<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="192">
<package pkgid="9a7427ae5f0a1962387f2e38983d4d5d2b77db11b777265900fc5dd86e7bd048" name="babeltrace" arch="src">
  <version epoch="0" ver="1.2.4" rel="3.el7"/>
  <changelog author="Yannick Brosseau &lt;yannick.brosseau@gmail.com&gt; - 1.1.1-3" date="1375704000">- Remove reference to versionned docdir (#992011)</changelog>
  <changelog author="Suchakra Sharma &lt;suchakra@fedoraproject.org&gt; - 1.2.0-1" date="1393675200">- New upstream release
- Popt patch for babeltrace.pc.in removed. Its fixed in Fedora now
- Add new file (babeltrace-ctf.pc)</changelog>
  <changelog author="Yannick Brosseau &lt;yannick.brosseau@gmail.com&gt; - 1.2.1-1" date="1395921600">- New upstream release</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.2.1-2" date="1402142400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.2.1-3" date="1408104000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.2.1-4" date="1434542400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; 1.2.1-5" date="1437307200">- Fix FTBFS, use %license</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; 1.2.4.1" date="1437307201">- Update to 1.2.4</changelog>
  <changelog author="Michael Jeanson &lt;mjeanson@gmail.com&gt; - 1.2.4-2" date="1438084800">- Added python3 bindings module</changelog>
  <changelog author="Ken Dreyer &lt;kdreyer@redhat.com&gt; - 1.2.4-3" date="1438862400">- Add with_python3 macro to support EL7 (rhbz#1235466)
- Define _pkgdocdir to support EL7 (rhbz#1235466)</changelog>
</package>
<package pkgid="36118da343c0d803ae1dce1dc2277d893f0a520cd34e1f327eaba2dd36c1b737" name="babeltrace" arch="x86_64">
  <version epoch="0" ver="1.2.4" rel="3.el7"/>
  <changelog author="Yannick Brosseau &lt;yannick.brosseau@gmail.com&gt; - 1.1.1-3" date="1375704000">- Remove reference to versionned docdir (#992011)</changelog>
  <changelog author="Suchakra Sharma &lt;suchakra@fedoraproject.org&gt; - 1.2.0-1" date="1393675200">- New upstream release
- Popt patch for babeltrace.pc.in removed. Its fixed in Fedora now
- Add new file (babeltrace-ctf.pc)</changelog>
  <changelog author="Yannick Brosseau &lt;yannick.brosseau@gmail.com&gt; - 1.2.1-1" date="1395921600">- New upstream release</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.2.1-2" date="1402142400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.2.1-3" date="1408104000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.2.1-4" date="1434542400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; 1.2.1-5" date="1437307200">- Fix FTBFS, use %license</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; 1.2.4.1" date="1437307201">- Update to 1.2.4</changelog>
  <changelog author="Michael Jeanson &lt;mjeanson@gmail.com&gt; - 1.2.4-2" date="1438084800">- Added python3 bindings module</changelog>
  <changelog author="Ken Dreyer &lt;kdreyer@redhat.com&gt; - 1.2.4-3" date="1438862400">- Add with_python3 macro to support EL7 (rhbz#1235466)
- Define _pkgdocdir to support EL7 (rhbz#1235466)</changelog>
</package>
<package pkgid="43fd79261a550a3b011cd4b47313527b95c5a8234f40d5db1cbf4382f13e5c12" name="babeltrace-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.2.4" rel="3.el7"/>
  <changelog author="Yannick Brosseau &lt;yannick.brosseau@gmail.com&gt; - 1.1.1-3" date="1375704000">- Remove reference to versionned docdir (#992011)</changelog>
  <changelog author="Suchakra Sharma &lt;suchakra@fedoraproject.org&gt; - 1.2.0-1" date="1393675200">- New upstream release
- Popt patch for babeltrace.pc.in removed. Its fixed in Fedora now
- Add new file (babeltrace-ctf.pc)</changelog>
  <changelog author="Yannick Brosseau &lt;yannick.brosseau@gmail.com&gt; - 1.2.1-1" date="1395921600">- New upstream release</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.2.1-2" date="1402142400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.2.1-3" date="1408104000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.2.1-4" date="1434542400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; 1.2.1-5" date="1437307200">- Fix FTBFS, use %license</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; 1.2.4.1" date="1437307201">- Update to 1.2.4</changelog>
  <changelog author="Michael Jeanson &lt;mjeanson@gmail.com&gt; - 1.2.4-2" date="1438084800">- Added python3 bindings module</changelog>
  <changelog author="Ken Dreyer &lt;kdreyer@redhat.com&gt; - 1.2.4-3" date="1438862400">- Add with_python3 macro to support EL7 (rhbz#1235466)
- Define _pkgdocdir to support EL7 (rhbz#1235466)</changelog>
</package>
<package pkgid="8914fac7c4c69ed83ebf14d020693ad7f46f12a79204b1661bb1b96890145ed0" name="bpftool" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="2798a151107f677766960ca15c2d7a26ed58f3c8eedcff9104de322fad7f29ab" name="bpftool" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="193.28.1.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.20.1.el8_2]" date="1599134400">- [infiniband] IB/rdmavt: Fix RQ counting issues causing use of an invalid RWQE (Kamal Heib) [1872771 1850314]
- [block] blk-mq: Rerun dispatching in the case of budget contention (Ming Lei) [1869779 1824037]
- [block] blk-mq: Add blk_mq_delay_run_hw_queues() API call (Ming Lei) [1869779 1824037]
- [block] blk-mq: In blk_mq_dispatch_rq_list() "no budget" is a reason to kick (Ming Lei) [1869779 1824037]
- [block] blk-mq: Put driver tag in blk_mq_dispatch_rq_list() when no budget (Ming Lei) [1869779 1824037]
- [md] dm mpath: use double checked locking in fast path (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rename current_pgpath to pgpath in multipath_prepare_ioctl (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rework __map_bio() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: factor out multipath_queue_bio (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: push locking down to must_push_back_rq() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: take m-&gt;lock spinlock when testing QUEUE_IF_NO_PATH (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: changes from initial m-&gt;flags locking audit (Mike Snitzer) [1869386 1848651]
- [md] dm rq: don't call blk_mq_queue_stopped() in dm_stop_queue() (Mike Snitzer) [1869386 1848651]
- [md] dm: do not use waitqueue for request-based DM (Mike Snitzer) [1869386 1848651]
- [block] blk-mq: consider non-idle request as "inflight" in blk_mq_rq_inflight() (Mike Snitzer) [1869386 1848651]
- [kernel] sched/deadline: Initialize -&gt;dl_boosted (Phil Auld) [1867612 1854179]
- [kernel] sched/core: Fix PI boosting between RT and DEADLINE tasks (Phil Auld) [1867612 1854179]
- [net] net/smc: tolerate future SMCD versions (Philipp Rudo) [1866390 1854992]
- [net] openvswitch: fixes potential deadlock in dp cleanup code (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: reorder masks array based on usage (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: take into account de-fragmentation/gso_size in execute_check_pkt_len (Lorenzo Bianconi) [1860169 1851888]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.21.1.el8_2]" date="1599739200">- [scsi] scsi: ibmvfc: Fix NULL return compiler warning (Steve Best) [1866371 1810653]
- [scsi] scsi: ibmvfc: Avoid loss of all paths during SVC node reboot (Steve Best) [1866371 1810653]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.22.1.el8_2]" date="1600257600">- [crypto] pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1877530 1862072]
- [crypto] Revert "pefile: Tolerate other pefile signatures after first" (Bruno Meneguele)
- [infiniband] IB/hfi1: Fix another case where pq is left on waitlist (Kamal Heib) [1872766 1859209]
- [infiniband] IB/hfi1: Ensure pq is not left on waitlist (Kamal Heib) [1872766 1859209]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.23.1.el8_2]" date="1600344000">- [net] packet: fix overflow in tpacket_rcv (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}
- [net] packet: make tp_drops atomic (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.24.1.el8_2]" date="1600862400">- [kernel] timers: Remove must_forward_clk (Phil Auld) [1877417 1833096]
- [kernel] timers: Spare timer softirq until next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Expand clk forward logic beyond nohz (Phil Auld) [1877417 1833096]
- [kernel] timers: Reuse next expiry cache after nohz exit (Phil Auld) [1877417 1833096]
- [kernel] timers: Always keep track of next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Optimize _next_timer_interrupt() level iteration (Phil Auld) [1877417 1833096]
- [kernel] timers: Add comments about calc_index() ceiling work (Phil Auld) [1877417 1833096]
- [kernel] timers: Move trigger_dyntick_cpu() to enqueue_timer() (Phil Auld) [1877417 1833096]
- [kernel] timers: Use only bucket expiry for base-&gt;next_expiry value (Phil Auld) [1877417 1833096]
- [kernel] timers: Preserve higher bits of expiration on index calculation (Phil Auld) [1877417 1833096]
- [kernel] timer: Fix wheel index calculation on last level (Phil Auld) [1877417 1833096]
- [kernel] timer: Prevent base-&gt;clk from moving backward (Phil Auld) [1877417 1833096]
- [kernel] timer: Read jiffies once when forwarding base clk (Phil Auld) [1877417 1833096]
- [infiniband] RDMA/umem: Fix ib_umem_find_best_pgsz() (Kamal Heib) [1872424 1856158]
- [net] net: accept an empty mask in /sys/class/net/*/queues/rx-*/rps_cpus (Nitesh Narayan Lal) [1870181 1868433]
- [net] net: Restrict receive packets queuing to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [pci] PCI: Restrict probe functions to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [lib] lib: Restrict cpumask_local_spread to houskeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [s390] s390/pci: Fix unexpected write combine on resource (Philipp Rudo) [1869276 1827311]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.25.1.el8_2]" date="1601553600">- [net] netfilter: conntrack: proc: rename stat column (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: add clash resolution stat counter (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: remove ignore stats (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not increment two error counters at same time (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not auto-delete clash entries on reply (Florian Westphal) [1882095 1875681]
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1881085 1875316] {CVE-2020-14385}
- [kernel] time/tick-broadcast: Fix tick_broadcast_offline() lockdep complaint (Alexey Klimov) [1880081 1877380]
- [net] atomics/treewide: Rename __atomic_add_unless() =&gt; atomic_fetch_add_unless() (Yauheni Kaliuta) [1880081 1813370]
- [kernel] timers: Lower base clock forwarding threshold (Phil Auld) [1877417 1833096]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.26.1.el8_2]" date="1602158400">- [firmware] efi: don't reserve MOK config table memory region (Kairui Song) [1879988 1878584]
- [security] integrity: Load certs from the EFI MOK config table (Lenny Szubowicz) [1877528 1868306]
- [security] integrity: Move import of MokListRT certs to a separate routine (Lenny Szubowicz) [1877528 1868306]
- [firmware] efi: Support for MOK variable config table (Lenny Szubowicz) [1877528 1868306]
- [security] efi: Only print errors about failing to get certs if EFI vars are found (Lenny Szubowicz) [1877528 1804969]
- [fs] ceph: fix inode number handling on arches with 32-bit ino_t (Jeff Layton) [1875787 1866018]
- [fs] ceph: handle zero-length feature mask in session messages (Jeff Layton) [1875787 1866018]
- [fs] ceph: fix endianness bug when handling MDS session feature bits (Jeff Layton) [1875787 1866018]
- [netdrv] net/mlx5e: Fix missing cleanup of ethtool steering during rep rx cleanup (Alaa Hleihel) [1857777 1856660]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.27.1.el8_2]" date="1602763200">- [powerpc] powerpc/pseries: Do not initiate shutdown when system is running on UPS (Diego Domingos) [1882243 1870477]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859471 1859472] {CVE-2020-14331}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.28.1.el8_2]" date="1602849600">- [net] Bluetooth: L2CAP: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888256 1888258] {CVE-2020-12351}
- [net] Bluetooth: A2MP: Fix not initializing all members (Gopal Tiwari) [1888906 1888807] {CVE-2020-12352}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-193.28.1.el8.centos" date="1603195200">- Apply debranding changes</changelog>
</package>
<package pkgid="4199a8264045da08976b4d1efed89d6f38ee31a1403290a4daa5dca92361b7dd" name="bpftool" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="305.10.2.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.2.1.el8_4]" date="1620648000">- net/mlx5e: Allow to match on MPLS parameters only for MPLS over UDP (Alaa Hleihel) [1952061 1936742]
- net/mlx5e: Reject tc rules which redirect from a VF to itself (Alaa Hleihel) [1952065 1932839]
- net/mlx5: CT: Add support for matching on ct_state inv and rel flags (Alaa Hleihel) [1952062 1942681]
- KVM: VMX: Don't use vcpu-&gt;run-&gt;internal.ndata as an array index (Jon Maloy) [1954221 1954219]
- tools/power turbostat: Revert "[tools] tools/power turbostat: Enable accumulate RAPL display" (Prarit Bhargava) [1952987 1944699]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.3.1.el8_4]" date="1621252800">- Revert "uio: use request_threaded_irq instead" (Vitaly Kuznetsov) [1952952 1946644]
- drm/ast: Set format registers in primary plane's update (Lyude Paul) [1952900 1923857]
- net/sched: act_ct: clear post_ct if doing ct_clear (Marcelo Ricardo Leitner) [1956458 1941889]
- md/raid1: properly indicate failure when ending a failed write request (Nigel Croxon) [1955188 1954588]
- nitro_enclaves: Fix stale file descriptors on failed usercopy (Vitaly Kuznetsov) [1956379 1953717]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.4.1.el8_4]" date="1621944000">- vmxnet3: Set the default of vxlan overlay offload to disabled (Cathy Avery) [1960702 1941714]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.5.1.el8_4]" date="1622548800">- gfs2: report "already frozen/thawed" errors (Bob Peterson) [1961849 1932236]
- gfs2: move freeze glock outside the make_fs_rw and _ro functions (Bob Peterson) [1961849 1932236]
- gfs2: Add common helper for holding and releasing the freeze glock (Bob Peterson) [1961849 1932236]
- gfs2: in signal_our_withdraw wait for unfreeze of _this_ fs only (Bob Peterson) [1961849 1932236]
- gfs2: Don't freeze the file system during unmount (Bob Peterson) [1961849 1932236]
- gfs2: Fix regression in freeze_go_sync (Bob Peterson) [1961849 1932236]
- gfs2: The freeze glock should never be frozen (Bob Peterson) [1961849 1932236]
- gfs2: When freezing gfs2, use GL_EXACT and not GL_NOCACHE (Bob Peterson) [1961849 1932236]
- gfs2: read-only mounts should grab the sd_freeze_gl glock (Bob Peterson) [1961849 1932236]
- gfs2: freeze should work on read-only mounts (Bob Peterson) [1961849 1932236]
- gfs2: Abort gfs2_freeze if io error is seen (Bob Peterson) [1961849 1932236]
- CI: Disable result checking for realtime check (Veronika Kabatova)
- CI: Explicitly disable result checking for private CI (Veronika Kabatova)
- CI: Rename variable (Veronika Kabatova)
- CI: Update builder containers (Veronika Kabatova)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.6.1.el8_4]" date="1623067200">- openvswitch: fix stack OOB read while fragmenting IPv4 packets (Davide Caratti) [1963940 1924608]
- net/sched: sch_frag: fix stack OOB read while fragmenting IPv4 packets (Davide Caratti) [1963940 1924608]
- net/sched: act_ct: fix wild memory access when clearing fragments (Davide Caratti) [1963940 1924608]
- net: Treat __napi_schedule_irqoff() as __napi_schedule() on PREEMPT_RT (Ivan Vecera)
- redhat/configs: Add CONFIG_SYSTEM_REVOCATION_KEYS and CONFIG_SYSTEM_REVOCATION_LIST (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: add 'x509_revocation_list' to gitignore (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- integrity: Load mokx variables into the blacklist keyring (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Add ability to preload revocation certs (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Move load_system_certificate_list to a common function (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Add EFI_CERT_X509_GUID support for dbx entries (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- net/sched: cls_api: increase max_reclassify_loop (Davide Caratti) [1965148 1955136]
- dm writecache: fix performance degradation in ssd mode (Mike Snitzer) [1962241 1961859]
- scsi: fnic: Use scsi_host_busy_iter() to traverse commands (Ewan D. Milne) [1961705 1949250]
- scsi: fnic: Kill 'exclude_id' argument to fnic_cleanup_io() (Ewan D. Milne) [1961705 1949250]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.7.1.el8_4]" date="1623672000">- net: zero-initialize tc skb extension on allocation (Ivan Vecera) [1965457 1946986]
- net/sched: cls_flower: fix only mask bit check in the validate_ct_state (Ivan Vecera) [1965457 1946986]
- net: cls_api: Fix uninitialised struct field bo-&gt;unlocked_driver_cb (Ivan Vecera) [1965457 1946986]
- net/sched: act_api: fix miss set post_ct for ovs after do conntrack in act_ct (Ivan Vecera) [1965457 1946986]
- net/sched: cls_flower: validate ct_state for invalid and reply flags (Ivan Vecera) [1965457 1946986]
- flow_dissector: fix TTL and TOS dissection on IPv4 fragments (Paolo Abeni) [1963952 1950288]
- Revert "sctp: Fix SHUTDOWN CTSN Ack in the peer restart case" (Xin Long) [1965632 1953839]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [1965632 1953839]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [1965632 1953839]
- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962544 1962546] {CVE-2021-33034}
- x86/kvm: Unify kvm_pv_guest_cpu_reboot() with kvm_guest_cpu_offline() (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Disable all PV features on crash (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Disable kvmclock on all CPUs on shutdown (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Teardown PV features on boot CPU as well (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Fix pr_info() for async PF setup/teardown (Lenny Szubowicz) [1964930 1934273]
- net/sched: act_ct: Fix ct template allocation for zone 0 (Marcelo Ricardo Leitner) [1965150 1881824]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.8.1.el8_4]" date="1624363200">- iavf: amend removal of MODULE_VERSION (Stefan Assmann) [1969925 1955738]
- ixgbe: Amend commit acf03026ec5a to include a version string in module info. (Ken Cox) [1969922 1955759]
- i40e: amend removal of MODULE_VERSION (Stefan Assmann) [1969923 1955736]
- redhat/configs: Add CONFIG_PINCTRL_EMMITSBURG (David Arcari) [1963984 1959506]
- redhat/configs: Remove CONFIG_EMMITSBURG (David Arcari) [1963984 1959506]
- netlink: add tracepoint at NL_SET_ERR_MSG (Marcelo Ricardo Leitner) [1972938 1956983]
- Revert "[netdrv] net/intel: remove driver versions from Intel drivers" (Jonathan Toppins) [1969917 1955745]
- Amends commit ea6244cc248b to include a version string in module info. (Ken Cox) [1969915 1955726]
- Revert "[netdrv] net/broadcom: Clean broadcom code from driver versions" (Jonathan Toppins) [1969914 1955721]
- ena: revert removal of MODULE_VERSION from ena (Petr Oros) [1969913 1955712]
- fm10k: amend removal of MODULE_VERSION (Vladis Dronov) [1969910 1955730]
- net/sched: act_ct: Offload connections with commit action (Marcelo Ricardo Leitner) [1968679 1965817]
- netfilter: flowtable: Remove redundant hw refresh bit (Marcelo Ricardo Leitner) [1968679 1965817]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.9.1.el8_4]" date="1624881600">- ixgbevf: Amend commit acf03026ec5a to include a version in module info. (Ken Cox) [1969911 1955764]
- CI: Merge configuration (Veronika Kabatova)
- igc: amend removal of MODULE_VERSION (Corinna Vinschen) [1969921 1955755]
- igb: amend removal of MODULE_VERSION (Corinna Vinschen) [1969919 1955748]
- locking/qrwlock: Fix ordering in queued_write_lock_slowpath() (Waiman Long) [1964419 1950110]
- scsi: qedf: Do not put host in qedf_vport_create() unconditionally (Nilesh Javali) [1974968 1899384]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.10.1.el8_4]" date="1625659200">- igbvf: amend removal of MODULE_VERSION (Corinna Vinschen) [1969920 1955752]
- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971464 1971488] {CVE-2021-32399}
- scsi: ibmvfc: Free channel_setup_buf during device tear down (Steve Best) [1964697 1938102]
- i40e: Fix parameters in aq_get_phy_register() (Stefan Assmann) [1967099 1907852]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.10.2.el8_4]" date="1626091200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975181 1975182] {CVE-2021-33909}</changelog>
</package>
<package pkgid="43a5f0c594a0cf1ac01053817c16b6c8ab9d108d2c3bb53d90e95b32016cf8fc" name="bpftool" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="348.20.1.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.12.1.el8_5]" date="1641988800">- tcp: don't free a FIN sk_buff in tcp_remove_empty_skb() (Guillaume Nault) [2021574 2016210]
- kernel.spec: Add support to use vmlinux.h (Jiri Olsa) [2031053 1989087]
- spec: Add vmlinux.h to kernel-devel package (Jiri Olsa) [2031053 1989087]
- x86/mce: Avoid infinite loop for copy from user recovery (Prarit Bhargava) [2008789 1999550]
- x86/mce: Rename kill_it to kill_current_task (Prarit Bhargava) [2008789 1999550]
- x86/mce: Recover from poison found while copying from user space (Prarit Bhargava) [2008789 1999550]
- x86/mce: Delay clearing IA32_MCG_STATUS to the end of do_machine_check() (Prarit Bhargava) [2008789 1999550]
- x86/mce: Send #MC singal from task work (Prarit Bhargava) [2008789 1999550]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-348.13.1.el8_5]" date="1642507200">- vfs: Out-of-bounds write of heap buffer in fs_context.c (Frantisek Hrbata) [2040585 2040586] {CVE-2022-0185}
- xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Bruno Meneguele) [2034864 2034865] {CVE-2021-4155}
- af_unix: fix garbage collect vs MSG_PEEK (Patrick Talbert) [2031974 2031975] {CVE-2021-0920}
- cgroup: verify that source is a string (Waiman Long) [2034608 2034609] {CVE-2021-4154}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-348.14.1.el8_5]" date="1643198400">- tcp: fix page frag corruption on page fault (Paolo Abeni) [2041529 1996074]
- net: fix sk_page_frag() recursion from memory reclaim (Paolo Abeni) [2041529 1996074]
- KVM: s390: index kvm-&gt;arch.idle_mask by vcpu_idx (Thomas Huth) [2040769 2026230]
- redhat: set LC_ALL=C before sorting config content (Frantisek Hrbata)</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.15.1.el8_5]" date="1643716800">- net/mlx5: DR, Use FW API when updating FW-owned flow table (Michal Schmidt) [2042663 2042651]
- KVM: x86: Wait for IPIs to be delivered when handling Hyper-V TLB flush hypercall (Vitaly Kuznetsov) [2043237 1868572]
- drm/mgag200: Select clock in PLL update functions (Bruno Meneguele) [2034949 1953926]
- drm/i915: Fix HAS_LSPCON macro for platforms between GEN9 and GEN10 (Bruno Meneguele) [2027335 2005586]
- crypto: qat - power up 4xxx device (Vladis Dronov) [2016437 1960307]
- RDMA/core: Fix a double free in add_port error flow (Kamal Heib) [2038724 2008555]
- powerpc/iommu: Report the correct most efficient DMA mask for PCI devices (Steve Best) [2018928 2007425]
- powerpc/dma: Fix dma_map_ops::get_required_mask (Steve Best) [2018928 2007425]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.16.1.el8_5]" date="1644321600">- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047601 2047602] {CVE-2022-22942}
- net: openvswitch: Fix ct_state nat flags for conns arriving from tc (Marcelo Ricardo Leitner) [2043548 2040334]
- net: openvswitch: Fix matching zone id for invalid conns arriving from tc (Marcelo Ricardo Leitner) [2043550 2040452]
- net/sched: flow_dissector: Fix matching on zone id for invalid conns (Marcelo Ricardo Leitner) [2043550 2040452]
- net/sched: Extend qdisc control block with tc control block (Marcelo Ricardo Leitner) [2043550 2040452]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.17.1.el8_5]" date="1644926400">- vfs: check dentry is still valid in get_link() (Ian Kent) [2052558 2014846]
- xfs: don't expose internal symlink metadata buffers to the vfs (Brian Foster) [2052558 2014846]
- CI: Use appropriate zstream builder (Veronika Kabatova)
- CI: Enable baseline realtime checks (Veronika Kabatova)
- CI: Rename pipelines to include release names (Veronika Kabatova)
- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052166 2052167] {CVE-2022-0492}
- ice: Remove boolean vlan_promisc flag from function (Jonathan Toppins) [2051951 2030400]
- ceph: put the requests/sessions when it fails to alloc memory (Jeffrey Layton) [2053725 2017796]
- ceph: fix off by one bugs in unsafe_request_wait() (Jeffrey Layton) [2053725 2017796]
- ceph: flush the mdlog before waiting on unsafe reqs (Jeffrey Layton) [2053725 2017796]
- ceph: flush mdlog before umounting (Jeffrey Layton) [2053725 2017796]
- ceph: make iterate_sessions a global symbol (Jeffrey Layton) [2053725 2017796]
- ceph: make ceph_create_session_msg a global symbol (Jeffrey Layton) [2053725 2017796]
- xfs: check sb_meta_uuid for dabuf buffer recovery (Bill O'Donnell) [2049292 2020764]
- drm/i915: Flush TLBs before releasing backing store (Patrick Talbert) [2044328 2044329] {CVE-2022-0330}
- hugetlb: fix hugetlb cgroup refcounting during vma split (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: fix imbalanced css_get and css_put pair for shared mappings (Waiman Long) [2039015 2032811]
- mm/hugetlb: change hugetlb_reserve_pages() to type bool (Waiman Long) [2039015 2032811]
- hugetlb: fix an error code in hugetlb_reserve_pages() (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: fix offline of hugetlb cgroup with reservations (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: fix reservation accounting (Waiman Long) [2039015 2032811]
- mm/hugetlb: narrow the hugetlb_lock protection area during preparing huge page (Waiman Long) [2039015 2032811]
- mm/hugetlb: a page from buddy is not on any list (Waiman Long) [2039015 2032811]
- mm/hugetlb: not necessary to coalesce regions recursively (Waiman Long) [2039015 2032811]
- selftests/vm/write_to_hugetlbfs.c: fix unused variable warning (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add hugetlb_cgroup reservation tests (Waiman Long) [2039015 2032811]
- hugetlb: support file_region coalescing again (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: support noreserve mappings (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add accounting for shared mappings (Waiman Long) [2039015 2032811]
- hugetlb: disable region_add file_region coalescing (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add reservation accounting for private mappings (Waiman Long) [2039015 2032811]
- mm/hugetlb_cgroup: fix hugetlb_cgroup migration (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add interface for charge/uncharge hugetlb reservations (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add hugetlb_cgroup reservation counter (Waiman Long) [2039015 2032811]
- hugetlb: remove duplicated code (Waiman Long) [2039015 2032811]
- hugetlb: region_chg provides only cache entry (Waiman Long) [2039015 2032811]
- hugetlbfs: always use address space in inode for resv_map pointer (Waiman Long) [2039015 2032811]
- hugetlbfs: fix potential over/underflow setting node specific nr_hugepages (Waiman Long) [2039015 2032811]
- hugetlb: allow to free gigantic pages regardless of the configuration (Waiman Long) [2039015 2032811]
- powerpc/pseries: Fix update of LPAR security flavor after LPM (Steve Best) [2027448 1997294]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.18.1.el8_5]" date="1645531200">- selftests: kvm: Check whether SIDA memop fails for normal guests (Thomas Huth) [2050806 2050807] {CVE-2022-0516}
- KVM: s390: Return error on SIDA memop on normal guest (Thomas Huth) [2050806 2050807] {CVE-2022-0516}
- iommu/amd: Remove iommu_init_ga() (Jerry Snitselaar) [2030854 1998265]
- iommu/amd: Relocate GAMSup check to early_enable_iommus (Jerry Snitselaar) [2030854 1998265]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.19.1.el8_5]" date="1646049600">- tipc: improve size validations for received domain records (Xin Long) [2048970 2048971] {CVE-2022-0435}
- smb3: do not error on fsync when readonly (Ronnie Sahlberg) [2055824 2037811]
- security: implement sctp_assoc_established hook in selinux (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- security: add sctp_assoc_established hook (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- security: call security_sctp_assoc_request in sctp_sf_do_5_1D_ce (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- security: pass asoc to sctp_assoc_request and sctp_sk_clone (Bruno Meneguele) [2054112 2054117 2015525 2048251]
- net: sctp: Fix some typos (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- RDMA/bnxt_re: Fix stats counters (Selvin Xavier) [2049684 2001893]
- net: check skb sec_path when re-initializing slow_gro in gro_list_prepare (Xin Long) [2047427 2030476]
- cpufreq: intel_pstate: Add Icelake servers support in no-HWP mode (David Arcari) [2036888 2003695]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.20.1.el8_5]" date="1646740800">- lib/iov_iter: initialize "flags" in new pipe_buffer (Jan Stancek) [2060874 2060875] {CVE-2022-0847}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-348.20.1.el8.centos" date="1646913600">- Apply debranding changes</changelog>
</package>
<package pkgid="8f095a60563f717c20bd439800e025fcaa902795c02919716d8f2da08170b338" name="bpftool-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="cc402cc9092d5c23ad4f52f28231e7b2fbf7469d71152c9697d318d23ba83df0" name="bpftool-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="193.28.1.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.20.1.el8_2]" date="1599134400">- [infiniband] IB/rdmavt: Fix RQ counting issues causing use of an invalid RWQE (Kamal Heib) [1872771 1850314]
- [block] blk-mq: Rerun dispatching in the case of budget contention (Ming Lei) [1869779 1824037]
- [block] blk-mq: Add blk_mq_delay_run_hw_queues() API call (Ming Lei) [1869779 1824037]
- [block] blk-mq: In blk_mq_dispatch_rq_list() "no budget" is a reason to kick (Ming Lei) [1869779 1824037]
- [block] blk-mq: Put driver tag in blk_mq_dispatch_rq_list() when no budget (Ming Lei) [1869779 1824037]
- [md] dm mpath: use double checked locking in fast path (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rename current_pgpath to pgpath in multipath_prepare_ioctl (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rework __map_bio() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: factor out multipath_queue_bio (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: push locking down to must_push_back_rq() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: take m-&gt;lock spinlock when testing QUEUE_IF_NO_PATH (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: changes from initial m-&gt;flags locking audit (Mike Snitzer) [1869386 1848651]
- [md] dm rq: don't call blk_mq_queue_stopped() in dm_stop_queue() (Mike Snitzer) [1869386 1848651]
- [md] dm: do not use waitqueue for request-based DM (Mike Snitzer) [1869386 1848651]
- [block] blk-mq: consider non-idle request as "inflight" in blk_mq_rq_inflight() (Mike Snitzer) [1869386 1848651]
- [kernel] sched/deadline: Initialize -&gt;dl_boosted (Phil Auld) [1867612 1854179]
- [kernel] sched/core: Fix PI boosting between RT and DEADLINE tasks (Phil Auld) [1867612 1854179]
- [net] net/smc: tolerate future SMCD versions (Philipp Rudo) [1866390 1854992]
- [net] openvswitch: fixes potential deadlock in dp cleanup code (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: reorder masks array based on usage (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: take into account de-fragmentation/gso_size in execute_check_pkt_len (Lorenzo Bianconi) [1860169 1851888]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.21.1.el8_2]" date="1599739200">- [scsi] scsi: ibmvfc: Fix NULL return compiler warning (Steve Best) [1866371 1810653]
- [scsi] scsi: ibmvfc: Avoid loss of all paths during SVC node reboot (Steve Best) [1866371 1810653]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.22.1.el8_2]" date="1600257600">- [crypto] pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1877530 1862072]
- [crypto] Revert "pefile: Tolerate other pefile signatures after first" (Bruno Meneguele)
- [infiniband] IB/hfi1: Fix another case where pq is left on waitlist (Kamal Heib) [1872766 1859209]
- [infiniband] IB/hfi1: Ensure pq is not left on waitlist (Kamal Heib) [1872766 1859209]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.23.1.el8_2]" date="1600344000">- [net] packet: fix overflow in tpacket_rcv (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}
- [net] packet: make tp_drops atomic (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.24.1.el8_2]" date="1600862400">- [kernel] timers: Remove must_forward_clk (Phil Auld) [1877417 1833096]
- [kernel] timers: Spare timer softirq until next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Expand clk forward logic beyond nohz (Phil Auld) [1877417 1833096]
- [kernel] timers: Reuse next expiry cache after nohz exit (Phil Auld) [1877417 1833096]
- [kernel] timers: Always keep track of next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Optimize _next_timer_interrupt() level iteration (Phil Auld) [1877417 1833096]
- [kernel] timers: Add comments about calc_index() ceiling work (Phil Auld) [1877417 1833096]
- [kernel] timers: Move trigger_dyntick_cpu() to enqueue_timer() (Phil Auld) [1877417 1833096]
- [kernel] timers: Use only bucket expiry for base-&gt;next_expiry value (Phil Auld) [1877417 1833096]
- [kernel] timers: Preserve higher bits of expiration on index calculation (Phil Auld) [1877417 1833096]
- [kernel] timer: Fix wheel index calculation on last level (Phil Auld) [1877417 1833096]
- [kernel] timer: Prevent base-&gt;clk from moving backward (Phil Auld) [1877417 1833096]
- [kernel] timer: Read jiffies once when forwarding base clk (Phil Auld) [1877417 1833096]
- [infiniband] RDMA/umem: Fix ib_umem_find_best_pgsz() (Kamal Heib) [1872424 1856158]
- [net] net: accept an empty mask in /sys/class/net/*/queues/rx-*/rps_cpus (Nitesh Narayan Lal) [1870181 1868433]
- [net] net: Restrict receive packets queuing to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [pci] PCI: Restrict probe functions to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [lib] lib: Restrict cpumask_local_spread to houskeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [s390] s390/pci: Fix unexpected write combine on resource (Philipp Rudo) [1869276 1827311]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.25.1.el8_2]" date="1601553600">- [net] netfilter: conntrack: proc: rename stat column (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: add clash resolution stat counter (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: remove ignore stats (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not increment two error counters at same time (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not auto-delete clash entries on reply (Florian Westphal) [1882095 1875681]
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1881085 1875316] {CVE-2020-14385}
- [kernel] time/tick-broadcast: Fix tick_broadcast_offline() lockdep complaint (Alexey Klimov) [1880081 1877380]
- [net] atomics/treewide: Rename __atomic_add_unless() =&gt; atomic_fetch_add_unless() (Yauheni Kaliuta) [1880081 1813370]
- [kernel] timers: Lower base clock forwarding threshold (Phil Auld) [1877417 1833096]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.26.1.el8_2]" date="1602158400">- [firmware] efi: don't reserve MOK config table memory region (Kairui Song) [1879988 1878584]
- [security] integrity: Load certs from the EFI MOK config table (Lenny Szubowicz) [1877528 1868306]
- [security] integrity: Move import of MokListRT certs to a separate routine (Lenny Szubowicz) [1877528 1868306]
- [firmware] efi: Support for MOK variable config table (Lenny Szubowicz) [1877528 1868306]
- [security] efi: Only print errors about failing to get certs if EFI vars are found (Lenny Szubowicz) [1877528 1804969]
- [fs] ceph: fix inode number handling on arches with 32-bit ino_t (Jeff Layton) [1875787 1866018]
- [fs] ceph: handle zero-length feature mask in session messages (Jeff Layton) [1875787 1866018]
- [fs] ceph: fix endianness bug when handling MDS session feature bits (Jeff Layton) [1875787 1866018]
- [netdrv] net/mlx5e: Fix missing cleanup of ethtool steering during rep rx cleanup (Alaa Hleihel) [1857777 1856660]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.27.1.el8_2]" date="1602763200">- [powerpc] powerpc/pseries: Do not initiate shutdown when system is running on UPS (Diego Domingos) [1882243 1870477]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859471 1859472] {CVE-2020-14331}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.28.1.el8_2]" date="1602849600">- [net] Bluetooth: L2CAP: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888256 1888258] {CVE-2020-12351}
- [net] Bluetooth: A2MP: Fix not initializing all members (Gopal Tiwari) [1888906 1888807] {CVE-2020-12352}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-193.28.1.el8.centos" date="1603195200">- Apply debranding changes</changelog>
</package>
<package pkgid="e17b2301c70a572017c4ffb0d9c7901c13e2596adc6467afa9b1d00a3e81d510" name="bpftool-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="305.10.2.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.2.1.el8_4]" date="1620648000">- net/mlx5e: Allow to match on MPLS parameters only for MPLS over UDP (Alaa Hleihel) [1952061 1936742]
- net/mlx5e: Reject tc rules which redirect from a VF to itself (Alaa Hleihel) [1952065 1932839]
- net/mlx5: CT: Add support for matching on ct_state inv and rel flags (Alaa Hleihel) [1952062 1942681]
- KVM: VMX: Don't use vcpu-&gt;run-&gt;internal.ndata as an array index (Jon Maloy) [1954221 1954219]
- tools/power turbostat: Revert "[tools] tools/power turbostat: Enable accumulate RAPL display" (Prarit Bhargava) [1952987 1944699]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.3.1.el8_4]" date="1621252800">- Revert "uio: use request_threaded_irq instead" (Vitaly Kuznetsov) [1952952 1946644]
- drm/ast: Set format registers in primary plane's update (Lyude Paul) [1952900 1923857]
- net/sched: act_ct: clear post_ct if doing ct_clear (Marcelo Ricardo Leitner) [1956458 1941889]
- md/raid1: properly indicate failure when ending a failed write request (Nigel Croxon) [1955188 1954588]
- nitro_enclaves: Fix stale file descriptors on failed usercopy (Vitaly Kuznetsov) [1956379 1953717]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.4.1.el8_4]" date="1621944000">- vmxnet3: Set the default of vxlan overlay offload to disabled (Cathy Avery) [1960702 1941714]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.5.1.el8_4]" date="1622548800">- gfs2: report "already frozen/thawed" errors (Bob Peterson) [1961849 1932236]
- gfs2: move freeze glock outside the make_fs_rw and _ro functions (Bob Peterson) [1961849 1932236]
- gfs2: Add common helper for holding and releasing the freeze glock (Bob Peterson) [1961849 1932236]
- gfs2: in signal_our_withdraw wait for unfreeze of _this_ fs only (Bob Peterson) [1961849 1932236]
- gfs2: Don't freeze the file system during unmount (Bob Peterson) [1961849 1932236]
- gfs2: Fix regression in freeze_go_sync (Bob Peterson) [1961849 1932236]
- gfs2: The freeze glock should never be frozen (Bob Peterson) [1961849 1932236]
- gfs2: When freezing gfs2, use GL_EXACT and not GL_NOCACHE (Bob Peterson) [1961849 1932236]
- gfs2: read-only mounts should grab the sd_freeze_gl glock (Bob Peterson) [1961849 1932236]
- gfs2: freeze should work on read-only mounts (Bob Peterson) [1961849 1932236]
- gfs2: Abort gfs2_freeze if io error is seen (Bob Peterson) [1961849 1932236]
- CI: Disable result checking for realtime check (Veronika Kabatova)
- CI: Explicitly disable result checking for private CI (Veronika Kabatova)
- CI: Rename variable (Veronika Kabatova)
- CI: Update builder containers (Veronika Kabatova)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.6.1.el8_4]" date="1623067200">- openvswitch: fix stack OOB read while fragmenting IPv4 packets (Davide Caratti) [1963940 1924608]
- net/sched: sch_frag: fix stack OOB read while fragmenting IPv4 packets (Davide Caratti) [1963940 1924608]
- net/sched: act_ct: fix wild memory access when clearing fragments (Davide Caratti) [1963940 1924608]
- net: Treat __napi_schedule_irqoff() as __napi_schedule() on PREEMPT_RT (Ivan Vecera)
- redhat/configs: Add CONFIG_SYSTEM_REVOCATION_KEYS and CONFIG_SYSTEM_REVOCATION_LIST (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: add 'x509_revocation_list' to gitignore (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- integrity: Load mokx variables into the blacklist keyring (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Add ability to preload revocation certs (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Move load_system_certificate_list to a common function (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Add EFI_CERT_X509_GUID support for dbx entries (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- net/sched: cls_api: increase max_reclassify_loop (Davide Caratti) [1965148 1955136]
- dm writecache: fix performance degradation in ssd mode (Mike Snitzer) [1962241 1961859]
- scsi: fnic: Use scsi_host_busy_iter() to traverse commands (Ewan D. Milne) [1961705 1949250]
- scsi: fnic: Kill 'exclude_id' argument to fnic_cleanup_io() (Ewan D. Milne) [1961705 1949250]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.7.1.el8_4]" date="1623672000">- net: zero-initialize tc skb extension on allocation (Ivan Vecera) [1965457 1946986]
- net/sched: cls_flower: fix only mask bit check in the validate_ct_state (Ivan Vecera) [1965457 1946986]
- net: cls_api: Fix uninitialised struct field bo-&gt;unlocked_driver_cb (Ivan Vecera) [1965457 1946986]
- net/sched: act_api: fix miss set post_ct for ovs after do conntrack in act_ct (Ivan Vecera) [1965457 1946986]
- net/sched: cls_flower: validate ct_state for invalid and reply flags (Ivan Vecera) [1965457 1946986]
- flow_dissector: fix TTL and TOS dissection on IPv4 fragments (Paolo Abeni) [1963952 1950288]
- Revert "sctp: Fix SHUTDOWN CTSN Ack in the peer restart case" (Xin Long) [1965632 1953839]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [1965632 1953839]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [1965632 1953839]
- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962544 1962546] {CVE-2021-33034}
- x86/kvm: Unify kvm_pv_guest_cpu_reboot() with kvm_guest_cpu_offline() (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Disable all PV features on crash (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Disable kvmclock on all CPUs on shutdown (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Teardown PV features on boot CPU as well (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Fix pr_info() for async PF setup/teardown (Lenny Szubowicz) [1964930 1934273]
- net/sched: act_ct: Fix ct template allocation for zone 0 (Marcelo Ricardo Leitner) [1965150 1881824]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.8.1.el8_4]" date="1624363200">- iavf: amend removal of MODULE_VERSION (Stefan Assmann) [1969925 1955738]
- ixgbe: Amend commit acf03026ec5a to include a version string in module info. (Ken Cox) [1969922 1955759]
- i40e: amend removal of MODULE_VERSION (Stefan Assmann) [1969923 1955736]
- redhat/configs: Add CONFIG_PINCTRL_EMMITSBURG (David Arcari) [1963984 1959506]
- redhat/configs: Remove CONFIG_EMMITSBURG (David Arcari) [1963984 1959506]
- netlink: add tracepoint at NL_SET_ERR_MSG (Marcelo Ricardo Leitner) [1972938 1956983]
- Revert "[netdrv] net/intel: remove driver versions from Intel drivers" (Jonathan Toppins) [1969917 1955745]
- Amends commit ea6244cc248b to include a version string in module info. (Ken Cox) [1969915 1955726]
- Revert "[netdrv] net/broadcom: Clean broadcom code from driver versions" (Jonathan Toppins) [1969914 1955721]
- ena: revert removal of MODULE_VERSION from ena (Petr Oros) [1969913 1955712]
- fm10k: amend removal of MODULE_VERSION (Vladis Dronov) [1969910 1955730]
- net/sched: act_ct: Offload connections with commit action (Marcelo Ricardo Leitner) [1968679 1965817]
- netfilter: flowtable: Remove redundant hw refresh bit (Marcelo Ricardo Leitner) [1968679 1965817]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.9.1.el8_4]" date="1624881600">- ixgbevf: Amend commit acf03026ec5a to include a version in module info. (Ken Cox) [1969911 1955764]
- CI: Merge configuration (Veronika Kabatova)
- igc: amend removal of MODULE_VERSION (Corinna Vinschen) [1969921 1955755]
- igb: amend removal of MODULE_VERSION (Corinna Vinschen) [1969919 1955748]
- locking/qrwlock: Fix ordering in queued_write_lock_slowpath() (Waiman Long) [1964419 1950110]
- scsi: qedf: Do not put host in qedf_vport_create() unconditionally (Nilesh Javali) [1974968 1899384]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.10.1.el8_4]" date="1625659200">- igbvf: amend removal of MODULE_VERSION (Corinna Vinschen) [1969920 1955752]
- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971464 1971488] {CVE-2021-32399}
- scsi: ibmvfc: Free channel_setup_buf during device tear down (Steve Best) [1964697 1938102]
- i40e: Fix parameters in aq_get_phy_register() (Stefan Assmann) [1967099 1907852]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.10.2.el8_4]" date="1626091200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975181 1975182] {CVE-2021-33909}</changelog>
</package>
<package pkgid="bb25183951d99fc4ed3c8c0eccba8af8af53d792a74cee4f495c0b2a68b4eadb" name="bpftool-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="348.20.1.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.12.1.el8_5]" date="1641988800">- tcp: don't free a FIN sk_buff in tcp_remove_empty_skb() (Guillaume Nault) [2021574 2016210]
- kernel.spec: Add support to use vmlinux.h (Jiri Olsa) [2031053 1989087]
- spec: Add vmlinux.h to kernel-devel package (Jiri Olsa) [2031053 1989087]
- x86/mce: Avoid infinite loop for copy from user recovery (Prarit Bhargava) [2008789 1999550]
- x86/mce: Rename kill_it to kill_current_task (Prarit Bhargava) [2008789 1999550]
- x86/mce: Recover from poison found while copying from user space (Prarit Bhargava) [2008789 1999550]
- x86/mce: Delay clearing IA32_MCG_STATUS to the end of do_machine_check() (Prarit Bhargava) [2008789 1999550]
- x86/mce: Send #MC singal from task work (Prarit Bhargava) [2008789 1999550]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-348.13.1.el8_5]" date="1642507200">- vfs: Out-of-bounds write of heap buffer in fs_context.c (Frantisek Hrbata) [2040585 2040586] {CVE-2022-0185}
- xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Bruno Meneguele) [2034864 2034865] {CVE-2021-4155}
- af_unix: fix garbage collect vs MSG_PEEK (Patrick Talbert) [2031974 2031975] {CVE-2021-0920}
- cgroup: verify that source is a string (Waiman Long) [2034608 2034609] {CVE-2021-4154}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-348.14.1.el8_5]" date="1643198400">- tcp: fix page frag corruption on page fault (Paolo Abeni) [2041529 1996074]
- net: fix sk_page_frag() recursion from memory reclaim (Paolo Abeni) [2041529 1996074]
- KVM: s390: index kvm-&gt;arch.idle_mask by vcpu_idx (Thomas Huth) [2040769 2026230]
- redhat: set LC_ALL=C before sorting config content (Frantisek Hrbata)</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.15.1.el8_5]" date="1643716800">- net/mlx5: DR, Use FW API when updating FW-owned flow table (Michal Schmidt) [2042663 2042651]
- KVM: x86: Wait for IPIs to be delivered when handling Hyper-V TLB flush hypercall (Vitaly Kuznetsov) [2043237 1868572]
- drm/mgag200: Select clock in PLL update functions (Bruno Meneguele) [2034949 1953926]
- drm/i915: Fix HAS_LSPCON macro for platforms between GEN9 and GEN10 (Bruno Meneguele) [2027335 2005586]
- crypto: qat - power up 4xxx device (Vladis Dronov) [2016437 1960307]
- RDMA/core: Fix a double free in add_port error flow (Kamal Heib) [2038724 2008555]
- powerpc/iommu: Report the correct most efficient DMA mask for PCI devices (Steve Best) [2018928 2007425]
- powerpc/dma: Fix dma_map_ops::get_required_mask (Steve Best) [2018928 2007425]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.16.1.el8_5]" date="1644321600">- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047601 2047602] {CVE-2022-22942}
- net: openvswitch: Fix ct_state nat flags for conns arriving from tc (Marcelo Ricardo Leitner) [2043548 2040334]
- net: openvswitch: Fix matching zone id for invalid conns arriving from tc (Marcelo Ricardo Leitner) [2043550 2040452]
- net/sched: flow_dissector: Fix matching on zone id for invalid conns (Marcelo Ricardo Leitner) [2043550 2040452]
- net/sched: Extend qdisc control block with tc control block (Marcelo Ricardo Leitner) [2043550 2040452]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.17.1.el8_5]" date="1644926400">- vfs: check dentry is still valid in get_link() (Ian Kent) [2052558 2014846]
- xfs: don't expose internal symlink metadata buffers to the vfs (Brian Foster) [2052558 2014846]
- CI: Use appropriate zstream builder (Veronika Kabatova)
- CI: Enable baseline realtime checks (Veronika Kabatova)
- CI: Rename pipelines to include release names (Veronika Kabatova)
- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052166 2052167] {CVE-2022-0492}
- ice: Remove boolean vlan_promisc flag from function (Jonathan Toppins) [2051951 2030400]
- ceph: put the requests/sessions when it fails to alloc memory (Jeffrey Layton) [2053725 2017796]
- ceph: fix off by one bugs in unsafe_request_wait() (Jeffrey Layton) [2053725 2017796]
- ceph: flush the mdlog before waiting on unsafe reqs (Jeffrey Layton) [2053725 2017796]
- ceph: flush mdlog before umounting (Jeffrey Layton) [2053725 2017796]
- ceph: make iterate_sessions a global symbol (Jeffrey Layton) [2053725 2017796]
- ceph: make ceph_create_session_msg a global symbol (Jeffrey Layton) [2053725 2017796]
- xfs: check sb_meta_uuid for dabuf buffer recovery (Bill O'Donnell) [2049292 2020764]
- drm/i915: Flush TLBs before releasing backing store (Patrick Talbert) [2044328 2044329] {CVE-2022-0330}
- hugetlb: fix hugetlb cgroup refcounting during vma split (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: fix imbalanced css_get and css_put pair for shared mappings (Waiman Long) [2039015 2032811]
- mm/hugetlb: change hugetlb_reserve_pages() to type bool (Waiman Long) [2039015 2032811]
- hugetlb: fix an error code in hugetlb_reserve_pages() (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: fix offline of hugetlb cgroup with reservations (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: fix reservation accounting (Waiman Long) [2039015 2032811]
- mm/hugetlb: narrow the hugetlb_lock protection area during preparing huge page (Waiman Long) [2039015 2032811]
- mm/hugetlb: a page from buddy is not on any list (Waiman Long) [2039015 2032811]
- mm/hugetlb: not necessary to coalesce regions recursively (Waiman Long) [2039015 2032811]
- selftests/vm/write_to_hugetlbfs.c: fix unused variable warning (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add hugetlb_cgroup reservation tests (Waiman Long) [2039015 2032811]
- hugetlb: support file_region coalescing again (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: support noreserve mappings (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add accounting for shared mappings (Waiman Long) [2039015 2032811]
- hugetlb: disable region_add file_region coalescing (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add reservation accounting for private mappings (Waiman Long) [2039015 2032811]
- mm/hugetlb_cgroup: fix hugetlb_cgroup migration (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add interface for charge/uncharge hugetlb reservations (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add hugetlb_cgroup reservation counter (Waiman Long) [2039015 2032811]
- hugetlb: remove duplicated code (Waiman Long) [2039015 2032811]
- hugetlb: region_chg provides only cache entry (Waiman Long) [2039015 2032811]
- hugetlbfs: always use address space in inode for resv_map pointer (Waiman Long) [2039015 2032811]
- hugetlbfs: fix potential over/underflow setting node specific nr_hugepages (Waiman Long) [2039015 2032811]
- hugetlb: allow to free gigantic pages regardless of the configuration (Waiman Long) [2039015 2032811]
- powerpc/pseries: Fix update of LPAR security flavor after LPM (Steve Best) [2027448 1997294]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.18.1.el8_5]" date="1645531200">- selftests: kvm: Check whether SIDA memop fails for normal guests (Thomas Huth) [2050806 2050807] {CVE-2022-0516}
- KVM: s390: Return error on SIDA memop on normal guest (Thomas Huth) [2050806 2050807] {CVE-2022-0516}
- iommu/amd: Remove iommu_init_ga() (Jerry Snitselaar) [2030854 1998265]
- iommu/amd: Relocate GAMSup check to early_enable_iommus (Jerry Snitselaar) [2030854 1998265]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.19.1.el8_5]" date="1646049600">- tipc: improve size validations for received domain records (Xin Long) [2048970 2048971] {CVE-2022-0435}
- smb3: do not error on fsync when readonly (Ronnie Sahlberg) [2055824 2037811]
- security: implement sctp_assoc_established hook in selinux (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- security: add sctp_assoc_established hook (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- security: call security_sctp_assoc_request in sctp_sf_do_5_1D_ce (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- security: pass asoc to sctp_assoc_request and sctp_sk_clone (Bruno Meneguele) [2054112 2054117 2015525 2048251]
- net: sctp: Fix some typos (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- RDMA/bnxt_re: Fix stats counters (Selvin Xavier) [2049684 2001893]
- net: check skb sec_path when re-initializing slow_gro in gro_list_prepare (Xin Long) [2047427 2030476]
- cpufreq: intel_pstate: Add Icelake servers support in no-HWP mode (David Arcari) [2036888 2003695]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.20.1.el8_5]" date="1646740800">- lib/iov_iter: initialize "flags" in new pipe_buffer (Jan Stancek) [2060874 2060875] {CVE-2022-0847}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-348.20.1.el8.centos" date="1646913600">- Apply debranding changes</changelog>
</package>
<package pkgid="b42e9de43662e4a9031ceab9ebdb3d40d981a1c6d8acafebf657b485bffc27d2" name="dwarves" arch="src">
  <version epoch="0" ver="1.15" rel="5.el7"/>
  <changelog author="Jiri Olsa &lt;jolsa@redhat.com&gt; - 1.15-1" date="1569412800">- Initial build</changelog>
  <changelog author="Jiri Olsa &lt;jolsa@redhat.com&gt; - 1.15-4" date="1572868800">- CI rebuild</changelog>
  <changelog author="Jiri Olsa &lt;jolsa@redhat.com&gt; - 1.15-5" date="1573041600">- Add libdwarves version dependency to dwarves package</changelog>
</package>
<package pkgid="278c9408ea5ea30eecb2b3698c6e615ff05da9f14a5fa656cdb6bf77d37a9b3e" name="dwarves" arch="x86_64">
  <version epoch="0" ver="1.15" rel="5.el7"/>
  <changelog author="Jiri Olsa &lt;jolsa@redhat.com&gt; - 1.15-1" date="1569412800">- Initial build</changelog>
  <changelog author="Jiri Olsa &lt;jolsa@redhat.com&gt; - 1.15-4" date="1572868800">- CI rebuild</changelog>
  <changelog author="Jiri Olsa &lt;jolsa@redhat.com&gt; - 1.15-5" date="1573041600">- Add libdwarves version dependency to dwarves package</changelog>
</package>
<package pkgid="c31bc8f21ac7f4184daa69d5cf514dfa41c831b12016691d642546f5d0173595" name="dwarves" arch="src">
  <version epoch="0" ver="1.17" rel="1.el7"/>
  <changelog author="Jiri Olsa &lt;jolsa@redhat.com&gt; - 1.15-1" date="1569412800">- Initial build</changelog>
  <changelog author="Jiri Olsa &lt;jolsa@redhat.com&gt; - 1.15-4" date="1572868800">- CI rebuild</changelog>
  <changelog author="Jiri Olsa &lt;jolsa@redhat.com&gt; - 1.15-5" date="1573041600">- Add libdwarves version dependency to dwarves package</changelog>
  <changelog author="Jiri Olsa &lt;jolsa@redhat.com&gt; - 1.17-1" date="1590494400">- moving to v1.17 version</changelog>
</package>
<package pkgid="7979cb7f605606ecc5f49ccce0d5a236d8a5434ef860b6475668ed8ceaa0284d" name="dwarves" arch="x86_64">
  <version epoch="0" ver="1.17" rel="1.el7"/>
  <changelog author="Jiri Olsa &lt;jolsa@redhat.com&gt; - 1.15-1" date="1569412800">- Initial build</changelog>
  <changelog author="Jiri Olsa &lt;jolsa@redhat.com&gt; - 1.15-4" date="1572868800">- CI rebuild</changelog>
  <changelog author="Jiri Olsa &lt;jolsa@redhat.com&gt; - 1.15-5" date="1573041600">- Add libdwarves version dependency to dwarves package</changelog>
  <changelog author="Jiri Olsa &lt;jolsa@redhat.com&gt; - 1.17-1" date="1590494400">- moving to v1.17 version</changelog>
</package>
<package pkgid="fdb524fa668bdfc50e8bef09feaab19dfb99c510d1e8638657e4a53450db0bcd" name="dwarves-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.15" rel="5.el7"/>
  <changelog author="Jiri Olsa &lt;jolsa@redhat.com&gt; - 1.15-1" date="1569412800">- Initial build</changelog>
  <changelog author="Jiri Olsa &lt;jolsa@redhat.com&gt; - 1.15-4" date="1572868800">- CI rebuild</changelog>
  <changelog author="Jiri Olsa &lt;jolsa@redhat.com&gt; - 1.15-5" date="1573041600">- Add libdwarves version dependency to dwarves package</changelog>
</package>
<package pkgid="03306eb5f548159c2947e37697d3ef1bb29f1d8ffbe32e0121e3e5261ebe4822" name="dwarves-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.17" rel="1.el7"/>
  <changelog author="Jiri Olsa &lt;jolsa@redhat.com&gt; - 1.15-1" date="1569412800">- Initial build</changelog>
  <changelog author="Jiri Olsa &lt;jolsa@redhat.com&gt; - 1.15-4" date="1572868800">- CI rebuild</changelog>
  <changelog author="Jiri Olsa &lt;jolsa@redhat.com&gt; - 1.15-5" date="1573041600">- Add libdwarves version dependency to dwarves package</changelog>
  <changelog author="Jiri Olsa &lt;jolsa@redhat.com&gt; - 1.17-1" date="1590494400">- moving to v1.17 version</changelog>
</package>
<package pkgid="8738a4c9c7f71995a7f864a3d8f01ad94da8f80e9975379e1dd385c69b974420" name="iwl100-firmware" arch="noarch">
  <version epoch="0" ver="39.31.5.1" rel="102.el7.1"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; - 20190111-93.gitd9fb2ee6" date="1553860800">- Remove cxgb3 (T3 adapter) firmware (rhbz 1503721)</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; - 20190516-94.git711d3297" date="1558008000">- Update to latest upstream linux-firmware image for assorted updates
- Update iwlwifi firmware to support the Cyclone Peak Dual Band 2x2 802.11ax (rhbz 1622442)
- Pull new version of Netronome firmware (rhbz 1663989)
- Update firmware for Chelsio T4/T5/T6 adapters (rhbz 1664678)
- Update Netronome firmware that include bug fixes (rhbz 1673890)
- Include firmware support for Intel Bluetooth 22261 (rhbz 1678095)</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; - 20191202-95.gite8a0f4c9" date="1575288000">- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1720394)
- Update bnx2x firmware to latest upstream (rhbz 1720395)
- AX200(Cyclone Peak 2 or CcP2) Bluetooth support (rhbz 1722693)
- Firmware for Chelsio T4/T5/T6 adapters (rhbz 1725821)
- Include to support Intel AX201 Harrison Peak(CNVi) on CML-U (rhbz 1725873)
- Icelake Bluetooth firmware update (AX201, Harrison Peak, or HrP2) (rhbz 1726182)
- DDP Package to support Columbiaville NIC (rhbz 1726454)
- Add iwlwifi-cc-a0-48.ucode to linux-firmware (rhbz 1753962)
- Change install section to use usptream installation process</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; - 20191202-96.gite8a0f4c9" date="1575288001">- Fix .files file dir, wrongly modified in the last release</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; - 20191202-97.gite8a0f4c9" date="1576152000">- firmware files marked as configuration files (rhbz 1782329)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; - 20200512-98.gitb2cad6a2" date="1589284800">- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1791030)
- Update bnx2x firmware to latest upstream (rhbz 1791031)
- Firmware - nvidia: add TU102/TU104/TU106 / TU116/117 signed firmware (rhbz 1801025)
- Update latest Signed FW for AMD NAVI 10 Graphic (rhbz 1809846)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; - 20200619-99.git3890db36" date="1592568000">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1847992)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20201022-100.gitdae4b4cd" date="1604577600">- Update to latest upstream linux-firmware image for assorted updates
- ice: Pull Comms Market Segment Package (rhbz 1861491)
- ice: Update to the Default OS DDP Package for ice driver (rhbz 1879278)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20201118-101.git7455a360" date="1607083200">- Update to latest upstream linux-firmware image for assorted updates
- Include to support Intel AX210 Typhoon Peak - Bluetooth firmware support (rhbz 1897069)
- Include support for the Qualcomm AX500-DBS (QCA6390) 802.11ax Wireless - firmware support (rhbz 1725913)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20201218-102.git05789708" date="1611748800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1918613)</changelog>
</package>
<package pkgid="4235c3ca02adde91706e02e10461fd724151ae1c760437b743a93ceccc2bea4b" name="iwl1000-firmware" arch="noarch">
  <version epoch="1" ver="39.31.5.1" rel="102.el7.1"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; - 20190111-93.gitd9fb2ee6" date="1553860800">- Remove cxgb3 (T3 adapter) firmware (rhbz 1503721)</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; - 20190516-94.git711d3297" date="1558008000">- Update to latest upstream linux-firmware image for assorted updates
- Update iwlwifi firmware to support the Cyclone Peak Dual Band 2x2 802.11ax (rhbz 1622442)
- Pull new version of Netronome firmware (rhbz 1663989)
- Update firmware for Chelsio T4/T5/T6 adapters (rhbz 1664678)
- Update Netronome firmware that include bug fixes (rhbz 1673890)
- Include firmware support for Intel Bluetooth 22261 (rhbz 1678095)</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; - 20191202-95.gite8a0f4c9" date="1575288000">- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1720394)
- Update bnx2x firmware to latest upstream (rhbz 1720395)
- AX200(Cyclone Peak 2 or CcP2) Bluetooth support (rhbz 1722693)
- Firmware for Chelsio T4/T5/T6 adapters (rhbz 1725821)
- Include to support Intel AX201 Harrison Peak(CNVi) on CML-U (rhbz 1725873)
- Icelake Bluetooth firmware update (AX201, Harrison Peak, or HrP2) (rhbz 1726182)
- DDP Package to support Columbiaville NIC (rhbz 1726454)
- Add iwlwifi-cc-a0-48.ucode to linux-firmware (rhbz 1753962)
- Change install section to use usptream installation process</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; - 20191202-96.gite8a0f4c9" date="1575288001">- Fix .files file dir, wrongly modified in the last release</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; - 20191202-97.gite8a0f4c9" date="1576152000">- firmware files marked as configuration files (rhbz 1782329)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; - 20200512-98.gitb2cad6a2" date="1589284800">- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1791030)
- Update bnx2x firmware to latest upstream (rhbz 1791031)
- Firmware - nvidia: add TU102/TU104/TU106 / TU116/117 signed firmware (rhbz 1801025)
- Update latest Signed FW for AMD NAVI 10 Graphic (rhbz 1809846)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; - 20200619-99.git3890db36" date="1592568000">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1847992)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20201022-100.gitdae4b4cd" date="1604577600">- Update to latest upstream linux-firmware image for assorted updates
- ice: Pull Comms Market Segment Package (rhbz 1861491)
- ice: Update to the Default OS DDP Package for ice driver (rhbz 1879278)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20201118-101.git7455a360" date="1607083200">- Update to latest upstream linux-firmware image for assorted updates
- Include to support Intel AX210 Typhoon Peak - Bluetooth firmware support (rhbz 1897069)
- Include support for the Qualcomm AX500-DBS (QCA6390) 802.11ax Wireless - firmware support (rhbz 1725913)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20201218-102.git05789708" date="1611748800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1918613)</changelog>
</package>
<package pkgid="c8fe2d739fa7fcbb40a14e6a7b8f64718b1e25971d4c5f577458dc0829067523" name="iwl105-firmware" arch="noarch">
  <version epoch="0" ver="18.168.6.1" rel="102.el7.1"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; - 20190111-93.gitd9fb2ee6" date="1553860800">- Remove cxgb3 (T3 adapter) firmware (rhbz 1503721)</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; - 20190516-94.git711d3297" date="1558008000">- Update to latest upstream linux-firmware image for assorted updates
- Update iwlwifi firmware to support the Cyclone Peak Dual Band 2x2 802.11ax (rhbz 1622442)
- Pull new version of Netronome firmware (rhbz 1663989)
- Update firmware for Chelsio T4/T5/T6 adapters (rhbz 1664678)
- Update Netronome firmware that include bug fixes (rhbz 1673890)
- Include firmware support for Intel Bluetooth 22261 (rhbz 1678095)</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; - 20191202-95.gite8a0f4c9" date="1575288000">- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1720394)
- Update bnx2x firmware to latest upstream (rhbz 1720395)
- AX200(Cyclone Peak 2 or CcP2) Bluetooth support (rhbz 1722693)
- Firmware for Chelsio T4/T5/T6 adapters (rhbz 1725821)
- Include to support Intel AX201 Harrison Peak(CNVi) on CML-U (rhbz 1725873)
- Icelake Bluetooth firmware update (AX201, Harrison Peak, or HrP2) (rhbz 1726182)
- DDP Package to support Columbiaville NIC (rhbz 1726454)
- Add iwlwifi-cc-a0-48.ucode to linux-firmware (rhbz 1753962)
- Change install section to use usptream installation process</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; - 20191202-96.gite8a0f4c9" date="1575288001">- Fix .files file dir, wrongly modified in the last release</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; - 20191202-97.gite8a0f4c9" date="1576152000">- firmware files marked as configuration files (rhbz 1782329)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; - 20200512-98.gitb2cad6a2" date="1589284800">- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1791030)
- Update bnx2x firmware to latest upstream (rhbz 1791031)
- Firmware - nvidia: add TU102/TU104/TU106 / TU116/117 signed firmware (rhbz 1801025)
- Update latest Signed FW for AMD NAVI 10 Graphic (rhbz 1809846)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; - 20200619-99.git3890db36" date="1592568000">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1847992)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20201022-100.gitdae4b4cd" date="1604577600">- Update to latest upstream linux-firmware image for assorted updates
- ice: Pull Comms Market Segment Package (rhbz 1861491)
- ice: Update to the Default OS DDP Package for ice driver (rhbz 1879278)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20201118-101.git7455a360" date="1607083200">- Update to latest upstream linux-firmware image for assorted updates
- Include to support Intel AX210 Typhoon Peak - Bluetooth firmware support (rhbz 1897069)
- Include support for the Qualcomm AX500-DBS (QCA6390) 802.11ax Wireless - firmware support (rhbz 1725913)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20201218-102.git05789708" date="1611748800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1918613)</changelog>
</package>
<package pkgid="340717ce1760bea2290b9b0f8737342494f8ee9a6dd6ada5397651e65be0002c" name="iwl135-firmware" arch="noarch">
  <version epoch="0" ver="18.168.6.1" rel="102.el7.1"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; - 20190111-93.gitd9fb2ee6" date="1553860800">- Remove cxgb3 (T3 adapter) firmware (rhbz 1503721)</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; - 20190516-94.git711d3297" date="1558008000">- Update to latest upstream linux-firmware image for assorted updates
- Update iwlwifi firmware to support the Cyclone Peak Dual Band 2x2 802.11ax (rhbz 1622442)
- Pull new version of Netronome firmware (rhbz 1663989)
- Update firmware for Chelsio T4/T5/T6 adapters (rhbz 1664678)
- Update Netronome firmware that include bug fixes (rhbz 1673890)
- Include firmware support for Intel Bluetooth 22261 (rhbz 1678095)</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; - 20191202-95.gite8a0f4c9" date="1575288000">- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1720394)
- Update bnx2x firmware to latest upstream (rhbz 1720395)
- AX200(Cyclone Peak 2 or CcP2) Bluetooth support (rhbz 1722693)
- Firmware for Chelsio T4/T5/T6 adapters (rhbz 1725821)
- Include to support Intel AX201 Harrison Peak(CNVi) on CML-U (rhbz 1725873)
- Icelake Bluetooth firmware update (AX201, Harrison Peak, or HrP2) (rhbz 1726182)
- DDP Package to support Columbiaville NIC (rhbz 1726454)
- Add iwlwifi-cc-a0-48.ucode to linux-firmware (rhbz 1753962)
- Change install section to use usptream installation process</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; - 20191202-96.gite8a0f4c9" date="1575288001">- Fix .files file dir, wrongly modified in the last release</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; - 20191202-97.gite8a0f4c9" date="1576152000">- firmware files marked as configuration files (rhbz 1782329)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; - 20200512-98.gitb2cad6a2" date="1589284800">- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1791030)
- Update bnx2x firmware to latest upstream (rhbz 1791031)
- Firmware - nvidia: add TU102/TU104/TU106 / TU116/117 signed firmware (rhbz 1801025)
- Update latest Signed FW for AMD NAVI 10 Graphic (rhbz 1809846)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; - 20200619-99.git3890db36" date="1592568000">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1847992)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20201022-100.gitdae4b4cd" date="1604577600">- Update to latest upstream linux-firmware image for assorted updates
- ice: Pull Comms Market Segment Package (rhbz 1861491)
- ice: Update to the Default OS DDP Package for ice driver (rhbz 1879278)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20201118-101.git7455a360" date="1607083200">- Update to latest upstream linux-firmware image for assorted updates
- Include to support Intel AX210 Typhoon Peak - Bluetooth firmware support (rhbz 1897069)
- Include support for the Qualcomm AX500-DBS (QCA6390) 802.11ax Wireless - firmware support (rhbz 1725913)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20201218-102.git05789708" date="1611748800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1918613)</changelog>
</package>
<package pkgid="16c3d2c9a06b6bfe087aca53497a7fab976ed97277eec9c9170ee502989fc215" name="iwl2000-firmware" arch="noarch">
  <version epoch="0" ver="18.168.6.1" rel="102.el7.1"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; - 20190111-93.gitd9fb2ee6" date="1553860800">- Remove cxgb3 (T3 adapter) firmware (rhbz 1503721)</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; - 20190516-94.git711d3297" date="1558008000">- Update to latest upstream linux-firmware image for assorted updates
- Update iwlwifi firmware to support the Cyclone Peak Dual Band 2x2 802.11ax (rhbz 1622442)
- Pull new version of Netronome firmware (rhbz 1663989)
- Update firmware for Chelsio T4/T5/T6 adapters (rhbz 1664678)
- Update Netronome firmware that include bug fixes (rhbz 1673890)
- Include firmware support for Intel Bluetooth 22261 (rhbz 1678095)</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; - 20191202-95.gite8a0f4c9" date="1575288000">- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1720394)
- Update bnx2x firmware to latest upstream (rhbz 1720395)
- AX200(Cyclone Peak 2 or CcP2) Bluetooth support (rhbz 1722693)
- Firmware for Chelsio T4/T5/T6 adapters (rhbz 1725821)
- Include to support Intel AX201 Harrison Peak(CNVi) on CML-U (rhbz 1725873)
- Icelake Bluetooth firmware update (AX201, Harrison Peak, or HrP2) (rhbz 1726182)
- DDP Package to support Columbiaville NIC (rhbz 1726454)
- Add iwlwifi-cc-a0-48.ucode to linux-firmware (rhbz 1753962)
- Change install section to use usptream installation process</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; - 20191202-96.gite8a0f4c9" date="1575288001">- Fix .files file dir, wrongly modified in the last release</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; - 20191202-97.gite8a0f4c9" date="1576152000">- firmware files marked as configuration files (rhbz 1782329)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; - 20200512-98.gitb2cad6a2" date="1589284800">- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1791030)
- Update bnx2x firmware to latest upstream (rhbz 1791031)
- Firmware - nvidia: add TU102/TU104/TU106 / TU116/117 signed firmware (rhbz 1801025)
- Update latest Signed FW for AMD NAVI 10 Graphic (rhbz 1809846)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; - 20200619-99.git3890db36" date="1592568000">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1847992)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20201022-100.gitdae4b4cd" date="1604577600">- Update to latest upstream linux-firmware image for assorted updates
- ice: Pull Comms Market Segment Package (rhbz 1861491)
- ice: Update to the Default OS DDP Package for ice driver (rhbz 1879278)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20201118-101.git7455a360" date="1607083200">- Update to latest upstream linux-firmware image for assorted updates
- Include to support Intel AX210 Typhoon Peak - Bluetooth firmware support (rhbz 1897069)
- Include support for the Qualcomm AX500-DBS (QCA6390) 802.11ax Wireless - firmware support (rhbz 1725913)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20201218-102.git05789708" date="1611748800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1918613)</changelog>
</package>
<package pkgid="3d097f5299e39faac18df7811fc7087884b80d26323b8ffc236a2d145f3c590f" name="iwl2030-firmware" arch="noarch">
  <version epoch="0" ver="18.168.6.1" rel="102.el7.1"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; - 20190111-93.gitd9fb2ee6" date="1553860800">- Remove cxgb3 (T3 adapter) firmware (rhbz 1503721)</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; - 20190516-94.git711d3297" date="1558008000">- Update to latest upstream linux-firmware image for assorted updates
- Update iwlwifi firmware to support the Cyclone Peak Dual Band 2x2 802.11ax (rhbz 1622442)
- Pull new version of Netronome firmware (rhbz 1663989)
- Update firmware for Chelsio T4/T5/T6 adapters (rhbz 1664678)
- Update Netronome firmware that include bug fixes (rhbz 1673890)
- Include firmware support for Intel Bluetooth 22261 (rhbz 1678095)</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; - 20191202-95.gite8a0f4c9" date="1575288000">- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1720394)
- Update bnx2x firmware to latest upstream (rhbz 1720395)
- AX200(Cyclone Peak 2 or CcP2) Bluetooth support (rhbz 1722693)
- Firmware for Chelsio T4/T5/T6 adapters (rhbz 1725821)
- Include to support Intel AX201 Harrison Peak(CNVi) on CML-U (rhbz 1725873)
- Icelake Bluetooth firmware update (AX201, Harrison Peak, or HrP2) (rhbz 1726182)
- DDP Package to support Columbiaville NIC (rhbz 1726454)
- Add iwlwifi-cc-a0-48.ucode to linux-firmware (rhbz 1753962)
- Change install section to use usptream installation process</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; - 20191202-96.gite8a0f4c9" date="1575288001">- Fix .files file dir, wrongly modified in the last release</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; - 20191202-97.gite8a0f4c9" date="1576152000">- firmware files marked as configuration files (rhbz 1782329)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; - 20200512-98.gitb2cad6a2" date="1589284800">- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1791030)
- Update bnx2x firmware to latest upstream (rhbz 1791031)
- Firmware - nvidia: add TU102/TU104/TU106 / TU116/117 signed firmware (rhbz 1801025)
- Update latest Signed FW for AMD NAVI 10 Graphic (rhbz 1809846)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; - 20200619-99.git3890db36" date="1592568000">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1847992)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20201022-100.gitdae4b4cd" date="1604577600">- Update to latest upstream linux-firmware image for assorted updates
- ice: Pull Comms Market Segment Package (rhbz 1861491)
- ice: Update to the Default OS DDP Package for ice driver (rhbz 1879278)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20201118-101.git7455a360" date="1607083200">- Update to latest upstream linux-firmware image for assorted updates
- Include to support Intel AX210 Typhoon Peak - Bluetooth firmware support (rhbz 1897069)
- Include support for the Qualcomm AX500-DBS (QCA6390) 802.11ax Wireless - firmware support (rhbz 1725913)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20201218-102.git05789708" date="1611748800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1918613)</changelog>
</package>
<package pkgid="59e65914eaab23d4c3bb200380f66542f3bd0f8b1f83e746937348c31b907633" name="iwl3160-firmware" arch="noarch">
  <version epoch="1" ver="25.30.13.0" rel="102.el7.1"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; - 20190111-93.gitd9fb2ee6" date="1553860800">- Remove cxgb3 (T3 adapter) firmware (rhbz 1503721)</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; - 20190516-94.git711d3297" date="1558008000">- Update to latest upstream linux-firmware image for assorted updates
- Update iwlwifi firmware to support the Cyclone Peak Dual Band 2x2 802.11ax (rhbz 1622442)
- Pull new version of Netronome firmware (rhbz 1663989)
- Update firmware for Chelsio T4/T5/T6 adapters (rhbz 1664678)
- Update Netronome firmware that include bug fixes (rhbz 1673890)
- Include firmware support for Intel Bluetooth 22261 (rhbz 1678095)</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; - 20191202-95.gite8a0f4c9" date="1575288000">- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1720394)
- Update bnx2x firmware to latest upstream (rhbz 1720395)
- AX200(Cyclone Peak 2 or CcP2) Bluetooth support (rhbz 1722693)
- Firmware for Chelsio T4/T5/T6 adapters (rhbz 1725821)
- Include to support Intel AX201 Harrison Peak(CNVi) on CML-U (rhbz 1725873)
- Icelake Bluetooth firmware update (AX201, Harrison Peak, or HrP2) (rhbz 1726182)
- DDP Package to support Columbiaville NIC (rhbz 1726454)
- Add iwlwifi-cc-a0-48.ucode to linux-firmware (rhbz 1753962)
- Change install section to use usptream installation process</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; - 20191202-96.gite8a0f4c9" date="1575288001">- Fix .files file dir, wrongly modified in the last release</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; - 20191202-97.gite8a0f4c9" date="1576152000">- firmware files marked as configuration files (rhbz 1782329)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; - 20200512-98.gitb2cad6a2" date="1589284800">- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1791030)
- Update bnx2x firmware to latest upstream (rhbz 1791031)
- Firmware - nvidia: add TU102/TU104/TU106 / TU116/117 signed firmware (rhbz 1801025)
- Update latest Signed FW for AMD NAVI 10 Graphic (rhbz 1809846)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; - 20200619-99.git3890db36" date="1592568000">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1847992)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20201022-100.gitdae4b4cd" date="1604577600">- Update to latest upstream linux-firmware image for assorted updates
- ice: Pull Comms Market Segment Package (rhbz 1861491)
- ice: Update to the Default OS DDP Package for ice driver (rhbz 1879278)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20201118-101.git7455a360" date="1607083200">- Update to latest upstream linux-firmware image for assorted updates
- Include to support Intel AX210 Typhoon Peak - Bluetooth firmware support (rhbz 1897069)
- Include support for the Qualcomm AX500-DBS (QCA6390) 802.11ax Wireless - firmware support (rhbz 1725913)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20201218-102.git05789708" date="1611748800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1918613)</changelog>
</package>
<package pkgid="5853ddd06e32c7f29a4b5374a4eb2113e5942491d0e7f00b6897c9161fdda53b" name="iwl3945-firmware" arch="noarch">
  <version epoch="0" ver="15.32.2.9" rel="102.el7.1"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; - 20190111-93.gitd9fb2ee6" date="1553860800">- Remove cxgb3 (T3 adapter) firmware (rhbz 1503721)</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; - 20190516-94.git711d3297" date="1558008000">- Update to latest upstream linux-firmware image for assorted updates
- Update iwlwifi firmware to support the Cyclone Peak Dual Band 2x2 802.11ax (rhbz 1622442)
- Pull new version of Netronome firmware (rhbz 1663989)
- Update firmware for Chelsio T4/T5/T6 adapters (rhbz 1664678)
- Update Netronome firmware that include bug fixes (rhbz 1673890)
- Include firmware support for Intel Bluetooth 22261 (rhbz 1678095)</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; - 20191202-95.gite8a0f4c9" date="1575288000">- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1720394)
- Update bnx2x firmware to latest upstream (rhbz 1720395)
- AX200(Cyclone Peak 2 or CcP2) Bluetooth support (rhbz 1722693)
- Firmware for Chelsio T4/T5/T6 adapters (rhbz 1725821)
- Include to support Intel AX201 Harrison Peak(CNVi) on CML-U (rhbz 1725873)
- Icelake Bluetooth firmware update (AX201, Harrison Peak, or HrP2) (rhbz 1726182)
- DDP Package to support Columbiaville NIC (rhbz 1726454)
- Add iwlwifi-cc-a0-48.ucode to linux-firmware (rhbz 1753962)
- Change install section to use usptream installation process</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; - 20191202-96.gite8a0f4c9" date="1575288001">- Fix .files file dir, wrongly modified in the last release</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; - 20191202-97.gite8a0f4c9" date="1576152000">- firmware files marked as configuration files (rhbz 1782329)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; - 20200512-98.gitb2cad6a2" date="1589284800">- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1791030)
- Update bnx2x firmware to latest upstream (rhbz 1791031)
- Firmware - nvidia: add TU102/TU104/TU106 / TU116/117 signed firmware (rhbz 1801025)
- Update latest Signed FW for AMD NAVI 10 Graphic (rhbz 1809846)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; - 20200619-99.git3890db36" date="1592568000">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1847992)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20201022-100.gitdae4b4cd" date="1604577600">- Update to latest upstream linux-firmware image for assorted updates
- ice: Pull Comms Market Segment Package (rhbz 1861491)
- ice: Update to the Default OS DDP Package for ice driver (rhbz 1879278)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20201118-101.git7455a360" date="1607083200">- Update to latest upstream linux-firmware image for assorted updates
- Include to support Intel AX210 Typhoon Peak - Bluetooth firmware support (rhbz 1897069)
- Include support for the Qualcomm AX500-DBS (QCA6390) 802.11ax Wireless - firmware support (rhbz 1725913)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20201218-102.git05789708" date="1611748800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1918613)</changelog>
</package>
<package pkgid="f7aa539bf8842113ab473d2594e2c9c0c11eaee2f42d57cd685663532eb6c5bb" name="iwl4965-firmware" arch="noarch">
  <version epoch="0" ver="228.61.2.24" rel="102.el7.1"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; - 20190111-93.gitd9fb2ee6" date="1553860800">- Remove cxgb3 (T3 adapter) firmware (rhbz 1503721)</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; - 20190516-94.git711d3297" date="1558008000">- Update to latest upstream linux-firmware image for assorted updates
- Update iwlwifi firmware to support the Cyclone Peak Dual Band 2x2 802.11ax (rhbz 1622442)
- Pull new version of Netronome firmware (rhbz 1663989)
- Update firmware for Chelsio T4/T5/T6 adapters (rhbz 1664678)
- Update Netronome firmware that include bug fixes (rhbz 1673890)
- Include firmware support for Intel Bluetooth 22261 (rhbz 1678095)</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; - 20191202-95.gite8a0f4c9" date="1575288000">- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1720394)
- Update bnx2x firmware to latest upstream (rhbz 1720395)
- AX200(Cyclone Peak 2 or CcP2) Bluetooth support (rhbz 1722693)
- Firmware for Chelsio T4/T5/T6 adapters (rhbz 1725821)
- Include to support Intel AX201 Harrison Peak(CNVi) on CML-U (rhbz 1725873)
- Icelake Bluetooth firmware update (AX201, Harrison Peak, or HrP2) (rhbz 1726182)
- DDP Package to support Columbiaville NIC (rhbz 1726454)
- Add iwlwifi-cc-a0-48.ucode to linux-firmware (rhbz 1753962)
- Change install section to use usptream installation process</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; - 20191202-96.gite8a0f4c9" date="1575288001">- Fix .files file dir, wrongly modified in the last release</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; - 20191202-97.gite8a0f4c9" date="1576152000">- firmware files marked as configuration files (rhbz 1782329)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; - 20200512-98.gitb2cad6a2" date="1589284800">- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1791030)
- Update bnx2x firmware to latest upstream (rhbz 1791031)
- Firmware - nvidia: add TU102/TU104/TU106 / TU116/117 signed firmware (rhbz 1801025)
- Update latest Signed FW for AMD NAVI 10 Graphic (rhbz 1809846)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; - 20200619-99.git3890db36" date="1592568000">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1847992)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20201022-100.gitdae4b4cd" date="1604577600">- Update to latest upstream linux-firmware image for assorted updates
- ice: Pull Comms Market Segment Package (rhbz 1861491)
- ice: Update to the Default OS DDP Package for ice driver (rhbz 1879278)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20201118-101.git7455a360" date="1607083200">- Update to latest upstream linux-firmware image for assorted updates
- Include to support Intel AX210 Typhoon Peak - Bluetooth firmware support (rhbz 1897069)
- Include support for the Qualcomm AX500-DBS (QCA6390) 802.11ax Wireless - firmware support (rhbz 1725913)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20201218-102.git05789708" date="1611748800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1918613)</changelog>
</package>
<package pkgid="7b4f44b26c816d048a0927523237093319e187a10edf7926a4ed7b8cb1ebd7ce" name="iwl5000-firmware" arch="noarch">
  <version epoch="0" ver="8.83.5.1_1" rel="102.el7.1"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; - 20190111-93.gitd9fb2ee6" date="1553860800">- Remove cxgb3 (T3 adapter) firmware (rhbz 1503721)</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; - 20190516-94.git711d3297" date="1558008000">- Update to latest upstream linux-firmware image for assorted updates
- Update iwlwifi firmware to support the Cyclone Peak Dual Band 2x2 802.11ax (rhbz 1622442)
- Pull new version of Netronome firmware (rhbz 1663989)
- Update firmware for Chelsio T4/T5/T6 adapters (rhbz 1664678)
- Update Netronome firmware that include bug fixes (rhbz 1673890)
- Include firmware support for Intel Bluetooth 22261 (rhbz 1678095)</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; - 20191202-95.gite8a0f4c9" date="1575288000">- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1720394)
- Update bnx2x firmware to latest upstream (rhbz 1720395)
- AX200(Cyclone Peak 2 or CcP2) Bluetooth support (rhbz 1722693)
- Firmware for Chelsio T4/T5/T6 adapters (rhbz 1725821)
- Include to support Intel AX201 Harrison Peak(CNVi) on CML-U (rhbz 1725873)
- Icelake Bluetooth firmware update (AX201, Harrison Peak, or HrP2) (rhbz 1726182)
- DDP Package to support Columbiaville NIC (rhbz 1726454)
- Add iwlwifi-cc-a0-48.ucode to linux-firmware (rhbz 1753962)
- Change install section to use usptream installation process</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; - 20191202-96.gite8a0f4c9" date="1575288001">- Fix .files file dir, wrongly modified in the last release</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; - 20191202-97.gite8a0f4c9" date="1576152000">- firmware files marked as configuration files (rhbz 1782329)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; - 20200512-98.gitb2cad6a2" date="1589284800">- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1791030)
- Update bnx2x firmware to latest upstream (rhbz 1791031)
- Firmware - nvidia: add TU102/TU104/TU106 / TU116/117 signed firmware (rhbz 1801025)
- Update latest Signed FW for AMD NAVI 10 Graphic (rhbz 1809846)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; - 20200619-99.git3890db36" date="1592568000">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1847992)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20201022-100.gitdae4b4cd" date="1604577600">- Update to latest upstream linux-firmware image for assorted updates
- ice: Pull Comms Market Segment Package (rhbz 1861491)
- ice: Update to the Default OS DDP Package for ice driver (rhbz 1879278)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20201118-101.git7455a360" date="1607083200">- Update to latest upstream linux-firmware image for assorted updates
- Include to support Intel AX210 Typhoon Peak - Bluetooth firmware support (rhbz 1897069)
- Include support for the Qualcomm AX500-DBS (QCA6390) 802.11ax Wireless - firmware support (rhbz 1725913)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20201218-102.git05789708" date="1611748800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1918613)</changelog>
</package>
<package pkgid="d4cc663e2c905e072e8d88af2f0d0c36d7eb9770e7acdab3417a9ff933c36cc0" name="iwl5150-firmware" arch="noarch">
  <version epoch="0" ver="8.24.2.2" rel="102.el7.1"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; - 20190111-93.gitd9fb2ee6" date="1553860800">- Remove cxgb3 (T3 adapter) firmware (rhbz 1503721)</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; - 20190516-94.git711d3297" date="1558008000">- Update to latest upstream linux-firmware image for assorted updates
- Update iwlwifi firmware to support the Cyclone Peak Dual Band 2x2 802.11ax (rhbz 1622442)
- Pull new version of Netronome firmware (rhbz 1663989)
- Update firmware for Chelsio T4/T5/T6 adapters (rhbz 1664678)
- Update Netronome firmware that include bug fixes (rhbz 1673890)
- Include firmware support for Intel Bluetooth 22261 (rhbz 1678095)</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; - 20191202-95.gite8a0f4c9" date="1575288000">- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1720394)
- Update bnx2x firmware to latest upstream (rhbz 1720395)
- AX200(Cyclone Peak 2 or CcP2) Bluetooth support (rhbz 1722693)
- Firmware for Chelsio T4/T5/T6 adapters (rhbz 1725821)
- Include to support Intel AX201 Harrison Peak(CNVi) on CML-U (rhbz 1725873)
- Icelake Bluetooth firmware update (AX201, Harrison Peak, or HrP2) (rhbz 1726182)
- DDP Package to support Columbiaville NIC (rhbz 1726454)
- Add iwlwifi-cc-a0-48.ucode to linux-firmware (rhbz 1753962)
- Change install section to use usptream installation process</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; - 20191202-96.gite8a0f4c9" date="1575288001">- Fix .files file dir, wrongly modified in the last release</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; - 20191202-97.gite8a0f4c9" date="1576152000">- firmware files marked as configuration files (rhbz 1782329)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; - 20200512-98.gitb2cad6a2" date="1589284800">- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1791030)
- Update bnx2x firmware to latest upstream (rhbz 1791031)
- Firmware - nvidia: add TU102/TU104/TU106 / TU116/117 signed firmware (rhbz 1801025)
- Update latest Signed FW for AMD NAVI 10 Graphic (rhbz 1809846)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; - 20200619-99.git3890db36" date="1592568000">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1847992)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20201022-100.gitdae4b4cd" date="1604577600">- Update to latest upstream linux-firmware image for assorted updates
- ice: Pull Comms Market Segment Package (rhbz 1861491)
- ice: Update to the Default OS DDP Package for ice driver (rhbz 1879278)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20201118-101.git7455a360" date="1607083200">- Update to latest upstream linux-firmware image for assorted updates
- Include to support Intel AX210 Typhoon Peak - Bluetooth firmware support (rhbz 1897069)
- Include support for the Qualcomm AX500-DBS (QCA6390) 802.11ax Wireless - firmware support (rhbz 1725913)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20201218-102.git05789708" date="1611748800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1918613)</changelog>
</package>
<package pkgid="cdd4be846c442c25537a8b8cebd211761eafb40d4ec5f1f63c8225fd771486e6" name="iwl6000-firmware" arch="noarch">
  <version epoch="0" ver="9.221.4.1" rel="102.el7.1"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; - 20190111-93.gitd9fb2ee6" date="1553860800">- Remove cxgb3 (T3 adapter) firmware (rhbz 1503721)</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; - 20190516-94.git711d3297" date="1558008000">- Update to latest upstream linux-firmware image for assorted updates
- Update iwlwifi firmware to support the Cyclone Peak Dual Band 2x2 802.11ax (rhbz 1622442)
- Pull new version of Netronome firmware (rhbz 1663989)
- Update firmware for Chelsio T4/T5/T6 adapters (rhbz 1664678)
- Update Netronome firmware that include bug fixes (rhbz 1673890)
- Include firmware support for Intel Bluetooth 22261 (rhbz 1678095)</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; - 20191202-95.gite8a0f4c9" date="1575288000">- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1720394)
- Update bnx2x firmware to latest upstream (rhbz 1720395)
- AX200(Cyclone Peak 2 or CcP2) Bluetooth support (rhbz 1722693)
- Firmware for Chelsio T4/T5/T6 adapters (rhbz 1725821)
- Include to support Intel AX201 Harrison Peak(CNVi) on CML-U (rhbz 1725873)
- Icelake Bluetooth firmware update (AX201, Harrison Peak, or HrP2) (rhbz 1726182)
- DDP Package to support Columbiaville NIC (rhbz 1726454)
- Add iwlwifi-cc-a0-48.ucode to linux-firmware (rhbz 1753962)
- Change install section to use usptream installation process</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; - 20191202-96.gite8a0f4c9" date="1575288001">- Fix .files file dir, wrongly modified in the last release</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; - 20191202-97.gite8a0f4c9" date="1576152000">- firmware files marked as configuration files (rhbz 1782329)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; - 20200512-98.gitb2cad6a2" date="1589284800">- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1791030)
- Update bnx2x firmware to latest upstream (rhbz 1791031)
- Firmware - nvidia: add TU102/TU104/TU106 / TU116/117 signed firmware (rhbz 1801025)
- Update latest Signed FW for AMD NAVI 10 Graphic (rhbz 1809846)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; - 20200619-99.git3890db36" date="1592568000">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1847992)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20201022-100.gitdae4b4cd" date="1604577600">- Update to latest upstream linux-firmware image for assorted updates
- ice: Pull Comms Market Segment Package (rhbz 1861491)
- ice: Update to the Default OS DDP Package for ice driver (rhbz 1879278)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20201118-101.git7455a360" date="1607083200">- Update to latest upstream linux-firmware image for assorted updates
- Include to support Intel AX210 Typhoon Peak - Bluetooth firmware support (rhbz 1897069)
- Include support for the Qualcomm AX500-DBS (QCA6390) 802.11ax Wireless - firmware support (rhbz 1725913)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20201218-102.git05789708" date="1611748800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1918613)</changelog>
</package>
<package pkgid="68219faf8dd9ff350710d1028d399140ffbb82da245f41a0fe9c1bb704911c6c" name="iwl6000g2a-firmware" arch="noarch">
  <version epoch="0" ver="18.168.6.1" rel="102.el7.1"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; - 20190111-93.gitd9fb2ee6" date="1553860800">- Remove cxgb3 (T3 adapter) firmware (rhbz 1503721)</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; - 20190516-94.git711d3297" date="1558008000">- Update to latest upstream linux-firmware image for assorted updates
- Update iwlwifi firmware to support the Cyclone Peak Dual Band 2x2 802.11ax (rhbz 1622442)
- Pull new version of Netronome firmware (rhbz 1663989)
- Update firmware for Chelsio T4/T5/T6 adapters (rhbz 1664678)
- Update Netronome firmware that include bug fixes (rhbz 1673890)
- Include firmware support for Intel Bluetooth 22261 (rhbz 1678095)</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; - 20191202-95.gite8a0f4c9" date="1575288000">- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1720394)
- Update bnx2x firmware to latest upstream (rhbz 1720395)
- AX200(Cyclone Peak 2 or CcP2) Bluetooth support (rhbz 1722693)
- Firmware for Chelsio T4/T5/T6 adapters (rhbz 1725821)
- Include to support Intel AX201 Harrison Peak(CNVi) on CML-U (rhbz 1725873)
- Icelake Bluetooth firmware update (AX201, Harrison Peak, or HrP2) (rhbz 1726182)
- DDP Package to support Columbiaville NIC (rhbz 1726454)
- Add iwlwifi-cc-a0-48.ucode to linux-firmware (rhbz 1753962)
- Change install section to use usptream installation process</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; - 20191202-96.gite8a0f4c9" date="1575288001">- Fix .files file dir, wrongly modified in the last release</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; - 20191202-97.gite8a0f4c9" date="1576152000">- firmware files marked as configuration files (rhbz 1782329)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; - 20200512-98.gitb2cad6a2" date="1589284800">- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1791030)
- Update bnx2x firmware to latest upstream (rhbz 1791031)
- Firmware - nvidia: add TU102/TU104/TU106 / TU116/117 signed firmware (rhbz 1801025)
- Update latest Signed FW for AMD NAVI 10 Graphic (rhbz 1809846)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; - 20200619-99.git3890db36" date="1592568000">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1847992)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20201022-100.gitdae4b4cd" date="1604577600">- Update to latest upstream linux-firmware image for assorted updates
- ice: Pull Comms Market Segment Package (rhbz 1861491)
- ice: Update to the Default OS DDP Package for ice driver (rhbz 1879278)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20201118-101.git7455a360" date="1607083200">- Update to latest upstream linux-firmware image for assorted updates
- Include to support Intel AX210 Typhoon Peak - Bluetooth firmware support (rhbz 1897069)
- Include support for the Qualcomm AX500-DBS (QCA6390) 802.11ax Wireless - firmware support (rhbz 1725913)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20201218-102.git05789708" date="1611748800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1918613)</changelog>
</package>
<package pkgid="16fdeb2f04076d48c7cb7d886a6f953265a5a78db64e8c8d8f6039d4a7bfdfd3" name="iwl6000g2b-firmware" arch="noarch">
  <version epoch="0" ver="18.168.6.1" rel="102.el7.1"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; - 20190111-93.gitd9fb2ee6" date="1553860800">- Remove cxgb3 (T3 adapter) firmware (rhbz 1503721)</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; - 20190516-94.git711d3297" date="1558008000">- Update to latest upstream linux-firmware image for assorted updates
- Update iwlwifi firmware to support the Cyclone Peak Dual Band 2x2 802.11ax (rhbz 1622442)
- Pull new version of Netronome firmware (rhbz 1663989)
- Update firmware for Chelsio T4/T5/T6 adapters (rhbz 1664678)
- Update Netronome firmware that include bug fixes (rhbz 1673890)
- Include firmware support for Intel Bluetooth 22261 (rhbz 1678095)</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; - 20191202-95.gite8a0f4c9" date="1575288000">- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1720394)
- Update bnx2x firmware to latest upstream (rhbz 1720395)
- AX200(Cyclone Peak 2 or CcP2) Bluetooth support (rhbz 1722693)
- Firmware for Chelsio T4/T5/T6 adapters (rhbz 1725821)
- Include to support Intel AX201 Harrison Peak(CNVi) on CML-U (rhbz 1725873)
- Icelake Bluetooth firmware update (AX201, Harrison Peak, or HrP2) (rhbz 1726182)
- DDP Package to support Columbiaville NIC (rhbz 1726454)
- Add iwlwifi-cc-a0-48.ucode to linux-firmware (rhbz 1753962)
- Change install section to use usptream installation process</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; - 20191202-96.gite8a0f4c9" date="1575288001">- Fix .files file dir, wrongly modified in the last release</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; - 20191202-97.gite8a0f4c9" date="1576152000">- firmware files marked as configuration files (rhbz 1782329)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; - 20200512-98.gitb2cad6a2" date="1589284800">- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1791030)
- Update bnx2x firmware to latest upstream (rhbz 1791031)
- Firmware - nvidia: add TU102/TU104/TU106 / TU116/117 signed firmware (rhbz 1801025)
- Update latest Signed FW for AMD NAVI 10 Graphic (rhbz 1809846)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; - 20200619-99.git3890db36" date="1592568000">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1847992)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20201022-100.gitdae4b4cd" date="1604577600">- Update to latest upstream linux-firmware image for assorted updates
- ice: Pull Comms Market Segment Package (rhbz 1861491)
- ice: Update to the Default OS DDP Package for ice driver (rhbz 1879278)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20201118-101.git7455a360" date="1607083200">- Update to latest upstream linux-firmware image for assorted updates
- Include to support Intel AX210 Typhoon Peak - Bluetooth firmware support (rhbz 1897069)
- Include support for the Qualcomm AX500-DBS (QCA6390) 802.11ax Wireless - firmware support (rhbz 1725913)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20201218-102.git05789708" date="1611748800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1918613)</changelog>
</package>
<package pkgid="a442471f3623e301240ea64b744e36c0ed71304a7e2276230485ecee99dea04f" name="iwl6050-firmware" arch="noarch">
  <version epoch="0" ver="41.28.5.1" rel="102.el7.1"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; - 20190111-93.gitd9fb2ee6" date="1553860800">- Remove cxgb3 (T3 adapter) firmware (rhbz 1503721)</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; - 20190516-94.git711d3297" date="1558008000">- Update to latest upstream linux-firmware image for assorted updates
- Update iwlwifi firmware to support the Cyclone Peak Dual Band 2x2 802.11ax (rhbz 1622442)
- Pull new version of Netronome firmware (rhbz 1663989)
- Update firmware for Chelsio T4/T5/T6 adapters (rhbz 1664678)
- Update Netronome firmware that include bug fixes (rhbz 1673890)
- Include firmware support for Intel Bluetooth 22261 (rhbz 1678095)</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; - 20191202-95.gite8a0f4c9" date="1575288000">- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1720394)
- Update bnx2x firmware to latest upstream (rhbz 1720395)
- AX200(Cyclone Peak 2 or CcP2) Bluetooth support (rhbz 1722693)
- Firmware for Chelsio T4/T5/T6 adapters (rhbz 1725821)
- Include to support Intel AX201 Harrison Peak(CNVi) on CML-U (rhbz 1725873)
- Icelake Bluetooth firmware update (AX201, Harrison Peak, or HrP2) (rhbz 1726182)
- DDP Package to support Columbiaville NIC (rhbz 1726454)
- Add iwlwifi-cc-a0-48.ucode to linux-firmware (rhbz 1753962)
- Change install section to use usptream installation process</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; - 20191202-96.gite8a0f4c9" date="1575288001">- Fix .files file dir, wrongly modified in the last release</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; - 20191202-97.gite8a0f4c9" date="1576152000">- firmware files marked as configuration files (rhbz 1782329)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; - 20200512-98.gitb2cad6a2" date="1589284800">- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1791030)
- Update bnx2x firmware to latest upstream (rhbz 1791031)
- Firmware - nvidia: add TU102/TU104/TU106 / TU116/117 signed firmware (rhbz 1801025)
- Update latest Signed FW for AMD NAVI 10 Graphic (rhbz 1809846)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; - 20200619-99.git3890db36" date="1592568000">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1847992)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20201022-100.gitdae4b4cd" date="1604577600">- Update to latest upstream linux-firmware image for assorted updates
- ice: Pull Comms Market Segment Package (rhbz 1861491)
- ice: Update to the Default OS DDP Package for ice driver (rhbz 1879278)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20201118-101.git7455a360" date="1607083200">- Update to latest upstream linux-firmware image for assorted updates
- Include to support Intel AX210 Typhoon Peak - Bluetooth firmware support (rhbz 1897069)
- Include support for the Qualcomm AX500-DBS (QCA6390) 802.11ax Wireless - firmware support (rhbz 1725913)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20201218-102.git05789708" date="1611748800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1918613)</changelog>
</package>
<package pkgid="10cb2a5c379f440afe863cb2e1960406ec3fcc9fec57c5d2799153a3a3131387" name="iwl7260-firmware" arch="noarch">
  <version epoch="1" ver="25.30.13.0" rel="102.el7.1"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; - 20190111-93.gitd9fb2ee6" date="1553860800">- Remove cxgb3 (T3 adapter) firmware (rhbz 1503721)</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; - 20190516-94.git711d3297" date="1558008000">- Update to latest upstream linux-firmware image for assorted updates
- Update iwlwifi firmware to support the Cyclone Peak Dual Band 2x2 802.11ax (rhbz 1622442)
- Pull new version of Netronome firmware (rhbz 1663989)
- Update firmware for Chelsio T4/T5/T6 adapters (rhbz 1664678)
- Update Netronome firmware that include bug fixes (rhbz 1673890)
- Include firmware support for Intel Bluetooth 22261 (rhbz 1678095)</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; - 20191202-95.gite8a0f4c9" date="1575288000">- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1720394)
- Update bnx2x firmware to latest upstream (rhbz 1720395)
- AX200(Cyclone Peak 2 or CcP2) Bluetooth support (rhbz 1722693)
- Firmware for Chelsio T4/T5/T6 adapters (rhbz 1725821)
- Include to support Intel AX201 Harrison Peak(CNVi) on CML-U (rhbz 1725873)
- Icelake Bluetooth firmware update (AX201, Harrison Peak, or HrP2) (rhbz 1726182)
- DDP Package to support Columbiaville NIC (rhbz 1726454)
- Add iwlwifi-cc-a0-48.ucode to linux-firmware (rhbz 1753962)
- Change install section to use usptream installation process</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; - 20191202-96.gite8a0f4c9" date="1575288001">- Fix .files file dir, wrongly modified in the last release</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; - 20191202-97.gite8a0f4c9" date="1576152000">- firmware files marked as configuration files (rhbz 1782329)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; - 20200512-98.gitb2cad6a2" date="1589284800">- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1791030)
- Update bnx2x firmware to latest upstream (rhbz 1791031)
- Firmware - nvidia: add TU102/TU104/TU106 / TU116/117 signed firmware (rhbz 1801025)
- Update latest Signed FW for AMD NAVI 10 Graphic (rhbz 1809846)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; - 20200619-99.git3890db36" date="1592568000">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1847992)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20201022-100.gitdae4b4cd" date="1604577600">- Update to latest upstream linux-firmware image for assorted updates
- ice: Pull Comms Market Segment Package (rhbz 1861491)
- ice: Update to the Default OS DDP Package for ice driver (rhbz 1879278)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20201118-101.git7455a360" date="1607083200">- Update to latest upstream linux-firmware image for assorted updates
- Include to support Intel AX210 Typhoon Peak - Bluetooth firmware support (rhbz 1897069)
- Include support for the Qualcomm AX500-DBS (QCA6390) 802.11ax Wireless - firmware support (rhbz 1725913)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20201218-102.git05789708" date="1611748800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1918613)</changelog>
</package>
<package pkgid="b4e8747a6e7f6f07f5c7bd5e18bad2bd47b846dacbcde22289552537f56368e9" name="kernel" arch="src">
  <version epoch="0" ver="4.18.0" rel="147.0.3.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-141.el8]" date="1567166400">- [wireless] mwifiex: fix 802.11n/WPA detection (Jarod Wilson) [1714476] {CVE-2019-3846}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-142.el8]" date="1567771200">- [drm] drm/virtio: use virtio_max_dma_size (Gerd Hoffmann) [1739291]
- [mm] hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined (Rafael Aquini) [1706088]
- [powerpc] kvm: ppc: book3s: Enable XIVE native capability only if OPAL has required functions [BZ1744884] (David Gibson) [1744884]
- [scsi] scsi: lpfc: Fix oops when fewer hdwqs than cpus (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Limit xri count for kdump environment (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Mitigate high memory pre-allocation by SCSI-MQ (Dick Kennedy) [1745731]
- [scsi] scsi: qla2xxx: Fix hardirq-unsafe locking (Himanshu Madhani) [1719941]
- [x86] Revert "[x86] x86/kexec/64: Prevent kexec from 5-level paging to a 4-level only kernel" (Baoquan He) [1669088]
- [x86] Revert "[x86] x86/boot: Add xloadflags bits to check for 5-level paging support" (Baoquan He) [1669088]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-143.el8]" date="1568030400">- [net] netfilter: nft_set: fix allocation size overflow in privsize callback. (Florian Westphal) [1746338]
- [net] net: route dump netlink NLM_F_MULTI flag missing (Stefano Brivio) [1745971]
- [net] sched: pfifo_fast: fix wrong dereference in pfifo_fast_enqueue (Davide Caratti) [1745390]
- [net] sched: pfifo_fast: fix wrong dereference when qdisc is reset (Davide Caratti) [1745387]
- [scsi] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (David Milburn) [1746597]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-144.el8]" date="1568289600">- [md] Revert "[md] dm: eliminate 'split_discard_bios' flag from DM target interface" (Mike Snitzer) [1749929]
- [md] Revert "[md] dm: make sure to obey max_io_len_target_boundary" (Mike Snitzer) [1749929]
- [pci] PCI: Restore Resizable BAR size bits correctly for 1MB BARs (Myron Stowe) [1717760]
- [net] netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled (Phil Sutter) [1743945]
- [net] netfilter: bridge: Drops IPv6 packets if IPv6 module is not loaded (Phil Sutter) [1743945]
- [drm] drm/qxl: get vga ioports (Gerd Hoffmann) [1728936]
- [drm] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (Lyude Paul) [1724363]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-145.el8]" date="1568808000">- [iommu] iommu/amd: Add support for X2APIC IOMMU interrupts (Suravee Suthikulpanit) [1734842]
- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750882] {CVE-2019-14835}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.2.el8_1]" date="1572782400">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.3.el8_1]" date="1573473600">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-147.0.3.el8.centos" date="1573646400">- Apply debranding changes</changelog>
</package>
<package pkgid="63a693b19f300e8c94b2fea1a67271cc71e4a8c9e9839e501b87d0dce586c2bb" name="kernel" arch="src">
  <version epoch="0" ver="4.18.0" rel="147.8.1.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.1.1.el8_1]" date="1573560000">- [arm64] arm64/sve: Fix wrong free for task-&gt;thread.sve_state (Andrew Jones) [1767358 1756450]
- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.2.1.el8_1]" date="1574424000">- [sched] fair: Scale bandwidth quota and period without losing quota/period ratio precision (Phil Auld) [1773568 1706247]
- [sched] fair: Fix -Wunused-but-set-variable warnings (Phil Auld) [1773568 1706247]
- [sched] fair: Fix low cpu usage with high throttling by removing expiration of cpu-local slices (Phil Auld) [1773568 1706247]
- [powerpc] powerpc/pseries: Track LMB nid instead of using device tree (Steve Best) [1772110 1758742]
- [powerpc] powerpc/pseries/memory-hotplug: Only update DT once per memory DLPAR request (Steve Best) [1772110 1758742]
- [powerpc] powerpc/rtas: allow rescheduling while changing cpu states (Steve Best) [1772109 1758651]
- [powerpc] powerpc/pseries/mobility: use cond_resched when updating device tree (Steve Best) [1772109 1758651]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1770177 1752498]
- [fs] CIFS: Fix use after free of file info structures (Dave Wysochanski) [1767357 1757865]
- [fs] cifs: use cifsInodeInfo-&gt;open_file_lock while iterating to avoid a panic (Dave Wysochanski) [1767357 1757865]
- [netdrv] net/ibmvnic: prevent more than one thread from running in reset (Steve Best) [1764830 1756943]
- [netdrv] net/ibmvnic: unlock rtnl_lock in reset so linkwatch_event can run (Steve Best) [1764830 1756943]
- [netdrv] ibmvnic: Warn unknown speed message only when carrier is present (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: Fix missing { in __ibmvnic_reset (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: free reset work of removed device from queue (Steve Best) [1764832 1749873]
- [netdrv] ibmvnic: Do not process reset during or after device removal (Steve Best) [1764832 1749873]
- [cpuidle] cpuidle: governor: Add new governors to cpuidle_governors again (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: do not set an owner to allow modunload (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: set haltpoll as preferred governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: allow governor switch on cpuidle_register_driver() (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: Add cpuidle.governor= command line parameter (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: vcpu hotplug support (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: header file stubs must be "static inline" (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: return -ENODEV on modinit failure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1764831 1759282]
- [x86] kvm: x86: add host poll control msrs (Vitaly Kuznetsov) [1764831 1749495]
- [s390] s390/setup: Fix kernel lock down for s390 (Philipp Rudo) [1764827 1748343]
- [powerpc] powerpc: Allow flush_(inval_)dcache_range to work across ranges &gt;4GB (Steve Best) [1764826 1744062]
- [fs] mm/huge_memory: fix vmf_insert_pfn_{pmd, pud}() crash, handle unaligned addresses (Jeff Moyer) [1764825 1743159]
- [mm] mm/huge_memory.c: fix modifying of page protection by insert_pfn_pmd() (Jeff Moyer) [1764825 1743159]
- [pci] PCI: hv: Use bytes 4 and 5 from instance ID as the PCI domain numbers (Mohammed Gamal) [1764634 1671288]
- [pci] PCI: hv: Detect and fix Hyper-V PCI domain number collision (Mohammed Gamal) [1764634 1671288]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.3.1.el8_1]" date="1574769600">- [x86] kvm: svm: taint module and print taint message iff nested is enabled (Bandan Das) [1776114 1775410]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.4.1.el8_1]" date="1576497600">- [block] blk-mq: apply normal plugging for HDD (Ming Lei) [1782181 1759380]
- [block] blk-mq: honor IO scheduler for multiqueue devices (Ming Lei) [1782181 1759380]
- [block] blk-mq: simplify blk_mq_make_request() (Ming Lei) [1782181 1759380]
- [block] blk-mq: remove blk_mq_put_ctx() (Ming Lei) [1782181 1759380]
- [x86] kvm: vmx: use MSR_IA32_TSX_CTRL to hard-disable TSX on guest that lack it (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: vmx: implement MSR_IA32_TSX_CTRL disable RTM functionality (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: implement MSR_IA32_TSX_CTRL effect on CPUID (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: do not modify masked bits of shared MSRs (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: fix presentation of TSX feature in ARCH_CAPABILITIES (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm/x86: Export MDS_NO=0 to guests when TSX is enabled (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [fs] cifs: Fix cifsInodeInfo lock_sem deadlock when reconnect occurs (Leif Sahlberg) [1778693 1765979]
- [fs] cifs: avoid using MID 0xFFFF (Leif Sahlberg) [1778693 1765979]
- [fs] cifs: Fix retry mid list corruption on reconnects (Leif Sahlberg) [1778693 1765979]
- [fs] smb3: fix unmount hang in open_shroot (Leif Sahlberg) [1781113 1757670]
- [fs] CIFS: fix deadlock in cached root handling (Leif Sahlberg) [1781113 1757670]
- [fs] Fix match_server check to allow for auto dialect negotiate (Leif Sahlberg) [1781113 1757670]
- [fs] SMB3: retry on STATUS_INSUFFICIENT_RESOURCES instead of failing write (Leif Sahlberg) [1781113 1757670]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1781113 1757670]
- [fs] cifs: fix strcat buffer overflow and reduce raciness in smb21_set_oplock_level() (Leif Sahlberg) [1781113 1757670]
- [fs] smb3: fix signing verification of large reads (Dave Wysochanski) [1781110 1753114]
- [scsi] scsi: lpfc: Fix port relogin failure due to GID_FT interaction (Dick Kennedy) [1781108 1733217]
- [fs] xfs: fix missing ILOCK unlock when xfs_setattr_nonsize fails due to EDQUOT (Bill O'Donnell) [1778692 1739607]
- [net] cfg80211: wext: avoid copying malformed SSIDs (Jarod Wilson) [1778633 1778634] {CVE-2019-17133}
- [block] blkcg: perpcu_ref init/exit should be done from blkg_alloc/free() (Ming Lei) [1777766 1741392]
- [fs] userfaultfd_release: always remove uffd flags and clear vm_userfaultfd_ctx (Alex Gladkov) [1777389 1749763] {CVE-2019-14898}
- [netdrv] mwifiex: Fix three heap overflow at parsing element in cfg80211_ap_settings (Jarod Wilson) [1776618 1775484] {CVE-2019-14814 CVE-2019-14815 CVE-2019-14816}
- [netdrv] mwifiex: fix possible heap overflow in mwifiex_process_country_ie() (Jarod Wilson) [1776209 1776210] {CVE-2019-14895}
- [netdrv] mwifiex: Fix heap overflow in mmwifiex_process_tdls_action_frame() (Jarod Wilson) [1776161 1776162] {CVE-2019-14901}
- [netdrv] rtlwifi: Fix potential overflow on P2P code (Jarod Wilson) [1775222 1775223] {CVE-2019-17666}
- [pci] hv: Avoid use of hv_pci_dev-&gt;pci_slot after freeing it (Mohammed Gamal) [1764635 1737569]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.5.1.el8_1]" date="1579003200">- [powerpc] powerpc/shared: Use static key to detect shared processor (Phil Auld) [1781114 1767529]
- [powerpc] powerpc/vcpu: Assume dedicated processors as non-preempt (Phil Auld) [1781114 1767529]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.6.1.el8_1]" date="1581940800">- [crypto] crypto: chelsio - count incomplete block in IV (Jonathan Toppins) [1798527 1725813]
- [crypto] crypto: chelsio - Fix softlockup with heavy I/O (Jonathan Toppins) [1798527 1725813]
- [crypto] crypto: chelsio - Fix NULL pointer dereference (Jonathan Toppins) [1798527 1725813]
- [nvme] nvme: Treat discovery subsystems as unique subsystems (Ewan Milne) [1798381 1757525]
- [mm] mm/page-writeback.c: don't break integrity writeback on -&gt;writepage() error (Christoph von Recklinghausen) [1797962 1782117]
- [lib] crc-t10dif: crc_t10dif_mutex can be static (Vladis Dronov) [1797961 1769462]
- [lib] crc-t10dif: Allow current transform to be inspected in sysfs (Vladis Dronov) [1797961 1769462]
- [lib] crc-t10dif: Pick better transform if one becomes available (Vladis Dronov) [1797961 1769462]
- [crypto] api - Introduce notifier for new crypto algorithms (Vladis Dronov) [1797961 1769462]
- [block] blk-mq: make sure that line break can be printed (Ming Lei) [1797960 1741462]
- [block] blk-mq: avoid sysfs buffer overflow with too many CPU cores (Ming Lei) [1797960 1741462]
- [scsi] hpsa: update driver version (Joseph Szczypek) [1797519 1761968]
- [scsi] scsi: hpsa: add missing hunks in reset-patch (Joseph Szczypek) [1797519 1761968]
- [arm64] arm64: compat: Workaround Neoverse-N1 #1542419 for compat user-space (Mark Salter) [1797518 1757828]
- [arm64] arm64: Fake the IminLine size on systems affected by Neoverse-N1 #1542419 (Mark Salter) [1797518 1757828]
- [arm64] arm64: errata: Hide CTR_EL0.DIC on systems affected by Neoverse-N1 #1542419 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Handle erratum 1418040 as a superset of erratum 1188873 (Mark Salter) [1797518 1757828]
- [arm64] arm64: errata: Add workaround for Cortex-A76 erratum #1463225 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Kconfig: Tidy up errata workaround help text (Mark Salter) [1797518 1757828]
- [arm64] arm64: Apply ARM64_ERRATUM_1188873 to Neoverse-N1 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Add part number for Neoverse N1 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Make ARM64_ERRATUM_1188873 depend on COMPAT (Mark Salter) [1797518 1757828]
- [arm64] arm64: Restrict ARM64_ERRATUM_1188873 mitigation to AArch32 (Mark Salter) [1797518 1757828]
- [arm64] arm64: arch_timer: avoid unused function warning (Mark Salter) [1797518 1757828]
- [arm64] arm64: Add workaround for Cortex-A76 erratum 1286807 (Mark Salter) [1797518 1757828]
- [md] dm snapshot: rework COW throttling to fix deadlock (Mike Snitzer) [1796490 1758605]
- [md] dm snapshot: introduce account_start_copy() and account_end_copy() (Mike Snitzer) [1796490 1758605]
- [block] fix memleak of bio integrity data (Ming Lei) [1795338 1779898]
- [powerpc] xive: Prevent page fault issues in the machine crash handler (Diego Domingos) [1795337 1756116]
- [scsi] scsi: megaraid_sas: IRQ poll to avoid CPU hard lockups (Tomas Henzl) [1795335 1726251]
- [powerpc] powerpc/perf: Disable trace_imc pmu (Steve Best) [1794061 1785573]
- [s390] s390/qeth: ensure linear access to packet headers (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: guard against runt packets (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: handle skb allocation error gracefully (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: drop unwanted packets earlier in RX path (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: support per-frame invalidation (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: gather more detailed RX dropped/error statistics (Philipp Rudo) [1794059 1781085]
- [s390] s390/net: Mark expected switch fall-throughs (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: consolidate skb RX processing in L3 driver (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: remove RX seqno in skb-&gt;cb (Philipp Rudo) [1794059 1781085]
- [powerpc] kvm: ppc: book3s hv: Flush link stack on guest exit to host kernel (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] book3s64: Fix link stack flush on context switch (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64s: support nospectre_v2 cmdline option (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Update Spectre v2 reporting (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Add nospectre_v2 command line argument (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Fix spectre_v2 mitigations reporting (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64: Make meltdown reporting Book3S 64 specific (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64: Disable the speculation barrier from the command line (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [firmware] efi/memreserve: Register reservations as 'reserved' in /proc/iomem (Bhupesh Sharma) [1792200 1772730]
- [firmware] efi/memreserve: deal with memreserve entries in unmapped memory (Bhupesh Sharma) [1792200 1772730]
- [s390] s390/cpum_sf: save TOD clock base in SDBs for time conversion (Philipp Rudo) [1792198 1743504]
- [s390] s390/sclp: Fix bit checked for has_sipl (Philipp Rudo) [1791408 1748347]
- [scsi] qla2xxx: Fix incorrect SFUB length used for Secure Flash Update MB Cmd (Himanshu Madhani) [1790350 1782598]
- [scsi] qla2xxx: Added support for MPI and PEP regions for ISP28XX (Himanshu Madhani) [1790350 1782598]
- [scsi] qla2xxx: Correctly retrieve and interpret active flash region (Himanshu Madhani) [1790350 1782598]
- [powerpc] powerpc/tm: Fix FP/VMX unavailable exceptions inside a transaction (Gustavo Duarte) [1788862 1750653] {CVE-2019-15030}
- [powerpc] powerpc/tm: Fix restoring FP/VMX facility incorrectly on interrupts (Gustavo Duarte) [1791630 1750653] {CVE-2019-15031}
- [scsi] scsi: qla2xxx: Fix different size DMA Alloc/Unmap (Himanshu Madhani) [1788206 1753031]
- [scsi] qla2xxx: call dma_free_coherent with correct size in all cases in qla24xx_sp_unmap (Himanshu Madhani) [1788206 1753031]
- [fs] devpts_pty_kill(): don't bother with d_delete() (Eric Sandeen) [1783959 1772718]
- [fs] devpts: always delete dcache dentry-s in dput() (Eric Sandeen) [1783959 1772718]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.7.1.el8_1]" date="1582286400">- [hid] hiddev: do cleanup in failure of opening a device (Benjamin Tissoires) [1803458 1803460] {CVE-2019-19527}
- [hid] hiddev: avoid opening a disconnected device (Benjamin Tissoires) [1803458 1803460] {CVE-2019-19527}
- [nvme] nvmet: fix discover log page when offsets are used (Gopal Tiwari) [1801216 1745836]
- [netdrv] ibmvnic: Serialize device queries (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Bound waits for device queries (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Terminate waiting device threads after loss of service (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Fix completion structure initialization (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Ignore H_FUNCTION return from H_EOI to tolerate XIVE mode (Steve Best) [1794060 1778037]
- [tools] selftests/powerpc: Fix compile error on tlbie_test due to newer gcc (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [tools] selftests/powerpc: Add test case for tlbie vs mtpidr ordering issue (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/mm: Fixup tlbie vs mtpidr/mtlpidr ordering issue on POWER9 (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/book3s64/radix: Rename CPU_FTR_P9_TLBIE_BUG feature flag (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/book3s64/mm: Don't do tlbie fixup for some hardware revisions (Desnes Augusto Nunes do Rosario) [1794058 1755707]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.8.1.el8_1]" date="1582632000">- rebuild, due infrastructure issues last kernel build wasn't signed properly [1807231 1807216]</changelog>
</package>
<package pkgid="ebcc33a6dbce00cd01b39b30b7ffce7fb40c1990deabd54be1206a6a54f5ac73" name="kernel" arch="src">
  <version epoch="0" ver="4.18.0" rel="147.8.1.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.1.1.el8_1]" date="1573560000">- [arm64] arm64/sve: Fix wrong free for task-&gt;thread.sve_state (Andrew Jones) [1767358 1756450]
- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.2.1.el8_1]" date="1574424000">- [sched] fair: Scale bandwidth quota and period without losing quota/period ratio precision (Phil Auld) [1773568 1706247]
- [sched] fair: Fix -Wunused-but-set-variable warnings (Phil Auld) [1773568 1706247]
- [sched] fair: Fix low cpu usage with high throttling by removing expiration of cpu-local slices (Phil Auld) [1773568 1706247]
- [powerpc] powerpc/pseries: Track LMB nid instead of using device tree (Steve Best) [1772110 1758742]
- [powerpc] powerpc/pseries/memory-hotplug: Only update DT once per memory DLPAR request (Steve Best) [1772110 1758742]
- [powerpc] powerpc/rtas: allow rescheduling while changing cpu states (Steve Best) [1772109 1758651]
- [powerpc] powerpc/pseries/mobility: use cond_resched when updating device tree (Steve Best) [1772109 1758651]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1770177 1752498]
- [fs] CIFS: Fix use after free of file info structures (Dave Wysochanski) [1767357 1757865]
- [fs] cifs: use cifsInodeInfo-&gt;open_file_lock while iterating to avoid a panic (Dave Wysochanski) [1767357 1757865]
- [netdrv] net/ibmvnic: prevent more than one thread from running in reset (Steve Best) [1764830 1756943]
- [netdrv] net/ibmvnic: unlock rtnl_lock in reset so linkwatch_event can run (Steve Best) [1764830 1756943]
- [netdrv] ibmvnic: Warn unknown speed message only when carrier is present (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: Fix missing { in __ibmvnic_reset (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: free reset work of removed device from queue (Steve Best) [1764832 1749873]
- [netdrv] ibmvnic: Do not process reset during or after device removal (Steve Best) [1764832 1749873]
- [cpuidle] cpuidle: governor: Add new governors to cpuidle_governors again (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: do not set an owner to allow modunload (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: set haltpoll as preferred governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: allow governor switch on cpuidle_register_driver() (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: Add cpuidle.governor= command line parameter (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: vcpu hotplug support (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: header file stubs must be "static inline" (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: return -ENODEV on modinit failure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1764831 1759282]
