<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="475">
<package pkgid="b2a1997940097dba13f329e2b3058df63e245bd6e5f73940b5a85a556cebaae2" name="NetworkManager-adsl-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.32.10" rel="5.el8_5"/>
  <changelog author="Wen Liang &lt;wenliang@redhat.com&gt; - 1:1.32.0-1" date="1624017600">- update to 1.32.0 release
- veth: fix null error when deleting the device (rh #1915278)
- veth: fix crash when deleting the device profile (rh #1915276)
- firewall: add new "nftables" firewall-backend (rh #1548825)
- DNS: fix lookup of hostname via DNS (rh #1970335)</changelog>
  <changelog author="Wen Liang &lt;wenliang@redhat.com&gt; - 1:1.32.2-1" date="1625140800">- update to 1.32.2 release
- device: prefer IPv6 not-deprecated addresses for hostname lookup (rh #1820770)
- docs: describe qdiscs and tfilters in nm-settings manpage (rh #1847894)
- cloud-setup: preserve IPv4 addresses/routes/rules from profile (rh #1971527)
- daemon: performance improvements (rh #1847125)
- dhcp/systemd: ignore FORCERENEW requests for DHCPV4 (rh #1961251, CVE-2020-13529)
- Add bridge_role in 802-3-ethernet.s390-options using nmcli (rh #1935842)</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1:1.32.4-1" date="1626868800">- Upgrade to 1.32.4 with fixes of:
- nmcli: show DNS SEARCH field in device information. (rh #1852317)
- device: avoid crash setting VPN config during unrealize. (rh #1912423)
- core: send ARP announcements when there is carrier. (rh #1956793)
- core: add ipv[46].required-timeout option to wait for IP configuration while activating. (rh #1961666)
- core: start DHCPv6 when a prefix delegation is needed for shared mode. (rh #1973199)
- ifcfg: log warning about invalid keys in ifcfg files. (rh #1959656)
- cloud-setup: add support for Aliyun cloud. (rh #1823315)</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1:1.32.6-1" date="1627560000">- Upgrade to 1.32.6 release
- core: fix adding stale local routes when address changes (rh #1979192)
- dhcp: handle filename/bootfile_name DHCP option and write it to device state
  file for initrd/kickstart (rh #1979387)
- initrd: add "ib.pkey=" command line option (rh #1805708)
- core: introduce "keep-configuration" device option to forcefully activate a
  profile on start (rh #1934122)</changelog>
  <changelog author="Fernando Fernandez Mancera &lt;ferferna@redhat.com&gt; - 1:1.32.8-1" date="1628596800">- Upgrade to 1.32.8 release
- firewalld: configure zones on "Reloaded" signal (rh #1982403)
- ethtool: support configuring newer gigabit ethernet speeds (rh #1897004)
- core: fix wrong MTU for bridge interfaces (rh #1973536)
- cloud-setup: fix gateway address for Aliyun cloud (rh #1823315)</changelog>
  <changelog author="Wen Liang &lt;wenliang@redhat.com&gt; - 1:1.32.10-1" date="1629288000">- update to 1.32.10 release
- nm-initrd-generator: add kernel command line options ethtool autoneg and speed (rh #1940934)
- IP: fix the order of IP addresses during service restart (rh #1988751)</changelog>
  <changelog author="Wen Liang &lt;wenliang@redhat.com&gt; - 1:1.32.10-2" date="1629374400">- platform: fix capturing IPv4 addresses from platform for assuming after restart (rh #1988751)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.32.10-3" date="1632484800">- preserve the IPv6 multicast route added by kernel (rh #2004212)
- cloud-setup: better handle other route configuration (rh #1977984)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.32.10-4" date="1632830400">- revert unapproved patches part of "cloud-setup" change (rh #1977984)</changelog>
  <changelog author="Fernando Fernandez Mancera &lt;ferferna@redhat.com&gt; - 1:1.36.10-5" date="1647864000">- n-dhcp4: discard NAKs from different servers in SELECTING (rh #2065188)</changelog>
</package>
<package pkgid="628139d63d0d0af45bceff35c1e9d1d8edba92923e92d28681f840ee82c96774" name="NetworkManager-bluetooth-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.32.10" rel="5.el8_5"/>
  <changelog author="Wen Liang &lt;wenliang@redhat.com&gt; - 1:1.32.0-1" date="1624017600">- update to 1.32.0 release
- veth: fix null error when deleting the device (rh #1915278)
- veth: fix crash when deleting the device profile (rh #1915276)
- firewall: add new "nftables" firewall-backend (rh #1548825)
- DNS: fix lookup of hostname via DNS (rh #1970335)</changelog>
  <changelog author="Wen Liang &lt;wenliang@redhat.com&gt; - 1:1.32.2-1" date="1625140800">- update to 1.32.2 release
- device: prefer IPv6 not-deprecated addresses for hostname lookup (rh #1820770)
- docs: describe qdiscs and tfilters in nm-settings manpage (rh #1847894)
- cloud-setup: preserve IPv4 addresses/routes/rules from profile (rh #1971527)
- daemon: performance improvements (rh #1847125)
- dhcp/systemd: ignore FORCERENEW requests for DHCPV4 (rh #1961251, CVE-2020-13529)
- Add bridge_role in 802-3-ethernet.s390-options using nmcli (rh #1935842)</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1:1.32.4-1" date="1626868800">- Upgrade to 1.32.4 with fixes of:
- nmcli: show DNS SEARCH field in device information. (rh #1852317)
- device: avoid crash setting VPN config during unrealize. (rh #1912423)
- core: send ARP announcements when there is carrier. (rh #1956793)
- core: add ipv[46].required-timeout option to wait for IP configuration while activating. (rh #1961666)
- core: start DHCPv6 when a prefix delegation is needed for shared mode. (rh #1973199)
- ifcfg: log warning about invalid keys in ifcfg files. (rh #1959656)
- cloud-setup: add support for Aliyun cloud. (rh #1823315)</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1:1.32.6-1" date="1627560000">- Upgrade to 1.32.6 release
- core: fix adding stale local routes when address changes (rh #1979192)
- dhcp: handle filename/bootfile_name DHCP option and write it to device state
  file for initrd/kickstart (rh #1979387)
- initrd: add "ib.pkey=" command line option (rh #1805708)
- core: introduce "keep-configuration" device option to forcefully activate a
  profile on start (rh #1934122)</changelog>
  <changelog author="Fernando Fernandez Mancera &lt;ferferna@redhat.com&gt; - 1:1.32.8-1" date="1628596800">- Upgrade to 1.32.8 release
- firewalld: configure zones on "Reloaded" signal (rh #1982403)
- ethtool: support configuring newer gigabit ethernet speeds (rh #1897004)
- core: fix wrong MTU for bridge interfaces (rh #1973536)
- cloud-setup: fix gateway address for Aliyun cloud (rh #1823315)</changelog>
  <changelog author="Wen Liang &lt;wenliang@redhat.com&gt; - 1:1.32.10-1" date="1629288000">- update to 1.32.10 release
- nm-initrd-generator: add kernel command line options ethtool autoneg and speed (rh #1940934)
- IP: fix the order of IP addresses during service restart (rh #1988751)</changelog>
  <changelog author="Wen Liang &lt;wenliang@redhat.com&gt; - 1:1.32.10-2" date="1629374400">- platform: fix capturing IPv4 addresses from platform for assuming after restart (rh #1988751)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.32.10-3" date="1632484800">- preserve the IPv6 multicast route added by kernel (rh #2004212)
- cloud-setup: better handle other route configuration (rh #1977984)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.32.10-4" date="1632830400">- revert unapproved patches part of "cloud-setup" change (rh #1977984)</changelog>
  <changelog author="Fernando Fernandez Mancera &lt;ferferna@redhat.com&gt; - 1:1.36.10-5" date="1647864000">- n-dhcp4: discard NAKs from different servers in SELECTING (rh #2065188)</changelog>
</package>
<package pkgid="a08321130b690d10810e64b3225af11ae1993c454b959a212bddb916ecb0ea85" name="NetworkManager-debuginfo" arch="i686">
  <version epoch="1" ver="1.32.10" rel="5.el8_5"/>
  <changelog author="Wen Liang &lt;wenliang@redhat.com&gt; - 1:1.32.0-1" date="1624017600">- update to 1.32.0 release
- veth: fix null error when deleting the device (rh #1915278)
- veth: fix crash when deleting the device profile (rh #1915276)
- firewall: add new "nftables" firewall-backend (rh #1548825)
- DNS: fix lookup of hostname via DNS (rh #1970335)</changelog>
  <changelog author="Wen Liang &lt;wenliang@redhat.com&gt; - 1:1.32.2-1" date="1625140800">- update to 1.32.2 release
- device: prefer IPv6 not-deprecated addresses for hostname lookup (rh #1820770)
- docs: describe qdiscs and tfilters in nm-settings manpage (rh #1847894)
- cloud-setup: preserve IPv4 addresses/routes/rules from profile (rh #1971527)
- daemon: performance improvements (rh #1847125)
- dhcp/systemd: ignore FORCERENEW requests for DHCPV4 (rh #1961251, CVE-2020-13529)
- Add bridge_role in 802-3-ethernet.s390-options using nmcli (rh #1935842)</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1:1.32.4-1" date="1626868800">- Upgrade to 1.32.4 with fixes of:
- nmcli: show DNS SEARCH field in device information. (rh #1852317)
- device: avoid crash setting VPN config during unrealize. (rh #1912423)
- core: send ARP announcements when there is carrier. (rh #1956793)
- core: add ipv[46].required-timeout option to wait for IP configuration while activating. (rh #1961666)
- core: start DHCPv6 when a prefix delegation is needed for shared mode. (rh #1973199)
- ifcfg: log warning about invalid keys in ifcfg files. (rh #1959656)
- cloud-setup: add support for Aliyun cloud. (rh #1823315)</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1:1.32.6-1" date="1627560000">- Upgrade to 1.32.6 release
- core: fix adding stale local routes when address changes (rh #1979192)
- dhcp: handle filename/bootfile_name DHCP option and write it to device state
  file for initrd/kickstart (rh #1979387)
- initrd: add "ib.pkey=" command line option (rh #1805708)
- core: introduce "keep-configuration" device option to forcefully activate a
  profile on start (rh #1934122)</changelog>
  <changelog author="Fernando Fernandez Mancera &lt;ferferna@redhat.com&gt; - 1:1.32.8-1" date="1628596800">- Upgrade to 1.32.8 release
- firewalld: configure zones on "Reloaded" signal (rh #1982403)
- ethtool: support configuring newer gigabit ethernet speeds (rh #1897004)
- core: fix wrong MTU for bridge interfaces (rh #1973536)
- cloud-setup: fix gateway address for Aliyun cloud (rh #1823315)</changelog>
  <changelog author="Wen Liang &lt;wenliang@redhat.com&gt; - 1:1.32.10-1" date="1629288000">- update to 1.32.10 release
- nm-initrd-generator: add kernel command line options ethtool autoneg and speed (rh #1940934)
- IP: fix the order of IP addresses during service restart (rh #1988751)</changelog>
  <changelog author="Wen Liang &lt;wenliang@redhat.com&gt; - 1:1.32.10-2" date="1629374400">- platform: fix capturing IPv4 addresses from platform for assuming after restart (rh #1988751)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.32.10-3" date="1632484800">- preserve the IPv6 multicast route added by kernel (rh #2004212)
- cloud-setup: better handle other route configuration (rh #1977984)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.32.10-4" date="1632830400">- revert unapproved patches part of "cloud-setup" change (rh #1977984)</changelog>
  <changelog author="Fernando Fernandez Mancera &lt;ferferna@redhat.com&gt; - 1:1.36.10-5" date="1647864000">- n-dhcp4: discard NAKs from different servers in SELECTING (rh #2065188)</changelog>
</package>
<package pkgid="a17eaa15a4fd5ee3f5f076959fcc9f1600faf650ce89d39ed64804a29a9fa040" name="NetworkManager-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.32.10" rel="5.el8_5"/>
  <changelog author="Wen Liang &lt;wenliang@redhat.com&gt; - 1:1.32.0-1" date="1624017600">- update to 1.32.0 release
- veth: fix null error when deleting the device (rh #1915278)
- veth: fix crash when deleting the device profile (rh #1915276)
- firewall: add new "nftables" firewall-backend (rh #1548825)
- DNS: fix lookup of hostname via DNS (rh #1970335)</changelog>
  <changelog author="Wen Liang &lt;wenliang@redhat.com&gt; - 1:1.32.2-1" date="1625140800">- update to 1.32.2 release
- device: prefer IPv6 not-deprecated addresses for hostname lookup (rh #1820770)
- docs: describe qdiscs and tfilters in nm-settings manpage (rh #1847894)
- cloud-setup: preserve IPv4 addresses/routes/rules from profile (rh #1971527)
- daemon: performance improvements (rh #1847125)
- dhcp/systemd: ignore FORCERENEW requests for DHCPV4 (rh #1961251, CVE-2020-13529)
- Add bridge_role in 802-3-ethernet.s390-options using nmcli (rh #1935842)</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1:1.32.4-1" date="1626868800">- Upgrade to 1.32.4 with fixes of:
- nmcli: show DNS SEARCH field in device information. (rh #1852317)
- device: avoid crash setting VPN config during unrealize. (rh #1912423)
- core: send ARP announcements when there is carrier. (rh #1956793)
- core: add ipv[46].required-timeout option to wait for IP configuration while activating. (rh #1961666)
- core: start DHCPv6 when a prefix delegation is needed for shared mode. (rh #1973199)
- ifcfg: log warning about invalid keys in ifcfg files. (rh #1959656)
- cloud-setup: add support for Aliyun cloud. (rh #1823315)</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1:1.32.6-1" date="1627560000">- Upgrade to 1.32.6 release
- core: fix adding stale local routes when address changes (rh #1979192)
- dhcp: handle filename/bootfile_name DHCP option and write it to device state
  file for initrd/kickstart (rh #1979387)
- initrd: add "ib.pkey=" command line option (rh #1805708)
- core: introduce "keep-configuration" device option to forcefully activate a
  profile on start (rh #1934122)</changelog>
  <changelog author="Fernando Fernandez Mancera &lt;ferferna@redhat.com&gt; - 1:1.32.8-1" date="1628596800">- Upgrade to 1.32.8 release
- firewalld: configure zones on "Reloaded" signal (rh #1982403)
- ethtool: support configuring newer gigabit ethernet speeds (rh #1897004)
- core: fix wrong MTU for bridge interfaces (rh #1973536)
- cloud-setup: fix gateway address for Aliyun cloud (rh #1823315)</changelog>
  <changelog author="Wen Liang &lt;wenliang@redhat.com&gt; - 1:1.32.10-1" date="1629288000">- update to 1.32.10 release
- nm-initrd-generator: add kernel command line options ethtool autoneg and speed (rh #1940934)
- IP: fix the order of IP addresses during service restart (rh #1988751)</changelog>
  <changelog author="Wen Liang &lt;wenliang@redhat.com&gt; - 1:1.32.10-2" date="1629374400">- platform: fix capturing IPv4 addresses from platform for assuming after restart (rh #1988751)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.32.10-3" date="1632484800">- preserve the IPv6 multicast route added by kernel (rh #2004212)
- cloud-setup: better handle other route configuration (rh #1977984)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.32.10-4" date="1632830400">- revert unapproved patches part of "cloud-setup" change (rh #1977984)</changelog>
  <changelog author="Fernando Fernandez Mancera &lt;ferferna@redhat.com&gt; - 1:1.36.10-5" date="1647864000">- n-dhcp4: discard NAKs from different servers in SELECTING (rh #2065188)</changelog>
</package>
<package pkgid="a368c2019b2e7c49e43cdd17627c5450988e448c99a04a6f711111d521105ae2" name="NetworkManager-debugsource" arch="i686">
  <version epoch="1" ver="1.32.10" rel="5.el8_5"/>
  <changelog author="Wen Liang &lt;wenliang@redhat.com&gt; - 1:1.32.0-1" date="1624017600">- update to 1.32.0 release
- veth: fix null error when deleting the device (rh #1915278)
- veth: fix crash when deleting the device profile (rh #1915276)
- firewall: add new "nftables" firewall-backend (rh #1548825)
- DNS: fix lookup of hostname via DNS (rh #1970335)</changelog>
  <changelog author="Wen Liang &lt;wenliang@redhat.com&gt; - 1:1.32.2-1" date="1625140800">- update to 1.32.2 release
- device: prefer IPv6 not-deprecated addresses for hostname lookup (rh #1820770)
- docs: describe qdiscs and tfilters in nm-settings manpage (rh #1847894)
- cloud-setup: preserve IPv4 addresses/routes/rules from profile (rh #1971527)
- daemon: performance improvements (rh #1847125)
- dhcp/systemd: ignore FORCERENEW requests for DHCPV4 (rh #1961251, CVE-2020-13529)
- Add bridge_role in 802-3-ethernet.s390-options using nmcli (rh #1935842)</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1:1.32.4-1" date="1626868800">- Upgrade to 1.32.4 with fixes of:
- nmcli: show DNS SEARCH field in device information. (rh #1852317)
- device: avoid crash setting VPN config during unrealize. (rh #1912423)
- core: send ARP announcements when there is carrier. (rh #1956793)
- core: add ipv[46].required-timeout option to wait for IP configuration while activating. (rh #1961666)
- core: start DHCPv6 when a prefix delegation is needed for shared mode. (rh #1973199)
- ifcfg: log warning about invalid keys in ifcfg files. (rh #1959656)
- cloud-setup: add support for Aliyun cloud. (rh #1823315)</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1:1.32.6-1" date="1627560000">- Upgrade to 1.32.6 release
- core: fix adding stale local routes when address changes (rh #1979192)
- dhcp: handle filename/bootfile_name DHCP option and write it to device state
  file for initrd/kickstart (rh #1979387)
- initrd: add "ib.pkey=" command line option (rh #1805708)
- core: introduce "keep-configuration" device option to forcefully activate a
  profile on start (rh #1934122)</changelog>
  <changelog author="Fernando Fernandez Mancera &lt;ferferna@redhat.com&gt; - 1:1.32.8-1" date="1628596800">- Upgrade to 1.32.8 release
- firewalld: configure zones on "Reloaded" signal (rh #1982403)
- ethtool: support configuring newer gigabit ethernet speeds (rh #1897004)
- core: fix wrong MTU for bridge interfaces (rh #1973536)
- cloud-setup: fix gateway address for Aliyun cloud (rh #1823315)</changelog>
  <changelog author="Wen Liang &lt;wenliang@redhat.com&gt; - 1:1.32.10-1" date="1629288000">- update to 1.32.10 release
- nm-initrd-generator: add kernel command line options ethtool autoneg and speed (rh #1940934)
- IP: fix the order of IP addresses during service restart (rh #1988751)</changelog>
  <changelog author="Wen Liang &lt;wenliang@redhat.com&gt; - 1:1.32.10-2" date="1629374400">- platform: fix capturing IPv4 addresses from platform for assuming after restart (rh #1988751)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.32.10-3" date="1632484800">- preserve the IPv6 multicast route added by kernel (rh #2004212)
- cloud-setup: better handle other route configuration (rh #1977984)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.32.10-4" date="1632830400">- revert unapproved patches part of "cloud-setup" change (rh #1977984)</changelog>
  <changelog author="Fernando Fernandez Mancera &lt;ferferna@redhat.com&gt; - 1:1.36.10-5" date="1647864000">- n-dhcp4: discard NAKs from different servers in SELECTING (rh #2065188)</changelog>
</package>
<package pkgid="4ac00e8381eea7cd8fc5eff37b8f819d9640dce485e6752f62b36b30ea8130e2" name="NetworkManager-debugsource" arch="x86_64">
