queue process should not be stopped
- resolves: rhbz#2106263 - Fix crash in rpcd_classic
- resolves: rhbz#2100093 - Fix net ads info returns LDAP server and LDAP server name</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-1" date="1659009600">- Rebase to version 4.16.4
- resolves: rhbz#2108331 - Fix CVE-2022-32742</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-2" date="1661428800">- resolves: rhbz#2120956 - Do not require samba package in python3-samba</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-3" date="1671537600">- resolves: rhbz#2154369 - Fix CVE-2022-38023</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-4" date="1673870400">- related: rhbz#2154369 - Add additional patch for CVE-2022-38023</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.4-5" date="1676548800">- resolves: rhbz#2170394 - Fix share enum
- resolves: rhbz#2170467 - Add to package ctdb dependency for package samba-winbind-clients
- resolves: rhbz#2170468 - Add package dcerpc - fix winbind to retrieve user groups from AD
- resolves: rhbz#2170469 - Create package samba-tools</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.4-6" date="1676548801">- resolves: rhbz#2170468 - Remove libnetapi dependency from dcerpc</changelog>
</package>
<package pkgid="0f786527739a3dfb669b370d841500f52c4dcbb7eaabede702f45c29d31c5330" name="python3-samba-test" arch="x86_64">
  <version epoch="0" ver="4.16.4" rel="4.el8_7"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.15.5-7" date="1650456000">- resolves: rhbz#2076505 - PAM Kerberos authentication fails with a clock skew error</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.15.5-8" date="1651060800">- resolves: rhbz#2070522 - Fix UPNs handling in lookup_name*() calls</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.1-0" date="1651492800">- Update to Samba 4.16.1
- resolves: rhbz#2077468 Rebase Samba to the the latest 4.16.x release</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.2-0" date="1655121600">- Fix rpminspect abidiff
- related: rhbz#2077468 - Rebase Samba to 4.16.2</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.2-1" date="1655208000">- resolves: rhbz#2084162 - Fix printer displays only after 300 seconds timeout</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.3-0" date="1658145600">- related: rhbz#2077468 - Rebase Samba to 4.16.3
- resolves: rhbz#2106672 - The pcap background queue process should not be stopped
- resolves: rhbz#2106263 - Fix crash in rpcd_classic
- resolves: rhbz#2100093 - Fix net ads info returns LDAP server and LDAP server name</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-1" date="1659009600">- Rebase to version 4.16.4
- resolves: rhbz#2108331 - Fix CVE-2022-32742</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-2" date="1661428800">- resolves: rhbz#2120956 - Do not require samba package in python3-samba</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-3" date="1671537600">- resolves: rhbz#2154369 - Fix CVE-2022-38023</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-4" date="1673870400">- related: rhbz#2154369 - Add additional patch for CVE-2022-38023</changelog>
</package>
<package pkgid="75e2a6cc7be1ba9178026d67c39b2d202842ad176fe2912d2b0e63d5c0346491" name="python3-samba-test" arch="x86_64">
  <version epoch="0" ver="4.16.4" rel="6.el8_7"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.1-0" date="1651492800">- Update to Samba 4.16.1
- resolves: rhbz#2077468 Rebase Samba to the the latest 4.16.x release</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.2-0" date="1655121600">- Fix rpminspect abidiff
- related: rhbz#2077468 - Rebase Samba to 4.16.2</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.2-1" date="1655208000">- resolves: rhbz#2084162 - Fix printer displays only after 300 seconds timeout</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.3-0" date="1658145600">- related: rhbz#2077468 - Rebase Samba to 4.16.3
- resolves: rhbz#2106672 - The pcap background queue process should not be stopped
- resolves: rhbz#2106263 - Fix crash in rpcd_classic
- resolves: rhbz#2100093 - Fix net ads info returns LDAP server and LDAP server name</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-1" date="1659009600">- Rebase to version 4.16.4
- resolves: rhbz#2108331 - Fix CVE-2022-32742</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-2" date="1661428800">- resolves: rhbz#2120956 - Do not require samba package in python3-samba</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-3" date="1671537600">- resolves: rhbz#2154369 - Fix CVE-2022-38023</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-4" date="1673870400">- related: rhbz#2154369 - Add additional patch for CVE-2022-38023</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.4-5" date="1676548800">- resolves: rhbz#2170394 - Fix share enum
- resolves: rhbz#2170467 - Add to package ctdb dependency for package samba-winbind-clients
- resolves: rhbz#2170468 - Add package dcerpc - fix winbind to retrieve user groups from AD
- resolves: rhbz#2170469 - Create package samba-tools</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.4-6" date="1676548801">- resolves: rhbz#2170468 - Remove libnetapi dependency from dcerpc</changelog>
</package>
<package pkgid="9959f65b4d53019680e2afc626561c93f7c03611072577f0a9c4bdc641aae3e9" name="python3-setuptools" arch="noarch">
  <version epoch="0" ver="39.2.0" rel="6.el8_7.1"/>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 38.4.0-4" date="1521028800">- Skip test_virtualenv due to broken executable detection</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 39.0.1-1" date="1521547200">- update to 39.0.1 Fixes bug #1531527</changelog>
  <changelog author="Petr Viktorin &lt;pviktori@redhat.com&gt; - 39.0.1-2" date="1528372800">- Remove test requirements on python2 packages and some exotic packages
- Skip tests on Python 2</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 39.2.0-1" date="1529409600">- update to 39.2.0 Fixes bug #1572889</changelog>
  <changelog author="Petr Viktorin &lt;pviktori@redhat.com&gt; - 39.2.0-2" date="1529668800">- Do not use wheel on Python 2</changelog>
  <changelog author="Petr Viktorin &lt;pviktori@redhat.com&gt; - 39.2.0-3" date="1529928000">- Allow Python 2 for build
  see https://hurl.corp.redhat.com/rhel8-py2</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 39.2.0-4" date="1540209600">- New subpackage platform-python-setuptools without files from /usr/bin/*
- python3-setuptools contains only files from /usr/bin/* and depends
  on platform-python-setuptools
- Resolves: rhbz#1641973</changelog>
  <changelog author="Petr Viktorin &lt;pviktori@redhat.com&gt; - 39.2.0-5" date="1555502400">- Add subpackages with wheels
Resolves: rhbz#1718032</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 39.2.0-6" date="1585137600">- Create /usr/local/lib/pythonX.Y when needed
Resolves: rhbz#1808301</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 39.2.0-6.1" date="1673438400">- Security fix for CVE-2022-40897
Resolves: rhbz#2158559</changelog>
</package>
<package pkgid="74b31036cbac1075e458e5186a39ff27995e2c68d81d959fde3ef6546824d124" name="python3-setuptools-wheel" arch="noarch">
  <version epoch="0" ver="39.2.0" rel="6.el8_7.1"/>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 38.4.0-4" date="1521028800">- Skip test_virtualenv due to broken executable detection</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 39.0.1-1" date="1521547200">- update to 39.0.1 Fixes bug #1531527</changelog>
  <changelog author="Petr Viktorin &lt;pviktori@redhat.com&gt; - 39.0.1-2" date="1528372800">- Remove test requirements on python2 packages and some exotic packages
- Skip tests on Python 2</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 39.2.0-1" date="1529409600">- update to 39.2.0 Fixes bug #1572889</changelog>
  <changelog author="Petr Viktorin &lt;pviktori@redhat.com&gt; - 39.2.0-2" date="1529668800">- Do not use wheel on Python 2</changelog>
  <changelog author="Petr Viktorin &lt;pviktori@redhat.com&gt; - 39.2.0-3" date="1529928000">- Allow Python 2 for build
  see https://hurl.corp.redhat.com/rhel8-py2</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 39.2.0-4" date="1540209600">- New subpackage platform-python-setuptools without files from /usr/bin/*
- python3-setuptools contains only files from /usr/bin/* and depends
  on platform-python-setuptools
- Resolves: rhbz#1641973</changelog>
  <changelog author="Petr Viktorin &lt;pviktori@redhat.com&gt; - 39.2.0-5" date="1555502400">- Add subpackages with wheels
Resolves: rhbz#1718032</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 39.2.0-6" date="1585137600">- Create /usr/local/lib/pythonX.Y when needed
Resolves: rhbz#1808301</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 39.2.0-6.1" date="1673438400">- Security fix for CVE-2022-40897
Resolves: rhbz#2158559</changelog>
</package>
<package pkgid="1c9a55c58c88e3d193663604e3cc2d579ff300ecbdb6f40e5a155384d0366b21" name="python3-solv" arch="x86_64">
  <version epoch="0" ver="0.7.20" rel="4.el8_7"/>
  <changelog author="Ales Matej &lt;amatej@redhat.org&gt; - 0.7.11-1" date="1586174400">- Update to 0.7.11
- selected bug fixes:
  * support arch&lt;-&gt;noarch package changes when creating patch
    conflicts from the updateinfo data
  * also support other rpm database types
  * fixed solv_zchunk decoding error if large chunks are used
  * treat retracted pathes as irrelevant
  * made add_update_target work with multiversion installs
- new features
  * support for SOLVER_BLACKLIST jobs that block the installation of matched
    packages unless they are directly selected by an SOLVER_INSTALL job
  * libsolv now also parses the patch status in the updateinfo parser
  * new solvable_matchessolvable() function
  * support conda constrains dependencies
  * new rpm_stat_database() function
  * new rpm_hash_database_state() function</changelog>
  <changelog author="Nicola Sella &lt;nsella@redhat.com&gt; - 0.7.16-1" date="1605096000">- Update to 0.7.16
- selected bug fixes:
  * make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]
  * fix add_complex_recommends() selecting conflicted packages in
    rare cases leading to crashes
  * improve choicerule generation so that package updates are
    prefered in more cases
  * fix deduceq2addedmap clearing bits outside of the map
  * conda: feature depriorization and fix startswith implementation
  * Fix solvable swapping messing up idarrays
  * fix ruleinfo of complex dependencies returning the wrong origin
  * fix solv_zchunk decoding error if large chunks are used
    [bnc#1159314]
- new features
  * new testcase_mangle_repo_names() function
  * new solv_fmemopen() function
  * Enable zstd compression support for sle15 and sle15-sp2
  * Support blacklisted packages in solver_findproblemrule()
    [bnc#1172135]
  * Support rules with multiple negative literals in choice rule
    generation
  * build with -DENABLE_RPMDB_LIBRPM=1 on SUSE to support
    multiple rpm database backends
  * added two new function to make libzypp independent of the rpm
    database format
  * support conda constrains dependencies</changelog>
  <changelog author="Nicola Sella &lt;nsella@redhat.com&gt; - 0.7.16-2" date="1610625600">- Enable zstd compression in libsolv</changelog>
  <changelog author="Pavla Kratochvilova &lt;pkratoch@redhat.org&gt; - 0.7.17-1" date="1619697600">- Update to 0.7.17
- selected bug fixes:
  * repo_write: fix handling of nested flexarray
  * improve choicerule generation a bit more to cover more cases
  * harden testcase parser against repos being added too late
  * support python-3.10
  * check /var/lib/rpm macro in rpmdb code
- new features:
  * handle default/visible/langonly attributes in comps parser
  * support multiple collections in updateinfo parser
  * add '-D' option in rpmdb2solv to set the dbpath</changelog>
  <changelog author="Pavla Kratochvilova &lt;pkratoch@redhat.org&gt; - 0.7.17-2" date="1619784000">- Fix rpm dependency</changelog>
  <changelog author="Pavla Kratochvilova &lt;pkratoch@redhat.org&gt; - 0.7.19-1" date="1627387200">- Update to 0.7.19
- repo_add_conda: add flag to skip v2 packages
- fix rare segfault in resolve_jobrules() that could happen if new rules are learnt
- fix error handling in solv_xfopen_fd()
- fix memory leaks</changelog>
  <changelog author="Pavla Kratochvilova &lt;pkratoch@redhat.com&gt; - 0.7.20-1" date="1636459200">- Update to 0.7.20
- new SOLVER_EXCLUDEFROMWEAK job to ignore pkgs for weak dependencies
- support for environments in comps parser
- fix misparsing of '&amp;' in attributes with libxml2
- choice rules: treat orphaned packages as newest
- fix compatibility with Python 3.10</changelog>
  <changelog author="Lukas Hrazky &lt;lhrazky@redhat.com&gt; - 0.7.20-2" date="1651665600">- Add support for storing user data in a solv file
- Improve choice rule generation</changelog>
  <changelog author="Lukas Hrazky &lt;lhrazky@redhat.com&gt; - 0.7.20-3" date="1651752000">- Allow accessing toolversion at runtime and increase it</changelog>
  <changelog author="Nicola Sella &lt;nsella@redhat.com&gt; - 0.7.20-4" date="1670846400">- Drop patch to fix pick of old build (RhBug:2151895)</changelog>
</package>
<package pkgid="6bba9ef568704e27f7dc8a1f759c57af24f74494a56badaddfda1c24bbcef3d8" name="python3-sss" arch="x86_64">
  <version epoch="0" ver="2.7.3" rel="4.el8_7.1"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.6.2-1" date="1640606400">- Resolves: rhbz#2011216 - Rebase SSSD for RHEL 8.6
- Resolves: rhbz#2013260 - [RHEL8] Add ability to parse child log files
- Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries
- Resolves: rhbz#1859315 - sssd does not use kerberos port that is set.
- Resolves: rhbz#1961182 - Passwordless (GSSAPI) SSH not working due to missing "includedir /var/lib/sss/pubconf/krb5.include.d" directive in /etc/krb5.conf
- Resolves: rhbz#2008829 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2012263 - pam responder does not call initgroups to refresh the user entry
- Resolves: rhbz#2012308 - Add client certificate validation D-Bus API
- Resolves: rhbz#2012327 - Groups are missing while performing id lookup as SSSD switching to offline mode due to the wrong domain name in the ldap-pings(netlogon).
- Resolves: rhbz#2013028 - [RFE] Health and Support Analyzer: Add sssctl sub-command to select and display a single request from the logs
- Resolves: rhbz#2013259 - [RHEL8] Add tevent chain ID logic into responders
- Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.6.2-2" date="1641297600">- Resolves: rhbz#2013260 - [RHEL8] Add ability to parse child log files (additional patch)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.6.2-3" date="1642420800">- Resolves: rhbz#2039892 - 2.6.2 regression: Daemon crashes when resolving AD user names
- Resolves: rhbz#1859315 - sssd does not use kerberos port that is set.
- Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries
- Resolves: rhbz#2035245 - AD Domain in the AD Forest Missing after sssd latest update
- Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.0-2" date="1652875200">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2026799 - SSSD authenticating to LDAP with obfuscated password produces Invalid authtoken type message causing sssd_be to go offline (cross inter_ference of different provider plugins options)
- Resolves: rhbz#2033347 - sssd error triggers backtrace : [write_krb5info_file_from_fo_server] (0x0020): [RID#73501] There is no server that can be written into kdc info file.
- Resolves: rhbz#2056483 - [RFE] Add sssd internal krb5 plugin for authentication against external IdP via OAuth2
- Resolves: rhbz#2062689 - [Improvement] Add user and group version of sss_nss_getorigbyname()
- Resolves: rhbz#2065692 - [RHEL8] Ship new sub-package called sssd-idp into sssd
- Resolves: rhbz#2072050 - sssd_nss exiting (due to missing 'sssd' local user) making SSSD service to restart in a loop
- Resolves: rhbz#2072931 - Use right sdap_domain in ad_domain_info_send
- Resolves: rhbz#2087088 - sssd does not enforce smartcard auth for kde screen locker
- Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol
- Resolves: rhbz#2087745 - 2FA prompting setting ineffective
- Resolves: rhbz#2087746 - sssd fails GPO-based access if AD have setup with Japanese language</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.2-1" date="1655726400">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2098620 - sdap_nested_group_deref_direct_process() triggers internal watchdog for large data sets
- Resolves: rhbz#2098619 - [Improvement] add SSSD support for more than one CRL PEM file name with parameters certificate_verification and crl_file
- Resolves: rhbz#2088817 - pam_sss_gss ceased to work after upgrade to 8.6
- Resolves: rhbz#2098616 - Add idp authentication indicator in man page of sssd.conf
- Resolves: rhbz#2056035 - 'getent hosts' not return hosts if they have more than one CN in LDAP
- Resolves: rhbz#2098615 - Regression "Missing internal domain data." when setting ad_domain to incorrect
- Resolves: rhbz#2098617 - Harden kerberos ticket validation
- Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-1" date="1657713600">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2063016 - [sssd] RHEL 8.7 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-2" date="1660132800">- Resolves: rhbz#2116488 - virsh command will hang after the host run several auto test cases
- Resolves: rhbz#2116486 - [regression] sssctl analyze fails to parse PAM related sssd logs
- Resolves: rhbz#2116487 - cache_req_data_set_hybrid_lookup: cache_req_data should never be NULL</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-3" date="1661256000">- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8
- Resolves: rhbz#2119726 - sssctl analyze --logdir option requires sssd to be configured
- Resolves: rhbz#2120669 - Incorrect request ID tracking from responder to backend</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4" date="1661515200">- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4.1" date="1665662400">- Resolves: rhbz#2128544 - Cannot SSH with AD user to ipa-client (`krb5_validate` and `pac_check` settings conflict) [rhel-8.7.0.z]</changelog>
</package>
<package pkgid="81f60e085cda2c538c7b28e690f9956235a2befd30eaf16b158ec1c9bf495fe2" name="python3-sss" arch="x86_64">
  <version epoch="0" ver="2.7.3" rel="4.el8_7.3"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.6.2-3" date="1642420800">- Resolves: rhbz#2039892 - 2.6.2 regression: Daemon crashes when resolving AD user names
- Resolves: rhbz#1859315 - sssd does not use kerberos port that is set.
- Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries
- Resolves: rhbz#2035245 - AD Domain in the AD Forest Missing after sssd latest update
- Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.0-2" date="1652875200">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2026799 - SSSD authenticating to LDAP with obfuscated password produces Invalid authtoken type message causing sssd_be to go offline (cross inter_ference of different provider plugins options)
- Resolves: rhbz#2033347 - sssd error triggers backtrace : [write_krb5info_file_from_fo_server] (0x0020): [RID#73501] There is no server that can be written into kdc info file.
- Resolves: rhbz#2056483 - [RFE] Add sssd internal krb5 plugin for authentication against external IdP via OAuth2
- Resolves: rhbz#2062689 - [Improvement] Add user and group version of sss_nss_getorigbyname()
- Resolves: rhbz#2065692 - [RHEL8] Ship new sub-package called sssd-idp into sssd
- Resolves: rhbz#2072050 - sssd_nss exiting (due to missing 'sssd' local user) making SSSD service to restart in a loop
- Resolves: rhbz#2072931 - Use right sdap_domain in ad_domain_info_send
- Resolves: rhbz#2087088 - sssd does not enforce smartcard auth for kde screen locker
- Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol
- Resolves: rhbz#2087745 - 2FA prompting setting ineffective
- Resolves: rhbz#2087746 - sssd fails GPO-based access if AD have setup with Japanese language</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.2-1" date="1655726400">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2098620 - sdap_nested_group_deref_direct_process() triggers internal watchdog for large data sets
- Resolves: rhbz#2098619 - [Improvement] add SSSD support for more than one CRL PEM file name with parameters certificate_verification and crl_file
- Resolves: rhbz#2088817 - pam_sss_gss ceased to work after upgrade to 8.6
- Resolves: rhbz#2098616 - Add idp authentication indicator in man page of sssd.conf
- Resolves: rhbz#2056035 - 'getent hosts' not return hosts if they have more than one CN in LDAP
- Resolves: rhbz#2098615 - Regression "Missing internal domain data." when setting ad_domain to incorrect
- Resolves: rhbz#2098617 - Harden kerberos ticket validation
- Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-1" date="1657713600">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2063016 - [sssd] RHEL 8.7 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-2" date="1660132800">- Resolves: rhbz#2116488 - virsh command will hang after the host run several auto test cases
- Resolves: rhbz#2116486 - [regression] sssctl analyze fails to parse PAM related sssd logs
- Resolves: rhbz#2116487 - cache_req_data_set_hybrid_lookup: cache_req_data should never be NULL</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-3" date="1661256000">- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8
- Resolves: rhbz#2119726 - sssctl analyze --logdir option requires sssd to be configured
- Resolves: rhbz#2120669 - Incorrect request ID tracking from responder to backend</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4" date="1661515200">- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4.1" date="1665662400">- Resolves: rhbz#2128544 - Cannot SSH with AD user to ipa-client (`krb5_validate` and `pac_check` settings conflict) [rhel-8.7.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4.2" date="1670587200">- Resolves: rhbz#2139871 - Analyzer: Optimize and remove duplicate messages in verbose list [rhel-8.7.0.z]
- Resolves: rhbz#2142961 - SSSD: `sssctl analyze` command shouldn't require 'root' privileged [rhel-8.7.0.z]
- Resolves: rhbz#2148989 - UPN check cannot be disabled explicitly but requires krb5_validate = false' as a work-around [rhel-8.7.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4.3" date="1671105600">- Resolves: rhbz#2152883 - authenticating against external IdP services okta (native app) with OAuth client secret failed [rhel-8.7.0.z]</changelog>
</package>
<package pkgid="13392b8f1613119e416babc47233d52a6f5cb23858509d99de95d571fa592121" name="python3-sss-murmur" arch="x86_64">
  <version epoch="0" ver="2.7.3" rel="4.el8_7.1"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.6.2-1" date="1640606400">- Resolves: rhbz#2011216 - Rebase SSSD for RHEL 8.6
- Resolves: rhbz#2013260 - [RHEL8] Add ability to parse child log files
- Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries
- Resolves: rhbz#1859315 - sssd does not use kerberos port that is set.
- Resolves: rhbz#1961182 - Passwordless (GSSAPI) SSH not working due to missing "includedir /var/lib/sss/pubconf/krb5.include.d" directive in /etc/krb5.conf
- Resolves: rhbz#2008829 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2012263 - pam responder does not call initgroups to refresh the user entry
- Resolves: rhbz#2012308 - Add client certificate validation D-Bus API
- Resolves: rhbz#2012327 - Groups are missing while performing id lookup as SSSD switching to offline mode due to the wrong domain name in the ldap-pings(netlogon).
- Resolves: rhbz#2013028 - [RFE] Health and Support Analyzer: Add sssctl sub-command to select and display a single request from the logs
- Resolves: rhbz#2013259 - [RHEL8] Add tevent chain ID logic into responders
- Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.6.2-2" date="1641297600">- Resolves: rhbz#2013260 - [RHEL8] Add ability to parse child log files (additional patch)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.6.2-3" date="1642420800">- Resolves: rhbz#2039892 - 2.6.2 regression: Daemon crashes when resolving AD user names
- Resolves: rhbz#1859315 - sssd does not use kerberos port that is set.
- Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries
- Resolves: rhbz#2035245 - AD Domain in the AD Forest Missing after sssd latest update
- Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.0-2" date="1652875200">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2026799 - SSSD authenticating to LDAP with obfuscated password produces Invalid authtoken type message causing sssd_be to go offline (cross inter_ference of different provider plugins options)
- Resolves: rhbz#2033347 - sssd error triggers backtrace : [write_krb5info_file_from_fo_server] (0x0020): [RID#73501] There is no server that can be written into kdc info file.
- Resolves: rhbz#2056483 - [RFE] Add sssd internal krb5 plugin for authentication against external IdP via OAuth2
- Resolves: rhbz#2062689 - [Improvement] Add user and group version of sss_nss_getorigbyname()
- Resolves: rhbz#2065692 - [RHEL8] Ship new sub-package called sssd-idp into sssd
- Resolves: rhbz#2072050 - sssd_nss exiting (due to missing 'sssd' local user) making SSSD service to restart in a loop
- Resolves: rhbz#2072931 - Use right sdap_domain in ad_domain_info_send
- Resolves: rhbz#2087088 - sssd does not enforce smartcard auth for kde screen locker
- Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol
- Resolves: rhbz#2087745 - 2FA prompting setting ineffective
- Resolves: rhbz#2087746 - sssd fails GPO-based access if AD have setup with Japanese language</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.2-1" date="1655726400">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2098620 - sdap_nested_group_deref_direct_process() triggers internal watchdog for large data sets
- Resolves: rhbz#2098619 - [Improvement] add SSSD support for more than one CRL PEM file name with parameters certificate_verification and crl_file
- Resolves: rhbz#2088817 - pam_sss_gss ceased to work after upgrade to 8.6
- Resolves: rhbz#2098616 - Add idp authentication indicator in man page of sssd.conf
- Resolves: rhbz#2056035 - 'getent hosts' not return hosts if they have more than one CN in LDAP
- Resolves: rhbz#2098615 - Regression "Missing internal domain data." when setting ad_domain to incorrect
- Resolves: rhbz#2098617 - Harden kerberos ticket validation
- Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-1" date="1657713600">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2063016 - [sssd] RHEL 8.7 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-2" date="1660132800">- Resolves: rhbz#2116488 - virsh command will hang after the host run several auto test cases
- Resolves: rhbz#2116486 - [regression] sssctl analyze fails to parse PAM related sssd logs
- Resolves: rhbz#2116487 - cache_req_data_set_hybrid_lookup: cache_req_data should never be NULL</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-3" date="1661256000">- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8
- Resolves: rhbz#2119726 - sssctl analyze --logdir option requires sssd to be configured
- Resolves: rhbz#2120669 - Incorrect request ID tracking from responder to backend</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4" date="1661515200">- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4.1" date="1665662400">- Resolves: rhbz#2128544 - Cannot SSH with AD user to ipa-client (`krb5_validate` and `pac_check` settings conflict) [rhel-8.7.0.z]</changelog>
</package>
<package pkgid="53c115d2552663c32ebb05b77785595797bf4a0f9cf72537fa2c177f33b540c8" name="python3-sss-murmur" arch="x86_64">
  <version epoch="0" ver="2.7.3" rel="4.el8_7.3"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.6.2-3" date="1642420800">- Resolves: rhbz#2039892 - 2.6.2 regression: Daemon crashes when resolving AD user names
- Resolves: rhbz#1859315 - sssd does not use kerberos port that is set.
- Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries
- Resolves: rhbz#2035245 - AD Domain in the AD Forest Missing after sssd latest update
- Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.0-2" date="1652875200">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2026799 - SSSD authenticating to LDAP with obfuscated password produces Invalid authtoken type message causing sssd_be to go offline (cross inter_ference of different provider plugins options)
- Resolves: rhbz#2033347 - sssd error triggers backtrace : [write_krb5info_file_from_fo_server] (0x0020): [RID#73501] There is no server that can be written into kdc info file.
- Resolves: rhbz#2056483 - [RFE] Add sssd internal krb5 plugin for authentication against external IdP via OAuth2
- Resolves: rhbz#2062689 - [Improvement] Add user and group version of sss_nss_getorigbyname()
- Resolves: rhbz#2065692 - [RHEL8] Ship new sub-package called sssd-idp into sssd
- Resolves: rhbz#2072050 - sssd_nss exiting (due to missing 'sssd' local user) making SSSD service to restart in a loop
- Resolves: rhbz#2072931 - Use right sdap_domain in ad_domain_info_send
- Resolves: rhbz#2087088 - sssd does not enforce smartcard auth for kde screen locker
- Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol
- Resolves: rhbz#2087745 - 2FA prompting setting ineffective
- Resolves: rhbz#2087746 - sssd fails GPO-based access if AD have setup with Japanese language</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.2-1" date="1655726400">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2098620 - sdap_nested_group_deref_direct_process() triggers internal watchdog for large data sets
- Resolves: rhbz#2098619 - [Improvement] add SSSD support for more than one CRL PEM file name with parameters certificate_verification and crl_file
- Resolves: rhbz#2088817 - pam_sss_gss ceased to work after upgrade to 8.6
- Resolves: rhbz#2098616 - Add idp authentication indicator in man page of sssd.conf
- Resolves: rhbz#2056035 - 'getent hosts' not return hosts if they have more than one CN in LDAP
- Resolves: rhbz#2098615 - Regression "Missing internal domain data." when setting ad_domain to incorrect
- Resolves: rhbz#2098617 - Harden kerberos ticket validation
- Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-1" date="1657713600">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2063016 - [sssd] RHEL 8.7 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-2" date="1660132800">- Resolves: rhbz#2116488 - virsh command will hang after the host run several auto test cases
- Resolves: rhbz#2116486 - [regression] sssctl analyze fails to parse PAM related sssd logs
- Resolves: rhbz#2116487 - cache_req_data_set_hybrid_lookup: cache_req_data should never be NULL</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-3" date="1661256000">- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8
- Resolves: rhbz#2119726 - sssctl analyze --logdir option requires sssd to be configured
- Resolves: rhbz#2120669 - Incorrect request ID tracking from responder to backend</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4" date="1661515200">- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4.1" date="1665662400">- Resolves: rhbz#2128544 - Cannot SSH with AD user to ipa-client (`krb5_validate` and `pac_check` settings conflict) [rhel-8.7.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4.2" date="1670587200">- Resolves: rhbz#2139871 - Analyzer: Optimize and remove duplicate messages in verbose list [rhel-8.7.0.z]
- Resolves: rhbz#2142961 - SSSD: `sssctl analyze` command shouldn't require 'root' privileged [rhel-8.7.0.z]
- Resolves: rhbz#2148989 - UPN check cannot be disabled explicitly but requires krb5_validate = false' as a work-around [rhel-8.7.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4.3" date="1671105600">- Resolves: rhbz#2152883 - authenticating against external IdP services okta (native app) with OAuth client secret failed [rhel-8.7.0.z]</changelog>
</package>
<package pkgid="93692a181c34f67b8f492fdc44b1ae5ae88f787a7412d0171d40f4d6a51871fc" name="python3-sssdconfig" arch="noarch">
  <version epoch="0" ver="2.7.3" rel="4.el8_7.1"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.6.2-1" date="1640606400">- Resolves: rhbz#2011216 - Rebase SSSD for RHEL 8.6
- Resolves: rhbz#2013260 - [RHEL8] Add ability to parse child log files
- Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries
- Resolves: rhbz#1859315 - sssd does not use kerberos port that is set.
- Resolves: rhbz#1961182 - Passwordless (GSSAPI) SSH not working due to missing "includedir /var/lib/sss/pubconf/krb5.include.d" directive in /etc/krb5.conf
- Resolves: rhbz#2008829 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2012263 - pam responder does not call initgroups to refresh the user entry
- Resolves: rhbz#2012308 - Add client certificate validation D-Bus API
- Resolves: rhbz#2012327 - Groups are missing while performing id lookup as SSSD switching to offline mode due to the wrong domain name in the ldap-pings(netlogon).
- Resolves: rhbz#2013028 - [RFE] Health and Support Analyzer: Add sssctl sub-command to select and display a single request from the logs
- Resolves: rhbz#2013259 - [RHEL8] Add tevent chain ID logic into responders
- Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.6.2-2" date="1641297600">- Resolves: rhbz#2013260 - [RHEL8] Add ability to parse child log files (additional patch)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.6.2-3" date="1642420800">- Resolves: rhbz#2039892 - 2.6.2 regression: Daemon crashes when resolving AD user names
- Resolves: rhbz#1859315 - sssd does not use kerberos port that is set.
- Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries
- Resolves: rhbz#2035245 - AD Domain in the AD Forest Missing after sssd latest update
- Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.0-2" date="1652875200">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2026799 - SSSD authenticating to LDAP with obfuscated password produces Invalid authtoken type message causing sssd_be to go offline (cross inter_ference of different provider plugins options)
- Resolves: rhbz#2033347 - sssd error triggers backtrace : [write_krb5info_file_from_fo_server] (0x0020): [RID#73501] There is no server that can be written into kdc info file.
- Resolves: rhbz#2056483 - [RFE] Add sssd internal krb5 plugin for authentication against external IdP via OAuth2
- Resolves: rhbz#2062689 - [Improvement] Add user and group version of sss_nss_getorigbyname()
- Resolves: rhbz#2065692 - [RHEL8] Ship new sub-package called sssd-idp into sssd
- Resolves: rhbz#2072050 - sssd_nss exiting (due to missing 'sssd' local user) making SSSD service to restart in a loop
- Resolves: rhbz#2072931 - Use right sdap_domain in ad_domain_info_send
- Resolves: rhbz#2087088 - sssd does not enforce smartcard auth for kde screen locker
- Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol
- Resolves: rhbz#2087745 - 2FA prompting setting ineffective
- Resolves: rhbz#2087746 - sssd fails GPO-based access if AD have setup with Japanese language</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.2-1" date="1655726400">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2098620 - sdap_nested_group_deref_direct_process() triggers internal watchdog for large data sets
- Resolves: rhbz#2098619 - [Improvement] add SSSD support for more than one CRL PEM file name with parameters certificate_verification and crl_file
- Resolves: rhbz#2088817 - pam_sss_gss ceased to work after upgrade to 8.6
- Resolves: rhbz#2098616 - Add idp authentication indicator in man page of sssd.conf
- Resolves: rhbz#2056035 - 'getent hosts' not return hosts if they have more than one CN in LDAP
- Resolves: rhbz#2098615 - Regression "Missing internal domain data." when setting ad_domain to incorrect
- Resolves: rhbz#2098617 - Harden kerberos ticket validation
- Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-1" date="1657713600">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2063016 - [sssd] RHEL 8.7 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-2" date="1660132800">- Resolves: rhbz#2116488 - virsh command will hang after the host run several auto test cases
- Resolves: rhbz#2116486 - [regression] sssctl analyze fails to parse PAM related sssd logs
- Resolves: rhbz#2116487 - cache_req_data_set_hybrid_lookup: cache_req_data should never be NULL</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-3" date="1661256000">- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8
- Resolves: rhbz#2119726 - sssctl analyze --logdir option requires sssd to be configured
- Resolves: rhbz#2120669 - Incorrect request ID tracking from responder to backend</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4" date="1661515200">- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4.1" date="1665662400">- Resolves: rhbz#2128544 - Cannot SSH with AD user to ipa-client (`krb5_validate` and `pac_check` settings conflict) [rhel-8.7.0.z]</changelog>
</package>
<package pkgid="142082d76d4a09ffca17abd3f18c7d0324cae665e79aa9e0693787d233c898f6" name="python3-sssdconfig" arch="noarch">
  <version epoch="0" ver="2.7.3" rel="4.el8_7.3"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.6.2-3" date="1642420800">- Resolves: rhbz#2039892 - 2.6.2 regression: Daemon crashes when resolving AD user names
- Resolves: rhbz#1859315 - sssd does not use kerberos port that is set.
- Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries
- Resolves: rhbz#2035245 - AD Domain in the AD Forest Missing after sssd latest update
- Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.0-2" date="1652875200">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2026799 - SSSD authenticating to LDAP with obfuscated password produces Invalid authtoken type message causing sssd_be to go offline (cross inter_ference of different provider plugins options)
- Resolves: rhbz#2033347 - sssd error triggers backtrace : [write_krb5info_file_from_fo_server] (0x0020): [RID#73501] There is no server that can be written into kdc info file.
- Resolves: rhbz#2056483 - [RFE] Add sssd internal krb5 plugin for authentication against external IdP via OAuth2
- Resolves: rhbz#2062689 - [Improvement] Add user and group version of sss_nss_getorigbyname()
- Resolves: rhbz#2065692 - [RHEL8] Ship new sub-package called sssd-idp into sssd
- Resolves: rhbz#2072050 - sssd_nss exiting (due to missing 'sssd' local user) making SSSD service to restart in a loop
- Resolves: rhbz#2072931 - Use right sdap_domain in ad_domain_info_send
- Resolves: rhbz#2087088 - sssd does not enforce smartcard auth for kde screen locker
- Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol
- Resolves: rhbz#2087745 - 2FA prompting setting ineffective
- Resolves: rhbz#2087746 - sssd fails GPO-based access if AD have setup with Japanese language</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.2-1" date="1655726400">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2098620 - sdap_nested_group_deref_direct_process() triggers internal watchdog for large data sets
- Resolves: rhbz#2098619 - [Improvement] add SSSD support for more than one CRL PEM file name with parameters certificate_verification and crl_file
- Resolves: rhbz#2088817 - pam_sss_gss ceased to work after upgrade to 8.6
- Resolves: rhbz#2098616 - Add idp authentication indicator in man page of sssd.conf
- Resolves: rhbz#2056035 - 'getent hosts' not return hosts if they have more than one CN in LDAP
- Resolves: rhbz#2098615 - Regression "Missing internal domain data." when setting ad_domain to incorrect
- Resolves: rhbz#2098617 - Harden kerberos ticket validation
- Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-1" date="1657713600">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2063016 - [sssd] RHEL 8.7 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-2" date="1660132800">- Resolves: rhbz#2116488 - virsh command will hang after the host run several auto test cases
- Resolves: rhbz#2116486 - [regression] sssctl analyze fails to parse PAM related sssd logs
- Resolves: rhbz#2116487 - cache_req_data_set_hybrid_lookup: cache_req_data should never be NULL</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-3" date="1661256000">- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8
- Resolves: rhbz#2119726 - sssctl analyze --logdir option requires sssd to be configured
- Resolves: rhbz#2120669 - Incorrect request ID tracking from responder to backend</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4" date="1661515200">- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4.1" date="1665662400">- Resolves: rhbz#2128544 - Cannot SSH with AD user to ipa-client (`krb5_validate` and `pac_check` settings conflict) [rhel-8.7.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4.2" date="1670587200">- Resolves: rhbz#2139871 - Analyzer: Optimize and remove duplicate messages in verbose list [rhel-8.7.0.z]
- Resolves: rhbz#2142961 - SSSD: `sssctl analyze` command shouldn't require 'root' privileged [rhel-8.7.0.z]
- Resolves: rhbz#2148989 - UPN check cannot be disabled explicitly but requires krb5_validate = false' as a work-around [rhel-8.7.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4.3" date="1671105600">- Resolves: rhbz#2152883 - authenticating against external IdP services okta (native app) with OAuth client secret failed [rhel-8.7.0.z]</changelog>
</package>
<package pkgid="8976971788bbbad39557922c13adbb17d7d57798996378e31367545ad2cacd3c" name="python3-test" arch="x86_64">
  <version epoch="0" ver="3.6.8" rel="48.el8_7.1"/>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 3.6.8-40" date="1627560000">- Adjusted the postun scriptlets to enable upgrading to RHEL 9
- Resolves: rhbz#1933055</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 3.6.8-41" date="1631188800">- Security fix for CVE-2021-3733: Denial of service when identifying crafted invalid RFCs
Resolves: rhbz#1995234</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 3.6.8-42" date="1631880000">- Security fix for CVE-2021-3737
Resolves: rhbz#1995162</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-43" date="1633953600">- Change shouldRollover() methods of logging.handlers to only rollover regular files
Resolves: rhbz#2009200</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-44" date="1634040000">- Use the monotonic clock for theading.Condition
- Use the monotonic clock for the global interpreter lock
Resolves: rhbz#2003758</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-45" date="1641556800">- Security fix for CVE-2021-4189: ftplib should not use the host from the PASV response
Resolves: rhbz#2036020</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-46" date="1646827200">- Security fix for CVE-2022-0391: urlparse does not sanitize URLs containing ASCII newline and tabs
- Fix the test suite support for Expat &gt;= 2.4.5
Resolves: rhbz#2047376, rhbz#2060435</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-47" date="1655208000">- Security fix for CVE-2015-20107
Resolves: rhbz#2075390</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-48" date="1666267200">- Release bump
Resolves: rhbz#2136436</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-48.1" date="1671624000">- Security fixes for CVE-2020-10735, CVE-2021-28861 and CVE-2022-45061
Resolves: rhbz#1834423, rhbz#2120642, rhbz#2144072</changelog>
</package>
<package pkgid="786415e810e94f1a9e1fe233ed7f7d84e3dbda54f5fdaf04e059c2b65275cb4d" name="rsync" arch="x86_64">
  <version epoch="0" ver="3.1.3" rel="19.el8_7.1"/>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 3.1.3-11" date="1604577600">- Resolves: #1855981 - rsync segfaults in --append mode</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.3-12" date="1608292800">- Resolves: #1816528 - Defaults for --skip-compress are not working, everything is being compressed</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 3.1.3-13" date="1632744000">- Resolves: #1907443 - Read-only files that have changed xattrs fail to allow xattr changes</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.3-14" date="1633953600">- Related: #1907443 - Adding fmf plans to run tests with tmt</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.3-15" date="1649764800">- Resolves: #2071513 - A flaw in zlib-1.2.11 when compressing (not decompressing!) certain inputs</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.3-16" date="1659009600">- Resolves: #2043753 - [RFE] Improve defaults for sparse file buffering</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.3-17" date="1659960000">- Related: #2043753 - New option should not be sent to the server every time</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.3-18" date="1660564800">- Resolves: #2111175 - remote arbitrary files write inside the directories of connecting peers</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.3-19" date="1660824000">- Resolves: #2116668 - zlib: a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.3-19.1" date="1667390400">- Resolves: #2139118 - rsync-daemon fail on 3.1.3</changelog>
</package>
<package pkgid="95645f499dbedeaacca25926b86f112163e063a1daf7276dede02a1404076c5f" name="rsync-daemon" arch="noarch">
  <version epoch="0" ver="3.1.3" rel="19.el8_7.1"/>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 3.1.3-11" date="1604577600">- Resolves: #1855981 - rsync segfaults in --append mode</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.3-12" date="1608292800">- Resolves: #1816528 - Defaults for --skip-compress are not working, everything is being compressed</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 3.1.3-13" date="1632744000">- Resolves: #1907443 - Read-only files that have changed xattrs fail to allow xattr changes</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.3-14" date="1633953600">- Related: #1907443 - Adding fmf plans to run tests with tmt</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.3-15" date="1649764800">- Resolves: #2071513 - A flaw in zlib-1.2.11 when compressing (not decompressing!) certain inputs</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.3-16" date="1659009600">- Resolves: #2043753 - [RFE] Improve defaults for sparse file buffering</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.3-17" date="1659960000">- Related: #2043753 - New option should not be sent to the server every time</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.3-18" date="1660564800">- Resolves: #2111175 - remote arbitrary files write inside the directories of connecting peers</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.3-19" date="1660824000">- Resolves: #2116668 - zlib: a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.3-19.1" date="1667390400">- Resolves: #2139118 - rsync-daemon fail on 3.1.3</changelog>
</package>
<package pkgid="bb53a9b561821fb92ccf7653045cfd9e22d4d9c2456f48b3011160ae0555d522" name="samba" arch="x86_64">
  <version epoch="0" ver="4.16.4" rel="4.el8_7"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.15.5-7" date="1650456000">- resolves: rhbz#2076505 - PAM Kerberos authentication fails with a clock skew error</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.15.5-8" date="1651060800">- resolves: rhbz#2070522 - Fix UPNs handling in lookup_name*() calls</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.1-0" date="1651492800">- Update to Samba 4.16.1
- resolves: rhbz#2077468 Rebase Samba to the the latest 4.16.x release</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.2-0" date="1655121600">- Fix rpminspect abidiff
- related: rhbz#2077468 - Rebase Samba to 4.16.2</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.2-1" date="1655208000">- resolves: rhbz#2084162 - Fix printer displays only after 300 seconds timeout</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.3-0" date="1658145600">- related: rhbz#2077468 - Rebase Samba to 4.16.3
- resolves: rhbz#2106672 - The pcap background queue process should not be stopped
- resolves: rhbz#2106263 - Fix crash in rpcd_classic
- resolves: rhbz#2100093 - Fix net ads info returns LDAP server and LDAP server name</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-1" date="1659009600">- Rebase to version 4.16.4
- resolves: rhbz#2108331 - Fix CVE-2022-32742</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-2" date="1661428800">- resolves: rhbz#2120956 - Do not require samba package in python3-samba</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-3" date="1671537600">- resolves: rhbz#2154369 - Fix CVE-2022-38023</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-4" date="1673870400">- related: rhbz#2154369 - Add additional patch for CVE-2022-38023</changelog>
</package>
<package pkgid="d5d763be8a6f74a950c9d320ef8f6f29b2b4ae0a2aa0ec98449eceb8a3adbb99" name="samba" arch="x86_64">
  <version epoch="0" ver="4.16.4" rel="6.el8_7"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.1-0" date="1651492800">- Update to Samba 4.16.1
- resolves: rhbz#2077468 Rebase Samba to the the latest 4.16.x release</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.2-0" date="1655121600">- Fix rpminspect abidiff
- related: rhbz#2077468 - Rebase Samba to 4.16.2</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.2-1" date="1655208000">- resolves: rhbz#2084162 - Fix printer displays only after 300 seconds timeout</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.3-0" date="1658145600">- related: rhbz#2077468 - Rebase Samba to 4.16.3
- resolves: rhbz#2106672 - The pcap background queue process should not be stopped
- resolves: rhbz#2106263 - Fix crash in rpcd_classic
- resolves: rhbz#2100093 - Fix net ads info returns LDAP server and LDAP server name</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-1" date="1659009600">- Rebase to version 4.16.4
- resolves: rhbz#2108331 - Fix CVE-2022-32742</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-2" date="1661428800">- resolves: rhbz#2120956 - Do not require samba package in python3-samba</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-3" date="1671537600">- resolves: rhbz#2154369 - Fix CVE-2022-38023</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-4" date="1673870400">- related: rhbz#2154369 - Add additional patch for CVE-2022-38023</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.4-5" date="1676548800">- resolves: rhbz#2170394 - Fix share enum
- resolves: rhbz#2170467 - Add to package ctdb dependency for package samba-winbind-clients
- resolves: rhbz#2170468 - Add package dcerpc - fix winbind to retrieve user groups from AD
- resolves: rhbz#2170469 - Create package samba-tools</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.4-6" date="1676548801">- resolves: rhbz#2170468 - Remove libnetapi dependency from dcerpc</changelog>
</package>
<package pkgid="a393d3c73aec9787f817a65a23e900d9803c187408fbd7af70f4fb3d27314a38" name="samba-client" arch="x86_64">
  <version epoch="0" ver="4.16.4" rel="4.el8_7"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.15.5-7" date="1650456000">- resolves: rhbz#2076505 - PAM Kerberos authentication fails with a clock skew error</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.15.5-8" date="1651060800">- resolves: rhbz#2070522 - Fix UPNs handling in lookup_name*() calls</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.1-0" date="1651492800">- Update to Samba 4.16.1
- resolves: rhbz#2077468 Rebase Samba to the the latest 4.16.x release</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.2-0" date="1655121600">- Fix rpminspect abidiff
- related: rhbz#2077468 - Rebase Samba to 4.16.2</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.2-1" date="1655208000">- resolves: rhbz#2084162 - Fix printer displays only after 300 seconds timeout</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.3-0" date="1658145600">- related: rhbz#2077468 - Rebase Samba to 4.16.3
- resolves: rhbz#2106672 - The pcap background queue process should not be stopped
- resolves: rhbz#2106263 - Fix crash in rpcd_classic
- resolves: rhbz#2100093 - Fix net ads info returns LDAP server and LDAP server name</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-1" date="1659009600">- Rebase to version 4.16.4
- resolves: rhbz#2108331 - Fix CVE-2022-32742</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-2" date="1661428800">- resolves: rhbz#2120956 - Do not require samba package in python3-samba</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-3" date="1671537600">- resolves: rhbz#2154369 - Fix CVE-2022-38023</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-4" date="1673870400">- related: rhbz#2154369 - Add additional patch for CVE-2022-38023</changelog>
</package>
<package pkgid="f4c341cc2b72c5c7d89a88135cbc4dbbe7a725913270244a3591a0cda68b55c9" name="samba-client" arch="x86_64">
  <version epoch="0" ver="4.16.4" rel="6.el8_7"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.1-0" date="1651492800">- Update to Samba 4.16.1
- resolves: rhbz#2077468 Rebase Samba to the the latest 4.16.x release</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.2-0" date="1655121600">- Fix rpminspect abidiff
- related: rhbz#2077468 - Rebase Samba to 4.16.2</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.2-1" date="1655208000">- resolves: rhbz#2084162 - Fix printer displays only after 300 seconds timeout</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.3-0" date="1658145600">- related: rhbz#2077468 - Rebase Samba to 4.16.3
- resolves: rhbz#2106672 - The pcap background queue process should not be stopped
- resolves: rhbz#2106263 - Fix crash in rpcd_classic
- resolves: rhbz#2100093 - Fix net ads info returns LDAP server and LDAP server name</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-1" date="1659009600">- Rebase to version 4.16.4
- resolves: rhbz#2108331 - Fix CVE-2022-32742</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-2" date="1661428800">- resolves: rhbz#2120956 - Do not require samba package in python3-samba</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-3" date="1671537600">- resolves: rhbz#2154369 - Fix CVE-2022-38023</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-4" date="1673870400">- related: rhbz#2154369 - Add additional patch for CVE-2022-38023</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.4-5" date="1676548800">- resolves: rhbz#2170394 - Fix share enum
- resolves: rhbz#2170467 - Add to package ctdb dependency for package samba-winbind-clients
- resolves: rhbz#2170468 - Add package dcerpc - fix winbind to retrieve user groups from AD
- resolves: rhbz#2170469 - Create package samba-tools</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.4-6" date="1676548801">- resolves: rhbz#2170468 - Remove libnetapi dependency from dcerpc</changelog>
</package>
<package pkgid="39e8906af1efaf9b2c0ef08a346efd69558d6b4b47b57a5079bcb13b4a49c550" name="samba-client-libs" arch="i686">
  <version epoch="0" ver="4.16.4" rel="4.el8_7"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.15.5-7" date="1650456000">- resolves: rhbz#2076505 - PAM Kerberos authentication fails with a clock skew error</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.15.5-8" date="1651060800">- resolves: rhbz#2070522 - Fix UPNs handling in lookup_name*() calls</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.1-0" date="1651492800">- Update to Samba 4.16.1
- resolves: rhbz#2077468 Rebase Samba to the the latest 4.16.x release</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.2-0" date="1655121600">- Fix rpminspect abidiff
- related: rhbz#2077468 - Rebase Samba to 4.16.2</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.2-1" date="1655208000">- resolves: rhbz#2084162 - Fix printer displays only after 300 seconds timeout</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.3-0" date="1658145600">- related: rhbz#2077468 - Rebase Samba to 4.16.3
- resolves: rhbz#2106672 - The pcap background queue process should not be stopped
- resolves: rhbz#2106263 - Fix crash in rpcd_classic
- resolves: rhbz#2100093 - Fix net ads info returns LDAP server and LDAP server name</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-1" date="1659009600">- Rebase to version 4.16.4
- resolves: rhbz#2108331 - Fix CVE-2022-32742</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-2" date="1661428800">- resolves: rhbz#2120956 - Do not require samba package in python3-samba</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-3" date="1671537600">- resolves: rhbz#2154369 - Fix CVE-2022-38023</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-4" date="1673870400">- related: rhbz#2154369 - Add additional patch for CVE-2022-38023</changelog>
</package>
<package pkgid="e811d7fa664507af82a2253e2db58ae478b0fa027578ce3cba38c47b47f291d9" name="samba-client-libs" arch="x86_64">
  <version epoch="0" ver="4.16.4" rel="4.el8_7"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.15.5-7" date="1650456000">- resolves: rhbz#2076505 - PAM Kerberos authentication fails with a clock skew error</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.15.5-8" date="1651060800">- resolves: rhbz#2070522 - Fix UPNs handling in lookup_name*() calls</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.1-0" date="1651492800">- Update to Samba 4.16.1
- resolves: rhbz#2077468 Rebase Samba to the the latest 4.16.x release</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.2-0" date="1655121600">- Fix rpminspect abidiff
- related: rhbz#2077468 - Rebase Samba to 4.16.2</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.2-1" date="1655208000">- resolves: rhbz#2084162 - Fix printer displays only after 300 seconds timeout</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.3-0" date="1658145600">- related: rhbz#2077468 - Rebase Samba to 4.16.3
- resolves: rhbz#2106672 - The pcap background queue process should not be stopped
- resolves: rhbz#2106263 - Fix crash in rpcd_classic
- resolves: rhbz#2100093 - Fix net ads info returns LDAP server and LDAP server name</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-1" date="1659009600">- Rebase to version 4.16.4
- resolves: rhbz#2108331 - Fix CVE-2022-32742</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-2" date="1661428800">- resolves: rhbz#2120956 - Do not require samba package in python3-samba</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-3" date="1671537600">- resolves: rhbz#2154369 - Fix CVE-2022-38023</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-4" date="1673870400">- related: rhbz#2154369 - Add additional patch for CVE-2022-38023</changelog>
</package>
<package pkgid="051a297ed6fa4ec2f392bf4f25ba8ec0506a2c64a3f21c02bf3add9c42871e33" name="samba-client-libs" arch="i686">
  <version epoch="0" ver="4.16.4" rel="6.el8_7"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.1-0" date="1651492800">- Update to Samba 4.16.1
- resolves: rhbz#2077468 Rebase Samba to the the latest 4.16.x release</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.2-0" date="1655121600">- Fix rpminspect abidiff
- related: rhbz#2077468 - Rebase Samba to 4.16.2</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.2-1" date="1655208000">- resolves: rhbz#2084162 - Fix printer displays only after 300 seconds timeout</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.3-0" date="1658145600">- related: rhbz#2077468 - Rebase Samba to 4.16.3
- resolves: rhbz#2106672 - The pcap background queue process should not be stopped
- resolves: rhbz#2106263 - Fix crash in rpcd_classic
- resolves: rhbz#2100093 - Fix net ads info returns LDAP server and LDAP server name</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-1" date="1659009600">- Rebase to version 4.16.4
- resolves: rhbz#2108331 - Fix CVE-2022-32742</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-2" date="1661428800">- resolves: rhbz#2120956 - Do not require samba package in python3-samba</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-3" date="1671537600">- resolves: rhbz#2154369 - Fix CVE-2022-38023</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-4" date="1673870400">- related: rhbz#2154369 - Add additional patch for CVE-2022-38023</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.4-5" date="1676548800">- resolves: rhbz#2170394 - Fix share enum
- resolves: rhbz#2170467 - Add to package ctdb dependency for package samba-winbind-clients
- resolves: rhbz#2170468 - Add package dcerpc - fix winbind to retrieve user groups from AD
- resolves: rhbz#2170469 - Create package samba-tools</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.4-6" date="1676548801">- resolves: rhbz#2170468 - Remove libnetapi dependency from dcerpc</changelog>
</package>
<package pkgid="b8d8e52db7ff2dd7aadf1596b77366f06837a1e44d839b9eaba2854ce20881b1" name="samba-client-libs" arch="x86_64">
  <version epoch="0" ver="4.16.4" rel="6.el8_7"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.1-0" date="1651492800">- Update to Samba 4.16.1
- resolves: rhbz#2077468 Rebase Samba to the the latest 4.16.x release</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.2-0" date="1655121600">- Fix rpminspect abidiff
- related: rhbz#2077468 - Rebase Samba to 4.16.2</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.2-1" date="1655208000">- resolves: rhbz#2084162 - Fix printer displays only after 300 seconds timeout</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.3-0" date="1658145600">- related: rhbz#2077468 - Rebase Samba to 4.16.3
- resolves: rhbz#2106672 - The pcap background queue process should not be stopped
- resolves: rhbz#2106263 - Fix crash in rpcd_classic
- resolves: rhbz#2100093 - Fix net ads info returns LDAP server and LDAP server name</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-1" date="1659009600">- Rebase to version 4.16.4
- resolves: rhbz#2108331 - Fix CVE-2022-32742</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-2" date="1661428800">- resolves: rhbz#2120956 - Do not require samba package in python3-samba</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-3" date="1671537600">- resolves: rhbz#2154369 - Fix CVE-2022-38023</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-4" date="1673870400">- related: rhbz#2154369 - Add additional patch for CVE-2022-38023</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.4-5" date="1676548800">- resolves: rhbz#2170394 - Fix share enum
- resolves: rhbz#2170467 - Add to package ctdb dependency for package samba-winbind-clients
- resolves: rhbz#2170468 - Add package dcerpc - fix winbind to retrieve user groups from AD
- resolves: rhbz#2170469 - Create package samba-tools</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.4-6" date="1676548801">- resolves: rhbz#2170468 - Remove libnetapi dependency from dcerpc</changelog>
</package>
<package pkgid="8ef1cfde44a2d4afdd783e83353795beb22c560ce38c7d69e636abc39fe403c6" name="samba-common" arch="noarch">
  <version epoch="0" ver="4.16.4" rel="4.el8_7"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.15.5-7" date="1650456000">- resolves: rhbz#2076505 - PAM Kerberos authentication fails with a clock skew error</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.15.5-8" date="1651060800">- resolves: rhbz#2070522 - Fix UPNs handling in lookup_name*() calls</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.1-0" date="1651492800">- Update to Samba 4.16.1
- resolves: rhbz#2077468 Rebase Samba to the the latest 4.16.x release</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.2-0" date="1655121600">- Fix rpminspect abidiff
- related: rhbz#2077468 - Rebase Samba to 4.16.2</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.2-1" date="1655208000">- resolves: rhbz#2084162 - Fix printer displays only after 300 seconds timeout</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.3-0" date="1658145600">- related: rhbz#2077468 - Rebase Samba to 4.16.3
- resolves: rhbz#2106672 - The pcap background queue process should not be stopped
- resolves: rhbz#2106263 - Fix crash in rpcd_classic
- resolves: rhbz#2100093 - Fix net ads info returns LDAP server and LDAP server name</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-1" date="1659009600">- Rebase to version 4.16.4
- resolves: rhbz#2108331 - Fix CVE-2022-32742</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-2" date="1661428800">- resolves: rhbz#2120956 - Do not require samba package in python3-samba</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-3" date="1671537600">- resolves: rhbz#2154369 - Fix CVE-2022-38023</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-4" date="1673870400">- related: rhbz#2154369 - Add additional patch for CVE-2022-38023</changelog>
</package>
<package pkgid="3dedca084530e169fe2b7232c0ce9aa3893eba3abdd0d6c2b1483466b5ecc51e" name="samba-common" arch="noarch">
  <version epoch="0" ver="4.16.4" rel="6.el8_7"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.1-0" date="1651492800">- Update to Samba 4.16.1
- resolves: rhbz#2077468 Rebase Samba to the the latest 4.16.x release</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.2-0" date="1655121600">- Fix rpminspect abidiff
- related: rhbz#2077468 - Rebase Samba to 4.16.2</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.2-1" date="1655208000">- resolves: rhbz#2084162 - Fix printer displays only after 300 seconds timeout</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.3-0" date="1658145600">- related: rhbz#2077468 - Rebase Samba to 4.16.3
- resolves: rhbz#2106672 - The pcap background queue process should not be stopped
- resolves: rhbz#2106263 - Fix crash in rpcd_classic
- resolves: rhbz#2100093 - Fix net ads info returns LDAP server and LDAP server name</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-1" date="1659009600">- Rebase to version 4.16.4
- resolves: rhbz#2108331 - Fix CVE-2022-32742</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-2" date="1661428800">- resolves: rhbz#2120956 - Do not require samba package in python3-samba</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-3" date="1671537600">- resolves: rhbz#2154369 - Fix CVE-2022-38023</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-4" date="1673870400">- related: rhbz#2154369 - Add additional patch for CVE-2022-38023</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.4-5" date="1676548800">- resolves: rhbz#2170394 - Fix share enum
- resolves: rhbz#2170467 - Add to package ctdb dependency for package samba-winbind-clients
- resolves: rhbz#2170468 - Add package dcerpc - fix winbind to retrieve user groups from AD
- resolves: rhbz#2170469 - Create package samba-tools</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.4-6" date="1676548801">- resolves: rhbz#2170468 - Remove libnetapi dependency from dcerpc</changelog>
</package>
<package pkgid="ccfa2e9cf365f54943efc0a2bd7b00e5a4bdaf4f2228366e1298eb79a8939071" name="samba-common-libs" arch="i686">
  <version epoch="0" ver="4.16.4" rel="4.el8_7"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.15.5-7" date="1650456000">- resolves: rhbz#2076505 - PAM Kerberos authentication fails with a clock skew error</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.15.5-8" date="1651060800">- resolves: rhbz#2070522 - Fix UPNs handling in lookup_name*() calls</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.1-0" date="1651492800">- Update to Samba 4.16.1
- resolves: rhbz#2077468 Rebase Samba to the the latest 4.16.x release</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.2-0" date="1655121600">- Fix rpminspect abidiff
- related: rhbz#2077468 - Rebase Samba to 4.16.2</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.2-1" date="1655208000">- resolves: rhbz#2084162 - Fix printer displays only after 300 seconds timeout</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.3-0" date="1658145600">- related: rhbz#2077468 - Rebase Samba to 4.16.3
- resolves: rhbz#2106672 - The pcap background queue process should not be stopped
- resolves: rhbz#2106263 - Fix crash in rpcd_classic
- resolves: rhbz#2100093 - Fix net ads info returns LDAP server and LDAP server name</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-1" date="1659009600">- Rebase to version 4.16.4
- resolves: rhbz#2108331 - Fix CVE-2022-32742</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-2" date="1661428800">- resolves: rhbz#2120956 - Do not require samba package in python3-samba</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-3" date="1671537600">- resolves: rhbz#2154369 - Fix CVE-2022-38023</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-4" date="1673870400">- related: rhbz#2154369 - Add additional patch for CVE-2022-38023</changelog>
</package>
<package pkgid="1bb444c48cfb3d733cd2c6de7f0f0502b1450cc7be0ed7914715748a2bd88c63" name="samba-common-libs" arch="x86_64">
  <version epoch="0" ver="4.16.4" rel="4.el8_7"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.15.5-7" date="1650456000">- resolves: rhbz#2076505 - PAM Kerberos authentication fails with a clock skew error</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.15.5-8" date="1651060800">- resolves: rhbz#2070522 - Fix UPNs handling in lookup_name*() calls</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.1-0" date="1651492800">- Update to Samba 4.16.1
- resolves: rhbz#2077468 Rebase Samba to the the latest 4.16.x release</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.2-0" date="1655121600">- Fix rpminspect abidiff
- related: rhbz#2077468 - Rebase Samba to 4.16.2</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.2-1" date="1655208000">- resolves: rhbz#2084162 - Fix printer displays only after 300 seconds timeout</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.3-0" date="1658145600">- related: rhbz#2077468 - Rebase Samba to 4.16.3
- resolves: rhbz#2106672 - The pcap background queue process should not be stopped
- resolves: rhbz#2106263 - Fix crash in rpcd_classic
- resolves: rhbz#2100093 - Fix net ads info returns LDAP server and LDAP server name</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-1" date="1659009600">- Rebase to version 4.16.4
- resolves: rhbz#2108331 - Fix CVE-2022-32742</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-2" date="1661428800">- resolves: rhbz#2120956 - Do not require samba package in python3-samba</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-3" date="1671537600">- resolves: rhbz#2154369 - Fix CVE-2022-38023</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-4" date="1673870400">- related: rhbz#2154369 - Add additional patch for CVE-2022-38023</changelog>
</package>
<package pkgid="e3beb7d8a9ce436207709800764f82d250c44edf79c63d36eafed535ffe1203e" name="samba-common-libs" arch="i686">
  <version epoch="0" ver="4.16.4" rel="6.el8_7"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.1-0" date="1651492800">- Update to Samba 4.16.1
- resolves: rhbz#2077468 Rebase Samba to the the latest 4.16.x release</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.2-0" date="1655121600">- Fix rpminspect abidiff
- related: rhbz#2077468 - Rebase Samba to 4.16.2</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.2-1" date="1655208000">- resolves: rhbz#2084162 - Fix printer displays only after 300 seconds timeout</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.3-0" date="1658145600">- related: rhbz#2077468 - Rebase Samba to 4.16.3
- resolves: rhbz#2106672 - The pcap background queue process should not be stopped
- resolves: rhbz#2106263 - Fix crash in rpcd_classic
- resolves: rhbz#2100093 - Fix net ads info returns LDAP server and LDAP server name</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-1" date="1659009600">- Rebase to version 4.16.4
- resolves: rhbz#2108331 - Fix CVE-2022-32742</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-2" date="1661428800">- resolves: rhbz#2120956 - Do not require samba package in python3-samba</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-3" date="1671537600">- resolves: rhbz#2154369 - Fix CVE-2022-38023</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-4" date="1673870400">- related: rhbz#2154369 - Add additional patch for CVE-2022-38023</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.4-5" date="1676548800">- resolves: rhbz#2170394 - Fix share enum
- resolves: rhbz#2170467 - Add to package ctdb dependency for package samba-winbind-clients
- resolves: rhbz#2170468 - Add package dcerpc - fix winbind to retrieve user groups from AD
- resolves: rhbz#2170469 - Create package samba-tools</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.4-6" date="1676548801">- resolves: rhbz#2170468 - Remove libnetapi dependency from dcerpc</changelog>
</package>
<package pkgid="2bc03398e004ab4832aeaa3c739b538e58cf059604e0759393379091f8e52fc3" name="samba-common-libs" arch="x86_64">
  <version epoch="0" ver="4.16.4" rel="6.el8_7"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.1-0" date="1651492800">- Update to Samba 4.16.1
- resolves: rhbz#2077468 Rebase Samba to the the latest 4.16.x release</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.2-0" date="1655121600">- Fix rpminspect abidiff
- related: rhbz#2077468 - Rebase Samba to 4.16.2</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.2-1" date="1655208000">- resolves: rhbz#2084162 - Fix printer displays only after 300 seconds timeout</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.3-0" date="1658145600">- related: rhbz#2077468 - Rebase Samba to 4.16.3
- resolves: rhbz#2106672 - The pcap background queue process should not be stopped
- resolves: rhbz#2106263 - Fix crash in rpcd_classic
- resolves: rhbz#2100093 - Fix net ads info returns LDAP server and LDAP server name</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-1" date="1659009600">- Rebase to version 4.16.4
- resolves: rhbz#2108331 - Fix CVE-2022-32742</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-2" date="1661428800">- resolves: rhbz#2120956 - Do not require samba package in python3-samba</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-3" date="1671537600">- resolves: rhbz#2154369 - Fix CVE-2022-38023</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-4" date="1673870400">- related: rhbz#2154369 - Add additional patch for CVE-2022-38023</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.4-5" date="1676548800">- resolves: rhbz#2170394 - Fix share enum
- resolves: rhbz#2170467 - Add to package ctdb dependency for package samba-winbind-clients
- resolves: rhbz#2170468 - Add package dcerpc - fix winbind to retrieve user groups from AD
- resolves: rhbz#2170469 - Create package samba-tools</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.4-6" date="1676548801">- resolves: rhbz#2170468 - Remove libnetapi dependency from dcerpc</changelog>
</package>
<package pkgid="72e996e8c63fb7358140f5682ccac3e87f1781e2d04a2aac6a019081df898436" name="samba-common-tools" arch="x86_64">
  <version epoch="0" ver="4.16.4" rel="4.el8_7"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.15.5-7" date="1650456000">- resolves: rhbz#2076505 - PAM Kerberos authentication fails with a clock skew error</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.15.5-8" date="1651060800">- resolves: rhbz#2070522 - Fix UPNs handling in lookup_name*() calls</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.1-0" date="1651492800">- Update to Samba 4.16.1
- resolves: rhbz#2077468 Rebase Samba to the the latest 4.16.x release</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.2-0" date="1655121600">- Fix rpminspect abidiff
- related: rhbz#2077468 - Rebase Samba to 4.16.2</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.2-1" date="1655208000">- resolves: rhbz#2084162 - Fix printer displays only after 300 seconds timeout</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.3-0" date="1658145600">- related: rhbz#2077468 - Rebase Samba to 4.16.3
- resolves: rhbz#2106672 - The pcap background queue process should not be stopped
- resolves: rhbz#2106263 - Fix crash in rpcd_classic
- resolves: rhbz#2100093 - Fix net ads info returns LDAP server and LDAP server name</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-1" date="1659009600">- Rebase to version 4.16.4
- resolves: rhbz#2108331 - Fix CVE-2022-32742</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-2" date="1661428800">- resolves: rhbz#2120956 - Do not require samba package in python3-samba</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-3" date="1671537600">- resolves: rhbz#2154369 - Fix CVE-2022-38023</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-4" date="1673870400">- related: rhbz#2154369 - Add additional patch for CVE-2022-38023</changelog>