- [x86] kvm: x86: add host poll control msrs (Vitaly Kuznetsov) [1764831 1749495]
- [s390] s390/setup: Fix kernel lock down for s390 (Philipp Rudo) [1764827 1748343]
- [powerpc] powerpc: Allow flush_(inval_)dcache_range to work across ranges &gt;4GB (Steve Best) [1764826 1744062]
- [fs] mm/huge_memory: fix vmf_insert_pfn_{pmd, pud}() crash, handle unaligned addresses (Jeff Moyer) [1764825 1743159]
- [mm] mm/huge_memory.c: fix modifying of page protection by insert_pfn_pmd() (Jeff Moyer) [1764825 1743159]
- [pci] PCI: hv: Use bytes 4 and 5 from instance ID as the PCI domain numbers (Mohammed Gamal) [1764634 1671288]
- [pci] PCI: hv: Detect and fix Hyper-V PCI domain number collision (Mohammed Gamal) [1764634 1671288]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.3.1.el8_1]" date="1574769600">- [x86] kvm: svm: taint module and print taint message iff nested is enabled (Bandan Das) [1776114 1775410]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.4.1.el8_1]" date="1576497600">- [block] blk-mq: apply normal plugging for HDD (Ming Lei) [1782181 1759380]
- [block] blk-mq: honor IO scheduler for multiqueue devices (Ming Lei) [1782181 1759380]
- [block] blk-mq: simplify blk_mq_make_request() (Ming Lei) [1782181 1759380]
- [block] blk-mq: remove blk_mq_put_ctx() (Ming Lei) [1782181 1759380]
- [x86] kvm: vmx: use MSR_IA32_TSX_CTRL to hard-disable TSX on guest that lack it (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: vmx: implement MSR_IA32_TSX_CTRL disable RTM functionality (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: implement MSR_IA32_TSX_CTRL effect on CPUID (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: do not modify masked bits of shared MSRs (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: fix presentation of TSX feature in ARCH_CAPABILITIES (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm/x86: Export MDS_NO=0 to guests when TSX is enabled (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [fs] cifs: Fix cifsInodeInfo lock_sem deadlock when reconnect occurs (Leif Sahlberg) [1778693 1765979]
- [fs] cifs: avoid using MID 0xFFFF (Leif Sahlberg) [1778693 1765979]
- [fs] cifs: Fix retry mid list corruption on reconnects (Leif Sahlberg) [1778693 1765979]
- [fs] smb3: fix unmount hang in open_shroot (Leif Sahlberg) [1781113 1757670]
- [fs] CIFS: fix deadlock in cached root handling (Leif Sahlberg) [1781113 1757670]
- [fs] Fix match_server check to allow for auto dialect negotiate (Leif Sahlberg) [1781113 1757670]
- [fs] SMB3: retry on STATUS_INSUFFICIENT_RESOURCES instead of failing write (Leif Sahlberg) [1781113 1757670]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1781113 1757670]
- [fs] cifs: fix strcat buffer overflow and reduce raciness in smb21_set_oplock_level() (Leif Sahlberg) [1781113 1757670]
- [fs] smb3: fix signing verification of large reads (Dave Wysochanski) [1781110 1753114]
- [scsi] scsi: lpfc: Fix port relogin failure due to GID_FT interaction (Dick Kennedy) [1781108 1733217]
- [fs] xfs: fix missing ILOCK unlock when xfs_setattr_nonsize fails due to EDQUOT (Bill O'Donnell) [1778692 1739607]
- [net] cfg80211: wext: avoid copying malformed SSIDs (Jarod Wilson) [1778633 1778634] {CVE-2019-17133}
- [block] blkcg: perpcu_ref init/exit should be done from blkg_alloc/free() (Ming Lei) [1777766 1741392]
- [fs] userfaultfd_release: always remove uffd flags and clear vm_userfaultfd_ctx (Alex Gladkov) [1777389 1749763] {CVE-2019-14898}
- [netdrv] mwifiex: Fix three heap overflow at parsing element in cfg80211_ap_settings (Jarod Wilson) [1776618 1775484] {CVE-2019-14814 CVE-2019-14815 CVE-2019-14816}
- [netdrv] mwifiex: fix possible heap overflow in mwifiex_process_country_ie() (Jarod Wilson) [1776209 1776210] {CVE-2019-14895}
- [netdrv] mwifiex: Fix heap overflow in mmwifiex_process_tdls_action_frame() (Jarod Wilson) [1776161 1776162] {CVE-2019-14901}
- [netdrv] rtlwifi: Fix potential overflow on P2P code (Jarod Wilson) [1775222 1775223] {CVE-2019-17666}
- [pci] hv: Avoid use of hv_pci_dev-&gt;pci_slot after freeing it (Mohammed Gamal) [1764635 1737569]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.5.1.el8_1]" date="1579003200">- [powerpc] powerpc/shared: Use static key to detect shared processor (Phil Auld) [1781114 1767529]
- [powerpc] powerpc/vcpu: Assume dedicated processors as non-preempt (Phil Auld) [1781114 1767529]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.6.1.el8_1]" date="1581940800">- [crypto] crypto: chelsio - count incomplete block in IV (Jonathan Toppins) [1798527 1725813]
- [crypto] crypto: chelsio - Fix softlockup with heavy I/O (Jonathan Toppins) [1798527 1725813]
- [crypto] crypto: chelsio - Fix NULL pointer dereference (Jonathan Toppins) [1798527 1725813]
- [nvme] nvme: Treat discovery subsystems as unique subsystems (Ewan Milne) [1798381 1757525]
- [mm] mm/page-writeback.c: don't break integrity writeback on -&gt;writepage() error (Christoph von Recklinghausen) [1797962 1782117]
- [lib] crc-t10dif: crc_t10dif_mutex can be static (Vladis Dronov) [1797961 1769462]
- [lib] crc-t10dif: Allow current transform to be inspected in sysfs (Vladis Dronov) [1797961 1769462]
- [lib] crc-t10dif: Pick better transform if one becomes available (Vladis Dronov) [1797961 1769462]
- [crypto] api - Introduce notifier for new crypto algorithms (Vladis Dronov) [1797961 1769462]
- [block] blk-mq: make sure that line break can be printed (Ming Lei) [1797960 1741462]
- [block] blk-mq: avoid sysfs buffer overflow with too many CPU cores (Ming Lei) [1797960 1741462]
- [scsi] hpsa: update driver version (Joseph Szczypek) [1797519 1761968]
- [scsi] scsi: hpsa: add missing hunks in reset-patch (Joseph Szczypek) [1797519 1761968]
- [arm64] arm64: compat: Workaround Neoverse-N1 #1542419 for compat user-space (Mark Salter) [1797518 1757828]
- [arm64] arm64: Fake the IminLine size on systems affected by Neoverse-N1 #1542419 (Mark Salter) [1797518 1757828]
- [arm64] arm64: errata: Hide CTR_EL0.DIC on systems affected by Neoverse-N1 #1542419 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Handle erratum 1418040 as a superset of erratum 1188873 (Mark Salter) [1797518 1757828]
- [arm64] arm64: errata: Add workaround for Cortex-A76 erratum #1463225 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Kconfig: Tidy up errata workaround help text (Mark Salter) [1797518 1757828]
- [arm64] arm64: Apply ARM64_ERRATUM_1188873 to Neoverse-N1 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Add part number for Neoverse N1 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Make ARM64_ERRATUM_1188873 depend on COMPAT (Mark Salter) [1797518 1757828]
- [arm64] arm64: Restrict ARM64_ERRATUM_1188873 mitigation to AArch32 (Mark Salter) [1797518 1757828]
- [arm64] arm64: arch_timer: avoid unused function warning (Mark Salter) [1797518 1757828]
- [arm64] arm64: Add workaround for Cortex-A76 erratum 1286807 (Mark Salter) [1797518 1757828]
- [md] dm snapshot: rework COW throttling to fix deadlock (Mike Snitzer) [1796490 1758605]
- [md] dm snapshot: introduce account_start_copy() and account_end_copy() (Mike Snitzer) [1796490 1758605]
- [block] fix memleak of bio integrity data (Ming Lei) [1795338 1779898]
- [powerpc] xive: Prevent page fault issues in the machine crash handler (Diego Domingos) [1795337 1756116]
- [scsi] scsi: megaraid_sas: IRQ poll to avoid CPU hard lockups (Tomas Henzl) [1795335 1726251]
- [powerpc] powerpc/perf: Disable trace_imc pmu (Steve Best) [1794061 1785573]
- [s390] s390/qeth: ensure linear access to packet headers (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: guard against runt packets (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: handle skb allocation error gracefully (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: drop unwanted packets earlier in RX path (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: support per-frame invalidation (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: gather more detailed RX dropped/error statistics (Philipp Rudo) [1794059 1781085]
- [s390] s390/net: Mark expected switch fall-throughs (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: consolidate skb RX processing in L3 driver (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: remove RX seqno in skb-&gt;cb (Philipp Rudo) [1794059 1781085]
- [powerpc] kvm: ppc: book3s hv: Flush link stack on guest exit to host kernel (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] book3s64: Fix link stack flush on context switch (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64s: support nospectre_v2 cmdline option (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Update Spectre v2 reporting (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Add nospectre_v2 command line argument (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Fix spectre_v2 mitigations reporting (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64: Make meltdown reporting Book3S 64 specific (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64: Disable the speculation barrier from the command line (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [firmware] efi/memreserve: Register reservations as 'reserved' in /proc/iomem (Bhupesh Sharma) [1792200 1772730]
- [firmware] efi/memreserve: deal with memreserve entries in unmapped memory (Bhupesh Sharma) [1792200 1772730]
- [s390] s390/cpum_sf: save TOD clock base in SDBs for time conversion (Philipp Rudo) [1792198 1743504]
- [s390] s390/sclp: Fix bit checked for has_sipl (Philipp Rudo) [1791408 1748347]
- [scsi] qla2xxx: Fix incorrect SFUB length used for Secure Flash Update MB Cmd (Himanshu Madhani) [1790350 1782598]
- [scsi] qla2xxx: Added support for MPI and PEP regions for ISP28XX (Himanshu Madhani) [1790350 1782598]
- [scsi] qla2xxx: Correctly retrieve and interpret active flash region (Himanshu Madhani) [1790350 1782598]
- [powerpc] powerpc/tm: Fix FP/VMX unavailable exceptions inside a transaction (Gustavo Duarte) [1788862 1750653] {CVE-2019-15030}
- [powerpc] powerpc/tm: Fix restoring FP/VMX facility incorrectly on interrupts (Gustavo Duarte) [1791630 1750653] {CVE-2019-15031}
- [scsi] scsi: qla2xxx: Fix different size DMA Alloc/Unmap (Himanshu Madhani) [1788206 1753031]
- [scsi] qla2xxx: call dma_free_coherent with correct size in all cases in qla24xx_sp_unmap (Himanshu Madhani) [1788206 1753031]
- [fs] devpts_pty_kill(): don't bother with d_delete() (Eric Sandeen) [1783959 1772718]
- [fs] devpts: always delete dcache dentry-s in dput() (Eric Sandeen) [1783959 1772718]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.7.1.el8_1]" date="1582286400">- [hid] hiddev: do cleanup in failure of opening a device (Benjamin Tissoires) [1803458 1803460] {CVE-2019-19527}
- [hid] hiddev: avoid opening a disconnected device (Benjamin Tissoires) [1803458 1803460] {CVE-2019-19527}
- [nvme] nvmet: fix discover log page when offsets are used (Gopal Tiwari) [1801216 1745836]
- [netdrv] ibmvnic: Serialize device queries (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Bound waits for device queries (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Terminate waiting device threads after loss of service (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Fix completion structure initialization (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Ignore H_FUNCTION return from H_EOI to tolerate XIVE mode (Steve Best) [1794060 1778037]
- [tools] selftests/powerpc: Fix compile error on tlbie_test due to newer gcc (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [tools] selftests/powerpc: Add test case for tlbie vs mtpidr ordering issue (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/mm: Fixup tlbie vs mtpidr/mtlpidr ordering issue on POWER9 (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/book3s64/radix: Rename CPU_FTR_P9_TLBIE_BUG feature flag (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/book3s64/mm: Don't do tlbie fixup for some hardware revisions (Desnes Augusto Nunes do Rosario) [1794058 1755707]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.8.1.el8_1]" date="1582632000">- rebuild, due infrastructure issues last kernel build wasn't signed properly [1807231 1807216]</changelog>
</package>
<package pkgid="5f1ba57df24441be34e315f40c1ca2ff36699b64198976f571b384c5b30d1e5e" name="kernel" arch="src">
  <version epoch="0" ver="4.18.0" rel="147.8.1.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.1.1.el8_1]" date="1573560000">- [arm64] arm64/sve: Fix wrong free for task-&gt;thread.sve_state (Andrew Jones) [1767358 1756450]
- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.2.1.el8_1]" date="1574424000">- [sched] fair: Scale bandwidth quota and period without losing quota/period ratio precision (Phil Auld) [1773568 1706247]
- [sched] fair: Fix -Wunused-but-set-variable warnings (Phil Auld) [1773568 1706247]
- [sched] fair: Fix low cpu usage with high throttling by removing expiration of cpu-local slices (Phil Auld) [1773568 1706247]
- [powerpc] powerpc/pseries: Track LMB nid instead of using device tree (Steve Best) [1772110 1758742]
- [powerpc] powerpc/pseries/memory-hotplug: Only update DT once per memory DLPAR request (Steve Best) [1772110 1758742]
- [powerpc] powerpc/rtas: allow rescheduling while changing cpu states (Steve Best) [1772109 1758651]
- [powerpc] powerpc/pseries/mobility: use cond_resched when updating device tree (Steve Best) [1772109 1758651]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1770177 1752498]
- [fs] CIFS: Fix use after free of file info structures (Dave Wysochanski) [1767357 1757865]
- [fs] cifs: use cifsInodeInfo-&gt;open_file_lock while iterating to avoid a panic (Dave Wysochanski) [1767357 1757865]
- [netdrv] net/ibmvnic: prevent more than one thread from running in reset (Steve Best) [1764830 1756943]
- [netdrv] net/ibmvnic: unlock rtnl_lock in reset so linkwatch_event can run (Steve Best) [1764830 1756943]
- [netdrv] ibmvnic: Warn unknown speed message only when carrier is present (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: Fix missing { in __ibmvnic_reset (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: free reset work of removed device from queue (Steve Best) [1764832 1749873]
- [netdrv] ibmvnic: Do not process reset during or after device removal (Steve Best) [1764832 1749873]
- [cpuidle] cpuidle: governor: Add new governors to cpuidle_governors again (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: do not set an owner to allow modunload (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: set haltpoll as preferred governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: allow governor switch on cpuidle_register_driver() (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: Add cpuidle.governor= command line parameter (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: vcpu hotplug support (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: header file stubs must be "static inline" (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: return -ENODEV on modinit failure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1764831 1759282]
- [x86] kvm: x86: add host poll control msrs (Vitaly Kuznetsov) [1764831 1749495]
- [s390] s390/setup: Fix kernel lock down for s390 (Philipp Rudo) [1764827 1748343]
- [powerpc] powerpc: Allow flush_(inval_)dcache_range to work across ranges &gt;4GB (Steve Best) [1764826 1744062]
- [fs] mm/huge_memory: fix vmf_insert_pfn_{pmd, pud}() crash, handle unaligned addresses (Jeff Moyer) [1764825 1743159]
- [mm] mm/huge_memory.c: fix modifying of page protection by insert_pfn_pmd() (Jeff Moyer) [1764825 1743159]
- [pci] PCI: hv: Use bytes 4 and 5 from instance ID as the PCI domain numbers (Mohammed Gamal) [1764634 1671288]
- [pci] PCI: hv: Detect and fix Hyper-V PCI domain number collision (Mohammed Gamal) [1764634 1671288]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.3.1.el8_1]" date="1574769600">- [x86] kvm: svm: taint module and print taint message iff nested is enabled (Bandan Das) [1776114 1775410]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.4.1.el8_1]" date="1576497600">- [block] blk-mq: apply normal plugging for HDD (Ming Lei) [1782181 1759380]
- [block] blk-mq: honor IO scheduler for multiqueue devices (Ming Lei) [1782181 1759380]
- [block] blk-mq: simplify blk_mq_make_request() (Ming Lei) [1782181 1759380]
- [block] blk-mq: remove blk_mq_put_ctx() (Ming Lei) [1782181 1759380]
- [x86] kvm: vmx: use MSR_IA32_TSX_CTRL to hard-disable TSX on guest that lack it (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: vmx: implement MSR_IA32_TSX_CTRL disable RTM functionality (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: implement MSR_IA32_TSX_CTRL effect on CPUID (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: do not modify masked bits of shared MSRs (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: fix presentation of TSX feature in ARCH_CAPABILITIES (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm/x86: Export MDS_NO=0 to guests when TSX is enabled (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [fs] cifs: Fix cifsInodeInfo lock_sem deadlock when reconnect occurs (Leif Sahlberg) [1778693 1765979]
- [fs] cifs: avoid using MID 0xFFFF (Leif Sahlberg) [1778693 1765979]
- [fs] cifs: Fix retry mid list corruption on reconnects (Leif Sahlberg) [1778693 1765979]
- [fs] smb3: fix unmount hang in open_shroot (Leif Sahlberg) [1781113 1757670]
- [fs] CIFS: fix deadlock in cached root handling (Leif Sahlberg) [1781113 1757670]
- [fs] Fix match_server check to allow for auto dialect negotiate (Leif Sahlberg) [1781113 1757670]
- [fs] SMB3: retry on STATUS_INSUFFICIENT_RESOURCES instead of failing write (Leif Sahlberg) [1781113 1757670]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1781113 1757670]
- [fs] cifs: fix strcat buffer overflow and reduce raciness in smb21_set_oplock_level() (Leif Sahlberg) [1781113 1757670]
- [fs] smb3: fix signing verification of large reads (Dave Wysochanski) [1781110 1753114]
- [scsi] scsi: lpfc: Fix port relogin failure due to GID_FT interaction (Dick Kennedy) [1781108 1733217]
- [fs] xfs: fix missing ILOCK unlock when xfs_setattr_nonsize fails due to EDQUOT (Bill O'Donnell) [1778692 1739607]
- [net] cfg80211: wext: avoid copying malformed SSIDs (Jarod Wilson) [1778633 1778634] {CVE-2019-17133}
- [block] blkcg: perpcu_ref init/exit should be done from blkg_alloc/free() (Ming Lei) [1777766 1741392]
- [fs] userfaultfd_release: always remove uffd flags and clear vm_userfaultfd_ctx (Alex Gladkov) [1777389 1749763] {CVE-2019-14898}
- [netdrv] mwifiex: Fix three heap overflow at parsing element in cfg80211_ap_settings (Jarod Wilson) [1776618 1775484] {CVE-2019-14814 CVE-2019-14815 CVE-2019-14816}
- [netdrv] mwifiex: fix possible heap overflow in mwifiex_process_country_ie() (Jarod Wilson) [1776209 1776210] {CVE-2019-14895}
- [netdrv] mwifiex: Fix heap overflow in mmwifiex_process_tdls_action_frame() (Jarod Wilson) [1776161 1776162] {CVE-2019-14901}
- [netdrv] rtlwifi: Fix potential overflow on P2P code (Jarod Wilson) [1775222 1775223] {CVE-2019-17666}
- [pci] hv: Avoid use of hv_pci_dev-&gt;pci_slot after freeing it (Mohammed Gamal) [1764635 1737569]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.5.1.el8_1]" date="1579003200">- [powerpc] powerpc/shared: Use static key to detect shared processor (Phil Auld) [1781114 1767529]
- [powerpc] powerpc/vcpu: Assume dedicated processors as non-preempt (Phil Auld) [1781114 1767529]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.6.1.el8_1]" date="1581940800">- [crypto] crypto: chelsio - count incomplete block in IV (Jonathan Toppins) [1798527 1725813]
- [crypto] crypto: chelsio - Fix softlockup with heavy I/O (Jonathan Toppins) [1798527 1725813]
- [crypto] crypto: chelsio - Fix NULL pointer dereference (Jonathan Toppins) [1798527 1725813]
- [nvme] nvme: Treat discovery subsystems as unique subsystems (Ewan Milne) [1798381 1757525]
- [mm] mm/page-writeback.c: don't break integrity writeback on -&gt;writepage() error (Christoph von Recklinghausen) [1797962 1782117]
- [lib] crc-t10dif: crc_t10dif_mutex can be static (Vladis Dronov) [1797961 1769462]
- [lib] crc-t10dif: Allow current transform to be inspected in sysfs (Vladis Dronov) [1797961 1769462]
- [lib] crc-t10dif: Pick better transform if one becomes available (Vladis Dronov) [1797961 1769462]
- [crypto] api - Introduce notifier for new crypto algorithms (Vladis Dronov) [1797961 1769462]
- [block] blk-mq: make sure that line break can be printed (Ming Lei) [1797960 1741462]
- [block] blk-mq: avoid sysfs buffer overflow with too many CPU cores (Ming Lei) [1797960 1741462]
- [scsi] hpsa: update driver version (Joseph Szczypek) [1797519 1761968]
- [scsi] scsi: hpsa: add missing hunks in reset-patch (Joseph Szczypek) [1797519 1761968]
- [arm64] arm64: compat: Workaround Neoverse-N1 #1542419 for compat user-space (Mark Salter) [1797518 1757828]
- [arm64] arm64: Fake the IminLine size on systems affected by Neoverse-N1 #1542419 (Mark Salter) [1797518 1757828]
- [arm64] arm64: errata: Hide CTR_EL0.DIC on systems affected by Neoverse-N1 #1542419 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Handle erratum 1418040 as a superset of erratum 1188873 (Mark Salter) [1797518 1757828]
- [arm64] arm64: errata: Add workaround for Cortex-A76 erratum #1463225 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Kconfig: Tidy up errata workaround help text (Mark Salter) [1797518 1757828]
- [arm64] arm64: Apply ARM64_ERRATUM_1188873 to Neoverse-N1 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Add part number for Neoverse N1 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Make ARM64_ERRATUM_1188873 depend on COMPAT (Mark Salter) [1797518 1757828]
- [arm64] arm64: Restrict ARM64_ERRATUM_1188873 mitigation to AArch32 (Mark Salter) [1797518 1757828]
- [arm64] arm64: arch_timer: avoid unused function warning (Mark Salter) [1797518 1757828]
- [arm64] arm64: Add workaround for Cortex-A76 erratum 1286807 (Mark Salter) [1797518 1757828]
- [md] dm snapshot: rework COW throttling to fix deadlock (Mike Snitzer) [1796490 1758605]
- [md] dm snapshot: introduce account_start_copy() and account_end_copy() (Mike Snitzer) [1796490 1758605]
- [block] fix memleak of bio integrity data (Ming Lei) [1795338 1779898]
- [powerpc] xive: Prevent page fault issues in the machine crash handler (Diego Domingos) [1795337 1756116]
- [scsi] scsi: megaraid_sas: IRQ poll to avoid CPU hard lockups (Tomas Henzl) [1795335 1726251]
- [powerpc] powerpc/perf: Disable trace_imc pmu (Steve Best) [1794061 1785573]
- [s390] s390/qeth: ensure linear access to packet headers (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: guard against runt packets (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: handle skb allocation error gracefully (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: drop unwanted packets earlier in RX path (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: support per-frame invalidation (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: gather more detailed RX dropped/error statistics (Philipp Rudo) [1794059 1781085]
- [s390] s390/net: Mark expected switch fall-throughs (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: consolidate skb RX processing in L3 driver (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: remove RX seqno in skb-&gt;cb (Philipp Rudo) [1794059 1781085]
- [powerpc] kvm: ppc: book3s hv: Flush link stack on guest exit to host kernel (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] book3s64: Fix link stack flush on context switch (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64s: support nospectre_v2 cmdline option (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Update Spectre v2 reporting (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Add nospectre_v2 command line argument (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Fix spectre_v2 mitigations reporting (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64: Make meltdown reporting Book3S 64 specific (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64: Disable the speculation barrier from the command line (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [firmware] efi/memreserve: Register reservations as 'reserved' in /proc/iomem (Bhupesh Sharma) [1792200 1772730]
- [firmware] efi/memreserve: deal with memreserve entries in unmapped memory (Bhupesh Sharma) [1792200 1772730]
- [s390] s390/cpum_sf: save TOD clock base in SDBs for time conversion (Philipp Rudo) [1792198 1743504]
- [s390] s390/sclp: Fix bit checked for has_sipl (Philipp Rudo) [1791408 1748347]
- [scsi] qla2xxx: Fix incorrect SFUB length used for Secure Flash Update MB Cmd (Himanshu Madhani) [1790350 1782598]
- [scsi] qla2xxx: Added support for MPI and PEP regions for ISP28XX (Himanshu Madhani) [1790350 1782598]
- [scsi] qla2xxx: Correctly retrieve and interpret active flash region (Himanshu Madhani) [1790350 1782598]
- [powerpc] powerpc/tm: Fix FP/VMX unavailable exceptions inside a transaction (Gustavo Duarte) [1788862 1750653] {CVE-2019-15030}
- [powerpc] powerpc/tm: Fix restoring FP/VMX facility incorrectly on interrupts (Gustavo Duarte) [1791630 1750653] {CVE-2019-15031}
- [scsi] scsi: qla2xxx: Fix different size DMA Alloc/Unmap (Himanshu Madhani) [1788206 1753031]
- [scsi] qla2xxx: call dma_free_coherent with correct size in all cases in qla24xx_sp_unmap (Himanshu Madhani) [1788206 1753031]
- [fs] devpts_pty_kill(): don't bother with d_delete() (Eric Sandeen) [1783959 1772718]
- [fs] devpts: always delete dcache dentry-s in dput() (Eric Sandeen) [1783959 1772718]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.7.1.el8_1]" date="1582286400">- [hid] hiddev: do cleanup in failure of opening a device (Benjamin Tissoires) [1803458 1803460] {CVE-2019-19527}
- [hid] hiddev: avoid opening a disconnected device (Benjamin Tissoires) [1803458 1803460] {CVE-2019-19527}
- [nvme] nvmet: fix discover log page when offsets are used (Gopal Tiwari) [1801216 1745836]
- [netdrv] ibmvnic: Serialize device queries (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Bound waits for device queries (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Terminate waiting device threads after loss of service (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Fix completion structure initialization (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Ignore H_FUNCTION return from H_EOI to tolerate XIVE mode (Steve Best) [1794060 1778037]
- [tools] selftests/powerpc: Fix compile error on tlbie_test due to newer gcc (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [tools] selftests/powerpc: Add test case for tlbie vs mtpidr ordering issue (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/mm: Fixup tlbie vs mtpidr/mtlpidr ordering issue on POWER9 (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/book3s64/radix: Rename CPU_FTR_P9_TLBIE_BUG feature flag (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/book3s64/mm: Don't do tlbie fixup for some hardware revisions (Desnes Augusto Nunes do Rosario) [1794058 1755707]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.8.1.el8_1]" date="1582632000">- rebuild, due infrastructure issues last kernel build wasn't signed properly [1807231 1807216]</changelog>
</package>
<package pkgid="b6d67a8ebdb5210fb6532f35fdd05056184822d9cf6315b89a4e3cefffc4522d" name="kernel" arch="src">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="10085a0789977e3c45e601ab893bd93894fce5f53534267ef789361e49a1c428" name="kernel" arch="src">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="95649c5b110a34018a927bb3ec69c654adf75146f5879202f6fd3456c4f0e7b0" name="kernel" arch="src">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="2e55dfb397639cd8469addf5f74c86054fe7b4911eeb636102ef3c5af6f28b15" name="kernel" arch="src">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="a42ae1c4c8906e39fa063dcbfe289bab64a2bc91da40c35a76dcbd8dba518037" name="kernel" arch="src">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="3e4f98e349a57e28504550b5287ca42ab930ef9171c1090b9d65eb458fa20cf2" name="kernel" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="e5937f58c0a38d71f209ee232fc610cdc3d56f09144acb7426eb55cf11e07333" name="kernel" arch="src">
  <version epoch="0" ver="4.18.0" rel="193.28.1.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.20.1.el8_2]" date="1599134400">- [infiniband] IB/rdmavt: Fix RQ counting issues causing use of an invalid RWQE (Kamal Heib) [1872771 1850314]
- [block] blk-mq: Rerun dispatching in the case of budget contention (Ming Lei) [1869779 1824037]
- [block] blk-mq: Add blk_mq_delay_run_hw_queues() API call (Ming Lei) [1869779 1824037]
- [block] blk-mq: In blk_mq_dispatch_rq_list() "no budget" is a reason to kick (Ming Lei) [1869779 1824037]
- [block] blk-mq: Put driver tag in blk_mq_dispatch_rq_list() when no budget (Ming Lei) [1869779 1824037]
- [md] dm mpath: use double checked locking in fast path (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rename current_pgpath to pgpath in multipath_prepare_ioctl (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rework __map_bio() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: factor out multipath_queue_bio (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: push locking down to must_push_back_rq() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: take m-&gt;lock spinlock when testing QUEUE_IF_NO_PATH (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: changes from initial m-&gt;flags locking audit (Mike Snitzer) [1869386 1848651]
- [md] dm rq: don't call blk_mq_queue_stopped() in dm_stop_queue() (Mike Snitzer) [1869386 1848651]
- [md] dm: do not use waitqueue for request-based DM (Mike Snitzer) [1869386 1848651]
- [block] blk-mq: consider non-idle request as "inflight" in blk_mq_rq_inflight() (Mike Snitzer) [1869386 1848651]
- [kernel] sched/deadline: Initialize -&gt;dl_boosted (Phil Auld) [1867612 1854179]
- [kernel] sched/core: Fix PI boosting between RT and DEADLINE tasks (Phil Auld) [1867612 1854179]
- [net] net/smc: tolerate future SMCD versions (Philipp Rudo) [1866390 1854992]
- [net] openvswitch: fixes potential deadlock in dp cleanup code (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: reorder masks array based on usage (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: take into account de-fragmentation/gso_size in execute_check_pkt_len (Lorenzo Bianconi) [1860169 1851888]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.21.1.el8_2]" date="1599739200">- [scsi] scsi: ibmvfc: Fix NULL return compiler warning (Steve Best) [1866371 1810653]
- [scsi] scsi: ibmvfc: Avoid loss of all paths during SVC node reboot (Steve Best) [1866371 1810653]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.22.1.el8_2]" date="1600257600">- [crypto] pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1877530 1862072]
- [crypto] Revert "pefile: Tolerate other pefile signatures after first" (Bruno Meneguele)
- [infiniband] IB/hfi1: Fix another case where pq is left on waitlist (Kamal Heib) [1872766 1859209]
- [infiniband] IB/hfi1: Ensure pq is not left on waitlist (Kamal Heib) [1872766 1859209]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.23.1.el8_2]" date="1600344000">- [net] packet: fix overflow in tpacket_rcv (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}
- [net] packet: make tp_drops atomic (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.24.1.el8_2]" date="1600862400">- [kernel] timers: Remove must_forward_clk (Phil Auld) [1877417 1833096]
- [kernel] timers: Spare timer softirq until next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Expand clk forward logic beyond nohz (Phil Auld) [1877417 1833096]
- [kernel] timers: Reuse next expiry cache after nohz exit (Phil Auld) [1877417 1833096]
- [kernel] timers: Always keep track of next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Optimize _next_timer_interrupt() level iteration (Phil Auld) [1877417 1833096]
- [kernel] timers: Add comments about calc_index() ceiling work (Phil Auld) [1877417 1833096]
- [kernel] timers: Move trigger_dyntick_cpu() to enqueue_timer() (Phil Auld) [1877417 1833096]
- [kernel] timers: Use only bucket expiry for base-&gt;next_expiry value (Phil Auld) [1877417 1833096]
- [kernel] timers: Preserve higher bits of expiration on index calculation (Phil Auld) [1877417 1833096]
- [kernel] timer: Fix wheel index calculation on last level (Phil Auld) [1877417 1833096]
- [kernel] timer: Prevent base-&gt;clk from moving backward (Phil Auld) [1877417 1833096]
- [kernel] timer: Read jiffies once when forwarding base clk (Phil Auld) [1877417 1833096]
- [infiniband] RDMA/umem: Fix ib_umem_find_best_pgsz() (Kamal Heib) [1872424 1856158]
- [net] net: accept an empty mask in /sys/class/net/*/queues/rx-*/rps_cpus (Nitesh Narayan Lal) [1870181 1868433]
- [net] net: Restrict receive packets queuing to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [pci] PCI: Restrict probe functions to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [lib] lib: Restrict cpumask_local_spread to houskeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [s390] s390/pci: Fix unexpected write combine on resource (Philipp Rudo) [1869276 1827311]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.25.1.el8_2]" date="1601553600">- [net] netfilter: conntrack: proc: rename stat column (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: add clash resolution stat counter (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: remove ignore stats (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not increment two error counters at same time (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not auto-delete clash entries on reply (Florian Westphal) [1882095 1875681]
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1881085 1875316] {CVE-2020-14385}
- [kernel] time/tick-broadcast: Fix tick_broadcast_offline() lockdep complaint (Alexey Klimov) [1880081 1877380]
- [net] atomics/treewide: Rename __atomic_add_unless() =&gt; atomic_fetch_add_unless() (Yauheni Kaliuta) [1880081 1813370]
- [kernel] timers: Lower base clock forwarding threshold (Phil Auld) [1877417 1833096]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.26.1.el8_2]" date="1602158400">- [firmware] efi: don't reserve MOK config table memory region (Kairui Song) [1879988 1878584]
- [security] integrity: Load certs from the EFI MOK config table (Lenny Szubowicz) [1877528 1868306]
- [security] integrity: Move import of MokListRT certs to a separate routine (Lenny Szubowicz) [1877528 1868306]
- [firmware] efi: Support for MOK variable config table (Lenny Szubowicz) [1877528 1868306]
- [security] efi: Only print errors about failing to get certs if EFI vars are found (Lenny Szubowicz) [1877528 1804969]
- [fs] ceph: fix inode number handling on arches with 32-bit ino_t (Jeff Layton) [1875787 1866018]
- [fs] ceph: handle zero-length feature mask in session messages (Jeff Layton) [1875787 1866018]
- [fs] ceph: fix endianness bug when handling MDS session feature bits (Jeff Layton) [1875787 1866018]
- [netdrv] net/mlx5e: Fix missing cleanup of ethtool steering during rep rx cleanup (Alaa Hleihel) [1857777 1856660]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.27.1.el8_2]" date="1602763200">- [powerpc] powerpc/pseries: Do not initiate shutdown when system is running on UPS (Diego Domingos) [1882243 1870477]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859471 1859472] {CVE-2020-14331}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.28.1.el8_2]" date="1602849600">- [net] Bluetooth: L2CAP: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888256 1888258] {CVE-2020-12351}
- [net] Bluetooth: A2MP: Fix not initializing all members (Gopal Tiwari) [1888906 1888807] {CVE-2020-12352}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-193.28.1.el8.centos" date="1603195200">- Apply debranding changes</changelog>
</package>
<package pkgid="8eacce7650a18d2af1c92b0f2899525099bfa1aae26763195809632b03d8f520" name="kernel" arch="src">
  <version epoch="0" ver="4.18.0" rel="193.28.1.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.20.1.el8_2]" date="1599134400">- [infiniband] IB/rdmavt: Fix RQ counting issues causing use of an invalid RWQE (Kamal Heib) [1872771 1850314]
- [block] blk-mq: Rerun dispatching in the case of budget contention (Ming Lei) [1869779 1824037]
- [block] blk-mq: Add blk_mq_delay_run_hw_queues() API call (Ming Lei) [1869779 1824037]
- [block] blk-mq: In blk_mq_dispatch_rq_list() "no budget" is a reason to kick (Ming Lei) [1869779 1824037]
- [block] blk-mq: Put driver tag in blk_mq_dispatch_rq_list() when no budget (Ming Lei) [1869779 1824037]
- [md] dm mpath: use double checked locking in fast path (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rename current_pgpath to pgpath in multipath_prepare_ioctl (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rework __map_bio() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: factor out multipath_queue_bio (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: push locking down to must_push_back_rq() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: take m-&gt;lock spinlock when testing QUEUE_IF_NO_PATH (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: changes from initial m-&gt;flags locking audit (Mike Snitzer) [1869386 1848651]
- [md] dm rq: don't call blk_mq_queue_stopped() in dm_stop_queue() (Mike Snitzer) [1869386 1848651]
- [md] dm: do not use waitqueue for request-based DM (Mike Snitzer) [1869386 1848651]
- [block] blk-mq: consider non-idle request as "inflight" in blk_mq_rq_inflight() (Mike Snitzer) [1869386 1848651]
- [kernel] sched/deadline: Initialize -&gt;dl_boosted (Phil Auld) [1867612 1854179]
- [kernel] sched/core: Fix PI boosting between RT and DEADLINE tasks (Phil Auld) [1867612 1854179]
- [net] net/smc: tolerate future SMCD versions (Philipp Rudo) [1866390 1854992]
- [net] openvswitch: fixes potential deadlock in dp cleanup code (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: reorder masks array based on usage (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: take into account de-fragmentation/gso_size in execute_check_pkt_len (Lorenzo Bianconi) [1860169 1851888]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.21.1.el8_2]" date="1599739200">- [scsi] scsi: ibmvfc: Fix NULL return compiler warning (Steve Best) [1866371 1810653]
- [scsi] scsi: ibmvfc: Avoid loss of all paths during SVC node reboot (Steve Best) [1866371 1810653]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.22.1.el8_2]" date="1600257600">- [crypto] pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1877530 1862072]
- [crypto] Revert "pefile: Tolerate other pefile signatures after first" (Bruno Meneguele)
- [infiniband] IB/hfi1: Fix another case where pq is left on waitlist (Kamal Heib) [1872766 1859209]
- [infiniband] IB/hfi1: Ensure pq is not left on waitlist (Kamal Heib) [1872766 1859209]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.23.1.el8_2]" date="1600344000">- [net] packet: fix overflow in tpacket_rcv (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}
- [net] packet: make tp_drops atomic (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.24.1.el8_2]" date="1600862400">- [kernel] timers: Remove must_forward_clk (Phil Auld) [1877417 1833096]
- [kernel] timers: Spare timer softirq until next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Expand clk forward logic beyond nohz (Phil Auld) [1877417 1833096]
- [kernel] timers: Reuse next expiry cache after nohz exit (Phil Auld) [1877417 1833096]
- [kernel] timers: Always keep track of next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Optimize _next_timer_interrupt() level iteration (Phil Auld) [1877417 1833096]
- [kernel] timers: Add comments about calc_index() ceiling work (Phil Auld) [1877417 1833096]
- [kernel] timers: Move trigger_dyntick_cpu() to enqueue_timer() (Phil Auld) [1877417 1833096]
- [kernel] timers: Use only bucket expiry for base-&gt;next_expiry value (Phil Auld) [1877417 1833096]
- [kernel] timers: Preserve higher bits of expiration on index calculation (Phil Auld) [1877417 1833096]
- [kernel] timer: Fix wheel index calculation on last level (Phil Auld) [1877417 1833096]
- [kernel] timer: Prevent base-&gt;clk from moving backward (Phil Auld) [1877417 1833096]
- [kernel] timer: Read jiffies once when forwarding base clk (Phil Auld) [1877417 1833096]
- [infiniband] RDMA/umem: Fix ib_umem_find_best_pgsz() (Kamal Heib) [1872424 1856158]
- [net] net: accept an empty mask in /sys/class/net/*/queues/rx-*/rps_cpus (Nitesh Narayan Lal) [1870181 1868433]
- [net] net: Restrict receive packets queuing to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [pci] PCI: Restrict probe functions to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [lib] lib: Restrict cpumask_local_spread to houskeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [s390] s390/pci: Fix unexpected write combine on resource (Philipp Rudo) [1869276 1827311]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.25.1.el8_2]" date="1601553600">- [net] netfilter: conntrack: proc: rename stat column (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: add clash resolution stat counter (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: remove ignore stats (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not increment two error counters at same time (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not auto-delete clash entries on reply (Florian Westphal) [1882095 1875681]
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1881085 1875316] {CVE-2020-14385}
- [kernel] time/tick-broadcast: Fix tick_broadcast_offline() lockdep complaint (Alexey Klimov) [1880081 1877380]
- [net] atomics/treewide: Rename __atomic_add_unless() =&gt; atomic_fetch_add_unless() (Yauheni Kaliuta) [1880081 1813370]
- [kernel] timers: Lower base clock forwarding threshold (Phil Auld) [1877417 1833096]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.26.1.el8_2]" date="1602158400">- [firmware] efi: don't reserve MOK config table memory region (Kairui Song) [1879988 1878584]
- [security] integrity: Load certs from the EFI MOK config table (Lenny Szubowicz) [1877528 1868306]
- [security] integrity: Move import of MokListRT certs to a separate routine (Lenny Szubowicz) [1877528 1868306]
- [firmware] efi: Support for MOK variable config table (Lenny Szubowicz) [1877528 1868306]
- [security] efi: Only print errors about failing to get certs if EFI vars are found (Lenny Szubowicz) [1877528 1804969]
- [fs] ceph: fix inode number handling on arches with 32-bit ino_t (Jeff Layton) [1875787 1866018]
- [fs] ceph: handle zero-length feature mask in session messages (Jeff Layton) [1875787 1866018]
- [fs] ceph: fix endianness bug when handling MDS session feature bits (Jeff Layton) [1875787 1866018]
- [netdrv] net/mlx5e: Fix missing cleanup of ethtool steering during rep rx cleanup (Alaa Hleihel) [1857777 1856660]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.27.1.el8_2]" date="1602763200">- [powerpc] powerpc/pseries: Do not initiate shutdown when system is running on UPS (Diego Domingos) [1882243 1870477]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859471 1859472] {CVE-2020-14331}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.28.1.el8_2]" date="1602849600">- [net] Bluetooth: L2CAP: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888256 1888258] {CVE-2020-12351}
- [net] Bluetooth: A2MP: Fix not initializing all members (Gopal Tiwari) [1888906 1888807] {CVE-2020-12352}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-193.28.1.el8.centos" date="1603195200">- Apply debranding changes</changelog>
</package>
<package pkgid="f08ebb02076b145776adbf107072e5e6480c9a559072696f096b3c4dd6f62296" name="kernel" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="193.28.1.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.20.1.el8_2]" date="1599134400">- [infiniband] IB/rdmavt: Fix RQ counting issues causing use of an invalid RWQE (Kamal Heib) [1872771 1850314]
- [block] blk-mq: Rerun dispatching in the case of budget contention (Ming Lei) [1869779 1824037]
- [block] blk-mq: Add blk_mq_delay_run_hw_queues() API call (Ming Lei) [1869779 1824037]
- [block] blk-mq: In blk_mq_dispatch_rq_list() "no budget" is a reason to kick (Ming Lei) [1869779 1824037]
- [block] blk-mq: Put driver tag in blk_mq_dispatch_rq_list() when no budget (Ming Lei) [1869779 1824037]
- [md] dm mpath: use double checked locking in fast path (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rename current_pgpath to pgpath in multipath_prepare_ioctl (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rework __map_bio() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: factor out multipath_queue_bio (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: push locking down to must_push_back_rq() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: take m-&gt;lock spinlock when testing QUEUE_IF_NO_PATH (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: changes from initial m-&gt;flags locking audit (Mike Snitzer) [1869386 1848651]
- [md] dm rq: don't call blk_mq_queue_stopped() in dm_stop_queue() (Mike Snitzer) [1869386 1848651]
- [md] dm: do not use waitqueue for request-based DM (Mike Snitzer) [1869386 1848651]
- [block] blk-mq: consider non-idle request as "inflight" in blk_mq_rq_inflight() (Mike Snitzer) [1869386 1848651]
- [kernel] sched/deadline: Initialize -&gt;dl_boosted (Phil Auld) [1867612 1854179]
- [kernel] sched/core: Fix PI boosting between RT and DEADLINE tasks (Phil Auld) [1867612 1854179]
- [net] net/smc: tolerate future SMCD versions (Philipp Rudo) [1866390 1854992]
- [net] openvswitch: fixes potential deadlock in dp cleanup code (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: reorder masks array based on usage (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: take into account de-fragmentation/gso_size in execute_check_pkt_len (Lorenzo Bianconi) [1860169 1851888]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.21.1.el8_2]" date="1599739200">- [scsi] scsi: ibmvfc: Fix NULL return compiler warning (Steve Best) [1866371 1810653]
- [scsi] scsi: ibmvfc: Avoid loss of all paths during SVC node reboot (Steve Best) [1866371 1810653]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.22.1.el8_2]" date="1600257600">- [crypto] pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1877530 1862072]
- [crypto] Revert "pefile: Tolerate other pefile signatures after first" (Bruno Meneguele)
- [infiniband] IB/hfi1: Fix another case where pq is left on waitlist (Kamal Heib) [1872766 1859209]
- [infiniband] IB/hfi1: Ensure pq is not left on waitlist (Kamal Heib) [1872766 1859209]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.23.1.el8_2]" date="1600344000">- [net] packet: fix overflow in tpacket_rcv (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}
- [net] packet: make tp_drops atomic (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.24.1.el8_2]" date="1600862400">- [kernel] timers: Remove must_forward_clk (Phil Auld) [1877417 1833096]
- [kernel] timers: Spare timer softirq until next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Expand clk forward logic beyond nohz (Phil Auld) [1877417 1833096]
- [kernel] timers: Reuse next expiry cache after nohz exit (Phil Auld) [1877417 1833096]
- [kernel] timers: Always keep track of next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Optimize _next_timer_interrupt() level iteration (Phil Auld) [1877417 1833096]
- [kernel] timers: Add comments about calc_index() ceiling work (Phil Auld) [1877417 1833096]
- [kernel] timers: Move trigger_dyntick_cpu() to enqueue_timer() (Phil Auld) [1877417 1833096]
- [kernel] timers: Use only bucket expiry for base-&gt;next_expiry value (Phil Auld) [1877417 1833096]
- [kernel] timers: Preserve higher bits of expiration on index calculation (Phil Auld) [1877417 1833096]
- [kernel] timer: Fix wheel index calculation on last level (Phil Auld) [1877417 1833096]
- [kernel] timer: Prevent base-&gt;clk from moving backward (Phil Auld) [1877417 1833096]
- [kernel] timer: Read jiffies once when forwarding base clk (Phil Auld) [1877417 1833096]
- [infiniband] RDMA/umem: Fix ib_umem_find_best_pgsz() (Kamal Heib) [1872424 1856158]
- [net] net: accept an empty mask in /sys/class/net/*/queues/rx-*/rps_cpus (Nitesh Narayan Lal) [1870181 1868433]
- [net] net: Restrict receive packets queuing to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [pci] PCI: Restrict probe functions to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [lib] lib: Restrict cpumask_local_spread to houskeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [s390] s390/pci: Fix unexpected write combine on resource (Philipp Rudo) [1869276 1827311]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.25.1.el8_2]" date="1601553600">- [net] netfilter: conntrack: proc: rename stat column (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: add clash resolution stat counter (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: remove ignore stats (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not increment two error counters at same time (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not auto-delete clash entries on reply (Florian Westphal) [1882095 1875681]
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1881085 1875316] {CVE-2020-14385}
- [kernel] time/tick-broadcast: Fix tick_broadcast_offline() lockdep complaint (Alexey Klimov) [1880081 1877380]
- [net] atomics/treewide: Rename __atomic_add_unless() =&gt; atomic_fetch_add_unless() (Yauheni Kaliuta) [1880081 1813370]
- [kernel] timers: Lower base clock forwarding threshold (Phil Auld) [1877417 1833096]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.26.1.el8_2]" date="1602158400">- [firmware] efi: don't reserve MOK config table memory region (Kairui Song) [1879988 1878584]
- [security] integrity: Load certs from the EFI MOK config table (Lenny Szubowicz) [1877528 1868306]
- [security] integrity: Move import of MokListRT certs to a separate routine (Lenny Szubowicz) [1877528 1868306]
- [firmware] efi: Support for MOK variable config table (Lenny Szubowicz) [1877528 1868306]
- [security] efi: Only print errors about failing to get certs if EFI vars are found (Lenny Szubowicz) [1877528 1804969]
- [fs] ceph: fix inode number handling on arches with 32-bit ino_t (Jeff Layton) [1875787 1866018]
- [fs] ceph: handle zero-length feature mask in session messages (Jeff Layton) [1875787 1866018]
- [fs] ceph: fix endianness bug when handling MDS session feature bits (Jeff Layton) [1875787 1866018]
- [netdrv] net/mlx5e: Fix missing cleanup of ethtool steering during rep rx cleanup (Alaa Hleihel) [1857777 1856660]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.27.1.el8_2]" date="1602763200">- [powerpc] powerpc/pseries: Do not initiate shutdown when system is running on UPS (Diego Domingos) [1882243 1870477]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859471 1859472] {CVE-2020-14331}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.28.1.el8_2]" date="1602849600">- [net] Bluetooth: L2CAP: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888256 1888258] {CVE-2020-12351}
- [net] Bluetooth: A2MP: Fix not initializing all members (Gopal Tiwari) [1888906 1888807] {CVE-2020-12352}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-193.28.1.el8.centos" date="1603195200">- Apply debranding changes</changelog>
</package>
<package pkgid="0a43d46a7617e6fdcad0b7134f10018ff5ed355073918a5961cf74640dc2acae" name="kernel" arch="src">
  <version epoch="0" ver="4.18.0" rel="305.10.2.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.2.1.el8_4]" date="1620648000">- net/mlx5e: Allow to match on MPLS parameters only for MPLS over UDP (Alaa Hleihel) [1952061 1936742]
- net/mlx5e: Reject tc rules which redirect from a VF to itself (Alaa Hleihel) [1952065 1932839]
- net/mlx5: CT: Add support for matching on ct_state inv and rel flags (Alaa Hleihel) [1952062 1942681]
- KVM: VMX: Don't use vcpu-&gt;run-&gt;internal.ndata as an array index (Jon Maloy) [1954221 1954219]
- tools/power turbostat: Revert "[tools] tools/power turbostat: Enable accumulate RAPL display" (Prarit Bhargava) [1952987 1944699]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.3.1.el8_4]" date="1621252800">- Revert "uio: use request_threaded_irq instead" (Vitaly Kuznetsov) [1952952 1946644]
- drm/ast: Set format registers in primary plane's update (Lyude Paul) [1952900 1923857]
- net/sched: act_ct: clear post_ct if doing ct_clear (Marcelo Ricardo Leitner) [1956458 1941889]
- md/raid1: properly indicate failure when ending a failed write request (Nigel Croxon) [1955188 1954588]
- nitro_enclaves: Fix stale file descriptors on failed usercopy (Vitaly Kuznetsov) [1956379 1953717]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.4.1.el8_4]" date="1621944000">- vmxnet3: Set the default of vxlan overlay offload to disabled (Cathy Avery) [1960702 1941714]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.5.1.el8_4]" date="1622548800">- gfs2: report "already frozen/thawed" errors (Bob Peterson) [1961849 1932236]
- gfs2: move freeze glock outside the make_fs_rw and _ro functions (Bob Peterson) [1961849 1932236]
- gfs2: Add common helper for holding and releasing the freeze glock (Bob Peterson) [1961849 1932236]
- gfs2: in signal_our_withdraw wait for unfreeze of _this_ fs only (Bob Peterson) [1961849 1932236]
- gfs2: Don't freeze the file system during unmount (Bob Peterson) [1961849 1932236]
- gfs2: Fix regression in freeze_go_sync (Bob Peterson) [1961849 1932236]
- gfs2: The freeze glock should never be frozen (Bob Peterson) [1961849 1932236]
- gfs2: When freezing gfs2, use GL_EXACT and not GL_NOCACHE (Bob Peterson) [1961849 1932236]
- gfs2: read-only mounts should grab the sd_freeze_gl glock (Bob Peterson) [1961849 1932236]
- gfs2: freeze should work on read-only mounts (Bob Peterson) [1961849 1932236]
- gfs2: Abort gfs2_freeze if io error is seen (Bob Peterson) [1961849 1932236]
- CI: Disable result checking for realtime check (Veronika Kabatova)
- CI: Explicitly disable result checking for private CI (Veronika Kabatova)
- CI: Rename variable (Veronika Kabatova)
- CI: Update builder containers (Veronika Kabatova)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.6.1.el8_4]" date="1623067200">- openvswitch: fix stack OOB read while fragmenting IPv4 packets (Davide Caratti) [1963940 1924608]
- net/sched: sch_frag: fix stack OOB read while fragmenting IPv4 packets (Davide Caratti) [1963940 1924608]
- net/sched: act_ct: fix wild memory access when clearing fragments (Davide Caratti) [1963940 1924608]
- net: Treat __napi_schedule_irqoff() as __napi_schedule() on PREEMPT_RT (Ivan Vecera)
- redhat/configs: Add CONFIG_SYSTEM_REVOCATION_KEYS and CONFIG_SYSTEM_REVOCATION_LIST (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: add 'x509_revocation_list' to gitignore (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- integrity: Load mokx variables into the blacklist keyring (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Add ability to preload revocation certs (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Move load_system_certificate_list to a common function (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Add EFI_CERT_X509_GUID support for dbx entries (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- net/sched: cls_api: increase max_reclassify_loop (Davide Caratti) [1965148 1955136]
- dm writecache: fix performance degradation in ssd mode (Mike Snitzer) [1962241 1961859]
- scsi: fnic: Use scsi_host_busy_iter() to traverse commands (Ewan D. Milne) [1961705 1949250]
- scsi: fnic: Kill 'exclude_id' argument to fnic_cleanup_io() (Ewan D. Milne) [1961705 1949250]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.7.1.el8_4]" date="1623672000">- net: zero-initialize tc skb extension on allocation (Ivan Vecera) [1965457 1946986]
- net/sched: cls_flower: fix only mask bit check in the validate_ct_state (Ivan Vecera) [1965457 1946986]
- net: cls_api: Fix uninitialised struct field bo-&gt;unlocked_driver_cb (Ivan Vecera) [1965457 1946986]
- net/sched: act_api: fix miss set post_ct for ovs after do conntrack in act_ct (Ivan Vecera) [1965457 1946986]
- net/sched: cls_flower: validate ct_state for invalid and reply flags (Ivan Vecera) [1965457 1946986]
- flow_dissector: fix TTL and TOS dissection on IPv4 fragments (Paolo Abeni) [1963952 1950288]
- Revert "sctp: Fix SHUTDOWN CTSN Ack in the peer restart case" (Xin Long) [1965632 1953839]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [1965632 1953839]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [1965632 1953839]
- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962544 1962546] {CVE-2021-33034}
- x86/kvm: Unify kvm_pv_guest_cpu_reboot() with kvm_guest_cpu_offline() (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Disable all PV features on crash (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Disable kvmclock on all CPUs on shutdown (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Teardown PV features on boot CPU as well (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Fix pr_info() for async PF setup/teardown (Lenny Szubowicz) [1964930 1934273]
- net/sched: act_ct: Fix ct template allocation for zone 0 (Marcelo Ricardo Leitner) [1965150 1881824]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.8.1.el8_4]" date="1624363200">- iavf: amend removal of MODULE_VERSION (Stefan Assmann) [1969925 1955738]
- ixgbe: Amend commit acf03026ec5a to include a version string in module info. (Ken Cox) [1969922 1955759]
- i40e: amend removal of MODULE_VERSION (Stefan Assmann) [1969923 1955736]
- redhat/configs: Add CONFIG_PINCTRL_EMMITSBURG (David Arcari) [1963984 1959506]
- redhat/configs: Remove CONFIG_EMMITSBURG (David Arcari) [1963984 1959506]
- netlink: add tracepoint at NL_SET_ERR_MSG (Marcelo Ricardo Leitner) [1972938 1956983]
- Revert "[netdrv] net/intel: remove driver versions from Intel drivers" (Jonathan Toppins) [1969917 1955745]
- Amends commit ea6244cc248b to include a version string in module info. (Ken Cox) [1969915 1955726]
- Revert "[netdrv] net/broadcom: Clean broadcom code from driver versions" (Jonathan Toppins) [1969914 1955721]
- ena: revert removal of MODULE_VERSION from ena (Petr Oros) [1969913 1955712]
- fm10k: amend removal of MODULE_VERSION (Vladis Dronov) [1969910 1955730]
- net/sched: act_ct: Offload connections with commit action (Marcelo Ricardo Leitner) [1968679 1965817]
- netfilter: flowtable: Remove redundant hw refresh bit (Marcelo Ricardo Leitner) [1968679 1965817]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.9.1.el8_4]" date="1624881600">- ixgbevf: Amend commit acf03026ec5a to include a version in module info. (Ken Cox) [1969911 1955764]
- CI: Merge configuration (Veronika Kabatova)
- igc: amend removal of MODULE_VERSION (Corinna Vinschen) [1969921 1955755]
- igb: amend removal of MODULE_VERSION (Corinna Vinschen) [1969919 1955748]
- locking/qrwlock: Fix ordering in queued_write_lock_slowpath() (Waiman Long) [1964419 1950110]
- scsi: qedf: Do not put host in qedf_vport_create() unconditionally (Nilesh Javali) [1974968 1899384]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.10.1.el8_4]" date="1625659200">- igbvf: amend removal of MODULE_VERSION (Corinna Vinschen) [1969920 1955752]
- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971464 1971488] {CVE-2021-32399}
- scsi: ibmvfc: Free channel_setup_buf during device tear down (Steve Best) [1964697 1938102]
- i40e: Fix parameters in aq_get_phy_register() (Stefan Assmann) [1967099 1907852]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.10.2.el8_4]" date="1626091200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975181 1975182] {CVE-2021-33909}</changelog>
</package>
<package pkgid="18f2a82864f8d748cf964408d9dfc1646673e106282130a274f179ca67b08476" name="kernel" arch="src">
  <version epoch="0" ver="4.18.0" rel="305.10.2.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.2.1.el8_4]" date="1620648000">- net/mlx5e: Allow to match on MPLS parameters only for MPLS over UDP (Alaa Hleihel) [1952061 1936742]
- net/mlx5e: Reject tc rules which redirect from a VF to itself (Alaa Hleihel) [1952065 1932839]
- net/mlx5: CT: Add support for matching on ct_state inv and rel flags (Alaa Hleihel) [1952062 1942681]
- KVM: VMX: Don't use vcpu-&gt;run-&gt;internal.ndata as an array index (Jon Maloy) [1954221 1954219]
- tools/power turbostat: Revert "[tools] tools/power turbostat: Enable accumulate RAPL display" (Prarit Bhargava) [1952987 1944699]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.3.1.el8_4]" date="1621252800">- Revert "uio: use request_threaded_irq instead" (Vitaly Kuznetsov) [1952952 1946644]
- drm/ast: Set format registers in primary plane's update (Lyude Paul) [1952900 1923857]
- net/sched: act_ct: clear post_ct if doing ct_clear (Marcelo Ricardo Leitner) [1956458 1941889]
- md/raid1: properly indicate failure when ending a failed write request (Nigel Croxon) [1955188 1954588]
- nitro_enclaves: Fix stale file descriptors on failed usercopy (Vitaly Kuznetsov) [1956379 1953717]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.4.1.el8_4]" date="1621944000">- vmxnet3: Set the default of vxlan overlay offload to disabled (Cathy Avery) [1960702 1941714]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.5.1.el8_4]" date="1622548800">- gfs2: report "already frozen/thawed" errors (Bob Peterson) [1961849 1932236]
- gfs2: move freeze glock outside the make_fs_rw and _ro functions (Bob Peterson) [1961849 1932236]
- gfs2: Add common helper for holding and releasing the freeze glock (Bob Peterson) [1961849 1932236]
- gfs2: in signal_our_withdraw wait for unfreeze of _this_ fs only (Bob Peterson) [1961849 1932236]
- gfs2: Don't freeze the file system during unmount (Bob Peterson) [1961849 1932236]
- gfs2: Fix regression in freeze_go_sync (Bob Peterson) [1961849 1932236]
- gfs2: The freeze glock should never be frozen (Bob Peterson) [1961849 1932236]
- gfs2: When freezing gfs2, use GL_EXACT and not GL_NOCACHE (Bob Peterson) [1961849 1932236]
- gfs2: read-only mounts should grab the sd_freeze_gl glock (Bob Peterson) [1961849 1932236]
- gfs2: freeze should work on read-only mounts (Bob Peterson) [1961849 1932236]
- gfs2: Abort gfs2_freeze if io error is seen (Bob Peterson) [1961849 1932236]
- CI: Disable result checking for realtime check (Veronika Kabatova)
- CI: Explicitly disable result checking for private CI (Veronika Kabatova)
- CI: Rename variable (Veronika Kabatova)
- CI: Update builder containers (Veronika Kabatova)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.6.1.el8_4]" date="1623067200">- openvswitch: fix stack OOB read while fragmenting IPv4 packets (Davide Caratti) [1963940 1924608]
- net/sched: sch_frag: fix stack OOB read while fragmenting IPv4 packets (Davide Caratti) [1963940 1924608]
- net/sched: act_ct: fix wild memory access when clearing fragments (Davide Caratti) [1963940 1924608]
- net: Treat __napi_schedule_irqoff() as __napi_schedule() on PREEMPT_RT (Ivan Vecera)
- redhat/configs: Add CONFIG_SYSTEM_REVOCATION_KEYS and CONFIG_SYSTEM_REVOCATION_LIST (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: add 'x509_revocation_list' to gitignore (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- integrity: Load mokx variables into the blacklist keyring (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Add ability to preload revocation certs (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Move load_system_certificate_list to a common function (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Add EFI_CERT_X509_GUID support for dbx entries (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- net/sched: cls_api: increase max_reclassify_loop (Davide Caratti) [1965148 1955136]
- dm writecache: fix performance degradation in ssd mode (Mike Snitzer) [1962241 1961859]
- scsi: fnic: Use scsi_host_busy_iter() to traverse commands (Ewan D. Milne) [1961705 1949250]
- scsi: fnic: Kill 'exclude_id' argument to fnic_cleanup_io() (Ewan D. Milne) [1961705 1949250]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.7.1.el8_4]" date="1623672000">- net: zero-initialize tc skb extension on allocation (Ivan Vecera) [1965457 1946986]
- net/sched: cls_flower: fix only mask bit check in the validate_ct_state (Ivan Vecera) [1965457 1946986]
- net: cls_api: Fix uninitialised struct field bo-&gt;unlocked_driver_cb (Ivan Vecera) [1965457 1946986]
- net/sched: act_api: fix miss set post_ct for ovs after do conntrack in act_ct (Ivan Vecera) [1965457 1946986]
- net/sched: cls_flower: validate ct_state for invalid and reply flags (Ivan Vecera) [1965457 1946986]
- flow_dissector: fix TTL and TOS dissection on IPv4 fragments (Paolo Abeni) [1963952 1950288]
- Revert "sctp: Fix SHUTDOWN CTSN Ack in the peer restart case" (Xin Long) [1965632 1953839]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [1965632 1953839]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [1965632 1953839]
- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962544 1962546] {CVE-2021-33034}
- x86/kvm: Unify kvm_pv_guest_cpu_reboot() with kvm_guest_cpu_offline() (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Disable all PV features on crash (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Disable kvmclock on all CPUs on shutdown (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Teardown PV features on boot CPU as well (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Fix pr_info() for async PF setup/teardown (Lenny Szubowicz) [1964930 1934273]
- net/sched: act_ct: Fix ct template allocation for zone 0 (Marcelo Ricardo Leitner) [1965150 1881824]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.8.1.el8_4]" date="1624363200">- iavf: amend removal of MODULE_VERSION (Stefan Assmann) [1969925 1955738]
- ixgbe: Amend commit acf03026ec5a to include a version string in module info. (Ken Cox) [1969922 1955759]
- i40e: amend removal of MODULE_VERSION (Stefan Assmann) [1969923 1955736]
- redhat/configs: Add CONFIG_PINCTRL_EMMITSBURG (David Arcari) [1963984 1959506]
- redhat/configs: Remove CONFIG_EMMITSBURG (David Arcari) [1963984 1959506]
- netlink: add tracepoint at NL_SET_ERR_MSG (Marcelo Ricardo Leitner) [1972938 1956983]
- Revert "[netdrv] net/intel: remove driver versions from Intel drivers" (Jonathan Toppins) [1969917 1955745]
- Amends commit ea6244cc248b to include a version string in module info. (Ken Cox) [1969915 1955726]
- Revert "[netdrv] net/broadcom: Clean broadcom code from driver versions" (Jonathan Toppins) [1969914 1955721]
- ena: revert removal of MODULE_VERSION from ena (Petr Oros) [1969913 1955712]
- fm10k: amend removal of MODULE_VERSION (Vladis Dronov) [1969910 1955730]
- net/sched: act_ct: Offload connections with commit action (Marcelo Ricardo Leitner) [1968679 1965817]
- netfilter: flowtable: Remove redundant hw refresh bit (Marcelo Ricardo Leitner) [1968679 1965817]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.9.1.el8_4]" date="1624881600">- ixgbevf: Amend commit acf03026ec5a to include a version in module info. (Ken Cox) [1969911 1955764]
- CI: Merge configuration (Veronika Kabatova)
- igc: amend removal of MODULE_VERSION (Corinna Vinschen) [1969921 1955755]
- igb: amend removal of MODULE_VERSION (Corinna Vinschen) [1969919 1955748]
- locking/qrwlock: Fix ordering in queued_write_lock_slowpath() (Waiman Long) [1964419 1950110]
- scsi: qedf: Do not put host in qedf_vport_create() unconditionally (Nilesh Javali) [1974968 1899384]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.10.1.el8_4]" date="1625659200">- igbvf: amend removal of MODULE_VERSION (Corinna Vinschen) [1969920 1955752]
- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971464 1971488] {CVE-2021-32399}
- scsi: ibmvfc: Free channel_setup_buf during device tear down (Steve Best) [1964697 1938102]
- i40e: Fix parameters in aq_get_phy_register() (Stefan Assmann) [1967099 1907852]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.10.2.el8_4]" date="1626091200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975181 1975182] {CVE-2021-33909}</changelog>
</package>
<package pkgid="e5ad193c87310c4a7ba4dd2368cc3348534bf1dbcfaff882097c1f8e95d06427" name="kernel" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="305.10.2.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.2.1.el8_4]" date="1620648000">- net/mlx5e: Allow to match on MPLS parameters only for MPLS over UDP (Alaa Hleihel) [1952061 1936742]
- net/mlx5e: Reject tc rules which redirect from a VF to itself (Alaa Hleihel) [1952065 1932839]
- net/mlx5: CT: Add support for matching on ct_state inv and rel flags (Alaa Hleihel) [1952062 1942681]
- KVM: VMX: Don't use vcpu-&gt;run-&gt;internal.ndata as an array index (Jon Maloy) [1954221 1954219]
- tools/power turbostat: Revert "[tools] tools/power turbostat: Enable accumulate RAPL display" (Prarit Bhargava) [1952987 1944699]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.3.1.el8_4]" date="1621252800">- Revert "uio: use request_threaded_irq instead" (Vitaly Kuznetsov) [1952952 1946644]
- drm/ast: Set format registers in primary plane's update (Lyude Paul) [1952900 1923857]
- net/sched: act_ct: clear post_ct if doing ct_clear (Marcelo Ricardo Leitner) [1956458 1941889]
- md/raid1: properly indicate failure when ending a failed write request (Nigel Croxon) [1955188 1954588]
- nitro_enclaves: Fix stale file descriptors on failed usercopy (Vitaly Kuznetsov) [1956379 1953717]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.4.1.el8_4]" date="1621944000">- vmxnet3: Set the default of vxlan overlay offload to disabled (Cathy Avery) [1960702 1941714]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.5.1.el8_4]" date="1622548800">- gfs2: report "already frozen/thawed" errors (Bob Peterson) [1961849 1932236]
- gfs2: move freeze glock outside the make_fs_rw and _ro functions (Bob Peterson) [1961849 1932236]
- gfs2: Add common helper for holding and releasing the freeze glock (Bob Peterson) [1961849 1932236]
- gfs2: in signal_our_withdraw wait for unfreeze of _this_ fs only (Bob Peterson) [1961849 1932236]
- gfs2: Don't freeze the file system during unmount (Bob Peterson) [1961849 1932236]
- gfs2: Fix regression in freeze_go_sync (Bob Peterson) [1961849 1932236]
- gfs2: The freeze glock should never be frozen (Bob Peterson) [1961849 1932236]
- gfs2: When freezing gfs2, use GL_EXACT and not GL_NOCACHE (Bob Peterson) [1961849 1932236]
- gfs2: read-only mounts should grab the sd_freeze_gl glock (Bob Peterson) [1961849 1932236]
- gfs2: freeze should work on read-only mounts (Bob Peterson) [1961849 1932236]
- gfs2: Abort gfs2_freeze if io error is seen (Bob Peterson) [1961849 1932236]
- CI: Disable result checking for realtime check (Veronika Kabatova)
- CI: Explicitly disable result checking for private CI (Veronika Kabatova)
- CI: Rename variable (Veronika Kabatova)
- CI: Update builder containers (Veronika Kabatova)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.6.1.el8_4]" date="1623067200">- openvswitch: fix stack OOB read while fragmenting IPv4 packets (Davide Caratti) [1963940 1924608]
- net/sched: sch_frag: fix stack OOB read while fragmenting IPv4 packets (Davide Caratti) [1963940 1924608]
- net/sched: act_ct: fix wild memory access when clearing fragments (Davide Caratti) [1963940 1924608]
- net: Treat __napi_schedule_irqoff() as __napi_schedule() on PREEMPT_RT (Ivan Vecera)
- redhat/configs: Add CONFIG_SYSTEM_REVOCATION_KEYS and CONFIG_SYSTEM_REVOCATION_LIST (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: add 'x509_revocation_list' to gitignore (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- integrity: Load mokx variables into the blacklist keyring (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Add ability to preload revocation certs (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Move load_system_certificate_list to a common function (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Add EFI_CERT_X509_GUID support for dbx entries (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- net/sched: cls_api: increase max_reclassify_loop (Davide Caratti) [1965148 1955136]
- dm writecache: fix performance degradation in ssd mode (Mike Snitzer) [1962241 1961859]
- scsi: fnic: Use scsi_host_busy_iter() to traverse commands (Ewan D. Milne) [1961705 1949250]
- scsi: fnic: Kill 'exclude_id' argument to fnic_cleanup_io() (Ewan D. Milne) [1961705 1949250]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.7.1.el8_4]" date="1623672000">- net: zero-initialize tc skb extension on allocation (Ivan Vecera) [1965457 1946986]
- net/sched: cls_flower: fix only mask bit check in the validate_ct_state (Ivan Vecera) [1965457 1946986]
- net: cls_api: Fix uninitialised struct field bo-&gt;unlocked_driver_cb (Ivan Vecera) [1965457 1946986]
- net/sched: act_api: fix miss set post_ct for ovs after do conntrack in act_ct (Ivan Vecera) [1965457 1946986]
- net/sched: cls_flower: validate ct_state for invalid and reply flags (Ivan Vecera) [1965457 1946986]
- flow_dissector: fix TTL and TOS dissection on IPv4 fragments (Paolo Abeni) [1963952 1950288]
- Revert "sctp: Fix SHUTDOWN CTSN Ack in the peer restart case" (Xin Long) [1965632 1953839]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [1965632 1953839]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [1965632 1953839]
- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962544 1962546] {CVE-2021-33034}
- x86/kvm: Unify kvm_pv_guest_cpu_reboot() with kvm_guest_cpu_offline() (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Disable all PV features on crash (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Disable kvmclock on all CPUs on shutdown (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Teardown PV features on boot CPU as well (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Fix pr_info() for async PF setup/teardown (Lenny Szubowicz) [1964930 1934273]
- net/sched: act_ct: Fix ct template allocation for zone 0 (Marcelo Ricardo Leitner) [1965150 1881824]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.8.1.el8_4]" date="1624363200">- iavf: amend removal of MODULE_VERSION (Stefan Assmann) [1969925 1955738]
- ixgbe: Amend commit acf03026ec5a to include a version string in module info. (Ken Cox) [1969922 1955759]
- i40e: amend removal of MODULE_VERSION (Stefan Assmann) [1969923 1955736]
- redhat/configs: Add CONFIG_PINCTRL_EMMITSBURG (David Arcari) [1963984 1959506]
- redhat/configs: Remove CONFIG_EMMITSBURG (David Arcari) [1963984 1959506]
- netlink: add tracepoint at NL_SET_ERR_MSG (Marcelo Ricardo Leitner) [1972938 1956983]
- Revert "[netdrv] net/intel: remove driver versions from Intel drivers" (Jonathan Toppins) [1969917 1955745]
- Amends commit ea6244cc248b to include a version string in module info. (Ken Cox) [1969915 1955726]
- Revert "[netdrv] net/broadcom: Clean broadcom code from driver versions" (Jonathan Toppins) [1969914 1955721]
- ena: revert removal of MODULE_VERSION from ena (Petr Oros) [1969913 1955712]
- fm10k: amend removal of MODULE_VERSION (Vladis Dronov) [1969910 1955730]
- net/sched: act_ct: Offload connections with commit action (Marcelo Ricardo Leitner) [1968679 1965817]
- netfilter: flowtable: Remove redundant hw refresh bit (Marcelo Ricardo Leitner) [1968679 1965817]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.9.1.el8_4]" date="1624881600">- ixgbevf: Amend commit acf03026ec5a to include a version in module info. (Ken Cox) [1969911 1955764]
- CI: Merge configuration (Veronika Kabatova)
- igc: amend removal of MODULE_VERSION (Corinna Vinschen) [1969921 1955755]
- igb: amend removal of MODULE_VERSION (Corinna Vinschen) [1969919 1955748]
- locking/qrwlock: Fix ordering in queued_write_lock_slowpath() (Waiman Long) [1964419 1950110]
- scsi: qedf: Do not put host in qedf_vport_create() unconditionally (Nilesh Javali) [1974968 1899384]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.10.1.el8_4]" date="1625659200">- igbvf: amend removal of MODULE_VERSION (Corinna Vinschen) [1969920 1955752]
- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971464 1971488] {CVE-2021-32399}
- scsi: ibmvfc: Free channel_setup_buf during device tear down (Steve Best) [1964697 1938102]
- i40e: Fix parameters in aq_get_phy_register() (Stefan Assmann) [1967099 1907852]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.10.2.el8_4]" date="1626091200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975181 1975182] {CVE-2021-33909}</changelog>
</package>
<package pkgid="ce92d20dda889060e8a786bf8e32ec33370ba32087041333e9834dbf236394a7" name="kernel" arch="src">
  <version epoch="0" ver="4.18.0" rel="348.20.1.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.12.1.el8_5]" date="1641988800">- tcp: don't free a FIN sk_buff in tcp_remove_empty_skb() (Guillaume Nault) [2021574 2016210]
- kernel.spec: Add support to use vmlinux.h (Jiri Olsa) [2031053 1989087]
- spec: Add vmlinux.h to kernel-devel package (Jiri Olsa) [2031053 1989087]
- x86/mce: Avoid infinite loop for copy from user recovery (Prarit Bhargava) [2008789 1999550]
- x86/mce: Rename kill_it to kill_current_task (Prarit Bhargava) [2008789 1999550]
- x86/mce: Recover from poison found while copying from user space (Prarit Bhargava) [2008789 1999550]
- x86/mce: Delay clearing IA32_MCG_STATUS to the end of do_machine_check() (Prarit Bhargava) [2008789 1999550]
- x86/mce: Send #MC singal from task work (Prarit Bhargava) [2008789 1999550]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-348.13.1.el8_5]" date="1642507200">- vfs: Out-of-bounds write of heap buffer in fs_context.c (Frantisek Hrbata) [2040585 2040586] {CVE-2022-0185}
- xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Bruno Meneguele) [2034864 2034865] {CVE-2021-4155}
- af_unix: fix garbage collect vs MSG_PEEK (Patrick Talbert) [2031974 2031975] {CVE-2021-0920}
- cgroup: verify that source is a string (Waiman Long) [2034608 2034609] {CVE-2021-4154}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-348.14.1.el8_5]" date="1643198400">- tcp: fix page frag corruption on page fault (Paolo Abeni) [2041529 1996074]
- net: fix sk_page_frag() recursion from memory reclaim (Paolo Abeni) [2041529 1996074]
- KVM: s390: index kvm-&gt;arch.idle_mask by vcpu_idx (Thomas Huth) [2040769 2026230]
- redhat: set LC_ALL=C before sorting config content (Frantisek Hrbata)</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.15.1.el8_5]" date="1643716800">- net/mlx5: DR, Use FW API when updating FW-owned flow table (Michal Schmidt) [2042663 2042651]
- KVM: x86: Wait for IPIs to be delivered when handling Hyper-V TLB flush hypercall (Vitaly Kuznetsov) [2043237 1868572]
- drm/mgag200: Select clock in PLL update functions (Bruno Meneguele) [2034949 1953926]
- drm/i915: Fix HAS_LSPCON macro for platforms between GEN9 and GEN10 (Bruno Meneguele) [2027335 2005586]
- crypto: qat - power up 4xxx device (Vladis Dronov) [2016437 1960307]
- RDMA/core: Fix a double free in add_port error flow (Kamal Heib) [2038724 2008555]
- powerpc/iommu: Report the correct most efficient DMA mask for PCI devices (Steve Best) [2018928 2007425]
- powerpc/dma: Fix dma_map_ops::get_required_mask (Steve Best) [2018928 2007425]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.16.1.el8_5]" date="1644321600">- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047601 2047602] {CVE-2022-22942}
- net: openvswitch: Fix ct_state nat flags for conns arriving from tc (Marcelo Ricardo Leitner) [2043548 2040334]
- net: openvswitch: Fix matching zone id for invalid conns arriving from tc (Marcelo Ricardo Leitner) [2043550 2040452]
- net/sched: flow_dissector: Fix matching on zone id for invalid conns (Marcelo Ricardo Leitner) [2043550 2040452]
- net/sched: Extend qdisc control block with tc control block (Marcelo Ricardo Leitner) [2043550 2040452]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.17.1.el8_5]" date="1644926400">- vfs: check dentry is still valid in get_link() (Ian Kent) [2052558 2014846]
- xfs: don't expose internal symlink metadata buffers to the vfs (Brian Foster) [2052558 2014846]
- CI: Use appropriate zstream builder (Veronika Kabatova)
- CI: Enable baseline realtime checks (Veronika Kabatova)
- CI: Rename pipelines to include release names (Veronika Kabatova)
- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052166 2052167] {CVE-2022-0492}
- ice: Remove boolean vlan_promisc flag from function (Jonathan Toppins) [2051951 2030400]
- ceph: put the requests/sessions when it fails to alloc memory (Jeffrey Layton) [2053725 2017796]
- ceph: fix off by one bugs in unsafe_request_wait() (Jeffrey Layton) [2053725 2017796]
- ceph: flush the mdlog before waiting on unsafe reqs (Jeffrey Layton) [2053725 2017796]
- ceph: flush mdlog before umounting (Jeffrey Layton) [2053725 2017796]
- ceph: make iterate_sessions a global symbol (Jeffrey Layton) [2053725 2017796]
- ceph: make ceph_create_session_msg a global symbol (Jeffrey Layton) [2053725 2017796]
- xfs: check sb_meta_uuid for dabuf buffer recovery (Bill O'Donnell) [2049292 2020764]
- drm/i915: Flush TLBs before releasing backing store (Patrick Talbert) [2044328 2044329] {CVE-2022-0330}
- hugetlb: fix hugetlb cgroup refcounting during vma split (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: fix imbalanced css_get and css_put pair for shared mappings (Waiman Long) [2039015 2032811]
- mm/hugetlb: change hugetlb_reserve_pages() to type bool (Waiman Long) [2039015 2032811]
- hugetlb: fix an error code in hugetlb_reserve_pages() (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: fix offline of hugetlb cgroup with reservations (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: fix reservation accounting (Waiman Long) [2039015 2032811]
- mm/hugetlb: narrow the hugetlb_lock protection area during preparing huge page (Waiman Long) [2039015 2032811]
- mm/hugetlb: a page from buddy is not on any list (Waiman Long) [2039015 2032811]
- mm/hugetlb: not necessary to coalesce regions recursively (Waiman Long) [2039015 2032811]
- selftests/vm/write_to_hugetlbfs.c: fix unused variable warning (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add hugetlb_cgroup reservation tests (Waiman Long) [2039015 2032811]
- hugetlb: support file_region coalescing again (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: support noreserve mappings (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add accounting for shared mappings (Waiman Long) [2039015 2032811]
- hugetlb: disable region_add file_region coalescing (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add reservation accounting for private mappings (Waiman Long) [2039015 2032811]
- mm/hugetlb_cgroup: fix hugetlb_cgroup migration (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add interface for charge/uncharge hugetlb reservations (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add hugetlb_cgroup reservation counter (Waiman Long) [2039015 2032811]
- hugetlb: remove duplicated code (Waiman Long) [2039015 2032811]
- hugetlb: region_chg provides only cache entry (Waiman Long) [2039015 2032811]
- hugetlbfs: always use address space in inode for resv_map pointer (Waiman Long) [2039015 2032811]
- hugetlbfs: fix potential over/underflow setting node specific nr_hugepages (Waiman Long) [2039015 2032811]
- hugetlb: allow to free gigantic pages regardless of the configuration (Waiman Long) [2039015 2032811]
- powerpc/pseries: Fix update of LPAR security flavor after LPM (Steve Best) [2027448 1997294]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.18.1.el8_5]" date="1645531200">- selftests: kvm: Check whether SIDA memop fails for normal guests (Thomas Huth) [2050806 2050807] {CVE-2022-0516}
- KVM: s390: Return error on SIDA memop on normal guest (Thomas Huth) [2050806 2050807] {CVE-2022-0516}
- iommu/amd: Remove iommu_init_ga() (Jerry Snitselaar) [2030854 1998265]
- iommu/amd: Relocate GAMSup check to early_enable_iommus (Jerry Snitselaar) [2030854 1998265]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.19.1.el8_5]" date="1646049600">- tipc: improve size validations for received domain records (Xin Long) [2048970 2048971] {CVE-2022-0435}
- smb3: do not error on fsync when readonly (Ronnie Sahlberg) [2055824 2037811]
- security: implement sctp_assoc_established hook in selinux (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- security: add sctp_assoc_established hook (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- security: call security_sctp_assoc_request in sctp_sf_do_5_1D_ce (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- security: pass asoc to sctp_assoc_request and sctp_sk_clone (Bruno Meneguele) [2054112 2054117 2015525 2048251]
- net: sctp: Fix some typos (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- RDMA/bnxt_re: Fix stats counters (Selvin Xavier) [2049684 2001893]
- net: check skb sec_path when re-initializing slow_gro in gro_list_prepare (Xin Long) [2047427 2030476]
- cpufreq: intel_pstate: Add Icelake servers support in no-HWP mode (David Arcari) [2036888 2003695]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.20.1.el8_5]" date="1646740800">- lib/iov_iter: initialize "flags" in new pipe_buffer (Jan Stancek) [2060874 2060875] {CVE-2022-0847}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-348.20.1.el8.centos" date="1646913600">- Apply debranding changes</changelog>
</package>
<package pkgid="b51a0eb38152d47dbd79e9340988e89a6c997c6d559714166c11efc9da863a16" name="kernel" arch="src">
  <version epoch="0" ver="4.18.0" rel="348.20.1.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.12.1.el8_5]" date="1641988800">- tcp: don't free a FIN sk_buff in tcp_remove_empty_skb() (Guillaume Nault) [2021574 2016210]
- kernel.spec: Add support to use vmlinux.h (Jiri Olsa) [2031053 1989087]
- spec: Add vmlinux.h to kernel-devel package (Jiri Olsa) [2031053 1989087]
- x86/mce: Avoid infinite loop for copy from user recovery (Prarit Bhargava) [2008789 1999550]
- x86/mce: Rename kill_it to kill_current_task (Prarit Bhargava) [2008789 1999550]
- x86/mce: Recover from poison found while copying from user space (Prarit Bhargava) [2008789 1999550]
- x86/mce: Delay clearing IA32_MCG_STATUS to the end of do_machine_check() (Prarit Bhargava) [2008789 1999550]
- x86/mce: Send #MC singal from task work (Prarit Bhargava) [2008789 1999550]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-348.13.1.el8_5]" date="1642507200">- vfs: Out-of-bounds write of heap buffer in fs_context.c (Frantisek Hrbata) [2040585 2040586] {CVE-2022-0185}
- xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Bruno Meneguele) [2034864 2034865] {CVE-2021-4155}
- af_unix: fix garbage collect vs MSG_PEEK (Patrick Talbert) [2031974 2031975] {CVE-2021-0920}
- cgroup: verify that source is a string (Waiman Long) [2034608 2034609] {CVE-2021-4154}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-348.14.1.el8_5]" date="1643198400">- tcp: fix page frag corruption on page fault (Paolo Abeni) [2041529 1996074]
- net: fix sk_page_frag() recursion from memory reclaim (Paolo Abeni) [2041529 1996074]
- KVM: s390: index kvm-&gt;arch.idle_mask by vcpu_idx (Thomas Huth) [2040769 2026230]
- redhat: set LC_ALL=C before sorting config content (Frantisek Hrbata)</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.15.1.el8_5]" date="1643716800">- net/mlx5: DR, Use FW API when updating FW-owned flow table (Michal Schmidt) [2042663 2042651]
- KVM: x86: Wait for IPIs to be delivered when handling Hyper-V TLB flush hypercall (Vitaly Kuznetsov) [2043237 1868572]
- drm/mgag200: Select clock in PLL update functions (Bruno Meneguele) [2034949 1953926]
- drm/i915: Fix HAS_LSPCON macro for platforms between GEN9 and GEN10 (Bruno Meneguele) [2027335 2005586]
- crypto: qat - power up 4xxx device (Vladis Dronov) [2016437 1960307]
- RDMA/core: Fix a double free in add_port error flow (Kamal Heib) [2038724 2008555]
- powerpc/iommu: Report the correct most efficient DMA mask for PCI devices (Steve Best) [2018928 2007425]
- powerpc/dma: Fix dma_map_ops::get_required_mask (Steve Best) [2018928 2007425]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.16.1.el8_5]" date="1644321600">- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047601 2047602] {CVE-2022-22942}
- net: openvswitch: Fix ct_state nat flags for conns arriving from tc (Marcelo Ricardo Leitner) [2043548 2040334]
- net: openvswitch: Fix matching zone id for invalid conns arriving from tc (Marcelo Ricardo Leitner) [2043550 2040452]
- net/sched: flow_dissector: Fix matching on zone id for invalid conns (Marcelo Ricardo Leitner) [2043550 2040452]
- net/sched: Extend qdisc control block with tc control block (Marcelo Ricardo Leitner) [2043550 2040452]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.17.1.el8_5]" date="1644926400">- vfs: check dentry is still valid in get_link() (Ian Kent) [2052558 2014846]
- xfs: don't expose internal symlink metadata buffers to the vfs (Brian Foster) [2052558 2014846]
- CI: Use appropriate zstream builder (Veronika Kabatova)
- CI: Enable baseline realtime checks (Veronika Kabatova)
- CI: Rename pipelines to include release names (Veronika Kabatova)
- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052166 2052167] {CVE-2022-0492}
- ice: Remove boolean vlan_promisc flag from function (Jonathan Toppins) [2051951 2030400]
- ceph: put the requests/sessions when it fails to alloc memory (Jeffrey Layton) [2053725 2017796]
- ceph: fix off by one bugs in unsafe_request_wait() (Jeffrey Layton) [2053725 2017796]
- ceph: flush the mdlog before waiting on unsafe reqs (Jeffrey Layton) [2053725 2017796]
- ceph: flush mdlog before umounting (Jeffrey Layton) [2053725 2017796]
- ceph: make iterate_sessions a global symbol (Jeffrey Layton) [2053725 2017796]
- ceph: make ceph_create_session_msg a global symbol (Jeffrey Layton) [2053725 2017796]
- xfs: check sb_meta_uuid for dabuf buffer recovery (Bill O'Donnell) [2049292 2020764]
- drm/i915: Flush TLBs before releasing backing store (Patrick Talbert) [2044328 2044329] {CVE-2022-0330}
- hugetlb: fix hugetlb cgroup refcounting during vma split (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: fix imbalanced css_get and css_put pair for shared mappings (Waiman Long) [2039015 2032811]
- mm/hugetlb: change hugetlb_reserve_pages() to type bool (Waiman Long) [2039015 2032811]
- hugetlb: fix an error code in hugetlb_reserve_pages() (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: fix offline of hugetlb cgroup with reservations (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: fix reservation accounting (Waiman Long) [2039015 2032811]
- mm/hugetlb: narrow the hugetlb_lock protection area during preparing huge page (Waiman Long) [2039015 2032811]
- mm/hugetlb: a page from buddy is not on any list (Waiman Long) [2039015 2032811]
- mm/hugetlb: not necessary to coalesce regions recursively (Waiman Long) [2039015 2032811]
- selftests/vm/write_to_hugetlbfs.c: fix unused variable warning (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add hugetlb_cgroup reservation tests (Waiman Long) [2039015 2032811]
- hugetlb: support file_region coalescing again (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: support noreserve mappings (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add accounting for shared mappings (Waiman Long) [2039015 2032811]
- hugetlb: disable region_add file_region coalescing (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add reservation accounting for private mappings (Waiman Long) [2039015 2032811]
- mm/hugetlb_cgroup: fix hugetlb_cgroup migration (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add interface for charge/uncharge hugetlb reservations (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add hugetlb_cgroup reservation counter (Waiman Long) [2039015 2032811]
- hugetlb: remove duplicated code (Waiman Long) [2039015 2032811]
- hugetlb: region_chg provides only cache entry (Waiman Long) [2039015 2032811]
- hugetlbfs: always use address space in inode for resv_map pointer (Waiman Long) [2039015 2032811]
- hugetlbfs: fix potential over/underflow setting node specific nr_hugepages (Waiman Long) [2039015 2032811]
- hugetlb: allow to free gigantic pages regardless of the configuration (Waiman Long) [2039015 2032811]
- powerpc/pseries: Fix update of LPAR security flavor after LPM (Steve Best) [2027448 1997294]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.18.1.el8_5]" date="1645531200">- selftests: kvm: Check whether SIDA memop fails for normal guests (Thomas Huth) [2050806 2050807] {CVE-2022-0516}
- KVM: s390: Return error on SIDA memop on normal guest (Thomas Huth) [2050806 2050807] {CVE-2022-0516}
- iommu/amd: Remove iommu_init_ga() (Jerry Snitselaar) [2030854 1998265]
- iommu/amd: Relocate GAMSup check to early_enable_iommus (Jerry Snitselaar) [2030854 1998265]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.19.1.el8_5]" date="1646049600">- tipc: improve size validations for received domain records (Xin Long) [2048970 2048971] {CVE-2022-0435}
- smb3: do not error on fsync when readonly (Ronnie Sahlberg) [2055824 2037811]
- security: implement sctp_assoc_established hook in selinux (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- security: add sctp_assoc_established hook (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- security: call security_sctp_assoc_request in sctp_sf_do_5_1D_ce (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- security: pass asoc to sctp_assoc_request and sctp_sk_clone (Bruno Meneguele) [2054112 2054117 2015525 2048251]
- net: sctp: Fix some typos (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- RDMA/bnxt_re: Fix stats counters (Selvin Xavier) [2049684 2001893]
- net: check skb sec_path when re-initializing slow_gro in gro_list_prepare (Xin Long) [2047427 2030476]
- cpufreq: intel_pstate: Add Icelake servers support in no-HWP mode (David Arcari) [2036888 2003695]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.20.1.el8_5]" date="1646740800">- lib/iov_iter: initialize "flags" in new pipe_buffer (Jan Stancek) [2060874 2060875] {CVE-2022-0847}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-348.20.1.el8.centos" date="1646913600">- Apply debranding changes</changelog>
</package>
<package pkgid="ba1b6cd1951afb0a64b930a0d1b5cccdfa2c1df6835ad533a7508b83da8ceef8" name="kernel" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="348.20.1.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.12.1.el8_5]" date="1641988800">- tcp: don't free a FIN sk_buff in tcp_remove_empty_skb() (Guillaume Nault) [2021574 2016210]
- kernel.spec: Add support to use vmlinux.h (Jiri Olsa) [2031053 1989087]
- spec: Add vmlinux.h to kernel-devel package (Jiri Olsa) [2031053 1989087]
- x86/mce: Avoid infinite loop for copy from user recovery (Prarit Bhargava) [2008789 1999550]
- x86/mce: Rename kill_it to kill_current_task (Prarit Bhargava) [2008789 1999550]
- x86/mce: Recover from poison found while copying from user space (Prarit Bhargava) [2008789 1999550]
- x86/mce: Delay clearing IA32_MCG_STATUS to the end of do_machine_check() (Prarit Bhargava) [2008789 1999550]
- x86/mce: Send #MC singal from task work (Prarit Bhargava) [2008789 1999550]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-348.13.1.el8_5]" date="1642507200">- vfs: Out-of-bounds write of heap buffer in fs_context.c (Frantisek Hrbata) [2040585 2040586] {CVE-2022-0185}
- xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Bruno Meneguele) [2034864 2034865] {CVE-2021-4155}
- af_unix: fix garbage collect vs MSG_PEEK (Patrick Talbert) [2031974 2031975] {CVE-2021-0920}
- cgroup: verify that source is a string (Waiman Long) [2034608 2034609] {CVE-2021-4154}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-348.14.1.el8_5]" date="1643198400">- tcp: fix page frag corruption on page fault (Paolo Abeni) [2041529 1996074]
- net: fix sk_page_frag() recursion from memory reclaim (Paolo Abeni) [2041529 1996074]
- KVM: s390: index kvm-&gt;arch.idle_mask by vcpu_idx (Thomas Huth) [2040769 2026230]
- redhat: set LC_ALL=C before sorting config content (Frantisek Hrbata)</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.15.1.el8_5]" date="1643716800">- net/mlx5: DR, Use FW API when updating FW-owned flow table (Michal Schmidt) [2042663 2042651]
- KVM: x86: Wait for IPIs to be delivered when handling Hyper-V TLB flush hypercall (Vitaly Kuznetsov) [2043237 1868572]
- drm/mgag200: Select clock in PLL update functions (Bruno Meneguele) [2034949 1953926]
- drm/i915: Fix HAS_LSPCON macro for platforms between GEN9 and GEN10 (Bruno Meneguele) [2027335 2005586]
- crypto: qat - power up 4xxx device (Vladis Dronov) [2016437 1960307]
- RDMA/core: Fix a double free in add_port error flow (Kamal Heib) [2038724 2008555]
- powerpc/iommu: Report the correct most efficient DMA mask for PCI devices (Steve Best) [2018928 2007425]
- powerpc/dma: Fix dma_map_ops::get_required_mask (Steve Best) [2018928 2007425]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.16.1.el8_5]" date="1644321600">- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047601 2047602] {CVE-2022-22942}
- net: openvswitch: Fix ct_state nat flags for conns arriving from tc (Marcelo Ricardo Leitner) [2043548 2040334]
- net: openvswitch: Fix matching zone id for invalid conns arriving from tc (Marcelo Ricardo Leitner) [2043550 2040452]
- net/sched: flow_dissector: Fix matching on zone id for invalid conns (Marcelo Ricardo Leitner) [2043550 2040452]
- net/sched: Extend qdisc control block with tc control block (Marcelo Ricardo Leitner) [2043550 2040452]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.17.1.el8_5]" date="1644926400">- vfs: check dentry is still valid in get_link() (Ian Kent) [2052558 2014846]
- xfs: don't expose internal symlink metadata buffers to the vfs (Brian Foster) [2052558 2014846]
- CI: Use appropriate zstream builder (Veronika Kabatova)
- CI: Enable baseline realtime checks (Veronika Kabatova)
- CI: Rename pipelines to include release names (Veronika Kabatova)
- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052166 2052167] {CVE-2022-0492}
- ice: Remove boolean vlan_promisc flag from function (Jonathan Toppins) [2051951 2030400]
- ceph: put the requests/sessions when it fails to alloc memory (Jeffrey Layton) [2053725 2017796]
- ceph: fix off by one bugs in unsafe_request_wait() (Jeffrey Layton) [2053725 2017796]
- ceph: flush the mdlog before waiting on unsafe reqs (Jeffrey Layton) [2053725 2017796]
- ceph: flush mdlog before umounting (Jeffrey Layton) [2053725 2017796]
- ceph: make iterate_sessions a global symbol (Jeffrey Layton) [2053725 2017796]
- ceph: make ceph_create_session_msg a global symbol (Jeffrey Layton) [2053725 2017796]
- xfs: check sb_meta_uuid for dabuf buffer recovery (Bill O'Donnell) [2049292 2020764]
- drm/i915: Flush TLBs before releasing backing store (Patrick Talbert) [2044328 2044329] {CVE-2022-0330}
- hugetlb: fix hugetlb cgroup refcounting during vma split (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: fix imbalanced css_get and css_put pair for shared mappings (Waiman Long) [2039015 2032811]
- mm/hugetlb: change hugetlb_reserve_pages() to type bool (Waiman Long) [2039015 2032811]
- hugetlb: fix an error code in hugetlb_reserve_pages() (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: fix offline of hugetlb cgroup with reservations (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: fix reservation accounting (Waiman Long) [2039015 2032811]
- mm/hugetlb: narrow the hugetlb_lock protection area during preparing huge page (Waiman Long) [2039015 2032811]
- mm/hugetlb: a page from buddy is not on any list (Waiman Long) [2039015 2032811]
- mm/hugetlb: not necessary to coalesce regions recursively (Waiman Long) [2039015 2032811]
- selftests/vm/write_to_hugetlbfs.c: fix unused variable warning (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add hugetlb_cgroup reservation tests (Waiman Long) [2039015 2032811]
- hugetlb: support file_region coalescing again (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: support noreserve mappings (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add accounting for shared mappings (Waiman Long) [2039015 2032811]
- hugetlb: disable region_add file_region coalescing (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add reservation accounting for private mappings (Waiman Long) [2039015 2032811]
- mm/hugetlb_cgroup: fix hugetlb_cgroup migration (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add interface for charge/uncharge hugetlb reservations (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add hugetlb_cgroup reservation counter (Waiman Long) [2039015 2032811]
- hugetlb: remove duplicated code (Waiman Long) [2039015 2032811]
- hugetlb: region_chg provides only cache entry (Waiman Long) [2039015 2032811]
- hugetlbfs: always use address space in inode for resv_map pointer (Waiman Long) [2039015 2032811]
- hugetlbfs: fix potential over/underflow setting node specific nr_hugepages (Waiman Long) [2039015 2032811]
- hugetlb: allow to free gigantic pages regardless of the configuration (Waiman Long) [2039015 2032811]
- powerpc/pseries: Fix update of LPAR security flavor after LPM (Steve Best) [2027448 1997294]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.18.1.el8_5]" date="1645531200">- selftests: kvm: Check whether SIDA memop fails for normal guests (Thomas Huth) [2050806 2050807] {CVE-2022-0516}
- KVM: s390: Return error on SIDA memop on normal guest (Thomas Huth) [2050806 2050807] {CVE-2022-0516}
- iommu/amd: Remove iommu_init_ga() (Jerry Snitselaar) [2030854 1998265]
- iommu/amd: Relocate GAMSup check to early_enable_iommus (Jerry Snitselaar) [2030854 1998265]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.19.1.el8_5]" date="1646049600">- tipc: improve size validations for received domain records (Xin Long) [2048970 2048971] {CVE-2022-0435}
- smb3: do not error on fsync when readonly (Ronnie Sahlberg) [2055824 2037811]
- security: implement sctp_assoc_established hook in selinux (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- security: add sctp_assoc_established hook (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- security: call security_sctp_assoc_request in sctp_sf_do_5_1D_ce (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- security: pass asoc to sctp_assoc_request and sctp_sk_clone (Bruno Meneguele) [2054112 2054117 2015525 2048251]
- net: sctp: Fix some typos (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- RDMA/bnxt_re: Fix stats counters (Selvin Xavier) [2049684 2001893]
- net: check skb sec_path when re-initializing slow_gro in gro_list_prepare (Xin Long) [2047427 2030476]
- cpufreq: intel_pstate: Add Icelake servers support in no-HWP mode (David Arcari) [2036888 2003695]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.20.1.el8_5]" date="1646740800">- lib/iov_iter: initialize "flags" in new pipe_buffer (Jan Stancek) [2060874 2060875] {CVE-2022-0847}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-348.20.1.el8.centos" date="1646913600">- Apply debranding changes</changelog>
</package>
<package pkgid="ea8002c86101b960b2fa2a618a16f33e602fe782d2309fce209f5495a8e735b4" name="kernel-abi-stablelists" arch="noarch">
  <version epoch="0" ver="4.18.0" rel="305.10.2.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.2.1.el8_4]" date="1620648000">- net/mlx5e: Allow to match on MPLS parameters only for MPLS over UDP (Alaa Hleihel) [1952061 1936742]
- net/mlx5e: Reject tc rules which redirect from a VF to itself (Alaa Hleihel) [1952065 1932839]
- net/mlx5: CT: Add support for matching on ct_state inv and rel flags (Alaa Hleihel) [1952062 1942681]
- KVM: VMX: Don't use vcpu-&gt;run-&gt;internal.ndata as an array index (Jon Maloy) [1954221 1954219]
- tools/power turbostat: Revert "[tools] tools/power turbostat: Enable accumulate RAPL display" (Prarit Bhargava) [1952987 1944699]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.3.1.el8_4]" date="1621252800">- Revert "uio: use request_threaded_irq instead" (Vitaly Kuznetsov) [1952952 1946644]
- drm/ast: Set format registers in primary plane's update (Lyude Paul) [1952900 1923857]
- net/sched: act_ct: clear post_ct if doing ct_clear (Marcelo Ricardo Leitner) [1956458 1941889]
- md/raid1: properly indicate failure when ending a failed write request (Nigel Croxon) [1955188 1954588]
- nitro_enclaves: Fix stale file descriptors on failed usercopy (Vitaly Kuznetsov) [1956379 1953717]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.4.1.el8_4]" date="1621944000">- vmxnet3: Set the default of vxlan overlay offload to disabled (Cathy Avery) [1960702 1941714]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.5.1.el8_4]" date="1622548800">- gfs2: report "already frozen/thawed" errors (Bob Peterson) [1961849 1932236]
- gfs2: move freeze glock outside the make_fs_rw and _ro functions (Bob Peterson) [1961849 1932236]
- gfs2: Add common helper for holding and releasing the freeze glock (Bob Peterson) [1961849 1932236]
- gfs2: in signal_our_withdraw wait for unfreeze of _this_ fs only (Bob Peterson) [1961849 1932236]
- gfs2: Don't freeze the file system during unmount (Bob Peterson) [1961849 1932236]
- gfs2: Fix regression in freeze_go_sync (Bob Peterson) [1961849 1932236]
- gfs2: The freeze glock should never be frozen (Bob Peterson) [1961849 1932236]
- gfs2: When freezing gfs2, use GL_EXACT and not GL_NOCACHE (Bob Peterson) [1961849 1932236]
- gfs2: read-only mounts should grab the sd_freeze_gl glock (Bob Peterson) [1961849 1932236]
- gfs2: freeze should work on read-only mounts (Bob Peterson) [1961849 1932236]
- gfs2: Abort gfs2_freeze if io error is seen (Bob Peterson) [1961849 1932236]
- CI: Disable result checking for realtime check (Veronika Kabatova)
- CI: Explicitly disable result checking for private CI (Veronika Kabatova)
- CI: Rename variable (Veronika Kabatova)
- CI: Update builder containers (Veronika Kabatova)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.6.1.el8_4]" date="1623067200">- openvswitch: fix stack OOB read while fragmenting IPv4 packets (Davide Caratti) [1963940 1924608]
- net/sched: sch_frag: fix stack OOB read while fragmenting IPv4 packets (Davide Caratti) [1963940 1924608]
- net/sched: act_ct: fix wild memory access when clearing fragments (Davide Caratti) [1963940 1924608]
- net: Treat __napi_schedule_irqoff() as __napi_schedule() on PREEMPT_RT (Ivan Vecera)
- redhat/configs: Add CONFIG_SYSTEM_REVOCATION_KEYS and CONFIG_SYSTEM_REVOCATION_LIST (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: add 'x509_revocation_list' to gitignore (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- integrity: Load mokx variables into the blacklist keyring (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Add ability to preload revocation certs (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Move load_system_certificate_list to a common function (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Add EFI_CERT_X509_GUID support for dbx entries (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- net/sched: cls_api: increase max_reclassify_loop (Davide Caratti) [1965148 1955136]
- dm writecache: fix performance degradation in ssd mode (Mike Snitzer) [1962241 1961859]
- scsi: fnic: Use scsi_host_busy_iter() to traverse commands (Ewan D. Milne) [1961705 1949250]
- scsi: fnic: Kill 'exclude_id' argument to fnic_cleanup_io() (Ewan D. Milne) [1961705 1949250]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.7.1.el8_4]" date="1623672000">- net: zero-initialize tc skb extension on allocation (Ivan Vecera) [1965457 1946986]
- net/sched: cls_flower: fix only mask bit check in the validate_ct_state (Ivan Vecera) [1965457 1946986]
- net: cls_api: Fix uninitialised struct field bo-&gt;unlocked_driver_cb (Ivan Vecera) [1965457 1946986]
- net/sched: act_api: fix miss set post_ct for ovs after do conntrack in act_ct (Ivan Vecera) [1965457 1946986]
- net/sched: cls_flower: validate ct_state for invalid and reply flags (Ivan Vecera) [1965457 1946986]
- flow_dissector: fix TTL and TOS dissection on IPv4 fragments (Paolo Abeni) [1963952 1950288]
- Revert "sctp: Fix SHUTDOWN CTSN Ack in the peer restart case" (Xin Long) [1965632 1953839]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [1965632 1953839]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [1965632 1953839]
- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962544 1962546] {CVE-2021-33034}
- x86/kvm: Unify kvm_pv_guest_cpu_reboot() with kvm_guest_cpu_offline() (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Disable all PV features on crash (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Disable kvmclock on all CPUs on shutdown (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Teardown PV features on boot CPU as well (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Fix pr_info() for async PF setup/teardown (Lenny Szubowicz) [1964930 1934273]
- net/sched: act_ct: Fix ct template allocation for zone 0 (Marcelo Ricardo Leitner) [1965150 1881824]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.8.1.el8_4]" date="1624363200">- iavf: amend removal of MODULE_VERSION (Stefan Assmann) [1969925 1955738]
- ixgbe: Amend commit acf03026ec5a to include a version string in module info. (Ken Cox) [1969922 1955759]
- i40e: amend removal of MODULE_VERSION (Stefan Assmann) [1969923 1955736]
- redhat/configs: Add CONFIG_PINCTRL_EMMITSBURG (David Arcari) [1963984 1959506]
- redhat/configs: Remove CONFIG_EMMITSBURG (David Arcari) [1963984 1959506]
- netlink: add tracepoint at NL_SET_ERR_MSG (Marcelo Ricardo Leitner) [1972938 1956983]
- Revert "[netdrv] net/intel: remove driver versions from Intel drivers" (Jonathan Toppins) [1969917 1955745]
- Amends commit ea6244cc248b to include a version string in module info. (Ken Cox) [1969915 1955726]
- Revert "[netdrv] net/broadcom: Clean broadcom code from driver versions" (Jonathan Toppins) [1969914 1955721]
- ena: revert removal of MODULE_VERSION from ena (Petr Oros) [1969913 1955712]
- fm10k: amend removal of MODULE_VERSION (Vladis Dronov) [1969910 1955730]
- net/sched: act_ct: Offload connections with commit action (Marcelo Ricardo Leitner) [1968679 1965817]
- netfilter: flowtable: Remove redundant hw refresh bit (Marcelo Ricardo Leitner) [1968679 1965817]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.9.1.el8_4]" date="1624881600">- ixgbevf: Amend commit acf03026ec5a to include a version in module info. (Ken Cox) [1969911 1955764]
- CI: Merge configuration (Veronika Kabatova)
- igc: amend removal of MODULE_VERSION (Corinna Vinschen) [1969921 1955755]
- igb: amend removal of MODULE_VERSION (Corinna Vinschen) [1969919 1955748]
- locking/qrwlock: Fix ordering in queued_write_lock_slowpath() (Waiman Long) [1964419 1950110]
- scsi: qedf: Do not put host in qedf_vport_create() unconditionally (Nilesh Javali) [1974968 1899384]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.10.1.el8_4]" date="1625659200">- igbvf: amend removal of MODULE_VERSION (Corinna Vinschen) [1969920 1955752]
- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971464 1971488] {CVE-2021-32399}
- scsi: ibmvfc: Free channel_setup_buf during device tear down (Steve Best) [1964697 1938102]
- i40e: Fix parameters in aq_get_phy_register() (Stefan Assmann) [1967099 1907852]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.10.2.el8_4]" date="1626091200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975181 1975182] {CVE-2021-33909}</changelog>
</package>
<package pkgid="ef628eba1905ada6d7d112dc887514e97dfe0aeb79341df07f15714af6a3e917" name="kernel-abi-stablelists" arch="noarch">
  <version epoch="0" ver="4.18.0" rel="348.20.1.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.12.1.el8_5]" date="1641988800">- tcp: don't free a FIN sk_buff in tcp_remove_empty_skb() (Guillaume Nault) [2021574 2016210]
- kernel.spec: Add support to use vmlinux.h (Jiri Olsa) [2031053 1989087]
- spec: Add vmlinux.h to kernel-devel package (Jiri Olsa) [2031053 1989087]
- x86/mce: Avoid infinite loop for copy from user recovery (Prarit Bhargava) [2008789 1999550]
- x86/mce: Rename kill_it to kill_current_task (Prarit Bhargava) [2008789 1999550]
- x86/mce: Recover from poison found while copying from user space (Prarit Bhargava) [2008789 1999550]
- x86/mce: Delay clearing IA32_MCG_STATUS to the end of do_machine_check() (Prarit Bhargava) [2008789 1999550]
- x86/mce: Send #MC singal from task work (Prarit Bhargava) [2008789 1999550]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-348.13.1.el8_5]" date="1642507200">- vfs: Out-of-bounds write of heap buffer in fs_context.c (Frantisek Hrbata) [2040585 2040586] {CVE-2022-0185}
- xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Bruno Meneguele) [2034864 2034865] {CVE-2021-4155}
- af_unix: fix garbage collect vs MSG_PEEK (Patrick Talbert) [2031974 2031975] {CVE-2021-0920}
- cgroup: verify that source is a string (Waiman Long) [2034608 2034609] {CVE-2021-4154}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-348.14.1.el8_5]" date="1643198400">- tcp: fix page frag corruption on page fault (Paolo Abeni) [2041529 1996074]
- net: fix sk_page_frag() recursion from memory reclaim (Paolo Abeni) [2041529 1996074]
- KVM: s390: index kvm-&gt;arch.idle_mask by vcpu_idx (Thomas Huth) [2040769 2026230]
- redhat: set LC_ALL=C before sorting config content (Frantisek Hrbata)</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.15.1.el8_5]" date="1643716800">- net/mlx5: DR, Use FW API when updating FW-owned flow table (Michal Schmidt) [2042663 2042651]
- KVM: x86: Wait for IPIs to be delivered when handling Hyper-V TLB flush hypercall (Vitaly Kuznetsov) [2043237 1868572]
- drm/mgag200: Select clock in PLL update functions (Bruno Meneguele) [2034949 1953926]
- drm/i915: Fix HAS_LSPCON macro for platforms between GEN9 and GEN10 (Bruno Meneguele) [2027335 2005586]
- crypto: qat - power up 4xxx device (Vladis Dronov) [2016437 1960307]
- RDMA/core: Fix a double free in add_port error flow (Kamal Heib) [2038724 2008555]
- powerpc/iommu: Report the correct most efficient DMA mask for PCI devices (Steve Best) [2018928 2007425]
- powerpc/dma: Fix dma_map_ops::get_required_mask (Steve Best) [2018928 2007425]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.16.1.el8_5]" date="1644321600">- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047601 2047602] {CVE-2022-22942}
- net: openvswitch: Fix ct_state nat flags for conns arriving from tc (Marcelo Ricardo Leitner) [2043548 2040334]
- net: openvswitch: Fix matching zone id for invalid conns arriving from tc (Marcelo Ricardo Leitner) [2043550 2040452]
- net/sched: flow_dissector: Fix matching on zone id for invalid conns (Marcelo Ricardo Leitner) [2043550 2040452]
- net/sched: Extend qdisc control block with tc control block (Marcelo Ricardo Leitner) [2043550 2040452]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.17.1.el8_5]" date="1644926400">- vfs: check dentry is still valid in get_link() (Ian Kent) [2052558 2014846]
- xfs: don't expose internal symlink metadata buffers to the vfs (Brian Foster) [2052558 2014846]
- CI: Use appropriate zstream builder (Veronika Kabatova)
- CI: Enable baseline realtime checks (Veronika Kabatova)
- CI: Rename pipelines to include release names (Veronika Kabatova)
- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052166 2052167] {CVE-2022-0492}
- ice: Remove boolean vlan_promisc flag from function (Jonathan Toppins) [2051951 2030400]
- ceph: put the requests/sessions when it fails to alloc memory (Jeffrey Layton) [2053725 2017796]
- ceph: fix off by one bugs in unsafe_request_wait() (Jeffrey Layton) [2053725 2017796]
- ceph: flush the mdlog before waiting on unsafe reqs (Jeffrey Layton) [2053725 2017796]
- ceph: flush mdlog before umounting (Jeffrey Layton) [2053725 2017796]
- ceph: make iterate_sessions a global symbol (Jeffrey Layton) [2053725 2017796]
- ceph: make ceph_create_session_msg a global symbol (Jeffrey Layton) [2053725 2017796]
- xfs: check sb_meta_uuid for dabuf buffer recovery (Bill O'Donnell) [2049292 2020764]
- drm/i915: Flush TLBs before releasing backing store (Patrick Talbert) [2044328 2044329] {CVE-2022-0330}
- hugetlb: fix hugetlb cgroup refcounting during vma split (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: fix imbalanced css_get and css_put pair for shared mappings (Waiman Long) [2039015 2032811]
- mm/hugetlb: change hugetlb_reserve_pages() to type bool (Waiman Long) [2039015 2032811]
- hugetlb: fix an error code in hugetlb_reserve_pages() (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: fix offline of hugetlb cgroup with reservations (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: fix reservation accounting (Waiman Long) [2039015 2032811]
- mm/hugetlb: narrow the hugetlb_lock protection area during preparing huge page (Waiman Long) [2039015 2032811]
- mm/hugetlb: a page from buddy is not on any list (Waiman Long) [2039015 2032811]
- mm/hugetlb: not necessary to coalesce regions recursively (Waiman Long) [2039015 2032811]
- selftests/vm/write_to_hugetlbfs.c: fix unused variable warning (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add hugetlb_cgroup reservation tests (Waiman Long) [2039015 2032811]
- hugetlb: support file_region coalescing again (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: support noreserve mappings (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add accounting for shared mappings (Waiman Long) [2039015 2032811]
- hugetlb: disable region_add file_region coalescing (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add reservation accounting for private mappings (Waiman Long) [2039015 2032811]
- mm/hugetlb_cgroup: fix hugetlb_cgroup migration (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add interface for charge/uncharge hugetlb reservations (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add hugetlb_cgroup reservation counter (Waiman Long) [2039015 2032811]
- hugetlb: remove duplicated code (Waiman Long) [2039015 2032811]
- hugetlb: region_chg provides only cache entry (Waiman Long) [2039015 2032811]
- hugetlbfs: always use address space in inode for resv_map pointer (Waiman Long) [2039015 2032811]
- hugetlbfs: fix potential over/underflow setting node specific nr_hugepages (Waiman Long) [2039015 2032811]
- hugetlb: allow to free gigantic pages regardless of the configuration (Waiman Long) [2039015 2032811]
- powerpc/pseries: Fix update of LPAR security flavor after LPM (Steve Best) [2027448 1997294]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.18.1.el8_5]" date="1645531200">- selftests: kvm: Check whether SIDA memop fails for normal guests (Thomas Huth) [2050806 2050807] {CVE-2022-0516}
- KVM: s390: Return error on SIDA memop on normal guest (Thomas Huth) [2050806 2050807] {CVE-2022-0516}
- iommu/amd: Remove iommu_init_ga() (Jerry Snitselaar) [2030854 1998265]
- iommu/amd: Relocate GAMSup check to early_enable_iommus (Jerry Snitselaar) [2030854 1998265]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.19.1.el8_5]" date="1646049600">- tipc: improve size validations for received domain records (Xin Long) [2048970 2048971] {CVE-2022-0435}
- smb3: do not error on fsync when readonly (Ronnie Sahlberg) [2055824 2037811]
- security: implement sctp_assoc_established hook in selinux (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- security: add sctp_assoc_established hook (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- security: call security_sctp_assoc_request in sctp_sf_do_5_1D_ce (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- security: pass asoc to sctp_assoc_request and sctp_sk_clone (Bruno Meneguele) [2054112 2054117 2015525 2048251]
- net: sctp: Fix some typos (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- RDMA/bnxt_re: Fix stats counters (Selvin Xavier) [2049684 2001893]
- net: check skb sec_path when re-initializing slow_gro in gro_list_prepare (Xin Long) [2047427 2030476]
- cpufreq: intel_pstate: Add Icelake servers support in no-HWP mode (David Arcari) [2036888 2003695]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.20.1.el8_5]" date="1646740800">- lib/iov_iter: initialize "flags" in new pipe_buffer (Jan Stancek) [2060874 2060875] {CVE-2022-0847}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-348.20.1.el8.centos" date="1646913600">- Apply debranding changes</changelog>
</package>
<package pkgid="e2ced6743beef642a74f3d4b587a3439c1d3800b6e5008ae83379be91c8e7796" name="kernel-abi-whitelists" arch="noarch">
  <version epoch="0" ver="4.18.0" rel="147.0.3.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-141.el8]" date="1567166400">- [wireless] mwifiex: fix 802.11n/WPA detection (Jarod Wilson) [1714476] {CVE-2019-3846}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-142.el8]" date="1567771200">- [drm] drm/virtio: use virtio_max_dma_size (Gerd Hoffmann) [1739291]
- [mm] hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined (Rafael Aquini) [1706088]
- [powerpc] kvm: ppc: book3s: Enable XIVE native capability only if OPAL has required functions [BZ1744884] (David Gibson) [1744884]
- [scsi] scsi: lpfc: Fix oops when fewer hdwqs than cpus (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Limit xri count for kdump environment (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Mitigate high memory pre-allocation by SCSI-MQ (Dick Kennedy) [1745731]
- [scsi] scsi: qla2xxx: Fix hardirq-unsafe locking (Himanshu Madhani) [1719941]
- [x86] Revert "[x86] x86/kexec/64: Prevent kexec from 5-level paging to a 4-level only kernel" (Baoquan He) [1669088]
- [x86] Revert "[x86] x86/boot: Add xloadflags bits to check for 5-level paging support" (Baoquan He) [1669088]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-143.el8]" date="1568030400">- [net] netfilter: nft_set: fix allocation size overflow in privsize callback. (Florian Westphal) [1746338]
- [net] net: route dump netlink NLM_F_MULTI flag missing (Stefano Brivio) [1745971]
- [net] sched: pfifo_fast: fix wrong dereference in pfifo_fast_enqueue (Davide Caratti) [1745390]
- [net] sched: pfifo_fast: fix wrong dereference when qdisc is reset (Davide Caratti) [1745387]
- [scsi] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (David Milburn) [1746597]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-144.el8]" date="1568289600">- [md] Revert "[md] dm: eliminate 'split_discard_bios' flag from DM target interface" (Mike Snitzer) [1749929]
- [md] Revert "[md] dm: make sure to obey max_io_len_target_boundary" (Mike Snitzer) [1749929]
- [pci] PCI: Restore Resizable BAR size bits correctly for 1MB BARs (Myron Stowe) [1717760]
- [net] netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled (Phil Sutter) [1743945]
- [net] netfilter: bridge: Drops IPv6 packets if IPv6 module is not loaded (Phil Sutter) [1743945]
- [drm] drm/qxl: get vga ioports (Gerd Hoffmann) [1728936]
- [drm] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (Lyude Paul) [1724363]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-145.el8]" date="1568808000">- [iommu] iommu/amd: Add support for X2APIC IOMMU interrupts (Suravee Suthikulpanit) [1734842]
- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750882] {CVE-2019-14835}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.2.el8_1]" date="1572782400">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.3.el8_1]" date="1573473600">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-147.0.3.el8.centos" date="1573646400">- Apply debranding changes</changelog>
</package>
<package pkgid="d515fa9a6693c34a9042f2f240193b7e9698128ffa8c2aa507bcfe94030e4cb2" name="kernel-abi-whitelists" arch="noarch">
  <version epoch="0" ver="4.18.0" rel="147.8.1.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.1.1.el8_1]" date="1573560000">- [arm64] arm64/sve: Fix wrong free for task-&gt;thread.sve_state (Andrew Jones) [1767358 1756450]
- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.2.1.el8_1]" date="1574424000">- [sched] fair: Scale bandwidth quota and period without losing quota/period ratio precision (Phil Auld) [1773568 1706247]
- [sched] fair: Fix -Wunused-but-set-variable warnings (Phil Auld) [1773568 1706247]
- [sched] fair: Fix low cpu usage with high throttling by removing expiration of cpu-local slices (Phil Auld) [1773568 1706247]
- [powerpc] powerpc/pseries: Track LMB nid instead of using device tree (Steve Best) [1772110 1758742]
- [powerpc] powerpc/pseries/memory-hotplug: Only update DT once per memory DLPAR request (Steve Best) [1772110 1758742]
- [powerpc] powerpc/rtas: allow rescheduling while changing cpu states (Steve Best) [1772109 1758651]
- [powerpc] powerpc/pseries/mobility: use cond_resched when updating device tree (Steve Best) [1772109 1758651]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1770177 1752498]
- [fs] CIFS: Fix use after free of file info structures (Dave Wysochanski) [1767357 1757865]
- [fs] cifs: use cifsInodeInfo-&gt;open_file_lock while iterating to avoid a panic (Dave Wysochanski) [1767357 1757865]
- [netdrv] net/ibmvnic: prevent more than one thread from running in reset (Steve Best) [1764830 1756943]
- [netdrv] net/ibmvnic: unlock rtnl_lock in reset so linkwatch_event can run (Steve Best) [1764830 1756943]
- [netdrv] ibmvnic: Warn unknown speed message only when carrier is present (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: Fix missing { in __ibmvnic_reset (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: free reset work of removed device from queue (Steve Best) [1764832 1749873]
- [netdrv] ibmvnic: Do not process reset during or after device removal (Steve Best) [1764832 1749873]
- [cpuidle] cpuidle: governor: Add new governors to cpuidle_governors again (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: do not set an owner to allow modunload (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: set haltpoll as preferred governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: allow governor switch on cpuidle_register_driver() (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: Add cpuidle.governor= command line parameter (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: vcpu hotplug support (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: header file stubs must be "static inline" (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: return -ENODEV on modinit failure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1764831 1759282]
- [x86] kvm: x86: add host poll control msrs (Vitaly Kuznetsov) [1764831 1749495]
- [s390] s390/setup: Fix kernel lock down for s390 (Philipp Rudo) [1764827 1748343]
- [powerpc] powerpc: Allow flush_(inval_)dcache_range to work across ranges &gt;4GB (Steve Best) [1764826 1744062]
- [fs] mm/huge_memory: fix vmf_insert_pfn_{pmd, pud}() crash, handle unaligned addresses (Jeff Moyer) [1764825 1743159]
- [mm] mm/huge_memory.c: fix modifying of page protection by insert_pfn_pmd() (Jeff Moyer) [1764825 1743159]
- [pci] PCI: hv: Use bytes 4 and 5 from instance ID as the PCI domain numbers (Mohammed Gamal) [1764634 1671288]
- [pci] PCI: hv: Detect and fix Hyper-V PCI domain number collision (Mohammed Gamal) [1764634 1671288]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.3.1.el8_1]" date="1574769600">- [x86] kvm: svm: taint module and print taint message iff nested is enabled (Bandan Das) [1776114 1775410]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.4.1.el8_1]" date="1576497600">- [block] blk-mq: apply normal plugging for HDD (Ming Lei) [1782181 1759380]
- [block] blk-mq: honor IO scheduler for multiqueue devices (Ming Lei) [1782181 1759380]
- [block] blk-mq: simplify blk_mq_make_request() (Ming Lei) [1782181 1759380]
- [block] blk-mq: remove blk_mq_put_ctx() (Ming Lei) [1782181 1759380]
- [x86] kvm: vmx: use MSR_IA32_TSX_CTRL to hard-disable TSX on guest that lack it (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: vmx: implement MSR_IA32_TSX_CTRL disable RTM functionality (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: implement MSR_IA32_TSX_CTRL effect on CPUID (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: do not modify masked bits of shared MSRs (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: fix presentation of TSX feature in ARCH_CAPABILITIES (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm/x86: Export MDS_NO=0 to guests when TSX is enabled (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [fs] cifs: Fix cifsInodeInfo lock_sem deadlock when reconnect occurs (Leif Sahlberg) [1778693 1765979]
- [fs] cifs: avoid using MID 0xFFFF (Leif Sahlberg) [1778693 1765979]
- [fs] cifs: Fix retry mid list corruption on reconnects (Leif Sahlberg) [1778693 1765979]
- [fs] smb3: fix unmount hang in open_shroot (Leif Sahlberg) [1781113 1757670]
- [fs] CIFS: fix deadlock in cached root handling (Leif Sahlberg) [1781113 1757670]
- [fs] Fix match_server check to allow for auto dialect negotiate (Leif Sahlberg) [1781113 1757670]
- [fs] SMB3: retry on STATUS_INSUFFICIENT_RESOURCES instead of failing write (Leif Sahlberg) [1781113 1757670]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1781113 1757670]
- [fs] cifs: fix strcat buffer overflow and reduce raciness in smb21_set_oplock_level() (Leif Sahlberg) [1781113 1757670]
- [fs] smb3: fix signing verification of large reads (Dave Wysochanski) [1781110 1753114]
- [scsi] scsi: lpfc: Fix port relogin failure due to GID_FT interaction (Dick Kennedy) [1781108 1733217]
- [fs] xfs: fix missing ILOCK unlock when xfs_setattr_nonsize fails due to EDQUOT (Bill O'Donnell) [1778692 1739607]
- [net] cfg80211: wext: avoid copying malformed SSIDs (Jarod Wilson) [1778633 1778634] {CVE-2019-17133}
- [block] blkcg: perpcu_ref init/exit should be done from blkg_alloc/free() (Ming Lei) [1777766 1741392]
- [fs] userfaultfd_release: always remove uffd flags and clear vm_userfaultfd_ctx (Alex Gladkov) [1777389 1749763] {CVE-2019-14898}
- [netdrv] mwifiex: Fix three heap overflow at parsing element in cfg80211_ap_settings (Jarod Wilson) [1776618 1775484] {CVE-2019-14814 CVE-2019-14815 CVE-2019-14816}
- [netdrv] mwifiex: fix possible heap overflow in mwifiex_process_country_ie() (Jarod Wilson) [1776209 1776210] {CVE-2019-14895}
- [netdrv] mwifiex: Fix heap overflow in mmwifiex_process_tdls_action_frame() (Jarod Wilson) [1776161 1776162] {CVE-2019-14901}
- [netdrv] rtlwifi: Fix potential overflow on P2P code (Jarod Wilson) [1775222 1775223] {CVE-2019-17666}
- [pci] hv: Avoid use of hv_pci_dev-&gt;pci_slot after freeing it (Mohammed Gamal) [1764635 1737569]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.5.1.el8_1]" date="1579003200">- [powerpc] powerpc/shared: Use static key to detect shared processor (Phil Auld) [1781114 1767529]