  <version epoch="1" ver="1.32.10" rel="5.el8_5"/>
  <changelog author="Wen Liang &lt;wenliang@redhat.com&gt; - 1:1.32.0-1" date="1624017600">- update to 1.32.0 release
- veth: fix null error when deleting the device (rh #1915278)
- veth: fix crash when deleting the device profile (rh #1915276)
- firewall: add new "nftables" firewall-backend (rh #1548825)
- DNS: fix lookup of hostname via DNS (rh #1970335)</changelog>
  <changelog author="Wen Liang &lt;wenliang@redhat.com&gt; - 1:1.32.2-1" date="1625140800">- update to 1.32.2 release
- device: prefer IPv6 not-deprecated addresses for hostname lookup (rh #1820770)
- docs: describe qdiscs and tfilters in nm-settings manpage (rh #1847894)
- cloud-setup: preserve IPv4 addresses/routes/rules from profile (rh #1971527)
- daemon: performance improvements (rh #1847125)
- dhcp/systemd: ignore FORCERENEW requests for DHCPV4 (rh #1961251, CVE-2020-13529)
- Add bridge_role in 802-3-ethernet.s390-options using nmcli (rh #1935842)</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1:1.32.4-1" date="1626868800">- Upgrade to 1.32.4 with fixes of:
- nmcli: show DNS SEARCH field in device information. (rh #1852317)
- device: avoid crash setting VPN config during unrealize. (rh #1912423)
- core: send ARP announcements when there is carrier. (rh #1956793)
- core: add ipv[46].required-timeout option to wait for IP configuration while activating. (rh #1961666)
- core: start DHCPv6 when a prefix delegation is needed for shared mode. (rh #1973199)
- ifcfg: log warning about invalid keys in ifcfg files. (rh #1959656)
- cloud-setup: add support for Aliyun cloud. (rh #1823315)</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1:1.32.6-1" date="1627560000">- Upgrade to 1.32.6 release
- core: fix adding stale local routes when address changes (rh #1979192)
- dhcp: handle filename/bootfile_name DHCP option and write it to device state
  file for initrd/kickstart (rh #1979387)
- initrd: add "ib.pkey=" command line option (rh #1805708)
- core: introduce "keep-configuration" device option to forcefully activate a
  profile on start (rh #1934122)</changelog>
  <changelog author="Fernando Fernandez Mancera &lt;ferferna@redhat.com&gt; - 1:1.32.8-1" date="1628596800">- Upgrade to 1.32.8 release
- firewalld: configure zones on "Reloaded" signal (rh #1982403)
- ethtool: support configuring newer gigabit ethernet speeds (rh #1897004)
- core: fix wrong MTU for bridge interfaces (rh #1973536)
- cloud-setup: fix gateway address for Aliyun cloud (rh #1823315)</changelog>
  <changelog author="Wen Liang &lt;wenliang@redhat.com&gt; - 1:1.32.10-1" date="1629288000">- update to 1.32.10 release
- nm-initrd-generator: add kernel command line options ethtool autoneg and speed (rh #1940934)
- IP: fix the order of IP addresses during service restart (rh #1988751)</changelog>
  <changelog author="Wen Liang &lt;wenliang@redhat.com&gt; - 1:1.32.10-2" date="1629374400">- platform: fix capturing IPv4 addresses from platform for assuming after restart (rh #1988751)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.32.10-3" date="1632484800">- preserve the IPv6 multicast route added by kernel (rh #2004212)
- cloud-setup: better handle other route configuration (rh #1977984)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.32.10-4" date="1632830400">- revert unapproved patches part of "cloud-setup" change (rh #1977984)</changelog>
  <changelog author="Fernando Fernandez Mancera &lt;ferferna@redhat.com&gt; - 1:1.36.10-5" date="1647864000">- n-dhcp4: discard NAKs from different servers in SELECTING (rh #2065188)</changelog>
</package>
<package pkgid="191521b17885de374657a010910a6c6d226baec8d967147130c3a66dc337139d" name="NetworkManager-libnm-debuginfo" arch="i686">
  <version epoch="1" ver="1.32.10" rel="5.el8_5"/>
  <changelog author="Wen Liang &lt;wenliang@redhat.com&gt; - 1:1.32.0-1" date="1624017600">- update to 1.32.0 release
- veth: fix null error when deleting the device (rh #1915278)
- veth: fix crash when deleting the device profile (rh #1915276)
- firewall: add new "nftables" firewall-backend (rh #1548825)
- DNS: fix lookup of hostname via DNS (rh #1970335)</changelog>
  <changelog author="Wen Liang &lt;wenliang@redhat.com&gt; - 1:1.32.2-1" date="1625140800">- update to 1.32.2 release
- device: prefer IPv6 not-deprecated addresses for hostname lookup (rh #1820770)
- docs: describe qdiscs and tfilters in nm-settings manpage (rh #1847894)
- cloud-setup: preserve IPv4 addresses/routes/rules from profile (rh #1971527)
- daemon: performance improvements (rh #1847125)
- dhcp/systemd: ignore FORCERENEW requests for DHCPV4 (rh #1961251, CVE-2020-13529)
- Add bridge_role in 802-3-ethernet.s390-options using nmcli (rh #1935842)</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1:1.32.4-1" date="1626868800">- Upgrade to 1.32.4 with fixes of:
- nmcli: show DNS SEARCH field in device information. (rh #1852317)
- device: avoid crash setting VPN config during unrealize. (rh #1912423)
- core: send ARP announcements when there is carrier. (rh #1956793)
- core: add ipv[46].required-timeout option to wait for IP configuration while activating. (rh #1961666)
- core: start DHCPv6 when a prefix delegation is needed for shared mode. (rh #1973199)
- ifcfg: log warning about invalid keys in ifcfg files. (rh #1959656)
- cloud-setup: add support for Aliyun cloud. (rh #1823315)</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1:1.32.6-1" date="1627560000">- Upgrade to 1.32.6 release
- core: fix adding stale local routes when address changes (rh #1979192)
- dhcp: handle filename/bootfile_name DHCP option and write it to device state
  file for initrd/kickstart (rh #1979387)
- initrd: add "ib.pkey=" command line option (rh #1805708)
- core: introduce "keep-configuration" device option to forcefully activate a
  profile on start (rh #1934122)</changelog>
  <changelog author="Fernando Fernandez Mancera &lt;ferferna@redhat.com&gt; - 1:1.32.8-1" date="1628596800">- Upgrade to 1.32.8 release
- firewalld: configure zones on "Reloaded" signal (rh #1982403)
- ethtool: support configuring newer gigabit ethernet speeds (rh #1897004)
- core: fix wrong MTU for bridge interfaces (rh #1973536)
- cloud-setup: fix gateway address for Aliyun cloud (rh #1823315)</changelog>
  <changelog author="Wen Liang &lt;wenliang@redhat.com&gt; - 1:1.32.10-1" date="1629288000">- update to 1.32.10 release
- nm-initrd-generator: add kernel command line options ethtool autoneg and speed (rh #1940934)
- IP: fix the order of IP addresses during service restart (rh #1988751)</changelog>
  <changelog author="Wen Liang &lt;wenliang@redhat.com&gt; - 1:1.32.10-2" date="1629374400">- platform: fix capturing IPv4 addresses from platform for assuming after restart (rh #1988751)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.32.10-3" date="1632484800">- preserve the IPv6 multicast route added by kernel (rh #2004212)
- cloud-setup: better handle other route configuration (rh #1977984)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.32.10-4" date="1632830400">- revert unapproved patches part of "cloud-setup" change (rh #1977984)</changelog>
  <changelog author="Fernando Fernandez Mancera &lt;ferferna@redhat.com&gt; - 1:1.36.10-5" date="1647864000">- n-dhcp4: discard NAKs from different servers in SELECTING (rh #2065188)</changelog>
</package>
<package pkgid="9a13634d16768d3d1565b4f05b177562ca09c65f2fc00d4729b66a5d534402ed" name="NetworkManager-libnm-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.32.10" rel="5.el8_5"/>
  <changelog author="Wen Liang &lt;wenliang@redhat.com&gt; - 1:1.32.0-1" date="1624017600">- update to 1.32.0 release
- veth: fix null error when deleting the device (rh #1915278)
- veth: fix crash when deleting the device profile (rh #1915276)
- firewall: add new "nftables" firewall-backend (rh #1548825)
- DNS: fix lookup of hostname via DNS (rh #1970335)</changelog>
  <changelog author="Wen Liang &lt;wenliang@redhat.com&gt; - 1:1.32.2-1" date="1625140800">- update to 1.32.2 release
- device: prefer IPv6 not-deprecated addresses for hostname lookup (rh #1820770)
- docs: describe qdiscs and tfilters in nm-settings manpage (rh #1847894)
- cloud-setup: preserve IPv4 addresses/routes/rules from profile (rh #1971527)
- daemon: performance improvements (rh #1847125)
- dhcp/systemd: ignore FORCERENEW requests for DHCPV4 (rh #1961251, CVE-2020-13529)
- Add bridge_role in 802-3-ethernet.s390-options using nmcli (rh #1935842)</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1:1.32.4-1" date="1626868800">- Upgrade to 1.32.4 with fixes of:
- nmcli: show DNS SEARCH field in device information. (rh #1852317)
- device: avoid crash setting VPN config during unrealize. (rh #1912423)
- core: send ARP announcements when there is carrier. (rh #1956793)
- core: add ipv[46].required-timeout option to wait for IP configuration while activating. (rh #1961666)
- core: start DHCPv6 when a prefix delegation is needed for shared mode. (rh #1973199)
- ifcfg: log warning about invalid keys in ifcfg files. (rh #1959656)
- cloud-setup: add support for Aliyun cloud. (rh #1823315)</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1:1.32.6-1" date="1627560000">- Upgrade to 1.32.6 release
- core: fix adding stale local routes when address changes (rh #1979192)
- dhcp: handle filename/bootfile_name DHCP option and write it to device state
  file for initrd/kickstart (rh #1979387)
- initrd: add "ib.pkey=" command line option (rh #1805708)
- core: introduce "keep-configuration" device option to forcefully activate a
  profile on start (rh #1934122)</changelog>
  <changelog author="Fernando Fernandez Mancera &lt;ferferna@redhat.com&gt; - 1:1.32.8-1" date="1628596800">- Upgrade to 1.32.8 release
- firewalld: configure zones on "Reloaded" signal (rh #1982403)
- ethtool: support configuring newer gigabit ethernet speeds (rh #1897004)
- core: fix wrong MTU for bridge interfaces (rh #1973536)
- cloud-setup: fix gateway address for Aliyun cloud (rh #1823315)</changelog>
  <changelog author="Wen Liang &lt;wenliang@redhat.com&gt; - 1:1.32.10-1" date="1629288000">- update to 1.32.10 release
- nm-initrd-generator: add kernel command line options ethtool autoneg and speed (rh #1940934)
- IP: fix the order of IP addresses during service restart (rh #1988751)</changelog>
  <changelog author="Wen Liang &lt;wenliang@redhat.com&gt; - 1:1.32.10-2" date="1629374400">- platform: fix capturing IPv4 addresses from platform for assuming after restart (rh #1988751)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.32.10-3" date="1632484800">- preserve the IPv6 multicast route added by kernel (rh #2004212)
- cloud-setup: better handle other route configuration (rh #1977984)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.32.10-4" date="1632830400">- revert unapproved patches part of "cloud-setup" change (rh #1977984)</changelog>
  <changelog author="Fernando Fernandez Mancera &lt;ferferna@redhat.com&gt; - 1:1.36.10-5" date="1647864000">- n-dhcp4: discard NAKs from different servers in SELECTING (rh #2065188)</changelog>
</package>
<package pkgid="4a13b90947860013dabff949fd1fbfc0d74de8f0fbf3574978008fbf8d29c92f" name="NetworkManager-ovs-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.32.10" rel="5.el8_5"/>
  <changelog author="Wen Liang &lt;wenliang@redhat.com&gt; - 1:1.32.0-1" date="1624017600">- update to 1.32.0 release
- veth: fix null error when deleting the device (rh #1915278)
- veth: fix crash when deleting the device profile (rh #1915276)
- firewall: add new "nftables" firewall-backend (rh #1548825)
- DNS: fix lookup of hostname via DNS (rh #1970335)</changelog>
  <changelog author="Wen Liang &lt;wenliang@redhat.com&gt; - 1:1.32.2-1" date="1625140800">- update to 1.32.2 release
- device: prefer IPv6 not-deprecated addresses for hostname lookup (rh #1820770)
- docs: describe qdiscs and tfilters in nm-settings manpage (rh #1847894)
- cloud-setup: preserve IPv4 addresses/routes/rules from profile (rh #1971527)
- daemon: performance improvements (rh #1847125)
- dhcp/systemd: ignore FORCERENEW requests for DHCPV4 (rh #1961251, CVE-2020-13529)
- Add bridge_role in 802-3-ethernet.s390-options using nmcli (rh #1935842)</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1:1.32.4-1" date="1626868800">- Upgrade to 1.32.4 with fixes of:
- nmcli: show DNS SEARCH field in device information. (rh #1852317)
- device: avoid crash setting VPN config during unrealize. (rh #1912423)
- core: send ARP announcements when there is carrier. (rh #1956793)
- core: add ipv[46].required-timeout option to wait for IP configuration while activating. (rh #1961666)
- core: start DHCPv6 when a prefix delegation is needed for shared mode. (rh #1973199)
- ifcfg: log warning about invalid keys in ifcfg files. (rh #1959656)
- cloud-setup: add support for Aliyun cloud. (rh #1823315)</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1:1.32.6-1" date="1627560000">- Upgrade to 1.32.6 release
- core: fix adding stale local routes when address changes (rh #1979192)
- dhcp: handle filename/bootfile_name DHCP option and write it to device state
  file for initrd/kickstart (rh #1979387)
- initrd: add "ib.pkey=" command line option (rh #1805708)
- core: introduce "keep-configuration" device option to forcefully activate a
  profile on start (rh #1934122)</changelog>
  <changelog author="Fernando Fernandez Mancera &lt;ferferna@redhat.com&gt; - 1:1.32.8-1" date="1628596800">- Upgrade to 1.32.8 release
- firewalld: configure zones on "Reloaded" signal (rh #1982403)
- ethtool: support configuring newer gigabit ethernet speeds (rh #1897004)
- core: fix wrong MTU for bridge interfaces (rh #1973536)
- cloud-setup: fix gateway address for Aliyun cloud (rh #1823315)</changelog>
  <changelog author="Wen Liang &lt;wenliang@redhat.com&gt; - 1:1.32.10-1" date="1629288000">- update to 1.32.10 release
- nm-initrd-generator: add kernel command line options ethtool autoneg and speed (rh #1940934)
- IP: fix the order of IP addresses during service restart (rh #1988751)</changelog>
  <changelog author="Wen Liang &lt;wenliang@redhat.com&gt; - 1:1.32.10-2" date="1629374400">- platform: fix capturing IPv4 addresses from platform for assuming after restart (rh #1988751)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.32.10-3" date="1632484800">- preserve the IPv6 multicast route added by kernel (rh #2004212)
- cloud-setup: better handle other route configuration (rh #1977984)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.32.10-4" date="1632830400">- revert unapproved patches part of "cloud-setup" change (rh #1977984)</changelog>
  <changelog author="Fernando Fernandez Mancera &lt;ferferna@redhat.com&gt; - 1:1.36.10-5" date="1647864000">- n-dhcp4: discard NAKs from different servers in SELECTING (rh #2065188)</changelog>
</package>
<package pkgid="1ad164a3df59bd16070cb531fda9884070485215e52199339e83f4d103cb1ea3" name="NetworkManager-ppp-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.32.10" rel="5.el8_5"/>
  <changelog author="Wen Liang &lt;wenliang@redhat.com&gt; - 1:1.32.0-1" date="1624017600">- update to 1.32.0 release
- veth: fix null error when deleting the device (rh #1915278)
- veth: fix crash when deleting the device profile (rh #1915276)
- firewall: add new "nftables" firewall-backend (rh #1548825)
- DNS: fix lookup of hostname via DNS (rh #1970335)</changelog>
  <changelog author="Wen Liang &lt;wenliang@redhat.com&gt; - 1:1.32.2-1" date="1625140800">- update to 1.32.2 release
- device: prefer IPv6 not-deprecated addresses for hostname lookup (rh #1820770)
- docs: describe qdiscs and tfilters in nm-settings manpage (rh #1847894)
- cloud-setup: preserve IPv4 addresses/routes/rules from profile (rh #1971527)
- daemon: performance improvements (rh #1847125)
- dhcp/systemd: ignore FORCERENEW requests for DHCPV4 (rh #1961251, CVE-2020-13529)
- Add bridge_role in 802-3-ethernet.s390-options using nmcli (rh #1935842)</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1:1.32.4-1" date="1626868800">- Upgrade to 1.32.4 with fixes of:
- nmcli: show DNS SEARCH field in device information. (rh #1852317)
- device: avoid crash setting VPN config during unrealize. (rh #1912423)
- core: send ARP announcements when there is carrier. (rh #1956793)
- core: add ipv[46].required-timeout option to wait for IP configuration while activating. (rh #1961666)
- core: start DHCPv6 when a prefix delegation is needed for shared mode. (rh #1973199)
- ifcfg: log warning about invalid keys in ifcfg files. (rh #1959656)
- cloud-setup: add support for Aliyun cloud. (rh #1823315)</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1:1.32.6-1" date="1627560000">- Upgrade to 1.32.6 release
- core: fix adding stale local routes when address changes (rh #1979192)
- dhcp: handle filename/bootfile_name DHCP option and write it to device state
  file for initrd/kickstart (rh #1979387)
- initrd: add "ib.pkey=" command line option (rh #1805708)
- core: introduce "keep-configuration" device option to forcefully activate a
  profile on start (rh #1934122)</changelog>
  <changelog author="Fernando Fernandez Mancera &lt;ferferna@redhat.com&gt; - 1:1.32.8-1" date="1628596800">- Upgrade to 1.32.8 release
- firewalld: configure zones on "Reloaded" signal (rh #1982403)
- ethtool: support configuring newer gigabit ethernet speeds (rh #1897004)
- core: fix wrong MTU for bridge interfaces (rh #1973536)
- cloud-setup: fix gateway address for Aliyun cloud (rh #1823315)</changelog>
  <changelog author="Wen Liang &lt;wenliang@redhat.com&gt; - 1:1.32.10-1" date="1629288000">- update to 1.32.10 release
- nm-initrd-generator: add kernel command line options ethtool autoneg and speed (rh #1940934)
- IP: fix the order of IP addresses during service restart (rh #1988751)</changelog>
  <changelog author="Wen Liang &lt;wenliang@redhat.com&gt; - 1:1.32.10-2" date="1629374400">- platform: fix capturing IPv4 addresses from platform for assuming after restart (rh #1988751)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.32.10-3" date="1632484800">- preserve the IPv6 multicast route added by kernel (rh #2004212)
- cloud-setup: better handle other route configuration (rh #1977984)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.32.10-4" date="1632830400">- revert unapproved patches part of "cloud-setup" change (rh #1977984)</changelog>
  <changelog author="Fernando Fernandez Mancera &lt;ferferna@redhat.com&gt; - 1:1.36.10-5" date="1647864000">- n-dhcp4: discard NAKs from different servers in SELECTING (rh #2065188)</changelog>
</package>
<package pkgid="c633d947b70b25776bab7256eb5ab70698d6b34ef21a9b6bd9f7d6af49114a81" name="NetworkManager-team-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.32.10" rel="5.el8_5"/>
  <changelog author="Wen Liang &lt;wenliang@redhat.com&gt; - 1:1.32.0-1" date="1624017600">- update to 1.32.0 release
- veth: fix null error when deleting the device (rh #1915278)