</package>
<package pkgid="3736e58935bf66a9b97411369eb8ede237b1ea2bacf4161fd491141bf69d0f9d" name="samba-common-tools" arch="x86_64">
  <version epoch="0" ver="4.16.4" rel="6.el8_7"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.1-0" date="1651492800">- Update to Samba 4.16.1
- resolves: rhbz#2077468 Rebase Samba to the the latest 4.16.x release</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.2-0" date="1655121600">- Fix rpminspect abidiff
- related: rhbz#2077468 - Rebase Samba to 4.16.2</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.2-1" date="1655208000">- resolves: rhbz#2084162 - Fix printer displays only after 300 seconds timeout</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.3-0" date="1658145600">- related: rhbz#2077468 - Rebase Samba to 4.16.3
- resolves: rhbz#2106672 - The pcap background queue process should not be stopped
- resolves: rhbz#2106263 - Fix crash in rpcd_classic
- resolves: rhbz#2100093 - Fix net ads info returns LDAP server and LDAP server name</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-1" date="1659009600">- Rebase to version 4.16.4
- resolves: rhbz#2108331 - Fix CVE-2022-32742</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-2" date="1661428800">- resolves: rhbz#2120956 - Do not require samba package in python3-samba</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-3" date="1671537600">- resolves: rhbz#2154369 - Fix CVE-2022-38023</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-4" date="1673870400">- related: rhbz#2154369 - Add additional patch for CVE-2022-38023</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.4-5" date="1676548800">- resolves: rhbz#2170394 - Fix share enum
- resolves: rhbz#2170467 - Add to package ctdb dependency for package samba-winbind-clients
- resolves: rhbz#2170468 - Add package dcerpc - fix winbind to retrieve user groups from AD
- resolves: rhbz#2170469 - Create package samba-tools</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.4-6" date="1676548801">- resolves: rhbz#2170468 - Remove libnetapi dependency from dcerpc</changelog>
</package>
<package pkgid="a529c06c2c7e18681ad2c9cd89726ea7a486429b4ede0dcbe34710b3819856f7" name="samba-dc-libs" arch="i686">
  <version epoch="0" ver="4.16.4" rel="6.el8_7"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.1-0" date="1651492800">- Update to Samba 4.16.1
- resolves: rhbz#2077468 Rebase Samba to the the latest 4.16.x release</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.2-0" date="1655121600">- Fix rpminspect abidiff
- related: rhbz#2077468 - Rebase Samba to 4.16.2</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.2-1" date="1655208000">- resolves: rhbz#2084162 - Fix printer displays only after 300 seconds timeout</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.3-0" date="1658145600">- related: rhbz#2077468 - Rebase Samba to 4.16.3
- resolves: rhbz#2106672 - The pcap background queue process should not be stopped
- resolves: rhbz#2106263 - Fix crash in rpcd_classic
- resolves: rhbz#2100093 - Fix net ads info returns LDAP server and LDAP server name</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-1" date="1659009600">- Rebase to version 4.16.4
- resolves: rhbz#2108331 - Fix CVE-2022-32742</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-2" date="1661428800">- resolves: rhbz#2120956 - Do not require samba package in python3-samba</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-3" date="1671537600">- resolves: rhbz#2154369 - Fix CVE-2022-38023</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-4" date="1673870400">- related: rhbz#2154369 - Add additional patch for CVE-2022-38023</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.4-5" date="1676548800">- resolves: rhbz#2170394 - Fix share enum
- resolves: rhbz#2170467 - Add to package ctdb dependency for package samba-winbind-clients
- resolves: rhbz#2170468 - Add package dcerpc - fix winbind to retrieve user groups from AD
- resolves: rhbz#2170469 - Create package samba-tools</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.4-6" date="1676548801">- resolves: rhbz#2170468 - Remove libnetapi dependency from dcerpc</changelog>
</package>
<package pkgid="a1e1138a1949ca8c51a6fee5466d08f9ec7c8e762f3680f3942c163d61fee521" name="samba-dc-libs" arch="x86_64">
  <version epoch="0" ver="4.16.4" rel="6.el8_7"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.1-0" date="1651492800">- Update to Samba 4.16.1
- resolves: rhbz#2077468 Rebase Samba to the the latest 4.16.x release</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.2-0" date="1655121600">- Fix rpminspect abidiff
- related: rhbz#2077468 - Rebase Samba to 4.16.2</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.2-1" date="1655208000">- resolves: rhbz#2084162 - Fix printer displays only after 300 seconds timeout</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.3-0" date="1658145600">- related: rhbz#2077468 - Rebase Samba to 4.16.3
- resolves: rhbz#2106672 - The pcap background queue process should not be stopped
- resolves: rhbz#2106263 - Fix crash in rpcd_classic
- resolves: rhbz#2100093 - Fix net ads info returns LDAP server and LDAP server name</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-1" date="1659009600">- Rebase to version 4.16.4
- resolves: rhbz#2108331 - Fix CVE-2022-32742</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-2" date="1661428800">- resolves: rhbz#2120956 - Do not require samba package in python3-samba</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-3" date="1671537600">- resolves: rhbz#2154369 - Fix CVE-2022-38023</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-4" date="1673870400">- related: rhbz#2154369 - Add additional patch for CVE-2022-38023</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.4-5" date="1676548800">- resolves: rhbz#2170394 - Fix share enum
- resolves: rhbz#2170467 - Add to package ctdb dependency for package samba-winbind-clients
- resolves: rhbz#2170468 - Add package dcerpc - fix winbind to retrieve user groups from AD
- resolves: rhbz#2170469 - Create package samba-tools</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.4-6" date="1676548801">- resolves: rhbz#2170468 - Remove libnetapi dependency from dcerpc</changelog>
</package>
<package pkgid="3a90dba1f0f9bb21c2dd96d1e53e40178b2d39894bfe6219c7868162709e923f" name="samba-dcerpc" arch="x86_64">
  <version epoch="0" ver="4.16.4" rel="6.el8_7"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.1-0" date="1651492800">- Update to Samba 4.16.1
- resolves: rhbz#2077468 Rebase Samba to the the latest 4.16.x release</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.2-0" date="1655121600">- Fix rpminspect abidiff
- related: rhbz#2077468 - Rebase Samba to 4.16.2</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.2-1" date="1655208000">- resolves: rhbz#2084162 - Fix printer displays only after 300 seconds timeout</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.3-0" date="1658145600">- related: rhbz#2077468 - Rebase Samba to 4.16.3
- resolves: rhbz#2106672 - The pcap background queue process should not be stopped
- resolves: rhbz#2106263 - Fix crash in rpcd_classic
- resolves: rhbz#2100093 - Fix net ads info returns LDAP server and LDAP server name</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-1" date="1659009600">- Rebase to version 4.16.4
- resolves: rhbz#2108331 - Fix CVE-2022-32742</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-2" date="1661428800">- resolves: rhbz#2120956 - Do not require samba package in python3-samba</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-3" date="1671537600">- resolves: rhbz#2154369 - Fix CVE-2022-38023</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-4" date="1673870400">- related: rhbz#2154369 - Add additional patch for CVE-2022-38023</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.4-5" date="1676548800">- resolves: rhbz#2170394 - Fix share enum
- resolves: rhbz#2170467 - Add to package ctdb dependency for package samba-winbind-clients
- resolves: rhbz#2170468 - Add package dcerpc - fix winbind to retrieve user groups from AD
- resolves: rhbz#2170469 - Create package samba-tools</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.4-6" date="1676548801">- resolves: rhbz#2170468 - Remove libnetapi dependency from dcerpc</changelog>
</package>
<package pkgid="6f36c202397602ceb0b77bee8957d113e246b91a35c4cf61d725d1f79668fa8c" name="samba-krb5-printing" arch="x86_64">
  <version epoch="0" ver="4.16.4" rel="4.el8_7"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.15.5-7" date="1650456000">- resolves: rhbz#2076505 - PAM Kerberos authentication fails with a clock skew error</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.15.5-8" date="1651060800">- resolves: rhbz#2070522 - Fix UPNs handling in lookup_name*() calls</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.1-0" date="1651492800">- Update to Samba 4.16.1
- resolves: rhbz#2077468 Rebase Samba to the the latest 4.16.x release</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.2-0" date="1655121600">- Fix rpminspect abidiff
- related: rhbz#2077468 - Rebase Samba to 4.16.2</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.2-1" date="1655208000">- resolves: rhbz#2084162 - Fix printer displays only after 300 seconds timeout</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.3-0" date="1658145600">- related: rhbz#2077468 - Rebase Samba to 4.16.3
- resolves: rhbz#2106672 - The pcap background queue process should not be stopped
- resolves: rhbz#2106263 - Fix crash in rpcd_classic
- resolves: rhbz#2100093 - Fix net ads info returns LDAP server and LDAP server name</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-1" date="1659009600">- Rebase to version 4.16.4
- resolves: rhbz#2108331 - Fix CVE-2022-32742</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-2" date="1661428800">- resolves: rhbz#2120956 - Do not require samba package in python3-samba</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-3" date="1671537600">- resolves: rhbz#2154369 - Fix CVE-2022-38023</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-4" date="1673870400">- related: rhbz#2154369 - Add additional patch for CVE-2022-38023</changelog>
</package>
<package pkgid="d285024fc1bcdc45e941959978a2bf38fe2a24db01dc24f5ef6d51a43db92a78" name="samba-krb5-printing" arch="x86_64">
  <version epoch="0" ver="4.16.4" rel="6.el8_7"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.1-0" date="1651492800">- Update to Samba 4.16.1
- resolves: rhbz#2077468 Rebase Samba to the the latest 4.16.x release</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.2-0" date="1655121600">- Fix rpminspect abidiff
- related: rhbz#2077468 - Rebase Samba to 4.16.2</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.2-1" date="1655208000">- resolves: rhbz#2084162 - Fix printer displays only after 300 seconds timeout</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.3-0" date="1658145600">- related: rhbz#2077468 - Rebase Samba to 4.16.3
- resolves: rhbz#2106672 - The pcap background queue process should not be stopped
- resolves: rhbz#2106263 - Fix crash in rpcd_classic
- resolves: rhbz#2100093 - Fix net ads info returns LDAP server and LDAP server name</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-1" date="1659009600">- Rebase to version 4.16.4
- resolves: rhbz#2108331 - Fix CVE-2022-32742</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-2" date="1661428800">- resolves: rhbz#2120956 - Do not require samba package in python3-samba</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-3" date="1671537600">- resolves: rhbz#2154369 - Fix CVE-2022-38023</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-4" date="1673870400">- related: rhbz#2154369 - Add additional patch for CVE-2022-38023</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.4-5" date="1676548800">- resolves: rhbz#2170394 - Fix share enum
- resolves: rhbz#2170467 - Add to package ctdb dependency for package samba-winbind-clients
- resolves: rhbz#2170468 - Add package dcerpc - fix winbind to retrieve user groups from AD
- resolves: rhbz#2170469 - Create package samba-tools</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.4-6" date="1676548801">- resolves: rhbz#2170468 - Remove libnetapi dependency from dcerpc</changelog>
</package>
<package pkgid="be11411e12a05ecf9edfeb82681b3ef82e7a021ee6a29ba3993e77fa60860b26" name="samba-libs" arch="i686">
  <version epoch="0" ver="4.16.4" rel="4.el8_7"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.15.5-7" date="1650456000">- resolves: rhbz#2076505 - PAM Kerberos authentication fails with a clock skew error</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.15.5-8" date="1651060800">- resolves: rhbz#2070522 - Fix UPNs handling in lookup_name*() calls</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.1-0" date="1651492800">- Update to Samba 4.16.1
- resolves: rhbz#2077468 Rebase Samba to the the latest 4.16.x release</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.2-0" date="1655121600">- Fix rpminspect abidiff
- related: rhbz#2077468 - Rebase Samba to 4.16.2</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.2-1" date="1655208000">- resolves: rhbz#2084162 - Fix printer displays only after 300 seconds timeout</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.3-0" date="1658145600">- related: rhbz#2077468 - Rebase Samba to 4.16.3
- resolves: rhbz#2106672 - The pcap background queue process should not be stopped
- resolves: rhbz#2106263 - Fix crash in rpcd_classic
- resolves: rhbz#2100093 - Fix net ads info returns LDAP server and LDAP server name</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-1" date="1659009600">- Rebase to version 4.16.4
- resolves: rhbz#2108331 - Fix CVE-2022-32742</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-2" date="1661428800">- resolves: rhbz#2120956 - Do not require samba package in python3-samba</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-3" date="1671537600">- resolves: rhbz#2154369 - Fix CVE-2022-38023</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-4" date="1673870400">- related: rhbz#2154369 - Add additional patch for CVE-2022-38023</changelog>
</package>
<package pkgid="8d201e0d15d88fbc5a7f1228b4175c1eaecaa8dd4dc328bd7a3265287e714ae6" name="samba-libs" arch="x86_64">
  <version epoch="0" ver="4.16.4" rel="4.el8_7"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.15.5-7" date="1650456000">- resolves: rhbz#2076505 - PAM Kerberos authentication fails with a clock skew error</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.15.5-8" date="1651060800">- resolves: rhbz#2070522 - Fix UPNs handling in lookup_name*() calls</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.1-0" date="1651492800">- Update to Samba 4.16.1
- resolves: rhbz#2077468 Rebase Samba to the the latest 4.16.x release</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.2-0" date="1655121600">- Fix rpminspect abidiff
- related: rhbz#2077468 - Rebase Samba to 4.16.2</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.2-1" date="1655208000">- resolves: rhbz#2084162 - Fix printer displays only after 300 seconds timeout</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.3-0" date="1658145600">- related: rhbz#2077468 - Rebase Samba to 4.16.3
- resolves: rhbz#2106672 - The pcap background queue process should not be stopped
- resolves: rhbz#2106263 - Fix crash in rpcd_classic
- resolves: rhbz#2100093 - Fix net ads info returns LDAP server and LDAP server name</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-1" date="1659009600">- Rebase to version 4.16.4
- resolves: rhbz#2108331 - Fix CVE-2022-32742</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-2" date="1661428800">- resolves: rhbz#2120956 - Do not require samba package in python3-samba</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-3" date="1671537600">- resolves: rhbz#2154369 - Fix CVE-2022-38023</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-4" date="1673870400">- related: rhbz#2154369 - Add additional patch for CVE-2022-38023</changelog>
</package>
<package pkgid="3abf7a2c1a1d0cb027888e9e3971cac926f5a13472119972677b500a928a2ddd" name="samba-libs" arch="i686">
  <version epoch="0" ver="4.16.4" rel="6.el8_7"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.1-0" date="1651492800">- Update to Samba 4.16.1
- resolves: rhbz#2077468 Rebase Samba to the the latest 4.16.x release</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.2-0" date="1655121600">- Fix rpminspect abidiff
- related: rhbz#2077468 - Rebase Samba to 4.16.2</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.2-1" date="1655208000">- resolves: rhbz#2084162 - Fix printer displays only after 300 seconds timeout</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.3-0" date="1658145600">- related: rhbz#2077468 - Rebase Samba to 4.16.3
- resolves: rhbz#2106672 - The pcap background queue process should not be stopped
- resolves: rhbz#2106263 - Fix crash in rpcd_classic
- resolves: rhbz#2100093 - Fix net ads info returns LDAP server and LDAP server name</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-1" date="1659009600">- Rebase to version 4.16.4
- resolves: rhbz#2108331 - Fix CVE-2022-32742</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-2" date="1661428800">- resolves: rhbz#2120956 - Do not require samba package in python3-samba</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-3" date="1671537600">- resolves: rhbz#2154369 - Fix CVE-2022-38023</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-4" date="1673870400">- related: rhbz#2154369 - Add additional patch for CVE-2022-38023</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.4-5" date="1676548800">- resolves: rhbz#2170394 - Fix share enum
- resolves: rhbz#2170467 - Add to package ctdb dependency for package samba-winbind-clients
- resolves: rhbz#2170468 - Add package dcerpc - fix winbind to retrieve user groups from AD
- resolves: rhbz#2170469 - Create package samba-tools</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.4-6" date="1676548801">- resolves: rhbz#2170468 - Remove libnetapi dependency from dcerpc</changelog>
</package>
<package pkgid="eb1d7c92d5cac8c192185a8963e29e3d9302606da3fce2c150a94cf6854fe92a" name="samba-libs" arch="x86_64">
  <version epoch="0" ver="4.16.4" rel="6.el8_7"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.1-0" date="1651492800">- Update to Samba 4.16.1
- resolves: rhbz#2077468 Rebase Samba to the the latest 4.16.x release</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.2-0" date="1655121600">- Fix rpminspect abidiff
- related: rhbz#2077468 - Rebase Samba to 4.16.2</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.2-1" date="1655208000">- resolves: rhbz#2084162 - Fix printer displays only after 300 seconds timeout</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.3-0" date="1658145600">- related: rhbz#2077468 - Rebase Samba to 4.16.3
- resolves: rhbz#2106672 - The pcap background queue process should not be stopped
- resolves: rhbz#2106263 - Fix crash in rpcd_classic
- resolves: rhbz#2100093 - Fix net ads info returns LDAP server and LDAP server name</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-1" date="1659009600">- Rebase to version 4.16.4
- resolves: rhbz#2108331 - Fix CVE-2022-32742</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-2" date="1661428800">- resolves: rhbz#2120956 - Do not require samba package in python3-samba</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-3" date="1671537600">- resolves: rhbz#2154369 - Fix CVE-2022-38023</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-4" date="1673870400">- related: rhbz#2154369 - Add additional patch for CVE-2022-38023</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.4-5" date="1676548800">- resolves: rhbz#2170394 - Fix share enum
- resolves: rhbz#2170467 - Add to package ctdb dependency for package samba-winbind-clients
- resolves: rhbz#2170468 - Add package dcerpc - fix winbind to retrieve user groups from AD
- resolves: rhbz#2170469 - Create package samba-tools</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.4-6" date="1676548801">- resolves: rhbz#2170468 - Remove libnetapi dependency from dcerpc</changelog>
</package>
<package pkgid="bb7c091700d904bbfe754e107373b0ab7481fe8c8a785d362c572efca45508d3" name="samba-pidl" arch="noarch">
  <version epoch="0" ver="4.16.4" rel="4.el8_7"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.15.5-7" date="1650456000">- resolves: rhbz#2076505 - PAM Kerberos authentication fails with a clock skew error</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.15.5-8" date="1651060800">- resolves: rhbz#2070522 - Fix UPNs handling in lookup_name*() calls</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.1-0" date="1651492800">- Update to Samba 4.16.1
- resolves: rhbz#2077468 Rebase Samba to the the latest 4.16.x release</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.2-0" date="1655121600">- Fix rpminspect abidiff
- related: rhbz#2077468 - Rebase Samba to 4.16.2</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.2-1" date="1655208000">- resolves: rhbz#2084162 - Fix printer displays only after 300 seconds timeout</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.3-0" date="1658145600">- related: rhbz#2077468 - Rebase Samba to 4.16.3
- resolves: rhbz#2106672 - The pcap background queue process should not be stopped
- resolves: rhbz#2106263 - Fix crash in rpcd_classic
- resolves: rhbz#2100093 - Fix net ads info returns LDAP server and LDAP server name</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-1" date="1659009600">- Rebase to version 4.16.4
- resolves: rhbz#2108331 - Fix CVE-2022-32742</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-2" date="1661428800">- resolves: rhbz#2120956 - Do not require samba package in python3-samba</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-3" date="1671537600">- resolves: rhbz#2154369 - Fix CVE-2022-38023</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-4" date="1673870400">- related: rhbz#2154369 - Add additional patch for CVE-2022-38023</changelog>
</package>
<package pkgid="f2e9c0330e07acb03dc718fa57724158246c6611aa11e5fcf0961fe3f4305d9f" name="samba-pidl" arch="noarch">
  <version epoch="0" ver="4.16.4" rel="6.el8_7"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.1-0" date="1651492800">- Update to Samba 4.16.1
- resolves: rhbz#2077468 Rebase Samba to the the latest 4.16.x release</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.2-0" date="1655121600">- Fix rpminspect abidiff
- related: rhbz#2077468 - Rebase Samba to 4.16.2</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.2-1" date="1655208000">- resolves: rhbz#2084162 - Fix printer displays only after 300 seconds timeout</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.3-0" date="1658145600">- related: rhbz#2077468 - Rebase Samba to 4.16.3
- resolves: rhbz#2106672 - The pcap background queue process should not be stopped
- resolves: rhbz#2106263 - Fix crash in rpcd_classic
- resolves: rhbz#2100093 - Fix net ads info returns LDAP server and LDAP server name</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-1" date="1659009600">- Rebase to version 4.16.4
- resolves: rhbz#2108331 - Fix CVE-2022-32742</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-2" date="1661428800">- resolves: rhbz#2120956 - Do not require samba package in python3-samba</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-3" date="1671537600">- resolves: rhbz#2154369 - Fix CVE-2022-38023</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-4" date="1673870400">- related: rhbz#2154369 - Add additional patch for CVE-2022-38023</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.4-5" date="1676548800">- resolves: rhbz#2170394 - Fix share enum
- resolves: rhbz#2170467 - Add to package ctdb dependency for package samba-winbind-clients
- resolves: rhbz#2170468 - Add package dcerpc - fix winbind to retrieve user groups from AD
- resolves: rhbz#2170469 - Create package samba-tools</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.4-6" date="1676548801">- resolves: rhbz#2170468 - Remove libnetapi dependency from dcerpc</changelog>
</package>
<package pkgid="a0a197c8b65a57276ef79a2ec785dc6a001a585f333b9b5284a04c22625ef409" name="samba-test" arch="x86_64">
  <version epoch="0" ver="4.16.4" rel="4.el8_7"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.15.5-7" date="1650456000">- resolves: rhbz#2076505 - PAM Kerberos authentication fails with a clock skew error</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.15.5-8" date="1651060800">- resolves: rhbz#2070522 - Fix UPNs handling in lookup_name*() calls</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.1-0" date="1651492800">- Update to Samba 4.16.1
- resolves: rhbz#2077468 Rebase Samba to the the latest 4.16.x release</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.2-0" date="1655121600">- Fix rpminspect abidiff
- related: rhbz#2077468 - Rebase Samba to 4.16.2</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.2-1" date="1655208000">- resolves: rhbz#2084162 - Fix printer displays only after 300 seconds timeout</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.3-0" date="1658145600">- related: rhbz#2077468 - Rebase Samba to 4.16.3
- resolves: rhbz#2106672 - The pcap background queue process should not be stopped
- resolves: rhbz#2106263 - Fix crash in rpcd_classic
- resolves: rhbz#2100093 - Fix net ads info returns LDAP server and LDAP server name</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-1" date="1659009600">- Rebase to version 4.16.4
- resolves: rhbz#2108331 - Fix CVE-2022-32742</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-2" date="1661428800">- resolves: rhbz#2120956 - Do not require samba package in python3-samba</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-3" date="1671537600">- resolves: rhbz#2154369 - Fix CVE-2022-38023</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-4" date="1673870400">- related: rhbz#2154369 - Add additional patch for CVE-2022-38023</changelog>
</package>
<package pkgid="64809c638c955315753db7eb28b78929908fcc172e51d882c01a6d55a97f6d1f" name="samba-test" arch="x86_64">
  <version epoch="0" ver="4.16.4" rel="6.el8_7"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.1-0" date="1651492800">- Update to Samba 4.16.1
- resolves: rhbz#2077468 Rebase Samba to the the latest 4.16.x release</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.2-0" date="1655121600">- Fix rpminspect abidiff
- related: rhbz#2077468 - Rebase Samba to 4.16.2</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.2-1" date="1655208000">- resolves: rhbz#2084162 - Fix printer displays only after 300 seconds timeout</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.3-0" date="1658145600">- related: rhbz#2077468 - Rebase Samba to 4.16.3
- resolves: rhbz#2106672 - The pcap background queue process should not be stopped
- resolves: rhbz#2106263 - Fix crash in rpcd_classic
- resolves: rhbz#2100093 - Fix net ads info returns LDAP server and LDAP server name</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-1" date="1659009600">- Rebase to version 4.16.4
- resolves: rhbz#2108331 - Fix CVE-2022-32742</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-2" date="1661428800">- resolves: rhbz#2120956 - Do not require samba package in python3-samba</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-3" date="1671537600">- resolves: rhbz#2154369 - Fix CVE-2022-38023</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-4" date="1673870400">- related: rhbz#2154369 - Add additional patch for CVE-2022-38023</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.4-5" date="1676548800">- resolves: rhbz#2170394 - Fix share enum
- resolves: rhbz#2170467 - Add to package ctdb dependency for package samba-winbind-clients
- resolves: rhbz#2170468 - Add package dcerpc - fix winbind to retrieve user groups from AD
- resolves: rhbz#2170469 - Create package samba-tools</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.4-6" date="1676548801">- resolves: rhbz#2170468 - Remove libnetapi dependency from dcerpc</changelog>
</package>
<package pkgid="404b87be09af7d42db8371fd91721b25b893238275ad7cdbb8eb6d233444d13c" name="samba-test-libs" arch="x86_64">
  <version epoch="0" ver="4.16.4" rel="4.el8_7"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.15.5-7" date="1650456000">- resolves: rhbz#2076505 - PAM Kerberos authentication fails with a clock skew error</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.15.5-8" date="1651060800">- resolves: rhbz#2070522 - Fix UPNs handling in lookup_name*() calls</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.1-0" date="1651492800">- Update to Samba 4.16.1
- resolves: rhbz#2077468 Rebase Samba to the the latest 4.16.x release</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.2-0" date="1655121600">- Fix rpminspect abidiff
- related: rhbz#2077468 - Rebase Samba to 4.16.2</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.2-1" date="1655208000">- resolves: rhbz#2084162 - Fix printer displays only after 300 seconds timeout</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.3-0" date="1658145600">- related: rhbz#2077468 - Rebase Samba to 4.16.3
- resolves: rhbz#2106672 - The pcap background queue process should not be stopped
- resolves: rhbz#2106263 - Fix crash in rpcd_classic
- resolves: rhbz#2100093 - Fix net ads info returns LDAP server and LDAP server name</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-1" date="1659009600">- Rebase to version 4.16.4
- resolves: rhbz#2108331 - Fix CVE-2022-32742</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-2" date="1661428800">- resolves: rhbz#2120956 - Do not require samba package in python3-samba</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-3" date="1671537600">- resolves: rhbz#2154369 - Fix CVE-2022-38023</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-4" date="1673870400">- related: rhbz#2154369 - Add additional patch for CVE-2022-38023</changelog>
</package>
<package pkgid="088ba23ab22d81138bc468b6af125f9e295591909fc36ca9e05ce1ec199e77fa" name="samba-test-libs" arch="x86_64">
  <version epoch="0" ver="4.16.4" rel="6.el8_7"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.1-0" date="1651492800">- Update to Samba 4.16.1
- resolves: rhbz#2077468 Rebase Samba to the the latest 4.16.x release</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.2-0" date="1655121600">- Fix rpminspect abidiff
- related: rhbz#2077468 - Rebase Samba to 4.16.2</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.2-1" date="1655208000">- resolves: rhbz#2084162 - Fix printer displays only after 300 seconds timeout</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.3-0" date="1658145600">- related: rhbz#2077468 - Rebase Samba to 4.16.3
- resolves: rhbz#2106672 - The pcap background queue process should not be stopped
- resolves: rhbz#2106263 - Fix crash in rpcd_classic
- resolves: rhbz#2100093 - Fix net ads info returns LDAP server and LDAP server name</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-1" date="1659009600">- Rebase to version 4.16.4
- resolves: rhbz#2108331 - Fix CVE-2022-32742</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-2" date="1661428800">- resolves: rhbz#2120956 - Do not require samba package in python3-samba</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-3" date="1671537600">- resolves: rhbz#2154369 - Fix CVE-2022-38023</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-4" date="1673870400">- related: rhbz#2154369 - Add additional patch for CVE-2022-38023</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.4-5" date="1676548800">- resolves: rhbz#2170394 - Fix share enum
- resolves: rhbz#2170467 - Add to package ctdb dependency for package samba-winbind-clients
- resolves: rhbz#2170468 - Add package dcerpc - fix winbind to retrieve user groups from AD
- resolves: rhbz#2170469 - Create package samba-tools</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.4-6" date="1676548801">- resolves: rhbz#2170468 - Remove libnetapi dependency from dcerpc</changelog>
</package>
<package pkgid="d794ac197928c0fcb498539580619ed957adca86ab90346eebc090d9587d09f7" name="samba-tools" arch="x86_64">
  <version epoch="0" ver="4.16.4" rel="6.el8_7"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.1-0" date="1651492800">- Update to Samba 4.16.1
- resolves: rhbz#2077468 Rebase Samba to the the latest 4.16.x release</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.2-0" date="1655121600">- Fix rpminspect abidiff
- related: rhbz#2077468 - Rebase Samba to 4.16.2</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.2-1" date="1655208000">- resolves: rhbz#2084162 - Fix printer displays only after 300 seconds timeout</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.3-0" date="1658145600">- related: rhbz#2077468 - Rebase Samba to 4.16.3
- resolves: rhbz#2106672 - The pcap background queue process should not be stopped
- resolves: rhbz#2106263 - Fix crash in rpcd_classic
- resolves: rhbz#2100093 - Fix net ads info returns LDAP server and LDAP server name</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-1" date="1659009600">- Rebase to version 4.16.4
- resolves: rhbz#2108331 - Fix CVE-2022-32742</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-2" date="1661428800">- resolves: rhbz#2120956 - Do not require samba package in python3-samba</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-3" date="1671537600">- resolves: rhbz#2154369 - Fix CVE-2022-38023</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-4" date="1673870400">- related: rhbz#2154369 - Add additional patch for CVE-2022-38023</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.4-5" date="1676548800">- resolves: rhbz#2170394 - Fix share enum
- resolves: rhbz#2170467 - Add to package ctdb dependency for package samba-winbind-clients
- resolves: rhbz#2170468 - Add package dcerpc - fix winbind to retrieve user groups from AD
- resolves: rhbz#2170469 - Create package samba-tools</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.4-6" date="1676548801">- resolves: rhbz#2170468 - Remove libnetapi dependency from dcerpc</changelog>
</package>
<package pkgid="f6471c5c60481e1a888e3ef079ff3b7604a94d2e13a8c9921c907640cfab6846" name="samba-winbind" arch="x86_64">
  <version epoch="0" ver="4.16.4" rel="4.el8_7"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.15.5-7" date="1650456000">- resolves: rhbz#2076505 - PAM Kerberos authentication fails with a clock skew error</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.15.5-8" date="1651060800">- resolves: rhbz#2070522 - Fix UPNs handling in lookup_name*() calls</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.1-0" date="1651492800">- Update to Samba 4.16.1
- resolves: rhbz#2077468 Rebase Samba to the the latest 4.16.x release</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.2-0" date="1655121600">- Fix rpminspect abidiff
- related: rhbz#2077468 - Rebase Samba to 4.16.2</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.2-1" date="1655208000">- resolves: rhbz#2084162 - Fix printer displays only after 300 seconds timeout</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.3-0" date="1658145600">- related: rhbz#2077468 - Rebase Samba to 4.16.3
- resolves: rhbz#2106672 - The pcap background queue process should not be stopped
- resolves: rhbz#2106263 - Fix crash in rpcd_classic
- resolves: rhbz#2100093 - Fix net ads info returns LDAP server and LDAP server name</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-1" date="1659009600">- Rebase to version 4.16.4
- resolves: rhbz#2108331 - Fix CVE-2022-32742</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-2" date="1661428800">- resolves: rhbz#2120956 - Do not require samba package in python3-samba</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-3" date="1671537600">- resolves: rhbz#2154369 - Fix CVE-2022-38023</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-4" date="1673870400">- related: rhbz#2154369 - Add additional patch for CVE-2022-38023</changelog>
</package>
<package pkgid="c1b677691f5c7342151c28808b7fc0ed23a321e47da91080839c45bcfe859911" name="samba-winbind" arch="x86_64">
  <version epoch="0" ver="4.16.4" rel="6.el8_7"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.1-0" date="1651492800">- Update to Samba 4.16.1
- resolves: rhbz#2077468 Rebase Samba to the the latest 4.16.x release</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.2-0" date="1655121600">- Fix rpminspect abidiff
- related: rhbz#2077468 - Rebase Samba to 4.16.2</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.2-1" date="1655208000">- resolves: rhbz#2084162 - Fix printer displays only after 300 seconds timeout</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.3-0" date="1658145600">- related: rhbz#2077468 - Rebase Samba to 4.16.3
- resolves: rhbz#2106672 - The pcap background queue process should not be stopped
- resolves: rhbz#2106263 - Fix crash in rpcd_classic
- resolves: rhbz#2100093 - Fix net ads info returns LDAP server and LDAP server name</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-1" date="1659009600">- Rebase to version 4.16.4
- resolves: rhbz#2108331 - Fix CVE-2022-32742</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-2" date="1661428800">- resolves: rhbz#2120956 - Do not require samba package in python3-samba</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-3" date="1671537600">- resolves: rhbz#2154369 - Fix CVE-2022-38023</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-4" date="1673870400">- related: rhbz#2154369 - Add additional patch for CVE-2022-38023</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.4-5" date="1676548800">- resolves: rhbz#2170394 - Fix share enum
- resolves: rhbz#2170467 - Add to package ctdb dependency for package samba-winbind-clients
- resolves: rhbz#2170468 - Add package dcerpc - fix winbind to retrieve user groups from AD
- resolves: rhbz#2170469 - Create package samba-tools</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.4-6" date="1676548801">- resolves: rhbz#2170468 - Remove libnetapi dependency from dcerpc</changelog>
</package>
<package pkgid="aaec55a131f96b00ded22c3eb707fb64d7fbe4e64851f5a1e0b83990925d7ad3" name="samba-winbind-clients" arch="x86_64">
  <version epoch="0" ver="4.16.4" rel="4.el8_7"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.15.5-7" date="1650456000">- resolves: rhbz#2076505 - PAM Kerberos authentication fails with a clock skew error</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.15.5-8" date="1651060800">- resolves: rhbz#2070522 - Fix UPNs handling in lookup_name*() calls</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.1-0" date="1651492800">- Update to Samba 4.16.1
- resolves: rhbz#2077468 Rebase Samba to the the latest 4.16.x release</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.2-0" date="1655121600">- Fix rpminspect abidiff
- related: rhbz#2077468 - Rebase Samba to 4.16.2</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.2-1" date="1655208000">- resolves: rhbz#2084162 - Fix printer displays only after 300 seconds timeout</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.3-0" date="1658145600">- related: rhbz#2077468 - Rebase Samba to 4.16.3
- resolves: rhbz#2106672 - The pcap background queue process should not be stopped
- resolves: rhbz#2106263 - Fix crash in rpcd_classic
- resolves: rhbz#2100093 - Fix net ads info returns LDAP server and LDAP server name</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-1" date="1659009600">- Rebase to version 4.16.4
- resolves: rhbz#2108331 - Fix CVE-2022-32742</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-2" date="1661428800">- resolves: rhbz#2120956 - Do not require samba package in python3-samba</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-3" date="1671537600">- resolves: rhbz#2154369 - Fix CVE-2022-38023</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-4" date="1673870400">- related: rhbz#2154369 - Add additional patch for CVE-2022-38023</changelog>
</package>
<package pkgid="16ff9afa19cf4e7bb99cb53d05846ee44d5f3b7f4dce324be9f04faf3bb827b0" name="samba-winbind-clients" arch="x86_64">
  <version epoch="0" ver="4.16.4" rel="6.el8_7"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.1-0" date="1651492800">- Update to Samba 4.16.1
- resolves: rhbz#2077468 Rebase Samba to the the latest 4.16.x release</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.2-0" date="1655121600">- Fix rpminspect abidiff
- related: rhbz#2077468 - Rebase Samba to 4.16.2</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.2-1" date="1655208000">- resolves: rhbz#2084162 - Fix printer displays only after 300 seconds timeout</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.3-0" date="1658145600">- related: rhbz#2077468 - Rebase Samba to 4.16.3
- resolves: rhbz#2106672 - The pcap background queue process should not be stopped
- resolves: rhbz#2106263 - Fix crash in rpcd_classic
- resolves: rhbz#2100093 - Fix net ads info returns LDAP server and LDAP server name</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-1" date="1659009600">- Rebase to version 4.16.4
- resolves: rhbz#2108331 - Fix CVE-2022-32742</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-2" date="1661428800">- resolves: rhbz#2120956 - Do not require samba package in python3-samba</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-3" date="1671537600">- resolves: rhbz#2154369 - Fix CVE-2022-38023</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-4" date="1673870400">- related: rhbz#2154369 - Add additional patch for CVE-2022-38023</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.4-5" date="1676548800">- resolves: rhbz#2170394 - Fix share enum
- resolves: rhbz#2170467 - Add to package ctdb dependency for package samba-winbind-clients
- resolves: rhbz#2170468 - Add package dcerpc - fix winbind to retrieve user groups from AD
- resolves: rhbz#2170469 - Create package samba-tools</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.4-6" date="1676548801">- resolves: rhbz#2170468 - Remove libnetapi dependency from dcerpc</changelog>
</package>
<package pkgid="054584ecd4355609e83d64548352c22e7fe642e6d86ee4426b424b73d6811a40" name="samba-winbind-krb5-locator" arch="x86_64">
  <version epoch="0" ver="4.16.4" rel="4.el8_7"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.15.5-7" date="1650456000">- resolves: rhbz#2076505 - PAM Kerberos authentication fails with a clock skew error</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.15.5-8" date="1651060800">- resolves: rhbz#2070522 - Fix UPNs handling in lookup_name*() calls</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.1-0" date="1651492800">- Update to Samba 4.16.1
- resolves: rhbz#2077468 Rebase Samba to the the latest 4.16.x release</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.2-0" date="1655121600">- Fix rpminspect abidiff
- related: rhbz#2077468 - Rebase Samba to 4.16.2</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.2-1" date="1655208000">- resolves: rhbz#2084162 - Fix printer displays only after 300 seconds timeout</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.3-0" date="1658145600">- related: rhbz#2077468 - Rebase Samba to 4.16.3
- resolves: rhbz#2106672 - The pcap background queue process should not be stopped
- resolves: rhbz#2106263 - Fix crash in rpcd_classic
- resolves: rhbz#2100093 - Fix net ads info returns LDAP server and LDAP server name</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-1" date="1659009600">- Rebase to version 4.16.4
- resolves: rhbz#2108331 - Fix CVE-2022-32742</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-2" date="1661428800">- resolves: rhbz#2120956 - Do not require samba package in python3-samba</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-3" date="1671537600">- resolves: rhbz#2154369 - Fix CVE-2022-38023</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-4" date="1673870400">- related: rhbz#2154369 - Add additional patch for CVE-2022-38023</changelog>
</package>
<package pkgid="8208c0fc95293457c43567530c08920508408044bfedca75d69068c5d38e9df1" name="samba-winbind-krb5-locator" arch="x86_64">
  <version epoch="0" ver="4.16.4" rel="6.el8_7"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.1-0" date="1651492800">- Update to Samba 4.16.1
- resolves: rhbz#2077468 Rebase Samba to the the latest 4.16.x release</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.2-0" date="1655121600">- Fix rpminspect abidiff
- related: rhbz#2077468 - Rebase Samba to 4.16.2</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.2-1" date="1655208000">- resolves: rhbz#2084162 - Fix printer displays only after 300 seconds timeout</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.3-0" date="1658145600">- related: rhbz#2077468 - Rebase Samba to 4.16.3
- resolves: rhbz#2106672 - The pcap background queue process should not be stopped
- resolves: rhbz#2106263 - Fix crash in rpcd_classic
- resolves: rhbz#2100093 - Fix net ads info returns LDAP server and LDAP server name</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-1" date="1659009600">- Rebase to version 4.16.4
- resolves: rhbz#2108331 - Fix CVE-2022-32742</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-2" date="1661428800">- resolves: rhbz#2120956 - Do not require samba package in python3-samba</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-3" date="1671537600">- resolves: rhbz#2154369 - Fix CVE-2022-38023</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-4" date="1673870400">- related: rhbz#2154369 - Add additional patch for CVE-2022-38023</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.4-5" date="1676548800">- resolves: rhbz#2170394 - Fix share enum
- resolves: rhbz#2170467 - Add to package ctdb dependency for package samba-winbind-clients
- resolves: rhbz#2170468 - Add package dcerpc - fix winbind to retrieve user groups from AD
- resolves: rhbz#2170469 - Create package samba-tools</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.4-6" date="1676548801">- resolves: rhbz#2170468 - Remove libnetapi dependency from dcerpc</changelog>
</package>
<package pkgid="6c4de4cb66a643bed01fe86d8fdb728649180eae296945c424ffc9e885ec8aa1" name="samba-winbind-modules" arch="i686">
  <version epoch="0" ver="4.16.4" rel="4.el8_7"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.15.5-7" date="1650456000">- resolves: rhbz#2076505 - PAM Kerberos authentication fails with a clock skew error</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.15.5-8" date="1651060800">- resolves: rhbz#2070522 - Fix UPNs handling in lookup_name*() calls</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.1-0" date="1651492800">- Update to Samba 4.16.1
- resolves: rhbz#2077468 Rebase Samba to the the latest 4.16.x release</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.2-0" date="1655121600">- Fix rpminspect abidiff
- related: rhbz#2077468 - Rebase Samba to 4.16.2</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.2-1" date="1655208000">- resolves: rhbz#2084162 - Fix printer displays only after 300 seconds timeout</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.3-0" date="1658145600">- related: rhbz#2077468 - Rebase Samba to 4.16.3
- resolves: rhbz#2106672 - The pcap background queue process should not be stopped
- resolves: rhbz#2106263 - Fix crash in rpcd_classic
- resolves: rhbz#2100093 - Fix net ads info returns LDAP server and LDAP server name</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-1" date="1659009600">- Rebase to version 4.16.4
- resolves: rhbz#2108331 - Fix CVE-2022-32742</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-2" date="1661428800">- resolves: rhbz#2120956 - Do not require samba package in python3-samba</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-3" date="1671537600">- resolves: rhbz#2154369 - Fix CVE-2022-38023</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-4" date="1673870400">- related: rhbz#2154369 - Add additional patch for CVE-2022-38023</changelog>
</package>
<package pkgid="e985767b81c9e8eb9dce33a518a64bcb5b1c8e52a5e966d4197c92a072dda7dc" name="samba-winbind-modules" arch="x86_64">
  <version epoch="0" ver="4.16.4" rel="4.el8_7"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.15.5-7" date="1650456000">- resolves: rhbz#2076505 - PAM Kerberos authentication fails with a clock skew error</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.15.5-8" date="1651060800">- resolves: rhbz#2070522 - Fix UPNs handling in lookup_name*() calls</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.1-0" date="1651492800">- Update to Samba 4.16.1
- resolves: rhbz#2077468 Rebase Samba to the the latest 4.16.x release</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.2-0" date="1655121600">- Fix rpminspect abidiff
- related: rhbz#2077468 - Rebase Samba to 4.16.2</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.2-1" date="1655208000">- resolves: rhbz#2084162 - Fix printer displays only after 300 seconds timeout</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.3-0" date="1658145600">- related: rhbz#2077468 - Rebase Samba to 4.16.3
- resolves: rhbz#2106672 - The pcap background queue process should not be stopped
- resolves: rhbz#2106263 - Fix crash in rpcd_classic
- resolves: rhbz#2100093 - Fix net ads info returns LDAP server and LDAP server name</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-1" date="1659009600">- Rebase to version 4.16.4
- resolves: rhbz#2108331 - Fix CVE-2022-32742</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-2" date="1661428800">- resolves: rhbz#2120956 - Do not require samba package in python3-samba</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-3" date="1671537600">- resolves: rhbz#2154369 - Fix CVE-2022-38023</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-4" date="1673870400">- related: rhbz#2154369 - Add additional patch for CVE-2022-38023</changelog>
</package>
<package pkgid="114fc3b97aa198fdf6655addb0e8878df543498e9642942dac3203fe3647b81b" name="samba-winbind-modules" arch="i686">
  <version epoch="0" ver="4.16.4" rel="6.el8_7"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.1-0" date="1651492800">- Update to Samba 4.16.1
- resolves: rhbz#2077468 Rebase Samba to the the latest 4.16.x release</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.2-0" date="1655121600">- Fix rpminspect abidiff
- related: rhbz#2077468 - Rebase Samba to 4.16.2</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.2-1" date="1655208000">- resolves: rhbz#2084162 - Fix printer displays only after 300 seconds timeout</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.3-0" date="1658145600">- related: rhbz#2077468 - Rebase Samba to 4.16.3
- resolves: rhbz#2106672 - The pcap background queue process should not be stopped
- resolves: rhbz#2106263 - Fix crash in rpcd_classic
- resolves: rhbz#2100093 - Fix net ads info returns LDAP server and LDAP server name</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-1" date="1659009600">- Rebase to version 4.16.4
- resolves: rhbz#2108331 - Fix CVE-2022-32742</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-2" date="1661428800">- resolves: rhbz#2120956 - Do not require samba package in python3-samba</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-3" date="1671537600">- resolves: rhbz#2154369 - Fix CVE-2022-38023</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-4" date="1673870400">- related: rhbz#2154369 - Add additional patch for CVE-2022-38023</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.4-5" date="1676548800">- resolves: rhbz#2170394 - Fix share enum
- resolves: rhbz#2170467 - Add to package ctdb dependency for package samba-winbind-clients
- resolves: rhbz#2170468 - Add package dcerpc - fix winbind to retrieve user groups from AD
- resolves: rhbz#2170469 - Create package samba-tools</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.4-6" date="1676548801">- resolves: rhbz#2170468 - Remove libnetapi dependency from dcerpc</changelog>
</package>
<package pkgid="a20fe7024aeb08274aef92b4c7571d65d3950c5ad098f5b35c5e7eb70049d1d9" name="samba-winbind-modules" arch="x86_64">
  <version epoch="0" ver="4.16.4" rel="6.el8_7"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.1-0" date="1651492800">- Update to Samba 4.16.1
- resolves: rhbz#2077468 Rebase Samba to the the latest 4.16.x release</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.2-0" date="1655121600">- Fix rpminspect abidiff
- related: rhbz#2077468 - Rebase Samba to 4.16.2</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.2-1" date="1655208000">- resolves: rhbz#2084162 - Fix printer displays only after 300 seconds timeout</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.3-0" date="1658145600">- related: rhbz#2077468 - Rebase Samba to 4.16.3
- resolves: rhbz#2106672 - The pcap background queue process should not be stopped
- resolves: rhbz#2106263 - Fix crash in rpcd_classic
- resolves: rhbz#2100093 - Fix net ads info returns LDAP server and LDAP server name</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-1" date="1659009600">- Rebase to version 4.16.4
- resolves: rhbz#2108331 - Fix CVE-2022-32742</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-2" date="1661428800">- resolves: rhbz#2120956 - Do not require samba package in python3-samba</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-3" date="1671537600">- resolves: rhbz#2154369 - Fix CVE-2022-38023</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-4" date="1673870400">- related: rhbz#2154369 - Add additional patch for CVE-2022-38023</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.4-5" date="1676548800">- resolves: rhbz#2170394 - Fix share enum
- resolves: rhbz#2170467 - Add to package ctdb dependency for package samba-winbind-clients
- resolves: rhbz#2170468 - Add package dcerpc - fix winbind to retrieve user groups from AD
- resolves: rhbz#2170469 - Create package samba-tools</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.4-6" date="1676548801">- resolves: rhbz#2170468 - Remove libnetapi dependency from dcerpc</changelog>
</package>
<package pkgid="da944305a1b148cef10df7b2b17a13cb451498a9ce37a50f00461d2468ccbc6c" name="samba-winexe" arch="x86_64">
  <version epoch="0" ver="4.16.4" rel="4.el8_7"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.15.5-7" date="1650456000">- resolves: rhbz#2076505 - PAM Kerberos authentication fails with a clock skew error</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.15.5-8" date="1651060800">- resolves: rhbz#2070522 - Fix UPNs handling in lookup_name*() calls</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.1-0" date="1651492800">- Update to Samba 4.16.1
- resolves: rhbz#2077468 Rebase Samba to the the latest 4.16.x release</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.2-0" date="1655121600">- Fix rpminspect abidiff
- related: rhbz#2077468 - Rebase Samba to 4.16.2</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.2-1" date="1655208000">- resolves: rhbz#2084162 - Fix printer displays only after 300 seconds timeout</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.3-0" date="1658145600">- related: rhbz#2077468 - Rebase Samba to 4.16.3
- resolves: rhbz#2106672 - The pcap background queue process should not be stopped
- resolves: rhbz#2106263 - Fix crash in rpcd_classic
- resolves: rhbz#2100093 - Fix net ads info returns LDAP server and LDAP server name</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-1" date="1659009600">- Rebase to version 4.16.4
- resolves: rhbz#2108331 - Fix CVE-2022-32742</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-2" date="1661428800">- resolves: rhbz#2120956 - Do not require samba package in python3-samba</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-3" date="1671537600">- resolves: rhbz#2154369 - Fix CVE-2022-38023</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-4" date="1673870400">- related: rhbz#2154369 - Add additional patch for CVE-2022-38023</changelog>
</package>
<package pkgid="48d686f99bddd72237f6513c9dd47763781650cd60f5fb14fdbdb45fddc2c904" name="samba-winexe" arch="x86_64">
  <version epoch="0" ver="4.16.4" rel="6.el8_7"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.1-0" date="1651492800">- Update to Samba 4.16.1
- resolves: rhbz#2077468 Rebase Samba to the the latest 4.16.x release</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.2-0" date="1655121600">- Fix rpminspect abidiff
- related: rhbz#2077468 - Rebase Samba to 4.16.2</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.2-1" date="1655208000">- resolves: rhbz#2084162 - Fix printer displays only after 300 seconds timeout</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.3-0" date="1658145600">- related: rhbz#2077468 - Rebase Samba to 4.16.3
- resolves: rhbz#2106672 - The pcap background queue process should not be stopped
- resolves: rhbz#2106263 - Fix crash in rpcd_classic
- resolves: rhbz#2100093 - Fix net ads info returns LDAP server and LDAP server name</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-1" date="1659009600">- Rebase to version 4.16.4
- resolves: rhbz#2108331 - Fix CVE-2022-32742</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-2" date="1661428800">- resolves: rhbz#2120956 - Do not require samba package in python3-samba</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-3" date="1671537600">- resolves: rhbz#2154369 - Fix CVE-2022-38023</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.16.4-4" date="1673870400">- related: rhbz#2154369 - Add additional patch for CVE-2022-38023</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.4-5" date="1676548800">- resolves: rhbz#2170394 - Fix share enum
- resolves: rhbz#2170467 - Add to package ctdb dependency for package samba-winbind-clients
- resolves: rhbz#2170468 - Add package dcerpc - fix winbind to retrieve user groups from AD
- resolves: rhbz#2170469 - Create package samba-tools</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.16.4-6" date="1676548801">- resolves: rhbz#2170468 - Remove libnetapi dependency from dcerpc</changelog>
</package>
<package pkgid="2082af94def99078efccb725bfc8100e720f9122254fa22daf1c1fda7613e0ed" name="selinux-policy" arch="noarch">
  <version epoch="0" ver="3.14.3" rel="108.el8_7.1"/>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.3-100" date="1654603200">- Update logging_create_generic_logs() to use create_files_pattern()
Resolves: rhbz#2081907
- Add the auth_read_passwd_file() interface
Resolves: rhbz#2083504
- Allow auditd_t noatsecure for a transition to audisp_remote_t
Resolves: rhbz#2081907
- Add support for samba-dcerpcd
Resolves: rhbz#2083504
- Allow rhsmcertd create generic log files
Resolves: rhbz#1852086
- Allow ctdbd nlmsg_read on netlink_tcpdiag_socket
Resolves: rhbz#2090800</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.3-101" date="1655467200">- Add the init_status_config_transient_files() interface
Resolves: rhbz#2091117
- Allow init_t to rw insights_client unnamed pipe
Resolves: rhbz#2091117
- Update kernel_read_unix_sysctls() for sysctl_net_unix_t handling
Resolves: rhbz#2091117
- Allow insights-client get status of the systemd transient scripts
Resolves: rhbz#2091117
- Allow insights-client execute its private memfd: objects
Resolves: rhbz#2091117
- Update policy for insights-client to run additional commands 2
Resolves: rhbz#2091117
- Do not call systemd_userdbd_stream_connect() for insights-client
Resolves: rhbz#2091117
- Use insights_client_tmp_t instead of insights_client_var_tmp_t
Resolves: rhbz#2091117
- Change space indentation to tab in insights-client
Resolves: rhbz#2091117
- Use socket permissions sets in insights-client
Resolves: rhbz#2091117
- Update policy for insights-client to run additional commands
Resolves: rhbz#2091117
- Change rpm_setattr_db_files() to use a pattern
Resolves: rhbz#2091117
- Add rpm setattr db files macro
Resolves: rhbz#2091117
- Fix insights client
Resolves: rhbz#2091117
- Do not let system_cronjob_t create redhat-access-insights.log with var_log_t
Resolves: rhbz#2091117</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.3-102" date="1655899200">- Allow transition to insights_client named content
Resolves: rhbz#2091117
- Add the insights_client_filetrans_named_content() interface
Resolves: rhbz#2091117
- Update policy for insights-client to run additional commands 3
Resolves: rhbz#2091117</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.3-103" date="1656331200">- Allow domain read usermodehelper state information
Resolves: rhbz#2083504
- Remove all kernel_read_usermodehelper_state() interface calls
Resolves: rhbz#2083504
- Allow samba-dcerpcd work with sssd
Resolves: rhbz#2096825
- Allow winbind_rpcd_t connect to self over a unix_stream_socket
Resolves: rhbz#2096825
- Update samba-dcerpcd policy for kerberos usage
Resolves: rhbz#2096825
- Allow keepalived read the contents of the sysfs filesystem
Resolves: rhbz#2098189
- Update policy for samba-dcerpcd
Resolves: rhbz#2083504
- Remove all kernel_read_usermodehelper_state() interface calls 2/2
Resolves: rhbz#2083504
- Update insights_client_filetrans_named_content()
Resolves: rhbz#2091117</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.3-104" date="1656417600">- Update samba-dcerpcd policy for kerberos usage 2
Resolves: rhbz#2096825</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.3-105" date="1659096000">- Do not call systemd_userdbd_stream_connect() for winbind-rpcd
Resolves: rhbz#2108383
- Update winbind_rpcd_t
Resolves: rhbz#2108383
- Allow irqbalance file transition for pid sock_files and directories
Resolves: rhbz#2111916
- Update irqbalance runtime directory file context
Resolves: rhbz#2111916</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.3-106" date="1660132800">- Allow networkmanager to signal unconfined process
Resolves: rhbz#1918148
- Allow sa-update to get init status and start systemd files
Resolves: rhbz#2011239
- Allow samba-bgqd get a printer list
Resolves: rhbz#2114737
- Allow insights-client rpm named file transitions
Resolves: rhbz#2104913
- Add /var/tmp/insights-archive to insights_client_filetrans_named_content
Resolves: rhbz#2104913
- Use insights_client_filetrans_named_content
Resolves: rhbz#2104913
- Make default file context match with named transitions
Resolves: rhbz#2104913
- Allow rhsmcertd to read insights config files
Resolves: rhbz#2104913
- Label /etc/insights-client/machine-id
Resolves: rhbz#2104913</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.3-107" date="1661428800">- Label 319/udp port with ptp_event_port_t
Resolves: rhbz#2118628
- Allow unconfined and sysadm users transition for /root/.gnupg
Resolves: rhbz#2119507
- Add the kernel_read_proc_files() interface
Resolves: rhbz#2119507
- Add userdom_view_all_users_keys() interface
Resolves: rhbz#2119507
- Allow system_cronjob_t domtrans to rpm_script_t
Resolves: rhbz#2118362
- Allow smbd_t process noatsecure permission for winbind_rpcd_t
Resolves: rhbz#2117199
- Allow chronyd bind UDP sockets to ptp_event ports
Resolves: rhbz#2118628
- Allow samba-bgqd to read a printer list
Resolves: rhbz#2118958
- Add gpg_filetrans_admin_home_content() interface
Resolves: rhbz#2119507
- Update insights-client policy for additional commands execution
Resolves: rhbz#2119507
- Allow gpg read and write generic pty type
Resolves: rhbz#2119507
- Allow chronyc read and write generic pty type
Resolves: rhbz#2119507
- Disable rpm verification on interface_info
Resolves: rhbz#2119472</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.3-108" date="1662638400">- Allow unconfined_service_t insights client content filetrans
Resolves: rhbz#2119507
- Allow nsswitch_domain to connect to systemd-machined using a unix socket
Resolves: rhbz#2119507
- Add init_status_all_script_files() interface
Resolves: rhbz#2119507
- Add dev_dontaudit_write_raw_memory() and dev_read_vsock() interfaces
Resolves: rhbz#2119507
- Update insights-client policy for additional commands execution 5
Resolves: rhbz#2119507
- Confine insights-client systemd unit
Resolves: rhbz#2119507
- Update insights-client policy for additional commands execution 4
Resolves: rhbz#2119507
- Change rhsmcertd_t to insights_client_t in insights-client policy
Resolves: rhbz#2119507
- Allow insights-client send signull to unconfined_service_t
Resolves: rhbz#2119507
- Update insights-client policy for additional commands execution 3
Resolves: rhbz#2119507
- Allow journalctl read init state
Resolves: rhbz#2119507
- Update insights-client policy for additional commands execution 2
Resolves: rhbz#2119507</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.3-108.1" date="1667563200">- Add the files_map_read_etc_files() interface
Resolves: rhbz#2136762
- Allow insights-client manage samba var dirs
Resolves: rhbz#2136762
- Allow insights-client send null signal to rpm and system cronjob
Resolves: rhbz#2136762
- Update rhcd policy for executing additional commands 4
Resolves: rhbz#2136762
- Allow insights-client connect to postgresql with a unix socket
Resolves: rhbz#2136762
- Allow insights-client domtrans on unix_chkpwd execution
Resolves: rhbz#2136762
- Add file context entries for insights-client and rhc
Resolves: rhbz#2136762</changelog>
</package>
<package pkgid="2a6d35913cf0b0a28f0177f435b79fc2d85e27861d06066ebda3bec09df36042" name="selinux-policy" arch="noarch">
  <version epoch="0" ver="3.14.3" rel="108.el8_7.2"/>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.3-101" date="1655467200">- Add the init_status_config_transient_files() interface
Resolves: rhbz#2091117
- Allow init_t to rw insights_client unnamed pipe
Resolves: rhbz#2091117
- Update kernel_read_unix_sysctls() for sysctl_net_unix_t handling
Resolves: rhbz#2091117
- Allow insights-client get status of the systemd transient scripts
Resolves: rhbz#2091117
- Allow insights-client execute its private memfd: objects
Resolves: rhbz#2091117
- Update policy for insights-client to run additional commands 2
Resolves: rhbz#2091117
- Do not call systemd_userdbd_stream_connect() for insights-client
Resolves: rhbz#2091117
- Use insights_client_tmp_t instead of insights_client_var_tmp_t
Resolves: rhbz#2091117
- Change space indentation to tab in insights-client
Resolves: rhbz#2091117
- Use socket permissions sets in insights-client
Resolves: rhbz#2091117
- Update policy for insights-client to run additional commands
Resolves: rhbz#2091117
- Change rpm_setattr_db_files() to use a pattern
Resolves: rhbz#2091117
- Add rpm setattr db files macro
Resolves: rhbz#2091117
- Fix insights client
Resolves: rhbz#2091117
- Do not let system_cronjob_t create redhat-access-insights.log with var_log_t
Resolves: rhbz#2091117</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.3-102" date="1655899200">- Allow transition to insights_client named content
Resolves: rhbz#2091117
- Add the insights_client_filetrans_named_content() interface
Resolves: rhbz#2091117
- Update policy for insights-client to run additional commands 3
Resolves: rhbz#2091117</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.3-103" date="1656331200">- Allow domain read usermodehelper state information
Resolves: rhbz#2083504
- Remove all kernel_read_usermodehelper_state() interface calls
Resolves: rhbz#2083504
- Allow samba-dcerpcd work with sssd
Resolves: rhbz#2096825
- Allow winbind_rpcd_t connect to self over a unix_stream_socket
Resolves: rhbz#2096825
- Update samba-dcerpcd policy for kerberos usage
Resolves: rhbz#2096825
- Allow keepalived read the contents of the sysfs filesystem
Resolves: rhbz#2098189
- Update policy for samba-dcerpcd
Resolves: rhbz#2083504
- Remove all kernel_read_usermodehelper_state() interface calls 2/2
Resolves: rhbz#2083504
- Update insights_client_filetrans_named_content()
Resolves: rhbz#2091117</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.3-104" date="1656417600">- Update samba-dcerpcd policy for kerberos usage 2
Resolves: rhbz#2096825</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.3-105" date="1659096000">- Do not call systemd_userdbd_stream_connect() for winbind-rpcd
Resolves: rhbz#2108383
- Update winbind_rpcd_t
Resolves: rhbz#2108383
- Allow irqbalance file transition for pid sock_files and directories
Resolves: rhbz#2111916
- Update irqbalance runtime directory file context
Resolves: rhbz#2111916</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.3-106" date="1660132800">- Allow networkmanager to signal unconfined process
Resolves: rhbz#1918148
- Allow sa-update to get init status and start systemd files
Resolves: rhbz#2011239
- Allow samba-bgqd get a printer list
Resolves: rhbz#2114737
- Allow insights-client rpm named file transitions
Resolves: rhbz#2104913
- Add /var/tmp/insights-archive to insights_client_filetrans_named_content
Resolves: rhbz#2104913
- Use insights_client_filetrans_named_content
Resolves: rhbz#2104913
- Make default file context match with named transitions
Resolves: rhbz#2104913
- Allow rhsmcertd to read insights config files
Resolves: rhbz#2104913
- Label /etc/insights-client/machine-id
Resolves: rhbz#2104913</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.3-107" date="1661428800">- Label 319/udp port with ptp_event_port_t
Resolves: rhbz#2118628
- Allow unconfined and sysadm users transition for /root/.gnupg
Resolves: rhbz#2119507
- Add the kernel_read_proc_files() interface
Resolves: rhbz#2119507
- Add userdom_view_all_users_keys() interface
Resolves: rhbz#2119507
- Allow system_cronjob_t domtrans to rpm_script_t
Resolves: rhbz#2118362
- Allow smbd_t process noatsecure permission for winbind_rpcd_t
Resolves: rhbz#2117199
- Allow chronyd bind UDP sockets to ptp_event ports
Resolves: rhbz#2118628
- Allow samba-bgqd to read a printer list
Resolves: rhbz#2118958
- Add gpg_filetrans_admin_home_content() interface
Resolves: rhbz#2119507
- Update insights-client policy for additional commands execution
Resolves: rhbz#2119507
- Allow gpg read and write generic pty type
Resolves: rhbz#2119507
- Allow chronyc read and write generic pty type
Resolves: rhbz#2119507
- Disable rpm verification on interface_info
Resolves: rhbz#2119472</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.3-108" date="1662638400">- Allow unconfined_service_t insights client content filetrans
Resolves: rhbz#2119507
- Allow nsswitch_domain to connect to systemd-machined using a unix socket
Resolves: rhbz#2119507
- Add init_status_all_script_files() interface
Resolves: rhbz#2119507
- Add dev_dontaudit_write_raw_memory() and dev_read_vsock() interfaces
Resolves: rhbz#2119507
- Update insights-client policy for additional commands execution 5
Resolves: rhbz#2119507
- Confine insights-client systemd unit
Resolves: rhbz#2119507
- Update insights-client policy for additional commands execution 4
Resolves: rhbz#2119507
- Change rhsmcertd_t to insights_client_t in insights-client policy
Resolves: rhbz#2119507
- Allow insights-client send signull to unconfined_service_t
Resolves: rhbz#2119507
- Update insights-client policy for additional commands execution 3
Resolves: rhbz#2119507
- Allow journalctl read init state
Resolves: rhbz#2119507
- Update insights-client policy for additional commands execution 2
Resolves: rhbz#2119507</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.3-108.1" date="1667563200">- Add the files_map_read_etc_files() interface
Resolves: rhbz#2136762
- Allow insights-client manage samba var dirs
Resolves: rhbz#2136762
- Allow insights-client send null signal to rpm and system cronjob
Resolves: rhbz#2136762
- Update rhcd policy for executing additional commands 4
Resolves: rhbz#2136762
- Allow insights-client connect to postgresql with a unix socket
Resolves: rhbz#2136762
- Allow insights-client domtrans on unix_chkpwd execution
Resolves: rhbz#2136762
- Add file context entries for insights-client and rhc
Resolves: rhbz#2136762</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.3-108.2" date="1676980800">- Add domain_unix_read_all_semaphores() interface
Resolves: rhbz#2170510
- Add interfaces in domain, files, and unconfined modules
Resolves: rhbz#2170510
- Allow insights-client manage fsadm pid files
Resolves: rhbz#2170510
- Allow insights-client work with su and lpstat
Resolves: rhbz#2170510
- Allow insights-client read nvme devices
Resolves: rhbz#2170510
- Allow insights-client tcp connect to all ports
Resolves: rhbz#2170510
- Add insights additional capabilities
Resolves: rhbz#2170510
- Allow insights client work with gluster and pcp
Resolves: rhbz#2170510
- Allow insights-client tcp connect to various ports
Resolves: rhbz#2170510
- Allow insights-client work with pcp and manage user config files
Resolves: rhbz#2170510
- Allow insights-client dbus chat with various services
Resolves: rhbz#2170510
- Allow insights-client dbus chat with abrt
Resolves: rhbz#2170510
- Allow insights client communicate with cupsd, mysqld, openvswitch, redis
Resolves: rhbz#2170510
- Allow insights client read raw memory devices
Resolves: rhbz#2170510
- Allow insights-client domain transition on semanage execution
Resolves: rhbz#2170510
- Allow insights-client create gluster log dir with a transition
Resolves: rhbz#2170510
- Allow insights-client manage generic locks
Resolves: rhbz#2170510
- Allow insights-client unix_read all domain semaphores
Resolves: rhbz#2170510</changelog>
</package>
<package pkgid="a8bfec72285a71bb524ee308a718e526b41500d095ca14260790a10934877a33" name="selinux-policy-devel" arch="noarch">
  <version epoch="0" ver="3.14.3" rel="108.el8_7.1"/>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.3-100" date="1654603200">- Update logging_create_generic_logs() to use create_files_pattern()
Resolves: rhbz#2081907
- Add the auth_read_passwd_file() interface
Resolves: rhbz#2083504
- Allow auditd_t noatsecure for a transition to audisp_remote_t
Resolves: rhbz#2081907
- Add support for samba-dcerpcd
Resolves: rhbz#2083504
- Allow rhsmcertd create generic log files
Resolves: rhbz#1852086
- Allow ctdbd nlmsg_read on netlink_tcpdiag_socket
Resolves: rhbz#2090800</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.3-101" date="1655467200">- Add the init_status_config_transient_files() interface
Resolves: rhbz#2091117
- Allow init_t to rw insights_client unnamed pipe
Resolves: rhbz#2091117
- Update kernel_read_unix_sysctls() for sysctl_net_unix_t handling
Resolves: rhbz#2091117
- Allow insights-client get status of the systemd transient scripts
Resolves: rhbz#2091117
- Allow insights-client execute its private memfd: objects
Resolves: rhbz#2091117
- Update policy for insights-client to run additional commands 2
Resolves: rhbz#2091117
- Do not call systemd_userdbd_stream_connect() for insights-client
Resolves: rhbz#2091117
- Use insights_client_tmp_t instead of insights_client_var_tmp_t
Resolves: rhbz#2091117
- Change space indentation to tab in insights-client
Resolves: rhbz#2091117
- Use socket permissions sets in insights-client
Resolves: rhbz#2091117
- Update policy for insights-client to run additional commands
Resolves: rhbz#2091117
- Change rpm_setattr_db_files() to use a pattern
Resolves: rhbz#2091117
- Add rpm setattr db files macro
Resolves: rhbz#2091117
- Fix insights client
Resolves: rhbz#2091117
- Do not let system_cronjob_t create redhat-access-insights.log with var_log_t
Resolves: rhbz#2091117</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.3-102" date="1655899200">- Allow transition to insights_client named content
Resolves: rhbz#2091117
- Add the insights_client_filetrans_named_content() interface
Resolves: rhbz#2091117
- Update policy for insights-client to run additional commands 3
Resolves: rhbz#2091117</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.3-103" date="1656331200">- Allow domain read usermodehelper state information
Resolves: rhbz#2083504
- Remove all kernel_read_usermodehelper_state() interface calls
Resolves: rhbz#2083504
- Allow samba-dcerpcd work with sssd
Resolves: rhbz#2096825
- Allow winbind_rpcd_t connect to self over a unix_stream_socket
Resolves: rhbz#2096825
- Update samba-dcerpcd policy for kerberos usage
Resolves: rhbz#2096825
- Allow keepalived read the contents of the sysfs filesystem
Resolves: rhbz#2098189
- Update policy for samba-dcerpcd
Resolves: rhbz#2083504
- Remove all kernel_read_usermodehelper_state() interface calls 2/2
Resolves: rhbz#2083504
- Update insights_client_filetrans_named_content()
Resolves: rhbz#2091117</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.3-104" date="1656417600">- Update samba-dcerpcd policy for kerberos usage 2