- [powerpc] powerpc/vcpu: Assume dedicated processors as non-preempt (Phil Auld) [1781114 1767529]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.6.1.el8_1]" date="1581940800">- [crypto] crypto: chelsio - count incomplete block in IV (Jonathan Toppins) [1798527 1725813]
- [crypto] crypto: chelsio - Fix softlockup with heavy I/O (Jonathan Toppins) [1798527 1725813]
- [crypto] crypto: chelsio - Fix NULL pointer dereference (Jonathan Toppins) [1798527 1725813]
- [nvme] nvme: Treat discovery subsystems as unique subsystems (Ewan Milne) [1798381 1757525]
- [mm] mm/page-writeback.c: don't break integrity writeback on -&gt;writepage() error (Christoph von Recklinghausen) [1797962 1782117]
- [lib] crc-t10dif: crc_t10dif_mutex can be static (Vladis Dronov) [1797961 1769462]
- [lib] crc-t10dif: Allow current transform to be inspected in sysfs (Vladis Dronov) [1797961 1769462]
- [lib] crc-t10dif: Pick better transform if one becomes available (Vladis Dronov) [1797961 1769462]
- [crypto] api - Introduce notifier for new crypto algorithms (Vladis Dronov) [1797961 1769462]
- [block] blk-mq: make sure that line break can be printed (Ming Lei) [1797960 1741462]
- [block] blk-mq: avoid sysfs buffer overflow with too many CPU cores (Ming Lei) [1797960 1741462]
- [scsi] hpsa: update driver version (Joseph Szczypek) [1797519 1761968]
- [scsi] scsi: hpsa: add missing hunks in reset-patch (Joseph Szczypek) [1797519 1761968]
- [arm64] arm64: compat: Workaround Neoverse-N1 #1542419 for compat user-space (Mark Salter) [1797518 1757828]
- [arm64] arm64: Fake the IminLine size on systems affected by Neoverse-N1 #1542419 (Mark Salter) [1797518 1757828]
- [arm64] arm64: errata: Hide CTR_EL0.DIC on systems affected by Neoverse-N1 #1542419 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Handle erratum 1418040 as a superset of erratum 1188873 (Mark Salter) [1797518 1757828]
- [arm64] arm64: errata: Add workaround for Cortex-A76 erratum #1463225 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Kconfig: Tidy up errata workaround help text (Mark Salter) [1797518 1757828]
- [arm64] arm64: Apply ARM64_ERRATUM_1188873 to Neoverse-N1 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Add part number for Neoverse N1 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Make ARM64_ERRATUM_1188873 depend on COMPAT (Mark Salter) [1797518 1757828]
- [arm64] arm64: Restrict ARM64_ERRATUM_1188873 mitigation to AArch32 (Mark Salter) [1797518 1757828]
- [arm64] arm64: arch_timer: avoid unused function warning (Mark Salter) [1797518 1757828]
- [arm64] arm64: Add workaround for Cortex-A76 erratum 1286807 (Mark Salter) [1797518 1757828]
- [md] dm snapshot: rework COW throttling to fix deadlock (Mike Snitzer) [1796490 1758605]
- [md] dm snapshot: introduce account_start_copy() and account_end_copy() (Mike Snitzer) [1796490 1758605]
- [block] fix memleak of bio integrity data (Ming Lei) [1795338 1779898]
- [powerpc] xive: Prevent page fault issues in the machine crash handler (Diego Domingos) [1795337 1756116]
- [scsi] scsi: megaraid_sas: IRQ poll to avoid CPU hard lockups (Tomas Henzl) [1795335 1726251]
- [powerpc] powerpc/perf: Disable trace_imc pmu (Steve Best) [1794061 1785573]
- [s390] s390/qeth: ensure linear access to packet headers (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: guard against runt packets (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: handle skb allocation error gracefully (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: drop unwanted packets earlier in RX path (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: support per-frame invalidation (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: gather more detailed RX dropped/error statistics (Philipp Rudo) [1794059 1781085]
- [s390] s390/net: Mark expected switch fall-throughs (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: consolidate skb RX processing in L3 driver (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: remove RX seqno in skb-&gt;cb (Philipp Rudo) [1794059 1781085]
- [powerpc] kvm: ppc: book3s hv: Flush link stack on guest exit to host kernel (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] book3s64: Fix link stack flush on context switch (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64s: support nospectre_v2 cmdline option (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Update Spectre v2 reporting (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Add nospectre_v2 command line argument (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Fix spectre_v2 mitigations reporting (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64: Make meltdown reporting Book3S 64 specific (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64: Disable the speculation barrier from the command line (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [firmware] efi/memreserve: Register reservations as 'reserved' in /proc/iomem (Bhupesh Sharma) [1792200 1772730]
- [firmware] efi/memreserve: deal with memreserve entries in unmapped memory (Bhupesh Sharma) [1792200 1772730]
- [s390] s390/cpum_sf: save TOD clock base in SDBs for time conversion (Philipp Rudo) [1792198 1743504]
- [s390] s390/sclp: Fix bit checked for has_sipl (Philipp Rudo) [1791408 1748347]
- [scsi] qla2xxx: Fix incorrect SFUB length used for Secure Flash Update MB Cmd (Himanshu Madhani) [1790350 1782598]
- [scsi] qla2xxx: Added support for MPI and PEP regions for ISP28XX (Himanshu Madhani) [1790350 1782598]
- [scsi] qla2xxx: Correctly retrieve and interpret active flash region (Himanshu Madhani) [1790350 1782598]
- [powerpc] powerpc/tm: Fix FP/VMX unavailable exceptions inside a transaction (Gustavo Duarte) [1788862 1750653] {CVE-2019-15030}
- [powerpc] powerpc/tm: Fix restoring FP/VMX facility incorrectly on interrupts (Gustavo Duarte) [1791630 1750653] {CVE-2019-15031}
- [scsi] scsi: qla2xxx: Fix different size DMA Alloc/Unmap (Himanshu Madhani) [1788206 1753031]
- [scsi] qla2xxx: call dma_free_coherent with correct size in all cases in qla24xx_sp_unmap (Himanshu Madhani) [1788206 1753031]
- [fs] devpts_pty_kill(): don't bother with d_delete() (Eric Sandeen) [1783959 1772718]
- [fs] devpts: always delete dcache dentry-s in dput() (Eric Sandeen) [1783959 1772718]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.7.1.el8_1]" date="1582286400">- [hid] hiddev: do cleanup in failure of opening a device (Benjamin Tissoires) [1803458 1803460] {CVE-2019-19527}
- [hid] hiddev: avoid opening a disconnected device (Benjamin Tissoires) [1803458 1803460] {CVE-2019-19527}
- [nvme] nvmet: fix discover log page when offsets are used (Gopal Tiwari) [1801216 1745836]
- [netdrv] ibmvnic: Serialize device queries (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Bound waits for device queries (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Terminate waiting device threads after loss of service (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Fix completion structure initialization (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Ignore H_FUNCTION return from H_EOI to tolerate XIVE mode (Steve Best) [1794060 1778037]
- [tools] selftests/powerpc: Fix compile error on tlbie_test due to newer gcc (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [tools] selftests/powerpc: Add test case for tlbie vs mtpidr ordering issue (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/mm: Fixup tlbie vs mtpidr/mtlpidr ordering issue on POWER9 (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/book3s64/radix: Rename CPU_FTR_P9_TLBIE_BUG feature flag (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/book3s64/mm: Don't do tlbie fixup for some hardware revisions (Desnes Augusto Nunes do Rosario) [1794058 1755707]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.8.1.el8_1]" date="1582632000">- rebuild, due infrastructure issues last kernel build wasn't signed properly [1807231 1807216]</changelog>
</package>
<package pkgid="96a5be87069d4faa74be5e51ad0d2336164a951ba9d626dfa18a04ec33b23167" name="kernel-abi-whitelists" arch="noarch">
  <version epoch="0" ver="4.18.0" rel="147.8.1.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.1.1.el8_1]" date="1573560000">- [arm64] arm64/sve: Fix wrong free for task-&gt;thread.sve_state (Andrew Jones) [1767358 1756450]
- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.2.1.el8_1]" date="1574424000">- [sched] fair: Scale bandwidth quota and period without losing quota/period ratio precision (Phil Auld) [1773568 1706247]
- [sched] fair: Fix -Wunused-but-set-variable warnings (Phil Auld) [1773568 1706247]
- [sched] fair: Fix low cpu usage with high throttling by removing expiration of cpu-local slices (Phil Auld) [1773568 1706247]
- [powerpc] powerpc/pseries: Track LMB nid instead of using device tree (Steve Best) [1772110 1758742]
- [powerpc] powerpc/pseries/memory-hotplug: Only update DT once per memory DLPAR request (Steve Best) [1772110 1758742]
- [powerpc] powerpc/rtas: allow rescheduling while changing cpu states (Steve Best) [1772109 1758651]
- [powerpc] powerpc/pseries/mobility: use cond_resched when updating device tree (Steve Best) [1772109 1758651]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1770177 1752498]
- [fs] CIFS: Fix use after free of file info structures (Dave Wysochanski) [1767357 1757865]
- [fs] cifs: use cifsInodeInfo-&gt;open_file_lock while iterating to avoid a panic (Dave Wysochanski) [1767357 1757865]
- [netdrv] net/ibmvnic: prevent more than one thread from running in reset (Steve Best) [1764830 1756943]
- [netdrv] net/ibmvnic: unlock rtnl_lock in reset so linkwatch_event can run (Steve Best) [1764830 1756943]
- [netdrv] ibmvnic: Warn unknown speed message only when carrier is present (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: Fix missing { in __ibmvnic_reset (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: free reset work of removed device from queue (Steve Best) [1764832 1749873]
- [netdrv] ibmvnic: Do not process reset during or after device removal (Steve Best) [1764832 1749873]
- [cpuidle] cpuidle: governor: Add new governors to cpuidle_governors again (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: do not set an owner to allow modunload (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: set haltpoll as preferred governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: allow governor switch on cpuidle_register_driver() (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: Add cpuidle.governor= command line parameter (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: vcpu hotplug support (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: header file stubs must be "static inline" (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: return -ENODEV on modinit failure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1764831 1759282]
- [x86] kvm: x86: add host poll control msrs (Vitaly Kuznetsov) [1764831 1749495]
- [s390] s390/setup: Fix kernel lock down for s390 (Philipp Rudo) [1764827 1748343]
- [powerpc] powerpc: Allow flush_(inval_)dcache_range to work across ranges &gt;4GB (Steve Best) [1764826 1744062]
- [fs] mm/huge_memory: fix vmf_insert_pfn_{pmd, pud}() crash, handle unaligned addresses (Jeff Moyer) [1764825 1743159]
- [mm] mm/huge_memory.c: fix modifying of page protection by insert_pfn_pmd() (Jeff Moyer) [1764825 1743159]
- [pci] PCI: hv: Use bytes 4 and 5 from instance ID as the PCI domain numbers (Mohammed Gamal) [1764634 1671288]
- [pci] PCI: hv: Detect and fix Hyper-V PCI domain number collision (Mohammed Gamal) [1764634 1671288]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.3.1.el8_1]" date="1574769600">- [x86] kvm: svm: taint module and print taint message iff nested is enabled (Bandan Das) [1776114 1775410]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.4.1.el8_1]" date="1576497600">- [block] blk-mq: apply normal plugging for HDD (Ming Lei) [1782181 1759380]
- [block] blk-mq: honor IO scheduler for multiqueue devices (Ming Lei) [1782181 1759380]
- [block] blk-mq: simplify blk_mq_make_request() (Ming Lei) [1782181 1759380]
- [block] blk-mq: remove blk_mq_put_ctx() (Ming Lei) [1782181 1759380]
- [x86] kvm: vmx: use MSR_IA32_TSX_CTRL to hard-disable TSX on guest that lack it (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: vmx: implement MSR_IA32_TSX_CTRL disable RTM functionality (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: implement MSR_IA32_TSX_CTRL effect on CPUID (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: do not modify masked bits of shared MSRs (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: fix presentation of TSX feature in ARCH_CAPABILITIES (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm/x86: Export MDS_NO=0 to guests when TSX is enabled (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [fs] cifs: Fix cifsInodeInfo lock_sem deadlock when reconnect occurs (Leif Sahlberg) [1778693 1765979]
- [fs] cifs: avoid using MID 0xFFFF (Leif Sahlberg) [1778693 1765979]
- [fs] cifs: Fix retry mid list corruption on reconnects (Leif Sahlberg) [1778693 1765979]
- [fs] smb3: fix unmount hang in open_shroot (Leif Sahlberg) [1781113 1757670]
- [fs] CIFS: fix deadlock in cached root handling (Leif Sahlberg) [1781113 1757670]
- [fs] Fix match_server check to allow for auto dialect negotiate (Leif Sahlberg) [1781113 1757670]
- [fs] SMB3: retry on STATUS_INSUFFICIENT_RESOURCES instead of failing write (Leif Sahlberg) [1781113 1757670]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1781113 1757670]
- [fs] cifs: fix strcat buffer overflow and reduce raciness in smb21_set_oplock_level() (Leif Sahlberg) [1781113 1757670]
- [fs] smb3: fix signing verification of large reads (Dave Wysochanski) [1781110 1753114]
- [scsi] scsi: lpfc: Fix port relogin failure due to GID_FT interaction (Dick Kennedy) [1781108 1733217]
- [fs] xfs: fix missing ILOCK unlock when xfs_setattr_nonsize fails due to EDQUOT (Bill O'Donnell) [1778692 1739607]
- [net] cfg80211: wext: avoid copying malformed SSIDs (Jarod Wilson) [1778633 1778634] {CVE-2019-17133}
- [block] blkcg: perpcu_ref init/exit should be done from blkg_alloc/free() (Ming Lei) [1777766 1741392]
- [fs] userfaultfd_release: always remove uffd flags and clear vm_userfaultfd_ctx (Alex Gladkov) [1777389 1749763] {CVE-2019-14898}
- [netdrv] mwifiex: Fix three heap overflow at parsing element in cfg80211_ap_settings (Jarod Wilson) [1776618 1775484] {CVE-2019-14814 CVE-2019-14815 CVE-2019-14816}
- [netdrv] mwifiex: fix possible heap overflow in mwifiex_process_country_ie() (Jarod Wilson) [1776209 1776210] {CVE-2019-14895}
- [netdrv] mwifiex: Fix heap overflow in mmwifiex_process_tdls_action_frame() (Jarod Wilson) [1776161 1776162] {CVE-2019-14901}
- [netdrv] rtlwifi: Fix potential overflow on P2P code (Jarod Wilson) [1775222 1775223] {CVE-2019-17666}
- [pci] hv: Avoid use of hv_pci_dev-&gt;pci_slot after freeing it (Mohammed Gamal) [1764635 1737569]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.5.1.el8_1]" date="1579003200">- [powerpc] powerpc/shared: Use static key to detect shared processor (Phil Auld) [1781114 1767529]
- [powerpc] powerpc/vcpu: Assume dedicated processors as non-preempt (Phil Auld) [1781114 1767529]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.6.1.el8_1]" date="1581940800">- [crypto] crypto: chelsio - count incomplete block in IV (Jonathan Toppins) [1798527 1725813]
- [crypto] crypto: chelsio - Fix softlockup with heavy I/O (Jonathan Toppins) [1798527 1725813]
- [crypto] crypto: chelsio - Fix NULL pointer dereference (Jonathan Toppins) [1798527 1725813]
- [nvme] nvme: Treat discovery subsystems as unique subsystems (Ewan Milne) [1798381 1757525]
- [mm] mm/page-writeback.c: don't break integrity writeback on -&gt;writepage() error (Christoph von Recklinghausen) [1797962 1782117]
- [lib] crc-t10dif: crc_t10dif_mutex can be static (Vladis Dronov) [1797961 1769462]
- [lib] crc-t10dif: Allow current transform to be inspected in sysfs (Vladis Dronov) [1797961 1769462]
- [lib] crc-t10dif: Pick better transform if one becomes available (Vladis Dronov) [1797961 1769462]
- [crypto] api - Introduce notifier for new crypto algorithms (Vladis Dronov) [1797961 1769462]
- [block] blk-mq: make sure that line break can be printed (Ming Lei) [1797960 1741462]
- [block] blk-mq: avoid sysfs buffer overflow with too many CPU cores (Ming Lei) [1797960 1741462]
- [scsi] hpsa: update driver version (Joseph Szczypek) [1797519 1761968]
- [scsi] scsi: hpsa: add missing hunks in reset-patch (Joseph Szczypek) [1797519 1761968]
- [arm64] arm64: compat: Workaround Neoverse-N1 #1542419 for compat user-space (Mark Salter) [1797518 1757828]
- [arm64] arm64: Fake the IminLine size on systems affected by Neoverse-N1 #1542419 (Mark Salter) [1797518 1757828]
- [arm64] arm64: errata: Hide CTR_EL0.DIC on systems affected by Neoverse-N1 #1542419 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Handle erratum 1418040 as a superset of erratum 1188873 (Mark Salter) [1797518 1757828]
- [arm64] arm64: errata: Add workaround for Cortex-A76 erratum #1463225 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Kconfig: Tidy up errata workaround help text (Mark Salter) [1797518 1757828]
- [arm64] arm64: Apply ARM64_ERRATUM_1188873 to Neoverse-N1 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Add part number for Neoverse N1 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Make ARM64_ERRATUM_1188873 depend on COMPAT (Mark Salter) [1797518 1757828]
- [arm64] arm64: Restrict ARM64_ERRATUM_1188873 mitigation to AArch32 (Mark Salter) [1797518 1757828]
- [arm64] arm64: arch_timer: avoid unused function warning (Mark Salter) [1797518 1757828]
- [arm64] arm64: Add workaround for Cortex-A76 erratum 1286807 (Mark Salter) [1797518 1757828]
- [md] dm snapshot: rework COW throttling to fix deadlock (Mike Snitzer) [1796490 1758605]
- [md] dm snapshot: introduce account_start_copy() and account_end_copy() (Mike Snitzer) [1796490 1758605]
- [block] fix memleak of bio integrity data (Ming Lei) [1795338 1779898]
- [powerpc] xive: Prevent page fault issues in the machine crash handler (Diego Domingos) [1795337 1756116]
- [scsi] scsi: megaraid_sas: IRQ poll to avoid CPU hard lockups (Tomas Henzl) [1795335 1726251]
- [powerpc] powerpc/perf: Disable trace_imc pmu (Steve Best) [1794061 1785573]
- [s390] s390/qeth: ensure linear access to packet headers (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: guard against runt packets (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: handle skb allocation error gracefully (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: drop unwanted packets earlier in RX path (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: support per-frame invalidation (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: gather more detailed RX dropped/error statistics (Philipp Rudo) [1794059 1781085]
- [s390] s390/net: Mark expected switch fall-throughs (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: consolidate skb RX processing in L3 driver (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: remove RX seqno in skb-&gt;cb (Philipp Rudo) [1794059 1781085]
- [powerpc] kvm: ppc: book3s hv: Flush link stack on guest exit to host kernel (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] book3s64: Fix link stack flush on context switch (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64s: support nospectre_v2 cmdline option (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Update Spectre v2 reporting (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Add nospectre_v2 command line argument (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Fix spectre_v2 mitigations reporting (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64: Make meltdown reporting Book3S 64 specific (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64: Disable the speculation barrier from the command line (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [firmware] efi/memreserve: Register reservations as 'reserved' in /proc/iomem (Bhupesh Sharma) [1792200 1772730]
- [firmware] efi/memreserve: deal with memreserve entries in unmapped memory (Bhupesh Sharma) [1792200 1772730]
- [s390] s390/cpum_sf: save TOD clock base in SDBs for time conversion (Philipp Rudo) [1792198 1743504]
- [s390] s390/sclp: Fix bit checked for has_sipl (Philipp Rudo) [1791408 1748347]
- [scsi] qla2xxx: Fix incorrect SFUB length used for Secure Flash Update MB Cmd (Himanshu Madhani) [1790350 1782598]
- [scsi] qla2xxx: Added support for MPI and PEP regions for ISP28XX (Himanshu Madhani) [1790350 1782598]
- [scsi] qla2xxx: Correctly retrieve and interpret active flash region (Himanshu Madhani) [1790350 1782598]
- [powerpc] powerpc/tm: Fix FP/VMX unavailable exceptions inside a transaction (Gustavo Duarte) [1788862 1750653] {CVE-2019-15030}
- [powerpc] powerpc/tm: Fix restoring FP/VMX facility incorrectly on interrupts (Gustavo Duarte) [1791630 1750653] {CVE-2019-15031}
- [scsi] scsi: qla2xxx: Fix different size DMA Alloc/Unmap (Himanshu Madhani) [1788206 1753031]
- [scsi] qla2xxx: call dma_free_coherent with correct size in all cases in qla24xx_sp_unmap (Himanshu Madhani) [1788206 1753031]
- [fs] devpts_pty_kill(): don't bother with d_delete() (Eric Sandeen) [1783959 1772718]
- [fs] devpts: always delete dcache dentry-s in dput() (Eric Sandeen) [1783959 1772718]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.7.1.el8_1]" date="1582286400">- [hid] hiddev: do cleanup in failure of opening a device (Benjamin Tissoires) [1803458 1803460] {CVE-2019-19527}
- [hid] hiddev: avoid opening a disconnected device (Benjamin Tissoires) [1803458 1803460] {CVE-2019-19527}
- [nvme] nvmet: fix discover log page when offsets are used (Gopal Tiwari) [1801216 1745836]
- [netdrv] ibmvnic: Serialize device queries (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Bound waits for device queries (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Terminate waiting device threads after loss of service (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Fix completion structure initialization (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Ignore H_FUNCTION return from H_EOI to tolerate XIVE mode (Steve Best) [1794060 1778037]
- [tools] selftests/powerpc: Fix compile error on tlbie_test due to newer gcc (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [tools] selftests/powerpc: Add test case for tlbie vs mtpidr ordering issue (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/mm: Fixup tlbie vs mtpidr/mtlpidr ordering issue on POWER9 (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/book3s64/radix: Rename CPU_FTR_P9_TLBIE_BUG feature flag (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/book3s64/mm: Don't do tlbie fixup for some hardware revisions (Desnes Augusto Nunes do Rosario) [1794058 1755707]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.8.1.el8_1]" date="1582632000">- rebuild, due infrastructure issues last kernel build wasn't signed properly [1807231 1807216]</changelog>
</package>
<package pkgid="2f31e6179f39243d9e4bd7ba070a6c4088e1ed905de76ecb49f345bb10ff49c5" name="kernel-abi-whitelists" arch="noarch">
  <version epoch="0" ver="4.18.0" rel="147.8.1.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.1.1.el8_1]" date="1573560000">- [arm64] arm64/sve: Fix wrong free for task-&gt;thread.sve_state (Andrew Jones) [1767358 1756450]
- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.2.1.el8_1]" date="1574424000">- [sched] fair: Scale bandwidth quota and period without losing quota/period ratio precision (Phil Auld) [1773568 1706247]
- [sched] fair: Fix -Wunused-but-set-variable warnings (Phil Auld) [1773568 1706247]
- [sched] fair: Fix low cpu usage with high throttling by removing expiration of cpu-local slices (Phil Auld) [1773568 1706247]
- [powerpc] powerpc/pseries: Track LMB nid instead of using device tree (Steve Best) [1772110 1758742]
- [powerpc] powerpc/pseries/memory-hotplug: Only update DT once per memory DLPAR request (Steve Best) [1772110 1758742]
- [powerpc] powerpc/rtas: allow rescheduling while changing cpu states (Steve Best) [1772109 1758651]
- [powerpc] powerpc/pseries/mobility: use cond_resched when updating device tree (Steve Best) [1772109 1758651]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1770177 1752498]
- [fs] CIFS: Fix use after free of file info structures (Dave Wysochanski) [1767357 1757865]
- [fs] cifs: use cifsInodeInfo-&gt;open_file_lock while iterating to avoid a panic (Dave Wysochanski) [1767357 1757865]
- [netdrv] net/ibmvnic: prevent more than one thread from running in reset (Steve Best) [1764830 1756943]
- [netdrv] net/ibmvnic: unlock rtnl_lock in reset so linkwatch_event can run (Steve Best) [1764830 1756943]
- [netdrv] ibmvnic: Warn unknown speed message only when carrier is present (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: Fix missing { in __ibmvnic_reset (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: free reset work of removed device from queue (Steve Best) [1764832 1749873]
- [netdrv] ibmvnic: Do not process reset during or after device removal (Steve Best) [1764832 1749873]
- [cpuidle] cpuidle: governor: Add new governors to cpuidle_governors again (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: do not set an owner to allow modunload (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: set haltpoll as preferred governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: allow governor switch on cpuidle_register_driver() (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: Add cpuidle.governor= command line parameter (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: vcpu hotplug support (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: header file stubs must be "static inline" (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: return -ENODEV on modinit failure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1764831 1759282]
- [x86] kvm: x86: add host poll control msrs (Vitaly Kuznetsov) [1764831 1749495]
- [s390] s390/setup: Fix kernel lock down for s390 (Philipp Rudo) [1764827 1748343]
- [powerpc] powerpc: Allow flush_(inval_)dcache_range to work across ranges &gt;4GB (Steve Best) [1764826 1744062]
- [fs] mm/huge_memory: fix vmf_insert_pfn_{pmd, pud}() crash, handle unaligned addresses (Jeff Moyer) [1764825 1743159]
- [mm] mm/huge_memory.c: fix modifying of page protection by insert_pfn_pmd() (Jeff Moyer) [1764825 1743159]
- [pci] PCI: hv: Use bytes 4 and 5 from instance ID as the PCI domain numbers (Mohammed Gamal) [1764634 1671288]
- [pci] PCI: hv: Detect and fix Hyper-V PCI domain number collision (Mohammed Gamal) [1764634 1671288]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.3.1.el8_1]" date="1574769600">- [x86] kvm: svm: taint module and print taint message iff nested is enabled (Bandan Das) [1776114 1775410]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.4.1.el8_1]" date="1576497600">- [block] blk-mq: apply normal plugging for HDD (Ming Lei) [1782181 1759380]
- [block] blk-mq: honor IO scheduler for multiqueue devices (Ming Lei) [1782181 1759380]
- [block] blk-mq: simplify blk_mq_make_request() (Ming Lei) [1782181 1759380]
- [block] blk-mq: remove blk_mq_put_ctx() (Ming Lei) [1782181 1759380]
- [x86] kvm: vmx: use MSR_IA32_TSX_CTRL to hard-disable TSX on guest that lack it (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: vmx: implement MSR_IA32_TSX_CTRL disable RTM functionality (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: implement MSR_IA32_TSX_CTRL effect on CPUID (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: do not modify masked bits of shared MSRs (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: fix presentation of TSX feature in ARCH_CAPABILITIES (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm/x86: Export MDS_NO=0 to guests when TSX is enabled (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [fs] cifs: Fix cifsInodeInfo lock_sem deadlock when reconnect occurs (Leif Sahlberg) [1778693 1765979]
- [fs] cifs: avoid using MID 0xFFFF (Leif Sahlberg) [1778693 1765979]
- [fs] cifs: Fix retry mid list corruption on reconnects (Leif Sahlberg) [1778693 1765979]
- [fs] smb3: fix unmount hang in open_shroot (Leif Sahlberg) [1781113 1757670]
- [fs] CIFS: fix deadlock in cached root handling (Leif Sahlberg) [1781113 1757670]
- [fs] Fix match_server check to allow for auto dialect negotiate (Leif Sahlberg) [1781113 1757670]
- [fs] SMB3: retry on STATUS_INSUFFICIENT_RESOURCES instead of failing write (Leif Sahlberg) [1781113 1757670]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1781113 1757670]
- [fs] cifs: fix strcat buffer overflow and reduce raciness in smb21_set_oplock_level() (Leif Sahlberg) [1781113 1757670]
- [fs] smb3: fix signing verification of large reads (Dave Wysochanski) [1781110 1753114]
- [scsi] scsi: lpfc: Fix port relogin failure due to GID_FT interaction (Dick Kennedy) [1781108 1733217]
- [fs] xfs: fix missing ILOCK unlock when xfs_setattr_nonsize fails due to EDQUOT (Bill O'Donnell) [1778692 1739607]
- [net] cfg80211: wext: avoid copying malformed SSIDs (Jarod Wilson) [1778633 1778634] {CVE-2019-17133}
- [block] blkcg: perpcu_ref init/exit should be done from blkg_alloc/free() (Ming Lei) [1777766 1741392]
- [fs] userfaultfd_release: always remove uffd flags and clear vm_userfaultfd_ctx (Alex Gladkov) [1777389 1749763] {CVE-2019-14898}
- [netdrv] mwifiex: Fix three heap overflow at parsing element in cfg80211_ap_settings (Jarod Wilson) [1776618 1775484] {CVE-2019-14814 CVE-2019-14815 CVE-2019-14816}
- [netdrv] mwifiex: fix possible heap overflow in mwifiex_process_country_ie() (Jarod Wilson) [1776209 1776210] {CVE-2019-14895}
- [netdrv] mwifiex: Fix heap overflow in mmwifiex_process_tdls_action_frame() (Jarod Wilson) [1776161 1776162] {CVE-2019-14901}
- [netdrv] rtlwifi: Fix potential overflow on P2P code (Jarod Wilson) [1775222 1775223] {CVE-2019-17666}
- [pci] hv: Avoid use of hv_pci_dev-&gt;pci_slot after freeing it (Mohammed Gamal) [1764635 1737569]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.5.1.el8_1]" date="1579003200">- [powerpc] powerpc/shared: Use static key to detect shared processor (Phil Auld) [1781114 1767529]
- [powerpc] powerpc/vcpu: Assume dedicated processors as non-preempt (Phil Auld) [1781114 1767529]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.6.1.el8_1]" date="1581940800">- [crypto] crypto: chelsio - count incomplete block in IV (Jonathan Toppins) [1798527 1725813]
- [crypto] crypto: chelsio - Fix softlockup with heavy I/O (Jonathan Toppins) [1798527 1725813]
- [crypto] crypto: chelsio - Fix NULL pointer dereference (Jonathan Toppins) [1798527 1725813]
- [nvme] nvme: Treat discovery subsystems as unique subsystems (Ewan Milne) [1798381 1757525]
- [mm] mm/page-writeback.c: don't break integrity writeback on -&gt;writepage() error (Christoph von Recklinghausen) [1797962 1782117]
- [lib] crc-t10dif: crc_t10dif_mutex can be static (Vladis Dronov) [1797961 1769462]
- [lib] crc-t10dif: Allow current transform to be inspected in sysfs (Vladis Dronov) [1797961 1769462]
- [lib] crc-t10dif: Pick better transform if one becomes available (Vladis Dronov) [1797961 1769462]
- [crypto] api - Introduce notifier for new crypto algorithms (Vladis Dronov) [1797961 1769462]
- [block] blk-mq: make sure that line break can be printed (Ming Lei) [1797960 1741462]
- [block] blk-mq: avoid sysfs buffer overflow with too many CPU cores (Ming Lei) [1797960 1741462]
- [scsi] hpsa: update driver version (Joseph Szczypek) [1797519 1761968]
- [scsi] scsi: hpsa: add missing hunks in reset-patch (Joseph Szczypek) [1797519 1761968]
- [arm64] arm64: compat: Workaround Neoverse-N1 #1542419 for compat user-space (Mark Salter) [1797518 1757828]
- [arm64] arm64: Fake the IminLine size on systems affected by Neoverse-N1 #1542419 (Mark Salter) [1797518 1757828]
- [arm64] arm64: errata: Hide CTR_EL0.DIC on systems affected by Neoverse-N1 #1542419 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Handle erratum 1418040 as a superset of erratum 1188873 (Mark Salter) [1797518 1757828]
- [arm64] arm64: errata: Add workaround for Cortex-A76 erratum #1463225 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Kconfig: Tidy up errata workaround help text (Mark Salter) [1797518 1757828]
- [arm64] arm64: Apply ARM64_ERRATUM_1188873 to Neoverse-N1 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Add part number for Neoverse N1 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Make ARM64_ERRATUM_1188873 depend on COMPAT (Mark Salter) [1797518 1757828]
- [arm64] arm64: Restrict ARM64_ERRATUM_1188873 mitigation to AArch32 (Mark Salter) [1797518 1757828]
- [arm64] arm64: arch_timer: avoid unused function warning (Mark Salter) [1797518 1757828]
- [arm64] arm64: Add workaround for Cortex-A76 erratum 1286807 (Mark Salter) [1797518 1757828]
- [md] dm snapshot: rework COW throttling to fix deadlock (Mike Snitzer) [1796490 1758605]
- [md] dm snapshot: introduce account_start_copy() and account_end_copy() (Mike Snitzer) [1796490 1758605]
- [block] fix memleak of bio integrity data (Ming Lei) [1795338 1779898]
- [powerpc] xive: Prevent page fault issues in the machine crash handler (Diego Domingos) [1795337 1756116]
- [scsi] scsi: megaraid_sas: IRQ poll to avoid CPU hard lockups (Tomas Henzl) [1795335 1726251]
- [powerpc] powerpc/perf: Disable trace_imc pmu (Steve Best) [1794061 1785573]
- [s390] s390/qeth: ensure linear access to packet headers (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: guard against runt packets (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: handle skb allocation error gracefully (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: drop unwanted packets earlier in RX path (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: support per-frame invalidation (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: gather more detailed RX dropped/error statistics (Philipp Rudo) [1794059 1781085]
- [s390] s390/net: Mark expected switch fall-throughs (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: consolidate skb RX processing in L3 driver (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: remove RX seqno in skb-&gt;cb (Philipp Rudo) [1794059 1781085]
- [powerpc] kvm: ppc: book3s hv: Flush link stack on guest exit to host kernel (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] book3s64: Fix link stack flush on context switch (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64s: support nospectre_v2 cmdline option (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Update Spectre v2 reporting (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Add nospectre_v2 command line argument (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Fix spectre_v2 mitigations reporting (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64: Make meltdown reporting Book3S 64 specific (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64: Disable the speculation barrier from the command line (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [firmware] efi/memreserve: Register reservations as 'reserved' in /proc/iomem (Bhupesh Sharma) [1792200 1772730]
- [firmware] efi/memreserve: deal with memreserve entries in unmapped memory (Bhupesh Sharma) [1792200 1772730]
- [s390] s390/cpum_sf: save TOD clock base in SDBs for time conversion (Philipp Rudo) [1792198 1743504]
- [s390] s390/sclp: Fix bit checked for has_sipl (Philipp Rudo) [1791408 1748347]
- [scsi] qla2xxx: Fix incorrect SFUB length used for Secure Flash Update MB Cmd (Himanshu Madhani) [1790350 1782598]
- [scsi] qla2xxx: Added support for MPI and PEP regions for ISP28XX (Himanshu Madhani) [1790350 1782598]
- [scsi] qla2xxx: Correctly retrieve and interpret active flash region (Himanshu Madhani) [1790350 1782598]
- [powerpc] powerpc/tm: Fix FP/VMX unavailable exceptions inside a transaction (Gustavo Duarte) [1788862 1750653] {CVE-2019-15030}
- [powerpc] powerpc/tm: Fix restoring FP/VMX facility incorrectly on interrupts (Gustavo Duarte) [1791630 1750653] {CVE-2019-15031}
- [scsi] scsi: qla2xxx: Fix different size DMA Alloc/Unmap (Himanshu Madhani) [1788206 1753031]
- [scsi] qla2xxx: call dma_free_coherent with correct size in all cases in qla24xx_sp_unmap (Himanshu Madhani) [1788206 1753031]
- [fs] devpts_pty_kill(): don't bother with d_delete() (Eric Sandeen) [1783959 1772718]
- [fs] devpts: always delete dcache dentry-s in dput() (Eric Sandeen) [1783959 1772718]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.7.1.el8_1]" date="1582286400">- [hid] hiddev: do cleanup in failure of opening a device (Benjamin Tissoires) [1803458 1803460] {CVE-2019-19527}
- [hid] hiddev: avoid opening a disconnected device (Benjamin Tissoires) [1803458 1803460] {CVE-2019-19527}
- [nvme] nvmet: fix discover log page when offsets are used (Gopal Tiwari) [1801216 1745836]
- [netdrv] ibmvnic: Serialize device queries (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Bound waits for device queries (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Terminate waiting device threads after loss of service (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Fix completion structure initialization (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Ignore H_FUNCTION return from H_EOI to tolerate XIVE mode (Steve Best) [1794060 1778037]
- [tools] selftests/powerpc: Fix compile error on tlbie_test due to newer gcc (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [tools] selftests/powerpc: Add test case for tlbie vs mtpidr ordering issue (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/mm: Fixup tlbie vs mtpidr/mtlpidr ordering issue on POWER9 (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/book3s64/radix: Rename CPU_FTR_P9_TLBIE_BUG feature flag (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/book3s64/mm: Don't do tlbie fixup for some hardware revisions (Desnes Augusto Nunes do Rosario) [1794058 1755707]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.8.1.el8_1]" date="1582632000">- rebuild, due infrastructure issues last kernel build wasn't signed properly [1807231 1807216]</changelog>
</package>
<package pkgid="45a65455eed1ae7dc19af0a6921b9d9e86a0fa20ce1a929df3a57e414341f83d" name="kernel-abi-whitelists" arch="noarch">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="31857dc0f468697323bb3665f10414860dcf94634433607e87add74a01e1a7f5" name="kernel-abi-whitelists" arch="noarch">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="451026d1d45bc7209dd674502d153d8d8d24bbe52130882f871d4df08ed2cb16" name="kernel-abi-whitelists" arch="noarch">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="9bdac03ab0b4393d40340f321721200a7ea3721ab94d611e4c0f165a0fc55369" name="kernel-abi-whitelists" arch="noarch">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="f295f1ec58582c74b1a1e965c9aee9d33306d84ee7b34bf325c6445cb458a5b0" name="kernel-abi-whitelists" arch="noarch">
  <version epoch="0" ver="4.18.0" rel="193.28.1.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.20.1.el8_2]" date="1599134400">- [infiniband] IB/rdmavt: Fix RQ counting issues causing use of an invalid RWQE (Kamal Heib) [1872771 1850314]
- [block] blk-mq: Rerun dispatching in the case of budget contention (Ming Lei) [1869779 1824037]
- [block] blk-mq: Add blk_mq_delay_run_hw_queues() API call (Ming Lei) [1869779 1824037]
- [block] blk-mq: In blk_mq_dispatch_rq_list() "no budget" is a reason to kick (Ming Lei) [1869779 1824037]
- [block] blk-mq: Put driver tag in blk_mq_dispatch_rq_list() when no budget (Ming Lei) [1869779 1824037]
- [md] dm mpath: use double checked locking in fast path (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rename current_pgpath to pgpath in multipath_prepare_ioctl (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rework __map_bio() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: factor out multipath_queue_bio (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: push locking down to must_push_back_rq() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: take m-&gt;lock spinlock when testing QUEUE_IF_NO_PATH (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: changes from initial m-&gt;flags locking audit (Mike Snitzer) [1869386 1848651]
- [md] dm rq: don't call blk_mq_queue_stopped() in dm_stop_queue() (Mike Snitzer) [1869386 1848651]
- [md] dm: do not use waitqueue for request-based DM (Mike Snitzer) [1869386 1848651]
- [block] blk-mq: consider non-idle request as "inflight" in blk_mq_rq_inflight() (Mike Snitzer) [1869386 1848651]
- [kernel] sched/deadline: Initialize -&gt;dl_boosted (Phil Auld) [1867612 1854179]
- [kernel] sched/core: Fix PI boosting between RT and DEADLINE tasks (Phil Auld) [1867612 1854179]
- [net] net/smc: tolerate future SMCD versions (Philipp Rudo) [1866390 1854992]
- [net] openvswitch: fixes potential deadlock in dp cleanup code (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: reorder masks array based on usage (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: take into account de-fragmentation/gso_size in execute_check_pkt_len (Lorenzo Bianconi) [1860169 1851888]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.21.1.el8_2]" date="1599739200">- [scsi] scsi: ibmvfc: Fix NULL return compiler warning (Steve Best) [1866371 1810653]
- [scsi] scsi: ibmvfc: Avoid loss of all paths during SVC node reboot (Steve Best) [1866371 1810653]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.22.1.el8_2]" date="1600257600">- [crypto] pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1877530 1862072]
- [crypto] Revert "pefile: Tolerate other pefile signatures after first" (Bruno Meneguele)
- [infiniband] IB/hfi1: Fix another case where pq is left on waitlist (Kamal Heib) [1872766 1859209]
- [infiniband] IB/hfi1: Ensure pq is not left on waitlist (Kamal Heib) [1872766 1859209]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.23.1.el8_2]" date="1600344000">- [net] packet: fix overflow in tpacket_rcv (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}
- [net] packet: make tp_drops atomic (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.24.1.el8_2]" date="1600862400">- [kernel] timers: Remove must_forward_clk (Phil Auld) [1877417 1833096]
- [kernel] timers: Spare timer softirq until next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Expand clk forward logic beyond nohz (Phil Auld) [1877417 1833096]
- [kernel] timers: Reuse next expiry cache after nohz exit (Phil Auld) [1877417 1833096]
- [kernel] timers: Always keep track of next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Optimize _next_timer_interrupt() level iteration (Phil Auld) [1877417 1833096]
- [kernel] timers: Add comments about calc_index() ceiling work (Phil Auld) [1877417 1833096]
- [kernel] timers: Move trigger_dyntick_cpu() to enqueue_timer() (Phil Auld) [1877417 1833096]
- [kernel] timers: Use only bucket expiry for base-&gt;next_expiry value (Phil Auld) [1877417 1833096]
- [kernel] timers: Preserve higher bits of expiration on index calculation (Phil Auld) [1877417 1833096]
- [kernel] timer: Fix wheel index calculation on last level (Phil Auld) [1877417 1833096]
- [kernel] timer: Prevent base-&gt;clk from moving backward (Phil Auld) [1877417 1833096]
- [kernel] timer: Read jiffies once when forwarding base clk (Phil Auld) [1877417 1833096]
- [infiniband] RDMA/umem: Fix ib_umem_find_best_pgsz() (Kamal Heib) [1872424 1856158]
- [net] net: accept an empty mask in /sys/class/net/*/queues/rx-*/rps_cpus (Nitesh Narayan Lal) [1870181 1868433]
- [net] net: Restrict receive packets queuing to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [pci] PCI: Restrict probe functions to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [lib] lib: Restrict cpumask_local_spread to houskeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [s390] s390/pci: Fix unexpected write combine on resource (Philipp Rudo) [1869276 1827311]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.25.1.el8_2]" date="1601553600">- [net] netfilter: conntrack: proc: rename stat column (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: add clash resolution stat counter (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: remove ignore stats (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not increment two error counters at same time (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not auto-delete clash entries on reply (Florian Westphal) [1882095 1875681]
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1881085 1875316] {CVE-2020-14385}
- [kernel] time/tick-broadcast: Fix tick_broadcast_offline() lockdep complaint (Alexey Klimov) [1880081 1877380]
- [net] atomics/treewide: Rename __atomic_add_unless() =&gt; atomic_fetch_add_unless() (Yauheni Kaliuta) [1880081 1813370]
- [kernel] timers: Lower base clock forwarding threshold (Phil Auld) [1877417 1833096]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.26.1.el8_2]" date="1602158400">- [firmware] efi: don't reserve MOK config table memory region (Kairui Song) [1879988 1878584]
- [security] integrity: Load certs from the EFI MOK config table (Lenny Szubowicz) [1877528 1868306]
- [security] integrity: Move import of MokListRT certs to a separate routine (Lenny Szubowicz) [1877528 1868306]
- [firmware] efi: Support for MOK variable config table (Lenny Szubowicz) [1877528 1868306]
- [security] efi: Only print errors about failing to get certs if EFI vars are found (Lenny Szubowicz) [1877528 1804969]
- [fs] ceph: fix inode number handling on arches with 32-bit ino_t (Jeff Layton) [1875787 1866018]
- [fs] ceph: handle zero-length feature mask in session messages (Jeff Layton) [1875787 1866018]
- [fs] ceph: fix endianness bug when handling MDS session feature bits (Jeff Layton) [1875787 1866018]
- [netdrv] net/mlx5e: Fix missing cleanup of ethtool steering during rep rx cleanup (Alaa Hleihel) [1857777 1856660]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.27.1.el8_2]" date="1602763200">- [powerpc] powerpc/pseries: Do not initiate shutdown when system is running on UPS (Diego Domingos) [1882243 1870477]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859471 1859472] {CVE-2020-14331}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.28.1.el8_2]" date="1602849600">- [net] Bluetooth: L2CAP: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888256 1888258] {CVE-2020-12351}
- [net] Bluetooth: A2MP: Fix not initializing all members (Gopal Tiwari) [1888906 1888807] {CVE-2020-12352}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-193.28.1.el8.centos" date="1603195200">- Apply debranding changes</changelog>
</package>
<package pkgid="b9ee667f441e1cae2f72c02c204ed670196bf3eefb0e4224eb0a893f9605f3b2" name="kernel-core" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="7c3c26834e48da6834409fa8e6f8e8ba9bec290037f766c22834cceed1bda185" name="kernel-core" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="193.28.1.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.20.1.el8_2]" date="1599134400">- [infiniband] IB/rdmavt: Fix RQ counting issues causing use of an invalid RWQE (Kamal Heib) [1872771 1850314]
- [block] blk-mq: Rerun dispatching in the case of budget contention (Ming Lei) [1869779 1824037]
- [block] blk-mq: Add blk_mq_delay_run_hw_queues() API call (Ming Lei) [1869779 1824037]
- [block] blk-mq: In blk_mq_dispatch_rq_list() "no budget" is a reason to kick (Ming Lei) [1869779 1824037]
- [block] blk-mq: Put driver tag in blk_mq_dispatch_rq_list() when no budget (Ming Lei) [1869779 1824037]
- [md] dm mpath: use double checked locking in fast path (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rename current_pgpath to pgpath in multipath_prepare_ioctl (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rework __map_bio() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: factor out multipath_queue_bio (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: push locking down to must_push_back_rq() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: take m-&gt;lock spinlock when testing QUEUE_IF_NO_PATH (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: changes from initial m-&gt;flags locking audit (Mike Snitzer) [1869386 1848651]
- [md] dm rq: don't call blk_mq_queue_stopped() in dm_stop_queue() (Mike Snitzer) [1869386 1848651]
- [md] dm: do not use waitqueue for request-based DM (Mike Snitzer) [1869386 1848651]
- [block] blk-mq: consider non-idle request as "inflight" in blk_mq_rq_inflight() (Mike Snitzer) [1869386 1848651]
- [kernel] sched/deadline: Initialize -&gt;dl_boosted (Phil Auld) [1867612 1854179]
- [kernel] sched/core: Fix PI boosting between RT and DEADLINE tasks (Phil Auld) [1867612 1854179]
- [net] net/smc: tolerate future SMCD versions (Philipp Rudo) [1866390 1854992]
- [net] openvswitch: fixes potential deadlock in dp cleanup code (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: reorder masks array based on usage (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: take into account de-fragmentation/gso_size in execute_check_pkt_len (Lorenzo Bianconi) [1860169 1851888]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.21.1.el8_2]" date="1599739200">- [scsi] scsi: ibmvfc: Fix NULL return compiler warning (Steve Best) [1866371 1810653]
- [scsi] scsi: ibmvfc: Avoid loss of all paths during SVC node reboot (Steve Best) [1866371 1810653]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.22.1.el8_2]" date="1600257600">- [crypto] pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1877530 1862072]
- [crypto] Revert "pefile: Tolerate other pefile signatures after first" (Bruno Meneguele)
- [infiniband] IB/hfi1: Fix another case where pq is left on waitlist (Kamal Heib) [1872766 1859209]
- [infiniband] IB/hfi1: Ensure pq is not left on waitlist (Kamal Heib) [1872766 1859209]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.23.1.el8_2]" date="1600344000">- [net] packet: fix overflow in tpacket_rcv (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}
- [net] packet: make tp_drops atomic (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.24.1.el8_2]" date="1600862400">- [kernel] timers: Remove must_forward_clk (Phil Auld) [1877417 1833096]
- [kernel] timers: Spare timer softirq until next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Expand clk forward logic beyond nohz (Phil Auld) [1877417 1833096]
- [kernel] timers: Reuse next expiry cache after nohz exit (Phil Auld) [1877417 1833096]
- [kernel] timers: Always keep track of next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Optimize _next_timer_interrupt() level iteration (Phil Auld) [1877417 1833096]
- [kernel] timers: Add comments about calc_index() ceiling work (Phil Auld) [1877417 1833096]
- [kernel] timers: Move trigger_dyntick_cpu() to enqueue_timer() (Phil Auld) [1877417 1833096]
- [kernel] timers: Use only bucket expiry for base-&gt;next_expiry value (Phil Auld) [1877417 1833096]
- [kernel] timers: Preserve higher bits of expiration on index calculation (Phil Auld) [1877417 1833096]
- [kernel] timer: Fix wheel index calculation on last level (Phil Auld) [1877417 1833096]
- [kernel] timer: Prevent base-&gt;clk from moving backward (Phil Auld) [1877417 1833096]
- [kernel] timer: Read jiffies once when forwarding base clk (Phil Auld) [1877417 1833096]
- [infiniband] RDMA/umem: Fix ib_umem_find_best_pgsz() (Kamal Heib) [1872424 1856158]
- [net] net: accept an empty mask in /sys/class/net/*/queues/rx-*/rps_cpus (Nitesh Narayan Lal) [1870181 1868433]
- [net] net: Restrict receive packets queuing to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [pci] PCI: Restrict probe functions to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [lib] lib: Restrict cpumask_local_spread to houskeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [s390] s390/pci: Fix unexpected write combine on resource (Philipp Rudo) [1869276 1827311]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.25.1.el8_2]" date="1601553600">- [net] netfilter: conntrack: proc: rename stat column (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: add clash resolution stat counter (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: remove ignore stats (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not increment two error counters at same time (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not auto-delete clash entries on reply (Florian Westphal) [1882095 1875681]
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1881085 1875316] {CVE-2020-14385}
- [kernel] time/tick-broadcast: Fix tick_broadcast_offline() lockdep complaint (Alexey Klimov) [1880081 1877380]
- [net] atomics/treewide: Rename __atomic_add_unless() =&gt; atomic_fetch_add_unless() (Yauheni Kaliuta) [1880081 1813370]
- [kernel] timers: Lower base clock forwarding threshold (Phil Auld) [1877417 1833096]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.26.1.el8_2]" date="1602158400">- [firmware] efi: don't reserve MOK config table memory region (Kairui Song) [1879988 1878584]
- [security] integrity: Load certs from the EFI MOK config table (Lenny Szubowicz) [1877528 1868306]
- [security] integrity: Move import of MokListRT certs to a separate routine (Lenny Szubowicz) [1877528 1868306]
- [firmware] efi: Support for MOK variable config table (Lenny Szubowicz) [1877528 1868306]
- [security] efi: Only print errors about failing to get certs if EFI vars are found (Lenny Szubowicz) [1877528 1804969]
- [fs] ceph: fix inode number handling on arches with 32-bit ino_t (Jeff Layton) [1875787 1866018]
- [fs] ceph: handle zero-length feature mask in session messages (Jeff Layton) [1875787 1866018]
- [fs] ceph: fix endianness bug when handling MDS session feature bits (Jeff Layton) [1875787 1866018]
- [netdrv] net/mlx5e: Fix missing cleanup of ethtool steering during rep rx cleanup (Alaa Hleihel) [1857777 1856660]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.27.1.el8_2]" date="1602763200">- [powerpc] powerpc/pseries: Do not initiate shutdown when system is running on UPS (Diego Domingos) [1882243 1870477]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859471 1859472] {CVE-2020-14331}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.28.1.el8_2]" date="1602849600">- [net] Bluetooth: L2CAP: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888256 1888258] {CVE-2020-12351}
- [net] Bluetooth: A2MP: Fix not initializing all members (Gopal Tiwari) [1888906 1888807] {CVE-2020-12352}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-193.28.1.el8.centos" date="1603195200">- Apply debranding changes</changelog>
</package>
<package pkgid="05aa1374b15beeefc3c407ed0c5150dba237eb18257b1169cd9469db95bce363" name="kernel-core" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="305.10.2.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.2.1.el8_4]" date="1620648000">- net/mlx5e: Allow to match on MPLS parameters only for MPLS over UDP (Alaa Hleihel) [1952061 1936742]
- net/mlx5e: Reject tc rules which redirect from a VF to itself (Alaa Hleihel) [1952065 1932839]
- net/mlx5: CT: Add support for matching on ct_state inv and rel flags (Alaa Hleihel) [1952062 1942681]
- KVM: VMX: Don't use vcpu-&gt;run-&gt;internal.ndata as an array index (Jon Maloy) [1954221 1954219]
- tools/power turbostat: Revert "[tools] tools/power turbostat: Enable accumulate RAPL display" (Prarit Bhargava) [1952987 1944699]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.3.1.el8_4]" date="1621252800">- Revert "uio: use request_threaded_irq instead" (Vitaly Kuznetsov) [1952952 1946644]
- drm/ast: Set format registers in primary plane's update (Lyude Paul) [1952900 1923857]
- net/sched: act_ct: clear post_ct if doing ct_clear (Marcelo Ricardo Leitner) [1956458 1941889]
- md/raid1: properly indicate failure when ending a failed write request (Nigel Croxon) [1955188 1954588]
- nitro_enclaves: Fix stale file descriptors on failed usercopy (Vitaly Kuznetsov) [1956379 1953717]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.4.1.el8_4]" date="1621944000">- vmxnet3: Set the default of vxlan overlay offload to disabled (Cathy Avery) [1960702 1941714]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.5.1.el8_4]" date="1622548800">- gfs2: report "already frozen/thawed" errors (Bob Peterson) [1961849 1932236]
- gfs2: move freeze glock outside the make_fs_rw and _ro functions (Bob Peterson) [1961849 1932236]
- gfs2: Add common helper for holding and releasing the freeze glock (Bob Peterson) [1961849 1932236]
- gfs2: in signal_our_withdraw wait for unfreeze of _this_ fs only (Bob Peterson) [1961849 1932236]
- gfs2: Don't freeze the file system during unmount (Bob Peterson) [1961849 1932236]
- gfs2: Fix regression in freeze_go_sync (Bob Peterson) [1961849 1932236]
- gfs2: The freeze glock should never be frozen (Bob Peterson) [1961849 1932236]
- gfs2: When freezing gfs2, use GL_EXACT and not GL_NOCACHE (Bob Peterson) [1961849 1932236]
- gfs2: read-only mounts should grab the sd_freeze_gl glock (Bob Peterson) [1961849 1932236]
- gfs2: freeze should work on read-only mounts (Bob Peterson) [1961849 1932236]
- gfs2: Abort gfs2_freeze if io error is seen (Bob Peterson) [1961849 1932236]
- CI: Disable result checking for realtime check (Veronika Kabatova)
- CI: Explicitly disable result checking for private CI (Veronika Kabatova)
- CI: Rename variable (Veronika Kabatova)
- CI: Update builder containers (Veronika Kabatova)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.6.1.el8_4]" date="1623067200">- openvswitch: fix stack OOB read while fragmenting IPv4 packets (Davide Caratti) [1963940 1924608]
- net/sched: sch_frag: fix stack OOB read while fragmenting IPv4 packets (Davide Caratti) [1963940 1924608]
- net/sched: act_ct: fix wild memory access when clearing fragments (Davide Caratti) [1963940 1924608]
- net: Treat __napi_schedule_irqoff() as __napi_schedule() on PREEMPT_RT (Ivan Vecera)
- redhat/configs: Add CONFIG_SYSTEM_REVOCATION_KEYS and CONFIG_SYSTEM_REVOCATION_LIST (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: add 'x509_revocation_list' to gitignore (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- integrity: Load mokx variables into the blacklist keyring (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Add ability to preload revocation certs (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Move load_system_certificate_list to a common function (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Add EFI_CERT_X509_GUID support for dbx entries (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- net/sched: cls_api: increase max_reclassify_loop (Davide Caratti) [1965148 1955136]
- dm writecache: fix performance degradation in ssd mode (Mike Snitzer) [1962241 1961859]
- scsi: fnic: Use scsi_host_busy_iter() to traverse commands (Ewan D. Milne) [1961705 1949250]
- scsi: fnic: Kill 'exclude_id' argument to fnic_cleanup_io() (Ewan D. Milne) [1961705 1949250]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.7.1.el8_4]" date="1623672000">- net: zero-initialize tc skb extension on allocation (Ivan Vecera) [1965457 1946986]
- net/sched: cls_flower: fix only mask bit check in the validate_ct_state (Ivan Vecera) [1965457 1946986]
- net: cls_api: Fix uninitialised struct field bo-&gt;unlocked_driver_cb (Ivan Vecera) [1965457 1946986]
- net/sched: act_api: fix miss set post_ct for ovs after do conntrack in act_ct (Ivan Vecera) [1965457 1946986]
- net/sched: cls_flower: validate ct_state for invalid and reply flags (Ivan Vecera) [1965457 1946986]
- flow_dissector: fix TTL and TOS dissection on IPv4 fragments (Paolo Abeni) [1963952 1950288]
- Revert "sctp: Fix SHUTDOWN CTSN Ack in the peer restart case" (Xin Long) [1965632 1953839]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [1965632 1953839]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [1965632 1953839]
- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962544 1962546] {CVE-2021-33034}
- x86/kvm: Unify kvm_pv_guest_cpu_reboot() with kvm_guest_cpu_offline() (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Disable all PV features on crash (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Disable kvmclock on all CPUs on shutdown (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Teardown PV features on boot CPU as well (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Fix pr_info() for async PF setup/teardown (Lenny Szubowicz) [1964930 1934273]
- net/sched: act_ct: Fix ct template allocation for zone 0 (Marcelo Ricardo Leitner) [1965150 1881824]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.8.1.el8_4]" date="1624363200">- iavf: amend removal of MODULE_VERSION (Stefan Assmann) [1969925 1955738]
- ixgbe: Amend commit acf03026ec5a to include a version string in module info. (Ken Cox) [1969922 1955759]
- i40e: amend removal of MODULE_VERSION (Stefan Assmann) [1969923 1955736]
- redhat/configs: Add CONFIG_PINCTRL_EMMITSBURG (David Arcari) [1963984 1959506]
- redhat/configs: Remove CONFIG_EMMITSBURG (David Arcari) [1963984 1959506]
- netlink: add tracepoint at NL_SET_ERR_MSG (Marcelo Ricardo Leitner) [1972938 1956983]
- Revert "[netdrv] net/intel: remove driver versions from Intel drivers" (Jonathan Toppins) [1969917 1955745]
- Amends commit ea6244cc248b to include a version string in module info. (Ken Cox) [1969915 1955726]
- Revert "[netdrv] net/broadcom: Clean broadcom code from driver versions" (Jonathan Toppins) [1969914 1955721]
- ena: revert removal of MODULE_VERSION from ena (Petr Oros) [1969913 1955712]
- fm10k: amend removal of MODULE_VERSION (Vladis Dronov) [1969910 1955730]
- net/sched: act_ct: Offload connections with commit action (Marcelo Ricardo Leitner) [1968679 1965817]
- netfilter: flowtable: Remove redundant hw refresh bit (Marcelo Ricardo Leitner) [1968679 1965817]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.9.1.el8_4]" date="1624881600">- ixgbevf: Amend commit acf03026ec5a to include a version in module info. (Ken Cox) [1969911 1955764]
- CI: Merge configuration (Veronika Kabatova)
- igc: amend removal of MODULE_VERSION (Corinna Vinschen) [1969921 1955755]
- igb: amend removal of MODULE_VERSION (Corinna Vinschen) [1969919 1955748]
- locking/qrwlock: Fix ordering in queued_write_lock_slowpath() (Waiman Long) [1964419 1950110]
- scsi: qedf: Do not put host in qedf_vport_create() unconditionally (Nilesh Javali) [1974968 1899384]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.10.1.el8_4]" date="1625659200">- igbvf: amend removal of MODULE_VERSION (Corinna Vinschen) [1969920 1955752]
- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971464 1971488] {CVE-2021-32399}
- scsi: ibmvfc: Free channel_setup_buf during device tear down (Steve Best) [1964697 1938102]
- i40e: Fix parameters in aq_get_phy_register() (Stefan Assmann) [1967099 1907852]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.10.2.el8_4]" date="1626091200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975181 1975182] {CVE-2021-33909}</changelog>
</package>
<package pkgid="58a717207c65e63f2e57b86001c41b7a09110910ddcdc973519ab160acebec09" name="kernel-core" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="348.20.1.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.12.1.el8_5]" date="1641988800">- tcp: don't free a FIN sk_buff in tcp_remove_empty_skb() (Guillaume Nault) [2021574 2016210]
- kernel.spec: Add support to use vmlinux.h (Jiri Olsa) [2031053 1989087]
- spec: Add vmlinux.h to kernel-devel package (Jiri Olsa) [2031053 1989087]
- x86/mce: Avoid infinite loop for copy from user recovery (Prarit Bhargava) [2008789 1999550]
- x86/mce: Rename kill_it to kill_current_task (Prarit Bhargava) [2008789 1999550]
- x86/mce: Recover from poison found while copying from user space (Prarit Bhargava) [2008789 1999550]
- x86/mce: Delay clearing IA32_MCG_STATUS to the end of do_machine_check() (Prarit Bhargava) [2008789 1999550]
- x86/mce: Send #MC singal from task work (Prarit Bhargava) [2008789 1999550]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-348.13.1.el8_5]" date="1642507200">- vfs: Out-of-bounds write of heap buffer in fs_context.c (Frantisek Hrbata) [2040585 2040586] {CVE-2022-0185}
- xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Bruno Meneguele) [2034864 2034865] {CVE-2021-4155}
- af_unix: fix garbage collect vs MSG_PEEK (Patrick Talbert) [2031974 2031975] {CVE-2021-0920}
- cgroup: verify that source is a string (Waiman Long) [2034608 2034609] {CVE-2021-4154}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-348.14.1.el8_5]" date="1643198400">- tcp: fix page frag corruption on page fault (Paolo Abeni) [2041529 1996074]
- net: fix sk_page_frag() recursion from memory reclaim (Paolo Abeni) [2041529 1996074]
- KVM: s390: index kvm-&gt;arch.idle_mask by vcpu_idx (Thomas Huth) [2040769 2026230]
- redhat: set LC_ALL=C before sorting config content (Frantisek Hrbata)</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.15.1.el8_5]" date="1643716800">- net/mlx5: DR, Use FW API when updating FW-owned flow table (Michal Schmidt) [2042663 2042651]
- KVM: x86: Wait for IPIs to be delivered when handling Hyper-V TLB flush hypercall (Vitaly Kuznetsov) [2043237 1868572]
- drm/mgag200: Select clock in PLL update functions (Bruno Meneguele) [2034949 1953926]
- drm/i915: Fix HAS_LSPCON macro for platforms between GEN9 and GEN10 (Bruno Meneguele) [2027335 2005586]
- crypto: qat - power up 4xxx device (Vladis Dronov) [2016437 1960307]
- RDMA/core: Fix a double free in add_port error flow (Kamal Heib) [2038724 2008555]
- powerpc/iommu: Report the correct most efficient DMA mask for PCI devices (Steve Best) [2018928 2007425]
- powerpc/dma: Fix dma_map_ops::get_required_mask (Steve Best) [2018928 2007425]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.16.1.el8_5]" date="1644321600">- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047601 2047602] {CVE-2022-22942}
- net: openvswitch: Fix ct_state nat flags for conns arriving from tc (Marcelo Ricardo Leitner) [2043548 2040334]
- net: openvswitch: Fix matching zone id for invalid conns arriving from tc (Marcelo Ricardo Leitner) [2043550 2040452]
- net/sched: flow_dissector: Fix matching on zone id for invalid conns (Marcelo Ricardo Leitner) [2043550 2040452]
- net/sched: Extend qdisc control block with tc control block (Marcelo Ricardo Leitner) [2043550 2040452]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.17.1.el8_5]" date="1644926400">- vfs: check dentry is still valid in get_link() (Ian Kent) [2052558 2014846]
- xfs: don't expose internal symlink metadata buffers to the vfs (Brian Foster) [2052558 2014846]
- CI: Use appropriate zstream builder (Veronika Kabatova)
- CI: Enable baseline realtime checks (Veronika Kabatova)
- CI: Rename pipelines to include release names (Veronika Kabatova)
- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052166 2052167] {CVE-2022-0492}
- ice: Remove boolean vlan_promisc flag from function (Jonathan Toppins) [2051951 2030400]
- ceph: put the requests/sessions when it fails to alloc memory (Jeffrey Layton) [2053725 2017796]
- ceph: fix off by one bugs in unsafe_request_wait() (Jeffrey Layton) [2053725 2017796]
- ceph: flush the mdlog before waiting on unsafe reqs (Jeffrey Layton) [2053725 2017796]
- ceph: flush mdlog before umounting (Jeffrey Layton) [2053725 2017796]
- ceph: make iterate_sessions a global symbol (Jeffrey Layton) [2053725 2017796]
- ceph: make ceph_create_session_msg a global symbol (Jeffrey Layton) [2053725 2017796]
- xfs: check sb_meta_uuid for dabuf buffer recovery (Bill O'Donnell) [2049292 2020764]
- drm/i915: Flush TLBs before releasing backing store (Patrick Talbert) [2044328 2044329] {CVE-2022-0330}
- hugetlb: fix hugetlb cgroup refcounting during vma split (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: fix imbalanced css_get and css_put pair for shared mappings (Waiman Long) [2039015 2032811]
- mm/hugetlb: change hugetlb_reserve_pages() to type bool (Waiman Long) [2039015 2032811]
- hugetlb: fix an error code in hugetlb_reserve_pages() (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: fix offline of hugetlb cgroup with reservations (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: fix reservation accounting (Waiman Long) [2039015 2032811]
- mm/hugetlb: narrow the hugetlb_lock protection area during preparing huge page (Waiman Long) [2039015 2032811]
- mm/hugetlb: a page from buddy is not on any list (Waiman Long) [2039015 2032811]
- mm/hugetlb: not necessary to coalesce regions recursively (Waiman Long) [2039015 2032811]
- selftests/vm/write_to_hugetlbfs.c: fix unused variable warning (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add hugetlb_cgroup reservation tests (Waiman Long) [2039015 2032811]
- hugetlb: support file_region coalescing again (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: support noreserve mappings (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add accounting for shared mappings (Waiman Long) [2039015 2032811]
- hugetlb: disable region_add file_region coalescing (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add reservation accounting for private mappings (Waiman Long) [2039015 2032811]
- mm/hugetlb_cgroup: fix hugetlb_cgroup migration (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add interface for charge/uncharge hugetlb reservations (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add hugetlb_cgroup reservation counter (Waiman Long) [2039015 2032811]
- hugetlb: remove duplicated code (Waiman Long) [2039015 2032811]
- hugetlb: region_chg provides only cache entry (Waiman Long) [2039015 2032811]
- hugetlbfs: always use address space in inode for resv_map pointer (Waiman Long) [2039015 2032811]
- hugetlbfs: fix potential over/underflow setting node specific nr_hugepages (Waiman Long) [2039015 2032811]
- hugetlb: allow to free gigantic pages regardless of the configuration (Waiman Long) [2039015 2032811]
- powerpc/pseries: Fix update of LPAR security flavor after LPM (Steve Best) [2027448 1997294]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.18.1.el8_5]" date="1645531200">- selftests: kvm: Check whether SIDA memop fails for normal guests (Thomas Huth) [2050806 2050807] {CVE-2022-0516}
- KVM: s390: Return error on SIDA memop on normal guest (Thomas Huth) [2050806 2050807] {CVE-2022-0516}
- iommu/amd: Remove iommu_init_ga() (Jerry Snitselaar) [2030854 1998265]
- iommu/amd: Relocate GAMSup check to early_enable_iommus (Jerry Snitselaar) [2030854 1998265]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.19.1.el8_5]" date="1646049600">- tipc: improve size validations for received domain records (Xin Long) [2048970 2048971] {CVE-2022-0435}
- smb3: do not error on fsync when readonly (Ronnie Sahlberg) [2055824 2037811]
- security: implement sctp_assoc_established hook in selinux (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- security: add sctp_assoc_established hook (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- security: call security_sctp_assoc_request in sctp_sf_do_5_1D_ce (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- security: pass asoc to sctp_assoc_request and sctp_sk_clone (Bruno Meneguele) [2054112 2054117 2015525 2048251]
- net: sctp: Fix some typos (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- RDMA/bnxt_re: Fix stats counters (Selvin Xavier) [2049684 2001893]
- net: check skb sec_path when re-initializing slow_gro in gro_list_prepare (Xin Long) [2047427 2030476]
- cpufreq: intel_pstate: Add Icelake servers support in no-HWP mode (David Arcari) [2036888 2003695]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.20.1.el8_5]" date="1646740800">- lib/iov_iter: initialize "flags" in new pipe_buffer (Jan Stancek) [2060874 2060875] {CVE-2022-0847}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-348.20.1.el8.centos" date="1646913600">- Apply debranding changes</changelog>
</package>
<package pkgid="2c7570c27d6af2e408f33351d645981394ebe6013e7cff7087f89ff501852060" name="kernel-cross-headers" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="3211cb56cfbf93e9e25426869cfed258ecc4558bd6914cb43dad11a9ab308d93" name="kernel-cross-headers" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="193.28.1.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.20.1.el8_2]" date="1599134400">- [infiniband] IB/rdmavt: Fix RQ counting issues causing use of an invalid RWQE (Kamal Heib) [1872771 1850314]
- [block] blk-mq: Rerun dispatching in the case of budget contention (Ming Lei) [1869779 1824037]
- [block] blk-mq: Add blk_mq_delay_run_hw_queues() API call (Ming Lei) [1869779 1824037]
- [block] blk-mq: In blk_mq_dispatch_rq_list() "no budget" is a reason to kick (Ming Lei) [1869779 1824037]
- [block] blk-mq: Put driver tag in blk_mq_dispatch_rq_list() when no budget (Ming Lei) [1869779 1824037]
- [md] dm mpath: use double checked locking in fast path (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rename current_pgpath to pgpath in multipath_prepare_ioctl (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rework __map_bio() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: factor out multipath_queue_bio (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: push locking down to must_push_back_rq() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: take m-&gt;lock spinlock when testing QUEUE_IF_NO_PATH (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: changes from initial m-&gt;flags locking audit (Mike Snitzer) [1869386 1848651]
- [md] dm rq: don't call blk_mq_queue_stopped() in dm_stop_queue() (Mike Snitzer) [1869386 1848651]
- [md] dm: do not use waitqueue for request-based DM (Mike Snitzer) [1869386 1848651]
- [block] blk-mq: consider non-idle request as "inflight" in blk_mq_rq_inflight() (Mike Snitzer) [1869386 1848651]
- [kernel] sched/deadline: Initialize -&gt;dl_boosted (Phil Auld) [1867612 1854179]
- [kernel] sched/core: Fix PI boosting between RT and DEADLINE tasks (Phil Auld) [1867612 1854179]
- [net] net/smc: tolerate future SMCD versions (Philipp Rudo) [1866390 1854992]
- [net] openvswitch: fixes potential deadlock in dp cleanup code (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: reorder masks array based on usage (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: take into account de-fragmentation/gso_size in execute_check_pkt_len (Lorenzo Bianconi) [1860169 1851888]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.21.1.el8_2]" date="1599739200">- [scsi] scsi: ibmvfc: Fix NULL return compiler warning (Steve Best) [1866371 1810653]
- [scsi] scsi: ibmvfc: Avoid loss of all paths during SVC node reboot (Steve Best) [1866371 1810653]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.22.1.el8_2]" date="1600257600">- [crypto] pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1877530 1862072]
- [crypto] Revert "pefile: Tolerate other pefile signatures after first" (Bruno Meneguele)
- [infiniband] IB/hfi1: Fix another case where pq is left on waitlist (Kamal Heib) [1872766 1859209]
- [infiniband] IB/hfi1: Ensure pq is not left on waitlist (Kamal Heib) [1872766 1859209]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.23.1.el8_2]" date="1600344000">- [net] packet: fix overflow in tpacket_rcv (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}
- [net] packet: make tp_drops atomic (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.24.1.el8_2]" date="1600862400">- [kernel] timers: Remove must_forward_clk (Phil Auld) [1877417 1833096]
- [kernel] timers: Spare timer softirq until next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Expand clk forward logic beyond nohz (Phil Auld) [1877417 1833096]
- [kernel] timers: Reuse next expiry cache after nohz exit (Phil Auld) [1877417 1833096]
- [kernel] timers: Always keep track of next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Optimize _next_timer_interrupt() level iteration (Phil Auld) [1877417 1833096]
- [kernel] timers: Add comments about calc_index() ceiling work (Phil Auld) [1877417 1833096]
- [kernel] timers: Move trigger_dyntick_cpu() to enqueue_timer() (Phil Auld) [1877417 1833096]
- [kernel] timers: Use only bucket expiry for base-&gt;next_expiry value (Phil Auld) [1877417 1833096]
- [kernel] timers: Preserve higher bits of expiration on index calculation (Phil Auld) [1877417 1833096]
- [kernel] timer: Fix wheel index calculation on last level (Phil Auld) [1877417 1833096]
- [kernel] timer: Prevent base-&gt;clk from moving backward (Phil Auld) [1877417 1833096]
- [kernel] timer: Read jiffies once when forwarding base clk (Phil Auld) [1877417 1833096]
- [infiniband] RDMA/umem: Fix ib_umem_find_best_pgsz() (Kamal Heib) [1872424 1856158]
- [net] net: accept an empty mask in /sys/class/net/*/queues/rx-*/rps_cpus (Nitesh Narayan Lal) [1870181 1868433]
- [net] net: Restrict receive packets queuing to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [pci] PCI: Restrict probe functions to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [lib] lib: Restrict cpumask_local_spread to houskeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [s390] s390/pci: Fix unexpected write combine on resource (Philipp Rudo) [1869276 1827311]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.25.1.el8_2]" date="1601553600">- [net] netfilter: conntrack: proc: rename stat column (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: add clash resolution stat counter (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: remove ignore stats (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not increment two error counters at same time (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not auto-delete clash entries on reply (Florian Westphal) [1882095 1875681]
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1881085 1875316] {CVE-2020-14385}
- [kernel] time/tick-broadcast: Fix tick_broadcast_offline() lockdep complaint (Alexey Klimov) [1880081 1877380]
- [net] atomics/treewide: Rename __atomic_add_unless() =&gt; atomic_fetch_add_unless() (Yauheni Kaliuta) [1880081 1813370]
- [kernel] timers: Lower base clock forwarding threshold (Phil Auld) [1877417 1833096]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.26.1.el8_2]" date="1602158400">- [firmware] efi: don't reserve MOK config table memory region (Kairui Song) [1879988 1878584]
- [security] integrity: Load certs from the EFI MOK config table (Lenny Szubowicz) [1877528 1868306]
- [security] integrity: Move import of MokListRT certs to a separate routine (Lenny Szubowicz) [1877528 1868306]
- [firmware] efi: Support for MOK variable config table (Lenny Szubowicz) [1877528 1868306]
- [security] efi: Only print errors about failing to get certs if EFI vars are found (Lenny Szubowicz) [1877528 1804969]
- [fs] ceph: fix inode number handling on arches with 32-bit ino_t (Jeff Layton) [1875787 1866018]
- [fs] ceph: handle zero-length feature mask in session messages (Jeff Layton) [1875787 1866018]
- [fs] ceph: fix endianness bug when handling MDS session feature bits (Jeff Layton) [1875787 1866018]
- [netdrv] net/mlx5e: Fix missing cleanup of ethtool steering during rep rx cleanup (Alaa Hleihel) [1857777 1856660]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.27.1.el8_2]" date="1602763200">- [powerpc] powerpc/pseries: Do not initiate shutdown when system is running on UPS (Diego Domingos) [1882243 1870477]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859471 1859472] {CVE-2020-14331}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.28.1.el8_2]" date="1602849600">- [net] Bluetooth: L2CAP: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888256 1888258] {CVE-2020-12351}
- [net] Bluetooth: A2MP: Fix not initializing all members (Gopal Tiwari) [1888906 1888807] {CVE-2020-12352}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-193.28.1.el8.centos" date="1603195200">- Apply debranding changes</changelog>
</package>
<package pkgid="e3a9838d1bbf7a74b7c6fd3d8ec6f64d9088fa847d7a0c1480e8a11f884521db" name="kernel-cross-headers" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="305.10.2.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.2.1.el8_4]" date="1620648000">- net/mlx5e: Allow to match on MPLS parameters only for MPLS over UDP (Alaa Hleihel) [1952061 1936742]
- net/mlx5e: Reject tc rules which redirect from a VF to itself (Alaa Hleihel) [1952065 1932839]
- net/mlx5: CT: Add support for matching on ct_state inv and rel flags (Alaa Hleihel) [1952062 1942681]
- KVM: VMX: Don't use vcpu-&gt;run-&gt;internal.ndata as an array index (Jon Maloy) [1954221 1954219]
- tools/power turbostat: Revert "[tools] tools/power turbostat: Enable accumulate RAPL display" (Prarit Bhargava) [1952987 1944699]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.3.1.el8_4]" date="1621252800">- Revert "uio: use request_threaded_irq instead" (Vitaly Kuznetsov) [1952952 1946644]
- drm/ast: Set format registers in primary plane's update (Lyude Paul) [1952900 1923857]
- net/sched: act_ct: clear post_ct if doing ct_clear (Marcelo Ricardo Leitner) [1956458 1941889]
- md/raid1: properly indicate failure when ending a failed write request (Nigel Croxon) [1955188 1954588]
- nitro_enclaves: Fix stale file descriptors on failed usercopy (Vitaly Kuznetsov) [1956379 1953717]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.4.1.el8_4]" date="1621944000">- vmxnet3: Set the default of vxlan overlay offload to disabled (Cathy Avery) [1960702 1941714]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.5.1.el8_4]" date="1622548800">- gfs2: report "already frozen/thawed" errors (Bob Peterson) [1961849 1932236]
- gfs2: move freeze glock outside the make_fs_rw and _ro functions (Bob Peterson) [1961849 1932236]
- gfs2: Add common helper for holding and releasing the freeze glock (Bob Peterson) [1961849 1932236]
- gfs2: in signal_our_withdraw wait for unfreeze of _this_ fs only (Bob Peterson) [1961849 1932236]
- gfs2: Don't freeze the file system during unmount (Bob Peterson) [1961849 1932236]
- gfs2: Fix regression in freeze_go_sync (Bob Peterson) [1961849 1932236]
- gfs2: The freeze glock should never be frozen (Bob Peterson) [1961849 1932236]
- gfs2: When freezing gfs2, use GL_EXACT and not GL_NOCACHE (Bob Peterson) [1961849 1932236]
- gfs2: read-only mounts should grab the sd_freeze_gl glock (Bob Peterson) [1961849 1932236]
- gfs2: freeze should work on read-only mounts (Bob Peterson) [1961849 1932236]
- gfs2: Abort gfs2_freeze if io error is seen (Bob Peterson) [1961849 1932236]
- CI: Disable result checking for realtime check (Veronika Kabatova)
- CI: Explicitly disable result checking for private CI (Veronika Kabatova)
- CI: Rename variable (Veronika Kabatova)
- CI: Update builder containers (Veronika Kabatova)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.6.1.el8_4]" date="1623067200">- openvswitch: fix stack OOB read while fragmenting IPv4 packets (Davide Caratti) [1963940 1924608]
- net/sched: sch_frag: fix stack OOB read while fragmenting IPv4 packets (Davide Caratti) [1963940 1924608]
- net/sched: act_ct: fix wild memory access when clearing fragments (Davide Caratti) [1963940 1924608]
- net: Treat __napi_schedule_irqoff() as __napi_schedule() on PREEMPT_RT (Ivan Vecera)
- redhat/configs: Add CONFIG_SYSTEM_REVOCATION_KEYS and CONFIG_SYSTEM_REVOCATION_LIST (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: add 'x509_revocation_list' to gitignore (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- integrity: Load mokx variables into the blacklist keyring (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Add ability to preload revocation certs (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Move load_system_certificate_list to a common function (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Add EFI_CERT_X509_GUID support for dbx entries (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- net/sched: cls_api: increase max_reclassify_loop (Davide Caratti) [1965148 1955136]
- dm writecache: fix performance degradation in ssd mode (Mike Snitzer) [1962241 1961859]
- scsi: fnic: Use scsi_host_busy_iter() to traverse commands (Ewan D. Milne) [1961705 1949250]
- scsi: fnic: Kill 'exclude_id' argument to fnic_cleanup_io() (Ewan D. Milne) [1961705 1949250]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.7.1.el8_4]" date="1623672000">- net: zero-initialize tc skb extension on allocation (Ivan Vecera) [1965457 1946986]
- net/sched: cls_flower: fix only mask bit check in the validate_ct_state (Ivan Vecera) [1965457 1946986]
- net: cls_api: Fix uninitialised struct field bo-&gt;unlocked_driver_cb (Ivan Vecera) [1965457 1946986]
- net/sched: act_api: fix miss set post_ct for ovs after do conntrack in act_ct (Ivan Vecera) [1965457 1946986]
- net/sched: cls_flower: validate ct_state for invalid and reply flags (Ivan Vecera) [1965457 1946986]
- flow_dissector: fix TTL and TOS dissection on IPv4 fragments (Paolo Abeni) [1963952 1950288]
- Revert "sctp: Fix SHUTDOWN CTSN Ack in the peer restart case" (Xin Long) [1965632 1953839]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [1965632 1953839]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [1965632 1953839]
- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962544 1962546] {CVE-2021-33034}
- x86/kvm: Unify kvm_pv_guest_cpu_reboot() with kvm_guest_cpu_offline() (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Disable all PV features on crash (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Disable kvmclock on all CPUs on shutdown (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Teardown PV features on boot CPU as well (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Fix pr_info() for async PF setup/teardown (Lenny Szubowicz) [1964930 1934273]
- net/sched: act_ct: Fix ct template allocation for zone 0 (Marcelo Ricardo Leitner) [1965150 1881824]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.8.1.el8_4]" date="1624363200">- iavf: amend removal of MODULE_VERSION (Stefan Assmann) [1969925 1955738]
- ixgbe: Amend commit acf03026ec5a to include a version string in module info. (Ken Cox) [1969922 1955759]
- i40e: amend removal of MODULE_VERSION (Stefan Assmann) [1969923 1955736]
- redhat/configs: Add CONFIG_PINCTRL_EMMITSBURG (David Arcari) [1963984 1959506]
- redhat/configs: Remove CONFIG_EMMITSBURG (David Arcari) [1963984 1959506]
- netlink: add tracepoint at NL_SET_ERR_MSG (Marcelo Ricardo Leitner) [1972938 1956983]
- Revert "[netdrv] net/intel: remove driver versions from Intel drivers" (Jonathan Toppins) [1969917 1955745]
- Amends commit ea6244cc248b to include a version string in module info. (Ken Cox) [1969915 1955726]
- Revert "[netdrv] net/broadcom: Clean broadcom code from driver versions" (Jonathan Toppins) [1969914 1955721]
- ena: revert removal of MODULE_VERSION from ena (Petr Oros) [1969913 1955712]
- fm10k: amend removal of MODULE_VERSION (Vladis Dronov) [1969910 1955730]
- net/sched: act_ct: Offload connections with commit action (Marcelo Ricardo Leitner) [1968679 1965817]
- netfilter: flowtable: Remove redundant hw refresh bit (Marcelo Ricardo Leitner) [1968679 1965817]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.9.1.el8_4]" date="1624881600">- ixgbevf: Amend commit acf03026ec5a to include a version in module info. (Ken Cox) [1969911 1955764]
- CI: Merge configuration (Veronika Kabatova)
- igc: amend removal of MODULE_VERSION (Corinna Vinschen) [1969921 1955755]
- igb: amend removal of MODULE_VERSION (Corinna Vinschen) [1969919 1955748]
- locking/qrwlock: Fix ordering in queued_write_lock_slowpath() (Waiman Long) [1964419 1950110]
- scsi: qedf: Do not put host in qedf_vport_create() unconditionally (Nilesh Javali) [1974968 1899384]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.10.1.el8_4]" date="1625659200">- igbvf: amend removal of MODULE_VERSION (Corinna Vinschen) [1969920 1955752]
- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971464 1971488] {CVE-2021-32399}
- scsi: ibmvfc: Free channel_setup_buf during device tear down (Steve Best) [1964697 1938102]
- i40e: Fix parameters in aq_get_phy_register() (Stefan Assmann) [1967099 1907852]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.10.2.el8_4]" date="1626091200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975181 1975182] {CVE-2021-33909}</changelog>
</package>
<package pkgid="b0fcaf7b2f6cf25dde88c0e2899c42e311addf17dd7e58a113bb1e7a635c1994" name="kernel-cross-headers" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="348.20.1.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.12.1.el8_5]" date="1641988800">- tcp: don't free a FIN sk_buff in tcp_remove_empty_skb() (Guillaume Nault) [2021574 2016210]
- kernel.spec: Add support to use vmlinux.h (Jiri Olsa) [2031053 1989087]
- spec: Add vmlinux.h to kernel-devel package (Jiri Olsa) [2031053 1989087]
- x86/mce: Avoid infinite loop for copy from user recovery (Prarit Bhargava) [2008789 1999550]
- x86/mce: Rename kill_it to kill_current_task (Prarit Bhargava) [2008789 1999550]
- x86/mce: Recover from poison found while copying from user space (Prarit Bhargava) [2008789 1999550]
- x86/mce: Delay clearing IA32_MCG_STATUS to the end of do_machine_check() (Prarit Bhargava) [2008789 1999550]
- x86/mce: Send #MC singal from task work (Prarit Bhargava) [2008789 1999550]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-348.13.1.el8_5]" date="1642507200">- vfs: Out-of-bounds write of heap buffer in fs_context.c (Frantisek Hrbata) [2040585 2040586] {CVE-2022-0185}
- xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Bruno Meneguele) [2034864 2034865] {CVE-2021-4155}
- af_unix: fix garbage collect vs MSG_PEEK (Patrick Talbert) [2031974 2031975] {CVE-2021-0920}
- cgroup: verify that source is a string (Waiman Long) [2034608 2034609] {CVE-2021-4154}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-348.14.1.el8_5]" date="1643198400">- tcp: fix page frag corruption on page fault (Paolo Abeni) [2041529 1996074]
- net: fix sk_page_frag() recursion from memory reclaim (Paolo Abeni) [2041529 1996074]
- KVM: s390: index kvm-&gt;arch.idle_mask by vcpu_idx (Thomas Huth) [2040769 2026230]
- redhat: set LC_ALL=C before sorting config content (Frantisek Hrbata)</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.15.1.el8_5]" date="1643716800">- net/mlx5: DR, Use FW API when updating FW-owned flow table (Michal Schmidt) [2042663 2042651]
- KVM: x86: Wait for IPIs to be delivered when handling Hyper-V TLB flush hypercall (Vitaly Kuznetsov) [2043237 1868572]
- drm/mgag200: Select clock in PLL update functions (Bruno Meneguele) [2034949 1953926]
- drm/i915: Fix HAS_LSPCON macro for platforms between GEN9 and GEN10 (Bruno Meneguele) [2027335 2005586]
- crypto: qat - power up 4xxx device (Vladis Dronov) [2016437 1960307]
- RDMA/core: Fix a double free in add_port error flow (Kamal Heib) [2038724 2008555]
- powerpc/iommu: Report the correct most efficient DMA mask for PCI devices (Steve Best) [2018928 2007425]
- powerpc/dma: Fix dma_map_ops::get_required_mask (Steve Best) [2018928 2007425]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.16.1.el8_5]" date="1644321600">- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047601 2047602] {CVE-2022-22942}
- net: openvswitch: Fix ct_state nat flags for conns arriving from tc (Marcelo Ricardo Leitner) [2043548 2040334]
- net: openvswitch: Fix matching zone id for invalid conns arriving from tc (Marcelo Ricardo Leitner) [2043550 2040452]
- net/sched: flow_dissector: Fix matching on zone id for invalid conns (Marcelo Ricardo Leitner) [2043550 2040452]
- net/sched: Extend qdisc control block with tc control block (Marcelo Ricardo Leitner) [2043550 2040452]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.17.1.el8_5]" date="1644926400">- vfs: check dentry is still valid in get_link() (Ian Kent) [2052558 2014846]
- xfs: don't expose internal symlink metadata buffers to the vfs (Brian Foster) [2052558 2014846]
- CI: Use appropriate zstream builder (Veronika Kabatova)
- CI: Enable baseline realtime checks (Veronika Kabatova)
- CI: Rename pipelines to include release names (Veronika Kabatova)
- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052166 2052167] {CVE-2022-0492}
- ice: Remove boolean vlan_promisc flag from function (Jonathan Toppins) [2051951 2030400]
- ceph: put the requests/sessions when it fails to alloc memory (Jeffrey Layton) [2053725 2017796]
- ceph: fix off by one bugs in unsafe_request_wait() (Jeffrey Layton) [2053725 2017796]
- ceph: flush the mdlog before waiting on unsafe reqs (Jeffrey Layton) [2053725 2017796]
- ceph: flush mdlog before umounting (Jeffrey Layton) [2053725 2017796]
- ceph: make iterate_sessions a global symbol (Jeffrey Layton) [2053725 2017796]
- ceph: make ceph_create_session_msg a global symbol (Jeffrey Layton) [2053725 2017796]
- xfs: check sb_meta_uuid for dabuf buffer recovery (Bill O'Donnell) [2049292 2020764]
- drm/i915: Flush TLBs before releasing backing store (Patrick Talbert) [2044328 2044329] {CVE-2022-0330}
- hugetlb: fix hugetlb cgroup refcounting during vma split (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: fix imbalanced css_get and css_put pair for shared mappings (Waiman Long) [2039015 2032811]
- mm/hugetlb: change hugetlb_reserve_pages() to type bool (Waiman Long) [2039015 2032811]
- hugetlb: fix an error code in hugetlb_reserve_pages() (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: fix offline of hugetlb cgroup with reservations (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: fix reservation accounting (Waiman Long) [2039015 2032811]
- mm/hugetlb: narrow the hugetlb_lock protection area during preparing huge page (Waiman Long) [2039015 2032811]
- mm/hugetlb: a page from buddy is not on any list (Waiman Long) [2039015 2032811]
- mm/hugetlb: not necessary to coalesce regions recursively (Waiman Long) [2039015 2032811]
- selftests/vm/write_to_hugetlbfs.c: fix unused variable warning (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add hugetlb_cgroup reservation tests (Waiman Long) [2039015 2032811]
- hugetlb: support file_region coalescing again (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: support noreserve mappings (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add accounting for shared mappings (Waiman Long) [2039015 2032811]
- hugetlb: disable region_add file_region coalescing (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add reservation accounting for private mappings (Waiman Long) [2039015 2032811]
- mm/hugetlb_cgroup: fix hugetlb_cgroup migration (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add interface for charge/uncharge hugetlb reservations (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add hugetlb_cgroup reservation counter (Waiman Long) [2039015 2032811]
- hugetlb: remove duplicated code (Waiman Long) [2039015 2032811]
- hugetlb: region_chg provides only cache entry (Waiman Long) [2039015 2032811]
- hugetlbfs: always use address space in inode for resv_map pointer (Waiman Long) [2039015 2032811]
- hugetlbfs: fix potential over/underflow setting node specific nr_hugepages (Waiman Long) [2039015 2032811]
- hugetlb: allow to free gigantic pages regardless of the configuration (Waiman Long) [2039015 2032811]
- powerpc/pseries: Fix update of LPAR security flavor after LPM (Steve Best) [2027448 1997294]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.18.1.el8_5]" date="1645531200">- selftests: kvm: Check whether SIDA memop fails for normal guests (Thomas Huth) [2050806 2050807] {CVE-2022-0516}
- KVM: s390: Return error on SIDA memop on normal guest (Thomas Huth) [2050806 2050807] {CVE-2022-0516}
- iommu/amd: Remove iommu_init_ga() (Jerry Snitselaar) [2030854 1998265]
- iommu/amd: Relocate GAMSup check to early_enable_iommus (Jerry Snitselaar) [2030854 1998265]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.19.1.el8_5]" date="1646049600">- tipc: improve size validations for received domain records (Xin Long) [2048970 2048971] {CVE-2022-0435}
- smb3: do not error on fsync when readonly (Ronnie Sahlberg) [2055824 2037811]
- security: implement sctp_assoc_established hook in selinux (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- security: add sctp_assoc_established hook (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- security: call security_sctp_assoc_request in sctp_sf_do_5_1D_ce (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- security: pass asoc to sctp_assoc_request and sctp_sk_clone (Bruno Meneguele) [2054112 2054117 2015525 2048251]
- net: sctp: Fix some typos (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- RDMA/bnxt_re: Fix stats counters (Selvin Xavier) [2049684 2001893]
- net: check skb sec_path when re-initializing slow_gro in gro_list_prepare (Xin Long) [2047427 2030476]
- cpufreq: intel_pstate: Add Icelake servers support in no-HWP mode (David Arcari) [2036888 2003695]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.20.1.el8_5]" date="1646740800">- lib/iov_iter: initialize "flags" in new pipe_buffer (Jan Stancek) [2060874 2060875] {CVE-2022-0847}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-348.20.1.el8.centos" date="1646913600">- Apply debranding changes</changelog>
</package>
<package pkgid="6fcf74601721eef10c5d484a6126d25c1db5d5346a489a427f74fb028776b635" name="kernel-debug" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="700a3343593e25c87000943b2ff53fd1aeb3885474e5a0c9c32b4f89fc9c8810" name="kernel-debug" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="193.28.1.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.20.1.el8_2]" date="1599134400">- [infiniband] IB/rdmavt: Fix RQ counting issues causing use of an invalid RWQE (Kamal Heib) [1872771 1850314]
- [block] blk-mq: Rerun dispatching in the case of budget contention (Ming Lei) [1869779 1824037]
- [block] blk-mq: Add blk_mq_delay_run_hw_queues() API call (Ming Lei) [1869779 1824037]
- [block] blk-mq: In blk_mq_dispatch_rq_list() "no budget" is a reason to kick (Ming Lei) [1869779 1824037]
- [block] blk-mq: Put driver tag in blk_mq_dispatch_rq_list() when no budget (Ming Lei) [1869779 1824037]
- [md] dm mpath: use double checked locking in fast path (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rename current_pgpath to pgpath in multipath_prepare_ioctl (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rework __map_bio() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: factor out multipath_queue_bio (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: push locking down to must_push_back_rq() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: take m-&gt;lock spinlock when testing QUEUE_IF_NO_PATH (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: changes from initial m-&gt;flags locking audit (Mike Snitzer) [1869386 1848651]
- [md] dm rq: don't call blk_mq_queue_stopped() in dm_stop_queue() (Mike Snitzer) [1869386 1848651]
- [md] dm: do not use waitqueue for request-based DM (Mike Snitzer) [1869386 1848651]
- [block] blk-mq: consider non-idle request as "inflight" in blk_mq_rq_inflight() (Mike Snitzer) [1869386 1848651]
- [kernel] sched/deadline: Initialize -&gt;dl_boosted (Phil Auld) [1867612 1854179]
- [kernel] sched/core: Fix PI boosting between RT and DEADLINE tasks (Phil Auld) [1867612 1854179]
- [net] net/smc: tolerate future SMCD versions (Philipp Rudo) [1866390 1854992]
- [net] openvswitch: fixes potential deadlock in dp cleanup code (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: reorder masks array based on usage (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: take into account de-fragmentation/gso_size in execute_check_pkt_len (Lorenzo Bianconi) [1860169 1851888]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.21.1.el8_2]" date="1599739200">- [scsi] scsi: ibmvfc: Fix NULL return compiler warning (Steve Best) [1866371 1810653]
- [scsi] scsi: ibmvfc: Avoid loss of all paths during SVC node reboot (Steve Best) [1866371 1810653]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.22.1.el8_2]" date="1600257600">- [crypto] pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1877530 1862072]
- [crypto] Revert "pefile: Tolerate other pefile signatures after first" (Bruno Meneguele)
- [infiniband] IB/hfi1: Fix another case where pq is left on waitlist (Kamal Heib) [1872766 1859209]
- [infiniband] IB/hfi1: Ensure pq is not left on waitlist (Kamal Heib) [1872766 1859209]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.23.1.el8_2]" date="1600344000">- [net] packet: fix overflow in tpacket_rcv (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}
- [net] packet: make tp_drops atomic (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.24.1.el8_2]" date="1600862400">- [kernel] timers: Remove must_forward_clk (Phil Auld) [1877417 1833096]
- [kernel] timers: Spare timer softirq until next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Expand clk forward logic beyond nohz (Phil Auld) [1877417 1833096]
- [kernel] timers: Reuse next expiry cache after nohz exit (Phil Auld) [1877417 1833096]
- [kernel] timers: Always keep track of next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Optimize _next_timer_interrupt() level iteration (Phil Auld) [1877417 1833096]
- [kernel] timers: Add comments about calc_index() ceiling work (Phil Auld) [1877417 1833096]
- [kernel] timers: Move trigger_dyntick_cpu() to enqueue_timer() (Phil Auld) [1877417 1833096]
- [kernel] timers: Use only bucket expiry for base-&gt;next_expiry value (Phil Auld) [1877417 1833096]
- [kernel] timers: Preserve higher bits of expiration on index calculation (Phil Auld) [1877417 1833096]
- [kernel] timer: Fix wheel index calculation on last level (Phil Auld) [1877417 1833096]
- [kernel] timer: Prevent base-&gt;clk from moving backward (Phil Auld) [1877417 1833096]
- [kernel] timer: Read jiffies once when forwarding base clk (Phil Auld) [1877417 1833096]
- [infiniband] RDMA/umem: Fix ib_umem_find_best_pgsz() (Kamal Heib) [1872424 1856158]
- [net] net: accept an empty mask in /sys/class/net/*/queues/rx-*/rps_cpus (Nitesh Narayan Lal) [1870181 1868433]
- [net] net: Restrict receive packets queuing to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [pci] PCI: Restrict probe functions to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [lib] lib: Restrict cpumask_local_spread to houskeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [s390] s390/pci: Fix unexpected write combine on resource (Philipp Rudo) [1869276 1827311]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.25.1.el8_2]" date="1601553600">- [net] netfilter: conntrack: proc: rename stat column (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: add clash resolution stat counter (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: remove ignore stats (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not increment two error counters at same time (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not auto-delete clash entries on reply (Florian Westphal) [1882095 1875681]
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1881085 1875316] {CVE-2020-14385}
- [kernel] time/tick-broadcast: Fix tick_broadcast_offline() lockdep complaint (Alexey Klimov) [1880081 1877380]
- [net] atomics/treewide: Rename __atomic_add_unless() =&gt; atomic_fetch_add_unless() (Yauheni Kaliuta) [1880081 1813370]
- [kernel] timers: Lower base clock forwarding threshold (Phil Auld) [1877417 1833096]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.26.1.el8_2]" date="1602158400">- [firmware] efi: don't reserve MOK config table memory region (Kairui Song) [1879988 1878584]
- [security] integrity: Load certs from the EFI MOK config table (Lenny Szubowicz) [1877528 1868306]
- [security] integrity: Move import of MokListRT certs to a separate routine (Lenny Szubowicz) [1877528 1868306]
- [firmware] efi: Support for MOK variable config table (Lenny Szubowicz) [1877528 1868306]
- [security] efi: Only print errors about failing to get certs if EFI vars are found (Lenny Szubowicz) [1877528 1804969]
- [fs] ceph: fix inode number handling on arches with 32-bit ino_t (Jeff Layton) [1875787 1866018]
- [fs] ceph: handle zero-length feature mask in session messages (Jeff Layton) [1875787 1866018]
- [fs] ceph: fix endianness bug when handling MDS session feature bits (Jeff Layton) [1875787 1866018]
- [netdrv] net/mlx5e: Fix missing cleanup of ethtool steering during rep rx cleanup (Alaa Hleihel) [1857777 1856660]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.27.1.el8_2]" date="1602763200">- [powerpc] powerpc/pseries: Do not initiate shutdown when system is running on UPS (Diego Domingos) [1882243 1870477]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859471 1859472] {CVE-2020-14331}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.28.1.el8_2]" date="1602849600">- [net] Bluetooth: L2CAP: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888256 1888258] {CVE-2020-12351}
- [net] Bluetooth: A2MP: Fix not initializing all members (Gopal Tiwari) [1888906 1888807] {CVE-2020-12352}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-193.28.1.el8.centos" date="1603195200">- Apply debranding changes</changelog>
</package>
<package pkgid="585e459d8eee46cb68541a4d6a59890b44d4f18ecab100b3e1b58e34a59abb2c" name="kernel-debug" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="305.10.2.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.2.1.el8_4]" date="1620648000">- net/mlx5e: Allow to match on MPLS parameters only for MPLS over UDP (Alaa Hleihel) [1952061 1936742]
- net/mlx5e: Reject tc rules which redirect from a VF to itself (Alaa Hleihel) [1952065 1932839]
- net/mlx5: CT: Add support for matching on ct_state inv and rel flags (Alaa Hleihel) [1952062 1942681]
- KVM: VMX: Don't use vcpu-&gt;run-&gt;internal.ndata as an array index (Jon Maloy) [1954221 1954219]
- tools/power turbostat: Revert "[tools] tools/power turbostat: Enable accumulate RAPL display" (Prarit Bhargava) [1952987 1944699]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.3.1.el8_4]" date="1621252800">- Revert "uio: use request_threaded_irq instead" (Vitaly Kuznetsov) [1952952 1946644]
- drm/ast: Set format registers in primary plane's update (Lyude Paul) [1952900 1923857]
- net/sched: act_ct: clear post_ct if doing ct_clear (Marcelo Ricardo Leitner) [1956458 1941889]
- md/raid1: properly indicate failure when ending a failed write request (Nigel Croxon) [1955188 1954588]
- nitro_enclaves: Fix stale file descriptors on failed usercopy (Vitaly Kuznetsov) [1956379 1953717]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.4.1.el8_4]" date="1621944000">- vmxnet3: Set the default of vxlan overlay offload to disabled (Cathy Avery) [1960702 1941714]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.5.1.el8_4]" date="1622548800">- gfs2: report "already frozen/thawed" errors (Bob Peterson) [1961849 1932236]
- gfs2: move freeze glock outside the make_fs_rw and _ro functions (Bob Peterson) [1961849 1932236]
- gfs2: Add common helper for holding and releasing the freeze glock (Bob Peterson) [1961849 1932236]
- gfs2: in signal_our_withdraw wait for unfreeze of _this_ fs only (Bob Peterson) [1961849 1932236]
- gfs2: Don't freeze the file system during unmount (Bob Peterson) [1961849 1932236]
- gfs2: Fix regression in freeze_go_sync (Bob Peterson) [1961849 1932236]
- gfs2: The freeze glock should never be frozen (Bob Peterson) [1961849 1932236]
- gfs2: When freezing gfs2, use GL_EXACT and not GL_NOCACHE (Bob Peterson) [1961849 1932236]
- gfs2: read-only mounts should grab the sd_freeze_gl glock (Bob Peterson) [1961849 1932236]
- gfs2: freeze should work on read-only mounts (Bob Peterson) [1961849 1932236]
- gfs2: Abort gfs2_freeze if io error is seen (Bob Peterson) [1961849 1932236]
- CI: Disable result checking for realtime check (Veronika Kabatova)
- CI: Explicitly disable result checking for private CI (Veronika Kabatova)
- CI: Rename variable (Veronika Kabatova)
- CI: Update builder containers (Veronika Kabatova)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.6.1.el8_4]" date="1623067200">- openvswitch: fix stack OOB read while fragmenting IPv4 packets (Davide Caratti) [1963940 1924608]
- net/sched: sch_frag: fix stack OOB read while fragmenting IPv4 packets (Davide Caratti) [1963940 1924608]
- net/sched: act_ct: fix wild memory access when clearing fragments (Davide Caratti) [1963940 1924608]
- net: Treat __napi_schedule_irqoff() as __napi_schedule() on PREEMPT_RT (Ivan Vecera)
- redhat/configs: Add CONFIG_SYSTEM_REVOCATION_KEYS and CONFIG_SYSTEM_REVOCATION_LIST (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: add 'x509_revocation_list' to gitignore (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- integrity: Load mokx variables into the blacklist keyring (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Add ability to preload revocation certs (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Move load_system_certificate_list to a common function (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Add EFI_CERT_X509_GUID support for dbx entries (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- net/sched: cls_api: increase max_reclassify_loop (Davide Caratti) [1965148 1955136]
- dm writecache: fix performance degradation in ssd mode (Mike Snitzer) [1962241 1961859]
- scsi: fnic: Use scsi_host_busy_iter() to traverse commands (Ewan D. Milne) [1961705 1949250]
- scsi: fnic: Kill 'exclude_id' argument to fnic_cleanup_io() (Ewan D. Milne) [1961705 1949250]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.7.1.el8_4]" date="1623672000">- net: zero-initialize tc skb extension on allocation (Ivan Vecera) [1965457 1946986]
- net/sched: cls_flower: fix only mask bit check in the validate_ct_state (Ivan Vecera) [1965457 1946986]
- net: cls_api: Fix uninitialised struct field bo-&gt;unlocked_driver_cb (Ivan Vecera) [1965457 1946986]
- net/sched: act_api: fix miss set post_ct for ovs after do conntrack in act_ct (Ivan Vecera) [1965457 1946986]
- net/sched: cls_flower: validate ct_state for invalid and reply flags (Ivan Vecera) [1965457 1946986]
- flow_dissector: fix TTL and TOS dissection on IPv4 fragments (Paolo Abeni) [1963952 1950288]
- Revert "sctp: Fix SHUTDOWN CTSN Ack in the peer restart case" (Xin Long) [1965632 1953839]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [1965632 1953839]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [1965632 1953839]
- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962544 1962546] {CVE-2021-33034}
- x86/kvm: Unify kvm_pv_guest_cpu_reboot() with kvm_guest_cpu_offline() (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Disable all PV features on crash (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Disable kvmclock on all CPUs on shutdown (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Teardown PV features on boot CPU as well (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Fix pr_info() for async PF setup/teardown (Lenny Szubowicz) [1964930 1934273]
- net/sched: act_ct: Fix ct template allocation for zone 0 (Marcelo Ricardo Leitner) [1965150 1881824]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.8.1.el8_4]" date="1624363200">- iavf: amend removal of MODULE_VERSION (Stefan Assmann) [1969925 1955738]
- ixgbe: Amend commit acf03026ec5a to include a version string in module info. (Ken Cox) [1969922 1955759]
- i40e: amend removal of MODULE_VERSION (Stefan Assmann) [1969923 1955736]
- redhat/configs: Add CONFIG_PINCTRL_EMMITSBURG (David Arcari) [1963984 1959506]
- redhat/configs: Remove CONFIG_EMMITSBURG (David Arcari) [1963984 1959506]
- netlink: add tracepoint at NL_SET_ERR_MSG (Marcelo Ricardo Leitner) [1972938 1956983]
- Revert "[netdrv] net/intel: remove driver versions from Intel drivers" (Jonathan Toppins) [1969917 1955745]
- Amends commit ea6244cc248b to include a version string in module info. (Ken Cox) [1969915 1955726]
- Revert "[netdrv] net/broadcom: Clean broadcom code from driver versions" (Jonathan Toppins) [1969914 1955721]
- ena: revert removal of MODULE_VERSION from ena (Petr Oros) [1969913 1955712]
- fm10k: amend removal of MODULE_VERSION (Vladis Dronov) [1969910 1955730]
- net/sched: act_ct: Offload connections with commit action (Marcelo Ricardo Leitner) [1968679 1965817]
- netfilter: flowtable: Remove redundant hw refresh bit (Marcelo Ricardo Leitner) [1968679 1965817]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.9.1.el8_4]" date="1624881600">- ixgbevf: Amend commit acf03026ec5a to include a version in module info. (Ken Cox) [1969911 1955764]
- CI: Merge configuration (Veronika Kabatova)
- igc: amend removal of MODULE_VERSION (Corinna Vinschen) [1969921 1955755]
- igb: amend removal of MODULE_VERSION (Corinna Vinschen) [1969919 1955748]
- locking/qrwlock: Fix ordering in queued_write_lock_slowpath() (Waiman Long) [1964419 1950110]
- scsi: qedf: Do not put host in qedf_vport_create() unconditionally (Nilesh Javali) [1974968 1899384]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.10.1.el8_4]" date="1625659200">- igbvf: amend removal of MODULE_VERSION (Corinna Vinschen) [1969920 1955752]
- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971464 1971488] {CVE-2021-32399}
- scsi: ibmvfc: Free channel_setup_buf during device tear down (Steve Best) [1964697 1938102]
- i40e: Fix parameters in aq_get_phy_register() (Stefan Assmann) [1967099 1907852]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.10.2.el8_4]" date="1626091200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975181 1975182] {CVE-2021-33909}</changelog>
</package>
<package pkgid="0c9add4b03325d40199bfefbd9103984c118f16e1d209963b5d68a2823b3ebc0" name="kernel-debug" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="348.20.1.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.12.1.el8_5]" date="1641988800">- tcp: don't free a FIN sk_buff in tcp_remove_empty_skb() (Guillaume Nault) [2021574 2016210]
- kernel.spec: Add support to use vmlinux.h (Jiri Olsa) [2031053 1989087]
- spec: Add vmlinux.h to kernel-devel package (Jiri Olsa) [2031053 1989087]
- x86/mce: Avoid infinite loop for copy from user recovery (Prarit Bhargava) [2008789 1999550]
- x86/mce: Rename kill_it to kill_current_task (Prarit Bhargava) [2008789 1999550]
- x86/mce: Recover from poison found while copying from user space (Prarit Bhargava) [2008789 1999550]
- x86/mce: Delay clearing IA32_MCG_STATUS to the end of do_machine_check() (Prarit Bhargava) [2008789 1999550]
- x86/mce: Send #MC singal from task work (Prarit Bhargava) [2008789 1999550]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-348.13.1.el8_5]" date="1642507200">- vfs: Out-of-bounds write of heap buffer in fs_context.c (Frantisek Hrbata) [2040585 2040586] {CVE-2022-0185}
- xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Bruno Meneguele) [2034864 2034865] {CVE-2021-4155}
- af_unix: fix garbage collect vs MSG_PEEK (Patrick Talbert) [2031974 2031975] {CVE-2021-0920}
- cgroup: verify that source is a string (Waiman Long) [2034608 2034609] {CVE-2021-4154}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-348.14.1.el8_5]" date="1643198400">- tcp: fix page frag corruption on page fault (Paolo Abeni) [2041529 1996074]
- net: fix sk_page_frag() recursion from memory reclaim (Paolo Abeni) [2041529 1996074]
- KVM: s390: index kvm-&gt;arch.idle_mask by vcpu_idx (Thomas Huth) [2040769 2026230]
- redhat: set LC_ALL=C before sorting config content (Frantisek Hrbata)</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.15.1.el8_5]" date="1643716800">- net/mlx5: DR, Use FW API when updating FW-owned flow table (Michal Schmidt) [2042663 2042651]
- KVM: x86: Wait for IPIs to be delivered when handling Hyper-V TLB flush hypercall (Vitaly Kuznetsov) [2043237 1868572]
- drm/mgag200: Select clock in PLL update functions (Bruno Meneguele) [2034949 1953926]
- drm/i915: Fix HAS_LSPCON macro for platforms between GEN9 and GEN10 (Bruno Meneguele) [2027335 2005586]
- crypto: qat - power up 4xxx device (Vladis Dronov) [2016437 1960307]
- RDMA/core: Fix a double free in add_port error flow (Kamal Heib) [2038724 2008555]
- powerpc/iommu: Report the correct most efficient DMA mask for PCI devices (Steve Best) [2018928 2007425]
- powerpc/dma: Fix dma_map_ops::get_required_mask (Steve Best) [2018928 2007425]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.16.1.el8_5]" date="1644321600">- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047601 2047602] {CVE-2022-22942}
- net: openvswitch: Fix ct_state nat flags for conns arriving from tc (Marcelo Ricardo Leitner) [2043548 2040334]
- net: openvswitch: Fix matching zone id for invalid conns arriving from tc (Marcelo Ricardo Leitner) [2043550 2040452]
- net/sched: flow_dissector: Fix matching on zone id for invalid conns (Marcelo Ricardo Leitner) [2043550 2040452]
- net/sched: Extend qdisc control block with tc control block (Marcelo Ricardo Leitner) [2043550 2040452]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.17.1.el8_5]" date="1644926400">- vfs: check dentry is still valid in get_link() (Ian Kent) [2052558 2014846]
- xfs: don't expose internal symlink metadata buffers to the vfs (Brian Foster) [2052558 2014846]
- CI: Use appropriate zstream builder (Veronika Kabatova)
- CI: Enable baseline realtime checks (Veronika Kabatova)
- CI: Rename pipelines to include release names (Veronika Kabatova)
- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052166 2052167] {CVE-2022-0492}
- ice: Remove boolean vlan_promisc flag from function (Jonathan Toppins) [2051951 2030400]
- ceph: put the requests/sessions when it fails to alloc memory (Jeffrey Layton) [2053725 2017796]
- ceph: fix off by one bugs in unsafe_request_wait() (Jeffrey Layton) [2053725 2017796]
- ceph: flush the mdlog before waiting on unsafe reqs (Jeffrey Layton) [2053725 2017796]
- ceph: flush mdlog before umounting (Jeffrey Layton) [2053725 2017796]
- ceph: make iterate_sessions a global symbol (Jeffrey Layton) [2053725 2017796]
- ceph: make ceph_create_session_msg a global symbol (Jeffrey Layton) [2053725 2017796]
- xfs: check sb_meta_uuid for dabuf buffer recovery (Bill O'Donnell) [2049292 2020764]
- drm/i915: Flush TLBs before releasing backing store (Patrick Talbert) [2044328 2044329] {CVE-2022-0330}
- hugetlb: fix hugetlb cgroup refcounting during vma split (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: fix imbalanced css_get and css_put pair for shared mappings (Waiman Long) [2039015 2032811]
- mm/hugetlb: change hugetlb_reserve_pages() to type bool (Waiman Long) [2039015 2032811]
- hugetlb: fix an error code in hugetlb_reserve_pages() (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: fix offline of hugetlb cgroup with reservations (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: fix reservation accounting (Waiman Long) [2039015 2032811]
- mm/hugetlb: narrow the hugetlb_lock protection area during preparing huge page (Waiman Long) [2039015 2032811]
- mm/hugetlb: a page from buddy is not on any list (Waiman Long) [2039015 2032811]
- mm/hugetlb: not necessary to coalesce regions recursively (Waiman Long) [2039015 2032811]
- selftests/vm/write_to_hugetlbfs.c: fix unused variable warning (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add hugetlb_cgroup reservation tests (Waiman Long) [2039015 2032811]
- hugetlb: support file_region coalescing again (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: support noreserve mappings (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add accounting for shared mappings (Waiman Long) [2039015 2032811]
- hugetlb: disable region_add file_region coalescing (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add reservation accounting for private mappings (Waiman Long) [2039015 2032811]
- mm/hugetlb_cgroup: fix hugetlb_cgroup migration (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add interface for charge/uncharge hugetlb reservations (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add hugetlb_cgroup reservation counter (Waiman Long) [2039015 2032811]
- hugetlb: remove duplicated code (Waiman Long) [2039015 2032811]
- hugetlb: region_chg provides only cache entry (Waiman Long) [2039015 2032811]
- hugetlbfs: always use address space in inode for resv_map pointer (Waiman Long) [2039015 2032811]
- hugetlbfs: fix potential over/underflow setting node specific nr_hugepages (Waiman Long) [2039015 2032811]
- hugetlb: allow to free gigantic pages regardless of the configuration (Waiman Long) [2039015 2032811]
- powerpc/pseries: Fix update of LPAR security flavor after LPM (Steve Best) [2027448 1997294]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.18.1.el8_5]" date="1645531200">- selftests: kvm: Check whether SIDA memop fails for normal guests (Thomas Huth) [2050806 2050807] {CVE-2022-0516}
- KVM: s390: Return error on SIDA memop on normal guest (Thomas Huth) [2050806 2050807] {CVE-2022-0516}
- iommu/amd: Remove iommu_init_ga() (Jerry Snitselaar) [2030854 1998265]
- iommu/amd: Relocate GAMSup check to early_enable_iommus (Jerry Snitselaar) [2030854 1998265]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.19.1.el8_5]" date="1646049600">- tipc: improve size validations for received domain records (Xin Long) [2048970 2048971] {CVE-2022-0435}
- smb3: do not error on fsync when readonly (Ronnie Sahlberg) [2055824 2037811]
- security: implement sctp_assoc_established hook in selinux (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- security: add sctp_assoc_established hook (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- security: call security_sctp_assoc_request in sctp_sf_do_5_1D_ce (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- security: pass asoc to sctp_assoc_request and sctp_sk_clone (Bruno Meneguele) [2054112 2054117 2015525 2048251]
- net: sctp: Fix some typos (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- RDMA/bnxt_re: Fix stats counters (Selvin Xavier) [2049684 2001893]
- net: check skb sec_path when re-initializing slow_gro in gro_list_prepare (Xin Long) [2047427 2030476]
- cpufreq: intel_pstate: Add Icelake servers support in no-HWP mode (David Arcari) [2036888 2003695]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.20.1.el8_5]" date="1646740800">- lib/iov_iter: initialize "flags" in new pipe_buffer (Jan Stancek) [2060874 2060875] {CVE-2022-0847}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-348.20.1.el8.centos" date="1646913600">- Apply debranding changes</changelog>
</package>
<package pkgid="6d341d9bbe357eca233a15e7c9953f41e59fcedbe2261ed9a488b51ccbbb10d4" name="kernel-debug-core" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="c0d8b6103abf8f7adcd9cefcb37560783aefb2a2d24d136637fe84f9cc9cb0db" name="kernel-debug-core" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="193.28.1.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.20.1.el8_2]" date="1599134400">- [infiniband] IB/rdmavt: Fix RQ counting issues causing use of an invalid RWQE (Kamal Heib) [1872771 1850314]
- [block] blk-mq: Rerun dispatching in the case of budget contention (Ming Lei) [1869779 1824037]
- [block] blk-mq: Add blk_mq_delay_run_hw_queues() API call (Ming Lei) [1869779 1824037]
- [block] blk-mq: In blk_mq_dispatch_rq_list() "no budget" is a reason to kick (Ming Lei) [1869779 1824037]
- [block] blk-mq: Put driver tag in blk_mq_dispatch_rq_list() when no budget (Ming Lei) [1869779 1824037]
- [md] dm mpath: use double checked locking in fast path (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rename current_pgpath to pgpath in multipath_prepare_ioctl (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rework __map_bio() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: factor out multipath_queue_bio (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: push locking down to must_push_back_rq() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: take m-&gt;lock spinlock when testing QUEUE_IF_NO_PATH (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: changes from initial m-&gt;flags locking audit (Mike Snitzer) [1869386 1848651]
- [md] dm rq: don't call blk_mq_queue_stopped() in dm_stop_queue() (Mike Snitzer) [1869386 1848651]
- [md] dm: do not use waitqueue for request-based DM (Mike Snitzer) [1869386 1848651]
- [block] blk-mq: consider non-idle request as "inflight" in blk_mq_rq_inflight() (Mike Snitzer) [1869386 1848651]
- [kernel] sched/deadline: Initialize -&gt;dl_boosted (Phil Auld) [1867612 1854179]
- [kernel] sched/core: Fix PI boosting between RT and DEADLINE tasks (Phil Auld) [1867612 1854179]
- [net] net/smc: tolerate future SMCD versions (Philipp Rudo) [1866390 1854992]
- [net] openvswitch: fixes potential deadlock in dp cleanup code (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: reorder masks array based on usage (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: take into account de-fragmentation/gso_size in execute_check_pkt_len (Lorenzo Bianconi) [1860169 1851888]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.21.1.el8_2]" date="1599739200">- [scsi] scsi: ibmvfc: Fix NULL return compiler warning (Steve Best) [1866371 1810653]
- [scsi] scsi: ibmvfc: Avoid loss of all paths during SVC node reboot (Steve Best) [1866371 1810653]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.22.1.el8_2]" date="1600257600">- [crypto] pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1877530 1862072]
- [crypto] Revert "pefile: Tolerate other pefile signatures after first" (Bruno Meneguele)
- [infiniband] IB/hfi1: Fix another case where pq is left on waitlist (Kamal Heib) [1872766 1859209]
- [infiniband] IB/hfi1: Ensure pq is not left on waitlist (Kamal Heib) [1872766 1859209]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.23.1.el8_2]" date="1600344000">- [net] packet: fix overflow in tpacket_rcv (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}
- [net] packet: make tp_drops atomic (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.24.1.el8_2]" date="1600862400">- [kernel] timers: Remove must_forward_clk (Phil Auld) [1877417 1833096]
- [kernel] timers: Spare timer softirq until next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Expand clk forward logic beyond nohz (Phil Auld) [1877417 1833096]
- [kernel] timers: Reuse next expiry cache after nohz exit (Phil Auld) [1877417 1833096]
- [kernel] timers: Always keep track of next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Optimize _next_timer_interrupt() level iteration (Phil Auld) [1877417 1833096]
- [kernel] timers: Add comments about calc_index() ceiling work (Phil Auld) [1877417 1833096]
- [kernel] timers: Move trigger_dyntick_cpu() to enqueue_timer() (Phil Auld) [1877417 1833096]
- [kernel] timers: Use only bucket expiry for base-&gt;next_expiry value (Phil Auld) [1877417 1833096]
- [kernel] timers: Preserve higher bits of expiration on index calculation (Phil Auld) [1877417 1833096]
- [kernel] timer: Fix wheel index calculation on last level (Phil Auld) [1877417 1833096]
- [kernel] timer: Prevent base-&gt;clk from moving backward (Phil Auld) [1877417 1833096]
- [kernel] timer: Read jiffies once when forwarding base clk (Phil Auld) [1877417 1833096]
- [infiniband] RDMA/umem: Fix ib_umem_find_best_pgsz() (Kamal Heib) [1872424 1856158]
- [net] net: accept an empty mask in /sys/class/net/*/queues/rx-*/rps_cpus (Nitesh Narayan Lal) [1870181 1868433]
- [net] net: Restrict receive packets queuing to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [pci] PCI: Restrict probe functions to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [lib] lib: Restrict cpumask_local_spread to houskeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [s390] s390/pci: Fix unexpected write combine on resource (Philipp Rudo) [1869276 1827311]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.25.1.el8_2]" date="1601553600">- [net] netfilter: conntrack: proc: rename stat column (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: add clash resolution stat counter (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: remove ignore stats (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not increment two error counters at same time (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not auto-delete clash entries on reply (Florian Westphal) [1882095 1875681]
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1881085 1875316] {CVE-2020-14385}
- [kernel] time/tick-broadcast: Fix tick_broadcast_offline() lockdep complaint (Alexey Klimov) [1880081 1877380]
- [net] atomics/treewide: Rename __atomic_add_unless() =&gt; atomic_fetch_add_unless() (Yauheni Kaliuta) [1880081 1813370]
- [kernel] timers: Lower base clock forwarding threshold (Phil Auld) [1877417 1833096]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.26.1.el8_2]" date="1602158400">- [firmware] efi: don't reserve MOK config table memory region (Kairui Song) [1879988 1878584]
- [security] integrity: Load certs from the EFI MOK config table (Lenny Szubowicz) [1877528 1868306]
- [security] integrity: Move import of MokListRT certs to a separate routine (Lenny Szubowicz) [1877528 1868306]
- [firmware] efi: Support for MOK variable config table (Lenny Szubowicz) [1877528 1868306]
- [security] efi: Only print errors about failing to get certs if EFI vars are found (Lenny Szubowicz) [1877528 1804969]
- [fs] ceph: fix inode number handling on arches with 32-bit ino_t (Jeff Layton) [1875787 1866018]
- [fs] ceph: handle zero-length feature mask in session messages (Jeff Layton) [1875787 1866018]
- [fs] ceph: fix endianness bug when handling MDS session feature bits (Jeff Layton) [1875787 1866018]
- [netdrv] net/mlx5e: Fix missing cleanup of ethtool steering during rep rx cleanup (Alaa Hleihel) [1857777 1856660]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.27.1.el8_2]" date="1602763200">- [powerpc] powerpc/pseries: Do not initiate shutdown when system is running on UPS (Diego Domingos) [1882243 1870477]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859471 1859472] {CVE-2020-14331}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.28.1.el8_2]" date="1602849600">- [net] Bluetooth: L2CAP: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888256 1888258] {CVE-2020-12351}
- [net] Bluetooth: A2MP: Fix not initializing all members (Gopal Tiwari) [1888906 1888807] {CVE-2020-12352}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-193.28.1.el8.centos" date="1603195200">- Apply debranding changes</changelog>
</package>
<package pkgid="7991adb5087038b58b81cc30d37eb6e96dc9ef04c18cea60f44b80f206c39832" name="kernel-debug-core" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="305.10.2.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.2.1.el8_4]" date="1620648000">- net/mlx5e: Allow to match on MPLS parameters only for MPLS over UDP (Alaa Hleihel) [1952061 1936742]
- net/mlx5e: Reject tc rules which redirect from a VF to itself (Alaa Hleihel) [1952065 1932839]
- net/mlx5: CT: Add support for matching on ct_state inv and rel flags (Alaa Hleihel) [1952062 1942681]
- KVM: VMX: Don't use vcpu-&gt;run-&gt;internal.ndata as an array index (Jon Maloy) [1954221 1954219]