- veth: fix crash when deleting the device profile (rh #1915276)
- firewall: add new "nftables" firewall-backend (rh #1548825)
- DNS: fix lookup of hostname via DNS (rh #1970335)</changelog>
  <changelog author="Wen Liang &lt;wenliang@redhat.com&gt; - 1:1.32.2-1" date="1625140800">- update to 1.32.2 release
- device: prefer IPv6 not-deprecated addresses for hostname lookup (rh #1820770)
- docs: describe qdiscs and tfilters in nm-settings manpage (rh #1847894)
- cloud-setup: preserve IPv4 addresses/routes/rules from profile (rh #1971527)
- daemon: performance improvements (rh #1847125)
- dhcp/systemd: ignore FORCERENEW requests for DHCPV4 (rh #1961251, CVE-2020-13529)
- Add bridge_role in 802-3-ethernet.s390-options using nmcli (rh #1935842)</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1:1.32.4-1" date="1626868800">- Upgrade to 1.32.4 with fixes of:
- nmcli: show DNS SEARCH field in device information. (rh #1852317)
- device: avoid crash setting VPN config during unrealize. (rh #1912423)
- core: send ARP announcements when there is carrier. (rh #1956793)
- core: add ipv[46].required-timeout option to wait for IP configuration while activating. (rh #1961666)
- core: start DHCPv6 when a prefix delegation is needed for shared mode. (rh #1973199)
- ifcfg: log warning about invalid keys in ifcfg files. (rh #1959656)
- cloud-setup: add support for Aliyun cloud. (rh #1823315)</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1:1.32.6-1" date="1627560000">- Upgrade to 1.32.6 release
- core: fix adding stale local routes when address changes (rh #1979192)
- dhcp: handle filename/bootfile_name DHCP option and write it to device state
  file for initrd/kickstart (rh #1979387)
- initrd: add "ib.pkey=" command line option (rh #1805708)
- core: introduce "keep-configuration" device option to forcefully activate a
  profile on start (rh #1934122)</changelog>
  <changelog author="Fernando Fernandez Mancera &lt;ferferna@redhat.com&gt; - 1:1.32.8-1" date="1628596800">- Upgrade to 1.32.8 release
- firewalld: configure zones on "Reloaded" signal (rh #1982403)
- ethtool: support configuring newer gigabit ethernet speeds (rh #1897004)
- core: fix wrong MTU for bridge interfaces (rh #1973536)
- cloud-setup: fix gateway address for Aliyun cloud (rh #1823315)</changelog>
  <changelog author="Wen Liang &lt;wenliang@redhat.com&gt; - 1:1.32.10-1" date="1629288000">- update to 1.32.10 release
- nm-initrd-generator: add kernel command line options ethtool autoneg and speed (rh #1940934)
- IP: fix the order of IP addresses during service restart (rh #1988751)</changelog>
  <changelog author="Wen Liang &lt;wenliang@redhat.com&gt; - 1:1.32.10-2" date="1629374400">- platform: fix capturing IPv4 addresses from platform for assuming after restart (rh #1988751)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.32.10-3" date="1632484800">- preserve the IPv6 multicast route added by kernel (rh #2004212)
- cloud-setup: better handle other route configuration (rh #1977984)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.32.10-4" date="1632830400">- revert unapproved patches part of "cloud-setup" change (rh #1977984)</changelog>
  <changelog author="Fernando Fernandez Mancera &lt;ferferna@redhat.com&gt; - 1:1.36.10-5" date="1647864000">- n-dhcp4: discard NAKs from different servers in SELECTING (rh #2065188)</changelog>
</package>
<package pkgid="6187710b70471a7151c7e8a14827b679fa0f9584eced2fb630ede717b6ea52bb" name="NetworkManager-tui-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.32.10" rel="5.el8_5"/>
  <changelog author="Wen Liang &lt;wenliang@redhat.com&gt; - 1:1.32.0-1" date="1624017600">- update to 1.32.0 release
- veth: fix null error when deleting the device (rh #1915278)
- veth: fix crash when deleting the device profile (rh #1915276)
- firewall: add new "nftables" firewall-backend (rh #1548825)
- DNS: fix lookup of hostname via DNS (rh #1970335)</changelog>
  <changelog author="Wen Liang &lt;wenliang@redhat.com&gt; - 1:1.32.2-1" date="1625140800">- update to 1.32.2 release
- device: prefer IPv6 not-deprecated addresses for hostname lookup (rh #1820770)
- docs: describe qdiscs and tfilters in nm-settings manpage (rh #1847894)
- cloud-setup: preserve IPv4 addresses/routes/rules from profile (rh #1971527)
- daemon: performance improvements (rh #1847125)
- dhcp/systemd: ignore FORCERENEW requests for DHCPV4 (rh #1961251, CVE-2020-13529)
- Add bridge_role in 802-3-ethernet.s390-options using nmcli (rh #1935842)</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1:1.32.4-1" date="1626868800">- Upgrade to 1.32.4 with fixes of:
- nmcli: show DNS SEARCH field in device information. (rh #1852317)
- device: avoid crash setting VPN config during unrealize. (rh #1912423)
- core: send ARP announcements when there is carrier. (rh #1956793)
- core: add ipv[46].required-timeout option to wait for IP configuration while activating. (rh #1961666)
- core: start DHCPv6 when a prefix delegation is needed for shared mode. (rh #1973199)
- ifcfg: log warning about invalid keys in ifcfg files. (rh #1959656)
- cloud-setup: add support for Aliyun cloud. (rh #1823315)</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1:1.32.6-1" date="1627560000">- Upgrade to 1.32.6 release
- core: fix adding stale local routes when address changes (rh #1979192)
- dhcp: handle filename/bootfile_name DHCP option and write it to device state
  file for initrd/kickstart (rh #1979387)
- initrd: add "ib.pkey=" command line option (rh #1805708)
- core: introduce "keep-configuration" device option to forcefully activate a
  profile on start (rh #1934122)</changelog>
  <changelog author="Fernando Fernandez Mancera &lt;ferferna@redhat.com&gt; - 1:1.32.8-1" date="1628596800">- Upgrade to 1.32.8 release
- firewalld: configure zones on "Reloaded" signal (rh #1982403)
- ethtool: support configuring newer gigabit ethernet speeds (rh #1897004)
- core: fix wrong MTU for bridge interfaces (rh #1973536)
- cloud-setup: fix gateway address for Aliyun cloud (rh #1823315)</changelog>
  <changelog author="Wen Liang &lt;wenliang@redhat.com&gt; - 1:1.32.10-1" date="1629288000">- update to 1.32.10 release
- nm-initrd-generator: add kernel command line options ethtool autoneg and speed (rh #1940934)
- IP: fix the order of IP addresses during service restart (rh #1988751)</changelog>
  <changelog author="Wen Liang &lt;wenliang@redhat.com&gt; - 1:1.32.10-2" date="1629374400">- platform: fix capturing IPv4 addresses from platform for assuming after restart (rh #1988751)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.32.10-3" date="1632484800">- preserve the IPv6 multicast route added by kernel (rh #2004212)
- cloud-setup: better handle other route configuration (rh #1977984)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.32.10-4" date="1632830400">- revert unapproved patches part of "cloud-setup" change (rh #1977984)</changelog>
  <changelog author="Fernando Fernandez Mancera &lt;ferferna@redhat.com&gt; - 1:1.36.10-5" date="1647864000">- n-dhcp4: discard NAKs from different servers in SELECTING (rh #2065188)</changelog>
</package>
<package pkgid="5505d57245cf035c953b4a4500ab84bdb17c4a7f8e6138944395a0457b2e5d73" name="NetworkManager-wifi-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.32.10" rel="5.el8_5"/>
  <changelog author="Wen Liang &lt;wenliang@redhat.com&gt; - 1:1.32.0-1" date="1624017600">- update to 1.32.0 release
- veth: fix null error when deleting the device (rh #1915278)
- veth: fix crash when deleting the device profile (rh #1915276)
- firewall: add new "nftables" firewall-backend (rh #1548825)
- DNS: fix lookup of hostname via DNS (rh #1970335)</changelog>
  <changelog author="Wen Liang &lt;wenliang@redhat.com&gt; - 1:1.32.2-1" date="1625140800">- update to 1.32.2 release
- device: prefer IPv6 not-deprecated addresses for hostname lookup (rh #1820770)
- docs: describe qdiscs and tfilters in nm-settings manpage (rh #1847894)
- cloud-setup: preserve IPv4 addresses/routes/rules from profile (rh #1971527)
- daemon: performance improvements (rh #1847125)
- dhcp/systemd: ignore FORCERENEW requests for DHCPV4 (rh #1961251, CVE-2020-13529)
- Add bridge_role in 802-3-ethernet.s390-options using nmcli (rh #1935842)</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1:1.32.4-1" date="1626868800">- Upgrade to 1.32.4 with fixes of:
- nmcli: show DNS SEARCH field in device information. (rh #1852317)
- device: avoid crash setting VPN config during unrealize. (rh #1912423)
- core: send ARP announcements when there is carrier. (rh #1956793)
- core: add ipv[46].required-timeout option to wait for IP configuration while activating. (rh #1961666)
- core: start DHCPv6 when a prefix delegation is needed for shared mode. (rh #1973199)
- ifcfg: log warning about invalid keys in ifcfg files. (rh #1959656)
- cloud-setup: add support for Aliyun cloud. (rh #1823315)</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1:1.32.6-1" date="1627560000">- Upgrade to 1.32.6 release
- core: fix adding stale local routes when address changes (rh #1979192)
- dhcp: handle filename/bootfile_name DHCP option and write it to device state
  file for initrd/kickstart (rh #1979387)
- initrd: add "ib.pkey=" command line option (rh #1805708)
- core: introduce "keep-configuration" device option to forcefully activate a
  profile on start (rh #1934122)</changelog>
  <changelog author="Fernando Fernandez Mancera &lt;ferferna@redhat.com&gt; - 1:1.32.8-1" date="1628596800">- Upgrade to 1.32.8 release
- firewalld: configure zones on "Reloaded" signal (rh #1982403)
- ethtool: support configuring newer gigabit ethernet speeds (rh #1897004)
- core: fix wrong MTU for bridge interfaces (rh #1973536)
- cloud-setup: fix gateway address for Aliyun cloud (rh #1823315)</changelog>
  <changelog author="Wen Liang &lt;wenliang@redhat.com&gt; - 1:1.32.10-1" date="1629288000">- update to 1.32.10 release
- nm-initrd-generator: add kernel command line options ethtool autoneg and speed (rh #1940934)
- IP: fix the order of IP addresses during service restart (rh #1988751)</changelog>
  <changelog author="Wen Liang &lt;wenliang@redhat.com&gt; - 1:1.32.10-2" date="1629374400">- platform: fix capturing IPv4 addresses from platform for assuming after restart (rh #1988751)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.32.10-3" date="1632484800">- preserve the IPv6 multicast route added by kernel (rh #2004212)
- cloud-setup: better handle other route configuration (rh #1977984)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.32.10-4" date="1632830400">- revert unapproved patches part of "cloud-setup" change (rh #1977984)</changelog>
  <changelog author="Fernando Fernandez Mancera &lt;ferferna@redhat.com&gt; - 1:1.36.10-5" date="1647864000">- n-dhcp4: discard NAKs from different servers in SELECTING (rh #2065188)</changelog>
</package>
<package pkgid="c465f6b91243109e6d9588158cf12dceafc09faec55a8ff394a6a4914f611c53" name="NetworkManager-wwan-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.32.10" rel="5.el8_5"/>
  <changelog author="Wen Liang &lt;wenliang@redhat.com&gt; - 1:1.32.0-1" date="1624017600">- update to 1.32.0 release
- veth: fix null error when deleting the device (rh #1915278)
- veth: fix crash when deleting the device profile (rh #1915276)
- firewall: add new "nftables" firewall-backend (rh #1548825)
- DNS: fix lookup of hostname via DNS (rh #1970335)</changelog>
  <changelog author="Wen Liang &lt;wenliang@redhat.com&gt; - 1:1.32.2-1" date="1625140800">- update to 1.32.2 release
- device: prefer IPv6 not-deprecated addresses for hostname lookup (rh #1820770)
- docs: describe qdiscs and tfilters in nm-settings manpage (rh #1847894)
- cloud-setup: preserve IPv4 addresses/routes/rules from profile (rh #1971527)
- daemon: performance improvements (rh #1847125)
- dhcp/systemd: ignore FORCERENEW requests for DHCPV4 (rh #1961251, CVE-2020-13529)
- Add bridge_role in 802-3-ethernet.s390-options using nmcli (rh #1935842)</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1:1.32.4-1" date="1626868800">- Upgrade to 1.32.4 with fixes of:
- nmcli: show DNS SEARCH field in device information. (rh #1852317)
- device: avoid crash setting VPN config during unrealize. (rh #1912423)
- core: send ARP announcements when there is carrier. (rh #1956793)
- core: add ipv[46].required-timeout option to wait for IP configuration while activating. (rh #1961666)
- core: start DHCPv6 when a prefix delegation is needed for shared mode. (rh #1973199)
- ifcfg: log warning about invalid keys in ifcfg files. (rh #1959656)
- cloud-setup: add support for Aliyun cloud. (rh #1823315)</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1:1.32.6-1" date="1627560000">- Upgrade to 1.32.6 release
- core: fix adding stale local routes when address changes (rh #1979192)
- dhcp: handle filename/bootfile_name DHCP option and write it to device state
  file for initrd/kickstart (rh #1979387)
- initrd: add "ib.pkey=" command line option (rh #1805708)
- core: introduce "keep-configuration" device option to forcefully activate a
  profile on start (rh #1934122)</changelog>
  <changelog author="Fernando Fernandez Mancera &lt;ferferna@redhat.com&gt; - 1:1.32.8-1" date="1628596800">- Upgrade to 1.32.8 release
- firewalld: configure zones on "Reloaded" signal (rh #1982403)
- ethtool: support configuring newer gigabit ethernet speeds (rh #1897004)
- core: fix wrong MTU for bridge interfaces (rh #1973536)
- cloud-setup: fix gateway address for Aliyun cloud (rh #1823315)</changelog>
  <changelog author="Wen Liang &lt;wenliang@redhat.com&gt; - 1:1.32.10-1" date="1629288000">- update to 1.32.10 release
- nm-initrd-generator: add kernel command line options ethtool autoneg and speed (rh #1940934)
- IP: fix the order of IP addresses during service restart (rh #1988751)</changelog>
  <changelog author="Wen Liang &lt;wenliang@redhat.com&gt; - 1:1.32.10-2" date="1629374400">- platform: fix capturing IPv4 addresses from platform for assuming after restart (rh #1988751)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.32.10-3" date="1632484800">- preserve the IPv6 multicast route added by kernel (rh #2004212)
- cloud-setup: better handle other route configuration (rh #1977984)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.32.10-4" date="1632830400">- revert unapproved patches part of "cloud-setup" change (rh #1977984)</changelog>
  <changelog author="Fernando Fernandez Mancera &lt;ferferna@redhat.com&gt; - 1:1.36.10-5" date="1647864000">- n-dhcp4: discard NAKs from different servers in SELECTING (rh #2065188)</changelog>
</package>
<package pkgid="97ed0246dadbe79e8df5d521a132b74660b9d90969556ffb1a2954e68791b114" name="binutils-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.30" rel="108.el8_5.1"/>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.30-99" date="1616673600">- Fix bug in previous patch to enable support for ARM v8.6 ISA.  (#1875912)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.30-100" date="1617969600">- Do not strip the static BFD library.  (For real this time).  (#1924068)
- Remove support for ARM v8.6 ISA.  (#1875912)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.30-101" date="1618401600">- Fix excessive memory consumption in the BFD librart when parsing corrupt DWARF information.  (#1947134)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.30-102" date="1619438400">- Bump NVR to allow rebuild against binutils-2.30-101.</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.30-103" date="1620129600">- Fix an illegal memory access when parsing a corrupt ELF file.  (#1953659)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.30-104" date="1621425600">- Fix heap-based buffer overflow in _bfd_elf_slurp_secondary_reloc_section. (#1961526)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.30-105" date="1623758400">- Fix the handling of relocations against discarded sections.  (#1969775)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.30-107" date="1624449600">- Fix the GOLD linker's generation of .note.gnu.property sections for x86.  (#1970961)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.30-108" date="1625659200">- Fix thinko in previous delta.  (#1970961)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.30-108.1" date="1634731200">- Add ability to control the display of unicode characters.  (#2009172)</changelog>
</package>
<package pkgid="6e02e0bdc83722b83dbff6d711b2dace2f6ee8dca90c68cd6936300403f0e8b1" name="binutils-debugsource" arch="x86_64">
  <version epoch="0" ver="2.30" rel="108.el8_5.1"/>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.30-99" date="1616673600">- Fix bug in previous patch to enable support for ARM v8.6 ISA.  (#1875912)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.30-100" date="1617969600">- Do not strip the static BFD library.  (For real this time).  (#1924068)
- Remove support for ARM v8.6 ISA.  (#1875912)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.30-101" date="1618401600">- Fix excessive memory consumption in the BFD librart when parsing corrupt DWARF information.  (#1947134)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.30-102" date="1619438400">- Bump NVR to allow rebuild against binutils-2.30-101.</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.30-103" date="1620129600">- Fix an illegal memory access when parsing a corrupt ELF file.  (#1953659)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.30-104" date="1621425600">- Fix heap-based buffer overflow in _bfd_elf_slurp_secondary_reloc_section. (#1961526)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.30-105" date="1623758400">- Fix the handling of relocations against discarded sections.  (#1969775)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.30-107" date="1624449600">- Fix the GOLD linker's generation of .note.gnu.property sections for x86.  (#1970961)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.30-108" date="1625659200">- Fix thinko in previous delta.  (#1970961)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.30-108.1" date="1634731200">- Add ability to control the display of unicode characters.  (#2009172)</changelog>
</package>
<package pkgid="4409c707932981a6a8b5b1ffd4731e4eccf04a338a9273c88400a32d31f6ee40" name="bpftool-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="348.12.2.el8_5"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.4.1.el8_5]" date="1637668800">- [RHEL8.6 BZ 1849234] cifs: report error instead of invalid when revalidating a dentry fails (Ronnie Sahlberg) [2017177 1849234]
- kthread: Fix PF_KTHREAD vs to_kthread() race (Waiman Long) [2010333 2001497]
- sched/fair: Ignore percpu threads for imbalance pulls (Waiman Long) [2010333 2001497]
- kthread: Extract KTHREAD_IS_PER_CPU (Waiman Long) [2010333 2001497]
- sched: Optimize finish_lock_switch() (Waiman Long) [2010333 2001497]