Resolves: rhbz#2096825</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.3-105" date="1659096000">- Do not call systemd_userdbd_stream_connect() for winbind-rpcd
Resolves: rhbz#2108383
- Update winbind_rpcd_t
Resolves: rhbz#2108383
- Allow irqbalance file transition for pid sock_files and directories
Resolves: rhbz#2111916
- Update irqbalance runtime directory file context
Resolves: rhbz#2111916</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.3-106" date="1660132800">- Allow networkmanager to signal unconfined process
Resolves: rhbz#1918148
- Allow sa-update to get init status and start systemd files
Resolves: rhbz#2011239
- Allow samba-bgqd get a printer list
Resolves: rhbz#2114737
- Allow insights-client rpm named file transitions
Resolves: rhbz#2104913
- Add /var/tmp/insights-archive to insights_client_filetrans_named_content
Resolves: rhbz#2104913
- Use insights_client_filetrans_named_content
Resolves: rhbz#2104913
- Make default file context match with named transitions
Resolves: rhbz#2104913
- Allow rhsmcertd to read insights config files
Resolves: rhbz#2104913
- Label /etc/insights-client/machine-id
Resolves: rhbz#2104913</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.3-107" date="1661428800">- Label 319/udp port with ptp_event_port_t
Resolves: rhbz#2118628
- Allow unconfined and sysadm users transition for /root/.gnupg
Resolves: rhbz#2119507
- Add the kernel_read_proc_files() interface
Resolves: rhbz#2119507
- Add userdom_view_all_users_keys() interface
Resolves: rhbz#2119507
- Allow system_cronjob_t domtrans to rpm_script_t
Resolves: rhbz#2118362
- Allow smbd_t process noatsecure permission for winbind_rpcd_t
Resolves: rhbz#2117199
- Allow chronyd bind UDP sockets to ptp_event ports
Resolves: rhbz#2118628
- Allow samba-bgqd to read a printer list
Resolves: rhbz#2118958
- Add gpg_filetrans_admin_home_content() interface
Resolves: rhbz#2119507
- Update insights-client policy for additional commands execution
Resolves: rhbz#2119507
- Allow gpg read and write generic pty type
Resolves: rhbz#2119507
- Allow chronyc read and write generic pty type
Resolves: rhbz#2119507
- Disable rpm verification on interface_info
Resolves: rhbz#2119472</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.3-108" date="1662638400">- Allow unconfined_service_t insights client content filetrans
Resolves: rhbz#2119507
- Allow nsswitch_domain to connect to systemd-machined using a unix socket
Resolves: rhbz#2119507
- Add init_status_all_script_files() interface
Resolves: rhbz#2119507
- Add dev_dontaudit_write_raw_memory() and dev_read_vsock() interfaces
Resolves: rhbz#2119507
- Update insights-client policy for additional commands execution 5
Resolves: rhbz#2119507
- Confine insights-client systemd unit
Resolves: rhbz#2119507
- Update insights-client policy for additional commands execution 4
Resolves: rhbz#2119507
- Change rhsmcertd_t to insights_client_t in insights-client policy
Resolves: rhbz#2119507
- Allow insights-client send signull to unconfined_service_t
Resolves: rhbz#2119507
- Update insights-client policy for additional commands execution 3
Resolves: rhbz#2119507
- Allow journalctl read init state
Resolves: rhbz#2119507
- Update insights-client policy for additional commands execution 2
Resolves: rhbz#2119507</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.3-108.1" date="1667563200">- Add the files_map_read_etc_files() interface
Resolves: rhbz#2136762
- Allow insights-client manage samba var dirs
Resolves: rhbz#2136762
- Allow insights-client send null signal to rpm and system cronjob
Resolves: rhbz#2136762
- Update rhcd policy for executing additional commands 4
Resolves: rhbz#2136762
- Allow insights-client connect to postgresql with a unix socket
Resolves: rhbz#2136762
- Allow insights-client domtrans on unix_chkpwd execution
Resolves: rhbz#2136762
- Add file context entries for insights-client and rhc
Resolves: rhbz#2136762</changelog>
</package>
<package pkgid="8740833ba6be655fcac550b47bef813a408f2adf101cc243df2b9ab10c4086de" name="selinux-policy-devel" arch="noarch">
  <version epoch="0" ver="3.14.3" rel="108.el8_7.2"/>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.3-101" date="1655467200">- Add the init_status_config_transient_files() interface
Resolves: rhbz#2091117
- Allow init_t to rw insights_client unnamed pipe
Resolves: rhbz#2091117
- Update kernel_read_unix_sysctls() for sysctl_net_unix_t handling
Resolves: rhbz#2091117
- Allow insights-client get status of the systemd transient scripts
Resolves: rhbz#2091117
- Allow insights-client execute its private memfd: objects
Resolves: rhbz#2091117
- Update policy for insights-client to run additional commands 2
Resolves: rhbz#2091117
- Do not call systemd_userdbd_stream_connect() for insights-client
Resolves: rhbz#2091117
- Use insights_client_tmp_t instead of insights_client_var_tmp_t
Resolves: rhbz#2091117
- Change space indentation to tab in insights-client
Resolves: rhbz#2091117
- Use socket permissions sets in insights-client
Resolves: rhbz#2091117
- Update policy for insights-client to run additional commands
Resolves: rhbz#2091117
- Change rpm_setattr_db_files() to use a pattern
Resolves: rhbz#2091117
- Add rpm setattr db files macro
Resolves: rhbz#2091117
- Fix insights client
Resolves: rhbz#2091117
- Do not let system_cronjob_t create redhat-access-insights.log with var_log_t
Resolves: rhbz#2091117</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.3-102" date="1655899200">- Allow transition to insights_client named content
Resolves: rhbz#2091117
- Add the insights_client_filetrans_named_content() interface
Resolves: rhbz#2091117
- Update policy for insights-client to run additional commands 3
Resolves: rhbz#2091117</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.3-103" date="1656331200">- Allow domain read usermodehelper state information
Resolves: rhbz#2083504
- Remove all kernel_read_usermodehelper_state() interface calls
Resolves: rhbz#2083504
- Allow samba-dcerpcd work with sssd
Resolves: rhbz#2096825
- Allow winbind_rpcd_t connect to self over a unix_stream_socket
Resolves: rhbz#2096825
- Update samba-dcerpcd policy for kerberos usage
Resolves: rhbz#2096825
- Allow keepalived read the contents of the sysfs filesystem
Resolves: rhbz#2098189
- Update policy for samba-dcerpcd
Resolves: rhbz#2083504
- Remove all kernel_read_usermodehelper_state() interface calls 2/2
Resolves: rhbz#2083504
- Update insights_client_filetrans_named_content()
Resolves: rhbz#2091117</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.3-104" date="1656417600">- Update samba-dcerpcd policy for kerberos usage 2
Resolves: rhbz#2096825</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.3-105" date="1659096000">- Do not call systemd_userdbd_stream_connect() for winbind-rpcd
Resolves: rhbz#2108383
- Update winbind_rpcd_t
Resolves: rhbz#2108383
- Allow irqbalance file transition for pid sock_files and directories
Resolves: rhbz#2111916
- Update irqbalance runtime directory file context
Resolves: rhbz#2111916</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.3-106" date="1660132800">- Allow networkmanager to signal unconfined process
Resolves: rhbz#1918148
- Allow sa-update to get init status and start systemd files
Resolves: rhbz#2011239
- Allow samba-bgqd get a printer list
Resolves: rhbz#2114737
- Allow insights-client rpm named file transitions
Resolves: rhbz#2104913
- Add /var/tmp/insights-archive to insights_client_filetrans_named_content
Resolves: rhbz#2104913
- Use insights_client_filetrans_named_content
Resolves: rhbz#2104913
- Make default file context match with named transitions
Resolves: rhbz#2104913
- Allow rhsmcertd to read insights config files
Resolves: rhbz#2104913
- Label /etc/insights-client/machine-id
Resolves: rhbz#2104913</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.3-107" date="1661428800">- Label 319/udp port with ptp_event_port_t
Resolves: rhbz#2118628
- Allow unconfined and sysadm users transition for /root/.gnupg
Resolves: rhbz#2119507
- Add the kernel_read_proc_files() interface
Resolves: rhbz#2119507
- Add userdom_view_all_users_keys() interface
Resolves: rhbz#2119507
- Allow system_cronjob_t domtrans to rpm_script_t
Resolves: rhbz#2118362
- Allow smbd_t process noatsecure permission for winbind_rpcd_t
Resolves: rhbz#2117199
- Allow chronyd bind UDP sockets to ptp_event ports
Resolves: rhbz#2118628
- Allow samba-bgqd to read a printer list
Resolves: rhbz#2118958
- Add gpg_filetrans_admin_home_content() interface
Resolves: rhbz#2119507
- Update insights-client policy for additional commands execution
Resolves: rhbz#2119507
- Allow gpg read and write generic pty type
Resolves: rhbz#2119507
- Allow chronyc read and write generic pty type
Resolves: rhbz#2119507
- Disable rpm verification on interface_info
Resolves: rhbz#2119472</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.3-108" date="1662638400">- Allow unconfined_service_t insights client content filetrans
Resolves: rhbz#2119507
- Allow nsswitch_domain to connect to systemd-machined using a unix socket
Resolves: rhbz#2119507
- Add init_status_all_script_files() interface
Resolves: rhbz#2119507
- Add dev_dontaudit_write_raw_memory() and dev_read_vsock() interfaces
Resolves: rhbz#2119507
- Update insights-client policy for additional commands execution 5
Resolves: rhbz#2119507
- Confine insights-client systemd unit
Resolves: rhbz#2119507
- Update insights-client policy for additional commands execution 4
Resolves: rhbz#2119507
- Change rhsmcertd_t to insights_client_t in insights-client policy
Resolves: rhbz#2119507
- Allow insights-client send signull to unconfined_service_t
Resolves: rhbz#2119507
- Update insights-client policy for additional commands execution 3
Resolves: rhbz#2119507
- Allow journalctl read init state
Resolves: rhbz#2119507
- Update insights-client policy for additional commands execution 2
Resolves: rhbz#2119507</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.3-108.1" date="1667563200">- Add the files_map_read_etc_files() interface
Resolves: rhbz#2136762
- Allow insights-client manage samba var dirs
Resolves: rhbz#2136762
- Allow insights-client send null signal to rpm and system cronjob
Resolves: rhbz#2136762
- Update rhcd policy for executing additional commands 4
Resolves: rhbz#2136762
- Allow insights-client connect to postgresql with a unix socket
Resolves: rhbz#2136762
- Allow insights-client domtrans on unix_chkpwd execution
Resolves: rhbz#2136762
- Add file context entries for insights-client and rhc
Resolves: rhbz#2136762</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.3-108.2" date="1676980800">- Add domain_unix_read_all_semaphores() interface
Resolves: rhbz#2170510
- Add interfaces in domain, files, and unconfined modules
Resolves: rhbz#2170510
- Allow insights-client manage fsadm pid files
Resolves: rhbz#2170510
- Allow insights-client work with su and lpstat
Resolves: rhbz#2170510
- Allow insights-client read nvme devices
Resolves: rhbz#2170510
- Allow insights-client tcp connect to all ports
Resolves: rhbz#2170510
- Add insights additional capabilities
Resolves: rhbz#2170510
- Allow insights client work with gluster and pcp
Resolves: rhbz#2170510
- Allow insights-client tcp connect to various ports
Resolves: rhbz#2170510
- Allow insights-client work with pcp and manage user config files
Resolves: rhbz#2170510
- Allow insights-client dbus chat with various services
Resolves: rhbz#2170510
- Allow insights-client dbus chat with abrt
Resolves: rhbz#2170510
- Allow insights client communicate with cupsd, mysqld, openvswitch, redis
Resolves: rhbz#2170510
- Allow insights client read raw memory devices
Resolves: rhbz#2170510
- Allow insights-client domain transition on semanage execution
Resolves: rhbz#2170510
- Allow insights-client create gluster log dir with a transition
Resolves: rhbz#2170510
- Allow insights-client manage generic locks
Resolves: rhbz#2170510
- Allow insights-client unix_read all domain semaphores
Resolves: rhbz#2170510</changelog>
</package>
<package pkgid="e9e2a1b87211a67ebe6b735690b98eaadc17592c89268ed25e051ab896635067" name="selinux-policy-doc" arch="noarch">
  <version epoch="0" ver="3.14.3" rel="108.el8_7.1"/>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.3-100" date="1654603200">- Update logging_create_generic_logs() to use create_files_pattern()
Resolves: rhbz#2081907
- Add the auth_read_passwd_file() interface
Resolves: rhbz#2083504
- Allow auditd_t noatsecure for a transition to audisp_remote_t
Resolves: rhbz#2081907
- Add support for samba-dcerpcd
Resolves: rhbz#2083504
- Allow rhsmcertd create generic log files
Resolves: rhbz#1852086
- Allow ctdbd nlmsg_read on netlink_tcpdiag_socket
Resolves: rhbz#2090800</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.3-101" date="1655467200">- Add the init_status_config_transient_files() interface
Resolves: rhbz#2091117
- Allow init_t to rw insights_client unnamed pipe
Resolves: rhbz#2091117
- Update kernel_read_unix_sysctls() for sysctl_net_unix_t handling
Resolves: rhbz#2091117
- Allow insights-client get status of the systemd transient scripts
Resolves: rhbz#2091117
- Allow insights-client execute its private memfd: objects
Resolves: rhbz#2091117
- Update policy for insights-client to run additional commands 2
Resolves: rhbz#2091117
- Do not call systemd_userdbd_stream_connect() for insights-client
Resolves: rhbz#2091117
- Use insights_client_tmp_t instead of insights_client_var_tmp_t
Resolves: rhbz#2091117
- Change space indentation to tab in insights-client
Resolves: rhbz#2091117
- Use socket permissions sets in insights-client
Resolves: rhbz#2091117
- Update policy for insights-client to run additional commands
Resolves: rhbz#2091117
- Change rpm_setattr_db_files() to use a pattern
Resolves: rhbz#2091117
- Add rpm setattr db files macro
Resolves: rhbz#2091117
- Fix insights client
Resolves: rhbz#2091117
- Do not let system_cronjob_t create redhat-access-insights.log with var_log_t
Resolves: rhbz#2091117</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.3-102" date="1655899200">- Allow transition to insights_client named content
Resolves: rhbz#2091117
- Add the insights_client_filetrans_named_content() interface
Resolves: rhbz#2091117
- Update policy for insights-client to run additional commands 3
Resolves: rhbz#2091117</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.3-103" date="1656331200">- Allow domain read usermodehelper state information
Resolves: rhbz#2083504
- Remove all kernel_read_usermodehelper_state() interface calls
Resolves: rhbz#2083504
- Allow samba-dcerpcd work with sssd
Resolves: rhbz#2096825
- Allow winbind_rpcd_t connect to self over a unix_stream_socket
Resolves: rhbz#2096825
- Update samba-dcerpcd policy for kerberos usage
Resolves: rhbz#2096825
- Allow keepalived read the contents of the sysfs filesystem
Resolves: rhbz#2098189
- Update policy for samba-dcerpcd
Resolves: rhbz#2083504
- Remove all kernel_read_usermodehelper_state() interface calls 2/2
Resolves: rhbz#2083504
- Update insights_client_filetrans_named_content()
Resolves: rhbz#2091117</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.3-104" date="1656417600">- Update samba-dcerpcd policy for kerberos usage 2
Resolves: rhbz#2096825</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.3-105" date="1659096000">- Do not call systemd_userdbd_stream_connect() for winbind-rpcd
Resolves: rhbz#2108383
- Update winbind_rpcd_t
Resolves: rhbz#2108383
- Allow irqbalance file transition for pid sock_files and directories
Resolves: rhbz#2111916
- Update irqbalance runtime directory file context
Resolves: rhbz#2111916</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.3-106" date="1660132800">- Allow networkmanager to signal unconfined process
Resolves: rhbz#1918148
- Allow sa-update to get init status and start systemd files
Resolves: rhbz#2011239
- Allow samba-bgqd get a printer list
Resolves: rhbz#2114737
- Allow insights-client rpm named file transitions
Resolves: rhbz#2104913
- Add /var/tmp/insights-archive to insights_client_filetrans_named_content
Resolves: rhbz#2104913
- Use insights_client_filetrans_named_content
Resolves: rhbz#2104913
- Make default file context match with named transitions
Resolves: rhbz#2104913
- Allow rhsmcertd to read insights config files
Resolves: rhbz#2104913
- Label /etc/insights-client/machine-id
Resolves: rhbz#2104913</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.3-107" date="1661428800">- Label 319/udp port with ptp_event_port_t
Resolves: rhbz#2118628
- Allow unconfined and sysadm users transition for /root/.gnupg
Resolves: rhbz#2119507
- Add the kernel_read_proc_files() interface
Resolves: rhbz#2119507
- Add userdom_view_all_users_keys() interface
Resolves: rhbz#2119507
- Allow system_cronjob_t domtrans to rpm_script_t
Resolves: rhbz#2118362
- Allow smbd_t process noatsecure permission for winbind_rpcd_t
Resolves: rhbz#2117199
- Allow chronyd bind UDP sockets to ptp_event ports
Resolves: rhbz#2118628
- Allow samba-bgqd to read a printer list
Resolves: rhbz#2118958
- Add gpg_filetrans_admin_home_content() interface
Resolves: rhbz#2119507
- Update insights-client policy for additional commands execution
Resolves: rhbz#2119507
- Allow gpg read and write generic pty type
Resolves: rhbz#2119507
- Allow chronyc read and write generic pty type
Resolves: rhbz#2119507
- Disable rpm verification on interface_info
Resolves: rhbz#2119472</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.3-108" date="1662638400">- Allow unconfined_service_t insights client content filetrans
Resolves: rhbz#2119507
- Allow nsswitch_domain to connect to systemd-machined using a unix socket
Resolves: rhbz#2119507
- Add init_status_all_script_files() interface
Resolves: rhbz#2119507
- Add dev_dontaudit_write_raw_memory() and dev_read_vsock() interfaces
Resolves: rhbz#2119507
- Update insights-client policy for additional commands execution 5
Resolves: rhbz#2119507
- Confine insights-client systemd unit
Resolves: rhbz#2119507
- Update insights-client policy for additional commands execution 4
Resolves: rhbz#2119507
- Change rhsmcertd_t to insights_client_t in insights-client policy
Resolves: rhbz#2119507
- Allow insights-client send signull to unconfined_service_t
Resolves: rhbz#2119507
- Update insights-client policy for additional commands execution 3
Resolves: rhbz#2119507
- Allow journalctl read init state
Resolves: rhbz#2119507
- Update insights-client policy for additional commands execution 2
Resolves: rhbz#2119507</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.3-108.1" date="1667563200">- Add the files_map_read_etc_files() interface
Resolves: rhbz#2136762
- Allow insights-client manage samba var dirs
Resolves: rhbz#2136762
- Allow insights-client send null signal to rpm and system cronjob
Resolves: rhbz#2136762
- Update rhcd policy for executing additional commands 4
Resolves: rhbz#2136762
- Allow insights-client connect to postgresql with a unix socket
Resolves: rhbz#2136762
- Allow insights-client domtrans on unix_chkpwd execution
Resolves: rhbz#2136762
- Add file context entries for insights-client and rhc
Resolves: rhbz#2136762</changelog>
</package>
<package pkgid="560209c6bc4bc392c32aa7d694fe15e86a51d482dad4e90f03ecc7a95ec25c80" name="selinux-policy-doc" arch="noarch">
  <version epoch="0" ver="3.14.3" rel="108.el8_7.2"/>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.3-101" date="1655467200">- Add the init_status_config_transient_files() interface
Resolves: rhbz#2091117
- Allow init_t to rw insights_client unnamed pipe
Resolves: rhbz#2091117
- Update kernel_read_unix_sysctls() for sysctl_net_unix_t handling
Resolves: rhbz#2091117
- Allow insights-client get status of the systemd transient scripts
Resolves: rhbz#2091117
- Allow insights-client execute its private memfd: objects
Resolves: rhbz#2091117
- Update policy for insights-client to run additional commands 2
Resolves: rhbz#2091117
- Do not call systemd_userdbd_stream_connect() for insights-client
Resolves: rhbz#2091117
- Use insights_client_tmp_t instead of insights_client_var_tmp_t
Resolves: rhbz#2091117
- Change space indentation to tab in insights-client
Resolves: rhbz#2091117
- Use socket permissions sets in insights-client
Resolves: rhbz#2091117
- Update policy for insights-client to run additional commands
Resolves: rhbz#2091117
- Change rpm_setattr_db_files() to use a pattern
Resolves: rhbz#2091117
- Add rpm setattr db files macro
Resolves: rhbz#2091117
- Fix insights client
Resolves: rhbz#2091117
- Do not let system_cronjob_t create redhat-access-insights.log with var_log_t
Resolves: rhbz#2091117</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.3-102" date="1655899200">- Allow transition to insights_client named content
Resolves: rhbz#2091117
- Add the insights_client_filetrans_named_content() interface
Resolves: rhbz#2091117
- Update policy for insights-client to run additional commands 3
Resolves: rhbz#2091117</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.3-103" date="1656331200">- Allow domain read usermodehelper state information
Resolves: rhbz#2083504
- Remove all kernel_read_usermodehelper_state() interface calls
Resolves: rhbz#2083504
- Allow samba-dcerpcd work with sssd
Resolves: rhbz#2096825
- Allow winbind_rpcd_t connect to self over a unix_stream_socket
Resolves: rhbz#2096825
- Update samba-dcerpcd policy for kerberos usage
Resolves: rhbz#2096825
- Allow keepalived read the contents of the sysfs filesystem
Resolves: rhbz#2098189
- Update policy for samba-dcerpcd
Resolves: rhbz#2083504
- Remove all kernel_read_usermodehelper_state() interface calls 2/2
Resolves: rhbz#2083504
- Update insights_client_filetrans_named_content()
Resolves: rhbz#2091117</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.3-104" date="1656417600">- Update samba-dcerpcd policy for kerberos usage 2
Resolves: rhbz#2096825</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.3-105" date="1659096000">- Do not call systemd_userdbd_stream_connect() for winbind-rpcd
Resolves: rhbz#2108383
- Update winbind_rpcd_t
Resolves: rhbz#2108383
- Allow irqbalance file transition for pid sock_files and directories
Resolves: rhbz#2111916
- Update irqbalance runtime directory file context
Resolves: rhbz#2111916</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.3-106" date="1660132800">- Allow networkmanager to signal unconfined process
Resolves: rhbz#1918148
- Allow sa-update to get init status and start systemd files
Resolves: rhbz#2011239
- Allow samba-bgqd get a printer list
Resolves: rhbz#2114737
- Allow insights-client rpm named file transitions
Resolves: rhbz#2104913
- Add /var/tmp/insights-archive to insights_client_filetrans_named_content
Resolves: rhbz#2104913
- Use insights_client_filetrans_named_content
Resolves: rhbz#2104913
- Make default file context match with named transitions
Resolves: rhbz#2104913
- Allow rhsmcertd to read insights config files
Resolves: rhbz#2104913
- Label /etc/insights-client/machine-id
Resolves: rhbz#2104913</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.3-107" date="1661428800">- Label 319/udp port with ptp_event_port_t
Resolves: rhbz#2118628
- Allow unconfined and sysadm users transition for /root/.gnupg
Resolves: rhbz#2119507
- Add the kernel_read_proc_files() interface
Resolves: rhbz#2119507
- Add userdom_view_all_users_keys() interface
Resolves: rhbz#2119507
- Allow system_cronjob_t domtrans to rpm_script_t
Resolves: rhbz#2118362
- Allow smbd_t process noatsecure permission for winbind_rpcd_t
Resolves: rhbz#2117199
- Allow chronyd bind UDP sockets to ptp_event ports
Resolves: rhbz#2118628
- Allow samba-bgqd to read a printer list
Resolves: rhbz#2118958
- Add gpg_filetrans_admin_home_content() interface
Resolves: rhbz#2119507
- Update insights-client policy for additional commands execution
Resolves: rhbz#2119507
- Allow gpg read and write generic pty type
Resolves: rhbz#2119507
- Allow chronyc read and write generic pty type
Resolves: rhbz#2119507
- Disable rpm verification on interface_info
Resolves: rhbz#2119472</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.3-108" date="1662638400">- Allow unconfined_service_t insights client content filetrans
Resolves: rhbz#2119507
- Allow nsswitch_domain to connect to systemd-machined using a unix socket
Resolves: rhbz#2119507
- Add init_status_all_script_files() interface
Resolves: rhbz#2119507
- Add dev_dontaudit_write_raw_memory() and dev_read_vsock() interfaces
Resolves: rhbz#2119507
- Update insights-client policy for additional commands execution 5
Resolves: rhbz#2119507
- Confine insights-client systemd unit
Resolves: rhbz#2119507
- Update insights-client policy for additional commands execution 4
Resolves: rhbz#2119507
- Change rhsmcertd_t to insights_client_t in insights-client policy
Resolves: rhbz#2119507
- Allow insights-client send signull to unconfined_service_t
Resolves: rhbz#2119507
- Update insights-client policy for additional commands execution 3
Resolves: rhbz#2119507
- Allow journalctl read init state
Resolves: rhbz#2119507
- Update insights-client policy for additional commands execution 2
Resolves: rhbz#2119507</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.3-108.1" date="1667563200">- Add the files_map_read_etc_files() interface
Resolves: rhbz#2136762
- Allow insights-client manage samba var dirs
Resolves: rhbz#2136762
- Allow insights-client send null signal to rpm and system cronjob
Resolves: rhbz#2136762
- Update rhcd policy for executing additional commands 4
Resolves: rhbz#2136762
- Allow insights-client connect to postgresql with a unix socket
Resolves: rhbz#2136762
- Allow insights-client domtrans on unix_chkpwd execution
Resolves: rhbz#2136762
- Add file context entries for insights-client and rhc
Resolves: rhbz#2136762</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.3-108.2" date="1676980800">- Add domain_unix_read_all_semaphores() interface
Resolves: rhbz#2170510
- Add interfaces in domain, files, and unconfined modules
Resolves: rhbz#2170510
- Allow insights-client manage fsadm pid files
Resolves: rhbz#2170510
- Allow insights-client work with su and lpstat
Resolves: rhbz#2170510
- Allow insights-client read nvme devices
Resolves: rhbz#2170510
- Allow insights-client tcp connect to all ports
Resolves: rhbz#2170510
- Add insights additional capabilities
Resolves: rhbz#2170510
- Allow insights client work with gluster and pcp
Resolves: rhbz#2170510
- Allow insights-client tcp connect to various ports
Resolves: rhbz#2170510
- Allow insights-client work with pcp and manage user config files
Resolves: rhbz#2170510
- Allow insights-client dbus chat with various services
Resolves: rhbz#2170510
- Allow insights-client dbus chat with abrt
Resolves: rhbz#2170510
- Allow insights client communicate with cupsd, mysqld, openvswitch, redis
Resolves: rhbz#2170510
- Allow insights client read raw memory devices
Resolves: rhbz#2170510
- Allow insights-client domain transition on semanage execution
Resolves: rhbz#2170510
- Allow insights-client create gluster log dir with a transition
Resolves: rhbz#2170510
- Allow insights-client manage generic locks
Resolves: rhbz#2170510
- Allow insights-client unix_read all domain semaphores
Resolves: rhbz#2170510</changelog>
</package>
<package pkgid="cda51dd8c1902b2a0a65ddfc8fc04bb4f96c62772ff7d9c82829719cb31b5c76" name="selinux-policy-minimum" arch="noarch">
  <version epoch="0" ver="3.14.3" rel="108.el8_7.1"/>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.3-100" date="1654603200">- Update logging_create_generic_logs() to use create_files_pattern()
Resolves: rhbz#2081907
- Add the auth_read_passwd_file() interface
Resolves: rhbz#2083504
- Allow auditd_t noatsecure for a transition to audisp_remote_t
Resolves: rhbz#2081907
- Add support for samba-dcerpcd
Resolves: rhbz#2083504
- Allow rhsmcertd create generic log files
Resolves: rhbz#1852086
- Allow ctdbd nlmsg_read on netlink_tcpdiag_socket
Resolves: rhbz#2090800</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.3-101" date="1655467200">- Add the init_status_config_transient_files() interface
Resolves: rhbz#2091117
- Allow init_t to rw insights_client unnamed pipe
Resolves: rhbz#2091117
- Update kernel_read_unix_sysctls() for sysctl_net_unix_t handling
Resolves: rhbz#2091117
- Allow insights-client get status of the systemd transient scripts
Resolves: rhbz#2091117
- Allow insights-client execute its private memfd: objects
Resolves: rhbz#2091117
- Update policy for insights-client to run additional commands 2
Resolves: rhbz#2091117
- Do not call systemd_userdbd_stream_connect() for insights-client
Resolves: rhbz#2091117
- Use insights_client_tmp_t instead of insights_client_var_tmp_t
Resolves: rhbz#2091117
- Change space indentation to tab in insights-client
Resolves: rhbz#2091117
- Use socket permissions sets in insights-client
Resolves: rhbz#2091117
- Update policy for insights-client to run additional commands
Resolves: rhbz#2091117
- Change rpm_setattr_db_files() to use a pattern
Resolves: rhbz#2091117
- Add rpm setattr db files macro
Resolves: rhbz#2091117
- Fix insights client
Resolves: rhbz#2091117
- Do not let system_cronjob_t create redhat-access-insights.log with var_log_t
Resolves: rhbz#2091117</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.3-102" date="1655899200">- Allow transition to insights_client named content
Resolves: rhbz#2091117
- Add the insights_client_filetrans_named_content() interface
Resolves: rhbz#2091117
- Update policy for insights-client to run additional commands 3
Resolves: rhbz#2091117</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.3-103" date="1656331200">- Allow domain read usermodehelper state information
Resolves: rhbz#2083504
- Remove all kernel_read_usermodehelper_state() interface calls
Resolves: rhbz#2083504
- Allow samba-dcerpcd work with sssd
Resolves: rhbz#2096825
- Allow winbind_rpcd_t connect to self over a unix_stream_socket
Resolves: rhbz#2096825
- Update samba-dcerpcd policy for kerberos usage
Resolves: rhbz#2096825
- Allow keepalived read the contents of the sysfs filesystem
Resolves: rhbz#2098189
- Update policy for samba-dcerpcd
Resolves: rhbz#2083504
- Remove all kernel_read_usermodehelper_state() interface calls 2/2
Resolves: rhbz#2083504
- Update insights_client_filetrans_named_content()
Resolves: rhbz#2091117</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.3-104" date="1656417600">- Update samba-dcerpcd policy for kerberos usage 2
Resolves: rhbz#2096825</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.3-105" date="1659096000">- Do not call systemd_userdbd_stream_connect() for winbind-rpcd
Resolves: rhbz#2108383
- Update winbind_rpcd_t
Resolves: rhbz#2108383
- Allow irqbalance file transition for pid sock_files and directories
Resolves: rhbz#2111916
- Update irqbalance runtime directory file context
Resolves: rhbz#2111916</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.3-106" date="1660132800">- Allow networkmanager to signal unconfined process
Resolves: rhbz#1918148
- Allow sa-update to get init status and start systemd files
Resolves: rhbz#2011239
- Allow samba-bgqd get a printer list
Resolves: rhbz#2114737
- Allow insights-client rpm named file transitions
Resolves: rhbz#2104913
- Add /var/tmp/insights-archive to insights_client_filetrans_named_content
Resolves: rhbz#2104913
- Use insights_client_filetrans_named_content
Resolves: rhbz#2104913
- Make default file context match with named transitions
Resolves: rhbz#2104913
- Allow rhsmcertd to read insights config files
Resolves: rhbz#2104913
- Label /etc/insights-client/machine-id
Resolves: rhbz#2104913</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.3-107" date="1661428800">- Label 319/udp port with ptp_event_port_t
Resolves: rhbz#2118628
- Allow unconfined and sysadm users transition for /root/.gnupg
Resolves: rhbz#2119507
- Add the kernel_read_proc_files() interface
Resolves: rhbz#2119507
- Add userdom_view_all_users_keys() interface
Resolves: rhbz#2119507
- Allow system_cronjob_t domtrans to rpm_script_t
Resolves: rhbz#2118362
- Allow smbd_t process noatsecure permission for winbind_rpcd_t
Resolves: rhbz#2117199
- Allow chronyd bind UDP sockets to ptp_event ports
Resolves: rhbz#2118628
- Allow samba-bgqd to read a printer list
Resolves: rhbz#2118958
- Add gpg_filetrans_admin_home_content() interface
Resolves: rhbz#2119507
- Update insights-client policy for additional commands execution
Resolves: rhbz#2119507
- Allow gpg read and write generic pty type
Resolves: rhbz#2119507
- Allow chronyc read and write generic pty type
Resolves: rhbz#2119507
- Disable rpm verification on interface_info
Resolves: rhbz#2119472</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.3-108" date="1662638400">- Allow unconfined_service_t insights client content filetrans
Resolves: rhbz#2119507
- Allow nsswitch_domain to connect to systemd-machined using a unix socket
Resolves: rhbz#2119507
- Add init_status_all_script_files() interface
Resolves: rhbz#2119507
- Add dev_dontaudit_write_raw_memory() and dev_read_vsock() interfaces
Resolves: rhbz#2119507
- Update insights-client policy for additional commands execution 5
Resolves: rhbz#2119507
- Confine insights-client systemd unit
Resolves: rhbz#2119507
- Update insights-client policy for additional commands execution 4
Resolves: rhbz#2119507
- Change rhsmcertd_t to insights_client_t in insights-client policy
Resolves: rhbz#2119507
- Allow insights-client send signull to unconfined_service_t
Resolves: rhbz#2119507
- Update insights-client policy for additional commands execution 3
Resolves: rhbz#2119507
- Allow journalctl read init state
Resolves: rhbz#2119507
- Update insights-client policy for additional commands execution 2
Resolves: rhbz#2119507</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.3-108.1" date="1667563200">- Add the files_map_read_etc_files() interface
Resolves: rhbz#2136762
- Allow insights-client manage samba var dirs
Resolves: rhbz#2136762
- Allow insights-client send null signal to rpm and system cronjob
Resolves: rhbz#2136762
- Update rhcd policy for executing additional commands 4
Resolves: rhbz#2136762
- Allow insights-client connect to postgresql with a unix socket
Resolves: rhbz#2136762
- Allow insights-client domtrans on unix_chkpwd execution
Resolves: rhbz#2136762
- Add file context entries for insights-client and rhc
Resolves: rhbz#2136762</changelog>
</package>
<package pkgid="adfbdd9c6d8c8ca01e5642ae59749d8ce19c0f8acaf74eb3af5f719e0367ae26" name="selinux-policy-minimum" arch="noarch">
  <version epoch="0" ver="3.14.3" rel="108.el8_7.2"/>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.3-101" date="1655467200">- Add the init_status_config_transient_files() interface
Resolves: rhbz#2091117
- Allow init_t to rw insights_client unnamed pipe
Resolves: rhbz#2091117
- Update kernel_read_unix_sysctls() for sysctl_net_unix_t handling
Resolves: rhbz#2091117
- Allow insights-client get status of the systemd transient scripts
Resolves: rhbz#2091117
- Allow insights-client execute its private memfd: objects
Resolves: rhbz#2091117
- Update policy for insights-client to run additional commands 2
Resolves: rhbz#2091117
- Do not call systemd_userdbd_stream_connect() for insights-client
Resolves: rhbz#2091117
- Use insights_client_tmp_t instead of insights_client_var_tmp_t
Resolves: rhbz#2091117
- Change space indentation to tab in insights-client
Resolves: rhbz#2091117
- Use socket permissions sets in insights-client
Resolves: rhbz#2091117
- Update policy for insights-client to run additional commands
Resolves: rhbz#2091117
- Change rpm_setattr_db_files() to use a pattern
Resolves: rhbz#2091117
- Add rpm setattr db files macro
Resolves: rhbz#2091117
- Fix insights client
Resolves: rhbz#2091117
- Do not let system_cronjob_t create redhat-access-insights.log with var_log_t
Resolves: rhbz#2091117</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.3-102" date="1655899200">- Allow transition to insights_client named content
Resolves: rhbz#2091117
- Add the insights_client_filetrans_named_content() interface
Resolves: rhbz#2091117
- Update policy for insights-client to run additional commands 3
Resolves: rhbz#2091117</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.3-103" date="1656331200">- Allow domain read usermodehelper state information
Resolves: rhbz#2083504
- Remove all kernel_read_usermodehelper_state() interface calls
Resolves: rhbz#2083504
- Allow samba-dcerpcd work with sssd
Resolves: rhbz#2096825
- Allow winbind_rpcd_t connect to self over a unix_stream_socket
Resolves: rhbz#2096825
- Update samba-dcerpcd policy for kerberos usage
Resolves: rhbz#2096825
- Allow keepalived read the contents of the sysfs filesystem
Resolves: rhbz#2098189
- Update policy for samba-dcerpcd
Resolves: rhbz#2083504
- Remove all kernel_read_usermodehelper_state() interface calls 2/2
Resolves: rhbz#2083504
- Update insights_client_filetrans_named_content()
Resolves: rhbz#2091117</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.3-104" date="1656417600">- Update samba-dcerpcd policy for kerberos usage 2
Resolves: rhbz#2096825</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.3-105" date="1659096000">- Do not call systemd_userdbd_stream_connect() for winbind-rpcd
Resolves: rhbz#2108383
- Update winbind_rpcd_t
Resolves: rhbz#2108383
- Allow irqbalance file transition for pid sock_files and directories
Resolves: rhbz#2111916
- Update irqbalance runtime directory file context
Resolves: rhbz#2111916</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.3-106" date="1660132800">- Allow networkmanager to signal unconfined process
Resolves: rhbz#1918148
- Allow sa-update to get init status and start systemd files
Resolves: rhbz#2011239
- Allow samba-bgqd get a printer list
Resolves: rhbz#2114737
- Allow insights-client rpm named file transitions
Resolves: rhbz#2104913
- Add /var/tmp/insights-archive to insights_client_filetrans_named_content
Resolves: rhbz#2104913
- Use insights_client_filetrans_named_content
Resolves: rhbz#2104913
- Make default file context match with named transitions
Resolves: rhbz#2104913
- Allow rhsmcertd to read insights config files
Resolves: rhbz#2104913
- Label /etc/insights-client/machine-id
Resolves: rhbz#2104913</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.3-107" date="1661428800">- Label 319/udp port with ptp_event_port_t
Resolves: rhbz#2118628
- Allow unconfined and sysadm users transition for /root/.gnupg
Resolves: rhbz#2119507
- Add the kernel_read_proc_files() interface
Resolves: rhbz#2119507
- Add userdom_view_all_users_keys() interface
Resolves: rhbz#2119507
- Allow system_cronjob_t domtrans to rpm_script_t
Resolves: rhbz#2118362
- Allow smbd_t process noatsecure permission for winbind_rpcd_t
Resolves: rhbz#2117199
- Allow chronyd bind UDP sockets to ptp_event ports
Resolves: rhbz#2118628
- Allow samba-bgqd to read a printer list
Resolves: rhbz#2118958
- Add gpg_filetrans_admin_home_content() interface
Resolves: rhbz#2119507
- Update insights-client policy for additional commands execution
Resolves: rhbz#2119507
- Allow gpg read and write generic pty type
Resolves: rhbz#2119507
- Allow chronyc read and write generic pty type
Resolves: rhbz#2119507
- Disable rpm verification on interface_info
Resolves: rhbz#2119472</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.3-108" date="1662638400">- Allow unconfined_service_t insights client content filetrans
Resolves: rhbz#2119507
- Allow nsswitch_domain to connect to systemd-machined using a unix socket
Resolves: rhbz#2119507
- Add init_status_all_script_files() interface
Resolves: rhbz#2119507
- Add dev_dontaudit_write_raw_memory() and dev_read_vsock() interfaces
Resolves: rhbz#2119507
- Update insights-client policy for additional commands execution 5
Resolves: rhbz#2119507
- Confine insights-client systemd unit
Resolves: rhbz#2119507
- Update insights-client policy for additional commands execution 4
Resolves: rhbz#2119507
- Change rhsmcertd_t to insights_client_t in insights-client policy
Resolves: rhbz#2119507
- Allow insights-client send signull to unconfined_service_t
Resolves: rhbz#2119507
- Update insights-client policy for additional commands execution 3
Resolves: rhbz#2119507
- Allow journalctl read init state
Resolves: rhbz#2119507
- Update insights-client policy for additional commands execution 2
Resolves: rhbz#2119507</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.3-108.1" date="1667563200">- Add the files_map_read_etc_files() interface
Resolves: rhbz#2136762
- Allow insights-client manage samba var dirs
Resolves: rhbz#2136762
- Allow insights-client send null signal to rpm and system cronjob
Resolves: rhbz#2136762
- Update rhcd policy for executing additional commands 4
Resolves: rhbz#2136762
- Allow insights-client connect to postgresql with a unix socket
Resolves: rhbz#2136762
- Allow insights-client domtrans on unix_chkpwd execution
Resolves: rhbz#2136762
- Add file context entries for insights-client and rhc
Resolves: rhbz#2136762</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.3-108.2" date="1676980800">- Add domain_unix_read_all_semaphores() interface
Resolves: rhbz#2170510
- Add interfaces in domain, files, and unconfined modules
Resolves: rhbz#2170510
- Allow insights-client manage fsadm pid files
Resolves: rhbz#2170510
- Allow insights-client work with su and lpstat
Resolves: rhbz#2170510
- Allow insights-client read nvme devices
Resolves: rhbz#2170510
- Allow insights-client tcp connect to all ports
Resolves: rhbz#2170510
- Add insights additional capabilities
Resolves: rhbz#2170510
- Allow insights client work with gluster and pcp
Resolves: rhbz#2170510
- Allow insights-client tcp connect to various ports
Resolves: rhbz#2170510
- Allow insights-client work with pcp and manage user config files
Resolves: rhbz#2170510
- Allow insights-client dbus chat with various services
Resolves: rhbz#2170510
- Allow insights-client dbus chat with abrt
Resolves: rhbz#2170510
- Allow insights client communicate with cupsd, mysqld, openvswitch, redis
Resolves: rhbz#2170510
- Allow insights client read raw memory devices
Resolves: rhbz#2170510
- Allow insights-client domain transition on semanage execution
Resolves: rhbz#2170510
- Allow insights-client create gluster log dir with a transition
Resolves: rhbz#2170510
- Allow insights-client manage generic locks
Resolves: rhbz#2170510
- Allow insights-client unix_read all domain semaphores
Resolves: rhbz#2170510</changelog>
</package>
<package pkgid="c37db6936d71c26535115e6ff42f45d40ae2a080dcc3290030d58b51a0028a79" name="selinux-policy-mls" arch="noarch">
  <version epoch="0" ver="3.14.3" rel="108.el8_7.1"/>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.3-100" date="1654603200">- Update logging_create_generic_logs() to use create_files_pattern()
Resolves: rhbz#2081907
- Add the auth_read_passwd_file() interface
Resolves: rhbz#2083504
- Allow auditd_t noatsecure for a transition to audisp_remote_t
Resolves: rhbz#2081907
- Add support for samba-dcerpcd
Resolves: rhbz#2083504
- Allow rhsmcertd create generic log files
Resolves: rhbz#1852086
- Allow ctdbd nlmsg_read on netlink_tcpdiag_socket
Resolves: rhbz#2090800</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.3-101" date="1655467200">- Add the init_status_config_transient_files() interface
Resolves: rhbz#2091117
- Allow init_t to rw insights_client unnamed pipe
Resolves: rhbz#2091117
- Update kernel_read_unix_sysctls() for sysctl_net_unix_t handling
Resolves: rhbz#2091117
- Allow insights-client get status of the systemd transient scripts
Resolves: rhbz#2091117
- Allow insights-client execute its private memfd: objects
Resolves: rhbz#2091117
- Update policy for insights-client to run additional commands 2
Resolves: rhbz#2091117
- Do not call systemd_userdbd_stream_connect() for insights-client
Resolves: rhbz#2091117
- Use insights_client_tmp_t instead of insights_client_var_tmp_t
Resolves: rhbz#2091117
- Change space indentation to tab in insights-client
Resolves: rhbz#2091117
- Use socket permissions sets in insights-client
Resolves: rhbz#2091117
- Update policy for insights-client to run additional commands
Resolves: rhbz#2091117
- Change rpm_setattr_db_files() to use a pattern
Resolves: rhbz#2091117
- Add rpm setattr db files macro
Resolves: rhbz#2091117
- Fix insights client
Resolves: rhbz#2091117
- Do not let system_cronjob_t create redhat-access-insights.log with var_log_t
Resolves: rhbz#2091117</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.3-102" date="1655899200">- Allow transition to insights_client named content
Resolves: rhbz#2091117
- Add the insights_client_filetrans_named_content() interface
Resolves: rhbz#2091117
- Update policy for insights-client to run additional commands 3
Resolves: rhbz#2091117</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.3-103" date="1656331200">- Allow domain read usermodehelper state information
Resolves: rhbz#2083504
- Remove all kernel_read_usermodehelper_state() interface calls
Resolves: rhbz#2083504
- Allow samba-dcerpcd work with sssd
Resolves: rhbz#2096825
- Allow winbind_rpcd_t connect to self over a unix_stream_socket
Resolves: rhbz#2096825
- Update samba-dcerpcd policy for kerberos usage
Resolves: rhbz#2096825
- Allow keepalived read the contents of the sysfs filesystem
Resolves: rhbz#2098189
- Update policy for samba-dcerpcd
Resolves: rhbz#2083504
- Remove all kernel_read_usermodehelper_state() interface calls 2/2
Resolves: rhbz#2083504
- Update insights_client_filetrans_named_content()
Resolves: rhbz#2091117</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.3-104" date="1656417600">- Update samba-dcerpcd policy for kerberos usage 2
Resolves: rhbz#2096825</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.3-105" date="1659096000">- Do not call systemd_userdbd_stream_connect() for winbind-rpcd
Resolves: rhbz#2108383
- Update winbind_rpcd_t
Resolves: rhbz#2108383
- Allow irqbalance file transition for pid sock_files and directories
Resolves: rhbz#2111916
- Update irqbalance runtime directory file context
Resolves: rhbz#2111916</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.3-106" date="1660132800">- Allow networkmanager to signal unconfined process
Resolves: rhbz#1918148
- Allow sa-update to get init status and start systemd files
Resolves: rhbz#2011239
- Allow samba-bgqd get a printer list
Resolves: rhbz#2114737
- Allow insights-client rpm named file transitions
Resolves: rhbz#2104913
- Add /var/tmp/insights-archive to insights_client_filetrans_named_content
Resolves: rhbz#2104913
- Use insights_client_filetrans_named_content
Resolves: rhbz#2104913
- Make default file context match with named transitions
Resolves: rhbz#2104913
- Allow rhsmcertd to read insights config files
Resolves: rhbz#2104913
- Label /etc/insights-client/machine-id
Resolves: rhbz#2104913</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.3-107" date="1661428800">- Label 319/udp port with ptp_event_port_t
Resolves: rhbz#2118628
- Allow unconfined and sysadm users transition for /root/.gnupg
Resolves: rhbz#2119507
- Add the kernel_read_proc_files() interface
Resolves: rhbz#2119507
- Add userdom_view_all_users_keys() interface
Resolves: rhbz#2119507
- Allow system_cronjob_t domtrans to rpm_script_t
Resolves: rhbz#2118362
- Allow smbd_t process noatsecure permission for winbind_rpcd_t
Resolves: rhbz#2117199
- Allow chronyd bind UDP sockets to ptp_event ports
Resolves: rhbz#2118628
- Allow samba-bgqd to read a printer list
Resolves: rhbz#2118958
- Add gpg_filetrans_admin_home_content() interface
Resolves: rhbz#2119507
- Update insights-client policy for additional commands execution
Resolves: rhbz#2119507
- Allow gpg read and write generic pty type
Resolves: rhbz#2119507
- Allow chronyc read and write generic pty type
Resolves: rhbz#2119507
- Disable rpm verification on interface_info
Resolves: rhbz#2119472</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.3-108" date="1662638400">- Allow unconfined_service_t insights client content filetrans
Resolves: rhbz#2119507
- Allow nsswitch_domain to connect to systemd-machined using a unix socket
Resolves: rhbz#2119507
- Add init_status_all_script_files() interface
Resolves: rhbz#2119507
- Add dev_dontaudit_write_raw_memory() and dev_read_vsock() interfaces
Resolves: rhbz#2119507
- Update insights-client policy for additional commands execution 5
Resolves: rhbz#2119507
- Confine insights-client systemd unit
Resolves: rhbz#2119507
- Update insights-client policy for additional commands execution 4
Resolves: rhbz#2119507
- Change rhsmcertd_t to insights_client_t in insights-client policy
Resolves: rhbz#2119507
- Allow insights-client send signull to unconfined_service_t
Resolves: rhbz#2119507
- Update insights-client policy for additional commands execution 3
Resolves: rhbz#2119507
- Allow journalctl read init state
Resolves: rhbz#2119507
- Update insights-client policy for additional commands execution 2
Resolves: rhbz#2119507</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.3-108.1" date="1667563200">- Add the files_map_read_etc_files() interface
Resolves: rhbz#2136762
- Allow insights-client manage samba var dirs
Resolves: rhbz#2136762
- Allow insights-client send null signal to rpm and system cronjob
Resolves: rhbz#2136762
- Update rhcd policy for executing additional commands 4
Resolves: rhbz#2136762
- Allow insights-client connect to postgresql with a unix socket
Resolves: rhbz#2136762
- Allow insights-client domtrans on unix_chkpwd execution
Resolves: rhbz#2136762
- Add file context entries for insights-client and rhc
Resolves: rhbz#2136762</changelog>
</package>
<package pkgid="c974169ca5ee8ab25bc5fcc2b811f3eef396a24757a141727f2a72c2fbb4ded2" name="selinux-policy-mls" arch="noarch">
  <version epoch="0" ver="3.14.3" rel="108.el8_7.2"/>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.3-101" date="1655467200">- Add the init_status_config_transient_files() interface
Resolves: rhbz#2091117
- Allow init_t to rw insights_client unnamed pipe
Resolves: rhbz#2091117
- Update kernel_read_unix_sysctls() for sysctl_net_unix_t handling
Resolves: rhbz#2091117
- Allow insights-client get status of the systemd transient scripts
Resolves: rhbz#2091117
- Allow insights-client execute its private memfd: objects
Resolves: rhbz#2091117
- Update policy for insights-client to run additional commands 2
Resolves: rhbz#2091117
- Do not call systemd_userdbd_stream_connect() for insights-client
Resolves: rhbz#2091117
- Use insights_client_tmp_t instead of insights_client_var_tmp_t
Resolves: rhbz#2091117
- Change space indentation to tab in insights-client
Resolves: rhbz#2091117
- Use socket permissions sets in insights-client
Resolves: rhbz#2091117
- Update policy for insights-client to run additional commands
Resolves: rhbz#2091117
- Change rpm_setattr_db_files() to use a pattern
Resolves: rhbz#2091117
- Add rpm setattr db files macro
Resolves: rhbz#2091117
- Fix insights client
Resolves: rhbz#2091117
- Do not let system_cronjob_t create redhat-access-insights.log with var_log_t
Resolves: rhbz#2091117</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.3-102" date="1655899200">- Allow transition to insights_client named content
Resolves: rhbz#2091117
- Add the insights_client_filetrans_named_content() interface
Resolves: rhbz#2091117
- Update policy for insights-client to run additional commands 3
Resolves: rhbz#2091117</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.3-103" date="1656331200">- Allow domain read usermodehelper state information
Resolves: rhbz#2083504
- Remove all kernel_read_usermodehelper_state() interface calls
Resolves: rhbz#2083504
- Allow samba-dcerpcd work with sssd
Resolves: rhbz#2096825
- Allow winbind_rpcd_t connect to self over a unix_stream_socket
Resolves: rhbz#2096825
- Update samba-dcerpcd policy for kerberos usage
Resolves: rhbz#2096825
- Allow keepalived read the contents of the sysfs filesystem
Resolves: rhbz#2098189
- Update policy for samba-dcerpcd
Resolves: rhbz#2083504
- Remove all kernel_read_usermodehelper_state() interface calls 2/2
Resolves: rhbz#2083504
- Update insights_client_filetrans_named_content()
Resolves: rhbz#2091117</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.3-104" date="1656417600">- Update samba-dcerpcd policy for kerberos usage 2
Resolves: rhbz#2096825</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.3-105" date="1659096000">- Do not call systemd_userdbd_stream_connect() for winbind-rpcd
Resolves: rhbz#2108383
- Update winbind_rpcd_t
Resolves: rhbz#2108383
- Allow irqbalance file transition for pid sock_files and directories
Resolves: rhbz#2111916
- Update irqbalance runtime directory file context
Resolves: rhbz#2111916</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.3-106" date="1660132800">- Allow networkmanager to signal unconfined process
Resolves: rhbz#1918148
- Allow sa-update to get init status and start systemd files
Resolves: rhbz#2011239
- Allow samba-bgqd get a printer list
Resolves: rhbz#2114737
- Allow insights-client rpm named file transitions
Resolves: rhbz#2104913
- Add /var/tmp/insights-archive to insights_client_filetrans_named_content
Resolves: rhbz#2104913
- Use insights_client_filetrans_named_content
Resolves: rhbz#2104913
- Make default file context match with named transitions
Resolves: rhbz#2104913
- Allow rhsmcertd to read insights config files
Resolves: rhbz#2104913
- Label /etc/insights-client/machine-id
Resolves: rhbz#2104913</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.3-107" date="1661428800">- Label 319/udp port with ptp_event_port_t
Resolves: rhbz#2118628
- Allow unconfined and sysadm users transition for /root/.gnupg
Resolves: rhbz#2119507
- Add the kernel_read_proc_files() interface
Resolves: rhbz#2119507
- Add userdom_view_all_users_keys() interface
Resolves: rhbz#2119507
- Allow system_cronjob_t domtrans to rpm_script_t
Resolves: rhbz#2118362
- Allow smbd_t process noatsecure permission for winbind_rpcd_t
Resolves: rhbz#2117199
- Allow chronyd bind UDP sockets to ptp_event ports
Resolves: rhbz#2118628
- Allow samba-bgqd to read a printer list
Resolves: rhbz#2118958
- Add gpg_filetrans_admin_home_content() interface
Resolves: rhbz#2119507
- Update insights-client policy for additional commands execution
Resolves: rhbz#2119507
- Allow gpg read and write generic pty type
Resolves: rhbz#2119507
- Allow chronyc read and write generic pty type
Resolves: rhbz#2119507
- Disable rpm verification on interface_info
Resolves: rhbz#2119472</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.3-108" date="1662638400">- Allow unconfined_service_t insights client content filetrans
Resolves: rhbz#2119507
- Allow nsswitch_domain to connect to systemd-machined using a unix socket
Resolves: rhbz#2119507
- Add init_status_all_script_files() interface
Resolves: rhbz#2119507
- Add dev_dontaudit_write_raw_memory() and dev_read_vsock() interfaces
Resolves: rhbz#2119507
- Update insights-client policy for additional commands execution 5
Resolves: rhbz#2119507
- Confine insights-client systemd unit
Resolves: rhbz#2119507
- Update insights-client policy for additional commands execution 4
Resolves: rhbz#2119507
- Change rhsmcertd_t to insights_client_t in insights-client policy
Resolves: rhbz#2119507
- Allow insights-client send signull to unconfined_service_t
Resolves: rhbz#2119507
- Update insights-client policy for additional commands execution 3
Resolves: rhbz#2119507
- Allow journalctl read init state
Resolves: rhbz#2119507
- Update insights-client policy for additional commands execution 2
Resolves: rhbz#2119507</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.3-108.1" date="1667563200">- Add the files_map_read_etc_files() interface
Resolves: rhbz#2136762
- Allow insights-client manage samba var dirs
Resolves: rhbz#2136762
- Allow insights-client send null signal to rpm and system cronjob
Resolves: rhbz#2136762
- Update rhcd policy for executing additional commands 4
Resolves: rhbz#2136762
- Allow insights-client connect to postgresql with a unix socket
Resolves: rhbz#2136762
- Allow insights-client domtrans on unix_chkpwd execution
Resolves: rhbz#2136762
- Add file context entries for insights-client and rhc
Resolves: rhbz#2136762</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.3-108.2" date="1676980800">- Add domain_unix_read_all_semaphores() interface
Resolves: rhbz#2170510
- Add interfaces in domain, files, and unconfined modules
Resolves: rhbz#2170510
- Allow insights-client manage fsadm pid files
Resolves: rhbz#2170510
- Allow insights-client work with su and lpstat
Resolves: rhbz#2170510
- Allow insights-client read nvme devices
Resolves: rhbz#2170510
- Allow insights-client tcp connect to all ports
Resolves: rhbz#2170510
- Add insights additional capabilities
Resolves: rhbz#2170510
- Allow insights client work with gluster and pcp
Resolves: rhbz#2170510
- Allow insights-client tcp connect to various ports
Resolves: rhbz#2170510
- Allow insights-client work with pcp and manage user config files
Resolves: rhbz#2170510
- Allow insights-client dbus chat with various services
Resolves: rhbz#2170510
- Allow insights-client dbus chat with abrt
Resolves: rhbz#2170510
- Allow insights client communicate with cupsd, mysqld, openvswitch, redis
Resolves: rhbz#2170510
- Allow insights client read raw memory devices
Resolves: rhbz#2170510
- Allow insights-client domain transition on semanage execution
Resolves: rhbz#2170510
- Allow insights-client create gluster log dir with a transition
Resolves: rhbz#2170510
- Allow insights-client manage generic locks
Resolves: rhbz#2170510
- Allow insights-client unix_read all domain semaphores
Resolves: rhbz#2170510</changelog>
</package>
<package pkgid="90f47c698b8d9c6eba8444302911fa06a78fa3f7b3f8399c09d130fba193e34b" name="selinux-policy-sandbox" arch="noarch">
  <version epoch="0" ver="3.14.3" rel="108.el8_7.1"/>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.3-100" date="1654603200">- Update logging_create_generic_logs() to use create_files_pattern()
Resolves: rhbz#2081907
- Add the auth_read_passwd_file() interface
Resolves: rhbz#2083504
- Allow auditd_t noatsecure for a transition to audisp_remote_t
Resolves: rhbz#2081907
- Add support for samba-dcerpcd
Resolves: rhbz#2083504
- Allow rhsmcertd create generic log files
Resolves: rhbz#1852086
- Allow ctdbd nlmsg_read on netlink_tcpdiag_socket
Resolves: rhbz#2090800</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.3-101" date="1655467200">- Add the init_status_config_transient_files() interface
Resolves: rhbz#2091117
- Allow init_t to rw insights_client unnamed pipe
Resolves: rhbz#2091117
- Update kernel_read_unix_sysctls() for sysctl_net_unix_t handling
Resolves: rhbz#2091117
- Allow insights-client get status of the systemd transient scripts
Resolves: rhbz#2091117
- Allow insights-client execute its private memfd: objects
Resolves: rhbz#2091117
- Update policy for insights-client to run additional commands 2
Resolves: rhbz#2091117
- Do not call systemd_userdbd_stream_connect() for insights-client
Resolves: rhbz#2091117
- Use insights_client_tmp_t instead of insights_client_var_tmp_t
Resolves: rhbz#2091117
- Change space indentation to tab in insights-client
Resolves: rhbz#2091117
- Use socket permissions sets in insights-client
Resolves: rhbz#2091117
- Update policy for insights-client to run additional commands
Resolves: rhbz#2091117
- Change rpm_setattr_db_files() to use a pattern
Resolves: rhbz#2091117
- Add rpm setattr db files macro
Resolves: rhbz#2091117
- Fix insights client
Resolves: rhbz#2091117
- Do not let system_cronjob_t create redhat-access-insights.log with var_log_t
Resolves: rhbz#2091117</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.3-102" date="1655899200">- Allow transition to insights_client named content
Resolves: rhbz#2091117
- Add the insights_client_filetrans_named_content() interface
Resolves: rhbz#2091117
- Update policy for insights-client to run additional commands 3
Resolves: rhbz#2091117</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.3-103" date="1656331200">- Allow domain read usermodehelper state information
Resolves: rhbz#2083504
- Remove all kernel_read_usermodehelper_state() interface calls
Resolves: rhbz#2083504
- Allow samba-dcerpcd work with sssd
Resolves: rhbz#2096825
- Allow winbind_rpcd_t connect to self over a unix_stream_socket
Resolves: rhbz#2096825
- Update samba-dcerpcd policy for kerberos usage
Resolves: rhbz#2096825
- Allow keepalived read the contents of the sysfs filesystem
Resolves: rhbz#2098189
- Update policy for samba-dcerpcd
Resolves: rhbz#2083504
- Remove all kernel_read_usermodehelper_state() interface calls 2/2
Resolves: rhbz#2083504
- Update insights_client_filetrans_named_content()
Resolves: rhbz#2091117</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.3-104" date="1656417600">- Update samba-dcerpcd policy for kerberos usage 2
Resolves: rhbz#2096825</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.3-105" date="1659096000">- Do not call systemd_userdbd_stream_connect() for winbind-rpcd
Resolves: rhbz#2108383
- Update winbind_rpcd_t
Resolves: rhbz#2108383
- Allow irqbalance file transition for pid sock_files and directories
Resolves: rhbz#2111916
- Update irqbalance runtime directory file context
Resolves: rhbz#2111916</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.3-106" date="1660132800">- Allow networkmanager to signal unconfined process
Resolves: rhbz#1918148
- Allow sa-update to get init status and start systemd files
Resolves: rhbz#2011239
- Allow samba-bgqd get a printer list
Resolves: rhbz#2114737
- Allow insights-client rpm named file transitions
Resolves: rhbz#2104913
- Add /var/tmp/insights-archive to insights_client_filetrans_named_content
Resolves: rhbz#2104913
- Use insights_client_filetrans_named_content
Resolves: rhbz#2104913
- Make default file context match with named transitions
Resolves: rhbz#2104913
- Allow rhsmcertd to read insights config files
Resolves: rhbz#2104913
- Label /etc/insights-client/machine-id
Resolves: rhbz#2104913</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.3-107" date="1661428800">- Label 319/udp port with ptp_event_port_t
Resolves: rhbz#2118628
- Allow unconfined and sysadm users transition for /root/.gnupg
Resolves: rhbz#2119507
- Add the kernel_read_proc_files() interface
Resolves: rhbz#2119507
- Add userdom_view_all_users_keys() interface
Resolves: rhbz#2119507
- Allow system_cronjob_t domtrans to rpm_script_t
Resolves: rhbz#2118362
- Allow smbd_t process noatsecure permission for winbind_rpcd_t
Resolves: rhbz#2117199
- Allow chronyd bind UDP sockets to ptp_event ports
Resolves: rhbz#2118628
- Allow samba-bgqd to read a printer list
Resolves: rhbz#2118958
- Add gpg_filetrans_admin_home_content() interface
Resolves: rhbz#2119507
- Update insights-client policy for additional commands execution
Resolves: rhbz#2119507
- Allow gpg read and write generic pty type
Resolves: rhbz#2119507
- Allow chronyc read and write generic pty type
Resolves: rhbz#2119507
- Disable rpm verification on interface_info
Resolves: rhbz#2119472</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.3-108" date="1662638400">- Allow unconfined_service_t insights client content filetrans
Resolves: rhbz#2119507
- Allow nsswitch_domain to connect to systemd-machined using a unix socket
Resolves: rhbz#2119507
- Add init_status_all_script_files() interface
Resolves: rhbz#2119507
- Add dev_dontaudit_write_raw_memory() and dev_read_vsock() interfaces
Resolves: rhbz#2119507
- Update insights-client policy for additional commands execution 5
Resolves: rhbz#2119507
- Confine insights-client systemd unit
Resolves: rhbz#2119507
- Update insights-client policy for additional commands execution 4
Resolves: rhbz#2119507
- Change rhsmcertd_t to insights_client_t in insights-client policy
Resolves: rhbz#2119507
- Allow insights-client send signull to unconfined_service_t
Resolves: rhbz#2119507
- Update insights-client policy for additional commands execution 3
Resolves: rhbz#2119507
- Allow journalctl read init state
Resolves: rhbz#2119507
- Update insights-client policy for additional commands execution 2
Resolves: rhbz#2119507</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.3-108.1" date="1667563200">- Add the files_map_read_etc_files() interface
Resolves: rhbz#2136762
- Allow insights-client manage samba var dirs
Resolves: rhbz#2136762
- Allow insights-client send null signal to rpm and system cronjob
Resolves: rhbz#2136762
- Update rhcd policy for executing additional commands 4
Resolves: rhbz#2136762
- Allow insights-client connect to postgresql with a unix socket
Resolves: rhbz#2136762
- Allow insights-client domtrans on unix_chkpwd execution
Resolves: rhbz#2136762
- Add file context entries for insights-client and rhc
Resolves: rhbz#2136762</changelog>
</package>
<package pkgid="0d8d1dc54b0656093a31d4d102637b45b77743676df1f3f25e645115bbd7ac69" name="selinux-policy-sandbox" arch="noarch">
  <version epoch="0" ver="3.14.3" rel="108.el8_7.2"/>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.3-101" date="1655467200">- Add the init_status_config_transient_files() interface
Resolves: rhbz#2091117
- Allow init_t to rw insights_client unnamed pipe
Resolves: rhbz#2091117
- Update kernel_read_unix_sysctls() for sysctl_net_unix_t handling
Resolves: rhbz#2091117
- Allow insights-client get status of the systemd transient scripts
Resolves: rhbz#2091117
- Allow insights-client execute its private memfd: objects
Resolves: rhbz#2091117
- Update policy for insights-client to run additional commands 2
Resolves: rhbz#2091117
- Do not call systemd_userdbd_stream_connect() for insights-client
Resolves: rhbz#2091117
- Use insights_client_tmp_t instead of insights_client_var_tmp_t
Resolves: rhbz#2091117
- Change space indentation to tab in insights-client
Resolves: rhbz#2091117
- Use socket permissions sets in insights-client
Resolves: rhbz#2091117
- Update policy for insights-client to run additional commands
Resolves: rhbz#2091117
- Change rpm_setattr_db_files() to use a pattern
Resolves: rhbz#2091117
- Add rpm setattr db files macro
Resolves: rhbz#2091117
- Fix insights client
Resolves: rhbz#2091117
- Do not let system_cronjob_t create redhat-access-insights.log with var_log_t
Resolves: rhbz#2091117</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.3-102" date="1655899200">- Allow transition to insights_client named content
Resolves: rhbz#2091117
- Add the insights_client_filetrans_named_content() interface
Resolves: rhbz#2091117
- Update policy for insights-client to run additional commands 3
Resolves: rhbz#2091117</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.3-103" date="1656331200">- Allow domain read usermodehelper state information
Resolves: rhbz#2083504
- Remove all kernel_read_usermodehelper_state() interface calls
Resolves: rhbz#2083504
- Allow samba-dcerpcd work with sssd
Resolves: rhbz#2096825
- Allow winbind_rpcd_t connect to self over a unix_stream_socket
Resolves: rhbz#2096825
- Update samba-dcerpcd policy for kerberos usage
Resolves: rhbz#2096825
- Allow keepalived read the contents of the sysfs filesystem
Resolves: rhbz#2098189
- Update policy for samba-dcerpcd
Resolves: rhbz#2083504
- Remove all kernel_read_usermodehelper_state() interface calls 2/2
Resolves: rhbz#2083504
- Update insights_client_filetrans_named_content()
Resolves: rhbz#2091117</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.3-104" date="1656417600">- Update samba-dcerpcd policy for kerberos usage 2
Resolves: rhbz#2096825</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.3-105" date="1659096000">- Do not call systemd_userdbd_stream_connect() for winbind-rpcd
Resolves: rhbz#2108383
- Update winbind_rpcd_t
Resolves: rhbz#2108383
- Allow irqbalance file transition for pid sock_files and directories
Resolves: rhbz#2111916
- Update irqbalance runtime directory file context
Resolves: rhbz#2111916</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.3-106" date="1660132800">- Allow networkmanager to signal unconfined process
Resolves: rhbz#1918148
- Allow sa-update to get init status and start systemd files
Resolves: rhbz#2011239
- Allow samba-bgqd get a printer list
Resolves: rhbz#2114737
- Allow insights-client rpm named file transitions
Resolves: rhbz#2104913
- Add /var/tmp/insights-archive to insights_client_filetrans_named_content
Resolves: rhbz#2104913
- Use insights_client_filetrans_named_content
Resolves: rhbz#2104913
- Make default file context match with named transitions
Resolves: rhbz#2104913
- Allow rhsmcertd to read insights config files
Resolves: rhbz#2104913
- Label /etc/insights-client/machine-id
Resolves: rhbz#2104913</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.3-107" date="1661428800">- Label 319/udp port with ptp_event_port_t
Resolves: rhbz#2118628
- Allow unconfined and sysadm users transition for /root/.gnupg
Resolves: rhbz#2119507
- Add the kernel_read_proc_files() interface
Resolves: rhbz#2119507
- Add userdom_view_all_users_keys() interface
Resolves: rhbz#2119507
- Allow system_cronjob_t domtrans to rpm_script_t
Resolves: rhbz#2118362
- Allow smbd_t process noatsecure permission for winbind_rpcd_t
Resolves: rhbz#2117199
- Allow chronyd bind UDP sockets to ptp_event ports
Resolves: rhbz#2118628
- Allow samba-bgqd to read a printer list
Resolves: rhbz#2118958
- Add gpg_filetrans_admin_home_content() interface
Resolves: rhbz#2119507
- Update insights-client policy for additional commands execution
Resolves: rhbz#2119507
- Allow gpg read and write generic pty type
Resolves: rhbz#2119507
- Allow chronyc read and write generic pty type
Resolves: rhbz#2119507
- Disable rpm verification on interface_info
Resolves: rhbz#2119472</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.3-108" date="1662638400">- Allow unconfined_service_t insights client content filetrans
Resolves: rhbz#2119507
- Allow nsswitch_domain to connect to systemd-machined using a unix socket
Resolves: rhbz#2119507
- Add init_status_all_script_files() interface
Resolves: rhbz#2119507
- Add dev_dontaudit_write_raw_memory() and dev_read_vsock() interfaces
Resolves: rhbz#2119507
- Update insights-client policy for additional commands execution 5
Resolves: rhbz#2119507
- Confine insights-client systemd unit
Resolves: rhbz#2119507
- Update insights-client policy for additional commands execution 4
Resolves: rhbz#2119507
- Change rhsmcertd_t to insights_client_t in insights-client policy
Resolves: rhbz#2119507
- Allow insights-client send signull to unconfined_service_t
Resolves: rhbz#2119507
- Update insights-client policy for additional commands execution 3
Resolves: rhbz#2119507
- Allow journalctl read init state
Resolves: rhbz#2119507
- Update insights-client policy for additional commands execution 2
Resolves: rhbz#2119507</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.3-108.1" date="1667563200">- Add the files_map_read_etc_files() interface
Resolves: rhbz#2136762
- Allow insights-client manage samba var dirs
Resolves: rhbz#2136762
- Allow insights-client send null signal to rpm and system cronjob
Resolves: rhbz#2136762
- Update rhcd policy for executing additional commands 4
Resolves: rhbz#2136762
- Allow insights-client connect to postgresql with a unix socket
Resolves: rhbz#2136762
- Allow insights-client domtrans on unix_chkpwd execution
Resolves: rhbz#2136762
- Add file context entries for insights-client and rhc
Resolves: rhbz#2136762</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.3-108.2" date="1676980800">- Add domain_unix_read_all_semaphores() interface
Resolves: rhbz#2170510
- Add interfaces in domain, files, and unconfined modules
Resolves: rhbz#2170510
- Allow insights-client manage fsadm pid files
Resolves: rhbz#2170510
- Allow insights-client work with su and lpstat
Resolves: rhbz#2170510
- Allow insights-client read nvme devices
Resolves: rhbz#2170510
- Allow insights-client tcp connect to all ports
Resolves: rhbz#2170510
- Add insights additional capabilities
Resolves: rhbz#2170510
- Allow insights client work with gluster and pcp
Resolves: rhbz#2170510
- Allow insights-client tcp connect to various ports
Resolves: rhbz#2170510
- Allow insights-client work with pcp and manage user config files
Resolves: rhbz#2170510
- Allow insights-client dbus chat with various services
Resolves: rhbz#2170510
- Allow insights-client dbus chat with abrt
Resolves: rhbz#2170510
- Allow insights client communicate with cupsd, mysqld, openvswitch, redis
Resolves: rhbz#2170510
- Allow insights client read raw memory devices
Resolves: rhbz#2170510
- Allow insights-client domain transition on semanage execution
Resolves: rhbz#2170510
- Allow insights-client create gluster log dir with a transition
Resolves: rhbz#2170510
- Allow insights-client manage generic locks
Resolves: rhbz#2170510
- Allow insights-client unix_read all domain semaphores
Resolves: rhbz#2170510</changelog>
</package>
<package pkgid="67506e96432028e73e11324b55c187b3db29eae629f7cc183936e9ce17d5229f" name="selinux-policy-targeted" arch="noarch">
  <version epoch="0" ver="3.14.3" rel="108.el8_7.1"/>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.3-100" date="1654603200">- Update logging_create_generic_logs() to use create_files_pattern()
Resolves: rhbz#2081907
- Add the auth_read_passwd_file() interface
Resolves: rhbz#2083504
- Allow auditd_t noatsecure for a transition to audisp_remote_t
Resolves: rhbz#2081907
- Add support for samba-dcerpcd
Resolves: rhbz#2083504
- Allow rhsmcertd create generic log files
Resolves: rhbz#1852086
- Allow ctdbd nlmsg_read on netlink_tcpdiag_socket
Resolves: rhbz#2090800</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.3-101" date="1655467200">- Add the init_status_config_transient_files() interface
Resolves: rhbz#2091117
- Allow init_t to rw insights_client unnamed pipe
Resolves: rhbz#2091117
- Update kernel_read_unix_sysctls() for sysctl_net_unix_t handling
Resolves: rhbz#2091117
- Allow insights-client get status of the systemd transient scripts
Resolves: rhbz#2091117
- Allow insights-client execute its private memfd: objects
Resolves: rhbz#2091117
- Update policy for insights-client to run additional commands 2
Resolves: rhbz#2091117
- Do not call systemd_userdbd_stream_connect() for insights-client
Resolves: rhbz#2091117
- Use insights_client_tmp_t instead of insights_client_var_tmp_t
Resolves: rhbz#2091117
- Change space indentation to tab in insights-client
Resolves: rhbz#2091117
- Use socket permissions sets in insights-client
Resolves: rhbz#2091117
- Update policy for insights-client to run additional commands
Resolves: rhbz#2091117
- Change rpm_setattr_db_files() to use a pattern
Resolves: rhbz#2091117
- Add rpm setattr db files macro
Resolves: rhbz#2091117
- Fix insights client
Resolves: rhbz#2091117
- Do not let system_cronjob_t create redhat-access-insights.log with var_log_t
Resolves: rhbz#2091117</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.3-102" date="1655899200">- Allow transition to insights_client named content
Resolves: rhbz#2091117
- Add the insights_client_filetrans_named_content() interface
Resolves: rhbz#2091117
- Update policy for insights-client to run additional commands 3
Resolves: rhbz#2091117</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.3-103" date="1656331200">- Allow domain read usermodehelper state information
Resolves: rhbz#2083504
- Remove all kernel_read_usermodehelper_state() interface calls
Resolves: rhbz#2083504
- Allow samba-dcerpcd work with sssd
Resolves: rhbz#2096825
- Allow winbind_rpcd_t connect to self over a unix_stream_socket
Resolves: rhbz#2096825
- Update samba-dcerpcd policy for kerberos usage
Resolves: rhbz#2096825
- Allow keepalived read the contents of the sysfs filesystem
Resolves: rhbz#2098189
- Update policy for samba-dcerpcd
Resolves: rhbz#2083504
- Remove all kernel_read_usermodehelper_state() interface calls 2/2
Resolves: rhbz#2083504
- Update insights_client_filetrans_named_content()
Resolves: rhbz#2091117</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.3-104" date="1656417600">- Update samba-dcerpcd policy for kerberos usage 2
Resolves: rhbz#2096825</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.3-105" date="1659096000">- Do not call systemd_userdbd_stream_connect() for winbind-rpcd
Resolves: rhbz#2108383
- Update winbind_rpcd_t
Resolves: rhbz#2108383
- Allow irqbalance file transition for pid sock_files and directories
Resolves: rhbz#2111916
- Update irqbalance runtime directory file context
Resolves: rhbz#2111916</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.3-106" date="1660132800">- Allow networkmanager to signal unconfined process
Resolves: rhbz#1918148
- Allow sa-update to get init status and start systemd files
Resolves: rhbz#2011239