- tools/power turbostat: Revert "[tools] tools/power turbostat: Enable accumulate RAPL display" (Prarit Bhargava) [1952987 1944699]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.3.1.el8_4]" date="1621252800">- Revert "uio: use request_threaded_irq instead" (Vitaly Kuznetsov) [1952952 1946644]
- drm/ast: Set format registers in primary plane's update (Lyude Paul) [1952900 1923857]
- net/sched: act_ct: clear post_ct if doing ct_clear (Marcelo Ricardo Leitner) [1956458 1941889]
- md/raid1: properly indicate failure when ending a failed write request (Nigel Croxon) [1955188 1954588]
- nitro_enclaves: Fix stale file descriptors on failed usercopy (Vitaly Kuznetsov) [1956379 1953717]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.4.1.el8_4]" date="1621944000">- vmxnet3: Set the default of vxlan overlay offload to disabled (Cathy Avery) [1960702 1941714]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.5.1.el8_4]" date="1622548800">- gfs2: report "already frozen/thawed" errors (Bob Peterson) [1961849 1932236]
- gfs2: move freeze glock outside the make_fs_rw and _ro functions (Bob Peterson) [1961849 1932236]
- gfs2: Add common helper for holding and releasing the freeze glock (Bob Peterson) [1961849 1932236]
- gfs2: in signal_our_withdraw wait for unfreeze of _this_ fs only (Bob Peterson) [1961849 1932236]
- gfs2: Don't freeze the file system during unmount (Bob Peterson) [1961849 1932236]
- gfs2: Fix regression in freeze_go_sync (Bob Peterson) [1961849 1932236]
- gfs2: The freeze glock should never be frozen (Bob Peterson) [1961849 1932236]
- gfs2: When freezing gfs2, use GL_EXACT and not GL_NOCACHE (Bob Peterson) [1961849 1932236]
- gfs2: read-only mounts should grab the sd_freeze_gl glock (Bob Peterson) [1961849 1932236]
- gfs2: freeze should work on read-only mounts (Bob Peterson) [1961849 1932236]
- gfs2: Abort gfs2_freeze if io error is seen (Bob Peterson) [1961849 1932236]
- CI: Disable result checking for realtime check (Veronika Kabatova)
- CI: Explicitly disable result checking for private CI (Veronika Kabatova)
- CI: Rename variable (Veronika Kabatova)
- CI: Update builder containers (Veronika Kabatova)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.6.1.el8_4]" date="1623067200">- openvswitch: fix stack OOB read while fragmenting IPv4 packets (Davide Caratti) [1963940 1924608]
- net/sched: sch_frag: fix stack OOB read while fragmenting IPv4 packets (Davide Caratti) [1963940 1924608]
- net/sched: act_ct: fix wild memory access when clearing fragments (Davide Caratti) [1963940 1924608]
- net: Treat __napi_schedule_irqoff() as __napi_schedule() on PREEMPT_RT (Ivan Vecera)
- redhat/configs: Add CONFIG_SYSTEM_REVOCATION_KEYS and CONFIG_SYSTEM_REVOCATION_LIST (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: add 'x509_revocation_list' to gitignore (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- integrity: Load mokx variables into the blacklist keyring (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Add ability to preload revocation certs (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Move load_system_certificate_list to a common function (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Add EFI_CERT_X509_GUID support for dbx entries (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- net/sched: cls_api: increase max_reclassify_loop (Davide Caratti) [1965148 1955136]
- dm writecache: fix performance degradation in ssd mode (Mike Snitzer) [1962241 1961859]
- scsi: fnic: Use scsi_host_busy_iter() to traverse commands (Ewan D. Milne) [1961705 1949250]
- scsi: fnic: Kill 'exclude_id' argument to fnic_cleanup_io() (Ewan D. Milne) [1961705 1949250]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.7.1.el8_4]" date="1623672000">- net: zero-initialize tc skb extension on allocation (Ivan Vecera) [1965457 1946986]
- net/sched: cls_flower: fix only mask bit check in the validate_ct_state (Ivan Vecera) [1965457 1946986]
- net: cls_api: Fix uninitialised struct field bo-&gt;unlocked_driver_cb (Ivan Vecera) [1965457 1946986]
- net/sched: act_api: fix miss set post_ct for ovs after do conntrack in act_ct (Ivan Vecera) [1965457 1946986]
- net/sched: cls_flower: validate ct_state for invalid and reply flags (Ivan Vecera) [1965457 1946986]
- flow_dissector: fix TTL and TOS dissection on IPv4 fragments (Paolo Abeni) [1963952 1950288]
- Revert "sctp: Fix SHUTDOWN CTSN Ack in the peer restart case" (Xin Long) [1965632 1953839]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [1965632 1953839]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [1965632 1953839]
- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962544 1962546] {CVE-2021-33034}
- x86/kvm: Unify kvm_pv_guest_cpu_reboot() with kvm_guest_cpu_offline() (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Disable all PV features on crash (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Disable kvmclock on all CPUs on shutdown (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Teardown PV features on boot CPU as well (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Fix pr_info() for async PF setup/teardown (Lenny Szubowicz) [1964930 1934273]
- net/sched: act_ct: Fix ct template allocation for zone 0 (Marcelo Ricardo Leitner) [1965150 1881824]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.8.1.el8_4]" date="1624363200">- iavf: amend removal of MODULE_VERSION (Stefan Assmann) [1969925 1955738]
- ixgbe: Amend commit acf03026ec5a to include a version string in module info. (Ken Cox) [1969922 1955759]
- i40e: amend removal of MODULE_VERSION (Stefan Assmann) [1969923 1955736]
- redhat/configs: Add CONFIG_PINCTRL_EMMITSBURG (David Arcari) [1963984 1959506]
- redhat/configs: Remove CONFIG_EMMITSBURG (David Arcari) [1963984 1959506]
- netlink: add tracepoint at NL_SET_ERR_MSG (Marcelo Ricardo Leitner) [1972938 1956983]
- Revert "[netdrv] net/intel: remove driver versions from Intel drivers" (Jonathan Toppins) [1969917 1955745]
- Amends commit ea6244cc248b to include a version string in module info. (Ken Cox) [1969915 1955726]
- Revert "[netdrv] net/broadcom: Clean broadcom code from driver versions" (Jonathan Toppins) [1969914 1955721]
- ena: revert removal of MODULE_VERSION from ena (Petr Oros) [1969913 1955712]
- fm10k: amend removal of MODULE_VERSION (Vladis Dronov) [1969910 1955730]
- net/sched: act_ct: Offload connections with commit action (Marcelo Ricardo Leitner) [1968679 1965817]
- netfilter: flowtable: Remove redundant hw refresh bit (Marcelo Ricardo Leitner) [1968679 1965817]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.9.1.el8_4]" date="1624881600">- ixgbevf: Amend commit acf03026ec5a to include a version in module info. (Ken Cox) [1969911 1955764]
- CI: Merge configuration (Veronika Kabatova)
- igc: amend removal of MODULE_VERSION (Corinna Vinschen) [1969921 1955755]
- igb: amend removal of MODULE_VERSION (Corinna Vinschen) [1969919 1955748]
- locking/qrwlock: Fix ordering in queued_write_lock_slowpath() (Waiman Long) [1964419 1950110]
- scsi: qedf: Do not put host in qedf_vport_create() unconditionally (Nilesh Javali) [1974968 1899384]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.10.1.el8_4]" date="1625659200">- igbvf: amend removal of MODULE_VERSION (Corinna Vinschen) [1969920 1955752]
- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971464 1971488] {CVE-2021-32399}
- scsi: ibmvfc: Free channel_setup_buf during device tear down (Steve Best) [1964697 1938102]
- i40e: Fix parameters in aq_get_phy_register() (Stefan Assmann) [1967099 1907852]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.10.2.el8_4]" date="1626091200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975181 1975182] {CVE-2021-33909}</changelog>
</package>
<package pkgid="2c4bfb20c3f3d3a4e58f28135687a765fb22249d240616a92f8aad61d79722e9" name="kernel-debug-core" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="348.20.1.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.12.1.el8_5]" date="1641988800">- tcp: don't free a FIN sk_buff in tcp_remove_empty_skb() (Guillaume Nault) [2021574 2016210]
- kernel.spec: Add support to use vmlinux.h (Jiri Olsa) [2031053 1989087]
- spec: Add vmlinux.h to kernel-devel package (Jiri Olsa) [2031053 1989087]
- x86/mce: Avoid infinite loop for copy from user recovery (Prarit Bhargava) [2008789 1999550]
- x86/mce: Rename kill_it to kill_current_task (Prarit Bhargava) [2008789 1999550]
- x86/mce: Recover from poison found while copying from user space (Prarit Bhargava) [2008789 1999550]
- x86/mce: Delay clearing IA32_MCG_STATUS to the end of do_machine_check() (Prarit Bhargava) [2008789 1999550]
- x86/mce: Send #MC singal from task work (Prarit Bhargava) [2008789 1999550]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-348.13.1.el8_5]" date="1642507200">- vfs: Out-of-bounds write of heap buffer in fs_context.c (Frantisek Hrbata) [2040585 2040586] {CVE-2022-0185}
- xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Bruno Meneguele) [2034864 2034865] {CVE-2021-4155}
- af_unix: fix garbage collect vs MSG_PEEK (Patrick Talbert) [2031974 2031975] {CVE-2021-0920}
- cgroup: verify that source is a string (Waiman Long) [2034608 2034609] {CVE-2021-4154}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-348.14.1.el8_5]" date="1643198400">- tcp: fix page frag corruption on page fault (Paolo Abeni) [2041529 1996074]
- net: fix sk_page_frag() recursion from memory reclaim (Paolo Abeni) [2041529 1996074]
- KVM: s390: index kvm-&gt;arch.idle_mask by vcpu_idx (Thomas Huth) [2040769 2026230]
- redhat: set LC_ALL=C before sorting config content (Frantisek Hrbata)</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.15.1.el8_5]" date="1643716800">- net/mlx5: DR, Use FW API when updating FW-owned flow table (Michal Schmidt) [2042663 2042651]
- KVM: x86: Wait for IPIs to be delivered when handling Hyper-V TLB flush hypercall (Vitaly Kuznetsov) [2043237 1868572]
- drm/mgag200: Select clock in PLL update functions (Bruno Meneguele) [2034949 1953926]
- drm/i915: Fix HAS_LSPCON macro for platforms between GEN9 and GEN10 (Bruno Meneguele) [2027335 2005586]
- crypto: qat - power up 4xxx device (Vladis Dronov) [2016437 1960307]
- RDMA/core: Fix a double free in add_port error flow (Kamal Heib) [2038724 2008555]
- powerpc/iommu: Report the correct most efficient DMA mask for PCI devices (Steve Best) [2018928 2007425]
- powerpc/dma: Fix dma_map_ops::get_required_mask (Steve Best) [2018928 2007425]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.16.1.el8_5]" date="1644321600">- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047601 2047602] {CVE-2022-22942}
- net: openvswitch: Fix ct_state nat flags for conns arriving from tc (Marcelo Ricardo Leitner) [2043548 2040334]
- net: openvswitch: Fix matching zone id for invalid conns arriving from tc (Marcelo Ricardo Leitner) [2043550 2040452]
- net/sched: flow_dissector: Fix matching on zone id for invalid conns (Marcelo Ricardo Leitner) [2043550 2040452]
- net/sched: Extend qdisc control block with tc control block (Marcelo Ricardo Leitner) [2043550 2040452]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.17.1.el8_5]" date="1644926400">- vfs: check dentry is still valid in get_link() (Ian Kent) [2052558 2014846]
- xfs: don't expose internal symlink metadata buffers to the vfs (Brian Foster) [2052558 2014846]
- CI: Use appropriate zstream builder (Veronika Kabatova)
- CI: Enable baseline realtime checks (Veronika Kabatova)
- CI: Rename pipelines to include release names (Veronika Kabatova)
- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052166 2052167] {CVE-2022-0492}
- ice: Remove boolean vlan_promisc flag from function (Jonathan Toppins) [2051951 2030400]
- ceph: put the requests/sessions when it fails to alloc memory (Jeffrey Layton) [2053725 2017796]
- ceph: fix off by one bugs in unsafe_request_wait() (Jeffrey Layton) [2053725 2017796]
- ceph: flush the mdlog before waiting on unsafe reqs (Jeffrey Layton) [2053725 2017796]
- ceph: flush mdlog before umounting (Jeffrey Layton) [2053725 2017796]
- ceph: make iterate_sessions a global symbol (Jeffrey Layton) [2053725 2017796]
- ceph: make ceph_create_session_msg a global symbol (Jeffrey Layton) [2053725 2017796]
- xfs: check sb_meta_uuid for dabuf buffer recovery (Bill O'Donnell) [2049292 2020764]
- drm/i915: Flush TLBs before releasing backing store (Patrick Talbert) [2044328 2044329] {CVE-2022-0330}
- hugetlb: fix hugetlb cgroup refcounting during vma split (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: fix imbalanced css_get and css_put pair for shared mappings (Waiman Long) [2039015 2032811]
- mm/hugetlb: change hugetlb_reserve_pages() to type bool (Waiman Long) [2039015 2032811]
- hugetlb: fix an error code in hugetlb_reserve_pages() (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: fix offline of hugetlb cgroup with reservations (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: fix reservation accounting (Waiman Long) [2039015 2032811]
- mm/hugetlb: narrow the hugetlb_lock protection area during preparing huge page (Waiman Long) [2039015 2032811]
- mm/hugetlb: a page from buddy is not on any list (Waiman Long) [2039015 2032811]
- mm/hugetlb: not necessary to coalesce regions recursively (Waiman Long) [2039015 2032811]
- selftests/vm/write_to_hugetlbfs.c: fix unused variable warning (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add hugetlb_cgroup reservation tests (Waiman Long) [2039015 2032811]
- hugetlb: support file_region coalescing again (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: support noreserve mappings (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add accounting for shared mappings (Waiman Long) [2039015 2032811]
- hugetlb: disable region_add file_region coalescing (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add reservation accounting for private mappings (Waiman Long) [2039015 2032811]
- mm/hugetlb_cgroup: fix hugetlb_cgroup migration (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add interface for charge/uncharge hugetlb reservations (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add hugetlb_cgroup reservation counter (Waiman Long) [2039015 2032811]
- hugetlb: remove duplicated code (Waiman Long) [2039015 2032811]
- hugetlb: region_chg provides only cache entry (Waiman Long) [2039015 2032811]
- hugetlbfs: always use address space in inode for resv_map pointer (Waiman Long) [2039015 2032811]
- hugetlbfs: fix potential over/underflow setting node specific nr_hugepages (Waiman Long) [2039015 2032811]
- hugetlb: allow to free gigantic pages regardless of the configuration (Waiman Long) [2039015 2032811]
- powerpc/pseries: Fix update of LPAR security flavor after LPM (Steve Best) [2027448 1997294]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.18.1.el8_5]" date="1645531200">- selftests: kvm: Check whether SIDA memop fails for normal guests (Thomas Huth) [2050806 2050807] {CVE-2022-0516}
- KVM: s390: Return error on SIDA memop on normal guest (Thomas Huth) [2050806 2050807] {CVE-2022-0516}
- iommu/amd: Remove iommu_init_ga() (Jerry Snitselaar) [2030854 1998265]
- iommu/amd: Relocate GAMSup check to early_enable_iommus (Jerry Snitselaar) [2030854 1998265]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.19.1.el8_5]" date="1646049600">- tipc: improve size validations for received domain records (Xin Long) [2048970 2048971] {CVE-2022-0435}
- smb3: do not error on fsync when readonly (Ronnie Sahlberg) [2055824 2037811]
- security: implement sctp_assoc_established hook in selinux (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- security: add sctp_assoc_established hook (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- security: call security_sctp_assoc_request in sctp_sf_do_5_1D_ce (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- security: pass asoc to sctp_assoc_request and sctp_sk_clone (Bruno Meneguele) [2054112 2054117 2015525 2048251]
- net: sctp: Fix some typos (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- RDMA/bnxt_re: Fix stats counters (Selvin Xavier) [2049684 2001893]
- net: check skb sec_path when re-initializing slow_gro in gro_list_prepare (Xin Long) [2047427 2030476]
- cpufreq: intel_pstate: Add Icelake servers support in no-HWP mode (David Arcari) [2036888 2003695]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.20.1.el8_5]" date="1646740800">- lib/iov_iter: initialize "flags" in new pipe_buffer (Jan Stancek) [2060874 2060875] {CVE-2022-0847}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-348.20.1.el8.centos" date="1646913600">- Apply debranding changes</changelog>
</package>
<package pkgid="22bf45a599adf53b323225dc48bc2107801f4c78c87bb8c17cc7024967a02520" name="kernel-debug-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="ba8d3ece4e88e933a125cc35f2b1563f9e4761bc25b9c01eae6084c925fb6408" name="kernel-debug-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="193.28.1.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.20.1.el8_2]" date="1599134400">- [infiniband] IB/rdmavt: Fix RQ counting issues causing use of an invalid RWQE (Kamal Heib) [1872771 1850314]
- [block] blk-mq: Rerun dispatching in the case of budget contention (Ming Lei) [1869779 1824037]
- [block] blk-mq: Add blk_mq_delay_run_hw_queues() API call (Ming Lei) [1869779 1824037]
- [block] blk-mq: In blk_mq_dispatch_rq_list() "no budget" is a reason to kick (Ming Lei) [1869779 1824037]
- [block] blk-mq: Put driver tag in blk_mq_dispatch_rq_list() when no budget (Ming Lei) [1869779 1824037]
- [md] dm mpath: use double checked locking in fast path (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rename current_pgpath to pgpath in multipath_prepare_ioctl (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rework __map_bio() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: factor out multipath_queue_bio (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: push locking down to must_push_back_rq() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: take m-&gt;lock spinlock when testing QUEUE_IF_NO_PATH (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: changes from initial m-&gt;flags locking audit (Mike Snitzer) [1869386 1848651]
- [md] dm rq: don't call blk_mq_queue_stopped() in dm_stop_queue() (Mike Snitzer) [1869386 1848651]
- [md] dm: do not use waitqueue for request-based DM (Mike Snitzer) [1869386 1848651]
- [block] blk-mq: consider non-idle request as "inflight" in blk_mq_rq_inflight() (Mike Snitzer) [1869386 1848651]
- [kernel] sched/deadline: Initialize -&gt;dl_boosted (Phil Auld) [1867612 1854179]
- [kernel] sched/core: Fix PI boosting between RT and DEADLINE tasks (Phil Auld) [1867612 1854179]
- [net] net/smc: tolerate future SMCD versions (Philipp Rudo) [1866390 1854992]
- [net] openvswitch: fixes potential deadlock in dp cleanup code (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: reorder masks array based on usage (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: take into account de-fragmentation/gso_size in execute_check_pkt_len (Lorenzo Bianconi) [1860169 1851888]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.21.1.el8_2]" date="1599739200">- [scsi] scsi: ibmvfc: Fix NULL return compiler warning (Steve Best) [1866371 1810653]
- [scsi] scsi: ibmvfc: Avoid loss of all paths during SVC node reboot (Steve Best) [1866371 1810653]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.22.1.el8_2]" date="1600257600">- [crypto] pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1877530 1862072]
- [crypto] Revert "pefile: Tolerate other pefile signatures after first" (Bruno Meneguele)
- [infiniband] IB/hfi1: Fix another case where pq is left on waitlist (Kamal Heib) [1872766 1859209]
- [infiniband] IB/hfi1: Ensure pq is not left on waitlist (Kamal Heib) [1872766 1859209]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.23.1.el8_2]" date="1600344000">- [net] packet: fix overflow in tpacket_rcv (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}
- [net] packet: make tp_drops atomic (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.24.1.el8_2]" date="1600862400">- [kernel] timers: Remove must_forward_clk (Phil Auld) [1877417 1833096]
- [kernel] timers: Spare timer softirq until next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Expand clk forward logic beyond nohz (Phil Auld) [1877417 1833096]
- [kernel] timers: Reuse next expiry cache after nohz exit (Phil Auld) [1877417 1833096]
- [kernel] timers: Always keep track of next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Optimize _next_timer_interrupt() level iteration (Phil Auld) [1877417 1833096]
- [kernel] timers: Add comments about calc_index() ceiling work (Phil Auld) [1877417 1833096]
- [kernel] timers: Move trigger_dyntick_cpu() to enqueue_timer() (Phil Auld) [1877417 1833096]
- [kernel] timers: Use only bucket expiry for base-&gt;next_expiry value (Phil Auld) [1877417 1833096]
- [kernel] timers: Preserve higher bits of expiration on index calculation (Phil Auld) [1877417 1833096]
- [kernel] timer: Fix wheel index calculation on last level (Phil Auld) [1877417 1833096]
- [kernel] timer: Prevent base-&gt;clk from moving backward (Phil Auld) [1877417 1833096]
- [kernel] timer: Read jiffies once when forwarding base clk (Phil Auld) [1877417 1833096]
- [infiniband] RDMA/umem: Fix ib_umem_find_best_pgsz() (Kamal Heib) [1872424 1856158]
- [net] net: accept an empty mask in /sys/class/net/*/queues/rx-*/rps_cpus (Nitesh Narayan Lal) [1870181 1868433]
- [net] net: Restrict receive packets queuing to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [pci] PCI: Restrict probe functions to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [lib] lib: Restrict cpumask_local_spread to houskeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [s390] s390/pci: Fix unexpected write combine on resource (Philipp Rudo) [1869276 1827311]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.25.1.el8_2]" date="1601553600">- [net] netfilter: conntrack: proc: rename stat column (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: add clash resolution stat counter (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: remove ignore stats (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not increment two error counters at same time (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not auto-delete clash entries on reply (Florian Westphal) [1882095 1875681]
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1881085 1875316] {CVE-2020-14385}
- [kernel] time/tick-broadcast: Fix tick_broadcast_offline() lockdep complaint (Alexey Klimov) [1880081 1877380]
- [net] atomics/treewide: Rename __atomic_add_unless() =&gt; atomic_fetch_add_unless() (Yauheni Kaliuta) [1880081 1813370]
- [kernel] timers: Lower base clock forwarding threshold (Phil Auld) [1877417 1833096]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.26.1.el8_2]" date="1602158400">- [firmware] efi: don't reserve MOK config table memory region (Kairui Song) [1879988 1878584]
- [security] integrity: Load certs from the EFI MOK config table (Lenny Szubowicz) [1877528 1868306]
- [security] integrity: Move import of MokListRT certs to a separate routine (Lenny Szubowicz) [1877528 1868306]
- [firmware] efi: Support for MOK variable config table (Lenny Szubowicz) [1877528 1868306]
- [security] efi: Only print errors about failing to get certs if EFI vars are found (Lenny Szubowicz) [1877528 1804969]
- [fs] ceph: fix inode number handling on arches with 32-bit ino_t (Jeff Layton) [1875787 1866018]
- [fs] ceph: handle zero-length feature mask in session messages (Jeff Layton) [1875787 1866018]
- [fs] ceph: fix endianness bug when handling MDS session feature bits (Jeff Layton) [1875787 1866018]
- [netdrv] net/mlx5e: Fix missing cleanup of ethtool steering during rep rx cleanup (Alaa Hleihel) [1857777 1856660]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.27.1.el8_2]" date="1602763200">- [powerpc] powerpc/pseries: Do not initiate shutdown when system is running on UPS (Diego Domingos) [1882243 1870477]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859471 1859472] {CVE-2020-14331}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.28.1.el8_2]" date="1602849600">- [net] Bluetooth: L2CAP: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888256 1888258] {CVE-2020-12351}
- [net] Bluetooth: A2MP: Fix not initializing all members (Gopal Tiwari) [1888906 1888807] {CVE-2020-12352}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-193.28.1.el8.centos" date="1603195200">- Apply debranding changes</changelog>
</package>
<package pkgid="19f8d0b1d5dc7d78a95e4c4f6750b2e88b2fc264cfb2b3157e9fd2a56a4418b2" name="kernel-debug-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="305.10.2.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.2.1.el8_4]" date="1620648000">- net/mlx5e: Allow to match on MPLS parameters only for MPLS over UDP (Alaa Hleihel) [1952061 1936742]
- net/mlx5e: Reject tc rules which redirect from a VF to itself (Alaa Hleihel) [1952065 1932839]
- net/mlx5: CT: Add support for matching on ct_state inv and rel flags (Alaa Hleihel) [1952062 1942681]
- KVM: VMX: Don't use vcpu-&gt;run-&gt;internal.ndata as an array index (Jon Maloy) [1954221 1954219]
- tools/power turbostat: Revert "[tools] tools/power turbostat: Enable accumulate RAPL display" (Prarit Bhargava) [1952987 1944699]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.3.1.el8_4]" date="1621252800">- Revert "uio: use request_threaded_irq instead" (Vitaly Kuznetsov) [1952952 1946644]
- drm/ast: Set format registers in primary plane's update (Lyude Paul) [1952900 1923857]
- net/sched: act_ct: clear post_ct if doing ct_clear (Marcelo Ricardo Leitner) [1956458 1941889]
- md/raid1: properly indicate failure when ending a failed write request (Nigel Croxon) [1955188 1954588]
- nitro_enclaves: Fix stale file descriptors on failed usercopy (Vitaly Kuznetsov) [1956379 1953717]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.4.1.el8_4]" date="1621944000">- vmxnet3: Set the default of vxlan overlay offload to disabled (Cathy Avery) [1960702 1941714]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.5.1.el8_4]" date="1622548800">- gfs2: report "already frozen/thawed" errors (Bob Peterson) [1961849 1932236]
- gfs2: move freeze glock outside the make_fs_rw and _ro functions (Bob Peterson) [1961849 1932236]
- gfs2: Add common helper for holding and releasing the freeze glock (Bob Peterson) [1961849 1932236]
- gfs2: in signal_our_withdraw wait for unfreeze of _this_ fs only (Bob Peterson) [1961849 1932236]
- gfs2: Don't freeze the file system during unmount (Bob Peterson) [1961849 1932236]
- gfs2: Fix regression in freeze_go_sync (Bob Peterson) [1961849 1932236]
- gfs2: The freeze glock should never be frozen (Bob Peterson) [1961849 1932236]
- gfs2: When freezing gfs2, use GL_EXACT and not GL_NOCACHE (Bob Peterson) [1961849 1932236]
- gfs2: read-only mounts should grab the sd_freeze_gl glock (Bob Peterson) [1961849 1932236]
- gfs2: freeze should work on read-only mounts (Bob Peterson) [1961849 1932236]
- gfs2: Abort gfs2_freeze if io error is seen (Bob Peterson) [1961849 1932236]
- CI: Disable result checking for realtime check (Veronika Kabatova)
- CI: Explicitly disable result checking for private CI (Veronika Kabatova)
- CI: Rename variable (Veronika Kabatova)
- CI: Update builder containers (Veronika Kabatova)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.6.1.el8_4]" date="1623067200">- openvswitch: fix stack OOB read while fragmenting IPv4 packets (Davide Caratti) [1963940 1924608]
- net/sched: sch_frag: fix stack OOB read while fragmenting IPv4 packets (Davide Caratti) [1963940 1924608]
- net/sched: act_ct: fix wild memory access when clearing fragments (Davide Caratti) [1963940 1924608]
- net: Treat __napi_schedule_irqoff() as __napi_schedule() on PREEMPT_RT (Ivan Vecera)
- redhat/configs: Add CONFIG_SYSTEM_REVOCATION_KEYS and CONFIG_SYSTEM_REVOCATION_LIST (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: add 'x509_revocation_list' to gitignore (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- integrity: Load mokx variables into the blacklist keyring (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Add ability to preload revocation certs (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Move load_system_certificate_list to a common function (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Add EFI_CERT_X509_GUID support for dbx entries (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- net/sched: cls_api: increase max_reclassify_loop (Davide Caratti) [1965148 1955136]
- dm writecache: fix performance degradation in ssd mode (Mike Snitzer) [1962241 1961859]
- scsi: fnic: Use scsi_host_busy_iter() to traverse commands (Ewan D. Milne) [1961705 1949250]
- scsi: fnic: Kill 'exclude_id' argument to fnic_cleanup_io() (Ewan D. Milne) [1961705 1949250]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.7.1.el8_4]" date="1623672000">- net: zero-initialize tc skb extension on allocation (Ivan Vecera) [1965457 1946986]
- net/sched: cls_flower: fix only mask bit check in the validate_ct_state (Ivan Vecera) [1965457 1946986]
- net: cls_api: Fix uninitialised struct field bo-&gt;unlocked_driver_cb (Ivan Vecera) [1965457 1946986]
- net/sched: act_api: fix miss set post_ct for ovs after do conntrack in act_ct (Ivan Vecera) [1965457 1946986]
- net/sched: cls_flower: validate ct_state for invalid and reply flags (Ivan Vecera) [1965457 1946986]
- flow_dissector: fix TTL and TOS dissection on IPv4 fragments (Paolo Abeni) [1963952 1950288]
- Revert "sctp: Fix SHUTDOWN CTSN Ack in the peer restart case" (Xin Long) [1965632 1953839]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [1965632 1953839]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [1965632 1953839]
- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962544 1962546] {CVE-2021-33034}
- x86/kvm: Unify kvm_pv_guest_cpu_reboot() with kvm_guest_cpu_offline() (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Disable all PV features on crash (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Disable kvmclock on all CPUs on shutdown (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Teardown PV features on boot CPU as well (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Fix pr_info() for async PF setup/teardown (Lenny Szubowicz) [1964930 1934273]
- net/sched: act_ct: Fix ct template allocation for zone 0 (Marcelo Ricardo Leitner) [1965150 1881824]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.8.1.el8_4]" date="1624363200">- iavf: amend removal of MODULE_VERSION (Stefan Assmann) [1969925 1955738]
- ixgbe: Amend commit acf03026ec5a to include a version string in module info. (Ken Cox) [1969922 1955759]
- i40e: amend removal of MODULE_VERSION (Stefan Assmann) [1969923 1955736]
- redhat/configs: Add CONFIG_PINCTRL_EMMITSBURG (David Arcari) [1963984 1959506]
- redhat/configs: Remove CONFIG_EMMITSBURG (David Arcari) [1963984 1959506]
- netlink: add tracepoint at NL_SET_ERR_MSG (Marcelo Ricardo Leitner) [1972938 1956983]
- Revert "[netdrv] net/intel: remove driver versions from Intel drivers" (Jonathan Toppins) [1969917 1955745]
- Amends commit ea6244cc248b to include a version string in module info. (Ken Cox) [1969915 1955726]
- Revert "[netdrv] net/broadcom: Clean broadcom code from driver versions" (Jonathan Toppins) [1969914 1955721]
- ena: revert removal of MODULE_VERSION from ena (Petr Oros) [1969913 1955712]
- fm10k: amend removal of MODULE_VERSION (Vladis Dronov) [1969910 1955730]
- net/sched: act_ct: Offload connections with commit action (Marcelo Ricardo Leitner) [1968679 1965817]
- netfilter: flowtable: Remove redundant hw refresh bit (Marcelo Ricardo Leitner) [1968679 1965817]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.9.1.el8_4]" date="1624881600">- ixgbevf: Amend commit acf03026ec5a to include a version in module info. (Ken Cox) [1969911 1955764]
- CI: Merge configuration (Veronika Kabatova)
- igc: amend removal of MODULE_VERSION (Corinna Vinschen) [1969921 1955755]
- igb: amend removal of MODULE_VERSION (Corinna Vinschen) [1969919 1955748]
- locking/qrwlock: Fix ordering in queued_write_lock_slowpath() (Waiman Long) [1964419 1950110]
- scsi: qedf: Do not put host in qedf_vport_create() unconditionally (Nilesh Javali) [1974968 1899384]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.10.1.el8_4]" date="1625659200">- igbvf: amend removal of MODULE_VERSION (Corinna Vinschen) [1969920 1955752]
- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971464 1971488] {CVE-2021-32399}
- scsi: ibmvfc: Free channel_setup_buf during device tear down (Steve Best) [1964697 1938102]
- i40e: Fix parameters in aq_get_phy_register() (Stefan Assmann) [1967099 1907852]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.10.2.el8_4]" date="1626091200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975181 1975182] {CVE-2021-33909}</changelog>
</package>
<package pkgid="2165d33a9f336502518a15a5fdc69dddc837c765aebd510ee46775b331fbca4b" name="kernel-debug-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="348.20.1.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.12.1.el8_5]" date="1641988800">- tcp: don't free a FIN sk_buff in tcp_remove_empty_skb() (Guillaume Nault) [2021574 2016210]
- kernel.spec: Add support to use vmlinux.h (Jiri Olsa) [2031053 1989087]
- spec: Add vmlinux.h to kernel-devel package (Jiri Olsa) [2031053 1989087]
- x86/mce: Avoid infinite loop for copy from user recovery (Prarit Bhargava) [2008789 1999550]
- x86/mce: Rename kill_it to kill_current_task (Prarit Bhargava) [2008789 1999550]
- x86/mce: Recover from poison found while copying from user space (Prarit Bhargava) [2008789 1999550]
- x86/mce: Delay clearing IA32_MCG_STATUS to the end of do_machine_check() (Prarit Bhargava) [2008789 1999550]
- x86/mce: Send #MC singal from task work (Prarit Bhargava) [2008789 1999550]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-348.13.1.el8_5]" date="1642507200">- vfs: Out-of-bounds write of heap buffer in fs_context.c (Frantisek Hrbata) [2040585 2040586] {CVE-2022-0185}
- xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Bruno Meneguele) [2034864 2034865] {CVE-2021-4155}
- af_unix: fix garbage collect vs MSG_PEEK (Patrick Talbert) [2031974 2031975] {CVE-2021-0920}
- cgroup: verify that source is a string (Waiman Long) [2034608 2034609] {CVE-2021-4154}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-348.14.1.el8_5]" date="1643198400">- tcp: fix page frag corruption on page fault (Paolo Abeni) [2041529 1996074]
- net: fix sk_page_frag() recursion from memory reclaim (Paolo Abeni) [2041529 1996074]
- KVM: s390: index kvm-&gt;arch.idle_mask by vcpu_idx (Thomas Huth) [2040769 2026230]
- redhat: set LC_ALL=C before sorting config content (Frantisek Hrbata)</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.15.1.el8_5]" date="1643716800">- net/mlx5: DR, Use FW API when updating FW-owned flow table (Michal Schmidt) [2042663 2042651]
- KVM: x86: Wait for IPIs to be delivered when handling Hyper-V TLB flush hypercall (Vitaly Kuznetsov) [2043237 1868572]
- drm/mgag200: Select clock in PLL update functions (Bruno Meneguele) [2034949 1953926]
- drm/i915: Fix HAS_LSPCON macro for platforms between GEN9 and GEN10 (Bruno Meneguele) [2027335 2005586]
- crypto: qat - power up 4xxx device (Vladis Dronov) [2016437 1960307]
- RDMA/core: Fix a double free in add_port error flow (Kamal Heib) [2038724 2008555]
- powerpc/iommu: Report the correct most efficient DMA mask for PCI devices (Steve Best) [2018928 2007425]
- powerpc/dma: Fix dma_map_ops::get_required_mask (Steve Best) [2018928 2007425]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.16.1.el8_5]" date="1644321600">- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047601 2047602] {CVE-2022-22942}
- net: openvswitch: Fix ct_state nat flags for conns arriving from tc (Marcelo Ricardo Leitner) [2043548 2040334]
- net: openvswitch: Fix matching zone id for invalid conns arriving from tc (Marcelo Ricardo Leitner) [2043550 2040452]
- net/sched: flow_dissector: Fix matching on zone id for invalid conns (Marcelo Ricardo Leitner) [2043550 2040452]
- net/sched: Extend qdisc control block with tc control block (Marcelo Ricardo Leitner) [2043550 2040452]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.17.1.el8_5]" date="1644926400">- vfs: check dentry is still valid in get_link() (Ian Kent) [2052558 2014846]
- xfs: don't expose internal symlink metadata buffers to the vfs (Brian Foster) [2052558 2014846]
- CI: Use appropriate zstream builder (Veronika Kabatova)
- CI: Enable baseline realtime checks (Veronika Kabatova)
- CI: Rename pipelines to include release names (Veronika Kabatova)
- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052166 2052167] {CVE-2022-0492}
- ice: Remove boolean vlan_promisc flag from function (Jonathan Toppins) [2051951 2030400]
- ceph: put the requests/sessions when it fails to alloc memory (Jeffrey Layton) [2053725 2017796]
- ceph: fix off by one bugs in unsafe_request_wait() (Jeffrey Layton) [2053725 2017796]
- ceph: flush the mdlog before waiting on unsafe reqs (Jeffrey Layton) [2053725 2017796]
- ceph: flush mdlog before umounting (Jeffrey Layton) [2053725 2017796]
- ceph: make iterate_sessions a global symbol (Jeffrey Layton) [2053725 2017796]
- ceph: make ceph_create_session_msg a global symbol (Jeffrey Layton) [2053725 2017796]
- xfs: check sb_meta_uuid for dabuf buffer recovery (Bill O'Donnell) [2049292 2020764]
- drm/i915: Flush TLBs before releasing backing store (Patrick Talbert) [2044328 2044329] {CVE-2022-0330}
- hugetlb: fix hugetlb cgroup refcounting during vma split (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: fix imbalanced css_get and css_put pair for shared mappings (Waiman Long) [2039015 2032811]
- mm/hugetlb: change hugetlb_reserve_pages() to type bool (Waiman Long) [2039015 2032811]
- hugetlb: fix an error code in hugetlb_reserve_pages() (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: fix offline of hugetlb cgroup with reservations (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: fix reservation accounting (Waiman Long) [2039015 2032811]
- mm/hugetlb: narrow the hugetlb_lock protection area during preparing huge page (Waiman Long) [2039015 2032811]
- mm/hugetlb: a page from buddy is not on any list (Waiman Long) [2039015 2032811]
- mm/hugetlb: not necessary to coalesce regions recursively (Waiman Long) [2039015 2032811]
- selftests/vm/write_to_hugetlbfs.c: fix unused variable warning (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add hugetlb_cgroup reservation tests (Waiman Long) [2039015 2032811]
- hugetlb: support file_region coalescing again (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: support noreserve mappings (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add accounting for shared mappings (Waiman Long) [2039015 2032811]
- hugetlb: disable region_add file_region coalescing (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add reservation accounting for private mappings (Waiman Long) [2039015 2032811]
- mm/hugetlb_cgroup: fix hugetlb_cgroup migration (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add interface for charge/uncharge hugetlb reservations (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add hugetlb_cgroup reservation counter (Waiman Long) [2039015 2032811]
- hugetlb: remove duplicated code (Waiman Long) [2039015 2032811]
- hugetlb: region_chg provides only cache entry (Waiman Long) [2039015 2032811]
- hugetlbfs: always use address space in inode for resv_map pointer (Waiman Long) [2039015 2032811]
- hugetlbfs: fix potential over/underflow setting node specific nr_hugepages (Waiman Long) [2039015 2032811]
- hugetlb: allow to free gigantic pages regardless of the configuration (Waiman Long) [2039015 2032811]
- powerpc/pseries: Fix update of LPAR security flavor after LPM (Steve Best) [2027448 1997294]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.18.1.el8_5]" date="1645531200">- selftests: kvm: Check whether SIDA memop fails for normal guests (Thomas Huth) [2050806 2050807] {CVE-2022-0516}
- KVM: s390: Return error on SIDA memop on normal guest (Thomas Huth) [2050806 2050807] {CVE-2022-0516}
- iommu/amd: Remove iommu_init_ga() (Jerry Snitselaar) [2030854 1998265]
- iommu/amd: Relocate GAMSup check to early_enable_iommus (Jerry Snitselaar) [2030854 1998265]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.19.1.el8_5]" date="1646049600">- tipc: improve size validations for received domain records (Xin Long) [2048970 2048971] {CVE-2022-0435}
- smb3: do not error on fsync when readonly (Ronnie Sahlberg) [2055824 2037811]
- security: implement sctp_assoc_established hook in selinux (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- security: add sctp_assoc_established hook (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- security: call security_sctp_assoc_request in sctp_sf_do_5_1D_ce (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- security: pass asoc to sctp_assoc_request and sctp_sk_clone (Bruno Meneguele) [2054112 2054117 2015525 2048251]
- net: sctp: Fix some typos (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- RDMA/bnxt_re: Fix stats counters (Selvin Xavier) [2049684 2001893]
- net: check skb sec_path when re-initializing slow_gro in gro_list_prepare (Xin Long) [2047427 2030476]
- cpufreq: intel_pstate: Add Icelake servers support in no-HWP mode (David Arcari) [2036888 2003695]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.20.1.el8_5]" date="1646740800">- lib/iov_iter: initialize "flags" in new pipe_buffer (Jan Stancek) [2060874 2060875] {CVE-2022-0847}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-348.20.1.el8.centos" date="1646913600">- Apply debranding changes</changelog>
</package>
<package pkgid="b891e9233f0285838d1e2715de52c11c12baf1743b02682300725d1502cf9496" name="kernel-debug-devel" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="6272c845cbffb723fe18487954b8aaf73eb0011e1dd5aa70c62c8bdfdc3238d4" name="kernel-debug-devel" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="193.28.1.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.20.1.el8_2]" date="1599134400">- [infiniband] IB/rdmavt: Fix RQ counting issues causing use of an invalid RWQE (Kamal Heib) [1872771 1850314]
- [block] blk-mq: Rerun dispatching in the case of budget contention (Ming Lei) [1869779 1824037]
- [block] blk-mq: Add blk_mq_delay_run_hw_queues() API call (Ming Lei) [1869779 1824037]
- [block] blk-mq: In blk_mq_dispatch_rq_list() "no budget" is a reason to kick (Ming Lei) [1869779 1824037]
- [block] blk-mq: Put driver tag in blk_mq_dispatch_rq_list() when no budget (Ming Lei) [1869779 1824037]
- [md] dm mpath: use double checked locking in fast path (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rename current_pgpath to pgpath in multipath_prepare_ioctl (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rework __map_bio() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: factor out multipath_queue_bio (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: push locking down to must_push_back_rq() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: take m-&gt;lock spinlock when testing QUEUE_IF_NO_PATH (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: changes from initial m-&gt;flags locking audit (Mike Snitzer) [1869386 1848651]
- [md] dm rq: don't call blk_mq_queue_stopped() in dm_stop_queue() (Mike Snitzer) [1869386 1848651]
- [md] dm: do not use waitqueue for request-based DM (Mike Snitzer) [1869386 1848651]
- [block] blk-mq: consider non-idle request as "inflight" in blk_mq_rq_inflight() (Mike Snitzer) [1869386 1848651]
- [kernel] sched/deadline: Initialize -&gt;dl_boosted (Phil Auld) [1867612 1854179]
- [kernel] sched/core: Fix PI boosting between RT and DEADLINE tasks (Phil Auld) [1867612 1854179]
- [net] net/smc: tolerate future SMCD versions (Philipp Rudo) [1866390 1854992]
- [net] openvswitch: fixes potential deadlock in dp cleanup code (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: reorder masks array based on usage (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: take into account de-fragmentation/gso_size in execute_check_pkt_len (Lorenzo Bianconi) [1860169 1851888]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.21.1.el8_2]" date="1599739200">- [scsi] scsi: ibmvfc: Fix NULL return compiler warning (Steve Best) [1866371 1810653]
- [scsi] scsi: ibmvfc: Avoid loss of all paths during SVC node reboot (Steve Best) [1866371 1810653]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.22.1.el8_2]" date="1600257600">- [crypto] pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1877530 1862072]
- [crypto] Revert "pefile: Tolerate other pefile signatures after first" (Bruno Meneguele)
- [infiniband] IB/hfi1: Fix another case where pq is left on waitlist (Kamal Heib) [1872766 1859209]
- [infiniband] IB/hfi1: Ensure pq is not left on waitlist (Kamal Heib) [1872766 1859209]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.23.1.el8_2]" date="1600344000">- [net] packet: fix overflow in tpacket_rcv (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}
- [net] packet: make tp_drops atomic (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.24.1.el8_2]" date="1600862400">- [kernel] timers: Remove must_forward_clk (Phil Auld) [1877417 1833096]
- [kernel] timers: Spare timer softirq until next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Expand clk forward logic beyond nohz (Phil Auld) [1877417 1833096]
- [kernel] timers: Reuse next expiry cache after nohz exit (Phil Auld) [1877417 1833096]
- [kernel] timers: Always keep track of next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Optimize _next_timer_interrupt() level iteration (Phil Auld) [1877417 1833096]
- [kernel] timers: Add comments about calc_index() ceiling work (Phil Auld) [1877417 1833096]
- [kernel] timers: Move trigger_dyntick_cpu() to enqueue_timer() (Phil Auld) [1877417 1833096]
- [kernel] timers: Use only bucket expiry for base-&gt;next_expiry value (Phil Auld) [1877417 1833096]
- [kernel] timers: Preserve higher bits of expiration on index calculation (Phil Auld) [1877417 1833096]
- [kernel] timer: Fix wheel index calculation on last level (Phil Auld) [1877417 1833096]
- [kernel] timer: Prevent base-&gt;clk from moving backward (Phil Auld) [1877417 1833096]
- [kernel] timer: Read jiffies once when forwarding base clk (Phil Auld) [1877417 1833096]
- [infiniband] RDMA/umem: Fix ib_umem_find_best_pgsz() (Kamal Heib) [1872424 1856158]
- [net] net: accept an empty mask in /sys/class/net/*/queues/rx-*/rps_cpus (Nitesh Narayan Lal) [1870181 1868433]
- [net] net: Restrict receive packets queuing to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [pci] PCI: Restrict probe functions to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [lib] lib: Restrict cpumask_local_spread to houskeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [s390] s390/pci: Fix unexpected write combine on resource (Philipp Rudo) [1869276 1827311]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.25.1.el8_2]" date="1601553600">- [net] netfilter: conntrack: proc: rename stat column (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: add clash resolution stat counter (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: remove ignore stats (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not increment two error counters at same time (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not auto-delete clash entries on reply (Florian Westphal) [1882095 1875681]
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1881085 1875316] {CVE-2020-14385}
- [kernel] time/tick-broadcast: Fix tick_broadcast_offline() lockdep complaint (Alexey Klimov) [1880081 1877380]
- [net] atomics/treewide: Rename __atomic_add_unless() =&gt; atomic_fetch_add_unless() (Yauheni Kaliuta) [1880081 1813370]
- [kernel] timers: Lower base clock forwarding threshold (Phil Auld) [1877417 1833096]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.26.1.el8_2]" date="1602158400">- [firmware] efi: don't reserve MOK config table memory region (Kairui Song) [1879988 1878584]
- [security] integrity: Load certs from the EFI MOK config table (Lenny Szubowicz) [1877528 1868306]
- [security] integrity: Move import of MokListRT certs to a separate routine (Lenny Szubowicz) [1877528 1868306]
- [firmware] efi: Support for MOK variable config table (Lenny Szubowicz) [1877528 1868306]
- [security] efi: Only print errors about failing to get certs if EFI vars are found (Lenny Szubowicz) [1877528 1804969]
- [fs] ceph: fix inode number handling on arches with 32-bit ino_t (Jeff Layton) [1875787 1866018]
- [fs] ceph: handle zero-length feature mask in session messages (Jeff Layton) [1875787 1866018]
- [fs] ceph: fix endianness bug when handling MDS session feature bits (Jeff Layton) [1875787 1866018]
- [netdrv] net/mlx5e: Fix missing cleanup of ethtool steering during rep rx cleanup (Alaa Hleihel) [1857777 1856660]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.27.1.el8_2]" date="1602763200">- [powerpc] powerpc/pseries: Do not initiate shutdown when system is running on UPS (Diego Domingos) [1882243 1870477]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859471 1859472] {CVE-2020-14331}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.28.1.el8_2]" date="1602849600">- [net] Bluetooth: L2CAP: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888256 1888258] {CVE-2020-12351}
- [net] Bluetooth: A2MP: Fix not initializing all members (Gopal Tiwari) [1888906 1888807] {CVE-2020-12352}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-193.28.1.el8.centos" date="1603195200">- Apply debranding changes</changelog>
</package>
<package pkgid="bda6096a434d93df9832dcd2ab6b40f34e455ca47f9a9f5514bc0194d57152f5" name="kernel-debug-devel" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="305.10.2.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.2.1.el8_4]" date="1620648000">- net/mlx5e: Allow to match on MPLS parameters only for MPLS over UDP (Alaa Hleihel) [1952061 1936742]
- net/mlx5e: Reject tc rules which redirect from a VF to itself (Alaa Hleihel) [1952065 1932839]
- net/mlx5: CT: Add support for matching on ct_state inv and rel flags (Alaa Hleihel) [1952062 1942681]
- KVM: VMX: Don't use vcpu-&gt;run-&gt;internal.ndata as an array index (Jon Maloy) [1954221 1954219]
- tools/power turbostat: Revert "[tools] tools/power turbostat: Enable accumulate RAPL display" (Prarit Bhargava) [1952987 1944699]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.3.1.el8_4]" date="1621252800">- Revert "uio: use request_threaded_irq instead" (Vitaly Kuznetsov) [1952952 1946644]
- drm/ast: Set format registers in primary plane's update (Lyude Paul) [1952900 1923857]
- net/sched: act_ct: clear post_ct if doing ct_clear (Marcelo Ricardo Leitner) [1956458 1941889]
- md/raid1: properly indicate failure when ending a failed write request (Nigel Croxon) [1955188 1954588]
- nitro_enclaves: Fix stale file descriptors on failed usercopy (Vitaly Kuznetsov) [1956379 1953717]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.4.1.el8_4]" date="1621944000">- vmxnet3: Set the default of vxlan overlay offload to disabled (Cathy Avery) [1960702 1941714]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.5.1.el8_4]" date="1622548800">- gfs2: report "already frozen/thawed" errors (Bob Peterson) [1961849 1932236]
- gfs2: move freeze glock outside the make_fs_rw and _ro functions (Bob Peterson) [1961849 1932236]
- gfs2: Add common helper for holding and releasing the freeze glock (Bob Peterson) [1961849 1932236]
- gfs2: in signal_our_withdraw wait for unfreeze of _this_ fs only (Bob Peterson) [1961849 1932236]
- gfs2: Don't freeze the file system during unmount (Bob Peterson) [1961849 1932236]
- gfs2: Fix regression in freeze_go_sync (Bob Peterson) [1961849 1932236]
- gfs2: The freeze glock should never be frozen (Bob Peterson) [1961849 1932236]
- gfs2: When freezing gfs2, use GL_EXACT and not GL_NOCACHE (Bob Peterson) [1961849 1932236]
- gfs2: read-only mounts should grab the sd_freeze_gl glock (Bob Peterson) [1961849 1932236]
- gfs2: freeze should work on read-only mounts (Bob Peterson) [1961849 1932236]
- gfs2: Abort gfs2_freeze if io error is seen (Bob Peterson) [1961849 1932236]
- CI: Disable result checking for realtime check (Veronika Kabatova)
- CI: Explicitly disable result checking for private CI (Veronika Kabatova)
- CI: Rename variable (Veronika Kabatova)
- CI: Update builder containers (Veronika Kabatova)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.6.1.el8_4]" date="1623067200">- openvswitch: fix stack OOB read while fragmenting IPv4 packets (Davide Caratti) [1963940 1924608]
- net/sched: sch_frag: fix stack OOB read while fragmenting IPv4 packets (Davide Caratti) [1963940 1924608]
- net/sched: act_ct: fix wild memory access when clearing fragments (Davide Caratti) [1963940 1924608]
- net: Treat __napi_schedule_irqoff() as __napi_schedule() on PREEMPT_RT (Ivan Vecera)
- redhat/configs: Add CONFIG_SYSTEM_REVOCATION_KEYS and CONFIG_SYSTEM_REVOCATION_LIST (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: add 'x509_revocation_list' to gitignore (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- integrity: Load mokx variables into the blacklist keyring (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Add ability to preload revocation certs (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Move load_system_certificate_list to a common function (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Add EFI_CERT_X509_GUID support for dbx entries (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- net/sched: cls_api: increase max_reclassify_loop (Davide Caratti) [1965148 1955136]
- dm writecache: fix performance degradation in ssd mode (Mike Snitzer) [1962241 1961859]
- scsi: fnic: Use scsi_host_busy_iter() to traverse commands (Ewan D. Milne) [1961705 1949250]
- scsi: fnic: Kill 'exclude_id' argument to fnic_cleanup_io() (Ewan D. Milne) [1961705 1949250]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.7.1.el8_4]" date="1623672000">- net: zero-initialize tc skb extension on allocation (Ivan Vecera) [1965457 1946986]
- net/sched: cls_flower: fix only mask bit check in the validate_ct_state (Ivan Vecera) [1965457 1946986]
- net: cls_api: Fix uninitialised struct field bo-&gt;unlocked_driver_cb (Ivan Vecera) [1965457 1946986]
- net/sched: act_api: fix miss set post_ct for ovs after do conntrack in act_ct (Ivan Vecera) [1965457 1946986]
- net/sched: cls_flower: validate ct_state for invalid and reply flags (Ivan Vecera) [1965457 1946986]
- flow_dissector: fix TTL and TOS dissection on IPv4 fragments (Paolo Abeni) [1963952 1950288]
- Revert "sctp: Fix SHUTDOWN CTSN Ack in the peer restart case" (Xin Long) [1965632 1953839]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [1965632 1953839]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [1965632 1953839]
- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962544 1962546] {CVE-2021-33034}
- x86/kvm: Unify kvm_pv_guest_cpu_reboot() with kvm_guest_cpu_offline() (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Disable all PV features on crash (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Disable kvmclock on all CPUs on shutdown (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Teardown PV features on boot CPU as well (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Fix pr_info() for async PF setup/teardown (Lenny Szubowicz) [1964930 1934273]
- net/sched: act_ct: Fix ct template allocation for zone 0 (Marcelo Ricardo Leitner) [1965150 1881824]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.8.1.el8_4]" date="1624363200">- iavf: amend removal of MODULE_VERSION (Stefan Assmann) [1969925 1955738]
- ixgbe: Amend commit acf03026ec5a to include a version string in module info. (Ken Cox) [1969922 1955759]
- i40e: amend removal of MODULE_VERSION (Stefan Assmann) [1969923 1955736]
- redhat/configs: Add CONFIG_PINCTRL_EMMITSBURG (David Arcari) [1963984 1959506]
- redhat/configs: Remove CONFIG_EMMITSBURG (David Arcari) [1963984 1959506]
- netlink: add tracepoint at NL_SET_ERR_MSG (Marcelo Ricardo Leitner) [1972938 1956983]
- Revert "[netdrv] net/intel: remove driver versions from Intel drivers" (Jonathan Toppins) [1969917 1955745]
- Amends commit ea6244cc248b to include a version string in module info. (Ken Cox) [1969915 1955726]
- Revert "[netdrv] net/broadcom: Clean broadcom code from driver versions" (Jonathan Toppins) [1969914 1955721]
- ena: revert removal of MODULE_VERSION from ena (Petr Oros) [1969913 1955712]
- fm10k: amend removal of MODULE_VERSION (Vladis Dronov) [1969910 1955730]
- net/sched: act_ct: Offload connections with commit action (Marcelo Ricardo Leitner) [1968679 1965817]
- netfilter: flowtable: Remove redundant hw refresh bit (Marcelo Ricardo Leitner) [1968679 1965817]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.9.1.el8_4]" date="1624881600">- ixgbevf: Amend commit acf03026ec5a to include a version in module info. (Ken Cox) [1969911 1955764]
- CI: Merge configuration (Veronika Kabatova)
- igc: amend removal of MODULE_VERSION (Corinna Vinschen) [1969921 1955755]
- igb: amend removal of MODULE_VERSION (Corinna Vinschen) [1969919 1955748]
- locking/qrwlock: Fix ordering in queued_write_lock_slowpath() (Waiman Long) [1964419 1950110]
- scsi: qedf: Do not put host in qedf_vport_create() unconditionally (Nilesh Javali) [1974968 1899384]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.10.1.el8_4]" date="1625659200">- igbvf: amend removal of MODULE_VERSION (Corinna Vinschen) [1969920 1955752]
- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971464 1971488] {CVE-2021-32399}
- scsi: ibmvfc: Free channel_setup_buf during device tear down (Steve Best) [1964697 1938102]
- i40e: Fix parameters in aq_get_phy_register() (Stefan Assmann) [1967099 1907852]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.10.2.el8_4]" date="1626091200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975181 1975182] {CVE-2021-33909}</changelog>
</package>
<package pkgid="eea311308bd9f8ecd7ca338ff9a9982f059ec80240fc80de62a778d6614fe6ef" name="kernel-debug-devel" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="348.20.1.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.12.1.el8_5]" date="1641988800">- tcp: don't free a FIN sk_buff in tcp_remove_empty_skb() (Guillaume Nault) [2021574 2016210]
- kernel.spec: Add support to use vmlinux.h (Jiri Olsa) [2031053 1989087]
- spec: Add vmlinux.h to kernel-devel package (Jiri Olsa) [2031053 1989087]
- x86/mce: Avoid infinite loop for copy from user recovery (Prarit Bhargava) [2008789 1999550]
- x86/mce: Rename kill_it to kill_current_task (Prarit Bhargava) [2008789 1999550]
- x86/mce: Recover from poison found while copying from user space (Prarit Bhargava) [2008789 1999550]
- x86/mce: Delay clearing IA32_MCG_STATUS to the end of do_machine_check() (Prarit Bhargava) [2008789 1999550]
- x86/mce: Send #MC singal from task work (Prarit Bhargava) [2008789 1999550]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-348.13.1.el8_5]" date="1642507200">- vfs: Out-of-bounds write of heap buffer in fs_context.c (Frantisek Hrbata) [2040585 2040586] {CVE-2022-0185}
- xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Bruno Meneguele) [2034864 2034865] {CVE-2021-4155}
- af_unix: fix garbage collect vs MSG_PEEK (Patrick Talbert) [2031974 2031975] {CVE-2021-0920}
- cgroup: verify that source is a string (Waiman Long) [2034608 2034609] {CVE-2021-4154}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-348.14.1.el8_5]" date="1643198400">- tcp: fix page frag corruption on page fault (Paolo Abeni) [2041529 1996074]
- net: fix sk_page_frag() recursion from memory reclaim (Paolo Abeni) [2041529 1996074]
- KVM: s390: index kvm-&gt;arch.idle_mask by vcpu_idx (Thomas Huth) [2040769 2026230]
- redhat: set LC_ALL=C before sorting config content (Frantisek Hrbata)</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.15.1.el8_5]" date="1643716800">- net/mlx5: DR, Use FW API when updating FW-owned flow table (Michal Schmidt) [2042663 2042651]
- KVM: x86: Wait for IPIs to be delivered when handling Hyper-V TLB flush hypercall (Vitaly Kuznetsov) [2043237 1868572]
- drm/mgag200: Select clock in PLL update functions (Bruno Meneguele) [2034949 1953926]
- drm/i915: Fix HAS_LSPCON macro for platforms between GEN9 and GEN10 (Bruno Meneguele) [2027335 2005586]
- crypto: qat - power up 4xxx device (Vladis Dronov) [2016437 1960307]
- RDMA/core: Fix a double free in add_port error flow (Kamal Heib) [2038724 2008555]
- powerpc/iommu: Report the correct most efficient DMA mask for PCI devices (Steve Best) [2018928 2007425]
- powerpc/dma: Fix dma_map_ops::get_required_mask (Steve Best) [2018928 2007425]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.16.1.el8_5]" date="1644321600">- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047601 2047602] {CVE-2022-22942}
- net: openvswitch: Fix ct_state nat flags for conns arriving from tc (Marcelo Ricardo Leitner) [2043548 2040334]
- net: openvswitch: Fix matching zone id for invalid conns arriving from tc (Marcelo Ricardo Leitner) [2043550 2040452]
- net/sched: flow_dissector: Fix matching on zone id for invalid conns (Marcelo Ricardo Leitner) [2043550 2040452]
- net/sched: Extend qdisc control block with tc control block (Marcelo Ricardo Leitner) [2043550 2040452]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.17.1.el8_5]" date="1644926400">- vfs: check dentry is still valid in get_link() (Ian Kent) [2052558 2014846]
- xfs: don't expose internal symlink metadata buffers to the vfs (Brian Foster) [2052558 2014846]
- CI: Use appropriate zstream builder (Veronika Kabatova)
- CI: Enable baseline realtime checks (Veronika Kabatova)
- CI: Rename pipelines to include release names (Veronika Kabatova)
- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052166 2052167] {CVE-2022-0492}
- ice: Remove boolean vlan_promisc flag from function (Jonathan Toppins) [2051951 2030400]
- ceph: put the requests/sessions when it fails to alloc memory (Jeffrey Layton) [2053725 2017796]
- ceph: fix off by one bugs in unsafe_request_wait() (Jeffrey Layton) [2053725 2017796]
- ceph: flush the mdlog before waiting on unsafe reqs (Jeffrey Layton) [2053725 2017796]
- ceph: flush mdlog before umounting (Jeffrey Layton) [2053725 2017796]
- ceph: make iterate_sessions a global symbol (Jeffrey Layton) [2053725 2017796]
- ceph: make ceph_create_session_msg a global symbol (Jeffrey Layton) [2053725 2017796]
- xfs: check sb_meta_uuid for dabuf buffer recovery (Bill O'Donnell) [2049292 2020764]
- drm/i915: Flush TLBs before releasing backing store (Patrick Talbert) [2044328 2044329] {CVE-2022-0330}
- hugetlb: fix hugetlb cgroup refcounting during vma split (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: fix imbalanced css_get and css_put pair for shared mappings (Waiman Long) [2039015 2032811]
- mm/hugetlb: change hugetlb_reserve_pages() to type bool (Waiman Long) [2039015 2032811]
- hugetlb: fix an error code in hugetlb_reserve_pages() (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: fix offline of hugetlb cgroup with reservations (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: fix reservation accounting (Waiman Long) [2039015 2032811]
- mm/hugetlb: narrow the hugetlb_lock protection area during preparing huge page (Waiman Long) [2039015 2032811]
- mm/hugetlb: a page from buddy is not on any list (Waiman Long) [2039015 2032811]
- mm/hugetlb: not necessary to coalesce regions recursively (Waiman Long) [2039015 2032811]
- selftests/vm/write_to_hugetlbfs.c: fix unused variable warning (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add hugetlb_cgroup reservation tests (Waiman Long) [2039015 2032811]
- hugetlb: support file_region coalescing again (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: support noreserve mappings (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add accounting for shared mappings (Waiman Long) [2039015 2032811]
- hugetlb: disable region_add file_region coalescing (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add reservation accounting for private mappings (Waiman Long) [2039015 2032811]
- mm/hugetlb_cgroup: fix hugetlb_cgroup migration (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add interface for charge/uncharge hugetlb reservations (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add hugetlb_cgroup reservation counter (Waiman Long) [2039015 2032811]
- hugetlb: remove duplicated code (Waiman Long) [2039015 2032811]
- hugetlb: region_chg provides only cache entry (Waiman Long) [2039015 2032811]
- hugetlbfs: always use address space in inode for resv_map pointer (Waiman Long) [2039015 2032811]
- hugetlbfs: fix potential over/underflow setting node specific nr_hugepages (Waiman Long) [2039015 2032811]
- hugetlb: allow to free gigantic pages regardless of the configuration (Waiman Long) [2039015 2032811]
- powerpc/pseries: Fix update of LPAR security flavor after LPM (Steve Best) [2027448 1997294]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.18.1.el8_5]" date="1645531200">- selftests: kvm: Check whether SIDA memop fails for normal guests (Thomas Huth) [2050806 2050807] {CVE-2022-0516}
- KVM: s390: Return error on SIDA memop on normal guest (Thomas Huth) [2050806 2050807] {CVE-2022-0516}
- iommu/amd: Remove iommu_init_ga() (Jerry Snitselaar) [2030854 1998265]
- iommu/amd: Relocate GAMSup check to early_enable_iommus (Jerry Snitselaar) [2030854 1998265]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.19.1.el8_5]" date="1646049600">- tipc: improve size validations for received domain records (Xin Long) [2048970 2048971] {CVE-2022-0435}
- smb3: do not error on fsync when readonly (Ronnie Sahlberg) [2055824 2037811]
- security: implement sctp_assoc_established hook in selinux (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- security: add sctp_assoc_established hook (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- security: call security_sctp_assoc_request in sctp_sf_do_5_1D_ce (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- security: pass asoc to sctp_assoc_request and sctp_sk_clone (Bruno Meneguele) [2054112 2054117 2015525 2048251]
- net: sctp: Fix some typos (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- RDMA/bnxt_re: Fix stats counters (Selvin Xavier) [2049684 2001893]
- net: check skb sec_path when re-initializing slow_gro in gro_list_prepare (Xin Long) [2047427 2030476]
- cpufreq: intel_pstate: Add Icelake servers support in no-HWP mode (David Arcari) [2036888 2003695]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.20.1.el8_5]" date="1646740800">- lib/iov_iter: initialize "flags" in new pipe_buffer (Jan Stancek) [2060874 2060875] {CVE-2022-0847}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-348.20.1.el8.centos" date="1646913600">- Apply debranding changes</changelog>
</package>
<package pkgid="2288ed1342c89fde6f27e4bda2228b1ac07e8785b7e4f3a386288998bc800634" name="kernel-debug-modules" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="0d9c8df82500b1fb8e477599e3caaf83ea137a821f3ddf8adf4fe8bea5c2128e" name="kernel-debug-modules" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="193.28.1.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.20.1.el8_2]" date="1599134400">- [infiniband] IB/rdmavt: Fix RQ counting issues causing use of an invalid RWQE (Kamal Heib) [1872771 1850314]
- [block] blk-mq: Rerun dispatching in the case of budget contention (Ming Lei) [1869779 1824037]
- [block] blk-mq: Add blk_mq_delay_run_hw_queues() API call (Ming Lei) [1869779 1824037]
- [block] blk-mq: In blk_mq_dispatch_rq_list() "no budget" is a reason to kick (Ming Lei) [1869779 1824037]
- [block] blk-mq: Put driver tag in blk_mq_dispatch_rq_list() when no budget (Ming Lei) [1869779 1824037]
- [md] dm mpath: use double checked locking in fast path (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rename current_pgpath to pgpath in multipath_prepare_ioctl (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rework __map_bio() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: factor out multipath_queue_bio (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: push locking down to must_push_back_rq() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: take m-&gt;lock spinlock when testing QUEUE_IF_NO_PATH (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: changes from initial m-&gt;flags locking audit (Mike Snitzer) [1869386 1848651]
- [md] dm rq: don't call blk_mq_queue_stopped() in dm_stop_queue() (Mike Snitzer) [1869386 1848651]
- [md] dm: do not use waitqueue for request-based DM (Mike Snitzer) [1869386 1848651]
- [block] blk-mq: consider non-idle request as "inflight" in blk_mq_rq_inflight() (Mike Snitzer) [1869386 1848651]
- [kernel] sched/deadline: Initialize -&gt;dl_boosted (Phil Auld) [1867612 1854179]
- [kernel] sched/core: Fix PI boosting between RT and DEADLINE tasks (Phil Auld) [1867612 1854179]
- [net] net/smc: tolerate future SMCD versions (Philipp Rudo) [1866390 1854992]
- [net] openvswitch: fixes potential deadlock in dp cleanup code (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: reorder masks array based on usage (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: take into account de-fragmentation/gso_size in execute_check_pkt_len (Lorenzo Bianconi) [1860169 1851888]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.21.1.el8_2]" date="1599739200">- [scsi] scsi: ibmvfc: Fix NULL return compiler warning (Steve Best) [1866371 1810653]
- [scsi] scsi: ibmvfc: Avoid loss of all paths during SVC node reboot (Steve Best) [1866371 1810653]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.22.1.el8_2]" date="1600257600">- [crypto] pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1877530 1862072]
- [crypto] Revert "pefile: Tolerate other pefile signatures after first" (Bruno Meneguele)
- [infiniband] IB/hfi1: Fix another case where pq is left on waitlist (Kamal Heib) [1872766 1859209]
- [infiniband] IB/hfi1: Ensure pq is not left on waitlist (Kamal Heib) [1872766 1859209]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.23.1.el8_2]" date="1600344000">- [net] packet: fix overflow in tpacket_rcv (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}
- [net] packet: make tp_drops atomic (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.24.1.el8_2]" date="1600862400">- [kernel] timers: Remove must_forward_clk (Phil Auld) [1877417 1833096]
- [kernel] timers: Spare timer softirq until next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Expand clk forward logic beyond nohz (Phil Auld) [1877417 1833096]
- [kernel] timers: Reuse next expiry cache after nohz exit (Phil Auld) [1877417 1833096]
- [kernel] timers: Always keep track of next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Optimize _next_timer_interrupt() level iteration (Phil Auld) [1877417 1833096]
- [kernel] timers: Add comments about calc_index() ceiling work (Phil Auld) [1877417 1833096]
- [kernel] timers: Move trigger_dyntick_cpu() to enqueue_timer() (Phil Auld) [1877417 1833096]
- [kernel] timers: Use only bucket expiry for base-&gt;next_expiry value (Phil Auld) [1877417 1833096]
- [kernel] timers: Preserve higher bits of expiration on index calculation (Phil Auld) [1877417 1833096]
- [kernel] timer: Fix wheel index calculation on last level (Phil Auld) [1877417 1833096]
- [kernel] timer: Prevent base-&gt;clk from moving backward (Phil Auld) [1877417 1833096]
- [kernel] timer: Read jiffies once when forwarding base clk (Phil Auld) [1877417 1833096]
- [infiniband] RDMA/umem: Fix ib_umem_find_best_pgsz() (Kamal Heib) [1872424 1856158]
- [net] net: accept an empty mask in /sys/class/net/*/queues/rx-*/rps_cpus (Nitesh Narayan Lal) [1870181 1868433]
- [net] net: Restrict receive packets queuing to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [pci] PCI: Restrict probe functions to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [lib] lib: Restrict cpumask_local_spread to houskeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [s390] s390/pci: Fix unexpected write combine on resource (Philipp Rudo) [1869276 1827311]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.25.1.el8_2]" date="1601553600">- [net] netfilter: conntrack: proc: rename stat column (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: add clash resolution stat counter (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: remove ignore stats (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not increment two error counters at same time (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not auto-delete clash entries on reply (Florian Westphal) [1882095 1875681]
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1881085 1875316] {CVE-2020-14385}
- [kernel] time/tick-broadcast: Fix tick_broadcast_offline() lockdep complaint (Alexey Klimov) [1880081 1877380]
- [net] atomics/treewide: Rename __atomic_add_unless() =&gt; atomic_fetch_add_unless() (Yauheni Kaliuta) [1880081 1813370]
- [kernel] timers: Lower base clock forwarding threshold (Phil Auld) [1877417 1833096]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.26.1.el8_2]" date="1602158400">- [firmware] efi: don't reserve MOK config table memory region (Kairui Song) [1879988 1878584]
- [security] integrity: Load certs from the EFI MOK config table (Lenny Szubowicz) [1877528 1868306]
- [security] integrity: Move import of MokListRT certs to a separate routine (Lenny Szubowicz) [1877528 1868306]
- [firmware] efi: Support for MOK variable config table (Lenny Szubowicz) [1877528 1868306]
- [security] efi: Only print errors about failing to get certs if EFI vars are found (Lenny Szubowicz) [1877528 1804969]
- [fs] ceph: fix inode number handling on arches with 32-bit ino_t (Jeff Layton) [1875787 1866018]
- [fs] ceph: handle zero-length feature mask in session messages (Jeff Layton) [1875787 1866018]
- [fs] ceph: fix endianness bug when handling MDS session feature bits (Jeff Layton) [1875787 1866018]
- [netdrv] net/mlx5e: Fix missing cleanup of ethtool steering during rep rx cleanup (Alaa Hleihel) [1857777 1856660]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.27.1.el8_2]" date="1602763200">- [powerpc] powerpc/pseries: Do not initiate shutdown when system is running on UPS (Diego Domingos) [1882243 1870477]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859471 1859472] {CVE-2020-14331}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.28.1.el8_2]" date="1602849600">- [net] Bluetooth: L2CAP: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888256 1888258] {CVE-2020-12351}
- [net] Bluetooth: A2MP: Fix not initializing all members (Gopal Tiwari) [1888906 1888807] {CVE-2020-12352}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-193.28.1.el8.centos" date="1603195200">- Apply debranding changes</changelog>
</package>
<package pkgid="a14d04c9ef7b7938b6ab5cefd3ab829a8452104fcced960988868a390d425f86" name="kernel-debug-modules" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="305.10.2.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.2.1.el8_4]" date="1620648000">- net/mlx5e: Allow to match on MPLS parameters only for MPLS over UDP (Alaa Hleihel) [1952061 1936742]
- net/mlx5e: Reject tc rules which redirect from a VF to itself (Alaa Hleihel) [1952065 1932839]
- net/mlx5: CT: Add support for matching on ct_state inv and rel flags (Alaa Hleihel) [1952062 1942681]
- KVM: VMX: Don't use vcpu-&gt;run-&gt;internal.ndata as an array index (Jon Maloy) [1954221 1954219]
- tools/power turbostat: Revert "[tools] tools/power turbostat: Enable accumulate RAPL display" (Prarit Bhargava) [1952987 1944699]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.3.1.el8_4]" date="1621252800">- Revert "uio: use request_threaded_irq instead" (Vitaly Kuznetsov) [1952952 1946644]
- drm/ast: Set format registers in primary plane's update (Lyude Paul) [1952900 1923857]
- net/sched: act_ct: clear post_ct if doing ct_clear (Marcelo Ricardo Leitner) [1956458 1941889]
- md/raid1: properly indicate failure when ending a failed write request (Nigel Croxon) [1955188 1954588]
- nitro_enclaves: Fix stale file descriptors on failed usercopy (Vitaly Kuznetsov) [1956379 1953717]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.4.1.el8_4]" date="1621944000">- vmxnet3: Set the default of vxlan overlay offload to disabled (Cathy Avery) [1960702 1941714]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.5.1.el8_4]" date="1622548800">- gfs2: report "already frozen/thawed" errors (Bob Peterson) [1961849 1932236]
- gfs2: move freeze glock outside the make_fs_rw and _ro functions (Bob Peterson) [1961849 1932236]
- gfs2: Add common helper for holding and releasing the freeze glock (Bob Peterson) [1961849 1932236]
- gfs2: in signal_our_withdraw wait for unfreeze of _this_ fs only (Bob Peterson) [1961849 1932236]
- gfs2: Don't freeze the file system during unmount (Bob Peterson) [1961849 1932236]
- gfs2: Fix regression in freeze_go_sync (Bob Peterson) [1961849 1932236]
- gfs2: The freeze glock should never be frozen (Bob Peterson) [1961849 1932236]
- gfs2: When freezing gfs2, use GL_EXACT and not GL_NOCACHE (Bob Peterson) [1961849 1932236]
- gfs2: read-only mounts should grab the sd_freeze_gl glock (Bob Peterson) [1961849 1932236]
- gfs2: freeze should work on read-only mounts (Bob Peterson) [1961849 1932236]
- gfs2: Abort gfs2_freeze if io error is seen (Bob Peterson) [1961849 1932236]
- CI: Disable result checking for realtime check (Veronika Kabatova)
- CI: Explicitly disable result checking for private CI (Veronika Kabatova)
- CI: Rename variable (Veronika Kabatova)
- CI: Update builder containers (Veronika Kabatova)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.6.1.el8_4]" date="1623067200">- openvswitch: fix stack OOB read while fragmenting IPv4 packets (Davide Caratti) [1963940 1924608]
- net/sched: sch_frag: fix stack OOB read while fragmenting IPv4 packets (Davide Caratti) [1963940 1924608]
- net/sched: act_ct: fix wild memory access when clearing fragments (Davide Caratti) [1963940 1924608]
- net: Treat __napi_schedule_irqoff() as __napi_schedule() on PREEMPT_RT (Ivan Vecera)
- redhat/configs: Add CONFIG_SYSTEM_REVOCATION_KEYS and CONFIG_SYSTEM_REVOCATION_LIST (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: add 'x509_revocation_list' to gitignore (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- integrity: Load mokx variables into the blacklist keyring (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Add ability to preload revocation certs (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Move load_system_certificate_list to a common function (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Add EFI_CERT_X509_GUID support for dbx entries (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- net/sched: cls_api: increase max_reclassify_loop (Davide Caratti) [1965148 1955136]
- dm writecache: fix performance degradation in ssd mode (Mike Snitzer) [1962241 1961859]
- scsi: fnic: Use scsi_host_busy_iter() to traverse commands (Ewan D. Milne) [1961705 1949250]
- scsi: fnic: Kill 'exclude_id' argument to fnic_cleanup_io() (Ewan D. Milne) [1961705 1949250]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.7.1.el8_4]" date="1623672000">- net: zero-initialize tc skb extension on allocation (Ivan Vecera) [1965457 1946986]
- net/sched: cls_flower: fix only mask bit check in the validate_ct_state (Ivan Vecera) [1965457 1946986]
- net: cls_api: Fix uninitialised struct field bo-&gt;unlocked_driver_cb (Ivan Vecera) [1965457 1946986]
- net/sched: act_api: fix miss set post_ct for ovs after do conntrack in act_ct (Ivan Vecera) [1965457 1946986]
- net/sched: cls_flower: validate ct_state for invalid and reply flags (Ivan Vecera) [1965457 1946986]
- flow_dissector: fix TTL and TOS dissection on IPv4 fragments (Paolo Abeni) [1963952 1950288]
- Revert "sctp: Fix SHUTDOWN CTSN Ack in the peer restart case" (Xin Long) [1965632 1953839]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [1965632 1953839]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [1965632 1953839]
- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962544 1962546] {CVE-2021-33034}
- x86/kvm: Unify kvm_pv_guest_cpu_reboot() with kvm_guest_cpu_offline() (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Disable all PV features on crash (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Disable kvmclock on all CPUs on shutdown (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Teardown PV features on boot CPU as well (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Fix pr_info() for async PF setup/teardown (Lenny Szubowicz) [1964930 1934273]
- net/sched: act_ct: Fix ct template allocation for zone 0 (Marcelo Ricardo Leitner) [1965150 1881824]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.8.1.el8_4]" date="1624363200">- iavf: amend removal of MODULE_VERSION (Stefan Assmann) [1969925 1955738]
- ixgbe: Amend commit acf03026ec5a to include a version string in module info. (Ken Cox) [1969922 1955759]
- i40e: amend removal of MODULE_VERSION (Stefan Assmann) [1969923 1955736]
- redhat/configs: Add CONFIG_PINCTRL_EMMITSBURG (David Arcari) [1963984 1959506]
- redhat/configs: Remove CONFIG_EMMITSBURG (David Arcari) [1963984 1959506]
- netlink: add tracepoint at NL_SET_ERR_MSG (Marcelo Ricardo Leitner) [1972938 1956983]
- Revert "[netdrv] net/intel: remove driver versions from Intel drivers" (Jonathan Toppins) [1969917 1955745]
- Amends commit ea6244cc248b to include a version string in module info. (Ken Cox) [1969915 1955726]
- Revert "[netdrv] net/broadcom: Clean broadcom code from driver versions" (Jonathan Toppins) [1969914 1955721]
- ena: revert removal of MODULE_VERSION from ena (Petr Oros) [1969913 1955712]
- fm10k: amend removal of MODULE_VERSION (Vladis Dronov) [1969910 1955730]
- net/sched: act_ct: Offload connections with commit action (Marcelo Ricardo Leitner) [1968679 1965817]
- netfilter: flowtable: Remove redundant hw refresh bit (Marcelo Ricardo Leitner) [1968679 1965817]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.9.1.el8_4]" date="1624881600">- ixgbevf: Amend commit acf03026ec5a to include a version in module info. (Ken Cox) [1969911 1955764]
- CI: Merge configuration (Veronika Kabatova)
- igc: amend removal of MODULE_VERSION (Corinna Vinschen) [1969921 1955755]
- igb: amend removal of MODULE_VERSION (Corinna Vinschen) [1969919 1955748]
- locking/qrwlock: Fix ordering in queued_write_lock_slowpath() (Waiman Long) [1964419 1950110]
- scsi: qedf: Do not put host in qedf_vport_create() unconditionally (Nilesh Javali) [1974968 1899384]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.10.1.el8_4]" date="1625659200">- igbvf: amend removal of MODULE_VERSION (Corinna Vinschen) [1969920 1955752]
- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971464 1971488] {CVE-2021-32399}
- scsi: ibmvfc: Free channel_setup_buf during device tear down (Steve Best) [1964697 1938102]
- i40e: Fix parameters in aq_get_phy_register() (Stefan Assmann) [1967099 1907852]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.10.2.el8_4]" date="1626091200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975181 1975182] {CVE-2021-33909}</changelog>
</package>
<package pkgid="4774604b947a39aab0efcd35e6a386929c49b234054a353e8c7f32401d545b57" name="kernel-debug-modules" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="348.20.1.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.12.1.el8_5]" date="1641988800">- tcp: don't free a FIN sk_buff in tcp_remove_empty_skb() (Guillaume Nault) [2021574 2016210]
- kernel.spec: Add support to use vmlinux.h (Jiri Olsa) [2031053 1989087]
- spec: Add vmlinux.h to kernel-devel package (Jiri Olsa) [2031053 1989087]
- x86/mce: Avoid infinite loop for copy from user recovery (Prarit Bhargava) [2008789 1999550]
- x86/mce: Rename kill_it to kill_current_task (Prarit Bhargava) [2008789 1999550]
- x86/mce: Recover from poison found while copying from user space (Prarit Bhargava) [2008789 1999550]
- x86/mce: Delay clearing IA32_MCG_STATUS to the end of do_machine_check() (Prarit Bhargava) [2008789 1999550]
- x86/mce: Send #MC singal from task work (Prarit Bhargava) [2008789 1999550]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-348.13.1.el8_5]" date="1642507200">- vfs: Out-of-bounds write of heap buffer in fs_context.c (Frantisek Hrbata) [2040585 2040586] {CVE-2022-0185}
- xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Bruno Meneguele) [2034864 2034865] {CVE-2021-4155}
- af_unix: fix garbage collect vs MSG_PEEK (Patrick Talbert) [2031974 2031975] {CVE-2021-0920}
- cgroup: verify that source is a string (Waiman Long) [2034608 2034609] {CVE-2021-4154}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-348.14.1.el8_5]" date="1643198400">- tcp: fix page frag corruption on page fault (Paolo Abeni) [2041529 1996074]
- net: fix sk_page_frag() recursion from memory reclaim (Paolo Abeni) [2041529 1996074]
- KVM: s390: index kvm-&gt;arch.idle_mask by vcpu_idx (Thomas Huth) [2040769 2026230]
- redhat: set LC_ALL=C before sorting config content (Frantisek Hrbata)</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.15.1.el8_5]" date="1643716800">- net/mlx5: DR, Use FW API when updating FW-owned flow table (Michal Schmidt) [2042663 2042651]
- KVM: x86: Wait for IPIs to be delivered when handling Hyper-V TLB flush hypercall (Vitaly Kuznetsov) [2043237 1868572]
- drm/mgag200: Select clock in PLL update functions (Bruno Meneguele) [2034949 1953926]
- drm/i915: Fix HAS_LSPCON macro for platforms between GEN9 and GEN10 (Bruno Meneguele) [2027335 2005586]
- crypto: qat - power up 4xxx device (Vladis Dronov) [2016437 1960307]
- RDMA/core: Fix a double free in add_port error flow (Kamal Heib) [2038724 2008555]
- powerpc/iommu: Report the correct most efficient DMA mask for PCI devices (Steve Best) [2018928 2007425]
- powerpc/dma: Fix dma_map_ops::get_required_mask (Steve Best) [2018928 2007425]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.16.1.el8_5]" date="1644321600">- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047601 2047602] {CVE-2022-22942}
- net: openvswitch: Fix ct_state nat flags for conns arriving from tc (Marcelo Ricardo Leitner) [2043548 2040334]
- net: openvswitch: Fix matching zone id for invalid conns arriving from tc (Marcelo Ricardo Leitner) [2043550 2040452]
- net/sched: flow_dissector: Fix matching on zone id for invalid conns (Marcelo Ricardo Leitner) [2043550 2040452]
- net/sched: Extend qdisc control block with tc control block (Marcelo Ricardo Leitner) [2043550 2040452]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.17.1.el8_5]" date="1644926400">- vfs: check dentry is still valid in get_link() (Ian Kent) [2052558 2014846]
- xfs: don't expose internal symlink metadata buffers to the vfs (Brian Foster) [2052558 2014846]
- CI: Use appropriate zstream builder (Veronika Kabatova)
- CI: Enable baseline realtime checks (Veronika Kabatova)
- CI: Rename pipelines to include release names (Veronika Kabatova)
- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052166 2052167] {CVE-2022-0492}
- ice: Remove boolean vlan_promisc flag from function (Jonathan Toppins) [2051951 2030400]
- ceph: put the requests/sessions when it fails to alloc memory (Jeffrey Layton) [2053725 2017796]
- ceph: fix off by one bugs in unsafe_request_wait() (Jeffrey Layton) [2053725 2017796]
- ceph: flush the mdlog before waiting on unsafe reqs (Jeffrey Layton) [2053725 2017796]
- ceph: flush mdlog before umounting (Jeffrey Layton) [2053725 2017796]
- ceph: make iterate_sessions a global symbol (Jeffrey Layton) [2053725 2017796]
- ceph: make ceph_create_session_msg a global symbol (Jeffrey Layton) [2053725 2017796]
- xfs: check sb_meta_uuid for dabuf buffer recovery (Bill O'Donnell) [2049292 2020764]
- drm/i915: Flush TLBs before releasing backing store (Patrick Talbert) [2044328 2044329] {CVE-2022-0330}
- hugetlb: fix hugetlb cgroup refcounting during vma split (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: fix imbalanced css_get and css_put pair for shared mappings (Waiman Long) [2039015 2032811]
- mm/hugetlb: change hugetlb_reserve_pages() to type bool (Waiman Long) [2039015 2032811]
- hugetlb: fix an error code in hugetlb_reserve_pages() (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: fix offline of hugetlb cgroup with reservations (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: fix reservation accounting (Waiman Long) [2039015 2032811]
- mm/hugetlb: narrow the hugetlb_lock protection area during preparing huge page (Waiman Long) [2039015 2032811]
- mm/hugetlb: a page from buddy is not on any list (Waiman Long) [2039015 2032811]
- mm/hugetlb: not necessary to coalesce regions recursively (Waiman Long) [2039015 2032811]
- selftests/vm/write_to_hugetlbfs.c: fix unused variable warning (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add hugetlb_cgroup reservation tests (Waiman Long) [2039015 2032811]
- hugetlb: support file_region coalescing again (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: support noreserve mappings (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add accounting for shared mappings (Waiman Long) [2039015 2032811]
- hugetlb: disable region_add file_region coalescing (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add reservation accounting for private mappings (Waiman Long) [2039015 2032811]
- mm/hugetlb_cgroup: fix hugetlb_cgroup migration (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add interface for charge/uncharge hugetlb reservations (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add hugetlb_cgroup reservation counter (Waiman Long) [2039015 2032811]
- hugetlb: remove duplicated code (Waiman Long) [2039015 2032811]
- hugetlb: region_chg provides only cache entry (Waiman Long) [2039015 2032811]
- hugetlbfs: always use address space in inode for resv_map pointer (Waiman Long) [2039015 2032811]
- hugetlbfs: fix potential over/underflow setting node specific nr_hugepages (Waiman Long) [2039015 2032811]
- hugetlb: allow to free gigantic pages regardless of the configuration (Waiman Long) [2039015 2032811]
- powerpc/pseries: Fix update of LPAR security flavor after LPM (Steve Best) [2027448 1997294]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.18.1.el8_5]" date="1645531200">- selftests: kvm: Check whether SIDA memop fails for normal guests (Thomas Huth) [2050806 2050807] {CVE-2022-0516}
- KVM: s390: Return error on SIDA memop on normal guest (Thomas Huth) [2050806 2050807] {CVE-2022-0516}
- iommu/amd: Remove iommu_init_ga() (Jerry Snitselaar) [2030854 1998265]
- iommu/amd: Relocate GAMSup check to early_enable_iommus (Jerry Snitselaar) [2030854 1998265]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.19.1.el8_5]" date="1646049600">- tipc: improve size validations for received domain records (Xin Long) [2048970 2048971] {CVE-2022-0435}
- smb3: do not error on fsync when readonly (Ronnie Sahlberg) [2055824 2037811]
- security: implement sctp_assoc_established hook in selinux (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- security: add sctp_assoc_established hook (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- security: call security_sctp_assoc_request in sctp_sf_do_5_1D_ce (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- security: pass asoc to sctp_assoc_request and sctp_sk_clone (Bruno Meneguele) [2054112 2054117 2015525 2048251]
- net: sctp: Fix some typos (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- RDMA/bnxt_re: Fix stats counters (Selvin Xavier) [2049684 2001893]
- net: check skb sec_path when re-initializing slow_gro in gro_list_prepare (Xin Long) [2047427 2030476]
- cpufreq: intel_pstate: Add Icelake servers support in no-HWP mode (David Arcari) [2036888 2003695]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.20.1.el8_5]" date="1646740800">- lib/iov_iter: initialize "flags" in new pipe_buffer (Jan Stancek) [2060874 2060875] {CVE-2022-0847}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-348.20.1.el8.centos" date="1646913600">- Apply debranding changes</changelog>
</package>
<package pkgid="2600fd7e0ad3397f389d201da5c9b022236233cc8fb4f04cfc7e76b1a3de9123" name="kernel-debug-modules-extra" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="326ec9d0f8ab5775d838b80f3226777268cf211a811bf5d83d5695bc91155602" name="kernel-debug-modules-extra" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="193.28.1.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.20.1.el8_2]" date="1599134400">- [infiniband] IB/rdmavt: Fix RQ counting issues causing use of an invalid RWQE (Kamal Heib) [1872771 1850314]
- [block] blk-mq: Rerun dispatching in the case of budget contention (Ming Lei) [1869779 1824037]
- [block] blk-mq: Add blk_mq_delay_run_hw_queues() API call (Ming Lei) [1869779 1824037]
- [block] blk-mq: In blk_mq_dispatch_rq_list() "no budget" is a reason to kick (Ming Lei) [1869779 1824037]
- [block] blk-mq: Put driver tag in blk_mq_dispatch_rq_list() when no budget (Ming Lei) [1869779 1824037]
- [md] dm mpath: use double checked locking in fast path (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rename current_pgpath to pgpath in multipath_prepare_ioctl (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rework __map_bio() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: factor out multipath_queue_bio (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: push locking down to must_push_back_rq() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: take m-&gt;lock spinlock when testing QUEUE_IF_NO_PATH (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: changes from initial m-&gt;flags locking audit (Mike Snitzer) [1869386 1848651]
- [md] dm rq: don't call blk_mq_queue_stopped() in dm_stop_queue() (Mike Snitzer) [1869386 1848651]
- [md] dm: do not use waitqueue for request-based DM (Mike Snitzer) [1869386 1848651]
- [block] blk-mq: consider non-idle request as "inflight" in blk_mq_rq_inflight() (Mike Snitzer) [1869386 1848651]
- [kernel] sched/deadline: Initialize -&gt;dl_boosted (Phil Auld) [1867612 1854179]
- [kernel] sched/core: Fix PI boosting between RT and DEADLINE tasks (Phil Auld) [1867612 1854179]
- [net] net/smc: tolerate future SMCD versions (Philipp Rudo) [1866390 1854992]
- [net] openvswitch: fixes potential deadlock in dp cleanup code (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: reorder masks array based on usage (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: take into account de-fragmentation/gso_size in execute_check_pkt_len (Lorenzo Bianconi) [1860169 1851888]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.21.1.el8_2]" date="1599739200">- [scsi] scsi: ibmvfc: Fix NULL return compiler warning (Steve Best) [1866371 1810653]
- [scsi] scsi: ibmvfc: Avoid loss of all paths during SVC node reboot (Steve Best) [1866371 1810653]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.22.1.el8_2]" date="1600257600">- [crypto] pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1877530 1862072]
- [crypto] Revert "pefile: Tolerate other pefile signatures after first" (Bruno Meneguele)
- [infiniband] IB/hfi1: Fix another case where pq is left on waitlist (Kamal Heib) [1872766 1859209]
- [infiniband] IB/hfi1: Ensure pq is not left on waitlist (Kamal Heib) [1872766 1859209]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.23.1.el8_2]" date="1600344000">- [net] packet: fix overflow in tpacket_rcv (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}
- [net] packet: make tp_drops atomic (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.24.1.el8_2]" date="1600862400">- [kernel] timers: Remove must_forward_clk (Phil Auld) [1877417 1833096]
- [kernel] timers: Spare timer softirq until next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Expand clk forward logic beyond nohz (Phil Auld) [1877417 1833096]
- [kernel] timers: Reuse next expiry cache after nohz exit (Phil Auld) [1877417 1833096]
- [kernel] timers: Always keep track of next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Optimize _next_timer_interrupt() level iteration (Phil Auld) [1877417 1833096]
- [kernel] timers: Add comments about calc_index() ceiling work (Phil Auld) [1877417 1833096]
- [kernel] timers: Move trigger_dyntick_cpu() to enqueue_timer() (Phil Auld) [1877417 1833096]
- [kernel] timers: Use only bucket expiry for base-&gt;next_expiry value (Phil Auld) [1877417 1833096]
- [kernel] timers: Preserve higher bits of expiration on index calculation (Phil Auld) [1877417 1833096]
- [kernel] timer: Fix wheel index calculation on last level (Phil Auld) [1877417 1833096]
- [kernel] timer: Prevent base-&gt;clk from moving backward (Phil Auld) [1877417 1833096]
- [kernel] timer: Read jiffies once when forwarding base clk (Phil Auld) [1877417 1833096]
- [infiniband] RDMA/umem: Fix ib_umem_find_best_pgsz() (Kamal Heib) [1872424 1856158]
- [net] net: accept an empty mask in /sys/class/net/*/queues/rx-*/rps_cpus (Nitesh Narayan Lal) [1870181 1868433]
- [net] net: Restrict receive packets queuing to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [pci] PCI: Restrict probe functions to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [lib] lib: Restrict cpumask_local_spread to houskeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [s390] s390/pci: Fix unexpected write combine on resource (Philipp Rudo) [1869276 1827311]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.25.1.el8_2]" date="1601553600">- [net] netfilter: conntrack: proc: rename stat column (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: add clash resolution stat counter (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: remove ignore stats (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not increment two error counters at same time (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not auto-delete clash entries on reply (Florian Westphal) [1882095 1875681]
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1881085 1875316] {CVE-2020-14385}
- [kernel] time/tick-broadcast: Fix tick_broadcast_offline() lockdep complaint (Alexey Klimov) [1880081 1877380]
- [net] atomics/treewide: Rename __atomic_add_unless() =&gt; atomic_fetch_add_unless() (Yauheni Kaliuta) [1880081 1813370]
- [kernel] timers: Lower base clock forwarding threshold (Phil Auld) [1877417 1833096]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.26.1.el8_2]" date="1602158400">- [firmware] efi: don't reserve MOK config table memory region (Kairui Song) [1879988 1878584]
- [security] integrity: Load certs from the EFI MOK config table (Lenny Szubowicz) [1877528 1868306]
- [security] integrity: Move import of MokListRT certs to a separate routine (Lenny Szubowicz) [1877528 1868306]
- [firmware] efi: Support for MOK variable config table (Lenny Szubowicz) [1877528 1868306]
- [security] efi: Only print errors about failing to get certs if EFI vars are found (Lenny Szubowicz) [1877528 1804969]
- [fs] ceph: fix inode number handling on arches with 32-bit ino_t (Jeff Layton) [1875787 1866018]
- [fs] ceph: handle zero-length feature mask in session messages (Jeff Layton) [1875787 1866018]
- [fs] ceph: fix endianness bug when handling MDS session feature bits (Jeff Layton) [1875787 1866018]
- [netdrv] net/mlx5e: Fix missing cleanup of ethtool steering during rep rx cleanup (Alaa Hleihel) [1857777 1856660]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.27.1.el8_2]" date="1602763200">- [powerpc] powerpc/pseries: Do not initiate shutdown when system is running on UPS (Diego Domingos) [1882243 1870477]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859471 1859472] {CVE-2020-14331}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.28.1.el8_2]" date="1602849600">- [net] Bluetooth: L2CAP: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888256 1888258] {CVE-2020-12351}
- [net] Bluetooth: A2MP: Fix not initializing all members (Gopal Tiwari) [1888906 1888807] {CVE-2020-12352}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-193.28.1.el8.centos" date="1603195200">- Apply debranding changes</changelog>
</package>
<package pkgid="a3c9855bea638d6ee4310fa5b194992ab4c8f951292d9863dcca8dbe65b24e27" name="kernel-debug-modules-extra" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="305.10.2.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.2.1.el8_4]" date="1620648000">- net/mlx5e: Allow to match on MPLS parameters only for MPLS over UDP (Alaa Hleihel) [1952061 1936742]
- net/mlx5e: Reject tc rules which redirect from a VF to itself (Alaa Hleihel) [1952065 1932839]
- net/mlx5: CT: Add support for matching on ct_state inv and rel flags (Alaa Hleihel) [1952062 1942681]
- KVM: VMX: Don't use vcpu-&gt;run-&gt;internal.ndata as an array index (Jon Maloy) [1954221 1954219]
- tools/power turbostat: Revert "[tools] tools/power turbostat: Enable accumulate RAPL display" (Prarit Bhargava) [1952987 1944699]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.3.1.el8_4]" date="1621252800">- Revert "uio: use request_threaded_irq instead" (Vitaly Kuznetsov) [1952952 1946644]
- drm/ast: Set format registers in primary plane's update (Lyude Paul) [1952900 1923857]
- net/sched: act_ct: clear post_ct if doing ct_clear (Marcelo Ricardo Leitner) [1956458 1941889]
- md/raid1: properly indicate failure when ending a failed write request (Nigel Croxon) [1955188 1954588]
- nitro_enclaves: Fix stale file descriptors on failed usercopy (Vitaly Kuznetsov) [1956379 1953717]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.4.1.el8_4]" date="1621944000">- vmxnet3: Set the default of vxlan overlay offload to disabled (Cathy Avery) [1960702 1941714]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.5.1.el8_4]" date="1622548800">- gfs2: report "already frozen/thawed" errors (Bob Peterson) [1961849 1932236]
- gfs2: move freeze glock outside the make_fs_rw and _ro functions (Bob Peterson) [1961849 1932236]
- gfs2: Add common helper for holding and releasing the freeze glock (Bob Peterson) [1961849 1932236]
- gfs2: in signal_our_withdraw wait for unfreeze of _this_ fs only (Bob Peterson) [1961849 1932236]
- gfs2: Don't freeze the file system during unmount (Bob Peterson) [1961849 1932236]
- gfs2: Fix regression in freeze_go_sync (Bob Peterson) [1961849 1932236]
- gfs2: The freeze glock should never be frozen (Bob Peterson) [1961849 1932236]
- gfs2: When freezing gfs2, use GL_EXACT and not GL_NOCACHE (Bob Peterson) [1961849 1932236]
- gfs2: read-only mounts should grab the sd_freeze_gl glock (Bob Peterson) [1961849 1932236]
- gfs2: freeze should work on read-only mounts (Bob Peterson) [1961849 1932236]
- gfs2: Abort gfs2_freeze if io error is seen (Bob Peterson) [1961849 1932236]
- CI: Disable result checking for realtime check (Veronika Kabatova)
- CI: Explicitly disable result checking for private CI (Veronika Kabatova)
- CI: Rename variable (Veronika Kabatova)
- CI: Update builder containers (Veronika Kabatova)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.6.1.el8_4]" date="1623067200">- openvswitch: fix stack OOB read while fragmenting IPv4 packets (Davide Caratti) [1963940 1924608]
- net/sched: sch_frag: fix stack OOB read while fragmenting IPv4 packets (Davide Caratti) [1963940 1924608]
- net/sched: act_ct: fix wild memory access when clearing fragments (Davide Caratti) [1963940 1924608]
- net: Treat __napi_schedule_irqoff() as __napi_schedule() on PREEMPT_RT (Ivan Vecera)
- redhat/configs: Add CONFIG_SYSTEM_REVOCATION_KEYS and CONFIG_SYSTEM_REVOCATION_LIST (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: add 'x509_revocation_list' to gitignore (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- integrity: Load mokx variables into the blacklist keyring (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Add ability to preload revocation certs (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Move load_system_certificate_list to a common function (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Add EFI_CERT_X509_GUID support for dbx entries (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- net/sched: cls_api: increase max_reclassify_loop (Davide Caratti) [1965148 1955136]
- dm writecache: fix performance degradation in ssd mode (Mike Snitzer) [1962241 1961859]
- scsi: fnic: Use scsi_host_busy_iter() to traverse commands (Ewan D. Milne) [1961705 1949250]
- scsi: fnic: Kill 'exclude_id' argument to fnic_cleanup_io() (Ewan D. Milne) [1961705 1949250]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.7.1.el8_4]" date="1623672000">- net: zero-initialize tc skb extension on allocation (Ivan Vecera) [1965457 1946986]
- net/sched: cls_flower: fix only mask bit check in the validate_ct_state (Ivan Vecera) [1965457 1946986]
- net: cls_api: Fix uninitialised struct field bo-&gt;unlocked_driver_cb (Ivan Vecera) [1965457 1946986]
- net/sched: act_api: fix miss set post_ct for ovs after do conntrack in act_ct (Ivan Vecera) [1965457 1946986]
- net/sched: cls_flower: validate ct_state for invalid and reply flags (Ivan Vecera) [1965457 1946986]
- flow_dissector: fix TTL and TOS dissection on IPv4 fragments (Paolo Abeni) [1963952 1950288]
- Revert "sctp: Fix SHUTDOWN CTSN Ack in the peer restart case" (Xin Long) [1965632 1953839]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [1965632 1953839]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [1965632 1953839]
- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962544 1962546] {CVE-2021-33034}
- x86/kvm: Unify kvm_pv_guest_cpu_reboot() with kvm_guest_cpu_offline() (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Disable all PV features on crash (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Disable kvmclock on all CPUs on shutdown (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Teardown PV features on boot CPU as well (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Fix pr_info() for async PF setup/teardown (Lenny Szubowicz) [1964930 1934273]
- net/sched: act_ct: Fix ct template allocation for zone 0 (Marcelo Ricardo Leitner) [1965150 1881824]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.8.1.el8_4]" date="1624363200">- iavf: amend removal of MODULE_VERSION (Stefan Assmann) [1969925 1955738]
- ixgbe: Amend commit acf03026ec5a to include a version string in module info. (Ken Cox) [1969922 1955759]
- i40e: amend removal of MODULE_VERSION (Stefan Assmann) [1969923 1955736]
- redhat/configs: Add CONFIG_PINCTRL_EMMITSBURG (David Arcari) [1963984 1959506]
- redhat/configs: Remove CONFIG_EMMITSBURG (David Arcari) [1963984 1959506]
- netlink: add tracepoint at NL_SET_ERR_MSG (Marcelo Ricardo Leitner) [1972938 1956983]
- Revert "[netdrv] net/intel: remove driver versions from Intel drivers" (Jonathan Toppins) [1969917 1955745]
- Amends commit ea6244cc248b to include a version string in module info. (Ken Cox) [1969915 1955726]
- Revert "[netdrv] net/broadcom: Clean broadcom code from driver versions" (Jonathan Toppins) [1969914 1955721]
- ena: revert removal of MODULE_VERSION from ena (Petr Oros) [1969913 1955712]
- fm10k: amend removal of MODULE_VERSION (Vladis Dronov) [1969910 1955730]
- net/sched: act_ct: Offload connections with commit action (Marcelo Ricardo Leitner) [1968679 1965817]
- netfilter: flowtable: Remove redundant hw refresh bit (Marcelo Ricardo Leitner) [1968679 1965817]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.9.1.el8_4]" date="1624881600">- ixgbevf: Amend commit acf03026ec5a to include a version in module info. (Ken Cox) [1969911 1955764]
- CI: Merge configuration (Veronika Kabatova)
- igc: amend removal of MODULE_VERSION (Corinna Vinschen) [1969921 1955755]
- igb: amend removal of MODULE_VERSION (Corinna Vinschen) [1969919 1955748]
- locking/qrwlock: Fix ordering in queued_write_lock_slowpath() (Waiman Long) [1964419 1950110]
- scsi: qedf: Do not put host in qedf_vport_create() unconditionally (Nilesh Javali) [1974968 1899384]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.10.1.el8_4]" date="1625659200">- igbvf: amend removal of MODULE_VERSION (Corinna Vinschen) [1969920 1955752]
- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971464 1971488] {CVE-2021-32399}
- scsi: ibmvfc: Free channel_setup_buf during device tear down (Steve Best) [1964697 1938102]
- i40e: Fix parameters in aq_get_phy_register() (Stefan Assmann) [1967099 1907852]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.10.2.el8_4]" date="1626091200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975181 1975182] {CVE-2021-33909}</changelog>
</package>
<package pkgid="a49a900894c944c5a25ba3573922d10e9aa83d00ebdf5e428993d179b673eda7" name="kernel-debug-modules-extra" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="348.20.1.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.12.1.el8_5]" date="1641988800">- tcp: don't free a FIN sk_buff in tcp_remove_empty_skb() (Guillaume Nault) [2021574 2016210]
- kernel.spec: Add support to use vmlinux.h (Jiri Olsa) [2031053 1989087]
- spec: Add vmlinux.h to kernel-devel package (Jiri Olsa) [2031053 1989087]
- x86/mce: Avoid infinite loop for copy from user recovery (Prarit Bhargava) [2008789 1999550]
- x86/mce: Rename kill_it to kill_current_task (Prarit Bhargava) [2008789 1999550]
- x86/mce: Recover from poison found while copying from user space (Prarit Bhargava) [2008789 1999550]
- x86/mce: Delay clearing IA32_MCG_STATUS to the end of do_machine_check() (Prarit Bhargava) [2008789 1999550]
- x86/mce: Send #MC singal from task work (Prarit Bhargava) [2008789 1999550]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-348.13.1.el8_5]" date="1642507200">- vfs: Out-of-bounds write of heap buffer in fs_context.c (Frantisek Hrbata) [2040585 2040586] {CVE-2022-0185}
- xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Bruno Meneguele) [2034864 2034865] {CVE-2021-4155}
- af_unix: fix garbage collect vs MSG_PEEK (Patrick Talbert) [2031974 2031975] {CVE-2021-0920}
- cgroup: verify that source is a string (Waiman Long) [2034608 2034609] {CVE-2021-4154}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-348.14.1.el8_5]" date="1643198400">- tcp: fix page frag corruption on page fault (Paolo Abeni) [2041529 1996074]
- net: fix sk_page_frag() recursion from memory reclaim (Paolo Abeni) [2041529 1996074]
- KVM: s390: index kvm-&gt;arch.idle_mask by vcpu_idx (Thomas Huth) [2040769 2026230]
- redhat: set LC_ALL=C before sorting config content (Frantisek Hrbata)</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.15.1.el8_5]" date="1643716800">- net/mlx5: DR, Use FW API when updating FW-owned flow table (Michal Schmidt) [2042663 2042651]
- KVM: x86: Wait for IPIs to be delivered when handling Hyper-V TLB flush hypercall (Vitaly Kuznetsov) [2043237 1868572]
- drm/mgag200: Select clock in PLL update functions (Bruno Meneguele) [2034949 1953926]
- drm/i915: Fix HAS_LSPCON macro for platforms between GEN9 and GEN10 (Bruno Meneguele) [2027335 2005586]
- crypto: qat - power up 4xxx device (Vladis Dronov) [2016437 1960307]
- RDMA/core: Fix a double free in add_port error flow (Kamal Heib) [2038724 2008555]
- powerpc/iommu: Report the correct most efficient DMA mask for PCI devices (Steve Best) [2018928 2007425]
- powerpc/dma: Fix dma_map_ops::get_required_mask (Steve Best) [2018928 2007425]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.16.1.el8_5]" date="1644321600">- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047601 2047602] {CVE-2022-22942}
- net: openvswitch: Fix ct_state nat flags for conns arriving from tc (Marcelo Ricardo Leitner) [2043548 2040334]
- net: openvswitch: Fix matching zone id for invalid conns arriving from tc (Marcelo Ricardo Leitner) [2043550 2040452]
- net/sched: flow_dissector: Fix matching on zone id for invalid conns (Marcelo Ricardo Leitner) [2043550 2040452]
- net/sched: Extend qdisc control block with tc control block (Marcelo Ricardo Leitner) [2043550 2040452]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.17.1.el8_5]" date="1644926400">- vfs: check dentry is still valid in get_link() (Ian Kent) [2052558 2014846]
- xfs: don't expose internal symlink metadata buffers to the vfs (Brian Foster) [2052558 2014846]
- CI: Use appropriate zstream builder (Veronika Kabatova)
- CI: Enable baseline realtime checks (Veronika Kabatova)
- CI: Rename pipelines to include release names (Veronika Kabatova)
- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052166 2052167] {CVE-2022-0492}
- ice: Remove boolean vlan_promisc flag from function (Jonathan Toppins) [2051951 2030400]
- ceph: put the requests/sessions when it fails to alloc memory (Jeffrey Layton) [2053725 2017796]
- ceph: fix off by one bugs in unsafe_request_wait() (Jeffrey Layton) [2053725 2017796]
- ceph: flush the mdlog before waiting on unsafe reqs (Jeffrey Layton) [2053725 2017796]
- ceph: flush mdlog before umounting (Jeffrey Layton) [2053725 2017796]
- ceph: make iterate_sessions a global symbol (Jeffrey Layton) [2053725 2017796]
- ceph: make ceph_create_session_msg a global symbol (Jeffrey Layton) [2053725 2017796]
- xfs: check sb_meta_uuid for dabuf buffer recovery (Bill O'Donnell) [2049292 2020764]
- drm/i915: Flush TLBs before releasing backing store (Patrick Talbert) [2044328 2044329] {CVE-2022-0330}
- hugetlb: fix hugetlb cgroup refcounting during vma split (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: fix imbalanced css_get and css_put pair for shared mappings (Waiman Long) [2039015 2032811]
- mm/hugetlb: change hugetlb_reserve_pages() to type bool (Waiman Long) [2039015 2032811]
- hugetlb: fix an error code in hugetlb_reserve_pages() (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: fix offline of hugetlb cgroup with reservations (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: fix reservation accounting (Waiman Long) [2039015 2032811]
- mm/hugetlb: narrow the hugetlb_lock protection area during preparing huge page (Waiman Long) [2039015 2032811]
- mm/hugetlb: a page from buddy is not on any list (Waiman Long) [2039015 2032811]
- mm/hugetlb: not necessary to coalesce regions recursively (Waiman Long) [2039015 2032811]
- selftests/vm/write_to_hugetlbfs.c: fix unused variable warning (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add hugetlb_cgroup reservation tests (Waiman Long) [2039015 2032811]
- hugetlb: support file_region coalescing again (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: support noreserve mappings (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add accounting for shared mappings (Waiman Long) [2039015 2032811]
- hugetlb: disable region_add file_region coalescing (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add reservation accounting for private mappings (Waiman Long) [2039015 2032811]
- mm/hugetlb_cgroup: fix hugetlb_cgroup migration (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add interface for charge/uncharge hugetlb reservations (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add hugetlb_cgroup reservation counter (Waiman Long) [2039015 2032811]
- hugetlb: remove duplicated code (Waiman Long) [2039015 2032811]
- hugetlb: region_chg provides only cache entry (Waiman Long) [2039015 2032811]
- hugetlbfs: always use address space in inode for resv_map pointer (Waiman Long) [2039015 2032811]
- hugetlbfs: fix potential over/underflow setting node specific nr_hugepages (Waiman Long) [2039015 2032811]
- hugetlb: allow to free gigantic pages regardless of the configuration (Waiman Long) [2039015 2032811]
- powerpc/pseries: Fix update of LPAR security flavor after LPM (Steve Best) [2027448 1997294]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.18.1.el8_5]" date="1645531200">- selftests: kvm: Check whether SIDA memop fails for normal guests (Thomas Huth) [2050806 2050807] {CVE-2022-0516}
- KVM: s390: Return error on SIDA memop on normal guest (Thomas Huth) [2050806 2050807] {CVE-2022-0516}
- iommu/amd: Remove iommu_init_ga() (Jerry Snitselaar) [2030854 1998265]
- iommu/amd: Relocate GAMSup check to early_enable_iommus (Jerry Snitselaar) [2030854 1998265]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.19.1.el8_5]" date="1646049600">- tipc: improve size validations for received domain records (Xin Long) [2048970 2048971] {CVE-2022-0435}
- smb3: do not error on fsync when readonly (Ronnie Sahlberg) [2055824 2037811]
- security: implement sctp_assoc_established hook in selinux (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- security: add sctp_assoc_established hook (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- security: call security_sctp_assoc_request in sctp_sf_do_5_1D_ce (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- security: pass asoc to sctp_assoc_request and sctp_sk_clone (Bruno Meneguele) [2054112 2054117 2015525 2048251]
- net: sctp: Fix some typos (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- RDMA/bnxt_re: Fix stats counters (Selvin Xavier) [2049684 2001893]
- net: check skb sec_path when re-initializing slow_gro in gro_list_prepare (Xin Long) [2047427 2030476]
- cpufreq: intel_pstate: Add Icelake servers support in no-HWP mode (David Arcari) [2036888 2003695]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.20.1.el8_5]" date="1646740800">- lib/iov_iter: initialize "flags" in new pipe_buffer (Jan Stancek) [2060874 2060875] {CVE-2022-0847}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-348.20.1.el8.centos" date="1646913600">- Apply debranding changes</changelog>
</package>
<package pkgid="86a49360fedb16eabc5afd6aa351f659a2477aea027769125dc79708c273b4a0" name="kernel-debug-modules-internal" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="058a4890f55dc45cfaa469cf351453b3040a95e7fa74ba042d4e024e1450166a" name="kernel-debug-modules-internal" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="193.28.1.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.20.1.el8_2]" date="1599134400">- [infiniband] IB/rdmavt: Fix RQ counting issues causing use of an invalid RWQE (Kamal Heib) [1872771 1850314]
- [block] blk-mq: Rerun dispatching in the case of budget contention (Ming Lei) [1869779 1824037]
- [block] blk-mq: Add blk_mq_delay_run_hw_queues() API call (Ming Lei) [1869779 1824037]
- [block] blk-mq: In blk_mq_dispatch_rq_list() "no budget" is a reason to kick (Ming Lei) [1869779 1824037]
- [block] blk-mq: Put driver tag in blk_mq_dispatch_rq_list() when no budget (Ming Lei) [1869779 1824037]
- [md] dm mpath: use double checked locking in fast path (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rename current_pgpath to pgpath in multipath_prepare_ioctl (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rework __map_bio() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: factor out multipath_queue_bio (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: push locking down to must_push_back_rq() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: take m-&gt;lock spinlock when testing QUEUE_IF_NO_PATH (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: changes from initial m-&gt;flags locking audit (Mike Snitzer) [1869386 1848651]
- [md] dm rq: don't call blk_mq_queue_stopped() in dm_stop_queue() (Mike Snitzer) [1869386 1848651]
- [md] dm: do not use waitqueue for request-based DM (Mike Snitzer) [1869386 1848651]
- [block] blk-mq: consider non-idle request as "inflight" in blk_mq_rq_inflight() (Mike Snitzer) [1869386 1848651]
- [kernel] sched/deadline: Initialize -&gt;dl_boosted (Phil Auld) [1867612 1854179]
- [kernel] sched/core: Fix PI boosting between RT and DEADLINE tasks (Phil Auld) [1867612 1854179]
- [net] net/smc: tolerate future SMCD versions (Philipp Rudo) [1866390 1854992]
- [net] openvswitch: fixes potential deadlock in dp cleanup code (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: reorder masks array based on usage (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: take into account de-fragmentation/gso_size in execute_check_pkt_len (Lorenzo Bianconi) [1860169 1851888]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.21.1.el8_2]" date="1599739200">- [scsi] scsi: ibmvfc: Fix NULL return compiler warning (Steve Best) [1866371 1810653]
- [scsi] scsi: ibmvfc: Avoid loss of all paths during SVC node reboot (Steve Best) [1866371 1810653]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.22.1.el8_2]" date="1600257600">- [crypto] pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1877530 1862072]
- [crypto] Revert "pefile: Tolerate other pefile signatures after first" (Bruno Meneguele)
- [infiniband] IB/hfi1: Fix another case where pq is left on waitlist (Kamal Heib) [1872766 1859209]
- [infiniband] IB/hfi1: Ensure pq is not left on waitlist (Kamal Heib) [1872766 1859209]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.23.1.el8_2]" date="1600344000">- [net] packet: fix overflow in tpacket_rcv (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}
- [net] packet: make tp_drops atomic (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.24.1.el8_2]" date="1600862400">- [kernel] timers: Remove must_forward_clk (Phil Auld) [1877417 1833096]
- [kernel] timers: Spare timer softirq until next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Expand clk forward logic beyond nohz (Phil Auld) [1877417 1833096]
- [kernel] timers: Reuse next expiry cache after nohz exit (Phil Auld) [1877417 1833096]
- [kernel] timers: Always keep track of next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Optimize _next_timer_interrupt() level iteration (Phil Auld) [1877417 1833096]
- [kernel] timers: Add comments about calc_index() ceiling work (Phil Auld) [1877417 1833096]
- [kernel] timers: Move trigger_dyntick_cpu() to enqueue_timer() (Phil Auld) [1877417 1833096]
- [kernel] timers: Use only bucket expiry for base-&gt;next_expiry value (Phil Auld) [1877417 1833096]
- [kernel] timers: Preserve higher bits of expiration on index calculation (Phil Auld) [1877417 1833096]
- [kernel] timer: Fix wheel index calculation on last level (Phil Auld) [1877417 1833096]
- [kernel] timer: Prevent base-&gt;clk from moving backward (Phil Auld) [1877417 1833096]
- [kernel] timer: Read jiffies once when forwarding base clk (Phil Auld) [1877417 1833096]
- [infiniband] RDMA/umem: Fix ib_umem_find_best_pgsz() (Kamal Heib) [1872424 1856158]
- [net] net: accept an empty mask in /sys/class/net/*/queues/rx-*/rps_cpus (Nitesh Narayan Lal) [1870181 1868433]
- [net] net: Restrict receive packets queuing to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [pci] PCI: Restrict probe functions to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [lib] lib: Restrict cpumask_local_spread to houskeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [s390] s390/pci: Fix unexpected write combine on resource (Philipp Rudo) [1869276 1827311]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.25.1.el8_2]" date="1601553600">- [net] netfilter: conntrack: proc: rename stat column (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: add clash resolution stat counter (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: remove ignore stats (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not increment two error counters at same time (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not auto-delete clash entries on reply (Florian Westphal) [1882095 1875681]
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1881085 1875316] {CVE-2020-14385}
- [kernel] time/tick-broadcast: Fix tick_broadcast_offline() lockdep complaint (Alexey Klimov) [1880081 1877380]
- [net] atomics/treewide: Rename __atomic_add_unless() =&gt; atomic_fetch_add_unless() (Yauheni Kaliuta) [1880081 1813370]
- [kernel] timers: Lower base clock forwarding threshold (Phil Auld) [1877417 1833096]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.26.1.el8_2]" date="1602158400">- [firmware] efi: don't reserve MOK config table memory region (Kairui Song) [1879988 1878584]
- [security] integrity: Load certs from the EFI MOK config table (Lenny Szubowicz) [1877528 1868306]
- [security] integrity: Move import of MokListRT certs to a separate routine (Lenny Szubowicz) [1877528 1868306]
- [firmware] efi: Support for MOK variable config table (Lenny Szubowicz) [1877528 1868306]
- [security] efi: Only print errors about failing to get certs if EFI vars are found (Lenny Szubowicz) [1877528 1804969]
- [fs] ceph: fix inode number handling on arches with 32-bit ino_t (Jeff Layton) [1875787 1866018]
- [fs] ceph: handle zero-length feature mask in session messages (Jeff Layton) [1875787 1866018]
- [fs] ceph: fix endianness bug when handling MDS session feature bits (Jeff Layton) [1875787 1866018]
- [netdrv] net/mlx5e: Fix missing cleanup of ethtool steering during rep rx cleanup (Alaa Hleihel) [1857777 1856660]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.27.1.el8_2]" date="1602763200">- [powerpc] powerpc/pseries: Do not initiate shutdown when system is running on UPS (Diego Domingos) [1882243 1870477]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859471 1859472] {CVE-2020-14331}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.28.1.el8_2]" date="1602849600">- [net] Bluetooth: L2CAP: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888256 1888258] {CVE-2020-12351}
- [net] Bluetooth: A2MP: Fix not initializing all members (Gopal Tiwari) [1888906 1888807] {CVE-2020-12352}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-193.28.1.el8.centos" date="1603195200">- Apply debranding changes</changelog>
</package>
<package pkgid="199eab98ef250e1fac5ef2bdb14382863da4f13e020172ba828412b26564f27d" name="kernel-debug-modules-internal" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="305.10.2.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.2.1.el8_4]" date="1620648000">- net/mlx5e: Allow to match on MPLS parameters only for MPLS over UDP (Alaa Hleihel) [1952061 1936742]
- net/mlx5e: Reject tc rules which redirect from a VF to itself (Alaa Hleihel) [1952065 1932839]
- net/mlx5: CT: Add support for matching on ct_state inv and rel flags (Alaa Hleihel) [1952062 1942681]
- KVM: VMX: Don't use vcpu-&gt;run-&gt;internal.ndata as an array index (Jon Maloy) [1954221 1954219]
- tools/power turbostat: Revert "[tools] tools/power turbostat: Enable accumulate RAPL display" (Prarit Bhargava) [1952987 1944699]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.3.1.el8_4]" date="1621252800">- Revert "uio: use request_threaded_irq instead" (Vitaly Kuznetsov) [1952952 1946644]
- drm/ast: Set format registers in primary plane's update (Lyude Paul) [1952900 1923857]
- net/sched: act_ct: clear post_ct if doing ct_clear (Marcelo Ricardo Leitner) [1956458 1941889]
- md/raid1: properly indicate failure when ending a failed write request (Nigel Croxon) [1955188 1954588]
- nitro_enclaves: Fix stale file descriptors on failed usercopy (Vitaly Kuznetsov) [1956379 1953717]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.4.1.el8_4]" date="1621944000">- vmxnet3: Set the default of vxlan overlay offload to disabled (Cathy Avery) [1960702 1941714]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.5.1.el8_4]" date="1622548800">- gfs2: report "already frozen/thawed" errors (Bob Peterson) [1961849 1932236]
- gfs2: move freeze glock outside the make_fs_rw and _ro functions (Bob Peterson) [1961849 1932236]
- gfs2: Add common helper for holding and releasing the freeze glock (Bob Peterson) [1961849 1932236]
- gfs2: in signal_our_withdraw wait for unfreeze of _this_ fs only (Bob Peterson) [1961849 1932236]
- gfs2: Don't freeze the file system during unmount (Bob Peterson) [1961849 1932236]
- gfs2: Fix regression in freeze_go_sync (Bob Peterson) [1961849 1932236]
- gfs2: The freeze glock should never be frozen (Bob Peterson) [1961849 1932236]
- gfs2: When freezing gfs2, use GL_EXACT and not GL_NOCACHE (Bob Peterson) [1961849 1932236]
- gfs2: read-only mounts should grab the sd_freeze_gl glock (Bob Peterson) [1961849 1932236]
- gfs2: freeze should work on read-only mounts (Bob Peterson) [1961849 1932236]
- gfs2: Abort gfs2_freeze if io error is seen (Bob Peterson) [1961849 1932236]
- CI: Disable result checking for realtime check (Veronika Kabatova)
- CI: Explicitly disable result checking for private CI (Veronika Kabatova)
- CI: Rename variable (Veronika Kabatova)
- CI: Update builder containers (Veronika Kabatova)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.6.1.el8_4]" date="1623067200">- openvswitch: fix stack OOB read while fragmenting IPv4 packets (Davide Caratti) [1963940 1924608]
- net/sched: sch_frag: fix stack OOB read while fragmenting IPv4 packets (Davide Caratti) [1963940 1924608]
- net/sched: act_ct: fix wild memory access when clearing fragments (Davide Caratti) [1963940 1924608]
- net: Treat __napi_schedule_irqoff() as __napi_schedule() on PREEMPT_RT (Ivan Vecera)
- redhat/configs: Add CONFIG_SYSTEM_REVOCATION_KEYS and CONFIG_SYSTEM_REVOCATION_LIST (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: add 'x509_revocation_list' to gitignore (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- integrity: Load mokx variables into the blacklist keyring (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Add ability to preload revocation certs (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Move load_system_certificate_list to a common function (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Add EFI_CERT_X509_GUID support for dbx entries (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- net/sched: cls_api: increase max_reclassify_loop (Davide Caratti) [1965148 1955136]
- dm writecache: fix performance degradation in ssd mode (Mike Snitzer) [1962241 1961859]
- scsi: fnic: Use scsi_host_busy_iter() to traverse commands (Ewan D. Milne) [1961705 1949250]
- scsi: fnic: Kill 'exclude_id' argument to fnic_cleanup_io() (Ewan D. Milne) [1961705 1949250]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.7.1.el8_4]" date="1623672000">- net: zero-initialize tc skb extension on allocation (Ivan Vecera) [1965457 1946986]
- net/sched: cls_flower: fix only mask bit check in the validate_ct_state (Ivan Vecera) [1965457 1946986]
- net: cls_api: Fix uninitialised struct field bo-&gt;unlocked_driver_cb (Ivan Vecera) [1965457 1946986]
- net/sched: act_api: fix miss set post_ct for ovs after do conntrack in act_ct (Ivan Vecera) [1965457 1946986]
- net/sched: cls_flower: validate ct_state for invalid and reply flags (Ivan Vecera) [1965457 1946986]
- flow_dissector: fix TTL and TOS dissection on IPv4 fragments (Paolo Abeni) [1963952 1950288]
- Revert "sctp: Fix SHUTDOWN CTSN Ack in the peer restart case" (Xin Long) [1965632 1953839]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [1965632 1953839]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [1965632 1953839]
- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962544 1962546] {CVE-2021-33034}
- x86/kvm: Unify kvm_pv_guest_cpu_reboot() with kvm_guest_cpu_offline() (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Disable all PV features on crash (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Disable kvmclock on all CPUs on shutdown (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Teardown PV features on boot CPU as well (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Fix pr_info() for async PF setup/teardown (Lenny Szubowicz) [1964930 1934273]