- sched/hotplug: Ensure only per-cpu kthreads run during hotplug (Waiman Long) [2010333 2001497]
- sched: Fix balance_callback() (Waiman Long) [2010333 2001497]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.5.1.el8_5]" date="1638273600">- blk-mq: still set q-&gt;make_request_fn for blk-mq (Ming Lei) [2016384 1999728]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.6.1.el8_5]" date="1638878400">- x86/Kconfig: Do not enable AMD_MEM_ENCRYPT_ACTIVE_BY_DEFAULT automatically (Prarit Bhargava) [2024678 2021219]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.7.1.el8_5]" date="1638964800">- sched: Fix CPU hotplug / tighten is_per_cpu_kthread() (Waiman Long) [2026450 2024869]
- sched: Prepare to use balance_push in ttwu() (Waiman Long) [2026450 2024869]
- sched: Don't run cpu-online with balance_push() enabled (Waiman Long) [2026450 2024869]
- workqueue: Tag bound workers with KTHREAD_IS_PER_CPU (Waiman Long) [2026450 2024869]
- workqueue: Use cpu_possible_mask instead of cpu_active_mask to break affinity (Waiman Long) [2026450 2024869]
- sched: Fix hotplug vs CPU bandwidth control (Waiman Long) [2026450 2024869]
- workqueue: Manually break affinity on hotplug (Waiman Long) [2026450 2024869]
- sched/hotplug: Consolidate task migration on CPU unplug (Waiman Long) [2026450 2024869]
- sched/core: Wait for tasks being pushed away on hotplug (Waiman Long) [2026450 2024869]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.8.1.el8_5]" date="1639483200">- ice: Fix VF true promiscuous mode (Jonathan Toppins) [2026698 1970643]
- ice: Remove toggling of antispoof for VF trusted promiscuous mode (Jonathan Toppins) [2026698 1970643]
- ice: Fix replacing VF hardware MAC to existing MAC filter (Jonathan Toppins) [2026698 1970643]
- ice: Fix not stopping Tx queues for VFs (Jonathan Toppins) [2026698 1970643]
- ice: Fix race conditions between virtchnl handling and VF ndo ops (Jonathan Toppins) [2026698 1970643]
- net/netif_receive_skb_core: Use migrate_disable() (Luis Claudio R. Goncalves) [2027689 2024168]
- crypto: jitter - consider 32 LSB for APT (Herbert Xu) [2029365 1994390]
- xfs: fix I_DONTCACHE (Carlos Maiolino) [2028534 2024969]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.9.1.el8_5]" date="1640001600">- ixgbe: Revert "bpf, devmap: Move drop error path to devmap for XDP_REDIRECT" (Ken Cox) [2029845 2024240]
- i40e: Revert "bpf, devmap: Move drop error path to devmap for XDP_REDIRECT" (Stefan Assmann) [2029845 2024225]
- rcu/nocb: Perform deferred wake up before last idle's need_resched() check (Waiman Long) [2029449 2008340]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.10.1.el8_5]" date="1640779200">- selftests: add a test case for mirred egress to ingress (Xin Long) [2024411 1983894]
- net: sched: act_mirred: drop dst for the direction from egress to ingress (Xin Long) [2024411 1983894]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.11.1.el8_5]" date="1641297600">- blk-mq: avoid to iterate over stale request (Ming Lei) [2034396 1997338]
- rcu: Tighten rcu_advance_cbs_nowake() checks (Daniel Vacek) [2032579 2013408]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.12.1.el8_5]" date="1641988800">- tcp: don't free a FIN sk_buff in tcp_remove_empty_skb() (Guillaume Nault) [2021574 2016210]
- kernel.spec: Add support to use vmlinux.h (Jiri Olsa) [2031053 1989087]
- spec: Add vmlinux.h to kernel-devel package (Jiri Olsa) [2031053 1989087]
- x86/mce: Avoid infinite loop for copy from user recovery (Prarit Bhargava) [2008789 1999550]
- x86/mce: Rename kill_it to kill_current_task (Prarit Bhargava) [2008789 1999550]
- x86/mce: Recover from poison found while copying from user space (Prarit Bhargava) [2008789 1999550]
- x86/mce: Delay clearing IA32_MCG_STATUS to the end of do_machine_check() (Prarit Bhargava) [2008789 1999550]
- x86/mce: Send #MC singal from task work (Prarit Bhargava) [2008789 1999550]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-348.12.2.el8_5]" date="1642420800">- vfs: Out-of-bounds write of heap buffer in fs_context.c (Frantisek Hrbata) [2040585 2040586] {CVE-2022-0185}
- xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Bruno Meneguele) [2034864 2034865] {CVE-2021-4155}</changelog>
</package>
<package pkgid="3bd0606654c37b6c06f43add38d51de1f0034a5cb6007486b89012c95096cb13" name="bpftool-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="348.2.1.el8_5"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-341.el8]" date="1631275200">- mptcp: Only send extra TCP acks in eligible socket states (Paolo Abeni) [1997178]
- mptcp: fix possible divide by zero (Paolo Abeni) [1997178]
- mptcp: drop tx skb cache (Paolo Abeni) [1997178]
- mptcp: fix memory leak on address flush (Paolo Abeni) [1997178]
- ice: Only lock to update netdev dev_addr (Michal Schmidt) [1995868]
- ice: restart periodic outputs around time changes (Ken Cox) [1992750]
- ice: Fix perout start time rounding (Ken Cox) [1992750]
- net/sched: ets: fix crash when flipping from 'strict' to 'quantum' (Davide Caratti) [1981184]
- ovl: prevent private clone if bind mount is not allowed (Miklos Szeredi) [1993131] {CVE-2021-3732}
- gfs2: Don't call dlm after protocol is unmounted (Bob Peterson) [1997193]
- gfs2: don't stop reads while withdraw in progress (Bob Peterson) [1997193]
- gfs2: Mark journal inodes as "don't cache" (Bob Peterson) [1997193]
- bpf: bpftool: Add -fno-asynchronous-unwind-tables to BPF Clang invocation (Yauheni Kaliuta) [1997124]
- perf/x86/intel: Apply mid ACK for small core (Michael Petlan) [1838573]
- perf/x86/intel/lbr: Zero the xstate buffer on allocation (Michael Petlan) [1838573]
- perf: Fix task context PMU for Hetero (Michael Petlan) [1838573]
- perf/x86/intel: Fix fixed counter check warning for some Alder Lake (Michael Petlan) [1838573]
- perf/x86/lbr: Remove cpuc-&gt;lbr_xsave allocation from atomic context (Michael Petlan) [1838573]
- x86/fpu/xstate: Fix an xstate size check warning with architectural LBRs (Michael Petlan) [1838573]
- perf/x86/rapl: Add support for Intel Alder Lake (Michael Petlan) [1838573]
- perf/x86/cstate: Add Alder Lake CPU support (Michael Petlan) [1838573]
- perf/x86/msr: Add Alder Lake CPU support (Michael Petlan) [1838573]
- perf/x86/intel/uncore: Add Alder Lake support (Michael Petlan) [1838573]
- perf: Extend PERF_TYPE_HARDWARE and PERF_TYPE_HW_CACHE (Michael Petlan) [1838573]
- perf/x86/intel: Add Alder Lake Hybrid support (Michael Petlan) [1838573]
- perf/x86: Support filter_match callback (Michael Petlan) [1838573]
- perf/x86/intel: Add attr_update for Hybrid PMUs (Michael Petlan) [1838573]
- perf/x86: Add structures for the attributes of Hybrid PMUs (Michael Petlan) [1838573]
- perf/x86: Register hybrid PMUs (Michael Petlan) [1838573]
- perf/x86: Factor out x86_pmu_show_pmu_cap (Michael Petlan) [1838573]
- perf/x86: Remove temporary pmu assignment in event_init (Michael Petlan) [1838573]
- perf/x86/intel: Factor out intel_pmu_check_extra_regs (Michael Petlan) [1838573]
- perf/x86/intel: Factor out intel_pmu_check_event_constraints (Michael Petlan) [1838573]
- perf/x86/intel: Factor out intel_pmu_check_num_counters (Michael Petlan) [1838573]
- perf/x86: Hybrid PMU support for extra_regs (Michael Petlan) [1838573]
- perf/x86: Hybrid PMU support for event constraints (Michael Petlan) [1838573]
- perf/x86: Hybrid PMU support for hardware cache event (Michael Petlan) [1838573]
- perf/x86: Hybrid PMU support for unconstrained (Michael Petlan) [1838573]
- perf/x86: Hybrid PMU support for counters (Michael Petlan) [1838573]
- perf/x86: Hybrid PMU support for intel_ctrl (Michael Petlan) [1838573]
- perf/x86/intel: Hybrid PMU support for perf capabilities (Michael Petlan) [1838573]
- perf/x86: Track pmu in per-CPU cpu_hw_events (Michael Petlan) [1838573]
- perf/x86/intel/lbr: Support XSAVES for arch LBR read (Michael Petlan) [1838573]
- perf/x86/intel/lbr: Support XSAVES/XRSTORS for LBR context switch (Michael Petlan) [1838573]
- x86/fpu/xstate: Add helpers for LBR dynamic supervisor feature (Michael Petlan) [1838573]
- x86/fpu/xstate: Support dynamic supervisor feature for LBR (Michael Petlan) [1838573]
- x86/fpu: Use proper mask to replace full instruction mask (Michael Petlan) [1838573]
- x86/cpu: Add helper function to get the type of the current hybrid CPU (Michael Petlan) [1838573]
- x86/cpufeatures: Enumerate Intel Hybrid Technology feature bit (Michael Petlan) [1838573]
- HID: make arrays usage and value to be the same (Benjamin Tissoires) [1974942]
- ACPI: PM: s2idle: Invert Microsoft UUID entry and exit (David Arcari) [1960440]
- platform/x86: amd-pmc: Fix undefined reference to __udivdi3 (David Arcari) [1960440]
- platform/x86: amd-pmc: Fix missing unlock on error in amd_pmc_send_cmd() (David Arcari) [1960440]
- platform/x86: amd-pmc: Use return code on suspend (David Arcari) [1960440]
- platform/x86: amd-pmc: Add new acpi id for future PMC controllers (David Arcari) [1960440]
- platform/x86: amd-pmc: Add support for ACPI ID AMDI0006 (David Arcari) [1960440]
- platform/x86: amd-pmc: Add support for logging s0ix counters (David Arcari) [1960440]
- platform/x86: amd-pmc: Add support for logging SMU metrics (David Arcari) [1960440]
- platform/x86: amd-pmc: call dump registers only once (David Arcari) [1960440]
- platform/x86: amd-pmc: Fix SMU firmware reporting mechanism (David Arcari) [1960440]
- platform/x86: amd-pmc: Fix command completion code (David Arcari) [1960440]
- usb: pci-quirks: disable D3cold on xhci suspend for s2idle on AMD Renoir (David Arcari) [1960440]
- ACPI: PM: Only mark EC GPE for wakeup on Intel systems (David Arcari) [1960440]
- ACPI: PM: Adjust behavior for field problems on AMD systems (David Arcari) [1960440]
- ACPI: PM: s2idle: Add support for new Microsoft UUID (David Arcari) [1960440]
- ACPI: PM: s2idle: Add support for multiple func mask (David Arcari) [1960440]
- ACPI: PM: s2idle: Refactor common code (David Arcari) [1960440]
- ACPI: PM: s2idle: Use correct revision id (David Arcari) [1960440]
- ACPI: PM: s2idle: Add missing LPS0 functions for AMD (David Arcari) [1960440]
- lockd: Fix invalid lockowner cast after vfs_test_lock (Benjamin Coddington) [1986138]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-342.el8]" date="1631620800">- selftest: netfilter: add test case for unreplied tcp connections (Florian Westphal) [1991523]
- netfilter: conntrack: do not renew entry stuck in tcp SYN_SENT state (Florian Westphal) [1991523]
- net/sched: store the last executed chain also for clsact egress (Davide Caratti) [1980537]
- ice: fix Tx queue iteration for Tx timestamp enablement (Ken Cox) [1999743]
- perf evsel: Add missing cloning of evsel-&gt;use_config_name (Michael Petlan) [1838635]
- perf Documentation: Document intel-hybrid support (Michael Petlan) [1838635]
- perf tests: Skip 'perf stat metrics (shadow stat) test' for hybrid (Michael Petlan) [1838635]
- perf tests: Support 'Convert perf time to TSC' test for hybrid (Michael Petlan) [1838635]
- perf tests: Support 'Session topology' test for hybrid (Michael Petlan) [1838635]
- perf tests: Support 'Parse and process metrics' test for hybrid (Michael Petlan) [1838635]
- perf tests: Support 'Track with sched_switch' test for hybrid (Michael Petlan) [1838635]
- perf tests: Skip 'Setup struct perf_event_attr' test for hybrid (Michael Petlan) [1838635]
- perf tests: Add hybrid cases for 'Roundtrip evsel-&gt;name' test (Michael Petlan) [1838635]
- perf tests: Add hybrid cases for 'Parse event definition strings' test (Michael Petlan) [1838635]
- perf record: Uniquify hybrid event name (Michael Petlan) [1838635]
- perf stat: Warn group events from different hybrid PMU (Michael Petlan) [1838635]
- perf stat: Filter out unmatched aggregation for hybrid event (Michael Petlan) [1838635]
- perf stat: Add default hybrid events (Michael Petlan) [1838635]
- perf record: Create two hybrid 'cycles' events by default (Michael Petlan) [1838635]
- perf parse-events: Support event inside hybrid pmu (Michael Petlan) [1838635]
- perf parse-events: Compare with hybrid pmu name (Michael Petlan) [1838635]
- perf parse-events: Create two hybrid raw events (Michael Petlan) [1838635]
- perf parse-events: Create two hybrid cache events (Michael Petlan) [1838635]
- perf parse-events: Create two hybrid hardware events (Michael Petlan) [1838635]
- perf stat: Uniquify hybrid event name (Michael Petlan) [1838635]
- perf pmu: Add hybrid helper functions (Michael Petlan) [1838635]
- perf pmu: Save detected hybrid pmus to a global pmu list (Michael Petlan) [1838635]
- perf pmu: Save pmu name (Michael Petlan) [1838635]
- perf pmu: Simplify arguments of __perf_pmu__new_alias (Michael Petlan) [1838635]
- perf jevents: Support unit value "cpu_core" and "cpu_atom" (Michael Petlan) [1838635]
- tools headers uapi: Update tools's copy of linux/perf_event.h (Michael Petlan) [1838635]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-343.el8]" date="1631793600">- rcu: Avoid unneeded function call in rcu_read_unlock() (Waiman Long) [1997500]
- mt76: connac: do not schedule mac_work if the device is not running (Íñigo Huguet) [1956419 1972045]
- mt7921e: enable module in config (Íñigo Huguet) [1956419 1972045]
- Revert tools/power/cpupower: Read energy_perf_bias from sysfs (Steve Best) [1999926]
- libnvdimm/namespace: Differentiate between probe mapping and runtime mapping (Jeff Moyer) [1795719]
- libnvdimm/pfn_dev: Don't clear device memmap area during generic namespace probe (Jeff Moyer) [1795719]
- perf/x86/intel/uncore: Clean up error handling path of iio mapping (Michael Petlan) [1837330]
- perf/x86/intel/uncore: Fix for iio mapping on Skylake Server (Michael Petlan) [1837330]
- perf/x86/intel/uncore: Generic support for the MMIO type of uncore blocks (Michael Petlan) [1837330]
- perf/x86/intel/uncore: Generic support for the PCI type of uncore blocks (Michael Petlan) [1837330]
- perf/x86/intel/uncore: Rename uncore_notifier to uncore_pci_sub_notifier (Michael Petlan) [1837330]
- perf/x86/intel/uncore: Generic support for the MSR type of uncore blocks (Michael Petlan) [1837330]
- perf/x86/intel/uncore: Parse uncore discovery tables (Michael Petlan) [1837330]
- perf/x86/intel/uncore: Expose an Uncore unit to IIO PMON mapping (Michael Petlan) [1837330]
- perf/x86/intel/uncore: Wrap the max dies calculation into an accessor (Michael Petlan) [1837330]
- perf/x86/intel/uncore: Expose an Uncore unit to PMON mapping (Michael Petlan) [1837330]
- perf/x86/intel/uncore: Validate MMIO address before accessing (Michael Petlan) [1837330]
- perf/x86/intel/uncore: Record the size of mapped area (Michael Petlan) [1837330]
- perf/x86/intel/uncore: Fix oops when counting IMC uncore events on some TGL (Michael Petlan) [1837330]
- crypto: qat - remove unused macro in FW loader (Vladis Dronov) [1920086]
- crypto: qat - check return code of qat_hal_rd_rel_reg() (Vladis Dronov) [1920086]
- crypto: qat - report an error if MMP file size is too large (Vladis Dronov) [1920086]
- crypto: qat - check MMP size before writing to the SRAM (Vladis Dronov) [1920086]
- crypto: qat - return error when failing to map FW (Vladis Dronov) [1920086]
- crypto: qat - enable detection of accelerators hang (Vladis Dronov) [1920086]
- crypto: qat - Fix a double free in adf_create_ring (Vladis Dronov) [1920086]
- crypto: qat - fix error path in adf_isr_resource_alloc() (Vladis Dronov) [1920086]
- crypto: qat - ADF_STATUS_PF_RUNNING should be set after adf_dev_init (Vladis Dronov) [1920086]
- crypto: qat - don't release uninitialized resources (Vladis Dronov) [1920086]
- crypto: qat - fix use of 'dma_map_single' (Vladis Dronov) [1920086]
- crypto: qat - fix unmap invalid dma address (Vladis Dronov) [1920086]
- crypto: qat - fix spelling mistake: "messge" -&gt; "message" (Vladis Dronov) [1920086]
- crypto: qat - reduce size of mapped region (Vladis Dronov) [1920086]
- crypto: qat - change format string and cast ring size (Vladis Dronov) [1920086]
- crypto: qat - fix potential spectre issue (Vladis Dronov) [1920086]
- crypto: qat - configure arbiter mapping based on engines enabled (Vladis Dronov) [1920086]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-344.el8]" date="1632139200">- perf/x86/intel: Fix PEBS-via-PT reload base value for Extended PEBS (Michael Petlan) [1998051]
- perf/x86/intel/uncore: Fix Add BW copypasta (Michael Petlan) [1998051]
- perf/x86/intel/uncore: Add BW counters for GT, IA and IO breakdown (Michael Petlan) [1998051]
- Revert "ice: Add initial support framework for LAG" (Michal Schmidt) [1999016]
- net: re-initialize slow_gro flag at gro_list_prepare time (Paolo Abeni) [2002367]
- cxgb4: dont touch blocked freelist bitmap after free (Rahul Lakkireddy) [1998148]
- cxgb4vf: configure ports accessible by the VF (Rahul Lakkireddy) [1961329]
- scsi: lpfc: Fix memory leaks in error paths while issuing ELS RDF/SCR request (Dick Kennedy) [1976332]
- scsi: lpfc: Keep NDLP reference until after freeing the IOCB after ELS handling (Dick Kennedy) [1976332]
- scsi: lpfc: Move initialization of phba-&gt;poll_list earlier to avoid crash (Dick Kennedy) [1976332]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-345.el8]" date="1632398400">- e1000e: Do not take care about recovery NVM checksum (Ken Cox) [1984558]
- qrtr: disable CONFIG_QRTR for non x86_64 archs (Íñigo Huguet) [1999642]
- ceph: fix possible null-pointer dereference in ceph_mdsmap_decode() (Jeff Layton) [1989999]
- ceph: fix dereference of null pointer cf (Jeff Layton) [1989999]
- ceph: correctly handle releasing an embedded cap flush (Jeff Layton) [1989999]
- ceph: take snap_empty_lock atomically with snaprealm refcount change (Jeff Layton) [1989999]
- ceph: don't WARN if we're still opening a session to an MDS (Jeff Layton) [1989999]
- rbd: don't hold lock_rwsem while running_list is being drained (Jeff Layton) [1989999]
- rbd: always kick acquire on "acquired" and "released" notifications (Jeff Layton) [1989999]
- ceph: take reference to req-&gt;r_parent at point of assignment (Jeff Layton) [1989999]
- ceph: eliminate ceph_async_iput() (Jeff Layton) [1989999]
- ceph: don't take s_mutex in ceph_flush_snaps (Jeff Layton) [1989999]
- ceph: don't take s_mutex in try_flush_caps (Jeff Layton) [1989999]
- ceph: don't take s_mutex or snap_rwsem in ceph_check_caps (Jeff Layton) [1989999]
- ceph: eliminate session-&gt;s_gen_ttl_lock (Jeff Layton) [1989999]
- ceph: allow ceph_put_mds_session to take NULL or ERR_PTR (Jeff Layton) [1989999]
- ceph: clean up locking annotation for ceph_get_snap_realm and __lookup_snap_realm (Jeff Layton) [1989999]
- ceph: add some lockdep assertions around snaprealm handling (Jeff Layton) [1989999]
- ceph: decoding error in ceph_update_snap_realm should return -EIO (Jeff Layton) [1989999]
- ceph: add IO size metrics support (Jeff Layton) [1989999]
- ceph: update and rename __update_latency helper to __update_stdev (Jeff Layton) [1989999]