- Allow samba-bgqd get a printer list
Resolves: rhbz#2114737
- Allow insights-client rpm named file transitions
Resolves: rhbz#2104913
- Add /var/tmp/insights-archive to insights_client_filetrans_named_content
Resolves: rhbz#2104913
- Use insights_client_filetrans_named_content
Resolves: rhbz#2104913
- Make default file context match with named transitions
Resolves: rhbz#2104913
- Allow rhsmcertd to read insights config files
Resolves: rhbz#2104913
- Label /etc/insights-client/machine-id
Resolves: rhbz#2104913</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.3-107" date="1661428800">- Label 319/udp port with ptp_event_port_t
Resolves: rhbz#2118628
- Allow unconfined and sysadm users transition for /root/.gnupg
Resolves: rhbz#2119507
- Add the kernel_read_proc_files() interface
Resolves: rhbz#2119507
- Add userdom_view_all_users_keys() interface
Resolves: rhbz#2119507
- Allow system_cronjob_t domtrans to rpm_script_t
Resolves: rhbz#2118362
- Allow smbd_t process noatsecure permission for winbind_rpcd_t
Resolves: rhbz#2117199
- Allow chronyd bind UDP sockets to ptp_event ports
Resolves: rhbz#2118628
- Allow samba-bgqd to read a printer list
Resolves: rhbz#2118958
- Add gpg_filetrans_admin_home_content() interface
Resolves: rhbz#2119507
- Update insights-client policy for additional commands execution
Resolves: rhbz#2119507
- Allow gpg read and write generic pty type
Resolves: rhbz#2119507
- Allow chronyc read and write generic pty type
Resolves: rhbz#2119507
- Disable rpm verification on interface_info
Resolves: rhbz#2119472</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.3-108" date="1662638400">- Allow unconfined_service_t insights client content filetrans
Resolves: rhbz#2119507
- Allow nsswitch_domain to connect to systemd-machined using a unix socket
Resolves: rhbz#2119507
- Add init_status_all_script_files() interface
Resolves: rhbz#2119507
- Add dev_dontaudit_write_raw_memory() and dev_read_vsock() interfaces
Resolves: rhbz#2119507
- Update insights-client policy for additional commands execution 5
Resolves: rhbz#2119507
- Confine insights-client systemd unit
Resolves: rhbz#2119507
- Update insights-client policy for additional commands execution 4
Resolves: rhbz#2119507
- Change rhsmcertd_t to insights_client_t in insights-client policy
Resolves: rhbz#2119507
- Allow insights-client send signull to unconfined_service_t
Resolves: rhbz#2119507
- Update insights-client policy for additional commands execution 3
Resolves: rhbz#2119507
- Allow journalctl read init state
Resolves: rhbz#2119507
- Update insights-client policy for additional commands execution 2
Resolves: rhbz#2119507</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.3-108.1" date="1667563200">- Add the files_map_read_etc_files() interface
Resolves: rhbz#2136762
- Allow insights-client manage samba var dirs
Resolves: rhbz#2136762
- Allow insights-client send null signal to rpm and system cronjob
Resolves: rhbz#2136762
- Update rhcd policy for executing additional commands 4
Resolves: rhbz#2136762
- Allow insights-client connect to postgresql with a unix socket
Resolves: rhbz#2136762
- Allow insights-client domtrans on unix_chkpwd execution
Resolves: rhbz#2136762
- Add file context entries for insights-client and rhc
Resolves: rhbz#2136762</changelog>
</package>
<package pkgid="3a9e9a93ecce6de2ad482b997f16425a6cceb4b4555fd730c68ba1dce68b6d00" name="selinux-policy-targeted" arch="noarch">
  <version epoch="0" ver="3.14.3" rel="108.el8_7.2"/>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.3-101" date="1655467200">- Add the init_status_config_transient_files() interface
Resolves: rhbz#2091117
- Allow init_t to rw insights_client unnamed pipe
Resolves: rhbz#2091117
- Update kernel_read_unix_sysctls() for sysctl_net_unix_t handling
Resolves: rhbz#2091117
- Allow insights-client get status of the systemd transient scripts
Resolves: rhbz#2091117
- Allow insights-client execute its private memfd: objects
Resolves: rhbz#2091117
- Update policy for insights-client to run additional commands 2
Resolves: rhbz#2091117
- Do not call systemd_userdbd_stream_connect() for insights-client
Resolves: rhbz#2091117
- Use insights_client_tmp_t instead of insights_client_var_tmp_t
Resolves: rhbz#2091117
- Change space indentation to tab in insights-client
Resolves: rhbz#2091117
- Use socket permissions sets in insights-client
Resolves: rhbz#2091117
- Update policy for insights-client to run additional commands
Resolves: rhbz#2091117
- Change rpm_setattr_db_files() to use a pattern
Resolves: rhbz#2091117
- Add rpm setattr db files macro
Resolves: rhbz#2091117
- Fix insights client
Resolves: rhbz#2091117
- Do not let system_cronjob_t create redhat-access-insights.log with var_log_t
Resolves: rhbz#2091117</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.3-102" date="1655899200">- Allow transition to insights_client named content
Resolves: rhbz#2091117
- Add the insights_client_filetrans_named_content() interface
Resolves: rhbz#2091117
- Update policy for insights-client to run additional commands 3
Resolves: rhbz#2091117</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.3-103" date="1656331200">- Allow domain read usermodehelper state information
Resolves: rhbz#2083504
- Remove all kernel_read_usermodehelper_state() interface calls
Resolves: rhbz#2083504
- Allow samba-dcerpcd work with sssd
Resolves: rhbz#2096825
- Allow winbind_rpcd_t connect to self over a unix_stream_socket
Resolves: rhbz#2096825
- Update samba-dcerpcd policy for kerberos usage
Resolves: rhbz#2096825
- Allow keepalived read the contents of the sysfs filesystem
Resolves: rhbz#2098189
- Update policy for samba-dcerpcd
Resolves: rhbz#2083504
- Remove all kernel_read_usermodehelper_state() interface calls 2/2
Resolves: rhbz#2083504
- Update insights_client_filetrans_named_content()
Resolves: rhbz#2091117</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.3-104" date="1656417600">- Update samba-dcerpcd policy for kerberos usage 2
Resolves: rhbz#2096825</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.3-105" date="1659096000">- Do not call systemd_userdbd_stream_connect() for winbind-rpcd
Resolves: rhbz#2108383
- Update winbind_rpcd_t
Resolves: rhbz#2108383
- Allow irqbalance file transition for pid sock_files and directories
Resolves: rhbz#2111916
- Update irqbalance runtime directory file context
Resolves: rhbz#2111916</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.3-106" date="1660132800">- Allow networkmanager to signal unconfined process
Resolves: rhbz#1918148
- Allow sa-update to get init status and start systemd files
Resolves: rhbz#2011239
- Allow samba-bgqd get a printer list
Resolves: rhbz#2114737
- Allow insights-client rpm named file transitions
Resolves: rhbz#2104913
- Add /var/tmp/insights-archive to insights_client_filetrans_named_content
Resolves: rhbz#2104913
- Use insights_client_filetrans_named_content
Resolves: rhbz#2104913
- Make default file context match with named transitions
Resolves: rhbz#2104913
- Allow rhsmcertd to read insights config files
Resolves: rhbz#2104913
- Label /etc/insights-client/machine-id
Resolves: rhbz#2104913</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.3-107" date="1661428800">- Label 319/udp port with ptp_event_port_t
Resolves: rhbz#2118628
- Allow unconfined and sysadm users transition for /root/.gnupg
Resolves: rhbz#2119507
- Add the kernel_read_proc_files() interface
Resolves: rhbz#2119507
- Add userdom_view_all_users_keys() interface
Resolves: rhbz#2119507
- Allow system_cronjob_t domtrans to rpm_script_t
Resolves: rhbz#2118362
- Allow smbd_t process noatsecure permission for winbind_rpcd_t
Resolves: rhbz#2117199
- Allow chronyd bind UDP sockets to ptp_event ports
Resolves: rhbz#2118628
- Allow samba-bgqd to read a printer list
Resolves: rhbz#2118958
- Add gpg_filetrans_admin_home_content() interface
Resolves: rhbz#2119507
- Update insights-client policy for additional commands execution
Resolves: rhbz#2119507
- Allow gpg read and write generic pty type
Resolves: rhbz#2119507
- Allow chronyc read and write generic pty type
Resolves: rhbz#2119507
- Disable rpm verification on interface_info
Resolves: rhbz#2119472</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.3-108" date="1662638400">- Allow unconfined_service_t insights client content filetrans
Resolves: rhbz#2119507
- Allow nsswitch_domain to connect to systemd-machined using a unix socket
Resolves: rhbz#2119507
- Add init_status_all_script_files() interface
Resolves: rhbz#2119507
- Add dev_dontaudit_write_raw_memory() and dev_read_vsock() interfaces
Resolves: rhbz#2119507
- Update insights-client policy for additional commands execution 5
Resolves: rhbz#2119507
- Confine insights-client systemd unit
Resolves: rhbz#2119507
- Update insights-client policy for additional commands execution 4
Resolves: rhbz#2119507
- Change rhsmcertd_t to insights_client_t in insights-client policy
Resolves: rhbz#2119507
- Allow insights-client send signull to unconfined_service_t
Resolves: rhbz#2119507
- Update insights-client policy for additional commands execution 3
Resolves: rhbz#2119507
- Allow journalctl read init state
Resolves: rhbz#2119507
- Update insights-client policy for additional commands execution 2
Resolves: rhbz#2119507</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.3-108.1" date="1667563200">- Add the files_map_read_etc_files() interface
Resolves: rhbz#2136762
- Allow insights-client manage samba var dirs
Resolves: rhbz#2136762
- Allow insights-client send null signal to rpm and system cronjob
Resolves: rhbz#2136762
- Update rhcd policy for executing additional commands 4
Resolves: rhbz#2136762
- Allow insights-client connect to postgresql with a unix socket
Resolves: rhbz#2136762
- Allow insights-client domtrans on unix_chkpwd execution
Resolves: rhbz#2136762
- Add file context entries for insights-client and rhc
Resolves: rhbz#2136762</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.3-108.2" date="1676980800">- Add domain_unix_read_all_semaphores() interface
Resolves: rhbz#2170510
- Add interfaces in domain, files, and unconfined modules
Resolves: rhbz#2170510
- Allow insights-client manage fsadm pid files
Resolves: rhbz#2170510
- Allow insights-client work with su and lpstat
Resolves: rhbz#2170510
- Allow insights-client read nvme devices
Resolves: rhbz#2170510
- Allow insights-client tcp connect to all ports
Resolves: rhbz#2170510
- Add insights additional capabilities
Resolves: rhbz#2170510
- Allow insights client work with gluster and pcp
Resolves: rhbz#2170510
- Allow insights-client tcp connect to various ports
Resolves: rhbz#2170510
- Allow insights-client work with pcp and manage user config files
Resolves: rhbz#2170510
- Allow insights-client dbus chat with various services
Resolves: rhbz#2170510
- Allow insights-client dbus chat with abrt
Resolves: rhbz#2170510
- Allow insights client communicate with cupsd, mysqld, openvswitch, redis
Resolves: rhbz#2170510
- Allow insights client read raw memory devices
Resolves: rhbz#2170510
- Allow insights-client domain transition on semanage execution
Resolves: rhbz#2170510
- Allow insights-client create gluster log dir with a transition
Resolves: rhbz#2170510
- Allow insights-client manage generic locks
Resolves: rhbz#2170510
- Allow insights-client unix_read all domain semaphores
Resolves: rhbz#2170510</changelog>
</package>
<package pkgid="21dfb75552416e52944d528582780459bbb49149ad92716994b956ec326e3bfa" name="sqlite" arch="i686">
  <version epoch="0" ver="3.26.0" rel="17.el8_7"/>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 3.26.0-8" date="1587643200">- Fixed CVE-2019-16168 (#1826897)</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 3.26.0-9" date="1591099200">- Fixed CVE-2019-5018 (#1721509)</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 3.26.0-10" date="1591790400">- Fixed CVE-2020-13632 (#1845572)
- Fixed CVE-2020-13631 (#1845474)
- Fixed CVE-2020-13630 (#1845153)</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 3.26.0-11" date="1596801600">- Fixed bug in CVE-2019-20218 (#1791592)</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 3.26.0-12" date="1597665600">- Fixed CVE-2020-13434 (#1845843)
- Fixed CVE-2020-15358 (#1855208)</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 3.26.0-13" date="1606824000">- enabled fts3conf.test on s390x and ppc64 architectures</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 3.26.0-14" date="1618488000">- Fixed CVE-2019-5827 (#1710184)
- Fixed CVE-2019-13750 (#1786510)
- Fixed CVE-2019-13751 (#1786522)
- Fixed CVE-2019-19603 (#1792013)
- Fixed CVE-2020-13435 (#1841233)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 3.26.0-15" date="1621339200">- Removing fix for CVE-2019-19645 (unaffected)
- Removing fix for CVE-2019-19880 (unaffected)</changelog>
  <changelog author="Zuzana Miklankova &lt;zmiklank@redhat.com&gt; - 3.26.0-16" date="1662379200">- Fixed CVE-2020-35527
- Fixed CVE-2020-35525</changelog>
  <changelog author="Zuzana Miklankova &lt;zmiklank@redhat.com&gt; - 3.26.0-17" date="1668513600">- Fixed CVE-2022-35737</changelog>
</package>
<package pkgid="4eaae1fa2f52f5bbf28b76479647725a5ead46598574c50ff7410ca146d607c0" name="sqlite" arch="x86_64">
  <version epoch="0" ver="3.26.0" rel="17.el8_7"/>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 3.26.0-8" date="1587643200">- Fixed CVE-2019-16168 (#1826897)</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 3.26.0-9" date="1591099200">- Fixed CVE-2019-5018 (#1721509)</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 3.26.0-10" date="1591790400">- Fixed CVE-2020-13632 (#1845572)
- Fixed CVE-2020-13631 (#1845474)
- Fixed CVE-2020-13630 (#1845153)</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 3.26.0-11" date="1596801600">- Fixed bug in CVE-2019-20218 (#1791592)</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 3.26.0-12" date="1597665600">- Fixed CVE-2020-13434 (#1845843)
- Fixed CVE-2020-15358 (#1855208)</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 3.26.0-13" date="1606824000">- enabled fts3conf.test on s390x and ppc64 architectures</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 3.26.0-14" date="1618488000">- Fixed CVE-2019-5827 (#1710184)
- Fixed CVE-2019-13750 (#1786510)
- Fixed CVE-2019-13751 (#1786522)
- Fixed CVE-2019-19603 (#1792013)
- Fixed CVE-2020-13435 (#1841233)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 3.26.0-15" date="1621339200">- Removing fix for CVE-2019-19645 (unaffected)
- Removing fix for CVE-2019-19880 (unaffected)</changelog>
  <changelog author="Zuzana Miklankova &lt;zmiklank@redhat.com&gt; - 3.26.0-16" date="1662379200">- Fixed CVE-2020-35527
- Fixed CVE-2020-35525</changelog>
  <changelog author="Zuzana Miklankova &lt;zmiklank@redhat.com&gt; - 3.26.0-17" date="1668513600">- Fixed CVE-2022-35737</changelog>
</package>
<package pkgid="df702b2cdbb23a64c86a24fb90a12131f182de4e49f7a90290d8a114b95dcd8e" name="sqlite-devel" arch="i686">
  <version epoch="0" ver="3.26.0" rel="17.el8_7"/>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 3.26.0-8" date="1587643200">- Fixed CVE-2019-16168 (#1826897)</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 3.26.0-9" date="1591099200">- Fixed CVE-2019-5018 (#1721509)</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 3.26.0-10" date="1591790400">- Fixed CVE-2020-13632 (#1845572)
- Fixed CVE-2020-13631 (#1845474)
- Fixed CVE-2020-13630 (#1845153)</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 3.26.0-11" date="1596801600">- Fixed bug in CVE-2019-20218 (#1791592)</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 3.26.0-12" date="1597665600">- Fixed CVE-2020-13434 (#1845843)
- Fixed CVE-2020-15358 (#1855208)</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 3.26.0-13" date="1606824000">- enabled fts3conf.test on s390x and ppc64 architectures</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 3.26.0-14" date="1618488000">- Fixed CVE-2019-5827 (#1710184)
- Fixed CVE-2019-13750 (#1786510)
- Fixed CVE-2019-13751 (#1786522)
- Fixed CVE-2019-19603 (#1792013)
- Fixed CVE-2020-13435 (#1841233)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 3.26.0-15" date="1621339200">- Removing fix for CVE-2019-19645 (unaffected)
- Removing fix for CVE-2019-19880 (unaffected)</changelog>
  <changelog author="Zuzana Miklankova &lt;zmiklank@redhat.com&gt; - 3.26.0-16" date="1662379200">- Fixed CVE-2020-35527
- Fixed CVE-2020-35525</changelog>
  <changelog author="Zuzana Miklankova &lt;zmiklank@redhat.com&gt; - 3.26.0-17" date="1668513600">- Fixed CVE-2022-35737</changelog>
</package>
<package pkgid="d960348180b413bd18342fb3adf9ca67cba942a968c8b3b604de987c835c4421" name="sqlite-devel" arch="x86_64">
  <version epoch="0" ver="3.26.0" rel="17.el8_7"/>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 3.26.0-8" date="1587643200">- Fixed CVE-2019-16168 (#1826897)</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 3.26.0-9" date="1591099200">- Fixed CVE-2019-5018 (#1721509)</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 3.26.0-10" date="1591790400">- Fixed CVE-2020-13632 (#1845572)
- Fixed CVE-2020-13631 (#1845474)
- Fixed CVE-2020-13630 (#1845153)</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 3.26.0-11" date="1596801600">- Fixed bug in CVE-2019-20218 (#1791592)</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 3.26.0-12" date="1597665600">- Fixed CVE-2020-13434 (#1845843)
- Fixed CVE-2020-15358 (#1855208)</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 3.26.0-13" date="1606824000">- enabled fts3conf.test on s390x and ppc64 architectures</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 3.26.0-14" date="1618488000">- Fixed CVE-2019-5827 (#1710184)
- Fixed CVE-2019-13750 (#1786510)
- Fixed CVE-2019-13751 (#1786522)
- Fixed CVE-2019-19603 (#1792013)
- Fixed CVE-2020-13435 (#1841233)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 3.26.0-15" date="1621339200">- Removing fix for CVE-2019-19645 (unaffected)
- Removing fix for CVE-2019-19880 (unaffected)</changelog>
  <changelog author="Zuzana Miklankova &lt;zmiklank@redhat.com&gt; - 3.26.0-16" date="1662379200">- Fixed CVE-2020-35527
- Fixed CVE-2020-35525</changelog>
  <changelog author="Zuzana Miklankova &lt;zmiklank@redhat.com&gt; - 3.26.0-17" date="1668513600">- Fixed CVE-2022-35737</changelog>
</package>
<package pkgid="5b7047f0fd16b868a4fae0dbb6d7fc5d1f54d00c6ed6f5b51928c46c646337eb" name="sqlite-doc" arch="noarch">
  <version epoch="0" ver="3.26.0" rel="17.el8_7"/>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 3.26.0-8" date="1587643200">- Fixed CVE-2019-16168 (#1826897)</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 3.26.0-9" date="1591099200">- Fixed CVE-2019-5018 (#1721509)</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 3.26.0-10" date="1591790400">- Fixed CVE-2020-13632 (#1845572)
- Fixed CVE-2020-13631 (#1845474)
- Fixed CVE-2020-13630 (#1845153)</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 3.26.0-11" date="1596801600">- Fixed bug in CVE-2019-20218 (#1791592)</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 3.26.0-12" date="1597665600">- Fixed CVE-2020-13434 (#1845843)
- Fixed CVE-2020-15358 (#1855208)</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 3.26.0-13" date="1606824000">- enabled fts3conf.test on s390x and ppc64 architectures</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 3.26.0-14" date="1618488000">- Fixed CVE-2019-5827 (#1710184)
- Fixed CVE-2019-13750 (#1786510)
- Fixed CVE-2019-13751 (#1786522)
- Fixed CVE-2019-19603 (#1792013)
- Fixed CVE-2020-13435 (#1841233)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 3.26.0-15" date="1621339200">- Removing fix for CVE-2019-19645 (unaffected)
- Removing fix for CVE-2019-19880 (unaffected)</changelog>
  <changelog author="Zuzana Miklankova &lt;zmiklank@redhat.com&gt; - 3.26.0-16" date="1662379200">- Fixed CVE-2020-35527
- Fixed CVE-2020-35525</changelog>
  <changelog author="Zuzana Miklankova &lt;zmiklank@redhat.com&gt; - 3.26.0-17" date="1668513600">- Fixed CVE-2022-35737</changelog>
</package>
<package pkgid="1d7c0d294e13929ba9a59b96f694e8a24e1229bae504fd073e7a75e8c0adac1c" name="sqlite-libs" arch="i686">
  <version epoch="0" ver="3.26.0" rel="17.el8_7"/>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 3.26.0-8" date="1587643200">- Fixed CVE-2019-16168 (#1826897)</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 3.26.0-9" date="1591099200">- Fixed CVE-2019-5018 (#1721509)</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 3.26.0-10" date="1591790400">- Fixed CVE-2020-13632 (#1845572)
- Fixed CVE-2020-13631 (#1845474)
- Fixed CVE-2020-13630 (#1845153)</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 3.26.0-11" date="1596801600">- Fixed bug in CVE-2019-20218 (#1791592)</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 3.26.0-12" date="1597665600">- Fixed CVE-2020-13434 (#1845843)
- Fixed CVE-2020-15358 (#1855208)</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 3.26.0-13" date="1606824000">- enabled fts3conf.test on s390x and ppc64 architectures</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 3.26.0-14" date="1618488000">- Fixed CVE-2019-5827 (#1710184)
- Fixed CVE-2019-13750 (#1786510)
- Fixed CVE-2019-13751 (#1786522)
- Fixed CVE-2019-19603 (#1792013)
- Fixed CVE-2020-13435 (#1841233)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 3.26.0-15" date="1621339200">- Removing fix for CVE-2019-19645 (unaffected)
- Removing fix for CVE-2019-19880 (unaffected)</changelog>
  <changelog author="Zuzana Miklankova &lt;zmiklank@redhat.com&gt; - 3.26.0-16" date="1662379200">- Fixed CVE-2020-35527
- Fixed CVE-2020-35525</changelog>
  <changelog author="Zuzana Miklankova &lt;zmiklank@redhat.com&gt; - 3.26.0-17" date="1668513600">- Fixed CVE-2022-35737</changelog>
</package>
<package pkgid="67083d356d521f01a9f7b5eb148f54c8cbf21a18b142e928db1140244244e97c" name="sqlite-libs" arch="x86_64">
  <version epoch="0" ver="3.26.0" rel="17.el8_7"/>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 3.26.0-8" date="1587643200">- Fixed CVE-2019-16168 (#1826897)</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 3.26.0-9" date="1591099200">- Fixed CVE-2019-5018 (#1721509)</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 3.26.0-10" date="1591790400">- Fixed CVE-2020-13632 (#1845572)
- Fixed CVE-2020-13631 (#1845474)
- Fixed CVE-2020-13630 (#1845153)</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 3.26.0-11" date="1596801600">- Fixed bug in CVE-2019-20218 (#1791592)</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 3.26.0-12" date="1597665600">- Fixed CVE-2020-13434 (#1845843)
- Fixed CVE-2020-15358 (#1855208)</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 3.26.0-13" date="1606824000">- enabled fts3conf.test on s390x and ppc64 architectures</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 3.26.0-14" date="1618488000">- Fixed CVE-2019-5827 (#1710184)
- Fixed CVE-2019-13750 (#1786510)
- Fixed CVE-2019-13751 (#1786522)
- Fixed CVE-2019-19603 (#1792013)
- Fixed CVE-2020-13435 (#1841233)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 3.26.0-15" date="1621339200">- Removing fix for CVE-2019-19645 (unaffected)
- Removing fix for CVE-2019-19880 (unaffected)</changelog>
  <changelog author="Zuzana Miklankova &lt;zmiklank@redhat.com&gt; - 3.26.0-16" date="1662379200">- Fixed CVE-2020-35527
- Fixed CVE-2020-35525</changelog>
  <changelog author="Zuzana Miklankova &lt;zmiklank@redhat.com&gt; - 3.26.0-17" date="1668513600">- Fixed CVE-2022-35737</changelog>
</package>
<package pkgid="49d7e55f8976a3738e433f5d93e7653403d659c3ac8f587a737237a4089defa4" name="sssd" arch="x86_64">
  <version epoch="0" ver="2.7.3" rel="4.el8_7.1"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.6.2-1" date="1640606400">- Resolves: rhbz#2011216 - Rebase SSSD for RHEL 8.6
- Resolves: rhbz#2013260 - [RHEL8] Add ability to parse child log files
- Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries
- Resolves: rhbz#1859315 - sssd does not use kerberos port that is set.
- Resolves: rhbz#1961182 - Passwordless (GSSAPI) SSH not working due to missing "includedir /var/lib/sss/pubconf/krb5.include.d" directive in /etc/krb5.conf
- Resolves: rhbz#2008829 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2012263 - pam responder does not call initgroups to refresh the user entry
- Resolves: rhbz#2012308 - Add client certificate validation D-Bus API
- Resolves: rhbz#2012327 - Groups are missing while performing id lookup as SSSD switching to offline mode due to the wrong domain name in the ldap-pings(netlogon).
- Resolves: rhbz#2013028 - [RFE] Health and Support Analyzer: Add sssctl sub-command to select and display a single request from the logs
- Resolves: rhbz#2013259 - [RHEL8] Add tevent chain ID logic into responders
- Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.6.2-2" date="1641297600">- Resolves: rhbz#2013260 - [RHEL8] Add ability to parse child log files (additional patch)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.6.2-3" date="1642420800">- Resolves: rhbz#2039892 - 2.6.2 regression: Daemon crashes when resolving AD user names
- Resolves: rhbz#1859315 - sssd does not use kerberos port that is set.
- Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries
- Resolves: rhbz#2035245 - AD Domain in the AD Forest Missing after sssd latest update
- Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.0-2" date="1652875200">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2026799 - SSSD authenticating to LDAP with obfuscated password produces Invalid authtoken type message causing sssd_be to go offline (cross inter_ference of different provider plugins options)
- Resolves: rhbz#2033347 - sssd error triggers backtrace : [write_krb5info_file_from_fo_server] (0x0020): [RID#73501] There is no server that can be written into kdc info file.
- Resolves: rhbz#2056483 - [RFE] Add sssd internal krb5 plugin for authentication against external IdP via OAuth2
- Resolves: rhbz#2062689 - [Improvement] Add user and group version of sss_nss_getorigbyname()
- Resolves: rhbz#2065692 - [RHEL8] Ship new sub-package called sssd-idp into sssd
- Resolves: rhbz#2072050 - sssd_nss exiting (due to missing 'sssd' local user) making SSSD service to restart in a loop
- Resolves: rhbz#2072931 - Use right sdap_domain in ad_domain_info_send
- Resolves: rhbz#2087088 - sssd does not enforce smartcard auth for kde screen locker
- Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol
- Resolves: rhbz#2087745 - 2FA prompting setting ineffective
- Resolves: rhbz#2087746 - sssd fails GPO-based access if AD have setup with Japanese language</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.2-1" date="1655726400">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2098620 - sdap_nested_group_deref_direct_process() triggers internal watchdog for large data sets
- Resolves: rhbz#2098619 - [Improvement] add SSSD support for more than one CRL PEM file name with parameters certificate_verification and crl_file
- Resolves: rhbz#2088817 - pam_sss_gss ceased to work after upgrade to 8.6
- Resolves: rhbz#2098616 - Add idp authentication indicator in man page of sssd.conf
- Resolves: rhbz#2056035 - 'getent hosts' not return hosts if they have more than one CN in LDAP
- Resolves: rhbz#2098615 - Regression "Missing internal domain data." when setting ad_domain to incorrect
- Resolves: rhbz#2098617 - Harden kerberos ticket validation
- Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-1" date="1657713600">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2063016 - [sssd] RHEL 8.7 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-2" date="1660132800">- Resolves: rhbz#2116488 - virsh command will hang after the host run several auto test cases
- Resolves: rhbz#2116486 - [regression] sssctl analyze fails to parse PAM related sssd logs
- Resolves: rhbz#2116487 - cache_req_data_set_hybrid_lookup: cache_req_data should never be NULL</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-3" date="1661256000">- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8
- Resolves: rhbz#2119726 - sssctl analyze --logdir option requires sssd to be configured
- Resolves: rhbz#2120669 - Incorrect request ID tracking from responder to backend</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4" date="1661515200">- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4.1" date="1665662400">- Resolves: rhbz#2128544 - Cannot SSH with AD user to ipa-client (`krb5_validate` and `pac_check` settings conflict) [rhel-8.7.0.z]</changelog>
</package>
<package pkgid="a5c2d634d2e375c138de568763f235cbbea1a37b63a6783ee5100796c2963894" name="sssd" arch="x86_64">
  <version epoch="0" ver="2.7.3" rel="4.el8_7.3"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.6.2-3" date="1642420800">- Resolves: rhbz#2039892 - 2.6.2 regression: Daemon crashes when resolving AD user names
- Resolves: rhbz#1859315 - sssd does not use kerberos port that is set.
- Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries
- Resolves: rhbz#2035245 - AD Domain in the AD Forest Missing after sssd latest update
- Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.0-2" date="1652875200">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2026799 - SSSD authenticating to LDAP with obfuscated password produces Invalid authtoken type message causing sssd_be to go offline (cross inter_ference of different provider plugins options)
- Resolves: rhbz#2033347 - sssd error triggers backtrace : [write_krb5info_file_from_fo_server] (0x0020): [RID#73501] There is no server that can be written into kdc info file.
- Resolves: rhbz#2056483 - [RFE] Add sssd internal krb5 plugin for authentication against external IdP via OAuth2
- Resolves: rhbz#2062689 - [Improvement] Add user and group version of sss_nss_getorigbyname()
- Resolves: rhbz#2065692 - [RHEL8] Ship new sub-package called sssd-idp into sssd
- Resolves: rhbz#2072050 - sssd_nss exiting (due to missing 'sssd' local user) making SSSD service to restart in a loop
- Resolves: rhbz#2072931 - Use right sdap_domain in ad_domain_info_send
- Resolves: rhbz#2087088 - sssd does not enforce smartcard auth for kde screen locker
- Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol
- Resolves: rhbz#2087745 - 2FA prompting setting ineffective
- Resolves: rhbz#2087746 - sssd fails GPO-based access if AD have setup with Japanese language</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.2-1" date="1655726400">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2098620 - sdap_nested_group_deref_direct_process() triggers internal watchdog for large data sets
- Resolves: rhbz#2098619 - [Improvement] add SSSD support for more than one CRL PEM file name with parameters certificate_verification and crl_file
- Resolves: rhbz#2088817 - pam_sss_gss ceased to work after upgrade to 8.6
- Resolves: rhbz#2098616 - Add idp authentication indicator in man page of sssd.conf
- Resolves: rhbz#2056035 - 'getent hosts' not return hosts if they have more than one CN in LDAP
- Resolves: rhbz#2098615 - Regression "Missing internal domain data." when setting ad_domain to incorrect
- Resolves: rhbz#2098617 - Harden kerberos ticket validation
- Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-1" date="1657713600">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2063016 - [sssd] RHEL 8.7 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-2" date="1660132800">- Resolves: rhbz#2116488 - virsh command will hang after the host run several auto test cases
- Resolves: rhbz#2116486 - [regression] sssctl analyze fails to parse PAM related sssd logs
- Resolves: rhbz#2116487 - cache_req_data_set_hybrid_lookup: cache_req_data should never be NULL</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-3" date="1661256000">- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8
- Resolves: rhbz#2119726 - sssctl analyze --logdir option requires sssd to be configured
- Resolves: rhbz#2120669 - Incorrect request ID tracking from responder to backend</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4" date="1661515200">- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4.1" date="1665662400">- Resolves: rhbz#2128544 - Cannot SSH with AD user to ipa-client (`krb5_validate` and `pac_check` settings conflict) [rhel-8.7.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4.2" date="1670587200">- Resolves: rhbz#2139871 - Analyzer: Optimize and remove duplicate messages in verbose list [rhel-8.7.0.z]
- Resolves: rhbz#2142961 - SSSD: `sssctl analyze` command shouldn't require 'root' privileged [rhel-8.7.0.z]
- Resolves: rhbz#2148989 - UPN check cannot be disabled explicitly but requires krb5_validate = false' as a work-around [rhel-8.7.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4.3" date="1671105600">- Resolves: rhbz#2152883 - authenticating against external IdP services okta (native app) with OAuth client secret failed [rhel-8.7.0.z]</changelog>
</package>
<package pkgid="2eea2d3e5235629475c2bba8c937d3969496885e9b4b9a4d458816a4cf15ccbc" name="sssd-ad" arch="x86_64">
  <version epoch="0" ver="2.7.3" rel="4.el8_7.1"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.6.2-1" date="1640606400">- Resolves: rhbz#2011216 - Rebase SSSD for RHEL 8.6
- Resolves: rhbz#2013260 - [RHEL8] Add ability to parse child log files
- Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries
- Resolves: rhbz#1859315 - sssd does not use kerberos port that is set.
- Resolves: rhbz#1961182 - Passwordless (GSSAPI) SSH not working due to missing "includedir /var/lib/sss/pubconf/krb5.include.d" directive in /etc/krb5.conf
- Resolves: rhbz#2008829 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2012263 - pam responder does not call initgroups to refresh the user entry
- Resolves: rhbz#2012308 - Add client certificate validation D-Bus API
- Resolves: rhbz#2012327 - Groups are missing while performing id lookup as SSSD switching to offline mode due to the wrong domain name in the ldap-pings(netlogon).
- Resolves: rhbz#2013028 - [RFE] Health and Support Analyzer: Add sssctl sub-command to select and display a single request from the logs
- Resolves: rhbz#2013259 - [RHEL8] Add tevent chain ID logic into responders
- Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.6.2-2" date="1641297600">- Resolves: rhbz#2013260 - [RHEL8] Add ability to parse child log files (additional patch)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.6.2-3" date="1642420800">- Resolves: rhbz#2039892 - 2.6.2 regression: Daemon crashes when resolving AD user names
- Resolves: rhbz#1859315 - sssd does not use kerberos port that is set.
- Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries
- Resolves: rhbz#2035245 - AD Domain in the AD Forest Missing after sssd latest update
- Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.0-2" date="1652875200">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2026799 - SSSD authenticating to LDAP with obfuscated password produces Invalid authtoken type message causing sssd_be to go offline (cross inter_ference of different provider plugins options)
- Resolves: rhbz#2033347 - sssd error triggers backtrace : [write_krb5info_file_from_fo_server] (0x0020): [RID#73501] There is no server that can be written into kdc info file.
- Resolves: rhbz#2056483 - [RFE] Add sssd internal krb5 plugin for authentication against external IdP via OAuth2
- Resolves: rhbz#2062689 - [Improvement] Add user and group version of sss_nss_getorigbyname()
- Resolves: rhbz#2065692 - [RHEL8] Ship new sub-package called sssd-idp into sssd
- Resolves: rhbz#2072050 - sssd_nss exiting (due to missing 'sssd' local user) making SSSD service to restart in a loop
- Resolves: rhbz#2072931 - Use right sdap_domain in ad_domain_info_send
- Resolves: rhbz#2087088 - sssd does not enforce smartcard auth for kde screen locker
- Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol
- Resolves: rhbz#2087745 - 2FA prompting setting ineffective
- Resolves: rhbz#2087746 - sssd fails GPO-based access if AD have setup with Japanese language</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.2-1" date="1655726400">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2098620 - sdap_nested_group_deref_direct_process() triggers internal watchdog for large data sets
- Resolves: rhbz#2098619 - [Improvement] add SSSD support for more than one CRL PEM file name with parameters certificate_verification and crl_file
- Resolves: rhbz#2088817 - pam_sss_gss ceased to work after upgrade to 8.6
- Resolves: rhbz#2098616 - Add idp authentication indicator in man page of sssd.conf
- Resolves: rhbz#2056035 - 'getent hosts' not return hosts if they have more than one CN in LDAP
- Resolves: rhbz#2098615 - Regression "Missing internal domain data." when setting ad_domain to incorrect
- Resolves: rhbz#2098617 - Harden kerberos ticket validation
- Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-1" date="1657713600">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2063016 - [sssd] RHEL 8.7 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-2" date="1660132800">- Resolves: rhbz#2116488 - virsh command will hang after the host run several auto test cases
- Resolves: rhbz#2116486 - [regression] sssctl analyze fails to parse PAM related sssd logs
- Resolves: rhbz#2116487 - cache_req_data_set_hybrid_lookup: cache_req_data should never be NULL</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-3" date="1661256000">- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8
- Resolves: rhbz#2119726 - sssctl analyze --logdir option requires sssd to be configured
- Resolves: rhbz#2120669 - Incorrect request ID tracking from responder to backend</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4" date="1661515200">- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4.1" date="1665662400">- Resolves: rhbz#2128544 - Cannot SSH with AD user to ipa-client (`krb5_validate` and `pac_check` settings conflict) [rhel-8.7.0.z]</changelog>
</package>
<package pkgid="4709e8c32e8f22391310bcfdda2ee605445a542771b5644988153f1cc40bb57b" name="sssd-ad" arch="x86_64">
  <version epoch="0" ver="2.7.3" rel="4.el8_7.3"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.6.2-3" date="1642420800">- Resolves: rhbz#2039892 - 2.6.2 regression: Daemon crashes when resolving AD user names
- Resolves: rhbz#1859315 - sssd does not use kerberos port that is set.
- Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries
- Resolves: rhbz#2035245 - AD Domain in the AD Forest Missing after sssd latest update
- Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.0-2" date="1652875200">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2026799 - SSSD authenticating to LDAP with obfuscated password produces Invalid authtoken type message causing sssd_be to go offline (cross inter_ference of different provider plugins options)
- Resolves: rhbz#2033347 - sssd error triggers backtrace : [write_krb5info_file_from_fo_server] (0x0020): [RID#73501] There is no server that can be written into kdc info file.
- Resolves: rhbz#2056483 - [RFE] Add sssd internal krb5 plugin for authentication against external IdP via OAuth2
- Resolves: rhbz#2062689 - [Improvement] Add user and group version of sss_nss_getorigbyname()
- Resolves: rhbz#2065692 - [RHEL8] Ship new sub-package called sssd-idp into sssd
- Resolves: rhbz#2072050 - sssd_nss exiting (due to missing 'sssd' local user) making SSSD service to restart in a loop
- Resolves: rhbz#2072931 - Use right sdap_domain in ad_domain_info_send
- Resolves: rhbz#2087088 - sssd does not enforce smartcard auth for kde screen locker
- Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol
- Resolves: rhbz#2087745 - 2FA prompting setting ineffective
- Resolves: rhbz#2087746 - sssd fails GPO-based access if AD have setup with Japanese language</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.2-1" date="1655726400">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2098620 - sdap_nested_group_deref_direct_process() triggers internal watchdog for large data sets
- Resolves: rhbz#2098619 - [Improvement] add SSSD support for more than one CRL PEM file name with parameters certificate_verification and crl_file
- Resolves: rhbz#2088817 - pam_sss_gss ceased to work after upgrade to 8.6
- Resolves: rhbz#2098616 - Add idp authentication indicator in man page of sssd.conf
- Resolves: rhbz#2056035 - 'getent hosts' not return hosts if they have more than one CN in LDAP
- Resolves: rhbz#2098615 - Regression "Missing internal domain data." when setting ad_domain to incorrect
- Resolves: rhbz#2098617 - Harden kerberos ticket validation
- Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-1" date="1657713600">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2063016 - [sssd] RHEL 8.7 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-2" date="1660132800">- Resolves: rhbz#2116488 - virsh command will hang after the host run several auto test cases
- Resolves: rhbz#2116486 - [regression] sssctl analyze fails to parse PAM related sssd logs
- Resolves: rhbz#2116487 - cache_req_data_set_hybrid_lookup: cache_req_data should never be NULL</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-3" date="1661256000">- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8
- Resolves: rhbz#2119726 - sssctl analyze --logdir option requires sssd to be configured
- Resolves: rhbz#2120669 - Incorrect request ID tracking from responder to backend</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4" date="1661515200">- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4.1" date="1665662400">- Resolves: rhbz#2128544 - Cannot SSH with AD user to ipa-client (`krb5_validate` and `pac_check` settings conflict) [rhel-8.7.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4.2" date="1670587200">- Resolves: rhbz#2139871 - Analyzer: Optimize and remove duplicate messages in verbose list [rhel-8.7.0.z]
- Resolves: rhbz#2142961 - SSSD: `sssctl analyze` command shouldn't require 'root' privileged [rhel-8.7.0.z]
- Resolves: rhbz#2148989 - UPN check cannot be disabled explicitly but requires krb5_validate = false' as a work-around [rhel-8.7.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4.3" date="1671105600">- Resolves: rhbz#2152883 - authenticating against external IdP services okta (native app) with OAuth client secret failed [rhel-8.7.0.z]</changelog>
</package>
<package pkgid="28d144b453c73a53ec0ca22ff7e34468d9838913e9166ddeaa9a25f5b3e01ece" name="sssd-client" arch="i686">
  <version epoch="0" ver="2.7.3" rel="4.el8_7.1"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.6.2-1" date="1640606400">- Resolves: rhbz#2011216 - Rebase SSSD for RHEL 8.6
- Resolves: rhbz#2013260 - [RHEL8] Add ability to parse child log files
- Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries
- Resolves: rhbz#1859315 - sssd does not use kerberos port that is set.
- Resolves: rhbz#1961182 - Passwordless (GSSAPI) SSH not working due to missing "includedir /var/lib/sss/pubconf/krb5.include.d" directive in /etc/krb5.conf
- Resolves: rhbz#2008829 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2012263 - pam responder does not call initgroups to refresh the user entry
- Resolves: rhbz#2012308 - Add client certificate validation D-Bus API
- Resolves: rhbz#2012327 - Groups are missing while performing id lookup as SSSD switching to offline mode due to the wrong domain name in the ldap-pings(netlogon).
- Resolves: rhbz#2013028 - [RFE] Health and Support Analyzer: Add sssctl sub-command to select and display a single request from the logs
- Resolves: rhbz#2013259 - [RHEL8] Add tevent chain ID logic into responders
- Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.6.2-2" date="1641297600">- Resolves: rhbz#2013260 - [RHEL8] Add ability to parse child log files (additional patch)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.6.2-3" date="1642420800">- Resolves: rhbz#2039892 - 2.6.2 regression: Daemon crashes when resolving AD user names
- Resolves: rhbz#1859315 - sssd does not use kerberos port that is set.
- Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries
- Resolves: rhbz#2035245 - AD Domain in the AD Forest Missing after sssd latest update
- Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.0-2" date="1652875200">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2026799 - SSSD authenticating to LDAP with obfuscated password produces Invalid authtoken type message causing sssd_be to go offline (cross inter_ference of different provider plugins options)
- Resolves: rhbz#2033347 - sssd error triggers backtrace : [write_krb5info_file_from_fo_server] (0x0020): [RID#73501] There is no server that can be written into kdc info file.
- Resolves: rhbz#2056483 - [RFE] Add sssd internal krb5 plugin for authentication against external IdP via OAuth2
- Resolves: rhbz#2062689 - [Improvement] Add user and group version of sss_nss_getorigbyname()
- Resolves: rhbz#2065692 - [RHEL8] Ship new sub-package called sssd-idp into sssd
- Resolves: rhbz#2072050 - sssd_nss exiting (due to missing 'sssd' local user) making SSSD service to restart in a loop
- Resolves: rhbz#2072931 - Use right sdap_domain in ad_domain_info_send
- Resolves: rhbz#2087088 - sssd does not enforce smartcard auth for kde screen locker
- Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol
- Resolves: rhbz#2087745 - 2FA prompting setting ineffective
- Resolves: rhbz#2087746 - sssd fails GPO-based access if AD have setup with Japanese language</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.2-1" date="1655726400">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2098620 - sdap_nested_group_deref_direct_process() triggers internal watchdog for large data sets
- Resolves: rhbz#2098619 - [Improvement] add SSSD support for more than one CRL PEM file name with parameters certificate_verification and crl_file
- Resolves: rhbz#2088817 - pam_sss_gss ceased to work after upgrade to 8.6
- Resolves: rhbz#2098616 - Add idp authentication indicator in man page of sssd.conf
- Resolves: rhbz#2056035 - 'getent hosts' not return hosts if they have more than one CN in LDAP
- Resolves: rhbz#2098615 - Regression "Missing internal domain data." when setting ad_domain to incorrect
- Resolves: rhbz#2098617 - Harden kerberos ticket validation
- Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-1" date="1657713600">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2063016 - [sssd] RHEL 8.7 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-2" date="1660132800">- Resolves: rhbz#2116488 - virsh command will hang after the host run several auto test cases
- Resolves: rhbz#2116486 - [regression] sssctl analyze fails to parse PAM related sssd logs
- Resolves: rhbz#2116487 - cache_req_data_set_hybrid_lookup: cache_req_data should never be NULL</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-3" date="1661256000">- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8
- Resolves: rhbz#2119726 - sssctl analyze --logdir option requires sssd to be configured
- Resolves: rhbz#2120669 - Incorrect request ID tracking from responder to backend</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4" date="1661515200">- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4.1" date="1665662400">- Resolves: rhbz#2128544 - Cannot SSH with AD user to ipa-client (`krb5_validate` and `pac_check` settings conflict) [rhel-8.7.0.z]</changelog>
</package>
<package pkgid="39a0035a09829031d32c5880197ecf46ddd692e82c5e25220b52aa01c60877d2" name="sssd-client" arch="x86_64">
  <version epoch="0" ver="2.7.3" rel="4.el8_7.1"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.6.2-1" date="1640606400">- Resolves: rhbz#2011216 - Rebase SSSD for RHEL 8.6
- Resolves: rhbz#2013260 - [RHEL8] Add ability to parse child log files
- Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries
- Resolves: rhbz#1859315 - sssd does not use kerberos port that is set.
- Resolves: rhbz#1961182 - Passwordless (GSSAPI) SSH not working due to missing "includedir /var/lib/sss/pubconf/krb5.include.d" directive in /etc/krb5.conf
- Resolves: rhbz#2008829 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2012263 - pam responder does not call initgroups to refresh the user entry
- Resolves: rhbz#2012308 - Add client certificate validation D-Bus API
- Resolves: rhbz#2012327 - Groups are missing while performing id lookup as SSSD switching to offline mode due to the wrong domain name in the ldap-pings(netlogon).
- Resolves: rhbz#2013028 - [RFE] Health and Support Analyzer: Add sssctl sub-command to select and display a single request from the logs
- Resolves: rhbz#2013259 - [RHEL8] Add tevent chain ID logic into responders
- Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.6.2-2" date="1641297600">- Resolves: rhbz#2013260 - [RHEL8] Add ability to parse child log files (additional patch)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.6.2-3" date="1642420800">- Resolves: rhbz#2039892 - 2.6.2 regression: Daemon crashes when resolving AD user names
- Resolves: rhbz#1859315 - sssd does not use kerberos port that is set.
- Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries
- Resolves: rhbz#2035245 - AD Domain in the AD Forest Missing after sssd latest update
- Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.0-2" date="1652875200">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2026799 - SSSD authenticating to LDAP with obfuscated password produces Invalid authtoken type message causing sssd_be to go offline (cross inter_ference of different provider plugins options)
- Resolves: rhbz#2033347 - sssd error triggers backtrace : [write_krb5info_file_from_fo_server] (0x0020): [RID#73501] There is no server that can be written into kdc info file.
- Resolves: rhbz#2056483 - [RFE] Add sssd internal krb5 plugin for authentication against external IdP via OAuth2
- Resolves: rhbz#2062689 - [Improvement] Add user and group version of sss_nss_getorigbyname()
- Resolves: rhbz#2065692 - [RHEL8] Ship new sub-package called sssd-idp into sssd
- Resolves: rhbz#2072050 - sssd_nss exiting (due to missing 'sssd' local user) making SSSD service to restart in a loop
- Resolves: rhbz#2072931 - Use right sdap_domain in ad_domain_info_send
- Resolves: rhbz#2087088 - sssd does not enforce smartcard auth for kde screen locker
- Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol
- Resolves: rhbz#2087745 - 2FA prompting setting ineffective
- Resolves: rhbz#2087746 - sssd fails GPO-based access if AD have setup with Japanese language</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.2-1" date="1655726400">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2098620 - sdap_nested_group_deref_direct_process() triggers internal watchdog for large data sets
- Resolves: rhbz#2098619 - [Improvement] add SSSD support for more than one CRL PEM file name with parameters certificate_verification and crl_file
- Resolves: rhbz#2088817 - pam_sss_gss ceased to work after upgrade to 8.6
- Resolves: rhbz#2098616 - Add idp authentication indicator in man page of sssd.conf
- Resolves: rhbz#2056035 - 'getent hosts' not return hosts if they have more than one CN in LDAP
- Resolves: rhbz#2098615 - Regression "Missing internal domain data." when setting ad_domain to incorrect
- Resolves: rhbz#2098617 - Harden kerberos ticket validation
- Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-1" date="1657713600">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2063016 - [sssd] RHEL 8.7 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-2" date="1660132800">- Resolves: rhbz#2116488 - virsh command will hang after the host run several auto test cases
- Resolves: rhbz#2116486 - [regression] sssctl analyze fails to parse PAM related sssd logs
- Resolves: rhbz#2116487 - cache_req_data_set_hybrid_lookup: cache_req_data should never be NULL</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-3" date="1661256000">- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8
- Resolves: rhbz#2119726 - sssctl analyze --logdir option requires sssd to be configured
- Resolves: rhbz#2120669 - Incorrect request ID tracking from responder to backend</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4" date="1661515200">- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4.1" date="1665662400">- Resolves: rhbz#2128544 - Cannot SSH with AD user to ipa-client (`krb5_validate` and `pac_check` settings conflict) [rhel-8.7.0.z]</changelog>
</package>
<package pkgid="3c80cb268350681a9fa7f9ad6c29904adf9680fbe45b9cf17351b459bb04420b" name="sssd-client" arch="i686">
  <version epoch="0" ver="2.7.3" rel="4.el8_7.3"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.6.2-3" date="1642420800">- Resolves: rhbz#2039892 - 2.6.2 regression: Daemon crashes when resolving AD user names
- Resolves: rhbz#1859315 - sssd does not use kerberos port that is set.
- Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries
- Resolves: rhbz#2035245 - AD Domain in the AD Forest Missing after sssd latest update
- Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.0-2" date="1652875200">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2026799 - SSSD authenticating to LDAP with obfuscated password produces Invalid authtoken type message causing sssd_be to go offline (cross inter_ference of different provider plugins options)
- Resolves: rhbz#2033347 - sssd error triggers backtrace : [write_krb5info_file_from_fo_server] (0x0020): [RID#73501] There is no server that can be written into kdc info file.
- Resolves: rhbz#2056483 - [RFE] Add sssd internal krb5 plugin for authentication against external IdP via OAuth2
- Resolves: rhbz#2062689 - [Improvement] Add user and group version of sss_nss_getorigbyname()
- Resolves: rhbz#2065692 - [RHEL8] Ship new sub-package called sssd-idp into sssd
- Resolves: rhbz#2072050 - sssd_nss exiting (due to missing 'sssd' local user) making SSSD service to restart in a loop
- Resolves: rhbz#2072931 - Use right sdap_domain in ad_domain_info_send
- Resolves: rhbz#2087088 - sssd does not enforce smartcard auth for kde screen locker
- Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol
- Resolves: rhbz#2087745 - 2FA prompting setting ineffective
- Resolves: rhbz#2087746 - sssd fails GPO-based access if AD have setup with Japanese language</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.2-1" date="1655726400">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2098620 - sdap_nested_group_deref_direct_process() triggers internal watchdog for large data sets
- Resolves: rhbz#2098619 - [Improvement] add SSSD support for more than one CRL PEM file name with parameters certificate_verification and crl_file
- Resolves: rhbz#2088817 - pam_sss_gss ceased to work after upgrade to 8.6
- Resolves: rhbz#2098616 - Add idp authentication indicator in man page of sssd.conf
- Resolves: rhbz#2056035 - 'getent hosts' not return hosts if they have more than one CN in LDAP
- Resolves: rhbz#2098615 - Regression "Missing internal domain data." when setting ad_domain to incorrect
- Resolves: rhbz#2098617 - Harden kerberos ticket validation
- Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-1" date="1657713600">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2063016 - [sssd] RHEL 8.7 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-2" date="1660132800">- Resolves: rhbz#2116488 - virsh command will hang after the host run several auto test cases
- Resolves: rhbz#2116486 - [regression] sssctl analyze fails to parse PAM related sssd logs
- Resolves: rhbz#2116487 - cache_req_data_set_hybrid_lookup: cache_req_data should never be NULL</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-3" date="1661256000">- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8
- Resolves: rhbz#2119726 - sssctl analyze --logdir option requires sssd to be configured
- Resolves: rhbz#2120669 - Incorrect request ID tracking from responder to backend</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4" date="1661515200">- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4.1" date="1665662400">- Resolves: rhbz#2128544 - Cannot SSH with AD user to ipa-client (`krb5_validate` and `pac_check` settings conflict) [rhel-8.7.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4.2" date="1670587200">- Resolves: rhbz#2139871 - Analyzer: Optimize and remove duplicate messages in verbose list [rhel-8.7.0.z]
- Resolves: rhbz#2142961 - SSSD: `sssctl analyze` command shouldn't require 'root' privileged [rhel-8.7.0.z]
- Resolves: rhbz#2148989 - UPN check cannot be disabled explicitly but requires krb5_validate = false' as a work-around [rhel-8.7.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4.3" date="1671105600">- Resolves: rhbz#2152883 - authenticating against external IdP services okta (native app) with OAuth client secret failed [rhel-8.7.0.z]</changelog>
</package>
<package pkgid="ca2059d0d7f6239c3fd5b9e9413c950ae38a26a4a881f7f0c0e99628443f8a1c" name="sssd-client" arch="x86_64">
  <version epoch="0" ver="2.7.3" rel="4.el8_7.3"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.6.2-3" date="1642420800">- Resolves: rhbz#2039892 - 2.6.2 regression: Daemon crashes when resolving AD user names
- Resolves: rhbz#1859315 - sssd does not use kerberos port that is set.
- Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries
- Resolves: rhbz#2035245 - AD Domain in the AD Forest Missing after sssd latest update
- Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.0-2" date="1652875200">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2026799 - SSSD authenticating to LDAP with obfuscated password produces Invalid authtoken type message causing sssd_be to go offline (cross inter_ference of different provider plugins options)
- Resolves: rhbz#2033347 - sssd error triggers backtrace : [write_krb5info_file_from_fo_server] (0x0020): [RID#73501] There is no server that can be written into kdc info file.
- Resolves: rhbz#2056483 - [RFE] Add sssd internal krb5 plugin for authentication against external IdP via OAuth2
- Resolves: rhbz#2062689 - [Improvement] Add user and group version of sss_nss_getorigbyname()
- Resolves: rhbz#2065692 - [RHEL8] Ship new sub-package called sssd-idp into sssd
- Resolves: rhbz#2072050 - sssd_nss exiting (due to missing 'sssd' local user) making SSSD service to restart in a loop
- Resolves: rhbz#2072931 - Use right sdap_domain in ad_domain_info_send
- Resolves: rhbz#2087088 - sssd does not enforce smartcard auth for kde screen locker
- Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol
- Resolves: rhbz#2087745 - 2FA prompting setting ineffective
- Resolves: rhbz#2087746 - sssd fails GPO-based access if AD have setup with Japanese language</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.2-1" date="1655726400">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2098620 - sdap_nested_group_deref_direct_process() triggers internal watchdog for large data sets
- Resolves: rhbz#2098619 - [Improvement] add SSSD support for more than one CRL PEM file name with parameters certificate_verification and crl_file
- Resolves: rhbz#2088817 - pam_sss_gss ceased to work after upgrade to 8.6
- Resolves: rhbz#2098616 - Add idp authentication indicator in man page of sssd.conf
- Resolves: rhbz#2056035 - 'getent hosts' not return hosts if they have more than one CN in LDAP
- Resolves: rhbz#2098615 - Regression "Missing internal domain data." when setting ad_domain to incorrect
- Resolves: rhbz#2098617 - Harden kerberos ticket validation
- Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-1" date="1657713600">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2063016 - [sssd] RHEL 8.7 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-2" date="1660132800">- Resolves: rhbz#2116488 - virsh command will hang after the host run several auto test cases
- Resolves: rhbz#2116486 - [regression] sssctl analyze fails to parse PAM related sssd logs
- Resolves: rhbz#2116487 - cache_req_data_set_hybrid_lookup: cache_req_data should never be NULL</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-3" date="1661256000">- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8
- Resolves: rhbz#2119726 - sssctl analyze --logdir option requires sssd to be configured
- Resolves: rhbz#2120669 - Incorrect request ID tracking from responder to backend</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4" date="1661515200">- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4.1" date="1665662400">- Resolves: rhbz#2128544 - Cannot SSH with AD user to ipa-client (`krb5_validate` and `pac_check` settings conflict) [rhel-8.7.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4.2" date="1670587200">- Resolves: rhbz#2139871 - Analyzer: Optimize and remove duplicate messages in verbose list [rhel-8.7.0.z]
- Resolves: rhbz#2142961 - SSSD: `sssctl analyze` command shouldn't require 'root' privileged [rhel-8.7.0.z]
- Resolves: rhbz#2148989 - UPN check cannot be disabled explicitly but requires krb5_validate = false' as a work-around [rhel-8.7.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4.3" date="1671105600">- Resolves: rhbz#2152883 - authenticating against external IdP services okta (native app) with OAuth client secret failed [rhel-8.7.0.z]</changelog>
</package>
<package pkgid="82f8ef22bd70eae79356b8a82fe77005923430fd3b5185105314c7bce9550765" name="sssd-common" arch="x86_64">
  <version epoch="0" ver="2.7.3" rel="4.el8_7.1"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.6.2-1" date="1640606400">- Resolves: rhbz#2011216 - Rebase SSSD for RHEL 8.6
- Resolves: rhbz#2013260 - [RHEL8] Add ability to parse child log files
- Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries
- Resolves: rhbz#1859315 - sssd does not use kerberos port that is set.
- Resolves: rhbz#1961182 - Passwordless (GSSAPI) SSH not working due to missing "includedir /var/lib/sss/pubconf/krb5.include.d" directive in /etc/krb5.conf
- Resolves: rhbz#2008829 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2012263 - pam responder does not call initgroups to refresh the user entry
- Resolves: rhbz#2012308 - Add client certificate validation D-Bus API
- Resolves: rhbz#2012327 - Groups are missing while performing id lookup as SSSD switching to offline mode due to the wrong domain name in the ldap-pings(netlogon).
- Resolves: rhbz#2013028 - [RFE] Health and Support Analyzer: Add sssctl sub-command to select and display a single request from the logs
- Resolves: rhbz#2013259 - [RHEL8] Add tevent chain ID logic into responders
- Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.6.2-2" date="1641297600">- Resolves: rhbz#2013260 - [RHEL8] Add ability to parse child log files (additional patch)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.6.2-3" date="1642420800">- Resolves: rhbz#2039892 - 2.6.2 regression: Daemon crashes when resolving AD user names
- Resolves: rhbz#1859315 - sssd does not use kerberos port that is set.
- Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries
- Resolves: rhbz#2035245 - AD Domain in the AD Forest Missing after sssd latest update
- Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.0-2" date="1652875200">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2026799 - SSSD authenticating to LDAP with obfuscated password produces Invalid authtoken type message causing sssd_be to go offline (cross inter_ference of different provider plugins options)
- Resolves: rhbz#2033347 - sssd error triggers backtrace : [write_krb5info_file_from_fo_server] (0x0020): [RID#73501] There is no server that can be written into kdc info file.
- Resolves: rhbz#2056483 - [RFE] Add sssd internal krb5 plugin for authentication against external IdP via OAuth2
- Resolves: rhbz#2062689 - [Improvement] Add user and group version of sss_nss_getorigbyname()
- Resolves: rhbz#2065692 - [RHEL8] Ship new sub-package called sssd-idp into sssd
- Resolves: rhbz#2072050 - sssd_nss exiting (due to missing 'sssd' local user) making SSSD service to restart in a loop
- Resolves: rhbz#2072931 - Use right sdap_domain in ad_domain_info_send
- Resolves: rhbz#2087088 - sssd does not enforce smartcard auth for kde screen locker
- Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol
- Resolves: rhbz#2087745 - 2FA prompting setting ineffective
- Resolves: rhbz#2087746 - sssd fails GPO-based access if AD have setup with Japanese language</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.2-1" date="1655726400">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2098620 - sdap_nested_group_deref_direct_process() triggers internal watchdog for large data sets
- Resolves: rhbz#2098619 - [Improvement] add SSSD support for more than one CRL PEM file name with parameters certificate_verification and crl_file
- Resolves: rhbz#2088817 - pam_sss_gss ceased to work after upgrade to 8.6
- Resolves: rhbz#2098616 - Add idp authentication indicator in man page of sssd.conf
- Resolves: rhbz#2056035 - 'getent hosts' not return hosts if they have more than one CN in LDAP
- Resolves: rhbz#2098615 - Regression "Missing internal domain data." when setting ad_domain to incorrect
- Resolves: rhbz#2098617 - Harden kerberos ticket validation
- Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-1" date="1657713600">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2063016 - [sssd] RHEL 8.7 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-2" date="1660132800">- Resolves: rhbz#2116488 - virsh command will hang after the host run several auto test cases
- Resolves: rhbz#2116486 - [regression] sssctl analyze fails to parse PAM related sssd logs
- Resolves: rhbz#2116487 - cache_req_data_set_hybrid_lookup: cache_req_data should never be NULL</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-3" date="1661256000">- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8
- Resolves: rhbz#2119726 - sssctl analyze --logdir option requires sssd to be configured
- Resolves: rhbz#2120669 - Incorrect request ID tracking from responder to backend</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4" date="1661515200">- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4.1" date="1665662400">- Resolves: rhbz#2128544 - Cannot SSH with AD user to ipa-client (`krb5_validate` and `pac_check` settings conflict) [rhel-8.7.0.z]</changelog>
</package>
<package pkgid="4917166ef30a28b18afd2401e7d056b78db177557116f0d2fc59cdd40fab2854" name="sssd-common" arch="x86_64">
  <version epoch="0" ver="2.7.3" rel="4.el8_7.3"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.6.2-3" date="1642420800">- Resolves: rhbz#2039892 - 2.6.2 regression: Daemon crashes when resolving AD user names
- Resolves: rhbz#1859315 - sssd does not use kerberos port that is set.
- Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries
- Resolves: rhbz#2035245 - AD Domain in the AD Forest Missing after sssd latest update
- Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.0-2" date="1652875200">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2026799 - SSSD authenticating to LDAP with obfuscated password produces Invalid authtoken type message causing sssd_be to go offline (cross inter_ference of different provider plugins options)
- Resolves: rhbz#2033347 - sssd error triggers backtrace : [write_krb5info_file_from_fo_server] (0x0020): [RID#73501] There is no server that can be written into kdc info file.
- Resolves: rhbz#2056483 - [RFE] Add sssd internal krb5 plugin for authentication against external IdP via OAuth2
- Resolves: rhbz#2062689 - [Improvement] Add user and group version of sss_nss_getorigbyname()
- Resolves: rhbz#2065692 - [RHEL8] Ship new sub-package called sssd-idp into sssd
- Resolves: rhbz#2072050 - sssd_nss exiting (due to missing 'sssd' local user) making SSSD service to restart in a loop
- Resolves: rhbz#2072931 - Use right sdap_domain in ad_domain_info_send
- Resolves: rhbz#2087088 - sssd does not enforce smartcard auth for kde screen locker
- Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol
- Resolves: rhbz#2087745 - 2FA prompting setting ineffective
- Resolves: rhbz#2087746 - sssd fails GPO-based access if AD have setup with Japanese language</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.2-1" date="1655726400">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2098620 - sdap_nested_group_deref_direct_process() triggers internal watchdog for large data sets
- Resolves: rhbz#2098619 - [Improvement] add SSSD support for more than one CRL PEM file name with parameters certificate_verification and crl_file
- Resolves: rhbz#2088817 - pam_sss_gss ceased to work after upgrade to 8.6
- Resolves: rhbz#2098616 - Add idp authentication indicator in man page of sssd.conf
- Resolves: rhbz#2056035 - 'getent hosts' not return hosts if they have more than one CN in LDAP
- Resolves: rhbz#2098615 - Regression "Missing internal domain data." when setting ad_domain to incorrect
- Resolves: rhbz#2098617 - Harden kerberos ticket validation
- Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-1" date="1657713600">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2063016 - [sssd] RHEL 8.7 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-2" date="1660132800">- Resolves: rhbz#2116488 - virsh command will hang after the host run several auto test cases
- Resolves: rhbz#2116486 - [regression] sssctl analyze fails to parse PAM related sssd logs
- Resolves: rhbz#2116487 - cache_req_data_set_hybrid_lookup: cache_req_data should never be NULL</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-3" date="1661256000">- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8
- Resolves: rhbz#2119726 - sssctl analyze --logdir option requires sssd to be configured
- Resolves: rhbz#2120669 - Incorrect request ID tracking from responder to backend</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4" date="1661515200">- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4.1" date="1665662400">- Resolves: rhbz#2128544 - Cannot SSH with AD user to ipa-client (`krb5_validate` and `pac_check` settings conflict) [rhel-8.7.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4.2" date="1670587200">- Resolves: rhbz#2139871 - Analyzer: Optimize and remove duplicate messages in verbose list [rhel-8.7.0.z]
- Resolves: rhbz#2142961 - SSSD: `sssctl analyze` command shouldn't require 'root' privileged [rhel-8.7.0.z]
- Resolves: rhbz#2148989 - UPN check cannot be disabled explicitly but requires krb5_validate = false' as a work-around [rhel-8.7.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4.3" date="1671105600">- Resolves: rhbz#2152883 - authenticating against external IdP services okta (native app) with OAuth client secret failed [rhel-8.7.0.z]</changelog>
</package>
<package pkgid="dab9392fcfa91987debe201d43e7b9945cb9d4f7d2f002c728ba20399d71efe2" name="sssd-common-pac" arch="x86_64">
  <version epoch="0" ver="2.7.3" rel="4.el8_7.1"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.6.2-1" date="1640606400">- Resolves: rhbz#2011216 - Rebase SSSD for RHEL 8.6
- Resolves: rhbz#2013260 - [RHEL8] Add ability to parse child log files
- Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries
- Resolves: rhbz#1859315 - sssd does not use kerberos port that is set.
- Resolves: rhbz#1961182 - Passwordless (GSSAPI) SSH not working due to missing "includedir /var/lib/sss/pubconf/krb5.include.d" directive in /etc/krb5.conf
- Resolves: rhbz#2008829 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2012263 - pam responder does not call initgroups to refresh the user entry
- Resolves: rhbz#2012308 - Add client certificate validation D-Bus API
- Resolves: rhbz#2012327 - Groups are missing while performing id lookup as SSSD switching to offline mode due to the wrong domain name in the ldap-pings(netlogon).
- Resolves: rhbz#2013028 - [RFE] Health and Support Analyzer: Add sssctl sub-command to select and display a single request from the logs
- Resolves: rhbz#2013259 - [RHEL8] Add tevent chain ID logic into responders
- Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.6.2-2" date="1641297600">- Resolves: rhbz#2013260 - [RHEL8] Add ability to parse child log files (additional patch)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.6.2-3" date="1642420800">- Resolves: rhbz#2039892 - 2.6.2 regression: Daemon crashes when resolving AD user names
- Resolves: rhbz#1859315 - sssd does not use kerberos port that is set.
- Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries
- Resolves: rhbz#2035245 - AD Domain in the AD Forest Missing after sssd latest update
- Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.0-2" date="1652875200">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2026799 - SSSD authenticating to LDAP with obfuscated password produces Invalid authtoken type message causing sssd_be to go offline (cross inter_ference of different provider plugins options)
- Resolves: rhbz#2033347 - sssd error triggers backtrace : [write_krb5info_file_from_fo_server] (0x0020): [RID#73501] There is no server that can be written into kdc info file.
- Resolves: rhbz#2056483 - [RFE] Add sssd internal krb5 plugin for authentication against external IdP via OAuth2
- Resolves: rhbz#2062689 - [Improvement] Add user and group version of sss_nss_getorigbyname()
- Resolves: rhbz#2065692 - [RHEL8] Ship new sub-package called sssd-idp into sssd
- Resolves: rhbz#2072050 - sssd_nss exiting (due to missing 'sssd' local user) making SSSD service to restart in a loop
- Resolves: rhbz#2072931 - Use right sdap_domain in ad_domain_info_send
- Resolves: rhbz#2087088 - sssd does not enforce smartcard auth for kde screen locker
- Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol
- Resolves: rhbz#2087745 - 2FA prompting setting ineffective
- Resolves: rhbz#2087746 - sssd fails GPO-based access if AD have setup with Japanese language</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.2-1" date="1655726400">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2098620 - sdap_nested_group_deref_direct_process() triggers internal watchdog for large data sets
- Resolves: rhbz#2098619 - [Improvement] add SSSD support for more than one CRL PEM file name with parameters certificate_verification and crl_file
- Resolves: rhbz#2088817 - pam_sss_gss ceased to work after upgrade to 8.6
- Resolves: rhbz#2098616 - Add idp authentication indicator in man page of sssd.conf
- Resolves: rhbz#2056035 - 'getent hosts' not return hosts if they have more than one CN in LDAP
- Resolves: rhbz#2098615 - Regression "Missing internal domain data." when setting ad_domain to incorrect
- Resolves: rhbz#2098617 - Harden kerberos ticket validation
- Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-1" date="1657713600">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2063016 - [sssd] RHEL 8.7 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-2" date="1660132800">- Resolves: rhbz#2116488 - virsh command will hang after the host run several auto test cases
- Resolves: rhbz#2116486 - [regression] sssctl analyze fails to parse PAM related sssd logs
- Resolves: rhbz#2116487 - cache_req_data_set_hybrid_lookup: cache_req_data should never be NULL</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-3" date="1661256000">- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8
- Resolves: rhbz#2119726 - sssctl analyze --logdir option requires sssd to be configured
- Resolves: rhbz#2120669 - Incorrect request ID tracking from responder to backend</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4" date="1661515200">- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4.1" date="1665662400">- Resolves: rhbz#2128544 - Cannot SSH with AD user to ipa-client (`krb5_validate` and `pac_check` settings conflict) [rhel-8.7.0.z]</changelog>
</package>
<package pkgid="21024e876703837eaafecde80d2e56662e46666d19399239d36303e864318a25" name="sssd-common-pac" arch="x86_64">
  <version epoch="0" ver="2.7.3" rel="4.el8_7.3"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.6.2-3" date="1642420800">- Resolves: rhbz#2039892 - 2.6.2 regression: Daemon crashes when resolving AD user names
- Resolves: rhbz#1859315 - sssd does not use kerberos port that is set.
- Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries
- Resolves: rhbz#2035245 - AD Domain in the AD Forest Missing after sssd latest update
- Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.0-2" date="1652875200">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2026799 - SSSD authenticating to LDAP with obfuscated password produces Invalid authtoken type message causing sssd_be to go offline (cross inter_ference of different provider plugins options)
- Resolves: rhbz#2033347 - sssd error triggers backtrace : [write_krb5info_file_from_fo_server] (0x0020): [RID#73501] There is no server that can be written into kdc info file.