- net/sched: act_ct: Fix ct template allocation for zone 0 (Marcelo Ricardo Leitner) [1965150 1881824]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.8.1.el8_4]" date="1624363200">- iavf: amend removal of MODULE_VERSION (Stefan Assmann) [1969925 1955738]
- ixgbe: Amend commit acf03026ec5a to include a version string in module info. (Ken Cox) [1969922 1955759]
- i40e: amend removal of MODULE_VERSION (Stefan Assmann) [1969923 1955736]
- redhat/configs: Add CONFIG_PINCTRL_EMMITSBURG (David Arcari) [1963984 1959506]
- redhat/configs: Remove CONFIG_EMMITSBURG (David Arcari) [1963984 1959506]
- netlink: add tracepoint at NL_SET_ERR_MSG (Marcelo Ricardo Leitner) [1972938 1956983]
- Revert "[netdrv] net/intel: remove driver versions from Intel drivers" (Jonathan Toppins) [1969917 1955745]
- Amends commit ea6244cc248b to include a version string in module info. (Ken Cox) [1969915 1955726]
- Revert "[netdrv] net/broadcom: Clean broadcom code from driver versions" (Jonathan Toppins) [1969914 1955721]
- ena: revert removal of MODULE_VERSION from ena (Petr Oros) [1969913 1955712]
- fm10k: amend removal of MODULE_VERSION (Vladis Dronov) [1969910 1955730]
- net/sched: act_ct: Offload connections with commit action (Marcelo Ricardo Leitner) [1968679 1965817]
- netfilter: flowtable: Remove redundant hw refresh bit (Marcelo Ricardo Leitner) [1968679 1965817]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.9.1.el8_4]" date="1624881600">- ixgbevf: Amend commit acf03026ec5a to include a version in module info. (Ken Cox) [1969911 1955764]
- CI: Merge configuration (Veronika Kabatova)
- igc: amend removal of MODULE_VERSION (Corinna Vinschen) [1969921 1955755]
- igb: amend removal of MODULE_VERSION (Corinna Vinschen) [1969919 1955748]
- locking/qrwlock: Fix ordering in queued_write_lock_slowpath() (Waiman Long) [1964419 1950110]
- scsi: qedf: Do not put host in qedf_vport_create() unconditionally (Nilesh Javali) [1974968 1899384]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.10.1.el8_4]" date="1625659200">- igbvf: amend removal of MODULE_VERSION (Corinna Vinschen) [1969920 1955752]
- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971464 1971488] {CVE-2021-32399}
- scsi: ibmvfc: Free channel_setup_buf during device tear down (Steve Best) [1964697 1938102]
- i40e: Fix parameters in aq_get_phy_register() (Stefan Assmann) [1967099 1907852]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.10.2.el8_4]" date="1626091200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975181 1975182] {CVE-2021-33909}</changelog>
</package>
<package pkgid="486b64b44186194f732397172a38f515b0bf9342dcd2c4156b910fdd53c8a304" name="kernel-debug-modules-internal" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="348.20.1.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.12.1.el8_5]" date="1641988800">- tcp: don't free a FIN sk_buff in tcp_remove_empty_skb() (Guillaume Nault) [2021574 2016210]
- kernel.spec: Add support to use vmlinux.h (Jiri Olsa) [2031053 1989087]
- spec: Add vmlinux.h to kernel-devel package (Jiri Olsa) [2031053 1989087]
- x86/mce: Avoid infinite loop for copy from user recovery (Prarit Bhargava) [2008789 1999550]
- x86/mce: Rename kill_it to kill_current_task (Prarit Bhargava) [2008789 1999550]
- x86/mce: Recover from poison found while copying from user space (Prarit Bhargava) [2008789 1999550]
- x86/mce: Delay clearing IA32_MCG_STATUS to the end of do_machine_check() (Prarit Bhargava) [2008789 1999550]
- x86/mce: Send #MC singal from task work (Prarit Bhargava) [2008789 1999550]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-348.13.1.el8_5]" date="1642507200">- vfs: Out-of-bounds write of heap buffer in fs_context.c (Frantisek Hrbata) [2040585 2040586] {CVE-2022-0185}
- xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Bruno Meneguele) [2034864 2034865] {CVE-2021-4155}
- af_unix: fix garbage collect vs MSG_PEEK (Patrick Talbert) [2031974 2031975] {CVE-2021-0920}
- cgroup: verify that source is a string (Waiman Long) [2034608 2034609] {CVE-2021-4154}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-348.14.1.el8_5]" date="1643198400">- tcp: fix page frag corruption on page fault (Paolo Abeni) [2041529 1996074]
- net: fix sk_page_frag() recursion from memory reclaim (Paolo Abeni) [2041529 1996074]
- KVM: s390: index kvm-&gt;arch.idle_mask by vcpu_idx (Thomas Huth) [2040769 2026230]
- redhat: set LC_ALL=C before sorting config content (Frantisek Hrbata)</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.15.1.el8_5]" date="1643716800">- net/mlx5: DR, Use FW API when updating FW-owned flow table (Michal Schmidt) [2042663 2042651]
- KVM: x86: Wait for IPIs to be delivered when handling Hyper-V TLB flush hypercall (Vitaly Kuznetsov) [2043237 1868572]
- drm/mgag200: Select clock in PLL update functions (Bruno Meneguele) [2034949 1953926]
- drm/i915: Fix HAS_LSPCON macro for platforms between GEN9 and GEN10 (Bruno Meneguele) [2027335 2005586]
- crypto: qat - power up 4xxx device (Vladis Dronov) [2016437 1960307]
- RDMA/core: Fix a double free in add_port error flow (Kamal Heib) [2038724 2008555]
- powerpc/iommu: Report the correct most efficient DMA mask for PCI devices (Steve Best) [2018928 2007425]
- powerpc/dma: Fix dma_map_ops::get_required_mask (Steve Best) [2018928 2007425]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.16.1.el8_5]" date="1644321600">- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047601 2047602] {CVE-2022-22942}
- net: openvswitch: Fix ct_state nat flags for conns arriving from tc (Marcelo Ricardo Leitner) [2043548 2040334]
- net: openvswitch: Fix matching zone id for invalid conns arriving from tc (Marcelo Ricardo Leitner) [2043550 2040452]
- net/sched: flow_dissector: Fix matching on zone id for invalid conns (Marcelo Ricardo Leitner) [2043550 2040452]
- net/sched: Extend qdisc control block with tc control block (Marcelo Ricardo Leitner) [2043550 2040452]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.17.1.el8_5]" date="1644926400">- vfs: check dentry is still valid in get_link() (Ian Kent) [2052558 2014846]
- xfs: don't expose internal symlink metadata buffers to the vfs (Brian Foster) [2052558 2014846]
- CI: Use appropriate zstream builder (Veronika Kabatova)
- CI: Enable baseline realtime checks (Veronika Kabatova)
- CI: Rename pipelines to include release names (Veronika Kabatova)
- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052166 2052167] {CVE-2022-0492}
- ice: Remove boolean vlan_promisc flag from function (Jonathan Toppins) [2051951 2030400]
- ceph: put the requests/sessions when it fails to alloc memory (Jeffrey Layton) [2053725 2017796]
- ceph: fix off by one bugs in unsafe_request_wait() (Jeffrey Layton) [2053725 2017796]
- ceph: flush the mdlog before waiting on unsafe reqs (Jeffrey Layton) [2053725 2017796]
- ceph: flush mdlog before umounting (Jeffrey Layton) [2053725 2017796]
- ceph: make iterate_sessions a global symbol (Jeffrey Layton) [2053725 2017796]
- ceph: make ceph_create_session_msg a global symbol (Jeffrey Layton) [2053725 2017796]
- xfs: check sb_meta_uuid for dabuf buffer recovery (Bill O'Donnell) [2049292 2020764]
- drm/i915: Flush TLBs before releasing backing store (Patrick Talbert) [2044328 2044329] {CVE-2022-0330}
- hugetlb: fix hugetlb cgroup refcounting during vma split (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: fix imbalanced css_get and css_put pair for shared mappings (Waiman Long) [2039015 2032811]
- mm/hugetlb: change hugetlb_reserve_pages() to type bool (Waiman Long) [2039015 2032811]
- hugetlb: fix an error code in hugetlb_reserve_pages() (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: fix offline of hugetlb cgroup with reservations (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: fix reservation accounting (Waiman Long) [2039015 2032811]
- mm/hugetlb: narrow the hugetlb_lock protection area during preparing huge page (Waiman Long) [2039015 2032811]
- mm/hugetlb: a page from buddy is not on any list (Waiman Long) [2039015 2032811]
- mm/hugetlb: not necessary to coalesce regions recursively (Waiman Long) [2039015 2032811]
- selftests/vm/write_to_hugetlbfs.c: fix unused variable warning (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add hugetlb_cgroup reservation tests (Waiman Long) [2039015 2032811]
- hugetlb: support file_region coalescing again (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: support noreserve mappings (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add accounting for shared mappings (Waiman Long) [2039015 2032811]
- hugetlb: disable region_add file_region coalescing (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add reservation accounting for private mappings (Waiman Long) [2039015 2032811]
- mm/hugetlb_cgroup: fix hugetlb_cgroup migration (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add interface for charge/uncharge hugetlb reservations (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add hugetlb_cgroup reservation counter (Waiman Long) [2039015 2032811]
- hugetlb: remove duplicated code (Waiman Long) [2039015 2032811]
- hugetlb: region_chg provides only cache entry (Waiman Long) [2039015 2032811]
- hugetlbfs: always use address space in inode for resv_map pointer (Waiman Long) [2039015 2032811]
- hugetlbfs: fix potential over/underflow setting node specific nr_hugepages (Waiman Long) [2039015 2032811]
- hugetlb: allow to free gigantic pages regardless of the configuration (Waiman Long) [2039015 2032811]
- powerpc/pseries: Fix update of LPAR security flavor after LPM (Steve Best) [2027448 1997294]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.18.1.el8_5]" date="1645531200">- selftests: kvm: Check whether SIDA memop fails for normal guests (Thomas Huth) [2050806 2050807] {CVE-2022-0516}
- KVM: s390: Return error on SIDA memop on normal guest (Thomas Huth) [2050806 2050807] {CVE-2022-0516}
- iommu/amd: Remove iommu_init_ga() (Jerry Snitselaar) [2030854 1998265]
- iommu/amd: Relocate GAMSup check to early_enable_iommus (Jerry Snitselaar) [2030854 1998265]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.19.1.el8_5]" date="1646049600">- tipc: improve size validations for received domain records (Xin Long) [2048970 2048971] {CVE-2022-0435}
- smb3: do not error on fsync when readonly (Ronnie Sahlberg) [2055824 2037811]
- security: implement sctp_assoc_established hook in selinux (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- security: add sctp_assoc_established hook (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- security: call security_sctp_assoc_request in sctp_sf_do_5_1D_ce (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- security: pass asoc to sctp_assoc_request and sctp_sk_clone (Bruno Meneguele) [2054112 2054117 2015525 2048251]
- net: sctp: Fix some typos (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- RDMA/bnxt_re: Fix stats counters (Selvin Xavier) [2049684 2001893]
- net: check skb sec_path when re-initializing slow_gro in gro_list_prepare (Xin Long) [2047427 2030476]
- cpufreq: intel_pstate: Add Icelake servers support in no-HWP mode (David Arcari) [2036888 2003695]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.20.1.el8_5]" date="1646740800">- lib/iov_iter: initialize "flags" in new pipe_buffer (Jan Stancek) [2060874 2060875] {CVE-2022-0847}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-348.20.1.el8.centos" date="1646913600">- Apply debranding changes</changelog>
</package>
<package pkgid="760808ec1910b7c6486037dc540f21b3f1ef5d34d35af5b6324949f5c9c88d52" name="kernel-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="72b29e248ffd7de2bafcec2ef4747ccf2cdedf8574fbf30b69959c7f24551ab0" name="kernel-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="193.28.1.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.20.1.el8_2]" date="1599134400">- [infiniband] IB/rdmavt: Fix RQ counting issues causing use of an invalid RWQE (Kamal Heib) [1872771 1850314]
- [block] blk-mq: Rerun dispatching in the case of budget contention (Ming Lei) [1869779 1824037]
- [block] blk-mq: Add blk_mq_delay_run_hw_queues() API call (Ming Lei) [1869779 1824037]
- [block] blk-mq: In blk_mq_dispatch_rq_list() "no budget" is a reason to kick (Ming Lei) [1869779 1824037]
- [block] blk-mq: Put driver tag in blk_mq_dispatch_rq_list() when no budget (Ming Lei) [1869779 1824037]
- [md] dm mpath: use double checked locking in fast path (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rename current_pgpath to pgpath in multipath_prepare_ioctl (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rework __map_bio() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: factor out multipath_queue_bio (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: push locking down to must_push_back_rq() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: take m-&gt;lock spinlock when testing QUEUE_IF_NO_PATH (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: changes from initial m-&gt;flags locking audit (Mike Snitzer) [1869386 1848651]
- [md] dm rq: don't call blk_mq_queue_stopped() in dm_stop_queue() (Mike Snitzer) [1869386 1848651]
- [md] dm: do not use waitqueue for request-based DM (Mike Snitzer) [1869386 1848651]
- [block] blk-mq: consider non-idle request as "inflight" in blk_mq_rq_inflight() (Mike Snitzer) [1869386 1848651]
- [kernel] sched/deadline: Initialize -&gt;dl_boosted (Phil Auld) [1867612 1854179]
- [kernel] sched/core: Fix PI boosting between RT and DEADLINE tasks (Phil Auld) [1867612 1854179]
- [net] net/smc: tolerate future SMCD versions (Philipp Rudo) [1866390 1854992]
- [net] openvswitch: fixes potential deadlock in dp cleanup code (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: reorder masks array based on usage (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: take into account de-fragmentation/gso_size in execute_check_pkt_len (Lorenzo Bianconi) [1860169 1851888]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.21.1.el8_2]" date="1599739200">- [scsi] scsi: ibmvfc: Fix NULL return compiler warning (Steve Best) [1866371 1810653]
- [scsi] scsi: ibmvfc: Avoid loss of all paths during SVC node reboot (Steve Best) [1866371 1810653]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.22.1.el8_2]" date="1600257600">- [crypto] pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1877530 1862072]
- [crypto] Revert "pefile: Tolerate other pefile signatures after first" (Bruno Meneguele)
- [infiniband] IB/hfi1: Fix another case where pq is left on waitlist (Kamal Heib) [1872766 1859209]
- [infiniband] IB/hfi1: Ensure pq is not left on waitlist (Kamal Heib) [1872766 1859209]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.23.1.el8_2]" date="1600344000">- [net] packet: fix overflow in tpacket_rcv (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}
- [net] packet: make tp_drops atomic (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.24.1.el8_2]" date="1600862400">- [kernel] timers: Remove must_forward_clk (Phil Auld) [1877417 1833096]
- [kernel] timers: Spare timer softirq until next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Expand clk forward logic beyond nohz (Phil Auld) [1877417 1833096]
- [kernel] timers: Reuse next expiry cache after nohz exit (Phil Auld) [1877417 1833096]
- [kernel] timers: Always keep track of next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Optimize _next_timer_interrupt() level iteration (Phil Auld) [1877417 1833096]
- [kernel] timers: Add comments about calc_index() ceiling work (Phil Auld) [1877417 1833096]
- [kernel] timers: Move trigger_dyntick_cpu() to enqueue_timer() (Phil Auld) [1877417 1833096]
- [kernel] timers: Use only bucket expiry for base-&gt;next_expiry value (Phil Auld) [1877417 1833096]
- [kernel] timers: Preserve higher bits of expiration on index calculation (Phil Auld) [1877417 1833096]
- [kernel] timer: Fix wheel index calculation on last level (Phil Auld) [1877417 1833096]
- [kernel] timer: Prevent base-&gt;clk from moving backward (Phil Auld) [1877417 1833096]
- [kernel] timer: Read jiffies once when forwarding base clk (Phil Auld) [1877417 1833096]
- [infiniband] RDMA/umem: Fix ib_umem_find_best_pgsz() (Kamal Heib) [1872424 1856158]
- [net] net: accept an empty mask in /sys/class/net/*/queues/rx-*/rps_cpus (Nitesh Narayan Lal) [1870181 1868433]
- [net] net: Restrict receive packets queuing to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [pci] PCI: Restrict probe functions to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [lib] lib: Restrict cpumask_local_spread to houskeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [s390] s390/pci: Fix unexpected write combine on resource (Philipp Rudo) [1869276 1827311]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.25.1.el8_2]" date="1601553600">- [net] netfilter: conntrack: proc: rename stat column (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: add clash resolution stat counter (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: remove ignore stats (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not increment two error counters at same time (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not auto-delete clash entries on reply (Florian Westphal) [1882095 1875681]
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1881085 1875316] {CVE-2020-14385}
- [kernel] time/tick-broadcast: Fix tick_broadcast_offline() lockdep complaint (Alexey Klimov) [1880081 1877380]
- [net] atomics/treewide: Rename __atomic_add_unless() =&gt; atomic_fetch_add_unless() (Yauheni Kaliuta) [1880081 1813370]
- [kernel] timers: Lower base clock forwarding threshold (Phil Auld) [1877417 1833096]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.26.1.el8_2]" date="1602158400">- [firmware] efi: don't reserve MOK config table memory region (Kairui Song) [1879988 1878584]
- [security] integrity: Load certs from the EFI MOK config table (Lenny Szubowicz) [1877528 1868306]
- [security] integrity: Move import of MokListRT certs to a separate routine (Lenny Szubowicz) [1877528 1868306]
- [firmware] efi: Support for MOK variable config table (Lenny Szubowicz) [1877528 1868306]
- [security] efi: Only print errors about failing to get certs if EFI vars are found (Lenny Szubowicz) [1877528 1804969]
- [fs] ceph: fix inode number handling on arches with 32-bit ino_t (Jeff Layton) [1875787 1866018]
- [fs] ceph: handle zero-length feature mask in session messages (Jeff Layton) [1875787 1866018]
- [fs] ceph: fix endianness bug when handling MDS session feature bits (Jeff Layton) [1875787 1866018]
- [netdrv] net/mlx5e: Fix missing cleanup of ethtool steering during rep rx cleanup (Alaa Hleihel) [1857777 1856660]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.27.1.el8_2]" date="1602763200">- [powerpc] powerpc/pseries: Do not initiate shutdown when system is running on UPS (Diego Domingos) [1882243 1870477]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859471 1859472] {CVE-2020-14331}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.28.1.el8_2]" date="1602849600">- [net] Bluetooth: L2CAP: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888256 1888258] {CVE-2020-12351}
- [net] Bluetooth: A2MP: Fix not initializing all members (Gopal Tiwari) [1888906 1888807] {CVE-2020-12352}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-193.28.1.el8.centos" date="1603195200">- Apply debranding changes</changelog>
</package>
<package pkgid="b16685db23d519d5f5abe7ffc83b7bd0e3b68666f4b5f0fb885328a950b0d300" name="kernel-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="305.10.2.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.2.1.el8_4]" date="1620648000">- net/mlx5e: Allow to match on MPLS parameters only for MPLS over UDP (Alaa Hleihel) [1952061 1936742]
- net/mlx5e: Reject tc rules which redirect from a VF to itself (Alaa Hleihel) [1952065 1932839]
- net/mlx5: CT: Add support for matching on ct_state inv and rel flags (Alaa Hleihel) [1952062 1942681]
- KVM: VMX: Don't use vcpu-&gt;run-&gt;internal.ndata as an array index (Jon Maloy) [1954221 1954219]
- tools/power turbostat: Revert "[tools] tools/power turbostat: Enable accumulate RAPL display" (Prarit Bhargava) [1952987 1944699]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.3.1.el8_4]" date="1621252800">- Revert "uio: use request_threaded_irq instead" (Vitaly Kuznetsov) [1952952 1946644]
- drm/ast: Set format registers in primary plane's update (Lyude Paul) [1952900 1923857]
- net/sched: act_ct: clear post_ct if doing ct_clear (Marcelo Ricardo Leitner) [1956458 1941889]
- md/raid1: properly indicate failure when ending a failed write request (Nigel Croxon) [1955188 1954588]
- nitro_enclaves: Fix stale file descriptors on failed usercopy (Vitaly Kuznetsov) [1956379 1953717]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.4.1.el8_4]" date="1621944000">- vmxnet3: Set the default of vxlan overlay offload to disabled (Cathy Avery) [1960702 1941714]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.5.1.el8_4]" date="1622548800">- gfs2: report "already frozen/thawed" errors (Bob Peterson) [1961849 1932236]
- gfs2: move freeze glock outside the make_fs_rw and _ro functions (Bob Peterson) [1961849 1932236]
- gfs2: Add common helper for holding and releasing the freeze glock (Bob Peterson) [1961849 1932236]
- gfs2: in signal_our_withdraw wait for unfreeze of _this_ fs only (Bob Peterson) [1961849 1932236]
- gfs2: Don't freeze the file system during unmount (Bob Peterson) [1961849 1932236]
- gfs2: Fix regression in freeze_go_sync (Bob Peterson) [1961849 1932236]
- gfs2: The freeze glock should never be frozen (Bob Peterson) [1961849 1932236]
- gfs2: When freezing gfs2, use GL_EXACT and not GL_NOCACHE (Bob Peterson) [1961849 1932236]
- gfs2: read-only mounts should grab the sd_freeze_gl glock (Bob Peterson) [1961849 1932236]
- gfs2: freeze should work on read-only mounts (Bob Peterson) [1961849 1932236]
- gfs2: Abort gfs2_freeze if io error is seen (Bob Peterson) [1961849 1932236]
- CI: Disable result checking for realtime check (Veronika Kabatova)
- CI: Explicitly disable result checking for private CI (Veronika Kabatova)
- CI: Rename variable (Veronika Kabatova)
- CI: Update builder containers (Veronika Kabatova)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.6.1.el8_4]" date="1623067200">- openvswitch: fix stack OOB read while fragmenting IPv4 packets (Davide Caratti) [1963940 1924608]
- net/sched: sch_frag: fix stack OOB read while fragmenting IPv4 packets (Davide Caratti) [1963940 1924608]
- net/sched: act_ct: fix wild memory access when clearing fragments (Davide Caratti) [1963940 1924608]
- net: Treat __napi_schedule_irqoff() as __napi_schedule() on PREEMPT_RT (Ivan Vecera)
- redhat/configs: Add CONFIG_SYSTEM_REVOCATION_KEYS and CONFIG_SYSTEM_REVOCATION_LIST (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: add 'x509_revocation_list' to gitignore (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- integrity: Load mokx variables into the blacklist keyring (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Add ability to preload revocation certs (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Move load_system_certificate_list to a common function (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Add EFI_CERT_X509_GUID support for dbx entries (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- net/sched: cls_api: increase max_reclassify_loop (Davide Caratti) [1965148 1955136]
- dm writecache: fix performance degradation in ssd mode (Mike Snitzer) [1962241 1961859]
- scsi: fnic: Use scsi_host_busy_iter() to traverse commands (Ewan D. Milne) [1961705 1949250]
- scsi: fnic: Kill 'exclude_id' argument to fnic_cleanup_io() (Ewan D. Milne) [1961705 1949250]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.7.1.el8_4]" date="1623672000">- net: zero-initialize tc skb extension on allocation (Ivan Vecera) [1965457 1946986]
- net/sched: cls_flower: fix only mask bit check in the validate_ct_state (Ivan Vecera) [1965457 1946986]
- net: cls_api: Fix uninitialised struct field bo-&gt;unlocked_driver_cb (Ivan Vecera) [1965457 1946986]
- net/sched: act_api: fix miss set post_ct for ovs after do conntrack in act_ct (Ivan Vecera) [1965457 1946986]
- net/sched: cls_flower: validate ct_state for invalid and reply flags (Ivan Vecera) [1965457 1946986]
- flow_dissector: fix TTL and TOS dissection on IPv4 fragments (Paolo Abeni) [1963952 1950288]
- Revert "sctp: Fix SHUTDOWN CTSN Ack in the peer restart case" (Xin Long) [1965632 1953839]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [1965632 1953839]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [1965632 1953839]
- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962544 1962546] {CVE-2021-33034}
- x86/kvm: Unify kvm_pv_guest_cpu_reboot() with kvm_guest_cpu_offline() (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Disable all PV features on crash (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Disable kvmclock on all CPUs on shutdown (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Teardown PV features on boot CPU as well (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Fix pr_info() for async PF setup/teardown (Lenny Szubowicz) [1964930 1934273]
- net/sched: act_ct: Fix ct template allocation for zone 0 (Marcelo Ricardo Leitner) [1965150 1881824]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.8.1.el8_4]" date="1624363200">- iavf: amend removal of MODULE_VERSION (Stefan Assmann) [1969925 1955738]
- ixgbe: Amend commit acf03026ec5a to include a version string in module info. (Ken Cox) [1969922 1955759]
- i40e: amend removal of MODULE_VERSION (Stefan Assmann) [1969923 1955736]
- redhat/configs: Add CONFIG_PINCTRL_EMMITSBURG (David Arcari) [1963984 1959506]
- redhat/configs: Remove CONFIG_EMMITSBURG (David Arcari) [1963984 1959506]
- netlink: add tracepoint at NL_SET_ERR_MSG (Marcelo Ricardo Leitner) [1972938 1956983]
- Revert "[netdrv] net/intel: remove driver versions from Intel drivers" (Jonathan Toppins) [1969917 1955745]
- Amends commit ea6244cc248b to include a version string in module info. (Ken Cox) [1969915 1955726]
- Revert "[netdrv] net/broadcom: Clean broadcom code from driver versions" (Jonathan Toppins) [1969914 1955721]
- ena: revert removal of MODULE_VERSION from ena (Petr Oros) [1969913 1955712]
- fm10k: amend removal of MODULE_VERSION (Vladis Dronov) [1969910 1955730]
- net/sched: act_ct: Offload connections with commit action (Marcelo Ricardo Leitner) [1968679 1965817]
- netfilter: flowtable: Remove redundant hw refresh bit (Marcelo Ricardo Leitner) [1968679 1965817]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.9.1.el8_4]" date="1624881600">- ixgbevf: Amend commit acf03026ec5a to include a version in module info. (Ken Cox) [1969911 1955764]
- CI: Merge configuration (Veronika Kabatova)
- igc: amend removal of MODULE_VERSION (Corinna Vinschen) [1969921 1955755]
- igb: amend removal of MODULE_VERSION (Corinna Vinschen) [1969919 1955748]
- locking/qrwlock: Fix ordering in queued_write_lock_slowpath() (Waiman Long) [1964419 1950110]
- scsi: qedf: Do not put host in qedf_vport_create() unconditionally (Nilesh Javali) [1974968 1899384]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.10.1.el8_4]" date="1625659200">- igbvf: amend removal of MODULE_VERSION (Corinna Vinschen) [1969920 1955752]
- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971464 1971488] {CVE-2021-32399}
- scsi: ibmvfc: Free channel_setup_buf during device tear down (Steve Best) [1964697 1938102]
- i40e: Fix parameters in aq_get_phy_register() (Stefan Assmann) [1967099 1907852]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.10.2.el8_4]" date="1626091200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975181 1975182] {CVE-2021-33909}</changelog>
</package>
<package pkgid="7f1a39680e58aa2493d66df9831ce77bc84199d1450e44c5515b48968f8f369c" name="kernel-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="348.20.1.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.12.1.el8_5]" date="1641988800">- tcp: don't free a FIN sk_buff in tcp_remove_empty_skb() (Guillaume Nault) [2021574 2016210]
- kernel.spec: Add support to use vmlinux.h (Jiri Olsa) [2031053 1989087]
- spec: Add vmlinux.h to kernel-devel package (Jiri Olsa) [2031053 1989087]
- x86/mce: Avoid infinite loop for copy from user recovery (Prarit Bhargava) [2008789 1999550]
- x86/mce: Rename kill_it to kill_current_task (Prarit Bhargava) [2008789 1999550]
- x86/mce: Recover from poison found while copying from user space (Prarit Bhargava) [2008789 1999550]
- x86/mce: Delay clearing IA32_MCG_STATUS to the end of do_machine_check() (Prarit Bhargava) [2008789 1999550]
- x86/mce: Send #MC singal from task work (Prarit Bhargava) [2008789 1999550]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-348.13.1.el8_5]" date="1642507200">- vfs: Out-of-bounds write of heap buffer in fs_context.c (Frantisek Hrbata) [2040585 2040586] {CVE-2022-0185}
- xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Bruno Meneguele) [2034864 2034865] {CVE-2021-4155}
- af_unix: fix garbage collect vs MSG_PEEK (Patrick Talbert) [2031974 2031975] {CVE-2021-0920}
- cgroup: verify that source is a string (Waiman Long) [2034608 2034609] {CVE-2021-4154}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-348.14.1.el8_5]" date="1643198400">- tcp: fix page frag corruption on page fault (Paolo Abeni) [2041529 1996074]
- net: fix sk_page_frag() recursion from memory reclaim (Paolo Abeni) [2041529 1996074]
- KVM: s390: index kvm-&gt;arch.idle_mask by vcpu_idx (Thomas Huth) [2040769 2026230]
- redhat: set LC_ALL=C before sorting config content (Frantisek Hrbata)</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.15.1.el8_5]" date="1643716800">- net/mlx5: DR, Use FW API when updating FW-owned flow table (Michal Schmidt) [2042663 2042651]
- KVM: x86: Wait for IPIs to be delivered when handling Hyper-V TLB flush hypercall (Vitaly Kuznetsov) [2043237 1868572]
- drm/mgag200: Select clock in PLL update functions (Bruno Meneguele) [2034949 1953926]
- drm/i915: Fix HAS_LSPCON macro for platforms between GEN9 and GEN10 (Bruno Meneguele) [2027335 2005586]
- crypto: qat - power up 4xxx device (Vladis Dronov) [2016437 1960307]
- RDMA/core: Fix a double free in add_port error flow (Kamal Heib) [2038724 2008555]
- powerpc/iommu: Report the correct most efficient DMA mask for PCI devices (Steve Best) [2018928 2007425]
- powerpc/dma: Fix dma_map_ops::get_required_mask (Steve Best) [2018928 2007425]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.16.1.el8_5]" date="1644321600">- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047601 2047602] {CVE-2022-22942}
- net: openvswitch: Fix ct_state nat flags for conns arriving from tc (Marcelo Ricardo Leitner) [2043548 2040334]
- net: openvswitch: Fix matching zone id for invalid conns arriving from tc (Marcelo Ricardo Leitner) [2043550 2040452]
- net/sched: flow_dissector: Fix matching on zone id for invalid conns (Marcelo Ricardo Leitner) [2043550 2040452]
- net/sched: Extend qdisc control block with tc control block (Marcelo Ricardo Leitner) [2043550 2040452]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.17.1.el8_5]" date="1644926400">- vfs: check dentry is still valid in get_link() (Ian Kent) [2052558 2014846]
- xfs: don't expose internal symlink metadata buffers to the vfs (Brian Foster) [2052558 2014846]
- CI: Use appropriate zstream builder (Veronika Kabatova)
- CI: Enable baseline realtime checks (Veronika Kabatova)
- CI: Rename pipelines to include release names (Veronika Kabatova)
- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052166 2052167] {CVE-2022-0492}
- ice: Remove boolean vlan_promisc flag from function (Jonathan Toppins) [2051951 2030400]
- ceph: put the requests/sessions when it fails to alloc memory (Jeffrey Layton) [2053725 2017796]
- ceph: fix off by one bugs in unsafe_request_wait() (Jeffrey Layton) [2053725 2017796]
- ceph: flush the mdlog before waiting on unsafe reqs (Jeffrey Layton) [2053725 2017796]
- ceph: flush mdlog before umounting (Jeffrey Layton) [2053725 2017796]
- ceph: make iterate_sessions a global symbol (Jeffrey Layton) [2053725 2017796]
- ceph: make ceph_create_session_msg a global symbol (Jeffrey Layton) [2053725 2017796]
- xfs: check sb_meta_uuid for dabuf buffer recovery (Bill O'Donnell) [2049292 2020764]
- drm/i915: Flush TLBs before releasing backing store (Patrick Talbert) [2044328 2044329] {CVE-2022-0330}
- hugetlb: fix hugetlb cgroup refcounting during vma split (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: fix imbalanced css_get and css_put pair for shared mappings (Waiman Long) [2039015 2032811]
- mm/hugetlb: change hugetlb_reserve_pages() to type bool (Waiman Long) [2039015 2032811]
- hugetlb: fix an error code in hugetlb_reserve_pages() (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: fix offline of hugetlb cgroup with reservations (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: fix reservation accounting (Waiman Long) [2039015 2032811]
- mm/hugetlb: narrow the hugetlb_lock protection area during preparing huge page (Waiman Long) [2039015 2032811]
- mm/hugetlb: a page from buddy is not on any list (Waiman Long) [2039015 2032811]
- mm/hugetlb: not necessary to coalesce regions recursively (Waiman Long) [2039015 2032811]
- selftests/vm/write_to_hugetlbfs.c: fix unused variable warning (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add hugetlb_cgroup reservation tests (Waiman Long) [2039015 2032811]
- hugetlb: support file_region coalescing again (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: support noreserve mappings (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add accounting for shared mappings (Waiman Long) [2039015 2032811]
- hugetlb: disable region_add file_region coalescing (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add reservation accounting for private mappings (Waiman Long) [2039015 2032811]
- mm/hugetlb_cgroup: fix hugetlb_cgroup migration (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add interface for charge/uncharge hugetlb reservations (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add hugetlb_cgroup reservation counter (Waiman Long) [2039015 2032811]
- hugetlb: remove duplicated code (Waiman Long) [2039015 2032811]
- hugetlb: region_chg provides only cache entry (Waiman Long) [2039015 2032811]
- hugetlbfs: always use address space in inode for resv_map pointer (Waiman Long) [2039015 2032811]
- hugetlbfs: fix potential over/underflow setting node specific nr_hugepages (Waiman Long) [2039015 2032811]
- hugetlb: allow to free gigantic pages regardless of the configuration (Waiman Long) [2039015 2032811]
- powerpc/pseries: Fix update of LPAR security flavor after LPM (Steve Best) [2027448 1997294]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.18.1.el8_5]" date="1645531200">- selftests: kvm: Check whether SIDA memop fails for normal guests (Thomas Huth) [2050806 2050807] {CVE-2022-0516}
- KVM: s390: Return error on SIDA memop on normal guest (Thomas Huth) [2050806 2050807] {CVE-2022-0516}
- iommu/amd: Remove iommu_init_ga() (Jerry Snitselaar) [2030854 1998265]
- iommu/amd: Relocate GAMSup check to early_enable_iommus (Jerry Snitselaar) [2030854 1998265]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.19.1.el8_5]" date="1646049600">- tipc: improve size validations for received domain records (Xin Long) [2048970 2048971] {CVE-2022-0435}
- smb3: do not error on fsync when readonly (Ronnie Sahlberg) [2055824 2037811]
- security: implement sctp_assoc_established hook in selinux (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- security: add sctp_assoc_established hook (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- security: call security_sctp_assoc_request in sctp_sf_do_5_1D_ce (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- security: pass asoc to sctp_assoc_request and sctp_sk_clone (Bruno Meneguele) [2054112 2054117 2015525 2048251]
- net: sctp: Fix some typos (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- RDMA/bnxt_re: Fix stats counters (Selvin Xavier) [2049684 2001893]
- net: check skb sec_path when re-initializing slow_gro in gro_list_prepare (Xin Long) [2047427 2030476]
- cpufreq: intel_pstate: Add Icelake servers support in no-HWP mode (David Arcari) [2036888 2003695]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.20.1.el8_5]" date="1646740800">- lib/iov_iter: initialize "flags" in new pipe_buffer (Jan Stancek) [2060874 2060875] {CVE-2022-0847}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-348.20.1.el8.centos" date="1646913600">- Apply debranding changes</changelog>
</package>
<package pkgid="d0d9cd5bad3a56f6cedf712dc43938f57dd1ef5dcd4618e813bbf82de0c4001e" name="kernel-debuginfo-common-x86_64" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="165c151d53ce7c510ec0dc3b4efdebeaeca1befaa0a6f904166621325c1ba6f8" name="kernel-debuginfo-common-x86_64" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="193.28.1.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.20.1.el8_2]" date="1599134400">- [infiniband] IB/rdmavt: Fix RQ counting issues causing use of an invalid RWQE (Kamal Heib) [1872771 1850314]
- [block] blk-mq: Rerun dispatching in the case of budget contention (Ming Lei) [1869779 1824037]
- [block] blk-mq: Add blk_mq_delay_run_hw_queues() API call (Ming Lei) [1869779 1824037]
- [block] blk-mq: In blk_mq_dispatch_rq_list() "no budget" is a reason to kick (Ming Lei) [1869779 1824037]
- [block] blk-mq: Put driver tag in blk_mq_dispatch_rq_list() when no budget (Ming Lei) [1869779 1824037]
- [md] dm mpath: use double checked locking in fast path (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rename current_pgpath to pgpath in multipath_prepare_ioctl (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rework __map_bio() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: factor out multipath_queue_bio (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: push locking down to must_push_back_rq() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: take m-&gt;lock spinlock when testing QUEUE_IF_NO_PATH (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: changes from initial m-&gt;flags locking audit (Mike Snitzer) [1869386 1848651]
- [md] dm rq: don't call blk_mq_queue_stopped() in dm_stop_queue() (Mike Snitzer) [1869386 1848651]
- [md] dm: do not use waitqueue for request-based DM (Mike Snitzer) [1869386 1848651]
- [block] blk-mq: consider non-idle request as "inflight" in blk_mq_rq_inflight() (Mike Snitzer) [1869386 1848651]
- [kernel] sched/deadline: Initialize -&gt;dl_boosted (Phil Auld) [1867612 1854179]
- [kernel] sched/core: Fix PI boosting between RT and DEADLINE tasks (Phil Auld) [1867612 1854179]
- [net] net/smc: tolerate future SMCD versions (Philipp Rudo) [1866390 1854992]
- [net] openvswitch: fixes potential deadlock in dp cleanup code (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: reorder masks array based on usage (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: take into account de-fragmentation/gso_size in execute_check_pkt_len (Lorenzo Bianconi) [1860169 1851888]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.21.1.el8_2]" date="1599739200">- [scsi] scsi: ibmvfc: Fix NULL return compiler warning (Steve Best) [1866371 1810653]
- [scsi] scsi: ibmvfc: Avoid loss of all paths during SVC node reboot (Steve Best) [1866371 1810653]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.22.1.el8_2]" date="1600257600">- [crypto] pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1877530 1862072]
- [crypto] Revert "pefile: Tolerate other pefile signatures after first" (Bruno Meneguele)
- [infiniband] IB/hfi1: Fix another case where pq is left on waitlist (Kamal Heib) [1872766 1859209]
- [infiniband] IB/hfi1: Ensure pq is not left on waitlist (Kamal Heib) [1872766 1859209]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.23.1.el8_2]" date="1600344000">- [net] packet: fix overflow in tpacket_rcv (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}
- [net] packet: make tp_drops atomic (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.24.1.el8_2]" date="1600862400">- [kernel] timers: Remove must_forward_clk (Phil Auld) [1877417 1833096]
- [kernel] timers: Spare timer softirq until next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Expand clk forward logic beyond nohz (Phil Auld) [1877417 1833096]
- [kernel] timers: Reuse next expiry cache after nohz exit (Phil Auld) [1877417 1833096]
- [kernel] timers: Always keep track of next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Optimize _next_timer_interrupt() level iteration (Phil Auld) [1877417 1833096]
- [kernel] timers: Add comments about calc_index() ceiling work (Phil Auld) [1877417 1833096]
- [kernel] timers: Move trigger_dyntick_cpu() to enqueue_timer() (Phil Auld) [1877417 1833096]
- [kernel] timers: Use only bucket expiry for base-&gt;next_expiry value (Phil Auld) [1877417 1833096]
- [kernel] timers: Preserve higher bits of expiration on index calculation (Phil Auld) [1877417 1833096]
- [kernel] timer: Fix wheel index calculation on last level (Phil Auld) [1877417 1833096]
- [kernel] timer: Prevent base-&gt;clk from moving backward (Phil Auld) [1877417 1833096]
- [kernel] timer: Read jiffies once when forwarding base clk (Phil Auld) [1877417 1833096]
- [infiniband] RDMA/umem: Fix ib_umem_find_best_pgsz() (Kamal Heib) [1872424 1856158]
- [net] net: accept an empty mask in /sys/class/net/*/queues/rx-*/rps_cpus (Nitesh Narayan Lal) [1870181 1868433]
- [net] net: Restrict receive packets queuing to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [pci] PCI: Restrict probe functions to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [lib] lib: Restrict cpumask_local_spread to houskeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [s390] s390/pci: Fix unexpected write combine on resource (Philipp Rudo) [1869276 1827311]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.25.1.el8_2]" date="1601553600">- [net] netfilter: conntrack: proc: rename stat column (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: add clash resolution stat counter (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: remove ignore stats (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not increment two error counters at same time (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not auto-delete clash entries on reply (Florian Westphal) [1882095 1875681]
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1881085 1875316] {CVE-2020-14385}
- [kernel] time/tick-broadcast: Fix tick_broadcast_offline() lockdep complaint (Alexey Klimov) [1880081 1877380]
- [net] atomics/treewide: Rename __atomic_add_unless() =&gt; atomic_fetch_add_unless() (Yauheni Kaliuta) [1880081 1813370]
- [kernel] timers: Lower base clock forwarding threshold (Phil Auld) [1877417 1833096]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.26.1.el8_2]" date="1602158400">- [firmware] efi: don't reserve MOK config table memory region (Kairui Song) [1879988 1878584]
- [security] integrity: Load certs from the EFI MOK config table (Lenny Szubowicz) [1877528 1868306]
- [security] integrity: Move import of MokListRT certs to a separate routine (Lenny Szubowicz) [1877528 1868306]
- [firmware] efi: Support for MOK variable config table (Lenny Szubowicz) [1877528 1868306]
- [security] efi: Only print errors about failing to get certs if EFI vars are found (Lenny Szubowicz) [1877528 1804969]
- [fs] ceph: fix inode number handling on arches with 32-bit ino_t (Jeff Layton) [1875787 1866018]
- [fs] ceph: handle zero-length feature mask in session messages (Jeff Layton) [1875787 1866018]
- [fs] ceph: fix endianness bug when handling MDS session feature bits (Jeff Layton) [1875787 1866018]
- [netdrv] net/mlx5e: Fix missing cleanup of ethtool steering during rep rx cleanup (Alaa Hleihel) [1857777 1856660]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.27.1.el8_2]" date="1602763200">- [powerpc] powerpc/pseries: Do not initiate shutdown when system is running on UPS (Diego Domingos) [1882243 1870477]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859471 1859472] {CVE-2020-14331}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.28.1.el8_2]" date="1602849600">- [net] Bluetooth: L2CAP: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888256 1888258] {CVE-2020-12351}
- [net] Bluetooth: A2MP: Fix not initializing all members (Gopal Tiwari) [1888906 1888807] {CVE-2020-12352}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-193.28.1.el8.centos" date="1603195200">- Apply debranding changes</changelog>
</package>
<package pkgid="b2f2b554b719aa2356f9bb71884aefd5f66850a9d980ee886f111b51cd7feaf1" name="kernel-debuginfo-common-x86_64" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="305.10.2.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.2.1.el8_4]" date="1620648000">- net/mlx5e: Allow to match on MPLS parameters only for MPLS over UDP (Alaa Hleihel) [1952061 1936742]
- net/mlx5e: Reject tc rules which redirect from a VF to itself (Alaa Hleihel) [1952065 1932839]
- net/mlx5: CT: Add support for matching on ct_state inv and rel flags (Alaa Hleihel) [1952062 1942681]
- KVM: VMX: Don't use vcpu-&gt;run-&gt;internal.ndata as an array index (Jon Maloy) [1954221 1954219]
- tools/power turbostat: Revert "[tools] tools/power turbostat: Enable accumulate RAPL display" (Prarit Bhargava) [1952987 1944699]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.3.1.el8_4]" date="1621252800">- Revert "uio: use request_threaded_irq instead" (Vitaly Kuznetsov) [1952952 1946644]
- drm/ast: Set format registers in primary plane's update (Lyude Paul) [1952900 1923857]
- net/sched: act_ct: clear post_ct if doing ct_clear (Marcelo Ricardo Leitner) [1956458 1941889]
- md/raid1: properly indicate failure when ending a failed write request (Nigel Croxon) [1955188 1954588]
- nitro_enclaves: Fix stale file descriptors on failed usercopy (Vitaly Kuznetsov) [1956379 1953717]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.4.1.el8_4]" date="1621944000">- vmxnet3: Set the default of vxlan overlay offload to disabled (Cathy Avery) [1960702 1941714]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.5.1.el8_4]" date="1622548800">- gfs2: report "already frozen/thawed" errors (Bob Peterson) [1961849 1932236]
- gfs2: move freeze glock outside the make_fs_rw and _ro functions (Bob Peterson) [1961849 1932236]
- gfs2: Add common helper for holding and releasing the freeze glock (Bob Peterson) [1961849 1932236]
- gfs2: in signal_our_withdraw wait for unfreeze of _this_ fs only (Bob Peterson) [1961849 1932236]
- gfs2: Don't freeze the file system during unmount (Bob Peterson) [1961849 1932236]
- gfs2: Fix regression in freeze_go_sync (Bob Peterson) [1961849 1932236]
- gfs2: The freeze glock should never be frozen (Bob Peterson) [1961849 1932236]
- gfs2: When freezing gfs2, use GL_EXACT and not GL_NOCACHE (Bob Peterson) [1961849 1932236]
- gfs2: read-only mounts should grab the sd_freeze_gl glock (Bob Peterson) [1961849 1932236]
- gfs2: freeze should work on read-only mounts (Bob Peterson) [1961849 1932236]
- gfs2: Abort gfs2_freeze if io error is seen (Bob Peterson) [1961849 1932236]
- CI: Disable result checking for realtime check (Veronika Kabatova)
- CI: Explicitly disable result checking for private CI (Veronika Kabatova)
- CI: Rename variable (Veronika Kabatova)
- CI: Update builder containers (Veronika Kabatova)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.6.1.el8_4]" date="1623067200">- openvswitch: fix stack OOB read while fragmenting IPv4 packets (Davide Caratti) [1963940 1924608]
- net/sched: sch_frag: fix stack OOB read while fragmenting IPv4 packets (Davide Caratti) [1963940 1924608]
- net/sched: act_ct: fix wild memory access when clearing fragments (Davide Caratti) [1963940 1924608]
- net: Treat __napi_schedule_irqoff() as __napi_schedule() on PREEMPT_RT (Ivan Vecera)
- redhat/configs: Add CONFIG_SYSTEM_REVOCATION_KEYS and CONFIG_SYSTEM_REVOCATION_LIST (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: add 'x509_revocation_list' to gitignore (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- integrity: Load mokx variables into the blacklist keyring (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Add ability to preload revocation certs (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Move load_system_certificate_list to a common function (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Add EFI_CERT_X509_GUID support for dbx entries (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- net/sched: cls_api: increase max_reclassify_loop (Davide Caratti) [1965148 1955136]
- dm writecache: fix performance degradation in ssd mode (Mike Snitzer) [1962241 1961859]
- scsi: fnic: Use scsi_host_busy_iter() to traverse commands (Ewan D. Milne) [1961705 1949250]
- scsi: fnic: Kill 'exclude_id' argument to fnic_cleanup_io() (Ewan D. Milne) [1961705 1949250]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.7.1.el8_4]" date="1623672000">- net: zero-initialize tc skb extension on allocation (Ivan Vecera) [1965457 1946986]
- net/sched: cls_flower: fix only mask bit check in the validate_ct_state (Ivan Vecera) [1965457 1946986]
- net: cls_api: Fix uninitialised struct field bo-&gt;unlocked_driver_cb (Ivan Vecera) [1965457 1946986]
- net/sched: act_api: fix miss set post_ct for ovs after do conntrack in act_ct (Ivan Vecera) [1965457 1946986]
- net/sched: cls_flower: validate ct_state for invalid and reply flags (Ivan Vecera) [1965457 1946986]
- flow_dissector: fix TTL and TOS dissection on IPv4 fragments (Paolo Abeni) [1963952 1950288]
- Revert "sctp: Fix SHUTDOWN CTSN Ack in the peer restart case" (Xin Long) [1965632 1953839]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [1965632 1953839]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [1965632 1953839]
- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962544 1962546] {CVE-2021-33034}
- x86/kvm: Unify kvm_pv_guest_cpu_reboot() with kvm_guest_cpu_offline() (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Disable all PV features on crash (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Disable kvmclock on all CPUs on shutdown (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Teardown PV features on boot CPU as well (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Fix pr_info() for async PF setup/teardown (Lenny Szubowicz) [1964930 1934273]
- net/sched: act_ct: Fix ct template allocation for zone 0 (Marcelo Ricardo Leitner) [1965150 1881824]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.8.1.el8_4]" date="1624363200">- iavf: amend removal of MODULE_VERSION (Stefan Assmann) [1969925 1955738]
- ixgbe: Amend commit acf03026ec5a to include a version string in module info. (Ken Cox) [1969922 1955759]
- i40e: amend removal of MODULE_VERSION (Stefan Assmann) [1969923 1955736]
- redhat/configs: Add CONFIG_PINCTRL_EMMITSBURG (David Arcari) [1963984 1959506]
- redhat/configs: Remove CONFIG_EMMITSBURG (David Arcari) [1963984 1959506]
- netlink: add tracepoint at NL_SET_ERR_MSG (Marcelo Ricardo Leitner) [1972938 1956983]
- Revert "[netdrv] net/intel: remove driver versions from Intel drivers" (Jonathan Toppins) [1969917 1955745]
- Amends commit ea6244cc248b to include a version string in module info. (Ken Cox) [1969915 1955726]
- Revert "[netdrv] net/broadcom: Clean broadcom code from driver versions" (Jonathan Toppins) [1969914 1955721]
- ena: revert removal of MODULE_VERSION from ena (Petr Oros) [1969913 1955712]
- fm10k: amend removal of MODULE_VERSION (Vladis Dronov) [1969910 1955730]
- net/sched: act_ct: Offload connections with commit action (Marcelo Ricardo Leitner) [1968679 1965817]
- netfilter: flowtable: Remove redundant hw refresh bit (Marcelo Ricardo Leitner) [1968679 1965817]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.9.1.el8_4]" date="1624881600">- ixgbevf: Amend commit acf03026ec5a to include a version in module info. (Ken Cox) [1969911 1955764]
- CI: Merge configuration (Veronika Kabatova)
- igc: amend removal of MODULE_VERSION (Corinna Vinschen) [1969921 1955755]
- igb: amend removal of MODULE_VERSION (Corinna Vinschen) [1969919 1955748]
- locking/qrwlock: Fix ordering in queued_write_lock_slowpath() (Waiman Long) [1964419 1950110]
- scsi: qedf: Do not put host in qedf_vport_create() unconditionally (Nilesh Javali) [1974968 1899384]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.10.1.el8_4]" date="1625659200">- igbvf: amend removal of MODULE_VERSION (Corinna Vinschen) [1969920 1955752]
- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971464 1971488] {CVE-2021-32399}
- scsi: ibmvfc: Free channel_setup_buf during device tear down (Steve Best) [1964697 1938102]
- i40e: Fix parameters in aq_get_phy_register() (Stefan Assmann) [1967099 1907852]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.10.2.el8_4]" date="1626091200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975181 1975182] {CVE-2021-33909}</changelog>
</package>
<package pkgid="dbf0bf461857b0ffd43686c6b06490eca348e11d5de1b1090d8ccf8b135663f1" name="kernel-debuginfo-common-x86_64" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="348.20.1.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.12.1.el8_5]" date="1641988800">- tcp: don't free a FIN sk_buff in tcp_remove_empty_skb() (Guillaume Nault) [2021574 2016210]
- kernel.spec: Add support to use vmlinux.h (Jiri Olsa) [2031053 1989087]
- spec: Add vmlinux.h to kernel-devel package (Jiri Olsa) [2031053 1989087]
- x86/mce: Avoid infinite loop for copy from user recovery (Prarit Bhargava) [2008789 1999550]
- x86/mce: Rename kill_it to kill_current_task (Prarit Bhargava) [2008789 1999550]
- x86/mce: Recover from poison found while copying from user space (Prarit Bhargava) [2008789 1999550]
- x86/mce: Delay clearing IA32_MCG_STATUS to the end of do_machine_check() (Prarit Bhargava) [2008789 1999550]
- x86/mce: Send #MC singal from task work (Prarit Bhargava) [2008789 1999550]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-348.13.1.el8_5]" date="1642507200">- vfs: Out-of-bounds write of heap buffer in fs_context.c (Frantisek Hrbata) [2040585 2040586] {CVE-2022-0185}
- xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Bruno Meneguele) [2034864 2034865] {CVE-2021-4155}
- af_unix: fix garbage collect vs MSG_PEEK (Patrick Talbert) [2031974 2031975] {CVE-2021-0920}
- cgroup: verify that source is a string (Waiman Long) [2034608 2034609] {CVE-2021-4154}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-348.14.1.el8_5]" date="1643198400">- tcp: fix page frag corruption on page fault (Paolo Abeni) [2041529 1996074]
- net: fix sk_page_frag() recursion from memory reclaim (Paolo Abeni) [2041529 1996074]
- KVM: s390: index kvm-&gt;arch.idle_mask by vcpu_idx (Thomas Huth) [2040769 2026230]
- redhat: set LC_ALL=C before sorting config content (Frantisek Hrbata)</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.15.1.el8_5]" date="1643716800">- net/mlx5: DR, Use FW API when updating FW-owned flow table (Michal Schmidt) [2042663 2042651]
- KVM: x86: Wait for IPIs to be delivered when handling Hyper-V TLB flush hypercall (Vitaly Kuznetsov) [2043237 1868572]
- drm/mgag200: Select clock in PLL update functions (Bruno Meneguele) [2034949 1953926]
- drm/i915: Fix HAS_LSPCON macro for platforms between GEN9 and GEN10 (Bruno Meneguele) [2027335 2005586]
- crypto: qat - power up 4xxx device (Vladis Dronov) [2016437 1960307]
- RDMA/core: Fix a double free in add_port error flow (Kamal Heib) [2038724 2008555]
- powerpc/iommu: Report the correct most efficient DMA mask for PCI devices (Steve Best) [2018928 2007425]
- powerpc/dma: Fix dma_map_ops::get_required_mask (Steve Best) [2018928 2007425]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.16.1.el8_5]" date="1644321600">- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047601 2047602] {CVE-2022-22942}
- net: openvswitch: Fix ct_state nat flags for conns arriving from tc (Marcelo Ricardo Leitner) [2043548 2040334]
- net: openvswitch: Fix matching zone id for invalid conns arriving from tc (Marcelo Ricardo Leitner) [2043550 2040452]
- net/sched: flow_dissector: Fix matching on zone id for invalid conns (Marcelo Ricardo Leitner) [2043550 2040452]
- net/sched: Extend qdisc control block with tc control block (Marcelo Ricardo Leitner) [2043550 2040452]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.17.1.el8_5]" date="1644926400">- vfs: check dentry is still valid in get_link() (Ian Kent) [2052558 2014846]
- xfs: don't expose internal symlink metadata buffers to the vfs (Brian Foster) [2052558 2014846]
- CI: Use appropriate zstream builder (Veronika Kabatova)
- CI: Enable baseline realtime checks (Veronika Kabatova)
- CI: Rename pipelines to include release names (Veronika Kabatova)
- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052166 2052167] {CVE-2022-0492}
- ice: Remove boolean vlan_promisc flag from function (Jonathan Toppins) [2051951 2030400]
- ceph: put the requests/sessions when it fails to alloc memory (Jeffrey Layton) [2053725 2017796]
- ceph: fix off by one bugs in unsafe_request_wait() (Jeffrey Layton) [2053725 2017796]
- ceph: flush the mdlog before waiting on unsafe reqs (Jeffrey Layton) [2053725 2017796]
- ceph: flush mdlog before umounting (Jeffrey Layton) [2053725 2017796]
- ceph: make iterate_sessions a global symbol (Jeffrey Layton) [2053725 2017796]
- ceph: make ceph_create_session_msg a global symbol (Jeffrey Layton) [2053725 2017796]
- xfs: check sb_meta_uuid for dabuf buffer recovery (Bill O'Donnell) [2049292 2020764]
- drm/i915: Flush TLBs before releasing backing store (Patrick Talbert) [2044328 2044329] {CVE-2022-0330}
- hugetlb: fix hugetlb cgroup refcounting during vma split (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: fix imbalanced css_get and css_put pair for shared mappings (Waiman Long) [2039015 2032811]
- mm/hugetlb: change hugetlb_reserve_pages() to type bool (Waiman Long) [2039015 2032811]
- hugetlb: fix an error code in hugetlb_reserve_pages() (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: fix offline of hugetlb cgroup with reservations (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: fix reservation accounting (Waiman Long) [2039015 2032811]
- mm/hugetlb: narrow the hugetlb_lock protection area during preparing huge page (Waiman Long) [2039015 2032811]
- mm/hugetlb: a page from buddy is not on any list (Waiman Long) [2039015 2032811]
- mm/hugetlb: not necessary to coalesce regions recursively (Waiman Long) [2039015 2032811]
- selftests/vm/write_to_hugetlbfs.c: fix unused variable warning (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add hugetlb_cgroup reservation tests (Waiman Long) [2039015 2032811]
- hugetlb: support file_region coalescing again (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: support noreserve mappings (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add accounting for shared mappings (Waiman Long) [2039015 2032811]
- hugetlb: disable region_add file_region coalescing (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add reservation accounting for private mappings (Waiman Long) [2039015 2032811]
- mm/hugetlb_cgroup: fix hugetlb_cgroup migration (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add interface for charge/uncharge hugetlb reservations (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add hugetlb_cgroup reservation counter (Waiman Long) [2039015 2032811]
- hugetlb: remove duplicated code (Waiman Long) [2039015 2032811]
- hugetlb: region_chg provides only cache entry (Waiman Long) [2039015 2032811]
- hugetlbfs: always use address space in inode for resv_map pointer (Waiman Long) [2039015 2032811]
- hugetlbfs: fix potential over/underflow setting node specific nr_hugepages (Waiman Long) [2039015 2032811]
- hugetlb: allow to free gigantic pages regardless of the configuration (Waiman Long) [2039015 2032811]
- powerpc/pseries: Fix update of LPAR security flavor after LPM (Steve Best) [2027448 1997294]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.18.1.el8_5]" date="1645531200">- selftests: kvm: Check whether SIDA memop fails for normal guests (Thomas Huth) [2050806 2050807] {CVE-2022-0516}
- KVM: s390: Return error on SIDA memop on normal guest (Thomas Huth) [2050806 2050807] {CVE-2022-0516}
- iommu/amd: Remove iommu_init_ga() (Jerry Snitselaar) [2030854 1998265]
- iommu/amd: Relocate GAMSup check to early_enable_iommus (Jerry Snitselaar) [2030854 1998265]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.19.1.el8_5]" date="1646049600">- tipc: improve size validations for received domain records (Xin Long) [2048970 2048971] {CVE-2022-0435}
- smb3: do not error on fsync when readonly (Ronnie Sahlberg) [2055824 2037811]
- security: implement sctp_assoc_established hook in selinux (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- security: add sctp_assoc_established hook (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- security: call security_sctp_assoc_request in sctp_sf_do_5_1D_ce (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- security: pass asoc to sctp_assoc_request and sctp_sk_clone (Bruno Meneguele) [2054112 2054117 2015525 2048251]
- net: sctp: Fix some typos (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- RDMA/bnxt_re: Fix stats counters (Selvin Xavier) [2049684 2001893]
- net: check skb sec_path when re-initializing slow_gro in gro_list_prepare (Xin Long) [2047427 2030476]
- cpufreq: intel_pstate: Add Icelake servers support in no-HWP mode (David Arcari) [2036888 2003695]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.20.1.el8_5]" date="1646740800">- lib/iov_iter: initialize "flags" in new pipe_buffer (Jan Stancek) [2060874 2060875] {CVE-2022-0847}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-348.20.1.el8.centos" date="1646913600">- Apply debranding changes</changelog>
</package>
<package pkgid="b0adb56831c947d595fef85a590445154a5b47b7ba82b4f377a87924a690843e" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="38ddbad3436426448b4a2ef6b577590bec6db17438209a5e7619cfc9617a2467" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="193.28.1.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.20.1.el8_2]" date="1599134400">- [infiniband] IB/rdmavt: Fix RQ counting issues causing use of an invalid RWQE (Kamal Heib) [1872771 1850314]
- [block] blk-mq: Rerun dispatching in the case of budget contention (Ming Lei) [1869779 1824037]
- [block] blk-mq: Add blk_mq_delay_run_hw_queues() API call (Ming Lei) [1869779 1824037]
- [block] blk-mq: In blk_mq_dispatch_rq_list() "no budget" is a reason to kick (Ming Lei) [1869779 1824037]
- [block] blk-mq: Put driver tag in blk_mq_dispatch_rq_list() when no budget (Ming Lei) [1869779 1824037]
- [md] dm mpath: use double checked locking in fast path (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rename current_pgpath to pgpath in multipath_prepare_ioctl (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rework __map_bio() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: factor out multipath_queue_bio (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: push locking down to must_push_back_rq() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: take m-&gt;lock spinlock when testing QUEUE_IF_NO_PATH (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: changes from initial m-&gt;flags locking audit (Mike Snitzer) [1869386 1848651]
- [md] dm rq: don't call blk_mq_queue_stopped() in dm_stop_queue() (Mike Snitzer) [1869386 1848651]
- [md] dm: do not use waitqueue for request-based DM (Mike Snitzer) [1869386 1848651]
- [block] blk-mq: consider non-idle request as "inflight" in blk_mq_rq_inflight() (Mike Snitzer) [1869386 1848651]
- [kernel] sched/deadline: Initialize -&gt;dl_boosted (Phil Auld) [1867612 1854179]
- [kernel] sched/core: Fix PI boosting between RT and DEADLINE tasks (Phil Auld) [1867612 1854179]
- [net] net/smc: tolerate future SMCD versions (Philipp Rudo) [1866390 1854992]
- [net] openvswitch: fixes potential deadlock in dp cleanup code (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: reorder masks array based on usage (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: take into account de-fragmentation/gso_size in execute_check_pkt_len (Lorenzo Bianconi) [1860169 1851888]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.21.1.el8_2]" date="1599739200">- [scsi] scsi: ibmvfc: Fix NULL return compiler warning (Steve Best) [1866371 1810653]
- [scsi] scsi: ibmvfc: Avoid loss of all paths during SVC node reboot (Steve Best) [1866371 1810653]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.22.1.el8_2]" date="1600257600">- [crypto] pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1877530 1862072]
- [crypto] Revert "pefile: Tolerate other pefile signatures after first" (Bruno Meneguele)
- [infiniband] IB/hfi1: Fix another case where pq is left on waitlist (Kamal Heib) [1872766 1859209]
- [infiniband] IB/hfi1: Ensure pq is not left on waitlist (Kamal Heib) [1872766 1859209]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.23.1.el8_2]" date="1600344000">- [net] packet: fix overflow in tpacket_rcv (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}
- [net] packet: make tp_drops atomic (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.24.1.el8_2]" date="1600862400">- [kernel] timers: Remove must_forward_clk (Phil Auld) [1877417 1833096]
- [kernel] timers: Spare timer softirq until next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Expand clk forward logic beyond nohz (Phil Auld) [1877417 1833096]
- [kernel] timers: Reuse next expiry cache after nohz exit (Phil Auld) [1877417 1833096]
- [kernel] timers: Always keep track of next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Optimize _next_timer_interrupt() level iteration (Phil Auld) [1877417 1833096]
- [kernel] timers: Add comments about calc_index() ceiling work (Phil Auld) [1877417 1833096]
- [kernel] timers: Move trigger_dyntick_cpu() to enqueue_timer() (Phil Auld) [1877417 1833096]
- [kernel] timers: Use only bucket expiry for base-&gt;next_expiry value (Phil Auld) [1877417 1833096]
- [kernel] timers: Preserve higher bits of expiration on index calculation (Phil Auld) [1877417 1833096]
- [kernel] timer: Fix wheel index calculation on last level (Phil Auld) [1877417 1833096]
- [kernel] timer: Prevent base-&gt;clk from moving backward (Phil Auld) [1877417 1833096]
- [kernel] timer: Read jiffies once when forwarding base clk (Phil Auld) [1877417 1833096]
- [infiniband] RDMA/umem: Fix ib_umem_find_best_pgsz() (Kamal Heib) [1872424 1856158]
- [net] net: accept an empty mask in /sys/class/net/*/queues/rx-*/rps_cpus (Nitesh Narayan Lal) [1870181 1868433]
- [net] net: Restrict receive packets queuing to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [pci] PCI: Restrict probe functions to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [lib] lib: Restrict cpumask_local_spread to houskeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [s390] s390/pci: Fix unexpected write combine on resource (Philipp Rudo) [1869276 1827311]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.25.1.el8_2]" date="1601553600">- [net] netfilter: conntrack: proc: rename stat column (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: add clash resolution stat counter (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: remove ignore stats (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not increment two error counters at same time (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not auto-delete clash entries on reply (Florian Westphal) [1882095 1875681]
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1881085 1875316] {CVE-2020-14385}
- [kernel] time/tick-broadcast: Fix tick_broadcast_offline() lockdep complaint (Alexey Klimov) [1880081 1877380]
- [net] atomics/treewide: Rename __atomic_add_unless() =&gt; atomic_fetch_add_unless() (Yauheni Kaliuta) [1880081 1813370]
- [kernel] timers: Lower base clock forwarding threshold (Phil Auld) [1877417 1833096]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.26.1.el8_2]" date="1602158400">- [firmware] efi: don't reserve MOK config table memory region (Kairui Song) [1879988 1878584]
- [security] integrity: Load certs from the EFI MOK config table (Lenny Szubowicz) [1877528 1868306]
- [security] integrity: Move import of MokListRT certs to a separate routine (Lenny Szubowicz) [1877528 1868306]
- [firmware] efi: Support for MOK variable config table (Lenny Szubowicz) [1877528 1868306]
- [security] efi: Only print errors about failing to get certs if EFI vars are found (Lenny Szubowicz) [1877528 1804969]
- [fs] ceph: fix inode number handling on arches with 32-bit ino_t (Jeff Layton) [1875787 1866018]
- [fs] ceph: handle zero-length feature mask in session messages (Jeff Layton) [1875787 1866018]
- [fs] ceph: fix endianness bug when handling MDS session feature bits (Jeff Layton) [1875787 1866018]
- [netdrv] net/mlx5e: Fix missing cleanup of ethtool steering during rep rx cleanup (Alaa Hleihel) [1857777 1856660]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.27.1.el8_2]" date="1602763200">- [powerpc] powerpc/pseries: Do not initiate shutdown when system is running on UPS (Diego Domingos) [1882243 1870477]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859471 1859472] {CVE-2020-14331}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.28.1.el8_2]" date="1602849600">- [net] Bluetooth: L2CAP: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888256 1888258] {CVE-2020-12351}
- [net] Bluetooth: A2MP: Fix not initializing all members (Gopal Tiwari) [1888906 1888807] {CVE-2020-12352}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-193.28.1.el8.centos" date="1603195200">- Apply debranding changes</changelog>
</package>
<package pkgid="15c771665050df1600e84c5336ecdb6480e7617209e4b17f221f5a707725c109" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="305.10.2.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.2.1.el8_4]" date="1620648000">- net/mlx5e: Allow to match on MPLS parameters only for MPLS over UDP (Alaa Hleihel) [1952061 1936742]
- net/mlx5e: Reject tc rules which redirect from a VF to itself (Alaa Hleihel) [1952065 1932839]
- net/mlx5: CT: Add support for matching on ct_state inv and rel flags (Alaa Hleihel) [1952062 1942681]
- KVM: VMX: Don't use vcpu-&gt;run-&gt;internal.ndata as an array index (Jon Maloy) [1954221 1954219]
- tools/power turbostat: Revert "[tools] tools/power turbostat: Enable accumulate RAPL display" (Prarit Bhargava) [1952987 1944699]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.3.1.el8_4]" date="1621252800">- Revert "uio: use request_threaded_irq instead" (Vitaly Kuznetsov) [1952952 1946644]
- drm/ast: Set format registers in primary plane's update (Lyude Paul) [1952900 1923857]
- net/sched: act_ct: clear post_ct if doing ct_clear (Marcelo Ricardo Leitner) [1956458 1941889]
- md/raid1: properly indicate failure when ending a failed write request (Nigel Croxon) [1955188 1954588]
- nitro_enclaves: Fix stale file descriptors on failed usercopy (Vitaly Kuznetsov) [1956379 1953717]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.4.1.el8_4]" date="1621944000">- vmxnet3: Set the default of vxlan overlay offload to disabled (Cathy Avery) [1960702 1941714]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.5.1.el8_4]" date="1622548800">- gfs2: report "already frozen/thawed" errors (Bob Peterson) [1961849 1932236]
- gfs2: move freeze glock outside the make_fs_rw and _ro functions (Bob Peterson) [1961849 1932236]
- gfs2: Add common helper for holding and releasing the freeze glock (Bob Peterson) [1961849 1932236]
- gfs2: in signal_our_withdraw wait for unfreeze of _this_ fs only (Bob Peterson) [1961849 1932236]
- gfs2: Don't freeze the file system during unmount (Bob Peterson) [1961849 1932236]
- gfs2: Fix regression in freeze_go_sync (Bob Peterson) [1961849 1932236]
- gfs2: The freeze glock should never be frozen (Bob Peterson) [1961849 1932236]
- gfs2: When freezing gfs2, use GL_EXACT and not GL_NOCACHE (Bob Peterson) [1961849 1932236]
- gfs2: read-only mounts should grab the sd_freeze_gl glock (Bob Peterson) [1961849 1932236]
- gfs2: freeze should work on read-only mounts (Bob Peterson) [1961849 1932236]
- gfs2: Abort gfs2_freeze if io error is seen (Bob Peterson) [1961849 1932236]
- CI: Disable result checking for realtime check (Veronika Kabatova)
- CI: Explicitly disable result checking for private CI (Veronika Kabatova)
- CI: Rename variable (Veronika Kabatova)
- CI: Update builder containers (Veronika Kabatova)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.6.1.el8_4]" date="1623067200">- openvswitch: fix stack OOB read while fragmenting IPv4 packets (Davide Caratti) [1963940 1924608]
- net/sched: sch_frag: fix stack OOB read while fragmenting IPv4 packets (Davide Caratti) [1963940 1924608]
- net/sched: act_ct: fix wild memory access when clearing fragments (Davide Caratti) [1963940 1924608]
- net: Treat __napi_schedule_irqoff() as __napi_schedule() on PREEMPT_RT (Ivan Vecera)
- redhat/configs: Add CONFIG_SYSTEM_REVOCATION_KEYS and CONFIG_SYSTEM_REVOCATION_LIST (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: add 'x509_revocation_list' to gitignore (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- integrity: Load mokx variables into the blacklist keyring (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Add ability to preload revocation certs (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Move load_system_certificate_list to a common function (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Add EFI_CERT_X509_GUID support for dbx entries (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- net/sched: cls_api: increase max_reclassify_loop (Davide Caratti) [1965148 1955136]
- dm writecache: fix performance degradation in ssd mode (Mike Snitzer) [1962241 1961859]
- scsi: fnic: Use scsi_host_busy_iter() to traverse commands (Ewan D. Milne) [1961705 1949250]
- scsi: fnic: Kill 'exclude_id' argument to fnic_cleanup_io() (Ewan D. Milne) [1961705 1949250]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.7.1.el8_4]" date="1623672000">- net: zero-initialize tc skb extension on allocation (Ivan Vecera) [1965457 1946986]
- net/sched: cls_flower: fix only mask bit check in the validate_ct_state (Ivan Vecera) [1965457 1946986]
- net: cls_api: Fix uninitialised struct field bo-&gt;unlocked_driver_cb (Ivan Vecera) [1965457 1946986]
- net/sched: act_api: fix miss set post_ct for ovs after do conntrack in act_ct (Ivan Vecera) [1965457 1946986]
- net/sched: cls_flower: validate ct_state for invalid and reply flags (Ivan Vecera) [1965457 1946986]
- flow_dissector: fix TTL and TOS dissection on IPv4 fragments (Paolo Abeni) [1963952 1950288]
- Revert "sctp: Fix SHUTDOWN CTSN Ack in the peer restart case" (Xin Long) [1965632 1953839]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [1965632 1953839]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [1965632 1953839]
- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962544 1962546] {CVE-2021-33034}
- x86/kvm: Unify kvm_pv_guest_cpu_reboot() with kvm_guest_cpu_offline() (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Disable all PV features on crash (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Disable kvmclock on all CPUs on shutdown (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Teardown PV features on boot CPU as well (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Fix pr_info() for async PF setup/teardown (Lenny Szubowicz) [1964930 1934273]
- net/sched: act_ct: Fix ct template allocation for zone 0 (Marcelo Ricardo Leitner) [1965150 1881824]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.8.1.el8_4]" date="1624363200">- iavf: amend removal of MODULE_VERSION (Stefan Assmann) [1969925 1955738]
- ixgbe: Amend commit acf03026ec5a to include a version string in module info. (Ken Cox) [1969922 1955759]
- i40e: amend removal of MODULE_VERSION (Stefan Assmann) [1969923 1955736]
- redhat/configs: Add CONFIG_PINCTRL_EMMITSBURG (David Arcari) [1963984 1959506]
- redhat/configs: Remove CONFIG_EMMITSBURG (David Arcari) [1963984 1959506]
- netlink: add tracepoint at NL_SET_ERR_MSG (Marcelo Ricardo Leitner) [1972938 1956983]
- Revert "[netdrv] net/intel: remove driver versions from Intel drivers" (Jonathan Toppins) [1969917 1955745]
- Amends commit ea6244cc248b to include a version string in module info. (Ken Cox) [1969915 1955726]
- Revert "[netdrv] net/broadcom: Clean broadcom code from driver versions" (Jonathan Toppins) [1969914 1955721]
- ena: revert removal of MODULE_VERSION from ena (Petr Oros) [1969913 1955712]
- fm10k: amend removal of MODULE_VERSION (Vladis Dronov) [1969910 1955730]
- net/sched: act_ct: Offload connections with commit action (Marcelo Ricardo Leitner) [1968679 1965817]
- netfilter: flowtable: Remove redundant hw refresh bit (Marcelo Ricardo Leitner) [1968679 1965817]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.9.1.el8_4]" date="1624881600">- ixgbevf: Amend commit acf03026ec5a to include a version in module info. (Ken Cox) [1969911 1955764]
- CI: Merge configuration (Veronika Kabatova)
- igc: amend removal of MODULE_VERSION (Corinna Vinschen) [1969921 1955755]
- igb: amend removal of MODULE_VERSION (Corinna Vinschen) [1969919 1955748]
- locking/qrwlock: Fix ordering in queued_write_lock_slowpath() (Waiman Long) [1964419 1950110]
- scsi: qedf: Do not put host in qedf_vport_create() unconditionally (Nilesh Javali) [1974968 1899384]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.10.1.el8_4]" date="1625659200">- igbvf: amend removal of MODULE_VERSION (Corinna Vinschen) [1969920 1955752]
- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971464 1971488] {CVE-2021-32399}
- scsi: ibmvfc: Free channel_setup_buf during device tear down (Steve Best) [1964697 1938102]
- i40e: Fix parameters in aq_get_phy_register() (Stefan Assmann) [1967099 1907852]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.10.2.el8_4]" date="1626091200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975181 1975182] {CVE-2021-33909}</changelog>
</package>
<package pkgid="900afe9f4fb0e4e18d8cb9b7a43e33f4137f709e3fe267a664c58496fb2089c3" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="348.20.1.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.12.1.el8_5]" date="1641988800">- tcp: don't free a FIN sk_buff in tcp_remove_empty_skb() (Guillaume Nault) [2021574 2016210]
- kernel.spec: Add support to use vmlinux.h (Jiri Olsa) [2031053 1989087]
- spec: Add vmlinux.h to kernel-devel package (Jiri Olsa) [2031053 1989087]
- x86/mce: Avoid infinite loop for copy from user recovery (Prarit Bhargava) [2008789 1999550]
- x86/mce: Rename kill_it to kill_current_task (Prarit Bhargava) [2008789 1999550]
- x86/mce: Recover from poison found while copying from user space (Prarit Bhargava) [2008789 1999550]
- x86/mce: Delay clearing IA32_MCG_STATUS to the end of do_machine_check() (Prarit Bhargava) [2008789 1999550]
- x86/mce: Send #MC singal from task work (Prarit Bhargava) [2008789 1999550]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-348.13.1.el8_5]" date="1642507200">- vfs: Out-of-bounds write of heap buffer in fs_context.c (Frantisek Hrbata) [2040585 2040586] {CVE-2022-0185}
- xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Bruno Meneguele) [2034864 2034865] {CVE-2021-4155}
- af_unix: fix garbage collect vs MSG_PEEK (Patrick Talbert) [2031974 2031975] {CVE-2021-0920}
- cgroup: verify that source is a string (Waiman Long) [2034608 2034609] {CVE-2021-4154}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-348.14.1.el8_5]" date="1643198400">- tcp: fix page frag corruption on page fault (Paolo Abeni) [2041529 1996074]
- net: fix sk_page_frag() recursion from memory reclaim (Paolo Abeni) [2041529 1996074]
- KVM: s390: index kvm-&gt;arch.idle_mask by vcpu_idx (Thomas Huth) [2040769 2026230]
- redhat: set LC_ALL=C before sorting config content (Frantisek Hrbata)</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.15.1.el8_5]" date="1643716800">- net/mlx5: DR, Use FW API when updating FW-owned flow table (Michal Schmidt) [2042663 2042651]
- KVM: x86: Wait for IPIs to be delivered when handling Hyper-V TLB flush hypercall (Vitaly Kuznetsov) [2043237 1868572]
- drm/mgag200: Select clock in PLL update functions (Bruno Meneguele) [2034949 1953926]
- drm/i915: Fix HAS_LSPCON macro for platforms between GEN9 and GEN10 (Bruno Meneguele) [2027335 2005586]
- crypto: qat - power up 4xxx device (Vladis Dronov) [2016437 1960307]
- RDMA/core: Fix a double free in add_port error flow (Kamal Heib) [2038724 2008555]
- powerpc/iommu: Report the correct most efficient DMA mask for PCI devices (Steve Best) [2018928 2007425]
- powerpc/dma: Fix dma_map_ops::get_required_mask (Steve Best) [2018928 2007425]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.16.1.el8_5]" date="1644321600">- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047601 2047602] {CVE-2022-22942}
- net: openvswitch: Fix ct_state nat flags for conns arriving from tc (Marcelo Ricardo Leitner) [2043548 2040334]
- net: openvswitch: Fix matching zone id for invalid conns arriving from tc (Marcelo Ricardo Leitner) [2043550 2040452]
- net/sched: flow_dissector: Fix matching on zone id for invalid conns (Marcelo Ricardo Leitner) [2043550 2040452]
- net/sched: Extend qdisc control block with tc control block (Marcelo Ricardo Leitner) [2043550 2040452]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.17.1.el8_5]" date="1644926400">- vfs: check dentry is still valid in get_link() (Ian Kent) [2052558 2014846]
- xfs: don't expose internal symlink metadata buffers to the vfs (Brian Foster) [2052558 2014846]
- CI: Use appropriate zstream builder (Veronika Kabatova)
- CI: Enable baseline realtime checks (Veronika Kabatova)
- CI: Rename pipelines to include release names (Veronika Kabatova)
- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052166 2052167] {CVE-2022-0492}
- ice: Remove boolean vlan_promisc flag from function (Jonathan Toppins) [2051951 2030400]
- ceph: put the requests/sessions when it fails to alloc memory (Jeffrey Layton) [2053725 2017796]
- ceph: fix off by one bugs in unsafe_request_wait() (Jeffrey Layton) [2053725 2017796]
- ceph: flush the mdlog before waiting on unsafe reqs (Jeffrey Layton) [2053725 2017796]
- ceph: flush mdlog before umounting (Jeffrey Layton) [2053725 2017796]
- ceph: make iterate_sessions a global symbol (Jeffrey Layton) [2053725 2017796]
- ceph: make ceph_create_session_msg a global symbol (Jeffrey Layton) [2053725 2017796]
- xfs: check sb_meta_uuid for dabuf buffer recovery (Bill O'Donnell) [2049292 2020764]
- drm/i915: Flush TLBs before releasing backing store (Patrick Talbert) [2044328 2044329] {CVE-2022-0330}
- hugetlb: fix hugetlb cgroup refcounting during vma split (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: fix imbalanced css_get and css_put pair for shared mappings (Waiman Long) [2039015 2032811]
- mm/hugetlb: change hugetlb_reserve_pages() to type bool (Waiman Long) [2039015 2032811]
- hugetlb: fix an error code in hugetlb_reserve_pages() (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: fix offline of hugetlb cgroup with reservations (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: fix reservation accounting (Waiman Long) [2039015 2032811]
- mm/hugetlb: narrow the hugetlb_lock protection area during preparing huge page (Waiman Long) [2039015 2032811]
- mm/hugetlb: a page from buddy is not on any list (Waiman Long) [2039015 2032811]
- mm/hugetlb: not necessary to coalesce regions recursively (Waiman Long) [2039015 2032811]
- selftests/vm/write_to_hugetlbfs.c: fix unused variable warning (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add hugetlb_cgroup reservation tests (Waiman Long) [2039015 2032811]
- hugetlb: support file_region coalescing again (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: support noreserve mappings (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add accounting for shared mappings (Waiman Long) [2039015 2032811]
- hugetlb: disable region_add file_region coalescing (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add reservation accounting for private mappings (Waiman Long) [2039015 2032811]
- mm/hugetlb_cgroup: fix hugetlb_cgroup migration (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add interface for charge/uncharge hugetlb reservations (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add hugetlb_cgroup reservation counter (Waiman Long) [2039015 2032811]
- hugetlb: remove duplicated code (Waiman Long) [2039015 2032811]
- hugetlb: region_chg provides only cache entry (Waiman Long) [2039015 2032811]
- hugetlbfs: always use address space in inode for resv_map pointer (Waiman Long) [2039015 2032811]
- hugetlbfs: fix potential over/underflow setting node specific nr_hugepages (Waiman Long) [2039015 2032811]
- hugetlb: allow to free gigantic pages regardless of the configuration (Waiman Long) [2039015 2032811]
- powerpc/pseries: Fix update of LPAR security flavor after LPM (Steve Best) [2027448 1997294]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.18.1.el8_5]" date="1645531200">- selftests: kvm: Check whether SIDA memop fails for normal guests (Thomas Huth) [2050806 2050807] {CVE-2022-0516}
- KVM: s390: Return error on SIDA memop on normal guest (Thomas Huth) [2050806 2050807] {CVE-2022-0516}
- iommu/amd: Remove iommu_init_ga() (Jerry Snitselaar) [2030854 1998265]
- iommu/amd: Relocate GAMSup check to early_enable_iommus (Jerry Snitselaar) [2030854 1998265]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.19.1.el8_5]" date="1646049600">- tipc: improve size validations for received domain records (Xin Long) [2048970 2048971] {CVE-2022-0435}
- smb3: do not error on fsync when readonly (Ronnie Sahlberg) [2055824 2037811]
- security: implement sctp_assoc_established hook in selinux (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- security: add sctp_assoc_established hook (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- security: call security_sctp_assoc_request in sctp_sf_do_5_1D_ce (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- security: pass asoc to sctp_assoc_request and sctp_sk_clone (Bruno Meneguele) [2054112 2054117 2015525 2048251]
- net: sctp: Fix some typos (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- RDMA/bnxt_re: Fix stats counters (Selvin Xavier) [2049684 2001893]
- net: check skb sec_path when re-initializing slow_gro in gro_list_prepare (Xin Long) [2047427 2030476]
- cpufreq: intel_pstate: Add Icelake servers support in no-HWP mode (David Arcari) [2036888 2003695]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.20.1.el8_5]" date="1646740800">- lib/iov_iter: initialize "flags" in new pipe_buffer (Jan Stancek) [2060874 2060875] {CVE-2022-0847}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-348.20.1.el8.centos" date="1646913600">- Apply debranding changes</changelog>
</package>
<package pkgid="7ee3641dc9bf5859c067763cad8cb128bd23fc37e1cd0e9b437e6706ac345e14" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="4.18.0" rel="147.0.3.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-141.el8]" date="1567166400">- [wireless] mwifiex: fix 802.11n/WPA detection (Jarod Wilson) [1714476] {CVE-2019-3846}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-142.el8]" date="1567771200">- [drm] drm/virtio: use virtio_max_dma_size (Gerd Hoffmann) [1739291]
- [mm] hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined (Rafael Aquini) [1706088]
- [powerpc] kvm: ppc: book3s: Enable XIVE native capability only if OPAL has required functions [BZ1744884] (David Gibson) [1744884]
- [scsi] scsi: lpfc: Fix oops when fewer hdwqs than cpus (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Limit xri count for kdump environment (Dick Kennedy) [1745731]
- [scsi] scsi: lpfc: Mitigate high memory pre-allocation by SCSI-MQ (Dick Kennedy) [1745731]
- [scsi] scsi: qla2xxx: Fix hardirq-unsafe locking (Himanshu Madhani) [1719941]
- [x86] Revert "[x86] x86/kexec/64: Prevent kexec from 5-level paging to a 4-level only kernel" (Baoquan He) [1669088]
- [x86] Revert "[x86] x86/boot: Add xloadflags bits to check for 5-level paging support" (Baoquan He) [1669088]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-143.el8]" date="1568030400">- [net] netfilter: nft_set: fix allocation size overflow in privsize callback. (Florian Westphal) [1746338]
- [net] net: route dump netlink NLM_F_MULTI flag missing (Stefano Brivio) [1745971]
- [net] sched: pfifo_fast: fix wrong dereference in pfifo_fast_enqueue (Davide Caratti) [1745390]
- [net] sched: pfifo_fast: fix wrong dereference when qdisc is reset (Davide Caratti) [1745387]
- [scsi] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (David Milburn) [1746597]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-144.el8]" date="1568289600">- [md] Revert "[md] dm: eliminate 'split_discard_bios' flag from DM target interface" (Mike Snitzer) [1749929]
- [md] Revert "[md] dm: make sure to obey max_io_len_target_boundary" (Mike Snitzer) [1749929]
- [pci] PCI: Restore Resizable BAR size bits correctly for 1MB BARs (Myron Stowe) [1717760]
- [net] netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled (Phil Sutter) [1743945]
- [net] netfilter: bridge: Drops IPv6 packets if IPv6 module is not loaded (Phil Sutter) [1743945]
- [drm] drm/qxl: get vga ioports (Gerd Hoffmann) [1728936]
- [drm] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (Lyude Paul) [1724363]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-145.el8]" date="1568808000">- [iommu] iommu/amd: Add support for X2APIC IOMMU interrupts (Suravee Suthikulpanit) [1734842]
- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750882] {CVE-2019-14835}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.2.el8_1]" date="1572782400">- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.0.3.el8_1]" date="1573473600">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-147.0.3.el8.centos" date="1573646400">- Apply debranding changes</changelog>
</package>
<package pkgid="2442fe2bf5848861f012a2ac4ff64bba87e4e9d864da8fa79e38a411f2bd6f23" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="4.18.0" rel="147.8.1.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.1.1.el8_1]" date="1573560000">- [arm64] arm64/sve: Fix wrong free for task-&gt;thread.sve_state (Andrew Jones) [1767358 1756450]
- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.2.1.el8_1]" date="1574424000">- [sched] fair: Scale bandwidth quota and period without losing quota/period ratio precision (Phil Auld) [1773568 1706247]
- [sched] fair: Fix -Wunused-but-set-variable warnings (Phil Auld) [1773568 1706247]
- [sched] fair: Fix low cpu usage with high throttling by removing expiration of cpu-local slices (Phil Auld) [1773568 1706247]
- [powerpc] powerpc/pseries: Track LMB nid instead of using device tree (Steve Best) [1772110 1758742]
- [powerpc] powerpc/pseries/memory-hotplug: Only update DT once per memory DLPAR request (Steve Best) [1772110 1758742]
- [powerpc] powerpc/rtas: allow rescheduling while changing cpu states (Steve Best) [1772109 1758651]
- [powerpc] powerpc/pseries/mobility: use cond_resched when updating device tree (Steve Best) [1772109 1758651]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1770177 1752498]
- [fs] CIFS: Fix use after free of file info structures (Dave Wysochanski) [1767357 1757865]
- [fs] cifs: use cifsInodeInfo-&gt;open_file_lock while iterating to avoid a panic (Dave Wysochanski) [1767357 1757865]
- [netdrv] net/ibmvnic: prevent more than one thread from running in reset (Steve Best) [1764830 1756943]
- [netdrv] net/ibmvnic: unlock rtnl_lock in reset so linkwatch_event can run (Steve Best) [1764830 1756943]
- [netdrv] ibmvnic: Warn unknown speed message only when carrier is present (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: Fix missing { in __ibmvnic_reset (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: free reset work of removed device from queue (Steve Best) [1764832 1749873]
- [netdrv] ibmvnic: Do not process reset during or after device removal (Steve Best) [1764832 1749873]
- [cpuidle] cpuidle: governor: Add new governors to cpuidle_governors again (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: do not set an owner to allow modunload (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: set haltpoll as preferred governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: allow governor switch on cpuidle_register_driver() (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: Add cpuidle.governor= command line parameter (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: vcpu hotplug support (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: header file stubs must be "static inline" (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: return -ENODEV on modinit failure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1764831 1759282]
- [x86] kvm: x86: add host poll control msrs (Vitaly Kuznetsov) [1764831 1749495]
- [s390] s390/setup: Fix kernel lock down for s390 (Philipp Rudo) [1764827 1748343]
- [powerpc] powerpc: Allow flush_(inval_)dcache_range to work across ranges &gt;4GB (Steve Best) [1764826 1744062]
- [fs] mm/huge_memory: fix vmf_insert_pfn_{pmd, pud}() crash, handle unaligned addresses (Jeff Moyer) [1764825 1743159]
- [mm] mm/huge_memory.c: fix modifying of page protection by insert_pfn_pmd() (Jeff Moyer) [1764825 1743159]
- [pci] PCI: hv: Use bytes 4 and 5 from instance ID as the PCI domain numbers (Mohammed Gamal) [1764634 1671288]
- [pci] PCI: hv: Detect and fix Hyper-V PCI domain number collision (Mohammed Gamal) [1764634 1671288]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.3.1.el8_1]" date="1574769600">- [x86] kvm: svm: taint module and print taint message iff nested is enabled (Bandan Das) [1776114 1775410]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.4.1.el8_1]" date="1576497600">- [block] blk-mq: apply normal plugging for HDD (Ming Lei) [1782181 1759380]
- [block] blk-mq: honor IO scheduler for multiqueue devices (Ming Lei) [1782181 1759380]
- [block] blk-mq: simplify blk_mq_make_request() (Ming Lei) [1782181 1759380]
- [block] blk-mq: remove blk_mq_put_ctx() (Ming Lei) [1782181 1759380]
- [x86] kvm: vmx: use MSR_IA32_TSX_CTRL to hard-disable TSX on guest that lack it (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: vmx: implement MSR_IA32_TSX_CTRL disable RTM functionality (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: implement MSR_IA32_TSX_CTRL effect on CPUID (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: do not modify masked bits of shared MSRs (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: fix presentation of TSX feature in ARCH_CAPABILITIES (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm/x86: Export MDS_NO=0 to guests when TSX is enabled (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [fs] cifs: Fix cifsInodeInfo lock_sem deadlock when reconnect occurs (Leif Sahlberg) [1778693 1765979]
- [fs] cifs: avoid using MID 0xFFFF (Leif Sahlberg) [1778693 1765979]
- [fs] cifs: Fix retry mid list corruption on reconnects (Leif Sahlberg) [1778693 1765979]
- [fs] smb3: fix unmount hang in open_shroot (Leif Sahlberg) [1781113 1757670]
- [fs] CIFS: fix deadlock in cached root handling (Leif Sahlberg) [1781113 1757670]
- [fs] Fix match_server check to allow for auto dialect negotiate (Leif Sahlberg) [1781113 1757670]
- [fs] SMB3: retry on STATUS_INSUFFICIENT_RESOURCES instead of failing write (Leif Sahlberg) [1781113 1757670]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1781113 1757670]
- [fs] cifs: fix strcat buffer overflow and reduce raciness in smb21_set_oplock_level() (Leif Sahlberg) [1781113 1757670]
- [fs] smb3: fix signing verification of large reads (Dave Wysochanski) [1781110 1753114]
- [scsi] scsi: lpfc: Fix port relogin failure due to GID_FT interaction (Dick Kennedy) [1781108 1733217]
- [fs] xfs: fix missing ILOCK unlock when xfs_setattr_nonsize fails due to EDQUOT (Bill O'Donnell) [1778692 1739607]
- [net] cfg80211: wext: avoid copying malformed SSIDs (Jarod Wilson) [1778633 1778634] {CVE-2019-17133}
- [block] blkcg: perpcu_ref init/exit should be done from blkg_alloc/free() (Ming Lei) [1777766 1741392]
- [fs] userfaultfd_release: always remove uffd flags and clear vm_userfaultfd_ctx (Alex Gladkov) [1777389 1749763] {CVE-2019-14898}
- [netdrv] mwifiex: Fix three heap overflow at parsing element in cfg80211_ap_settings (Jarod Wilson) [1776618 1775484] {CVE-2019-14814 CVE-2019-14815 CVE-2019-14816}
- [netdrv] mwifiex: fix possible heap overflow in mwifiex_process_country_ie() (Jarod Wilson) [1776209 1776210] {CVE-2019-14895}
- [netdrv] mwifiex: Fix heap overflow in mmwifiex_process_tdls_action_frame() (Jarod Wilson) [1776161 1776162] {CVE-2019-14901}
- [netdrv] rtlwifi: Fix potential overflow on P2P code (Jarod Wilson) [1775222 1775223] {CVE-2019-17666}
- [pci] hv: Avoid use of hv_pci_dev-&gt;pci_slot after freeing it (Mohammed Gamal) [1764635 1737569]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.5.1.el8_1]" date="1579003200">- [powerpc] powerpc/shared: Use static key to detect shared processor (Phil Auld) [1781114 1767529]
- [powerpc] powerpc/vcpu: Assume dedicated processors as non-preempt (Phil Auld) [1781114 1767529]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.6.1.el8_1]" date="1581940800">- [crypto] crypto: chelsio - count incomplete block in IV (Jonathan Toppins) [1798527 1725813]
- [crypto] crypto: chelsio - Fix softlockup with heavy I/O (Jonathan Toppins) [1798527 1725813]
- [crypto] crypto: chelsio - Fix NULL pointer dereference (Jonathan Toppins) [1798527 1725813]
- [nvme] nvme: Treat discovery subsystems as unique subsystems (Ewan Milne) [1798381 1757525]
- [mm] mm/page-writeback.c: don't break integrity writeback on -&gt;writepage() error (Christoph von Recklinghausen) [1797962 1782117]
- [lib] crc-t10dif: crc_t10dif_mutex can be static (Vladis Dronov) [1797961 1769462]
- [lib] crc-t10dif: Allow current transform to be inspected in sysfs (Vladis Dronov) [1797961 1769462]
- [lib] crc-t10dif: Pick better transform if one becomes available (Vladis Dronov) [1797961 1769462]
- [crypto] api - Introduce notifier for new crypto algorithms (Vladis Dronov) [1797961 1769462]
- [block] blk-mq: make sure that line break can be printed (Ming Lei) [1797960 1741462]
- [block] blk-mq: avoid sysfs buffer overflow with too many CPU cores (Ming Lei) [1797960 1741462]
- [scsi] hpsa: update driver version (Joseph Szczypek) [1797519 1761968]
- [scsi] scsi: hpsa: add missing hunks in reset-patch (Joseph Szczypek) [1797519 1761968]
- [arm64] arm64: compat: Workaround Neoverse-N1 #1542419 for compat user-space (Mark Salter) [1797518 1757828]
- [arm64] arm64: Fake the IminLine size on systems affected by Neoverse-N1 #1542419 (Mark Salter) [1797518 1757828]
- [arm64] arm64: errata: Hide CTR_EL0.DIC on systems affected by Neoverse-N1 #1542419 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Handle erratum 1418040 as a superset of erratum 1188873 (Mark Salter) [1797518 1757828]
- [arm64] arm64: errata: Add workaround for Cortex-A76 erratum #1463225 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Kconfig: Tidy up errata workaround help text (Mark Salter) [1797518 1757828]
- [arm64] arm64: Apply ARM64_ERRATUM_1188873 to Neoverse-N1 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Add part number for Neoverse N1 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Make ARM64_ERRATUM_1188873 depend on COMPAT (Mark Salter) [1797518 1757828]
- [arm64] arm64: Restrict ARM64_ERRATUM_1188873 mitigation to AArch32 (Mark Salter) [1797518 1757828]
- [arm64] arm64: arch_timer: avoid unused function warning (Mark Salter) [1797518 1757828]
- [arm64] arm64: Add workaround for Cortex-A76 erratum 1286807 (Mark Salter) [1797518 1757828]
- [md] dm snapshot: rework COW throttling to fix deadlock (Mike Snitzer) [1796490 1758605]
- [md] dm snapshot: introduce account_start_copy() and account_end_copy() (Mike Snitzer) [1796490 1758605]
- [block] fix memleak of bio integrity data (Ming Lei) [1795338 1779898]
- [powerpc] xive: Prevent page fault issues in the machine crash handler (Diego Domingos) [1795337 1756116]
- [scsi] scsi: megaraid_sas: IRQ poll to avoid CPU hard lockups (Tomas Henzl) [1795335 1726251]
- [powerpc] powerpc/perf: Disable trace_imc pmu (Steve Best) [1794061 1785573]
- [s390] s390/qeth: ensure linear access to packet headers (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: guard against runt packets (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: handle skb allocation error gracefully (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: drop unwanted packets earlier in RX path (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: support per-frame invalidation (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: gather more detailed RX dropped/error statistics (Philipp Rudo) [1794059 1781085]
- [s390] s390/net: Mark expected switch fall-throughs (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: consolidate skb RX processing in L3 driver (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: remove RX seqno in skb-&gt;cb (Philipp Rudo) [1794059 1781085]
- [powerpc] kvm: ppc: book3s hv: Flush link stack on guest exit to host kernel (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] book3s64: Fix link stack flush on context switch (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64s: support nospectre_v2 cmdline option (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Update Spectre v2 reporting (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Add nospectre_v2 command line argument (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Fix spectre_v2 mitigations reporting (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64: Make meltdown reporting Book3S 64 specific (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64: Disable the speculation barrier from the command line (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [firmware] efi/memreserve: Register reservations as 'reserved' in /proc/iomem (Bhupesh Sharma) [1792200 1772730]
- [firmware] efi/memreserve: deal with memreserve entries in unmapped memory (Bhupesh Sharma) [1792200 1772730]
- [s390] s390/cpum_sf: save TOD clock base in SDBs for time conversion (Philipp Rudo) [1792198 1743504]
- [s390] s390/sclp: Fix bit checked for has_sipl (Philipp Rudo) [1791408 1748347]
- [scsi] qla2xxx: Fix incorrect SFUB length used for Secure Flash Update MB Cmd (Himanshu Madhani) [1790350 1782598]
- [scsi] qla2xxx: Added support for MPI and PEP regions for ISP28XX (Himanshu Madhani) [1790350 1782598]
- [scsi] qla2xxx: Correctly retrieve and interpret active flash region (Himanshu Madhani) [1790350 1782598]
- [powerpc] powerpc/tm: Fix FP/VMX unavailable exceptions inside a transaction (Gustavo Duarte) [1788862 1750653] {CVE-2019-15030}
- [powerpc] powerpc/tm: Fix restoring FP/VMX facility incorrectly on interrupts (Gustavo Duarte) [1791630 1750653] {CVE-2019-15031}
- [scsi] scsi: qla2xxx: Fix different size DMA Alloc/Unmap (Himanshu Madhani) [1788206 1753031]
- [scsi] qla2xxx: call dma_free_coherent with correct size in all cases in qla24xx_sp_unmap (Himanshu Madhani) [1788206 1753031]
- [fs] devpts_pty_kill(): don't bother with d_delete() (Eric Sandeen) [1783959 1772718]
- [fs] devpts: always delete dcache dentry-s in dput() (Eric Sandeen) [1783959 1772718]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.7.1.el8_1]" date="1582286400">- [hid] hiddev: do cleanup in failure of opening a device (Benjamin Tissoires) [1803458 1803460] {CVE-2019-19527}
- [hid] hiddev: avoid opening a disconnected device (Benjamin Tissoires) [1803458 1803460] {CVE-2019-19527}
- [nvme] nvmet: fix discover log page when offsets are used (Gopal Tiwari) [1801216 1745836]
- [netdrv] ibmvnic: Serialize device queries (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Bound waits for device queries (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Terminate waiting device threads after loss of service (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Fix completion structure initialization (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Ignore H_FUNCTION return from H_EOI to tolerate XIVE mode (Steve Best) [1794060 1778037]
- [tools] selftests/powerpc: Fix compile error on tlbie_test due to newer gcc (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [tools] selftests/powerpc: Add test case for tlbie vs mtpidr ordering issue (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/mm: Fixup tlbie vs mtpidr/mtlpidr ordering issue on POWER9 (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/book3s64/radix: Rename CPU_FTR_P9_TLBIE_BUG feature flag (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/book3s64/mm: Don't do tlbie fixup for some hardware revisions (Desnes Augusto Nunes do Rosario) [1794058 1755707]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.8.1.el8_1]" date="1582632000">- rebuild, due infrastructure issues last kernel build wasn't signed properly [1807231 1807216]</changelog>
</package>
<package pkgid="df236009e04675c3c421d3cebfa02ead3547cecba1ddf14b245ac3585d0a1f71" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="4.18.0" rel="147.8.1.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.1.1.el8_1]" date="1573560000">- [arm64] arm64/sve: Fix wrong free for task-&gt;thread.sve_state (Andrew Jones) [1767358 1756450]
- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.2.1.el8_1]" date="1574424000">- [sched] fair: Scale bandwidth quota and period without losing quota/period ratio precision (Phil Auld) [1773568 1706247]
- [sched] fair: Fix -Wunused-but-set-variable warnings (Phil Auld) [1773568 1706247]
- [sched] fair: Fix low cpu usage with high throttling by removing expiration of cpu-local slices (Phil Auld) [1773568 1706247]
- [powerpc] powerpc/pseries: Track LMB nid instead of using device tree (Steve Best) [1772110 1758742]
- [powerpc] powerpc/pseries/memory-hotplug: Only update DT once per memory DLPAR request (Steve Best) [1772110 1758742]
- [powerpc] powerpc/rtas: allow rescheduling while changing cpu states (Steve Best) [1772109 1758651]
- [powerpc] powerpc/pseries/mobility: use cond_resched when updating device tree (Steve Best) [1772109 1758651]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1770177 1752498]
- [fs] CIFS: Fix use after free of file info structures (Dave Wysochanski) [1767357 1757865]
- [fs] cifs: use cifsInodeInfo-&gt;open_file_lock while iterating to avoid a panic (Dave Wysochanski) [1767357 1757865]
- [netdrv] net/ibmvnic: prevent more than one thread from running in reset (Steve Best) [1764830 1756943]
- [netdrv] net/ibmvnic: unlock rtnl_lock in reset so linkwatch_event can run (Steve Best) [1764830 1756943]
- [netdrv] ibmvnic: Warn unknown speed message only when carrier is present (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: Fix missing { in __ibmvnic_reset (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: free reset work of removed device from queue (Steve Best) [1764832 1749873]
- [netdrv] ibmvnic: Do not process reset during or after device removal (Steve Best) [1764832 1749873]
- [cpuidle] cpuidle: governor: Add new governors to cpuidle_governors again (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: do not set an owner to allow modunload (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: set haltpoll as preferred governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: allow governor switch on cpuidle_register_driver() (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: Add cpuidle.governor= command line parameter (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: vcpu hotplug support (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: header file stubs must be "static inline" (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: return -ENODEV on modinit failure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1764831 1759282]
- [x86] kvm: x86: add host poll control msrs (Vitaly Kuznetsov) [1764831 1749495]
- [s390] s390/setup: Fix kernel lock down for s390 (Philipp Rudo) [1764827 1748343]
- [powerpc] powerpc: Allow flush_(inval_)dcache_range to work across ranges &gt;4GB (Steve Best) [1764826 1744062]
- [fs] mm/huge_memory: fix vmf_insert_pfn_{pmd, pud}() crash, handle unaligned addresses (Jeff Moyer) [1764825 1743159]
- [mm] mm/huge_memory.c: fix modifying of page protection by insert_pfn_pmd() (Jeff Moyer) [1764825 1743159]
- [pci] PCI: hv: Use bytes 4 and 5 from instance ID as the PCI domain numbers (Mohammed Gamal) [1764634 1671288]
- [pci] PCI: hv: Detect and fix Hyper-V PCI domain number collision (Mohammed Gamal) [1764634 1671288]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.3.1.el8_1]" date="1574769600">- [x86] kvm: svm: taint module and print taint message iff nested is enabled (Bandan Das) [1776114 1775410]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.4.1.el8_1]" date="1576497600">- [block] blk-mq: apply normal plugging for HDD (Ming Lei) [1782181 1759380]
- [block] blk-mq: honor IO scheduler for multiqueue devices (Ming Lei) [1782181 1759380]
- [block] blk-mq: simplify blk_mq_make_request() (Ming Lei) [1782181 1759380]
- [block] blk-mq: remove blk_mq_put_ctx() (Ming Lei) [1782181 1759380]
- [x86] kvm: vmx: use MSR_IA32_TSX_CTRL to hard-disable TSX on guest that lack it (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: vmx: implement MSR_IA32_TSX_CTRL disable RTM functionality (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: implement MSR_IA32_TSX_CTRL effect on CPUID (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: do not modify masked bits of shared MSRs (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: fix presentation of TSX feature in ARCH_CAPABILITIES (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm/x86: Export MDS_NO=0 to guests when TSX is enabled (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [fs] cifs: Fix cifsInodeInfo lock_sem deadlock when reconnect occurs (Leif Sahlberg) [1778693 1765979]
- [fs] cifs: avoid using MID 0xFFFF (Leif Sahlberg) [1778693 1765979]
- [fs] cifs: Fix retry mid list corruption on reconnects (Leif Sahlberg) [1778693 1765979]
- [fs] smb3: fix unmount hang in open_shroot (Leif Sahlberg) [1781113 1757670]
- [fs] CIFS: fix deadlock in cached root handling (Leif Sahlberg) [1781113 1757670]
- [fs] Fix match_server check to allow for auto dialect negotiate (Leif Sahlberg) [1781113 1757670]
- [fs] SMB3: retry on STATUS_INSUFFICIENT_RESOURCES instead of failing write (Leif Sahlberg) [1781113 1757670]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1781113 1757670]
- [fs] cifs: fix strcat buffer overflow and reduce raciness in smb21_set_oplock_level() (Leif Sahlberg) [1781113 1757670]
- [fs] smb3: fix signing verification of large reads (Dave Wysochanski) [1781110 1753114]
- [scsi] scsi: lpfc: Fix port relogin failure due to GID_FT interaction (Dick Kennedy) [1781108 1733217]
- [fs] xfs: fix missing ILOCK unlock when xfs_setattr_nonsize fails due to EDQUOT (Bill O'Donnell) [1778692 1739607]
- [net] cfg80211: wext: avoid copying malformed SSIDs (Jarod Wilson) [1778633 1778634] {CVE-2019-17133}
- [block] blkcg: perpcu_ref init/exit should be done from blkg_alloc/free() (Ming Lei) [1777766 1741392]
- [fs] userfaultfd_release: always remove uffd flags and clear vm_userfaultfd_ctx (Alex Gladkov) [1777389 1749763] {CVE-2019-14898}
- [netdrv] mwifiex: Fix three heap overflow at parsing element in cfg80211_ap_settings (Jarod Wilson) [1776618 1775484] {CVE-2019-14814 CVE-2019-14815 CVE-2019-14816}
- [netdrv] mwifiex: fix possible heap overflow in mwifiex_process_country_ie() (Jarod Wilson) [1776209 1776210] {CVE-2019-14895}
- [netdrv] mwifiex: Fix heap overflow in mmwifiex_process_tdls_action_frame() (Jarod Wilson) [1776161 1776162] {CVE-2019-14901}
- [netdrv] rtlwifi: Fix potential overflow on P2P code (Jarod Wilson) [1775222 1775223] {CVE-2019-17666}
- [pci] hv: Avoid use of hv_pci_dev-&gt;pci_slot after freeing it (Mohammed Gamal) [1764635 1737569]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.5.1.el8_1]" date="1579003200">- [powerpc] powerpc/shared: Use static key to detect shared processor (Phil Auld) [1781114 1767529]
- [powerpc] powerpc/vcpu: Assume dedicated processors as non-preempt (Phil Auld) [1781114 1767529]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.6.1.el8_1]" date="1581940800">- [crypto] crypto: chelsio - count incomplete block in IV (Jonathan Toppins) [1798527 1725813]
- [crypto] crypto: chelsio - Fix softlockup with heavy I/O (Jonathan Toppins) [1798527 1725813]
- [crypto] crypto: chelsio - Fix NULL pointer dereference (Jonathan Toppins) [1798527 1725813]
- [nvme] nvme: Treat discovery subsystems as unique subsystems (Ewan Milne) [1798381 1757525]
- [mm] mm/page-writeback.c: don't break integrity writeback on -&gt;writepage() error (Christoph von Recklinghausen) [1797962 1782117]
- [lib] crc-t10dif: crc_t10dif_mutex can be static (Vladis Dronov) [1797961 1769462]
- [lib] crc-t10dif: Allow current transform to be inspected in sysfs (Vladis Dronov) [1797961 1769462]
- [lib] crc-t10dif: Pick better transform if one becomes available (Vladis Dronov) [1797961 1769462]
- [crypto] api - Introduce notifier for new crypto algorithms (Vladis Dronov) [1797961 1769462]
- [block] blk-mq: make sure that line break can be printed (Ming Lei) [1797960 1741462]
- [block] blk-mq: avoid sysfs buffer overflow with too many CPU cores (Ming Lei) [1797960 1741462]
- [scsi] hpsa: update driver version (Joseph Szczypek) [1797519 1761968]
- [scsi] scsi: hpsa: add missing hunks in reset-patch (Joseph Szczypek) [1797519 1761968]
- [arm64] arm64: compat: Workaround Neoverse-N1 #1542419 for compat user-space (Mark Salter) [1797518 1757828]
- [arm64] arm64: Fake the IminLine size on systems affected by Neoverse-N1 #1542419 (Mark Salter) [1797518 1757828]
- [arm64] arm64: errata: Hide CTR_EL0.DIC on systems affected by Neoverse-N1 #1542419 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Handle erratum 1418040 as a superset of erratum 1188873 (Mark Salter) [1797518 1757828]
- [arm64] arm64: errata: Add workaround for Cortex-A76 erratum #1463225 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Kconfig: Tidy up errata workaround help text (Mark Salter) [1797518 1757828]
- [arm64] arm64: Apply ARM64_ERRATUM_1188873 to Neoverse-N1 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Add part number for Neoverse N1 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Make ARM64_ERRATUM_1188873 depend on COMPAT (Mark Salter) [1797518 1757828]
- [arm64] arm64: Restrict ARM64_ERRATUM_1188873 mitigation to AArch32 (Mark Salter) [1797518 1757828]
- [arm64] arm64: arch_timer: avoid unused function warning (Mark Salter) [1797518 1757828]
- [arm64] arm64: Add workaround for Cortex-A76 erratum 1286807 (Mark Salter) [1797518 1757828]
- [md] dm snapshot: rework COW throttling to fix deadlock (Mike Snitzer) [1796490 1758605]
- [md] dm snapshot: introduce account_start_copy() and account_end_copy() (Mike Snitzer) [1796490 1758605]
- [block] fix memleak of bio integrity data (Ming Lei) [1795338 1779898]
- [powerpc] xive: Prevent page fault issues in the machine crash handler (Diego Domingos) [1795337 1756116]
- [scsi] scsi: megaraid_sas: IRQ poll to avoid CPU hard lockups (Tomas Henzl) [1795335 1726251]
- [powerpc] powerpc/perf: Disable trace_imc pmu (Steve Best) [1794061 1785573]
- [s390] s390/qeth: ensure linear access to packet headers (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: guard against runt packets (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: handle skb allocation error gracefully (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: drop unwanted packets earlier in RX path (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: support per-frame invalidation (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: gather more detailed RX dropped/error statistics (Philipp Rudo) [1794059 1781085]
- [s390] s390/net: Mark expected switch fall-throughs (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: consolidate skb RX processing in L3 driver (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: remove RX seqno in skb-&gt;cb (Philipp Rudo) [1794059 1781085]
- [powerpc] kvm: ppc: book3s hv: Flush link stack on guest exit to host kernel (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] book3s64: Fix link stack flush on context switch (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64s: support nospectre_v2 cmdline option (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Update Spectre v2 reporting (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Add nospectre_v2 command line argument (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Fix spectre_v2 mitigations reporting (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64: Make meltdown reporting Book3S 64 specific (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64: Disable the speculation barrier from the command line (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [firmware] efi/memreserve: Register reservations as 'reserved' in /proc/iomem (Bhupesh Sharma) [1792200 1772730]
- [firmware] efi/memreserve: deal with memreserve entries in unmapped memory (Bhupesh Sharma) [1792200 1772730]
- [s390] s390/cpum_sf: save TOD clock base in SDBs for time conversion (Philipp Rudo) [1792198 1743504]
- [s390] s390/sclp: Fix bit checked for has_sipl (Philipp Rudo) [1791408 1748347]
- [scsi] qla2xxx: Fix incorrect SFUB length used for Secure Flash Update MB Cmd (Himanshu Madhani) [1790350 1782598]
- [scsi] qla2xxx: Added support for MPI and PEP regions for ISP28XX (Himanshu Madhani) [1790350 1782598]
- [scsi] qla2xxx: Correctly retrieve and interpret active flash region (Himanshu Madhani) [1790350 1782598]
- [powerpc] powerpc/tm: Fix FP/VMX unavailable exceptions inside a transaction (Gustavo Duarte) [1788862 1750653] {CVE-2019-15030}
- [powerpc] powerpc/tm: Fix restoring FP/VMX facility incorrectly on interrupts (Gustavo Duarte) [1791630 1750653] {CVE-2019-15031}
- [scsi] scsi: qla2xxx: Fix different size DMA Alloc/Unmap (Himanshu Madhani) [1788206 1753031]
- [scsi] qla2xxx: call dma_free_coherent with correct size in all cases in qla24xx_sp_unmap (Himanshu Madhani) [1788206 1753031]
- [fs] devpts_pty_kill(): don't bother with d_delete() (Eric Sandeen) [1783959 1772718]
- [fs] devpts: always delete dcache dentry-s in dput() (Eric Sandeen) [1783959 1772718]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.7.1.el8_1]" date="1582286400">- [hid] hiddev: do cleanup in failure of opening a device (Benjamin Tissoires) [1803458 1803460] {CVE-2019-19527}
- [hid] hiddev: avoid opening a disconnected device (Benjamin Tissoires) [1803458 1803460] {CVE-2019-19527}
- [nvme] nvmet: fix discover log page when offsets are used (Gopal Tiwari) [1801216 1745836]
- [netdrv] ibmvnic: Serialize device queries (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Bound waits for device queries (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Terminate waiting device threads after loss of service (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Fix completion structure initialization (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Ignore H_FUNCTION return from H_EOI to tolerate XIVE mode (Steve Best) [1794060 1778037]
- [tools] selftests/powerpc: Fix compile error on tlbie_test due to newer gcc (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [tools] selftests/powerpc: Add test case for tlbie vs mtpidr ordering issue (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/mm: Fixup tlbie vs mtpidr/mtlpidr ordering issue on POWER9 (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/book3s64/radix: Rename CPU_FTR_P9_TLBIE_BUG feature flag (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/book3s64/mm: Don't do tlbie fixup for some hardware revisions (Desnes Augusto Nunes do Rosario) [1794058 1755707]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.8.1.el8_1]" date="1582632000">- rebuild, due infrastructure issues last kernel build wasn't signed properly [1807231 1807216]</changelog>
</package>
<package pkgid="d8eded77fbabbf58cb7e6c22700928fe5e244bd6ebf446ae790e2ca9e7362f5f" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="4.18.0" rel="147.8.1.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-146.el8]" date="1569326400">- [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
- [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
- [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.el8]" date="1569499200">- [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
- [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
- [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-147.1.1.el8_1]" date="1573560000">- [arm64] arm64/sve: Fix wrong free for task-&gt;thread.sve_state (Andrew Jones) [1767358 1756450]
- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
- [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
- [zstream] switch to zstream (Frantisek Hrbata)</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.2.1.el8_1]" date="1574424000">- [sched] fair: Scale bandwidth quota and period without losing quota/period ratio precision (Phil Auld) [1773568 1706247]
- [sched] fair: Fix -Wunused-but-set-variable warnings (Phil Auld) [1773568 1706247]
- [sched] fair: Fix low cpu usage with high throttling by removing expiration of cpu-local slices (Phil Auld) [1773568 1706247]
- [powerpc] powerpc/pseries: Track LMB nid instead of using device tree (Steve Best) [1772110 1758742]
- [powerpc] powerpc/pseries/memory-hotplug: Only update DT once per memory DLPAR request (Steve Best) [1772110 1758742]
- [powerpc] powerpc/rtas: allow rescheduling while changing cpu states (Steve Best) [1772109 1758651]
- [powerpc] powerpc/pseries/mobility: use cond_resched when updating device tree (Steve Best) [1772109 1758651]
- [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1770177 1752498]
- [fs] CIFS: Fix use after free of file info structures (Dave Wysochanski) [1767357 1757865]
- [fs] cifs: use cifsInodeInfo-&gt;open_file_lock while iterating to avoid a panic (Dave Wysochanski) [1767357 1757865]
- [netdrv] net/ibmvnic: prevent more than one thread from running in reset (Steve Best) [1764830 1756943]
- [netdrv] net/ibmvnic: unlock rtnl_lock in reset so linkwatch_event can run (Steve Best) [1764830 1756943]
- [netdrv] ibmvnic: Warn unknown speed message only when carrier is present (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: Fix missing { in __ibmvnic_reset (Steve Best) [1764832 1749873]
- [netdrv] net/ibmvnic: free reset work of removed device from queue (Steve Best) [1764832 1749873]
- [netdrv] ibmvnic: Do not process reset during or after device removal (Steve Best) [1764832 1749873]
- [cpuidle] cpuidle: governor: Add new governors to cpuidle_governors again (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: do not set an owner to allow modunload (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: set haltpoll as preferred governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: allow governor switch on cpuidle_register_driver() (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: Add cpuidle.governor= command line parameter (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: vcpu hotplug support (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: header file stubs must be "static inline" (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] cpuidle-haltpoll: return -ENODEV on modinit failure (Marcelo Tosatti) [1764831 1759282]
- [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1764831 1759282]
- [x86] kvm: x86: add host poll control msrs (Vitaly Kuznetsov) [1764831 1749495]
- [s390] s390/setup: Fix kernel lock down for s390 (Philipp Rudo) [1764827 1748343]
- [powerpc] powerpc: Allow flush_(inval_)dcache_range to work across ranges &gt;4GB (Steve Best) [1764826 1744062]
- [fs] mm/huge_memory: fix vmf_insert_pfn_{pmd, pud}() crash, handle unaligned addresses (Jeff Moyer) [1764825 1743159]
- [mm] mm/huge_memory.c: fix modifying of page protection by insert_pfn_pmd() (Jeff Moyer) [1764825 1743159]
- [pci] PCI: hv: Use bytes 4 and 5 from instance ID as the PCI domain numbers (Mohammed Gamal) [1764634 1671288]
- [pci] PCI: hv: Detect and fix Hyper-V PCI domain number collision (Mohammed Gamal) [1764634 1671288]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.3.1.el8_1]" date="1574769600">- [x86] kvm: svm: taint module and print taint message iff nested is enabled (Bandan Das) [1776114 1775410]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.4.1.el8_1]" date="1576497600">- [block] blk-mq: apply normal plugging for HDD (Ming Lei) [1782181 1759380]
- [block] blk-mq: honor IO scheduler for multiqueue devices (Ming Lei) [1782181 1759380]
- [block] blk-mq: simplify blk_mq_make_request() (Ming Lei) [1782181 1759380]
- [block] blk-mq: remove blk_mq_put_ctx() (Ming Lei) [1782181 1759380]
- [x86] kvm: vmx: use MSR_IA32_TSX_CTRL to hard-disable TSX on guest that lack it (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: vmx: implement MSR_IA32_TSX_CTRL disable RTM functionality (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: implement MSR_IA32_TSX_CTRL effect on CPUID (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: do not modify masked bits of shared MSRs (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm: x86: fix presentation of TSX feature in ARCH_CAPABILITIES (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [x86] kvm/x86: Export MDS_NO=0 to guests when TSX is enabled (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
- [fs] cifs: Fix cifsInodeInfo lock_sem deadlock when reconnect occurs (Leif Sahlberg) [1778693 1765979]
- [fs] cifs: avoid using MID 0xFFFF (Leif Sahlberg) [1778693 1765979]
- [fs] cifs: Fix retry mid list corruption on reconnects (Leif Sahlberg) [1778693 1765979]
- [fs] smb3: fix unmount hang in open_shroot (Leif Sahlberg) [1781113 1757670]
- [fs] CIFS: fix deadlock in cached root handling (Leif Sahlberg) [1781113 1757670]
- [fs] Fix match_server check to allow for auto dialect negotiate (Leif Sahlberg) [1781113 1757670]
- [fs] SMB3: retry on STATUS_INSUFFICIENT_RESOURCES instead of failing write (Leif Sahlberg) [1781113 1757670]
- [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1781113 1757670]
- [fs] cifs: fix strcat buffer overflow and reduce raciness in smb21_set_oplock_level() (Leif Sahlberg) [1781113 1757670]
- [fs] smb3: fix signing verification of large reads (Dave Wysochanski) [1781110 1753114]
- [scsi] scsi: lpfc: Fix port relogin failure due to GID_FT interaction (Dick Kennedy) [1781108 1733217]
- [fs] xfs: fix missing ILOCK unlock when xfs_setattr_nonsize fails due to EDQUOT (Bill O'Donnell) [1778692 1739607]
- [net] cfg80211: wext: avoid copying malformed SSIDs (Jarod Wilson) [1778633 1778634] {CVE-2019-17133}
- [block] blkcg: perpcu_ref init/exit should be done from blkg_alloc/free() (Ming Lei) [1777766 1741392]
- [fs] userfaultfd_release: always remove uffd flags and clear vm_userfaultfd_ctx (Alex Gladkov) [1777389 1749763] {CVE-2019-14898}
- [netdrv] mwifiex: Fix three heap overflow at parsing element in cfg80211_ap_settings (Jarod Wilson) [1776618 1775484] {CVE-2019-14814 CVE-2019-14815 CVE-2019-14816}
- [netdrv] mwifiex: fix possible heap overflow in mwifiex_process_country_ie() (Jarod Wilson) [1776209 1776210] {CVE-2019-14895}
- [netdrv] mwifiex: Fix heap overflow in mmwifiex_process_tdls_action_frame() (Jarod Wilson) [1776161 1776162] {CVE-2019-14901}
- [netdrv] rtlwifi: Fix potential overflow on P2P code (Jarod Wilson) [1775222 1775223] {CVE-2019-17666}
- [pci] hv: Avoid use of hv_pci_dev-&gt;pci_slot after freeing it (Mohammed Gamal) [1764635 1737569]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.5.1.el8_1]" date="1579003200">- [powerpc] powerpc/shared: Use static key to detect shared processor (Phil Auld) [1781114 1767529]
- [powerpc] powerpc/vcpu: Assume dedicated processors as non-preempt (Phil Auld) [1781114 1767529]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.6.1.el8_1]" date="1581940800">- [crypto] crypto: chelsio - count incomplete block in IV (Jonathan Toppins) [1798527 1725813]
- [crypto] crypto: chelsio - Fix softlockup with heavy I/O (Jonathan Toppins) [1798527 1725813]
- [crypto] crypto: chelsio - Fix NULL pointer dereference (Jonathan Toppins) [1798527 1725813]
- [nvme] nvme: Treat discovery subsystems as unique subsystems (Ewan Milne) [1798381 1757525]
- [mm] mm/page-writeback.c: don't break integrity writeback on -&gt;writepage() error (Christoph von Recklinghausen) [1797962 1782117]
- [lib] crc-t10dif: crc_t10dif_mutex can be static (Vladis Dronov) [1797961 1769462]
- [lib] crc-t10dif: Allow current transform to be inspected in sysfs (Vladis Dronov) [1797961 1769462]
- [lib] crc-t10dif: Pick better transform if one becomes available (Vladis Dronov) [1797961 1769462]
- [crypto] api - Introduce notifier for new crypto algorithms (Vladis Dronov) [1797961 1769462]
- [block] blk-mq: make sure that line break can be printed (Ming Lei) [1797960 1741462]
- [block] blk-mq: avoid sysfs buffer overflow with too many CPU cores (Ming Lei) [1797960 1741462]
- [scsi] hpsa: update driver version (Joseph Szczypek) [1797519 1761968]
- [scsi] scsi: hpsa: add missing hunks in reset-patch (Joseph Szczypek) [1797519 1761968]
- [arm64] arm64: compat: Workaround Neoverse-N1 #1542419 for compat user-space (Mark Salter) [1797518 1757828]
- [arm64] arm64: Fake the IminLine size on systems affected by Neoverse-N1 #1542419 (Mark Salter) [1797518 1757828]
- [arm64] arm64: errata: Hide CTR_EL0.DIC on systems affected by Neoverse-N1 #1542419 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Handle erratum 1418040 as a superset of erratum 1188873 (Mark Salter) [1797518 1757828]
- [arm64] arm64: errata: Add workaround for Cortex-A76 erratum #1463225 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Kconfig: Tidy up errata workaround help text (Mark Salter) [1797518 1757828]
- [arm64] arm64: Apply ARM64_ERRATUM_1188873 to Neoverse-N1 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Add part number for Neoverse N1 (Mark Salter) [1797518 1757828]
- [arm64] arm64: Make ARM64_ERRATUM_1188873 depend on COMPAT (Mark Salter) [1797518 1757828]
- [arm64] arm64: Restrict ARM64_ERRATUM_1188873 mitigation to AArch32 (Mark Salter) [1797518 1757828]
- [arm64] arm64: arch_timer: avoid unused function warning (Mark Salter) [1797518 1757828]
- [arm64] arm64: Add workaround for Cortex-A76 erratum 1286807 (Mark Salter) [1797518 1757828]
- [md] dm snapshot: rework COW throttling to fix deadlock (Mike Snitzer) [1796490 1758605]