- ceph: simplify the metrics struct (Jeff Layton) [1989999]
- libceph: fix doc warnings in cls_lock_client.c (Jeff Layton) [1989999]
- libceph: remove unnecessary ret variable in ceph_auth_init() (Jeff Layton) [1989999]
- libceph: kill ceph_none_authorizer::reply_buf (Jeff Layton) [1989999]
- ceph: make ceph_queue_cap_snap static (Jeff Layton) [1989999]
- ceph: remove bogus checks and WARN_ONs from ceph_set_page_dirty (Jeff Layton) [1989999]
- libceph: set global_id as soon as we get an auth ticket (Jeff Layton) [1989999]
- libceph: don't pass result into ac-&gt;ops-&gt;handle_reply() (Jeff Layton) [1989999]
- ceph: fix error handling in ceph_atomic_open and ceph_lookup (Jeff Layton) [1989999]
- ceph: must hold snap_rwsem when filling inode for async create (Jeff Layton) [1989999]
- libceph: Fix spelling mistakes (Jeff Layton) [1989999]
- libceph: don't set global_id until we get an auth ticket (Jeff Layton) [1989999]
- libceph: bump CephXAuthenticate encoding version (Jeff Layton) [1989999]
- ceph: don't allow access to MDS-private inodes (Jeff Layton) [1989999]
- ceph: fix up some bare fetches of i_size (Jeff Layton) [1989999]
- ceph: support getting ceph.dir.rsnaps vxattr (Jeff Layton) [1989999]
- ceph: drop pinned_page parameter from ceph_get_caps (Jeff Layton) [1989999]
- ceph: fix inode leak on getattr error in __fh_to_dentry (Jeff Layton) [1989999]
- ceph: only check pool permissions for regular files (Jeff Layton) [1989999]
- ceph: send opened files/pinned caps/opened inodes metrics to MDS daemon (Jeff Layton) [1989999]
- ceph: avoid counting the same request twice or more (Jeff Layton) [1989999]
- ceph: rename the metric helpers (Jeff Layton) [1989999]
- ceph: fix kerneldoc copypasta over ceph_start_io_direct (Jeff Layton) [1989999]
- ceph: don't use d_add in ceph_handle_snapdir (Jeff Layton) [1989999]
- ceph: don't clobber i_snap_caps on non-I_NEW inode (Jeff Layton) [1989999]
- ceph: fix fall-through warnings for Clang (Jeff Layton) [1989999]
- net: ceph: Fix a typo in osdmap.c (Jeff Layton) [1989999]
- ceph: don't allow type or device number to change on non-I_NEW inodes (Jeff Layton) [1989999]
- ceph: defer flushing the capsnap if the Fb is used (Jeff Layton) [1989999]
- ceph: allow queueing cap/snap handling after putting cap references (Jeff Layton) [1989999]
- ceph: clean up inode work queueing (Jeff Layton) [1989999]
- ceph: fix flush_snap logic after putting caps (Jeff Layton) [1989999]
- libceph: fix "Boolean result is used in bitwise operation" warning (Jeff Layton) [1989999]
- new helper: inode_wrong_type() (Jeff Layton) [1989999]
- kabi: Adding symbol single_release (fs/seq_file.c) (Čestmír Kalina) [1945486]
- kabi: Adding symbol single_open (fs/seq_file.c) (Čestmír Kalina) [1945486]
- kabi: Adding symbol seq_read (fs/seq_file.c) (Čestmír Kalina) [1945486]
- kabi: Adding symbol seq_printf (fs/seq_file.c) (Čestmír Kalina) [1945486]
- kabi: Adding symbol seq_lseek (fs/seq_file.c) (Čestmír Kalina) [1945486]
- kabi: Adding symbol unregister_chrdev_region (fs/char_dev.c) (Čestmír Kalina) [1945486]
- kabi: Adding symbol cdev_init (fs/char_dev.c) (Čestmír Kalina) [1945486]
- kabi: Adding symbol cdev_del (fs/char_dev.c) (Čestmír Kalina) [1945486]
- kabi: Adding symbol cdev_alloc (fs/char_dev.c) (Čestmír Kalina) [1945486]
- kabi: Adding symbol cdev_add (fs/char_dev.c) (Čestmír Kalina) [1945486]
- kabi: Adding symbol alloc_chrdev_region (fs/char_dev.c) (Čestmír Kalina) [1945486]
- kabi: Adding symbol pcie_capability_read_word (drivers/pci/access.c) (Čestmír Kalina) [1945485]
- kabi: Adding symbol pcie_capability_read_dword (drivers/pci/access.c) (Čestmír Kalina) [1945485]
- kabi: Adding symbol pcie_capability_clear_and_set_word (drivers/pci/access.c) (Čestmír Kalina) [1945485]
- kabi: Adding symbol pci_write_config_dword (drivers/pci/access.c) (Čestmír Kalina) [1945485]
- kabi: Adding symbol pci_write_config_byte (drivers/pci/access.c) (Čestmír Kalina) [1945485]
- kabi: Adding symbol pci_set_power_state (drivers/pci/pci.c) (Čestmír Kalina) [1945485]
- kabi: Adding symbol pci_read_config_dword (drivers/pci/access.c) (Čestmír Kalina) [1945485]
- kabi: Adding symbol pci_read_config_byte (drivers/pci/access.c) (Čestmír Kalina) [1945485]
- kabi: Adding symbol pci_irq_vector (drivers/pci/msi.c) (Čestmír Kalina) [1945485]
- kabi: Adding symbol pci_get_device (drivers/pci/search.c) (Čestmír Kalina) [1945485]
- kabi: Adding symbol pci_free_irq_vectors (drivers/pci/msi.c) (Čestmír Kalina) [1945485]
- kabi: Adding symbol pci_alloc_irq_vectors_affinity (drivers/pci/msi.c) (Čestmír Kalina) [1945485]
- kabi: Adding symbol kexec_crash_loaded (kernel/kexec_core.c) (Čestmír Kalina) [1945491]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-346.el8]" date="1633089600">- redhat: switch secureboot kernel image signing to release keys (Bruno Meneguele)
- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Fix RT check branch name (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- Revert "Merge: mt7921e: enable new Mediatek wireless hardware" (Bruno Meneguele) [2009501]
- megaraid_sas: fix concurrent access to ISR between IRQ polling and real interrupt (Tomas Henzl) [2009022]
- scsi: megaraid_sas: mq_poll support (Tomas Henzl) [2009022]
- [PATCH v2] scsi: qla2xxx: Suppress unnecessary log messages during login (Nilesh Javali) [1982186]
- scsi: qla2xxx: Fix excessive messages during device logout (Nilesh Javali) [1982186]
- PCI: pciehp: Ignore Link Down/Up caused by DPC (Myron Stowe) [1981741]
- arm64: kpti: Fix "kpti=off" when KASLR is enabled (Mark Salter) [1979731]
- arm64: Fix CONFIG_ARCH_RANDOM=n build (Mark Salter) [1979731]
- redhat/configs: aarch64: add CONFIG_ARCH_RANDOM (Mark Salter) [1979731]
- arm64: Implement archrandom.h for ARMv8.5-RNG (Mark Salter) [1979731]
- arm64: kconfig: Fix alignment of E0PD help text (Mark Salter) [1979731]
- arm64: Use register field helper in kaslr_requires_kpti() (Mark Salter) [1979731]
- arm64: Simplify early check for broken TX1 when KASLR is enabled (Mark Salter) [1979731]
- arm64: Use a variable to store non-global mappings decision (Mark Salter) [1979731]
- arm64: Don't use KPTI where we have E0PD (Mark Salter) [1979731]
- arm64: Factor out checks for KASLR in KPTI code into separate function (Mark Salter) [1979731]
- redhat/configs: Add CONFIG_ARM64_E0PD (Mark Salter) [1979731]
- arm64: Add initial support for E0PD (Mark Salter) [1979731]
- arm64: cpufeature: Export matrix and other features to userspace (Mark Salter) [1980098]
- arm64: docs: cpu-feature-registers: Document ID_AA64PFR1_EL1 (Mark Salter) [1980098]
- docs/arm64: cpu-feature-registers: Rewrite bitfields that don't follow [e, s] (Mark Salter) [1980098]
- docs/arm64: cpu-feature-registers: Documents missing visible fields (Mark Salter) [1980098]
- arm64: Introduce system_capabilities_finalized() marker (Mark Salter) [1980098]
- arm64: entry.S: Do not preempt from IRQ before all cpufeatures are enabled (Mark Salter) [1980098]
- docs/arm64: elf_hwcaps: Document HWCAP_SB (Mark Salter) [1980098]
- docs/arm64: elf_hwcaps: sort the HWCAP{, 2} documentation by ascending value (Mark Salter) [1980098]
- arm64: cpufeature: Treat ID_AA64ZFR0_EL1 as RAZ when SVE is not enabled (Mark Salter) [1980098]
- arm64: cpufeature: Effectively expose FRINT capability to userspace (Mark Salter) [1980098]
- arm64: cpufeature: Fix feature comparison for CTR_EL0.{CWG,ERG} (Mark Salter) [1980098]
- arm64: Expose FRINT capabilities to userspace (Mark Salter) [1980098]
- arm64: Expose ARMv8.5 CondM capability to userspace (Mark Salter) [1980098]
- docs: arm64: convert perf.txt to ReST format (Mark Salter) [1980098]
- docs: arm64: convert docs to ReST and rename to .rst (Mark Salter) [1980098]
- Documentation/arm64: HugeTLB page implementation (Mark Salter) [1980098]
- Documentation/arm64/sve: Couple of improvements and typos (Mark Salter) [1980098]
- arm64: cpufeature: Fix missing ZFR0 in __read_sysreg_by_encoding() (Mark Salter) [1980098]
- arm64: Expose SVE2 features for userspace (Mark Salter) [1980098]
- arm64: Advertise ARM64_HAS_DCPODP cpu feature (Mark Salter) [1980098]
- arm64: add CVADP support to the cache maintenance helper (Mark Salter) [1980098]
- arm64: Fix minor issues with the dcache_by_line_op macro (Mark Salter) [1980098]
- arm64: Expose DC CVADP to userspace (Mark Salter) [1980098]
- arm64: Handle trapped DC CVADP (Mark Salter) [1980098]
- arm64: HWCAP: encapsulate elf_hwcap (Mark Salter) [1980098]
- arm64: HWCAP: add support for AT_HWCAP2 (Mark Salter) [1980098]
- x86/MCE/AMD, EDAC/mce_amd: Add new SMCA bank types (Aristeu Rozanski) [1965331]
- x86/MCE/AMD, EDAC/mce_amd: Remove struct smca_hwid.xec_bitmap (Aristeu Rozanski) [1965331]
- EDAC, mce_amd: Print ExtErrorCode and description on a single line (Aristeu Rozanski) [1965331]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-347.el8]" date="1633176000">- PCI: Mark TI C667X to avoid bus reset (Alex Williamson) [1975768]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.el8]" date="1633348800">- drm/nouveau/fifo/ga102: initialise chid on return from channel creation (Ben Skeggs) [1997878]
- drm/nouveau/ga102-: support ttm buffer moves via copy engine (Ben Skeggs) [1997878]
- drm/nouveau/kms/tu102-: delay enabling cursor until after assign_windows (Ben Skeggs) [1997878]
- drm/nouveau/kms/nv50: workaround EFI GOP window channel format differences (Ben Skeggs) [1997878]
- drm/nouveau/disp: power down unused DP links during init (Ben Skeggs) [1997878]
- drm/nouveau: recognise GA107 (Ben Skeggs) [1997878]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.1.1.el8_5]" date="1635940800">- lib/timerqueue: Rely on rbtree semantics for next timer (Phil Auld) [2014677 2007099] {CVE-2021-20317}
- mm/hmm: make HMM_MIRROR an implicit option (Rafael Aquini) [2017519 1998534]
- mm/hmm: allow HMM_MIRROR on all architectures with MMU (Rafael Aquini) [2017519 1998534]
- mm: don't select MIGRATE_VMA_HELPER from HMM_MIRROR (Rafael Aquini) [2017519 1998534]
- mm: sort out the DEVICE_PRIVATE Kconfig mess (Rafael Aquini) [2017519 1998534]
- ceph: skip existing superblocks that are blocklisted or shut down when mounting (Jeffrey Layton) [2017071 2011462]
- redhat: switch release to zstream (Bruno Meneguele)</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.2.1.el8_5]" date="1636372800">- tipc: fix size validations for the MSG_CRYPTO type (Bruno Meneguele) [2020506 2020507] {CVE-2021-43267}
- net: Fix skb-&gt;csum update in inet_proto_csum_replace16(). (Balazs Nemeth) [2005981 1975193]</changelog>
</package>
<package pkgid="4391afb4f47aeedb173b43e31c64fa7c48504909872ef52c3f8d2028717543d3" name="bpftool-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="348.20.1.el8_5"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.11.1.el8_5]" date="1641297600">- blk-mq: avoid to iterate over stale request (Ming Lei) [2034396 1997338]
- rcu: Tighten rcu_advance_cbs_nowake() checks (Daniel Vacek) [2032579 2013408]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.12.1.el8_5]" date="1641988800">- tcp: don't free a FIN sk_buff in tcp_remove_empty_skb() (Guillaume Nault) [2021574 2016210]
- kernel.spec: Add support to use vmlinux.h (Jiri Olsa) [2031053 1989087]
- spec: Add vmlinux.h to kernel-devel package (Jiri Olsa) [2031053 1989087]
- x86/mce: Avoid infinite loop for copy from user recovery (Prarit Bhargava) [2008789 1999550]
- x86/mce: Rename kill_it to kill_current_task (Prarit Bhargava) [2008789 1999550]
- x86/mce: Recover from poison found while copying from user space (Prarit Bhargava) [2008789 1999550]
- x86/mce: Delay clearing IA32_MCG_STATUS to the end of do_machine_check() (Prarit Bhargava) [2008789 1999550]
- x86/mce: Send #MC singal from task work (Prarit Bhargava) [2008789 1999550]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-348.13.1.el8_5]" date="1642507200">- vfs: Out-of-bounds write of heap buffer in fs_context.c (Frantisek Hrbata) [2040585 2040586] {CVE-2022-0185}
- xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Bruno Meneguele) [2034864 2034865] {CVE-2021-4155}
- af_unix: fix garbage collect vs MSG_PEEK (Patrick Talbert) [2031974 2031975] {CVE-2021-0920}
- cgroup: verify that source is a string (Waiman Long) [2034608 2034609] {CVE-2021-4154}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-348.14.1.el8_5]" date="1643198400">- tcp: fix page frag corruption on page fault (Paolo Abeni) [2041529 1996074]
- net: fix sk_page_frag() recursion from memory reclaim (Paolo Abeni) [2041529 1996074]
- KVM: s390: index kvm-&gt;arch.idle_mask by vcpu_idx (Thomas Huth) [2040769 2026230]
- redhat: set LC_ALL=C before sorting config content (Frantisek Hrbata)</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.15.1.el8_5]" date="1643716800">- net/mlx5: DR, Use FW API when updating FW-owned flow table (Michal Schmidt) [2042663 2042651]
- KVM: x86: Wait for IPIs to be delivered when handling Hyper-V TLB flush hypercall (Vitaly Kuznetsov) [2043237 1868572]
- drm/mgag200: Select clock in PLL update functions (Bruno Meneguele) [2034949 1953926]
- drm/i915: Fix HAS_LSPCON macro for platforms between GEN9 and GEN10 (Bruno Meneguele) [2027335 2005586]
- crypto: qat - power up 4xxx device (Vladis Dronov) [2016437 1960307]
- RDMA/core: Fix a double free in add_port error flow (Kamal Heib) [2038724 2008555]
- powerpc/iommu: Report the correct most efficient DMA mask for PCI devices (Steve Best) [2018928 2007425]
- powerpc/dma: Fix dma_map_ops::get_required_mask (Steve Best) [2018928 2007425]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.16.1.el8_5]" date="1644321600">- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047601 2047602] {CVE-2022-22942}
- net: openvswitch: Fix ct_state nat flags for conns arriving from tc (Marcelo Ricardo Leitner) [2043548 2040334]
- net: openvswitch: Fix matching zone id for invalid conns arriving from tc (Marcelo Ricardo Leitner) [2043550 2040452]
- net/sched: flow_dissector: Fix matching on zone id for invalid conns (Marcelo Ricardo Leitner) [2043550 2040452]
- net/sched: Extend qdisc control block with tc control block (Marcelo Ricardo Leitner) [2043550 2040452]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.17.1.el8_5]" date="1644926400">- vfs: check dentry is still valid in get_link() (Ian Kent) [2052558 2014846]
- xfs: don't expose internal symlink metadata buffers to the vfs (Brian Foster) [2052558 2014846]
- CI: Use appropriate zstream builder (Veronika Kabatova)
- CI: Enable baseline realtime checks (Veronika Kabatova)
- CI: Rename pipelines to include release names (Veronika Kabatova)
- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052166 2052167] {CVE-2022-0492}
- ice: Remove boolean vlan_promisc flag from function (Jonathan Toppins) [2051951 2030400]
- ceph: put the requests/sessions when it fails to alloc memory (Jeffrey Layton) [2053725 2017796]
- ceph: fix off by one bugs in unsafe_request_wait() (Jeffrey Layton) [2053725 2017796]
- ceph: flush the mdlog before waiting on unsafe reqs (Jeffrey Layton) [2053725 2017796]
- ceph: flush mdlog before umounting (Jeffrey Layton) [2053725 2017796]
- ceph: make iterate_sessions a global symbol (Jeffrey Layton) [2053725 2017796]
- ceph: make ceph_create_session_msg a global symbol (Jeffrey Layton) [2053725 2017796]
- xfs: check sb_meta_uuid for dabuf buffer recovery (Bill O'Donnell) [2049292 2020764]
- drm/i915: Flush TLBs before releasing backing store (Patrick Talbert) [2044328 2044329] {CVE-2022-0330}
- hugetlb: fix hugetlb cgroup refcounting during vma split (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: fix imbalanced css_get and css_put pair for shared mappings (Waiman Long) [2039015 2032811]
- mm/hugetlb: change hugetlb_reserve_pages() to type bool (Waiman Long) [2039015 2032811]
- hugetlb: fix an error code in hugetlb_reserve_pages() (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: fix offline of hugetlb cgroup with reservations (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: fix reservation accounting (Waiman Long) [2039015 2032811]
- mm/hugetlb: narrow the hugetlb_lock protection area during preparing huge page (Waiman Long) [2039015 2032811]
- mm/hugetlb: a page from buddy is not on any list (Waiman Long) [2039015 2032811]
- mm/hugetlb: not necessary to coalesce regions recursively (Waiman Long) [2039015 2032811]
- selftests/vm/write_to_hugetlbfs.c: fix unused variable warning (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add hugetlb_cgroup reservation tests (Waiman Long) [2039015 2032811]
- hugetlb: support file_region coalescing again (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: support noreserve mappings (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add accounting for shared mappings (Waiman Long) [2039015 2032811]
- hugetlb: disable region_add file_region coalescing (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add reservation accounting for private mappings (Waiman Long) [2039015 2032811]
- mm/hugetlb_cgroup: fix hugetlb_cgroup migration (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add interface for charge/uncharge hugetlb reservations (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add hugetlb_cgroup reservation counter (Waiman Long) [2039015 2032811]
- hugetlb: remove duplicated code (Waiman Long) [2039015 2032811]
- hugetlb: region_chg provides only cache entry (Waiman Long) [2039015 2032811]
- hugetlbfs: always use address space in inode for resv_map pointer (Waiman Long) [2039015 2032811]
- hugetlbfs: fix potential over/underflow setting node specific nr_hugepages (Waiman Long) [2039015 2032811]
- hugetlb: allow to free gigantic pages regardless of the configuration (Waiman Long) [2039015 2032811]
- powerpc/pseries: Fix update of LPAR security flavor after LPM (Steve Best) [2027448 1997294]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.18.1.el8_5]" date="1645531200">- selftests: kvm: Check whether SIDA memop fails for normal guests (Thomas Huth) [2050806 2050807] {CVE-2022-0516}
- KVM: s390: Return error on SIDA memop on normal guest (Thomas Huth) [2050806 2050807] {CVE-2022-0516}
- iommu/amd: Remove iommu_init_ga() (Jerry Snitselaar) [2030854 1998265]
- iommu/amd: Relocate GAMSup check to early_enable_iommus (Jerry Snitselaar) [2030854 1998265]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.19.1.el8_5]" date="1646049600">- tipc: improve size validations for received domain records (Xin Long) [2048970 2048971] {CVE-2022-0435}
- smb3: do not error on fsync when readonly (Ronnie Sahlberg) [2055824 2037811]
- security: implement sctp_assoc_established hook in selinux (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- security: add sctp_assoc_established hook (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- security: call security_sctp_assoc_request in sctp_sf_do_5_1D_ce (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- security: pass asoc to sctp_assoc_request and sctp_sk_clone (Bruno Meneguele) [2054112 2054117 2015525 2048251]