- Resolves: rhbz#2056483 - [RFE] Add sssd internal krb5 plugin for authentication against external IdP via OAuth2
- Resolves: rhbz#2062689 - [Improvement] Add user and group version of sss_nss_getorigbyname()
- Resolves: rhbz#2065692 - [RHEL8] Ship new sub-package called sssd-idp into sssd
- Resolves: rhbz#2072050 - sssd_nss exiting (due to missing 'sssd' local user) making SSSD service to restart in a loop
- Resolves: rhbz#2072931 - Use right sdap_domain in ad_domain_info_send
- Resolves: rhbz#2087088 - sssd does not enforce smartcard auth for kde screen locker
- Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol
- Resolves: rhbz#2087745 - 2FA prompting setting ineffective
- Resolves: rhbz#2087746 - sssd fails GPO-based access if AD have setup with Japanese language</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.2-1" date="1655726400">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2098620 - sdap_nested_group_deref_direct_process() triggers internal watchdog for large data sets
- Resolves: rhbz#2098619 - [Improvement] add SSSD support for more than one CRL PEM file name with parameters certificate_verification and crl_file
- Resolves: rhbz#2088817 - pam_sss_gss ceased to work after upgrade to 8.6
- Resolves: rhbz#2098616 - Add idp authentication indicator in man page of sssd.conf
- Resolves: rhbz#2056035 - 'getent hosts' not return hosts if they have more than one CN in LDAP
- Resolves: rhbz#2098615 - Regression "Missing internal domain data." when setting ad_domain to incorrect
- Resolves: rhbz#2098617 - Harden kerberos ticket validation
- Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-1" date="1657713600">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2063016 - [sssd] RHEL 8.7 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-2" date="1660132800">- Resolves: rhbz#2116488 - virsh command will hang after the host run several auto test cases
- Resolves: rhbz#2116486 - [regression] sssctl analyze fails to parse PAM related sssd logs
- Resolves: rhbz#2116487 - cache_req_data_set_hybrid_lookup: cache_req_data should never be NULL</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-3" date="1661256000">- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8
- Resolves: rhbz#2119726 - sssctl analyze --logdir option requires sssd to be configured
- Resolves: rhbz#2120669 - Incorrect request ID tracking from responder to backend</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4" date="1661515200">- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4.1" date="1665662400">- Resolves: rhbz#2128544 - Cannot SSH with AD user to ipa-client (`krb5_validate` and `pac_check` settings conflict) [rhel-8.7.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4.2" date="1670587200">- Resolves: rhbz#2139871 - Analyzer: Optimize and remove duplicate messages in verbose list [rhel-8.7.0.z]
- Resolves: rhbz#2142961 - SSSD: `sssctl analyze` command shouldn't require 'root' privileged [rhel-8.7.0.z]
- Resolves: rhbz#2148989 - UPN check cannot be disabled explicitly but requires krb5_validate = false' as a work-around [rhel-8.7.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4.3" date="1671105600">- Resolves: rhbz#2152883 - authenticating against external IdP services okta (native app) with OAuth client secret failed [rhel-8.7.0.z]</changelog>
</package>
<package pkgid="7b29d6f7d2d974f5c948bec8c201be3e361dea53faea81f0bccd1675cec6ebea" name="sssd-dbus" arch="x86_64">
  <version epoch="0" ver="2.7.3" rel="4.el8_7.1"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.6.2-1" date="1640606400">- Resolves: rhbz#2011216 - Rebase SSSD for RHEL 8.6
- Resolves: rhbz#2013260 - [RHEL8] Add ability to parse child log files
- Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries
- Resolves: rhbz#1859315 - sssd does not use kerberos port that is set.
- Resolves: rhbz#1961182 - Passwordless (GSSAPI) SSH not working due to missing "includedir /var/lib/sss/pubconf/krb5.include.d" directive in /etc/krb5.conf
- Resolves: rhbz#2008829 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2012263 - pam responder does not call initgroups to refresh the user entry
- Resolves: rhbz#2012308 - Add client certificate validation D-Bus API
- Resolves: rhbz#2012327 - Groups are missing while performing id lookup as SSSD switching to offline mode due to the wrong domain name in the ldap-pings(netlogon).
- Resolves: rhbz#2013028 - [RFE] Health and Support Analyzer: Add sssctl sub-command to select and display a single request from the logs
- Resolves: rhbz#2013259 - [RHEL8] Add tevent chain ID logic into responders
- Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.6.2-2" date="1641297600">- Resolves: rhbz#2013260 - [RHEL8] Add ability to parse child log files (additional patch)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.6.2-3" date="1642420800">- Resolves: rhbz#2039892 - 2.6.2 regression: Daemon crashes when resolving AD user names
- Resolves: rhbz#1859315 - sssd does not use kerberos port that is set.
- Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries
- Resolves: rhbz#2035245 - AD Domain in the AD Forest Missing after sssd latest update
- Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.0-2" date="1652875200">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2026799 - SSSD authenticating to LDAP with obfuscated password produces Invalid authtoken type message causing sssd_be to go offline (cross inter_ference of different provider plugins options)
- Resolves: rhbz#2033347 - sssd error triggers backtrace : [write_krb5info_file_from_fo_server] (0x0020): [RID#73501] There is no server that can be written into kdc info file.
- Resolves: rhbz#2056483 - [RFE] Add sssd internal krb5 plugin for authentication against external IdP via OAuth2
- Resolves: rhbz#2062689 - [Improvement] Add user and group version of sss_nss_getorigbyname()
- Resolves: rhbz#2065692 - [RHEL8] Ship new sub-package called sssd-idp into sssd
- Resolves: rhbz#2072050 - sssd_nss exiting (due to missing 'sssd' local user) making SSSD service to restart in a loop
- Resolves: rhbz#2072931 - Use right sdap_domain in ad_domain_info_send
- Resolves: rhbz#2087088 - sssd does not enforce smartcard auth for kde screen locker
- Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol
- Resolves: rhbz#2087745 - 2FA prompting setting ineffective
- Resolves: rhbz#2087746 - sssd fails GPO-based access if AD have setup with Japanese language</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.2-1" date="1655726400">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2098620 - sdap_nested_group_deref_direct_process() triggers internal watchdog for large data sets
- Resolves: rhbz#2098619 - [Improvement] add SSSD support for more than one CRL PEM file name with parameters certificate_verification and crl_file
- Resolves: rhbz#2088817 - pam_sss_gss ceased to work after upgrade to 8.6
- Resolves: rhbz#2098616 - Add idp authentication indicator in man page of sssd.conf
- Resolves: rhbz#2056035 - 'getent hosts' not return hosts if they have more than one CN in LDAP
- Resolves: rhbz#2098615 - Regression "Missing internal domain data." when setting ad_domain to incorrect
- Resolves: rhbz#2098617 - Harden kerberos ticket validation
- Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-1" date="1657713600">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2063016 - [sssd] RHEL 8.7 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-2" date="1660132800">- Resolves: rhbz#2116488 - virsh command will hang after the host run several auto test cases
- Resolves: rhbz#2116486 - [regression] sssctl analyze fails to parse PAM related sssd logs
- Resolves: rhbz#2116487 - cache_req_data_set_hybrid_lookup: cache_req_data should never be NULL</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-3" date="1661256000">- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8
- Resolves: rhbz#2119726 - sssctl analyze --logdir option requires sssd to be configured
- Resolves: rhbz#2120669 - Incorrect request ID tracking from responder to backend</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4" date="1661515200">- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4.1" date="1665662400">- Resolves: rhbz#2128544 - Cannot SSH with AD user to ipa-client (`krb5_validate` and `pac_check` settings conflict) [rhel-8.7.0.z]</changelog>
</package>
<package pkgid="9a0105275d66fd8638827d00585d5b1938b7221d8a490c60542e9027fca6fb1b" name="sssd-dbus" arch="x86_64">
  <version epoch="0" ver="2.7.3" rel="4.el8_7.3"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.6.2-3" date="1642420800">- Resolves: rhbz#2039892 - 2.6.2 regression: Daemon crashes when resolving AD user names
- Resolves: rhbz#1859315 - sssd does not use kerberos port that is set.
- Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries
- Resolves: rhbz#2035245 - AD Domain in the AD Forest Missing after sssd latest update
- Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.0-2" date="1652875200">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2026799 - SSSD authenticating to LDAP with obfuscated password produces Invalid authtoken type message causing sssd_be to go offline (cross inter_ference of different provider plugins options)
- Resolves: rhbz#2033347 - sssd error triggers backtrace : [write_krb5info_file_from_fo_server] (0x0020): [RID#73501] There is no server that can be written into kdc info file.
- Resolves: rhbz#2056483 - [RFE] Add sssd internal krb5 plugin for authentication against external IdP via OAuth2
- Resolves: rhbz#2062689 - [Improvement] Add user and group version of sss_nss_getorigbyname()
- Resolves: rhbz#2065692 - [RHEL8] Ship new sub-package called sssd-idp into sssd
- Resolves: rhbz#2072050 - sssd_nss exiting (due to missing 'sssd' local user) making SSSD service to restart in a loop
- Resolves: rhbz#2072931 - Use right sdap_domain in ad_domain_info_send
- Resolves: rhbz#2087088 - sssd does not enforce smartcard auth for kde screen locker
- Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol
- Resolves: rhbz#2087745 - 2FA prompting setting ineffective
- Resolves: rhbz#2087746 - sssd fails GPO-based access if AD have setup with Japanese language</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.2-1" date="1655726400">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2098620 - sdap_nested_group_deref_direct_process() triggers internal watchdog for large data sets
- Resolves: rhbz#2098619 - [Improvement] add SSSD support for more than one CRL PEM file name with parameters certificate_verification and crl_file
- Resolves: rhbz#2088817 - pam_sss_gss ceased to work after upgrade to 8.6
- Resolves: rhbz#2098616 - Add idp authentication indicator in man page of sssd.conf
- Resolves: rhbz#2056035 - 'getent hosts' not return hosts if they have more than one CN in LDAP
- Resolves: rhbz#2098615 - Regression "Missing internal domain data." when setting ad_domain to incorrect
- Resolves: rhbz#2098617 - Harden kerberos ticket validation
- Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-1" date="1657713600">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2063016 - [sssd] RHEL 8.7 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-2" date="1660132800">- Resolves: rhbz#2116488 - virsh command will hang after the host run several auto test cases
- Resolves: rhbz#2116486 - [regression] sssctl analyze fails to parse PAM related sssd logs
- Resolves: rhbz#2116487 - cache_req_data_set_hybrid_lookup: cache_req_data should never be NULL</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-3" date="1661256000">- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8
- Resolves: rhbz#2119726 - sssctl analyze --logdir option requires sssd to be configured
- Resolves: rhbz#2120669 - Incorrect request ID tracking from responder to backend</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4" date="1661515200">- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4.1" date="1665662400">- Resolves: rhbz#2128544 - Cannot SSH with AD user to ipa-client (`krb5_validate` and `pac_check` settings conflict) [rhel-8.7.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4.2" date="1670587200">- Resolves: rhbz#2139871 - Analyzer: Optimize and remove duplicate messages in verbose list [rhel-8.7.0.z]
- Resolves: rhbz#2142961 - SSSD: `sssctl analyze` command shouldn't require 'root' privileged [rhel-8.7.0.z]
- Resolves: rhbz#2148989 - UPN check cannot be disabled explicitly but requires krb5_validate = false' as a work-around [rhel-8.7.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4.3" date="1671105600">- Resolves: rhbz#2152883 - authenticating against external IdP services okta (native app) with OAuth client secret failed [rhel-8.7.0.z]</changelog>
</package>
<package pkgid="28fcb5724919ab6196cd9d75d404ebf28491975c40debd88631b2f054b0b1e91" name="sssd-idp" arch="x86_64">
  <version epoch="0" ver="2.7.3" rel="4.el8_7.1"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.6.2-1" date="1640606400">- Resolves: rhbz#2011216 - Rebase SSSD for RHEL 8.6
- Resolves: rhbz#2013260 - [RHEL8] Add ability to parse child log files
- Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries
- Resolves: rhbz#1859315 - sssd does not use kerberos port that is set.
- Resolves: rhbz#1961182 - Passwordless (GSSAPI) SSH not working due to missing "includedir /var/lib/sss/pubconf/krb5.include.d" directive in /etc/krb5.conf
- Resolves: rhbz#2008829 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2012263 - pam responder does not call initgroups to refresh the user entry
- Resolves: rhbz#2012308 - Add client certificate validation D-Bus API
- Resolves: rhbz#2012327 - Groups are missing while performing id lookup as SSSD switching to offline mode due to the wrong domain name in the ldap-pings(netlogon).
- Resolves: rhbz#2013028 - [RFE] Health and Support Analyzer: Add sssctl sub-command to select and display a single request from the logs
- Resolves: rhbz#2013259 - [RHEL8] Add tevent chain ID logic into responders
- Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.6.2-2" date="1641297600">- Resolves: rhbz#2013260 - [RHEL8] Add ability to parse child log files (additional patch)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.6.2-3" date="1642420800">- Resolves: rhbz#2039892 - 2.6.2 regression: Daemon crashes when resolving AD user names
- Resolves: rhbz#1859315 - sssd does not use kerberos port that is set.
- Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries
- Resolves: rhbz#2035245 - AD Domain in the AD Forest Missing after sssd latest update
- Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.0-2" date="1652875200">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2026799 - SSSD authenticating to LDAP with obfuscated password produces Invalid authtoken type message causing sssd_be to go offline (cross inter_ference of different provider plugins options)
- Resolves: rhbz#2033347 - sssd error triggers backtrace : [write_krb5info_file_from_fo_server] (0x0020): [RID#73501] There is no server that can be written into kdc info file.
- Resolves: rhbz#2056483 - [RFE] Add sssd internal krb5 plugin for authentication against external IdP via OAuth2
- Resolves: rhbz#2062689 - [Improvement] Add user and group version of sss_nss_getorigbyname()
- Resolves: rhbz#2065692 - [RHEL8] Ship new sub-package called sssd-idp into sssd
- Resolves: rhbz#2072050 - sssd_nss exiting (due to missing 'sssd' local user) making SSSD service to restart in a loop
- Resolves: rhbz#2072931 - Use right sdap_domain in ad_domain_info_send
- Resolves: rhbz#2087088 - sssd does not enforce smartcard auth for kde screen locker
- Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol
- Resolves: rhbz#2087745 - 2FA prompting setting ineffective
- Resolves: rhbz#2087746 - sssd fails GPO-based access if AD have setup with Japanese language</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.2-1" date="1655726400">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2098620 - sdap_nested_group_deref_direct_process() triggers internal watchdog for large data sets
- Resolves: rhbz#2098619 - [Improvement] add SSSD support for more than one CRL PEM file name with parameters certificate_verification and crl_file
- Resolves: rhbz#2088817 - pam_sss_gss ceased to work after upgrade to 8.6
- Resolves: rhbz#2098616 - Add idp authentication indicator in man page of sssd.conf
- Resolves: rhbz#2056035 - 'getent hosts' not return hosts if they have more than one CN in LDAP
- Resolves: rhbz#2098615 - Regression "Missing internal domain data." when setting ad_domain to incorrect
- Resolves: rhbz#2098617 - Harden kerberos ticket validation
- Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-1" date="1657713600">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2063016 - [sssd] RHEL 8.7 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-2" date="1660132800">- Resolves: rhbz#2116488 - virsh command will hang after the host run several auto test cases
- Resolves: rhbz#2116486 - [regression] sssctl analyze fails to parse PAM related sssd logs
- Resolves: rhbz#2116487 - cache_req_data_set_hybrid_lookup: cache_req_data should never be NULL</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-3" date="1661256000">- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8
- Resolves: rhbz#2119726 - sssctl analyze --logdir option requires sssd to be configured
- Resolves: rhbz#2120669 - Incorrect request ID tracking from responder to backend</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4" date="1661515200">- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4.1" date="1665662400">- Resolves: rhbz#2128544 - Cannot SSH with AD user to ipa-client (`krb5_validate` and `pac_check` settings conflict) [rhel-8.7.0.z]</changelog>
</package>
<package pkgid="b6c03ed5bbb9da102fdd6f70632c5247748858eaa6000bc50f0f92b2efe17a2d" name="sssd-idp" arch="x86_64">
  <version epoch="0" ver="2.7.3" rel="4.el8_7.3"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.6.2-3" date="1642420800">- Resolves: rhbz#2039892 - 2.6.2 regression: Daemon crashes when resolving AD user names
- Resolves: rhbz#1859315 - sssd does not use kerberos port that is set.
- Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries
- Resolves: rhbz#2035245 - AD Domain in the AD Forest Missing after sssd latest update
- Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.0-2" date="1652875200">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2026799 - SSSD authenticating to LDAP with obfuscated password produces Invalid authtoken type message causing sssd_be to go offline (cross inter_ference of different provider plugins options)
- Resolves: rhbz#2033347 - sssd error triggers backtrace : [write_krb5info_file_from_fo_server] (0x0020): [RID#73501] There is no server that can be written into kdc info file.
- Resolves: rhbz#2056483 - [RFE] Add sssd internal krb5 plugin for authentication against external IdP via OAuth2
- Resolves: rhbz#2062689 - [Improvement] Add user and group version of sss_nss_getorigbyname()
- Resolves: rhbz#2065692 - [RHEL8] Ship new sub-package called sssd-idp into sssd
- Resolves: rhbz#2072050 - sssd_nss exiting (due to missing 'sssd' local user) making SSSD service to restart in a loop
- Resolves: rhbz#2072931 - Use right sdap_domain in ad_domain_info_send
- Resolves: rhbz#2087088 - sssd does not enforce smartcard auth for kde screen locker
- Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol
- Resolves: rhbz#2087745 - 2FA prompting setting ineffective
- Resolves: rhbz#2087746 - sssd fails GPO-based access if AD have setup with Japanese language</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.2-1" date="1655726400">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2098620 - sdap_nested_group_deref_direct_process() triggers internal watchdog for large data sets
- Resolves: rhbz#2098619 - [Improvement] add SSSD support for more than one CRL PEM file name with parameters certificate_verification and crl_file
- Resolves: rhbz#2088817 - pam_sss_gss ceased to work after upgrade to 8.6
- Resolves: rhbz#2098616 - Add idp authentication indicator in man page of sssd.conf
- Resolves: rhbz#2056035 - 'getent hosts' not return hosts if they have more than one CN in LDAP
- Resolves: rhbz#2098615 - Regression "Missing internal domain data." when setting ad_domain to incorrect
- Resolves: rhbz#2098617 - Harden kerberos ticket validation
- Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-1" date="1657713600">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2063016 - [sssd] RHEL 8.7 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-2" date="1660132800">- Resolves: rhbz#2116488 - virsh command will hang after the host run several auto test cases
- Resolves: rhbz#2116486 - [regression] sssctl analyze fails to parse PAM related sssd logs
- Resolves: rhbz#2116487 - cache_req_data_set_hybrid_lookup: cache_req_data should never be NULL</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-3" date="1661256000">- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8
- Resolves: rhbz#2119726 - sssctl analyze --logdir option requires sssd to be configured
- Resolves: rhbz#2120669 - Incorrect request ID tracking from responder to backend</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4" date="1661515200">- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4.1" date="1665662400">- Resolves: rhbz#2128544 - Cannot SSH with AD user to ipa-client (`krb5_validate` and `pac_check` settings conflict) [rhel-8.7.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4.2" date="1670587200">- Resolves: rhbz#2139871 - Analyzer: Optimize and remove duplicate messages in verbose list [rhel-8.7.0.z]
- Resolves: rhbz#2142961 - SSSD: `sssctl analyze` command shouldn't require 'root' privileged [rhel-8.7.0.z]
- Resolves: rhbz#2148989 - UPN check cannot be disabled explicitly but requires krb5_validate = false' as a work-around [rhel-8.7.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4.3" date="1671105600">- Resolves: rhbz#2152883 - authenticating against external IdP services okta (native app) with OAuth client secret failed [rhel-8.7.0.z]</changelog>
</package>
<package pkgid="b5f685778924bdc8e647bbb220d24f94145831677f128e352716a4ac18063031" name="sssd-ipa" arch="x86_64">
  <version epoch="0" ver="2.7.3" rel="4.el8_7.1"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.6.2-1" date="1640606400">- Resolves: rhbz#2011216 - Rebase SSSD for RHEL 8.6
- Resolves: rhbz#2013260 - [RHEL8] Add ability to parse child log files
- Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries
- Resolves: rhbz#1859315 - sssd does not use kerberos port that is set.
- Resolves: rhbz#1961182 - Passwordless (GSSAPI) SSH not working due to missing "includedir /var/lib/sss/pubconf/krb5.include.d" directive in /etc/krb5.conf
- Resolves: rhbz#2008829 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2012263 - pam responder does not call initgroups to refresh the user entry
- Resolves: rhbz#2012308 - Add client certificate validation D-Bus API
- Resolves: rhbz#2012327 - Groups are missing while performing id lookup as SSSD switching to offline mode due to the wrong domain name in the ldap-pings(netlogon).
- Resolves: rhbz#2013028 - [RFE] Health and Support Analyzer: Add sssctl sub-command to select and display a single request from the logs
- Resolves: rhbz#2013259 - [RHEL8] Add tevent chain ID logic into responders
- Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.6.2-2" date="1641297600">- Resolves: rhbz#2013260 - [RHEL8] Add ability to parse child log files (additional patch)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.6.2-3" date="1642420800">- Resolves: rhbz#2039892 - 2.6.2 regression: Daemon crashes when resolving AD user names
- Resolves: rhbz#1859315 - sssd does not use kerberos port that is set.
- Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries
- Resolves: rhbz#2035245 - AD Domain in the AD Forest Missing after sssd latest update
- Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.0-2" date="1652875200">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2026799 - SSSD authenticating to LDAP with obfuscated password produces Invalid authtoken type message causing sssd_be to go offline (cross inter_ference of different provider plugins options)
- Resolves: rhbz#2033347 - sssd error triggers backtrace : [write_krb5info_file_from_fo_server] (0x0020): [RID#73501] There is no server that can be written into kdc info file.
- Resolves: rhbz#2056483 - [RFE] Add sssd internal krb5 plugin for authentication against external IdP via OAuth2
- Resolves: rhbz#2062689 - [Improvement] Add user and group version of sss_nss_getorigbyname()
- Resolves: rhbz#2065692 - [RHEL8] Ship new sub-package called sssd-idp into sssd
- Resolves: rhbz#2072050 - sssd_nss exiting (due to missing 'sssd' local user) making SSSD service to restart in a loop
- Resolves: rhbz#2072931 - Use right sdap_domain in ad_domain_info_send
- Resolves: rhbz#2087088 - sssd does not enforce smartcard auth for kde screen locker
- Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol
- Resolves: rhbz#2087745 - 2FA prompting setting ineffective
- Resolves: rhbz#2087746 - sssd fails GPO-based access if AD have setup with Japanese language</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.2-1" date="1655726400">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2098620 - sdap_nested_group_deref_direct_process() triggers internal watchdog for large data sets
- Resolves: rhbz#2098619 - [Improvement] add SSSD support for more than one CRL PEM file name with parameters certificate_verification and crl_file
- Resolves: rhbz#2088817 - pam_sss_gss ceased to work after upgrade to 8.6
- Resolves: rhbz#2098616 - Add idp authentication indicator in man page of sssd.conf
- Resolves: rhbz#2056035 - 'getent hosts' not return hosts if they have more than one CN in LDAP
- Resolves: rhbz#2098615 - Regression "Missing internal domain data." when setting ad_domain to incorrect
- Resolves: rhbz#2098617 - Harden kerberos ticket validation
- Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-1" date="1657713600">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2063016 - [sssd] RHEL 8.7 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-2" date="1660132800">- Resolves: rhbz#2116488 - virsh command will hang after the host run several auto test cases
- Resolves: rhbz#2116486 - [regression] sssctl analyze fails to parse PAM related sssd logs
- Resolves: rhbz#2116487 - cache_req_data_set_hybrid_lookup: cache_req_data should never be NULL</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-3" date="1661256000">- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8
- Resolves: rhbz#2119726 - sssctl analyze --logdir option requires sssd to be configured
- Resolves: rhbz#2120669 - Incorrect request ID tracking from responder to backend</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4" date="1661515200">- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4.1" date="1665662400">- Resolves: rhbz#2128544 - Cannot SSH with AD user to ipa-client (`krb5_validate` and `pac_check` settings conflict) [rhel-8.7.0.z]</changelog>
</package>
<package pkgid="4bc9075dc3697d73e8276b83befc12d4ab5a3fc59399609a43c173608fb9955f" name="sssd-ipa" arch="x86_64">
  <version epoch="0" ver="2.7.3" rel="4.el8_7.3"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.6.2-3" date="1642420800">- Resolves: rhbz#2039892 - 2.6.2 regression: Daemon crashes when resolving AD user names
- Resolves: rhbz#1859315 - sssd does not use kerberos port that is set.
- Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries
- Resolves: rhbz#2035245 - AD Domain in the AD Forest Missing after sssd latest update
- Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.0-2" date="1652875200">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2026799 - SSSD authenticating to LDAP with obfuscated password produces Invalid authtoken type message causing sssd_be to go offline (cross inter_ference of different provider plugins options)
- Resolves: rhbz#2033347 - sssd error triggers backtrace : [write_krb5info_file_from_fo_server] (0x0020): [RID#73501] There is no server that can be written into kdc info file.
- Resolves: rhbz#2056483 - [RFE] Add sssd internal krb5 plugin for authentication against external IdP via OAuth2
- Resolves: rhbz#2062689 - [Improvement] Add user and group version of sss_nss_getorigbyname()
- Resolves: rhbz#2065692 - [RHEL8] Ship new sub-package called sssd-idp into sssd
- Resolves: rhbz#2072050 - sssd_nss exiting (due to missing 'sssd' local user) making SSSD service to restart in a loop
- Resolves: rhbz#2072931 - Use right sdap_domain in ad_domain_info_send
- Resolves: rhbz#2087088 - sssd does not enforce smartcard auth for kde screen locker
- Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol
- Resolves: rhbz#2087745 - 2FA prompting setting ineffective
- Resolves: rhbz#2087746 - sssd fails GPO-based access if AD have setup with Japanese language</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.2-1" date="1655726400">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2098620 - sdap_nested_group_deref_direct_process() triggers internal watchdog for large data sets
- Resolves: rhbz#2098619 - [Improvement] add SSSD support for more than one CRL PEM file name with parameters certificate_verification and crl_file
- Resolves: rhbz#2088817 - pam_sss_gss ceased to work after upgrade to 8.6
- Resolves: rhbz#2098616 - Add idp authentication indicator in man page of sssd.conf
- Resolves: rhbz#2056035 - 'getent hosts' not return hosts if they have more than one CN in LDAP
- Resolves: rhbz#2098615 - Regression "Missing internal domain data." when setting ad_domain to incorrect
- Resolves: rhbz#2098617 - Harden kerberos ticket validation
- Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-1" date="1657713600">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2063016 - [sssd] RHEL 8.7 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-2" date="1660132800">- Resolves: rhbz#2116488 - virsh command will hang after the host run several auto test cases
- Resolves: rhbz#2116486 - [regression] sssctl analyze fails to parse PAM related sssd logs
- Resolves: rhbz#2116487 - cache_req_data_set_hybrid_lookup: cache_req_data should never be NULL</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-3" date="1661256000">- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8
- Resolves: rhbz#2119726 - sssctl analyze --logdir option requires sssd to be configured
- Resolves: rhbz#2120669 - Incorrect request ID tracking from responder to backend</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4" date="1661515200">- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4.1" date="1665662400">- Resolves: rhbz#2128544 - Cannot SSH with AD user to ipa-client (`krb5_validate` and `pac_check` settings conflict) [rhel-8.7.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4.2" date="1670587200">- Resolves: rhbz#2139871 - Analyzer: Optimize and remove duplicate messages in verbose list [rhel-8.7.0.z]
- Resolves: rhbz#2142961 - SSSD: `sssctl analyze` command shouldn't require 'root' privileged [rhel-8.7.0.z]
- Resolves: rhbz#2148989 - UPN check cannot be disabled explicitly but requires krb5_validate = false' as a work-around [rhel-8.7.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4.3" date="1671105600">- Resolves: rhbz#2152883 - authenticating against external IdP services okta (native app) with OAuth client secret failed [rhel-8.7.0.z]</changelog>
</package>
<package pkgid="04695f30d7622b1a5e48a996c673fb2136c9ce6ad1a2acc69c543fe8b963e39a" name="sssd-kcm" arch="x86_64">
  <version epoch="0" ver="2.7.3" rel="4.el8_7.1"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.6.2-1" date="1640606400">- Resolves: rhbz#2011216 - Rebase SSSD for RHEL 8.6
- Resolves: rhbz#2013260 - [RHEL8] Add ability to parse child log files
- Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries
- Resolves: rhbz#1859315 - sssd does not use kerberos port that is set.
- Resolves: rhbz#1961182 - Passwordless (GSSAPI) SSH not working due to missing "includedir /var/lib/sss/pubconf/krb5.include.d" directive in /etc/krb5.conf
- Resolves: rhbz#2008829 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2012263 - pam responder does not call initgroups to refresh the user entry
- Resolves: rhbz#2012308 - Add client certificate validation D-Bus API
- Resolves: rhbz#2012327 - Groups are missing while performing id lookup as SSSD switching to offline mode due to the wrong domain name in the ldap-pings(netlogon).
- Resolves: rhbz#2013028 - [RFE] Health and Support Analyzer: Add sssctl sub-command to select and display a single request from the logs
- Resolves: rhbz#2013259 - [RHEL8] Add tevent chain ID logic into responders
- Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.6.2-2" date="1641297600">- Resolves: rhbz#2013260 - [RHEL8] Add ability to parse child log files (additional patch)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.6.2-3" date="1642420800">- Resolves: rhbz#2039892 - 2.6.2 regression: Daemon crashes when resolving AD user names
- Resolves: rhbz#1859315 - sssd does not use kerberos port that is set.
- Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries
- Resolves: rhbz#2035245 - AD Domain in the AD Forest Missing after sssd latest update
- Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.0-2" date="1652875200">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2026799 - SSSD authenticating to LDAP with obfuscated password produces Invalid authtoken type message causing sssd_be to go offline (cross inter_ference of different provider plugins options)
- Resolves: rhbz#2033347 - sssd error triggers backtrace : [write_krb5info_file_from_fo_server] (0x0020): [RID#73501] There is no server that can be written into kdc info file.
- Resolves: rhbz#2056483 - [RFE] Add sssd internal krb5 plugin for authentication against external IdP via OAuth2
- Resolves: rhbz#2062689 - [Improvement] Add user and group version of sss_nss_getorigbyname()
- Resolves: rhbz#2065692 - [RHEL8] Ship new sub-package called sssd-idp into sssd
- Resolves: rhbz#2072050 - sssd_nss exiting (due to missing 'sssd' local user) making SSSD service to restart in a loop
- Resolves: rhbz#2072931 - Use right sdap_domain in ad_domain_info_send
- Resolves: rhbz#2087088 - sssd does not enforce smartcard auth for kde screen locker
- Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol
- Resolves: rhbz#2087745 - 2FA prompting setting ineffective
- Resolves: rhbz#2087746 - sssd fails GPO-based access if AD have setup with Japanese language</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.2-1" date="1655726400">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2098620 - sdap_nested_group_deref_direct_process() triggers internal watchdog for large data sets
- Resolves: rhbz#2098619 - [Improvement] add SSSD support for more than one CRL PEM file name with parameters certificate_verification and crl_file
- Resolves: rhbz#2088817 - pam_sss_gss ceased to work after upgrade to 8.6
- Resolves: rhbz#2098616 - Add idp authentication indicator in man page of sssd.conf
- Resolves: rhbz#2056035 - 'getent hosts' not return hosts if they have more than one CN in LDAP
- Resolves: rhbz#2098615 - Regression "Missing internal domain data." when setting ad_domain to incorrect
- Resolves: rhbz#2098617 - Harden kerberos ticket validation
- Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-1" date="1657713600">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2063016 - [sssd] RHEL 8.7 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-2" date="1660132800">- Resolves: rhbz#2116488 - virsh command will hang after the host run several auto test cases
- Resolves: rhbz#2116486 - [regression] sssctl analyze fails to parse PAM related sssd logs
- Resolves: rhbz#2116487 - cache_req_data_set_hybrid_lookup: cache_req_data should never be NULL</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-3" date="1661256000">- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8
- Resolves: rhbz#2119726 - sssctl analyze --logdir option requires sssd to be configured
- Resolves: rhbz#2120669 - Incorrect request ID tracking from responder to backend</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4" date="1661515200">- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4.1" date="1665662400">- Resolves: rhbz#2128544 - Cannot SSH with AD user to ipa-client (`krb5_validate` and `pac_check` settings conflict) [rhel-8.7.0.z]</changelog>
</package>
<package pkgid="d30718df33dba8866de8a20c21788cae42c021d15117226eaa48d27581430711" name="sssd-kcm" arch="x86_64">
  <version epoch="0" ver="2.7.3" rel="4.el8_7.3"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.6.2-3" date="1642420800">- Resolves: rhbz#2039892 - 2.6.2 regression: Daemon crashes when resolving AD user names
- Resolves: rhbz#1859315 - sssd does not use kerberos port that is set.
- Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries
- Resolves: rhbz#2035245 - AD Domain in the AD Forest Missing after sssd latest update
- Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.0-2" date="1652875200">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2026799 - SSSD authenticating to LDAP with obfuscated password produces Invalid authtoken type message causing sssd_be to go offline (cross inter_ference of different provider plugins options)
- Resolves: rhbz#2033347 - sssd error triggers backtrace : [write_krb5info_file_from_fo_server] (0x0020): [RID#73501] There is no server that can be written into kdc info file.
- Resolves: rhbz#2056483 - [RFE] Add sssd internal krb5 plugin for authentication against external IdP via OAuth2
- Resolves: rhbz#2062689 - [Improvement] Add user and group version of sss_nss_getorigbyname()
- Resolves: rhbz#2065692 - [RHEL8] Ship new sub-package called sssd-idp into sssd
- Resolves: rhbz#2072050 - sssd_nss exiting (due to missing 'sssd' local user) making SSSD service to restart in a loop
- Resolves: rhbz#2072931 - Use right sdap_domain in ad_domain_info_send
- Resolves: rhbz#2087088 - sssd does not enforce smartcard auth for kde screen locker
- Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol
- Resolves: rhbz#2087745 - 2FA prompting setting ineffective
- Resolves: rhbz#2087746 - sssd fails GPO-based access if AD have setup with Japanese language</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.2-1" date="1655726400">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2098620 - sdap_nested_group_deref_direct_process() triggers internal watchdog for large data sets
- Resolves: rhbz#2098619 - [Improvement] add SSSD support for more than one CRL PEM file name with parameters certificate_verification and crl_file
- Resolves: rhbz#2088817 - pam_sss_gss ceased to work after upgrade to 8.6
- Resolves: rhbz#2098616 - Add idp authentication indicator in man page of sssd.conf
- Resolves: rhbz#2056035 - 'getent hosts' not return hosts if they have more than one CN in LDAP
- Resolves: rhbz#2098615 - Regression "Missing internal domain data." when setting ad_domain to incorrect
- Resolves: rhbz#2098617 - Harden kerberos ticket validation
- Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-1" date="1657713600">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2063016 - [sssd] RHEL 8.7 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-2" date="1660132800">- Resolves: rhbz#2116488 - virsh command will hang after the host run several auto test cases
- Resolves: rhbz#2116486 - [regression] sssctl analyze fails to parse PAM related sssd logs
- Resolves: rhbz#2116487 - cache_req_data_set_hybrid_lookup: cache_req_data should never be NULL</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-3" date="1661256000">- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8
- Resolves: rhbz#2119726 - sssctl analyze --logdir option requires sssd to be configured
- Resolves: rhbz#2120669 - Incorrect request ID tracking from responder to backend</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4" date="1661515200">- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4.1" date="1665662400">- Resolves: rhbz#2128544 - Cannot SSH with AD user to ipa-client (`krb5_validate` and `pac_check` settings conflict) [rhel-8.7.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4.2" date="1670587200">- Resolves: rhbz#2139871 - Analyzer: Optimize and remove duplicate messages in verbose list [rhel-8.7.0.z]
- Resolves: rhbz#2142961 - SSSD: `sssctl analyze` command shouldn't require 'root' privileged [rhel-8.7.0.z]
- Resolves: rhbz#2148989 - UPN check cannot be disabled explicitly but requires krb5_validate = false' as a work-around [rhel-8.7.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4.3" date="1671105600">- Resolves: rhbz#2152883 - authenticating against external IdP services okta (native app) with OAuth client secret failed [rhel-8.7.0.z]</changelog>
</package>
<package pkgid="c3158240f8f28b733d0901d0870b0e4ce8e66fdf05f8d209221bf7464bedd32c" name="sssd-krb5" arch="x86_64">
  <version epoch="0" ver="2.7.3" rel="4.el8_7.1"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.6.2-1" date="1640606400">- Resolves: rhbz#2011216 - Rebase SSSD for RHEL 8.6
- Resolves: rhbz#2013260 - [RHEL8] Add ability to parse child log files
- Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries
- Resolves: rhbz#1859315 - sssd does not use kerberos port that is set.
- Resolves: rhbz#1961182 - Passwordless (GSSAPI) SSH not working due to missing "includedir /var/lib/sss/pubconf/krb5.include.d" directive in /etc/krb5.conf
- Resolves: rhbz#2008829 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2012263 - pam responder does not call initgroups to refresh the user entry
- Resolves: rhbz#2012308 - Add client certificate validation D-Bus API
- Resolves: rhbz#2012327 - Groups are missing while performing id lookup as SSSD switching to offline mode due to the wrong domain name in the ldap-pings(netlogon).
- Resolves: rhbz#2013028 - [RFE] Health and Support Analyzer: Add sssctl sub-command to select and display a single request from the logs
- Resolves: rhbz#2013259 - [RHEL8] Add tevent chain ID logic into responders
- Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.6.2-2" date="1641297600">- Resolves: rhbz#2013260 - [RHEL8] Add ability to parse child log files (additional patch)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.6.2-3" date="1642420800">- Resolves: rhbz#2039892 - 2.6.2 regression: Daemon crashes when resolving AD user names
- Resolves: rhbz#1859315 - sssd does not use kerberos port that is set.
- Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries
- Resolves: rhbz#2035245 - AD Domain in the AD Forest Missing after sssd latest update
- Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.0-2" date="1652875200">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2026799 - SSSD authenticating to LDAP with obfuscated password produces Invalid authtoken type message causing sssd_be to go offline (cross inter_ference of different provider plugins options)
- Resolves: rhbz#2033347 - sssd error triggers backtrace : [write_krb5info_file_from_fo_server] (0x0020): [RID#73501] There is no server that can be written into kdc info file.
- Resolves: rhbz#2056483 - [RFE] Add sssd internal krb5 plugin for authentication against external IdP via OAuth2
- Resolves: rhbz#2062689 - [Improvement] Add user and group version of sss_nss_getorigbyname()
- Resolves: rhbz#2065692 - [RHEL8] Ship new sub-package called sssd-idp into sssd
- Resolves: rhbz#2072050 - sssd_nss exiting (due to missing 'sssd' local user) making SSSD service to restart in a loop
- Resolves: rhbz#2072931 - Use right sdap_domain in ad_domain_info_send
- Resolves: rhbz#2087088 - sssd does not enforce smartcard auth for kde screen locker
- Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol
- Resolves: rhbz#2087745 - 2FA prompting setting ineffective
- Resolves: rhbz#2087746 - sssd fails GPO-based access if AD have setup with Japanese language</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.2-1" date="1655726400">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2098620 - sdap_nested_group_deref_direct_process() triggers internal watchdog for large data sets
- Resolves: rhbz#2098619 - [Improvement] add SSSD support for more than one CRL PEM file name with parameters certificate_verification and crl_file
- Resolves: rhbz#2088817 - pam_sss_gss ceased to work after upgrade to 8.6
- Resolves: rhbz#2098616 - Add idp authentication indicator in man page of sssd.conf
- Resolves: rhbz#2056035 - 'getent hosts' not return hosts if they have more than one CN in LDAP
- Resolves: rhbz#2098615 - Regression "Missing internal domain data." when setting ad_domain to incorrect
- Resolves: rhbz#2098617 - Harden kerberos ticket validation
- Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-1" date="1657713600">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2063016 - [sssd] RHEL 8.7 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-2" date="1660132800">- Resolves: rhbz#2116488 - virsh command will hang after the host run several auto test cases
- Resolves: rhbz#2116486 - [regression] sssctl analyze fails to parse PAM related sssd logs
- Resolves: rhbz#2116487 - cache_req_data_set_hybrid_lookup: cache_req_data should never be NULL</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-3" date="1661256000">- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8
- Resolves: rhbz#2119726 - sssctl analyze --logdir option requires sssd to be configured
- Resolves: rhbz#2120669 - Incorrect request ID tracking from responder to backend</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4" date="1661515200">- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4.1" date="1665662400">- Resolves: rhbz#2128544 - Cannot SSH with AD user to ipa-client (`krb5_validate` and `pac_check` settings conflict) [rhel-8.7.0.z]</changelog>
</package>
<package pkgid="9c5186cf636251577989b5920e9bf170847385a5f405145b2b89021a1c33a45e" name="sssd-krb5" arch="x86_64">
  <version epoch="0" ver="2.7.3" rel="4.el8_7.3"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.6.2-3" date="1642420800">- Resolves: rhbz#2039892 - 2.6.2 regression: Daemon crashes when resolving AD user names
- Resolves: rhbz#1859315 - sssd does not use kerberos port that is set.
- Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries
- Resolves: rhbz#2035245 - AD Domain in the AD Forest Missing after sssd latest update
- Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.0-2" date="1652875200">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2026799 - SSSD authenticating to LDAP with obfuscated password produces Invalid authtoken type message causing sssd_be to go offline (cross inter_ference of different provider plugins options)
- Resolves: rhbz#2033347 - sssd error triggers backtrace : [write_krb5info_file_from_fo_server] (0x0020): [RID#73501] There is no server that can be written into kdc info file.
- Resolves: rhbz#2056483 - [RFE] Add sssd internal krb5 plugin for authentication against external IdP via OAuth2
- Resolves: rhbz#2062689 - [Improvement] Add user and group version of sss_nss_getorigbyname()
- Resolves: rhbz#2065692 - [RHEL8] Ship new sub-package called sssd-idp into sssd
- Resolves: rhbz#2072050 - sssd_nss exiting (due to missing 'sssd' local user) making SSSD service to restart in a loop
- Resolves: rhbz#2072931 - Use right sdap_domain in ad_domain_info_send
- Resolves: rhbz#2087088 - sssd does not enforce smartcard auth for kde screen locker
- Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol
- Resolves: rhbz#2087745 - 2FA prompting setting ineffective
- Resolves: rhbz#2087746 - sssd fails GPO-based access if AD have setup with Japanese language</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.2-1" date="1655726400">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2098620 - sdap_nested_group_deref_direct_process() triggers internal watchdog for large data sets
- Resolves: rhbz#2098619 - [Improvement] add SSSD support for more than one CRL PEM file name with parameters certificate_verification and crl_file
- Resolves: rhbz#2088817 - pam_sss_gss ceased to work after upgrade to 8.6
- Resolves: rhbz#2098616 - Add idp authentication indicator in man page of sssd.conf
- Resolves: rhbz#2056035 - 'getent hosts' not return hosts if they have more than one CN in LDAP
- Resolves: rhbz#2098615 - Regression "Missing internal domain data." when setting ad_domain to incorrect
- Resolves: rhbz#2098617 - Harden kerberos ticket validation
- Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-1" date="1657713600">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2063016 - [sssd] RHEL 8.7 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-2" date="1660132800">- Resolves: rhbz#2116488 - virsh command will hang after the host run several auto test cases
- Resolves: rhbz#2116486 - [regression] sssctl analyze fails to parse PAM related sssd logs
- Resolves: rhbz#2116487 - cache_req_data_set_hybrid_lookup: cache_req_data should never be NULL</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-3" date="1661256000">- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8
- Resolves: rhbz#2119726 - sssctl analyze --logdir option requires sssd to be configured
- Resolves: rhbz#2120669 - Incorrect request ID tracking from responder to backend</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4" date="1661515200">- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4.1" date="1665662400">- Resolves: rhbz#2128544 - Cannot SSH with AD user to ipa-client (`krb5_validate` and `pac_check` settings conflict) [rhel-8.7.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4.2" date="1670587200">- Resolves: rhbz#2139871 - Analyzer: Optimize and remove duplicate messages in verbose list [rhel-8.7.0.z]
- Resolves: rhbz#2142961 - SSSD: `sssctl analyze` command shouldn't require 'root' privileged [rhel-8.7.0.z]
- Resolves: rhbz#2148989 - UPN check cannot be disabled explicitly but requires krb5_validate = false' as a work-around [rhel-8.7.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4.3" date="1671105600">- Resolves: rhbz#2152883 - authenticating against external IdP services okta (native app) with OAuth client secret failed [rhel-8.7.0.z]</changelog>
</package>
<package pkgid="c5e35ebb67902d3b71e92ff30aed2efd2ba07f47b0d7e906da0759773d23a761" name="sssd-krb5-common" arch="x86_64">
  <version epoch="0" ver="2.7.3" rel="4.el8_7.1"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.6.2-1" date="1640606400">- Resolves: rhbz#2011216 - Rebase SSSD for RHEL 8.6
- Resolves: rhbz#2013260 - [RHEL8] Add ability to parse child log files
- Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries
- Resolves: rhbz#1859315 - sssd does not use kerberos port that is set.
- Resolves: rhbz#1961182 - Passwordless (GSSAPI) SSH not working due to missing "includedir /var/lib/sss/pubconf/krb5.include.d" directive in /etc/krb5.conf
- Resolves: rhbz#2008829 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2012263 - pam responder does not call initgroups to refresh the user entry
- Resolves: rhbz#2012308 - Add client certificate validation D-Bus API
- Resolves: rhbz#2012327 - Groups are missing while performing id lookup as SSSD switching to offline mode due to the wrong domain name in the ldap-pings(netlogon).
- Resolves: rhbz#2013028 - [RFE] Health and Support Analyzer: Add sssctl sub-command to select and display a single request from the logs
- Resolves: rhbz#2013259 - [RHEL8] Add tevent chain ID logic into responders
- Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.6.2-2" date="1641297600">- Resolves: rhbz#2013260 - [RHEL8] Add ability to parse child log files (additional patch)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.6.2-3" date="1642420800">- Resolves: rhbz#2039892 - 2.6.2 regression: Daemon crashes when resolving AD user names
- Resolves: rhbz#1859315 - sssd does not use kerberos port that is set.
- Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries
- Resolves: rhbz#2035245 - AD Domain in the AD Forest Missing after sssd latest update
- Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.0-2" date="1652875200">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2026799 - SSSD authenticating to LDAP with obfuscated password produces Invalid authtoken type message causing sssd_be to go offline (cross inter_ference of different provider plugins options)
- Resolves: rhbz#2033347 - sssd error triggers backtrace : [write_krb5info_file_from_fo_server] (0x0020): [RID#73501] There is no server that can be written into kdc info file.
- Resolves: rhbz#2056483 - [RFE] Add sssd internal krb5 plugin for authentication against external IdP via OAuth2
- Resolves: rhbz#2062689 - [Improvement] Add user and group version of sss_nss_getorigbyname()
- Resolves: rhbz#2065692 - [RHEL8] Ship new sub-package called sssd-idp into sssd
- Resolves: rhbz#2072050 - sssd_nss exiting (due to missing 'sssd' local user) making SSSD service to restart in a loop
- Resolves: rhbz#2072931 - Use right sdap_domain in ad_domain_info_send
- Resolves: rhbz#2087088 - sssd does not enforce smartcard auth for kde screen locker
- Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol
- Resolves: rhbz#2087745 - 2FA prompting setting ineffective
- Resolves: rhbz#2087746 - sssd fails GPO-based access if AD have setup with Japanese language</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.2-1" date="1655726400">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2098620 - sdap_nested_group_deref_direct_process() triggers internal watchdog for large data sets
- Resolves: rhbz#2098619 - [Improvement] add SSSD support for more than one CRL PEM file name with parameters certificate_verification and crl_file
- Resolves: rhbz#2088817 - pam_sss_gss ceased to work after upgrade to 8.6
- Resolves: rhbz#2098616 - Add idp authentication indicator in man page of sssd.conf
- Resolves: rhbz#2056035 - 'getent hosts' not return hosts if they have more than one CN in LDAP
- Resolves: rhbz#2098615 - Regression "Missing internal domain data." when setting ad_domain to incorrect
- Resolves: rhbz#2098617 - Harden kerberos ticket validation
- Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-1" date="1657713600">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2063016 - [sssd] RHEL 8.7 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-2" date="1660132800">- Resolves: rhbz#2116488 - virsh command will hang after the host run several auto test cases
- Resolves: rhbz#2116486 - [regression] sssctl analyze fails to parse PAM related sssd logs
- Resolves: rhbz#2116487 - cache_req_data_set_hybrid_lookup: cache_req_data should never be NULL</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-3" date="1661256000">- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8
- Resolves: rhbz#2119726 - sssctl analyze --logdir option requires sssd to be configured
- Resolves: rhbz#2120669 - Incorrect request ID tracking from responder to backend</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4" date="1661515200">- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4.1" date="1665662400">- Resolves: rhbz#2128544 - Cannot SSH with AD user to ipa-client (`krb5_validate` and `pac_check` settings conflict) [rhel-8.7.0.z]</changelog>
</package>
<package pkgid="87a33dea23d673068f3d30523e67cb61bb0d1189e38ca0d0241067f4994ffc90" name="sssd-krb5-common" arch="x86_64">
  <version epoch="0" ver="2.7.3" rel="4.el8_7.3"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.6.2-3" date="1642420800">- Resolves: rhbz#2039892 - 2.6.2 regression: Daemon crashes when resolving AD user names
- Resolves: rhbz#1859315 - sssd does not use kerberos port that is set.
- Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries
- Resolves: rhbz#2035245 - AD Domain in the AD Forest Missing after sssd latest update
- Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.0-2" date="1652875200">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2026799 - SSSD authenticating to LDAP with obfuscated password produces Invalid authtoken type message causing sssd_be to go offline (cross inter_ference of different provider plugins options)
- Resolves: rhbz#2033347 - sssd error triggers backtrace : [write_krb5info_file_from_fo_server] (0x0020): [RID#73501] There is no server that can be written into kdc info file.
- Resolves: rhbz#2056483 - [RFE] Add sssd internal krb5 plugin for authentication against external IdP via OAuth2
- Resolves: rhbz#2062689 - [Improvement] Add user and group version of sss_nss_getorigbyname()
- Resolves: rhbz#2065692 - [RHEL8] Ship new sub-package called sssd-idp into sssd
- Resolves: rhbz#2072050 - sssd_nss exiting (due to missing 'sssd' local user) making SSSD service to restart in a loop
- Resolves: rhbz#2072931 - Use right sdap_domain in ad_domain_info_send
- Resolves: rhbz#2087088 - sssd does not enforce smartcard auth for kde screen locker
- Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol
- Resolves: rhbz#2087745 - 2FA prompting setting ineffective
- Resolves: rhbz#2087746 - sssd fails GPO-based access if AD have setup with Japanese language</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.2-1" date="1655726400">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2098620 - sdap_nested_group_deref_direct_process() triggers internal watchdog for large data sets
- Resolves: rhbz#2098619 - [Improvement] add SSSD support for more than one CRL PEM file name with parameters certificate_verification and crl_file
- Resolves: rhbz#2088817 - pam_sss_gss ceased to work after upgrade to 8.6
- Resolves: rhbz#2098616 - Add idp authentication indicator in man page of sssd.conf
- Resolves: rhbz#2056035 - 'getent hosts' not return hosts if they have more than one CN in LDAP
- Resolves: rhbz#2098615 - Regression "Missing internal domain data." when setting ad_domain to incorrect
- Resolves: rhbz#2098617 - Harden kerberos ticket validation
- Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-1" date="1657713600">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2063016 - [sssd] RHEL 8.7 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-2" date="1660132800">- Resolves: rhbz#2116488 - virsh command will hang after the host run several auto test cases
- Resolves: rhbz#2116486 - [regression] sssctl analyze fails to parse PAM related sssd logs
- Resolves: rhbz#2116487 - cache_req_data_set_hybrid_lookup: cache_req_data should never be NULL</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-3" date="1661256000">- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8
- Resolves: rhbz#2119726 - sssctl analyze --logdir option requires sssd to be configured
- Resolves: rhbz#2120669 - Incorrect request ID tracking from responder to backend</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4" date="1661515200">- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4.1" date="1665662400">- Resolves: rhbz#2128544 - Cannot SSH with AD user to ipa-client (`krb5_validate` and `pac_check` settings conflict) [rhel-8.7.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4.2" date="1670587200">- Resolves: rhbz#2139871 - Analyzer: Optimize and remove duplicate messages in verbose list [rhel-8.7.0.z]
- Resolves: rhbz#2142961 - SSSD: `sssctl analyze` command shouldn't require 'root' privileged [rhel-8.7.0.z]
- Resolves: rhbz#2148989 - UPN check cannot be disabled explicitly but requires krb5_validate = false' as a work-around [rhel-8.7.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4.3" date="1671105600">- Resolves: rhbz#2152883 - authenticating against external IdP services okta (native app) with OAuth client secret failed [rhel-8.7.0.z]</changelog>
</package>
<package pkgid="9b25adf5b72bbfac9e3795c3f5a7b5b86f69e307fe2c44954b2bef123800d451" name="sssd-ldap" arch="x86_64">
  <version epoch="0" ver="2.7.3" rel="4.el8_7.1"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.6.2-1" date="1640606400">- Resolves: rhbz#2011216 - Rebase SSSD for RHEL 8.6
- Resolves: rhbz#2013260 - [RHEL8] Add ability to parse child log files
- Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries
- Resolves: rhbz#1859315 - sssd does not use kerberos port that is set.
- Resolves: rhbz#1961182 - Passwordless (GSSAPI) SSH not working due to missing "includedir /var/lib/sss/pubconf/krb5.include.d" directive in /etc/krb5.conf
- Resolves: rhbz#2008829 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2012263 - pam responder does not call initgroups to refresh the user entry
- Resolves: rhbz#2012308 - Add client certificate validation D-Bus API
- Resolves: rhbz#2012327 - Groups are missing while performing id lookup as SSSD switching to offline mode due to the wrong domain name in the ldap-pings(netlogon).
- Resolves: rhbz#2013028 - [RFE] Health and Support Analyzer: Add sssctl sub-command to select and display a single request from the logs
- Resolves: rhbz#2013259 - [RHEL8] Add tevent chain ID logic into responders
- Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.6.2-2" date="1641297600">- Resolves: rhbz#2013260 - [RHEL8] Add ability to parse child log files (additional patch)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.6.2-3" date="1642420800">- Resolves: rhbz#2039892 - 2.6.2 regression: Daemon crashes when resolving AD user names
- Resolves: rhbz#1859315 - sssd does not use kerberos port that is set.
- Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries
- Resolves: rhbz#2035245 - AD Domain in the AD Forest Missing after sssd latest update
- Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.0-2" date="1652875200">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2026799 - SSSD authenticating to LDAP with obfuscated password produces Invalid authtoken type message causing sssd_be to go offline (cross inter_ference of different provider plugins options)
- Resolves: rhbz#2033347 - sssd error triggers backtrace : [write_krb5info_file_from_fo_server] (0x0020): [RID#73501] There is no server that can be written into kdc info file.
- Resolves: rhbz#2056483 - [RFE] Add sssd internal krb5 plugin for authentication against external IdP via OAuth2
- Resolves: rhbz#2062689 - [Improvement] Add user and group version of sss_nss_getorigbyname()
- Resolves: rhbz#2065692 - [RHEL8] Ship new sub-package called sssd-idp into sssd
- Resolves: rhbz#2072050 - sssd_nss exiting (due to missing 'sssd' local user) making SSSD service to restart in a loop
- Resolves: rhbz#2072931 - Use right sdap_domain in ad_domain_info_send
- Resolves: rhbz#2087088 - sssd does not enforce smartcard auth for kde screen locker
- Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol
- Resolves: rhbz#2087745 - 2FA prompting setting ineffective
- Resolves: rhbz#2087746 - sssd fails GPO-based access if AD have setup with Japanese language</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.2-1" date="1655726400">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2098620 - sdap_nested_group_deref_direct_process() triggers internal watchdog for large data sets
- Resolves: rhbz#2098619 - [Improvement] add SSSD support for more than one CRL PEM file name with parameters certificate_verification and crl_file
- Resolves: rhbz#2088817 - pam_sss_gss ceased to work after upgrade to 8.6
- Resolves: rhbz#2098616 - Add idp authentication indicator in man page of sssd.conf
- Resolves: rhbz#2056035 - 'getent hosts' not return hosts if they have more than one CN in LDAP
- Resolves: rhbz#2098615 - Regression "Missing internal domain data." when setting ad_domain to incorrect
- Resolves: rhbz#2098617 - Harden kerberos ticket validation
- Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-1" date="1657713600">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2063016 - [sssd] RHEL 8.7 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-2" date="1660132800">- Resolves: rhbz#2116488 - virsh command will hang after the host run several auto test cases
- Resolves: rhbz#2116486 - [regression] sssctl analyze fails to parse PAM related sssd logs
- Resolves: rhbz#2116487 - cache_req_data_set_hybrid_lookup: cache_req_data should never be NULL</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-3" date="1661256000">- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8
- Resolves: rhbz#2119726 - sssctl analyze --logdir option requires sssd to be configured
- Resolves: rhbz#2120669 - Incorrect request ID tracking from responder to backend</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4" date="1661515200">- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4.1" date="1665662400">- Resolves: rhbz#2128544 - Cannot SSH with AD user to ipa-client (`krb5_validate` and `pac_check` settings conflict) [rhel-8.7.0.z]</changelog>
</package>
<package pkgid="282417a28c0ef1d093aea1d94038d0dfe1bdfb2475205d527aa3b42e26c6ec73" name="sssd-ldap" arch="x86_64">
  <version epoch="0" ver="2.7.3" rel="4.el8_7.3"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.6.2-3" date="1642420800">- Resolves: rhbz#2039892 - 2.6.2 regression: Daemon crashes when resolving AD user names
- Resolves: rhbz#1859315 - sssd does not use kerberos port that is set.
- Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries
- Resolves: rhbz#2035245 - AD Domain in the AD Forest Missing after sssd latest update
- Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.0-2" date="1652875200">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2026799 - SSSD authenticating to LDAP with obfuscated password produces Invalid authtoken type message causing sssd_be to go offline (cross inter_ference of different provider plugins options)
- Resolves: rhbz#2033347 - sssd error triggers backtrace : [write_krb5info_file_from_fo_server] (0x0020): [RID#73501] There is no server that can be written into kdc info file.
- Resolves: rhbz#2056483 - [RFE] Add sssd internal krb5 plugin for authentication against external IdP via OAuth2
- Resolves: rhbz#2062689 - [Improvement] Add user and group version of sss_nss_getorigbyname()
- Resolves: rhbz#2065692 - [RHEL8] Ship new sub-package called sssd-idp into sssd
- Resolves: rhbz#2072050 - sssd_nss exiting (due to missing 'sssd' local user) making SSSD service to restart in a loop
- Resolves: rhbz#2072931 - Use right sdap_domain in ad_domain_info_send
- Resolves: rhbz#2087088 - sssd does not enforce smartcard auth for kde screen locker
- Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol
- Resolves: rhbz#2087745 - 2FA prompting setting ineffective
- Resolves: rhbz#2087746 - sssd fails GPO-based access if AD have setup with Japanese language</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.2-1" date="1655726400">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2098620 - sdap_nested_group_deref_direct_process() triggers internal watchdog for large data sets
- Resolves: rhbz#2098619 - [Improvement] add SSSD support for more than one CRL PEM file name with parameters certificate_verification and crl_file
- Resolves: rhbz#2088817 - pam_sss_gss ceased to work after upgrade to 8.6
- Resolves: rhbz#2098616 - Add idp authentication indicator in man page of sssd.conf
- Resolves: rhbz#2056035 - 'getent hosts' not return hosts if they have more than one CN in LDAP
- Resolves: rhbz#2098615 - Regression "Missing internal domain data." when setting ad_domain to incorrect
- Resolves: rhbz#2098617 - Harden kerberos ticket validation
- Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-1" date="1657713600">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2063016 - [sssd] RHEL 8.7 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-2" date="1660132800">- Resolves: rhbz#2116488 - virsh command will hang after the host run several auto test cases
- Resolves: rhbz#2116486 - [regression] sssctl analyze fails to parse PAM related sssd logs
- Resolves: rhbz#2116487 - cache_req_data_set_hybrid_lookup: cache_req_data should never be NULL</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-3" date="1661256000">- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8
- Resolves: rhbz#2119726 - sssctl analyze --logdir option requires sssd to be configured
- Resolves: rhbz#2120669 - Incorrect request ID tracking from responder to backend</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4" date="1661515200">- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4.1" date="1665662400">- Resolves: rhbz#2128544 - Cannot SSH with AD user to ipa-client (`krb5_validate` and `pac_check` settings conflict) [rhel-8.7.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4.2" date="1670587200">- Resolves: rhbz#2139871 - Analyzer: Optimize and remove duplicate messages in verbose list [rhel-8.7.0.z]
- Resolves: rhbz#2142961 - SSSD: `sssctl analyze` command shouldn't require 'root' privileged [rhel-8.7.0.z]
- Resolves: rhbz#2148989 - UPN check cannot be disabled explicitly but requires krb5_validate = false' as a work-around [rhel-8.7.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4.3" date="1671105600">- Resolves: rhbz#2152883 - authenticating against external IdP services okta (native app) with OAuth client secret failed [rhel-8.7.0.z]</changelog>
</package>
<package pkgid="a8c568b3cf59269be5e12b897044d327f165c1af183a3f494b2b09526eef102b" name="sssd-nfs-idmap" arch="x86_64">
  <version epoch="0" ver="2.7.3" rel="4.el8_7.1"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.6.2-1" date="1640606400">- Resolves: rhbz#2011216 - Rebase SSSD for RHEL 8.6
- Resolves: rhbz#2013260 - [RHEL8] Add ability to parse child log files
- Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries
- Resolves: rhbz#1859315 - sssd does not use kerberos port that is set.
- Resolves: rhbz#1961182 - Passwordless (GSSAPI) SSH not working due to missing "includedir /var/lib/sss/pubconf/krb5.include.d" directive in /etc/krb5.conf
- Resolves: rhbz#2008829 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2012263 - pam responder does not call initgroups to refresh the user entry
- Resolves: rhbz#2012308 - Add client certificate validation D-Bus API
- Resolves: rhbz#2012327 - Groups are missing while performing id lookup as SSSD switching to offline mode due to the wrong domain name in the ldap-pings(netlogon).
- Resolves: rhbz#2013028 - [RFE] Health and Support Analyzer: Add sssctl sub-command to select and display a single request from the logs
- Resolves: rhbz#2013259 - [RHEL8] Add tevent chain ID logic into responders
- Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.6.2-2" date="1641297600">- Resolves: rhbz#2013260 - [RHEL8] Add ability to parse child log files (additional patch)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.6.2-3" date="1642420800">- Resolves: rhbz#2039892 - 2.6.2 regression: Daemon crashes when resolving AD user names
- Resolves: rhbz#1859315 - sssd does not use kerberos port that is set.
- Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries
- Resolves: rhbz#2035245 - AD Domain in the AD Forest Missing after sssd latest update
- Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.0-2" date="1652875200">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2026799 - SSSD authenticating to LDAP with obfuscated password produces Invalid authtoken type message causing sssd_be to go offline (cross inter_ference of different provider plugins options)
- Resolves: rhbz#2033347 - sssd error triggers backtrace : [write_krb5info_file_from_fo_server] (0x0020): [RID#73501] There is no server that can be written into kdc info file.
- Resolves: rhbz#2056483 - [RFE] Add sssd internal krb5 plugin for authentication against external IdP via OAuth2
- Resolves: rhbz#2062689 - [Improvement] Add user and group version of sss_nss_getorigbyname()
- Resolves: rhbz#2065692 - [RHEL8] Ship new sub-package called sssd-idp into sssd
- Resolves: rhbz#2072050 - sssd_nss exiting (due to missing 'sssd' local user) making SSSD service to restart in a loop
- Resolves: rhbz#2072931 - Use right sdap_domain in ad_domain_info_send
- Resolves: rhbz#2087088 - sssd does not enforce smartcard auth for kde screen locker
- Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol
- Resolves: rhbz#2087745 - 2FA prompting setting ineffective
- Resolves: rhbz#2087746 - sssd fails GPO-based access if AD have setup with Japanese language</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.2-1" date="1655726400">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2098620 - sdap_nested_group_deref_direct_process() triggers internal watchdog for large data sets
- Resolves: rhbz#2098619 - [Improvement] add SSSD support for more than one CRL PEM file name with parameters certificate_verification and crl_file
- Resolves: rhbz#2088817 - pam_sss_gss ceased to work after upgrade to 8.6
- Resolves: rhbz#2098616 - Add idp authentication indicator in man page of sssd.conf
- Resolves: rhbz#2056035 - 'getent hosts' not return hosts if they have more than one CN in LDAP
- Resolves: rhbz#2098615 - Regression "Missing internal domain data." when setting ad_domain to incorrect
- Resolves: rhbz#2098617 - Harden kerberos ticket validation
- Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-1" date="1657713600">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2063016 - [sssd] RHEL 8.7 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-2" date="1660132800">- Resolves: rhbz#2116488 - virsh command will hang after the host run several auto test cases
- Resolves: rhbz#2116486 - [regression] sssctl analyze fails to parse PAM related sssd logs
- Resolves: rhbz#2116487 - cache_req_data_set_hybrid_lookup: cache_req_data should never be NULL</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-3" date="1661256000">- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8
- Resolves: rhbz#2119726 - sssctl analyze --logdir option requires sssd to be configured
- Resolves: rhbz#2120669 - Incorrect request ID tracking from responder to backend</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4" date="1661515200">- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4.1" date="1665662400">- Resolves: rhbz#2128544 - Cannot SSH with AD user to ipa-client (`krb5_validate` and `pac_check` settings conflict) [rhel-8.7.0.z]</changelog>
</package>
<package pkgid="253888ac4126d8a044b022115df86640924df576d5cccf42334fa6b76d486498" name="sssd-nfs-idmap" arch="x86_64">
  <version epoch="0" ver="2.7.3" rel="4.el8_7.3"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.6.2-3" date="1642420800">- Resolves: rhbz#2039892 - 2.6.2 regression: Daemon crashes when resolving AD user names
- Resolves: rhbz#1859315 - sssd does not use kerberos port that is set.
- Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries
- Resolves: rhbz#2035245 - AD Domain in the AD Forest Missing after sssd latest update
- Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.0-2" date="1652875200">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2026799 - SSSD authenticating to LDAP with obfuscated password produces Invalid authtoken type message causing sssd_be to go offline (cross inter_ference of different provider plugins options)
- Resolves: rhbz#2033347 - sssd error triggers backtrace : [write_krb5info_file_from_fo_server] (0x0020): [RID#73501] There is no server that can be written into kdc info file.
- Resolves: rhbz#2056483 - [RFE] Add sssd internal krb5 plugin for authentication against external IdP via OAuth2
- Resolves: rhbz#2062689 - [Improvement] Add user and group version of sss_nss_getorigbyname()
- Resolves: rhbz#2065692 - [RHEL8] Ship new sub-package called sssd-idp into sssd
- Resolves: rhbz#2072050 - sssd_nss exiting (due to missing 'sssd' local user) making SSSD service to restart in a loop
- Resolves: rhbz#2072931 - Use right sdap_domain in ad_domain_info_send
- Resolves: rhbz#2087088 - sssd does not enforce smartcard auth for kde screen locker
- Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol
- Resolves: rhbz#2087745 - 2FA prompting setting ineffective
- Resolves: rhbz#2087746 - sssd fails GPO-based access if AD have setup with Japanese language</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.2-1" date="1655726400">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2098620 - sdap_nested_group_deref_direct_process() triggers internal watchdog for large data sets
- Resolves: rhbz#2098619 - [Improvement] add SSSD support for more than one CRL PEM file name with parameters certificate_verification and crl_file
- Resolves: rhbz#2088817 - pam_sss_gss ceased to work after upgrade to 8.6
- Resolves: rhbz#2098616 - Add idp authentication indicator in man page of sssd.conf
- Resolves: rhbz#2056035 - 'getent hosts' not return hosts if they have more than one CN in LDAP
- Resolves: rhbz#2098615 - Regression "Missing internal domain data." when setting ad_domain to incorrect
- Resolves: rhbz#2098617 - Harden kerberos ticket validation
- Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-1" date="1657713600">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2063016 - [sssd] RHEL 8.7 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-2" date="1660132800">- Resolves: rhbz#2116488 - virsh command will hang after the host run several auto test cases
- Resolves: rhbz#2116486 - [regression] sssctl analyze fails to parse PAM related sssd logs
- Resolves: rhbz#2116487 - cache_req_data_set_hybrid_lookup: cache_req_data should never be NULL</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-3" date="1661256000">- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8
- Resolves: rhbz#2119726 - sssctl analyze --logdir option requires sssd to be configured
- Resolves: rhbz#2120669 - Incorrect request ID tracking from responder to backend</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4" date="1661515200">- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4.1" date="1665662400">- Resolves: rhbz#2128544 - Cannot SSH with AD user to ipa-client (`krb5_validate` and `pac_check` settings conflict) [rhel-8.7.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4.2" date="1670587200">- Resolves: rhbz#2139871 - Analyzer: Optimize and remove duplicate messages in verbose list [rhel-8.7.0.z]
- Resolves: rhbz#2142961 - SSSD: `sssctl analyze` command shouldn't require 'root' privileged [rhel-8.7.0.z]
- Resolves: rhbz#2148989 - UPN check cannot be disabled explicitly but requires krb5_validate = false' as a work-around [rhel-8.7.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4.3" date="1671105600">- Resolves: rhbz#2152883 - authenticating against external IdP services okta (native app) with OAuth client secret failed [rhel-8.7.0.z]</changelog>
</package>
<package pkgid="8c1e854d89c97dcfaaf9e95adeef91d81369b61c691d2dd8db6c96bbf36ab45f" name="sssd-polkit-rules" arch="x86_64">
  <version epoch="0" ver="2.7.3" rel="4.el8_7.1"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.6.2-1" date="1640606400">- Resolves: rhbz#2011216 - Rebase SSSD for RHEL 8.6
- Resolves: rhbz#2013260 - [RHEL8] Add ability to parse child log files
- Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries
- Resolves: rhbz#1859315 - sssd does not use kerberos port that is set.
- Resolves: rhbz#1961182 - Passwordless (GSSAPI) SSH not working due to missing "includedir /var/lib/sss/pubconf/krb5.include.d" directive in /etc/krb5.conf
- Resolves: rhbz#2008829 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2012263 - pam responder does not call initgroups to refresh the user entry
- Resolves: rhbz#2012308 - Add client certificate validation D-Bus API
- Resolves: rhbz#2012327 - Groups are missing while performing id lookup as SSSD switching to offline mode due to the wrong domain name in the ldap-pings(netlogon).
- Resolves: rhbz#2013028 - [RFE] Health and Support Analyzer: Add sssctl sub-command to select and display a single request from the logs
- Resolves: rhbz#2013259 - [RHEL8] Add tevent chain ID logic into responders
- Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.6.2-2" date="1641297600">- Resolves: rhbz#2013260 - [RHEL8] Add ability to parse child log files (additional patch)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.6.2-3" date="1642420800">- Resolves: rhbz#2039892 - 2.6.2 regression: Daemon crashes when resolving AD user names
- Resolves: rhbz#1859315 - sssd does not use kerberos port that is set.
- Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries
- Resolves: rhbz#2035245 - AD Domain in the AD Forest Missing after sssd latest update
- Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.0-2" date="1652875200">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2026799 - SSSD authenticating to LDAP with obfuscated password produces Invalid authtoken type message causing sssd_be to go offline (cross inter_ference of different provider plugins options)
- Resolves: rhbz#2033347 - sssd error triggers backtrace : [write_krb5info_file_from_fo_server] (0x0020): [RID#73501] There is no server that can be written into kdc info file.