- [md] dm snapshot: introduce account_start_copy() and account_end_copy() (Mike Snitzer) [1796490 1758605]
- [block] fix memleak of bio integrity data (Ming Lei) [1795338 1779898]
- [powerpc] xive: Prevent page fault issues in the machine crash handler (Diego Domingos) [1795337 1756116]
- [scsi] scsi: megaraid_sas: IRQ poll to avoid CPU hard lockups (Tomas Henzl) [1795335 1726251]
- [powerpc] powerpc/perf: Disable trace_imc pmu (Steve Best) [1794061 1785573]
- [s390] s390/qeth: ensure linear access to packet headers (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: guard against runt packets (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: handle skb allocation error gracefully (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: drop unwanted packets earlier in RX path (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: support per-frame invalidation (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: gather more detailed RX dropped/error statistics (Philipp Rudo) [1794059 1781085]
- [s390] s390/net: Mark expected switch fall-throughs (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: consolidate skb RX processing in L3 driver (Philipp Rudo) [1794059 1781085]
- [s390] s390/qeth: remove RX seqno in skb-&gt;cb (Philipp Rudo) [1794059 1781085]
- [powerpc] kvm: ppc: book3s hv: Flush link stack on guest exit to host kernel (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] book3s64: Fix link stack flush on context switch (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64s: support nospectre_v2 cmdline option (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Update Spectre v2 reporting (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Add nospectre_v2 command line argument (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] fsl: Fix spectre_v2 mitigations reporting (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64: Make meltdown reporting Book3S 64 specific (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [powerpc] 64: Disable the speculation barrier from the command line (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
- [firmware] efi/memreserve: Register reservations as 'reserved' in /proc/iomem (Bhupesh Sharma) [1792200 1772730]
- [firmware] efi/memreserve: deal with memreserve entries in unmapped memory (Bhupesh Sharma) [1792200 1772730]
- [s390] s390/cpum_sf: save TOD clock base in SDBs for time conversion (Philipp Rudo) [1792198 1743504]
- [s390] s390/sclp: Fix bit checked for has_sipl (Philipp Rudo) [1791408 1748347]
- [scsi] qla2xxx: Fix incorrect SFUB length used for Secure Flash Update MB Cmd (Himanshu Madhani) [1790350 1782598]
- [scsi] qla2xxx: Added support for MPI and PEP regions for ISP28XX (Himanshu Madhani) [1790350 1782598]
- [scsi] qla2xxx: Correctly retrieve and interpret active flash region (Himanshu Madhani) [1790350 1782598]
- [powerpc] powerpc/tm: Fix FP/VMX unavailable exceptions inside a transaction (Gustavo Duarte) [1788862 1750653] {CVE-2019-15030}
- [powerpc] powerpc/tm: Fix restoring FP/VMX facility incorrectly on interrupts (Gustavo Duarte) [1791630 1750653] {CVE-2019-15031}
- [scsi] scsi: qla2xxx: Fix different size DMA Alloc/Unmap (Himanshu Madhani) [1788206 1753031]
- [scsi] qla2xxx: call dma_free_coherent with correct size in all cases in qla24xx_sp_unmap (Himanshu Madhani) [1788206 1753031]
- [fs] devpts_pty_kill(): don't bother with d_delete() (Eric Sandeen) [1783959 1772718]
- [fs] devpts: always delete dcache dentry-s in dput() (Eric Sandeen) [1783959 1772718]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.7.1.el8_1]" date="1582286400">- [hid] hiddev: do cleanup in failure of opening a device (Benjamin Tissoires) [1803458 1803460] {CVE-2019-19527}
- [hid] hiddev: avoid opening a disconnected device (Benjamin Tissoires) [1803458 1803460] {CVE-2019-19527}
- [nvme] nvmet: fix discover log page when offsets are used (Gopal Tiwari) [1801216 1745836]
- [netdrv] ibmvnic: Serialize device queries (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Bound waits for device queries (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Terminate waiting device threads after loss of service (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Fix completion structure initialization (Steve Best) [1794060 1778037]
- [netdrv] ibmvnic: Ignore H_FUNCTION return from H_EOI to tolerate XIVE mode (Steve Best) [1794060 1778037]
- [tools] selftests/powerpc: Fix compile error on tlbie_test due to newer gcc (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [tools] selftests/powerpc: Add test case for tlbie vs mtpidr ordering issue (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/mm: Fixup tlbie vs mtpidr/mtlpidr ordering issue on POWER9 (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/book3s64/radix: Rename CPU_FTR_P9_TLBIE_BUG feature flag (Desnes Augusto Nunes do Rosario) [1794058 1755707]
- [powerpc] powerpc/book3s64/mm: Don't do tlbie fixup for some hardware revisions (Desnes Augusto Nunes do Rosario) [1794058 1755707]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.18.0-147.8.1.el8_1]" date="1582632000">- rebuild, due infrastructure issues last kernel build wasn't signed properly [1807231 1807216]</changelog>
</package>
<package pkgid="e34f46f12d9b448aacab42cf6ed6535d722d8f40f6e313656e260ab0f9c59904" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="ac91f8c45dc96aee3d038896f1750e44b5e3ceb40c62c597b6ef76ce3e1561ae" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="b32f5279922dc862a6e8a26b4ca6d96449bb1b2aeed08d236b69581be4ce6d15" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="b430b7199aca6a70c051a49c8999f0a24f3a550187571c4e3e07b9db6bfeedf5" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="a1b23b51a11f5b11eaafc1c1897a17e74a9db5cfec555f8b68b3ffcba02fb8e2" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="4.18.0" rel="193.28.1.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.20.1.el8_2]" date="1599134400">- [infiniband] IB/rdmavt: Fix RQ counting issues causing use of an invalid RWQE (Kamal Heib) [1872771 1850314]
- [block] blk-mq: Rerun dispatching in the case of budget contention (Ming Lei) [1869779 1824037]
- [block] blk-mq: Add blk_mq_delay_run_hw_queues() API call (Ming Lei) [1869779 1824037]
- [block] blk-mq: In blk_mq_dispatch_rq_list() "no budget" is a reason to kick (Ming Lei) [1869779 1824037]
- [block] blk-mq: Put driver tag in blk_mq_dispatch_rq_list() when no budget (Ming Lei) [1869779 1824037]
- [md] dm mpath: use double checked locking in fast path (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rename current_pgpath to pgpath in multipath_prepare_ioctl (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rework __map_bio() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: factor out multipath_queue_bio (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: push locking down to must_push_back_rq() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: take m-&gt;lock spinlock when testing QUEUE_IF_NO_PATH (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: changes from initial m-&gt;flags locking audit (Mike Snitzer) [1869386 1848651]
- [md] dm rq: don't call blk_mq_queue_stopped() in dm_stop_queue() (Mike Snitzer) [1869386 1848651]
- [md] dm: do not use waitqueue for request-based DM (Mike Snitzer) [1869386 1848651]
- [block] blk-mq: consider non-idle request as "inflight" in blk_mq_rq_inflight() (Mike Snitzer) [1869386 1848651]
- [kernel] sched/deadline: Initialize -&gt;dl_boosted (Phil Auld) [1867612 1854179]
- [kernel] sched/core: Fix PI boosting between RT and DEADLINE tasks (Phil Auld) [1867612 1854179]
- [net] net/smc: tolerate future SMCD versions (Philipp Rudo) [1866390 1854992]
- [net] openvswitch: fixes potential deadlock in dp cleanup code (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: reorder masks array based on usage (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: take into account de-fragmentation/gso_size in execute_check_pkt_len (Lorenzo Bianconi) [1860169 1851888]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.21.1.el8_2]" date="1599739200">- [scsi] scsi: ibmvfc: Fix NULL return compiler warning (Steve Best) [1866371 1810653]
- [scsi] scsi: ibmvfc: Avoid loss of all paths during SVC node reboot (Steve Best) [1866371 1810653]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.22.1.el8_2]" date="1600257600">- [crypto] pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1877530 1862072]
- [crypto] Revert "pefile: Tolerate other pefile signatures after first" (Bruno Meneguele)
- [infiniband] IB/hfi1: Fix another case where pq is left on waitlist (Kamal Heib) [1872766 1859209]
- [infiniband] IB/hfi1: Ensure pq is not left on waitlist (Kamal Heib) [1872766 1859209]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.23.1.el8_2]" date="1600344000">- [net] packet: fix overflow in tpacket_rcv (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}
- [net] packet: make tp_drops atomic (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.24.1.el8_2]" date="1600862400">- [kernel] timers: Remove must_forward_clk (Phil Auld) [1877417 1833096]
- [kernel] timers: Spare timer softirq until next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Expand clk forward logic beyond nohz (Phil Auld) [1877417 1833096]
- [kernel] timers: Reuse next expiry cache after nohz exit (Phil Auld) [1877417 1833096]
- [kernel] timers: Always keep track of next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Optimize _next_timer_interrupt() level iteration (Phil Auld) [1877417 1833096]
- [kernel] timers: Add comments about calc_index() ceiling work (Phil Auld) [1877417 1833096]
- [kernel] timers: Move trigger_dyntick_cpu() to enqueue_timer() (Phil Auld) [1877417 1833096]
- [kernel] timers: Use only bucket expiry for base-&gt;next_expiry value (Phil Auld) [1877417 1833096]
- [kernel] timers: Preserve higher bits of expiration on index calculation (Phil Auld) [1877417 1833096]
- [kernel] timer: Fix wheel index calculation on last level (Phil Auld) [1877417 1833096]
- [kernel] timer: Prevent base-&gt;clk from moving backward (Phil Auld) [1877417 1833096]
- [kernel] timer: Read jiffies once when forwarding base clk (Phil Auld) [1877417 1833096]
- [infiniband] RDMA/umem: Fix ib_umem_find_best_pgsz() (Kamal Heib) [1872424 1856158]
- [net] net: accept an empty mask in /sys/class/net/*/queues/rx-*/rps_cpus (Nitesh Narayan Lal) [1870181 1868433]
- [net] net: Restrict receive packets queuing to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [pci] PCI: Restrict probe functions to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [lib] lib: Restrict cpumask_local_spread to houskeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [s390] s390/pci: Fix unexpected write combine on resource (Philipp Rudo) [1869276 1827311]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.25.1.el8_2]" date="1601553600">- [net] netfilter: conntrack: proc: rename stat column (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: add clash resolution stat counter (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: remove ignore stats (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not increment two error counters at same time (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not auto-delete clash entries on reply (Florian Westphal) [1882095 1875681]
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1881085 1875316] {CVE-2020-14385}
- [kernel] time/tick-broadcast: Fix tick_broadcast_offline() lockdep complaint (Alexey Klimov) [1880081 1877380]
- [net] atomics/treewide: Rename __atomic_add_unless() =&gt; atomic_fetch_add_unless() (Yauheni Kaliuta) [1880081 1813370]
- [kernel] timers: Lower base clock forwarding threshold (Phil Auld) [1877417 1833096]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.26.1.el8_2]" date="1602158400">- [firmware] efi: don't reserve MOK config table memory region (Kairui Song) [1879988 1878584]
- [security] integrity: Load certs from the EFI MOK config table (Lenny Szubowicz) [1877528 1868306]
- [security] integrity: Move import of MokListRT certs to a separate routine (Lenny Szubowicz) [1877528 1868306]
- [firmware] efi: Support for MOK variable config table (Lenny Szubowicz) [1877528 1868306]
- [security] efi: Only print errors about failing to get certs if EFI vars are found (Lenny Szubowicz) [1877528 1804969]
- [fs] ceph: fix inode number handling on arches with 32-bit ino_t (Jeff Layton) [1875787 1866018]
- [fs] ceph: handle zero-length feature mask in session messages (Jeff Layton) [1875787 1866018]
- [fs] ceph: fix endianness bug when handling MDS session feature bits (Jeff Layton) [1875787 1866018]
- [netdrv] net/mlx5e: Fix missing cleanup of ethtool steering during rep rx cleanup (Alaa Hleihel) [1857777 1856660]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.27.1.el8_2]" date="1602763200">- [powerpc] powerpc/pseries: Do not initiate shutdown when system is running on UPS (Diego Domingos) [1882243 1870477]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859471 1859472] {CVE-2020-14331}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.28.1.el8_2]" date="1602849600">- [net] Bluetooth: L2CAP: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888256 1888258] {CVE-2020-12351}
- [net] Bluetooth: A2MP: Fix not initializing all members (Gopal Tiwari) [1888906 1888807] {CVE-2020-12352}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-193.28.1.el8.centos" date="1603195200">- Apply debranding changes</changelog>
</package>
<package pkgid="b6cb61f863cf3e3fb9d15db1c1598099b031da334240be79fc7aabed3923e03b" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="4.18.0" rel="305.10.2.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.2.1.el8_4]" date="1620648000">- net/mlx5e: Allow to match on MPLS parameters only for MPLS over UDP (Alaa Hleihel) [1952061 1936742]
- net/mlx5e: Reject tc rules which redirect from a VF to itself (Alaa Hleihel) [1952065 1932839]
- net/mlx5: CT: Add support for matching on ct_state inv and rel flags (Alaa Hleihel) [1952062 1942681]
- KVM: VMX: Don't use vcpu-&gt;run-&gt;internal.ndata as an array index (Jon Maloy) [1954221 1954219]
- tools/power turbostat: Revert "[tools] tools/power turbostat: Enable accumulate RAPL display" (Prarit Bhargava) [1952987 1944699]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.3.1.el8_4]" date="1621252800">- Revert "uio: use request_threaded_irq instead" (Vitaly Kuznetsov) [1952952 1946644]
- drm/ast: Set format registers in primary plane's update (Lyude Paul) [1952900 1923857]
- net/sched: act_ct: clear post_ct if doing ct_clear (Marcelo Ricardo Leitner) [1956458 1941889]
- md/raid1: properly indicate failure when ending a failed write request (Nigel Croxon) [1955188 1954588]
- nitro_enclaves: Fix stale file descriptors on failed usercopy (Vitaly Kuznetsov) [1956379 1953717]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.4.1.el8_4]" date="1621944000">- vmxnet3: Set the default of vxlan overlay offload to disabled (Cathy Avery) [1960702 1941714]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.5.1.el8_4]" date="1622548800">- gfs2: report "already frozen/thawed" errors (Bob Peterson) [1961849 1932236]
- gfs2: move freeze glock outside the make_fs_rw and _ro functions (Bob Peterson) [1961849 1932236]
- gfs2: Add common helper for holding and releasing the freeze glock (Bob Peterson) [1961849 1932236]
- gfs2: in signal_our_withdraw wait for unfreeze of _this_ fs only (Bob Peterson) [1961849 1932236]
- gfs2: Don't freeze the file system during unmount (Bob Peterson) [1961849 1932236]
- gfs2: Fix regression in freeze_go_sync (Bob Peterson) [1961849 1932236]
- gfs2: The freeze glock should never be frozen (Bob Peterson) [1961849 1932236]
- gfs2: When freezing gfs2, use GL_EXACT and not GL_NOCACHE (Bob Peterson) [1961849 1932236]
- gfs2: read-only mounts should grab the sd_freeze_gl glock (Bob Peterson) [1961849 1932236]
- gfs2: freeze should work on read-only mounts (Bob Peterson) [1961849 1932236]
- gfs2: Abort gfs2_freeze if io error is seen (Bob Peterson) [1961849 1932236]
- CI: Disable result checking for realtime check (Veronika Kabatova)
- CI: Explicitly disable result checking for private CI (Veronika Kabatova)
- CI: Rename variable (Veronika Kabatova)
- CI: Update builder containers (Veronika Kabatova)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.6.1.el8_4]" date="1623067200">- openvswitch: fix stack OOB read while fragmenting IPv4 packets (Davide Caratti) [1963940 1924608]
- net/sched: sch_frag: fix stack OOB read while fragmenting IPv4 packets (Davide Caratti) [1963940 1924608]
- net/sched: act_ct: fix wild memory access when clearing fragments (Davide Caratti) [1963940 1924608]
- net: Treat __napi_schedule_irqoff() as __napi_schedule() on PREEMPT_RT (Ivan Vecera)
- redhat/configs: Add CONFIG_SYSTEM_REVOCATION_KEYS and CONFIG_SYSTEM_REVOCATION_LIST (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: add 'x509_revocation_list' to gitignore (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- integrity: Load mokx variables into the blacklist keyring (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Add ability to preload revocation certs (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Move load_system_certificate_list to a common function (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Add EFI_CERT_X509_GUID support for dbx entries (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- net/sched: cls_api: increase max_reclassify_loop (Davide Caratti) [1965148 1955136]
- dm writecache: fix performance degradation in ssd mode (Mike Snitzer) [1962241 1961859]
- scsi: fnic: Use scsi_host_busy_iter() to traverse commands (Ewan D. Milne) [1961705 1949250]
- scsi: fnic: Kill 'exclude_id' argument to fnic_cleanup_io() (Ewan D. Milne) [1961705 1949250]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.7.1.el8_4]" date="1623672000">- net: zero-initialize tc skb extension on allocation (Ivan Vecera) [1965457 1946986]
- net/sched: cls_flower: fix only mask bit check in the validate_ct_state (Ivan Vecera) [1965457 1946986]
- net: cls_api: Fix uninitialised struct field bo-&gt;unlocked_driver_cb (Ivan Vecera) [1965457 1946986]
- net/sched: act_api: fix miss set post_ct for ovs after do conntrack in act_ct (Ivan Vecera) [1965457 1946986]
- net/sched: cls_flower: validate ct_state for invalid and reply flags (Ivan Vecera) [1965457 1946986]
- flow_dissector: fix TTL and TOS dissection on IPv4 fragments (Paolo Abeni) [1963952 1950288]
- Revert "sctp: Fix SHUTDOWN CTSN Ack in the peer restart case" (Xin Long) [1965632 1953839]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [1965632 1953839]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [1965632 1953839]
- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962544 1962546] {CVE-2021-33034}
- x86/kvm: Unify kvm_pv_guest_cpu_reboot() with kvm_guest_cpu_offline() (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Disable all PV features on crash (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Disable kvmclock on all CPUs on shutdown (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Teardown PV features on boot CPU as well (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Fix pr_info() for async PF setup/teardown (Lenny Szubowicz) [1964930 1934273]
- net/sched: act_ct: Fix ct template allocation for zone 0 (Marcelo Ricardo Leitner) [1965150 1881824]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.8.1.el8_4]" date="1624363200">- iavf: amend removal of MODULE_VERSION (Stefan Assmann) [1969925 1955738]
- ixgbe: Amend commit acf03026ec5a to include a version string in module info. (Ken Cox) [1969922 1955759]
- i40e: amend removal of MODULE_VERSION (Stefan Assmann) [1969923 1955736]
- redhat/configs: Add CONFIG_PINCTRL_EMMITSBURG (David Arcari) [1963984 1959506]
- redhat/configs: Remove CONFIG_EMMITSBURG (David Arcari) [1963984 1959506]
- netlink: add tracepoint at NL_SET_ERR_MSG (Marcelo Ricardo Leitner) [1972938 1956983]
- Revert "[netdrv] net/intel: remove driver versions from Intel drivers" (Jonathan Toppins) [1969917 1955745]
- Amends commit ea6244cc248b to include a version string in module info. (Ken Cox) [1969915 1955726]
- Revert "[netdrv] net/broadcom: Clean broadcom code from driver versions" (Jonathan Toppins) [1969914 1955721]
- ena: revert removal of MODULE_VERSION from ena (Petr Oros) [1969913 1955712]
- fm10k: amend removal of MODULE_VERSION (Vladis Dronov) [1969910 1955730]
- net/sched: act_ct: Offload connections with commit action (Marcelo Ricardo Leitner) [1968679 1965817]
- netfilter: flowtable: Remove redundant hw refresh bit (Marcelo Ricardo Leitner) [1968679 1965817]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.9.1.el8_4]" date="1624881600">- ixgbevf: Amend commit acf03026ec5a to include a version in module info. (Ken Cox) [1969911 1955764]
- CI: Merge configuration (Veronika Kabatova)
- igc: amend removal of MODULE_VERSION (Corinna Vinschen) [1969921 1955755]
- igb: amend removal of MODULE_VERSION (Corinna Vinschen) [1969919 1955748]
- locking/qrwlock: Fix ordering in queued_write_lock_slowpath() (Waiman Long) [1964419 1950110]
- scsi: qedf: Do not put host in qedf_vport_create() unconditionally (Nilesh Javali) [1974968 1899384]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.10.1.el8_4]" date="1625659200">- igbvf: amend removal of MODULE_VERSION (Corinna Vinschen) [1969920 1955752]
- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971464 1971488] {CVE-2021-32399}
- scsi: ibmvfc: Free channel_setup_buf during device tear down (Steve Best) [1964697 1938102]
- i40e: Fix parameters in aq_get_phy_register() (Stefan Assmann) [1967099 1907852]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.10.2.el8_4]" date="1626091200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975181 1975182] {CVE-2021-33909}</changelog>
</package>
<package pkgid="6611c499ea54ed4b19c7fe3ffd8cd1b5d1e88fa90156dc1f7fef8ba73f6ba4d4" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="4.18.0" rel="348.20.1.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.12.1.el8_5]" date="1641988800">- tcp: don't free a FIN sk_buff in tcp_remove_empty_skb() (Guillaume Nault) [2021574 2016210]
- kernel.spec: Add support to use vmlinux.h (Jiri Olsa) [2031053 1989087]
- spec: Add vmlinux.h to kernel-devel package (Jiri Olsa) [2031053 1989087]
- x86/mce: Avoid infinite loop for copy from user recovery (Prarit Bhargava) [2008789 1999550]
- x86/mce: Rename kill_it to kill_current_task (Prarit Bhargava) [2008789 1999550]
- x86/mce: Recover from poison found while copying from user space (Prarit Bhargava) [2008789 1999550]
- x86/mce: Delay clearing IA32_MCG_STATUS to the end of do_machine_check() (Prarit Bhargava) [2008789 1999550]
- x86/mce: Send #MC singal from task work (Prarit Bhargava) [2008789 1999550]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-348.13.1.el8_5]" date="1642507200">- vfs: Out-of-bounds write of heap buffer in fs_context.c (Frantisek Hrbata) [2040585 2040586] {CVE-2022-0185}
- xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Bruno Meneguele) [2034864 2034865] {CVE-2021-4155}
- af_unix: fix garbage collect vs MSG_PEEK (Patrick Talbert) [2031974 2031975] {CVE-2021-0920}
- cgroup: verify that source is a string (Waiman Long) [2034608 2034609] {CVE-2021-4154}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-348.14.1.el8_5]" date="1643198400">- tcp: fix page frag corruption on page fault (Paolo Abeni) [2041529 1996074]
- net: fix sk_page_frag() recursion from memory reclaim (Paolo Abeni) [2041529 1996074]
- KVM: s390: index kvm-&gt;arch.idle_mask by vcpu_idx (Thomas Huth) [2040769 2026230]
- redhat: set LC_ALL=C before sorting config content (Frantisek Hrbata)</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.15.1.el8_5]" date="1643716800">- net/mlx5: DR, Use FW API when updating FW-owned flow table (Michal Schmidt) [2042663 2042651]
- KVM: x86: Wait for IPIs to be delivered when handling Hyper-V TLB flush hypercall (Vitaly Kuznetsov) [2043237 1868572]
- drm/mgag200: Select clock in PLL update functions (Bruno Meneguele) [2034949 1953926]
- drm/i915: Fix HAS_LSPCON macro for platforms between GEN9 and GEN10 (Bruno Meneguele) [2027335 2005586]
- crypto: qat - power up 4xxx device (Vladis Dronov) [2016437 1960307]
- RDMA/core: Fix a double free in add_port error flow (Kamal Heib) [2038724 2008555]
- powerpc/iommu: Report the correct most efficient DMA mask for PCI devices (Steve Best) [2018928 2007425]
- powerpc/dma: Fix dma_map_ops::get_required_mask (Steve Best) [2018928 2007425]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.16.1.el8_5]" date="1644321600">- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047601 2047602] {CVE-2022-22942}
- net: openvswitch: Fix ct_state nat flags for conns arriving from tc (Marcelo Ricardo Leitner) [2043548 2040334]
- net: openvswitch: Fix matching zone id for invalid conns arriving from tc (Marcelo Ricardo Leitner) [2043550 2040452]
- net/sched: flow_dissector: Fix matching on zone id for invalid conns (Marcelo Ricardo Leitner) [2043550 2040452]
- net/sched: Extend qdisc control block with tc control block (Marcelo Ricardo Leitner) [2043550 2040452]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.17.1.el8_5]" date="1644926400">- vfs: check dentry is still valid in get_link() (Ian Kent) [2052558 2014846]
- xfs: don't expose internal symlink metadata buffers to the vfs (Brian Foster) [2052558 2014846]
- CI: Use appropriate zstream builder (Veronika Kabatova)
- CI: Enable baseline realtime checks (Veronika Kabatova)
- CI: Rename pipelines to include release names (Veronika Kabatova)
- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052166 2052167] {CVE-2022-0492}
- ice: Remove boolean vlan_promisc flag from function (Jonathan Toppins) [2051951 2030400]
- ceph: put the requests/sessions when it fails to alloc memory (Jeffrey Layton) [2053725 2017796]
- ceph: fix off by one bugs in unsafe_request_wait() (Jeffrey Layton) [2053725 2017796]
- ceph: flush the mdlog before waiting on unsafe reqs (Jeffrey Layton) [2053725 2017796]
- ceph: flush mdlog before umounting (Jeffrey Layton) [2053725 2017796]
- ceph: make iterate_sessions a global symbol (Jeffrey Layton) [2053725 2017796]
- ceph: make ceph_create_session_msg a global symbol (Jeffrey Layton) [2053725 2017796]
- xfs: check sb_meta_uuid for dabuf buffer recovery (Bill O'Donnell) [2049292 2020764]
- drm/i915: Flush TLBs before releasing backing store (Patrick Talbert) [2044328 2044329] {CVE-2022-0330}
- hugetlb: fix hugetlb cgroup refcounting during vma split (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: fix imbalanced css_get and css_put pair for shared mappings (Waiman Long) [2039015 2032811]
- mm/hugetlb: change hugetlb_reserve_pages() to type bool (Waiman Long) [2039015 2032811]
- hugetlb: fix an error code in hugetlb_reserve_pages() (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: fix offline of hugetlb cgroup with reservations (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: fix reservation accounting (Waiman Long) [2039015 2032811]
- mm/hugetlb: narrow the hugetlb_lock protection area during preparing huge page (Waiman Long) [2039015 2032811]
- mm/hugetlb: a page from buddy is not on any list (Waiman Long) [2039015 2032811]
- mm/hugetlb: not necessary to coalesce regions recursively (Waiman Long) [2039015 2032811]
- selftests/vm/write_to_hugetlbfs.c: fix unused variable warning (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add hugetlb_cgroup reservation tests (Waiman Long) [2039015 2032811]
- hugetlb: support file_region coalescing again (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: support noreserve mappings (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add accounting for shared mappings (Waiman Long) [2039015 2032811]
- hugetlb: disable region_add file_region coalescing (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add reservation accounting for private mappings (Waiman Long) [2039015 2032811]
- mm/hugetlb_cgroup: fix hugetlb_cgroup migration (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add interface for charge/uncharge hugetlb reservations (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add hugetlb_cgroup reservation counter (Waiman Long) [2039015 2032811]
- hugetlb: remove duplicated code (Waiman Long) [2039015 2032811]
- hugetlb: region_chg provides only cache entry (Waiman Long) [2039015 2032811]
- hugetlbfs: always use address space in inode for resv_map pointer (Waiman Long) [2039015 2032811]
- hugetlbfs: fix potential over/underflow setting node specific nr_hugepages (Waiman Long) [2039015 2032811]
- hugetlb: allow to free gigantic pages regardless of the configuration (Waiman Long) [2039015 2032811]
- powerpc/pseries: Fix update of LPAR security flavor after LPM (Steve Best) [2027448 1997294]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.18.1.el8_5]" date="1645531200">- selftests: kvm: Check whether SIDA memop fails for normal guests (Thomas Huth) [2050806 2050807] {CVE-2022-0516}
- KVM: s390: Return error on SIDA memop on normal guest (Thomas Huth) [2050806 2050807] {CVE-2022-0516}
- iommu/amd: Remove iommu_init_ga() (Jerry Snitselaar) [2030854 1998265]
- iommu/amd: Relocate GAMSup check to early_enable_iommus (Jerry Snitselaar) [2030854 1998265]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.19.1.el8_5]" date="1646049600">- tipc: improve size validations for received domain records (Xin Long) [2048970 2048971] {CVE-2022-0435}
- smb3: do not error on fsync when readonly (Ronnie Sahlberg) [2055824 2037811]
- security: implement sctp_assoc_established hook in selinux (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- security: add sctp_assoc_established hook (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- security: call security_sctp_assoc_request in sctp_sf_do_5_1D_ce (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- security: pass asoc to sctp_assoc_request and sctp_sk_clone (Bruno Meneguele) [2054112 2054117 2015525 2048251]
- net: sctp: Fix some typos (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- RDMA/bnxt_re: Fix stats counters (Selvin Xavier) [2049684 2001893]
- net: check skb sec_path when re-initializing slow_gro in gro_list_prepare (Xin Long) [2047427 2030476]
- cpufreq: intel_pstate: Add Icelake servers support in no-HWP mode (David Arcari) [2036888 2003695]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.20.1.el8_5]" date="1646740800">- lib/iov_iter: initialize "flags" in new pipe_buffer (Jan Stancek) [2060874 2060875] {CVE-2022-0847}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-348.20.1.el8.centos" date="1646913600">- Apply debranding changes</changelog>
</package>
<package pkgid="fbf1886ed865f9c5eff5b1f73463e9976ccd9e5382996615aae5eabc10b9271d" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="37185e672d08eed01bc65e5d398188049e072d5149c49d8871f4b94bc121e45b" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="df777a561222a6085a6954e6057ef4a2e658b776d5229af0a83c25b7184b4adc" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="193.28.1.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.20.1.el8_2]" date="1599134400">- [infiniband] IB/rdmavt: Fix RQ counting issues causing use of an invalid RWQE (Kamal Heib) [1872771 1850314]
- [block] blk-mq: Rerun dispatching in the case of budget contention (Ming Lei) [1869779 1824037]
- [block] blk-mq: Add blk_mq_delay_run_hw_queues() API call (Ming Lei) [1869779 1824037]
- [block] blk-mq: In blk_mq_dispatch_rq_list() "no budget" is a reason to kick (Ming Lei) [1869779 1824037]
- [block] blk-mq: Put driver tag in blk_mq_dispatch_rq_list() when no budget (Ming Lei) [1869779 1824037]
- [md] dm mpath: use double checked locking in fast path (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rename current_pgpath to pgpath in multipath_prepare_ioctl (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rework __map_bio() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: factor out multipath_queue_bio (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: push locking down to must_push_back_rq() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: take m-&gt;lock spinlock when testing QUEUE_IF_NO_PATH (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: changes from initial m-&gt;flags locking audit (Mike Snitzer) [1869386 1848651]
- [md] dm rq: don't call blk_mq_queue_stopped() in dm_stop_queue() (Mike Snitzer) [1869386 1848651]
- [md] dm: do not use waitqueue for request-based DM (Mike Snitzer) [1869386 1848651]
- [block] blk-mq: consider non-idle request as "inflight" in blk_mq_rq_inflight() (Mike Snitzer) [1869386 1848651]
- [kernel] sched/deadline: Initialize -&gt;dl_boosted (Phil Auld) [1867612 1854179]
- [kernel] sched/core: Fix PI boosting between RT and DEADLINE tasks (Phil Auld) [1867612 1854179]
- [net] net/smc: tolerate future SMCD versions (Philipp Rudo) [1866390 1854992]
- [net] openvswitch: fixes potential deadlock in dp cleanup code (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: reorder masks array based on usage (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: take into account de-fragmentation/gso_size in execute_check_pkt_len (Lorenzo Bianconi) [1860169 1851888]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.21.1.el8_2]" date="1599739200">- [scsi] scsi: ibmvfc: Fix NULL return compiler warning (Steve Best) [1866371 1810653]
- [scsi] scsi: ibmvfc: Avoid loss of all paths during SVC node reboot (Steve Best) [1866371 1810653]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.22.1.el8_2]" date="1600257600">- [crypto] pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1877530 1862072]
- [crypto] Revert "pefile: Tolerate other pefile signatures after first" (Bruno Meneguele)
- [infiniband] IB/hfi1: Fix another case where pq is left on waitlist (Kamal Heib) [1872766 1859209]
- [infiniband] IB/hfi1: Ensure pq is not left on waitlist (Kamal Heib) [1872766 1859209]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.23.1.el8_2]" date="1600344000">- [net] packet: fix overflow in tpacket_rcv (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}
- [net] packet: make tp_drops atomic (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.24.1.el8_2]" date="1600862400">- [kernel] timers: Remove must_forward_clk (Phil Auld) [1877417 1833096]
- [kernel] timers: Spare timer softirq until next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Expand clk forward logic beyond nohz (Phil Auld) [1877417 1833096]
- [kernel] timers: Reuse next expiry cache after nohz exit (Phil Auld) [1877417 1833096]
- [kernel] timers: Always keep track of next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Optimize _next_timer_interrupt() level iteration (Phil Auld) [1877417 1833096]
- [kernel] timers: Add comments about calc_index() ceiling work (Phil Auld) [1877417 1833096]
- [kernel] timers: Move trigger_dyntick_cpu() to enqueue_timer() (Phil Auld) [1877417 1833096]
- [kernel] timers: Use only bucket expiry for base-&gt;next_expiry value (Phil Auld) [1877417 1833096]
- [kernel] timers: Preserve higher bits of expiration on index calculation (Phil Auld) [1877417 1833096]
- [kernel] timer: Fix wheel index calculation on last level (Phil Auld) [1877417 1833096]
- [kernel] timer: Prevent base-&gt;clk from moving backward (Phil Auld) [1877417 1833096]
- [kernel] timer: Read jiffies once when forwarding base clk (Phil Auld) [1877417 1833096]
- [infiniband] RDMA/umem: Fix ib_umem_find_best_pgsz() (Kamal Heib) [1872424 1856158]
- [net] net: accept an empty mask in /sys/class/net/*/queues/rx-*/rps_cpus (Nitesh Narayan Lal) [1870181 1868433]
- [net] net: Restrict receive packets queuing to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [pci] PCI: Restrict probe functions to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [lib] lib: Restrict cpumask_local_spread to houskeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [s390] s390/pci: Fix unexpected write combine on resource (Philipp Rudo) [1869276 1827311]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.25.1.el8_2]" date="1601553600">- [net] netfilter: conntrack: proc: rename stat column (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: add clash resolution stat counter (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: remove ignore stats (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not increment two error counters at same time (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not auto-delete clash entries on reply (Florian Westphal) [1882095 1875681]
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1881085 1875316] {CVE-2020-14385}
- [kernel] time/tick-broadcast: Fix tick_broadcast_offline() lockdep complaint (Alexey Klimov) [1880081 1877380]
- [net] atomics/treewide: Rename __atomic_add_unless() =&gt; atomic_fetch_add_unless() (Yauheni Kaliuta) [1880081 1813370]
- [kernel] timers: Lower base clock forwarding threshold (Phil Auld) [1877417 1833096]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.26.1.el8_2]" date="1602158400">- [firmware] efi: don't reserve MOK config table memory region (Kairui Song) [1879988 1878584]
- [security] integrity: Load certs from the EFI MOK config table (Lenny Szubowicz) [1877528 1868306]
- [security] integrity: Move import of MokListRT certs to a separate routine (Lenny Szubowicz) [1877528 1868306]
- [firmware] efi: Support for MOK variable config table (Lenny Szubowicz) [1877528 1868306]
- [security] efi: Only print errors about failing to get certs if EFI vars are found (Lenny Szubowicz) [1877528 1804969]
- [fs] ceph: fix inode number handling on arches with 32-bit ino_t (Jeff Layton) [1875787 1866018]
- [fs] ceph: handle zero-length feature mask in session messages (Jeff Layton) [1875787 1866018]
- [fs] ceph: fix endianness bug when handling MDS session feature bits (Jeff Layton) [1875787 1866018]
- [netdrv] net/mlx5e: Fix missing cleanup of ethtool steering during rep rx cleanup (Alaa Hleihel) [1857777 1856660]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.27.1.el8_2]" date="1602763200">- [powerpc] powerpc/pseries: Do not initiate shutdown when system is running on UPS (Diego Domingos) [1882243 1870477]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859471 1859472] {CVE-2020-14331}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.28.1.el8_2]" date="1602849600">- [net] Bluetooth: L2CAP: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888256 1888258] {CVE-2020-12351}
- [net] Bluetooth: A2MP: Fix not initializing all members (Gopal Tiwari) [1888906 1888807] {CVE-2020-12352}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-193.28.1.el8.centos" date="1603195200">- Apply debranding changes</changelog>
</package>
<package pkgid="b097d4aa3f53de3022496eed0fec6df185499878c8cda73eb174dc636af11e3d" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="305.10.2.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.2.1.el8_4]" date="1620648000">- net/mlx5e: Allow to match on MPLS parameters only for MPLS over UDP (Alaa Hleihel) [1952061 1936742]
- net/mlx5e: Reject tc rules which redirect from a VF to itself (Alaa Hleihel) [1952065 1932839]
- net/mlx5: CT: Add support for matching on ct_state inv and rel flags (Alaa Hleihel) [1952062 1942681]
- KVM: VMX: Don't use vcpu-&gt;run-&gt;internal.ndata as an array index (Jon Maloy) [1954221 1954219]
- tools/power turbostat: Revert "[tools] tools/power turbostat: Enable accumulate RAPL display" (Prarit Bhargava) [1952987 1944699]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.3.1.el8_4]" date="1621252800">- Revert "uio: use request_threaded_irq instead" (Vitaly Kuznetsov) [1952952 1946644]
- drm/ast: Set format registers in primary plane's update (Lyude Paul) [1952900 1923857]
- net/sched: act_ct: clear post_ct if doing ct_clear (Marcelo Ricardo Leitner) [1956458 1941889]
- md/raid1: properly indicate failure when ending a failed write request (Nigel Croxon) [1955188 1954588]
- nitro_enclaves: Fix stale file descriptors on failed usercopy (Vitaly Kuznetsov) [1956379 1953717]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.4.1.el8_4]" date="1621944000">- vmxnet3: Set the default of vxlan overlay offload to disabled (Cathy Avery) [1960702 1941714]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.5.1.el8_4]" date="1622548800">- gfs2: report "already frozen/thawed" errors (Bob Peterson) [1961849 1932236]
- gfs2: move freeze glock outside the make_fs_rw and _ro functions (Bob Peterson) [1961849 1932236]
- gfs2: Add common helper for holding and releasing the freeze glock (Bob Peterson) [1961849 1932236]
- gfs2: in signal_our_withdraw wait for unfreeze of _this_ fs only (Bob Peterson) [1961849 1932236]
- gfs2: Don't freeze the file system during unmount (Bob Peterson) [1961849 1932236]
- gfs2: Fix regression in freeze_go_sync (Bob Peterson) [1961849 1932236]
- gfs2: The freeze glock should never be frozen (Bob Peterson) [1961849 1932236]
- gfs2: When freezing gfs2, use GL_EXACT and not GL_NOCACHE (Bob Peterson) [1961849 1932236]
- gfs2: read-only mounts should grab the sd_freeze_gl glock (Bob Peterson) [1961849 1932236]
- gfs2: freeze should work on read-only mounts (Bob Peterson) [1961849 1932236]
- gfs2: Abort gfs2_freeze if io error is seen (Bob Peterson) [1961849 1932236]
- CI: Disable result checking for realtime check (Veronika Kabatova)
- CI: Explicitly disable result checking for private CI (Veronika Kabatova)
- CI: Rename variable (Veronika Kabatova)
- CI: Update builder containers (Veronika Kabatova)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.6.1.el8_4]" date="1623067200">- openvswitch: fix stack OOB read while fragmenting IPv4 packets (Davide Caratti) [1963940 1924608]
- net/sched: sch_frag: fix stack OOB read while fragmenting IPv4 packets (Davide Caratti) [1963940 1924608]
- net/sched: act_ct: fix wild memory access when clearing fragments (Davide Caratti) [1963940 1924608]
- net: Treat __napi_schedule_irqoff() as __napi_schedule() on PREEMPT_RT (Ivan Vecera)
- redhat/configs: Add CONFIG_SYSTEM_REVOCATION_KEYS and CONFIG_SYSTEM_REVOCATION_LIST (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: add 'x509_revocation_list' to gitignore (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- integrity: Load mokx variables into the blacklist keyring (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Add ability to preload revocation certs (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Move load_system_certificate_list to a common function (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Add EFI_CERT_X509_GUID support for dbx entries (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- net/sched: cls_api: increase max_reclassify_loop (Davide Caratti) [1965148 1955136]
- dm writecache: fix performance degradation in ssd mode (Mike Snitzer) [1962241 1961859]
- scsi: fnic: Use scsi_host_busy_iter() to traverse commands (Ewan D. Milne) [1961705 1949250]
- scsi: fnic: Kill 'exclude_id' argument to fnic_cleanup_io() (Ewan D. Milne) [1961705 1949250]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.7.1.el8_4]" date="1623672000">- net: zero-initialize tc skb extension on allocation (Ivan Vecera) [1965457 1946986]
- net/sched: cls_flower: fix only mask bit check in the validate_ct_state (Ivan Vecera) [1965457 1946986]
- net: cls_api: Fix uninitialised struct field bo-&gt;unlocked_driver_cb (Ivan Vecera) [1965457 1946986]
- net/sched: act_api: fix miss set post_ct for ovs after do conntrack in act_ct (Ivan Vecera) [1965457 1946986]
- net/sched: cls_flower: validate ct_state for invalid and reply flags (Ivan Vecera) [1965457 1946986]
- flow_dissector: fix TTL and TOS dissection on IPv4 fragments (Paolo Abeni) [1963952 1950288]
- Revert "sctp: Fix SHUTDOWN CTSN Ack in the peer restart case" (Xin Long) [1965632 1953839]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [1965632 1953839]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [1965632 1953839]
- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962544 1962546] {CVE-2021-33034}
- x86/kvm: Unify kvm_pv_guest_cpu_reboot() with kvm_guest_cpu_offline() (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Disable all PV features on crash (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Disable kvmclock on all CPUs on shutdown (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Teardown PV features on boot CPU as well (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Fix pr_info() for async PF setup/teardown (Lenny Szubowicz) [1964930 1934273]
- net/sched: act_ct: Fix ct template allocation for zone 0 (Marcelo Ricardo Leitner) [1965150 1881824]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.8.1.el8_4]" date="1624363200">- iavf: amend removal of MODULE_VERSION (Stefan Assmann) [1969925 1955738]
- ixgbe: Amend commit acf03026ec5a to include a version string in module info. (Ken Cox) [1969922 1955759]
- i40e: amend removal of MODULE_VERSION (Stefan Assmann) [1969923 1955736]
- redhat/configs: Add CONFIG_PINCTRL_EMMITSBURG (David Arcari) [1963984 1959506]
- redhat/configs: Remove CONFIG_EMMITSBURG (David Arcari) [1963984 1959506]
- netlink: add tracepoint at NL_SET_ERR_MSG (Marcelo Ricardo Leitner) [1972938 1956983]
- Revert "[netdrv] net/intel: remove driver versions from Intel drivers" (Jonathan Toppins) [1969917 1955745]
- Amends commit ea6244cc248b to include a version string in module info. (Ken Cox) [1969915 1955726]
- Revert "[netdrv] net/broadcom: Clean broadcom code from driver versions" (Jonathan Toppins) [1969914 1955721]
- ena: revert removal of MODULE_VERSION from ena (Petr Oros) [1969913 1955712]
- fm10k: amend removal of MODULE_VERSION (Vladis Dronov) [1969910 1955730]
- net/sched: act_ct: Offload connections with commit action (Marcelo Ricardo Leitner) [1968679 1965817]
- netfilter: flowtable: Remove redundant hw refresh bit (Marcelo Ricardo Leitner) [1968679 1965817]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.9.1.el8_4]" date="1624881600">- ixgbevf: Amend commit acf03026ec5a to include a version in module info. (Ken Cox) [1969911 1955764]
- CI: Merge configuration (Veronika Kabatova)
- igc: amend removal of MODULE_VERSION (Corinna Vinschen) [1969921 1955755]
- igb: amend removal of MODULE_VERSION (Corinna Vinschen) [1969919 1955748]
- locking/qrwlock: Fix ordering in queued_write_lock_slowpath() (Waiman Long) [1964419 1950110]
- scsi: qedf: Do not put host in qedf_vport_create() unconditionally (Nilesh Javali) [1974968 1899384]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.10.1.el8_4]" date="1625659200">- igbvf: amend removal of MODULE_VERSION (Corinna Vinschen) [1969920 1955752]
- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971464 1971488] {CVE-2021-32399}
- scsi: ibmvfc: Free channel_setup_buf during device tear down (Steve Best) [1964697 1938102]
- i40e: Fix parameters in aq_get_phy_register() (Stefan Assmann) [1967099 1907852]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.10.2.el8_4]" date="1626091200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975181 1975182] {CVE-2021-33909}</changelog>
</package>
<package pkgid="ec8acce7f641a5735bc4a96a7817edc83988908d2159e37aae554ad6bbd06780" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="348.20.1.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.12.1.el8_5]" date="1641988800">- tcp: don't free a FIN sk_buff in tcp_remove_empty_skb() (Guillaume Nault) [2021574 2016210]
- kernel.spec: Add support to use vmlinux.h (Jiri Olsa) [2031053 1989087]
- spec: Add vmlinux.h to kernel-devel package (Jiri Olsa) [2031053 1989087]
- x86/mce: Avoid infinite loop for copy from user recovery (Prarit Bhargava) [2008789 1999550]
- x86/mce: Rename kill_it to kill_current_task (Prarit Bhargava) [2008789 1999550]
- x86/mce: Recover from poison found while copying from user space (Prarit Bhargava) [2008789 1999550]
- x86/mce: Delay clearing IA32_MCG_STATUS to the end of do_machine_check() (Prarit Bhargava) [2008789 1999550]
- x86/mce: Send #MC singal from task work (Prarit Bhargava) [2008789 1999550]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-348.13.1.el8_5]" date="1642507200">- vfs: Out-of-bounds write of heap buffer in fs_context.c (Frantisek Hrbata) [2040585 2040586] {CVE-2022-0185}
- xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Bruno Meneguele) [2034864 2034865] {CVE-2021-4155}
- af_unix: fix garbage collect vs MSG_PEEK (Patrick Talbert) [2031974 2031975] {CVE-2021-0920}
- cgroup: verify that source is a string (Waiman Long) [2034608 2034609] {CVE-2021-4154}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-348.14.1.el8_5]" date="1643198400">- tcp: fix page frag corruption on page fault (Paolo Abeni) [2041529 1996074]
- net: fix sk_page_frag() recursion from memory reclaim (Paolo Abeni) [2041529 1996074]
- KVM: s390: index kvm-&gt;arch.idle_mask by vcpu_idx (Thomas Huth) [2040769 2026230]
- redhat: set LC_ALL=C before sorting config content (Frantisek Hrbata)</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.15.1.el8_5]" date="1643716800">- net/mlx5: DR, Use FW API when updating FW-owned flow table (Michal Schmidt) [2042663 2042651]
- KVM: x86: Wait for IPIs to be delivered when handling Hyper-V TLB flush hypercall (Vitaly Kuznetsov) [2043237 1868572]
- drm/mgag200: Select clock in PLL update functions (Bruno Meneguele) [2034949 1953926]
- drm/i915: Fix HAS_LSPCON macro for platforms between GEN9 and GEN10 (Bruno Meneguele) [2027335 2005586]
- crypto: qat - power up 4xxx device (Vladis Dronov) [2016437 1960307]
- RDMA/core: Fix a double free in add_port error flow (Kamal Heib) [2038724 2008555]
- powerpc/iommu: Report the correct most efficient DMA mask for PCI devices (Steve Best) [2018928 2007425]
- powerpc/dma: Fix dma_map_ops::get_required_mask (Steve Best) [2018928 2007425]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.16.1.el8_5]" date="1644321600">- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047601 2047602] {CVE-2022-22942}
- net: openvswitch: Fix ct_state nat flags for conns arriving from tc (Marcelo Ricardo Leitner) [2043548 2040334]
- net: openvswitch: Fix matching zone id for invalid conns arriving from tc (Marcelo Ricardo Leitner) [2043550 2040452]
- net/sched: flow_dissector: Fix matching on zone id for invalid conns (Marcelo Ricardo Leitner) [2043550 2040452]
- net/sched: Extend qdisc control block with tc control block (Marcelo Ricardo Leitner) [2043550 2040452]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.17.1.el8_5]" date="1644926400">- vfs: check dentry is still valid in get_link() (Ian Kent) [2052558 2014846]
- xfs: don't expose internal symlink metadata buffers to the vfs (Brian Foster) [2052558 2014846]
- CI: Use appropriate zstream builder (Veronika Kabatova)
- CI: Enable baseline realtime checks (Veronika Kabatova)
- CI: Rename pipelines to include release names (Veronika Kabatova)
- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052166 2052167] {CVE-2022-0492}
- ice: Remove boolean vlan_promisc flag from function (Jonathan Toppins) [2051951 2030400]
- ceph: put the requests/sessions when it fails to alloc memory (Jeffrey Layton) [2053725 2017796]
- ceph: fix off by one bugs in unsafe_request_wait() (Jeffrey Layton) [2053725 2017796]
- ceph: flush the mdlog before waiting on unsafe reqs (Jeffrey Layton) [2053725 2017796]
- ceph: flush mdlog before umounting (Jeffrey Layton) [2053725 2017796]
- ceph: make iterate_sessions a global symbol (Jeffrey Layton) [2053725 2017796]
- ceph: make ceph_create_session_msg a global symbol (Jeffrey Layton) [2053725 2017796]
- xfs: check sb_meta_uuid for dabuf buffer recovery (Bill O'Donnell) [2049292 2020764]
- drm/i915: Flush TLBs before releasing backing store (Patrick Talbert) [2044328 2044329] {CVE-2022-0330}
- hugetlb: fix hugetlb cgroup refcounting during vma split (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: fix imbalanced css_get and css_put pair for shared mappings (Waiman Long) [2039015 2032811]
- mm/hugetlb: change hugetlb_reserve_pages() to type bool (Waiman Long) [2039015 2032811]
- hugetlb: fix an error code in hugetlb_reserve_pages() (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: fix offline of hugetlb cgroup with reservations (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: fix reservation accounting (Waiman Long) [2039015 2032811]
- mm/hugetlb: narrow the hugetlb_lock protection area during preparing huge page (Waiman Long) [2039015 2032811]
- mm/hugetlb: a page from buddy is not on any list (Waiman Long) [2039015 2032811]
- mm/hugetlb: not necessary to coalesce regions recursively (Waiman Long) [2039015 2032811]
- selftests/vm/write_to_hugetlbfs.c: fix unused variable warning (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add hugetlb_cgroup reservation tests (Waiman Long) [2039015 2032811]
- hugetlb: support file_region coalescing again (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: support noreserve mappings (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add accounting for shared mappings (Waiman Long) [2039015 2032811]
- hugetlb: disable region_add file_region coalescing (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add reservation accounting for private mappings (Waiman Long) [2039015 2032811]
- mm/hugetlb_cgroup: fix hugetlb_cgroup migration (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add interface for charge/uncharge hugetlb reservations (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add hugetlb_cgroup reservation counter (Waiman Long) [2039015 2032811]
- hugetlb: remove duplicated code (Waiman Long) [2039015 2032811]
- hugetlb: region_chg provides only cache entry (Waiman Long) [2039015 2032811]
- hugetlbfs: always use address space in inode for resv_map pointer (Waiman Long) [2039015 2032811]
- hugetlbfs: fix potential over/underflow setting node specific nr_hugepages (Waiman Long) [2039015 2032811]
- hugetlb: allow to free gigantic pages regardless of the configuration (Waiman Long) [2039015 2032811]
- powerpc/pseries: Fix update of LPAR security flavor after LPM (Steve Best) [2027448 1997294]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.18.1.el8_5]" date="1645531200">- selftests: kvm: Check whether SIDA memop fails for normal guests (Thomas Huth) [2050806 2050807] {CVE-2022-0516}
- KVM: s390: Return error on SIDA memop on normal guest (Thomas Huth) [2050806 2050807] {CVE-2022-0516}
- iommu/amd: Remove iommu_init_ga() (Jerry Snitselaar) [2030854 1998265]
- iommu/amd: Relocate GAMSup check to early_enable_iommus (Jerry Snitselaar) [2030854 1998265]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.19.1.el8_5]" date="1646049600">- tipc: improve size validations for received domain records (Xin Long) [2048970 2048971] {CVE-2022-0435}
- smb3: do not error on fsync when readonly (Ronnie Sahlberg) [2055824 2037811]
- security: implement sctp_assoc_established hook in selinux (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- security: add sctp_assoc_established hook (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- security: call security_sctp_assoc_request in sctp_sf_do_5_1D_ce (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- security: pass asoc to sctp_assoc_request and sctp_sk_clone (Bruno Meneguele) [2054112 2054117 2015525 2048251]
- net: sctp: Fix some typos (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- RDMA/bnxt_re: Fix stats counters (Selvin Xavier) [2049684 2001893]
- net: check skb sec_path when re-initializing slow_gro in gro_list_prepare (Xin Long) [2047427 2030476]
- cpufreq: intel_pstate: Add Icelake servers support in no-HWP mode (David Arcari) [2036888 2003695]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.20.1.el8_5]" date="1646740800">- lib/iov_iter: initialize "flags" in new pipe_buffer (Jan Stancek) [2060874 2060875] {CVE-2022-0847}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-348.20.1.el8.centos" date="1646913600">- Apply debranding changes</changelog>
</package>
<package pkgid="adc109c2eb664d6b349eed350d24fdb834fe888674ec6633faf84582320b4ef8" name="kernel-ipaclones-internal" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="29c9088b2b1bb2a2e80e3efec95cdff019f4f3e2cd698c34474d4fc44ee2749e" name="kernel-ipaclones-internal" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="193.28.1.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.20.1.el8_2]" date="1599134400">- [infiniband] IB/rdmavt: Fix RQ counting issues causing use of an invalid RWQE (Kamal Heib) [1872771 1850314]
- [block] blk-mq: Rerun dispatching in the case of budget contention (Ming Lei) [1869779 1824037]
- [block] blk-mq: Add blk_mq_delay_run_hw_queues() API call (Ming Lei) [1869779 1824037]
- [block] blk-mq: In blk_mq_dispatch_rq_list() "no budget" is a reason to kick (Ming Lei) [1869779 1824037]
- [block] blk-mq: Put driver tag in blk_mq_dispatch_rq_list() when no budget (Ming Lei) [1869779 1824037]
- [md] dm mpath: use double checked locking in fast path (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rename current_pgpath to pgpath in multipath_prepare_ioctl (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rework __map_bio() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: factor out multipath_queue_bio (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: push locking down to must_push_back_rq() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: take m-&gt;lock spinlock when testing QUEUE_IF_NO_PATH (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: changes from initial m-&gt;flags locking audit (Mike Snitzer) [1869386 1848651]
- [md] dm rq: don't call blk_mq_queue_stopped() in dm_stop_queue() (Mike Snitzer) [1869386 1848651]
- [md] dm: do not use waitqueue for request-based DM (Mike Snitzer) [1869386 1848651]
- [block] blk-mq: consider non-idle request as "inflight" in blk_mq_rq_inflight() (Mike Snitzer) [1869386 1848651]
- [kernel] sched/deadline: Initialize -&gt;dl_boosted (Phil Auld) [1867612 1854179]
- [kernel] sched/core: Fix PI boosting between RT and DEADLINE tasks (Phil Auld) [1867612 1854179]
- [net] net/smc: tolerate future SMCD versions (Philipp Rudo) [1866390 1854992]
- [net] openvswitch: fixes potential deadlock in dp cleanup code (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: reorder masks array based on usage (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: take into account de-fragmentation/gso_size in execute_check_pkt_len (Lorenzo Bianconi) [1860169 1851888]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.21.1.el8_2]" date="1599739200">- [scsi] scsi: ibmvfc: Fix NULL return compiler warning (Steve Best) [1866371 1810653]
- [scsi] scsi: ibmvfc: Avoid loss of all paths during SVC node reboot (Steve Best) [1866371 1810653]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.22.1.el8_2]" date="1600257600">- [crypto] pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1877530 1862072]
- [crypto] Revert "pefile: Tolerate other pefile signatures after first" (Bruno Meneguele)
- [infiniband] IB/hfi1: Fix another case where pq is left on waitlist (Kamal Heib) [1872766 1859209]
- [infiniband] IB/hfi1: Ensure pq is not left on waitlist (Kamal Heib) [1872766 1859209]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.23.1.el8_2]" date="1600344000">- [net] packet: fix overflow in tpacket_rcv (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}
- [net] packet: make tp_drops atomic (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.24.1.el8_2]" date="1600862400">- [kernel] timers: Remove must_forward_clk (Phil Auld) [1877417 1833096]
- [kernel] timers: Spare timer softirq until next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Expand clk forward logic beyond nohz (Phil Auld) [1877417 1833096]
- [kernel] timers: Reuse next expiry cache after nohz exit (Phil Auld) [1877417 1833096]
- [kernel] timers: Always keep track of next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Optimize _next_timer_interrupt() level iteration (Phil Auld) [1877417 1833096]
- [kernel] timers: Add comments about calc_index() ceiling work (Phil Auld) [1877417 1833096]
- [kernel] timers: Move trigger_dyntick_cpu() to enqueue_timer() (Phil Auld) [1877417 1833096]
- [kernel] timers: Use only bucket expiry for base-&gt;next_expiry value (Phil Auld) [1877417 1833096]
- [kernel] timers: Preserve higher bits of expiration on index calculation (Phil Auld) [1877417 1833096]
- [kernel] timer: Fix wheel index calculation on last level (Phil Auld) [1877417 1833096]
- [kernel] timer: Prevent base-&gt;clk from moving backward (Phil Auld) [1877417 1833096]
- [kernel] timer: Read jiffies once when forwarding base clk (Phil Auld) [1877417 1833096]
- [infiniband] RDMA/umem: Fix ib_umem_find_best_pgsz() (Kamal Heib) [1872424 1856158]
- [net] net: accept an empty mask in /sys/class/net/*/queues/rx-*/rps_cpus (Nitesh Narayan Lal) [1870181 1868433]
- [net] net: Restrict receive packets queuing to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [pci] PCI: Restrict probe functions to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [lib] lib: Restrict cpumask_local_spread to houskeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [s390] s390/pci: Fix unexpected write combine on resource (Philipp Rudo) [1869276 1827311]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.25.1.el8_2]" date="1601553600">- [net] netfilter: conntrack: proc: rename stat column (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: add clash resolution stat counter (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: remove ignore stats (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not increment two error counters at same time (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not auto-delete clash entries on reply (Florian Westphal) [1882095 1875681]
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1881085 1875316] {CVE-2020-14385}
- [kernel] time/tick-broadcast: Fix tick_broadcast_offline() lockdep complaint (Alexey Klimov) [1880081 1877380]
- [net] atomics/treewide: Rename __atomic_add_unless() =&gt; atomic_fetch_add_unless() (Yauheni Kaliuta) [1880081 1813370]
- [kernel] timers: Lower base clock forwarding threshold (Phil Auld) [1877417 1833096]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.26.1.el8_2]" date="1602158400">- [firmware] efi: don't reserve MOK config table memory region (Kairui Song) [1879988 1878584]
- [security] integrity: Load certs from the EFI MOK config table (Lenny Szubowicz) [1877528 1868306]
- [security] integrity: Move import of MokListRT certs to a separate routine (Lenny Szubowicz) [1877528 1868306]
- [firmware] efi: Support for MOK variable config table (Lenny Szubowicz) [1877528 1868306]
- [security] efi: Only print errors about failing to get certs if EFI vars are found (Lenny Szubowicz) [1877528 1804969]
- [fs] ceph: fix inode number handling on arches with 32-bit ino_t (Jeff Layton) [1875787 1866018]
- [fs] ceph: handle zero-length feature mask in session messages (Jeff Layton) [1875787 1866018]
- [fs] ceph: fix endianness bug when handling MDS session feature bits (Jeff Layton) [1875787 1866018]
- [netdrv] net/mlx5e: Fix missing cleanup of ethtool steering during rep rx cleanup (Alaa Hleihel) [1857777 1856660]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.27.1.el8_2]" date="1602763200">- [powerpc] powerpc/pseries: Do not initiate shutdown when system is running on UPS (Diego Domingos) [1882243 1870477]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859471 1859472] {CVE-2020-14331}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.28.1.el8_2]" date="1602849600">- [net] Bluetooth: L2CAP: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888256 1888258] {CVE-2020-12351}
- [net] Bluetooth: A2MP: Fix not initializing all members (Gopal Tiwari) [1888906 1888807] {CVE-2020-12352}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-193.28.1.el8.centos" date="1603195200">- Apply debranding changes</changelog>
</package>
<package pkgid="cc6e92744358db9960cd5829214673d0abd874bd41d66e0e64f1e4c60d9f0ec4" name="kernel-ipaclones-internal" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="305.10.2.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.2.1.el8_4]" date="1620648000">- net/mlx5e: Allow to match on MPLS parameters only for MPLS over UDP (Alaa Hleihel) [1952061 1936742]
- net/mlx5e: Reject tc rules which redirect from a VF to itself (Alaa Hleihel) [1952065 1932839]
- net/mlx5: CT: Add support for matching on ct_state inv and rel flags (Alaa Hleihel) [1952062 1942681]
- KVM: VMX: Don't use vcpu-&gt;run-&gt;internal.ndata as an array index (Jon Maloy) [1954221 1954219]
- tools/power turbostat: Revert "[tools] tools/power turbostat: Enable accumulate RAPL display" (Prarit Bhargava) [1952987 1944699]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.3.1.el8_4]" date="1621252800">- Revert "uio: use request_threaded_irq instead" (Vitaly Kuznetsov) [1952952 1946644]
- drm/ast: Set format registers in primary plane's update (Lyude Paul) [1952900 1923857]
- net/sched: act_ct: clear post_ct if doing ct_clear (Marcelo Ricardo Leitner) [1956458 1941889]
- md/raid1: properly indicate failure when ending a failed write request (Nigel Croxon) [1955188 1954588]
- nitro_enclaves: Fix stale file descriptors on failed usercopy (Vitaly Kuznetsov) [1956379 1953717]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.4.1.el8_4]" date="1621944000">- vmxnet3: Set the default of vxlan overlay offload to disabled (Cathy Avery) [1960702 1941714]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.5.1.el8_4]" date="1622548800">- gfs2: report "already frozen/thawed" errors (Bob Peterson) [1961849 1932236]
- gfs2: move freeze glock outside the make_fs_rw and _ro functions (Bob Peterson) [1961849 1932236]
- gfs2: Add common helper for holding and releasing the freeze glock (Bob Peterson) [1961849 1932236]
- gfs2: in signal_our_withdraw wait for unfreeze of _this_ fs only (Bob Peterson) [1961849 1932236]
- gfs2: Don't freeze the file system during unmount (Bob Peterson) [1961849 1932236]
- gfs2: Fix regression in freeze_go_sync (Bob Peterson) [1961849 1932236]
- gfs2: The freeze glock should never be frozen (Bob Peterson) [1961849 1932236]
- gfs2: When freezing gfs2, use GL_EXACT and not GL_NOCACHE (Bob Peterson) [1961849 1932236]
- gfs2: read-only mounts should grab the sd_freeze_gl glock (Bob Peterson) [1961849 1932236]
- gfs2: freeze should work on read-only mounts (Bob Peterson) [1961849 1932236]
- gfs2: Abort gfs2_freeze if io error is seen (Bob Peterson) [1961849 1932236]
- CI: Disable result checking for realtime check (Veronika Kabatova)
- CI: Explicitly disable result checking for private CI (Veronika Kabatova)
- CI: Rename variable (Veronika Kabatova)
- CI: Update builder containers (Veronika Kabatova)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.6.1.el8_4]" date="1623067200">- openvswitch: fix stack OOB read while fragmenting IPv4 packets (Davide Caratti) [1963940 1924608]
- net/sched: sch_frag: fix stack OOB read while fragmenting IPv4 packets (Davide Caratti) [1963940 1924608]
- net/sched: act_ct: fix wild memory access when clearing fragments (Davide Caratti) [1963940 1924608]
- net: Treat __napi_schedule_irqoff() as __napi_schedule() on PREEMPT_RT (Ivan Vecera)
- redhat/configs: Add CONFIG_SYSTEM_REVOCATION_KEYS and CONFIG_SYSTEM_REVOCATION_LIST (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: add 'x509_revocation_list' to gitignore (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- integrity: Load mokx variables into the blacklist keyring (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Add ability to preload revocation certs (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Move load_system_certificate_list to a common function (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Add EFI_CERT_X509_GUID support for dbx entries (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- net/sched: cls_api: increase max_reclassify_loop (Davide Caratti) [1965148 1955136]
- dm writecache: fix performance degradation in ssd mode (Mike Snitzer) [1962241 1961859]
- scsi: fnic: Use scsi_host_busy_iter() to traverse commands (Ewan D. Milne) [1961705 1949250]
- scsi: fnic: Kill 'exclude_id' argument to fnic_cleanup_io() (Ewan D. Milne) [1961705 1949250]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.7.1.el8_4]" date="1623672000">- net: zero-initialize tc skb extension on allocation (Ivan Vecera) [1965457 1946986]
- net/sched: cls_flower: fix only mask bit check in the validate_ct_state (Ivan Vecera) [1965457 1946986]
- net: cls_api: Fix uninitialised struct field bo-&gt;unlocked_driver_cb (Ivan Vecera) [1965457 1946986]
- net/sched: act_api: fix miss set post_ct for ovs after do conntrack in act_ct (Ivan Vecera) [1965457 1946986]
- net/sched: cls_flower: validate ct_state for invalid and reply flags (Ivan Vecera) [1965457 1946986]
- flow_dissector: fix TTL and TOS dissection on IPv4 fragments (Paolo Abeni) [1963952 1950288]
- Revert "sctp: Fix SHUTDOWN CTSN Ack in the peer restart case" (Xin Long) [1965632 1953839]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [1965632 1953839]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [1965632 1953839]
- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962544 1962546] {CVE-2021-33034}
- x86/kvm: Unify kvm_pv_guest_cpu_reboot() with kvm_guest_cpu_offline() (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Disable all PV features on crash (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Disable kvmclock on all CPUs on shutdown (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Teardown PV features on boot CPU as well (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Fix pr_info() for async PF setup/teardown (Lenny Szubowicz) [1964930 1934273]
- net/sched: act_ct: Fix ct template allocation for zone 0 (Marcelo Ricardo Leitner) [1965150 1881824]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.8.1.el8_4]" date="1624363200">- iavf: amend removal of MODULE_VERSION (Stefan Assmann) [1969925 1955738]
- ixgbe: Amend commit acf03026ec5a to include a version string in module info. (Ken Cox) [1969922 1955759]
- i40e: amend removal of MODULE_VERSION (Stefan Assmann) [1969923 1955736]
- redhat/configs: Add CONFIG_PINCTRL_EMMITSBURG (David Arcari) [1963984 1959506]
- redhat/configs: Remove CONFIG_EMMITSBURG (David Arcari) [1963984 1959506]
- netlink: add tracepoint at NL_SET_ERR_MSG (Marcelo Ricardo Leitner) [1972938 1956983]
- Revert "[netdrv] net/intel: remove driver versions from Intel drivers" (Jonathan Toppins) [1969917 1955745]
- Amends commit ea6244cc248b to include a version string in module info. (Ken Cox) [1969915 1955726]
- Revert "[netdrv] net/broadcom: Clean broadcom code from driver versions" (Jonathan Toppins) [1969914 1955721]
- ena: revert removal of MODULE_VERSION from ena (Petr Oros) [1969913 1955712]
- fm10k: amend removal of MODULE_VERSION (Vladis Dronov) [1969910 1955730]
- net/sched: act_ct: Offload connections with commit action (Marcelo Ricardo Leitner) [1968679 1965817]
- netfilter: flowtable: Remove redundant hw refresh bit (Marcelo Ricardo Leitner) [1968679 1965817]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.9.1.el8_4]" date="1624881600">- ixgbevf: Amend commit acf03026ec5a to include a version in module info. (Ken Cox) [1969911 1955764]
- CI: Merge configuration (Veronika Kabatova)
- igc: amend removal of MODULE_VERSION (Corinna Vinschen) [1969921 1955755]
- igb: amend removal of MODULE_VERSION (Corinna Vinschen) [1969919 1955748]
- locking/qrwlock: Fix ordering in queued_write_lock_slowpath() (Waiman Long) [1964419 1950110]
- scsi: qedf: Do not put host in qedf_vport_create() unconditionally (Nilesh Javali) [1974968 1899384]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.10.1.el8_4]" date="1625659200">- igbvf: amend removal of MODULE_VERSION (Corinna Vinschen) [1969920 1955752]
- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971464 1971488] {CVE-2021-32399}
- scsi: ibmvfc: Free channel_setup_buf during device tear down (Steve Best) [1964697 1938102]
- i40e: Fix parameters in aq_get_phy_register() (Stefan Assmann) [1967099 1907852]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.10.2.el8_4]" date="1626091200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975181 1975182] {CVE-2021-33909}</changelog>
</package>
<package pkgid="b1c08a2b2973e63b17633c4c2c40f8b358c35fa2bd382c018bc386618eea53b6" name="kernel-ipaclones-internal" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="348.20.1.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.12.1.el8_5]" date="1641988800">- tcp: don't free a FIN sk_buff in tcp_remove_empty_skb() (Guillaume Nault) [2021574 2016210]
- kernel.spec: Add support to use vmlinux.h (Jiri Olsa) [2031053 1989087]
- spec: Add vmlinux.h to kernel-devel package (Jiri Olsa) [2031053 1989087]
- x86/mce: Avoid infinite loop for copy from user recovery (Prarit Bhargava) [2008789 1999550]
- x86/mce: Rename kill_it to kill_current_task (Prarit Bhargava) [2008789 1999550]
- x86/mce: Recover from poison found while copying from user space (Prarit Bhargava) [2008789 1999550]
- x86/mce: Delay clearing IA32_MCG_STATUS to the end of do_machine_check() (Prarit Bhargava) [2008789 1999550]
- x86/mce: Send #MC singal from task work (Prarit Bhargava) [2008789 1999550]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-348.13.1.el8_5]" date="1642507200">- vfs: Out-of-bounds write of heap buffer in fs_context.c (Frantisek Hrbata) [2040585 2040586] {CVE-2022-0185}
- xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Bruno Meneguele) [2034864 2034865] {CVE-2021-4155}
- af_unix: fix garbage collect vs MSG_PEEK (Patrick Talbert) [2031974 2031975] {CVE-2021-0920}
- cgroup: verify that source is a string (Waiman Long) [2034608 2034609] {CVE-2021-4154}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-348.14.1.el8_5]" date="1643198400">- tcp: fix page frag corruption on page fault (Paolo Abeni) [2041529 1996074]
- net: fix sk_page_frag() recursion from memory reclaim (Paolo Abeni) [2041529 1996074]
- KVM: s390: index kvm-&gt;arch.idle_mask by vcpu_idx (Thomas Huth) [2040769 2026230]
- redhat: set LC_ALL=C before sorting config content (Frantisek Hrbata)</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.15.1.el8_5]" date="1643716800">- net/mlx5: DR, Use FW API when updating FW-owned flow table (Michal Schmidt) [2042663 2042651]
- KVM: x86: Wait for IPIs to be delivered when handling Hyper-V TLB flush hypercall (Vitaly Kuznetsov) [2043237 1868572]
- drm/mgag200: Select clock in PLL update functions (Bruno Meneguele) [2034949 1953926]
- drm/i915: Fix HAS_LSPCON macro for platforms between GEN9 and GEN10 (Bruno Meneguele) [2027335 2005586]
- crypto: qat - power up 4xxx device (Vladis Dronov) [2016437 1960307]
- RDMA/core: Fix a double free in add_port error flow (Kamal Heib) [2038724 2008555]
- powerpc/iommu: Report the correct most efficient DMA mask for PCI devices (Steve Best) [2018928 2007425]
- powerpc/dma: Fix dma_map_ops::get_required_mask (Steve Best) [2018928 2007425]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.16.1.el8_5]" date="1644321600">- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047601 2047602] {CVE-2022-22942}
- net: openvswitch: Fix ct_state nat flags for conns arriving from tc (Marcelo Ricardo Leitner) [2043548 2040334]
- net: openvswitch: Fix matching zone id for invalid conns arriving from tc (Marcelo Ricardo Leitner) [2043550 2040452]
- net/sched: flow_dissector: Fix matching on zone id for invalid conns (Marcelo Ricardo Leitner) [2043550 2040452]
- net/sched: Extend qdisc control block with tc control block (Marcelo Ricardo Leitner) [2043550 2040452]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.17.1.el8_5]" date="1644926400">- vfs: check dentry is still valid in get_link() (Ian Kent) [2052558 2014846]
- xfs: don't expose internal symlink metadata buffers to the vfs (Brian Foster) [2052558 2014846]
- CI: Use appropriate zstream builder (Veronika Kabatova)
- CI: Enable baseline realtime checks (Veronika Kabatova)
- CI: Rename pipelines to include release names (Veronika Kabatova)
- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052166 2052167] {CVE-2022-0492}
- ice: Remove boolean vlan_promisc flag from function (Jonathan Toppins) [2051951 2030400]
- ceph: put the requests/sessions when it fails to alloc memory (Jeffrey Layton) [2053725 2017796]
- ceph: fix off by one bugs in unsafe_request_wait() (Jeffrey Layton) [2053725 2017796]
- ceph: flush the mdlog before waiting on unsafe reqs (Jeffrey Layton) [2053725 2017796]
- ceph: flush mdlog before umounting (Jeffrey Layton) [2053725 2017796]
- ceph: make iterate_sessions a global symbol (Jeffrey Layton) [2053725 2017796]
- ceph: make ceph_create_session_msg a global symbol (Jeffrey Layton) [2053725 2017796]
- xfs: check sb_meta_uuid for dabuf buffer recovery (Bill O'Donnell) [2049292 2020764]
- drm/i915: Flush TLBs before releasing backing store (Patrick Talbert) [2044328 2044329] {CVE-2022-0330}
- hugetlb: fix hugetlb cgroup refcounting during vma split (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: fix imbalanced css_get and css_put pair for shared mappings (Waiman Long) [2039015 2032811]
- mm/hugetlb: change hugetlb_reserve_pages() to type bool (Waiman Long) [2039015 2032811]
- hugetlb: fix an error code in hugetlb_reserve_pages() (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: fix offline of hugetlb cgroup with reservations (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: fix reservation accounting (Waiman Long) [2039015 2032811]
- mm/hugetlb: narrow the hugetlb_lock protection area during preparing huge page (Waiman Long) [2039015 2032811]
- mm/hugetlb: a page from buddy is not on any list (Waiman Long) [2039015 2032811]
- mm/hugetlb: not necessary to coalesce regions recursively (Waiman Long) [2039015 2032811]
- selftests/vm/write_to_hugetlbfs.c: fix unused variable warning (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add hugetlb_cgroup reservation tests (Waiman Long) [2039015 2032811]
- hugetlb: support file_region coalescing again (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: support noreserve mappings (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add accounting for shared mappings (Waiman Long) [2039015 2032811]
- hugetlb: disable region_add file_region coalescing (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add reservation accounting for private mappings (Waiman Long) [2039015 2032811]
- mm/hugetlb_cgroup: fix hugetlb_cgroup migration (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add interface for charge/uncharge hugetlb reservations (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add hugetlb_cgroup reservation counter (Waiman Long) [2039015 2032811]
- hugetlb: remove duplicated code (Waiman Long) [2039015 2032811]
- hugetlb: region_chg provides only cache entry (Waiman Long) [2039015 2032811]
- hugetlbfs: always use address space in inode for resv_map pointer (Waiman Long) [2039015 2032811]
- hugetlbfs: fix potential over/underflow setting node specific nr_hugepages (Waiman Long) [2039015 2032811]
- hugetlb: allow to free gigantic pages regardless of the configuration (Waiman Long) [2039015 2032811]
- powerpc/pseries: Fix update of LPAR security flavor after LPM (Steve Best) [2027448 1997294]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.18.1.el8_5]" date="1645531200">- selftests: kvm: Check whether SIDA memop fails for normal guests (Thomas Huth) [2050806 2050807] {CVE-2022-0516}
- KVM: s390: Return error on SIDA memop on normal guest (Thomas Huth) [2050806 2050807] {CVE-2022-0516}
- iommu/amd: Remove iommu_init_ga() (Jerry Snitselaar) [2030854 1998265]
- iommu/amd: Relocate GAMSup check to early_enable_iommus (Jerry Snitselaar) [2030854 1998265]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.19.1.el8_5]" date="1646049600">- tipc: improve size validations for received domain records (Xin Long) [2048970 2048971] {CVE-2022-0435}
- smb3: do not error on fsync when readonly (Ronnie Sahlberg) [2055824 2037811]
- security: implement sctp_assoc_established hook in selinux (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- security: add sctp_assoc_established hook (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- security: call security_sctp_assoc_request in sctp_sf_do_5_1D_ce (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- security: pass asoc to sctp_assoc_request and sctp_sk_clone (Bruno Meneguele) [2054112 2054117 2015525 2048251]
- net: sctp: Fix some typos (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- RDMA/bnxt_re: Fix stats counters (Selvin Xavier) [2049684 2001893]
- net: check skb sec_path when re-initializing slow_gro in gro_list_prepare (Xin Long) [2047427 2030476]
- cpufreq: intel_pstate: Add Icelake servers support in no-HWP mode (David Arcari) [2036888 2003695]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.20.1.el8_5]" date="1646740800">- lib/iov_iter: initialize "flags" in new pipe_buffer (Jan Stancek) [2060874 2060875] {CVE-2022-0847}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-348.20.1.el8.centos" date="1646913600">- Apply debranding changes</changelog>
</package>
<package pkgid="9abca340766b87aa87db0a257be1cc313bb31a5643385c63265e2ccc5c90f8e2" name="kernel-modules" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="b87d7db2a967c2a2342d3d1fe339040ae5143a7a6d40c95083c0fd49fb605e58" name="kernel-modules" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="193.28.1.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.20.1.el8_2]" date="1599134400">- [infiniband] IB/rdmavt: Fix RQ counting issues causing use of an invalid RWQE (Kamal Heib) [1872771 1850314]
- [block] blk-mq: Rerun dispatching in the case of budget contention (Ming Lei) [1869779 1824037]
- [block] blk-mq: Add blk_mq_delay_run_hw_queues() API call (Ming Lei) [1869779 1824037]
- [block] blk-mq: In blk_mq_dispatch_rq_list() "no budget" is a reason to kick (Ming Lei) [1869779 1824037]
- [block] blk-mq: Put driver tag in blk_mq_dispatch_rq_list() when no budget (Ming Lei) [1869779 1824037]
- [md] dm mpath: use double checked locking in fast path (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rename current_pgpath to pgpath in multipath_prepare_ioctl (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rework __map_bio() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: factor out multipath_queue_bio (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: push locking down to must_push_back_rq() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: take m-&gt;lock spinlock when testing QUEUE_IF_NO_PATH (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: changes from initial m-&gt;flags locking audit (Mike Snitzer) [1869386 1848651]
- [md] dm rq: don't call blk_mq_queue_stopped() in dm_stop_queue() (Mike Snitzer) [1869386 1848651]
- [md] dm: do not use waitqueue for request-based DM (Mike Snitzer) [1869386 1848651]
- [block] blk-mq: consider non-idle request as "inflight" in blk_mq_rq_inflight() (Mike Snitzer) [1869386 1848651]
- [kernel] sched/deadline: Initialize -&gt;dl_boosted (Phil Auld) [1867612 1854179]
- [kernel] sched/core: Fix PI boosting between RT and DEADLINE tasks (Phil Auld) [1867612 1854179]
- [net] net/smc: tolerate future SMCD versions (Philipp Rudo) [1866390 1854992]
- [net] openvswitch: fixes potential deadlock in dp cleanup code (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: reorder masks array based on usage (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: take into account de-fragmentation/gso_size in execute_check_pkt_len (Lorenzo Bianconi) [1860169 1851888]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.21.1.el8_2]" date="1599739200">- [scsi] scsi: ibmvfc: Fix NULL return compiler warning (Steve Best) [1866371 1810653]
- [scsi] scsi: ibmvfc: Avoid loss of all paths during SVC node reboot (Steve Best) [1866371 1810653]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.22.1.el8_2]" date="1600257600">- [crypto] pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1877530 1862072]
- [crypto] Revert "pefile: Tolerate other pefile signatures after first" (Bruno Meneguele)
- [infiniband] IB/hfi1: Fix another case where pq is left on waitlist (Kamal Heib) [1872766 1859209]
- [infiniband] IB/hfi1: Ensure pq is not left on waitlist (Kamal Heib) [1872766 1859209]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.23.1.el8_2]" date="1600344000">- [net] packet: fix overflow in tpacket_rcv (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}
- [net] packet: make tp_drops atomic (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.24.1.el8_2]" date="1600862400">- [kernel] timers: Remove must_forward_clk (Phil Auld) [1877417 1833096]
- [kernel] timers: Spare timer softirq until next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Expand clk forward logic beyond nohz (Phil Auld) [1877417 1833096]
- [kernel] timers: Reuse next expiry cache after nohz exit (Phil Auld) [1877417 1833096]
- [kernel] timers: Always keep track of next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Optimize _next_timer_interrupt() level iteration (Phil Auld) [1877417 1833096]
- [kernel] timers: Add comments about calc_index() ceiling work (Phil Auld) [1877417 1833096]
- [kernel] timers: Move trigger_dyntick_cpu() to enqueue_timer() (Phil Auld) [1877417 1833096]
- [kernel] timers: Use only bucket expiry for base-&gt;next_expiry value (Phil Auld) [1877417 1833096]
- [kernel] timers: Preserve higher bits of expiration on index calculation (Phil Auld) [1877417 1833096]
- [kernel] timer: Fix wheel index calculation on last level (Phil Auld) [1877417 1833096]
- [kernel] timer: Prevent base-&gt;clk from moving backward (Phil Auld) [1877417 1833096]
- [kernel] timer: Read jiffies once when forwarding base clk (Phil Auld) [1877417 1833096]
- [infiniband] RDMA/umem: Fix ib_umem_find_best_pgsz() (Kamal Heib) [1872424 1856158]
- [net] net: accept an empty mask in /sys/class/net/*/queues/rx-*/rps_cpus (Nitesh Narayan Lal) [1870181 1868433]
- [net] net: Restrict receive packets queuing to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [pci] PCI: Restrict probe functions to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [lib] lib: Restrict cpumask_local_spread to houskeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [s390] s390/pci: Fix unexpected write combine on resource (Philipp Rudo) [1869276 1827311]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.25.1.el8_2]" date="1601553600">- [net] netfilter: conntrack: proc: rename stat column (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: add clash resolution stat counter (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: remove ignore stats (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not increment two error counters at same time (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not auto-delete clash entries on reply (Florian Westphal) [1882095 1875681]
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1881085 1875316] {CVE-2020-14385}
- [kernel] time/tick-broadcast: Fix tick_broadcast_offline() lockdep complaint (Alexey Klimov) [1880081 1877380]
- [net] atomics/treewide: Rename __atomic_add_unless() =&gt; atomic_fetch_add_unless() (Yauheni Kaliuta) [1880081 1813370]
- [kernel] timers: Lower base clock forwarding threshold (Phil Auld) [1877417 1833096]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.26.1.el8_2]" date="1602158400">- [firmware] efi: don't reserve MOK config table memory region (Kairui Song) [1879988 1878584]
- [security] integrity: Load certs from the EFI MOK config table (Lenny Szubowicz) [1877528 1868306]
- [security] integrity: Move import of MokListRT certs to a separate routine (Lenny Szubowicz) [1877528 1868306]
- [firmware] efi: Support for MOK variable config table (Lenny Szubowicz) [1877528 1868306]
- [security] efi: Only print errors about failing to get certs if EFI vars are found (Lenny Szubowicz) [1877528 1804969]
- [fs] ceph: fix inode number handling on arches with 32-bit ino_t (Jeff Layton) [1875787 1866018]
- [fs] ceph: handle zero-length feature mask in session messages (Jeff Layton) [1875787 1866018]
- [fs] ceph: fix endianness bug when handling MDS session feature bits (Jeff Layton) [1875787 1866018]
- [netdrv] net/mlx5e: Fix missing cleanup of ethtool steering during rep rx cleanup (Alaa Hleihel) [1857777 1856660]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.27.1.el8_2]" date="1602763200">- [powerpc] powerpc/pseries: Do not initiate shutdown when system is running on UPS (Diego Domingos) [1882243 1870477]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859471 1859472] {CVE-2020-14331}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.28.1.el8_2]" date="1602849600">- [net] Bluetooth: L2CAP: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888256 1888258] {CVE-2020-12351}
- [net] Bluetooth: A2MP: Fix not initializing all members (Gopal Tiwari) [1888906 1888807] {CVE-2020-12352}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-193.28.1.el8.centos" date="1603195200">- Apply debranding changes</changelog>
</package>
<package pkgid="e16ed27da2f086d2eb234877fabccb8223e0b0eab94aa8e06df94d2448521094" name="kernel-modules" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="305.10.2.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.2.1.el8_4]" date="1620648000">- net/mlx5e: Allow to match on MPLS parameters only for MPLS over UDP (Alaa Hleihel) [1952061 1936742]
- net/mlx5e: Reject tc rules which redirect from a VF to itself (Alaa Hleihel) [1952065 1932839]
- net/mlx5: CT: Add support for matching on ct_state inv and rel flags (Alaa Hleihel) [1952062 1942681]
- KVM: VMX: Don't use vcpu-&gt;run-&gt;internal.ndata as an array index (Jon Maloy) [1954221 1954219]
- tools/power turbostat: Revert "[tools] tools/power turbostat: Enable accumulate RAPL display" (Prarit Bhargava) [1952987 1944699]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.3.1.el8_4]" date="1621252800">- Revert "uio: use request_threaded_irq instead" (Vitaly Kuznetsov) [1952952 1946644]
- drm/ast: Set format registers in primary plane's update (Lyude Paul) [1952900 1923857]
- net/sched: act_ct: clear post_ct if doing ct_clear (Marcelo Ricardo Leitner) [1956458 1941889]
- md/raid1: properly indicate failure when ending a failed write request (Nigel Croxon) [1955188 1954588]
- nitro_enclaves: Fix stale file descriptors on failed usercopy (Vitaly Kuznetsov) [1956379 1953717]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.4.1.el8_4]" date="1621944000">- vmxnet3: Set the default of vxlan overlay offload to disabled (Cathy Avery) [1960702 1941714]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.5.1.el8_4]" date="1622548800">- gfs2: report "already frozen/thawed" errors (Bob Peterson) [1961849 1932236]
- gfs2: move freeze glock outside the make_fs_rw and _ro functions (Bob Peterson) [1961849 1932236]
- gfs2: Add common helper for holding and releasing the freeze glock (Bob Peterson) [1961849 1932236]
- gfs2: in signal_our_withdraw wait for unfreeze of _this_ fs only (Bob Peterson) [1961849 1932236]
- gfs2: Don't freeze the file system during unmount (Bob Peterson) [1961849 1932236]
- gfs2: Fix regression in freeze_go_sync (Bob Peterson) [1961849 1932236]
- gfs2: The freeze glock should never be frozen (Bob Peterson) [1961849 1932236]
- gfs2: When freezing gfs2, use GL_EXACT and not GL_NOCACHE (Bob Peterson) [1961849 1932236]
- gfs2: read-only mounts should grab the sd_freeze_gl glock (Bob Peterson) [1961849 1932236]
- gfs2: freeze should work on read-only mounts (Bob Peterson) [1961849 1932236]
- gfs2: Abort gfs2_freeze if io error is seen (Bob Peterson) [1961849 1932236]
- CI: Disable result checking for realtime check (Veronika Kabatova)
- CI: Explicitly disable result checking for private CI (Veronika Kabatova)
- CI: Rename variable (Veronika Kabatova)
- CI: Update builder containers (Veronika Kabatova)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.6.1.el8_4]" date="1623067200">- openvswitch: fix stack OOB read while fragmenting IPv4 packets (Davide Caratti) [1963940 1924608]
- net/sched: sch_frag: fix stack OOB read while fragmenting IPv4 packets (Davide Caratti) [1963940 1924608]
- net/sched: act_ct: fix wild memory access when clearing fragments (Davide Caratti) [1963940 1924608]
- net: Treat __napi_schedule_irqoff() as __napi_schedule() on PREEMPT_RT (Ivan Vecera)
- redhat/configs: Add CONFIG_SYSTEM_REVOCATION_KEYS and CONFIG_SYSTEM_REVOCATION_LIST (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: add 'x509_revocation_list' to gitignore (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- integrity: Load mokx variables into the blacklist keyring (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Add ability to preload revocation certs (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Move load_system_certificate_list to a common function (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Add EFI_CERT_X509_GUID support for dbx entries (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- net/sched: cls_api: increase max_reclassify_loop (Davide Caratti) [1965148 1955136]
- dm writecache: fix performance degradation in ssd mode (Mike Snitzer) [1962241 1961859]
- scsi: fnic: Use scsi_host_busy_iter() to traverse commands (Ewan D. Milne) [1961705 1949250]
- scsi: fnic: Kill 'exclude_id' argument to fnic_cleanup_io() (Ewan D. Milne) [1961705 1949250]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.7.1.el8_4]" date="1623672000">- net: zero-initialize tc skb extension on allocation (Ivan Vecera) [1965457 1946986]
- net/sched: cls_flower: fix only mask bit check in the validate_ct_state (Ivan Vecera) [1965457 1946986]
- net: cls_api: Fix uninitialised struct field bo-&gt;unlocked_driver_cb (Ivan Vecera) [1965457 1946986]
- net/sched: act_api: fix miss set post_ct for ovs after do conntrack in act_ct (Ivan Vecera) [1965457 1946986]
- net/sched: cls_flower: validate ct_state for invalid and reply flags (Ivan Vecera) [1965457 1946986]
- flow_dissector: fix TTL and TOS dissection on IPv4 fragments (Paolo Abeni) [1963952 1950288]
- Revert "sctp: Fix SHUTDOWN CTSN Ack in the peer restart case" (Xin Long) [1965632 1953839]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [1965632 1953839]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [1965632 1953839]
- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962544 1962546] {CVE-2021-33034}
- x86/kvm: Unify kvm_pv_guest_cpu_reboot() with kvm_guest_cpu_offline() (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Disable all PV features on crash (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Disable kvmclock on all CPUs on shutdown (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Teardown PV features on boot CPU as well (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Fix pr_info() for async PF setup/teardown (Lenny Szubowicz) [1964930 1934273]
- net/sched: act_ct: Fix ct template allocation for zone 0 (Marcelo Ricardo Leitner) [1965150 1881824]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.8.1.el8_4]" date="1624363200">- iavf: amend removal of MODULE_VERSION (Stefan Assmann) [1969925 1955738]
- ixgbe: Amend commit acf03026ec5a to include a version string in module info. (Ken Cox) [1969922 1955759]
- i40e: amend removal of MODULE_VERSION (Stefan Assmann) [1969923 1955736]
- redhat/configs: Add CONFIG_PINCTRL_EMMITSBURG (David Arcari) [1963984 1959506]
- redhat/configs: Remove CONFIG_EMMITSBURG (David Arcari) [1963984 1959506]
- netlink: add tracepoint at NL_SET_ERR_MSG (Marcelo Ricardo Leitner) [1972938 1956983]
- Revert "[netdrv] net/intel: remove driver versions from Intel drivers" (Jonathan Toppins) [1969917 1955745]
- Amends commit ea6244cc248b to include a version string in module info. (Ken Cox) [1969915 1955726]
- Revert "[netdrv] net/broadcom: Clean broadcom code from driver versions" (Jonathan Toppins) [1969914 1955721]
- ena: revert removal of MODULE_VERSION from ena (Petr Oros) [1969913 1955712]
- fm10k: amend removal of MODULE_VERSION (Vladis Dronov) [1969910 1955730]
- net/sched: act_ct: Offload connections with commit action (Marcelo Ricardo Leitner) [1968679 1965817]
- netfilter: flowtable: Remove redundant hw refresh bit (Marcelo Ricardo Leitner) [1968679 1965817]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.9.1.el8_4]" date="1624881600">- ixgbevf: Amend commit acf03026ec5a to include a version in module info. (Ken Cox) [1969911 1955764]
- CI: Merge configuration (Veronika Kabatova)
- igc: amend removal of MODULE_VERSION (Corinna Vinschen) [1969921 1955755]
- igb: amend removal of MODULE_VERSION (Corinna Vinschen) [1969919 1955748]
- locking/qrwlock: Fix ordering in queued_write_lock_slowpath() (Waiman Long) [1964419 1950110]
- scsi: qedf: Do not put host in qedf_vport_create() unconditionally (Nilesh Javali) [1974968 1899384]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.10.1.el8_4]" date="1625659200">- igbvf: amend removal of MODULE_VERSION (Corinna Vinschen) [1969920 1955752]
- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971464 1971488] {CVE-2021-32399}
- scsi: ibmvfc: Free channel_setup_buf during device tear down (Steve Best) [1964697 1938102]
- i40e: Fix parameters in aq_get_phy_register() (Stefan Assmann) [1967099 1907852]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.10.2.el8_4]" date="1626091200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975181 1975182] {CVE-2021-33909}</changelog>
</package>
<package pkgid="fad8c4ccff849149e59d469d70e54a948d1b96c412489f060be5083146afb8ae" name="kernel-modules" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="348.20.1.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.12.1.el8_5]" date="1641988800">- tcp: don't free a FIN sk_buff in tcp_remove_empty_skb() (Guillaume Nault) [2021574 2016210]
- kernel.spec: Add support to use vmlinux.h (Jiri Olsa) [2031053 1989087]
- spec: Add vmlinux.h to kernel-devel package (Jiri Olsa) [2031053 1989087]
- x86/mce: Avoid infinite loop for copy from user recovery (Prarit Bhargava) [2008789 1999550]
- x86/mce: Rename kill_it to kill_current_task (Prarit Bhargava) [2008789 1999550]
- x86/mce: Recover from poison found while copying from user space (Prarit Bhargava) [2008789 1999550]
- x86/mce: Delay clearing IA32_MCG_STATUS to the end of do_machine_check() (Prarit Bhargava) [2008789 1999550]
- x86/mce: Send #MC singal from task work (Prarit Bhargava) [2008789 1999550]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-348.13.1.el8_5]" date="1642507200">- vfs: Out-of-bounds write of heap buffer in fs_context.c (Frantisek Hrbata) [2040585 2040586] {CVE-2022-0185}
- xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Bruno Meneguele) [2034864 2034865] {CVE-2021-4155}
- af_unix: fix garbage collect vs MSG_PEEK (Patrick Talbert) [2031974 2031975] {CVE-2021-0920}
- cgroup: verify that source is a string (Waiman Long) [2034608 2034609] {CVE-2021-4154}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-348.14.1.el8_5]" date="1643198400">- tcp: fix page frag corruption on page fault (Paolo Abeni) [2041529 1996074]
- net: fix sk_page_frag() recursion from memory reclaim (Paolo Abeni) [2041529 1996074]
- KVM: s390: index kvm-&gt;arch.idle_mask by vcpu_idx (Thomas Huth) [2040769 2026230]
- redhat: set LC_ALL=C before sorting config content (Frantisek Hrbata)</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.15.1.el8_5]" date="1643716800">- net/mlx5: DR, Use FW API when updating FW-owned flow table (Michal Schmidt) [2042663 2042651]
- KVM: x86: Wait for IPIs to be delivered when handling Hyper-V TLB flush hypercall (Vitaly Kuznetsov) [2043237 1868572]
- drm/mgag200: Select clock in PLL update functions (Bruno Meneguele) [2034949 1953926]
- drm/i915: Fix HAS_LSPCON macro for platforms between GEN9 and GEN10 (Bruno Meneguele) [2027335 2005586]
- crypto: qat - power up 4xxx device (Vladis Dronov) [2016437 1960307]
- RDMA/core: Fix a double free in add_port error flow (Kamal Heib) [2038724 2008555]
- powerpc/iommu: Report the correct most efficient DMA mask for PCI devices (Steve Best) [2018928 2007425]
- powerpc/dma: Fix dma_map_ops::get_required_mask (Steve Best) [2018928 2007425]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.16.1.el8_5]" date="1644321600">- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047601 2047602] {CVE-2022-22942}
- net: openvswitch: Fix ct_state nat flags for conns arriving from tc (Marcelo Ricardo Leitner) [2043548 2040334]
- net: openvswitch: Fix matching zone id for invalid conns arriving from tc (Marcelo Ricardo Leitner) [2043550 2040452]
- net/sched: flow_dissector: Fix matching on zone id for invalid conns (Marcelo Ricardo Leitner) [2043550 2040452]
- net/sched: Extend qdisc control block with tc control block (Marcelo Ricardo Leitner) [2043550 2040452]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.17.1.el8_5]" date="1644926400">- vfs: check dentry is still valid in get_link() (Ian Kent) [2052558 2014846]
- xfs: don't expose internal symlink metadata buffers to the vfs (Brian Foster) [2052558 2014846]
- CI: Use appropriate zstream builder (Veronika Kabatova)
- CI: Enable baseline realtime checks (Veronika Kabatova)
- CI: Rename pipelines to include release names (Veronika Kabatova)
- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052166 2052167] {CVE-2022-0492}
- ice: Remove boolean vlan_promisc flag from function (Jonathan Toppins) [2051951 2030400]
- ceph: put the requests/sessions when it fails to alloc memory (Jeffrey Layton) [2053725 2017796]
- ceph: fix off by one bugs in unsafe_request_wait() (Jeffrey Layton) [2053725 2017796]
- ceph: flush the mdlog before waiting on unsafe reqs (Jeffrey Layton) [2053725 2017796]
- ceph: flush mdlog before umounting (Jeffrey Layton) [2053725 2017796]
- ceph: make iterate_sessions a global symbol (Jeffrey Layton) [2053725 2017796]
- ceph: make ceph_create_session_msg a global symbol (Jeffrey Layton) [2053725 2017796]
- xfs: check sb_meta_uuid for dabuf buffer recovery (Bill O'Donnell) [2049292 2020764]
- drm/i915: Flush TLBs before releasing backing store (Patrick Talbert) [2044328 2044329] {CVE-2022-0330}
- hugetlb: fix hugetlb cgroup refcounting during vma split (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: fix imbalanced css_get and css_put pair for shared mappings (Waiman Long) [2039015 2032811]
- mm/hugetlb: change hugetlb_reserve_pages() to type bool (Waiman Long) [2039015 2032811]
- hugetlb: fix an error code in hugetlb_reserve_pages() (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: fix offline of hugetlb cgroup with reservations (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: fix reservation accounting (Waiman Long) [2039015 2032811]
- mm/hugetlb: narrow the hugetlb_lock protection area during preparing huge page (Waiman Long) [2039015 2032811]
- mm/hugetlb: a page from buddy is not on any list (Waiman Long) [2039015 2032811]
- mm/hugetlb: not necessary to coalesce regions recursively (Waiman Long) [2039015 2032811]
- selftests/vm/write_to_hugetlbfs.c: fix unused variable warning (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add hugetlb_cgroup reservation tests (Waiman Long) [2039015 2032811]
- hugetlb: support file_region coalescing again (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: support noreserve mappings (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add accounting for shared mappings (Waiman Long) [2039015 2032811]
- hugetlb: disable region_add file_region coalescing (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add reservation accounting for private mappings (Waiman Long) [2039015 2032811]
- mm/hugetlb_cgroup: fix hugetlb_cgroup migration (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add interface for charge/uncharge hugetlb reservations (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add hugetlb_cgroup reservation counter (Waiman Long) [2039015 2032811]
- hugetlb: remove duplicated code (Waiman Long) [2039015 2032811]
- hugetlb: region_chg provides only cache entry (Waiman Long) [2039015 2032811]
- hugetlbfs: always use address space in inode for resv_map pointer (Waiman Long) [2039015 2032811]
- hugetlbfs: fix potential over/underflow setting node specific nr_hugepages (Waiman Long) [2039015 2032811]
- hugetlb: allow to free gigantic pages regardless of the configuration (Waiman Long) [2039015 2032811]
- powerpc/pseries: Fix update of LPAR security flavor after LPM (Steve Best) [2027448 1997294]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.18.1.el8_5]" date="1645531200">- selftests: kvm: Check whether SIDA memop fails for normal guests (Thomas Huth) [2050806 2050807] {CVE-2022-0516}
- KVM: s390: Return error on SIDA memop on normal guest (Thomas Huth) [2050806 2050807] {CVE-2022-0516}
- iommu/amd: Remove iommu_init_ga() (Jerry Snitselaar) [2030854 1998265]
- iommu/amd: Relocate GAMSup check to early_enable_iommus (Jerry Snitselaar) [2030854 1998265]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.19.1.el8_5]" date="1646049600">- tipc: improve size validations for received domain records (Xin Long) [2048970 2048971] {CVE-2022-0435}
- smb3: do not error on fsync when readonly (Ronnie Sahlberg) [2055824 2037811]
- security: implement sctp_assoc_established hook in selinux (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- security: add sctp_assoc_established hook (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- security: call security_sctp_assoc_request in sctp_sf_do_5_1D_ce (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- security: pass asoc to sctp_assoc_request and sctp_sk_clone (Bruno Meneguele) [2054112 2054117 2015525 2048251]
- net: sctp: Fix some typos (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- RDMA/bnxt_re: Fix stats counters (Selvin Xavier) [2049684 2001893]
- net: check skb sec_path when re-initializing slow_gro in gro_list_prepare (Xin Long) [2047427 2030476]
- cpufreq: intel_pstate: Add Icelake servers support in no-HWP mode (David Arcari) [2036888 2003695]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.20.1.el8_5]" date="1646740800">- lib/iov_iter: initialize "flags" in new pipe_buffer (Jan Stancek) [2060874 2060875] {CVE-2022-0847}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-348.20.1.el8.centos" date="1646913600">- Apply debranding changes</changelog>
</package>
<package pkgid="4185671e2a6aac73663c87813b9baae42ec9a82dbbbe42fc11cc2d1459436e00" name="kernel-modules-extra" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="a389df040286bddcbe47f4eb11c2fe68b8cdc46f372ad21419659a6e181db4b2" name="kernel-modules-extra" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="193.28.1.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.20.1.el8_2]" date="1599134400">- [infiniband] IB/rdmavt: Fix RQ counting issues causing use of an invalid RWQE (Kamal Heib) [1872771 1850314]
- [block] blk-mq: Rerun dispatching in the case of budget contention (Ming Lei) [1869779 1824037]
- [block] blk-mq: Add blk_mq_delay_run_hw_queues() API call (Ming Lei) [1869779 1824037]
- [block] blk-mq: In blk_mq_dispatch_rq_list() "no budget" is a reason to kick (Ming Lei) [1869779 1824037]
- [block] blk-mq: Put driver tag in blk_mq_dispatch_rq_list() when no budget (Ming Lei) [1869779 1824037]
- [md] dm mpath: use double checked locking in fast path (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rename current_pgpath to pgpath in multipath_prepare_ioctl (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rework __map_bio() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: factor out multipath_queue_bio (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: push locking down to must_push_back_rq() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: take m-&gt;lock spinlock when testing QUEUE_IF_NO_PATH (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: changes from initial m-&gt;flags locking audit (Mike Snitzer) [1869386 1848651]
- [md] dm rq: don't call blk_mq_queue_stopped() in dm_stop_queue() (Mike Snitzer) [1869386 1848651]
- [md] dm: do not use waitqueue for request-based DM (Mike Snitzer) [1869386 1848651]
- [block] blk-mq: consider non-idle request as "inflight" in blk_mq_rq_inflight() (Mike Snitzer) [1869386 1848651]
- [kernel] sched/deadline: Initialize -&gt;dl_boosted (Phil Auld) [1867612 1854179]
- [kernel] sched/core: Fix PI boosting between RT and DEADLINE tasks (Phil Auld) [1867612 1854179]
- [net] net/smc: tolerate future SMCD versions (Philipp Rudo) [1866390 1854992]
- [net] openvswitch: fixes potential deadlock in dp cleanup code (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: reorder masks array based on usage (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: take into account de-fragmentation/gso_size in execute_check_pkt_len (Lorenzo Bianconi) [1860169 1851888]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.21.1.el8_2]" date="1599739200">- [scsi] scsi: ibmvfc: Fix NULL return compiler warning (Steve Best) [1866371 1810653]
- [scsi] scsi: ibmvfc: Avoid loss of all paths during SVC node reboot (Steve Best) [1866371 1810653]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.22.1.el8_2]" date="1600257600">- [crypto] pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1877530 1862072]
- [crypto] Revert "pefile: Tolerate other pefile signatures after first" (Bruno Meneguele)
- [infiniband] IB/hfi1: Fix another case where pq is left on waitlist (Kamal Heib) [1872766 1859209]
- [infiniband] IB/hfi1: Ensure pq is not left on waitlist (Kamal Heib) [1872766 1859209]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.23.1.el8_2]" date="1600344000">- [net] packet: fix overflow in tpacket_rcv (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}
- [net] packet: make tp_drops atomic (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.24.1.el8_2]" date="1600862400">- [kernel] timers: Remove must_forward_clk (Phil Auld) [1877417 1833096]
- [kernel] timers: Spare timer softirq until next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Expand clk forward logic beyond nohz (Phil Auld) [1877417 1833096]
- [kernel] timers: Reuse next expiry cache after nohz exit (Phil Auld) [1877417 1833096]
- [kernel] timers: Always keep track of next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Optimize _next_timer_interrupt() level iteration (Phil Auld) [1877417 1833096]
- [kernel] timers: Add comments about calc_index() ceiling work (Phil Auld) [1877417 1833096]
- [kernel] timers: Move trigger_dyntick_cpu() to enqueue_timer() (Phil Auld) [1877417 1833096]
- [kernel] timers: Use only bucket expiry for base-&gt;next_expiry value (Phil Auld) [1877417 1833096]
- [kernel] timers: Preserve higher bits of expiration on index calculation (Phil Auld) [1877417 1833096]
- [kernel] timer: Fix wheel index calculation on last level (Phil Auld) [1877417 1833096]
- [kernel] timer: Prevent base-&gt;clk from moving backward (Phil Auld) [1877417 1833096]
- [kernel] timer: Read jiffies once when forwarding base clk (Phil Auld) [1877417 1833096]
- [infiniband] RDMA/umem: Fix ib_umem_find_best_pgsz() (Kamal Heib) [1872424 1856158]
- [net] net: accept an empty mask in /sys/class/net/*/queues/rx-*/rps_cpus (Nitesh Narayan Lal) [1870181 1868433]
- [net] net: Restrict receive packets queuing to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [pci] PCI: Restrict probe functions to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [lib] lib: Restrict cpumask_local_spread to houskeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [s390] s390/pci: Fix unexpected write combine on resource (Philipp Rudo) [1869276 1827311]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.25.1.el8_2]" date="1601553600">- [net] netfilter: conntrack: proc: rename stat column (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: add clash resolution stat counter (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: remove ignore stats (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not increment two error counters at same time (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not auto-delete clash entries on reply (Florian Westphal) [1882095 1875681]
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1881085 1875316] {CVE-2020-14385}
- [kernel] time/tick-broadcast: Fix tick_broadcast_offline() lockdep complaint (Alexey Klimov) [1880081 1877380]
- [net] atomics/treewide: Rename __atomic_add_unless() =&gt; atomic_fetch_add_unless() (Yauheni Kaliuta) [1880081 1813370]
- [kernel] timers: Lower base clock forwarding threshold (Phil Auld) [1877417 1833096]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.26.1.el8_2]" date="1602158400">- [firmware] efi: don't reserve MOK config table memory region (Kairui Song) [1879988 1878584]
- [security] integrity: Load certs from the EFI MOK config table (Lenny Szubowicz) [1877528 1868306]
- [security] integrity: Move import of MokListRT certs to a separate routine (Lenny Szubowicz) [1877528 1868306]
- [firmware] efi: Support for MOK variable config table (Lenny Szubowicz) [1877528 1868306]
- [security] efi: Only print errors about failing to get certs if EFI vars are found (Lenny Szubowicz) [1877528 1804969]
- [fs] ceph: fix inode number handling on arches with 32-bit ino_t (Jeff Layton) [1875787 1866018]
- [fs] ceph: handle zero-length feature mask in session messages (Jeff Layton) [1875787 1866018]
- [fs] ceph: fix endianness bug when handling MDS session feature bits (Jeff Layton) [1875787 1866018]
- [netdrv] net/mlx5e: Fix missing cleanup of ethtool steering during rep rx cleanup (Alaa Hleihel) [1857777 1856660]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.27.1.el8_2]" date="1602763200">- [powerpc] powerpc/pseries: Do not initiate shutdown when system is running on UPS (Diego Domingos) [1882243 1870477]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859471 1859472] {CVE-2020-14331}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.28.1.el8_2]" date="1602849600">- [net] Bluetooth: L2CAP: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888256 1888258] {CVE-2020-12351}
- [net] Bluetooth: A2MP: Fix not initializing all members (Gopal Tiwari) [1888906 1888807] {CVE-2020-12352}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-193.28.1.el8.centos" date="1603195200">- Apply debranding changes</changelog>
</package>
<package pkgid="fdff5c3a525f17265854372d8a085f42f81b557d1664f2a0811096e3528c9383" name="kernel-modules-extra" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="305.10.2.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.2.1.el8_4]" date="1620648000">- net/mlx5e: Allow to match on MPLS parameters only for MPLS over UDP (Alaa Hleihel) [1952061 1936742]
- net/mlx5e: Reject tc rules which redirect from a VF to itself (Alaa Hleihel) [1952065 1932839]
- net/mlx5: CT: Add support for matching on ct_state inv and rel flags (Alaa Hleihel) [1952062 1942681]
- KVM: VMX: Don't use vcpu-&gt;run-&gt;internal.ndata as an array index (Jon Maloy) [1954221 1954219]
- tools/power turbostat: Revert "[tools] tools/power turbostat: Enable accumulate RAPL display" (Prarit Bhargava) [1952987 1944699]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.3.1.el8_4]" date="1621252800">- Revert "uio: use request_threaded_irq instead" (Vitaly Kuznetsov) [1952952 1946644]
- drm/ast: Set format registers in primary plane's update (Lyude Paul) [1952900 1923857]
- net/sched: act_ct: clear post_ct if doing ct_clear (Marcelo Ricardo Leitner) [1956458 1941889]
- md/raid1: properly indicate failure when ending a failed write request (Nigel Croxon) [1955188 1954588]
- nitro_enclaves: Fix stale file descriptors on failed usercopy (Vitaly Kuznetsov) [1956379 1953717]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.4.1.el8_4]" date="1621944000">- vmxnet3: Set the default of vxlan overlay offload to disabled (Cathy Avery) [1960702 1941714]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.5.1.el8_4]" date="1622548800">- gfs2: report "already frozen/thawed" errors (Bob Peterson) [1961849 1932236]
- gfs2: move freeze glock outside the make_fs_rw and _ro functions (Bob Peterson) [1961849 1932236]
- gfs2: Add common helper for holding and releasing the freeze glock (Bob Peterson) [1961849 1932236]
- gfs2: in signal_our_withdraw wait for unfreeze of _this_ fs only (Bob Peterson) [1961849 1932236]
- gfs2: Don't freeze the file system during unmount (Bob Peterson) [1961849 1932236]
- gfs2: Fix regression in freeze_go_sync (Bob Peterson) [1961849 1932236]
- gfs2: The freeze glock should never be frozen (Bob Peterson) [1961849 1932236]
- gfs2: When freezing gfs2, use GL_EXACT and not GL_NOCACHE (Bob Peterson) [1961849 1932236]
- gfs2: read-only mounts should grab the sd_freeze_gl glock (Bob Peterson) [1961849 1932236]
- gfs2: freeze should work on read-only mounts (Bob Peterson) [1961849 1932236]
- gfs2: Abort gfs2_freeze if io error is seen (Bob Peterson) [1961849 1932236]
- CI: Disable result checking for realtime check (Veronika Kabatova)
- CI: Explicitly disable result checking for private CI (Veronika Kabatova)
- CI: Rename variable (Veronika Kabatova)
- CI: Update builder containers (Veronika Kabatova)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.6.1.el8_4]" date="1623067200">- openvswitch: fix stack OOB read while fragmenting IPv4 packets (Davide Caratti) [1963940 1924608]
- net/sched: sch_frag: fix stack OOB read while fragmenting IPv4 packets (Davide Caratti) [1963940 1924608]
- net/sched: act_ct: fix wild memory access when clearing fragments (Davide Caratti) [1963940 1924608]
- net: Treat __napi_schedule_irqoff() as __napi_schedule() on PREEMPT_RT (Ivan Vecera)
- redhat/configs: Add CONFIG_SYSTEM_REVOCATION_KEYS and CONFIG_SYSTEM_REVOCATION_LIST (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: add 'x509_revocation_list' to gitignore (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- integrity: Load mokx variables into the blacklist keyring (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Add ability to preload revocation certs (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Move load_system_certificate_list to a common function (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Add EFI_CERT_X509_GUID support for dbx entries (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- net/sched: cls_api: increase max_reclassify_loop (Davide Caratti) [1965148 1955136]
- dm writecache: fix performance degradation in ssd mode (Mike Snitzer) [1962241 1961859]
- scsi: fnic: Use scsi_host_busy_iter() to traverse commands (Ewan D. Milne) [1961705 1949250]
- scsi: fnic: Kill 'exclude_id' argument to fnic_cleanup_io() (Ewan D. Milne) [1961705 1949250]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.7.1.el8_4]" date="1623672000">- net: zero-initialize tc skb extension on allocation (Ivan Vecera) [1965457 1946986]
- net/sched: cls_flower: fix only mask bit check in the validate_ct_state (Ivan Vecera) [1965457 1946986]
- net: cls_api: Fix uninitialised struct field bo-&gt;unlocked_driver_cb (Ivan Vecera) [1965457 1946986]
- net/sched: act_api: fix miss set post_ct for ovs after do conntrack in act_ct (Ivan Vecera) [1965457 1946986]
- net/sched: cls_flower: validate ct_state for invalid and reply flags (Ivan Vecera) [1965457 1946986]
- flow_dissector: fix TTL and TOS dissection on IPv4 fragments (Paolo Abeni) [1963952 1950288]
- Revert "sctp: Fix SHUTDOWN CTSN Ack in the peer restart case" (Xin Long) [1965632 1953839]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [1965632 1953839]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [1965632 1953839]
- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962544 1962546] {CVE-2021-33034}
- x86/kvm: Unify kvm_pv_guest_cpu_reboot() with kvm_guest_cpu_offline() (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Disable all PV features on crash (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Disable kvmclock on all CPUs on shutdown (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Teardown PV features on boot CPU as well (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Fix pr_info() for async PF setup/teardown (Lenny Szubowicz) [1964930 1934273]
- net/sched: act_ct: Fix ct template allocation for zone 0 (Marcelo Ricardo Leitner) [1965150 1881824]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.8.1.el8_4]" date="1624363200">- iavf: amend removal of MODULE_VERSION (Stefan Assmann) [1969925 1955738]
- ixgbe: Amend commit acf03026ec5a to include a version string in module info. (Ken Cox) [1969922 1955759]
- i40e: amend removal of MODULE_VERSION (Stefan Assmann) [1969923 1955736]
- redhat/configs: Add CONFIG_PINCTRL_EMMITSBURG (David Arcari) [1963984 1959506]
- redhat/configs: Remove CONFIG_EMMITSBURG (David Arcari) [1963984 1959506]
- netlink: add tracepoint at NL_SET_ERR_MSG (Marcelo Ricardo Leitner) [1972938 1956983]
- Revert "[netdrv] net/intel: remove driver versions from Intel drivers" (Jonathan Toppins) [1969917 1955745]
- Amends commit ea6244cc248b to include a version string in module info. (Ken Cox) [1969915 1955726]
- Revert "[netdrv] net/broadcom: Clean broadcom code from driver versions" (Jonathan Toppins) [1969914 1955721]
- ena: revert removal of MODULE_VERSION from ena (Petr Oros) [1969913 1955712]
- fm10k: amend removal of MODULE_VERSION (Vladis Dronov) [1969910 1955730]
- net/sched: act_ct: Offload connections with commit action (Marcelo Ricardo Leitner) [1968679 1965817]
- netfilter: flowtable: Remove redundant hw refresh bit (Marcelo Ricardo Leitner) [1968679 1965817]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.9.1.el8_4]" date="1624881600">- ixgbevf: Amend commit acf03026ec5a to include a version in module info. (Ken Cox) [1969911 1955764]
- CI: Merge configuration (Veronika Kabatova)
- igc: amend removal of MODULE_VERSION (Corinna Vinschen) [1969921 1955755]
- igb: amend removal of MODULE_VERSION (Corinna Vinschen) [1969919 1955748]
- locking/qrwlock: Fix ordering in queued_write_lock_slowpath() (Waiman Long) [1964419 1950110]
- scsi: qedf: Do not put host in qedf_vport_create() unconditionally (Nilesh Javali) [1974968 1899384]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.10.1.el8_4]" date="1625659200">- igbvf: amend removal of MODULE_VERSION (Corinna Vinschen) [1969920 1955752]
- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971464 1971488] {CVE-2021-32399}
- scsi: ibmvfc: Free channel_setup_buf during device tear down (Steve Best) [1964697 1938102]
- i40e: Fix parameters in aq_get_phy_register() (Stefan Assmann) [1967099 1907852]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.10.2.el8_4]" date="1626091200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975181 1975182] {CVE-2021-33909}</changelog>
</package>
<package pkgid="0d6d30ff31882e2aaef3b4324d5b765f3b75b2664db47185dd5f01af01693a6e" name="kernel-modules-extra" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="348.20.1.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.12.1.el8_5]" date="1641988800">- tcp: don't free a FIN sk_buff in tcp_remove_empty_skb() (Guillaume Nault) [2021574 2016210]
- kernel.spec: Add support to use vmlinux.h (Jiri Olsa) [2031053 1989087]
- spec: Add vmlinux.h to kernel-devel package (Jiri Olsa) [2031053 1989087]
- x86/mce: Avoid infinite loop for copy from user recovery (Prarit Bhargava) [2008789 1999550]
- x86/mce: Rename kill_it to kill_current_task (Prarit Bhargava) [2008789 1999550]
- x86/mce: Recover from poison found while copying from user space (Prarit Bhargava) [2008789 1999550]
- x86/mce: Delay clearing IA32_MCG_STATUS to the end of do_machine_check() (Prarit Bhargava) [2008789 1999550]
- x86/mce: Send #MC singal from task work (Prarit Bhargava) [2008789 1999550]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-348.13.1.el8_5]" date="1642507200">- vfs: Out-of-bounds write of heap buffer in fs_context.c (Frantisek Hrbata) [2040585 2040586] {CVE-2022-0185}
- xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Bruno Meneguele) [2034864 2034865] {CVE-2021-4155}
- af_unix: fix garbage collect vs MSG_PEEK (Patrick Talbert) [2031974 2031975] {CVE-2021-0920}
- cgroup: verify that source is a string (Waiman Long) [2034608 2034609] {CVE-2021-4154}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-348.14.1.el8_5]" date="1643198400">- tcp: fix page frag corruption on page fault (Paolo Abeni) [2041529 1996074]
- net: fix sk_page_frag() recursion from memory reclaim (Paolo Abeni) [2041529 1996074]
- KVM: s390: index kvm-&gt;arch.idle_mask by vcpu_idx (Thomas Huth) [2040769 2026230]
- redhat: set LC_ALL=C before sorting config content (Frantisek Hrbata)</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.15.1.el8_5]" date="1643716800">- net/mlx5: DR, Use FW API when updating FW-owned flow table (Michal Schmidt) [2042663 2042651]
- KVM: x86: Wait for IPIs to be delivered when handling Hyper-V TLB flush hypercall (Vitaly Kuznetsov) [2043237 1868572]
- drm/mgag200: Select clock in PLL update functions (Bruno Meneguele) [2034949 1953926]
- drm/i915: Fix HAS_LSPCON macro for platforms between GEN9 and GEN10 (Bruno Meneguele) [2027335 2005586]
- crypto: qat - power up 4xxx device (Vladis Dronov) [2016437 1960307]
- RDMA/core: Fix a double free in add_port error flow (Kamal Heib) [2038724 2008555]
- powerpc/iommu: Report the correct most efficient DMA mask for PCI devices (Steve Best) [2018928 2007425]
- powerpc/dma: Fix dma_map_ops::get_required_mask (Steve Best) [2018928 2007425]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.16.1.el8_5]" date="1644321600">- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047601 2047602] {CVE-2022-22942}
- net: openvswitch: Fix ct_state nat flags for conns arriving from tc (Marcelo Ricardo Leitner) [2043548 2040334]
- net: openvswitch: Fix matching zone id for invalid conns arriving from tc (Marcelo Ricardo Leitner) [2043550 2040452]
- net/sched: flow_dissector: Fix matching on zone id for invalid conns (Marcelo Ricardo Leitner) [2043550 2040452]
- net/sched: Extend qdisc control block with tc control block (Marcelo Ricardo Leitner) [2043550 2040452]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.17.1.el8_5]" date="1644926400">- vfs: check dentry is still valid in get_link() (Ian Kent) [2052558 2014846]
- xfs: don't expose internal symlink metadata buffers to the vfs (Brian Foster) [2052558 2014846]
- CI: Use appropriate zstream builder (Veronika Kabatova)
- CI: Enable baseline realtime checks (Veronika Kabatova)
- CI: Rename pipelines to include release names (Veronika Kabatova)
- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052166 2052167] {CVE-2022-0492}
- ice: Remove boolean vlan_promisc flag from function (Jonathan Toppins) [2051951 2030400]
- ceph: put the requests/sessions when it fails to alloc memory (Jeffrey Layton) [2053725 2017796]
- ceph: fix off by one bugs in unsafe_request_wait() (Jeffrey Layton) [2053725 2017796]
- ceph: flush the mdlog before waiting on unsafe reqs (Jeffrey Layton) [2053725 2017796]
- ceph: flush mdlog before umounting (Jeffrey Layton) [2053725 2017796]
- ceph: make iterate_sessions a global symbol (Jeffrey Layton) [2053725 2017796]
- ceph: make ceph_create_session_msg a global symbol (Jeffrey Layton) [2053725 2017796]
- xfs: check sb_meta_uuid for dabuf buffer recovery (Bill O'Donnell) [2049292 2020764]
- drm/i915: Flush TLBs before releasing backing store (Patrick Talbert) [2044328 2044329] {CVE-2022-0330}
- hugetlb: fix hugetlb cgroup refcounting during vma split (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: fix imbalanced css_get and css_put pair for shared mappings (Waiman Long) [2039015 2032811]
- mm/hugetlb: change hugetlb_reserve_pages() to type bool (Waiman Long) [2039015 2032811]
- hugetlb: fix an error code in hugetlb_reserve_pages() (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: fix offline of hugetlb cgroup with reservations (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: fix reservation accounting (Waiman Long) [2039015 2032811]
- mm/hugetlb: narrow the hugetlb_lock protection area during preparing huge page (Waiman Long) [2039015 2032811]
- mm/hugetlb: a page from buddy is not on any list (Waiman Long) [2039015 2032811]
- mm/hugetlb: not necessary to coalesce regions recursively (Waiman Long) [2039015 2032811]
- selftests/vm/write_to_hugetlbfs.c: fix unused variable warning (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add hugetlb_cgroup reservation tests (Waiman Long) [2039015 2032811]
- hugetlb: support file_region coalescing again (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: support noreserve mappings (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add accounting for shared mappings (Waiman Long) [2039015 2032811]
- hugetlb: disable region_add file_region coalescing (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add reservation accounting for private mappings (Waiman Long) [2039015 2032811]
- mm/hugetlb_cgroup: fix hugetlb_cgroup migration (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add interface for charge/uncharge hugetlb reservations (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add hugetlb_cgroup reservation counter (Waiman Long) [2039015 2032811]
- hugetlb: remove duplicated code (Waiman Long) [2039015 2032811]
- hugetlb: region_chg provides only cache entry (Waiman Long) [2039015 2032811]
- hugetlbfs: always use address space in inode for resv_map pointer (Waiman Long) [2039015 2032811]
- hugetlbfs: fix potential over/underflow setting node specific nr_hugepages (Waiman Long) [2039015 2032811]
- hugetlb: allow to free gigantic pages regardless of the configuration (Waiman Long) [2039015 2032811]
- powerpc/pseries: Fix update of LPAR security flavor after LPM (Steve Best) [2027448 1997294]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.18.1.el8_5]" date="1645531200">- selftests: kvm: Check whether SIDA memop fails for normal guests (Thomas Huth) [2050806 2050807] {CVE-2022-0516}
- KVM: s390: Return error on SIDA memop on normal guest (Thomas Huth) [2050806 2050807] {CVE-2022-0516}
- iommu/amd: Remove iommu_init_ga() (Jerry Snitselaar) [2030854 1998265]
- iommu/amd: Relocate GAMSup check to early_enable_iommus (Jerry Snitselaar) [2030854 1998265]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.19.1.el8_5]" date="1646049600">- tipc: improve size validations for received domain records (Xin Long) [2048970 2048971] {CVE-2022-0435}
- smb3: do not error on fsync when readonly (Ronnie Sahlberg) [2055824 2037811]
- security: implement sctp_assoc_established hook in selinux (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- security: add sctp_assoc_established hook (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- security: call security_sctp_assoc_request in sctp_sf_do_5_1D_ce (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- security: pass asoc to sctp_assoc_request and sctp_sk_clone (Bruno Meneguele) [2054112 2054117 2015525 2048251]