- net: sctp: Fix some typos (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- RDMA/bnxt_re: Fix stats counters (Selvin Xavier) [2049684 2001893]
- net: check skb sec_path when re-initializing slow_gro in gro_list_prepare (Xin Long) [2047427 2030476]
- cpufreq: intel_pstate: Add Icelake servers support in no-HWP mode (David Arcari) [2036888 2003695]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.20.1.el8_5]" date="1646740800">- lib/iov_iter: initialize "flags" in new pipe_buffer (Jan Stancek) [2060874 2060875] {CVE-2022-0847}</changelog>
</package>
<package pkgid="1b06e7e0bc35b23e12b376bd81f134e615b3217fc4a87944a5fc15e4838cbc90" name="bpftool-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="348.23.1.el8_5"/>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-348.14.1.el8_5]" date="1643198400">- tcp: fix page frag corruption on page fault (Paolo Abeni) [2041529 1996074]
- net: fix sk_page_frag() recursion from memory reclaim (Paolo Abeni) [2041529 1996074]
- KVM: s390: index kvm-&gt;arch.idle_mask by vcpu_idx (Thomas Huth) [2040769 2026230]
- redhat: set LC_ALL=C before sorting config content (Frantisek Hrbata)</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.15.1.el8_5]" date="1643716800">- net/mlx5: DR, Use FW API when updating FW-owned flow table (Michal Schmidt) [2042663 2042651]
- KVM: x86: Wait for IPIs to be delivered when handling Hyper-V TLB flush hypercall (Vitaly Kuznetsov) [2043237 1868572]
- drm/mgag200: Select clock in PLL update functions (Bruno Meneguele) [2034949 1953926]
- drm/i915: Fix HAS_LSPCON macro for platforms between GEN9 and GEN10 (Bruno Meneguele) [2027335 2005586]
- crypto: qat - power up 4xxx device (Vladis Dronov) [2016437 1960307]
- RDMA/core: Fix a double free in add_port error flow (Kamal Heib) [2038724 2008555]
- powerpc/iommu: Report the correct most efficient DMA mask for PCI devices (Steve Best) [2018928 2007425]
- powerpc/dma: Fix dma_map_ops::get_required_mask (Steve Best) [2018928 2007425]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.16.1.el8_5]" date="1644321600">- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047601 2047602] {CVE-2022-22942}
- net: openvswitch: Fix ct_state nat flags for conns arriving from tc (Marcelo Ricardo Leitner) [2043548 2040334]
- net: openvswitch: Fix matching zone id for invalid conns arriving from tc (Marcelo Ricardo Leitner) [2043550 2040452]
- net/sched: flow_dissector: Fix matching on zone id for invalid conns (Marcelo Ricardo Leitner) [2043550 2040452]
- net/sched: Extend qdisc control block with tc control block (Marcelo Ricardo Leitner) [2043550 2040452]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.17.1.el8_5]" date="1644926400">- vfs: check dentry is still valid in get_link() (Ian Kent) [2052558 2014846]
- xfs: don't expose internal symlink metadata buffers to the vfs (Brian Foster) [2052558 2014846]
- CI: Use appropriate zstream builder (Veronika Kabatova)
- CI: Enable baseline realtime checks (Veronika Kabatova)
- CI: Rename pipelines to include release names (Veronika Kabatova)
- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052166 2052167] {CVE-2022-0492}
- ice: Remove boolean vlan_promisc flag from function (Jonathan Toppins) [2051951 2030400]
- ceph: put the requests/sessions when it fails to alloc memory (Jeffrey Layton) [2053725 2017796]
- ceph: fix off by one bugs in unsafe_request_wait() (Jeffrey Layton) [2053725 2017796]
- ceph: flush the mdlog before waiting on unsafe reqs (Jeffrey Layton) [2053725 2017796]
- ceph: flush mdlog before umounting (Jeffrey Layton) [2053725 2017796]
- ceph: make iterate_sessions a global symbol (Jeffrey Layton) [2053725 2017796]
- ceph: make ceph_create_session_msg a global symbol (Jeffrey Layton) [2053725 2017796]
- xfs: check sb_meta_uuid for dabuf buffer recovery (Bill O'Donnell) [2049292 2020764]
- drm/i915: Flush TLBs before releasing backing store (Patrick Talbert) [2044328 2044329] {CVE-2022-0330}
- hugetlb: fix hugetlb cgroup refcounting during vma split (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: fix imbalanced css_get and css_put pair for shared mappings (Waiman Long) [2039015 2032811]
- mm/hugetlb: change hugetlb_reserve_pages() to type bool (Waiman Long) [2039015 2032811]
- hugetlb: fix an error code in hugetlb_reserve_pages() (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: fix offline of hugetlb cgroup with reservations (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: fix reservation accounting (Waiman Long) [2039015 2032811]
- mm/hugetlb: narrow the hugetlb_lock protection area during preparing huge page (Waiman Long) [2039015 2032811]
- mm/hugetlb: a page from buddy is not on any list (Waiman Long) [2039015 2032811]
- mm/hugetlb: not necessary to coalesce regions recursively (Waiman Long) [2039015 2032811]
- selftests/vm/write_to_hugetlbfs.c: fix unused variable warning (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add hugetlb_cgroup reservation tests (Waiman Long) [2039015 2032811]
- hugetlb: support file_region coalescing again (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: support noreserve mappings (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add accounting for shared mappings (Waiman Long) [2039015 2032811]
- hugetlb: disable region_add file_region coalescing (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add reservation accounting for private mappings (Waiman Long) [2039015 2032811]
- mm/hugetlb_cgroup: fix hugetlb_cgroup migration (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add interface for charge/uncharge hugetlb reservations (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add hugetlb_cgroup reservation counter (Waiman Long) [2039015 2032811]
- hugetlb: remove duplicated code (Waiman Long) [2039015 2032811]
- hugetlb: region_chg provides only cache entry (Waiman Long) [2039015 2032811]
- hugetlbfs: always use address space in inode for resv_map pointer (Waiman Long) [2039015 2032811]
- hugetlbfs: fix potential over/underflow setting node specific nr_hugepages (Waiman Long) [2039015 2032811]
- hugetlb: allow to free gigantic pages regardless of the configuration (Waiman Long) [2039015 2032811]
- powerpc/pseries: Fix update of LPAR security flavor after LPM (Steve Best) [2027448 1997294]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.18.1.el8_5]" date="1645531200">- selftests: kvm: Check whether SIDA memop fails for normal guests (Thomas Huth) [2050806 2050807] {CVE-2022-0516}
- KVM: s390: Return error on SIDA memop on normal guest (Thomas Huth) [2050806 2050807] {CVE-2022-0516}
- iommu/amd: Remove iommu_init_ga() (Jerry Snitselaar) [2030854 1998265]
- iommu/amd: Relocate GAMSup check to early_enable_iommus (Jerry Snitselaar) [2030854 1998265]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.19.1.el8_5]" date="1646049600">- tipc: improve size validations for received domain records (Xin Long) [2048970 2048971] {CVE-2022-0435}
- smb3: do not error on fsync when readonly (Ronnie Sahlberg) [2055824 2037811]
- security: implement sctp_assoc_established hook in selinux (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- security: add sctp_assoc_established hook (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- security: call security_sctp_assoc_request in sctp_sf_do_5_1D_ce (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- security: pass asoc to sctp_assoc_request and sctp_sk_clone (Bruno Meneguele) [2054112 2054117 2015525 2048251]
- net: sctp: Fix some typos (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- RDMA/bnxt_re: Fix stats counters (Selvin Xavier) [2049684 2001893]
- net: check skb sec_path when re-initializing slow_gro in gro_list_prepare (Xin Long) [2047427 2030476]
- cpufreq: intel_pstate: Add Icelake servers support in no-HWP mode (David Arcari) [2036888 2003695]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.20.1.el8_5]" date="1646740800">- lib/iov_iter: initialize "flags" in new pipe_buffer (Jan Stancek) [2060874 2060875] {CVE-2022-0847}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.21.1.el8_5]" date="1647950400">- netfilter: nf_queue: handle socket prefetch (Florian Westphal) [2061446 2009786]
- netfilter: nf_queue: fix possible use-after-free (Florian Westphal) [2061446 2009786]
- selftests: netfilter: add nfqueue TCP_NEW_SYN_RECV socket race test (Florian Westphal) [2061446 2009786]
- netfilter: nf_queue: don't assume sk is full socket (Florian Westphal) [2061446 2009786]
- netfilter: nf_tables_offload: incorrect flow offload action array size (Florian Westphal) [2056867 2056728] {CVE-2022-25636}
- netfilter: nftables_offload: KASAN slab-out-of-bounds Read in nft_flow_rule_create (Florian Westphal) [2056867 2056728] {CVE-2022-25636}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.22.1.el8_5]" date="1649160000">- scsi: lpfc: Fix non-recovery of remote ports following an unsolicited LOGO (Dick Kennedy) [2058193 2027558]
- cifs: check all path components in resolved dfs target (Ronnie Sahlberg) [2056329 2030880]
- RDMA/cma: Do not change route.addr.src_addr.ss_family (Kamal Heib) [2032073 2032074] {CVE-2021-4028}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.23.1.el8_5]" date="1649764800">- gfs2: dequeue iopen holder in gfs2_inode_lookup error (Bob Peterson) [2069750 2061665]</changelog>
</package>
<package pkgid="470c58d9a32493bd03c440790f583e121d754ad0683a59cc8bf0dee77e506495" name="bpftool-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="348.7.1.el8_5"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-346.el8]" date="1633089600">- redhat: switch secureboot kernel image signing to release keys (Bruno Meneguele)
- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Fix RT check branch name (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- Revert "Merge: mt7921e: enable new Mediatek wireless hardware" (Bruno Meneguele) [2009501]
- megaraid_sas: fix concurrent access to ISR between IRQ polling and real interrupt (Tomas Henzl) [2009022]
- scsi: megaraid_sas: mq_poll support (Tomas Henzl) [2009022]
- [PATCH v2] scsi: qla2xxx: Suppress unnecessary log messages during login (Nilesh Javali) [1982186]
- scsi: qla2xxx: Fix excessive messages during device logout (Nilesh Javali) [1982186]
- PCI: pciehp: Ignore Link Down/Up caused by DPC (Myron Stowe) [1981741]
- arm64: kpti: Fix "kpti=off" when KASLR is enabled (Mark Salter) [1979731]
- arm64: Fix CONFIG_ARCH_RANDOM=n build (Mark Salter) [1979731]
- redhat/configs: aarch64: add CONFIG_ARCH_RANDOM (Mark Salter) [1979731]
- arm64: Implement archrandom.h for ARMv8.5-RNG (Mark Salter) [1979731]
- arm64: kconfig: Fix alignment of E0PD help text (Mark Salter) [1979731]
- arm64: Use register field helper in kaslr_requires_kpti() (Mark Salter) [1979731]
- arm64: Simplify early check for broken TX1 when KASLR is enabled (Mark Salter) [1979731]
- arm64: Use a variable to store non-global mappings decision (Mark Salter) [1979731]
- arm64: Don't use KPTI where we have E0PD (Mark Salter) [1979731]
- arm64: Factor out checks for KASLR in KPTI code into separate function (Mark Salter) [1979731]
- redhat/configs: Add CONFIG_ARM64_E0PD (Mark Salter) [1979731]
- arm64: Add initial support for E0PD (Mark Salter) [1979731]
- arm64: cpufeature: Export matrix and other features to userspace (Mark Salter) [1980098]
- arm64: docs: cpu-feature-registers: Document ID_AA64PFR1_EL1 (Mark Salter) [1980098]
- docs/arm64: cpu-feature-registers: Rewrite bitfields that don't follow [e, s] (Mark Salter) [1980098]
- docs/arm64: cpu-feature-registers: Documents missing visible fields (Mark Salter) [1980098]
- arm64: Introduce system_capabilities_finalized() marker (Mark Salter) [1980098]
- arm64: entry.S: Do not preempt from IRQ before all cpufeatures are enabled (Mark Salter) [1980098]
- docs/arm64: elf_hwcaps: Document HWCAP_SB (Mark Salter) [1980098]
- docs/arm64: elf_hwcaps: sort the HWCAP{, 2} documentation by ascending value (Mark Salter) [1980098]
- arm64: cpufeature: Treat ID_AA64ZFR0_EL1 as RAZ when SVE is not enabled (Mark Salter) [1980098]
- arm64: cpufeature: Effectively expose FRINT capability to userspace (Mark Salter) [1980098]
- arm64: cpufeature: Fix feature comparison for CTR_EL0.{CWG,ERG} (Mark Salter) [1980098]
- arm64: Expose FRINT capabilities to userspace (Mark Salter) [1980098]
- arm64: Expose ARMv8.5 CondM capability to userspace (Mark Salter) [1980098]
- docs: arm64: convert perf.txt to ReST format (Mark Salter) [1980098]
- docs: arm64: convert docs to ReST and rename to .rst (Mark Salter) [1980098]
- Documentation/arm64: HugeTLB page implementation (Mark Salter) [1980098]
- Documentation/arm64/sve: Couple of improvements and typos (Mark Salter) [1980098]
- arm64: cpufeature: Fix missing ZFR0 in __read_sysreg_by_encoding() (Mark Salter) [1980098]
- arm64: Expose SVE2 features for userspace (Mark Salter) [1980098]
- arm64: Advertise ARM64_HAS_DCPODP cpu feature (Mark Salter) [1980098]
- arm64: add CVADP support to the cache maintenance helper (Mark Salter) [1980098]
- arm64: Fix minor issues with the dcache_by_line_op macro (Mark Salter) [1980098]
- arm64: Expose DC CVADP to userspace (Mark Salter) [1980098]
- arm64: Handle trapped DC CVADP (Mark Salter) [1980098]
- arm64: HWCAP: encapsulate elf_hwcap (Mark Salter) [1980098]
- arm64: HWCAP: add support for AT_HWCAP2 (Mark Salter) [1980098]
- x86/MCE/AMD, EDAC/mce_amd: Add new SMCA bank types (Aristeu Rozanski) [1965331]
- x86/MCE/AMD, EDAC/mce_amd: Remove struct smca_hwid.xec_bitmap (Aristeu Rozanski) [1965331]
- EDAC, mce_amd: Print ExtErrorCode and description on a single line (Aristeu Rozanski) [1965331]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-347.el8]" date="1633176000">- PCI: Mark TI C667X to avoid bus reset (Alex Williamson) [1975768]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.el8]" date="1633348800">- drm/nouveau/fifo/ga102: initialise chid on return from channel creation (Ben Skeggs) [1997878]
- drm/nouveau/ga102-: support ttm buffer moves via copy engine (Ben Skeggs) [1997878]
- drm/nouveau/kms/tu102-: delay enabling cursor until after assign_windows (Ben Skeggs) [1997878]
- drm/nouveau/kms/nv50: workaround EFI GOP window channel format differences (Ben Skeggs) [1997878]
- drm/nouveau/disp: power down unused DP links during init (Ben Skeggs) [1997878]
- drm/nouveau: recognise GA107 (Ben Skeggs) [1997878]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.1.1.el8_5]" date="1635940800">- lib/timerqueue: Rely on rbtree semantics for next timer (Phil Auld) [2014677 2007099] {CVE-2021-20317}
- mm/hmm: make HMM_MIRROR an implicit option (Rafael Aquini) [2017519 1998534]
- mm/hmm: allow HMM_MIRROR on all architectures with MMU (Rafael Aquini) [2017519 1998534]
- mm: don't select MIGRATE_VMA_HELPER from HMM_MIRROR (Rafael Aquini) [2017519 1998534]
- mm: sort out the DEVICE_PRIVATE Kconfig mess (Rafael Aquini) [2017519 1998534]
- ceph: skip existing superblocks that are blocklisted or shut down when mounting (Jeffrey Layton) [2017071 2011462]
- redhat: switch release to zstream (Bruno Meneguele)</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.2.1.el8_5]" date="1636372800">- tipc: fix size validations for the MSG_CRYPTO type (Bruno Meneguele) [2020506 2020507] {CVE-2021-43267}
- net: Fix skb-&gt;csum update in inet_proto_csum_replace16(). (Balazs Nemeth) [2005981 1975193]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.3.1.el8_5]" date="1637064000">- net-sysfs: try not to restart the syscall if it will fail eventually (Antoine Tenart) [2021165 2016005]
- ovl: fix missing negative dentry check in ovl_rename() (Miklos Szeredi) [2016378 2010887 2013318] {CVE-2021-20321}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.4.1.el8_5]" date="1637668800">- [RHEL8.6 BZ 1849234] cifs: report error instead of invalid when revalidating a dentry fails (Ronnie Sahlberg) [2017177 1849234]
- kthread: Fix PF_KTHREAD vs to_kthread() race (Waiman Long) [2010333 2001497]
- sched/fair: Ignore percpu threads for imbalance pulls (Waiman Long) [2010333 2001497]
- kthread: Extract KTHREAD_IS_PER_CPU (Waiman Long) [2010333 2001497]
- sched: Optimize finish_lock_switch() (Waiman Long) [2010333 2001497]
- sched/hotplug: Ensure only per-cpu kthreads run during hotplug (Waiman Long) [2010333 2001497]
- sched: Fix balance_callback() (Waiman Long) [2010333 2001497]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.5.1.el8_5]" date="1638273600">- blk-mq: still set q-&gt;make_request_fn for blk-mq (Ming Lei) [2016384 1999728]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.6.1.el8_5]" date="1638878400">- x86/Kconfig: Do not enable AMD_MEM_ENCRYPT_ACTIVE_BY_DEFAULT automatically (Prarit Bhargava) [2024678 2021219]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.7.1.el8_5]" date="1638964800">- sched: Fix CPU hotplug / tighten is_per_cpu_kthread() (Waiman Long) [2026450 2024869]
- sched: Prepare to use balance_push in ttwu() (Waiman Long) [2026450 2024869]
- sched: Don't run cpu-online with balance_push() enabled (Waiman Long) [2026450 2024869]
- workqueue: Tag bound workers with KTHREAD_IS_PER_CPU (Waiman Long) [2026450 2024869]
- workqueue: Use cpu_possible_mask instead of cpu_active_mask to break affinity (Waiman Long) [2026450 2024869]
- sched: Fix hotplug vs CPU bandwidth control (Waiman Long) [2026450 2024869]
- workqueue: Manually break affinity on hotplug (Waiman Long) [2026450 2024869]
- sched/hotplug: Consolidate task migration on CPU unplug (Waiman Long) [2026450 2024869]
- sched/core: Wait for tasks being pushed away on hotplug (Waiman Long) [2026450 2024869]</changelog>
</package>
<package pkgid="87d70eae47886ab5210c9d3c5141c8d4fe3cb3fa8603f04befa8ad4dd919e18d" name="bsdtar-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.3.3" rel="3.el8_5"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 3.3.2-3" date="1531915200">- drop use of %ldconfig_scriptlets</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 3.3.2-4" date="1550836800">- fix out-of-bounds read within lha_read_data_none() (CVE-2017-14503)
- fix crash on crafted 7zip archives (CVE-2019-1000019)
- fix infinite loop in ISO9660 (CVE-2019-1000020)</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 3.3.2-5" date="1554206400">- release bump due to gating (#1680768)</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 3.3.2-6" date="1556625600">- fixed use after free in RAR decoder (#1700752)
- fixed double free in RAR decoder (#1700753)</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 3.3.2-7" date="1558958400">- fix use-after-free in delayed newc link processing (#1602575)