- Resolves: rhbz#2056483 - [RFE] Add sssd internal krb5 plugin for authentication against external IdP via OAuth2
- Resolves: rhbz#2062689 - [Improvement] Add user and group version of sss_nss_getorigbyname()
- Resolves: rhbz#2065692 - [RHEL8] Ship new sub-package called sssd-idp into sssd
- Resolves: rhbz#2072050 - sssd_nss exiting (due to missing 'sssd' local user) making SSSD service to restart in a loop
- Resolves: rhbz#2072931 - Use right sdap_domain in ad_domain_info_send
- Resolves: rhbz#2087088 - sssd does not enforce smartcard auth for kde screen locker
- Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol
- Resolves: rhbz#2087745 - 2FA prompting setting ineffective
- Resolves: rhbz#2087746 - sssd fails GPO-based access if AD have setup with Japanese language</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.2-1" date="1655726400">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2098620 - sdap_nested_group_deref_direct_process() triggers internal watchdog for large data sets
- Resolves: rhbz#2098619 - [Improvement] add SSSD support for more than one CRL PEM file name with parameters certificate_verification and crl_file
- Resolves: rhbz#2088817 - pam_sss_gss ceased to work after upgrade to 8.6
- Resolves: rhbz#2098616 - Add idp authentication indicator in man page of sssd.conf
- Resolves: rhbz#2056035 - 'getent hosts' not return hosts if they have more than one CN in LDAP
- Resolves: rhbz#2098615 - Regression "Missing internal domain data." when setting ad_domain to incorrect
- Resolves: rhbz#2098617 - Harden kerberos ticket validation
- Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-1" date="1657713600">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2063016 - [sssd] RHEL 8.7 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-2" date="1660132800">- Resolves: rhbz#2116488 - virsh command will hang after the host run several auto test cases
- Resolves: rhbz#2116486 - [regression] sssctl analyze fails to parse PAM related sssd logs
- Resolves: rhbz#2116487 - cache_req_data_set_hybrid_lookup: cache_req_data should never be NULL</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-3" date="1661256000">- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8
- Resolves: rhbz#2119726 - sssctl analyze --logdir option requires sssd to be configured
- Resolves: rhbz#2120669 - Incorrect request ID tracking from responder to backend</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4" date="1661515200">- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4.1" date="1665662400">- Resolves: rhbz#2128544 - Cannot SSH with AD user to ipa-client (`krb5_validate` and `pac_check` settings conflict) [rhel-8.7.0.z]</changelog>
</package>
<package pkgid="bb6002e585c35cb94c7b45e3c2bf90c649d43a48ebe3a8ad97eedff4cd56f636" name="sssd-polkit-rules" arch="x86_64">
  <version epoch="0" ver="2.7.3" rel="4.el8_7.3"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.6.2-3" date="1642420800">- Resolves: rhbz#2039892 - 2.6.2 regression: Daemon crashes when resolving AD user names
- Resolves: rhbz#1859315 - sssd does not use kerberos port that is set.
- Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries
- Resolves: rhbz#2035245 - AD Domain in the AD Forest Missing after sssd latest update
- Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.0-2" date="1652875200">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2026799 - SSSD authenticating to LDAP with obfuscated password produces Invalid authtoken type message causing sssd_be to go offline (cross inter_ference of different provider plugins options)
- Resolves: rhbz#2033347 - sssd error triggers backtrace : [write_krb5info_file_from_fo_server] (0x0020): [RID#73501] There is no server that can be written into kdc info file.
- Resolves: rhbz#2056483 - [RFE] Add sssd internal krb5 plugin for authentication against external IdP via OAuth2
- Resolves: rhbz#2062689 - [Improvement] Add user and group version of sss_nss_getorigbyname()
- Resolves: rhbz#2065692 - [RHEL8] Ship new sub-package called sssd-idp into sssd
- Resolves: rhbz#2072050 - sssd_nss exiting (due to missing 'sssd' local user) making SSSD service to restart in a loop
- Resolves: rhbz#2072931 - Use right sdap_domain in ad_domain_info_send
- Resolves: rhbz#2087088 - sssd does not enforce smartcard auth for kde screen locker
- Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol
- Resolves: rhbz#2087745 - 2FA prompting setting ineffective
- Resolves: rhbz#2087746 - sssd fails GPO-based access if AD have setup with Japanese language</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.2-1" date="1655726400">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2098620 - sdap_nested_group_deref_direct_process() triggers internal watchdog for large data sets
- Resolves: rhbz#2098619 - [Improvement] add SSSD support for more than one CRL PEM file name with parameters certificate_verification and crl_file
- Resolves: rhbz#2088817 - pam_sss_gss ceased to work after upgrade to 8.6
- Resolves: rhbz#2098616 - Add idp authentication indicator in man page of sssd.conf
- Resolves: rhbz#2056035 - 'getent hosts' not return hosts if they have more than one CN in LDAP
- Resolves: rhbz#2098615 - Regression "Missing internal domain data." when setting ad_domain to incorrect
- Resolves: rhbz#2098617 - Harden kerberos ticket validation
- Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-1" date="1657713600">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2063016 - [sssd] RHEL 8.7 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-2" date="1660132800">- Resolves: rhbz#2116488 - virsh command will hang after the host run several auto test cases
- Resolves: rhbz#2116486 - [regression] sssctl analyze fails to parse PAM related sssd logs
- Resolves: rhbz#2116487 - cache_req_data_set_hybrid_lookup: cache_req_data should never be NULL</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-3" date="1661256000">- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8
- Resolves: rhbz#2119726 - sssctl analyze --logdir option requires sssd to be configured
- Resolves: rhbz#2120669 - Incorrect request ID tracking from responder to backend</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4" date="1661515200">- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4.1" date="1665662400">- Resolves: rhbz#2128544 - Cannot SSH with AD user to ipa-client (`krb5_validate` and `pac_check` settings conflict) [rhel-8.7.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4.2" date="1670587200">- Resolves: rhbz#2139871 - Analyzer: Optimize and remove duplicate messages in verbose list [rhel-8.7.0.z]
- Resolves: rhbz#2142961 - SSSD: `sssctl analyze` command shouldn't require 'root' privileged [rhel-8.7.0.z]
- Resolves: rhbz#2148989 - UPN check cannot be disabled explicitly but requires krb5_validate = false' as a work-around [rhel-8.7.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4.3" date="1671105600">- Resolves: rhbz#2152883 - authenticating against external IdP services okta (native app) with OAuth client secret failed [rhel-8.7.0.z]</changelog>
</package>
<package pkgid="9aaf0764b11b5170dcde6e8bfa7ed80a20ceed6170bf4d719f4d6b90e8169ab7" name="sssd-proxy" arch="x86_64">
  <version epoch="0" ver="2.7.3" rel="4.el8_7.1"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.6.2-1" date="1640606400">- Resolves: rhbz#2011216 - Rebase SSSD for RHEL 8.6
- Resolves: rhbz#2013260 - [RHEL8] Add ability to parse child log files
- Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries
- Resolves: rhbz#1859315 - sssd does not use kerberos port that is set.
- Resolves: rhbz#1961182 - Passwordless (GSSAPI) SSH not working due to missing "includedir /var/lib/sss/pubconf/krb5.include.d" directive in /etc/krb5.conf
- Resolves: rhbz#2008829 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2012263 - pam responder does not call initgroups to refresh the user entry
- Resolves: rhbz#2012308 - Add client certificate validation D-Bus API
- Resolves: rhbz#2012327 - Groups are missing while performing id lookup as SSSD switching to offline mode due to the wrong domain name in the ldap-pings(netlogon).
- Resolves: rhbz#2013028 - [RFE] Health and Support Analyzer: Add sssctl sub-command to select and display a single request from the logs
- Resolves: rhbz#2013259 - [RHEL8] Add tevent chain ID logic into responders
- Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.6.2-2" date="1641297600">- Resolves: rhbz#2013260 - [RHEL8] Add ability to parse child log files (additional patch)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.6.2-3" date="1642420800">- Resolves: rhbz#2039892 - 2.6.2 regression: Daemon crashes when resolving AD user names
- Resolves: rhbz#1859315 - sssd does not use kerberos port that is set.
- Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries
- Resolves: rhbz#2035245 - AD Domain in the AD Forest Missing after sssd latest update
- Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.0-2" date="1652875200">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2026799 - SSSD authenticating to LDAP with obfuscated password produces Invalid authtoken type message causing sssd_be to go offline (cross inter_ference of different provider plugins options)
- Resolves: rhbz#2033347 - sssd error triggers backtrace : [write_krb5info_file_from_fo_server] (0x0020): [RID#73501] There is no server that can be written into kdc info file.
- Resolves: rhbz#2056483 - [RFE] Add sssd internal krb5 plugin for authentication against external IdP via OAuth2
- Resolves: rhbz#2062689 - [Improvement] Add user and group version of sss_nss_getorigbyname()
- Resolves: rhbz#2065692 - [RHEL8] Ship new sub-package called sssd-idp into sssd
- Resolves: rhbz#2072050 - sssd_nss exiting (due to missing 'sssd' local user) making SSSD service to restart in a loop
- Resolves: rhbz#2072931 - Use right sdap_domain in ad_domain_info_send
- Resolves: rhbz#2087088 - sssd does not enforce smartcard auth for kde screen locker
- Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol
- Resolves: rhbz#2087745 - 2FA prompting setting ineffective
- Resolves: rhbz#2087746 - sssd fails GPO-based access if AD have setup with Japanese language</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.2-1" date="1655726400">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2098620 - sdap_nested_group_deref_direct_process() triggers internal watchdog for large data sets
- Resolves: rhbz#2098619 - [Improvement] add SSSD support for more than one CRL PEM file name with parameters certificate_verification and crl_file
- Resolves: rhbz#2088817 - pam_sss_gss ceased to work after upgrade to 8.6
- Resolves: rhbz#2098616 - Add idp authentication indicator in man page of sssd.conf
- Resolves: rhbz#2056035 - 'getent hosts' not return hosts if they have more than one CN in LDAP
- Resolves: rhbz#2098615 - Regression "Missing internal domain data." when setting ad_domain to incorrect
- Resolves: rhbz#2098617 - Harden kerberos ticket validation
- Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-1" date="1657713600">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2063016 - [sssd] RHEL 8.7 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-2" date="1660132800">- Resolves: rhbz#2116488 - virsh command will hang after the host run several auto test cases
- Resolves: rhbz#2116486 - [regression] sssctl analyze fails to parse PAM related sssd logs
- Resolves: rhbz#2116487 - cache_req_data_set_hybrid_lookup: cache_req_data should never be NULL</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-3" date="1661256000">- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8
- Resolves: rhbz#2119726 - sssctl analyze --logdir option requires sssd to be configured
- Resolves: rhbz#2120669 - Incorrect request ID tracking from responder to backend</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4" date="1661515200">- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4.1" date="1665662400">- Resolves: rhbz#2128544 - Cannot SSH with AD user to ipa-client (`krb5_validate` and `pac_check` settings conflict) [rhel-8.7.0.z]</changelog>
</package>
<package pkgid="9ae34bfbdf2029b0fd9fc11a868a9918e6b8958b8b542b4d99bfb447c4497fd2" name="sssd-proxy" arch="x86_64">
  <version epoch="0" ver="2.7.3" rel="4.el8_7.3"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.6.2-3" date="1642420800">- Resolves: rhbz#2039892 - 2.6.2 regression: Daemon crashes when resolving AD user names
- Resolves: rhbz#1859315 - sssd does not use kerberos port that is set.
- Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries
- Resolves: rhbz#2035245 - AD Domain in the AD Forest Missing after sssd latest update
- Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.0-2" date="1652875200">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2026799 - SSSD authenticating to LDAP with obfuscated password produces Invalid authtoken type message causing sssd_be to go offline (cross inter_ference of different provider plugins options)
- Resolves: rhbz#2033347 - sssd error triggers backtrace : [write_krb5info_file_from_fo_server] (0x0020): [RID#73501] There is no server that can be written into kdc info file.
- Resolves: rhbz#2056483 - [RFE] Add sssd internal krb5 plugin for authentication against external IdP via OAuth2
- Resolves: rhbz#2062689 - [Improvement] Add user and group version of sss_nss_getorigbyname()
- Resolves: rhbz#2065692 - [RHEL8] Ship new sub-package called sssd-idp into sssd
- Resolves: rhbz#2072050 - sssd_nss exiting (due to missing 'sssd' local user) making SSSD service to restart in a loop
- Resolves: rhbz#2072931 - Use right sdap_domain in ad_domain_info_send
- Resolves: rhbz#2087088 - sssd does not enforce smartcard auth for kde screen locker
- Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol
- Resolves: rhbz#2087745 - 2FA prompting setting ineffective
- Resolves: rhbz#2087746 - sssd fails GPO-based access if AD have setup with Japanese language</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.2-1" date="1655726400">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2098620 - sdap_nested_group_deref_direct_process() triggers internal watchdog for large data sets
- Resolves: rhbz#2098619 - [Improvement] add SSSD support for more than one CRL PEM file name with parameters certificate_verification and crl_file
- Resolves: rhbz#2088817 - pam_sss_gss ceased to work after upgrade to 8.6
- Resolves: rhbz#2098616 - Add idp authentication indicator in man page of sssd.conf
- Resolves: rhbz#2056035 - 'getent hosts' not return hosts if they have more than one CN in LDAP
- Resolves: rhbz#2098615 - Regression "Missing internal domain data." when setting ad_domain to incorrect
- Resolves: rhbz#2098617 - Harden kerberos ticket validation
- Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-1" date="1657713600">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2063016 - [sssd] RHEL 8.7 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-2" date="1660132800">- Resolves: rhbz#2116488 - virsh command will hang after the host run several auto test cases
- Resolves: rhbz#2116486 - [regression] sssctl analyze fails to parse PAM related sssd logs
- Resolves: rhbz#2116487 - cache_req_data_set_hybrid_lookup: cache_req_data should never be NULL</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-3" date="1661256000">- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8
- Resolves: rhbz#2119726 - sssctl analyze --logdir option requires sssd to be configured
- Resolves: rhbz#2120669 - Incorrect request ID tracking from responder to backend</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4" date="1661515200">- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4.1" date="1665662400">- Resolves: rhbz#2128544 - Cannot SSH with AD user to ipa-client (`krb5_validate` and `pac_check` settings conflict) [rhel-8.7.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4.2" date="1670587200">- Resolves: rhbz#2139871 - Analyzer: Optimize and remove duplicate messages in verbose list [rhel-8.7.0.z]
- Resolves: rhbz#2142961 - SSSD: `sssctl analyze` command shouldn't require 'root' privileged [rhel-8.7.0.z]
- Resolves: rhbz#2148989 - UPN check cannot be disabled explicitly but requires krb5_validate = false' as a work-around [rhel-8.7.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4.3" date="1671105600">- Resolves: rhbz#2152883 - authenticating against external IdP services okta (native app) with OAuth client secret failed [rhel-8.7.0.z]</changelog>
</package>
<package pkgid="58bd58ebbd6ff44d8ccfeca3e2ce88da606071c9c48135cc9e8aa8bcdf41320f" name="sssd-tools" arch="x86_64">
  <version epoch="0" ver="2.7.3" rel="4.el8_7.1"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.6.2-1" date="1640606400">- Resolves: rhbz#2011216 - Rebase SSSD for RHEL 8.6
- Resolves: rhbz#2013260 - [RHEL8] Add ability to parse child log files
- Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries
- Resolves: rhbz#1859315 - sssd does not use kerberos port that is set.
- Resolves: rhbz#1961182 - Passwordless (GSSAPI) SSH not working due to missing "includedir /var/lib/sss/pubconf/krb5.include.d" directive in /etc/krb5.conf
- Resolves: rhbz#2008829 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2012263 - pam responder does not call initgroups to refresh the user entry
- Resolves: rhbz#2012308 - Add client certificate validation D-Bus API
- Resolves: rhbz#2012327 - Groups are missing while performing id lookup as SSSD switching to offline mode due to the wrong domain name in the ldap-pings(netlogon).
- Resolves: rhbz#2013028 - [RFE] Health and Support Analyzer: Add sssctl sub-command to select and display a single request from the logs
- Resolves: rhbz#2013259 - [RHEL8] Add tevent chain ID logic into responders
- Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.6.2-2" date="1641297600">- Resolves: rhbz#2013260 - [RHEL8] Add ability to parse child log files (additional patch)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.6.2-3" date="1642420800">- Resolves: rhbz#2039892 - 2.6.2 regression: Daemon crashes when resolving AD user names
- Resolves: rhbz#1859315 - sssd does not use kerberos port that is set.
- Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries
- Resolves: rhbz#2035245 - AD Domain in the AD Forest Missing after sssd latest update
- Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.0-2" date="1652875200">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2026799 - SSSD authenticating to LDAP with obfuscated password produces Invalid authtoken type message causing sssd_be to go offline (cross inter_ference of different provider plugins options)
- Resolves: rhbz#2033347 - sssd error triggers backtrace : [write_krb5info_file_from_fo_server] (0x0020): [RID#73501] There is no server that can be written into kdc info file.
- Resolves: rhbz#2056483 - [RFE] Add sssd internal krb5 plugin for authentication against external IdP via OAuth2
- Resolves: rhbz#2062689 - [Improvement] Add user and group version of sss_nss_getorigbyname()
- Resolves: rhbz#2065692 - [RHEL8] Ship new sub-package called sssd-idp into sssd
- Resolves: rhbz#2072050 - sssd_nss exiting (due to missing 'sssd' local user) making SSSD service to restart in a loop
- Resolves: rhbz#2072931 - Use right sdap_domain in ad_domain_info_send
- Resolves: rhbz#2087088 - sssd does not enforce smartcard auth for kde screen locker
- Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol
- Resolves: rhbz#2087745 - 2FA prompting setting ineffective
- Resolves: rhbz#2087746 - sssd fails GPO-based access if AD have setup with Japanese language</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.2-1" date="1655726400">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2098620 - sdap_nested_group_deref_direct_process() triggers internal watchdog for large data sets
- Resolves: rhbz#2098619 - [Improvement] add SSSD support for more than one CRL PEM file name with parameters certificate_verification and crl_file
- Resolves: rhbz#2088817 - pam_sss_gss ceased to work after upgrade to 8.6
- Resolves: rhbz#2098616 - Add idp authentication indicator in man page of sssd.conf
- Resolves: rhbz#2056035 - 'getent hosts' not return hosts if they have more than one CN in LDAP
- Resolves: rhbz#2098615 - Regression "Missing internal domain data." when setting ad_domain to incorrect
- Resolves: rhbz#2098617 - Harden kerberos ticket validation
- Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-1" date="1657713600">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2063016 - [sssd] RHEL 8.7 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-2" date="1660132800">- Resolves: rhbz#2116488 - virsh command will hang after the host run several auto test cases
- Resolves: rhbz#2116486 - [regression] sssctl analyze fails to parse PAM related sssd logs
- Resolves: rhbz#2116487 - cache_req_data_set_hybrid_lookup: cache_req_data should never be NULL</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-3" date="1661256000">- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8
- Resolves: rhbz#2119726 - sssctl analyze --logdir option requires sssd to be configured
- Resolves: rhbz#2120669 - Incorrect request ID tracking from responder to backend</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4" date="1661515200">- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4.1" date="1665662400">- Resolves: rhbz#2128544 - Cannot SSH with AD user to ipa-client (`krb5_validate` and `pac_check` settings conflict) [rhel-8.7.0.z]</changelog>
</package>
<package pkgid="382ca60b837a6b7792b76d6e6ac4f09e53e4e34b6e9fa820ae5ae113e12c19cf" name="sssd-winbind-idmap" arch="x86_64">
  <version epoch="0" ver="2.7.3" rel="4.el8_7.1"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.6.2-1" date="1640606400">- Resolves: rhbz#2011216 - Rebase SSSD for RHEL 8.6
- Resolves: rhbz#2013260 - [RHEL8] Add ability to parse child log files
- Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries
- Resolves: rhbz#1859315 - sssd does not use kerberos port that is set.
- Resolves: rhbz#1961182 - Passwordless (GSSAPI) SSH not working due to missing "includedir /var/lib/sss/pubconf/krb5.include.d" directive in /etc/krb5.conf
- Resolves: rhbz#2008829 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2012263 - pam responder does not call initgroups to refresh the user entry
- Resolves: rhbz#2012308 - Add client certificate validation D-Bus API
- Resolves: rhbz#2012327 - Groups are missing while performing id lookup as SSSD switching to offline mode due to the wrong domain name in the ldap-pings(netlogon).
- Resolves: rhbz#2013028 - [RFE] Health and Support Analyzer: Add sssctl sub-command to select and display a single request from the logs
- Resolves: rhbz#2013259 - [RHEL8] Add tevent chain ID logic into responders
- Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.6.2-2" date="1641297600">- Resolves: rhbz#2013260 - [RHEL8] Add ability to parse child log files (additional patch)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.6.2-3" date="1642420800">- Resolves: rhbz#2039892 - 2.6.2 regression: Daemon crashes when resolving AD user names
- Resolves: rhbz#1859315 - sssd does not use kerberos port that is set.
- Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries
- Resolves: rhbz#2035245 - AD Domain in the AD Forest Missing after sssd latest update
- Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.0-2" date="1652875200">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2026799 - SSSD authenticating to LDAP with obfuscated password produces Invalid authtoken type message causing sssd_be to go offline (cross inter_ference of different provider plugins options)
- Resolves: rhbz#2033347 - sssd error triggers backtrace : [write_krb5info_file_from_fo_server] (0x0020): [RID#73501] There is no server that can be written into kdc info file.
- Resolves: rhbz#2056483 - [RFE] Add sssd internal krb5 plugin for authentication against external IdP via OAuth2
- Resolves: rhbz#2062689 - [Improvement] Add user and group version of sss_nss_getorigbyname()
- Resolves: rhbz#2065692 - [RHEL8] Ship new sub-package called sssd-idp into sssd
- Resolves: rhbz#2072050 - sssd_nss exiting (due to missing 'sssd' local user) making SSSD service to restart in a loop
- Resolves: rhbz#2072931 - Use right sdap_domain in ad_domain_info_send
- Resolves: rhbz#2087088 - sssd does not enforce smartcard auth for kde screen locker
- Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol
- Resolves: rhbz#2087745 - 2FA prompting setting ineffective
- Resolves: rhbz#2087746 - sssd fails GPO-based access if AD have setup with Japanese language</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.2-1" date="1655726400">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2098620 - sdap_nested_group_deref_direct_process() triggers internal watchdog for large data sets
- Resolves: rhbz#2098619 - [Improvement] add SSSD support for more than one CRL PEM file name with parameters certificate_verification and crl_file
- Resolves: rhbz#2088817 - pam_sss_gss ceased to work after upgrade to 8.6
- Resolves: rhbz#2098616 - Add idp authentication indicator in man page of sssd.conf
- Resolves: rhbz#2056035 - 'getent hosts' not return hosts if they have more than one CN in LDAP
- Resolves: rhbz#2098615 - Regression "Missing internal domain data." when setting ad_domain to incorrect
- Resolves: rhbz#2098617 - Harden kerberos ticket validation
- Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-1" date="1657713600">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2063016 - [sssd] RHEL 8.7 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-2" date="1660132800">- Resolves: rhbz#2116488 - virsh command will hang after the host run several auto test cases
- Resolves: rhbz#2116486 - [regression] sssctl analyze fails to parse PAM related sssd logs
- Resolves: rhbz#2116487 - cache_req_data_set_hybrid_lookup: cache_req_data should never be NULL</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-3" date="1661256000">- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8
- Resolves: rhbz#2119726 - sssctl analyze --logdir option requires sssd to be configured
- Resolves: rhbz#2120669 - Incorrect request ID tracking from responder to backend</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4" date="1661515200">- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4.1" date="1665662400">- Resolves: rhbz#2128544 - Cannot SSH with AD user to ipa-client (`krb5_validate` and `pac_check` settings conflict) [rhel-8.7.0.z]</changelog>
</package>
<package pkgid="998bdfcfc7cb660bf0b5280dfd9e5177e6b74a1a362ddcf804624c6ca5df530f" name="sssd-winbind-idmap" arch="x86_64">
  <version epoch="0" ver="2.7.3" rel="4.el8_7.3"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.6.2-3" date="1642420800">- Resolves: rhbz#2039892 - 2.6.2 regression: Daemon crashes when resolving AD user names
- Resolves: rhbz#1859315 - sssd does not use kerberos port that is set.
- Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries
- Resolves: rhbz#2035245 - AD Domain in the AD Forest Missing after sssd latest update
- Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.0-2" date="1652875200">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2026799 - SSSD authenticating to LDAP with obfuscated password produces Invalid authtoken type message causing sssd_be to go offline (cross inter_ference of different provider plugins options)
- Resolves: rhbz#2033347 - sssd error triggers backtrace : [write_krb5info_file_from_fo_server] (0x0020): [RID#73501] There is no server that can be written into kdc info file.
- Resolves: rhbz#2056483 - [RFE] Add sssd internal krb5 plugin for authentication against external IdP via OAuth2
- Resolves: rhbz#2062689 - [Improvement] Add user and group version of sss_nss_getorigbyname()
- Resolves: rhbz#2065692 - [RHEL8] Ship new sub-package called sssd-idp into sssd
- Resolves: rhbz#2072050 - sssd_nss exiting (due to missing 'sssd' local user) making SSSD service to restart in a loop
- Resolves: rhbz#2072931 - Use right sdap_domain in ad_domain_info_send
- Resolves: rhbz#2087088 - sssd does not enforce smartcard auth for kde screen locker
- Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol
- Resolves: rhbz#2087745 - 2FA prompting setting ineffective
- Resolves: rhbz#2087746 - sssd fails GPO-based access if AD have setup with Japanese language</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.2-1" date="1655726400">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2098620 - sdap_nested_group_deref_direct_process() triggers internal watchdog for large data sets
- Resolves: rhbz#2098619 - [Improvement] add SSSD support for more than one CRL PEM file name with parameters certificate_verification and crl_file
- Resolves: rhbz#2088817 - pam_sss_gss ceased to work after upgrade to 8.6
- Resolves: rhbz#2098616 - Add idp authentication indicator in man page of sssd.conf
- Resolves: rhbz#2056035 - 'getent hosts' not return hosts if they have more than one CN in LDAP
- Resolves: rhbz#2098615 - Regression "Missing internal domain data." when setting ad_domain to incorrect
- Resolves: rhbz#2098617 - Harden kerberos ticket validation
- Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-1" date="1657713600">- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2063016 - [sssd] RHEL 8.7 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-2" date="1660132800">- Resolves: rhbz#2116488 - virsh command will hang after the host run several auto test cases
- Resolves: rhbz#2116486 - [regression] sssctl analyze fails to parse PAM related sssd logs
- Resolves: rhbz#2116487 - cache_req_data_set_hybrid_lookup: cache_req_data should never be NULL</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-3" date="1661256000">- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8
- Resolves: rhbz#2119726 - sssctl analyze --logdir option requires sssd to be configured
- Resolves: rhbz#2120669 - Incorrect request ID tracking from responder to backend</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4" date="1661515200">- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4.1" date="1665662400">- Resolves: rhbz#2128544 - Cannot SSH with AD user to ipa-client (`krb5_validate` and `pac_check` settings conflict) [rhel-8.7.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4.2" date="1670587200">- Resolves: rhbz#2139871 - Analyzer: Optimize and remove duplicate messages in verbose list [rhel-8.7.0.z]
- Resolves: rhbz#2142961 - SSSD: `sssctl analyze` command shouldn't require 'root' privileged [rhel-8.7.0.z]
- Resolves: rhbz#2148989 - UPN check cannot be disabled explicitly but requires krb5_validate = false' as a work-around [rhel-8.7.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.7.3-4.3" date="1671105600">- Resolves: rhbz#2152883 - authenticating against external IdP services okta (native app) with OAuth client secret failed [rhel-8.7.0.z]</changelog>
</package>
<package pkgid="4d309bfe982b9e13b402045f088e06ecc9a0498c3703a453de540280492748aa" name="sudo" arch="x86_64">
  <version epoch="0" ver="1.8.29" rel="8.el8_7.1"/>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 1.8.25-6" date="1565611200">- RHEL 8.1 ERRATUM
- Fixed The LDAP backend which is not properly parsing sudoOptions,
  resulting in selinux roles not being applied
Resolves: rhbz#1738326</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 1.8.25-7" date="1565956800">- RHEL 8.1 ERRATUM
- sudo ipa_hostname not honored
Resolves: rhbz#1738662</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 1.8.28p1-1" date="1572004800">- RHEL 8.2 ERRATUM
- rebase to 1.8.28p1
Resolves: rhbz#1733961
- fixed man page for always_set_home
Resolves: rhbz#1576880
- sudo does not work with notbefore/after
Resolves: rhbz#1679508
- NOTBEFORE showing value of sudoNotAfter Ldap attribute
Resolves: rhbz#1715516
- CVE-2019-14287 sudo
- Privilege escalation via 'Runas' specification with 'ALL' keyword
Resolves: rhbz#1760697</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 1.8.29-2" date="1572436800">- RHEL 8.2 ERRATUM
- rebase to 1.8.29
Resolves: rhbz#1733961
Resolves: rhbz#1651662</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 1.8.29-4" date="1579003200">- RHEL 8.2 ERRATUM
- CVE-2019-19232
Resolves: rhbz#1786987
Resolves: rhbz#1796518</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 1.8.29-5" date="1580904000">- RHEL 8.2 ERRATUM
- CVE-2019-18634
Resolves: rhbz#1798093</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 1.8.29-6" date="1588075200">- RHEL 8.3 ERRATUM
- sudo allows privilege escalation with expire password
Resolves: rhbz#1815164</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 1.8.29-7" date="1612267200">- RHEL 8.4 ERRATUM
- CVE-2021-3156
Resolves: rhbz#1917734
- CVE-2021-23239 sudo: possible directory existence test due to race condition in sudoedit
Resolves: rhzb#1916434
- CVE-2021-23240 sudo: symbolic link attack in SELinux-enabled sudoedit
Resolves: rhbz#1917038
- updated upstream url
Resolves: rhbz#1923825</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 1.8.29-8" date="1638792000">RHEL 8.6.0 ERRATUM
- sudoedit does not work with selinux args
Resolves: rhbz#2029551
- Make sure SIGCHLD is not ignored when sudo is executed
Resolves: rhbz#1999751
- [RFE] pass KRB5CCNAME to pam_authenticate environment if available
Resolves: rhbz#1917379
- utmp resource leak in sudo
Resolves: rhbz#1986572</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 1.8.29.8.1" date="1673438400">RHEL 8.7.0.Z ERRATUM
- CVE-2023-22809 sudo: arbitrary file write with privileges of the RunAs user
Resolves: rhbz#2161220</changelog>
</package>
<package pkgid="5f7cc43b84ed143d01e603aeeddce2e8aa72ae059c2047a26c4a388ff0490e31" name="systemd" arch="i686">
  <version epoch="0" ver="239" rel="68.el8_7.1"/>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-60" date="1655985600">- unit: don't emit PropertiesChanged signal if adding a dependency to a unit is a no-op (#1948480)
- tests: make inverted tests actually count (#2087152)
- TEST-*: make failure tests actually fail on failure (#2087152)
- ci(Mergify): configuration update (#2087152)
- core: propagate triggered unit in more load states (#2065322)
- core: propagate unit start limit hit state to triggering path unit (#2065322)
- core: Move 'r' variable declaration to start of unit_start() (#2065322)
- core: Delay start rate limit check when starting a unit (#2065322)
- core: Propagate condition failed state to triggering units. (#2065322)
- unit: check for mount rate limiting before checking active state (#2095744)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-61" date="1657800000">- mkosi: Add gnutls package (#2101227)
- unit-name: tighten checks for building valid unit names (#1940973)
- core: shorten long unit names that are based on paths and append path hash at the end (#1940973)
- test: add extended test for triggering mount rate limit (#1940973)
- tests: add test case for long unit names (#1940973)
- core: unset HOME=/ that the kernel gives us (#2056527)
- journal-remote: check return value from MHD_add_response_header (#2051981)
- journalctl: in --follow mode watch stdout for POLLHUP/POLLERR and exit (#2003236)
- sd-bus: make BUS_DEFAULT_TIMEOUT configurable (#2039461)
- fstab-generator: fix debug log (#2101433)
- logind-session-dbus: allow to set display name via dbus (#1857969)
- Allow restart for oneshot units (#2042896)
- test: correct TEST-41 StartLimitBurst test (#2042896)
- core: fix assert() about number of built environment variables (#2049788)
- core: add one more assert() (#2049788)
- strv: introduce strv_join_prefix() (#2049788)
- test: add tests for strv_join_prefix() (#2049788)
- test: replace swear words by 'hoge' (#2049788)
- core: add new environment variable $RUNTIME_DIRECTORY= or friends (#2049788)
- test-execute: add tests for $RUNTIME_DIRECTORY= or friends (#2049788)
- man: document RUNTIME_DIRECTORY= or friends (#2049788)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-62" date="1658145600">- spec: Remove dependency on timedatex (#2066946)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-63" date="1659528000">- resolved: pin stream while calling callbacks for it (#2110549)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-64" date="1660824000">- ci: bump the worker Ubuntu version to Jammy (#2087152)
- test: make test-execute pass on Linux 5.15 (#2087152)
- ci: install iputils (#2087152)
- ci(Mergify): Add `ci-waived` logic (#2087152)
- sd-event: don't invalidate source type on disconnect (#2115396)
- tests: make sure we delay running mount start jobs when /p/s/mountinfo is rate limited (#2095744)
- core: drop references to 'StandardOutputFileToCreate' (#2093479)
- dbus-execute: fix indentation (#2093479)
- dbus-execute: generate the correct transient unit setting (#2093479)
- bus-unit-util: properly accept StandardOutput=append:… settings (#2093479)
- core: be more careful when inheriting stdout fds to stderr (#2093479)
- test: add a test for StandardError=file:… (#2093479)
- tree-wide: allow ASCII fallback for → in logs (#2093479)
- tree-wide: allow ASCII fallback for … in logs (#2093479)
- core: allow to set default timeout for devices (#1967245)
- man: document DefaultDeviceTimeoutSec= (#1967245)
- Revert "core: Propagate condition failed state to triggering units." (#2114005)
- core: Check unit start rate limiting earlier (#2114005)
- core: Add trigger limit for path units (#2114005)
- meson: add syscall-names-update target (#2040247)
- syscall-names: add process_madvise which is planned for 5.10 (#2040247)
- shared: add @known syscall list (#2040247)
- generate-syscall-list: require python3 (#2040247)
- shared/seccomp: reduce scope of indexing variables (#2040247)
- shared/syscall-list: filter out some obviously platform-specific syscalls (#2040247)
- seccomp: tighten checking of seccomp filter creation (#2040247)
- shared/seccomp-util: added functionality to make list of filtred syscalls (#2040247)
- nspawn: return ENOSYS by default, EPERM for "known" calls (#2040247)
- revert: resolved: pin stream while calling callbacks for it (#2110549)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-65" date="1660910400">- test-procfs-util: skip test on certain errors (#2087152)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-66" date="1661428800">- Try stopping MD RAID devices in shutdown too (#1817706)
- shutdown: get only active md arrays. (#1817706)
- scope: allow unprivileged delegation on scopes (#2068575)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-67" date="1661515200">- resolved: pin stream while calling callbacks for it (#2110549)
- ci(functions): Add `useradd` and `userdel` (#2110549)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-68" date="1664280000">- logind: optionally watch utmp for login data (#2122288)
- logind: add hashtable for finding session by leader PID (#2122288)
- core/load-fragment: move config_parse_sec_fix_0 to src/shared (#2122288)
- sd-event: add relative timer calls (#2122288)
- logind: add option to stop idle sessions after specified timeout (#2122288)
- logind: schedule idle check full interval from now if we couldn't figure out atime timestamp (#2122288)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-68.1" date="1667822400">- time-util: fix buffer-over-run (#2139390)
- core: move reset_arguments() to the end of main's finish (#2127170)</changelog>
</package>
<package pkgid="737ae1fc739ad6b985b2f6fabe213732afe73fbb31cebd81202baac00b7cbf81" name="systemd" arch="x86_64">
  <version epoch="0" ver="239" rel="68.el8_7.1"/>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-60" date="1655985600">- unit: don't emit PropertiesChanged signal if adding a dependency to a unit is a no-op (#1948480)
- tests: make inverted tests actually count (#2087152)
- TEST-*: make failure tests actually fail on failure (#2087152)
- ci(Mergify): configuration update (#2087152)
- core: propagate triggered unit in more load states (#2065322)
- core: propagate unit start limit hit state to triggering path unit (#2065322)
- core: Move 'r' variable declaration to start of unit_start() (#2065322)
- core: Delay start rate limit check when starting a unit (#2065322)
- core: Propagate condition failed state to triggering units. (#2065322)
- unit: check for mount rate limiting before checking active state (#2095744)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-61" date="1657800000">- mkosi: Add gnutls package (#2101227)
- unit-name: tighten checks for building valid unit names (#1940973)
- core: shorten long unit names that are based on paths and append path hash at the end (#1940973)
- test: add extended test for triggering mount rate limit (#1940973)
- tests: add test case for long unit names (#1940973)
- core: unset HOME=/ that the kernel gives us (#2056527)
- journal-remote: check return value from MHD_add_response_header (#2051981)
- journalctl: in --follow mode watch stdout for POLLHUP/POLLERR and exit (#2003236)
- sd-bus: make BUS_DEFAULT_TIMEOUT configurable (#2039461)
- fstab-generator: fix debug log (#2101433)
- logind-session-dbus: allow to set display name via dbus (#1857969)
- Allow restart for oneshot units (#2042896)
- test: correct TEST-41 StartLimitBurst test (#2042896)
- core: fix assert() about number of built environment variables (#2049788)
- core: add one more assert() (#2049788)
- strv: introduce strv_join_prefix() (#2049788)
- test: add tests for strv_join_prefix() (#2049788)
- test: replace swear words by 'hoge' (#2049788)
- core: add new environment variable $RUNTIME_DIRECTORY= or friends (#2049788)
- test-execute: add tests for $RUNTIME_DIRECTORY= or friends (#2049788)
- man: document RUNTIME_DIRECTORY= or friends (#2049788)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-62" date="1658145600">- spec: Remove dependency on timedatex (#2066946)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-63" date="1659528000">- resolved: pin stream while calling callbacks for it (#2110549)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-64" date="1660824000">- ci: bump the worker Ubuntu version to Jammy (#2087152)
- test: make test-execute pass on Linux 5.15 (#2087152)
- ci: install iputils (#2087152)
- ci(Mergify): Add `ci-waived` logic (#2087152)
- sd-event: don't invalidate source type on disconnect (#2115396)
- tests: make sure we delay running mount start jobs when /p/s/mountinfo is rate limited (#2095744)
- core: drop references to 'StandardOutputFileToCreate' (#2093479)
- dbus-execute: fix indentation (#2093479)
- dbus-execute: generate the correct transient unit setting (#2093479)
- bus-unit-util: properly accept StandardOutput=append:… settings (#2093479)
- core: be more careful when inheriting stdout fds to stderr (#2093479)
- test: add a test for StandardError=file:… (#2093479)
- tree-wide: allow ASCII fallback for → in logs (#2093479)
- tree-wide: allow ASCII fallback for … in logs (#2093479)
- core: allow to set default timeout for devices (#1967245)
- man: document DefaultDeviceTimeoutSec= (#1967245)
- Revert "core: Propagate condition failed state to triggering units." (#2114005)
- core: Check unit start rate limiting earlier (#2114005)
- core: Add trigger limit for path units (#2114005)
- meson: add syscall-names-update target (#2040247)
- syscall-names: add process_madvise which is planned for 5.10 (#2040247)
- shared: add @known syscall list (#2040247)
- generate-syscall-list: require python3 (#2040247)
- shared/seccomp: reduce scope of indexing variables (#2040247)
- shared/syscall-list: filter out some obviously platform-specific syscalls (#2040247)
- seccomp: tighten checking of seccomp filter creation (#2040247)
- shared/seccomp-util: added functionality to make list of filtred syscalls (#2040247)
- nspawn: return ENOSYS by default, EPERM for "known" calls (#2040247)
- revert: resolved: pin stream while calling callbacks for it (#2110549)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-65" date="1660910400">- test-procfs-util: skip test on certain errors (#2087152)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-66" date="1661428800">- Try stopping MD RAID devices in shutdown too (#1817706)
- shutdown: get only active md arrays. (#1817706)
- scope: allow unprivileged delegation on scopes (#2068575)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-67" date="1661515200">- resolved: pin stream while calling callbacks for it (#2110549)
- ci(functions): Add `useradd` and `userdel` (#2110549)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-68" date="1664280000">- logind: optionally watch utmp for login data (#2122288)
- logind: add hashtable for finding session by leader PID (#2122288)
- core/load-fragment: move config_parse_sec_fix_0 to src/shared (#2122288)
- sd-event: add relative timer calls (#2122288)
- logind: add option to stop idle sessions after specified timeout (#2122288)
- logind: schedule idle check full interval from now if we couldn't figure out atime timestamp (#2122288)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-68.1" date="1667822400">- time-util: fix buffer-over-run (#2139390)
- core: move reset_arguments() to the end of main's finish (#2127170)</changelog>
</package>
<package pkgid="70289ff62f09519a46b8ef84823ccb4c497321dbbd716ee5cf4e2eccfc4cdbb9" name="systemd" arch="i686">
  <version epoch="0" ver="239" rel="68.el8_7.2"/>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-61" date="1657800000">- mkosi: Add gnutls package (#2101227)
- unit-name: tighten checks for building valid unit names (#1940973)
- core: shorten long unit names that are based on paths and append path hash at the end (#1940973)
- test: add extended test for triggering mount rate limit (#1940973)
- tests: add test case for long unit names (#1940973)
- core: unset HOME=/ that the kernel gives us (#2056527)
- journal-remote: check return value from MHD_add_response_header (#2051981)
- journalctl: in --follow mode watch stdout for POLLHUP/POLLERR and exit (#2003236)
- sd-bus: make BUS_DEFAULT_TIMEOUT configurable (#2039461)
- fstab-generator: fix debug log (#2101433)
- logind-session-dbus: allow to set display name via dbus (#1857969)
- Allow restart for oneshot units (#2042896)
- test: correct TEST-41 StartLimitBurst test (#2042896)
- core: fix assert() about number of built environment variables (#2049788)
- core: add one more assert() (#2049788)
- strv: introduce strv_join_prefix() (#2049788)
- test: add tests for strv_join_prefix() (#2049788)
- test: replace swear words by 'hoge' (#2049788)
- core: add new environment variable $RUNTIME_DIRECTORY= or friends (#2049788)
- test-execute: add tests for $RUNTIME_DIRECTORY= or friends (#2049788)
- man: document RUNTIME_DIRECTORY= or friends (#2049788)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-62" date="1658145600">- spec: Remove dependency on timedatex (#2066946)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-63" date="1659528000">- resolved: pin stream while calling callbacks for it (#2110549)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-64" date="1660824000">- ci: bump the worker Ubuntu version to Jammy (#2087152)
- test: make test-execute pass on Linux 5.15 (#2087152)
- ci: install iputils (#2087152)
- ci(Mergify): Add `ci-waived` logic (#2087152)
- sd-event: don't invalidate source type on disconnect (#2115396)
- tests: make sure we delay running mount start jobs when /p/s/mountinfo is rate limited (#2095744)
- core: drop references to 'StandardOutputFileToCreate' (#2093479)
- dbus-execute: fix indentation (#2093479)
- dbus-execute: generate the correct transient unit setting (#2093479)
- bus-unit-util: properly accept StandardOutput=append:… settings (#2093479)
- core: be more careful when inheriting stdout fds to stderr (#2093479)
- test: add a test for StandardError=file:… (#2093479)
- tree-wide: allow ASCII fallback for → in logs (#2093479)
- tree-wide: allow ASCII fallback for … in logs (#2093479)
- core: allow to set default timeout for devices (#1967245)
- man: document DefaultDeviceTimeoutSec= (#1967245)
- Revert "core: Propagate condition failed state to triggering units." (#2114005)
- core: Check unit start rate limiting earlier (#2114005)
- core: Add trigger limit for path units (#2114005)
- meson: add syscall-names-update target (#2040247)
- syscall-names: add process_madvise which is planned for 5.10 (#2040247)
- shared: add @known syscall list (#2040247)
- generate-syscall-list: require python3 (#2040247)
- shared/seccomp: reduce scope of indexing variables (#2040247)
- shared/syscall-list: filter out some obviously platform-specific syscalls (#2040247)
- seccomp: tighten checking of seccomp filter creation (#2040247)
- shared/seccomp-util: added functionality to make list of filtred syscalls (#2040247)
- nspawn: return ENOSYS by default, EPERM for "known" calls (#2040247)
- revert: resolved: pin stream while calling callbacks for it (#2110549)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-65" date="1660910400">- test-procfs-util: skip test on certain errors (#2087152)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-66" date="1661428800">- Try stopping MD RAID devices in shutdown too (#1817706)
- shutdown: get only active md arrays. (#1817706)
- scope: allow unprivileged delegation on scopes (#2068575)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-67" date="1661515200">- resolved: pin stream while calling callbacks for it (#2110549)
- ci(functions): Add `useradd` and `userdel` (#2110549)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-68" date="1664280000">- logind: optionally watch utmp for login data (#2122288)
- logind: add hashtable for finding session by leader PID (#2122288)
- core/load-fragment: move config_parse_sec_fix_0 to src/shared (#2122288)
- sd-event: add relative timer calls (#2122288)
- logind: add option to stop idle sessions after specified timeout (#2122288)
- logind: schedule idle check full interval from now if we couldn't figure out atime timestamp (#2122288)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-68.1" date="1667822400">- time-util: fix buffer-over-run (#2139390)
- core: move reset_arguments() to the end of main's finish (#2127170)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-68.2" date="1669032000">- basic: recognize pdfs filesystem as a network filesystem (#2143100)</changelog>
</package>
<package pkgid="a132a713705ddb60822b890e5b8bf2893b458c35d2f366442263da6f32a58391" name="systemd" arch="x86_64">
  <version epoch="0" ver="239" rel="68.el8_7.2"/>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-61" date="1657800000">- mkosi: Add gnutls package (#2101227)
- unit-name: tighten checks for building valid unit names (#1940973)
- core: shorten long unit names that are based on paths and append path hash at the end (#1940973)
- test: add extended test for triggering mount rate limit (#1940973)
- tests: add test case for long unit names (#1940973)
- core: unset HOME=/ that the kernel gives us (#2056527)
- journal-remote: check return value from MHD_add_response_header (#2051981)
- journalctl: in --follow mode watch stdout for POLLHUP/POLLERR and exit (#2003236)
- sd-bus: make BUS_DEFAULT_TIMEOUT configurable (#2039461)
- fstab-generator: fix debug log (#2101433)
- logind-session-dbus: allow to set display name via dbus (#1857969)
- Allow restart for oneshot units (#2042896)
- test: correct TEST-41 StartLimitBurst test (#2042896)
- core: fix assert() about number of built environment variables (#2049788)
- core: add one more assert() (#2049788)
- strv: introduce strv_join_prefix() (#2049788)
- test: add tests for strv_join_prefix() (#2049788)
- test: replace swear words by 'hoge' (#2049788)
- core: add new environment variable $RUNTIME_DIRECTORY= or friends (#2049788)
- test-execute: add tests for $RUNTIME_DIRECTORY= or friends (#2049788)
- man: document RUNTIME_DIRECTORY= or friends (#2049788)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-62" date="1658145600">- spec: Remove dependency on timedatex (#2066946)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-63" date="1659528000">- resolved: pin stream while calling callbacks for it (#2110549)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-64" date="1660824000">- ci: bump the worker Ubuntu version to Jammy (#2087152)
- test: make test-execute pass on Linux 5.15 (#2087152)
- ci: install iputils (#2087152)
- ci(Mergify): Add `ci-waived` logic (#2087152)
- sd-event: don't invalidate source type on disconnect (#2115396)
- tests: make sure we delay running mount start jobs when /p/s/mountinfo is rate limited (#2095744)
- core: drop references to 'StandardOutputFileToCreate' (#2093479)
- dbus-execute: fix indentation (#2093479)
- dbus-execute: generate the correct transient unit setting (#2093479)
- bus-unit-util: properly accept StandardOutput=append:… settings (#2093479)
- core: be more careful when inheriting stdout fds to stderr (#2093479)
- test: add a test for StandardError=file:… (#2093479)
- tree-wide: allow ASCII fallback for → in logs (#2093479)
- tree-wide: allow ASCII fallback for … in logs (#2093479)
- core: allow to set default timeout for devices (#1967245)
- man: document DefaultDeviceTimeoutSec= (#1967245)
- Revert "core: Propagate condition failed state to triggering units." (#2114005)
- core: Check unit start rate limiting earlier (#2114005)
- core: Add trigger limit for path units (#2114005)
- meson: add syscall-names-update target (#2040247)
- syscall-names: add process_madvise which is planned for 5.10 (#2040247)
- shared: add @known syscall list (#2040247)
- generate-syscall-list: require python3 (#2040247)
- shared/seccomp: reduce scope of indexing variables (#2040247)
- shared/syscall-list: filter out some obviously platform-specific syscalls (#2040247)
- seccomp: tighten checking of seccomp filter creation (#2040247)
- shared/seccomp-util: added functionality to make list of filtred syscalls (#2040247)
- nspawn: return ENOSYS by default, EPERM for "known" calls (#2040247)
- revert: resolved: pin stream while calling callbacks for it (#2110549)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-65" date="1660910400">- test-procfs-util: skip test on certain errors (#2087152)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-66" date="1661428800">- Try stopping MD RAID devices in shutdown too (#1817706)
- shutdown: get only active md arrays. (#1817706)
- scope: allow unprivileged delegation on scopes (#2068575)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-67" date="1661515200">- resolved: pin stream while calling callbacks for it (#2110549)
- ci(functions): Add `useradd` and `userdel` (#2110549)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-68" date="1664280000">- logind: optionally watch utmp for login data (#2122288)
- logind: add hashtable for finding session by leader PID (#2122288)
- core/load-fragment: move config_parse_sec_fix_0 to src/shared (#2122288)
- sd-event: add relative timer calls (#2122288)
- logind: add option to stop idle sessions after specified timeout (#2122288)
- logind: schedule idle check full interval from now if we couldn't figure out atime timestamp (#2122288)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-68.1" date="1667822400">- time-util: fix buffer-over-run (#2139390)
- core: move reset_arguments() to the end of main's finish (#2127170)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-68.2" date="1669032000">- basic: recognize pdfs filesystem as a network filesystem (#2143100)</changelog>
</package>
<package pkgid="b1d9eeb414d7a40b47e373d1b2e8ec42115d9fc56ed2c26f7ff55c524843fcca" name="systemd" arch="i686">
  <version epoch="0" ver="239" rel="68.el8_7.4"/>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-63" date="1659528000">- resolved: pin stream while calling callbacks for it (#2110549)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-64" date="1660824000">- ci: bump the worker Ubuntu version to Jammy (#2087152)
- test: make test-execute pass on Linux 5.15 (#2087152)
- ci: install iputils (#2087152)
- ci(Mergify): Add `ci-waived` logic (#2087152)
- sd-event: don't invalidate source type on disconnect (#2115396)
- tests: make sure we delay running mount start jobs when /p/s/mountinfo is rate limited (#2095744)
- core: drop references to 'StandardOutputFileToCreate' (#2093479)
- dbus-execute: fix indentation (#2093479)
- dbus-execute: generate the correct transient unit setting (#2093479)
- bus-unit-util: properly accept StandardOutput=append:… settings (#2093479)
- core: be more careful when inheriting stdout fds to stderr (#2093479)
- test: add a test for StandardError=file:… (#2093479)
- tree-wide: allow ASCII fallback for → in logs (#2093479)
- tree-wide: allow ASCII fallback for … in logs (#2093479)
- core: allow to set default timeout for devices (#1967245)
- man: document DefaultDeviceTimeoutSec= (#1967245)
- Revert "core: Propagate condition failed state to triggering units." (#2114005)
- core: Check unit start rate limiting earlier (#2114005)
- core: Add trigger limit for path units (#2114005)
- meson: add syscall-names-update target (#2040247)
- syscall-names: add process_madvise which is planned for 5.10 (#2040247)
- shared: add @known syscall list (#2040247)
- generate-syscall-list: require python3 (#2040247)
- shared/seccomp: reduce scope of indexing variables (#2040247)
- shared/syscall-list: filter out some obviously platform-specific syscalls (#2040247)
- seccomp: tighten checking of seccomp filter creation (#2040247)
- shared/seccomp-util: added functionality to make list of filtred syscalls (#2040247)
- nspawn: return ENOSYS by default, EPERM for "known" calls (#2040247)
- revert: resolved: pin stream while calling callbacks for it (#2110549)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-65" date="1660910400">- test-procfs-util: skip test on certain errors (#2087152)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-66" date="1661428800">- Try stopping MD RAID devices in shutdown too (#1817706)
- shutdown: get only active md arrays. (#1817706)
- scope: allow unprivileged delegation on scopes (#2068575)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-67" date="1661515200">- resolved: pin stream while calling callbacks for it (#2110549)
- ci(functions): Add `useradd` and `userdel` (#2110549)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-68" date="1664280000">- logind: optionally watch utmp for login data (#2122288)
- logind: add hashtable for finding session by leader PID (#2122288)
- core/load-fragment: move config_parse_sec_fix_0 to src/shared (#2122288)
- sd-event: add relative timer calls (#2122288)
- logind: add option to stop idle sessions after specified timeout (#2122288)
- logind: schedule idle check full interval from now if we couldn't figure out atime timestamp (#2122288)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-68.1" date="1667822400">- time-util: fix buffer-over-run (#2139390)
- core: move reset_arguments() to the end of main's finish (#2127170)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-68.2" date="1669032000">- basic: recognize pdfs filesystem as a network filesystem (#2143100)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-68.3" date="1674820800">- core: bring manager_startup() and manager_reload() more inline (#2164049)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-68.4" date="1675080000">- basic: add STRERROR() wrapper for strerror_r() (#2155519)
- coredump: put context array into a struct (#2155519)
- coredump: do not allow user to access coredumps with changed uid/gid/capabilities (#2155519)</changelog>
</package>
<package pkgid="62eb75fd2532fc14763a96cddfc40e53184fe1c517ef0c6eaf357f099c08036d" name="systemd" arch="x86_64">
  <version epoch="0" ver="239" rel="68.el8_7.4"/>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-63" date="1659528000">- resolved: pin stream while calling callbacks for it (#2110549)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-64" date="1660824000">- ci: bump the worker Ubuntu version to Jammy (#2087152)
- test: make test-execute pass on Linux 5.15 (#2087152)
- ci: install iputils (#2087152)
- ci(Mergify): Add `ci-waived` logic (#2087152)
- sd-event: don't invalidate source type on disconnect (#2115396)
- tests: make sure we delay running mount start jobs when /p/s/mountinfo is rate limited (#2095744)
- core: drop references to 'StandardOutputFileToCreate' (#2093479)
- dbus-execute: fix indentation (#2093479)
- dbus-execute: generate the correct transient unit setting (#2093479)
- bus-unit-util: properly accept StandardOutput=append:… settings (#2093479)
- core: be more careful when inheriting stdout fds to stderr (#2093479)
- test: add a test for StandardError=file:… (#2093479)
- tree-wide: allow ASCII fallback for → in logs (#2093479)
- tree-wide: allow ASCII fallback for … in logs (#2093479)
- core: allow to set default timeout for devices (#1967245)
- man: document DefaultDeviceTimeoutSec= (#1967245)
- Revert "core: Propagate condition failed state to triggering units." (#2114005)
- core: Check unit start rate limiting earlier (#2114005)
- core: Add trigger limit for path units (#2114005)
- meson: add syscall-names-update target (#2040247)
- syscall-names: add process_madvise which is planned for 5.10 (#2040247)
- shared: add @known syscall list (#2040247)
- generate-syscall-list: require python3 (#2040247)
- shared/seccomp: reduce scope of indexing variables (#2040247)
- shared/syscall-list: filter out some obviously platform-specific syscalls (#2040247)
- seccomp: tighten checking of seccomp filter creation (#2040247)
- shared/seccomp-util: added functionality to make list of filtred syscalls (#2040247)
- nspawn: return ENOSYS by default, EPERM for "known" calls (#2040247)
- revert: resolved: pin stream while calling callbacks for it (#2110549)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-65" date="1660910400">- test-procfs-util: skip test on certain errors (#2087152)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-66" date="1661428800">- Try stopping MD RAID devices in shutdown too (#1817706)
- shutdown: get only active md arrays. (#1817706)
- scope: allow unprivileged delegation on scopes (#2068575)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-67" date="1661515200">- resolved: pin stream while calling callbacks for it (#2110549)
- ci(functions): Add `useradd` and `userdel` (#2110549)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-68" date="1664280000">- logind: optionally watch utmp for login data (#2122288)
- logind: add hashtable for finding session by leader PID (#2122288)
- core/load-fragment: move config_parse_sec_fix_0 to src/shared (#2122288)
- sd-event: add relative timer calls (#2122288)
- logind: add option to stop idle sessions after specified timeout (#2122288)
- logind: schedule idle check full interval from now if we couldn't figure out atime timestamp (#2122288)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-68.1" date="1667822400">- time-util: fix buffer-over-run (#2139390)
- core: move reset_arguments() to the end of main's finish (#2127170)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-68.2" date="1669032000">- basic: recognize pdfs filesystem as a network filesystem (#2143100)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-68.3" date="1674820800">- core: bring manager_startup() and manager_reload() more inline (#2164049)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-68.4" date="1675080000">- basic: add STRERROR() wrapper for strerror_r() (#2155519)
- coredump: put context array into a struct (#2155519)
- coredump: do not allow user to access coredumps with changed uid/gid/capabilities (#2155519)</changelog>
</package>
<package pkgid="6578b542f3beb5b2a30399c11edbf9f91170d3cff3de54273624f47b3e0ae5fb" name="systemd-container" arch="i686">
  <version epoch="0" ver="239" rel="68.el8_7.1"/>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-60" date="1655985600">- unit: don't emit PropertiesChanged signal if adding a dependency to a unit is a no-op (#1948480)
- tests: make inverted tests actually count (#2087152)
- TEST-*: make failure tests actually fail on failure (#2087152)
- ci(Mergify): configuration update (#2087152)
- core: propagate triggered unit in more load states (#2065322)
- core: propagate unit start limit hit state to triggering path unit (#2065322)
- core: Move 'r' variable declaration to start of unit_start() (#2065322)
- core: Delay start rate limit check when starting a unit (#2065322)
- core: Propagate condition failed state to triggering units. (#2065322)
- unit: check for mount rate limiting before checking active state (#2095744)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-61" date="1657800000">- mkosi: Add gnutls package (#2101227)
- unit-name: tighten checks for building valid unit names (#1940973)
- core: shorten long unit names that are based on paths and append path hash at the end (#1940973)
- test: add extended test for triggering mount rate limit (#1940973)
- tests: add test case for long unit names (#1940973)
- core: unset HOME=/ that the kernel gives us (#2056527)
- journal-remote: check return value from MHD_add_response_header (#2051981)
- journalctl: in --follow mode watch stdout for POLLHUP/POLLERR and exit (#2003236)
- sd-bus: make BUS_DEFAULT_TIMEOUT configurable (#2039461)
- fstab-generator: fix debug log (#2101433)
- logind-session-dbus: allow to set display name via dbus (#1857969)
- Allow restart for oneshot units (#2042896)
- test: correct TEST-41 StartLimitBurst test (#2042896)
- core: fix assert() about number of built environment variables (#2049788)
- core: add one more assert() (#2049788)
- strv: introduce strv_join_prefix() (#2049788)
- test: add tests for strv_join_prefix() (#2049788)
- test: replace swear words by 'hoge' (#2049788)
- core: add new environment variable $RUNTIME_DIRECTORY= or friends (#2049788)
- test-execute: add tests for $RUNTIME_DIRECTORY= or friends (#2049788)
- man: document RUNTIME_DIRECTORY= or friends (#2049788)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-62" date="1658145600">- spec: Remove dependency on timedatex (#2066946)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-63" date="1659528000">- resolved: pin stream while calling callbacks for it (#2110549)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-64" date="1660824000">- ci: bump the worker Ubuntu version to Jammy (#2087152)
- test: make test-execute pass on Linux 5.15 (#2087152)
- ci: install iputils (#2087152)
- ci(Mergify): Add `ci-waived` logic (#2087152)
- sd-event: don't invalidate source type on disconnect (#2115396)
- tests: make sure we delay running mount start jobs when /p/s/mountinfo is rate limited (#2095744)
- core: drop references to 'StandardOutputFileToCreate' (#2093479)
- dbus-execute: fix indentation (#2093479)
- dbus-execute: generate the correct transient unit setting (#2093479)
- bus-unit-util: properly accept StandardOutput=append:… settings (#2093479)
- core: be more careful when inheriting stdout fds to stderr (#2093479)
- test: add a test for StandardError=file:… (#2093479)
- tree-wide: allow ASCII fallback for → in logs (#2093479)
- tree-wide: allow ASCII fallback for … in logs (#2093479)
- core: allow to set default timeout for devices (#1967245)
- man: document DefaultDeviceTimeoutSec= (#1967245)
- Revert "core: Propagate condition failed state to triggering units." (#2114005)
- core: Check unit start rate limiting earlier (#2114005)
- core: Add trigger limit for path units (#2114005)
- meson: add syscall-names-update target (#2040247)
- syscall-names: add process_madvise which is planned for 5.10 (#2040247)
- shared: add @known syscall list (#2040247)
- generate-syscall-list: require python3 (#2040247)
- shared/seccomp: reduce scope of indexing variables (#2040247)
- shared/syscall-list: filter out some obviously platform-specific syscalls (#2040247)
- seccomp: tighten checking of seccomp filter creation (#2040247)
- shared/seccomp-util: added functionality to make list of filtred syscalls (#2040247)
- nspawn: return ENOSYS by default, EPERM for "known" calls (#2040247)
- revert: resolved: pin stream while calling callbacks for it (#2110549)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-65" date="1660910400">- test-procfs-util: skip test on certain errors (#2087152)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-66" date="1661428800">- Try stopping MD RAID devices in shutdown too (#1817706)
- shutdown: get only active md arrays. (#1817706)
- scope: allow unprivileged delegation on scopes (#2068575)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-67" date="1661515200">- resolved: pin stream while calling callbacks for it (#2110549)
- ci(functions): Add `useradd` and `userdel` (#2110549)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-68" date="1664280000">- logind: optionally watch utmp for login data (#2122288)
- logind: add hashtable for finding session by leader PID (#2122288)
- core/load-fragment: move config_parse_sec_fix_0 to src/shared (#2122288)
- sd-event: add relative timer calls (#2122288)
- logind: add option to stop idle sessions after specified timeout (#2122288)
- logind: schedule idle check full interval from now if we couldn't figure out atime timestamp (#2122288)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-68.1" date="1667822400">- time-util: fix buffer-over-run (#2139390)
- core: move reset_arguments() to the end of main's finish (#2127170)</changelog>
</package>
<package pkgid="b0c8c23cda1f945264906b8f8efddee75a8c2b120e0bb97e7a74d391d27ad80e" name="systemd-container" arch="x86_64">
  <version epoch="0" ver="239" rel="68.el8_7.1"/>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-60" date="1655985600">- unit: don't emit PropertiesChanged signal if adding a dependency to a unit is a no-op (#1948480)
- tests: make inverted tests actually count (#2087152)
- TEST-*: make failure tests actually fail on failure (#2087152)
- ci(Mergify): configuration update (#2087152)
- core: propagate triggered unit in more load states (#2065322)
- core: propagate unit start limit hit state to triggering path unit (#2065322)
- core: Move 'r' variable declaration to start of unit_start() (#2065322)
- core: Delay start rate limit check when starting a unit (#2065322)
- core: Propagate condition failed state to triggering units. (#2065322)
- unit: check for mount rate limiting before checking active state (#2095744)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-61" date="1657800000">- mkosi: Add gnutls package (#2101227)
- unit-name: tighten checks for building valid unit names (#1940973)
- core: shorten long unit names that are based on paths and append path hash at the end (#1940973)
- test: add extended test for triggering mount rate limit (#1940973)
- tests: add test case for long unit names (#1940973)
- core: unset HOME=/ that the kernel gives us (#2056527)
- journal-remote: check return value from MHD_add_response_header (#2051981)
- journalctl: in --follow mode watch stdout for POLLHUP/POLLERR and exit (#2003236)
- sd-bus: make BUS_DEFAULT_TIMEOUT configurable (#2039461)
- fstab-generator: fix debug log (#2101433)
- logind-session-dbus: allow to set display name via dbus (#1857969)
- Allow restart for oneshot units (#2042896)
- test: correct TEST-41 StartLimitBurst test (#2042896)
- core: fix assert() about number of built environment variables (#2049788)
- core: add one more assert() (#2049788)
- strv: introduce strv_join_prefix() (#2049788)
- test: add tests for strv_join_prefix() (#2049788)
- test: replace swear words by 'hoge' (#2049788)
- core: add new environment variable $RUNTIME_DIRECTORY= or friends (#2049788)
- test-execute: add tests for $RUNTIME_DIRECTORY= or friends (#2049788)
- man: document RUNTIME_DIRECTORY= or friends (#2049788)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-62" date="1658145600">- spec: Remove dependency on timedatex (#2066946)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-63" date="1659528000">- resolved: pin stream while calling callbacks for it (#2110549)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-64" date="1660824000">- ci: bump the worker Ubuntu version to Jammy (#2087152)
- test: make test-execute pass on Linux 5.15 (#2087152)
- ci: install iputils (#2087152)
- ci(Mergify): Add `ci-waived` logic (#2087152)
- sd-event: don't invalidate source type on disconnect (#2115396)
- tests: make sure we delay running mount start jobs when /p/s/mountinfo is rate limited (#2095744)
- core: drop references to 'StandardOutputFileToCreate' (#2093479)
- dbus-execute: fix indentation (#2093479)
- dbus-execute: generate the correct transient unit setting (#2093479)
- bus-unit-util: properly accept StandardOutput=append:… settings (#2093479)
- core: be more careful when inheriting stdout fds to stderr (#2093479)
- test: add a test for StandardError=file:… (#2093479)
- tree-wide: allow ASCII fallback for → in logs (#2093479)
- tree-wide: allow ASCII fallback for … in logs (#2093479)
- core: allow to set default timeout for devices (#1967245)
- man: document DefaultDeviceTimeoutSec= (#1967245)
- Revert "core: Propagate condition failed state to triggering units." (#2114005)
- core: Check unit start rate limiting earlier (#2114005)
- core: Add trigger limit for path units (#2114005)
- meson: add syscall-names-update target (#2040247)
- syscall-names: add process_madvise which is planned for 5.10 (#2040247)
- shared: add @known syscall list (#2040247)
- generate-syscall-list: require python3 (#2040247)
- shared/seccomp: reduce scope of indexing variables (#2040247)
- shared/syscall-list: filter out some obviously platform-specific syscalls (#2040247)
- seccomp: tighten checking of seccomp filter creation (#2040247)
- shared/seccomp-util: added functionality to make list of filtred syscalls (#2040247)
- nspawn: return ENOSYS by default, EPERM for "known" calls (#2040247)
- revert: resolved: pin stream while calling callbacks for it (#2110549)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-65" date="1660910400">- test-procfs-util: skip test on certain errors (#2087152)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-66" date="1661428800">- Try stopping MD RAID devices in shutdown too (#1817706)
- shutdown: get only active md arrays. (#1817706)
- scope: allow unprivileged delegation on scopes (#2068575)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-67" date="1661515200">- resolved: pin stream while calling callbacks for it (#2110549)
- ci(functions): Add `useradd` and `userdel` (#2110549)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-68" date="1664280000">- logind: optionally watch utmp for login data (#2122288)
- logind: add hashtable for finding session by leader PID (#2122288)
- core/load-fragment: move config_parse_sec_fix_0 to src/shared (#2122288)
- sd-event: add relative timer calls (#2122288)
- logind: add option to stop idle sessions after specified timeout (#2122288)
- logind: schedule idle check full interval from now if we couldn't figure out atime timestamp (#2122288)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-68.1" date="1667822400">- time-util: fix buffer-over-run (#2139390)
- core: move reset_arguments() to the end of main's finish (#2127170)</changelog>
</package>
<package pkgid="5275b17d05feeee0098559a5e22af9992b8f5bbf799cbd75d4e6c979544a20b7" name="systemd-container" arch="i686">
  <version epoch="0" ver="239" rel="68.el8_7.2"/>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-61" date="1657800000">- mkosi: Add gnutls package (#2101227)
- unit-name: tighten checks for building valid unit names (#1940973)
- core: shorten long unit names that are based on paths and append path hash at the end (#1940973)
- test: add extended test for triggering mount rate limit (#1940973)
- tests: add test case for long unit names (#1940973)
- core: unset HOME=/ that the kernel gives us (#2056527)
- journal-remote: check return value from MHD_add_response_header (#2051981)
- journalctl: in --follow mode watch stdout for POLLHUP/POLLERR and exit (#2003236)
- sd-bus: make BUS_DEFAULT_TIMEOUT configurable (#2039461)
- fstab-generator: fix debug log (#2101433)
- logind-session-dbus: allow to set display name via dbus (#1857969)
- Allow restart for oneshot units (#2042896)
- test: correct TEST-41 StartLimitBurst test (#2042896)
- core: fix assert() about number of built environment variables (#2049788)
- core: add one more assert() (#2049788)
- strv: introduce strv_join_prefix() (#2049788)
- test: add tests for strv_join_prefix() (#2049788)
- test: replace swear words by 'hoge' (#2049788)
- core: add new environment variable $RUNTIME_DIRECTORY= or friends (#2049788)
- test-execute: add tests for $RUNTIME_DIRECTORY= or friends (#2049788)
- man: document RUNTIME_DIRECTORY= or friends (#2049788)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-62" date="1658145600">- spec: Remove dependency on timedatex (#2066946)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-63" date="1659528000">- resolved: pin stream while calling callbacks for it (#2110549)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-64" date="1660824000">- ci: bump the worker Ubuntu version to Jammy (#2087152)
- test: make test-execute pass on Linux 5.15 (#2087152)
- ci: install iputils (#2087152)
- ci(Mergify): Add `ci-waived` logic (#2087152)
- sd-event: don't invalidate source type on disconnect (#2115396)
- tests: make sure we delay running mount start jobs when /p/s/mountinfo is rate limited (#2095744)
- core: drop references to 'StandardOutputFileToCreate' (#2093479)
- dbus-execute: fix indentation (#2093479)
- dbus-execute: generate the correct transient unit setting (#2093479)
- bus-unit-util: properly accept StandardOutput=append:… settings (#2093479)
- core: be more careful when inheriting stdout fds to stderr (#2093479)
- test: add a test for StandardError=file:… (#2093479)
- tree-wide: allow ASCII fallback for → in logs (#2093479)
- tree-wide: allow ASCII fallback for … in logs (#2093479)
- core: allow to set default timeout for devices (#1967245)
- man: document DefaultDeviceTimeoutSec= (#1967245)
- Revert "core: Propagate condition failed state to triggering units." (#2114005)
- core: Check unit start rate limiting earlier (#2114005)
- core: Add trigger limit for path units (#2114005)
- meson: add syscall-names-update target (#2040247)
- syscall-names: add process_madvise which is planned for 5.10 (#2040247)
- shared: add @known syscall list (#2040247)
- generate-syscall-list: require python3 (#2040247)
- shared/seccomp: reduce scope of indexing variables (#2040247)
- shared/syscall-list: filter out some obviously platform-specific syscalls (#2040247)
- seccomp: tighten checking of seccomp filter creation (#2040247)
- shared/seccomp-util: added functionality to make list of filtred syscalls (#2040247)
- nspawn: return ENOSYS by default, EPERM for "known" calls (#2040247)
- revert: resolved: pin stream while calling callbacks for it (#2110549)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-65" date="1660910400">- test-procfs-util: skip test on certain errors (#2087152)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-66" date="1661428800">- Try stopping MD RAID devices in shutdown too (#1817706)
- shutdown: get only active md arrays. (#1817706)
- scope: allow unprivileged delegation on scopes (#2068575)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-67" date="1661515200">- resolved: pin stream while calling callbacks for it (#2110549)
- ci(functions): Add `useradd` and `userdel` (#2110549)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-68" date="1664280000">- logind: optionally watch utmp for login data (#2122288)
- logind: add hashtable for finding session by leader PID (#2122288)
- core/load-fragment: move config_parse_sec_fix_0 to src/shared (#2122288)