- net: sctp: Fix some typos (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- RDMA/bnxt_re: Fix stats counters (Selvin Xavier) [2049684 2001893]
- net: check skb sec_path when re-initializing slow_gro in gro_list_prepare (Xin Long) [2047427 2030476]
- cpufreq: intel_pstate: Add Icelake servers support in no-HWP mode (David Arcari) [2036888 2003695]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.20.1.el8_5]" date="1646740800">- lib/iov_iter: initialize "flags" in new pipe_buffer (Jan Stancek) [2060874 2060875] {CVE-2022-0847}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-348.20.1.el8.centos" date="1646913600">- Apply debranding changes</changelog>
</package>
<package pkgid="15cc2f7a5e8ef134ddbcee8a3d7dd955ff1fabbaafa8bf4cb29b71743cea6e35" name="kernel-modules-internal" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="463c08d7643fcb0cb7912809be9a2e4f76928f1985faf736d388f32168eb8f5c" name="kernel-modules-internal" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="193.28.1.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.20.1.el8_2]" date="1599134400">- [infiniband] IB/rdmavt: Fix RQ counting issues causing use of an invalid RWQE (Kamal Heib) [1872771 1850314]
- [block] blk-mq: Rerun dispatching in the case of budget contention (Ming Lei) [1869779 1824037]
- [block] blk-mq: Add blk_mq_delay_run_hw_queues() API call (Ming Lei) [1869779 1824037]
- [block] blk-mq: In blk_mq_dispatch_rq_list() "no budget" is a reason to kick (Ming Lei) [1869779 1824037]
- [block] blk-mq: Put driver tag in blk_mq_dispatch_rq_list() when no budget (Ming Lei) [1869779 1824037]
- [md] dm mpath: use double checked locking in fast path (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rename current_pgpath to pgpath in multipath_prepare_ioctl (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rework __map_bio() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: factor out multipath_queue_bio (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: push locking down to must_push_back_rq() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: take m-&gt;lock spinlock when testing QUEUE_IF_NO_PATH (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: changes from initial m-&gt;flags locking audit (Mike Snitzer) [1869386 1848651]
- [md] dm rq: don't call blk_mq_queue_stopped() in dm_stop_queue() (Mike Snitzer) [1869386 1848651]
- [md] dm: do not use waitqueue for request-based DM (Mike Snitzer) [1869386 1848651]
- [block] blk-mq: consider non-idle request as "inflight" in blk_mq_rq_inflight() (Mike Snitzer) [1869386 1848651]
- [kernel] sched/deadline: Initialize -&gt;dl_boosted (Phil Auld) [1867612 1854179]
- [kernel] sched/core: Fix PI boosting between RT and DEADLINE tasks (Phil Auld) [1867612 1854179]
- [net] net/smc: tolerate future SMCD versions (Philipp Rudo) [1866390 1854992]
- [net] openvswitch: fixes potential deadlock in dp cleanup code (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: reorder masks array based on usage (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: take into account de-fragmentation/gso_size in execute_check_pkt_len (Lorenzo Bianconi) [1860169 1851888]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.21.1.el8_2]" date="1599739200">- [scsi] scsi: ibmvfc: Fix NULL return compiler warning (Steve Best) [1866371 1810653]
- [scsi] scsi: ibmvfc: Avoid loss of all paths during SVC node reboot (Steve Best) [1866371 1810653]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.22.1.el8_2]" date="1600257600">- [crypto] pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1877530 1862072]
- [crypto] Revert "pefile: Tolerate other pefile signatures after first" (Bruno Meneguele)
- [infiniband] IB/hfi1: Fix another case where pq is left on waitlist (Kamal Heib) [1872766 1859209]
- [infiniband] IB/hfi1: Ensure pq is not left on waitlist (Kamal Heib) [1872766 1859209]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.23.1.el8_2]" date="1600344000">- [net] packet: fix overflow in tpacket_rcv (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}
- [net] packet: make tp_drops atomic (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.24.1.el8_2]" date="1600862400">- [kernel] timers: Remove must_forward_clk (Phil Auld) [1877417 1833096]
- [kernel] timers: Spare timer softirq until next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Expand clk forward logic beyond nohz (Phil Auld) [1877417 1833096]
- [kernel] timers: Reuse next expiry cache after nohz exit (Phil Auld) [1877417 1833096]
- [kernel] timers: Always keep track of next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Optimize _next_timer_interrupt() level iteration (Phil Auld) [1877417 1833096]
- [kernel] timers: Add comments about calc_index() ceiling work (Phil Auld) [1877417 1833096]
- [kernel] timers: Move trigger_dyntick_cpu() to enqueue_timer() (Phil Auld) [1877417 1833096]
- [kernel] timers: Use only bucket expiry for base-&gt;next_expiry value (Phil Auld) [1877417 1833096]
- [kernel] timers: Preserve higher bits of expiration on index calculation (Phil Auld) [1877417 1833096]
- [kernel] timer: Fix wheel index calculation on last level (Phil Auld) [1877417 1833096]
- [kernel] timer: Prevent base-&gt;clk from moving backward (Phil Auld) [1877417 1833096]
- [kernel] timer: Read jiffies once when forwarding base clk (Phil Auld) [1877417 1833096]
- [infiniband] RDMA/umem: Fix ib_umem_find_best_pgsz() (Kamal Heib) [1872424 1856158]
- [net] net: accept an empty mask in /sys/class/net/*/queues/rx-*/rps_cpus (Nitesh Narayan Lal) [1870181 1868433]
- [net] net: Restrict receive packets queuing to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [pci] PCI: Restrict probe functions to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [lib] lib: Restrict cpumask_local_spread to houskeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [s390] s390/pci: Fix unexpected write combine on resource (Philipp Rudo) [1869276 1827311]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.25.1.el8_2]" date="1601553600">- [net] netfilter: conntrack: proc: rename stat column (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: add clash resolution stat counter (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: remove ignore stats (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not increment two error counters at same time (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not auto-delete clash entries on reply (Florian Westphal) [1882095 1875681]
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1881085 1875316] {CVE-2020-14385}
- [kernel] time/tick-broadcast: Fix tick_broadcast_offline() lockdep complaint (Alexey Klimov) [1880081 1877380]
- [net] atomics/treewide: Rename __atomic_add_unless() =&gt; atomic_fetch_add_unless() (Yauheni Kaliuta) [1880081 1813370]
- [kernel] timers: Lower base clock forwarding threshold (Phil Auld) [1877417 1833096]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.26.1.el8_2]" date="1602158400">- [firmware] efi: don't reserve MOK config table memory region (Kairui Song) [1879988 1878584]
- [security] integrity: Load certs from the EFI MOK config table (Lenny Szubowicz) [1877528 1868306]
- [security] integrity: Move import of MokListRT certs to a separate routine (Lenny Szubowicz) [1877528 1868306]
- [firmware] efi: Support for MOK variable config table (Lenny Szubowicz) [1877528 1868306]
- [security] efi: Only print errors about failing to get certs if EFI vars are found (Lenny Szubowicz) [1877528 1804969]
- [fs] ceph: fix inode number handling on arches with 32-bit ino_t (Jeff Layton) [1875787 1866018]
- [fs] ceph: handle zero-length feature mask in session messages (Jeff Layton) [1875787 1866018]
- [fs] ceph: fix endianness bug when handling MDS session feature bits (Jeff Layton) [1875787 1866018]
- [netdrv] net/mlx5e: Fix missing cleanup of ethtool steering during rep rx cleanup (Alaa Hleihel) [1857777 1856660]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.27.1.el8_2]" date="1602763200">- [powerpc] powerpc/pseries: Do not initiate shutdown when system is running on UPS (Diego Domingos) [1882243 1870477]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859471 1859472] {CVE-2020-14331}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.28.1.el8_2]" date="1602849600">- [net] Bluetooth: L2CAP: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888256 1888258] {CVE-2020-12351}
- [net] Bluetooth: A2MP: Fix not initializing all members (Gopal Tiwari) [1888906 1888807] {CVE-2020-12352}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-193.28.1.el8.centos" date="1603195200">- Apply debranding changes</changelog>
</package>
<package pkgid="a07f3cc8af2890c2cc3bbf92a68a65ba38db6eab0566fdc6b36462f293fcef63" name="kernel-modules-internal" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="305.10.2.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.2.1.el8_4]" date="1620648000">- net/mlx5e: Allow to match on MPLS parameters only for MPLS over UDP (Alaa Hleihel) [1952061 1936742]
- net/mlx5e: Reject tc rules which redirect from a VF to itself (Alaa Hleihel) [1952065 1932839]
- net/mlx5: CT: Add support for matching on ct_state inv and rel flags (Alaa Hleihel) [1952062 1942681]
- KVM: VMX: Don't use vcpu-&gt;run-&gt;internal.ndata as an array index (Jon Maloy) [1954221 1954219]
- tools/power turbostat: Revert "[tools] tools/power turbostat: Enable accumulate RAPL display" (Prarit Bhargava) [1952987 1944699]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.3.1.el8_4]" date="1621252800">- Revert "uio: use request_threaded_irq instead" (Vitaly Kuznetsov) [1952952 1946644]
- drm/ast: Set format registers in primary plane's update (Lyude Paul) [1952900 1923857]
- net/sched: act_ct: clear post_ct if doing ct_clear (Marcelo Ricardo Leitner) [1956458 1941889]
- md/raid1: properly indicate failure when ending a failed write request (Nigel Croxon) [1955188 1954588]
- nitro_enclaves: Fix stale file descriptors on failed usercopy (Vitaly Kuznetsov) [1956379 1953717]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.4.1.el8_4]" date="1621944000">- vmxnet3: Set the default of vxlan overlay offload to disabled (Cathy Avery) [1960702 1941714]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.5.1.el8_4]" date="1622548800">- gfs2: report "already frozen/thawed" errors (Bob Peterson) [1961849 1932236]
- gfs2: move freeze glock outside the make_fs_rw and _ro functions (Bob Peterson) [1961849 1932236]
- gfs2: Add common helper for holding and releasing the freeze glock (Bob Peterson) [1961849 1932236]
- gfs2: in signal_our_withdraw wait for unfreeze of _this_ fs only (Bob Peterson) [1961849 1932236]
- gfs2: Don't freeze the file system during unmount (Bob Peterson) [1961849 1932236]
- gfs2: Fix regression in freeze_go_sync (Bob Peterson) [1961849 1932236]
- gfs2: The freeze glock should never be frozen (Bob Peterson) [1961849 1932236]
- gfs2: When freezing gfs2, use GL_EXACT and not GL_NOCACHE (Bob Peterson) [1961849 1932236]
- gfs2: read-only mounts should grab the sd_freeze_gl glock (Bob Peterson) [1961849 1932236]
- gfs2: freeze should work on read-only mounts (Bob Peterson) [1961849 1932236]
- gfs2: Abort gfs2_freeze if io error is seen (Bob Peterson) [1961849 1932236]
- CI: Disable result checking for realtime check (Veronika Kabatova)
- CI: Explicitly disable result checking for private CI (Veronika Kabatova)
- CI: Rename variable (Veronika Kabatova)
- CI: Update builder containers (Veronika Kabatova)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.6.1.el8_4]" date="1623067200">- openvswitch: fix stack OOB read while fragmenting IPv4 packets (Davide Caratti) [1963940 1924608]
- net/sched: sch_frag: fix stack OOB read while fragmenting IPv4 packets (Davide Caratti) [1963940 1924608]
- net/sched: act_ct: fix wild memory access when clearing fragments (Davide Caratti) [1963940 1924608]
- net: Treat __napi_schedule_irqoff() as __napi_schedule() on PREEMPT_RT (Ivan Vecera)
- redhat/configs: Add CONFIG_SYSTEM_REVOCATION_KEYS and CONFIG_SYSTEM_REVOCATION_LIST (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: add 'x509_revocation_list' to gitignore (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- integrity: Load mokx variables into the blacklist keyring (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Add ability to preload revocation certs (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Move load_system_certificate_list to a common function (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Add EFI_CERT_X509_GUID support for dbx entries (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- net/sched: cls_api: increase max_reclassify_loop (Davide Caratti) [1965148 1955136]
- dm writecache: fix performance degradation in ssd mode (Mike Snitzer) [1962241 1961859]
- scsi: fnic: Use scsi_host_busy_iter() to traverse commands (Ewan D. Milne) [1961705 1949250]
- scsi: fnic: Kill 'exclude_id' argument to fnic_cleanup_io() (Ewan D. Milne) [1961705 1949250]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.7.1.el8_4]" date="1623672000">- net: zero-initialize tc skb extension on allocation (Ivan Vecera) [1965457 1946986]
- net/sched: cls_flower: fix only mask bit check in the validate_ct_state (Ivan Vecera) [1965457 1946986]
- net: cls_api: Fix uninitialised struct field bo-&gt;unlocked_driver_cb (Ivan Vecera) [1965457 1946986]
- net/sched: act_api: fix miss set post_ct for ovs after do conntrack in act_ct (Ivan Vecera) [1965457 1946986]
- net/sched: cls_flower: validate ct_state for invalid and reply flags (Ivan Vecera) [1965457 1946986]
- flow_dissector: fix TTL and TOS dissection on IPv4 fragments (Paolo Abeni) [1963952 1950288]
- Revert "sctp: Fix SHUTDOWN CTSN Ack in the peer restart case" (Xin Long) [1965632 1953839]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [1965632 1953839]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [1965632 1953839]
- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962544 1962546] {CVE-2021-33034}
- x86/kvm: Unify kvm_pv_guest_cpu_reboot() with kvm_guest_cpu_offline() (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Disable all PV features on crash (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Disable kvmclock on all CPUs on shutdown (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Teardown PV features on boot CPU as well (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Fix pr_info() for async PF setup/teardown (Lenny Szubowicz) [1964930 1934273]
- net/sched: act_ct: Fix ct template allocation for zone 0 (Marcelo Ricardo Leitner) [1965150 1881824]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.8.1.el8_4]" date="1624363200">- iavf: amend removal of MODULE_VERSION (Stefan Assmann) [1969925 1955738]
- ixgbe: Amend commit acf03026ec5a to include a version string in module info. (Ken Cox) [1969922 1955759]
- i40e: amend removal of MODULE_VERSION (Stefan Assmann) [1969923 1955736]
- redhat/configs: Add CONFIG_PINCTRL_EMMITSBURG (David Arcari) [1963984 1959506]
- redhat/configs: Remove CONFIG_EMMITSBURG (David Arcari) [1963984 1959506]
- netlink: add tracepoint at NL_SET_ERR_MSG (Marcelo Ricardo Leitner) [1972938 1956983]
- Revert "[netdrv] net/intel: remove driver versions from Intel drivers" (Jonathan Toppins) [1969917 1955745]
- Amends commit ea6244cc248b to include a version string in module info. (Ken Cox) [1969915 1955726]
- Revert "[netdrv] net/broadcom: Clean broadcom code from driver versions" (Jonathan Toppins) [1969914 1955721]
- ena: revert removal of MODULE_VERSION from ena (Petr Oros) [1969913 1955712]
- fm10k: amend removal of MODULE_VERSION (Vladis Dronov) [1969910 1955730]
- net/sched: act_ct: Offload connections with commit action (Marcelo Ricardo Leitner) [1968679 1965817]
- netfilter: flowtable: Remove redundant hw refresh bit (Marcelo Ricardo Leitner) [1968679 1965817]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.9.1.el8_4]" date="1624881600">- ixgbevf: Amend commit acf03026ec5a to include a version in module info. (Ken Cox) [1969911 1955764]
- CI: Merge configuration (Veronika Kabatova)
- igc: amend removal of MODULE_VERSION (Corinna Vinschen) [1969921 1955755]
- igb: amend removal of MODULE_VERSION (Corinna Vinschen) [1969919 1955748]
- locking/qrwlock: Fix ordering in queued_write_lock_slowpath() (Waiman Long) [1964419 1950110]
- scsi: qedf: Do not put host in qedf_vport_create() unconditionally (Nilesh Javali) [1974968 1899384]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.10.1.el8_4]" date="1625659200">- igbvf: amend removal of MODULE_VERSION (Corinna Vinschen) [1969920 1955752]
- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971464 1971488] {CVE-2021-32399}
- scsi: ibmvfc: Free channel_setup_buf during device tear down (Steve Best) [1964697 1938102]
- i40e: Fix parameters in aq_get_phy_register() (Stefan Assmann) [1967099 1907852]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.10.2.el8_4]" date="1626091200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975181 1975182] {CVE-2021-33909}</changelog>
</package>
<package pkgid="2ce97402c7c4bd6c3e5dfa8f91364c963528833a4cd2f8216a96320bd3982453" name="kernel-modules-internal" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="348.20.1.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.12.1.el8_5]" date="1641988800">- tcp: don't free a FIN sk_buff in tcp_remove_empty_skb() (Guillaume Nault) [2021574 2016210]
- kernel.spec: Add support to use vmlinux.h (Jiri Olsa) [2031053 1989087]
- spec: Add vmlinux.h to kernel-devel package (Jiri Olsa) [2031053 1989087]
- x86/mce: Avoid infinite loop for copy from user recovery (Prarit Bhargava) [2008789 1999550]
- x86/mce: Rename kill_it to kill_current_task (Prarit Bhargava) [2008789 1999550]
- x86/mce: Recover from poison found while copying from user space (Prarit Bhargava) [2008789 1999550]
- x86/mce: Delay clearing IA32_MCG_STATUS to the end of do_machine_check() (Prarit Bhargava) [2008789 1999550]
- x86/mce: Send #MC singal from task work (Prarit Bhargava) [2008789 1999550]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-348.13.1.el8_5]" date="1642507200">- vfs: Out-of-bounds write of heap buffer in fs_context.c (Frantisek Hrbata) [2040585 2040586] {CVE-2022-0185}
- xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Bruno Meneguele) [2034864 2034865] {CVE-2021-4155}
- af_unix: fix garbage collect vs MSG_PEEK (Patrick Talbert) [2031974 2031975] {CVE-2021-0920}
- cgroup: verify that source is a string (Waiman Long) [2034608 2034609] {CVE-2021-4154}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-348.14.1.el8_5]" date="1643198400">- tcp: fix page frag corruption on page fault (Paolo Abeni) [2041529 1996074]
- net: fix sk_page_frag() recursion from memory reclaim (Paolo Abeni) [2041529 1996074]
- KVM: s390: index kvm-&gt;arch.idle_mask by vcpu_idx (Thomas Huth) [2040769 2026230]
- redhat: set LC_ALL=C before sorting config content (Frantisek Hrbata)</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.15.1.el8_5]" date="1643716800">- net/mlx5: DR, Use FW API when updating FW-owned flow table (Michal Schmidt) [2042663 2042651]
- KVM: x86: Wait for IPIs to be delivered when handling Hyper-V TLB flush hypercall (Vitaly Kuznetsov) [2043237 1868572]
- drm/mgag200: Select clock in PLL update functions (Bruno Meneguele) [2034949 1953926]
- drm/i915: Fix HAS_LSPCON macro for platforms between GEN9 and GEN10 (Bruno Meneguele) [2027335 2005586]
- crypto: qat - power up 4xxx device (Vladis Dronov) [2016437 1960307]
- RDMA/core: Fix a double free in add_port error flow (Kamal Heib) [2038724 2008555]
- powerpc/iommu: Report the correct most efficient DMA mask for PCI devices (Steve Best) [2018928 2007425]
- powerpc/dma: Fix dma_map_ops::get_required_mask (Steve Best) [2018928 2007425]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.16.1.el8_5]" date="1644321600">- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047601 2047602] {CVE-2022-22942}
- net: openvswitch: Fix ct_state nat flags for conns arriving from tc (Marcelo Ricardo Leitner) [2043548 2040334]
- net: openvswitch: Fix matching zone id for invalid conns arriving from tc (Marcelo Ricardo Leitner) [2043550 2040452]
- net/sched: flow_dissector: Fix matching on zone id for invalid conns (Marcelo Ricardo Leitner) [2043550 2040452]
- net/sched: Extend qdisc control block with tc control block (Marcelo Ricardo Leitner) [2043550 2040452]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.17.1.el8_5]" date="1644926400">- vfs: check dentry is still valid in get_link() (Ian Kent) [2052558 2014846]
- xfs: don't expose internal symlink metadata buffers to the vfs (Brian Foster) [2052558 2014846]
- CI: Use appropriate zstream builder (Veronika Kabatova)
- CI: Enable baseline realtime checks (Veronika Kabatova)
- CI: Rename pipelines to include release names (Veronika Kabatova)
- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052166 2052167] {CVE-2022-0492}
- ice: Remove boolean vlan_promisc flag from function (Jonathan Toppins) [2051951 2030400]
- ceph: put the requests/sessions when it fails to alloc memory (Jeffrey Layton) [2053725 2017796]
- ceph: fix off by one bugs in unsafe_request_wait() (Jeffrey Layton) [2053725 2017796]
- ceph: flush the mdlog before waiting on unsafe reqs (Jeffrey Layton) [2053725 2017796]
- ceph: flush mdlog before umounting (Jeffrey Layton) [2053725 2017796]
- ceph: make iterate_sessions a global symbol (Jeffrey Layton) [2053725 2017796]
- ceph: make ceph_create_session_msg a global symbol (Jeffrey Layton) [2053725 2017796]
- xfs: check sb_meta_uuid for dabuf buffer recovery (Bill O'Donnell) [2049292 2020764]
- drm/i915: Flush TLBs before releasing backing store (Patrick Talbert) [2044328 2044329] {CVE-2022-0330}
- hugetlb: fix hugetlb cgroup refcounting during vma split (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: fix imbalanced css_get and css_put pair for shared mappings (Waiman Long) [2039015 2032811]
- mm/hugetlb: change hugetlb_reserve_pages() to type bool (Waiman Long) [2039015 2032811]
- hugetlb: fix an error code in hugetlb_reserve_pages() (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: fix offline of hugetlb cgroup with reservations (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: fix reservation accounting (Waiman Long) [2039015 2032811]
- mm/hugetlb: narrow the hugetlb_lock protection area during preparing huge page (Waiman Long) [2039015 2032811]
- mm/hugetlb: a page from buddy is not on any list (Waiman Long) [2039015 2032811]
- mm/hugetlb: not necessary to coalesce regions recursively (Waiman Long) [2039015 2032811]
- selftests/vm/write_to_hugetlbfs.c: fix unused variable warning (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add hugetlb_cgroup reservation tests (Waiman Long) [2039015 2032811]
- hugetlb: support file_region coalescing again (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: support noreserve mappings (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add accounting for shared mappings (Waiman Long) [2039015 2032811]
- hugetlb: disable region_add file_region coalescing (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add reservation accounting for private mappings (Waiman Long) [2039015 2032811]
- mm/hugetlb_cgroup: fix hugetlb_cgroup migration (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add interface for charge/uncharge hugetlb reservations (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add hugetlb_cgroup reservation counter (Waiman Long) [2039015 2032811]
- hugetlb: remove duplicated code (Waiman Long) [2039015 2032811]
- hugetlb: region_chg provides only cache entry (Waiman Long) [2039015 2032811]
- hugetlbfs: always use address space in inode for resv_map pointer (Waiman Long) [2039015 2032811]
- hugetlbfs: fix potential over/underflow setting node specific nr_hugepages (Waiman Long) [2039015 2032811]
- hugetlb: allow to free gigantic pages regardless of the configuration (Waiman Long) [2039015 2032811]
- powerpc/pseries: Fix update of LPAR security flavor after LPM (Steve Best) [2027448 1997294]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.18.1.el8_5]" date="1645531200">- selftests: kvm: Check whether SIDA memop fails for normal guests (Thomas Huth) [2050806 2050807] {CVE-2022-0516}
- KVM: s390: Return error on SIDA memop on normal guest (Thomas Huth) [2050806 2050807] {CVE-2022-0516}
- iommu/amd: Remove iommu_init_ga() (Jerry Snitselaar) [2030854 1998265]
- iommu/amd: Relocate GAMSup check to early_enable_iommus (Jerry Snitselaar) [2030854 1998265]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.19.1.el8_5]" date="1646049600">- tipc: improve size validations for received domain records (Xin Long) [2048970 2048971] {CVE-2022-0435}
- smb3: do not error on fsync when readonly (Ronnie Sahlberg) [2055824 2037811]
- security: implement sctp_assoc_established hook in selinux (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- security: add sctp_assoc_established hook (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- security: call security_sctp_assoc_request in sctp_sf_do_5_1D_ce (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- security: pass asoc to sctp_assoc_request and sctp_sk_clone (Bruno Meneguele) [2054112 2054117 2015525 2048251]
- net: sctp: Fix some typos (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- RDMA/bnxt_re: Fix stats counters (Selvin Xavier) [2049684 2001893]
- net: check skb sec_path when re-initializing slow_gro in gro_list_prepare (Xin Long) [2047427 2030476]
- cpufreq: intel_pstate: Add Icelake servers support in no-HWP mode (David Arcari) [2036888 2003695]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.20.1.el8_5]" date="1646740800">- lib/iov_iter: initialize "flags" in new pipe_buffer (Jan Stancek) [2060874 2060875] {CVE-2022-0847}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-348.20.1.el8.centos" date="1646913600">- Apply debranding changes</changelog>
</package>
<package pkgid="9733e040a71e74e1c6d076ef6f8747368d666ea4a52d85dd1d93b9376cf8d4d9" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="fa7eb90583d0b0fff076cb7e24d6d0a34b0283b923379d54436ac09c45c579ae" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="193.28.1.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.20.1.el8_2]" date="1599134400">- [infiniband] IB/rdmavt: Fix RQ counting issues causing use of an invalid RWQE (Kamal Heib) [1872771 1850314]
- [block] blk-mq: Rerun dispatching in the case of budget contention (Ming Lei) [1869779 1824037]
- [block] blk-mq: Add blk_mq_delay_run_hw_queues() API call (Ming Lei) [1869779 1824037]
- [block] blk-mq: In blk_mq_dispatch_rq_list() "no budget" is a reason to kick (Ming Lei) [1869779 1824037]
- [block] blk-mq: Put driver tag in blk_mq_dispatch_rq_list() when no budget (Ming Lei) [1869779 1824037]
- [md] dm mpath: use double checked locking in fast path (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rename current_pgpath to pgpath in multipath_prepare_ioctl (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rework __map_bio() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: factor out multipath_queue_bio (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: push locking down to must_push_back_rq() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: take m-&gt;lock spinlock when testing QUEUE_IF_NO_PATH (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: changes from initial m-&gt;flags locking audit (Mike Snitzer) [1869386 1848651]
- [md] dm rq: don't call blk_mq_queue_stopped() in dm_stop_queue() (Mike Snitzer) [1869386 1848651]
- [md] dm: do not use waitqueue for request-based DM (Mike Snitzer) [1869386 1848651]
- [block] blk-mq: consider non-idle request as "inflight" in blk_mq_rq_inflight() (Mike Snitzer) [1869386 1848651]
- [kernel] sched/deadline: Initialize -&gt;dl_boosted (Phil Auld) [1867612 1854179]
- [kernel] sched/core: Fix PI boosting between RT and DEADLINE tasks (Phil Auld) [1867612 1854179]
- [net] net/smc: tolerate future SMCD versions (Philipp Rudo) [1866390 1854992]
- [net] openvswitch: fixes potential deadlock in dp cleanup code (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: reorder masks array based on usage (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: take into account de-fragmentation/gso_size in execute_check_pkt_len (Lorenzo Bianconi) [1860169 1851888]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.21.1.el8_2]" date="1599739200">- [scsi] scsi: ibmvfc: Fix NULL return compiler warning (Steve Best) [1866371 1810653]
- [scsi] scsi: ibmvfc: Avoid loss of all paths during SVC node reboot (Steve Best) [1866371 1810653]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.22.1.el8_2]" date="1600257600">- [crypto] pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1877530 1862072]
- [crypto] Revert "pefile: Tolerate other pefile signatures after first" (Bruno Meneguele)
- [infiniband] IB/hfi1: Fix another case where pq is left on waitlist (Kamal Heib) [1872766 1859209]
- [infiniband] IB/hfi1: Ensure pq is not left on waitlist (Kamal Heib) [1872766 1859209]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.23.1.el8_2]" date="1600344000">- [net] packet: fix overflow in tpacket_rcv (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}
- [net] packet: make tp_drops atomic (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.24.1.el8_2]" date="1600862400">- [kernel] timers: Remove must_forward_clk (Phil Auld) [1877417 1833096]
- [kernel] timers: Spare timer softirq until next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Expand clk forward logic beyond nohz (Phil Auld) [1877417 1833096]
- [kernel] timers: Reuse next expiry cache after nohz exit (Phil Auld) [1877417 1833096]
- [kernel] timers: Always keep track of next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Optimize _next_timer_interrupt() level iteration (Phil Auld) [1877417 1833096]
- [kernel] timers: Add comments about calc_index() ceiling work (Phil Auld) [1877417 1833096]
- [kernel] timers: Move trigger_dyntick_cpu() to enqueue_timer() (Phil Auld) [1877417 1833096]
- [kernel] timers: Use only bucket expiry for base-&gt;next_expiry value (Phil Auld) [1877417 1833096]
- [kernel] timers: Preserve higher bits of expiration on index calculation (Phil Auld) [1877417 1833096]
- [kernel] timer: Fix wheel index calculation on last level (Phil Auld) [1877417 1833096]
- [kernel] timer: Prevent base-&gt;clk from moving backward (Phil Auld) [1877417 1833096]
- [kernel] timer: Read jiffies once when forwarding base clk (Phil Auld) [1877417 1833096]
- [infiniband] RDMA/umem: Fix ib_umem_find_best_pgsz() (Kamal Heib) [1872424 1856158]
- [net] net: accept an empty mask in /sys/class/net/*/queues/rx-*/rps_cpus (Nitesh Narayan Lal) [1870181 1868433]
- [net] net: Restrict receive packets queuing to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [pci] PCI: Restrict probe functions to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [lib] lib: Restrict cpumask_local_spread to houskeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [s390] s390/pci: Fix unexpected write combine on resource (Philipp Rudo) [1869276 1827311]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.25.1.el8_2]" date="1601553600">- [net] netfilter: conntrack: proc: rename stat column (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: add clash resolution stat counter (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: remove ignore stats (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not increment two error counters at same time (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not auto-delete clash entries on reply (Florian Westphal) [1882095 1875681]
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1881085 1875316] {CVE-2020-14385}
- [kernel] time/tick-broadcast: Fix tick_broadcast_offline() lockdep complaint (Alexey Klimov) [1880081 1877380]
- [net] atomics/treewide: Rename __atomic_add_unless() =&gt; atomic_fetch_add_unless() (Yauheni Kaliuta) [1880081 1813370]
- [kernel] timers: Lower base clock forwarding threshold (Phil Auld) [1877417 1833096]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.26.1.el8_2]" date="1602158400">- [firmware] efi: don't reserve MOK config table memory region (Kairui Song) [1879988 1878584]
- [security] integrity: Load certs from the EFI MOK config table (Lenny Szubowicz) [1877528 1868306]
- [security] integrity: Move import of MokListRT certs to a separate routine (Lenny Szubowicz) [1877528 1868306]
- [firmware] efi: Support for MOK variable config table (Lenny Szubowicz) [1877528 1868306]
- [security] efi: Only print errors about failing to get certs if EFI vars are found (Lenny Szubowicz) [1877528 1804969]
- [fs] ceph: fix inode number handling on arches with 32-bit ino_t (Jeff Layton) [1875787 1866018]
- [fs] ceph: handle zero-length feature mask in session messages (Jeff Layton) [1875787 1866018]
- [fs] ceph: fix endianness bug when handling MDS session feature bits (Jeff Layton) [1875787 1866018]
- [netdrv] net/mlx5e: Fix missing cleanup of ethtool steering during rep rx cleanup (Alaa Hleihel) [1857777 1856660]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.27.1.el8_2]" date="1602763200">- [powerpc] powerpc/pseries: Do not initiate shutdown when system is running on UPS (Diego Domingos) [1882243 1870477]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859471 1859472] {CVE-2020-14331}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.28.1.el8_2]" date="1602849600">- [net] Bluetooth: L2CAP: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888256 1888258] {CVE-2020-12351}
- [net] Bluetooth: A2MP: Fix not initializing all members (Gopal Tiwari) [1888906 1888807] {CVE-2020-12352}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-193.28.1.el8.centos" date="1603195200">- Apply debranding changes</changelog>
</package>
<package pkgid="bfa008a13548a05d3bf5f0f70c483d63c2c47d6c94874f57ca0e9e9880270905" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="305.10.2.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.2.1.el8_4]" date="1620648000">- net/mlx5e: Allow to match on MPLS parameters only for MPLS over UDP (Alaa Hleihel) [1952061 1936742]
- net/mlx5e: Reject tc rules which redirect from a VF to itself (Alaa Hleihel) [1952065 1932839]
- net/mlx5: CT: Add support for matching on ct_state inv and rel flags (Alaa Hleihel) [1952062 1942681]
- KVM: VMX: Don't use vcpu-&gt;run-&gt;internal.ndata as an array index (Jon Maloy) [1954221 1954219]
- tools/power turbostat: Revert "[tools] tools/power turbostat: Enable accumulate RAPL display" (Prarit Bhargava) [1952987 1944699]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.3.1.el8_4]" date="1621252800">- Revert "uio: use request_threaded_irq instead" (Vitaly Kuznetsov) [1952952 1946644]
- drm/ast: Set format registers in primary plane's update (Lyude Paul) [1952900 1923857]
- net/sched: act_ct: clear post_ct if doing ct_clear (Marcelo Ricardo Leitner) [1956458 1941889]
- md/raid1: properly indicate failure when ending a failed write request (Nigel Croxon) [1955188 1954588]
- nitro_enclaves: Fix stale file descriptors on failed usercopy (Vitaly Kuznetsov) [1956379 1953717]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.4.1.el8_4]" date="1621944000">- vmxnet3: Set the default of vxlan overlay offload to disabled (Cathy Avery) [1960702 1941714]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.5.1.el8_4]" date="1622548800">- gfs2: report "already frozen/thawed" errors (Bob Peterson) [1961849 1932236]
- gfs2: move freeze glock outside the make_fs_rw and _ro functions (Bob Peterson) [1961849 1932236]
- gfs2: Add common helper for holding and releasing the freeze glock (Bob Peterson) [1961849 1932236]
- gfs2: in signal_our_withdraw wait for unfreeze of _this_ fs only (Bob Peterson) [1961849 1932236]
- gfs2: Don't freeze the file system during unmount (Bob Peterson) [1961849 1932236]
- gfs2: Fix regression in freeze_go_sync (Bob Peterson) [1961849 1932236]
- gfs2: The freeze glock should never be frozen (Bob Peterson) [1961849 1932236]
- gfs2: When freezing gfs2, use GL_EXACT and not GL_NOCACHE (Bob Peterson) [1961849 1932236]
- gfs2: read-only mounts should grab the sd_freeze_gl glock (Bob Peterson) [1961849 1932236]
- gfs2: freeze should work on read-only mounts (Bob Peterson) [1961849 1932236]
- gfs2: Abort gfs2_freeze if io error is seen (Bob Peterson) [1961849 1932236]
- CI: Disable result checking for realtime check (Veronika Kabatova)
- CI: Explicitly disable result checking for private CI (Veronika Kabatova)
- CI: Rename variable (Veronika Kabatova)
- CI: Update builder containers (Veronika Kabatova)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.6.1.el8_4]" date="1623067200">- openvswitch: fix stack OOB read while fragmenting IPv4 packets (Davide Caratti) [1963940 1924608]
- net/sched: sch_frag: fix stack OOB read while fragmenting IPv4 packets (Davide Caratti) [1963940 1924608]
- net/sched: act_ct: fix wild memory access when clearing fragments (Davide Caratti) [1963940 1924608]
- net: Treat __napi_schedule_irqoff() as __napi_schedule() on PREEMPT_RT (Ivan Vecera)
- redhat/configs: Add CONFIG_SYSTEM_REVOCATION_KEYS and CONFIG_SYSTEM_REVOCATION_LIST (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: add 'x509_revocation_list' to gitignore (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- integrity: Load mokx variables into the blacklist keyring (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Add ability to preload revocation certs (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Move load_system_certificate_list to a common function (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Add EFI_CERT_X509_GUID support for dbx entries (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- net/sched: cls_api: increase max_reclassify_loop (Davide Caratti) [1965148 1955136]
- dm writecache: fix performance degradation in ssd mode (Mike Snitzer) [1962241 1961859]
- scsi: fnic: Use scsi_host_busy_iter() to traverse commands (Ewan D. Milne) [1961705 1949250]
- scsi: fnic: Kill 'exclude_id' argument to fnic_cleanup_io() (Ewan D. Milne) [1961705 1949250]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.7.1.el8_4]" date="1623672000">- net: zero-initialize tc skb extension on allocation (Ivan Vecera) [1965457 1946986]
- net/sched: cls_flower: fix only mask bit check in the validate_ct_state (Ivan Vecera) [1965457 1946986]
- net: cls_api: Fix uninitialised struct field bo-&gt;unlocked_driver_cb (Ivan Vecera) [1965457 1946986]
- net/sched: act_api: fix miss set post_ct for ovs after do conntrack in act_ct (Ivan Vecera) [1965457 1946986]
- net/sched: cls_flower: validate ct_state for invalid and reply flags (Ivan Vecera) [1965457 1946986]
- flow_dissector: fix TTL and TOS dissection on IPv4 fragments (Paolo Abeni) [1963952 1950288]
- Revert "sctp: Fix SHUTDOWN CTSN Ack in the peer restart case" (Xin Long) [1965632 1953839]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [1965632 1953839]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [1965632 1953839]
- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962544 1962546] {CVE-2021-33034}
- x86/kvm: Unify kvm_pv_guest_cpu_reboot() with kvm_guest_cpu_offline() (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Disable all PV features on crash (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Disable kvmclock on all CPUs on shutdown (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Teardown PV features on boot CPU as well (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Fix pr_info() for async PF setup/teardown (Lenny Szubowicz) [1964930 1934273]
- net/sched: act_ct: Fix ct template allocation for zone 0 (Marcelo Ricardo Leitner) [1965150 1881824]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.8.1.el8_4]" date="1624363200">- iavf: amend removal of MODULE_VERSION (Stefan Assmann) [1969925 1955738]
- ixgbe: Amend commit acf03026ec5a to include a version string in module info. (Ken Cox) [1969922 1955759]
- i40e: amend removal of MODULE_VERSION (Stefan Assmann) [1969923 1955736]
- redhat/configs: Add CONFIG_PINCTRL_EMMITSBURG (David Arcari) [1963984 1959506]
- redhat/configs: Remove CONFIG_EMMITSBURG (David Arcari) [1963984 1959506]
- netlink: add tracepoint at NL_SET_ERR_MSG (Marcelo Ricardo Leitner) [1972938 1956983]
- Revert "[netdrv] net/intel: remove driver versions from Intel drivers" (Jonathan Toppins) [1969917 1955745]
- Amends commit ea6244cc248b to include a version string in module info. (Ken Cox) [1969915 1955726]
- Revert "[netdrv] net/broadcom: Clean broadcom code from driver versions" (Jonathan Toppins) [1969914 1955721]
- ena: revert removal of MODULE_VERSION from ena (Petr Oros) [1969913 1955712]
- fm10k: amend removal of MODULE_VERSION (Vladis Dronov) [1969910 1955730]
- net/sched: act_ct: Offload connections with commit action (Marcelo Ricardo Leitner) [1968679 1965817]
- netfilter: flowtable: Remove redundant hw refresh bit (Marcelo Ricardo Leitner) [1968679 1965817]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.9.1.el8_4]" date="1624881600">- ixgbevf: Amend commit acf03026ec5a to include a version in module info. (Ken Cox) [1969911 1955764]
- CI: Merge configuration (Veronika Kabatova)
- igc: amend removal of MODULE_VERSION (Corinna Vinschen) [1969921 1955755]
- igb: amend removal of MODULE_VERSION (Corinna Vinschen) [1969919 1955748]
- locking/qrwlock: Fix ordering in queued_write_lock_slowpath() (Waiman Long) [1964419 1950110]
- scsi: qedf: Do not put host in qedf_vport_create() unconditionally (Nilesh Javali) [1974968 1899384]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.10.1.el8_4]" date="1625659200">- igbvf: amend removal of MODULE_VERSION (Corinna Vinschen) [1969920 1955752]
- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971464 1971488] {CVE-2021-32399}
- scsi: ibmvfc: Free channel_setup_buf during device tear down (Steve Best) [1964697 1938102]
- i40e: Fix parameters in aq_get_phy_register() (Stefan Assmann) [1967099 1907852]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.10.2.el8_4]" date="1626091200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975181 1975182] {CVE-2021-33909}</changelog>
</package>
<package pkgid="dc7b8d5476dc40940c5b3b5f6821031197d5128f634163774aeb060d246e2d1c" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="348.20.1.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.12.1.el8_5]" date="1641988800">- tcp: don't free a FIN sk_buff in tcp_remove_empty_skb() (Guillaume Nault) [2021574 2016210]
- kernel.spec: Add support to use vmlinux.h (Jiri Olsa) [2031053 1989087]
- spec: Add vmlinux.h to kernel-devel package (Jiri Olsa) [2031053 1989087]
- x86/mce: Avoid infinite loop for copy from user recovery (Prarit Bhargava) [2008789 1999550]
- x86/mce: Rename kill_it to kill_current_task (Prarit Bhargava) [2008789 1999550]
- x86/mce: Recover from poison found while copying from user space (Prarit Bhargava) [2008789 1999550]
- x86/mce: Delay clearing IA32_MCG_STATUS to the end of do_machine_check() (Prarit Bhargava) [2008789 1999550]
- x86/mce: Send #MC singal from task work (Prarit Bhargava) [2008789 1999550]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-348.13.1.el8_5]" date="1642507200">- vfs: Out-of-bounds write of heap buffer in fs_context.c (Frantisek Hrbata) [2040585 2040586] {CVE-2022-0185}
- xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Bruno Meneguele) [2034864 2034865] {CVE-2021-4155}
- af_unix: fix garbage collect vs MSG_PEEK (Patrick Talbert) [2031974 2031975] {CVE-2021-0920}
- cgroup: verify that source is a string (Waiman Long) [2034608 2034609] {CVE-2021-4154}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-348.14.1.el8_5]" date="1643198400">- tcp: fix page frag corruption on page fault (Paolo Abeni) [2041529 1996074]
- net: fix sk_page_frag() recursion from memory reclaim (Paolo Abeni) [2041529 1996074]
- KVM: s390: index kvm-&gt;arch.idle_mask by vcpu_idx (Thomas Huth) [2040769 2026230]
- redhat: set LC_ALL=C before sorting config content (Frantisek Hrbata)</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.15.1.el8_5]" date="1643716800">- net/mlx5: DR, Use FW API when updating FW-owned flow table (Michal Schmidt) [2042663 2042651]
- KVM: x86: Wait for IPIs to be delivered when handling Hyper-V TLB flush hypercall (Vitaly Kuznetsov) [2043237 1868572]
- drm/mgag200: Select clock in PLL update functions (Bruno Meneguele) [2034949 1953926]
- drm/i915: Fix HAS_LSPCON macro for platforms between GEN9 and GEN10 (Bruno Meneguele) [2027335 2005586]
- crypto: qat - power up 4xxx device (Vladis Dronov) [2016437 1960307]
- RDMA/core: Fix a double free in add_port error flow (Kamal Heib) [2038724 2008555]
- powerpc/iommu: Report the correct most efficient DMA mask for PCI devices (Steve Best) [2018928 2007425]
- powerpc/dma: Fix dma_map_ops::get_required_mask (Steve Best) [2018928 2007425]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.16.1.el8_5]" date="1644321600">- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047601 2047602] {CVE-2022-22942}
- net: openvswitch: Fix ct_state nat flags for conns arriving from tc (Marcelo Ricardo Leitner) [2043548 2040334]
- net: openvswitch: Fix matching zone id for invalid conns arriving from tc (Marcelo Ricardo Leitner) [2043550 2040452]
- net/sched: flow_dissector: Fix matching on zone id for invalid conns (Marcelo Ricardo Leitner) [2043550 2040452]
- net/sched: Extend qdisc control block with tc control block (Marcelo Ricardo Leitner) [2043550 2040452]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.17.1.el8_5]" date="1644926400">- vfs: check dentry is still valid in get_link() (Ian Kent) [2052558 2014846]
- xfs: don't expose internal symlink metadata buffers to the vfs (Brian Foster) [2052558 2014846]
- CI: Use appropriate zstream builder (Veronika Kabatova)
- CI: Enable baseline realtime checks (Veronika Kabatova)
- CI: Rename pipelines to include release names (Veronika Kabatova)
- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052166 2052167] {CVE-2022-0492}
- ice: Remove boolean vlan_promisc flag from function (Jonathan Toppins) [2051951 2030400]
- ceph: put the requests/sessions when it fails to alloc memory (Jeffrey Layton) [2053725 2017796]
- ceph: fix off by one bugs in unsafe_request_wait() (Jeffrey Layton) [2053725 2017796]
- ceph: flush the mdlog before waiting on unsafe reqs (Jeffrey Layton) [2053725 2017796]
- ceph: flush mdlog before umounting (Jeffrey Layton) [2053725 2017796]
- ceph: make iterate_sessions a global symbol (Jeffrey Layton) [2053725 2017796]
- ceph: make ceph_create_session_msg a global symbol (Jeffrey Layton) [2053725 2017796]
- xfs: check sb_meta_uuid for dabuf buffer recovery (Bill O'Donnell) [2049292 2020764]
- drm/i915: Flush TLBs before releasing backing store (Patrick Talbert) [2044328 2044329] {CVE-2022-0330}
- hugetlb: fix hugetlb cgroup refcounting during vma split (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: fix imbalanced css_get and css_put pair for shared mappings (Waiman Long) [2039015 2032811]
- mm/hugetlb: change hugetlb_reserve_pages() to type bool (Waiman Long) [2039015 2032811]
- hugetlb: fix an error code in hugetlb_reserve_pages() (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: fix offline of hugetlb cgroup with reservations (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: fix reservation accounting (Waiman Long) [2039015 2032811]
- mm/hugetlb: narrow the hugetlb_lock protection area during preparing huge page (Waiman Long) [2039015 2032811]
- mm/hugetlb: a page from buddy is not on any list (Waiman Long) [2039015 2032811]
- mm/hugetlb: not necessary to coalesce regions recursively (Waiman Long) [2039015 2032811]
- selftests/vm/write_to_hugetlbfs.c: fix unused variable warning (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add hugetlb_cgroup reservation tests (Waiman Long) [2039015 2032811]
- hugetlb: support file_region coalescing again (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: support noreserve mappings (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add accounting for shared mappings (Waiman Long) [2039015 2032811]
- hugetlb: disable region_add file_region coalescing (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add reservation accounting for private mappings (Waiman Long) [2039015 2032811]
- mm/hugetlb_cgroup: fix hugetlb_cgroup migration (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add interface for charge/uncharge hugetlb reservations (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add hugetlb_cgroup reservation counter (Waiman Long) [2039015 2032811]
- hugetlb: remove duplicated code (Waiman Long) [2039015 2032811]
- hugetlb: region_chg provides only cache entry (Waiman Long) [2039015 2032811]
- hugetlbfs: always use address space in inode for resv_map pointer (Waiman Long) [2039015 2032811]
- hugetlbfs: fix potential over/underflow setting node specific nr_hugepages (Waiman Long) [2039015 2032811]
- hugetlb: allow to free gigantic pages regardless of the configuration (Waiman Long) [2039015 2032811]
- powerpc/pseries: Fix update of LPAR security flavor after LPM (Steve Best) [2027448 1997294]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.18.1.el8_5]" date="1645531200">- selftests: kvm: Check whether SIDA memop fails for normal guests (Thomas Huth) [2050806 2050807] {CVE-2022-0516}
- KVM: s390: Return error on SIDA memop on normal guest (Thomas Huth) [2050806 2050807] {CVE-2022-0516}
- iommu/amd: Remove iommu_init_ga() (Jerry Snitselaar) [2030854 1998265]
- iommu/amd: Relocate GAMSup check to early_enable_iommus (Jerry Snitselaar) [2030854 1998265]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.19.1.el8_5]" date="1646049600">- tipc: improve size validations for received domain records (Xin Long) [2048970 2048971] {CVE-2022-0435}
- smb3: do not error on fsync when readonly (Ronnie Sahlberg) [2055824 2037811]
- security: implement sctp_assoc_established hook in selinux (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- security: add sctp_assoc_established hook (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- security: call security_sctp_assoc_request in sctp_sf_do_5_1D_ce (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- security: pass asoc to sctp_assoc_request and sctp_sk_clone (Bruno Meneguele) [2054112 2054117 2015525 2048251]
- net: sctp: Fix some typos (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- RDMA/bnxt_re: Fix stats counters (Selvin Xavier) [2049684 2001893]
- net: check skb sec_path when re-initializing slow_gro in gro_list_prepare (Xin Long) [2047427 2030476]
- cpufreq: intel_pstate: Add Icelake servers support in no-HWP mode (David Arcari) [2036888 2003695]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.20.1.el8_5]" date="1646740800">- lib/iov_iter: initialize "flags" in new pipe_buffer (Jan Stancek) [2060874 2060875] {CVE-2022-0847}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-348.20.1.el8.centos" date="1646913600">- Apply debranding changes</changelog>
</package>
<package pkgid="55678ac51b64b307161ddfca9eb545fbdd15ad10c20b447334a00914221d5232" name="kernel-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="cafa0bdba6d269a3923be7926a522aa3c3afeab289f625fc90ebeae08a80dec4" name="kernel-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="193.28.1.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.20.1.el8_2]" date="1599134400">- [infiniband] IB/rdmavt: Fix RQ counting issues causing use of an invalid RWQE (Kamal Heib) [1872771 1850314]
- [block] blk-mq: Rerun dispatching in the case of budget contention (Ming Lei) [1869779 1824037]
- [block] blk-mq: Add blk_mq_delay_run_hw_queues() API call (Ming Lei) [1869779 1824037]
- [block] blk-mq: In blk_mq_dispatch_rq_list() "no budget" is a reason to kick (Ming Lei) [1869779 1824037]
- [block] blk-mq: Put driver tag in blk_mq_dispatch_rq_list() when no budget (Ming Lei) [1869779 1824037]
- [md] dm mpath: use double checked locking in fast path (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rename current_pgpath to pgpath in multipath_prepare_ioctl (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rework __map_bio() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: factor out multipath_queue_bio (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: push locking down to must_push_back_rq() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: take m-&gt;lock spinlock when testing QUEUE_IF_NO_PATH (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: changes from initial m-&gt;flags locking audit (Mike Snitzer) [1869386 1848651]
- [md] dm rq: don't call blk_mq_queue_stopped() in dm_stop_queue() (Mike Snitzer) [1869386 1848651]
- [md] dm: do not use waitqueue for request-based DM (Mike Snitzer) [1869386 1848651]
- [block] blk-mq: consider non-idle request as "inflight" in blk_mq_rq_inflight() (Mike Snitzer) [1869386 1848651]
- [kernel] sched/deadline: Initialize -&gt;dl_boosted (Phil Auld) [1867612 1854179]
- [kernel] sched/core: Fix PI boosting between RT and DEADLINE tasks (Phil Auld) [1867612 1854179]
- [net] net/smc: tolerate future SMCD versions (Philipp Rudo) [1866390 1854992]
- [net] openvswitch: fixes potential deadlock in dp cleanup code (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: reorder masks array based on usage (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: take into account de-fragmentation/gso_size in execute_check_pkt_len (Lorenzo Bianconi) [1860169 1851888]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.21.1.el8_2]" date="1599739200">- [scsi] scsi: ibmvfc: Fix NULL return compiler warning (Steve Best) [1866371 1810653]
- [scsi] scsi: ibmvfc: Avoid loss of all paths during SVC node reboot (Steve Best) [1866371 1810653]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.22.1.el8_2]" date="1600257600">- [crypto] pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1877530 1862072]
- [crypto] Revert "pefile: Tolerate other pefile signatures after first" (Bruno Meneguele)
- [infiniband] IB/hfi1: Fix another case where pq is left on waitlist (Kamal Heib) [1872766 1859209]
- [infiniband] IB/hfi1: Ensure pq is not left on waitlist (Kamal Heib) [1872766 1859209]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.23.1.el8_2]" date="1600344000">- [net] packet: fix overflow in tpacket_rcv (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}
- [net] packet: make tp_drops atomic (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.24.1.el8_2]" date="1600862400">- [kernel] timers: Remove must_forward_clk (Phil Auld) [1877417 1833096]
- [kernel] timers: Spare timer softirq until next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Expand clk forward logic beyond nohz (Phil Auld) [1877417 1833096]
- [kernel] timers: Reuse next expiry cache after nohz exit (Phil Auld) [1877417 1833096]
- [kernel] timers: Always keep track of next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Optimize _next_timer_interrupt() level iteration (Phil Auld) [1877417 1833096]
- [kernel] timers: Add comments about calc_index() ceiling work (Phil Auld) [1877417 1833096]
- [kernel] timers: Move trigger_dyntick_cpu() to enqueue_timer() (Phil Auld) [1877417 1833096]
- [kernel] timers: Use only bucket expiry for base-&gt;next_expiry value (Phil Auld) [1877417 1833096]
- [kernel] timers: Preserve higher bits of expiration on index calculation (Phil Auld) [1877417 1833096]
- [kernel] timer: Fix wheel index calculation on last level (Phil Auld) [1877417 1833096]
- [kernel] timer: Prevent base-&gt;clk from moving backward (Phil Auld) [1877417 1833096]
- [kernel] timer: Read jiffies once when forwarding base clk (Phil Auld) [1877417 1833096]
- [infiniband] RDMA/umem: Fix ib_umem_find_best_pgsz() (Kamal Heib) [1872424 1856158]
- [net] net: accept an empty mask in /sys/class/net/*/queues/rx-*/rps_cpus (Nitesh Narayan Lal) [1870181 1868433]
- [net] net: Restrict receive packets queuing to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [pci] PCI: Restrict probe functions to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [lib] lib: Restrict cpumask_local_spread to houskeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [s390] s390/pci: Fix unexpected write combine on resource (Philipp Rudo) [1869276 1827311]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.25.1.el8_2]" date="1601553600">- [net] netfilter: conntrack: proc: rename stat column (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: add clash resolution stat counter (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: remove ignore stats (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not increment two error counters at same time (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not auto-delete clash entries on reply (Florian Westphal) [1882095 1875681]
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1881085 1875316] {CVE-2020-14385}
- [kernel] time/tick-broadcast: Fix tick_broadcast_offline() lockdep complaint (Alexey Klimov) [1880081 1877380]
- [net] atomics/treewide: Rename __atomic_add_unless() =&gt; atomic_fetch_add_unless() (Yauheni Kaliuta) [1880081 1813370]
- [kernel] timers: Lower base clock forwarding threshold (Phil Auld) [1877417 1833096]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.26.1.el8_2]" date="1602158400">- [firmware] efi: don't reserve MOK config table memory region (Kairui Song) [1879988 1878584]
- [security] integrity: Load certs from the EFI MOK config table (Lenny Szubowicz) [1877528 1868306]
- [security] integrity: Move import of MokListRT certs to a separate routine (Lenny Szubowicz) [1877528 1868306]
- [firmware] efi: Support for MOK variable config table (Lenny Szubowicz) [1877528 1868306]
- [security] efi: Only print errors about failing to get certs if EFI vars are found (Lenny Szubowicz) [1877528 1804969]
- [fs] ceph: fix inode number handling on arches with 32-bit ino_t (Jeff Layton) [1875787 1866018]
- [fs] ceph: handle zero-length feature mask in session messages (Jeff Layton) [1875787 1866018]
- [fs] ceph: fix endianness bug when handling MDS session feature bits (Jeff Layton) [1875787 1866018]
- [netdrv] net/mlx5e: Fix missing cleanup of ethtool steering during rep rx cleanup (Alaa Hleihel) [1857777 1856660]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.27.1.el8_2]" date="1602763200">- [powerpc] powerpc/pseries: Do not initiate shutdown when system is running on UPS (Diego Domingos) [1882243 1870477]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859471 1859472] {CVE-2020-14331}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.28.1.el8_2]" date="1602849600">- [net] Bluetooth: L2CAP: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888256 1888258] {CVE-2020-12351}
- [net] Bluetooth: A2MP: Fix not initializing all members (Gopal Tiwari) [1888906 1888807] {CVE-2020-12352}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-193.28.1.el8.centos" date="1603195200">- Apply debranding changes</changelog>
</package>
<package pkgid="9a4be223e11071bc79c2f728539829db33cb02bc713132ea01eb1f53da54f43d" name="kernel-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="305.10.2.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.2.1.el8_4]" date="1620648000">- net/mlx5e: Allow to match on MPLS parameters only for MPLS over UDP (Alaa Hleihel) [1952061 1936742]
- net/mlx5e: Reject tc rules which redirect from a VF to itself (Alaa Hleihel) [1952065 1932839]
- net/mlx5: CT: Add support for matching on ct_state inv and rel flags (Alaa Hleihel) [1952062 1942681]
- KVM: VMX: Don't use vcpu-&gt;run-&gt;internal.ndata as an array index (Jon Maloy) [1954221 1954219]
- tools/power turbostat: Revert "[tools] tools/power turbostat: Enable accumulate RAPL display" (Prarit Bhargava) [1952987 1944699]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.3.1.el8_4]" date="1621252800">- Revert "uio: use request_threaded_irq instead" (Vitaly Kuznetsov) [1952952 1946644]
- drm/ast: Set format registers in primary plane's update (Lyude Paul) [1952900 1923857]
- net/sched: act_ct: clear post_ct if doing ct_clear (Marcelo Ricardo Leitner) [1956458 1941889]
- md/raid1: properly indicate failure when ending a failed write request (Nigel Croxon) [1955188 1954588]
- nitro_enclaves: Fix stale file descriptors on failed usercopy (Vitaly Kuznetsov) [1956379 1953717]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.4.1.el8_4]" date="1621944000">- vmxnet3: Set the default of vxlan overlay offload to disabled (Cathy Avery) [1960702 1941714]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.5.1.el8_4]" date="1622548800">- gfs2: report "already frozen/thawed" errors (Bob Peterson) [1961849 1932236]
- gfs2: move freeze glock outside the make_fs_rw and _ro functions (Bob Peterson) [1961849 1932236]
- gfs2: Add common helper for holding and releasing the freeze glock (Bob Peterson) [1961849 1932236]
- gfs2: in signal_our_withdraw wait for unfreeze of _this_ fs only (Bob Peterson) [1961849 1932236]
- gfs2: Don't freeze the file system during unmount (Bob Peterson) [1961849 1932236]
- gfs2: Fix regression in freeze_go_sync (Bob Peterson) [1961849 1932236]
- gfs2: The freeze glock should never be frozen (Bob Peterson) [1961849 1932236]
- gfs2: When freezing gfs2, use GL_EXACT and not GL_NOCACHE (Bob Peterson) [1961849 1932236]
- gfs2: read-only mounts should grab the sd_freeze_gl glock (Bob Peterson) [1961849 1932236]
- gfs2: freeze should work on read-only mounts (Bob Peterson) [1961849 1932236]
- gfs2: Abort gfs2_freeze if io error is seen (Bob Peterson) [1961849 1932236]
- CI: Disable result checking for realtime check (Veronika Kabatova)
- CI: Explicitly disable result checking for private CI (Veronika Kabatova)
- CI: Rename variable (Veronika Kabatova)
- CI: Update builder containers (Veronika Kabatova)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.6.1.el8_4]" date="1623067200">- openvswitch: fix stack OOB read while fragmenting IPv4 packets (Davide Caratti) [1963940 1924608]
- net/sched: sch_frag: fix stack OOB read while fragmenting IPv4 packets (Davide Caratti) [1963940 1924608]
- net/sched: act_ct: fix wild memory access when clearing fragments (Davide Caratti) [1963940 1924608]
- net: Treat __napi_schedule_irqoff() as __napi_schedule() on PREEMPT_RT (Ivan Vecera)
- redhat/configs: Add CONFIG_SYSTEM_REVOCATION_KEYS and CONFIG_SYSTEM_REVOCATION_LIST (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: add 'x509_revocation_list' to gitignore (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- integrity: Load mokx variables into the blacklist keyring (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Add ability to preload revocation certs (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Move load_system_certificate_list to a common function (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Add EFI_CERT_X509_GUID support for dbx entries (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- net/sched: cls_api: increase max_reclassify_loop (Davide Caratti) [1965148 1955136]
- dm writecache: fix performance degradation in ssd mode (Mike Snitzer) [1962241 1961859]
- scsi: fnic: Use scsi_host_busy_iter() to traverse commands (Ewan D. Milne) [1961705 1949250]
- scsi: fnic: Kill 'exclude_id' argument to fnic_cleanup_io() (Ewan D. Milne) [1961705 1949250]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.7.1.el8_4]" date="1623672000">- net: zero-initialize tc skb extension on allocation (Ivan Vecera) [1965457 1946986]
- net/sched: cls_flower: fix only mask bit check in the validate_ct_state (Ivan Vecera) [1965457 1946986]
- net: cls_api: Fix uninitialised struct field bo-&gt;unlocked_driver_cb (Ivan Vecera) [1965457 1946986]
- net/sched: act_api: fix miss set post_ct for ovs after do conntrack in act_ct (Ivan Vecera) [1965457 1946986]
- net/sched: cls_flower: validate ct_state for invalid and reply flags (Ivan Vecera) [1965457 1946986]
- flow_dissector: fix TTL and TOS dissection on IPv4 fragments (Paolo Abeni) [1963952 1950288]
- Revert "sctp: Fix SHUTDOWN CTSN Ack in the peer restart case" (Xin Long) [1965632 1953839]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [1965632 1953839]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [1965632 1953839]
- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962544 1962546] {CVE-2021-33034}
- x86/kvm: Unify kvm_pv_guest_cpu_reboot() with kvm_guest_cpu_offline() (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Disable all PV features on crash (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Disable kvmclock on all CPUs on shutdown (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Teardown PV features on boot CPU as well (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Fix pr_info() for async PF setup/teardown (Lenny Szubowicz) [1964930 1934273]
- net/sched: act_ct: Fix ct template allocation for zone 0 (Marcelo Ricardo Leitner) [1965150 1881824]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.8.1.el8_4]" date="1624363200">- iavf: amend removal of MODULE_VERSION (Stefan Assmann) [1969925 1955738]
- ixgbe: Amend commit acf03026ec5a to include a version string in module info. (Ken Cox) [1969922 1955759]
- i40e: amend removal of MODULE_VERSION (Stefan Assmann) [1969923 1955736]
- redhat/configs: Add CONFIG_PINCTRL_EMMITSBURG (David Arcari) [1963984 1959506]
- redhat/configs: Remove CONFIG_EMMITSBURG (David Arcari) [1963984 1959506]
- netlink: add tracepoint at NL_SET_ERR_MSG (Marcelo Ricardo Leitner) [1972938 1956983]
- Revert "[netdrv] net/intel: remove driver versions from Intel drivers" (Jonathan Toppins) [1969917 1955745]
- Amends commit ea6244cc248b to include a version string in module info. (Ken Cox) [1969915 1955726]
- Revert "[netdrv] net/broadcom: Clean broadcom code from driver versions" (Jonathan Toppins) [1969914 1955721]
- ena: revert removal of MODULE_VERSION from ena (Petr Oros) [1969913 1955712]
- fm10k: amend removal of MODULE_VERSION (Vladis Dronov) [1969910 1955730]
- net/sched: act_ct: Offload connections with commit action (Marcelo Ricardo Leitner) [1968679 1965817]
- netfilter: flowtable: Remove redundant hw refresh bit (Marcelo Ricardo Leitner) [1968679 1965817]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.9.1.el8_4]" date="1624881600">- ixgbevf: Amend commit acf03026ec5a to include a version in module info. (Ken Cox) [1969911 1955764]
- CI: Merge configuration (Veronika Kabatova)
- igc: amend removal of MODULE_VERSION (Corinna Vinschen) [1969921 1955755]
- igb: amend removal of MODULE_VERSION (Corinna Vinschen) [1969919 1955748]
- locking/qrwlock: Fix ordering in queued_write_lock_slowpath() (Waiman Long) [1964419 1950110]
- scsi: qedf: Do not put host in qedf_vport_create() unconditionally (Nilesh Javali) [1974968 1899384]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.10.1.el8_4]" date="1625659200">- igbvf: amend removal of MODULE_VERSION (Corinna Vinschen) [1969920 1955752]
- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971464 1971488] {CVE-2021-32399}
- scsi: ibmvfc: Free channel_setup_buf during device tear down (Steve Best) [1964697 1938102]
- i40e: Fix parameters in aq_get_phy_register() (Stefan Assmann) [1967099 1907852]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.10.2.el8_4]" date="1626091200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975181 1975182] {CVE-2021-33909}</changelog>
</package>
<package pkgid="70466bc2d7cb929d40ae125dd2cefdadae5f1d846e4cd6be73b26df0e792cea4" name="kernel-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="348.20.1.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.12.1.el8_5]" date="1641988800">- tcp: don't free a FIN sk_buff in tcp_remove_empty_skb() (Guillaume Nault) [2021574 2016210]
- kernel.spec: Add support to use vmlinux.h (Jiri Olsa) [2031053 1989087]
- spec: Add vmlinux.h to kernel-devel package (Jiri Olsa) [2031053 1989087]
- x86/mce: Avoid infinite loop for copy from user recovery (Prarit Bhargava) [2008789 1999550]
- x86/mce: Rename kill_it to kill_current_task (Prarit Bhargava) [2008789 1999550]
- x86/mce: Recover from poison found while copying from user space (Prarit Bhargava) [2008789 1999550]
- x86/mce: Delay clearing IA32_MCG_STATUS to the end of do_machine_check() (Prarit Bhargava) [2008789 1999550]
- x86/mce: Send #MC singal from task work (Prarit Bhargava) [2008789 1999550]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-348.13.1.el8_5]" date="1642507200">- vfs: Out-of-bounds write of heap buffer in fs_context.c (Frantisek Hrbata) [2040585 2040586] {CVE-2022-0185}
- xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Bruno Meneguele) [2034864 2034865] {CVE-2021-4155}
- af_unix: fix garbage collect vs MSG_PEEK (Patrick Talbert) [2031974 2031975] {CVE-2021-0920}
- cgroup: verify that source is a string (Waiman Long) [2034608 2034609] {CVE-2021-4154}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-348.14.1.el8_5]" date="1643198400">- tcp: fix page frag corruption on page fault (Paolo Abeni) [2041529 1996074]
- net: fix sk_page_frag() recursion from memory reclaim (Paolo Abeni) [2041529 1996074]
- KVM: s390: index kvm-&gt;arch.idle_mask by vcpu_idx (Thomas Huth) [2040769 2026230]
- redhat: set LC_ALL=C before sorting config content (Frantisek Hrbata)</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.15.1.el8_5]" date="1643716800">- net/mlx5: DR, Use FW API when updating FW-owned flow table (Michal Schmidt) [2042663 2042651]
- KVM: x86: Wait for IPIs to be delivered when handling Hyper-V TLB flush hypercall (Vitaly Kuznetsov) [2043237 1868572]
- drm/mgag200: Select clock in PLL update functions (Bruno Meneguele) [2034949 1953926]
- drm/i915: Fix HAS_LSPCON macro for platforms between GEN9 and GEN10 (Bruno Meneguele) [2027335 2005586]
- crypto: qat - power up 4xxx device (Vladis Dronov) [2016437 1960307]
- RDMA/core: Fix a double free in add_port error flow (Kamal Heib) [2038724 2008555]
- powerpc/iommu: Report the correct most efficient DMA mask for PCI devices (Steve Best) [2018928 2007425]
- powerpc/dma: Fix dma_map_ops::get_required_mask (Steve Best) [2018928 2007425]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.16.1.el8_5]" date="1644321600">- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047601 2047602] {CVE-2022-22942}
- net: openvswitch: Fix ct_state nat flags for conns arriving from tc (Marcelo Ricardo Leitner) [2043548 2040334]
- net: openvswitch: Fix matching zone id for invalid conns arriving from tc (Marcelo Ricardo Leitner) [2043550 2040452]
- net/sched: flow_dissector: Fix matching on zone id for invalid conns (Marcelo Ricardo Leitner) [2043550 2040452]
- net/sched: Extend qdisc control block with tc control block (Marcelo Ricardo Leitner) [2043550 2040452]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.17.1.el8_5]" date="1644926400">- vfs: check dentry is still valid in get_link() (Ian Kent) [2052558 2014846]
- xfs: don't expose internal symlink metadata buffers to the vfs (Brian Foster) [2052558 2014846]
- CI: Use appropriate zstream builder (Veronika Kabatova)
- CI: Enable baseline realtime checks (Veronika Kabatova)
- CI: Rename pipelines to include release names (Veronika Kabatova)
- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052166 2052167] {CVE-2022-0492}
- ice: Remove boolean vlan_promisc flag from function (Jonathan Toppins) [2051951 2030400]
- ceph: put the requests/sessions when it fails to alloc memory (Jeffrey Layton) [2053725 2017796]
- ceph: fix off by one bugs in unsafe_request_wait() (Jeffrey Layton) [2053725 2017796]
- ceph: flush the mdlog before waiting on unsafe reqs (Jeffrey Layton) [2053725 2017796]
- ceph: flush mdlog before umounting (Jeffrey Layton) [2053725 2017796]
- ceph: make iterate_sessions a global symbol (Jeffrey Layton) [2053725 2017796]
- ceph: make ceph_create_session_msg a global symbol (Jeffrey Layton) [2053725 2017796]
- xfs: check sb_meta_uuid for dabuf buffer recovery (Bill O'Donnell) [2049292 2020764]
- drm/i915: Flush TLBs before releasing backing store (Patrick Talbert) [2044328 2044329] {CVE-2022-0330}
- hugetlb: fix hugetlb cgroup refcounting during vma split (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: fix imbalanced css_get and css_put pair for shared mappings (Waiman Long) [2039015 2032811]
- mm/hugetlb: change hugetlb_reserve_pages() to type bool (Waiman Long) [2039015 2032811]
- hugetlb: fix an error code in hugetlb_reserve_pages() (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: fix offline of hugetlb cgroup with reservations (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: fix reservation accounting (Waiman Long) [2039015 2032811]
- mm/hugetlb: narrow the hugetlb_lock protection area during preparing huge page (Waiman Long) [2039015 2032811]
- mm/hugetlb: a page from buddy is not on any list (Waiman Long) [2039015 2032811]
- mm/hugetlb: not necessary to coalesce regions recursively (Waiman Long) [2039015 2032811]
- selftests/vm/write_to_hugetlbfs.c: fix unused variable warning (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add hugetlb_cgroup reservation tests (Waiman Long) [2039015 2032811]
- hugetlb: support file_region coalescing again (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: support noreserve mappings (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add accounting for shared mappings (Waiman Long) [2039015 2032811]
- hugetlb: disable region_add file_region coalescing (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add reservation accounting for private mappings (Waiman Long) [2039015 2032811]
- mm/hugetlb_cgroup: fix hugetlb_cgroup migration (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add interface for charge/uncharge hugetlb reservations (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add hugetlb_cgroup reservation counter (Waiman Long) [2039015 2032811]
- hugetlb: remove duplicated code (Waiman Long) [2039015 2032811]
- hugetlb: region_chg provides only cache entry (Waiman Long) [2039015 2032811]
- hugetlbfs: always use address space in inode for resv_map pointer (Waiman Long) [2039015 2032811]
- hugetlbfs: fix potential over/underflow setting node specific nr_hugepages (Waiman Long) [2039015 2032811]
- hugetlb: allow to free gigantic pages regardless of the configuration (Waiman Long) [2039015 2032811]
- powerpc/pseries: Fix update of LPAR security flavor after LPM (Steve Best) [2027448 1997294]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.18.1.el8_5]" date="1645531200">- selftests: kvm: Check whether SIDA memop fails for normal guests (Thomas Huth) [2050806 2050807] {CVE-2022-0516}
- KVM: s390: Return error on SIDA memop on normal guest (Thomas Huth) [2050806 2050807] {CVE-2022-0516}
- iommu/amd: Remove iommu_init_ga() (Jerry Snitselaar) [2030854 1998265]
- iommu/amd: Relocate GAMSup check to early_enable_iommus (Jerry Snitselaar) [2030854 1998265]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.19.1.el8_5]" date="1646049600">- tipc: improve size validations for received domain records (Xin Long) [2048970 2048971] {CVE-2022-0435}
- smb3: do not error on fsync when readonly (Ronnie Sahlberg) [2055824 2037811]
- security: implement sctp_assoc_established hook in selinux (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- security: add sctp_assoc_established hook (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- security: call security_sctp_assoc_request in sctp_sf_do_5_1D_ce (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- security: pass asoc to sctp_assoc_request and sctp_sk_clone (Bruno Meneguele) [2054112 2054117 2015525 2048251]
- net: sctp: Fix some typos (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- RDMA/bnxt_re: Fix stats counters (Selvin Xavier) [2049684 2001893]
- net: check skb sec_path when re-initializing slow_gro in gro_list_prepare (Xin Long) [2047427 2030476]
- cpufreq: intel_pstate: Add Icelake servers support in no-HWP mode (David Arcari) [2036888 2003695]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.20.1.el8_5]" date="1646740800">- lib/iov_iter: initialize "flags" in new pipe_buffer (Jan Stancek) [2060874 2060875] {CVE-2022-0847}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-348.20.1.el8.centos" date="1646913600">- Apply debranding changes</changelog>
</package>
<package pkgid="b86008fe78fa0baa83a93d82981e56b252aa912d497dfd91217024e4ea400d8f" name="kernel-tools-libs" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="3c6a0f95e2fd4ead860daecef1ffcccce674ae147fc3294a76d35539d2b42239" name="kernel-tools-libs" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="193.28.1.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.20.1.el8_2]" date="1599134400">- [infiniband] IB/rdmavt: Fix RQ counting issues causing use of an invalid RWQE (Kamal Heib) [1872771 1850314]
- [block] blk-mq: Rerun dispatching in the case of budget contention (Ming Lei) [1869779 1824037]
- [block] blk-mq: Add blk_mq_delay_run_hw_queues() API call (Ming Lei) [1869779 1824037]
- [block] blk-mq: In blk_mq_dispatch_rq_list() "no budget" is a reason to kick (Ming Lei) [1869779 1824037]
- [block] blk-mq: Put driver tag in blk_mq_dispatch_rq_list() when no budget (Ming Lei) [1869779 1824037]
- [md] dm mpath: use double checked locking in fast path (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rename current_pgpath to pgpath in multipath_prepare_ioctl (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rework __map_bio() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: factor out multipath_queue_bio (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: push locking down to must_push_back_rq() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: take m-&gt;lock spinlock when testing QUEUE_IF_NO_PATH (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: changes from initial m-&gt;flags locking audit (Mike Snitzer) [1869386 1848651]
- [md] dm rq: don't call blk_mq_queue_stopped() in dm_stop_queue() (Mike Snitzer) [1869386 1848651]
- [md] dm: do not use waitqueue for request-based DM (Mike Snitzer) [1869386 1848651]
- [block] blk-mq: consider non-idle request as "inflight" in blk_mq_rq_inflight() (Mike Snitzer) [1869386 1848651]
- [kernel] sched/deadline: Initialize -&gt;dl_boosted (Phil Auld) [1867612 1854179]
- [kernel] sched/core: Fix PI boosting between RT and DEADLINE tasks (Phil Auld) [1867612 1854179]
- [net] net/smc: tolerate future SMCD versions (Philipp Rudo) [1866390 1854992]
- [net] openvswitch: fixes potential deadlock in dp cleanup code (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: reorder masks array based on usage (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: take into account de-fragmentation/gso_size in execute_check_pkt_len (Lorenzo Bianconi) [1860169 1851888]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.21.1.el8_2]" date="1599739200">- [scsi] scsi: ibmvfc: Fix NULL return compiler warning (Steve Best) [1866371 1810653]
- [scsi] scsi: ibmvfc: Avoid loss of all paths during SVC node reboot (Steve Best) [1866371 1810653]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.22.1.el8_2]" date="1600257600">- [crypto] pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1877530 1862072]
- [crypto] Revert "pefile: Tolerate other pefile signatures after first" (Bruno Meneguele)
- [infiniband] IB/hfi1: Fix another case where pq is left on waitlist (Kamal Heib) [1872766 1859209]
- [infiniband] IB/hfi1: Ensure pq is not left on waitlist (Kamal Heib) [1872766 1859209]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.23.1.el8_2]" date="1600344000">- [net] packet: fix overflow in tpacket_rcv (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}
- [net] packet: make tp_drops atomic (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.24.1.el8_2]" date="1600862400">- [kernel] timers: Remove must_forward_clk (Phil Auld) [1877417 1833096]
- [kernel] timers: Spare timer softirq until next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Expand clk forward logic beyond nohz (Phil Auld) [1877417 1833096]
- [kernel] timers: Reuse next expiry cache after nohz exit (Phil Auld) [1877417 1833096]
- [kernel] timers: Always keep track of next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Optimize _next_timer_interrupt() level iteration (Phil Auld) [1877417 1833096]
- [kernel] timers: Add comments about calc_index() ceiling work (Phil Auld) [1877417 1833096]
- [kernel] timers: Move trigger_dyntick_cpu() to enqueue_timer() (Phil Auld) [1877417 1833096]
- [kernel] timers: Use only bucket expiry for base-&gt;next_expiry value (Phil Auld) [1877417 1833096]
- [kernel] timers: Preserve higher bits of expiration on index calculation (Phil Auld) [1877417 1833096]
- [kernel] timer: Fix wheel index calculation on last level (Phil Auld) [1877417 1833096]
- [kernel] timer: Prevent base-&gt;clk from moving backward (Phil Auld) [1877417 1833096]
- [kernel] timer: Read jiffies once when forwarding base clk (Phil Auld) [1877417 1833096]
- [infiniband] RDMA/umem: Fix ib_umem_find_best_pgsz() (Kamal Heib) [1872424 1856158]
- [net] net: accept an empty mask in /sys/class/net/*/queues/rx-*/rps_cpus (Nitesh Narayan Lal) [1870181 1868433]
- [net] net: Restrict receive packets queuing to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [pci] PCI: Restrict probe functions to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [lib] lib: Restrict cpumask_local_spread to houskeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [s390] s390/pci: Fix unexpected write combine on resource (Philipp Rudo) [1869276 1827311]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.25.1.el8_2]" date="1601553600">- [net] netfilter: conntrack: proc: rename stat column (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: add clash resolution stat counter (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: remove ignore stats (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not increment two error counters at same time (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not auto-delete clash entries on reply (Florian Westphal) [1882095 1875681]
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1881085 1875316] {CVE-2020-14385}
- [kernel] time/tick-broadcast: Fix tick_broadcast_offline() lockdep complaint (Alexey Klimov) [1880081 1877380]
- [net] atomics/treewide: Rename __atomic_add_unless() =&gt; atomic_fetch_add_unless() (Yauheni Kaliuta) [1880081 1813370]
- [kernel] timers: Lower base clock forwarding threshold (Phil Auld) [1877417 1833096]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.26.1.el8_2]" date="1602158400">- [firmware] efi: don't reserve MOK config table memory region (Kairui Song) [1879988 1878584]
- [security] integrity: Load certs from the EFI MOK config table (Lenny Szubowicz) [1877528 1868306]
- [security] integrity: Move import of MokListRT certs to a separate routine (Lenny Szubowicz) [1877528 1868306]
- [firmware] efi: Support for MOK variable config table (Lenny Szubowicz) [1877528 1868306]
- [security] efi: Only print errors about failing to get certs if EFI vars are found (Lenny Szubowicz) [1877528 1804969]
- [fs] ceph: fix inode number handling on arches with 32-bit ino_t (Jeff Layton) [1875787 1866018]
- [fs] ceph: handle zero-length feature mask in session messages (Jeff Layton) [1875787 1866018]
- [fs] ceph: fix endianness bug when handling MDS session feature bits (Jeff Layton) [1875787 1866018]
- [netdrv] net/mlx5e: Fix missing cleanup of ethtool steering during rep rx cleanup (Alaa Hleihel) [1857777 1856660]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.27.1.el8_2]" date="1602763200">- [powerpc] powerpc/pseries: Do not initiate shutdown when system is running on UPS (Diego Domingos) [1882243 1870477]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859471 1859472] {CVE-2020-14331}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.28.1.el8_2]" date="1602849600">- [net] Bluetooth: L2CAP: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888256 1888258] {CVE-2020-12351}
- [net] Bluetooth: A2MP: Fix not initializing all members (Gopal Tiwari) [1888906 1888807] {CVE-2020-12352}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-193.28.1.el8.centos" date="1603195200">- Apply debranding changes</changelog>
</package>
<package pkgid="185600aa9bb86b0f8e2765fcd4ef321ed16ee4b4198ac4bc0ae5914c4527f173" name="kernel-tools-libs" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="305.10.2.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.2.1.el8_4]" date="1620648000">- net/mlx5e: Allow to match on MPLS parameters only for MPLS over UDP (Alaa Hleihel) [1952061 1936742]
- net/mlx5e: Reject tc rules which redirect from a VF to itself (Alaa Hleihel) [1952065 1932839]
- net/mlx5: CT: Add support for matching on ct_state inv and rel flags (Alaa Hleihel) [1952062 1942681]
- KVM: VMX: Don't use vcpu-&gt;run-&gt;internal.ndata as an array index (Jon Maloy) [1954221 1954219]
- tools/power turbostat: Revert "[tools] tools/power turbostat: Enable accumulate RAPL display" (Prarit Bhargava) [1952987 1944699]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.3.1.el8_4]" date="1621252800">- Revert "uio: use request_threaded_irq instead" (Vitaly Kuznetsov) [1952952 1946644]
- drm/ast: Set format registers in primary plane's update (Lyude Paul) [1952900 1923857]
- net/sched: act_ct: clear post_ct if doing ct_clear (Marcelo Ricardo Leitner) [1956458 1941889]
- md/raid1: properly indicate failure when ending a failed write request (Nigel Croxon) [1955188 1954588]
- nitro_enclaves: Fix stale file descriptors on failed usercopy (Vitaly Kuznetsov) [1956379 1953717]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.4.1.el8_4]" date="1621944000">- vmxnet3: Set the default of vxlan overlay offload to disabled (Cathy Avery) [1960702 1941714]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.5.1.el8_4]" date="1622548800">- gfs2: report "already frozen/thawed" errors (Bob Peterson) [1961849 1932236]
- gfs2: move freeze glock outside the make_fs_rw and _ro functions (Bob Peterson) [1961849 1932236]
- gfs2: Add common helper for holding and releasing the freeze glock (Bob Peterson) [1961849 1932236]
- gfs2: in signal_our_withdraw wait for unfreeze of _this_ fs only (Bob Peterson) [1961849 1932236]
- gfs2: Don't freeze the file system during unmount (Bob Peterson) [1961849 1932236]
- gfs2: Fix regression in freeze_go_sync (Bob Peterson) [1961849 1932236]
- gfs2: The freeze glock should never be frozen (Bob Peterson) [1961849 1932236]
- gfs2: When freezing gfs2, use GL_EXACT and not GL_NOCACHE (Bob Peterson) [1961849 1932236]
- gfs2: read-only mounts should grab the sd_freeze_gl glock (Bob Peterson) [1961849 1932236]
- gfs2: freeze should work on read-only mounts (Bob Peterson) [1961849 1932236]
- gfs2: Abort gfs2_freeze if io error is seen (Bob Peterson) [1961849 1932236]
- CI: Disable result checking for realtime check (Veronika Kabatova)
- CI: Explicitly disable result checking for private CI (Veronika Kabatova)
- CI: Rename variable (Veronika Kabatova)
- CI: Update builder containers (Veronika Kabatova)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.6.1.el8_4]" date="1623067200">- openvswitch: fix stack OOB read while fragmenting IPv4 packets (Davide Caratti) [1963940 1924608]
- net/sched: sch_frag: fix stack OOB read while fragmenting IPv4 packets (Davide Caratti) [1963940 1924608]
- net/sched: act_ct: fix wild memory access when clearing fragments (Davide Caratti) [1963940 1924608]
- net: Treat __napi_schedule_irqoff() as __napi_schedule() on PREEMPT_RT (Ivan Vecera)
- redhat/configs: Add CONFIG_SYSTEM_REVOCATION_KEYS and CONFIG_SYSTEM_REVOCATION_LIST (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: add 'x509_revocation_list' to gitignore (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- integrity: Load mokx variables into the blacklist keyring (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Add ability to preload revocation certs (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Move load_system_certificate_list to a common function (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Add EFI_CERT_X509_GUID support for dbx entries (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- net/sched: cls_api: increase max_reclassify_loop (Davide Caratti) [1965148 1955136]
- dm writecache: fix performance degradation in ssd mode (Mike Snitzer) [1962241 1961859]
- scsi: fnic: Use scsi_host_busy_iter() to traverse commands (Ewan D. Milne) [1961705 1949250]
- scsi: fnic: Kill 'exclude_id' argument to fnic_cleanup_io() (Ewan D. Milne) [1961705 1949250]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.7.1.el8_4]" date="1623672000">- net: zero-initialize tc skb extension on allocation (Ivan Vecera) [1965457 1946986]
- net/sched: cls_flower: fix only mask bit check in the validate_ct_state (Ivan Vecera) [1965457 1946986]
- net: cls_api: Fix uninitialised struct field bo-&gt;unlocked_driver_cb (Ivan Vecera) [1965457 1946986]
- net/sched: act_api: fix miss set post_ct for ovs after do conntrack in act_ct (Ivan Vecera) [1965457 1946986]
- net/sched: cls_flower: validate ct_state for invalid and reply flags (Ivan Vecera) [1965457 1946986]
- flow_dissector: fix TTL and TOS dissection on IPv4 fragments (Paolo Abeni) [1963952 1950288]
- Revert "sctp: Fix SHUTDOWN CTSN Ack in the peer restart case" (Xin Long) [1965632 1953839]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [1965632 1953839]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [1965632 1953839]
- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962544 1962546] {CVE-2021-33034}
- x86/kvm: Unify kvm_pv_guest_cpu_reboot() with kvm_guest_cpu_offline() (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Disable all PV features on crash (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Disable kvmclock on all CPUs on shutdown (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Teardown PV features on boot CPU as well (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Fix pr_info() for async PF setup/teardown (Lenny Szubowicz) [1964930 1934273]
- net/sched: act_ct: Fix ct template allocation for zone 0 (Marcelo Ricardo Leitner) [1965150 1881824]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.8.1.el8_4]" date="1624363200">- iavf: amend removal of MODULE_VERSION (Stefan Assmann) [1969925 1955738]
- ixgbe: Amend commit acf03026ec5a to include a version string in module info. (Ken Cox) [1969922 1955759]
- i40e: amend removal of MODULE_VERSION (Stefan Assmann) [1969923 1955736]
- redhat/configs: Add CONFIG_PINCTRL_EMMITSBURG (David Arcari) [1963984 1959506]
- redhat/configs: Remove CONFIG_EMMITSBURG (David Arcari) [1963984 1959506]
- netlink: add tracepoint at NL_SET_ERR_MSG (Marcelo Ricardo Leitner) [1972938 1956983]
- Revert "[netdrv] net/intel: remove driver versions from Intel drivers" (Jonathan Toppins) [1969917 1955745]
- Amends commit ea6244cc248b to include a version string in module info. (Ken Cox) [1969915 1955726]
- Revert "[netdrv] net/broadcom: Clean broadcom code from driver versions" (Jonathan Toppins) [1969914 1955721]
- ena: revert removal of MODULE_VERSION from ena (Petr Oros) [1969913 1955712]
- fm10k: amend removal of MODULE_VERSION (Vladis Dronov) [1969910 1955730]
- net/sched: act_ct: Offload connections with commit action (Marcelo Ricardo Leitner) [1968679 1965817]
- netfilter: flowtable: Remove redundant hw refresh bit (Marcelo Ricardo Leitner) [1968679 1965817]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.9.1.el8_4]" date="1624881600">- ixgbevf: Amend commit acf03026ec5a to include a version in module info. (Ken Cox) [1969911 1955764]
- CI: Merge configuration (Veronika Kabatova)
- igc: amend removal of MODULE_VERSION (Corinna Vinschen) [1969921 1955755]
- igb: amend removal of MODULE_VERSION (Corinna Vinschen) [1969919 1955748]
- locking/qrwlock: Fix ordering in queued_write_lock_slowpath() (Waiman Long) [1964419 1950110]
- scsi: qedf: Do not put host in qedf_vport_create() unconditionally (Nilesh Javali) [1974968 1899384]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.10.1.el8_4]" date="1625659200">- igbvf: amend removal of MODULE_VERSION (Corinna Vinschen) [1969920 1955752]
- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971464 1971488] {CVE-2021-32399}
- scsi: ibmvfc: Free channel_setup_buf during device tear down (Steve Best) [1964697 1938102]
- i40e: Fix parameters in aq_get_phy_register() (Stefan Assmann) [1967099 1907852]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.10.2.el8_4]" date="1626091200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975181 1975182] {CVE-2021-33909}</changelog>
</package>
<package pkgid="eba960eb4a635ce46371af4a1376173862c66bc0e14f555b950f646f46dbae0b" name="kernel-tools-libs" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="348.20.1.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.12.1.el8_5]" date="1641988800">- tcp: don't free a FIN sk_buff in tcp_remove_empty_skb() (Guillaume Nault) [2021574 2016210]
- kernel.spec: Add support to use vmlinux.h (Jiri Olsa) [2031053 1989087]
- spec: Add vmlinux.h to kernel-devel package (Jiri Olsa) [2031053 1989087]
- x86/mce: Avoid infinite loop for copy from user recovery (Prarit Bhargava) [2008789 1999550]
- x86/mce: Rename kill_it to kill_current_task (Prarit Bhargava) [2008789 1999550]
- x86/mce: Recover from poison found while copying from user space (Prarit Bhargava) [2008789 1999550]
- x86/mce: Delay clearing IA32_MCG_STATUS to the end of do_machine_check() (Prarit Bhargava) [2008789 1999550]
- x86/mce: Send #MC singal from task work (Prarit Bhargava) [2008789 1999550]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-348.13.1.el8_5]" date="1642507200">- vfs: Out-of-bounds write of heap buffer in fs_context.c (Frantisek Hrbata) [2040585 2040586] {CVE-2022-0185}
- xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Bruno Meneguele) [2034864 2034865] {CVE-2021-4155}
- af_unix: fix garbage collect vs MSG_PEEK (Patrick Talbert) [2031974 2031975] {CVE-2021-0920}
- cgroup: verify that source is a string (Waiman Long) [2034608 2034609] {CVE-2021-4154}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-348.14.1.el8_5]" date="1643198400">- tcp: fix page frag corruption on page fault (Paolo Abeni) [2041529 1996074]
- net: fix sk_page_frag() recursion from memory reclaim (Paolo Abeni) [2041529 1996074]
- KVM: s390: index kvm-&gt;arch.idle_mask by vcpu_idx (Thomas Huth) [2040769 2026230]
- redhat: set LC_ALL=C before sorting config content (Frantisek Hrbata)</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.15.1.el8_5]" date="1643716800">- net/mlx5: DR, Use FW API when updating FW-owned flow table (Michal Schmidt) [2042663 2042651]
- KVM: x86: Wait for IPIs to be delivered when handling Hyper-V TLB flush hypercall (Vitaly Kuznetsov) [2043237 1868572]
- drm/mgag200: Select clock in PLL update functions (Bruno Meneguele) [2034949 1953926]
- drm/i915: Fix HAS_LSPCON macro for platforms between GEN9 and GEN10 (Bruno Meneguele) [2027335 2005586]
- crypto: qat - power up 4xxx device (Vladis Dronov) [2016437 1960307]
- RDMA/core: Fix a double free in add_port error flow (Kamal Heib) [2038724 2008555]
- powerpc/iommu: Report the correct most efficient DMA mask for PCI devices (Steve Best) [2018928 2007425]
- powerpc/dma: Fix dma_map_ops::get_required_mask (Steve Best) [2018928 2007425]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.16.1.el8_5]" date="1644321600">- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047601 2047602] {CVE-2022-22942}
- net: openvswitch: Fix ct_state nat flags for conns arriving from tc (Marcelo Ricardo Leitner) [2043548 2040334]
- net: openvswitch: Fix matching zone id for invalid conns arriving from tc (Marcelo Ricardo Leitner) [2043550 2040452]
- net/sched: flow_dissector: Fix matching on zone id for invalid conns (Marcelo Ricardo Leitner) [2043550 2040452]
- net/sched: Extend qdisc control block with tc control block (Marcelo Ricardo Leitner) [2043550 2040452]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.17.1.el8_5]" date="1644926400">- vfs: check dentry is still valid in get_link() (Ian Kent) [2052558 2014846]
- xfs: don't expose internal symlink metadata buffers to the vfs (Brian Foster) [2052558 2014846]
- CI: Use appropriate zstream builder (Veronika Kabatova)
- CI: Enable baseline realtime checks (Veronika Kabatova)
- CI: Rename pipelines to include release names (Veronika Kabatova)
- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052166 2052167] {CVE-2022-0492}
- ice: Remove boolean vlan_promisc flag from function (Jonathan Toppins) [2051951 2030400]
- ceph: put the requests/sessions when it fails to alloc memory (Jeffrey Layton) [2053725 2017796]
- ceph: fix off by one bugs in unsafe_request_wait() (Jeffrey Layton) [2053725 2017796]
- ceph: flush the mdlog before waiting on unsafe reqs (Jeffrey Layton) [2053725 2017796]
- ceph: flush mdlog before umounting (Jeffrey Layton) [2053725 2017796]
- ceph: make iterate_sessions a global symbol (Jeffrey Layton) [2053725 2017796]
- ceph: make ceph_create_session_msg a global symbol (Jeffrey Layton) [2053725 2017796]
- xfs: check sb_meta_uuid for dabuf buffer recovery (Bill O'Donnell) [2049292 2020764]
- drm/i915: Flush TLBs before releasing backing store (Patrick Talbert) [2044328 2044329] {CVE-2022-0330}
- hugetlb: fix hugetlb cgroup refcounting during vma split (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: fix imbalanced css_get and css_put pair for shared mappings (Waiman Long) [2039015 2032811]
- mm/hugetlb: change hugetlb_reserve_pages() to type bool (Waiman Long) [2039015 2032811]
- hugetlb: fix an error code in hugetlb_reserve_pages() (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: fix offline of hugetlb cgroup with reservations (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: fix reservation accounting (Waiman Long) [2039015 2032811]
- mm/hugetlb: narrow the hugetlb_lock protection area during preparing huge page (Waiman Long) [2039015 2032811]
- mm/hugetlb: a page from buddy is not on any list (Waiman Long) [2039015 2032811]
- mm/hugetlb: not necessary to coalesce regions recursively (Waiman Long) [2039015 2032811]
- selftests/vm/write_to_hugetlbfs.c: fix unused variable warning (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add hugetlb_cgroup reservation tests (Waiman Long) [2039015 2032811]
- hugetlb: support file_region coalescing again (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: support noreserve mappings (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add accounting for shared mappings (Waiman Long) [2039015 2032811]
- hugetlb: disable region_add file_region coalescing (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add reservation accounting for private mappings (Waiman Long) [2039015 2032811]
- mm/hugetlb_cgroup: fix hugetlb_cgroup migration (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add interface for charge/uncharge hugetlb reservations (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add hugetlb_cgroup reservation counter (Waiman Long) [2039015 2032811]
- hugetlb: remove duplicated code (Waiman Long) [2039015 2032811]
- hugetlb: region_chg provides only cache entry (Waiman Long) [2039015 2032811]
- hugetlbfs: always use address space in inode for resv_map pointer (Waiman Long) [2039015 2032811]
- hugetlbfs: fix potential over/underflow setting node specific nr_hugepages (Waiman Long) [2039015 2032811]
- hugetlb: allow to free gigantic pages regardless of the configuration (Waiman Long) [2039015 2032811]
- powerpc/pseries: Fix update of LPAR security flavor after LPM (Steve Best) [2027448 1997294]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.18.1.el8_5]" date="1645531200">- selftests: kvm: Check whether SIDA memop fails for normal guests (Thomas Huth) [2050806 2050807] {CVE-2022-0516}
- KVM: s390: Return error on SIDA memop on normal guest (Thomas Huth) [2050806 2050807] {CVE-2022-0516}
- iommu/amd: Remove iommu_init_ga() (Jerry Snitselaar) [2030854 1998265]
- iommu/amd: Relocate GAMSup check to early_enable_iommus (Jerry Snitselaar) [2030854 1998265]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.19.1.el8_5]" date="1646049600">- tipc: improve size validations for received domain records (Xin Long) [2048970 2048971] {CVE-2022-0435}
- smb3: do not error on fsync when readonly (Ronnie Sahlberg) [2055824 2037811]
- security: implement sctp_assoc_established hook in selinux (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- security: add sctp_assoc_established hook (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- security: call security_sctp_assoc_request in sctp_sf_do_5_1D_ce (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- security: pass asoc to sctp_assoc_request and sctp_sk_clone (Bruno Meneguele) [2054112 2054117 2015525 2048251]
- net: sctp: Fix some typos (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- RDMA/bnxt_re: Fix stats counters (Selvin Xavier) [2049684 2001893]
- net: check skb sec_path when re-initializing slow_gro in gro_list_prepare (Xin Long) [2047427 2030476]
- cpufreq: intel_pstate: Add Icelake servers support in no-HWP mode (David Arcari) [2036888 2003695]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.20.1.el8_5]" date="1646740800">- lib/iov_iter: initialize "flags" in new pipe_buffer (Jan Stancek) [2060874 2060875] {CVE-2022-0847}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-348.20.1.el8.centos" date="1646913600">- Apply debranding changes</changelog>
</package>
<package pkgid="14941e680b46a592cd268bf1afbee75b4213e5046eb2972884bc006755644121" name="kernel-tools-libs-devel" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="d5b6a694cc3cd6cde6d1fe89fe8765daf854cd02852f50dafbaf83cacea882a7" name="kernel-tools-libs-devel" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="193.28.1.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.20.1.el8_2]" date="1599134400">- [infiniband] IB/rdmavt: Fix RQ counting issues causing use of an invalid RWQE (Kamal Heib) [1872771 1850314]
- [block] blk-mq: Rerun dispatching in the case of budget contention (Ming Lei) [1869779 1824037]
- [block] blk-mq: Add blk_mq_delay_run_hw_queues() API call (Ming Lei) [1869779 1824037]
- [block] blk-mq: In blk_mq_dispatch_rq_list() "no budget" is a reason to kick (Ming Lei) [1869779 1824037]
- [block] blk-mq: Put driver tag in blk_mq_dispatch_rq_list() when no budget (Ming Lei) [1869779 1824037]
- [md] dm mpath: use double checked locking in fast path (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rename current_pgpath to pgpath in multipath_prepare_ioctl (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rework __map_bio() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: factor out multipath_queue_bio (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: push locking down to must_push_back_rq() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: take m-&gt;lock spinlock when testing QUEUE_IF_NO_PATH (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: changes from initial m-&gt;flags locking audit (Mike Snitzer) [1869386 1848651]
- [md] dm rq: don't call blk_mq_queue_stopped() in dm_stop_queue() (Mike Snitzer) [1869386 1848651]
- [md] dm: do not use waitqueue for request-based DM (Mike Snitzer) [1869386 1848651]
- [block] blk-mq: consider non-idle request as "inflight" in blk_mq_rq_inflight() (Mike Snitzer) [1869386 1848651]
- [kernel] sched/deadline: Initialize -&gt;dl_boosted (Phil Auld) [1867612 1854179]
- [kernel] sched/core: Fix PI boosting between RT and DEADLINE tasks (Phil Auld) [1867612 1854179]
- [net] net/smc: tolerate future SMCD versions (Philipp Rudo) [1866390 1854992]
- [net] openvswitch: fixes potential deadlock in dp cleanup code (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: reorder masks array based on usage (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: take into account de-fragmentation/gso_size in execute_check_pkt_len (Lorenzo Bianconi) [1860169 1851888]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.21.1.el8_2]" date="1599739200">- [scsi] scsi: ibmvfc: Fix NULL return compiler warning (Steve Best) [1866371 1810653]
- [scsi] scsi: ibmvfc: Avoid loss of all paths during SVC node reboot (Steve Best) [1866371 1810653]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.22.1.el8_2]" date="1600257600">- [crypto] pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1877530 1862072]
- [crypto] Revert "pefile: Tolerate other pefile signatures after first" (Bruno Meneguele)
- [infiniband] IB/hfi1: Fix another case where pq is left on waitlist (Kamal Heib) [1872766 1859209]
- [infiniband] IB/hfi1: Ensure pq is not left on waitlist (Kamal Heib) [1872766 1859209]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.23.1.el8_2]" date="1600344000">- [net] packet: fix overflow in tpacket_rcv (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}
- [net] packet: make tp_drops atomic (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.24.1.el8_2]" date="1600862400">- [kernel] timers: Remove must_forward_clk (Phil Auld) [1877417 1833096]
- [kernel] timers: Spare timer softirq until next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Expand clk forward logic beyond nohz (Phil Auld) [1877417 1833096]
- [kernel] timers: Reuse next expiry cache after nohz exit (Phil Auld) [1877417 1833096]
- [kernel] timers: Always keep track of next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Optimize _next_timer_interrupt() level iteration (Phil Auld) [1877417 1833096]
- [kernel] timers: Add comments about calc_index() ceiling work (Phil Auld) [1877417 1833096]
- [kernel] timers: Move trigger_dyntick_cpu() to enqueue_timer() (Phil Auld) [1877417 1833096]
- [kernel] timers: Use only bucket expiry for base-&gt;next_expiry value (Phil Auld) [1877417 1833096]
- [kernel] timers: Preserve higher bits of expiration on index calculation (Phil Auld) [1877417 1833096]
- [kernel] timer: Fix wheel index calculation on last level (Phil Auld) [1877417 1833096]
- [kernel] timer: Prevent base-&gt;clk from moving backward (Phil Auld) [1877417 1833096]
- [kernel] timer: Read jiffies once when forwarding base clk (Phil Auld) [1877417 1833096]
- [infiniband] RDMA/umem: Fix ib_umem_find_best_pgsz() (Kamal Heib) [1872424 1856158]
- [net] net: accept an empty mask in /sys/class/net/*/queues/rx-*/rps_cpus (Nitesh Narayan Lal) [1870181 1868433]
- [net] net: Restrict receive packets queuing to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [pci] PCI: Restrict probe functions to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [lib] lib: Restrict cpumask_local_spread to houskeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [s390] s390/pci: Fix unexpected write combine on resource (Philipp Rudo) [1869276 1827311]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.25.1.el8_2]" date="1601553600">- [net] netfilter: conntrack: proc: rename stat column (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: add clash resolution stat counter (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: remove ignore stats (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not increment two error counters at same time (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not auto-delete clash entries on reply (Florian Westphal) [1882095 1875681]
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1881085 1875316] {CVE-2020-14385}
- [kernel] time/tick-broadcast: Fix tick_broadcast_offline() lockdep complaint (Alexey Klimov) [1880081 1877380]
- [net] atomics/treewide: Rename __atomic_add_unless() =&gt; atomic_fetch_add_unless() (Yauheni Kaliuta) [1880081 1813370]
- [kernel] timers: Lower base clock forwarding threshold (Phil Auld) [1877417 1833096]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.26.1.el8_2]" date="1602158400">- [firmware] efi: don't reserve MOK config table memory region (Kairui Song) [1879988 1878584]
- [security] integrity: Load certs from the EFI MOK config table (Lenny Szubowicz) [1877528 1868306]
- [security] integrity: Move import of MokListRT certs to a separate routine (Lenny Szubowicz) [1877528 1868306]
- [firmware] efi: Support for MOK variable config table (Lenny Szubowicz) [1877528 1868306]
- [security] efi: Only print errors about failing to get certs if EFI vars are found (Lenny Szubowicz) [1877528 1804969]
- [fs] ceph: fix inode number handling on arches with 32-bit ino_t (Jeff Layton) [1875787 1866018]
- [fs] ceph: handle zero-length feature mask in session messages (Jeff Layton) [1875787 1866018]
- [fs] ceph: fix endianness bug when handling MDS session feature bits (Jeff Layton) [1875787 1866018]
- [netdrv] net/mlx5e: Fix missing cleanup of ethtool steering during rep rx cleanup (Alaa Hleihel) [1857777 1856660]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.27.1.el8_2]" date="1602763200">- [powerpc] powerpc/pseries: Do not initiate shutdown when system is running on UPS (Diego Domingos) [1882243 1870477]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859471 1859472] {CVE-2020-14331}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.28.1.el8_2]" date="1602849600">- [net] Bluetooth: L2CAP: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888256 1888258] {CVE-2020-12351}
- [net] Bluetooth: A2MP: Fix not initializing all members (Gopal Tiwari) [1888906 1888807] {CVE-2020-12352}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-193.28.1.el8.centos" date="1603195200">- Apply debranding changes</changelog>
</package>
<package pkgid="9254b9a39f8671c13b062bc2747a5923ab12d9014ec1f31a23eba4276c67a466" name="kernel-tools-libs-devel" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="305.10.2.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.2.1.el8_4]" date="1620648000">- net/mlx5e: Allow to match on MPLS parameters only for MPLS over UDP (Alaa Hleihel) [1952061 1936742]
- net/mlx5e: Reject tc rules which redirect from a VF to itself (Alaa Hleihel) [1952065 1932839]
- net/mlx5: CT: Add support for matching on ct_state inv and rel flags (Alaa Hleihel) [1952062 1942681]
- KVM: VMX: Don't use vcpu-&gt;run-&gt;internal.ndata as an array index (Jon Maloy) [1954221 1954219]
- tools/power turbostat: Revert "[tools] tools/power turbostat: Enable accumulate RAPL display" (Prarit Bhargava) [1952987 1944699]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.3.1.el8_4]" date="1621252800">- Revert "uio: use request_threaded_irq instead" (Vitaly Kuznetsov) [1952952 1946644]
- drm/ast: Set format registers in primary plane's update (Lyude Paul) [1952900 1923857]
- net/sched: act_ct: clear post_ct if doing ct_clear (Marcelo Ricardo Leitner) [1956458 1941889]
- md/raid1: properly indicate failure when ending a failed write request (Nigel Croxon) [1955188 1954588]
- nitro_enclaves: Fix stale file descriptors on failed usercopy (Vitaly Kuznetsov) [1956379 1953717]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.4.1.el8_4]" date="1621944000">- vmxnet3: Set the default of vxlan overlay offload to disabled (Cathy Avery) [1960702 1941714]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.5.1.el8_4]" date="1622548800">- gfs2: report "already frozen/thawed" errors (Bob Peterson) [1961849 1932236]
- gfs2: move freeze glock outside the make_fs_rw and _ro functions (Bob Peterson) [1961849 1932236]
- gfs2: Add common helper for holding and releasing the freeze glock (Bob Peterson) [1961849 1932236]
- gfs2: in signal_our_withdraw wait for unfreeze of _this_ fs only (Bob Peterson) [1961849 1932236]
- gfs2: Don't freeze the file system during unmount (Bob Peterson) [1961849 1932236]
- gfs2: Fix regression in freeze_go_sync (Bob Peterson) [1961849 1932236]
- gfs2: The freeze glock should never be frozen (Bob Peterson) [1961849 1932236]
- gfs2: When freezing gfs2, use GL_EXACT and not GL_NOCACHE (Bob Peterson) [1961849 1932236]
- gfs2: read-only mounts should grab the sd_freeze_gl glock (Bob Peterson) [1961849 1932236]
- gfs2: freeze should work on read-only mounts (Bob Peterson) [1961849 1932236]
- gfs2: Abort gfs2_freeze if io error is seen (Bob Peterson) [1961849 1932236]
- CI: Disable result checking for realtime check (Veronika Kabatova)
- CI: Explicitly disable result checking for private CI (Veronika Kabatova)
- CI: Rename variable (Veronika Kabatova)
- CI: Update builder containers (Veronika Kabatova)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.6.1.el8_4]" date="1623067200">- openvswitch: fix stack OOB read while fragmenting IPv4 packets (Davide Caratti) [1963940 1924608]
- net/sched: sch_frag: fix stack OOB read while fragmenting IPv4 packets (Davide Caratti) [1963940 1924608]
- net/sched: act_ct: fix wild memory access when clearing fragments (Davide Caratti) [1963940 1924608]
- net: Treat __napi_schedule_irqoff() as __napi_schedule() on PREEMPT_RT (Ivan Vecera)
- redhat/configs: Add CONFIG_SYSTEM_REVOCATION_KEYS and CONFIG_SYSTEM_REVOCATION_LIST (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: add 'x509_revocation_list' to gitignore (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- integrity: Load mokx variables into the blacklist keyring (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Add ability to preload revocation certs (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Move load_system_certificate_list to a common function (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Add EFI_CERT_X509_GUID support for dbx entries (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- net/sched: cls_api: increase max_reclassify_loop (Davide Caratti) [1965148 1955136]
- dm writecache: fix performance degradation in ssd mode (Mike Snitzer) [1962241 1961859]
- scsi: fnic: Use scsi_host_busy_iter() to traverse commands (Ewan D. Milne) [1961705 1949250]
- scsi: fnic: Kill 'exclude_id' argument to fnic_cleanup_io() (Ewan D. Milne) [1961705 1949250]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.7.1.el8_4]" date="1623672000">- net: zero-initialize tc skb extension on allocation (Ivan Vecera) [1965457 1946986]
- net/sched: cls_flower: fix only mask bit check in the validate_ct_state (Ivan Vecera) [1965457 1946986]
- net: cls_api: Fix uninitialised struct field bo-&gt;unlocked_driver_cb (Ivan Vecera) [1965457 1946986]
- net/sched: act_api: fix miss set post_ct for ovs after do conntrack in act_ct (Ivan Vecera) [1965457 1946986]
- net/sched: cls_flower: validate ct_state for invalid and reply flags (Ivan Vecera) [1965457 1946986]
- flow_dissector: fix TTL and TOS dissection on IPv4 fragments (Paolo Abeni) [1963952 1950288]
- Revert "sctp: Fix SHUTDOWN CTSN Ack in the peer restart case" (Xin Long) [1965632 1953839]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [1965632 1953839]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [1965632 1953839]
- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962544 1962546] {CVE-2021-33034}
- x86/kvm: Unify kvm_pv_guest_cpu_reboot() with kvm_guest_cpu_offline() (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Disable all PV features on crash (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Disable kvmclock on all CPUs on shutdown (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Teardown PV features on boot CPU as well (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Fix pr_info() for async PF setup/teardown (Lenny Szubowicz) [1964930 1934273]
- net/sched: act_ct: Fix ct template allocation for zone 0 (Marcelo Ricardo Leitner) [1965150 1881824]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.8.1.el8_4]" date="1624363200">- iavf: amend removal of MODULE_VERSION (Stefan Assmann) [1969925 1955738]
- ixgbe: Amend commit acf03026ec5a to include a version string in module info. (Ken Cox) [1969922 1955759]
- i40e: amend removal of MODULE_VERSION (Stefan Assmann) [1969923 1955736]
- redhat/configs: Add CONFIG_PINCTRL_EMMITSBURG (David Arcari) [1963984 1959506]
- redhat/configs: Remove CONFIG_EMMITSBURG (David Arcari) [1963984 1959506]
- netlink: add tracepoint at NL_SET_ERR_MSG (Marcelo Ricardo Leitner) [1972938 1956983]
- Revert "[netdrv] net/intel: remove driver versions from Intel drivers" (Jonathan Toppins) [1969917 1955745]
- Amends commit ea6244cc248b to include a version string in module info. (Ken Cox) [1969915 1955726]
- Revert "[netdrv] net/broadcom: Clean broadcom code from driver versions" (Jonathan Toppins) [1969914 1955721]
- ena: revert removal of MODULE_VERSION from ena (Petr Oros) [1969913 1955712]
- fm10k: amend removal of MODULE_VERSION (Vladis Dronov) [1969910 1955730]
- net/sched: act_ct: Offload connections with commit action (Marcelo Ricardo Leitner) [1968679 1965817]
- netfilter: flowtable: Remove redundant hw refresh bit (Marcelo Ricardo Leitner) [1968679 1965817]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.9.1.el8_4]" date="1624881600">- ixgbevf: Amend commit acf03026ec5a to include a version in module info. (Ken Cox) [1969911 1955764]
- CI: Merge configuration (Veronika Kabatova)
- igc: amend removal of MODULE_VERSION (Corinna Vinschen) [1969921 1955755]
- igb: amend removal of MODULE_VERSION (Corinna Vinschen) [1969919 1955748]
- locking/qrwlock: Fix ordering in queued_write_lock_slowpath() (Waiman Long) [1964419 1950110]
- scsi: qedf: Do not put host in qedf_vport_create() unconditionally (Nilesh Javali) [1974968 1899384]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.10.1.el8_4]" date="1625659200">- igbvf: amend removal of MODULE_VERSION (Corinna Vinschen) [1969920 1955752]
- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971464 1971488] {CVE-2021-32399}
- scsi: ibmvfc: Free channel_setup_buf during device tear down (Steve Best) [1964697 1938102]
- i40e: Fix parameters in aq_get_phy_register() (Stefan Assmann) [1967099 1907852]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.10.2.el8_4]" date="1626091200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975181 1975182] {CVE-2021-33909}</changelog>
</package>
<package pkgid="c4a5258ca601395d1df201febd5215acb1a454be869be0c2103aea1a283bb9b8" name="kernel-tools-libs-devel" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="348.20.1.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.12.1.el8_5]" date="1641988800">- tcp: don't free a FIN sk_buff in tcp_remove_empty_skb() (Guillaume Nault) [2021574 2016210]
- kernel.spec: Add support to use vmlinux.h (Jiri Olsa) [2031053 1989087]
- spec: Add vmlinux.h to kernel-devel package (Jiri Olsa) [2031053 1989087]
- x86/mce: Avoid infinite loop for copy from user recovery (Prarit Bhargava) [2008789 1999550]
- x86/mce: Rename kill_it to kill_current_task (Prarit Bhargava) [2008789 1999550]
- x86/mce: Recover from poison found while copying from user space (Prarit Bhargava) [2008789 1999550]
- x86/mce: Delay clearing IA32_MCG_STATUS to the end of do_machine_check() (Prarit Bhargava) [2008789 1999550]
- x86/mce: Send #MC singal from task work (Prarit Bhargava) [2008789 1999550]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-348.13.1.el8_5]" date="1642507200">- vfs: Out-of-bounds write of heap buffer in fs_context.c (Frantisek Hrbata) [2040585 2040586] {CVE-2022-0185}
- xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Bruno Meneguele) [2034864 2034865] {CVE-2021-4155}
- af_unix: fix garbage collect vs MSG_PEEK (Patrick Talbert) [2031974 2031975] {CVE-2021-0920}
- cgroup: verify that source is a string (Waiman Long) [2034608 2034609] {CVE-2021-4154}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-348.14.1.el8_5]" date="1643198400">- tcp: fix page frag corruption on page fault (Paolo Abeni) [2041529 1996074]
- net: fix sk_page_frag() recursion from memory reclaim (Paolo Abeni) [2041529 1996074]
- KVM: s390: index kvm-&gt;arch.idle_mask by vcpu_idx (Thomas Huth) [2040769 2026230]
- redhat: set LC_ALL=C before sorting config content (Frantisek Hrbata)</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.15.1.el8_5]" date="1643716800">- net/mlx5: DR, Use FW API when updating FW-owned flow table (Michal Schmidt) [2042663 2042651]
- KVM: x86: Wait for IPIs to be delivered when handling Hyper-V TLB flush hypercall (Vitaly Kuznetsov) [2043237 1868572]
- drm/mgag200: Select clock in PLL update functions (Bruno Meneguele) [2034949 1953926]
- drm/i915: Fix HAS_LSPCON macro for platforms between GEN9 and GEN10 (Bruno Meneguele) [2027335 2005586]
- crypto: qat - power up 4xxx device (Vladis Dronov) [2016437 1960307]
- RDMA/core: Fix a double free in add_port error flow (Kamal Heib) [2038724 2008555]
- powerpc/iommu: Report the correct most efficient DMA mask for PCI devices (Steve Best) [2018928 2007425]
- powerpc/dma: Fix dma_map_ops::get_required_mask (Steve Best) [2018928 2007425]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.16.1.el8_5]" date="1644321600">- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047601 2047602] {CVE-2022-22942}
- net: openvswitch: Fix ct_state nat flags for conns arriving from tc (Marcelo Ricardo Leitner) [2043548 2040334]
- net: openvswitch: Fix matching zone id for invalid conns arriving from tc (Marcelo Ricardo Leitner) [2043550 2040452]
- net/sched: flow_dissector: Fix matching on zone id for invalid conns (Marcelo Ricardo Leitner) [2043550 2040452]
- net/sched: Extend qdisc control block with tc control block (Marcelo Ricardo Leitner) [2043550 2040452]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.17.1.el8_5]" date="1644926400">- vfs: check dentry is still valid in get_link() (Ian Kent) [2052558 2014846]
- xfs: don't expose internal symlink metadata buffers to the vfs (Brian Foster) [2052558 2014846]
- CI: Use appropriate zstream builder (Veronika Kabatova)
- CI: Enable baseline realtime checks (Veronika Kabatova)
- CI: Rename pipelines to include release names (Veronika Kabatova)
- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052166 2052167] {CVE-2022-0492}
- ice: Remove boolean vlan_promisc flag from function (Jonathan Toppins) [2051951 2030400]
- ceph: put the requests/sessions when it fails to alloc memory (Jeffrey Layton) [2053725 2017796]
- ceph: fix off by one bugs in unsafe_request_wait() (Jeffrey Layton) [2053725 2017796]
- ceph: flush the mdlog before waiting on unsafe reqs (Jeffrey Layton) [2053725 2017796]
- ceph: flush mdlog before umounting (Jeffrey Layton) [2053725 2017796]
- ceph: make iterate_sessions a global symbol (Jeffrey Layton) [2053725 2017796]
- ceph: make ceph_create_session_msg a global symbol (Jeffrey Layton) [2053725 2017796]
- xfs: check sb_meta_uuid for dabuf buffer recovery (Bill O'Donnell) [2049292 2020764]
- drm/i915: Flush TLBs before releasing backing store (Patrick Talbert) [2044328 2044329] {CVE-2022-0330}
- hugetlb: fix hugetlb cgroup refcounting during vma split (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: fix imbalanced css_get and css_put pair for shared mappings (Waiman Long) [2039015 2032811]
- mm/hugetlb: change hugetlb_reserve_pages() to type bool (Waiman Long) [2039015 2032811]
- hugetlb: fix an error code in hugetlb_reserve_pages() (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: fix offline of hugetlb cgroup with reservations (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: fix reservation accounting (Waiman Long) [2039015 2032811]
- mm/hugetlb: narrow the hugetlb_lock protection area during preparing huge page (Waiman Long) [2039015 2032811]
- mm/hugetlb: a page from buddy is not on any list (Waiman Long) [2039015 2032811]
- mm/hugetlb: not necessary to coalesce regions recursively (Waiman Long) [2039015 2032811]
- selftests/vm/write_to_hugetlbfs.c: fix unused variable warning (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add hugetlb_cgroup reservation tests (Waiman Long) [2039015 2032811]
- hugetlb: support file_region coalescing again (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: support noreserve mappings (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add accounting for shared mappings (Waiman Long) [2039015 2032811]
- hugetlb: disable region_add file_region coalescing (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add reservation accounting for private mappings (Waiman Long) [2039015 2032811]
- mm/hugetlb_cgroup: fix hugetlb_cgroup migration (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add interface for charge/uncharge hugetlb reservations (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add hugetlb_cgroup reservation counter (Waiman Long) [2039015 2032811]
- hugetlb: remove duplicated code (Waiman Long) [2039015 2032811]
- hugetlb: region_chg provides only cache entry (Waiman Long) [2039015 2032811]
- hugetlbfs: always use address space in inode for resv_map pointer (Waiman Long) [2039015 2032811]
- hugetlbfs: fix potential over/underflow setting node specific nr_hugepages (Waiman Long) [2039015 2032811]
- hugetlb: allow to free gigantic pages regardless of the configuration (Waiman Long) [2039015 2032811]
- powerpc/pseries: Fix update of LPAR security flavor after LPM (Steve Best) [2027448 1997294]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.18.1.el8_5]" date="1645531200">- selftests: kvm: Check whether SIDA memop fails for normal guests (Thomas Huth) [2050806 2050807] {CVE-2022-0516}
- KVM: s390: Return error on SIDA memop on normal guest (Thomas Huth) [2050806 2050807] {CVE-2022-0516}
- iommu/amd: Remove iommu_init_ga() (Jerry Snitselaar) [2030854 1998265]
- iommu/amd: Relocate GAMSup check to early_enable_iommus (Jerry Snitselaar) [2030854 1998265]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.19.1.el8_5]" date="1646049600">- tipc: improve size validations for received domain records (Xin Long) [2048970 2048971] {CVE-2022-0435}
- smb3: do not error on fsync when readonly (Ronnie Sahlberg) [2055824 2037811]
- security: implement sctp_assoc_established hook in selinux (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- security: add sctp_assoc_established hook (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- security: call security_sctp_assoc_request in sctp_sf_do_5_1D_ce (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- security: pass asoc to sctp_assoc_request and sctp_sk_clone (Bruno Meneguele) [2054112 2054117 2015525 2048251]
- net: sctp: Fix some typos (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- RDMA/bnxt_re: Fix stats counters (Selvin Xavier) [2049684 2001893]
- net: check skb sec_path when re-initializing slow_gro in gro_list_prepare (Xin Long) [2047427 2030476]
- cpufreq: intel_pstate: Add Icelake servers support in no-HWP mode (David Arcari) [2036888 2003695]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.20.1.el8_5]" date="1646740800">- lib/iov_iter: initialize "flags" in new pipe_buffer (Jan Stancek) [2060874 2060875] {CVE-2022-0847}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-348.20.1.el8.centos" date="1646913600">- Apply debranding changes</changelog>
</package>
<package pkgid="be0eda4f2dd367313e77282ed74b536f404730938cdd6bee49aba2b68f0ff54c" name="libbabeltrace" arch="x86_64">
  <version epoch="0" ver="1.2.4" rel="3.el7"/>
  <changelog author="Yannick Brosseau &lt;yannick.brosseau@gmail.com&gt; - 1.1.1-3" date="1375704000">- Remove reference to versionned docdir (#992011)</changelog>
  <changelog author="Suchakra Sharma &lt;suchakra@fedoraproject.org&gt; - 1.2.0-1" date="1393675200">- New upstream release
- Popt patch for babeltrace.pc.in removed. Its fixed in Fedora now
- Add new file (babeltrace-ctf.pc)</changelog>
  <changelog author="Yannick Brosseau &lt;yannick.brosseau@gmail.com&gt; - 1.2.1-1" date="1395921600">- New upstream release</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.2.1-2" date="1402142400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.2.1-3" date="1408104000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.2.1-4" date="1434542400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; 1.2.1-5" date="1437307200">- Fix FTBFS, use %license</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; 1.2.4.1" date="1437307201">- Update to 1.2.4</changelog>
  <changelog author="Michael Jeanson &lt;mjeanson@gmail.com&gt; - 1.2.4-2" date="1438084800">- Added python3 bindings module</changelog>
  <changelog author="Ken Dreyer &lt;kdreyer@redhat.com&gt; - 1.2.4-3" date="1438862400">- Add with_python3 macro to support EL7 (rhbz#1235466)
- Define _pkgdocdir to support EL7 (rhbz#1235466)</changelog>
</package>
<package pkgid="1394fec0a4b08c61a9eafca04e4b9bf704cd95e2e8409091fe648624983aac62" name="libbabeltrace-devel" arch="x86_64">
  <version epoch="0" ver="1.2.4" rel="3.el7"/>
  <changelog author="Yannick Brosseau &lt;yannick.brosseau@gmail.com&gt; - 1.1.1-3" date="1375704000">- Remove reference to versionned docdir (#992011)</changelog>
  <changelog author="Suchakra Sharma &lt;suchakra@fedoraproject.org&gt; - 1.2.0-1" date="1393675200">- New upstream release
- Popt patch for babeltrace.pc.in removed. Its fixed in Fedora now
- Add new file (babeltrace-ctf.pc)</changelog>
  <changelog author="Yannick Brosseau &lt;yannick.brosseau@gmail.com&gt; - 1.2.1-1" date="1395921600">- New upstream release</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.2.1-2" date="1402142400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.2.1-3" date="1408104000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.2.1-4" date="1434542400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; 1.2.1-5" date="1437307200">- Fix FTBFS, use %license</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; 1.2.4.1" date="1437307201">- Update to 1.2.4</changelog>
  <changelog author="Michael Jeanson &lt;mjeanson@gmail.com&gt; - 1.2.4-2" date="1438084800">- Added python3 bindings module</changelog>
  <changelog author="Ken Dreyer &lt;kdreyer@redhat.com&gt; - 1.2.4-3" date="1438862400">- Add with_python3 macro to support EL7 (rhbz#1235466)
- Define _pkgdocdir to support EL7 (rhbz#1235466)</changelog>
</package>
<package pkgid="37478c40eacb596c5fe89cc00ae5e57e3cef874a159d9c029f64a4748e5db289" name="libbpf" arch="src">
  <version epoch="0" ver="0.0.4" rel="5.el7"/>
  <changelog author="Jiri Olsa &lt;jolsa@redhat.com&gt; - 0.0.2-1" date="1572696000">- initial package [1759154]</changelog>
  <changelog author="Jiri Olsa &lt;jolsa@redhat.com&gt; - 0.0.4-1" date="1572696001">- version 0.0.4 [1759154]</changelog>
  <changelog author="Jiri Olsa &lt;jolsa@redhat.com&gt; - 0.0.4-2" date="1575979200">- new build for gating [1759154]</changelog>
  <changelog author="Jiri Olsa &lt;jolsa@redhat.com&gt; - 0.0.4-3" date="1576411200">- new kernel version [1759154]</changelog>
  <changelog author="Jiri Olsa &lt;jolsa@redhat.com&gt; - 0.0.4-4" date="1578571200">- missing libbpf.pc file [1759154]</changelog>
  <changelog author="Jiri Olsa &lt;jolsa@redhat.com&gt; - 0.0.4-5" date="1583323200">- new kernel version [1809913]</changelog>
</package>
<package pkgid="cfbd8c1358aae805f3782e2e0d77732b82fd0cb1e6c4e29e7c2fc23e6364f48a" name="libbpf" arch="x86_64">
  <version epoch="0" ver="0.0.4" rel="5.el7"/>
  <changelog author="Jiri Olsa &lt;jolsa@redhat.com&gt; - 0.0.2-1" date="1572696000">- initial package [1759154]</changelog>
  <changelog author="Jiri Olsa &lt;jolsa@redhat.com&gt; - 0.0.4-1" date="1572696001">- version 0.0.4 [1759154]</changelog>
  <changelog author="Jiri Olsa &lt;jolsa@redhat.com&gt; - 0.0.4-2" date="1575979200">- new build for gating [1759154]</changelog>