- fix a few obvious resource leaks and strcpy() misuses (#1602575)</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 3.3.2-8" date="1579089600">- Fix CVE-2019-18408: RAR use-after-free</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 3.3.2-9" date="1585051200">- Fix out-of-bounds read (CVE-2019-19221) (#1803967)</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 3.3.3-1" date="1588248000">- Rebase to version 3.3.3</changelog>
  <changelog author="Matej Mu&#x17E;ila &lt;mmuzila@redhat.com&gt; - 3.3.3-2" date="1640001600">- Fix handling of symbolic link ACLs (CVE-2021-23177)</changelog>
  <changelog author="Matej Mu&#x17E;ila &lt;mmuzila@redhat.com&gt; - 3.3.3-3" date="1640088000">- Do not follow symlinks when processing the fixup list (CVE-2021-31566)</changelog>
</package>
<package pkgid="41b7689d87c138cd2be82e658beef5ee91e0d2522326a9228252a7e6c53a8add" name="cockpit-debuginfo" arch="x86_64">
  <version epoch="0" ver="251.3" rel="1.el8_5"/>
  <changelog author="Matej Marusak &lt;mmarusak@redhat.com&gt; - 242-1" date="1618833600">- Network: Fix device connection button (rhbz#1946874)
- Network: Fully show MAC dropdown in add bond dialog (rhbz#1946877)</changelog>
  <changelog author="Katerina Koukiou &lt;kkoukiou@redhat.com&gt; - 244.1-1" date="1620820800">- Shell: sudo is invoked only when explicitly requested
- Dynamically manage motd/issue symlinks in package scripts (rhbz#1876848)</changelog>
  <changelog author="Martin Pitt &lt;mpitt@redhat.com&gt; - 246-1" date="1623758400">- Metrics: New PCP configuration dialog
- Polish of the Services page
- Updated translations</changelog>
  <changelog author="Katerina Koukiou &lt;kkoukiou@redhat.com&gt; - 247-1" date="1624449600">- Metrics: Enable Grafana client setup</changelog>
  <changelog author="Martin Pitt &lt;mpitt@redhat.com&gt; - 248-1" date="1625745600">- Metrics: Install missing packages
- PAM: Deprecate pam_cockpit_cert module</changelog>
  <changelog author="Matej Marusak &lt;mmarusak@redhat.com&gt; - 249-1" date="1626868800">- common: Add Content-Type for wasm
- all: Port away from Moment.js</changelog>
  <changelog author="Martin Pitt &lt;mpitt@redhat.com&gt; - 250-1" date="1628078400">- Shell: Improve admin switcher and session menu
- Update Insights links to point to console.redhat.com (rhbz#1984841)</changelog>
  <changelog author="Matej Marusak &lt;mmarusak@redhat.com&gt; - 251-1" date="1629288000">- Logs: Fix layout and add new filtering options (rhbz#1980207)</changelog>
  <changelog author="Martin Pitt &lt;mpitt@redhat.com&gt; - 251.1-1" date="1631188800">- Translation updates (rhbz#1961628)</changelog>
  <changelog author="Martin Pitt &lt;mpitt@redhat.com&gt; - 253.1-1" date="1639569600">- Fix "Administrative Access" prompt for "Duo" MFA (rhbz#2032849)</changelog>
</package>
<package pkgid="3c7d6f029fb1ebbe5d94db8dd434d28e51d97f3500738db5a7a18301a1d30642" name="cockpit-debugsource" arch="x86_64">
  <version epoch="0" ver="251.3" rel="1.el8_5"/>
  <changelog author="Matej Marusak &lt;mmarusak@redhat.com&gt; - 242-1" date="1618833600">- Network: Fix device connection button (rhbz#1946874)
- Network: Fully show MAC dropdown in add bond dialog (rhbz#1946877)</changelog>
  <changelog author="Katerina Koukiou &lt;kkoukiou@redhat.com&gt; - 244.1-1" date="1620820800">- Shell: sudo is invoked only when explicitly requested
- Dynamically manage motd/issue symlinks in package scripts (rhbz#1876848)</changelog>
  <changelog author="Martin Pitt &lt;mpitt@redhat.com&gt; - 246-1" date="1623758400">- Metrics: New PCP configuration dialog
- Polish of the Services page
- Updated translations</changelog>
  <changelog author="Katerina Koukiou &lt;kkoukiou@redhat.com&gt; - 247-1" date="1624449600">- Metrics: Enable Grafana client setup</changelog>
  <changelog author="Martin Pitt &lt;mpitt@redhat.com&gt; - 248-1" date="1625745600">- Metrics: Install missing packages
- PAM: Deprecate pam_cockpit_cert module</changelog>
  <changelog author="Matej Marusak &lt;mmarusak@redhat.com&gt; - 249-1" date="1626868800">- common: Add Content-Type for wasm
- all: Port away from Moment.js</changelog>
  <changelog author="Martin Pitt &lt;mpitt@redhat.com&gt; - 250-1" date="1628078400">- Shell: Improve admin switcher and session menu
- Update Insights links to point to console.redhat.com (rhbz#1984841)</changelog>
  <changelog author="Matej Marusak &lt;mmarusak@redhat.com&gt; - 251-1" date="1629288000">- Logs: Fix layout and add new filtering options (rhbz#1980207)</changelog>
  <changelog author="Martin Pitt &lt;mpitt@redhat.com&gt; - 251.1-1" date="1631188800">- Translation updates (rhbz#1961628)</changelog>
  <changelog author="Martin Pitt &lt;mpitt@redhat.com&gt; - 253.1-1" date="1639569600">- Fix "Administrative Access" prompt for "Duo" MFA (rhbz#2032849)</changelog>
</package>
<package pkgid="747455e89e4cae538d9e986e5be904a7bd1e74df843f84916b77369a7b191069" name="cryptsetup-debuginfo" arch="i686">
  <version epoch="0" ver="2.3.3" rel="4.el8_5.1"/>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 2.2.0-0.2" date="1560513600">- Updates to reencryption feature.
- Resolves: #1676622</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 2.2.0-1" date="1565870400">- Update to cryptsetup 2.2.0 (final)
- Resolves: #1738263 #1740342 #1733391 #1729600 #1733390</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 2.2.0-2" date="1567166400">- patch: Fix mapped segments overflow on 32bit architectures.
- patch: Take optimal io size in account with LUKS2 reencryption.
- Resolves: #1742815 #1746532</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 2.2.2-1" date="1574078400">- Update to cryptsetup 2.2.2
- LUKS2 reencryption honors activation flags (one time and persistent).
- LUKS2 reencryption works also without volume keys put in kernel
  keyring service.
- Resolves: #1757783 #1750680 #1753597 #1743399</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 2.3.1-1" date="1585915200">- Update to cryptsetup 2.3.1
- Resolves: #1796826 #1743891 #1785748</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 2.3.3-1" date="1590667200">- Update to cryptsetup 2.3.3
- Resolves: #1796826 #1743891 #1785748</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 2.3.3-2" date="1598529600">- patch: Fix possible memory corruption in LUKS2 validation
	 code in 32bit library.
- Resolves: #1872294</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 2.3.3-3" date="1612353600">- patch: Fix crypto backend to properly handle ECB mode.
- Resolves: #1859091</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 2.3.3-4" date="1613563200">- patch: Fix reencryption for custom devices with data segments
  set to use cipher_null.
- Resolves: #1927409</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 2.3.3-4.1" date="1642161600">- patch: fix CVE-2021-4122.
- Resolves: #2036906</changelog>
</package>
<package pkgid="971ee31f9a40329a229832fa4651144ccdbdad84bc379c1cccd08ed41e5918f6" name="cryptsetup-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.3.3" rel="4.el8_5.1"/>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 2.2.0-0.2" date="1560513600">- Updates to reencryption feature.
- Resolves: #1676622</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 2.2.0-1" date="1565870400">- Update to cryptsetup 2.2.0 (final)
- Resolves: #1738263 #1740342 #1733391 #1729600 #1733390</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 2.2.0-2" date="1567166400">- patch: Fix mapped segments overflow on 32bit architectures.
- patch: Take optimal io size in account with LUKS2 reencryption.
- Resolves: #1742815 #1746532</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 2.2.2-1" date="1574078400">- Update to cryptsetup 2.2.2
- LUKS2 reencryption honors activation flags (one time and persistent).
- LUKS2 reencryption works also without volume keys put in kernel
  keyring service.
- Resolves: #1757783 #1750680 #1753597 #1743399</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 2.3.1-1" date="1585915200">- Update to cryptsetup 2.3.1
- Resolves: #1796826 #1743891 #1785748</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 2.3.3-1" date="1590667200">- Update to cryptsetup 2.3.3
- Resolves: #1796826 #1743891 #1785748</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 2.3.3-2" date="1598529600">- patch: Fix possible memory corruption in LUKS2 validation
	 code in 32bit library.
- Resolves: #1872294</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 2.3.3-3" date="1612353600">- patch: Fix crypto backend to properly handle ECB mode.
- Resolves: #1859091</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 2.3.3-4" date="1613563200">- patch: Fix reencryption for custom devices with data segments
  set to use cipher_null.
- Resolves: #1927409</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 2.3.3-4.1" date="1642161600">- patch: fix CVE-2021-4122.
- Resolves: #2036906</changelog>
</package>
<package pkgid="32700c638505e79763d4a2e42715ad02d0a108aa3dc0759c21f0ea3e320b4ebe" name="cryptsetup-debugsource" arch="i686">
  <version epoch="0" ver="2.3.3" rel="4.el8_5.1"/>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 2.2.0-0.2" date="1560513600">- Updates to reencryption feature.
- Resolves: #1676622</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 2.2.0-1" date="1565870400">- Update to cryptsetup 2.2.0 (final)
- Resolves: #1738263 #1740342 #1733391 #1729600 #1733390</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 2.2.0-2" date="1567166400">- patch: Fix mapped segments overflow on 32bit architectures.
- patch: Take optimal io size in account with LUKS2 reencryption.
- Resolves: #1742815 #1746532</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 2.2.2-1" date="1574078400">- Update to cryptsetup 2.2.2
- LUKS2 reencryption honors activation flags (one time and persistent).
- LUKS2 reencryption works also without volume keys put in kernel
  keyring service.
- Resolves: #1757783 #1750680 #1753597 #1743399</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 2.3.1-1" date="1585915200">- Update to cryptsetup 2.3.1
- Resolves: #1796826 #1743891 #1785748</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 2.3.3-1" date="1590667200">- Update to cryptsetup 2.3.3
- Resolves: #1796826 #1743891 #1785748</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 2.3.3-2" date="1598529600">- patch: Fix possible memory corruption in LUKS2 validation
	 code in 32bit library.
- Resolves: #1872294</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 2.3.3-3" date="1612353600">- patch: Fix crypto backend to properly handle ECB mode.
- Resolves: #1859091</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 2.3.3-4" date="1613563200">- patch: Fix reencryption for custom devices with data segments
  set to use cipher_null.
- Resolves: #1927409</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 2.3.3-4.1" date="1642161600">- patch: fix CVE-2021-4122.
- Resolves: #2036906</changelog>
</package>
<package pkgid="75666baeeb8197b059b04314e58604592595d0d5608502ad01140254b2351427" name="cryptsetup-debugsource" arch="x86_64">
  <version epoch="0" ver="2.3.3" rel="4.el8_5.1"/>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 2.2.0-0.2" date="1560513600">- Updates to reencryption feature.
- Resolves: #1676622</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 2.2.0-1" date="1565870400">- Update to cryptsetup 2.2.0 (final)
- Resolves: #1738263 #1740342 #1733391 #1729600 #1733390</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 2.2.0-2" date="1567166400">- patch: Fix mapped segments overflow on 32bit architectures.
- patch: Take optimal io size in account with LUKS2 reencryption.
- Resolves: #1742815 #1746532</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 2.2.2-1" date="1574078400">- Update to cryptsetup 2.2.2
- LUKS2 reencryption honors activation flags (one time and persistent).
- LUKS2 reencryption works also without volume keys put in kernel
  keyring service.
- Resolves: #1757783 #1750680 #1753597 #1743399</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 2.3.1-1" date="1585915200">- Update to cryptsetup 2.3.1
- Resolves: #1796826 #1743891 #1785748</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 2.3.3-1" date="1590667200">- Update to cryptsetup 2.3.3
- Resolves: #1796826 #1743891 #1785748</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 2.3.3-2" date="1598529600">- patch: Fix possible memory corruption in LUKS2 validation
	 code in 32bit library.
- Resolves: #1872294</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 2.3.3-3" date="1612353600">- patch: Fix crypto backend to properly handle ECB mode.
- Resolves: #1859091</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 2.3.3-4" date="1613563200">- patch: Fix reencryption for custom devices with data segments
  set to use cipher_null.
- Resolves: #1927409</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 2.3.3-4.1" date="1642161600">- patch: fix CVE-2021-4122.
- Resolves: #2036906</changelog>
</package>
<package pkgid="577d66b4aaf2ff09a541a3df7e1e6a859f6f56a1108e35a531ca1c6db07dfc48" name="cryptsetup-libs-debuginfo" arch="i686">
  <version epoch="0" ver="2.3.3" rel="4.el8_5.1"/>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 2.2.0-0.2" date="1560513600">- Updates to reencryption feature.
- Resolves: #1676622</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 2.2.0-1" date="1565870400">- Update to cryptsetup 2.2.0 (final)
- Resolves: #1738263 #1740342 #1733391 #1729600 #1733390</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 2.2.0-2" date="1567166400">- patch: Fix mapped segments overflow on 32bit architectures.
- patch: Take optimal io size in account with LUKS2 reencryption.
- Resolves: #1742815 #1746532</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 2.2.2-1" date="1574078400">- Update to cryptsetup 2.2.2
- LUKS2 reencryption honors activation flags (one time and persistent).
- LUKS2 reencryption works also without volume keys put in kernel
  keyring service.
- Resolves: #1757783 #1750680 #1753597 #1743399</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 2.3.1-1" date="1585915200">- Update to cryptsetup 2.3.1
- Resolves: #1796826 #1743891 #1785748</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 2.3.3-1" date="1590667200">- Update to cryptsetup 2.3.3
- Resolves: #1796826 #1743891 #1785748</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 2.3.3-2" date="1598529600">- patch: Fix possible memory corruption in LUKS2 validation
	 code in 32bit library.
- Resolves: #1872294</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 2.3.3-3" date="1612353600">- patch: Fix crypto backend to properly handle ECB mode.
- Resolves: #1859091</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 2.3.3-4" date="1613563200">- patch: Fix reencryption for custom devices with data segments
  set to use cipher_null.
- Resolves: #1927409</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 2.3.3-4.1" date="1642161600">- patch: fix CVE-2021-4122.
- Resolves: #2036906</changelog>
</package>
<package pkgid="081f01065613d2c0e9ee675336435ae7f8fc7b67e299319efc9ce2c6cd3ff30e" name="cryptsetup-libs-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.3.3" rel="4.el8_5.1"/>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 2.2.0-0.2" date="1560513600">- Updates to reencryption feature.
- Resolves: #1676622</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 2.2.0-1" date="1565870400">- Update to cryptsetup 2.2.0 (final)
- Resolves: #1738263 #1740342 #1733391 #1729600 #1733390</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 2.2.0-2" date="1567166400">- patch: Fix mapped segments overflow on 32bit architectures.
- patch: Take optimal io size in account with LUKS2 reencryption.
- Resolves: #1742815 #1746532</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 2.2.2-1" date="1574078400">- Update to cryptsetup 2.2.2
- LUKS2 reencryption honors activation flags (one time and persistent).
- LUKS2 reencryption works also without volume keys put in kernel
  keyring service.
- Resolves: #1757783 #1750680 #1753597 #1743399</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 2.3.1-1" date="1585915200">- Update to cryptsetup 2.3.1
- Resolves: #1796826 #1743891 #1785748</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 2.3.3-1" date="1590667200">- Update to cryptsetup 2.3.3
- Resolves: #1796826 #1743891 #1785748</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 2.3.3-2" date="1598529600">- patch: Fix possible memory corruption in LUKS2 validation
	 code in 32bit library.
- Resolves: #1872294</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 2.3.3-3" date="1612353600">- patch: Fix crypto backend to properly handle ECB mode.
- Resolves: #1859091</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 2.3.3-4" date="1613563200">- patch: Fix reencryption for custom devices with data segments
  set to use cipher_null.
- Resolves: #1927409</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 2.3.3-4.1" date="1642161600">- patch: fix CVE-2021-4122.
- Resolves: #2036906</changelog>
</package>
<package pkgid="8b96913eb017bd3f6b405a0cd4864cd539316687cc2bc3881288fee9a3a6c194" name="cryptsetup-reencrypt-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.3.3" rel="4.el8_5.1"/>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 2.2.0-0.2" date="1560513600">- Updates to reencryption feature.
- Resolves: #1676622</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 2.2.0-1" date="1565870400">- Update to cryptsetup 2.2.0 (final)
- Resolves: #1738263 #1740342 #1733391 #1729600 #1733390</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 2.2.0-2" date="1567166400">- patch: Fix mapped segments overflow on 32bit architectures.
- patch: Take optimal io size in account with LUKS2 reencryption.
- Resolves: #1742815 #1746532</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 2.2.2-1" date="1574078400">- Update to cryptsetup 2.2.2
- LUKS2 reencryption honors activation flags (one time and persistent).
- LUKS2 reencryption works also without volume keys put in kernel
  keyring service.
- Resolves: #1757783 #1750680 #1753597 #1743399</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 2.3.1-1" date="1585915200">- Update to cryptsetup 2.3.1
- Resolves: #1796826 #1743891 #1785748</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 2.3.3-1" date="1590667200">- Update to cryptsetup 2.3.3
- Resolves: #1796826 #1743891 #1785748</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 2.3.3-2" date="1598529600">- patch: Fix possible memory corruption in LUKS2 validation
	 code in 32bit library.
- Resolves: #1872294</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 2.3.3-3" date="1612353600">- patch: Fix crypto backend to properly handle ECB mode.
- Resolves: #1859091</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 2.3.3-4" date="1613563200">- patch: Fix reencryption for custom devices with data segments
  set to use cipher_null.
- Resolves: #1927409</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 2.3.3-4.1" date="1642161600">- patch: fix CVE-2021-4122.