- sd-event: add relative timer calls (#2122288)
- logind: add option to stop idle sessions after specified timeout (#2122288)
- logind: schedule idle check full interval from now if we couldn't figure out atime timestamp (#2122288)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-68.1" date="1667822400">- time-util: fix buffer-over-run (#2139390)
- core: move reset_arguments() to the end of main's finish (#2127170)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-68.2" date="1669032000">- basic: recognize pdfs filesystem as a network filesystem (#2143100)</changelog>
</package>
<package pkgid="b20e8265c4bbef6d12343c3db0558eedea1f0017885035b0adce506116acce99" name="systemd-container" arch="x86_64">
  <version epoch="0" ver="239" rel="68.el8_7.2"/>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-61" date="1657800000">- mkosi: Add gnutls package (#2101227)
- unit-name: tighten checks for building valid unit names (#1940973)
- core: shorten long unit names that are based on paths and append path hash at the end (#1940973)
- test: add extended test for triggering mount rate limit (#1940973)
- tests: add test case for long unit names (#1940973)
- core: unset HOME=/ that the kernel gives us (#2056527)
- journal-remote: check return value from MHD_add_response_header (#2051981)
- journalctl: in --follow mode watch stdout for POLLHUP/POLLERR and exit (#2003236)
- sd-bus: make BUS_DEFAULT_TIMEOUT configurable (#2039461)
- fstab-generator: fix debug log (#2101433)
- logind-session-dbus: allow to set display name via dbus (#1857969)
- Allow restart for oneshot units (#2042896)
- test: correct TEST-41 StartLimitBurst test (#2042896)
- core: fix assert() about number of built environment variables (#2049788)
- core: add one more assert() (#2049788)
- strv: introduce strv_join_prefix() (#2049788)
- test: add tests for strv_join_prefix() (#2049788)
- test: replace swear words by 'hoge' (#2049788)
- core: add new environment variable $RUNTIME_DIRECTORY= or friends (#2049788)
- test-execute: add tests for $RUNTIME_DIRECTORY= or friends (#2049788)
- man: document RUNTIME_DIRECTORY= or friends (#2049788)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-62" date="1658145600">- spec: Remove dependency on timedatex (#2066946)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-63" date="1659528000">- resolved: pin stream while calling callbacks for it (#2110549)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-64" date="1660824000">- ci: bump the worker Ubuntu version to Jammy (#2087152)
- test: make test-execute pass on Linux 5.15 (#2087152)
- ci: install iputils (#2087152)
- ci(Mergify): Add `ci-waived` logic (#2087152)
- sd-event: don't invalidate source type on disconnect (#2115396)
- tests: make sure we delay running mount start jobs when /p/s/mountinfo is rate limited (#2095744)
- core: drop references to 'StandardOutputFileToCreate' (#2093479)
- dbus-execute: fix indentation (#2093479)
- dbus-execute: generate the correct transient unit setting (#2093479)
- bus-unit-util: properly accept StandardOutput=append:… settings (#2093479)
- core: be more careful when inheriting stdout fds to stderr (#2093479)
- test: add a test for StandardError=file:… (#2093479)
- tree-wide: allow ASCII fallback for → in logs (#2093479)
- tree-wide: allow ASCII fallback for … in logs (#2093479)
- core: allow to set default timeout for devices (#1967245)
- man: document DefaultDeviceTimeoutSec= (#1967245)
- Revert "core: Propagate condition failed state to triggering units." (#2114005)
- core: Check unit start rate limiting earlier (#2114005)
- core: Add trigger limit for path units (#2114005)
- meson: add syscall-names-update target (#2040247)
- syscall-names: add process_madvise which is planned for 5.10 (#2040247)
- shared: add @known syscall list (#2040247)
- generate-syscall-list: require python3 (#2040247)
- shared/seccomp: reduce scope of indexing variables (#2040247)
- shared/syscall-list: filter out some obviously platform-specific syscalls (#2040247)
- seccomp: tighten checking of seccomp filter creation (#2040247)
- shared/seccomp-util: added functionality to make list of filtred syscalls (#2040247)
- nspawn: return ENOSYS by default, EPERM for "known" calls (#2040247)
- revert: resolved: pin stream while calling callbacks for it (#2110549)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-65" date="1660910400">- test-procfs-util: skip test on certain errors (#2087152)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-66" date="1661428800">- Try stopping MD RAID devices in shutdown too (#1817706)
- shutdown: get only active md arrays. (#1817706)
- scope: allow unprivileged delegation on scopes (#2068575)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-67" date="1661515200">- resolved: pin stream while calling callbacks for it (#2110549)
- ci(functions): Add `useradd` and `userdel` (#2110549)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-68" date="1664280000">- logind: optionally watch utmp for login data (#2122288)
- logind: add hashtable for finding session by leader PID (#2122288)
- core/load-fragment: move config_parse_sec_fix_0 to src/shared (#2122288)
- sd-event: add relative timer calls (#2122288)
- logind: add option to stop idle sessions after specified timeout (#2122288)
- logind: schedule idle check full interval from now if we couldn't figure out atime timestamp (#2122288)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-68.1" date="1667822400">- time-util: fix buffer-over-run (#2139390)
- core: move reset_arguments() to the end of main's finish (#2127170)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-68.2" date="1669032000">- basic: recognize pdfs filesystem as a network filesystem (#2143100)</changelog>
</package>
<package pkgid="51b9582687aec98c01cd1a67585e9985d3e2011638150f63630889133b263d35" name="systemd-container" arch="i686">
  <version epoch="0" ver="239" rel="68.el8_7.4"/>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-63" date="1659528000">- resolved: pin stream while calling callbacks for it (#2110549)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-64" date="1660824000">- ci: bump the worker Ubuntu version to Jammy (#2087152)
- test: make test-execute pass on Linux 5.15 (#2087152)
- ci: install iputils (#2087152)
- ci(Mergify): Add `ci-waived` logic (#2087152)
- sd-event: don't invalidate source type on disconnect (#2115396)
- tests: make sure we delay running mount start jobs when /p/s/mountinfo is rate limited (#2095744)
- core: drop references to 'StandardOutputFileToCreate' (#2093479)
- dbus-execute: fix indentation (#2093479)
- dbus-execute: generate the correct transient unit setting (#2093479)
- bus-unit-util: properly accept StandardOutput=append:… settings (#2093479)
- core: be more careful when inheriting stdout fds to stderr (#2093479)
- test: add a test for StandardError=file:… (#2093479)
- tree-wide: allow ASCII fallback for → in logs (#2093479)
- tree-wide: allow ASCII fallback for … in logs (#2093479)
- core: allow to set default timeout for devices (#1967245)
- man: document DefaultDeviceTimeoutSec= (#1967245)
- Revert "core: Propagate condition failed state to triggering units." (#2114005)
- core: Check unit start rate limiting earlier (#2114005)
- core: Add trigger limit for path units (#2114005)
- meson: add syscall-names-update target (#2040247)
- syscall-names: add process_madvise which is planned for 5.10 (#2040247)
- shared: add @known syscall list (#2040247)
- generate-syscall-list: require python3 (#2040247)
- shared/seccomp: reduce scope of indexing variables (#2040247)
- shared/syscall-list: filter out some obviously platform-specific syscalls (#2040247)
- seccomp: tighten checking of seccomp filter creation (#2040247)
- shared/seccomp-util: added functionality to make list of filtred syscalls (#2040247)
- nspawn: return ENOSYS by default, EPERM for "known" calls (#2040247)
- revert: resolved: pin stream while calling callbacks for it (#2110549)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-65" date="1660910400">- test-procfs-util: skip test on certain errors (#2087152)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-66" date="1661428800">- Try stopping MD RAID devices in shutdown too (#1817706)
- shutdown: get only active md arrays. (#1817706)
- scope: allow unprivileged delegation on scopes (#2068575)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-67" date="1661515200">- resolved: pin stream while calling callbacks for it (#2110549)
- ci(functions): Add `useradd` and `userdel` (#2110549)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-68" date="1664280000">- logind: optionally watch utmp for login data (#2122288)
- logind: add hashtable for finding session by leader PID (#2122288)
- core/load-fragment: move config_parse_sec_fix_0 to src/shared (#2122288)
- sd-event: add relative timer calls (#2122288)
- logind: add option to stop idle sessions after specified timeout (#2122288)
- logind: schedule idle check full interval from now if we couldn't figure out atime timestamp (#2122288)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-68.1" date="1667822400">- time-util: fix buffer-over-run (#2139390)
- core: move reset_arguments() to the end of main's finish (#2127170)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-68.2" date="1669032000">- basic: recognize pdfs filesystem as a network filesystem (#2143100)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-68.3" date="1674820800">- core: bring manager_startup() and manager_reload() more inline (#2164049)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-68.4" date="1675080000">- basic: add STRERROR() wrapper for strerror_r() (#2155519)
- coredump: put context array into a struct (#2155519)
- coredump: do not allow user to access coredumps with changed uid/gid/capabilities (#2155519)</changelog>
</package>
<package pkgid="24532eb045e00fec87db638f5698a8e0b220eaa5c3eefb6517e2051c0a092c1f" name="systemd-container" arch="x86_64">
  <version epoch="0" ver="239" rel="68.el8_7.4"/>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-63" date="1659528000">- resolved: pin stream while calling callbacks for it (#2110549)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-64" date="1660824000">- ci: bump the worker Ubuntu version to Jammy (#2087152)
- test: make test-execute pass on Linux 5.15 (#2087152)
- ci: install iputils (#2087152)
- ci(Mergify): Add `ci-waived` logic (#2087152)
- sd-event: don't invalidate source type on disconnect (#2115396)
- tests: make sure we delay running mount start jobs when /p/s/mountinfo is rate limited (#2095744)
- core: drop references to 'StandardOutputFileToCreate' (#2093479)
- dbus-execute: fix indentation (#2093479)
- dbus-execute: generate the correct transient unit setting (#2093479)
- bus-unit-util: properly accept StandardOutput=append:… settings (#2093479)
- core: be more careful when inheriting stdout fds to stderr (#2093479)
- test: add a test for StandardError=file:… (#2093479)
- tree-wide: allow ASCII fallback for → in logs (#2093479)
- tree-wide: allow ASCII fallback for … in logs (#2093479)
- core: allow to set default timeout for devices (#1967245)
- man: document DefaultDeviceTimeoutSec= (#1967245)
- Revert "core: Propagate condition failed state to triggering units." (#2114005)
- core: Check unit start rate limiting earlier (#2114005)
- core: Add trigger limit for path units (#2114005)
- meson: add syscall-names-update target (#2040247)
- syscall-names: add process_madvise which is planned for 5.10 (#2040247)
- shared: add @known syscall list (#2040247)
- generate-syscall-list: require python3 (#2040247)
- shared/seccomp: reduce scope of indexing variables (#2040247)
- shared/syscall-list: filter out some obviously platform-specific syscalls (#2040247)
- seccomp: tighten checking of seccomp filter creation (#2040247)
- shared/seccomp-util: added functionality to make list of filtred syscalls (#2040247)
- nspawn: return ENOSYS by default, EPERM for "known" calls (#2040247)
- revert: resolved: pin stream while calling callbacks for it (#2110549)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-65" date="1660910400">- test-procfs-util: skip test on certain errors (#2087152)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-66" date="1661428800">- Try stopping MD RAID devices in shutdown too (#1817706)
- shutdown: get only active md arrays. (#1817706)
- scope: allow unprivileged delegation on scopes (#2068575)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-67" date="1661515200">- resolved: pin stream while calling callbacks for it (#2110549)
- ci(functions): Add `useradd` and `userdel` (#2110549)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-68" date="1664280000">- logind: optionally watch utmp for login data (#2122288)
- logind: add hashtable for finding session by leader PID (#2122288)
- core/load-fragment: move config_parse_sec_fix_0 to src/shared (#2122288)
- sd-event: add relative timer calls (#2122288)
- logind: add option to stop idle sessions after specified timeout (#2122288)
- logind: schedule idle check full interval from now if we couldn't figure out atime timestamp (#2122288)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-68.1" date="1667822400">- time-util: fix buffer-over-run (#2139390)
- core: move reset_arguments() to the end of main's finish (#2127170)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-68.2" date="1669032000">- basic: recognize pdfs filesystem as a network filesystem (#2143100)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-68.3" date="1674820800">- core: bring manager_startup() and manager_reload() more inline (#2164049)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-68.4" date="1675080000">- basic: add STRERROR() wrapper for strerror_r() (#2155519)
- coredump: put context array into a struct (#2155519)
- coredump: do not allow user to access coredumps with changed uid/gid/capabilities (#2155519)</changelog>
</package>
<package pkgid="34cb0b9b19e32046214c346f0313ff8296f6405c57099850f7026f11260f0545" name="systemd-devel" arch="i686">
  <version epoch="0" ver="239" rel="68.el8_7.1"/>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-60" date="1655985600">- unit: don't emit PropertiesChanged signal if adding a dependency to a unit is a no-op (#1948480)
- tests: make inverted tests actually count (#2087152)
- TEST-*: make failure tests actually fail on failure (#2087152)
- ci(Mergify): configuration update (#2087152)
- core: propagate triggered unit in more load states (#2065322)
- core: propagate unit start limit hit state to triggering path unit (#2065322)
- core: Move 'r' variable declaration to start of unit_start() (#2065322)
- core: Delay start rate limit check when starting a unit (#2065322)
- core: Propagate condition failed state to triggering units. (#2065322)
- unit: check for mount rate limiting before checking active state (#2095744)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-61" date="1657800000">- mkosi: Add gnutls package (#2101227)
- unit-name: tighten checks for building valid unit names (#1940973)
- core: shorten long unit names that are based on paths and append path hash at the end (#1940973)
- test: add extended test for triggering mount rate limit (#1940973)
- tests: add test case for long unit names (#1940973)
- core: unset HOME=/ that the kernel gives us (#2056527)
- journal-remote: check return value from MHD_add_response_header (#2051981)
- journalctl: in --follow mode watch stdout for POLLHUP/POLLERR and exit (#2003236)
- sd-bus: make BUS_DEFAULT_TIMEOUT configurable (#2039461)
- fstab-generator: fix debug log (#2101433)
- logind-session-dbus: allow to set display name via dbus (#1857969)
- Allow restart for oneshot units (#2042896)
- test: correct TEST-41 StartLimitBurst test (#2042896)
- core: fix assert() about number of built environment variables (#2049788)
- core: add one more assert() (#2049788)
- strv: introduce strv_join_prefix() (#2049788)
- test: add tests for strv_join_prefix() (#2049788)
- test: replace swear words by 'hoge' (#2049788)
- core: add new environment variable $RUNTIME_DIRECTORY= or friends (#2049788)
- test-execute: add tests for $RUNTIME_DIRECTORY= or friends (#2049788)
- man: document RUNTIME_DIRECTORY= or friends (#2049788)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-62" date="1658145600">- spec: Remove dependency on timedatex (#2066946)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-63" date="1659528000">- resolved: pin stream while calling callbacks for it (#2110549)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-64" date="1660824000">- ci: bump the worker Ubuntu version to Jammy (#2087152)
- test: make test-execute pass on Linux 5.15 (#2087152)
- ci: install iputils (#2087152)
- ci(Mergify): Add `ci-waived` logic (#2087152)
- sd-event: don't invalidate source type on disconnect (#2115396)
- tests: make sure we delay running mount start jobs when /p/s/mountinfo is rate limited (#2095744)
- core: drop references to 'StandardOutputFileToCreate' (#2093479)
- dbus-execute: fix indentation (#2093479)
- dbus-execute: generate the correct transient unit setting (#2093479)
- bus-unit-util: properly accept StandardOutput=append:… settings (#2093479)
- core: be more careful when inheriting stdout fds to stderr (#2093479)
- test: add a test for StandardError=file:… (#2093479)
- tree-wide: allow ASCII fallback for → in logs (#2093479)
- tree-wide: allow ASCII fallback for … in logs (#2093479)
- core: allow to set default timeout for devices (#1967245)
- man: document DefaultDeviceTimeoutSec= (#1967245)
- Revert "core: Propagate condition failed state to triggering units." (#2114005)
- core: Check unit start rate limiting earlier (#2114005)
- core: Add trigger limit for path units (#2114005)
- meson: add syscall-names-update target (#2040247)
- syscall-names: add process_madvise which is planned for 5.10 (#2040247)
- shared: add @known syscall list (#2040247)
- generate-syscall-list: require python3 (#2040247)
- shared/seccomp: reduce scope of indexing variables (#2040247)
- shared/syscall-list: filter out some obviously platform-specific syscalls (#2040247)
- seccomp: tighten checking of seccomp filter creation (#2040247)
- shared/seccomp-util: added functionality to make list of filtred syscalls (#2040247)
- nspawn: return ENOSYS by default, EPERM for "known" calls (#2040247)
- revert: resolved: pin stream while calling callbacks for it (#2110549)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-65" date="1660910400">- test-procfs-util: skip test on certain errors (#2087152)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-66" date="1661428800">- Try stopping MD RAID devices in shutdown too (#1817706)
- shutdown: get only active md arrays. (#1817706)
- scope: allow unprivileged delegation on scopes (#2068575)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-67" date="1661515200">- resolved: pin stream while calling callbacks for it (#2110549)
- ci(functions): Add `useradd` and `userdel` (#2110549)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-68" date="1664280000">- logind: optionally watch utmp for login data (#2122288)
- logind: add hashtable for finding session by leader PID (#2122288)
- core/load-fragment: move config_parse_sec_fix_0 to src/shared (#2122288)
- sd-event: add relative timer calls (#2122288)
- logind: add option to stop idle sessions after specified timeout (#2122288)
- logind: schedule idle check full interval from now if we couldn't figure out atime timestamp (#2122288)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-68.1" date="1667822400">- time-util: fix buffer-over-run (#2139390)
- core: move reset_arguments() to the end of main's finish (#2127170)</changelog>
</package>
<package pkgid="cbcce1425d9a8acf01ba12d2b9f571c3291bf4fd13087741cec1aa9c691480cd" name="systemd-devel" arch="x86_64">
  <version epoch="0" ver="239" rel="68.el8_7.1"/>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-60" date="1655985600">- unit: don't emit PropertiesChanged signal if adding a dependency to a unit is a no-op (#1948480)
- tests: make inverted tests actually count (#2087152)
- TEST-*: make failure tests actually fail on failure (#2087152)
- ci(Mergify): configuration update (#2087152)
- core: propagate triggered unit in more load states (#2065322)
- core: propagate unit start limit hit state to triggering path unit (#2065322)
- core: Move 'r' variable declaration to start of unit_start() (#2065322)
- core: Delay start rate limit check when starting a unit (#2065322)
- core: Propagate condition failed state to triggering units. (#2065322)
- unit: check for mount rate limiting before checking active state (#2095744)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-61" date="1657800000">- mkosi: Add gnutls package (#2101227)
- unit-name: tighten checks for building valid unit names (#1940973)
- core: shorten long unit names that are based on paths and append path hash at the end (#1940973)
- test: add extended test for triggering mount rate limit (#1940973)
- tests: add test case for long unit names (#1940973)
- core: unset HOME=/ that the kernel gives us (#2056527)
- journal-remote: check return value from MHD_add_response_header (#2051981)
- journalctl: in --follow mode watch stdout for POLLHUP/POLLERR and exit (#2003236)
- sd-bus: make BUS_DEFAULT_TIMEOUT configurable (#2039461)
- fstab-generator: fix debug log (#2101433)
- logind-session-dbus: allow to set display name via dbus (#1857969)
- Allow restart for oneshot units (#2042896)
- test: correct TEST-41 StartLimitBurst test (#2042896)
- core: fix assert() about number of built environment variables (#2049788)
- core: add one more assert() (#2049788)
- strv: introduce strv_join_prefix() (#2049788)
- test: add tests for strv_join_prefix() (#2049788)
- test: replace swear words by 'hoge' (#2049788)
- core: add new environment variable $RUNTIME_DIRECTORY= or friends (#2049788)
- test-execute: add tests for $RUNTIME_DIRECTORY= or friends (#2049788)
- man: document RUNTIME_DIRECTORY= or friends (#2049788)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-62" date="1658145600">- spec: Remove dependency on timedatex (#2066946)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-63" date="1659528000">- resolved: pin stream while calling callbacks for it (#2110549)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-64" date="1660824000">- ci: bump the worker Ubuntu version to Jammy (#2087152)
- test: make test-execute pass on Linux 5.15 (#2087152)
- ci: install iputils (#2087152)
- ci(Mergify): Add `ci-waived` logic (#2087152)
- sd-event: don't invalidate source type on disconnect (#2115396)
- tests: make sure we delay running mount start jobs when /p/s/mountinfo is rate limited (#2095744)
- core: drop references to 'StandardOutputFileToCreate' (#2093479)
- dbus-execute: fix indentation (#2093479)
- dbus-execute: generate the correct transient unit setting (#2093479)
- bus-unit-util: properly accept StandardOutput=append:… settings (#2093479)
- core: be more careful when inheriting stdout fds to stderr (#2093479)
- test: add a test for StandardError=file:… (#2093479)
- tree-wide: allow ASCII fallback for → in logs (#2093479)
- tree-wide: allow ASCII fallback for … in logs (#2093479)
- core: allow to set default timeout for devices (#1967245)
- man: document DefaultDeviceTimeoutSec= (#1967245)
- Revert "core: Propagate condition failed state to triggering units." (#2114005)
- core: Check unit start rate limiting earlier (#2114005)
- core: Add trigger limit for path units (#2114005)
- meson: add syscall-names-update target (#2040247)
- syscall-names: add process_madvise which is planned for 5.10 (#2040247)
- shared: add @known syscall list (#2040247)
- generate-syscall-list: require python3 (#2040247)
- shared/seccomp: reduce scope of indexing variables (#2040247)
- shared/syscall-list: filter out some obviously platform-specific syscalls (#2040247)
- seccomp: tighten checking of seccomp filter creation (#2040247)
- shared/seccomp-util: added functionality to make list of filtred syscalls (#2040247)
- nspawn: return ENOSYS by default, EPERM for "known" calls (#2040247)
- revert: resolved: pin stream while calling callbacks for it (#2110549)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-65" date="1660910400">- test-procfs-util: skip test on certain errors (#2087152)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-66" date="1661428800">- Try stopping MD RAID devices in shutdown too (#1817706)
- shutdown: get only active md arrays. (#1817706)
- scope: allow unprivileged delegation on scopes (#2068575)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-67" date="1661515200">- resolved: pin stream while calling callbacks for it (#2110549)
- ci(functions): Add `useradd` and `userdel` (#2110549)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-68" date="1664280000">- logind: optionally watch utmp for login data (#2122288)
- logind: add hashtable for finding session by leader PID (#2122288)
- core/load-fragment: move config_parse_sec_fix_0 to src/shared (#2122288)
- sd-event: add relative timer calls (#2122288)
- logind: add option to stop idle sessions after specified timeout (#2122288)
- logind: schedule idle check full interval from now if we couldn't figure out atime timestamp (#2122288)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-68.1" date="1667822400">- time-util: fix buffer-over-run (#2139390)
- core: move reset_arguments() to the end of main's finish (#2127170)</changelog>
</package>
<package pkgid="94edccced9a024fec8568bd5fa27a8422f0a83eed200971e41cbc09548c8adb7" name="systemd-devel" arch="i686">
  <version epoch="0" ver="239" rel="68.el8_7.2"/>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-61" date="1657800000">- mkosi: Add gnutls package (#2101227)
- unit-name: tighten checks for building valid unit names (#1940973)
- core: shorten long unit names that are based on paths and append path hash at the end (#1940973)
- test: add extended test for triggering mount rate limit (#1940973)
- tests: add test case for long unit names (#1940973)
- core: unset HOME=/ that the kernel gives us (#2056527)
- journal-remote: check return value from MHD_add_response_header (#2051981)
- journalctl: in --follow mode watch stdout for POLLHUP/POLLERR and exit (#2003236)
- sd-bus: make BUS_DEFAULT_TIMEOUT configurable (#2039461)
- fstab-generator: fix debug log (#2101433)
- logind-session-dbus: allow to set display name via dbus (#1857969)
- Allow restart for oneshot units (#2042896)
- test: correct TEST-41 StartLimitBurst test (#2042896)
- core: fix assert() about number of built environment variables (#2049788)
- core: add one more assert() (#2049788)
- strv: introduce strv_join_prefix() (#2049788)
- test: add tests for strv_join_prefix() (#2049788)
- test: replace swear words by 'hoge' (#2049788)
- core: add new environment variable $RUNTIME_DIRECTORY= or friends (#2049788)
- test-execute: add tests for $RUNTIME_DIRECTORY= or friends (#2049788)
- man: document RUNTIME_DIRECTORY= or friends (#2049788)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-62" date="1658145600">- spec: Remove dependency on timedatex (#2066946)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-63" date="1659528000">- resolved: pin stream while calling callbacks for it (#2110549)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-64" date="1660824000">- ci: bump the worker Ubuntu version to Jammy (#2087152)
- test: make test-execute pass on Linux 5.15 (#2087152)
- ci: install iputils (#2087152)
- ci(Mergify): Add `ci-waived` logic (#2087152)
- sd-event: don't invalidate source type on disconnect (#2115396)
- tests: make sure we delay running mount start jobs when /p/s/mountinfo is rate limited (#2095744)
- core: drop references to 'StandardOutputFileToCreate' (#2093479)
- dbus-execute: fix indentation (#2093479)
- dbus-execute: generate the correct transient unit setting (#2093479)
- bus-unit-util: properly accept StandardOutput=append:… settings (#2093479)
- core: be more careful when inheriting stdout fds to stderr (#2093479)
- test: add a test for StandardError=file:… (#2093479)
- tree-wide: allow ASCII fallback for → in logs (#2093479)
- tree-wide: allow ASCII fallback for … in logs (#2093479)
- core: allow to set default timeout for devices (#1967245)
- man: document DefaultDeviceTimeoutSec= (#1967245)
- Revert "core: Propagate condition failed state to triggering units." (#2114005)
- core: Check unit start rate limiting earlier (#2114005)
- core: Add trigger limit for path units (#2114005)
- meson: add syscall-names-update target (#2040247)
- syscall-names: add process_madvise which is planned for 5.10 (#2040247)
- shared: add @known syscall list (#2040247)
- generate-syscall-list: require python3 (#2040247)
- shared/seccomp: reduce scope of indexing variables (#2040247)
- shared/syscall-list: filter out some obviously platform-specific syscalls (#2040247)
- seccomp: tighten checking of seccomp filter creation (#2040247)
- shared/seccomp-util: added functionality to make list of filtred syscalls (#2040247)
- nspawn: return ENOSYS by default, EPERM for "known" calls (#2040247)
- revert: resolved: pin stream while calling callbacks for it (#2110549)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-65" date="1660910400">- test-procfs-util: skip test on certain errors (#2087152)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-66" date="1661428800">- Try stopping MD RAID devices in shutdown too (#1817706)
- shutdown: get only active md arrays. (#1817706)
- scope: allow unprivileged delegation on scopes (#2068575)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-67" date="1661515200">- resolved: pin stream while calling callbacks for it (#2110549)
- ci(functions): Add `useradd` and `userdel` (#2110549)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-68" date="1664280000">- logind: optionally watch utmp for login data (#2122288)
- logind: add hashtable for finding session by leader PID (#2122288)
- core/load-fragment: move config_parse_sec_fix_0 to src/shared (#2122288)
- sd-event: add relative timer calls (#2122288)
- logind: add option to stop idle sessions after specified timeout (#2122288)
- logind: schedule idle check full interval from now if we couldn't figure out atime timestamp (#2122288)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-68.1" date="1667822400">- time-util: fix buffer-over-run (#2139390)
- core: move reset_arguments() to the end of main's finish (#2127170)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-68.2" date="1669032000">- basic: recognize pdfs filesystem as a network filesystem (#2143100)</changelog>
</package>
<package pkgid="2a6a916c3f586a2db8b5212abd4468d22a42946d55c595bd6bf4543f60887c3f" name="systemd-devel" arch="x86_64">
  <version epoch="0" ver="239" rel="68.el8_7.2"/>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-61" date="1657800000">- mkosi: Add gnutls package (#2101227)
- unit-name: tighten checks for building valid unit names (#1940973)
- core: shorten long unit names that are based on paths and append path hash at the end (#1940973)
- test: add extended test for triggering mount rate limit (#1940973)
- tests: add test case for long unit names (#1940973)
- core: unset HOME=/ that the kernel gives us (#2056527)
- journal-remote: check return value from MHD_add_response_header (#2051981)
- journalctl: in --follow mode watch stdout for POLLHUP/POLLERR and exit (#2003236)
- sd-bus: make BUS_DEFAULT_TIMEOUT configurable (#2039461)
- fstab-generator: fix debug log (#2101433)
- logind-session-dbus: allow to set display name via dbus (#1857969)
- Allow restart for oneshot units (#2042896)
- test: correct TEST-41 StartLimitBurst test (#2042896)
- core: fix assert() about number of built environment variables (#2049788)
- core: add one more assert() (#2049788)
- strv: introduce strv_join_prefix() (#2049788)
- test: add tests for strv_join_prefix() (#2049788)
- test: replace swear words by 'hoge' (#2049788)
- core: add new environment variable $RUNTIME_DIRECTORY= or friends (#2049788)
- test-execute: add tests for $RUNTIME_DIRECTORY= or friends (#2049788)
- man: document RUNTIME_DIRECTORY= or friends (#2049788)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-62" date="1658145600">- spec: Remove dependency on timedatex (#2066946)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-63" date="1659528000">- resolved: pin stream while calling callbacks for it (#2110549)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-64" date="1660824000">- ci: bump the worker Ubuntu version to Jammy (#2087152)
- test: make test-execute pass on Linux 5.15 (#2087152)
- ci: install iputils (#2087152)
- ci(Mergify): Add `ci-waived` logic (#2087152)
- sd-event: don't invalidate source type on disconnect (#2115396)
- tests: make sure we delay running mount start jobs when /p/s/mountinfo is rate limited (#2095744)
- core: drop references to 'StandardOutputFileToCreate' (#2093479)
- dbus-execute: fix indentation (#2093479)
- dbus-execute: generate the correct transient unit setting (#2093479)
- bus-unit-util: properly accept StandardOutput=append:… settings (#2093479)
- core: be more careful when inheriting stdout fds to stderr (#2093479)
- test: add a test for StandardError=file:… (#2093479)
- tree-wide: allow ASCII fallback for → in logs (#2093479)
- tree-wide: allow ASCII fallback for … in logs (#2093479)
- core: allow to set default timeout for devices (#1967245)
- man: document DefaultDeviceTimeoutSec= (#1967245)
- Revert "core: Propagate condition failed state to triggering units." (#2114005)
- core: Check unit start rate limiting earlier (#2114005)
- core: Add trigger limit for path units (#2114005)
- meson: add syscall-names-update target (#2040247)
- syscall-names: add process_madvise which is planned for 5.10 (#2040247)
- shared: add @known syscall list (#2040247)
- generate-syscall-list: require python3 (#2040247)
- shared/seccomp: reduce scope of indexing variables (#2040247)
- shared/syscall-list: filter out some obviously platform-specific syscalls (#2040247)
- seccomp: tighten checking of seccomp filter creation (#2040247)
- shared/seccomp-util: added functionality to make list of filtred syscalls (#2040247)
- nspawn: return ENOSYS by default, EPERM for "known" calls (#2040247)
- revert: resolved: pin stream while calling callbacks for it (#2110549)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-65" date="1660910400">- test-procfs-util: skip test on certain errors (#2087152)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-66" date="1661428800">- Try stopping MD RAID devices in shutdown too (#1817706)
- shutdown: get only active md arrays. (#1817706)
- scope: allow unprivileged delegation on scopes (#2068575)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-67" date="1661515200">- resolved: pin stream while calling callbacks for it (#2110549)
- ci(functions): Add `useradd` and `userdel` (#2110549)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-68" date="1664280000">- logind: optionally watch utmp for login data (#2122288)
- logind: add hashtable for finding session by leader PID (#2122288)
- core/load-fragment: move config_parse_sec_fix_0 to src/shared (#2122288)
- sd-event: add relative timer calls (#2122288)
- logind: add option to stop idle sessions after specified timeout (#2122288)
- logind: schedule idle check full interval from now if we couldn't figure out atime timestamp (#2122288)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-68.1" date="1667822400">- time-util: fix buffer-over-run (#2139390)
- core: move reset_arguments() to the end of main's finish (#2127170)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-68.2" date="1669032000">- basic: recognize pdfs filesystem as a network filesystem (#2143100)</changelog>
</package>
<package pkgid="c589f0a75d47d6f7ae67f38b2eda287fdcd57445c29bd0de99c2df60337b3361" name="systemd-devel" arch="i686">
  <version epoch="0" ver="239" rel="68.el8_7.4"/>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-63" date="1659528000">- resolved: pin stream while calling callbacks for it (#2110549)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-64" date="1660824000">- ci: bump the worker Ubuntu version to Jammy (#2087152)
- test: make test-execute pass on Linux 5.15 (#2087152)
- ci: install iputils (#2087152)
- ci(Mergify): Add `ci-waived` logic (#2087152)
- sd-event: don't invalidate source type on disconnect (#2115396)
- tests: make sure we delay running mount start jobs when /p/s/mountinfo is rate limited (#2095744)
- core: drop references to 'StandardOutputFileToCreate' (#2093479)
- dbus-execute: fix indentation (#2093479)
- dbus-execute: generate the correct transient unit setting (#2093479)
- bus-unit-util: properly accept StandardOutput=append:… settings (#2093479)
- core: be more careful when inheriting stdout fds to stderr (#2093479)
- test: add a test for StandardError=file:… (#2093479)
- tree-wide: allow ASCII fallback for → in logs (#2093479)
- tree-wide: allow ASCII fallback for … in logs (#2093479)
- core: allow to set default timeout for devices (#1967245)
- man: document DefaultDeviceTimeoutSec= (#1967245)
- Revert "core: Propagate condition failed state to triggering units." (#2114005)
- core: Check unit start rate limiting earlier (#2114005)
- core: Add trigger limit for path units (#2114005)
- meson: add syscall-names-update target (#2040247)
- syscall-names: add process_madvise which is planned for 5.10 (#2040247)
- shared: add @known syscall list (#2040247)
- generate-syscall-list: require python3 (#2040247)
- shared/seccomp: reduce scope of indexing variables (#2040247)
- shared/syscall-list: filter out some obviously platform-specific syscalls (#2040247)
- seccomp: tighten checking of seccomp filter creation (#2040247)
- shared/seccomp-util: added functionality to make list of filtred syscalls (#2040247)
- nspawn: return ENOSYS by default, EPERM for "known" calls (#2040247)
- revert: resolved: pin stream while calling callbacks for it (#2110549)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-65" date="1660910400">- test-procfs-util: skip test on certain errors (#2087152)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-66" date="1661428800">- Try stopping MD RAID devices in shutdown too (#1817706)
- shutdown: get only active md arrays. (#1817706)
- scope: allow unprivileged delegation on scopes (#2068575)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-67" date="1661515200">- resolved: pin stream while calling callbacks for it (#2110549)
- ci(functions): Add `useradd` and `userdel` (#2110549)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-68" date="1664280000">- logind: optionally watch utmp for login data (#2122288)
- logind: add hashtable for finding session by leader PID (#2122288)
- core/load-fragment: move config_parse_sec_fix_0 to src/shared (#2122288)
- sd-event: add relative timer calls (#2122288)
- logind: add option to stop idle sessions after specified timeout (#2122288)
- logind: schedule idle check full interval from now if we couldn't figure out atime timestamp (#2122288)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-68.1" date="1667822400">- time-util: fix buffer-over-run (#2139390)
- core: move reset_arguments() to the end of main's finish (#2127170)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-68.2" date="1669032000">- basic: recognize pdfs filesystem as a network filesystem (#2143100)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-68.3" date="1674820800">- core: bring manager_startup() and manager_reload() more inline (#2164049)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-68.4" date="1675080000">- basic: add STRERROR() wrapper for strerror_r() (#2155519)
- coredump: put context array into a struct (#2155519)
- coredump: do not allow user to access coredumps with changed uid/gid/capabilities (#2155519)</changelog>
</package>
<package pkgid="82466e3b13c6bc527e348905421671bc5bc91e9eb589f0475cfc9ad63c2ef735" name="systemd-devel" arch="x86_64">
  <version epoch="0" ver="239" rel="68.el8_7.4"/>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-63" date="1659528000">- resolved: pin stream while calling callbacks for it (#2110549)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-64" date="1660824000">- ci: bump the worker Ubuntu version to Jammy (#2087152)
- test: make test-execute pass on Linux 5.15 (#2087152)
- ci: install iputils (#2087152)
- ci(Mergify): Add `ci-waived` logic (#2087152)
- sd-event: don't invalidate source type on disconnect (#2115396)
- tests: make sure we delay running mount start jobs when /p/s/mountinfo is rate limited (#2095744)
- core: drop references to 'StandardOutputFileToCreate' (#2093479)
- dbus-execute: fix indentation (#2093479)
- dbus-execute: generate the correct transient unit setting (#2093479)
- bus-unit-util: properly accept StandardOutput=append:… settings (#2093479)
- core: be more careful when inheriting stdout fds to stderr (#2093479)
- test: add a test for StandardError=file:… (#2093479)
- tree-wide: allow ASCII fallback for → in logs (#2093479)
- tree-wide: allow ASCII fallback for … in logs (#2093479)
- core: allow to set default timeout for devices (#1967245)
- man: document DefaultDeviceTimeoutSec= (#1967245)
- Revert "core: Propagate condition failed state to triggering units." (#2114005)
- core: Check unit start rate limiting earlier (#2114005)
- core: Add trigger limit for path units (#2114005)
- meson: add syscall-names-update target (#2040247)
- syscall-names: add process_madvise which is planned for 5.10 (#2040247)
- shared: add @known syscall list (#2040247)
- generate-syscall-list: require python3 (#2040247)
- shared/seccomp: reduce scope of indexing variables (#2040247)
- shared/syscall-list: filter out some obviously platform-specific syscalls (#2040247)
- seccomp: tighten checking of seccomp filter creation (#2040247)
- shared/seccomp-util: added functionality to make list of filtred syscalls (#2040247)
- nspawn: return ENOSYS by default, EPERM for "known" calls (#2040247)
- revert: resolved: pin stream while calling callbacks for it (#2110549)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-65" date="1660910400">- test-procfs-util: skip test on certain errors (#2087152)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-66" date="1661428800">- Try stopping MD RAID devices in shutdown too (#1817706)
- shutdown: get only active md arrays. (#1817706)
- scope: allow unprivileged delegation on scopes (#2068575)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-67" date="1661515200">- resolved: pin stream while calling callbacks for it (#2110549)
- ci(functions): Add `useradd` and `userdel` (#2110549)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-68" date="1664280000">- logind: optionally watch utmp for login data (#2122288)
- logind: add hashtable for finding session by leader PID (#2122288)
- core/load-fragment: move config_parse_sec_fix_0 to src/shared (#2122288)
- sd-event: add relative timer calls (#2122288)
- logind: add option to stop idle sessions after specified timeout (#2122288)
- logind: schedule idle check full interval from now if we couldn't figure out atime timestamp (#2122288)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-68.1" date="1667822400">- time-util: fix buffer-over-run (#2139390)
- core: move reset_arguments() to the end of main's finish (#2127170)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-68.2" date="1669032000">- basic: recognize pdfs filesystem as a network filesystem (#2143100)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-68.3" date="1674820800">- core: bring manager_startup() and manager_reload() more inline (#2164049)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-68.4" date="1675080000">- basic: add STRERROR() wrapper for strerror_r() (#2155519)
- coredump: put context array into a struct (#2155519)
- coredump: do not allow user to access coredumps with changed uid/gid/capabilities (#2155519)</changelog>
</package>
<package pkgid="a35b3648180324a6262c9be3b978ed8206671451ab29c0d254ff89771ace0a4a" name="systemd-journal-remote" arch="x86_64">
  <version epoch="0" ver="239" rel="68.el8_7.1"/>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-60" date="1655985600">- unit: don't emit PropertiesChanged signal if adding a dependency to a unit is a no-op (#1948480)
- tests: make inverted tests actually count (#2087152)
- TEST-*: make failure tests actually fail on failure (#2087152)
- ci(Mergify): configuration update (#2087152)
- core: propagate triggered unit in more load states (#2065322)
- core: propagate unit start limit hit state to triggering path unit (#2065322)
- core: Move 'r' variable declaration to start of unit_start() (#2065322)
- core: Delay start rate limit check when starting a unit (#2065322)
- core: Propagate condition failed state to triggering units. (#2065322)
- unit: check for mount rate limiting before checking active state (#2095744)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-61" date="1657800000">- mkosi: Add gnutls package (#2101227)
- unit-name: tighten checks for building valid unit names (#1940973)
- core: shorten long unit names that are based on paths and append path hash at the end (#1940973)
- test: add extended test for triggering mount rate limit (#1940973)
- tests: add test case for long unit names (#1940973)
- core: unset HOME=/ that the kernel gives us (#2056527)
- journal-remote: check return value from MHD_add_response_header (#2051981)
- journalctl: in --follow mode watch stdout for POLLHUP/POLLERR and exit (#2003236)
- sd-bus: make BUS_DEFAULT_TIMEOUT configurable (#2039461)
- fstab-generator: fix debug log (#2101433)
- logind-session-dbus: allow to set display name via dbus (#1857969)
- Allow restart for oneshot units (#2042896)
- test: correct TEST-41 StartLimitBurst test (#2042896)
- core: fix assert() about number of built environment variables (#2049788)
- core: add one more assert() (#2049788)
- strv: introduce strv_join_prefix() (#2049788)
- test: add tests for strv_join_prefix() (#2049788)
- test: replace swear words by 'hoge' (#2049788)
- core: add new environment variable $RUNTIME_DIRECTORY= or friends (#2049788)
- test-execute: add tests for $RUNTIME_DIRECTORY= or friends (#2049788)
- man: document RUNTIME_DIRECTORY= or friends (#2049788)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-62" date="1658145600">- spec: Remove dependency on timedatex (#2066946)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-63" date="1659528000">- resolved: pin stream while calling callbacks for it (#2110549)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-64" date="1660824000">- ci: bump the worker Ubuntu version to Jammy (#2087152)
- test: make test-execute pass on Linux 5.15 (#2087152)
- ci: install iputils (#2087152)
- ci(Mergify): Add `ci-waived` logic (#2087152)
- sd-event: don't invalidate source type on disconnect (#2115396)
- tests: make sure we delay running mount start jobs when /p/s/mountinfo is rate limited (#2095744)
- core: drop references to 'StandardOutputFileToCreate' (#2093479)
- dbus-execute: fix indentation (#2093479)
- dbus-execute: generate the correct transient unit setting (#2093479)
- bus-unit-util: properly accept StandardOutput=append:… settings (#2093479)
- core: be more careful when inheriting stdout fds to stderr (#2093479)
- test: add a test for StandardError=file:… (#2093479)
- tree-wide: allow ASCII fallback for → in logs (#2093479)
- tree-wide: allow ASCII fallback for … in logs (#2093479)
- core: allow to set default timeout for devices (#1967245)
- man: document DefaultDeviceTimeoutSec= (#1967245)
- Revert "core: Propagate condition failed state to triggering units." (#2114005)
- core: Check unit start rate limiting earlier (#2114005)
- core: Add trigger limit for path units (#2114005)
- meson: add syscall-names-update target (#2040247)
- syscall-names: add process_madvise which is planned for 5.10 (#2040247)
- shared: add @known syscall list (#2040247)
- generate-syscall-list: require python3 (#2040247)
- shared/seccomp: reduce scope of indexing variables (#2040247)
- shared/syscall-list: filter out some obviously platform-specific syscalls (#2040247)
- seccomp: tighten checking of seccomp filter creation (#2040247)
- shared/seccomp-util: added functionality to make list of filtred syscalls (#2040247)
- nspawn: return ENOSYS by default, EPERM for "known" calls (#2040247)
- revert: resolved: pin stream while calling callbacks for it (#2110549)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-65" date="1660910400">- test-procfs-util: skip test on certain errors (#2087152)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-66" date="1661428800">- Try stopping MD RAID devices in shutdown too (#1817706)
- shutdown: get only active md arrays. (#1817706)
- scope: allow unprivileged delegation on scopes (#2068575)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-67" date="1661515200">- resolved: pin stream while calling callbacks for it (#2110549)
- ci(functions): Add `useradd` and `userdel` (#2110549)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-68" date="1664280000">- logind: optionally watch utmp for login data (#2122288)
- logind: add hashtable for finding session by leader PID (#2122288)
- core/load-fragment: move config_parse_sec_fix_0 to src/shared (#2122288)
- sd-event: add relative timer calls (#2122288)
- logind: add option to stop idle sessions after specified timeout (#2122288)
- logind: schedule idle check full interval from now if we couldn't figure out atime timestamp (#2122288)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-68.1" date="1667822400">- time-util: fix buffer-over-run (#2139390)
- core: move reset_arguments() to the end of main's finish (#2127170)</changelog>
</package>
<package pkgid="2b93f624ca5061dfbb24d885e24bfbf23badb915382a36273a27bf59a8bf52eb" name="systemd-journal-remote" arch="x86_64">
  <version epoch="0" ver="239" rel="68.el8_7.2"/>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-61" date="1657800000">- mkosi: Add gnutls package (#2101227)
- unit-name: tighten checks for building valid unit names (#1940973)
- core: shorten long unit names that are based on paths and append path hash at the end (#1940973)
- test: add extended test for triggering mount rate limit (#1940973)
- tests: add test case for long unit names (#1940973)
- core: unset HOME=/ that the kernel gives us (#2056527)
- journal-remote: check return value from MHD_add_response_header (#2051981)
- journalctl: in --follow mode watch stdout for POLLHUP/POLLERR and exit (#2003236)
- sd-bus: make BUS_DEFAULT_TIMEOUT configurable (#2039461)
- fstab-generator: fix debug log (#2101433)
- logind-session-dbus: allow to set display name via dbus (#1857969)
- Allow restart for oneshot units (#2042896)
- test: correct TEST-41 StartLimitBurst test (#2042896)
- core: fix assert() about number of built environment variables (#2049788)
- core: add one more assert() (#2049788)
- strv: introduce strv_join_prefix() (#2049788)
- test: add tests for strv_join_prefix() (#2049788)
- test: replace swear words by 'hoge' (#2049788)
- core: add new environment variable $RUNTIME_DIRECTORY= or friends (#2049788)
- test-execute: add tests for $RUNTIME_DIRECTORY= or friends (#2049788)
- man: document RUNTIME_DIRECTORY= or friends (#2049788)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-62" date="1658145600">- spec: Remove dependency on timedatex (#2066946)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-63" date="1659528000">- resolved: pin stream while calling callbacks for it (#2110549)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-64" date="1660824000">- ci: bump the worker Ubuntu version to Jammy (#2087152)
- test: make test-execute pass on Linux 5.15 (#2087152)
- ci: install iputils (#2087152)
- ci(Mergify): Add `ci-waived` logic (#2087152)
- sd-event: don't invalidate source type on disconnect (#2115396)
- tests: make sure we delay running mount start jobs when /p/s/mountinfo is rate limited (#2095744)
- core: drop references to 'StandardOutputFileToCreate' (#2093479)
- dbus-execute: fix indentation (#2093479)
- dbus-execute: generate the correct transient unit setting (#2093479)
- bus-unit-util: properly accept StandardOutput=append:… settings (#2093479)
- core: be more careful when inheriting stdout fds to stderr (#2093479)
- test: add a test for StandardError=file:… (#2093479)
- tree-wide: allow ASCII fallback for → in logs (#2093479)
- tree-wide: allow ASCII fallback for … in logs (#2093479)
- core: allow to set default timeout for devices (#1967245)
- man: document DefaultDeviceTimeoutSec= (#1967245)
- Revert "core: Propagate condition failed state to triggering units." (#2114005)
- core: Check unit start rate limiting earlier (#2114005)
- core: Add trigger limit for path units (#2114005)
- meson: add syscall-names-update target (#2040247)
- syscall-names: add process_madvise which is planned for 5.10 (#2040247)
- shared: add @known syscall list (#2040247)
- generate-syscall-list: require python3 (#2040247)
- shared/seccomp: reduce scope of indexing variables (#2040247)
- shared/syscall-list: filter out some obviously platform-specific syscalls (#2040247)
- seccomp: tighten checking of seccomp filter creation (#2040247)
- shared/seccomp-util: added functionality to make list of filtred syscalls (#2040247)
- nspawn: return ENOSYS by default, EPERM for "known" calls (#2040247)
- revert: resolved: pin stream while calling callbacks for it (#2110549)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-65" date="1660910400">- test-procfs-util: skip test on certain errors (#2087152)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-66" date="1661428800">- Try stopping MD RAID devices in shutdown too (#1817706)
- shutdown: get only active md arrays. (#1817706)
- scope: allow unprivileged delegation on scopes (#2068575)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-67" date="1661515200">- resolved: pin stream while calling callbacks for it (#2110549)
- ci(functions): Add `useradd` and `userdel` (#2110549)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-68" date="1664280000">- logind: optionally watch utmp for login data (#2122288)
- logind: add hashtable for finding session by leader PID (#2122288)
- core/load-fragment: move config_parse_sec_fix_0 to src/shared (#2122288)
- sd-event: add relative timer calls (#2122288)
- logind: add option to stop idle sessions after specified timeout (#2122288)
- logind: schedule idle check full interval from now if we couldn't figure out atime timestamp (#2122288)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-68.1" date="1667822400">- time-util: fix buffer-over-run (#2139390)
- core: move reset_arguments() to the end of main's finish (#2127170)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-68.2" date="1669032000">- basic: recognize pdfs filesystem as a network filesystem (#2143100)</changelog>
</package>
<package pkgid="acfc1a9887ce6430134975b1e598df4c58559aa0a335d6a18c86977d3e880fa4" name="systemd-journal-remote" arch="x86_64">
  <version epoch="0" ver="239" rel="68.el8_7.4"/>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-63" date="1659528000">- resolved: pin stream while calling callbacks for it (#2110549)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-64" date="1660824000">- ci: bump the worker Ubuntu version to Jammy (#2087152)
- test: make test-execute pass on Linux 5.15 (#2087152)
- ci: install iputils (#2087152)
- ci(Mergify): Add `ci-waived` logic (#2087152)
- sd-event: don't invalidate source type on disconnect (#2115396)
- tests: make sure we delay running mount start jobs when /p/s/mountinfo is rate limited (#2095744)
- core: drop references to 'StandardOutputFileToCreate' (#2093479)
- dbus-execute: fix indentation (#2093479)
- dbus-execute: generate the correct transient unit setting (#2093479)
- bus-unit-util: properly accept StandardOutput=append:… settings (#2093479)
- core: be more careful when inheriting stdout fds to stderr (#2093479)
- test: add a test for StandardError=file:… (#2093479)
- tree-wide: allow ASCII fallback for → in logs (#2093479)
- tree-wide: allow ASCII fallback for … in logs (#2093479)
- core: allow to set default timeout for devices (#1967245)
- man: document DefaultDeviceTimeoutSec= (#1967245)
- Revert "core: Propagate condition failed state to triggering units." (#2114005)
- core: Check unit start rate limiting earlier (#2114005)
- core: Add trigger limit for path units (#2114005)
- meson: add syscall-names-update target (#2040247)
- syscall-names: add process_madvise which is planned for 5.10 (#2040247)
- shared: add @known syscall list (#2040247)
- generate-syscall-list: require python3 (#2040247)
- shared/seccomp: reduce scope of indexing variables (#2040247)
- shared/syscall-list: filter out some obviously platform-specific syscalls (#2040247)
- seccomp: tighten checking of seccomp filter creation (#2040247)
- shared/seccomp-util: added functionality to make list of filtred syscalls (#2040247)
- nspawn: return ENOSYS by default, EPERM for "known" calls (#2040247)
- revert: resolved: pin stream while calling callbacks for it (#2110549)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-65" date="1660910400">- test-procfs-util: skip test on certain errors (#2087152)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-66" date="1661428800">- Try stopping MD RAID devices in shutdown too (#1817706)
- shutdown: get only active md arrays. (#1817706)
- scope: allow unprivileged delegation on scopes (#2068575)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-67" date="1661515200">- resolved: pin stream while calling callbacks for it (#2110549)
- ci(functions): Add `useradd` and `userdel` (#2110549)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-68" date="1664280000">- logind: optionally watch utmp for login data (#2122288)
- logind: add hashtable for finding session by leader PID (#2122288)
- core/load-fragment: move config_parse_sec_fix_0 to src/shared (#2122288)
- sd-event: add relative timer calls (#2122288)
- logind: add option to stop idle sessions after specified timeout (#2122288)
- logind: schedule idle check full interval from now if we couldn't figure out atime timestamp (#2122288)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-68.1" date="1667822400">- time-util: fix buffer-over-run (#2139390)
- core: move reset_arguments() to the end of main's finish (#2127170)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-68.2" date="1669032000">- basic: recognize pdfs filesystem as a network filesystem (#2143100)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-68.3" date="1674820800">- core: bring manager_startup() and manager_reload() more inline (#2164049)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-68.4" date="1675080000">- basic: add STRERROR() wrapper for strerror_r() (#2155519)
- coredump: put context array into a struct (#2155519)
- coredump: do not allow user to access coredumps with changed uid/gid/capabilities (#2155519)</changelog>
</package>
<package pkgid="7799c8c7b4ea59c754c6104a6d7746d5fe69d4dd54ea828d383b58a846d04ecd" name="systemd-libs" arch="i686">
  <version epoch="0" ver="239" rel="68.el8_7.1"/>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-60" date="1655985600">- unit: don't emit PropertiesChanged signal if adding a dependency to a unit is a no-op (#1948480)
- tests: make inverted tests actually count (#2087152)
- TEST-*: make failure tests actually fail on failure (#2087152)
- ci(Mergify): configuration update (#2087152)
- core: propagate triggered unit in more load states (#2065322)
- core: propagate unit start limit hit state to triggering path unit (#2065322)
- core: Move 'r' variable declaration to start of unit_start() (#2065322)
- core: Delay start rate limit check when starting a unit (#2065322)
- core: Propagate condition failed state to triggering units. (#2065322)
- unit: check for mount rate limiting before checking active state (#2095744)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-61" date="1657800000">- mkosi: Add gnutls package (#2101227)
- unit-name: tighten checks for building valid unit names (#1940973)
- core: shorten long unit names that are based on paths and append path hash at the end (#1940973)
- test: add extended test for triggering mount rate limit (#1940973)
- tests: add test case for long unit names (#1940973)
- core: unset HOME=/ that the kernel gives us (#2056527)
- journal-remote: check return value from MHD_add_response_header (#2051981)
- journalctl: in --follow mode watch stdout for POLLHUP/POLLERR and exit (#2003236)
- sd-bus: make BUS_DEFAULT_TIMEOUT configurable (#2039461)
- fstab-generator: fix debug log (#2101433)
- logind-session-dbus: allow to set display name via dbus (#1857969)
- Allow restart for oneshot units (#2042896)
- test: correct TEST-41 StartLimitBurst test (#2042896)
- core: fix assert() about number of built environment variables (#2049788)
- core: add one more assert() (#2049788)
- strv: introduce strv_join_prefix() (#2049788)
- test: add tests for strv_join_prefix() (#2049788)
- test: replace swear words by 'hoge' (#2049788)
- core: add new environment variable $RUNTIME_DIRECTORY= or friends (#2049788)
- test-execute: add tests for $RUNTIME_DIRECTORY= or friends (#2049788)
- man: document RUNTIME_DIRECTORY= or friends (#2049788)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-62" date="1658145600">- spec: Remove dependency on timedatex (#2066946)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-63" date="1659528000">- resolved: pin stream while calling callbacks for it (#2110549)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-64" date="1660824000">- ci: bump the worker Ubuntu version to Jammy (#2087152)
- test: make test-execute pass on Linux 5.15 (#2087152)
- ci: install iputils (#2087152)
- ci(Mergify): Add `ci-waived` logic (#2087152)
- sd-event: don't invalidate source type on disconnect (#2115396)
- tests: make sure we delay running mount start jobs when /p/s/mountinfo is rate limited (#2095744)
- core: drop references to 'StandardOutputFileToCreate' (#2093479)
- dbus-execute: fix indentation (#2093479)
- dbus-execute: generate the correct transient unit setting (#2093479)
- bus-unit-util: properly accept StandardOutput=append:… settings (#2093479)
- core: be more careful when inheriting stdout fds to stderr (#2093479)
- test: add a test for StandardError=file:… (#2093479)
- tree-wide: allow ASCII fallback for → in logs (#2093479)
- tree-wide: allow ASCII fallback for … in logs (#2093479)
- core: allow to set default timeout for devices (#1967245)
- man: document DefaultDeviceTimeoutSec= (#1967245)
- Revert "core: Propagate condition failed state to triggering units." (#2114005)
- core: Check unit start rate limiting earlier (#2114005)
- core: Add trigger limit for path units (#2114005)
- meson: add syscall-names-update target (#2040247)
- syscall-names: add process_madvise which is planned for 5.10 (#2040247)
- shared: add @known syscall list (#2040247)
- generate-syscall-list: require python3 (#2040247)
- shared/seccomp: reduce scope of indexing variables (#2040247)
- shared/syscall-list: filter out some obviously platform-specific syscalls (#2040247)
- seccomp: tighten checking of seccomp filter creation (#2040247)
- shared/seccomp-util: added functionality to make list of filtred syscalls (#2040247)
- nspawn: return ENOSYS by default, EPERM for "known" calls (#2040247)
- revert: resolved: pin stream while calling callbacks for it (#2110549)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-65" date="1660910400">- test-procfs-util: skip test on certain errors (#2087152)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-66" date="1661428800">- Try stopping MD RAID devices in shutdown too (#1817706)
- shutdown: get only active md arrays. (#1817706)
- scope: allow unprivileged delegation on scopes (#2068575)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-67" date="1661515200">- resolved: pin stream while calling callbacks for it (#2110549)
- ci(functions): Add `useradd` and `userdel` (#2110549)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-68" date="1664280000">- logind: optionally watch utmp for login data (#2122288)
- logind: add hashtable for finding session by leader PID (#2122288)
- core/load-fragment: move config_parse_sec_fix_0 to src/shared (#2122288)
- sd-event: add relative timer calls (#2122288)
- logind: add option to stop idle sessions after specified timeout (#2122288)
- logind: schedule idle check full interval from now if we couldn't figure out atime timestamp (#2122288)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-68.1" date="1667822400">- time-util: fix buffer-over-run (#2139390)
- core: move reset_arguments() to the end of main's finish (#2127170)</changelog>
</package>
<package pkgid="1d6c336ff5f41eeb39d764346109a115394bb4a26a760a17b98c5e9b192f6553" name="systemd-libs" arch="x86_64">
  <version epoch="0" ver="239" rel="68.el8_7.1"/>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-60" date="1655985600">- unit: don't emit PropertiesChanged signal if adding a dependency to a unit is a no-op (#1948480)
- tests: make inverted tests actually count (#2087152)
- TEST-*: make failure tests actually fail on failure (#2087152)
- ci(Mergify): configuration update (#2087152)
- core: propagate triggered unit in more load states (#2065322)
- core: propagate unit start limit hit state to triggering path unit (#2065322)
- core: Move 'r' variable declaration to start of unit_start() (#2065322)
- core: Delay start rate limit check when starting a unit (#2065322)
- core: Propagate condition failed state to triggering units. (#2065322)
- unit: check for mount rate limiting before checking active state (#2095744)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-61" date="1657800000">- mkosi: Add gnutls package (#2101227)
- unit-name: tighten checks for building valid unit names (#1940973)
- core: shorten long unit names that are based on paths and append path hash at the end (#1940973)
- test: add extended test for triggering mount rate limit (#1940973)
- tests: add test case for long unit names (#1940973)
- core: unset HOME=/ that the kernel gives us (#2056527)
- journal-remote: check return value from MHD_add_response_header (#2051981)
- journalctl: in --follow mode watch stdout for POLLHUP/POLLERR and exit (#2003236)
- sd-bus: make BUS_DEFAULT_TIMEOUT configurable (#2039461)
- fstab-generator: fix debug log (#2101433)
- logind-session-dbus: allow to set display name via dbus (#1857969)
- Allow restart for oneshot units (#2042896)
- test: correct TEST-41 StartLimitBurst test (#2042896)
- core: fix assert() about number of built environment variables (#2049788)
- core: add one more assert() (#2049788)
- strv: introduce strv_join_prefix() (#2049788)
- test: add tests for strv_join_prefix() (#2049788)
- test: replace swear words by 'hoge' (#2049788)
- core: add new environment variable $RUNTIME_DIRECTORY= or friends (#2049788)
- test-execute: add tests for $RUNTIME_DIRECTORY= or friends (#2049788)
- man: document RUNTIME_DIRECTORY= or friends (#2049788)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-62" date="1658145600">- spec: Remove dependency on timedatex (#2066946)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-63" date="1659528000">- resolved: pin stream while calling callbacks for it (#2110549)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-64" date="1660824000">- ci: bump the worker Ubuntu version to Jammy (#2087152)
- test: make test-execute pass on Linux 5.15 (#2087152)
- ci: install iputils (#2087152)
- ci(Mergify): Add `ci-waived` logic (#2087152)
- sd-event: don't invalidate source type on disconnect (#2115396)
- tests: make sure we delay running mount start jobs when /p/s/mountinfo is rate limited (#2095744)
- core: drop references to 'StandardOutputFileToCreate' (#2093479)
- dbus-execute: fix indentation (#2093479)
- dbus-execute: generate the correct transient unit setting (#2093479)
- bus-unit-util: properly accept StandardOutput=append:… settings (#2093479)
- core: be more careful when inheriting stdout fds to stderr (#2093479)
- test: add a test for StandardError=file:… (#2093479)
- tree-wide: allow ASCII fallback for → in logs (#2093479)
- tree-wide: allow ASCII fallback for … in logs (#2093479)
- core: allow to set default timeout for devices (#1967245)
- man: document DefaultDeviceTimeoutSec= (#1967245)
- Revert "core: Propagate condition failed state to triggering units." (#2114005)
- core: Check unit start rate limiting earlier (#2114005)
- core: Add trigger limit for path units (#2114005)
- meson: add syscall-names-update target (#2040247)
- syscall-names: add process_madvise which is planned for 5.10 (#2040247)
- shared: add @known syscall list (#2040247)
- generate-syscall-list: require python3 (#2040247)
- shared/seccomp: reduce scope of indexing variables (#2040247)
- shared/syscall-list: filter out some obviously platform-specific syscalls (#2040247)
- seccomp: tighten checking of seccomp filter creation (#2040247)
- shared/seccomp-util: added functionality to make list of filtred syscalls (#2040247)
- nspawn: return ENOSYS by default, EPERM for "known" calls (#2040247)
- revert: resolved: pin stream while calling callbacks for it (#2110549)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-65" date="1660910400">- test-procfs-util: skip test on certain errors (#2087152)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-66" date="1661428800">- Try stopping MD RAID devices in shutdown too (#1817706)
- shutdown: get only active md arrays. (#1817706)
- scope: allow unprivileged delegation on scopes (#2068575)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-67" date="1661515200">- resolved: pin stream while calling callbacks for it (#2110549)
- ci(functions): Add `useradd` and `userdel` (#2110549)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-68" date="1664280000">- logind: optionally watch utmp for login data (#2122288)
- logind: add hashtable for finding session by leader PID (#2122288)
- core/load-fragment: move config_parse_sec_fix_0 to src/shared (#2122288)
- sd-event: add relative timer calls (#2122288)
- logind: add option to stop idle sessions after specified timeout (#2122288)
- logind: schedule idle check full interval from now if we couldn't figure out atime timestamp (#2122288)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-68.1" date="1667822400">- time-util: fix buffer-over-run (#2139390)
- core: move reset_arguments() to the end of main's finish (#2127170)</changelog>
</package>
<package pkgid="3e9c6a51746dc88cb0d6cccd19795d0ad12563ec84d4db08f5280601fc319235" name="systemd-libs" arch="i686">
  <version epoch="0" ver="239" rel="68.el8_7.2"/>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-61" date="1657800000">- mkosi: Add gnutls package (#2101227)
- unit-name: tighten checks for building valid unit names (#1940973)
- core: shorten long unit names that are based on paths and append path hash at the end (#1940973)
- test: add extended test for triggering mount rate limit (#1940973)
- tests: add test case for long unit names (#1940973)
- core: unset HOME=/ that the kernel gives us (#2056527)
- journal-remote: check return value from MHD_add_response_header (#2051981)
- journalctl: in --follow mode watch stdout for POLLHUP/POLLERR and exit (#2003236)
- sd-bus: make BUS_DEFAULT_TIMEOUT configurable (#2039461)
- fstab-generator: fix debug log (#2101433)
- logind-session-dbus: allow to set display name via dbus (#1857969)
- Allow restart for oneshot units (#2042896)
- test: correct TEST-41 StartLimitBurst test (#2042896)
- core: fix assert() about number of built environment variables (#2049788)
- core: add one more assert() (#2049788)
- strv: introduce strv_join_prefix() (#2049788)
- test: add tests for strv_join_prefix() (#2049788)
- test: replace swear words by 'hoge' (#2049788)
- core: add new environment variable $RUNTIME_DIRECTORY= or friends (#2049788)
- test-execute: add tests for $RUNTIME_DIRECTORY= or friends (#2049788)
- man: document RUNTIME_DIRECTORY= or friends (#2049788)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-62" date="1658145600">- spec: Remove dependency on timedatex (#2066946)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-63" date="1659528000">- resolved: pin stream while calling callbacks for it (#2110549)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-64" date="1660824000">- ci: bump the worker Ubuntu version to Jammy (#2087152)
- test: make test-execute pass on Linux 5.15 (#2087152)
- ci: install iputils (#2087152)
- ci(Mergify): Add `ci-waived` logic (#2087152)
- sd-event: don't invalidate source type on disconnect (#2115396)
- tests: make sure we delay running mount start jobs when /p/s/mountinfo is rate limited (#2095744)
- core: drop references to 'StandardOutputFileToCreate' (#2093479)
- dbus-execute: fix indentation (#2093479)
- dbus-execute: generate the correct transient unit setting (#2093479)
- bus-unit-util: properly accept StandardOutput=append:… settings (#2093479)
- core: be more careful when inheriting stdout fds to stderr (#2093479)
- test: add a test for StandardError=file:… (#2093479)
- tree-wide: allow ASCII fallback for → in logs (#2093479)
- tree-wide: allow ASCII fallback for … in logs (#2093479)
- core: allow to set default timeout for devices (#1967245)
- man: document DefaultDeviceTimeoutSec= (#1967245)
- Revert "core: Propagate condition failed state to triggering units." (#2114005)
- core: Check unit start rate limiting earlier (#2114005)
- core: Add trigger limit for path units (#2114005)
- meson: add syscall-names-update target (#2040247)
- syscall-names: add process_madvise which is planned for 5.10 (#2040247)
- shared: add @known syscall list (#2040247)
- generate-syscall-list: require python3 (#2040247)
- shared/seccomp: reduce scope of indexing variables (#2040247)
- shared/syscall-list: filter out some obviously platform-specific syscalls (#2040247)
- seccomp: tighten checking of seccomp filter creation (#2040247)
- shared/seccomp-util: added functionality to make list of filtred syscalls (#2040247)
- nspawn: return ENOSYS by default, EPERM for "known" calls (#2040247)
- revert: resolved: pin stream while calling callbacks for it (#2110549)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-65" date="1660910400">- test-procfs-util: skip test on certain errors (#2087152)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-66" date="1661428800">- Try stopping MD RAID devices in shutdown too (#1817706)
- shutdown: get only active md arrays. (#1817706)
- scope: allow unprivileged delegation on scopes (#2068575)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-67" date="1661515200">- resolved: pin stream while calling callbacks for it (#2110549)
- ci(functions): Add `useradd` and `userdel` (#2110549)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-68" date="1664280000">- logind: optionally watch utmp for login data (#2122288)
- logind: add hashtable for finding session by leader PID (#2122288)
- core/load-fragment: move config_parse_sec_fix_0 to src/shared (#2122288)
- sd-event: add relative timer calls (#2122288)
- logind: add option to stop idle sessions after specified timeout (#2122288)
- logind: schedule idle check full interval from now if we couldn't figure out atime timestamp (#2122288)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-68.1" date="1667822400">- time-util: fix buffer-over-run (#2139390)
- core: move reset_arguments() to the end of main's finish (#2127170)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-68.2" date="1669032000">- basic: recognize pdfs filesystem as a network filesystem (#2143100)</changelog>
</package>
<package pkgid="3a5cfbb7be1080796a114ae5beaacc4f56a346621a823634ebc218ee40ed393b" name="systemd-libs" arch="x86_64">
  <version epoch="0" ver="239" rel="68.el8_7.2"/>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-61" date="1657800000">- mkosi: Add gnutls package (#2101227)
- unit-name: tighten checks for building valid unit names (#1940973)
- core: shorten long unit names that are based on paths and append path hash at the end (#1940973)
- test: add extended test for triggering mount rate limit (#1940973)
- tests: add test case for long unit names (#1940973)
- core: unset HOME=/ that the kernel gives us (#2056527)
- journal-remote: check return value from MHD_add_response_header (#2051981)
- journalctl: in --follow mode watch stdout for POLLHUP/POLLERR and exit (#2003236)
- sd-bus: make BUS_DEFAULT_TIMEOUT configurable (#2039461)
- fstab-generator: fix debug log (#2101433)
- logind-session-dbus: allow to set display name via dbus (#1857969)
- Allow restart for oneshot units (#2042896)
- test: correct TEST-41 StartLimitBurst test (#2042896)
- core: fix assert() about number of built environment variables (#2049788)
- core: add one more assert() (#2049788)
- strv: introduce strv_join_prefix() (#2049788)
- test: add tests for strv_join_prefix() (#2049788)
- test: replace swear words by 'hoge' (#2049788)
- core: add new environment variable $RUNTIME_DIRECTORY= or friends (#2049788)
- test-execute: add tests for $RUNTIME_DIRECTORY= or friends (#2049788)
- man: document RUNTIME_DIRECTORY= or friends (#2049788)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-62" date="1658145600">- spec: Remove dependency on timedatex (#2066946)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-63" date="1659528000">- resolved: pin stream while calling callbacks for it (#2110549)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-64" date="1660824000">- ci: bump the worker Ubuntu version to Jammy (#2087152)
- test: make test-execute pass on Linux 5.15 (#2087152)
- ci: install iputils (#2087152)
- ci(Mergify): Add `ci-waived` logic (#2087152)
- sd-event: don't invalidate source type on disconnect (#2115396)
- tests: make sure we delay running mount start jobs when /p/s/mountinfo is rate limited (#2095744)
- core: drop references to 'StandardOutputFileToCreate' (#2093479)
- dbus-execute: fix indentation (#2093479)
- dbus-execute: generate the correct transient unit setting (#2093479)
- bus-unit-util: properly accept StandardOutput=append:… settings (#2093479)
- core: be more careful when inheriting stdout fds to stderr (#2093479)
- test: add a test for StandardError=file:… (#2093479)
- tree-wide: allow ASCII fallback for → in logs (#2093479)
- tree-wide: allow ASCII fallback for … in logs (#2093479)
- core: allow to set default timeout for devices (#1967245)
- man: document DefaultDeviceTimeoutSec= (#1967245)
- Revert "core: Propagate condition failed state to triggering units." (#2114005)
- core: Check unit start rate limiting earlier (#2114005)
- core: Add trigger limit for path units (#2114005)
- meson: add syscall-names-update target (#2040247)
- syscall-names: add process_madvise which is planned for 5.10 (#2040247)
- shared: add @known syscall list (#2040247)
- generate-syscall-list: require python3 (#2040247)
- shared/seccomp: reduce scope of indexing variables (#2040247)
- shared/syscall-list: filter out some obviously platform-specific syscalls (#2040247)
- seccomp: tighten checking of seccomp filter creation (#2040247)
- shared/seccomp-util: added functionality to make list of filtred syscalls (#2040247)
- nspawn: return ENOSYS by default, EPERM for "known" calls (#2040247)
- revert: resolved: pin stream while calling callbacks for it (#2110549)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-65" date="1660910400">- test-procfs-util: skip test on certain errors (#2087152)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-66" date="1661428800">- Try stopping MD RAID devices in shutdown too (#1817706)