  <changelog author="Jiri Olsa &lt;jolsa@redhat.com&gt; - 0.0.4-3" date="1576411200">- new kernel version [1759154]</changelog>
  <changelog author="Jiri Olsa &lt;jolsa@redhat.com&gt; - 0.0.4-4" date="1578571200">- missing libbpf.pc file [1759154]</changelog>
  <changelog author="Jiri Olsa &lt;jolsa@redhat.com&gt; - 0.0.4-5" date="1583323200">- new kernel version [1809913]</changelog>
</package>
<package pkgid="6f626ab96505600808f1903385823bbb7b0f296eb7ba2630dfe08e5adfd209a3" name="libbpf-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.0.4" rel="5.el7"/>
  <changelog author="Jiri Olsa &lt;jolsa@redhat.com&gt; - 0.0.2-1" date="1572696000">- initial package [1759154]</changelog>
  <changelog author="Jiri Olsa &lt;jolsa@redhat.com&gt; - 0.0.4-1" date="1572696001">- version 0.0.4 [1759154]</changelog>
  <changelog author="Jiri Olsa &lt;jolsa@redhat.com&gt; - 0.0.4-2" date="1575979200">- new build for gating [1759154]</changelog>
  <changelog author="Jiri Olsa &lt;jolsa@redhat.com&gt; - 0.0.4-3" date="1576411200">- new kernel version [1759154]</changelog>
  <changelog author="Jiri Olsa &lt;jolsa@redhat.com&gt; - 0.0.4-4" date="1578571200">- missing libbpf.pc file [1759154]</changelog>
  <changelog author="Jiri Olsa &lt;jolsa@redhat.com&gt; - 0.0.4-5" date="1583323200">- new kernel version [1809913]</changelog>
</package>
<package pkgid="674ae84e9bd269ba727e77d17898c7a80c93128baedf22c13188fa3e5323548c" name="libbpf-devel" arch="x86_64">
  <version epoch="0" ver="0.0.4" rel="5.el7"/>
  <changelog author="Jiri Olsa &lt;jolsa@redhat.com&gt; - 0.0.2-1" date="1572696000">- initial package [1759154]</changelog>
  <changelog author="Jiri Olsa &lt;jolsa@redhat.com&gt; - 0.0.4-1" date="1572696001">- version 0.0.4 [1759154]</changelog>
  <changelog author="Jiri Olsa &lt;jolsa@redhat.com&gt; - 0.0.4-2" date="1575979200">- new build for gating [1759154]</changelog>
  <changelog author="Jiri Olsa &lt;jolsa@redhat.com&gt; - 0.0.4-3" date="1576411200">- new kernel version [1759154]</changelog>
  <changelog author="Jiri Olsa &lt;jolsa@redhat.com&gt; - 0.0.4-4" date="1578571200">- missing libbpf.pc file [1759154]</changelog>
  <changelog author="Jiri Olsa &lt;jolsa@redhat.com&gt; - 0.0.4-5" date="1583323200">- new kernel version [1809913]</changelog>
</package>
<package pkgid="4974efeba25b2ce34ec23e9f2ea0a0c1511157661f99c6e092babae5d2158c43" name="libbpf-static" arch="x86_64">
  <version epoch="0" ver="0.0.4" rel="5.el7"/>
  <changelog author="Jiri Olsa &lt;jolsa@redhat.com&gt; - 0.0.2-1" date="1572696000">- initial package [1759154]</changelog>
  <changelog author="Jiri Olsa &lt;jolsa@redhat.com&gt; - 0.0.4-1" date="1572696001">- version 0.0.4 [1759154]</changelog>
  <changelog author="Jiri Olsa &lt;jolsa@redhat.com&gt; - 0.0.4-2" date="1575979200">- new build for gating [1759154]</changelog>
  <changelog author="Jiri Olsa &lt;jolsa@redhat.com&gt; - 0.0.4-3" date="1576411200">- new kernel version [1759154]</changelog>
  <changelog author="Jiri Olsa &lt;jolsa@redhat.com&gt; - 0.0.4-4" date="1578571200">- missing libbpf.pc file [1759154]</changelog>
  <changelog author="Jiri Olsa &lt;jolsa@redhat.com&gt; - 0.0.4-5" date="1583323200">- new kernel version [1809913]</changelog>
</package>
<package pkgid="1783bf8c915fd37c057ef2e62dbc5acb6ee9896540b92945a94988f329e8977b" name="libdwarves1" arch="x86_64">
  <version epoch="0" ver="1.15" rel="5.el7"/>
  <changelog author="Jiri Olsa &lt;jolsa@redhat.com&gt; - 1.15-1" date="1569412800">- Initial build</changelog>
  <changelog author="Jiri Olsa &lt;jolsa@redhat.com&gt; - 1.15-4" date="1572868800">- CI rebuild</changelog>
  <changelog author="Jiri Olsa &lt;jolsa@redhat.com&gt; - 1.15-5" date="1573041600">- Add libdwarves version dependency to dwarves package</changelog>
</package>
<package pkgid="61b3c8922d769347b539cc11c89ebc67cc6be6f7af88076f60cc60027073d56f" name="libdwarves1" arch="x86_64">
  <version epoch="0" ver="1.17" rel="1.el7"/>
  <changelog author="Jiri Olsa &lt;jolsa@redhat.com&gt; - 1.15-1" date="1569412800">- Initial build</changelog>
  <changelog author="Jiri Olsa &lt;jolsa@redhat.com&gt; - 1.15-4" date="1572868800">- CI rebuild</changelog>
  <changelog author="Jiri Olsa &lt;jolsa@redhat.com&gt; - 1.15-5" date="1573041600">- Add libdwarves version dependency to dwarves package</changelog>
  <changelog author="Jiri Olsa &lt;jolsa@redhat.com&gt; - 1.17-1" date="1590494400">- moving to v1.17 version</changelog>
</package>
<package pkgid="fd456da94533865998fe0343b02e109741fbc4099cc394f1ab4200aed7901d12" name="libdwarves1-devel" arch="x86_64">
  <version epoch="0" ver="1.15" rel="5.el7"/>
  <changelog author="Jiri Olsa &lt;jolsa@redhat.com&gt; - 1.15-1" date="1569412800">- Initial build</changelog>
  <changelog author="Jiri Olsa &lt;jolsa@redhat.com&gt; - 1.15-4" date="1572868800">- CI rebuild</changelog>
  <changelog author="Jiri Olsa &lt;jolsa@redhat.com&gt; - 1.15-5" date="1573041600">- Add libdwarves version dependency to dwarves package</changelog>
</package>
<package pkgid="f45b2b2576133f6da052dfcbb65fb40e5e79ee5738ae5762f6af3e619527b50a" name="libdwarves1-devel" arch="x86_64">
  <version epoch="0" ver="1.17" rel="1.el7"/>
  <changelog author="Jiri Olsa &lt;jolsa@redhat.com&gt; - 1.15-1" date="1569412800">- Initial build</changelog>
  <changelog author="Jiri Olsa &lt;jolsa@redhat.com&gt; - 1.15-4" date="1572868800">- CI rebuild</changelog>
  <changelog author="Jiri Olsa &lt;jolsa@redhat.com&gt; - 1.15-5" date="1573041600">- Add libdwarves version dependency to dwarves package</changelog>
  <changelog author="Jiri Olsa &lt;jolsa@redhat.com&gt; - 1.17-1" date="1590494400">- moving to v1.17 version</changelog>
</package>
<package pkgid="20f76d3e5f940f6e3fddb89a25a23125a9bdb3debd947bf0db8247c3d44d86b5" name="libertas-sd8686-firmware" arch="noarch">
  <version epoch="0" ver="20201218" rel="102.git05789708.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; - 20190111-93.gitd9fb2ee6" date="1553860800">- Remove cxgb3 (T3 adapter) firmware (rhbz 1503721)</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; - 20190516-94.git711d3297" date="1558008000">- Update to latest upstream linux-firmware image for assorted updates
- Update iwlwifi firmware to support the Cyclone Peak Dual Band 2x2 802.11ax (rhbz 1622442)
- Pull new version of Netronome firmware (rhbz 1663989)
- Update firmware for Chelsio T4/T5/T6 adapters (rhbz 1664678)
- Update Netronome firmware that include bug fixes (rhbz 1673890)
- Include firmware support for Intel Bluetooth 22261 (rhbz 1678095)</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; - 20191202-95.gite8a0f4c9" date="1575288000">- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1720394)
- Update bnx2x firmware to latest upstream (rhbz 1720395)
- AX200(Cyclone Peak 2 or CcP2) Bluetooth support (rhbz 1722693)
- Firmware for Chelsio T4/T5/T6 adapters (rhbz 1725821)
- Include to support Intel AX201 Harrison Peak(CNVi) on CML-U (rhbz 1725873)
- Icelake Bluetooth firmware update (AX201, Harrison Peak, or HrP2) (rhbz 1726182)
- DDP Package to support Columbiaville NIC (rhbz 1726454)
- Add iwlwifi-cc-a0-48.ucode to linux-firmware (rhbz 1753962)
- Change install section to use usptream installation process</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; - 20191202-96.gite8a0f4c9" date="1575288001">- Fix .files file dir, wrongly modified in the last release</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; - 20191202-97.gite8a0f4c9" date="1576152000">- firmware files marked as configuration files (rhbz 1782329)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; - 20200512-98.gitb2cad6a2" date="1589284800">- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1791030)
- Update bnx2x firmware to latest upstream (rhbz 1791031)
- Firmware - nvidia: add TU102/TU104/TU106 / TU116/117 signed firmware (rhbz 1801025)
- Update latest Signed FW for AMD NAVI 10 Graphic (rhbz 1809846)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; - 20200619-99.git3890db36" date="1592568000">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1847992)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20201022-100.gitdae4b4cd" date="1604577600">- Update to latest upstream linux-firmware image for assorted updates
- ice: Pull Comms Market Segment Package (rhbz 1861491)
- ice: Update to the Default OS DDP Package for ice driver (rhbz 1879278)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20201118-101.git7455a360" date="1607083200">- Update to latest upstream linux-firmware image for assorted updates
- Include to support Intel AX210 Typhoon Peak - Bluetooth firmware support (rhbz 1897069)
- Include support for the Qualcomm AX500-DBS (QCA6390) 802.11ax Wireless - firmware support (rhbz 1725913)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20201218-102.git05789708" date="1611748800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1918613)</changelog>
</package>
<package pkgid="8fa74cb01f8bd4a3535487e4d1174601e31b319d7c7806507b3ad2ad85d511af" name="libertas-sd8787-firmware" arch="noarch">
  <version epoch="0" ver="20201218" rel="102.git05789708.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; - 20190111-93.gitd9fb2ee6" date="1553860800">- Remove cxgb3 (T3 adapter) firmware (rhbz 1503721)</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; - 20190516-94.git711d3297" date="1558008000">- Update to latest upstream linux-firmware image for assorted updates
- Update iwlwifi firmware to support the Cyclone Peak Dual Band 2x2 802.11ax (rhbz 1622442)
- Pull new version of Netronome firmware (rhbz 1663989)
- Update firmware for Chelsio T4/T5/T6 adapters (rhbz 1664678)
- Update Netronome firmware that include bug fixes (rhbz 1673890)
- Include firmware support for Intel Bluetooth 22261 (rhbz 1678095)</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; - 20191202-95.gite8a0f4c9" date="1575288000">- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1720394)
- Update bnx2x firmware to latest upstream (rhbz 1720395)
- AX200(Cyclone Peak 2 or CcP2) Bluetooth support (rhbz 1722693)
- Firmware for Chelsio T4/T5/T6 adapters (rhbz 1725821)
- Include to support Intel AX201 Harrison Peak(CNVi) on CML-U (rhbz 1725873)
- Icelake Bluetooth firmware update (AX201, Harrison Peak, or HrP2) (rhbz 1726182)
- DDP Package to support Columbiaville NIC (rhbz 1726454)
- Add iwlwifi-cc-a0-48.ucode to linux-firmware (rhbz 1753962)
- Change install section to use usptream installation process</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; - 20191202-96.gite8a0f4c9" date="1575288001">- Fix .files file dir, wrongly modified in the last release</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; - 20191202-97.gite8a0f4c9" date="1576152000">- firmware files marked as configuration files (rhbz 1782329)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; - 20200512-98.gitb2cad6a2" date="1589284800">- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1791030)
- Update bnx2x firmware to latest upstream (rhbz 1791031)
- Firmware - nvidia: add TU102/TU104/TU106 / TU116/117 signed firmware (rhbz 1801025)
- Update latest Signed FW for AMD NAVI 10 Graphic (rhbz 1809846)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; - 20200619-99.git3890db36" date="1592568000">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1847992)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20201022-100.gitdae4b4cd" date="1604577600">- Update to latest upstream linux-firmware image for assorted updates
- ice: Pull Comms Market Segment Package (rhbz 1861491)
- ice: Update to the Default OS DDP Package for ice driver (rhbz 1879278)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20201118-101.git7455a360" date="1607083200">- Update to latest upstream linux-firmware image for assorted updates
- Include to support Intel AX210 Typhoon Peak - Bluetooth firmware support (rhbz 1897069)
- Include support for the Qualcomm AX500-DBS (QCA6390) 802.11ax Wireless - firmware support (rhbz 1725913)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20201218-102.git05789708" date="1611748800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1918613)</changelog>
</package>
<package pkgid="ca6acbc1ef6123c425ebad9ac7ac1f6285db26fbaa88535bc66c85c6ddf8ccaa" name="libertas-usb8388-firmware" arch="noarch">
  <version epoch="2" ver="20201218" rel="102.git05789708.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; - 20190111-93.gitd9fb2ee6" date="1553860800">- Remove cxgb3 (T3 adapter) firmware (rhbz 1503721)</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; - 20190516-94.git711d3297" date="1558008000">- Update to latest upstream linux-firmware image for assorted updates
- Update iwlwifi firmware to support the Cyclone Peak Dual Band 2x2 802.11ax (rhbz 1622442)
- Pull new version of Netronome firmware (rhbz 1663989)
- Update firmware for Chelsio T4/T5/T6 adapters (rhbz 1664678)
- Update Netronome firmware that include bug fixes (rhbz 1673890)
- Include firmware support for Intel Bluetooth 22261 (rhbz 1678095)</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; - 20191202-95.gite8a0f4c9" date="1575288000">- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1720394)
- Update bnx2x firmware to latest upstream (rhbz 1720395)
- AX200(Cyclone Peak 2 or CcP2) Bluetooth support (rhbz 1722693)
- Firmware for Chelsio T4/T5/T6 adapters (rhbz 1725821)
- Include to support Intel AX201 Harrison Peak(CNVi) on CML-U (rhbz 1725873)
- Icelake Bluetooth firmware update (AX201, Harrison Peak, or HrP2) (rhbz 1726182)
- DDP Package to support Columbiaville NIC (rhbz 1726454)
- Add iwlwifi-cc-a0-48.ucode to linux-firmware (rhbz 1753962)
- Change install section to use usptream installation process</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; - 20191202-96.gite8a0f4c9" date="1575288001">- Fix .files file dir, wrongly modified in the last release</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; - 20191202-97.gite8a0f4c9" date="1576152000">- firmware files marked as configuration files (rhbz 1782329)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; - 20200512-98.gitb2cad6a2" date="1589284800">- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1791030)
- Update bnx2x firmware to latest upstream (rhbz 1791031)
- Firmware - nvidia: add TU102/TU104/TU106 / TU116/117 signed firmware (rhbz 1801025)
- Update latest Signed FW for AMD NAVI 10 Graphic (rhbz 1809846)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; - 20200619-99.git3890db36" date="1592568000">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1847992)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20201022-100.gitdae4b4cd" date="1604577600">- Update to latest upstream linux-firmware image for assorted updates
- ice: Pull Comms Market Segment Package (rhbz 1861491)
- ice: Update to the Default OS DDP Package for ice driver (rhbz 1879278)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20201118-101.git7455a360" date="1607083200">- Update to latest upstream linux-firmware image for assorted updates
- Include to support Intel AX210 Typhoon Peak - Bluetooth firmware support (rhbz 1897069)
- Include support for the Qualcomm AX500-DBS (QCA6390) 802.11ax Wireless - firmware support (rhbz 1725913)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20201218-102.git05789708" date="1611748800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1918613)</changelog>
</package>
<package pkgid="2ab97231b5e9a6e926845f2cfdd8951c35ab58f283fe2caecbfef9430ab319ce" name="libertas-usb8388-olpc-firmware" arch="noarch">
  <version epoch="0" ver="20201218" rel="102.git05789708.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; - 20190111-93.gitd9fb2ee6" date="1553860800">- Remove cxgb3 (T3 adapter) firmware (rhbz 1503721)</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; - 20190516-94.git711d3297" date="1558008000">- Update to latest upstream linux-firmware image for assorted updates
- Update iwlwifi firmware to support the Cyclone Peak Dual Band 2x2 802.11ax (rhbz 1622442)
- Pull new version of Netronome firmware (rhbz 1663989)
- Update firmware for Chelsio T4/T5/T6 adapters (rhbz 1664678)
- Update Netronome firmware that include bug fixes (rhbz 1673890)
- Include firmware support for Intel Bluetooth 22261 (rhbz 1678095)</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; - 20191202-95.gite8a0f4c9" date="1575288000">- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1720394)
- Update bnx2x firmware to latest upstream (rhbz 1720395)
- AX200(Cyclone Peak 2 or CcP2) Bluetooth support (rhbz 1722693)
- Firmware for Chelsio T4/T5/T6 adapters (rhbz 1725821)
- Include to support Intel AX201 Harrison Peak(CNVi) on CML-U (rhbz 1725873)
- Icelake Bluetooth firmware update (AX201, Harrison Peak, or HrP2) (rhbz 1726182)
- DDP Package to support Columbiaville NIC (rhbz 1726454)
- Add iwlwifi-cc-a0-48.ucode to linux-firmware (rhbz 1753962)
- Change install section to use usptream installation process</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; - 20191202-96.gite8a0f4c9" date="1575288001">- Fix .files file dir, wrongly modified in the last release</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; - 20191202-97.gite8a0f4c9" date="1576152000">- firmware files marked as configuration files (rhbz 1782329)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; - 20200512-98.gitb2cad6a2" date="1589284800">- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1791030)
- Update bnx2x firmware to latest upstream (rhbz 1791031)
- Firmware - nvidia: add TU102/TU104/TU106 / TU116/117 signed firmware (rhbz 1801025)
- Update latest Signed FW for AMD NAVI 10 Graphic (rhbz 1809846)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; - 20200619-99.git3890db36" date="1592568000">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1847992)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20201022-100.gitdae4b4cd" date="1604577600">- Update to latest upstream linux-firmware image for assorted updates
- ice: Pull Comms Market Segment Package (rhbz 1861491)
- ice: Update to the Default OS DDP Package for ice driver (rhbz 1879278)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20201118-101.git7455a360" date="1607083200">- Update to latest upstream linux-firmware image for assorted updates
- Include to support Intel AX210 Typhoon Peak - Bluetooth firmware support (rhbz 1897069)
- Include support for the Qualcomm AX500-DBS (QCA6390) 802.11ax Wireless - firmware support (rhbz 1725913)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20201218-102.git05789708" date="1611748800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1918613)</changelog>
</package>
<package pkgid="566321d662e82128757784af96c6e3ed138391ab8b48237afd7052498cea2aef" name="linux-firmware" arch="noarch">
  <version epoch="0" ver="20201218" rel="102.git05789708.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; - 20190111-93.gitd9fb2ee6" date="1553860800">- Remove cxgb3 (T3 adapter) firmware (rhbz 1503721)</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; - 20190516-94.git711d3297" date="1558008000">- Update to latest upstream linux-firmware image for assorted updates
- Update iwlwifi firmware to support the Cyclone Peak Dual Band 2x2 802.11ax (rhbz 1622442)
- Pull new version of Netronome firmware (rhbz 1663989)
- Update firmware for Chelsio T4/T5/T6 adapters (rhbz 1664678)
- Update Netronome firmware that include bug fixes (rhbz 1673890)
- Include firmware support for Intel Bluetooth 22261 (rhbz 1678095)</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; - 20191202-95.gite8a0f4c9" date="1575288000">- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1720394)
- Update bnx2x firmware to latest upstream (rhbz 1720395)
- AX200(Cyclone Peak 2 or CcP2) Bluetooth support (rhbz 1722693)
- Firmware for Chelsio T4/T5/T6 adapters (rhbz 1725821)
- Include to support Intel AX201 Harrison Peak(CNVi) on CML-U (rhbz 1725873)
- Icelake Bluetooth firmware update (AX201, Harrison Peak, or HrP2) (rhbz 1726182)
- DDP Package to support Columbiaville NIC (rhbz 1726454)
- Add iwlwifi-cc-a0-48.ucode to linux-firmware (rhbz 1753962)
- Change install section to use usptream installation process</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; - 20191202-96.gite8a0f4c9" date="1575288001">- Fix .files file dir, wrongly modified in the last release</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; - 20191202-97.gite8a0f4c9" date="1576152000">- firmware files marked as configuration files (rhbz 1782329)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; - 20200512-98.gitb2cad6a2" date="1589284800">- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1791030)
- Update bnx2x firmware to latest upstream (rhbz 1791031)
- Firmware - nvidia: add TU102/TU104/TU106 / TU116/117 signed firmware (rhbz 1801025)
- Update latest Signed FW for AMD NAVI 10 Graphic (rhbz 1809846)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; - 20200619-99.git3890db36" date="1592568000">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1847992)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20201022-100.gitdae4b4cd" date="1604577600">- Update to latest upstream linux-firmware image for assorted updates
- ice: Pull Comms Market Segment Package (rhbz 1861491)
- ice: Update to the Default OS DDP Package for ice driver (rhbz 1879278)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20201118-101.git7455a360" date="1607083200">- Update to latest upstream linux-firmware image for assorted updates
- Include to support Intel AX210 Typhoon Peak - Bluetooth firmware support (rhbz 1897069)
- Include support for the Qualcomm AX500-DBS (QCA6390) 802.11ax Wireless - firmware support (rhbz 1725913)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20201218-102.git05789708" date="1611748800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1918613)</changelog>
</package>
<package pkgid="1453d659feb06826b76b147af14c8415e35cc09ef29cf1c61e91c971f3d7b32a" name="linux-firmware" arch="src">
  <version epoch="0" ver="20201218" rel="102.git05789708.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; - 20190111-93.gitd9fb2ee6" date="1553860800">- Remove cxgb3 (T3 adapter) firmware (rhbz 1503721)</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; - 20190516-94.git711d3297" date="1558008000">- Update to latest upstream linux-firmware image for assorted updates
- Update iwlwifi firmware to support the Cyclone Peak Dual Band 2x2 802.11ax (rhbz 1622442)
- Pull new version of Netronome firmware (rhbz 1663989)
- Update firmware for Chelsio T4/T5/T6 adapters (rhbz 1664678)
- Update Netronome firmware that include bug fixes (rhbz 1673890)
- Include firmware support for Intel Bluetooth 22261 (rhbz 1678095)</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; - 20191202-95.gite8a0f4c9" date="1575288000">- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1720394)
- Update bnx2x firmware to latest upstream (rhbz 1720395)
- AX200(Cyclone Peak 2 or CcP2) Bluetooth support (rhbz 1722693)
- Firmware for Chelsio T4/T5/T6 adapters (rhbz 1725821)
- Include to support Intel AX201 Harrison Peak(CNVi) on CML-U (rhbz 1725873)
- Icelake Bluetooth firmware update (AX201, Harrison Peak, or HrP2) (rhbz 1726182)
- DDP Package to support Columbiaville NIC (rhbz 1726454)
- Add iwlwifi-cc-a0-48.ucode to linux-firmware (rhbz 1753962)
- Change install section to use usptream installation process</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; - 20191202-96.gite8a0f4c9" date="1575288001">- Fix .files file dir, wrongly modified in the last release</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; - 20191202-97.gite8a0f4c9" date="1576152000">- firmware files marked as configuration files (rhbz 1782329)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; - 20200512-98.gitb2cad6a2" date="1589284800">- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1791030)
- Update bnx2x firmware to latest upstream (rhbz 1791031)
- Firmware - nvidia: add TU102/TU104/TU106 / TU116/117 signed firmware (rhbz 1801025)
- Update latest Signed FW for AMD NAVI 10 Graphic (rhbz 1809846)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; - 20200619-99.git3890db36" date="1592568000">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1847992)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20201022-100.gitdae4b4cd" date="1604577600">- Update to latest upstream linux-firmware image for assorted updates
- ice: Pull Comms Market Segment Package (rhbz 1861491)
- ice: Update to the Default OS DDP Package for ice driver (rhbz 1879278)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20201118-101.git7455a360" date="1607083200">- Update to latest upstream linux-firmware image for assorted updates
- Include to support Intel AX210 Typhoon Peak - Bluetooth firmware support (rhbz 1897069)
- Include support for the Qualcomm AX500-DBS (QCA6390) 802.11ax Wireless - firmware support (rhbz 1725913)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20201218-102.git05789708" date="1611748800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1918613)</changelog>
</package>
<package pkgid="899ccbd4fdc5cb59bfbccd8f0d8b5c975e60b688f16a7711ae35ced6c169f8ea" name="perf" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="2a5fc446ce84eb86d6835b655c6afd4956b480d1a262e63a1620422c622c2eda" name="perf" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="193.28.1.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.20.1.el8_2]" date="1599134400">- [infiniband] IB/rdmavt: Fix RQ counting issues causing use of an invalid RWQE (Kamal Heib) [1872771 1850314]
- [block] blk-mq: Rerun dispatching in the case of budget contention (Ming Lei) [1869779 1824037]
- [block] blk-mq: Add blk_mq_delay_run_hw_queues() API call (Ming Lei) [1869779 1824037]
- [block] blk-mq: In blk_mq_dispatch_rq_list() "no budget" is a reason to kick (Ming Lei) [1869779 1824037]
- [block] blk-mq: Put driver tag in blk_mq_dispatch_rq_list() when no budget (Ming Lei) [1869779 1824037]
- [md] dm mpath: use double checked locking in fast path (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rename current_pgpath to pgpath in multipath_prepare_ioctl (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rework __map_bio() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: factor out multipath_queue_bio (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: push locking down to must_push_back_rq() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: take m-&gt;lock spinlock when testing QUEUE_IF_NO_PATH (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: changes from initial m-&gt;flags locking audit (Mike Snitzer) [1869386 1848651]
- [md] dm rq: don't call blk_mq_queue_stopped() in dm_stop_queue() (Mike Snitzer) [1869386 1848651]
- [md] dm: do not use waitqueue for request-based DM (Mike Snitzer) [1869386 1848651]
- [block] blk-mq: consider non-idle request as "inflight" in blk_mq_rq_inflight() (Mike Snitzer) [1869386 1848651]
- [kernel] sched/deadline: Initialize -&gt;dl_boosted (Phil Auld) [1867612 1854179]
- [kernel] sched/core: Fix PI boosting between RT and DEADLINE tasks (Phil Auld) [1867612 1854179]
- [net] net/smc: tolerate future SMCD versions (Philipp Rudo) [1866390 1854992]
- [net] openvswitch: fixes potential deadlock in dp cleanup code (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: reorder masks array based on usage (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: take into account de-fragmentation/gso_size in execute_check_pkt_len (Lorenzo Bianconi) [1860169 1851888]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.21.1.el8_2]" date="1599739200">- [scsi] scsi: ibmvfc: Fix NULL return compiler warning (Steve Best) [1866371 1810653]
- [scsi] scsi: ibmvfc: Avoid loss of all paths during SVC node reboot (Steve Best) [1866371 1810653]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.22.1.el8_2]" date="1600257600">- [crypto] pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1877530 1862072]
- [crypto] Revert "pefile: Tolerate other pefile signatures after first" (Bruno Meneguele)
- [infiniband] IB/hfi1: Fix another case where pq is left on waitlist (Kamal Heib) [1872766 1859209]
- [infiniband] IB/hfi1: Ensure pq is not left on waitlist (Kamal Heib) [1872766 1859209]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.23.1.el8_2]" date="1600344000">- [net] packet: fix overflow in tpacket_rcv (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}
- [net] packet: make tp_drops atomic (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.24.1.el8_2]" date="1600862400">- [kernel] timers: Remove must_forward_clk (Phil Auld) [1877417 1833096]
- [kernel] timers: Spare timer softirq until next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Expand clk forward logic beyond nohz (Phil Auld) [1877417 1833096]
- [kernel] timers: Reuse next expiry cache after nohz exit (Phil Auld) [1877417 1833096]
- [kernel] timers: Always keep track of next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Optimize _next_timer_interrupt() level iteration (Phil Auld) [1877417 1833096]
- [kernel] timers: Add comments about calc_index() ceiling work (Phil Auld) [1877417 1833096]
- [kernel] timers: Move trigger_dyntick_cpu() to enqueue_timer() (Phil Auld) [1877417 1833096]
- [kernel] timers: Use only bucket expiry for base-&gt;next_expiry value (Phil Auld) [1877417 1833096]
- [kernel] timers: Preserve higher bits of expiration on index calculation (Phil Auld) [1877417 1833096]
- [kernel] timer: Fix wheel index calculation on last level (Phil Auld) [1877417 1833096]
- [kernel] timer: Prevent base-&gt;clk from moving backward (Phil Auld) [1877417 1833096]
- [kernel] timer: Read jiffies once when forwarding base clk (Phil Auld) [1877417 1833096]
- [infiniband] RDMA/umem: Fix ib_umem_find_best_pgsz() (Kamal Heib) [1872424 1856158]
- [net] net: accept an empty mask in /sys/class/net/*/queues/rx-*/rps_cpus (Nitesh Narayan Lal) [1870181 1868433]
- [net] net: Restrict receive packets queuing to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [pci] PCI: Restrict probe functions to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [lib] lib: Restrict cpumask_local_spread to houskeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [s390] s390/pci: Fix unexpected write combine on resource (Philipp Rudo) [1869276 1827311]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.25.1.el8_2]" date="1601553600">- [net] netfilter: conntrack: proc: rename stat column (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: add clash resolution stat counter (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: remove ignore stats (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not increment two error counters at same time (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not auto-delete clash entries on reply (Florian Westphal) [1882095 1875681]
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1881085 1875316] {CVE-2020-14385}
- [kernel] time/tick-broadcast: Fix tick_broadcast_offline() lockdep complaint (Alexey Klimov) [1880081 1877380]
- [net] atomics/treewide: Rename __atomic_add_unless() =&gt; atomic_fetch_add_unless() (Yauheni Kaliuta) [1880081 1813370]
- [kernel] timers: Lower base clock forwarding threshold (Phil Auld) [1877417 1833096]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.26.1.el8_2]" date="1602158400">- [firmware] efi: don't reserve MOK config table memory region (Kairui Song) [1879988 1878584]
- [security] integrity: Load certs from the EFI MOK config table (Lenny Szubowicz) [1877528 1868306]
- [security] integrity: Move import of MokListRT certs to a separate routine (Lenny Szubowicz) [1877528 1868306]
- [firmware] efi: Support for MOK variable config table (Lenny Szubowicz) [1877528 1868306]
- [security] efi: Only print errors about failing to get certs if EFI vars are found (Lenny Szubowicz) [1877528 1804969]
- [fs] ceph: fix inode number handling on arches with 32-bit ino_t (Jeff Layton) [1875787 1866018]
- [fs] ceph: handle zero-length feature mask in session messages (Jeff Layton) [1875787 1866018]
- [fs] ceph: fix endianness bug when handling MDS session feature bits (Jeff Layton) [1875787 1866018]
- [netdrv] net/mlx5e: Fix missing cleanup of ethtool steering during rep rx cleanup (Alaa Hleihel) [1857777 1856660]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.27.1.el8_2]" date="1602763200">- [powerpc] powerpc/pseries: Do not initiate shutdown when system is running on UPS (Diego Domingos) [1882243 1870477]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859471 1859472] {CVE-2020-14331}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.28.1.el8_2]" date="1602849600">- [net] Bluetooth: L2CAP: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888256 1888258] {CVE-2020-12351}
- [net] Bluetooth: A2MP: Fix not initializing all members (Gopal Tiwari) [1888906 1888807] {CVE-2020-12352}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-193.28.1.el8.centos" date="1603195200">- Apply debranding changes</changelog>
</package>
<package pkgid="9771e248ff0a43cd7f92d46626e418234ffea87f16fbb247212d7ca5125011f5" name="perf" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="305.10.2.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.2.1.el8_4]" date="1620648000">- net/mlx5e: Allow to match on MPLS parameters only for MPLS over UDP (Alaa Hleihel) [1952061 1936742]
- net/mlx5e: Reject tc rules which redirect from a VF to itself (Alaa Hleihel) [1952065 1932839]
- net/mlx5: CT: Add support for matching on ct_state inv and rel flags (Alaa Hleihel) [1952062 1942681]
- KVM: VMX: Don't use vcpu-&gt;run-&gt;internal.ndata as an array index (Jon Maloy) [1954221 1954219]
- tools/power turbostat: Revert "[tools] tools/power turbostat: Enable accumulate RAPL display" (Prarit Bhargava) [1952987 1944699]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.3.1.el8_4]" date="1621252800">- Revert "uio: use request_threaded_irq instead" (Vitaly Kuznetsov) [1952952 1946644]
- drm/ast: Set format registers in primary plane's update (Lyude Paul) [1952900 1923857]
- net/sched: act_ct: clear post_ct if doing ct_clear (Marcelo Ricardo Leitner) [1956458 1941889]
- md/raid1: properly indicate failure when ending a failed write request (Nigel Croxon) [1955188 1954588]
- nitro_enclaves: Fix stale file descriptors on failed usercopy (Vitaly Kuznetsov) [1956379 1953717]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.4.1.el8_4]" date="1621944000">- vmxnet3: Set the default of vxlan overlay offload to disabled (Cathy Avery) [1960702 1941714]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.5.1.el8_4]" date="1622548800">- gfs2: report "already frozen/thawed" errors (Bob Peterson) [1961849 1932236]
- gfs2: move freeze glock outside the make_fs_rw and _ro functions (Bob Peterson) [1961849 1932236]
- gfs2: Add common helper for holding and releasing the freeze glock (Bob Peterson) [1961849 1932236]
- gfs2: in signal_our_withdraw wait for unfreeze of _this_ fs only (Bob Peterson) [1961849 1932236]
- gfs2: Don't freeze the file system during unmount (Bob Peterson) [1961849 1932236]
- gfs2: Fix regression in freeze_go_sync (Bob Peterson) [1961849 1932236]
- gfs2: The freeze glock should never be frozen (Bob Peterson) [1961849 1932236]
- gfs2: When freezing gfs2, use GL_EXACT and not GL_NOCACHE (Bob Peterson) [1961849 1932236]
- gfs2: read-only mounts should grab the sd_freeze_gl glock (Bob Peterson) [1961849 1932236]
- gfs2: freeze should work on read-only mounts (Bob Peterson) [1961849 1932236]
- gfs2: Abort gfs2_freeze if io error is seen (Bob Peterson) [1961849 1932236]
- CI: Disable result checking for realtime check (Veronika Kabatova)
- CI: Explicitly disable result checking for private CI (Veronika Kabatova)
- CI: Rename variable (Veronika Kabatova)
- CI: Update builder containers (Veronika Kabatova)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.6.1.el8_4]" date="1623067200">- openvswitch: fix stack OOB read while fragmenting IPv4 packets (Davide Caratti) [1963940 1924608]
- net/sched: sch_frag: fix stack OOB read while fragmenting IPv4 packets (Davide Caratti) [1963940 1924608]
- net/sched: act_ct: fix wild memory access when clearing fragments (Davide Caratti) [1963940 1924608]
- net: Treat __napi_schedule_irqoff() as __napi_schedule() on PREEMPT_RT (Ivan Vecera)
- redhat/configs: Add CONFIG_SYSTEM_REVOCATION_KEYS and CONFIG_SYSTEM_REVOCATION_LIST (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: add 'x509_revocation_list' to gitignore (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- integrity: Load mokx variables into the blacklist keyring (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Add ability to preload revocation certs (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Move load_system_certificate_list to a common function (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Add EFI_CERT_X509_GUID support for dbx entries (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- net/sched: cls_api: increase max_reclassify_loop (Davide Caratti) [1965148 1955136]
- dm writecache: fix performance degradation in ssd mode (Mike Snitzer) [1962241 1961859]
- scsi: fnic: Use scsi_host_busy_iter() to traverse commands (Ewan D. Milne) [1961705 1949250]
- scsi: fnic: Kill 'exclude_id' argument to fnic_cleanup_io() (Ewan D. Milne) [1961705 1949250]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.7.1.el8_4]" date="1623672000">- net: zero-initialize tc skb extension on allocation (Ivan Vecera) [1965457 1946986]
- net/sched: cls_flower: fix only mask bit check in the validate_ct_state (Ivan Vecera) [1965457 1946986]
- net: cls_api: Fix uninitialised struct field bo-&gt;unlocked_driver_cb (Ivan Vecera) [1965457 1946986]
- net/sched: act_api: fix miss set post_ct for ovs after do conntrack in act_ct (Ivan Vecera) [1965457 1946986]
- net/sched: cls_flower: validate ct_state for invalid and reply flags (Ivan Vecera) [1965457 1946986]
- flow_dissector: fix TTL and TOS dissection on IPv4 fragments (Paolo Abeni) [1963952 1950288]
- Revert "sctp: Fix SHUTDOWN CTSN Ack in the peer restart case" (Xin Long) [1965632 1953839]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [1965632 1953839]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [1965632 1953839]
- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962544 1962546] {CVE-2021-33034}
- x86/kvm: Unify kvm_pv_guest_cpu_reboot() with kvm_guest_cpu_offline() (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Disable all PV features on crash (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Disable kvmclock on all CPUs on shutdown (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Teardown PV features on boot CPU as well (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Fix pr_info() for async PF setup/teardown (Lenny Szubowicz) [1964930 1934273]
- net/sched: act_ct: Fix ct template allocation for zone 0 (Marcelo Ricardo Leitner) [1965150 1881824]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.8.1.el8_4]" date="1624363200">- iavf: amend removal of MODULE_VERSION (Stefan Assmann) [1969925 1955738]
- ixgbe: Amend commit acf03026ec5a to include a version string in module info. (Ken Cox) [1969922 1955759]
- i40e: amend removal of MODULE_VERSION (Stefan Assmann) [1969923 1955736]
- redhat/configs: Add CONFIG_PINCTRL_EMMITSBURG (David Arcari) [1963984 1959506]
- redhat/configs: Remove CONFIG_EMMITSBURG (David Arcari) [1963984 1959506]
- netlink: add tracepoint at NL_SET_ERR_MSG (Marcelo Ricardo Leitner) [1972938 1956983]
- Revert "[netdrv] net/intel: remove driver versions from Intel drivers" (Jonathan Toppins) [1969917 1955745]
- Amends commit ea6244cc248b to include a version string in module info. (Ken Cox) [1969915 1955726]
- Revert "[netdrv] net/broadcom: Clean broadcom code from driver versions" (Jonathan Toppins) [1969914 1955721]
- ena: revert removal of MODULE_VERSION from ena (Petr Oros) [1969913 1955712]
- fm10k: amend removal of MODULE_VERSION (Vladis Dronov) [1969910 1955730]
- net/sched: act_ct: Offload connections with commit action (Marcelo Ricardo Leitner) [1968679 1965817]
- netfilter: flowtable: Remove redundant hw refresh bit (Marcelo Ricardo Leitner) [1968679 1965817]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.9.1.el8_4]" date="1624881600">- ixgbevf: Amend commit acf03026ec5a to include a version in module info. (Ken Cox) [1969911 1955764]
- CI: Merge configuration (Veronika Kabatova)
- igc: amend removal of MODULE_VERSION (Corinna Vinschen) [1969921 1955755]
- igb: amend removal of MODULE_VERSION (Corinna Vinschen) [1969919 1955748]
- locking/qrwlock: Fix ordering in queued_write_lock_slowpath() (Waiman Long) [1964419 1950110]
- scsi: qedf: Do not put host in qedf_vport_create() unconditionally (Nilesh Javali) [1974968 1899384]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.10.1.el8_4]" date="1625659200">- igbvf: amend removal of MODULE_VERSION (Corinna Vinschen) [1969920 1955752]
- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971464 1971488] {CVE-2021-32399}
- scsi: ibmvfc: Free channel_setup_buf during device tear down (Steve Best) [1964697 1938102]
- i40e: Fix parameters in aq_get_phy_register() (Stefan Assmann) [1967099 1907852]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.10.2.el8_4]" date="1626091200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975181 1975182] {CVE-2021-33909}</changelog>
</package>
<package pkgid="941db75562991550617b01227dc9171c5c84dcecc2c5caeecc2fe4da4e79cfbf" name="perf" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="348.20.1.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.12.1.el8_5]" date="1641988800">- tcp: don't free a FIN sk_buff in tcp_remove_empty_skb() (Guillaume Nault) [2021574 2016210]
- kernel.spec: Add support to use vmlinux.h (Jiri Olsa) [2031053 1989087]
- spec: Add vmlinux.h to kernel-devel package (Jiri Olsa) [2031053 1989087]
- x86/mce: Avoid infinite loop for copy from user recovery (Prarit Bhargava) [2008789 1999550]
- x86/mce: Rename kill_it to kill_current_task (Prarit Bhargava) [2008789 1999550]
- x86/mce: Recover from poison found while copying from user space (Prarit Bhargava) [2008789 1999550]
- x86/mce: Delay clearing IA32_MCG_STATUS to the end of do_machine_check() (Prarit Bhargava) [2008789 1999550]
- x86/mce: Send #MC singal from task work (Prarit Bhargava) [2008789 1999550]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-348.13.1.el8_5]" date="1642507200">- vfs: Out-of-bounds write of heap buffer in fs_context.c (Frantisek Hrbata) [2040585 2040586] {CVE-2022-0185}
- xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Bruno Meneguele) [2034864 2034865] {CVE-2021-4155}
- af_unix: fix garbage collect vs MSG_PEEK (Patrick Talbert) [2031974 2031975] {CVE-2021-0920}
- cgroup: verify that source is a string (Waiman Long) [2034608 2034609] {CVE-2021-4154}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-348.14.1.el8_5]" date="1643198400">- tcp: fix page frag corruption on page fault (Paolo Abeni) [2041529 1996074]
- net: fix sk_page_frag() recursion from memory reclaim (Paolo Abeni) [2041529 1996074]
- KVM: s390: index kvm-&gt;arch.idle_mask by vcpu_idx (Thomas Huth) [2040769 2026230]
- redhat: set LC_ALL=C before sorting config content (Frantisek Hrbata)</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.15.1.el8_5]" date="1643716800">- net/mlx5: DR, Use FW API when updating FW-owned flow table (Michal Schmidt) [2042663 2042651]
- KVM: x86: Wait for IPIs to be delivered when handling Hyper-V TLB flush hypercall (Vitaly Kuznetsov) [2043237 1868572]
- drm/mgag200: Select clock in PLL update functions (Bruno Meneguele) [2034949 1953926]
- drm/i915: Fix HAS_LSPCON macro for platforms between GEN9 and GEN10 (Bruno Meneguele) [2027335 2005586]
- crypto: qat - power up 4xxx device (Vladis Dronov) [2016437 1960307]
- RDMA/core: Fix a double free in add_port error flow (Kamal Heib) [2038724 2008555]
- powerpc/iommu: Report the correct most efficient DMA mask for PCI devices (Steve Best) [2018928 2007425]
- powerpc/dma: Fix dma_map_ops::get_required_mask (Steve Best) [2018928 2007425]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.16.1.el8_5]" date="1644321600">- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047601 2047602] {CVE-2022-22942}
- net: openvswitch: Fix ct_state nat flags for conns arriving from tc (Marcelo Ricardo Leitner) [2043548 2040334]
- net: openvswitch: Fix matching zone id for invalid conns arriving from tc (Marcelo Ricardo Leitner) [2043550 2040452]
- net/sched: flow_dissector: Fix matching on zone id for invalid conns (Marcelo Ricardo Leitner) [2043550 2040452]
- net/sched: Extend qdisc control block with tc control block (Marcelo Ricardo Leitner) [2043550 2040452]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.17.1.el8_5]" date="1644926400">- vfs: check dentry is still valid in get_link() (Ian Kent) [2052558 2014846]
- xfs: don't expose internal symlink metadata buffers to the vfs (Brian Foster) [2052558 2014846]
- CI: Use appropriate zstream builder (Veronika Kabatova)
- CI: Enable baseline realtime checks (Veronika Kabatova)
- CI: Rename pipelines to include release names (Veronika Kabatova)
- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052166 2052167] {CVE-2022-0492}
- ice: Remove boolean vlan_promisc flag from function (Jonathan Toppins) [2051951 2030400]
- ceph: put the requests/sessions when it fails to alloc memory (Jeffrey Layton) [2053725 2017796]
- ceph: fix off by one bugs in unsafe_request_wait() (Jeffrey Layton) [2053725 2017796]
- ceph: flush the mdlog before waiting on unsafe reqs (Jeffrey Layton) [2053725 2017796]
- ceph: flush mdlog before umounting (Jeffrey Layton) [2053725 2017796]
- ceph: make iterate_sessions a global symbol (Jeffrey Layton) [2053725 2017796]
- ceph: make ceph_create_session_msg a global symbol (Jeffrey Layton) [2053725 2017796]
- xfs: check sb_meta_uuid for dabuf buffer recovery (Bill O'Donnell) [2049292 2020764]
- drm/i915: Flush TLBs before releasing backing store (Patrick Talbert) [2044328 2044329] {CVE-2022-0330}
- hugetlb: fix hugetlb cgroup refcounting during vma split (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: fix imbalanced css_get and css_put pair for shared mappings (Waiman Long) [2039015 2032811]
- mm/hugetlb: change hugetlb_reserve_pages() to type bool (Waiman Long) [2039015 2032811]
- hugetlb: fix an error code in hugetlb_reserve_pages() (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: fix offline of hugetlb cgroup with reservations (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: fix reservation accounting (Waiman Long) [2039015 2032811]
- mm/hugetlb: narrow the hugetlb_lock protection area during preparing huge page (Waiman Long) [2039015 2032811]
- mm/hugetlb: a page from buddy is not on any list (Waiman Long) [2039015 2032811]
- mm/hugetlb: not necessary to coalesce regions recursively (Waiman Long) [2039015 2032811]
- selftests/vm/write_to_hugetlbfs.c: fix unused variable warning (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add hugetlb_cgroup reservation tests (Waiman Long) [2039015 2032811]
- hugetlb: support file_region coalescing again (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: support noreserve mappings (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add accounting for shared mappings (Waiman Long) [2039015 2032811]
- hugetlb: disable region_add file_region coalescing (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add reservation accounting for private mappings (Waiman Long) [2039015 2032811]
- mm/hugetlb_cgroup: fix hugetlb_cgroup migration (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add interface for charge/uncharge hugetlb reservations (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add hugetlb_cgroup reservation counter (Waiman Long) [2039015 2032811]
- hugetlb: remove duplicated code (Waiman Long) [2039015 2032811]
- hugetlb: region_chg provides only cache entry (Waiman Long) [2039015 2032811]
- hugetlbfs: always use address space in inode for resv_map pointer (Waiman Long) [2039015 2032811]
- hugetlbfs: fix potential over/underflow setting node specific nr_hugepages (Waiman Long) [2039015 2032811]
- hugetlb: allow to free gigantic pages regardless of the configuration (Waiman Long) [2039015 2032811]
- powerpc/pseries: Fix update of LPAR security flavor after LPM (Steve Best) [2027448 1997294]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.18.1.el8_5]" date="1645531200">- selftests: kvm: Check whether SIDA memop fails for normal guests (Thomas Huth) [2050806 2050807] {CVE-2022-0516}
- KVM: s390: Return error on SIDA memop on normal guest (Thomas Huth) [2050806 2050807] {CVE-2022-0516}
- iommu/amd: Remove iommu_init_ga() (Jerry Snitselaar) [2030854 1998265]
- iommu/amd: Relocate GAMSup check to early_enable_iommus (Jerry Snitselaar) [2030854 1998265]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.19.1.el8_5]" date="1646049600">- tipc: improve size validations for received domain records (Xin Long) [2048970 2048971] {CVE-2022-0435}
- smb3: do not error on fsync when readonly (Ronnie Sahlberg) [2055824 2037811]
- security: implement sctp_assoc_established hook in selinux (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- security: add sctp_assoc_established hook (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- security: call security_sctp_assoc_request in sctp_sf_do_5_1D_ce (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- security: pass asoc to sctp_assoc_request and sctp_sk_clone (Bruno Meneguele) [2054112 2054117 2015525 2048251]
- net: sctp: Fix some typos (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- RDMA/bnxt_re: Fix stats counters (Selvin Xavier) [2049684 2001893]
- net: check skb sec_path when re-initializing slow_gro in gro_list_prepare (Xin Long) [2047427 2030476]
- cpufreq: intel_pstate: Add Icelake servers support in no-HWP mode (David Arcari) [2036888 2003695]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.20.1.el8_5]" date="1646740800">- lib/iov_iter: initialize "flags" in new pipe_buffer (Jan Stancek) [2060874 2060875] {CVE-2022-0847}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-348.20.1.el8.centos" date="1646913600">- Apply debranding changes</changelog>
</package>
<package pkgid="76654e91c8c95ccff0e16b7dad1c668d69d3e945c697ae0cfba2bc7ac223a199" name="perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="a312fdca6d7a1c999e2ccf59f189348d3e0a5d316bfb6cdee2f45ea3c8bba18b" name="perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="193.28.1.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.20.1.el8_2]" date="1599134400">- [infiniband] IB/rdmavt: Fix RQ counting issues causing use of an invalid RWQE (Kamal Heib) [1872771 1850314]
- [block] blk-mq: Rerun dispatching in the case of budget contention (Ming Lei) [1869779 1824037]
- [block] blk-mq: Add blk_mq_delay_run_hw_queues() API call (Ming Lei) [1869779 1824037]
- [block] blk-mq: In blk_mq_dispatch_rq_list() "no budget" is a reason to kick (Ming Lei) [1869779 1824037]
- [block] blk-mq: Put driver tag in blk_mq_dispatch_rq_list() when no budget (Ming Lei) [1869779 1824037]
- [md] dm mpath: use double checked locking in fast path (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rename current_pgpath to pgpath in multipath_prepare_ioctl (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rework __map_bio() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: factor out multipath_queue_bio (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: push locking down to must_push_back_rq() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: take m-&gt;lock spinlock when testing QUEUE_IF_NO_PATH (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: changes from initial m-&gt;flags locking audit (Mike Snitzer) [1869386 1848651]
- [md] dm rq: don't call blk_mq_queue_stopped() in dm_stop_queue() (Mike Snitzer) [1869386 1848651]
- [md] dm: do not use waitqueue for request-based DM (Mike Snitzer) [1869386 1848651]
- [block] blk-mq: consider non-idle request as "inflight" in blk_mq_rq_inflight() (Mike Snitzer) [1869386 1848651]
- [kernel] sched/deadline: Initialize -&gt;dl_boosted (Phil Auld) [1867612 1854179]
- [kernel] sched/core: Fix PI boosting between RT and DEADLINE tasks (Phil Auld) [1867612 1854179]
- [net] net/smc: tolerate future SMCD versions (Philipp Rudo) [1866390 1854992]
- [net] openvswitch: fixes potential deadlock in dp cleanup code (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: reorder masks array based on usage (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: take into account de-fragmentation/gso_size in execute_check_pkt_len (Lorenzo Bianconi) [1860169 1851888]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.21.1.el8_2]" date="1599739200">- [scsi] scsi: ibmvfc: Fix NULL return compiler warning (Steve Best) [1866371 1810653]
- [scsi] scsi: ibmvfc: Avoid loss of all paths during SVC node reboot (Steve Best) [1866371 1810653]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.22.1.el8_2]" date="1600257600">- [crypto] pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1877530 1862072]
- [crypto] Revert "pefile: Tolerate other pefile signatures after first" (Bruno Meneguele)
- [infiniband] IB/hfi1: Fix another case where pq is left on waitlist (Kamal Heib) [1872766 1859209]
- [infiniband] IB/hfi1: Ensure pq is not left on waitlist (Kamal Heib) [1872766 1859209]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.23.1.el8_2]" date="1600344000">- [net] packet: fix overflow in tpacket_rcv (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}
- [net] packet: make tp_drops atomic (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.24.1.el8_2]" date="1600862400">- [kernel] timers: Remove must_forward_clk (Phil Auld) [1877417 1833096]
- [kernel] timers: Spare timer softirq until next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Expand clk forward logic beyond nohz (Phil Auld) [1877417 1833096]
- [kernel] timers: Reuse next expiry cache after nohz exit (Phil Auld) [1877417 1833096]
- [kernel] timers: Always keep track of next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Optimize _next_timer_interrupt() level iteration (Phil Auld) [1877417 1833096]
- [kernel] timers: Add comments about calc_index() ceiling work (Phil Auld) [1877417 1833096]
- [kernel] timers: Move trigger_dyntick_cpu() to enqueue_timer() (Phil Auld) [1877417 1833096]
- [kernel] timers: Use only bucket expiry for base-&gt;next_expiry value (Phil Auld) [1877417 1833096]
- [kernel] timers: Preserve higher bits of expiration on index calculation (Phil Auld) [1877417 1833096]
- [kernel] timer: Fix wheel index calculation on last level (Phil Auld) [1877417 1833096]
- [kernel] timer: Prevent base-&gt;clk from moving backward (Phil Auld) [1877417 1833096]
- [kernel] timer: Read jiffies once when forwarding base clk (Phil Auld) [1877417 1833096]
- [infiniband] RDMA/umem: Fix ib_umem_find_best_pgsz() (Kamal Heib) [1872424 1856158]
- [net] net: accept an empty mask in /sys/class/net/*/queues/rx-*/rps_cpus (Nitesh Narayan Lal) [1870181 1868433]
- [net] net: Restrict receive packets queuing to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [pci] PCI: Restrict probe functions to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [lib] lib: Restrict cpumask_local_spread to houskeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [s390] s390/pci: Fix unexpected write combine on resource (Philipp Rudo) [1869276 1827311]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.25.1.el8_2]" date="1601553600">- [net] netfilter: conntrack: proc: rename stat column (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: add clash resolution stat counter (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: remove ignore stats (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not increment two error counters at same time (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not auto-delete clash entries on reply (Florian Westphal) [1882095 1875681]
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1881085 1875316] {CVE-2020-14385}
- [kernel] time/tick-broadcast: Fix tick_broadcast_offline() lockdep complaint (Alexey Klimov) [1880081 1877380]
- [net] atomics/treewide: Rename __atomic_add_unless() =&gt; atomic_fetch_add_unless() (Yauheni Kaliuta) [1880081 1813370]
- [kernel] timers: Lower base clock forwarding threshold (Phil Auld) [1877417 1833096]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.26.1.el8_2]" date="1602158400">- [firmware] efi: don't reserve MOK config table memory region (Kairui Song) [1879988 1878584]
- [security] integrity: Load certs from the EFI MOK config table (Lenny Szubowicz) [1877528 1868306]
- [security] integrity: Move import of MokListRT certs to a separate routine (Lenny Szubowicz) [1877528 1868306]
- [firmware] efi: Support for MOK variable config table (Lenny Szubowicz) [1877528 1868306]
- [security] efi: Only print errors about failing to get certs if EFI vars are found (Lenny Szubowicz) [1877528 1804969]
- [fs] ceph: fix inode number handling on arches with 32-bit ino_t (Jeff Layton) [1875787 1866018]
- [fs] ceph: handle zero-length feature mask in session messages (Jeff Layton) [1875787 1866018]
- [fs] ceph: fix endianness bug when handling MDS session feature bits (Jeff Layton) [1875787 1866018]
- [netdrv] net/mlx5e: Fix missing cleanup of ethtool steering during rep rx cleanup (Alaa Hleihel) [1857777 1856660]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.27.1.el8_2]" date="1602763200">- [powerpc] powerpc/pseries: Do not initiate shutdown when system is running on UPS (Diego Domingos) [1882243 1870477]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859471 1859472] {CVE-2020-14331}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.28.1.el8_2]" date="1602849600">- [net] Bluetooth: L2CAP: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888256 1888258] {CVE-2020-12351}
- [net] Bluetooth: A2MP: Fix not initializing all members (Gopal Tiwari) [1888906 1888807] {CVE-2020-12352}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-193.28.1.el8.centos" date="1603195200">- Apply debranding changes</changelog>
</package>
<package pkgid="6ef9ac0e11dd9b24f7478883639dd8a6be0409e82fd77d33076181bc4a30151a" name="perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="305.10.2.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.2.1.el8_4]" date="1620648000">- net/mlx5e: Allow to match on MPLS parameters only for MPLS over UDP (Alaa Hleihel) [1952061 1936742]
- net/mlx5e: Reject tc rules which redirect from a VF to itself (Alaa Hleihel) [1952065 1932839]
- net/mlx5: CT: Add support for matching on ct_state inv and rel flags (Alaa Hleihel) [1952062 1942681]
- KVM: VMX: Don't use vcpu-&gt;run-&gt;internal.ndata as an array index (Jon Maloy) [1954221 1954219]
- tools/power turbostat: Revert "[tools] tools/power turbostat: Enable accumulate RAPL display" (Prarit Bhargava) [1952987 1944699]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.3.1.el8_4]" date="1621252800">- Revert "uio: use request_threaded_irq instead" (Vitaly Kuznetsov) [1952952 1946644]
- drm/ast: Set format registers in primary plane's update (Lyude Paul) [1952900 1923857]
- net/sched: act_ct: clear post_ct if doing ct_clear (Marcelo Ricardo Leitner) [1956458 1941889]
- md/raid1: properly indicate failure when ending a failed write request (Nigel Croxon) [1955188 1954588]
- nitro_enclaves: Fix stale file descriptors on failed usercopy (Vitaly Kuznetsov) [1956379 1953717]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.4.1.el8_4]" date="1621944000">- vmxnet3: Set the default of vxlan overlay offload to disabled (Cathy Avery) [1960702 1941714]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.5.1.el8_4]" date="1622548800">- gfs2: report "already frozen/thawed" errors (Bob Peterson) [1961849 1932236]
- gfs2: move freeze glock outside the make_fs_rw and _ro functions (Bob Peterson) [1961849 1932236]
- gfs2: Add common helper for holding and releasing the freeze glock (Bob Peterson) [1961849 1932236]
- gfs2: in signal_our_withdraw wait for unfreeze of _this_ fs only (Bob Peterson) [1961849 1932236]
- gfs2: Don't freeze the file system during unmount (Bob Peterson) [1961849 1932236]
- gfs2: Fix regression in freeze_go_sync (Bob Peterson) [1961849 1932236]
- gfs2: The freeze glock should never be frozen (Bob Peterson) [1961849 1932236]
- gfs2: When freezing gfs2, use GL_EXACT and not GL_NOCACHE (Bob Peterson) [1961849 1932236]
- gfs2: read-only mounts should grab the sd_freeze_gl glock (Bob Peterson) [1961849 1932236]
- gfs2: freeze should work on read-only mounts (Bob Peterson) [1961849 1932236]
- gfs2: Abort gfs2_freeze if io error is seen (Bob Peterson) [1961849 1932236]
- CI: Disable result checking for realtime check (Veronika Kabatova)
- CI: Explicitly disable result checking for private CI (Veronika Kabatova)
- CI: Rename variable (Veronika Kabatova)
- CI: Update builder containers (Veronika Kabatova)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.6.1.el8_4]" date="1623067200">- openvswitch: fix stack OOB read while fragmenting IPv4 packets (Davide Caratti) [1963940 1924608]
- net/sched: sch_frag: fix stack OOB read while fragmenting IPv4 packets (Davide Caratti) [1963940 1924608]
- net/sched: act_ct: fix wild memory access when clearing fragments (Davide Caratti) [1963940 1924608]
- net: Treat __napi_schedule_irqoff() as __napi_schedule() on PREEMPT_RT (Ivan Vecera)
- redhat/configs: Add CONFIG_SYSTEM_REVOCATION_KEYS and CONFIG_SYSTEM_REVOCATION_LIST (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: add 'x509_revocation_list' to gitignore (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- integrity: Load mokx variables into the blacklist keyring (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Add ability to preload revocation certs (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Move load_system_certificate_list to a common function (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Add EFI_CERT_X509_GUID support for dbx entries (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- net/sched: cls_api: increase max_reclassify_loop (Davide Caratti) [1965148 1955136]
- dm writecache: fix performance degradation in ssd mode (Mike Snitzer) [1962241 1961859]
- scsi: fnic: Use scsi_host_busy_iter() to traverse commands (Ewan D. Milne) [1961705 1949250]
- scsi: fnic: Kill 'exclude_id' argument to fnic_cleanup_io() (Ewan D. Milne) [1961705 1949250]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.7.1.el8_4]" date="1623672000">- net: zero-initialize tc skb extension on allocation (Ivan Vecera) [1965457 1946986]
- net/sched: cls_flower: fix only mask bit check in the validate_ct_state (Ivan Vecera) [1965457 1946986]
- net: cls_api: Fix uninitialised struct field bo-&gt;unlocked_driver_cb (Ivan Vecera) [1965457 1946986]
- net/sched: act_api: fix miss set post_ct for ovs after do conntrack in act_ct (Ivan Vecera) [1965457 1946986]
- net/sched: cls_flower: validate ct_state for invalid and reply flags (Ivan Vecera) [1965457 1946986]
- flow_dissector: fix TTL and TOS dissection on IPv4 fragments (Paolo Abeni) [1963952 1950288]
- Revert "sctp: Fix SHUTDOWN CTSN Ack in the peer restart case" (Xin Long) [1965632 1953839]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [1965632 1953839]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [1965632 1953839]
- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962544 1962546] {CVE-2021-33034}
- x86/kvm: Unify kvm_pv_guest_cpu_reboot() with kvm_guest_cpu_offline() (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Disable all PV features on crash (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Disable kvmclock on all CPUs on shutdown (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Teardown PV features on boot CPU as well (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Fix pr_info() for async PF setup/teardown (Lenny Szubowicz) [1964930 1934273]
- net/sched: act_ct: Fix ct template allocation for zone 0 (Marcelo Ricardo Leitner) [1965150 1881824]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.8.1.el8_4]" date="1624363200">- iavf: amend removal of MODULE_VERSION (Stefan Assmann) [1969925 1955738]
- ixgbe: Amend commit acf03026ec5a to include a version string in module info. (Ken Cox) [1969922 1955759]
- i40e: amend removal of MODULE_VERSION (Stefan Assmann) [1969923 1955736]
- redhat/configs: Add CONFIG_PINCTRL_EMMITSBURG (David Arcari) [1963984 1959506]
- redhat/configs: Remove CONFIG_EMMITSBURG (David Arcari) [1963984 1959506]
- netlink: add tracepoint at NL_SET_ERR_MSG (Marcelo Ricardo Leitner) [1972938 1956983]
- Revert "[netdrv] net/intel: remove driver versions from Intel drivers" (Jonathan Toppins) [1969917 1955745]
- Amends commit ea6244cc248b to include a version string in module info. (Ken Cox) [1969915 1955726]
- Revert "[netdrv] net/broadcom: Clean broadcom code from driver versions" (Jonathan Toppins) [1969914 1955721]
- ena: revert removal of MODULE_VERSION from ena (Petr Oros) [1969913 1955712]
- fm10k: amend removal of MODULE_VERSION (Vladis Dronov) [1969910 1955730]
- net/sched: act_ct: Offload connections with commit action (Marcelo Ricardo Leitner) [1968679 1965817]
- netfilter: flowtable: Remove redundant hw refresh bit (Marcelo Ricardo Leitner) [1968679 1965817]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.9.1.el8_4]" date="1624881600">- ixgbevf: Amend commit acf03026ec5a to include a version in module info. (Ken Cox) [1969911 1955764]
- CI: Merge configuration (Veronika Kabatova)
- igc: amend removal of MODULE_VERSION (Corinna Vinschen) [1969921 1955755]
- igb: amend removal of MODULE_VERSION (Corinna Vinschen) [1969919 1955748]
- locking/qrwlock: Fix ordering in queued_write_lock_slowpath() (Waiman Long) [1964419 1950110]
- scsi: qedf: Do not put host in qedf_vport_create() unconditionally (Nilesh Javali) [1974968 1899384]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.10.1.el8_4]" date="1625659200">- igbvf: amend removal of MODULE_VERSION (Corinna Vinschen) [1969920 1955752]
- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971464 1971488] {CVE-2021-32399}
- scsi: ibmvfc: Free channel_setup_buf during device tear down (Steve Best) [1964697 1938102]
- i40e: Fix parameters in aq_get_phy_register() (Stefan Assmann) [1967099 1907852]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.10.2.el8_4]" date="1626091200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975181 1975182] {CVE-2021-33909}</changelog>
</package>
<package pkgid="bf76eedc135c3c03e89df88d19c295c5e211e36c450a4be801841771a3b7104b" name="perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="348.20.1.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.12.1.el8_5]" date="1641988800">- tcp: don't free a FIN sk_buff in tcp_remove_empty_skb() (Guillaume Nault) [2021574 2016210]
- kernel.spec: Add support to use vmlinux.h (Jiri Olsa) [2031053 1989087]
- spec: Add vmlinux.h to kernel-devel package (Jiri Olsa) [2031053 1989087]
- x86/mce: Avoid infinite loop for copy from user recovery (Prarit Bhargava) [2008789 1999550]
- x86/mce: Rename kill_it to kill_current_task (Prarit Bhargava) [2008789 1999550]
- x86/mce: Recover from poison found while copying from user space (Prarit Bhargava) [2008789 1999550]
- x86/mce: Delay clearing IA32_MCG_STATUS to the end of do_machine_check() (Prarit Bhargava) [2008789 1999550]
- x86/mce: Send #MC singal from task work (Prarit Bhargava) [2008789 1999550]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-348.13.1.el8_5]" date="1642507200">- vfs: Out-of-bounds write of heap buffer in fs_context.c (Frantisek Hrbata) [2040585 2040586] {CVE-2022-0185}
- xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Bruno Meneguele) [2034864 2034865] {CVE-2021-4155}
- af_unix: fix garbage collect vs MSG_PEEK (Patrick Talbert) [2031974 2031975] {CVE-2021-0920}
- cgroup: verify that source is a string (Waiman Long) [2034608 2034609] {CVE-2021-4154}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-348.14.1.el8_5]" date="1643198400">- tcp: fix page frag corruption on page fault (Paolo Abeni) [2041529 1996074]
- net: fix sk_page_frag() recursion from memory reclaim (Paolo Abeni) [2041529 1996074]
- KVM: s390: index kvm-&gt;arch.idle_mask by vcpu_idx (Thomas Huth) [2040769 2026230]
- redhat: set LC_ALL=C before sorting config content (Frantisek Hrbata)</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.15.1.el8_5]" date="1643716800">- net/mlx5: DR, Use FW API when updating FW-owned flow table (Michal Schmidt) [2042663 2042651]
- KVM: x86: Wait for IPIs to be delivered when handling Hyper-V TLB flush hypercall (Vitaly Kuznetsov) [2043237 1868572]
- drm/mgag200: Select clock in PLL update functions (Bruno Meneguele) [2034949 1953926]
- drm/i915: Fix HAS_LSPCON macro for platforms between GEN9 and GEN10 (Bruno Meneguele) [2027335 2005586]
- crypto: qat - power up 4xxx device (Vladis Dronov) [2016437 1960307]
- RDMA/core: Fix a double free in add_port error flow (Kamal Heib) [2038724 2008555]
- powerpc/iommu: Report the correct most efficient DMA mask for PCI devices (Steve Best) [2018928 2007425]
- powerpc/dma: Fix dma_map_ops::get_required_mask (Steve Best) [2018928 2007425]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.16.1.el8_5]" date="1644321600">- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047601 2047602] {CVE-2022-22942}
- net: openvswitch: Fix ct_state nat flags for conns arriving from tc (Marcelo Ricardo Leitner) [2043548 2040334]
- net: openvswitch: Fix matching zone id for invalid conns arriving from tc (Marcelo Ricardo Leitner) [2043550 2040452]
- net/sched: flow_dissector: Fix matching on zone id for invalid conns (Marcelo Ricardo Leitner) [2043550 2040452]
- net/sched: Extend qdisc control block with tc control block (Marcelo Ricardo Leitner) [2043550 2040452]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.17.1.el8_5]" date="1644926400">- vfs: check dentry is still valid in get_link() (Ian Kent) [2052558 2014846]
- xfs: don't expose internal symlink metadata buffers to the vfs (Brian Foster) [2052558 2014846]
- CI: Use appropriate zstream builder (Veronika Kabatova)
- CI: Enable baseline realtime checks (Veronika Kabatova)
- CI: Rename pipelines to include release names (Veronika Kabatova)
- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052166 2052167] {CVE-2022-0492}
- ice: Remove boolean vlan_promisc flag from function (Jonathan Toppins) [2051951 2030400]
- ceph: put the requests/sessions when it fails to alloc memory (Jeffrey Layton) [2053725 2017796]
- ceph: fix off by one bugs in unsafe_request_wait() (Jeffrey Layton) [2053725 2017796]
- ceph: flush the mdlog before waiting on unsafe reqs (Jeffrey Layton) [2053725 2017796]
- ceph: flush mdlog before umounting (Jeffrey Layton) [2053725 2017796]
- ceph: make iterate_sessions a global symbol (Jeffrey Layton) [2053725 2017796]
- ceph: make ceph_create_session_msg a global symbol (Jeffrey Layton) [2053725 2017796]
- xfs: check sb_meta_uuid for dabuf buffer recovery (Bill O'Donnell) [2049292 2020764]
- drm/i915: Flush TLBs before releasing backing store (Patrick Talbert) [2044328 2044329] {CVE-2022-0330}
- hugetlb: fix hugetlb cgroup refcounting during vma split (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: fix imbalanced css_get and css_put pair for shared mappings (Waiman Long) [2039015 2032811]
- mm/hugetlb: change hugetlb_reserve_pages() to type bool (Waiman Long) [2039015 2032811]
- hugetlb: fix an error code in hugetlb_reserve_pages() (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: fix offline of hugetlb cgroup with reservations (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: fix reservation accounting (Waiman Long) [2039015 2032811]
- mm/hugetlb: narrow the hugetlb_lock protection area during preparing huge page (Waiman Long) [2039015 2032811]
- mm/hugetlb: a page from buddy is not on any list (Waiman Long) [2039015 2032811]
- mm/hugetlb: not necessary to coalesce regions recursively (Waiman Long) [2039015 2032811]
- selftests/vm/write_to_hugetlbfs.c: fix unused variable warning (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add hugetlb_cgroup reservation tests (Waiman Long) [2039015 2032811]
- hugetlb: support file_region coalescing again (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: support noreserve mappings (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add accounting for shared mappings (Waiman Long) [2039015 2032811]
- hugetlb: disable region_add file_region coalescing (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add reservation accounting for private mappings (Waiman Long) [2039015 2032811]
- mm/hugetlb_cgroup: fix hugetlb_cgroup migration (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add interface for charge/uncharge hugetlb reservations (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add hugetlb_cgroup reservation counter (Waiman Long) [2039015 2032811]
- hugetlb: remove duplicated code (Waiman Long) [2039015 2032811]
- hugetlb: region_chg provides only cache entry (Waiman Long) [2039015 2032811]
- hugetlbfs: always use address space in inode for resv_map pointer (Waiman Long) [2039015 2032811]
- hugetlbfs: fix potential over/underflow setting node specific nr_hugepages (Waiman Long) [2039015 2032811]
- hugetlb: allow to free gigantic pages regardless of the configuration (Waiman Long) [2039015 2032811]
- powerpc/pseries: Fix update of LPAR security flavor after LPM (Steve Best) [2027448 1997294]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.18.1.el8_5]" date="1645531200">- selftests: kvm: Check whether SIDA memop fails for normal guests (Thomas Huth) [2050806 2050807] {CVE-2022-0516}
- KVM: s390: Return error on SIDA memop on normal guest (Thomas Huth) [2050806 2050807] {CVE-2022-0516}
- iommu/amd: Remove iommu_init_ga() (Jerry Snitselaar) [2030854 1998265]
- iommu/amd: Relocate GAMSup check to early_enable_iommus (Jerry Snitselaar) [2030854 1998265]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.19.1.el8_5]" date="1646049600">- tipc: improve size validations for received domain records (Xin Long) [2048970 2048971] {CVE-2022-0435}
- smb3: do not error on fsync when readonly (Ronnie Sahlberg) [2055824 2037811]
- security: implement sctp_assoc_established hook in selinux (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- security: add sctp_assoc_established hook (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- security: call security_sctp_assoc_request in sctp_sf_do_5_1D_ce (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- security: pass asoc to sctp_assoc_request and sctp_sk_clone (Bruno Meneguele) [2054112 2054117 2015525 2048251]
- net: sctp: Fix some typos (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- RDMA/bnxt_re: Fix stats counters (Selvin Xavier) [2049684 2001893]
- net: check skb sec_path when re-initializing slow_gro in gro_list_prepare (Xin Long) [2047427 2030476]
- cpufreq: intel_pstate: Add Icelake servers support in no-HWP mode (David Arcari) [2036888 2003695]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.20.1.el8_5]" date="1646740800">- lib/iov_iter: initialize "flags" in new pipe_buffer (Jan Stancek) [2060874 2060875] {CVE-2022-0847}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-348.20.1.el8.centos" date="1646913600">- Apply debranding changes</changelog>
</package>
<package pkgid="2a4e15335e6ce8985ec75ae29066ddf00d223bf50fdaac3cc605b3abcaa6547f" name="python-perf" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="b26e3c554886c351216526f27907418028d293abc247a16b6671bdac0d983534" name="python-perf" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="193.28.1.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.20.1.el8_2]" date="1599134400">- [infiniband] IB/rdmavt: Fix RQ counting issues causing use of an invalid RWQE (Kamal Heib) [1872771 1850314]
- [block] blk-mq: Rerun dispatching in the case of budget contention (Ming Lei) [1869779 1824037]
- [block] blk-mq: Add blk_mq_delay_run_hw_queues() API call (Ming Lei) [1869779 1824037]
- [block] blk-mq: In blk_mq_dispatch_rq_list() "no budget" is a reason to kick (Ming Lei) [1869779 1824037]
- [block] blk-mq: Put driver tag in blk_mq_dispatch_rq_list() when no budget (Ming Lei) [1869779 1824037]
- [md] dm mpath: use double checked locking in fast path (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rename current_pgpath to pgpath in multipath_prepare_ioctl (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rework __map_bio() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: factor out multipath_queue_bio (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: push locking down to must_push_back_rq() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: take m-&gt;lock spinlock when testing QUEUE_IF_NO_PATH (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: changes from initial m-&gt;flags locking audit (Mike Snitzer) [1869386 1848651]
- [md] dm rq: don't call blk_mq_queue_stopped() in dm_stop_queue() (Mike Snitzer) [1869386 1848651]
- [md] dm: do not use waitqueue for request-based DM (Mike Snitzer) [1869386 1848651]
- [block] blk-mq: consider non-idle request as "inflight" in blk_mq_rq_inflight() (Mike Snitzer) [1869386 1848651]
- [kernel] sched/deadline: Initialize -&gt;dl_boosted (Phil Auld) [1867612 1854179]
- [kernel] sched/core: Fix PI boosting between RT and DEADLINE tasks (Phil Auld) [1867612 1854179]
- [net] net/smc: tolerate future SMCD versions (Philipp Rudo) [1866390 1854992]
- [net] openvswitch: fixes potential deadlock in dp cleanup code (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: reorder masks array based on usage (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: take into account de-fragmentation/gso_size in execute_check_pkt_len (Lorenzo Bianconi) [1860169 1851888]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.21.1.el8_2]" date="1599739200">- [scsi] scsi: ibmvfc: Fix NULL return compiler warning (Steve Best) [1866371 1810653]
- [scsi] scsi: ibmvfc: Avoid loss of all paths during SVC node reboot (Steve Best) [1866371 1810653]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.22.1.el8_2]" date="1600257600">- [crypto] pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1877530 1862072]
- [crypto] Revert "pefile: Tolerate other pefile signatures after first" (Bruno Meneguele)
- [infiniband] IB/hfi1: Fix another case where pq is left on waitlist (Kamal Heib) [1872766 1859209]
- [infiniband] IB/hfi1: Ensure pq is not left on waitlist (Kamal Heib) [1872766 1859209]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.23.1.el8_2]" date="1600344000">- [net] packet: fix overflow in tpacket_rcv (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}
- [net] packet: make tp_drops atomic (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.24.1.el8_2]" date="1600862400">- [kernel] timers: Remove must_forward_clk (Phil Auld) [1877417 1833096]
- [kernel] timers: Spare timer softirq until next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Expand clk forward logic beyond nohz (Phil Auld) [1877417 1833096]
- [kernel] timers: Reuse next expiry cache after nohz exit (Phil Auld) [1877417 1833096]
- [kernel] timers: Always keep track of next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Optimize _next_timer_interrupt() level iteration (Phil Auld) [1877417 1833096]
- [kernel] timers: Add comments about calc_index() ceiling work (Phil Auld) [1877417 1833096]
- [kernel] timers: Move trigger_dyntick_cpu() to enqueue_timer() (Phil Auld) [1877417 1833096]
- [kernel] timers: Use only bucket expiry for base-&gt;next_expiry value (Phil Auld) [1877417 1833096]
- [kernel] timers: Preserve higher bits of expiration on index calculation (Phil Auld) [1877417 1833096]
- [kernel] timer: Fix wheel index calculation on last level (Phil Auld) [1877417 1833096]
- [kernel] timer: Prevent base-&gt;clk from moving backward (Phil Auld) [1877417 1833096]
- [kernel] timer: Read jiffies once when forwarding base clk (Phil Auld) [1877417 1833096]
- [infiniband] RDMA/umem: Fix ib_umem_find_best_pgsz() (Kamal Heib) [1872424 1856158]
- [net] net: accept an empty mask in /sys/class/net/*/queues/rx-*/rps_cpus (Nitesh Narayan Lal) [1870181 1868433]
- [net] net: Restrict receive packets queuing to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [pci] PCI: Restrict probe functions to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [lib] lib: Restrict cpumask_local_spread to houskeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [s390] s390/pci: Fix unexpected write combine on resource (Philipp Rudo) [1869276 1827311]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.25.1.el8_2]" date="1601553600">- [net] netfilter: conntrack: proc: rename stat column (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: add clash resolution stat counter (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: remove ignore stats (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not increment two error counters at same time (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not auto-delete clash entries on reply (Florian Westphal) [1882095 1875681]
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1881085 1875316] {CVE-2020-14385}
- [kernel] time/tick-broadcast: Fix tick_broadcast_offline() lockdep complaint (Alexey Klimov) [1880081 1877380]
- [net] atomics/treewide: Rename __atomic_add_unless() =&gt; atomic_fetch_add_unless() (Yauheni Kaliuta) [1880081 1813370]
- [kernel] timers: Lower base clock forwarding threshold (Phil Auld) [1877417 1833096]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.26.1.el8_2]" date="1602158400">- [firmware] efi: don't reserve MOK config table memory region (Kairui Song) [1879988 1878584]
- [security] integrity: Load certs from the EFI MOK config table (Lenny Szubowicz) [1877528 1868306]
- [security] integrity: Move import of MokListRT certs to a separate routine (Lenny Szubowicz) [1877528 1868306]
- [firmware] efi: Support for MOK variable config table (Lenny Szubowicz) [1877528 1868306]
- [security] efi: Only print errors about failing to get certs if EFI vars are found (Lenny Szubowicz) [1877528 1804969]
- [fs] ceph: fix inode number handling on arches with 32-bit ino_t (Jeff Layton) [1875787 1866018]
- [fs] ceph: handle zero-length feature mask in session messages (Jeff Layton) [1875787 1866018]
- [fs] ceph: fix endianness bug when handling MDS session feature bits (Jeff Layton) [1875787 1866018]
- [netdrv] net/mlx5e: Fix missing cleanup of ethtool steering during rep rx cleanup (Alaa Hleihel) [1857777 1856660]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.27.1.el8_2]" date="1602763200">- [powerpc] powerpc/pseries: Do not initiate shutdown when system is running on UPS (Diego Domingos) [1882243 1870477]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859471 1859472] {CVE-2020-14331}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.28.1.el8_2]" date="1602849600">- [net] Bluetooth: L2CAP: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888256 1888258] {CVE-2020-12351}
- [net] Bluetooth: A2MP: Fix not initializing all members (Gopal Tiwari) [1888906 1888807] {CVE-2020-12352}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-193.28.1.el8.centos" date="1603195200">- Apply debranding changes</changelog>
</package>
<package pkgid="05ccc2c3d96fd52ebc140e7628bc5487410d90419a39bb63af270609637d060a" name="python-perf" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="305.10.2.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.2.1.el8_4]" date="1620648000">- net/mlx5e: Allow to match on MPLS parameters only for MPLS over UDP (Alaa Hleihel) [1952061 1936742]
- net/mlx5e: Reject tc rules which redirect from a VF to itself (Alaa Hleihel) [1952065 1932839]
- net/mlx5: CT: Add support for matching on ct_state inv and rel flags (Alaa Hleihel) [1952062 1942681]
- KVM: VMX: Don't use vcpu-&gt;run-&gt;internal.ndata as an array index (Jon Maloy) [1954221 1954219]
- tools/power turbostat: Revert "[tools] tools/power turbostat: Enable accumulate RAPL display" (Prarit Bhargava) [1952987 1944699]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.3.1.el8_4]" date="1621252800">- Revert "uio: use request_threaded_irq instead" (Vitaly Kuznetsov) [1952952 1946644]
- drm/ast: Set format registers in primary plane's update (Lyude Paul) [1952900 1923857]
- net/sched: act_ct: clear post_ct if doing ct_clear (Marcelo Ricardo Leitner) [1956458 1941889]
- md/raid1: properly indicate failure when ending a failed write request (Nigel Croxon) [1955188 1954588]
- nitro_enclaves: Fix stale file descriptors on failed usercopy (Vitaly Kuznetsov) [1956379 1953717]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.4.1.el8_4]" date="1621944000">- vmxnet3: Set the default of vxlan overlay offload to disabled (Cathy Avery) [1960702 1941714]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.5.1.el8_4]" date="1622548800">- gfs2: report "already frozen/thawed" errors (Bob Peterson) [1961849 1932236]
- gfs2: move freeze glock outside the make_fs_rw and _ro functions (Bob Peterson) [1961849 1932236]
- gfs2: Add common helper for holding and releasing the freeze glock (Bob Peterson) [1961849 1932236]
- gfs2: in signal_our_withdraw wait for unfreeze of _this_ fs only (Bob Peterson) [1961849 1932236]
- gfs2: Don't freeze the file system during unmount (Bob Peterson) [1961849 1932236]
- gfs2: Fix regression in freeze_go_sync (Bob Peterson) [1961849 1932236]
- gfs2: The freeze glock should never be frozen (Bob Peterson) [1961849 1932236]
- gfs2: When freezing gfs2, use GL_EXACT and not GL_NOCACHE (Bob Peterson) [1961849 1932236]
- gfs2: read-only mounts should grab the sd_freeze_gl glock (Bob Peterson) [1961849 1932236]
- gfs2: freeze should work on read-only mounts (Bob Peterson) [1961849 1932236]
- gfs2: Abort gfs2_freeze if io error is seen (Bob Peterson) [1961849 1932236]
- CI: Disable result checking for realtime check (Veronika Kabatova)
- CI: Explicitly disable result checking for private CI (Veronika Kabatova)
- CI: Rename variable (Veronika Kabatova)
- CI: Update builder containers (Veronika Kabatova)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.6.1.el8_4]" date="1623067200">- openvswitch: fix stack OOB read while fragmenting IPv4 packets (Davide Caratti) [1963940 1924608]
- net/sched: sch_frag: fix stack OOB read while fragmenting IPv4 packets (Davide Caratti) [1963940 1924608]
- net/sched: act_ct: fix wild memory access when clearing fragments (Davide Caratti) [1963940 1924608]
- net: Treat __napi_schedule_irqoff() as __napi_schedule() on PREEMPT_RT (Ivan Vecera)
- redhat/configs: Add CONFIG_SYSTEM_REVOCATION_KEYS and CONFIG_SYSTEM_REVOCATION_LIST (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: add 'x509_revocation_list' to gitignore (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- integrity: Load mokx variables into the blacklist keyring (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Add ability to preload revocation certs (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Move load_system_certificate_list to a common function (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Add EFI_CERT_X509_GUID support for dbx entries (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- net/sched: cls_api: increase max_reclassify_loop (Davide Caratti) [1965148 1955136]
- dm writecache: fix performance degradation in ssd mode (Mike Snitzer) [1962241 1961859]
- scsi: fnic: Use scsi_host_busy_iter() to traverse commands (Ewan D. Milne) [1961705 1949250]
- scsi: fnic: Kill 'exclude_id' argument to fnic_cleanup_io() (Ewan D. Milne) [1961705 1949250]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.7.1.el8_4]" date="1623672000">- net: zero-initialize tc skb extension on allocation (Ivan Vecera) [1965457 1946986]
- net/sched: cls_flower: fix only mask bit check in the validate_ct_state (Ivan Vecera) [1965457 1946986]
- net: cls_api: Fix uninitialised struct field bo-&gt;unlocked_driver_cb (Ivan Vecera) [1965457 1946986]
- net/sched: act_api: fix miss set post_ct for ovs after do conntrack in act_ct (Ivan Vecera) [1965457 1946986]
- net/sched: cls_flower: validate ct_state for invalid and reply flags (Ivan Vecera) [1965457 1946986]
- flow_dissector: fix TTL and TOS dissection on IPv4 fragments (Paolo Abeni) [1963952 1950288]
- Revert "sctp: Fix SHUTDOWN CTSN Ack in the peer restart case" (Xin Long) [1965632 1953839]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [1965632 1953839]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [1965632 1953839]
- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962544 1962546] {CVE-2021-33034}
- x86/kvm: Unify kvm_pv_guest_cpu_reboot() with kvm_guest_cpu_offline() (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Disable all PV features on crash (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Disable kvmclock on all CPUs on shutdown (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Teardown PV features on boot CPU as well (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Fix pr_info() for async PF setup/teardown (Lenny Szubowicz) [1964930 1934273]
- net/sched: act_ct: Fix ct template allocation for zone 0 (Marcelo Ricardo Leitner) [1965150 1881824]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.8.1.el8_4]" date="1624363200">- iavf: amend removal of MODULE_VERSION (Stefan Assmann) [1969925 1955738]
- ixgbe: Amend commit acf03026ec5a to include a version string in module info. (Ken Cox) [1969922 1955759]
- i40e: amend removal of MODULE_VERSION (Stefan Assmann) [1969923 1955736]
- redhat/configs: Add CONFIG_PINCTRL_EMMITSBURG (David Arcari) [1963984 1959506]
- redhat/configs: Remove CONFIG_EMMITSBURG (David Arcari) [1963984 1959506]
- netlink: add tracepoint at NL_SET_ERR_MSG (Marcelo Ricardo Leitner) [1972938 1956983]
- Revert "[netdrv] net/intel: remove driver versions from Intel drivers" (Jonathan Toppins) [1969917 1955745]
- Amends commit ea6244cc248b to include a version string in module info. (Ken Cox) [1969915 1955726]
- Revert "[netdrv] net/broadcom: Clean broadcom code from driver versions" (Jonathan Toppins) [1969914 1955721]
- ena: revert removal of MODULE_VERSION from ena (Petr Oros) [1969913 1955712]
- fm10k: amend removal of MODULE_VERSION (Vladis Dronov) [1969910 1955730]
- net/sched: act_ct: Offload connections with commit action (Marcelo Ricardo Leitner) [1968679 1965817]
- netfilter: flowtable: Remove redundant hw refresh bit (Marcelo Ricardo Leitner) [1968679 1965817]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.9.1.el8_4]" date="1624881600">- ixgbevf: Amend commit acf03026ec5a to include a version in module info. (Ken Cox) [1969911 1955764]
- CI: Merge configuration (Veronika Kabatova)
- igc: amend removal of MODULE_VERSION (Corinna Vinschen) [1969921 1955755]
- igb: amend removal of MODULE_VERSION (Corinna Vinschen) [1969919 1955748]
- locking/qrwlock: Fix ordering in queued_write_lock_slowpath() (Waiman Long) [1964419 1950110]
- scsi: qedf: Do not put host in qedf_vport_create() unconditionally (Nilesh Javali) [1974968 1899384]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.10.1.el8_4]" date="1625659200">- igbvf: amend removal of MODULE_VERSION (Corinna Vinschen) [1969920 1955752]
- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971464 1971488] {CVE-2021-32399}
- scsi: ibmvfc: Free channel_setup_buf during device tear down (Steve Best) [1964697 1938102]
- i40e: Fix parameters in aq_get_phy_register() (Stefan Assmann) [1967099 1907852]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.10.2.el8_4]" date="1626091200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975181 1975182] {CVE-2021-33909}</changelog>
</package>
<package pkgid="18adee4ec1ed6a70aadb5fc24cc200666004739ff14284f8b9db42f39860c2f0" name="python-perf" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="348.20.1.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.12.1.el8_5]" date="1641988800">- tcp: don't free a FIN sk_buff in tcp_remove_empty_skb() (Guillaume Nault) [2021574 2016210]
- kernel.spec: Add support to use vmlinux.h (Jiri Olsa) [2031053 1989087]
- spec: Add vmlinux.h to kernel-devel package (Jiri Olsa) [2031053 1989087]
- x86/mce: Avoid infinite loop for copy from user recovery (Prarit Bhargava) [2008789 1999550]
- x86/mce: Rename kill_it to kill_current_task (Prarit Bhargava) [2008789 1999550]
- x86/mce: Recover from poison found while copying from user space (Prarit Bhargava) [2008789 1999550]
- x86/mce: Delay clearing IA32_MCG_STATUS to the end of do_machine_check() (Prarit Bhargava) [2008789 1999550]
- x86/mce: Send #MC singal from task work (Prarit Bhargava) [2008789 1999550]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-348.13.1.el8_5]" date="1642507200">- vfs: Out-of-bounds write of heap buffer in fs_context.c (Frantisek Hrbata) [2040585 2040586] {CVE-2022-0185}
- xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Bruno Meneguele) [2034864 2034865] {CVE-2021-4155}
- af_unix: fix garbage collect vs MSG_PEEK (Patrick Talbert) [2031974 2031975] {CVE-2021-0920}
- cgroup: verify that source is a string (Waiman Long) [2034608 2034609] {CVE-2021-4154}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-348.14.1.el8_5]" date="1643198400">- tcp: fix page frag corruption on page fault (Paolo Abeni) [2041529 1996074]
- net: fix sk_page_frag() recursion from memory reclaim (Paolo Abeni) [2041529 1996074]
- KVM: s390: index kvm-&gt;arch.idle_mask by vcpu_idx (Thomas Huth) [2040769 2026230]
- redhat: set LC_ALL=C before sorting config content (Frantisek Hrbata)</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.15.1.el8_5]" date="1643716800">- net/mlx5: DR, Use FW API when updating FW-owned flow table (Michal Schmidt) [2042663 2042651]
- KVM: x86: Wait for IPIs to be delivered when handling Hyper-V TLB flush hypercall (Vitaly Kuznetsov) [2043237 1868572]
- drm/mgag200: Select clock in PLL update functions (Bruno Meneguele) [2034949 1953926]
- drm/i915: Fix HAS_LSPCON macro for platforms between GEN9 and GEN10 (Bruno Meneguele) [2027335 2005586]
- crypto: qat - power up 4xxx device (Vladis Dronov) [2016437 1960307]
- RDMA/core: Fix a double free in add_port error flow (Kamal Heib) [2038724 2008555]
- powerpc/iommu: Report the correct most efficient DMA mask for PCI devices (Steve Best) [2018928 2007425]
- powerpc/dma: Fix dma_map_ops::get_required_mask (Steve Best) [2018928 2007425]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.16.1.el8_5]" date="1644321600">- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047601 2047602] {CVE-2022-22942}
- net: openvswitch: Fix ct_state nat flags for conns arriving from tc (Marcelo Ricardo Leitner) [2043548 2040334]
- net: openvswitch: Fix matching zone id for invalid conns arriving from tc (Marcelo Ricardo Leitner) [2043550 2040452]
- net/sched: flow_dissector: Fix matching on zone id for invalid conns (Marcelo Ricardo Leitner) [2043550 2040452]
- net/sched: Extend qdisc control block with tc control block (Marcelo Ricardo Leitner) [2043550 2040452]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.17.1.el8_5]" date="1644926400">- vfs: check dentry is still valid in get_link() (Ian Kent) [2052558 2014846]
- xfs: don't expose internal symlink metadata buffers to the vfs (Brian Foster) [2052558 2014846]
- CI: Use appropriate zstream builder (Veronika Kabatova)
- CI: Enable baseline realtime checks (Veronika Kabatova)
- CI: Rename pipelines to include release names (Veronika Kabatova)
- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052166 2052167] {CVE-2022-0492}
- ice: Remove boolean vlan_promisc flag from function (Jonathan Toppins) [2051951 2030400]
- ceph: put the requests/sessions when it fails to alloc memory (Jeffrey Layton) [2053725 2017796]
- ceph: fix off by one bugs in unsafe_request_wait() (Jeffrey Layton) [2053725 2017796]
- ceph: flush the mdlog before waiting on unsafe reqs (Jeffrey Layton) [2053725 2017796]
- ceph: flush mdlog before umounting (Jeffrey Layton) [2053725 2017796]
- ceph: make iterate_sessions a global symbol (Jeffrey Layton) [2053725 2017796]
- ceph: make ceph_create_session_msg a global symbol (Jeffrey Layton) [2053725 2017796]
- xfs: check sb_meta_uuid for dabuf buffer recovery (Bill O'Donnell) [2049292 2020764]
- drm/i915: Flush TLBs before releasing backing store (Patrick Talbert) [2044328 2044329] {CVE-2022-0330}
- hugetlb: fix hugetlb cgroup refcounting during vma split (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: fix imbalanced css_get and css_put pair for shared mappings (Waiman Long) [2039015 2032811]
- mm/hugetlb: change hugetlb_reserve_pages() to type bool (Waiman Long) [2039015 2032811]
- hugetlb: fix an error code in hugetlb_reserve_pages() (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: fix offline of hugetlb cgroup with reservations (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: fix reservation accounting (Waiman Long) [2039015 2032811]
- mm/hugetlb: narrow the hugetlb_lock protection area during preparing huge page (Waiman Long) [2039015 2032811]
- mm/hugetlb: a page from buddy is not on any list (Waiman Long) [2039015 2032811]
- mm/hugetlb: not necessary to coalesce regions recursively (Waiman Long) [2039015 2032811]
- selftests/vm/write_to_hugetlbfs.c: fix unused variable warning (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add hugetlb_cgroup reservation tests (Waiman Long) [2039015 2032811]
- hugetlb: support file_region coalescing again (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: support noreserve mappings (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add accounting for shared mappings (Waiman Long) [2039015 2032811]
- hugetlb: disable region_add file_region coalescing (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add reservation accounting for private mappings (Waiman Long) [2039015 2032811]
- mm/hugetlb_cgroup: fix hugetlb_cgroup migration (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add interface for charge/uncharge hugetlb reservations (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add hugetlb_cgroup reservation counter (Waiman Long) [2039015 2032811]
- hugetlb: remove duplicated code (Waiman Long) [2039015 2032811]
- hugetlb: region_chg provides only cache entry (Waiman Long) [2039015 2032811]
- hugetlbfs: always use address space in inode for resv_map pointer (Waiman Long) [2039015 2032811]
- hugetlbfs: fix potential over/underflow setting node specific nr_hugepages (Waiman Long) [2039015 2032811]
- hugetlb: allow to free gigantic pages regardless of the configuration (Waiman Long) [2039015 2032811]
- powerpc/pseries: Fix update of LPAR security flavor after LPM (Steve Best) [2027448 1997294]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.18.1.el8_5]" date="1645531200">- selftests: kvm: Check whether SIDA memop fails for normal guests (Thomas Huth) [2050806 2050807] {CVE-2022-0516}
- KVM: s390: Return error on SIDA memop on normal guest (Thomas Huth) [2050806 2050807] {CVE-2022-0516}
- iommu/amd: Remove iommu_init_ga() (Jerry Snitselaar) [2030854 1998265]
- iommu/amd: Relocate GAMSup check to early_enable_iommus (Jerry Snitselaar) [2030854 1998265]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.19.1.el8_5]" date="1646049600">- tipc: improve size validations for received domain records (Xin Long) [2048970 2048971] {CVE-2022-0435}
- smb3: do not error on fsync when readonly (Ronnie Sahlberg) [2055824 2037811]
- security: implement sctp_assoc_established hook in selinux (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- security: add sctp_assoc_established hook (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- security: call security_sctp_assoc_request in sctp_sf_do_5_1D_ce (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- security: pass asoc to sctp_assoc_request and sctp_sk_clone (Bruno Meneguele) [2054112 2054117 2015525 2048251]
- net: sctp: Fix some typos (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- RDMA/bnxt_re: Fix stats counters (Selvin Xavier) [2049684 2001893]
- net: check skb sec_path when re-initializing slow_gro in gro_list_prepare (Xin Long) [2047427 2030476]
- cpufreq: intel_pstate: Add Icelake servers support in no-HWP mode (David Arcari) [2036888 2003695]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.20.1.el8_5]" date="1646740800">- lib/iov_iter: initialize "flags" in new pipe_buffer (Jan Stancek) [2060874 2060875] {CVE-2022-0847}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-348.20.1.el8.centos" date="1646913600">- Apply debranding changes</changelog>
</package>
<package pkgid="32f80e777f3daffda07270b03742ee9b2f3bca88fa0648d6c52407b395419ce7" name="python-perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="193.1.2.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-186.el8]" date="1583323200">- [netdrv] Revert "r8169: don't use MSI before RTL8168d" (Josef Oskera) [1792839]
- [drm] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (Ben Skeggs) [1789026]
- [drm] drm/nouveau/disp/gv100-: not all channel types support reporting error codes (Ben Skeggs) [1789481]
- [drm] drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (Ben Skeggs) [1789481]
- [fs] cifs: don't leak -EAGAIN for stat() during reconnect (Dave Wysochanski) [1769599]
- [block] blk-mq: insert passthrough request into hctx-&gt;dispatch directly (Ming Lei) [1788728]
- [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1805353]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-187.el8]" date="1583496000">- [kernel] blktrace: Protect q-&gt;blk_trace with RCU (Ming Lei) [1798329]
- [drm] drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/dp: Introduce EDID-based quirks (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1782671 1773796 1748892]
- [drm] drm/i915: Check backlight type while doing eDP backlight initializaiton (Lyude Paul) [1782671 1773796 1748892]
- [tools] selftests: nft_concat_range: Add test for reported add/flush/add issue (Stefano Brivio) [1807892]
- [net] nft_set_pipapo: Actually fetch key data in nft_pipapo_remove() (Stefano Brivio) [1807892]
- [net] sched: don't take rtnl lock during flow_action setup (Marcelo Leitner) [1804385]
- [include] net: sched: refactor ct action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [include] net: sched: refactor police action helpers to require tcf_lock (Marcelo Leitner) [1804385]
- [net] sched: lock action when translating it to flow_action infra (Marcelo Leitner) [1804385]
- [powerpc] powerpc/smp: Fix NMI IPI xmon timeout (Diego Domingos) [1747320]
- [powerpc] powerpc/smp: Fix NMI IPI timeout (Diego Domingos) [1747320]
- [powerpc] powerpc: NMI IPI make NMI IPIs fully sychronous (Diego Domingos) [1747320]
- [arm64] arm64: select CPUMASK_OFFSTACK if NUMA (Andrea Arcangeli) [1712856]
- [arm64] arm64: tlb: skip tlbi broadcast (Andrea Arcangeli) [1712856]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-188.el8]" date="1584100800">- [block] blk-mq: Keep set-&gt;nr_hw_queues and set-&gt;map.nr_queues in sync (Ming Lei) [1810523]
- [block] block: clear REQ_HIPRI if polling is not supported (Ming Lei) [1809506]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-189.el8]" date="1584360000">- [netdrv] net/mlx5e: Show/set Rx network flow classification rules on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Init ethtool steering for representors (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5e: Introduce root ft concept for representors netdevs (Alaa Hleihel) [1795156 1794280]
- [netdrv] net/mlx5: E-Switch, Use vport metadata matching only when mandatory (Alaa Hleihel) [1795156]
- [nvme] nvme: log additional message for controller status (David Milburn) [1752952]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-190.el8]" date="1584532800">- [powerpc] powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (David Hildenbrand) [1812874]
- [x86] kvm/svm: PKU not currently supported (Wei Huang) [1789159]
- [x86] Remove the unsupported check for Cooper Lake (David Arcari) [1813921]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-191.el8]" date="1584705600">- [netdrv] net/mlx5e: Don't clear the whole vf config when switching modes (mohamad meib) [1814350]
- [fs] fuse: fix stack use after return (Miklos Szeredi) [1814666]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-192.el8]" date="1585051200">- [drm] drm/bochs: downgrade pci_request_region failure from error to warning (Dave Airlie) [1804735]
- [drm] drm/bochs: deinit bugfix (Dave Airlie) [1804735]
- [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1811787]
- [net] esp: remove the skb from the chain when it's enqueued in cryptd_wq (Xin Long) [1807909]
- [powerpc] powerpc/nvdimm: set target_node properly (Diego Domingos) [1815038]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.el8]" date="1585310400">- [kvm] KVM: PPC: Book3S HV: Use __gfn_to_pfn_memslot in HPT page fault handler (Sam Bobroff) [1815491]
- [net] tcp: also NULL skb-&gt;dev when copy was needed (Florian Westphal) [1775961]
- [net] tcp: ensure skb-&gt;dev is NULL before leaving TCP stack (Florian Westphal) [1775961]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.1.el8_2]" date="1587988800">- [x86] kvm: x86: clear stale x86_emulate_ctxt-&gt;intercept value (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1824398 1806817] {CVE-2020-2732}
- [sound] ALSA: usb-audio: set the interface format after resume on Dell WD19 (Perry Yuan) [1821376 1807965]
- [kernel] sched: Avoid scale real weight down to zero (Phil Auld) [1819909 1808562]
- [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817945 1805950]
- [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817945 1805950]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.1.2.el8_2]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}</changelog>
</package>
<package pkgid="b235422d1aa6c850fe1466842e6719c73432be7f622fa8b28f10f646401ccda6" name="python-perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="193.28.1.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.20.1.el8_2]" date="1599134400">- [infiniband] IB/rdmavt: Fix RQ counting issues causing use of an invalid RWQE (Kamal Heib) [1872771 1850314]
- [block] blk-mq: Rerun dispatching in the case of budget contention (Ming Lei) [1869779 1824037]
- [block] blk-mq: Add blk_mq_delay_run_hw_queues() API call (Ming Lei) [1869779 1824037]
- [block] blk-mq: In blk_mq_dispatch_rq_list() "no budget" is a reason to kick (Ming Lei) [1869779 1824037]
- [block] blk-mq: Put driver tag in blk_mq_dispatch_rq_list() when no budget (Ming Lei) [1869779 1824037]
- [md] dm mpath: use double checked locking in fast path (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rename current_pgpath to pgpath in multipath_prepare_ioctl (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: rework __map_bio() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: factor out multipath_queue_bio (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: push locking down to must_push_back_rq() (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: take m-&gt;lock spinlock when testing QUEUE_IF_NO_PATH (Mike Snitzer) [1869386 1848651]
- [md] dm mpath: changes from initial m-&gt;flags locking audit (Mike Snitzer) [1869386 1848651]
- [md] dm rq: don't call blk_mq_queue_stopped() in dm_stop_queue() (Mike Snitzer) [1869386 1848651]
- [md] dm: do not use waitqueue for request-based DM (Mike Snitzer) [1869386 1848651]
- [block] blk-mq: consider non-idle request as "inflight" in blk_mq_rq_inflight() (Mike Snitzer) [1869386 1848651]
- [kernel] sched/deadline: Initialize -&gt;dl_boosted (Phil Auld) [1867612 1854179]
- [kernel] sched/core: Fix PI boosting between RT and DEADLINE tasks (Phil Auld) [1867612 1854179]
- [net] net/smc: tolerate future SMCD versions (Philipp Rudo) [1866390 1854992]
- [net] openvswitch: fixes potential deadlock in dp cleanup code (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: reorder masks array based on usage (Eelco Chaudron) [1859216 1845662]
- [net] openvswitch: take into account de-fragmentation/gso_size in execute_check_pkt_len (Lorenzo Bianconi) [1860169 1851888]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.21.1.el8_2]" date="1599739200">- [scsi] scsi: ibmvfc: Fix NULL return compiler warning (Steve Best) [1866371 1810653]
- [scsi] scsi: ibmvfc: Avoid loss of all paths during SVC node reboot (Steve Best) [1866371 1810653]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.22.1.el8_2]" date="1600257600">- [crypto] pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1877530 1862072]
- [crypto] Revert "pefile: Tolerate other pefile signatures after first" (Bruno Meneguele)
- [infiniband] IB/hfi1: Fix another case where pq is left on waitlist (Kamal Heib) [1872766 1859209]
- [infiniband] IB/hfi1: Ensure pq is not left on waitlist (Kamal Heib) [1872766 1859209]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.23.1.el8_2]" date="1600344000">- [net] packet: fix overflow in tpacket_rcv (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}
- [net] packet: make tp_drops atomic (Hangbin Liu) [1876223 1876224] {CVE-2020-14386}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.24.1.el8_2]" date="1600862400">- [kernel] timers: Remove must_forward_clk (Phil Auld) [1877417 1833096]
- [kernel] timers: Spare timer softirq until next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Expand clk forward logic beyond nohz (Phil Auld) [1877417 1833096]
- [kernel] timers: Reuse next expiry cache after nohz exit (Phil Auld) [1877417 1833096]
- [kernel] timers: Always keep track of next expiry (Phil Auld) [1877417 1833096]
- [kernel] timers: Optimize _next_timer_interrupt() level iteration (Phil Auld) [1877417 1833096]
- [kernel] timers: Add comments about calc_index() ceiling work (Phil Auld) [1877417 1833096]
- [kernel] timers: Move trigger_dyntick_cpu() to enqueue_timer() (Phil Auld) [1877417 1833096]
- [kernel] timers: Use only bucket expiry for base-&gt;next_expiry value (Phil Auld) [1877417 1833096]
- [kernel] timers: Preserve higher bits of expiration on index calculation (Phil Auld) [1877417 1833096]
- [kernel] timer: Fix wheel index calculation on last level (Phil Auld) [1877417 1833096]
- [kernel] timer: Prevent base-&gt;clk from moving backward (Phil Auld) [1877417 1833096]
- [kernel] timer: Read jiffies once when forwarding base clk (Phil Auld) [1877417 1833096]
- [infiniband] RDMA/umem: Fix ib_umem_find_best_pgsz() (Kamal Heib) [1872424 1856158]
- [net] net: accept an empty mask in /sys/class/net/*/queues/rx-*/rps_cpus (Nitesh Narayan Lal) [1870181 1868433]
- [net] net: Restrict receive packets queuing to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [pci] PCI: Restrict probe functions to housekeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [lib] lib: Restrict cpumask_local_spread to houskeeping CPUs (Nitesh Narayan Lal) [1867174 1844520]
- [s390] s390/pci: Fix unexpected write combine on resource (Philipp Rudo) [1869276 1827311]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.25.1.el8_2]" date="1601553600">- [net] netfilter: conntrack: proc: rename stat column (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: add clash resolution stat counter (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: remove ignore stats (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not increment two error counters at same time (Florian Westphal) [1882095 1875681]
- [net] netfilter: conntrack: do not auto-delete clash entries on reply (Florian Westphal) [1882095 1875681]
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1881085 1875316] {CVE-2020-14385}
- [kernel] time/tick-broadcast: Fix tick_broadcast_offline() lockdep complaint (Alexey Klimov) [1880081 1877380]
- [net] atomics/treewide: Rename __atomic_add_unless() =&gt; atomic_fetch_add_unless() (Yauheni Kaliuta) [1880081 1813370]
- [kernel] timers: Lower base clock forwarding threshold (Phil Auld) [1877417 1833096]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.26.1.el8_2]" date="1602158400">- [firmware] efi: don't reserve MOK config table memory region (Kairui Song) [1879988 1878584]
- [security] integrity: Load certs from the EFI MOK config table (Lenny Szubowicz) [1877528 1868306]
- [security] integrity: Move import of MokListRT certs to a separate routine (Lenny Szubowicz) [1877528 1868306]
- [firmware] efi: Support for MOK variable config table (Lenny Szubowicz) [1877528 1868306]
- [security] efi: Only print errors about failing to get certs if EFI vars are found (Lenny Szubowicz) [1877528 1804969]
- [fs] ceph: fix inode number handling on arches with 32-bit ino_t (Jeff Layton) [1875787 1866018]
- [fs] ceph: handle zero-length feature mask in session messages (Jeff Layton) [1875787 1866018]
- [fs] ceph: fix endianness bug when handling MDS session feature bits (Jeff Layton) [1875787 1866018]
- [netdrv] net/mlx5e: Fix missing cleanup of ethtool steering during rep rx cleanup (Alaa Hleihel) [1857777 1856660]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.27.1.el8_2]" date="1602763200">- [powerpc] powerpc/pseries: Do not initiate shutdown when system is running on UPS (Diego Domingos) [1882243 1870477]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859471 1859472] {CVE-2020-14331}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-193.28.1.el8_2]" date="1602849600">- [net] Bluetooth: L2CAP: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888256 1888258] {CVE-2020-12351}
- [net] Bluetooth: A2MP: Fix not initializing all members (Gopal Tiwari) [1888906 1888807] {CVE-2020-12352}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-193.28.1.el8.centos" date="1603195200">- Apply debranding changes</changelog>
</package>
<package pkgid="2f3cb54c08c69b193aafeddf84e470d6e6a50e73172039051657fd191dac1a90" name="python-perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="305.10.2.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.2.1.el8_4]" date="1620648000">- net/mlx5e: Allow to match on MPLS parameters only for MPLS over UDP (Alaa Hleihel) [1952061 1936742]
- net/mlx5e: Reject tc rules which redirect from a VF to itself (Alaa Hleihel) [1952065 1932839]
- net/mlx5: CT: Add support for matching on ct_state inv and rel flags (Alaa Hleihel) [1952062 1942681]
- KVM: VMX: Don't use vcpu-&gt;run-&gt;internal.ndata as an array index (Jon Maloy) [1954221 1954219]
- tools/power turbostat: Revert "[tools] tools/power turbostat: Enable accumulate RAPL display" (Prarit Bhargava) [1952987 1944699]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.3.1.el8_4]" date="1621252800">- Revert "uio: use request_threaded_irq instead" (Vitaly Kuznetsov) [1952952 1946644]
- drm/ast: Set format registers in primary plane's update (Lyude Paul) [1952900 1923857]
- net/sched: act_ct: clear post_ct if doing ct_clear (Marcelo Ricardo Leitner) [1956458 1941889]
- md/raid1: properly indicate failure when ending a failed write request (Nigel Croxon) [1955188 1954588]
- nitro_enclaves: Fix stale file descriptors on failed usercopy (Vitaly Kuznetsov) [1956379 1953717]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.4.1.el8_4]" date="1621944000">- vmxnet3: Set the default of vxlan overlay offload to disabled (Cathy Avery) [1960702 1941714]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.5.1.el8_4]" date="1622548800">- gfs2: report "already frozen/thawed" errors (Bob Peterson) [1961849 1932236]
- gfs2: move freeze glock outside the make_fs_rw and _ro functions (Bob Peterson) [1961849 1932236]
- gfs2: Add common helper for holding and releasing the freeze glock (Bob Peterson) [1961849 1932236]
- gfs2: in signal_our_withdraw wait for unfreeze of _this_ fs only (Bob Peterson) [1961849 1932236]
- gfs2: Don't freeze the file system during unmount (Bob Peterson) [1961849 1932236]
- gfs2: Fix regression in freeze_go_sync (Bob Peterson) [1961849 1932236]
- gfs2: The freeze glock should never be frozen (Bob Peterson) [1961849 1932236]
- gfs2: When freezing gfs2, use GL_EXACT and not GL_NOCACHE (Bob Peterson) [1961849 1932236]
- gfs2: read-only mounts should grab the sd_freeze_gl glock (Bob Peterson) [1961849 1932236]
- gfs2: freeze should work on read-only mounts (Bob Peterson) [1961849 1932236]
- gfs2: Abort gfs2_freeze if io error is seen (Bob Peterson) [1961849 1932236]
- CI: Disable result checking for realtime check (Veronika Kabatova)
- CI: Explicitly disable result checking for private CI (Veronika Kabatova)
- CI: Rename variable (Veronika Kabatova)
- CI: Update builder containers (Veronika Kabatova)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.6.1.el8_4]" date="1623067200">- openvswitch: fix stack OOB read while fragmenting IPv4 packets (Davide Caratti) [1963940 1924608]
- net/sched: sch_frag: fix stack OOB read while fragmenting IPv4 packets (Davide Caratti) [1963940 1924608]
- net/sched: act_ct: fix wild memory access when clearing fragments (Davide Caratti) [1963940 1924608]
- net: Treat __napi_schedule_irqoff() as __napi_schedule() on PREEMPT_RT (Ivan Vecera)
- redhat/configs: Add CONFIG_SYSTEM_REVOCATION_KEYS and CONFIG_SYSTEM_REVOCATION_LIST (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: add 'x509_revocation_list' to gitignore (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- integrity: Load mokx variables into the blacklist keyring (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Add ability to preload revocation certs (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Move load_system_certificate_list to a common function (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Add EFI_CERT_X509_GUID support for dbx entries (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- net/sched: cls_api: increase max_reclassify_loop (Davide Caratti) [1965148 1955136]
- dm writecache: fix performance degradation in ssd mode (Mike Snitzer) [1962241 1961859]
- scsi: fnic: Use scsi_host_busy_iter() to traverse commands (Ewan D. Milne) [1961705 1949250]
- scsi: fnic: Kill 'exclude_id' argument to fnic_cleanup_io() (Ewan D. Milne) [1961705 1949250]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.7.1.el8_4]" date="1623672000">- net: zero-initialize tc skb extension on allocation (Ivan Vecera) [1965457 1946986]
- net/sched: cls_flower: fix only mask bit check in the validate_ct_state (Ivan Vecera) [1965457 1946986]
- net: cls_api: Fix uninitialised struct field bo-&gt;unlocked_driver_cb (Ivan Vecera) [1965457 1946986]
- net/sched: act_api: fix miss set post_ct for ovs after do conntrack in act_ct (Ivan Vecera) [1965457 1946986]
- net/sched: cls_flower: validate ct_state for invalid and reply flags (Ivan Vecera) [1965457 1946986]
- flow_dissector: fix TTL and TOS dissection on IPv4 fragments (Paolo Abeni) [1963952 1950288]
- Revert "sctp: Fix SHUTDOWN CTSN Ack in the peer restart case" (Xin Long) [1965632 1953839]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [1965632 1953839]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [1965632 1953839]
- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962544 1962546] {CVE-2021-33034}
- x86/kvm: Unify kvm_pv_guest_cpu_reboot() with kvm_guest_cpu_offline() (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Disable all PV features on crash (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Disable kvmclock on all CPUs on shutdown (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Teardown PV features on boot CPU as well (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Fix pr_info() for async PF setup/teardown (Lenny Szubowicz) [1964930 1934273]
- net/sched: act_ct: Fix ct template allocation for zone 0 (Marcelo Ricardo Leitner) [1965150 1881824]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.8.1.el8_4]" date="1624363200">- iavf: amend removal of MODULE_VERSION (Stefan Assmann) [1969925 1955738]
- ixgbe: Amend commit acf03026ec5a to include a version string in module info. (Ken Cox) [1969922 1955759]
- i40e: amend removal of MODULE_VERSION (Stefan Assmann) [1969923 1955736]
- redhat/configs: Add CONFIG_PINCTRL_EMMITSBURG (David Arcari) [1963984 1959506]
- redhat/configs: Remove CONFIG_EMMITSBURG (David Arcari) [1963984 1959506]
- netlink: add tracepoint at NL_SET_ERR_MSG (Marcelo Ricardo Leitner) [1972938 1956983]
- Revert "[netdrv] net/intel: remove driver versions from Intel drivers" (Jonathan Toppins) [1969917 1955745]
- Amends commit ea6244cc248b to include a version string in module info. (Ken Cox) [1969915 1955726]
- Revert "[netdrv] net/broadcom: Clean broadcom code from driver versions" (Jonathan Toppins) [1969914 1955721]
- ena: revert removal of MODULE_VERSION from ena (Petr Oros) [1969913 1955712]
- fm10k: amend removal of MODULE_VERSION (Vladis Dronov) [1969910 1955730]
- net/sched: act_ct: Offload connections with commit action (Marcelo Ricardo Leitner) [1968679 1965817]
- netfilter: flowtable: Remove redundant hw refresh bit (Marcelo Ricardo Leitner) [1968679 1965817]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.9.1.el8_4]" date="1624881600">- ixgbevf: Amend commit acf03026ec5a to include a version in module info. (Ken Cox) [1969911 1955764]
- CI: Merge configuration (Veronika Kabatova)
- igc: amend removal of MODULE_VERSION (Corinna Vinschen) [1969921 1955755]
- igb: amend removal of MODULE_VERSION (Corinna Vinschen) [1969919 1955748]
- locking/qrwlock: Fix ordering in queued_write_lock_slowpath() (Waiman Long) [1964419 1950110]
- scsi: qedf: Do not put host in qedf_vport_create() unconditionally (Nilesh Javali) [1974968 1899384]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.10.1.el8_4]" date="1625659200">- igbvf: amend removal of MODULE_VERSION (Corinna Vinschen) [1969920 1955752]
- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971464 1971488] {CVE-2021-32399}
- scsi: ibmvfc: Free channel_setup_buf during device tear down (Steve Best) [1964697 1938102]
- i40e: Fix parameters in aq_get_phy_register() (Stefan Assmann) [1967099 1907852]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [4.18.0-305.10.2.el8_4]" date="1626091200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975181 1975182] {CVE-2021-33909}</changelog>
</package>
<package pkgid="efab73eb82d6619d46f3e21edbdb7c0b08249289e3bba7120222588fc1a3d1c7" name="python-perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="348.20.1.el7"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.12.1.el8_5]" date="1641988800">- tcp: don't free a FIN sk_buff in tcp_remove_empty_skb() (Guillaume Nault) [2021574 2016210]
- kernel.spec: Add support to use vmlinux.h (Jiri Olsa) [2031053 1989087]
- spec: Add vmlinux.h to kernel-devel package (Jiri Olsa) [2031053 1989087]
- x86/mce: Avoid infinite loop for copy from user recovery (Prarit Bhargava) [2008789 1999550]
- x86/mce: Rename kill_it to kill_current_task (Prarit Bhargava) [2008789 1999550]
- x86/mce: Recover from poison found while copying from user space (Prarit Bhargava) [2008789 1999550]
- x86/mce: Delay clearing IA32_MCG_STATUS to the end of do_machine_check() (Prarit Bhargava) [2008789 1999550]
- x86/mce: Send #MC singal from task work (Prarit Bhargava) [2008789 1999550]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-348.13.1.el8_5]" date="1642507200">- vfs: Out-of-bounds write of heap buffer in fs_context.c (Frantisek Hrbata) [2040585 2040586] {CVE-2022-0185}
- xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Bruno Meneguele) [2034864 2034865] {CVE-2021-4155}
- af_unix: fix garbage collect vs MSG_PEEK (Patrick Talbert) [2031974 2031975] {CVE-2021-0920}
- cgroup: verify that source is a string (Waiman Long) [2034608 2034609] {CVE-2021-4154}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-348.14.1.el8_5]" date="1643198400">- tcp: fix page frag corruption on page fault (Paolo Abeni) [2041529 1996074]
- net: fix sk_page_frag() recursion from memory reclaim (Paolo Abeni) [2041529 1996074]
- KVM: s390: index kvm-&gt;arch.idle_mask by vcpu_idx (Thomas Huth) [2040769 2026230]
- redhat: set LC_ALL=C before sorting config content (Frantisek Hrbata)</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.15.1.el8_5]" date="1643716800">- net/mlx5: DR, Use FW API when updating FW-owned flow table (Michal Schmidt) [2042663 2042651]
- KVM: x86: Wait for IPIs to be delivered when handling Hyper-V TLB flush hypercall (Vitaly Kuznetsov) [2043237 1868572]
- drm/mgag200: Select clock in PLL update functions (Bruno Meneguele) [2034949 1953926]
- drm/i915: Fix HAS_LSPCON macro for platforms between GEN9 and GEN10 (Bruno Meneguele) [2027335 2005586]
- crypto: qat - power up 4xxx device (Vladis Dronov) [2016437 1960307]
- RDMA/core: Fix a double free in add_port error flow (Kamal Heib) [2038724 2008555]
- powerpc/iommu: Report the correct most efficient DMA mask for PCI devices (Steve Best) [2018928 2007425]
- powerpc/dma: Fix dma_map_ops::get_required_mask (Steve Best) [2018928 2007425]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.16.1.el8_5]" date="1644321600">- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047601 2047602] {CVE-2022-22942}
- net: openvswitch: Fix ct_state nat flags for conns arriving from tc (Marcelo Ricardo Leitner) [2043548 2040334]
- net: openvswitch: Fix matching zone id for invalid conns arriving from tc (Marcelo Ricardo Leitner) [2043550 2040452]
- net/sched: flow_dissector: Fix matching on zone id for invalid conns (Marcelo Ricardo Leitner) [2043550 2040452]
- net/sched: Extend qdisc control block with tc control block (Marcelo Ricardo Leitner) [2043550 2040452]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.17.1.el8_5]" date="1644926400">- vfs: check dentry is still valid in get_link() (Ian Kent) [2052558 2014846]
- xfs: don't expose internal symlink metadata buffers to the vfs (Brian Foster) [2052558 2014846]
- CI: Use appropriate zstream builder (Veronika Kabatova)
- CI: Enable baseline realtime checks (Veronika Kabatova)
- CI: Rename pipelines to include release names (Veronika Kabatova)
- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052166 2052167] {CVE-2022-0492}
- ice: Remove boolean vlan_promisc flag from function (Jonathan Toppins) [2051951 2030400]
- ceph: put the requests/sessions when it fails to alloc memory (Jeffrey Layton) [2053725 2017796]
- ceph: fix off by one bugs in unsafe_request_wait() (Jeffrey Layton) [2053725 2017796]
- ceph: flush the mdlog before waiting on unsafe reqs (Jeffrey Layton) [2053725 2017796]
- ceph: flush mdlog before umounting (Jeffrey Layton) [2053725 2017796]
- ceph: make iterate_sessions a global symbol (Jeffrey Layton) [2053725 2017796]
- ceph: make ceph_create_session_msg a global symbol (Jeffrey Layton) [2053725 2017796]
- xfs: check sb_meta_uuid for dabuf buffer recovery (Bill O'Donnell) [2049292 2020764]
- drm/i915: Flush TLBs before releasing backing store (Patrick Talbert) [2044328 2044329] {CVE-2022-0330}
- hugetlb: fix hugetlb cgroup refcounting during vma split (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: fix imbalanced css_get and css_put pair for shared mappings (Waiman Long) [2039015 2032811]
- mm/hugetlb: change hugetlb_reserve_pages() to type bool (Waiman Long) [2039015 2032811]
- hugetlb: fix an error code in hugetlb_reserve_pages() (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: fix offline of hugetlb cgroup with reservations (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: fix reservation accounting (Waiman Long) [2039015 2032811]
- mm/hugetlb: narrow the hugetlb_lock protection area during preparing huge page (Waiman Long) [2039015 2032811]
- mm/hugetlb: a page from buddy is not on any list (Waiman Long) [2039015 2032811]
- mm/hugetlb: not necessary to coalesce regions recursively (Waiman Long) [2039015 2032811]
- selftests/vm/write_to_hugetlbfs.c: fix unused variable warning (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add hugetlb_cgroup reservation tests (Waiman Long) [2039015 2032811]
- hugetlb: support file_region coalescing again (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: support noreserve mappings (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add accounting for shared mappings (Waiman Long) [2039015 2032811]
- hugetlb: disable region_add file_region coalescing (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add reservation accounting for private mappings (Waiman Long) [2039015 2032811]
- mm/hugetlb_cgroup: fix hugetlb_cgroup migration (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add interface for charge/uncharge hugetlb reservations (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add hugetlb_cgroup reservation counter (Waiman Long) [2039015 2032811]
- hugetlb: remove duplicated code (Waiman Long) [2039015 2032811]
- hugetlb: region_chg provides only cache entry (Waiman Long) [2039015 2032811]
- hugetlbfs: always use address space in inode for resv_map pointer (Waiman Long) [2039015 2032811]
- hugetlbfs: fix potential over/underflow setting node specific nr_hugepages (Waiman Long) [2039015 2032811]
- hugetlb: allow to free gigantic pages regardless of the configuration (Waiman Long) [2039015 2032811]
- powerpc/pseries: Fix update of LPAR security flavor after LPM (Steve Best) [2027448 1997294]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.18.1.el8_5]" date="1645531200">- selftests: kvm: Check whether SIDA memop fails for normal guests (Thomas Huth) [2050806 2050807] {CVE-2022-0516}
- KVM: s390: Return error on SIDA memop on normal guest (Thomas Huth) [2050806 2050807] {CVE-2022-0516}
- iommu/amd: Remove iommu_init_ga() (Jerry Snitselaar) [2030854 1998265]
- iommu/amd: Relocate GAMSup check to early_enable_iommus (Jerry Snitselaar) [2030854 1998265]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.19.1.el8_5]" date="1646049600">- tipc: improve size validations for received domain records (Xin Long) [2048970 2048971] {CVE-2022-0435}
- smb3: do not error on fsync when readonly (Ronnie Sahlberg) [2055824 2037811]
- security: implement sctp_assoc_established hook in selinux (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- security: add sctp_assoc_established hook (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- security: call security_sctp_assoc_request in sctp_sf_do_5_1D_ce (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- security: pass asoc to sctp_assoc_request and sctp_sk_clone (Bruno Meneguele) [2054112 2054117 2015525 2048251]
- net: sctp: Fix some typos (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- RDMA/bnxt_re: Fix stats counters (Selvin Xavier) [2049684 2001893]
- net: check skb sec_path when re-initializing slow_gro in gro_list_prepare (Xin Long) [2047427 2030476]
- cpufreq: intel_pstate: Add Icelake servers support in no-HWP mode (David Arcari) [2036888 2003695]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.20.1.el8_5]" date="1646740800">- lib/iov_iter: initialize "flags" in new pipe_buffer (Jan Stancek) [2060874 2060875] {CVE-2022-0847}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.18.0-348.20.1.el8.centos" date="1646913600">- Apply debranding changes</changelog>
</package>
</otherdata>