- shutdown: get only active md arrays. (#1817706)
- scope: allow unprivileged delegation on scopes (#2068575)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-67" date="1661515200">- resolved: pin stream while calling callbacks for it (#2110549)
- ci(functions): Add `useradd` and `userdel` (#2110549)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-68" date="1664280000">- logind: optionally watch utmp for login data (#2122288)
- logind: add hashtable for finding session by leader PID (#2122288)
- core/load-fragment: move config_parse_sec_fix_0 to src/shared (#2122288)
- sd-event: add relative timer calls (#2122288)
- logind: add option to stop idle sessions after specified timeout (#2122288)
- logind: schedule idle check full interval from now if we couldn't figure out atime timestamp (#2122288)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-68.1" date="1667822400">- time-util: fix buffer-over-run (#2139390)
- core: move reset_arguments() to the end of main's finish (#2127170)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-68.2" date="1669032000">- basic: recognize pdfs filesystem as a network filesystem (#2143100)</changelog>
</package>
<package pkgid="aaa98454b5a2c49c17d9fb38f15514a834614c804d91b371a3ef80d708669bbe" name="systemd-libs" arch="i686">
  <version epoch="0" ver="239" rel="68.el8_7.4"/>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-63" date="1659528000">- resolved: pin stream while calling callbacks for it (#2110549)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-64" date="1660824000">- ci: bump the worker Ubuntu version to Jammy (#2087152)
- test: make test-execute pass on Linux 5.15 (#2087152)
- ci: install iputils (#2087152)
- ci(Mergify): Add `ci-waived` logic (#2087152)
- sd-event: don't invalidate source type on disconnect (#2115396)
- tests: make sure we delay running mount start jobs when /p/s/mountinfo is rate limited (#2095744)
- core: drop references to 'StandardOutputFileToCreate' (#2093479)
- dbus-execute: fix indentation (#2093479)
- dbus-execute: generate the correct transient unit setting (#2093479)
- bus-unit-util: properly accept StandardOutput=append:… settings (#2093479)
- core: be more careful when inheriting stdout fds to stderr (#2093479)
- test: add a test for StandardError=file:… (#2093479)
- tree-wide: allow ASCII fallback for → in logs (#2093479)
- tree-wide: allow ASCII fallback for … in logs (#2093479)
- core: allow to set default timeout for devices (#1967245)
- man: document DefaultDeviceTimeoutSec= (#1967245)
- Revert "core: Propagate condition failed state to triggering units." (#2114005)
- core: Check unit start rate limiting earlier (#2114005)
- core: Add trigger limit for path units (#2114005)
- meson: add syscall-names-update target (#2040247)
- syscall-names: add process_madvise which is planned for 5.10 (#2040247)
- shared: add @known syscall list (#2040247)
- generate-syscall-list: require python3 (#2040247)
- shared/seccomp: reduce scope of indexing variables (#2040247)
- shared/syscall-list: filter out some obviously platform-specific syscalls (#2040247)
- seccomp: tighten checking of seccomp filter creation (#2040247)
- shared/seccomp-util: added functionality to make list of filtred syscalls (#2040247)
- nspawn: return ENOSYS by default, EPERM for "known" calls (#2040247)
- revert: resolved: pin stream while calling callbacks for it (#2110549)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-65" date="1660910400">- test-procfs-util: skip test on certain errors (#2087152)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-66" date="1661428800">- Try stopping MD RAID devices in shutdown too (#1817706)
- shutdown: get only active md arrays. (#1817706)
- scope: allow unprivileged delegation on scopes (#2068575)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-67" date="1661515200">- resolved: pin stream while calling callbacks for it (#2110549)
- ci(functions): Add `useradd` and `userdel` (#2110549)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-68" date="1664280000">- logind: optionally watch utmp for login data (#2122288)
- logind: add hashtable for finding session by leader PID (#2122288)
- core/load-fragment: move config_parse_sec_fix_0 to src/shared (#2122288)
- sd-event: add relative timer calls (#2122288)
- logind: add option to stop idle sessions after specified timeout (#2122288)
- logind: schedule idle check full interval from now if we couldn't figure out atime timestamp (#2122288)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-68.1" date="1667822400">- time-util: fix buffer-over-run (#2139390)
- core: move reset_arguments() to the end of main's finish (#2127170)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-68.2" date="1669032000">- basic: recognize pdfs filesystem as a network filesystem (#2143100)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-68.3" date="1674820800">- core: bring manager_startup() and manager_reload() more inline (#2164049)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-68.4" date="1675080000">- basic: add STRERROR() wrapper for strerror_r() (#2155519)
- coredump: put context array into a struct (#2155519)
- coredump: do not allow user to access coredumps with changed uid/gid/capabilities (#2155519)</changelog>
</package>
<package pkgid="d3def56709f1ff6050a546c6851a4838df40178310d4e83b3cb2685b745cc40c" name="systemd-libs" arch="x86_64">
  <version epoch="0" ver="239" rel="68.el8_7.4"/>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-63" date="1659528000">- resolved: pin stream while calling callbacks for it (#2110549)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-64" date="1660824000">- ci: bump the worker Ubuntu version to Jammy (#2087152)
- test: make test-execute pass on Linux 5.15 (#2087152)
- ci: install iputils (#2087152)
- ci(Mergify): Add `ci-waived` logic (#2087152)
- sd-event: don't invalidate source type on disconnect (#2115396)
- tests: make sure we delay running mount start jobs when /p/s/mountinfo is rate limited (#2095744)
- core: drop references to 'StandardOutputFileToCreate' (#2093479)
- dbus-execute: fix indentation (#2093479)
- dbus-execute: generate the correct transient unit setting (#2093479)
- bus-unit-util: properly accept StandardOutput=append:… settings (#2093479)
- core: be more careful when inheriting stdout fds to stderr (#2093479)
- test: add a test for StandardError=file:… (#2093479)
- tree-wide: allow ASCII fallback for → in logs (#2093479)
- tree-wide: allow ASCII fallback for … in logs (#2093479)
- core: allow to set default timeout for devices (#1967245)
- man: document DefaultDeviceTimeoutSec= (#1967245)
- Revert "core: Propagate condition failed state to triggering units." (#2114005)
- core: Check unit start rate limiting earlier (#2114005)
- core: Add trigger limit for path units (#2114005)
- meson: add syscall-names-update target (#2040247)
- syscall-names: add process_madvise which is planned for 5.10 (#2040247)
- shared: add @known syscall list (#2040247)
- generate-syscall-list: require python3 (#2040247)
- shared/seccomp: reduce scope of indexing variables (#2040247)
- shared/syscall-list: filter out some obviously platform-specific syscalls (#2040247)
- seccomp: tighten checking of seccomp filter creation (#2040247)
- shared/seccomp-util: added functionality to make list of filtred syscalls (#2040247)
- nspawn: return ENOSYS by default, EPERM for "known" calls (#2040247)
- revert: resolved: pin stream while calling callbacks for it (#2110549)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-65" date="1660910400">- test-procfs-util: skip test on certain errors (#2087152)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-66" date="1661428800">- Try stopping MD RAID devices in shutdown too (#1817706)
- shutdown: get only active md arrays. (#1817706)
- scope: allow unprivileged delegation on scopes (#2068575)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-67" date="1661515200">- resolved: pin stream while calling callbacks for it (#2110549)
- ci(functions): Add `useradd` and `userdel` (#2110549)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-68" date="1664280000">- logind: optionally watch utmp for login data (#2122288)
- logind: add hashtable for finding session by leader PID (#2122288)
- core/load-fragment: move config_parse_sec_fix_0 to src/shared (#2122288)
- sd-event: add relative timer calls (#2122288)
- logind: add option to stop idle sessions after specified timeout (#2122288)
- logind: schedule idle check full interval from now if we couldn't figure out atime timestamp (#2122288)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-68.1" date="1667822400">- time-util: fix buffer-over-run (#2139390)
- core: move reset_arguments() to the end of main's finish (#2127170)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-68.2" date="1669032000">- basic: recognize pdfs filesystem as a network filesystem (#2143100)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-68.3" date="1674820800">- core: bring manager_startup() and manager_reload() more inline (#2164049)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-68.4" date="1675080000">- basic: add STRERROR() wrapper for strerror_r() (#2155519)
- coredump: put context array into a struct (#2155519)
- coredump: do not allow user to access coredumps with changed uid/gid/capabilities (#2155519)</changelog>
</package>
<package pkgid="d668454148a654fcc67bd6c3a0f6a14ee3725db87495eb808293238a60cba878" name="systemd-pam" arch="x86_64">
  <version epoch="0" ver="239" rel="68.el8_7.1"/>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-60" date="1655985600">- unit: don't emit PropertiesChanged signal if adding a dependency to a unit is a no-op (#1948480)
- tests: make inverted tests actually count (#2087152)
- TEST-*: make failure tests actually fail on failure (#2087152)
- ci(Mergify): configuration update (#2087152)
- core: propagate triggered unit in more load states (#2065322)
- core: propagate unit start limit hit state to triggering path unit (#2065322)
- core: Move 'r' variable declaration to start of unit_start() (#2065322)
- core: Delay start rate limit check when starting a unit (#2065322)
- core: Propagate condition failed state to triggering units. (#2065322)
- unit: check for mount rate limiting before checking active state (#2095744)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-61" date="1657800000">- mkosi: Add gnutls package (#2101227)
- unit-name: tighten checks for building valid unit names (#1940973)
- core: shorten long unit names that are based on paths and append path hash at the end (#1940973)
- test: add extended test for triggering mount rate limit (#1940973)
- tests: add test case for long unit names (#1940973)
- core: unset HOME=/ that the kernel gives us (#2056527)
- journal-remote: check return value from MHD_add_response_header (#2051981)
- journalctl: in --follow mode watch stdout for POLLHUP/POLLERR and exit (#2003236)
- sd-bus: make BUS_DEFAULT_TIMEOUT configurable (#2039461)
- fstab-generator: fix debug log (#2101433)
- logind-session-dbus: allow to set display name via dbus (#1857969)
- Allow restart for oneshot units (#2042896)
- test: correct TEST-41 StartLimitBurst test (#2042896)
- core: fix assert() about number of built environment variables (#2049788)
- core: add one more assert() (#2049788)
- strv: introduce strv_join_prefix() (#2049788)
- test: add tests for strv_join_prefix() (#2049788)
- test: replace swear words by 'hoge' (#2049788)
- core: add new environment variable $RUNTIME_DIRECTORY= or friends (#2049788)
- test-execute: add tests for $RUNTIME_DIRECTORY= or friends (#2049788)
- man: document RUNTIME_DIRECTORY= or friends (#2049788)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-62" date="1658145600">- spec: Remove dependency on timedatex (#2066946)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-63" date="1659528000">- resolved: pin stream while calling callbacks for it (#2110549)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-64" date="1660824000">- ci: bump the worker Ubuntu version to Jammy (#2087152)
- test: make test-execute pass on Linux 5.15 (#2087152)
- ci: install iputils (#2087152)
- ci(Mergify): Add `ci-waived` logic (#2087152)
- sd-event: don't invalidate source type on disconnect (#2115396)
- tests: make sure we delay running mount start jobs when /p/s/mountinfo is rate limited (#2095744)
- core: drop references to 'StandardOutputFileToCreate' (#2093479)
- dbus-execute: fix indentation (#2093479)
- dbus-execute: generate the correct transient unit setting (#2093479)
- bus-unit-util: properly accept StandardOutput=append:… settings (#2093479)
- core: be more careful when inheriting stdout fds to stderr (#2093479)
- test: add a test for StandardError=file:… (#2093479)
- tree-wide: allow ASCII fallback for → in logs (#2093479)
- tree-wide: allow ASCII fallback for … in logs (#2093479)
- core: allow to set default timeout for devices (#1967245)
- man: document DefaultDeviceTimeoutSec= (#1967245)
- Revert "core: Propagate condition failed state to triggering units." (#2114005)
- core: Check unit start rate limiting earlier (#2114005)
- core: Add trigger limit for path units (#2114005)
- meson: add syscall-names-update target (#2040247)
- syscall-names: add process_madvise which is planned for 5.10 (#2040247)
- shared: add @known syscall list (#2040247)
- generate-syscall-list: require python3 (#2040247)
- shared/seccomp: reduce scope of indexing variables (#2040247)
- shared/syscall-list: filter out some obviously platform-specific syscalls (#2040247)
- seccomp: tighten checking of seccomp filter creation (#2040247)
- shared/seccomp-util: added functionality to make list of filtred syscalls (#2040247)
- nspawn: return ENOSYS by default, EPERM for "known" calls (#2040247)
- revert: resolved: pin stream while calling callbacks for it (#2110549)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-65" date="1660910400">- test-procfs-util: skip test on certain errors (#2087152)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-66" date="1661428800">- Try stopping MD RAID devices in shutdown too (#1817706)
- shutdown: get only active md arrays. (#1817706)
- scope: allow unprivileged delegation on scopes (#2068575)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-67" date="1661515200">- resolved: pin stream while calling callbacks for it (#2110549)
- ci(functions): Add `useradd` and `userdel` (#2110549)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-68" date="1664280000">- logind: optionally watch utmp for login data (#2122288)
- logind: add hashtable for finding session by leader PID (#2122288)
- core/load-fragment: move config_parse_sec_fix_0 to src/shared (#2122288)
- sd-event: add relative timer calls (#2122288)
- logind: add option to stop idle sessions after specified timeout (#2122288)
- logind: schedule idle check full interval from now if we couldn't figure out atime timestamp (#2122288)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-68.1" date="1667822400">- time-util: fix buffer-over-run (#2139390)
- core: move reset_arguments() to the end of main's finish (#2127170)</changelog>
</package>
<package pkgid="28fb501ea4b0558c5d56e0fda160a431ca96d04f1fa5b45e19e7683296cc0d2b" name="systemd-pam" arch="x86_64">
  <version epoch="0" ver="239" rel="68.el8_7.2"/>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-61" date="1657800000">- mkosi: Add gnutls package (#2101227)
- unit-name: tighten checks for building valid unit names (#1940973)
- core: shorten long unit names that are based on paths and append path hash at the end (#1940973)
- test: add extended test for triggering mount rate limit (#1940973)
- tests: add test case for long unit names (#1940973)
- core: unset HOME=/ that the kernel gives us (#2056527)
- journal-remote: check return value from MHD_add_response_header (#2051981)
- journalctl: in --follow mode watch stdout for POLLHUP/POLLERR and exit (#2003236)
- sd-bus: make BUS_DEFAULT_TIMEOUT configurable (#2039461)
- fstab-generator: fix debug log (#2101433)
- logind-session-dbus: allow to set display name via dbus (#1857969)
- Allow restart for oneshot units (#2042896)
- test: correct TEST-41 StartLimitBurst test (#2042896)
- core: fix assert() about number of built environment variables (#2049788)
- core: add one more assert() (#2049788)
- strv: introduce strv_join_prefix() (#2049788)
- test: add tests for strv_join_prefix() (#2049788)
- test: replace swear words by 'hoge' (#2049788)
- core: add new environment variable $RUNTIME_DIRECTORY= or friends (#2049788)
- test-execute: add tests for $RUNTIME_DIRECTORY= or friends (#2049788)
- man: document RUNTIME_DIRECTORY= or friends (#2049788)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-62" date="1658145600">- spec: Remove dependency on timedatex (#2066946)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-63" date="1659528000">- resolved: pin stream while calling callbacks for it (#2110549)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-64" date="1660824000">- ci: bump the worker Ubuntu version to Jammy (#2087152)
- test: make test-execute pass on Linux 5.15 (#2087152)
- ci: install iputils (#2087152)
- ci(Mergify): Add `ci-waived` logic (#2087152)
- sd-event: don't invalidate source type on disconnect (#2115396)
- tests: make sure we delay running mount start jobs when /p/s/mountinfo is rate limited (#2095744)
- core: drop references to 'StandardOutputFileToCreate' (#2093479)
- dbus-execute: fix indentation (#2093479)
- dbus-execute: generate the correct transient unit setting (#2093479)
- bus-unit-util: properly accept StandardOutput=append:… settings (#2093479)
- core: be more careful when inheriting stdout fds to stderr (#2093479)
- test: add a test for StandardError=file:… (#2093479)
- tree-wide: allow ASCII fallback for → in logs (#2093479)
- tree-wide: allow ASCII fallback for … in logs (#2093479)
- core: allow to set default timeout for devices (#1967245)
- man: document DefaultDeviceTimeoutSec= (#1967245)
- Revert "core: Propagate condition failed state to triggering units." (#2114005)
- core: Check unit start rate limiting earlier (#2114005)
- core: Add trigger limit for path units (#2114005)
- meson: add syscall-names-update target (#2040247)
- syscall-names: add process_madvise which is planned for 5.10 (#2040247)
- shared: add @known syscall list (#2040247)
- generate-syscall-list: require python3 (#2040247)
- shared/seccomp: reduce scope of indexing variables (#2040247)
- shared/syscall-list: filter out some obviously platform-specific syscalls (#2040247)
- seccomp: tighten checking of seccomp filter creation (#2040247)
- shared/seccomp-util: added functionality to make list of filtred syscalls (#2040247)
- nspawn: return ENOSYS by default, EPERM for "known" calls (#2040247)
- revert: resolved: pin stream while calling callbacks for it (#2110549)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-65" date="1660910400">- test-procfs-util: skip test on certain errors (#2087152)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-66" date="1661428800">- Try stopping MD RAID devices in shutdown too (#1817706)
- shutdown: get only active md arrays. (#1817706)
- scope: allow unprivileged delegation on scopes (#2068575)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-67" date="1661515200">- resolved: pin stream while calling callbacks for it (#2110549)
- ci(functions): Add `useradd` and `userdel` (#2110549)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-68" date="1664280000">- logind: optionally watch utmp for login data (#2122288)
- logind: add hashtable for finding session by leader PID (#2122288)
- core/load-fragment: move config_parse_sec_fix_0 to src/shared (#2122288)
- sd-event: add relative timer calls (#2122288)
- logind: add option to stop idle sessions after specified timeout (#2122288)
- logind: schedule idle check full interval from now if we couldn't figure out atime timestamp (#2122288)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-68.1" date="1667822400">- time-util: fix buffer-over-run (#2139390)
- core: move reset_arguments() to the end of main's finish (#2127170)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-68.2" date="1669032000">- basic: recognize pdfs filesystem as a network filesystem (#2143100)</changelog>
</package>
<package pkgid="3d33ed14413b7dc1fc4a84ef5825b6f7ea8f20ac23a7606b89773a8e1f50659a" name="systemd-pam" arch="x86_64">
  <version epoch="0" ver="239" rel="68.el8_7.4"/>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-63" date="1659528000">- resolved: pin stream while calling callbacks for it (#2110549)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-64" date="1660824000">- ci: bump the worker Ubuntu version to Jammy (#2087152)
- test: make test-execute pass on Linux 5.15 (#2087152)
- ci: install iputils (#2087152)
- ci(Mergify): Add `ci-waived` logic (#2087152)
- sd-event: don't invalidate source type on disconnect (#2115396)
- tests: make sure we delay running mount start jobs when /p/s/mountinfo is rate limited (#2095744)
- core: drop references to 'StandardOutputFileToCreate' (#2093479)
- dbus-execute: fix indentation (#2093479)
- dbus-execute: generate the correct transient unit setting (#2093479)
- bus-unit-util: properly accept StandardOutput=append:… settings (#2093479)
- core: be more careful when inheriting stdout fds to stderr (#2093479)
- test: add a test for StandardError=file:… (#2093479)
- tree-wide: allow ASCII fallback for → in logs (#2093479)
- tree-wide: allow ASCII fallback for … in logs (#2093479)
- core: allow to set default timeout for devices (#1967245)
- man: document DefaultDeviceTimeoutSec= (#1967245)
- Revert "core: Propagate condition failed state to triggering units." (#2114005)
- core: Check unit start rate limiting earlier (#2114005)
- core: Add trigger limit for path units (#2114005)
- meson: add syscall-names-update target (#2040247)
- syscall-names: add process_madvise which is planned for 5.10 (#2040247)
- shared: add @known syscall list (#2040247)
- generate-syscall-list: require python3 (#2040247)
- shared/seccomp: reduce scope of indexing variables (#2040247)
- shared/syscall-list: filter out some obviously platform-specific syscalls (#2040247)
- seccomp: tighten checking of seccomp filter creation (#2040247)
- shared/seccomp-util: added functionality to make list of filtred syscalls (#2040247)
- nspawn: return ENOSYS by default, EPERM for "known" calls (#2040247)
- revert: resolved: pin stream while calling callbacks for it (#2110549)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-65" date="1660910400">- test-procfs-util: skip test on certain errors (#2087152)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-66" date="1661428800">- Try stopping MD RAID devices in shutdown too (#1817706)
- shutdown: get only active md arrays. (#1817706)
- scope: allow unprivileged delegation on scopes (#2068575)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-67" date="1661515200">- resolved: pin stream while calling callbacks for it (#2110549)
- ci(functions): Add `useradd` and `userdel` (#2110549)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-68" date="1664280000">- logind: optionally watch utmp for login data (#2122288)
- logind: add hashtable for finding session by leader PID (#2122288)
- core/load-fragment: move config_parse_sec_fix_0 to src/shared (#2122288)
- sd-event: add relative timer calls (#2122288)
- logind: add option to stop idle sessions after specified timeout (#2122288)
- logind: schedule idle check full interval from now if we couldn't figure out atime timestamp (#2122288)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-68.1" date="1667822400">- time-util: fix buffer-over-run (#2139390)
- core: move reset_arguments() to the end of main's finish (#2127170)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-68.2" date="1669032000">- basic: recognize pdfs filesystem as a network filesystem (#2143100)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-68.3" date="1674820800">- core: bring manager_startup() and manager_reload() more inline (#2164049)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-68.4" date="1675080000">- basic: add STRERROR() wrapper for strerror_r() (#2155519)
- coredump: put context array into a struct (#2155519)
- coredump: do not allow user to access coredumps with changed uid/gid/capabilities (#2155519)</changelog>
</package>
<package pkgid="de1474c06175b614ad15f80360216795ec894ce30d48a892749dcaed04c41121" name="systemd-tests" arch="x86_64">
  <version epoch="0" ver="239" rel="68.el8_7.1"/>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-60" date="1655985600">- unit: don't emit PropertiesChanged signal if adding a dependency to a unit is a no-op (#1948480)
- tests: make inverted tests actually count (#2087152)
- TEST-*: make failure tests actually fail on failure (#2087152)
- ci(Mergify): configuration update (#2087152)
- core: propagate triggered unit in more load states (#2065322)
- core: propagate unit start limit hit state to triggering path unit (#2065322)
- core: Move 'r' variable declaration to start of unit_start() (#2065322)
- core: Delay start rate limit check when starting a unit (#2065322)
- core: Propagate condition failed state to triggering units. (#2065322)
- unit: check for mount rate limiting before checking active state (#2095744)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-61" date="1657800000">- mkosi: Add gnutls package (#2101227)
- unit-name: tighten checks for building valid unit names (#1940973)
- core: shorten long unit names that are based on paths and append path hash at the end (#1940973)
- test: add extended test for triggering mount rate limit (#1940973)
- tests: add test case for long unit names (#1940973)
- core: unset HOME=/ that the kernel gives us (#2056527)
- journal-remote: check return value from MHD_add_response_header (#2051981)
- journalctl: in --follow mode watch stdout for POLLHUP/POLLERR and exit (#2003236)
- sd-bus: make BUS_DEFAULT_TIMEOUT configurable (#2039461)
- fstab-generator: fix debug log (#2101433)
- logind-session-dbus: allow to set display name via dbus (#1857969)
- Allow restart for oneshot units (#2042896)
- test: correct TEST-41 StartLimitBurst test (#2042896)
- core: fix assert() about number of built environment variables (#2049788)
- core: add one more assert() (#2049788)
- strv: introduce strv_join_prefix() (#2049788)
- test: add tests for strv_join_prefix() (#2049788)
- test: replace swear words by 'hoge' (#2049788)
- core: add new environment variable $RUNTIME_DIRECTORY= or friends (#2049788)
- test-execute: add tests for $RUNTIME_DIRECTORY= or friends (#2049788)
- man: document RUNTIME_DIRECTORY= or friends (#2049788)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-62" date="1658145600">- spec: Remove dependency on timedatex (#2066946)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-63" date="1659528000">- resolved: pin stream while calling callbacks for it (#2110549)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-64" date="1660824000">- ci: bump the worker Ubuntu version to Jammy (#2087152)
- test: make test-execute pass on Linux 5.15 (#2087152)
- ci: install iputils (#2087152)
- ci(Mergify): Add `ci-waived` logic (#2087152)
- sd-event: don't invalidate source type on disconnect (#2115396)
- tests: make sure we delay running mount start jobs when /p/s/mountinfo is rate limited (#2095744)
- core: drop references to 'StandardOutputFileToCreate' (#2093479)
- dbus-execute: fix indentation (#2093479)
- dbus-execute: generate the correct transient unit setting (#2093479)
- bus-unit-util: properly accept StandardOutput=append:… settings (#2093479)
- core: be more careful when inheriting stdout fds to stderr (#2093479)
- test: add a test for StandardError=file:… (#2093479)
- tree-wide: allow ASCII fallback for → in logs (#2093479)
- tree-wide: allow ASCII fallback for … in logs (#2093479)
- core: allow to set default timeout for devices (#1967245)
- man: document DefaultDeviceTimeoutSec= (#1967245)
- Revert "core: Propagate condition failed state to triggering units." (#2114005)
- core: Check unit start rate limiting earlier (#2114005)
- core: Add trigger limit for path units (#2114005)
- meson: add syscall-names-update target (#2040247)
- syscall-names: add process_madvise which is planned for 5.10 (#2040247)
- shared: add @known syscall list (#2040247)
- generate-syscall-list: require python3 (#2040247)
- shared/seccomp: reduce scope of indexing variables (#2040247)
- shared/syscall-list: filter out some obviously platform-specific syscalls (#2040247)
- seccomp: tighten checking of seccomp filter creation (#2040247)
- shared/seccomp-util: added functionality to make list of filtred syscalls (#2040247)
- nspawn: return ENOSYS by default, EPERM for "known" calls (#2040247)
- revert: resolved: pin stream while calling callbacks for it (#2110549)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-65" date="1660910400">- test-procfs-util: skip test on certain errors (#2087152)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-66" date="1661428800">- Try stopping MD RAID devices in shutdown too (#1817706)
- shutdown: get only active md arrays. (#1817706)
- scope: allow unprivileged delegation on scopes (#2068575)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-67" date="1661515200">- resolved: pin stream while calling callbacks for it (#2110549)
- ci(functions): Add `useradd` and `userdel` (#2110549)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-68" date="1664280000">- logind: optionally watch utmp for login data (#2122288)
- logind: add hashtable for finding session by leader PID (#2122288)
- core/load-fragment: move config_parse_sec_fix_0 to src/shared (#2122288)
- sd-event: add relative timer calls (#2122288)
- logind: add option to stop idle sessions after specified timeout (#2122288)
- logind: schedule idle check full interval from now if we couldn't figure out atime timestamp (#2122288)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-68.1" date="1667822400">- time-util: fix buffer-over-run (#2139390)
- core: move reset_arguments() to the end of main's finish (#2127170)</changelog>
</package>
<package pkgid="525e6544f2bb591586cfeadd2bf583e319425f1dae527069da2d684b74ec17c2" name="systemd-tests" arch="x86_64">
  <version epoch="0" ver="239" rel="68.el8_7.2"/>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-61" date="1657800000">- mkosi: Add gnutls package (#2101227)
- unit-name: tighten checks for building valid unit names (#1940973)
- core: shorten long unit names that are based on paths and append path hash at the end (#1940973)
- test: add extended test for triggering mount rate limit (#1940973)
- tests: add test case for long unit names (#1940973)
- core: unset HOME=/ that the kernel gives us (#2056527)
- journal-remote: check return value from MHD_add_response_header (#2051981)
- journalctl: in --follow mode watch stdout for POLLHUP/POLLERR and exit (#2003236)
- sd-bus: make BUS_DEFAULT_TIMEOUT configurable (#2039461)
- fstab-generator: fix debug log (#2101433)
- logind-session-dbus: allow to set display name via dbus (#1857969)
- Allow restart for oneshot units (#2042896)
- test: correct TEST-41 StartLimitBurst test (#2042896)
- core: fix assert() about number of built environment variables (#2049788)
- core: add one more assert() (#2049788)
- strv: introduce strv_join_prefix() (#2049788)
- test: add tests for strv_join_prefix() (#2049788)
- test: replace swear words by 'hoge' (#2049788)
- core: add new environment variable $RUNTIME_DIRECTORY= or friends (#2049788)
- test-execute: add tests for $RUNTIME_DIRECTORY= or friends (#2049788)
- man: document RUNTIME_DIRECTORY= or friends (#2049788)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-62" date="1658145600">- spec: Remove dependency on timedatex (#2066946)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-63" date="1659528000">- resolved: pin stream while calling callbacks for it (#2110549)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-64" date="1660824000">- ci: bump the worker Ubuntu version to Jammy (#2087152)
- test: make test-execute pass on Linux 5.15 (#2087152)
- ci: install iputils (#2087152)
- ci(Mergify): Add `ci-waived` logic (#2087152)
- sd-event: don't invalidate source type on disconnect (#2115396)
- tests: make sure we delay running mount start jobs when /p/s/mountinfo is rate limited (#2095744)
- core: drop references to 'StandardOutputFileToCreate' (#2093479)
- dbus-execute: fix indentation (#2093479)
- dbus-execute: generate the correct transient unit setting (#2093479)
- bus-unit-util: properly accept StandardOutput=append:… settings (#2093479)
- core: be more careful when inheriting stdout fds to stderr (#2093479)
- test: add a test for StandardError=file:… (#2093479)
- tree-wide: allow ASCII fallback for → in logs (#2093479)
- tree-wide: allow ASCII fallback for … in logs (#2093479)
- core: allow to set default timeout for devices (#1967245)
- man: document DefaultDeviceTimeoutSec= (#1967245)
- Revert "core: Propagate condition failed state to triggering units." (#2114005)
- core: Check unit start rate limiting earlier (#2114005)
- core: Add trigger limit for path units (#2114005)
- meson: add syscall-names-update target (#2040247)
- syscall-names: add process_madvise which is planned for 5.10 (#2040247)
- shared: add @known syscall list (#2040247)
- generate-syscall-list: require python3 (#2040247)
- shared/seccomp: reduce scope of indexing variables (#2040247)
- shared/syscall-list: filter out some obviously platform-specific syscalls (#2040247)
- seccomp: tighten checking of seccomp filter creation (#2040247)
- shared/seccomp-util: added functionality to make list of filtred syscalls (#2040247)
- nspawn: return ENOSYS by default, EPERM for "known" calls (#2040247)
- revert: resolved: pin stream while calling callbacks for it (#2110549)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-65" date="1660910400">- test-procfs-util: skip test on certain errors (#2087152)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-66" date="1661428800">- Try stopping MD RAID devices in shutdown too (#1817706)
- shutdown: get only active md arrays. (#1817706)
- scope: allow unprivileged delegation on scopes (#2068575)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-67" date="1661515200">- resolved: pin stream while calling callbacks for it (#2110549)
- ci(functions): Add `useradd` and `userdel` (#2110549)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-68" date="1664280000">- logind: optionally watch utmp for login data (#2122288)
- logind: add hashtable for finding session by leader PID (#2122288)
- core/load-fragment: move config_parse_sec_fix_0 to src/shared (#2122288)
- sd-event: add relative timer calls (#2122288)
- logind: add option to stop idle sessions after specified timeout (#2122288)
- logind: schedule idle check full interval from now if we couldn't figure out atime timestamp (#2122288)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-68.1" date="1667822400">- time-util: fix buffer-over-run (#2139390)
- core: move reset_arguments() to the end of main's finish (#2127170)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-68.2" date="1669032000">- basic: recognize pdfs filesystem as a network filesystem (#2143100)</changelog>
</package>
<package pkgid="4fd629eb72a27a273eb187cd77e507663f09b081012858e7db7358f36de3ae64" name="systemd-tests" arch="x86_64">
  <version epoch="0" ver="239" rel="68.el8_7.4"/>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-63" date="1659528000">- resolved: pin stream while calling callbacks for it (#2110549)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-64" date="1660824000">- ci: bump the worker Ubuntu version to Jammy (#2087152)
- test: make test-execute pass on Linux 5.15 (#2087152)
- ci: install iputils (#2087152)
- ci(Mergify): Add `ci-waived` logic (#2087152)
- sd-event: don't invalidate source type on disconnect (#2115396)
- tests: make sure we delay running mount start jobs when /p/s/mountinfo is rate limited (#2095744)
- core: drop references to 'StandardOutputFileToCreate' (#2093479)
- dbus-execute: fix indentation (#2093479)
- dbus-execute: generate the correct transient unit setting (#2093479)
- bus-unit-util: properly accept StandardOutput=append:… settings (#2093479)
- core: be more careful when inheriting stdout fds to stderr (#2093479)
- test: add a test for StandardError=file:… (#2093479)
- tree-wide: allow ASCII fallback for → in logs (#2093479)
- tree-wide: allow ASCII fallback for … in logs (#2093479)
- core: allow to set default timeout for devices (#1967245)
- man: document DefaultDeviceTimeoutSec= (#1967245)
- Revert "core: Propagate condition failed state to triggering units." (#2114005)
- core: Check unit start rate limiting earlier (#2114005)
- core: Add trigger limit for path units (#2114005)
- meson: add syscall-names-update target (#2040247)
- syscall-names: add process_madvise which is planned for 5.10 (#2040247)
- shared: add @known syscall list (#2040247)
- generate-syscall-list: require python3 (#2040247)
- shared/seccomp: reduce scope of indexing variables (#2040247)
- shared/syscall-list: filter out some obviously platform-specific syscalls (#2040247)
- seccomp: tighten checking of seccomp filter creation (#2040247)
- shared/seccomp-util: added functionality to make list of filtred syscalls (#2040247)
- nspawn: return ENOSYS by default, EPERM for "known" calls (#2040247)
- revert: resolved: pin stream while calling callbacks for it (#2110549)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-65" date="1660910400">- test-procfs-util: skip test on certain errors (#2087152)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-66" date="1661428800">- Try stopping MD RAID devices in shutdown too (#1817706)
- shutdown: get only active md arrays. (#1817706)
- scope: allow unprivileged delegation on scopes (#2068575)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-67" date="1661515200">- resolved: pin stream while calling callbacks for it (#2110549)
- ci(functions): Add `useradd` and `userdel` (#2110549)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-68" date="1664280000">- logind: optionally watch utmp for login data (#2122288)
- logind: add hashtable for finding session by leader PID (#2122288)
- core/load-fragment: move config_parse_sec_fix_0 to src/shared (#2122288)
- sd-event: add relative timer calls (#2122288)
- logind: add option to stop idle sessions after specified timeout (#2122288)
- logind: schedule idle check full interval from now if we couldn't figure out atime timestamp (#2122288)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-68.1" date="1667822400">- time-util: fix buffer-over-run (#2139390)
- core: move reset_arguments() to the end of main's finish (#2127170)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-68.2" date="1669032000">- basic: recognize pdfs filesystem as a network filesystem (#2143100)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-68.3" date="1674820800">- core: bring manager_startup() and manager_reload() more inline (#2164049)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-68.4" date="1675080000">- basic: add STRERROR() wrapper for strerror_r() (#2155519)
- coredump: put context array into a struct (#2155519)
- coredump: do not allow user to access coredumps with changed uid/gid/capabilities (#2155519)</changelog>
</package>
<package pkgid="4a0cbce358a9b0df82ac08b80245584600075759b66a36a7dd08b3bcf2ba663a" name="systemd-udev" arch="x86_64">
  <version epoch="0" ver="239" rel="68.el8_7.1"/>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-60" date="1655985600">- unit: don't emit PropertiesChanged signal if adding a dependency to a unit is a no-op (#1948480)
- tests: make inverted tests actually count (#2087152)
- TEST-*: make failure tests actually fail on failure (#2087152)
- ci(Mergify): configuration update (#2087152)
- core: propagate triggered unit in more load states (#2065322)
- core: propagate unit start limit hit state to triggering path unit (#2065322)
- core: Move 'r' variable declaration to start of unit_start() (#2065322)
- core: Delay start rate limit check when starting a unit (#2065322)
- core: Propagate condition failed state to triggering units. (#2065322)
- unit: check for mount rate limiting before checking active state (#2095744)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-61" date="1657800000">- mkosi: Add gnutls package (#2101227)
- unit-name: tighten checks for building valid unit names (#1940973)
- core: shorten long unit names that are based on paths and append path hash at the end (#1940973)
- test: add extended test for triggering mount rate limit (#1940973)
- tests: add test case for long unit names (#1940973)
- core: unset HOME=/ that the kernel gives us (#2056527)
- journal-remote: check return value from MHD_add_response_header (#2051981)
- journalctl: in --follow mode watch stdout for POLLHUP/POLLERR and exit (#2003236)
- sd-bus: make BUS_DEFAULT_TIMEOUT configurable (#2039461)
- fstab-generator: fix debug log (#2101433)
- logind-session-dbus: allow to set display name via dbus (#1857969)
- Allow restart for oneshot units (#2042896)
- test: correct TEST-41 StartLimitBurst test (#2042896)
- core: fix assert() about number of built environment variables (#2049788)
- core: add one more assert() (#2049788)
- strv: introduce strv_join_prefix() (#2049788)
- test: add tests for strv_join_prefix() (#2049788)
- test: replace swear words by 'hoge' (#2049788)
- core: add new environment variable $RUNTIME_DIRECTORY= or friends (#2049788)
- test-execute: add tests for $RUNTIME_DIRECTORY= or friends (#2049788)
- man: document RUNTIME_DIRECTORY= or friends (#2049788)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-62" date="1658145600">- spec: Remove dependency on timedatex (#2066946)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-63" date="1659528000">- resolved: pin stream while calling callbacks for it (#2110549)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-64" date="1660824000">- ci: bump the worker Ubuntu version to Jammy (#2087152)
- test: make test-execute pass on Linux 5.15 (#2087152)
- ci: install iputils (#2087152)
- ci(Mergify): Add `ci-waived` logic (#2087152)
- sd-event: don't invalidate source type on disconnect (#2115396)
- tests: make sure we delay running mount start jobs when /p/s/mountinfo is rate limited (#2095744)
- core: drop references to 'StandardOutputFileToCreate' (#2093479)
- dbus-execute: fix indentation (#2093479)
- dbus-execute: generate the correct transient unit setting (#2093479)
- bus-unit-util: properly accept StandardOutput=append:… settings (#2093479)
- core: be more careful when inheriting stdout fds to stderr (#2093479)
- test: add a test for StandardError=file:… (#2093479)
- tree-wide: allow ASCII fallback for → in logs (#2093479)
- tree-wide: allow ASCII fallback for … in logs (#2093479)
- core: allow to set default timeout for devices (#1967245)
- man: document DefaultDeviceTimeoutSec= (#1967245)
- Revert "core: Propagate condition failed state to triggering units." (#2114005)
- core: Check unit start rate limiting earlier (#2114005)
- core: Add trigger limit for path units (#2114005)
- meson: add syscall-names-update target (#2040247)
- syscall-names: add process_madvise which is planned for 5.10 (#2040247)
- shared: add @known syscall list (#2040247)
- generate-syscall-list: require python3 (#2040247)
- shared/seccomp: reduce scope of indexing variables (#2040247)
- shared/syscall-list: filter out some obviously platform-specific syscalls (#2040247)
- seccomp: tighten checking of seccomp filter creation (#2040247)
- shared/seccomp-util: added functionality to make list of filtred syscalls (#2040247)
- nspawn: return ENOSYS by default, EPERM for "known" calls (#2040247)
- revert: resolved: pin stream while calling callbacks for it (#2110549)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-65" date="1660910400">- test-procfs-util: skip test on certain errors (#2087152)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-66" date="1661428800">- Try stopping MD RAID devices in shutdown too (#1817706)
- shutdown: get only active md arrays. (#1817706)
- scope: allow unprivileged delegation on scopes (#2068575)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-67" date="1661515200">- resolved: pin stream while calling callbacks for it (#2110549)
- ci(functions): Add `useradd` and `userdel` (#2110549)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-68" date="1664280000">- logind: optionally watch utmp for login data (#2122288)
- logind: add hashtable for finding session by leader PID (#2122288)
- core/load-fragment: move config_parse_sec_fix_0 to src/shared (#2122288)
- sd-event: add relative timer calls (#2122288)
- logind: add option to stop idle sessions after specified timeout (#2122288)
- logind: schedule idle check full interval from now if we couldn't figure out atime timestamp (#2122288)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-68.1" date="1667822400">- time-util: fix buffer-over-run (#2139390)
- core: move reset_arguments() to the end of main's finish (#2127170)</changelog>
</package>
<package pkgid="222b8496b14a437483aef4092cc499dec5baa51d60cdba833c4f1b6c0baa5ccd" name="systemd-udev" arch="x86_64">
  <version epoch="0" ver="239" rel="68.el8_7.2"/>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-61" date="1657800000">- mkosi: Add gnutls package (#2101227)
- unit-name: tighten checks for building valid unit names (#1940973)
- core: shorten long unit names that are based on paths and append path hash at the end (#1940973)
- test: add extended test for triggering mount rate limit (#1940973)
- tests: add test case for long unit names (#1940973)
- core: unset HOME=/ that the kernel gives us (#2056527)
- journal-remote: check return value from MHD_add_response_header (#2051981)
- journalctl: in --follow mode watch stdout for POLLHUP/POLLERR and exit (#2003236)
- sd-bus: make BUS_DEFAULT_TIMEOUT configurable (#2039461)
- fstab-generator: fix debug log (#2101433)
- logind-session-dbus: allow to set display name via dbus (#1857969)
- Allow restart for oneshot units (#2042896)
- test: correct TEST-41 StartLimitBurst test (#2042896)
- core: fix assert() about number of built environment variables (#2049788)
- core: add one more assert() (#2049788)
- strv: introduce strv_join_prefix() (#2049788)
- test: add tests for strv_join_prefix() (#2049788)
- test: replace swear words by 'hoge' (#2049788)
- core: add new environment variable $RUNTIME_DIRECTORY= or friends (#2049788)
- test-execute: add tests for $RUNTIME_DIRECTORY= or friends (#2049788)
- man: document RUNTIME_DIRECTORY= or friends (#2049788)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-62" date="1658145600">- spec: Remove dependency on timedatex (#2066946)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-63" date="1659528000">- resolved: pin stream while calling callbacks for it (#2110549)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-64" date="1660824000">- ci: bump the worker Ubuntu version to Jammy (#2087152)
- test: make test-execute pass on Linux 5.15 (#2087152)
- ci: install iputils (#2087152)
- ci(Mergify): Add `ci-waived` logic (#2087152)
- sd-event: don't invalidate source type on disconnect (#2115396)
- tests: make sure we delay running mount start jobs when /p/s/mountinfo is rate limited (#2095744)
- core: drop references to 'StandardOutputFileToCreate' (#2093479)
- dbus-execute: fix indentation (#2093479)
- dbus-execute: generate the correct transient unit setting (#2093479)
- bus-unit-util: properly accept StandardOutput=append:… settings (#2093479)
- core: be more careful when inheriting stdout fds to stderr (#2093479)
- test: add a test for StandardError=file:… (#2093479)
- tree-wide: allow ASCII fallback for → in logs (#2093479)
- tree-wide: allow ASCII fallback for … in logs (#2093479)
- core: allow to set default timeout for devices (#1967245)
- man: document DefaultDeviceTimeoutSec= (#1967245)
- Revert "core: Propagate condition failed state to triggering units." (#2114005)
- core: Check unit start rate limiting earlier (#2114005)
- core: Add trigger limit for path units (#2114005)
- meson: add syscall-names-update target (#2040247)
- syscall-names: add process_madvise which is planned for 5.10 (#2040247)
- shared: add @known syscall list (#2040247)
- generate-syscall-list: require python3 (#2040247)
- shared/seccomp: reduce scope of indexing variables (#2040247)
- shared/syscall-list: filter out some obviously platform-specific syscalls (#2040247)
- seccomp: tighten checking of seccomp filter creation (#2040247)
- shared/seccomp-util: added functionality to make list of filtred syscalls (#2040247)
- nspawn: return ENOSYS by default, EPERM for "known" calls (#2040247)
- revert: resolved: pin stream while calling callbacks for it (#2110549)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-65" date="1660910400">- test-procfs-util: skip test on certain errors (#2087152)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-66" date="1661428800">- Try stopping MD RAID devices in shutdown too (#1817706)
- shutdown: get only active md arrays. (#1817706)
- scope: allow unprivileged delegation on scopes (#2068575)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-67" date="1661515200">- resolved: pin stream while calling callbacks for it (#2110549)
- ci(functions): Add `useradd` and `userdel` (#2110549)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-68" date="1664280000">- logind: optionally watch utmp for login data (#2122288)
- logind: add hashtable for finding session by leader PID (#2122288)
- core/load-fragment: move config_parse_sec_fix_0 to src/shared (#2122288)
- sd-event: add relative timer calls (#2122288)
- logind: add option to stop idle sessions after specified timeout (#2122288)
- logind: schedule idle check full interval from now if we couldn't figure out atime timestamp (#2122288)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-68.1" date="1667822400">- time-util: fix buffer-over-run (#2139390)
- core: move reset_arguments() to the end of main's finish (#2127170)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-68.2" date="1669032000">- basic: recognize pdfs filesystem as a network filesystem (#2143100)</changelog>
</package>
<package pkgid="258efbb84ff300d9af6f2a3c45cc1d003304881f758c93242a127af38b72f428" name="systemd-udev" arch="x86_64">
  <version epoch="0" ver="239" rel="68.el8_7.4"/>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-63" date="1659528000">- resolved: pin stream while calling callbacks for it (#2110549)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-64" date="1660824000">- ci: bump the worker Ubuntu version to Jammy (#2087152)
- test: make test-execute pass on Linux 5.15 (#2087152)
- ci: install iputils (#2087152)
- ci(Mergify): Add `ci-waived` logic (#2087152)
- sd-event: don't invalidate source type on disconnect (#2115396)
- tests: make sure we delay running mount start jobs when /p/s/mountinfo is rate limited (#2095744)
- core: drop references to 'StandardOutputFileToCreate' (#2093479)
- dbus-execute: fix indentation (#2093479)
- dbus-execute: generate the correct transient unit setting (#2093479)
- bus-unit-util: properly accept StandardOutput=append:… settings (#2093479)
- core: be more careful when inheriting stdout fds to stderr (#2093479)
- test: add a test for StandardError=file:… (#2093479)
- tree-wide: allow ASCII fallback for → in logs (#2093479)
- tree-wide: allow ASCII fallback for … in logs (#2093479)
- core: allow to set default timeout for devices (#1967245)
- man: document DefaultDeviceTimeoutSec= (#1967245)
- Revert "core: Propagate condition failed state to triggering units." (#2114005)
- core: Check unit start rate limiting earlier (#2114005)
- core: Add trigger limit for path units (#2114005)
- meson: add syscall-names-update target (#2040247)
- syscall-names: add process_madvise which is planned for 5.10 (#2040247)
- shared: add @known syscall list (#2040247)
- generate-syscall-list: require python3 (#2040247)
- shared/seccomp: reduce scope of indexing variables (#2040247)
- shared/syscall-list: filter out some obviously platform-specific syscalls (#2040247)
- seccomp: tighten checking of seccomp filter creation (#2040247)
- shared/seccomp-util: added functionality to make list of filtred syscalls (#2040247)
- nspawn: return ENOSYS by default, EPERM for "known" calls (#2040247)
- revert: resolved: pin stream while calling callbacks for it (#2110549)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-65" date="1660910400">- test-procfs-util: skip test on certain errors (#2087152)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-66" date="1661428800">- Try stopping MD RAID devices in shutdown too (#1817706)
- shutdown: get only active md arrays. (#1817706)
- scope: allow unprivileged delegation on scopes (#2068575)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-67" date="1661515200">- resolved: pin stream while calling callbacks for it (#2110549)
- ci(functions): Add `useradd` and `userdel` (#2110549)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-68" date="1664280000">- logind: optionally watch utmp for login data (#2122288)
- logind: add hashtable for finding session by leader PID (#2122288)
- core/load-fragment: move config_parse_sec_fix_0 to src/shared (#2122288)
- sd-event: add relative timer calls (#2122288)
- logind: add option to stop idle sessions after specified timeout (#2122288)
- logind: schedule idle check full interval from now if we couldn't figure out atime timestamp (#2122288)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-68.1" date="1667822400">- time-util: fix buffer-over-run (#2139390)
- core: move reset_arguments() to the end of main's finish (#2127170)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-68.2" date="1669032000">- basic: recognize pdfs filesystem as a network filesystem (#2143100)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-68.3" date="1674820800">- core: bring manager_startup() and manager_reload() more inline (#2164049)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-68.4" date="1675080000">- basic: add STRERROR() wrapper for strerror_r() (#2155519)
- coredump: put context array into a struct (#2155519)
- coredump: do not allow user to access coredumps with changed uid/gid/capabilities (#2155519)</changelog>
</package>
<package pkgid="58fa085e7babccb06d0b6583932f4c7ad9cfd682a9e4e6678ba2f60f766ab68c" name="tar" arch="x86_64">
  <version epoch="2" ver="1.30" rel="6.el8_7.1"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2:1.29-6" date="1501156800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2:1.29-7" date="1501761600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 1.30-1" date="1513598400">- rebase to latest upstream release, per release notes
  http://lists.gnu.org/archive/html/info-gnu/2017-12/msg00011.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 1.30-1" date="1515067200">- testsuite fixes per upstream reports</changelog>
  <changelog author="Igor Gnatenko &lt;ignatenkobrain@fedoraproject.org&gt; - 2:1.30-2" date="1515240000">- Return Epoch back</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2:1.30-3" date="1518177600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 1.30-4" date="1527076800">- drop BuildRequires: rsh, we anyways use ./configure RSH=%_bindir/ssh</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 1.30-5" date="1589976000">- fixed NULL return value from xgetcwd (#1837871)</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 1.30-6" date="1620820800">- added "padding with zeros" info message (#1913566)
- do not report disk error as file shrank (#1913569)</changelog>
  <changelog author="Matej Mu&#x17E;ila &lt;mmuzila@redhat.com&gt; - 1.30-6.1" date="1675944000">- Fix CVE-2022-48303
- Resolves: CVE-2022-48303</changelog>
</package>
<package pkgid="75918d67b4eebebf96cf9e92730b55886844e1eff48d8c30787fabcf9f035716" name="tzdata" arch="noarch">
  <version epoch="0" ver="2022g" rel="1.el8"/>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2020f-1" date="1609243200">- Rebase to tzdata-2020f including changes for tzdata-2020e
  - tzdata-2020f fixes a bug in tzdata-2020e that caused an
    invalid zi file in rearguard format
  - Volgograd changes time zone from UTC+04 to UTC+03 on 2020-12-27.
  - Australia/Currie is identical to Australia/Hobart for all
    timestamps since 1970 and was therefore created by mistake,
    now moved to the "backward" file.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2021a-1" date="1611489600">- Rebase to tzdata-2021a
  - South Sudan will change from +03 to +02 on 2021-02-01.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2021c-1" date="1633521600">- Rebase to tzdata-2021c - supersedes tzdata-2021b
  - Revert most of 2021b changes to 'backward'.
  - Fix 'zic -b fat' bug in pre-1970 32-bit data.
  - Fix two Link line typos.
  - Distribute SECURITY file.
- Includes changes in tzdata-2021b
  - Innclude patch for Mayen
  - Jordan now starts DST on February's last Thursday.
  - Samoa no longer observes DST.
  - Merge more location-based Zones whose timestamps agree since 1970.
  - Move some backward-compatibility links to 'backward'.
  - Rename Pacific/Enderbury to Pacific/Kanton.
  - Correct many pre-1993 transitions in Malawi, Portugal, etc.
  - zic now creates each output file or link atomically.
  - zic -L no longer omits the POSIX TZ string in its output.
  - zic fixes for truncation and leap second table expiration.
  - zic now follows POSIX for TZ strings using all-year DST.
  - Fix some localtime crashes and bugs in obscure cases.
  - zdump -v now outputs more-useful boundary cases.
  - tzfile.5 better matches a draft successor to RFC 8536.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2021e-1" date="1634904000">- Rebase to tzdata-2021e - supersedes tzdata-2021d
  - Pacific/Fiji suspended DST for the 2021/2022 season.
  - 'zic -r' now marks unspecified timestamps with "-00".
  - Palestine will fall back 2021-10-29 at 01:00, rather
    than the predicted 2021-10-30.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2022a-1" date="1648814400">- Rebase to tzdata-2022a
  - Palestine springs forward on 2022-03-27, not -03-26.
  - zdump -v now outputs better failure information
  - fixes for code that reads corrupted TZif data</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2022a-2" date="1649160000">- Update the release for rebuild.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2022b-1" date="1660132800">- Rebase to tzdata-2022b
  - Chile transitions to DST on 2022-09-11, not 2022-09-04
  - 'make install' now defaults LOCALTIME to Factory rather than GMT
  - More zones that are the same since 1970 have been moved to backzone.
  - Include patch for awk workaround.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2022c-1" date="1660651200">- Rebase to tzdata-2022c - supersedes tzdata-2022b
  - Add a work-around for an awk bug in FreeBSD, macOS, etc.
  - Improve tzselect with respect to intercontinental Zones.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2022f-1" date="1667217600">- Rebase to tzdata-2022f
  - Mexico will stop observing DST except near the US border.
  - Chihuahua moved to -06 year round starting on 2022-10-30.
  - Fiji no longer observes DST.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2022g-1" date="1669723200">- Rebase to tzdata-2022g
  - The northern edge of the Mexican state of Chihuahua will
    change time zone to agree with nearby US locations on
    2022-11-30.
  - Added a new Zone America/Ciudad_Juarez that splits from
    America/Ojinaga.</changelog>
</package>
<package pkgid="3fcaee8052409e766d1ded6fed070fe2b7b6923c09f3d8caa4dd9f474d23bbdc" name="tzdata" arch="noarch">
  <version epoch="0" ver="2023b" rel="1.el8"/>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2021e-1" date="1634904000">- Rebase to tzdata-2021e - supersedes tzdata-2021d
  - Pacific/Fiji suspended DST for the 2021/2022 season.
  - 'zic -r' now marks unspecified timestamps with "-00".
  - Palestine will fall back 2021-10-29 at 01:00, rather
    than the predicted 2021-10-30.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2022a-1" date="1648814400">- Rebase to tzdata-2022a
  - Palestine springs forward on 2022-03-27, not -03-26.
  - zdump -v now outputs better failure information
  - fixes for code that reads corrupted TZif data</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2022a-2" date="1649160000">- Update the release for rebuild.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2022b-1" date="1660132800">- Rebase to tzdata-2022b
  - Chile transitions to DST on 2022-09-11, not 2022-09-04
  - 'make install' now defaults LOCALTIME to Factory rather than GMT
  - More zones that are the same since 1970 have been moved to backzone.
  - Include patch for awk workaround.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2022c-1" date="1660651200">- Rebase to tzdata-2022c - supersedes tzdata-2022b
  - Add a work-around for an awk bug in FreeBSD, macOS, etc.
  - Improve tzselect with respect to intercontinental Zones.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2022f-1" date="1667217600">- Rebase to tzdata-2022f
  - Mexico will stop observing DST except near the US border.
  - Chihuahua moved to -06 year round starting on 2022-10-30.
  - Fiji no longer observes DST.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2022g-1" date="1669723200">- Rebase to tzdata-2022g
  - The northern edge of the Mexican state of Chihuahua will
    change time zone to agree with nearby US locations on
    2022-11-30.
  - Added a new Zone America/Ciudad_Juarez that splits from
    America/Ojinaga.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2022g-2" date="1673006400">- Include leap-seconds.list in tzdata install. (#2154109)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2023a-1" date="1679486400">- Rebase to tzdata-2023a
  - Egypt reintroduced DST, from April through October.
  - Morocco springs forward April 23, not April 30.
  - Palestine delayed the start of DST this year.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2023b-1" date="1679659200">- Rebase to tzdata-2023b
  - Lebanon will transition to DST on April 20/21, not March 25/26.</changelog>
</package>
<package pkgid="1f33864c946412b32eb53df8862a9512c79eea4d07cfa0f066a492983ff3253e" name="tzdata" arch="noarch">
  <version epoch="0" ver="2023c" rel="1.el8"/>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2022a-1" date="1648814400">- Rebase to tzdata-2022a
  - Palestine springs forward on 2022-03-27, not -03-26.
  - zdump -v now outputs better failure information
  - fixes for code that reads corrupted TZif data</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2022a-2" date="1649160000">- Update the release for rebuild.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2022b-1" date="1660132800">- Rebase to tzdata-2022b
  - Chile transitions to DST on 2022-09-11, not 2022-09-04
  - 'make install' now defaults LOCALTIME to Factory rather than GMT
  - More zones that are the same since 1970 have been moved to backzone.
  - Include patch for awk workaround.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2022c-1" date="1660651200">- Rebase to tzdata-2022c - supersedes tzdata-2022b
  - Add a work-around for an awk bug in FreeBSD, macOS, etc.
  - Improve tzselect with respect to intercontinental Zones.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2022f-1" date="1667217600">- Rebase to tzdata-2022f
  - Mexico will stop observing DST except near the US border.
  - Chihuahua moved to -06 year round starting on 2022-10-30.
  - Fiji no longer observes DST.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2022g-1" date="1669723200">- Rebase to tzdata-2022g
  - The northern edge of the Mexican state of Chihuahua will
    change time zone to agree with nearby US locations on
    2022-11-30.
  - Added a new Zone America/Ciudad_Juarez that splits from
    America/Ojinaga.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2022g-2" date="1673006400">- Include leap-seconds.list in tzdata install. (#2154109)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2023a-1" date="1679486400">- Rebase to tzdata-2023a
  - Egypt reintroduced DST, from April through October.
  - Morocco springs forward April 23, not April 30.
  - Palestine delayed the start of DST this year.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2023b-1" date="1679659200">- Rebase to tzdata-2023b
  - Lebanon will transition to DST on April 20/21, not March 25/26.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2023c-1" date="1680004800">- Rebase to tzdata-2023c
  - Lebanon reversed the change added in tzdata-2023b.</changelog>
</package>
<package pkgid="56f836feccfeb7d508adae70c1d37a7cea7fd0ed56aeea0bb95429d11ec7aab1" name="util-linux" arch="x86_64">
  <version epoch="0" ver="2.32.1" rel="39.el8_7"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-29" date="1638878400">- fix #1988955 - script command continues without stopping.
- fix #2041498 - incorrect partition size calculation for BLKPG_* ioctls
- fix #2011602 - logger from util-linux incorrectly handles long messages
- fix #1916151 - [RFE] spread fstrim.timer across time
- fix #1894192 - Update or backport setpriv --pdeathsig
- fix #2026511 - blkid fails to complete when targeting  non-block devices</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-30" date="1641211200">- update lib-sys-add-sysfs_chrdev_devno_to_devname.patch (#2026511)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-31" date="1641902400">- improve #2026511 fix - blkid fails to complete when targeting non-block devices
- fix #1950187 - Ambient capabilities failed to applied to non-root user</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-32" date="1642420800">- change bug number (#2016229 to #2041498)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-34" date="1642420801">- rebuild after revert</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-35" date="1646740800">- fix #2058176 - losetup Retry LOOP_SET_STATUS64 on EAGAIN</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-36" date="1657800000">- fix #2060030 - Please backport patches for atari partition detection to RHEL 8
- fix #2069187 - Internal testsuite for lscpu failed on aarch64
- fix #2093166 - lslogins reports incorrect "Password is locked" status
- fix #2059241 - rpm -V / --verify reports bad user/group/mtime for /run/uuidd
- fix #2044592 - Move /var/log/lastlog ownership to systemd</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-37" date="1657886400">- update atari partition tests (related to #2060030)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-38" date="1661169600">- improve tmpfiles.d use in spec file (related to #2059241)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-39" date="1668600000">- fix #2141969 - Add --cont-clock feature for libuuid and uuidd</changelog>
</package>
<package pkgid="b4345e51ef6bd371b2f4db177f8925e11f973cbe45dd97140fab85db590a0d1f" name="util-linux-user" arch="x86_64">
  <version epoch="0" ver="2.32.1" rel="39.el8_7"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-29" date="1638878400">- fix #1988955 - script command continues without stopping.
- fix #2041498 - incorrect partition size calculation for BLKPG_* ioctls
- fix #2011602 - logger from util-linux incorrectly handles long messages
- fix #1916151 - [RFE] spread fstrim.timer across time
- fix #1894192 - Update or backport setpriv --pdeathsig
- fix #2026511 - blkid fails to complete when targeting  non-block devices</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-30" date="1641211200">- update lib-sys-add-sysfs_chrdev_devno_to_devname.patch (#2026511)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-31" date="1641902400">- improve #2026511 fix - blkid fails to complete when targeting non-block devices
- fix #1950187 - Ambient capabilities failed to applied to non-root user</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-32" date="1642420800">- change bug number (#2016229 to #2041498)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-34" date="1642420801">- rebuild after revert</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-35" date="1646740800">- fix #2058176 - losetup Retry LOOP_SET_STATUS64 on EAGAIN</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-36" date="1657800000">- fix #2060030 - Please backport patches for atari partition detection to RHEL 8
- fix #2069187 - Internal testsuite for lscpu failed on aarch64
- fix #2093166 - lslogins reports incorrect "Password is locked" status
- fix #2059241 - rpm -V / --verify reports bad user/group/mtime for /run/uuidd
- fix #2044592 - Move /var/log/lastlog ownership to systemd</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-37" date="1657886400">- update atari partition tests (related to #2060030)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-38" date="1661169600">- improve tmpfiles.d use in spec file (related to #2059241)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-39" date="1668600000">- fix #2141969 - Add --cont-clock feature for libuuid and uuidd</changelog>
</package>
<package pkgid="083acf5c8f7d079b8f53824affb9890bb5f0e45d2c82e32bb681e505041636de" name="uuidd" arch="x86_64">
  <version epoch="0" ver="2.32.1" rel="39.el8_7"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-29" date="1638878400">- fix #1988955 - script command continues without stopping.
- fix #2041498 - incorrect partition size calculation for BLKPG_* ioctls
- fix #2011602 - logger from util-linux incorrectly handles long messages
- fix #1916151 - [RFE] spread fstrim.timer across time
- fix #1894192 - Update or backport setpriv --pdeathsig
- fix #2026511 - blkid fails to complete when targeting  non-block devices</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-30" date="1641211200">- update lib-sys-add-sysfs_chrdev_devno_to_devname.patch (#2026511)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-31" date="1641902400">- improve #2026511 fix - blkid fails to complete when targeting non-block devices
- fix #1950187 - Ambient capabilities failed to applied to non-root user</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-32" date="1642420800">- change bug number (#2016229 to #2041498)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-34" date="1642420801">- rebuild after revert</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-35" date="1646740800">- fix #2058176 - losetup Retry LOOP_SET_STATUS64 on EAGAIN</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-36" date="1657800000">- fix #2060030 - Please backport patches for atari partition detection to RHEL 8
- fix #2069187 - Internal testsuite for lscpu failed on aarch64
- fix #2093166 - lslogins reports incorrect "Password is locked" status
- fix #2059241 - rpm -V / --verify reports bad user/group/mtime for /run/uuidd
- fix #2044592 - Move /var/log/lastlog ownership to systemd</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-37" date="1657886400">- update atari partition tests (related to #2060030)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-38" date="1661169600">- improve tmpfiles.d use in spec file (related to #2059241)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.32.1-39" date="1668600000">- fix #2141969 - Add --cont-clock feature for libuuid and uuidd</changelog>
</package>
<package pkgid="fe6b9280dfbe93338084ef23819ad48ea6be3e3b6c7260e64db8cba7ef4f3c13" name="zlib" arch="i686">
  <version epoch="0" ver="1.2.11" rel="21.el8_7"/>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 1.2.11-12" date="1571140800">- fixed covscan issues</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 1.2.11-13" date="1572350400">- Added -DDFLTCC parameter to configure to enable 
- Z hardware-accelerated deflate for s390x architectures (#1659433)</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 1.2.11-14" date="1590408000">- Fix for Z hardware-accelerated deflate for s390x architectures</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 1.2.11-15" date="1592222400">- Another fix for Z hardware-accelerated deflate for s390x architectures</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 1.2.11-16" date="1592222401">- Permit a deflateParams() parameter change
- Another fix for Z hardware-accelerated deflate for s390x architectures
- according to previous change by upstream</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 1.2.11-17" date="1592222402">- Fixed DFLTCC compression level switching issues (#1875492)
- Enabled HW compression for compression levels 1 through 6 (#1847438)
- Fixed inflateSyncPoint() bad return value on z15 (#1888930)</changelog>
  <changelog author="Matej Mu&#x17E;ila &lt;mmuzila@redhat.com&gt; - 1.2.11-18" date="1648555200">- Resolves: CVE-2018-25032</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 1.2.11-19" date="1652702400">- Apply IBM patch for compressBound() function
- Source from https://github.com/madler/zlib/issues/410#issuecomment-947212824
- Resolves: #2056900</changelog>
  <changelog author="Matej Mu&#x17E;ila &lt;mmuzila@redhat.com&gt; - 1.2.11-20" date="1660046400">- Fix heap-based buffer over-read or buffer overflow in inflate in inflate.c
- Resolves: CVE-2022-37434</changelog>
  <changelog author="Ilya Leoshkevich &lt;iii@linux.ibm.com&gt; - 1.2.11-21" date="1665576000">- Fix for IBM strm.adler rhbz#2134074</changelog>
</package>
<package pkgid="489428e9d56133955e3544c83ce1a486519ea5cb220aa415905519836aa30400" name="zlib" arch="x86_64">
  <version epoch="0" ver="1.2.11" rel="21.el8_7"/>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 1.2.11-12" date="1571140800">- fixed covscan issues</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 1.2.11-13" date="1572350400">- Added -DDFLTCC parameter to configure to enable 
- Z hardware-accelerated deflate for s390x architectures (#1659433)</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 1.2.11-14" date="1590408000">- Fix for Z hardware-accelerated deflate for s390x architectures</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 1.2.11-15" date="1592222400">- Another fix for Z hardware-accelerated deflate for s390x architectures</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 1.2.11-16" date="1592222401">- Permit a deflateParams() parameter change
- Another fix for Z hardware-accelerated deflate for s390x architectures
- according to previous change by upstream</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 1.2.11-17" date="1592222402">- Fixed DFLTCC compression level switching issues (#1875492)
- Enabled HW compression for compression levels 1 through 6 (#1847438)
- Fixed inflateSyncPoint() bad return value on z15 (#1888930)</changelog>
  <changelog author="Matej Mu&#x17E;ila &lt;mmuzila@redhat.com&gt; - 1.2.11-18" date="1648555200">- Resolves: CVE-2018-25032</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 1.2.11-19" date="1652702400">- Apply IBM patch for compressBound() function
- Source from https://github.com/madler/zlib/issues/410#issuecomment-947212824
- Resolves: #2056900</changelog>
  <changelog author="Matej Mu&#x17E;ila &lt;mmuzila@redhat.com&gt; - 1.2.11-20" date="1660046400">- Fix heap-based buffer over-read or buffer overflow in inflate in inflate.c
- Resolves: CVE-2022-37434</changelog>
  <changelog author="Ilya Leoshkevich &lt;iii@linux.ibm.com&gt; - 1.2.11-21" date="1665576000">- Fix for IBM strm.adler rhbz#2134074</changelog>
</package>
<package pkgid="be55bda2009653aaa5942000f7dee9b711a19c3be757e75aaed16f5d9f95fedf" name="zlib-devel" arch="i686">
  <version epoch="0" ver="1.2.11" rel="21.el8_7"/>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 1.2.11-12" date="1571140800">- fixed covscan issues</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 1.2.11-13" date="1572350400">- Added -DDFLTCC parameter to configure to enable 
- Z hardware-accelerated deflate for s390x architectures (#1659433)</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 1.2.11-14" date="1590408000">- Fix for Z hardware-accelerated deflate for s390x architectures</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 1.2.11-15" date="1592222400">- Another fix for Z hardware-accelerated deflate for s390x architectures</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 1.2.11-16" date="1592222401">- Permit a deflateParams() parameter change
- Another fix for Z hardware-accelerated deflate for s390x architectures
- according to previous change by upstream</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 1.2.11-17" date="1592222402">- Fixed DFLTCC compression level switching issues (#1875492)
- Enabled HW compression for compression levels 1 through 6 (#1847438)
- Fixed inflateSyncPoint() bad return value on z15 (#1888930)</changelog>
  <changelog author="Matej Mu&#x17E;ila &lt;mmuzila@redhat.com&gt; - 1.2.11-18" date="1648555200">- Resolves: CVE-2018-25032</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 1.2.11-19" date="1652702400">- Apply IBM patch for compressBound() function
- Source from https://github.com/madler/zlib/issues/410#issuecomment-947212824
- Resolves: #2056900</changelog>
  <changelog author="Matej Mu&#x17E;ila &lt;mmuzila@redhat.com&gt; - 1.2.11-20" date="1660046400">- Fix heap-based buffer over-read or buffer overflow in inflate in inflate.c
- Resolves: CVE-2022-37434</changelog>
  <changelog author="Ilya Leoshkevich &lt;iii@linux.ibm.com&gt; - 1.2.11-21" date="1665576000">- Fix for IBM strm.adler rhbz#2134074</changelog>
</package>
<package pkgid="f71c7c5722dbbd7f624b2d0d0b3439b46ba8c79db73dec92405b6a28aeab5299" name="zlib-devel" arch="x86_64">
  <version epoch="0" ver="1.2.11" rel="21.el8_7"/>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 1.2.11-12" date="1571140800">- fixed covscan issues</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 1.2.11-13" date="1572350400">- Added -DDFLTCC parameter to configure to enable 
- Z hardware-accelerated deflate for s390x architectures (#1659433)</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 1.2.11-14" date="1590408000">- Fix for Z hardware-accelerated deflate for s390x architectures</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 1.2.11-15" date="1592222400">- Another fix for Z hardware-accelerated deflate for s390x architectures</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 1.2.11-16" date="1592222401">- Permit a deflateParams() parameter change
- Another fix for Z hardware-accelerated deflate for s390x architectures
- according to previous change by upstream</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 1.2.11-17" date="1592222402">- Fixed DFLTCC compression level switching issues (#1875492)
- Enabled HW compression for compression levels 1 through 6 (#1847438)
- Fixed inflateSyncPoint() bad return value on z15 (#1888930)</changelog>
  <changelog author="Matej Mu&#x17E;ila &lt;mmuzila@redhat.com&gt; - 1.2.11-18" date="1648555200">- Resolves: CVE-2018-25032</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 1.2.11-19" date="1652702400">- Apply IBM patch for compressBound() function
- Source from https://github.com/madler/zlib/issues/410#issuecomment-947212824
- Resolves: #2056900</changelog>
  <changelog author="Matej Mu&#x17E;ila &lt;mmuzila@redhat.com&gt; - 1.2.11-20" date="1660046400">- Fix heap-based buffer over-read or buffer overflow in inflate in inflate.c
- Resolves: CVE-2022-37434</changelog>
  <changelog author="Ilya Leoshkevich &lt;iii@linux.ibm.com&gt; - 1.2.11-21" date="1665576000">- Fix for IBM strm.adler rhbz#2134074</changelog>
</package>
</otherdata>