- Resolves: #2036906</changelog>
</package>
<package pkgid="dca61d184efe359f992e361690bf26a92216d910b8c90be0e69215b4fabe4fea" name="ctdb-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.14.5" rel="10.el8_5"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-0" date="1623326400">- related: rhbz#1944657 - Update to version 4.14.5
- resolves: rhbz#1969787 - Fix memory leak in RPC server
- resolves: rhbz#1954974 - Validate smb.conf option for domain members with testparm
- resolves: rhbz#1963298 - Fix smbd trying to delete files with wrong permissions
- resolves: rhbz#1890008 - Update rpcclient manpage to list all available commands
- resolves: rhbz#1857254 - Update smbcacls manpage to document inhertance flags</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-1" date="1624536000">- resolves: rhbz#1974792 - Create a subpackage for vfs-io-uring
- resolves: rhbz#1965397 - Raise log level for dfs ENOENT debug message</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; -  4.14.4-2" date="1626177600">- related: rhbz#1980346 - Rebuild for libtalloc 0.11.0</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-4" date="1636113600">- resolves: rhbz#2021163
  Fix CVE-2016-2124
- resolves: rhbz#2021167
  Fix CVE-2021-23192
- resolves: rhbz#2021171
  Fix CVE-2020-25717</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-5" date="1636459200">- resolves: rhbz#2021493 - Add missing PAC buffer types to krb5pac.idl
- related: rbhz#2021171 - Fix regression with 'allow trusted domains = no'</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.14.5-6" date="1636804800">- related: rhbz#2021171 - Fix CVE-2020-25717
- Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-7" date="1637582400">- related: rhbz#2021171 - Fix CVE-2020-25717
- Fix running ktest (selftest)</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.14.5-8" date="1638446400">- resolves: rhbz#2026717 - Dir containing dangling symlinks cannot be deleted</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-9" date="1643284800">- resolves: rhbz#2046174 - Fix username map script regression of CVE-2020-25717
- resolves: rhbz#2046160 - Fix possible segfault while joining a domain
- resolves: rhbz#2046152 - Fix CVE-2021-44142</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.14.5-10" date="1645531200">- resolves: rhbz#2029417 - Fix virusfilter_vfs_openat: Not scanned: Directory or special file</changelog>
</package>
<package pkgid="29df180e442e15ab35e541513b7fb5e9ed028a0bac1e0dd7f1e876a7f3e8be69" name="ctdb-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.14.5" rel="7.el8_5"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.13.3-3" date="1612440000">- resolves: #1924615 - Fix a memcache bug when cache is full
- resolves: #1924571 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-2" date="1620734400">- resolves: rhbz#1944657 - Update to version 4.14.4
- resolves: rhbz#1949445 - Fix CVE-2021-20254
- resolves: rhbz#1947945 - Fix libsmbldap.so.2 not being a symbolic link
- resolves: rhbz#1908506 - Fix creating the gencache user directory
- resolves: rhbz#1901029 - Build the vfs_io_uring module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-4" date="1620820800">- related: rhbz#1944657 - Fix possible upgrade issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-0" date="1623326400">- related: rhbz#1944657 - Update to version 4.14.5
- resolves: rhbz#1969787 - Fix memory leak in RPC server
- resolves: rhbz#1954974 - Validate smb.conf option for domain members with testparm
- resolves: rhbz#1963298 - Fix smbd trying to delete files with wrong permissions
- resolves: rhbz#1890008 - Update rpcclient manpage to list all available commands
- resolves: rhbz#1857254 - Update smbcacls manpage to document inhertance flags</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-1" date="1624536000">- resolves: rhbz#1974792 - Create a subpackage for vfs-io-uring
- resolves: rhbz#1965397 - Raise log level for dfs ENOENT debug message</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; -  4.14.4-2" date="1626177600">- related: rhbz#1980346 - Rebuild for libtalloc 0.11.0</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-4" date="1636113600">- resolves: rhbz#2021163
  Fix CVE-2016-2124
- resolves: rhbz#2021167
  Fix CVE-2021-23192
- resolves: rhbz#2021171
  Fix CVE-2020-25717</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-5" date="1636459200">- resolves: rhbz#2021493 - Add missing PAC buffer types to krb5pac.idl
- related: rbhz#2021171 - Fix regression with 'allow trusted domains = no'</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.14.5-6" date="1636804800">- related: rhbz#2021171 - Fix CVE-2020-25717
- Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-7" date="1637582400">- related: rhbz#2021171 - Fix CVE-2020-25717
- Fix running ktest (selftest)</changelog>
</package>
<package pkgid="df773e4bb4383568986300bef02e3b2e0a7194377435327e96e9293617999961" name="ctdb-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.14.5" rel="9.el8_5"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-4" date="1620820800">- related: rhbz#1944657 - Fix possible upgrade issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-0" date="1623326400">- related: rhbz#1944657 - Update to version 4.14.5
- resolves: rhbz#1969787 - Fix memory leak in RPC server
- resolves: rhbz#1954974 - Validate smb.conf option for domain members with testparm
- resolves: rhbz#1963298 - Fix smbd trying to delete files with wrong permissions
- resolves: rhbz#1890008 - Update rpcclient manpage to list all available commands
- resolves: rhbz#1857254 - Update smbcacls manpage to document inhertance flags</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-1" date="1624536000">- resolves: rhbz#1974792 - Create a subpackage for vfs-io-uring
- resolves: rhbz#1965397 - Raise log level for dfs ENOENT debug message</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; -  4.14.4-2" date="1626177600">- related: rhbz#1980346 - Rebuild for libtalloc 0.11.0</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-4" date="1636113600">- resolves: rhbz#2021163
  Fix CVE-2016-2124
- resolves: rhbz#2021167
  Fix CVE-2021-23192
- resolves: rhbz#2021171
  Fix CVE-2020-25717</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-5" date="1636459200">- resolves: rhbz#2021493 - Add missing PAC buffer types to krb5pac.idl
- related: rbhz#2021171 - Fix regression with 'allow trusted domains = no'</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.14.5-6" date="1636804800">- related: rhbz#2021171 - Fix CVE-2020-25717
- Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-7" date="1637582400">- related: rhbz#2021171 - Fix CVE-2020-25717
- Fix running ktest (selftest)</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.14.5-8" date="1638446400">- resolves: rhbz#2026717 - Dir containing dangling symlinks cannot be deleted</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-9" date="1643284800">- resolves: rhbz#2046174 - Fix username map script regression of CVE-2020-25717
- resolves: rhbz#2046160 - Fix possible segfault while joining a domain
- resolves: rhbz#2046152 - Fix CVE-2021-44142</changelog>
</package>
<package pkgid="892ec8e955ab427e04474e1fbc5a04b7b0338d1ff853a94f04c7ebfe41976072" name="cyrus-sasl-debuginfo" arch="i686">
  <version epoch="0" ver="2.1.27" rel="6.el8_5"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 2.1.27-0.1rc7" date="1520251200">- New upstream (pre-)release
- Import LDFLAGS from redhat-rpm-config (#1548437)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 2.1.27-0.2rc7" date="1532520000">- Rebuilt for gdbm</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.1.27-0.3rc7" date="1532952000">- Rebuild with fixed binutils</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.27-0.4rc7" date="1560427200">- Add patch form Upstream PR559 to use RC4 implementation from OpenSSL
- Resolves bz#1618744
- Fix multilib issue bz#1663120</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.27-1" date="1560513600">- Rc7 to final source
- Resovles bz#1618744</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.27-2" date="1588680000">- Backport fix for CVE-2019-19906
- Resolves: rhbz#1804036</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.27-3" date="1588680001">- Backport GSSAPI Channel Bindings support
- Resolves: rhbz#1817054</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.27-4" date="1588680002">- Add support for setting maxssf=0 in GSS-SPNEGO
- Resolves: rhbz#1822133</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.27-5" date="1588680003">- Reduce excessive GSSAPI plugin logging
- Resolves: rhbz#1274734</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.27-6" date="1645099200">- Fix for CVE-2022-24407
- Resolves: rhbz#2055846</changelog>
</package>
<package pkgid="c7e87725661eb83dcc13aeb76d579e2cba064818808b4e300b8b68f6d17ca853" name="cyrus-sasl-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.1.27" rel="6.el8_5"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 2.1.27-0.1rc7" date="1520251200">- New upstream (pre-)release
- Import LDFLAGS from redhat-rpm-config (#1548437)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 2.1.27-0.2rc7" date="1532520000">- Rebuilt for gdbm</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.1.27-0.3rc7" date="1532952000">- Rebuild with fixed binutils</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.27-0.4rc7" date="1560427200">- Add patch form Upstream PR559 to use RC4 implementation from OpenSSL
- Resolves bz#1618744
- Fix multilib issue bz#1663120</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.27-1" date="1560513600">- Rc7 to final source
- Resovles bz#1618744</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.27-2" date="1588680000">- Backport fix for CVE-2019-19906
- Resolves: rhbz#1804036</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.27-3" date="1588680001">- Backport GSSAPI Channel Bindings support
- Resolves: rhbz#1817054</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.27-4" date="1588680002">- Add support for setting maxssf=0 in GSS-SPNEGO
- Resolves: rhbz#1822133</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.27-5" date="1588680003">- Reduce excessive GSSAPI plugin logging
- Resolves: rhbz#1274734</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.27-6" date="1645099200">- Fix for CVE-2022-24407
- Resolves: rhbz#2055846</changelog>
</package>
<package pkgid="a117f9eee7d20320b8e33e1c4c3d099e1683c99f6c117746b6a980576fcf3ef4" name="cyrus-sasl-debugsource" arch="i686">
  <version epoch="0" ver="2.1.27" rel="6.el8_5"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 2.1.27-0.1rc7" date="1520251200">- New upstream (pre-)release
- Import LDFLAGS from redhat-rpm-config (#1548437)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 2.1.27-0.2rc7" date="1532520000">- Rebuilt for gdbm</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.1.27-0.3rc7" date="1532952000">- Rebuild with fixed binutils</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.27-0.4rc7" date="1560427200">- Add patch form Upstream PR559 to use RC4 implementation from OpenSSL
- Resolves bz#1618744
- Fix multilib issue bz#1663120</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.27-1" date="1560513600">- Rc7 to final source
- Resovles bz#1618744</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.27-2" date="1588680000">- Backport fix for CVE-2019-19906
- Resolves: rhbz#1804036</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.27-3" date="1588680001">- Backport GSSAPI Channel Bindings support
- Resolves: rhbz#1817054</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.27-4" date="1588680002">- Add support for setting maxssf=0 in GSS-SPNEGO
- Resolves: rhbz#1822133</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.27-5" date="1588680003">- Reduce excessive GSSAPI plugin logging
- Resolves: rhbz#1274734</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.27-6" date="1645099200">- Fix for CVE-2022-24407
- Resolves: rhbz#2055846</changelog>
</package>
<package pkgid="b483d7b1816fedb1c668cd618cab847cc55fb78ed51f3f09655d00d2a55fd1fc" name="cyrus-sasl-debugsource" arch="x86_64">
  <version epoch="0" ver="2.1.27" rel="6.el8_5"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 2.1.27-0.1rc7" date="1520251200">- New upstream (pre-)release
- Import LDFLAGS from redhat-rpm-config (#1548437)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 2.1.27-0.2rc7" date="1532520000">- Rebuilt for gdbm</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.1.27-0.3rc7" date="1532952000">- Rebuild with fixed binutils</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.27-0.4rc7" date="1560427200">- Add patch form Upstream PR559 to use RC4 implementation from OpenSSL
- Resolves bz#1618744
- Fix multilib issue bz#1663120</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.27-1" date="1560513600">- Rc7 to final source
- Resovles bz#1618744</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.27-2" date="1588680000">- Backport fix for CVE-2019-19906
- Resolves: rhbz#1804036</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.27-3" date="1588680001">- Backport GSSAPI Channel Bindings support
- Resolves: rhbz#1817054</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.27-4" date="1588680002">- Add support for setting maxssf=0 in GSS-SPNEGO
- Resolves: rhbz#1822133</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.27-5" date="1588680003">- Reduce excessive GSSAPI plugin logging
- Resolves: rhbz#1274734</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.27-6" date="1645099200">- Fix for CVE-2022-24407
- Resolves: rhbz#2055846</changelog>
</package>
<package pkgid="e839669e2f1e4d2686ada89c3a38789e87e08173f3b7bc8844614282a174472e" name="cyrus-sasl-devel-debuginfo" arch="i686">
  <version epoch="0" ver="2.1.27" rel="6.el8_5"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 2.1.27-0.1rc7" date="1520251200">- New upstream (pre-)release
- Import LDFLAGS from redhat-rpm-config (#1548437)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 2.1.27-0.2rc7" date="1532520000">- Rebuilt for gdbm</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.1.27-0.3rc7" date="1532952000">- Rebuild with fixed binutils</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.27-0.4rc7" date="1560427200">- Add patch form Upstream PR559 to use RC4 implementation from OpenSSL
- Resolves bz#1618744
- Fix multilib issue bz#1663120</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.27-1" date="1560513600">- Rc7 to final source
- Resovles bz#1618744</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.27-2" date="1588680000">- Backport fix for CVE-2019-19906
- Resolves: rhbz#1804036</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.27-3" date="1588680001">- Backport GSSAPI Channel Bindings support
- Resolves: rhbz#1817054</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.27-4" date="1588680002">- Add support for setting maxssf=0 in GSS-SPNEGO
- Resolves: rhbz#1822133</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.27-5" date="1588680003">- Reduce excessive GSSAPI plugin logging
- Resolves: rhbz#1274734</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.27-6" date="1645099200">- Fix for CVE-2022-24407
- Resolves: rhbz#2055846</changelog>
</package>
<package pkgid="23df0e6738ab675f4821022a4a5c787d96baf40f9b34ded314ca355a86e38804" name="cyrus-sasl-devel-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.1.27" rel="6.el8_5"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 2.1.27-0.1rc7" date="1520251200">- New upstream (pre-)release
- Import LDFLAGS from redhat-rpm-config (#1548437)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 2.1.27-0.2rc7" date="1532520000">- Rebuilt for gdbm</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.1.27-0.3rc7" date="1532952000">- Rebuild with fixed binutils</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.27-0.4rc7" date="1560427200">- Add patch form Upstream PR559 to use RC4 implementation from OpenSSL
- Resolves bz#1618744
- Fix multilib issue bz#1663120</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.27-1" date="1560513600">- Rc7 to final source
- Resovles bz#1618744</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.27-2" date="1588680000">- Backport fix for CVE-2019-19906
- Resolves: rhbz#1804036</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.27-3" date="1588680001">- Backport GSSAPI Channel Bindings support
- Resolves: rhbz#1817054</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.27-4" date="1588680002">- Add support for setting maxssf=0 in GSS-SPNEGO
- Resolves: rhbz#1822133</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.27-5" date="1588680003">- Reduce excessive GSSAPI plugin logging
- Resolves: rhbz#1274734</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.27-6" date="1645099200">- Fix for CVE-2022-24407
- Resolves: rhbz#2055846</changelog>
</package>
<package pkgid="b017b17b2dad9a95dd27e7064181d526558d37e9dc168dfca00da5a781f23979" name="cyrus-sasl-gs2-debuginfo" arch="i686">
  <version epoch="0" ver="2.1.27" rel="6.el8_5"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 2.1.27-0.1rc7" date="1520251200">- New upstream (pre-)release
- Import LDFLAGS from redhat-rpm-config (#1548437)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 2.1.27-0.2rc7" date="1532520000">- Rebuilt for gdbm</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.1.27-0.3rc7" date="1532952000">- Rebuild with fixed binutils</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.27-0.4rc7" date="1560427200">- Add patch form Upstream PR559 to use RC4 implementation from OpenSSL
- Resolves bz#1618744
- Fix multilib issue bz#1663120</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.27-1" date="1560513600">- Rc7 to final source
- Resovles bz#1618744</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.27-2" date="1588680000">- Backport fix for CVE-2019-19906
- Resolves: rhbz#1804036</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.27-3" date="1588680001">- Backport GSSAPI Channel Bindings support
- Resolves: rhbz#1817054</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.27-4" date="1588680002">- Add support for setting maxssf=0 in GSS-SPNEGO
- Resolves: rhbz#1822133</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.27-5" date="1588680003">- Reduce excessive GSSAPI plugin logging
- Resolves: rhbz#1274734</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.27-6" date="1645099200">- Fix for CVE-2022-24407
- Resolves: rhbz#2055846</changelog>
</package>
<package pkgid="64099a2315cf4f59ff3cac9ed7e124f418814850a1bef47fff4df9bbfe123fda" name="cyrus-sasl-gs2-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.1.27" rel="6.el8_5"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 2.1.27-0.1rc7" date="1520251200">- New upstream (pre-)release
- Import LDFLAGS from redhat-rpm-config (#1548437)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 2.1.27-0.2rc7" date="1532520000">- Rebuilt for gdbm</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.1.27-0.3rc7" date="1532952000">- Rebuild with fixed binutils</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.27-0.4rc7" date="1560427200">- Add patch form Upstream PR559 to use RC4 implementation from OpenSSL
- Resolves bz#1618744
- Fix multilib issue bz#1663120</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.27-1" date="1560513600">- Rc7 to final source
- Resovles bz#1618744</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.27-2" date="1588680000">- Backport fix for CVE-2019-19906
- Resolves: rhbz#1804036</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.27-3" date="1588680001">- Backport GSSAPI Channel Bindings support
- Resolves: rhbz#1817054</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.27-4" date="1588680002">- Add support for setting maxssf=0 in GSS-SPNEGO
- Resolves: rhbz#1822133</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.27-5" date="1588680003">- Reduce excessive GSSAPI plugin logging
- Resolves: rhbz#1274734</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.27-6" date="1645099200">- Fix for CVE-2022-24407
- Resolves: rhbz#2055846</changelog>
</package>
<package pkgid="82d16928e03375b3976281b419fc54dbb6f90189aad6550ea335cc617a71577a" name="cyrus-sasl-gssapi-debuginfo" arch="i686">
  <version epoch="0" ver="2.1.27" rel="6.el8_5"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 2.1.27-0.1rc7" date="1520251200">- New upstream (pre-)release
- Import LDFLAGS from redhat-rpm-config (#1548437)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 2.1.27-0.2rc7" date="1532520000">- Rebuilt for gdbm</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.1.27-0.3rc7" date="1532952000">- Rebuild with fixed binutils</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.27-0.4rc7" date="1560427200">- Add patch form Upstream PR559 to use RC4 implementation from OpenSSL
- Resolves bz#1618744
- Fix multilib issue bz#1663120</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.27-1" date="1560513600">- Rc7 to final source
- Resovles bz#1618744</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.27-2" date="1588680000">- Backport fix for CVE-2019-19906
- Resolves: rhbz#1804036</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.27-3" date="1588680001">- Backport GSSAPI Channel Bindings support
- Resolves: rhbz#1817054</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.27-4" date="1588680002">- Add support for setting maxssf=0 in GSS-SPNEGO
- Resolves: rhbz#1822133</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.27-5" date="1588680003">- Reduce excessive GSSAPI plugin logging
- Resolves: rhbz#1274734</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.27-6" date="1645099200">- Fix for CVE-2022-24407
- Resolves: rhbz#2055846</changelog>
</package>
<package pkgid="50b7c31aee26d9d09d8d06768de1dfc2501db9aff47ed24a44d8d216edc127c8" name="cyrus-sasl-gssapi-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.1.27" rel="6.el8_5"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 2.1.27-0.1rc7" date="1520251200">- New upstream (pre-)release
- Import LDFLAGS from redhat-rpm-config (#1548437)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 2.1.27-0.2rc7" date="1532520000">- Rebuilt for gdbm</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.1.27-0.3rc7" date="1532952000">- Rebuild with fixed binutils</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.27-0.4rc7" date="1560427200">- Add patch form Upstream PR559 to use RC4 implementation from OpenSSL
- Resolves bz#1618744
- Fix multilib issue bz#1663120</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.27-1" date="1560513600">- Rc7 to final source
- Resovles bz#1618744</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.27-2" date="1588680000">- Backport fix for CVE-2019-19906
- Resolves: rhbz#1804036</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.27-3" date="1588680001">- Backport GSSAPI Channel Bindings support
- Resolves: rhbz#1817054</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.27-4" date="1588680002">- Add support for setting maxssf=0 in GSS-SPNEGO
- Resolves: rhbz#1822133</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.27-5" date="1588680003">- Reduce excessive GSSAPI plugin logging
- Resolves: rhbz#1274734</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.27-6" date="1645099200">- Fix for CVE-2022-24407
- Resolves: rhbz#2055846</changelog>
</package>
<package pkgid="6781861bd235bab646721411e7f638b5fa1fe74e6142b51429b7096b850eca17" name="cyrus-sasl-ldap-debuginfo" arch="i686">
  <version epoch="0" ver="2.1.27" rel="6.el8_5"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 2.1.27-0.1rc7" date="1520251200">- New upstream (pre-)release
- Import LDFLAGS from redhat-rpm-config (#1548437)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 2.1.27-0.2rc7" date="1532520000">- Rebuilt for gdbm</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.1.27-0.3rc7" date="1532952000">- Rebuild with fixed binutils</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.27-0.4rc7" date="1560427200">- Add patch form Upstream PR559 to use RC4 implementation from OpenSSL
- Resolves bz#1618744
- Fix multilib issue bz#1663120</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.27-1" date="1560513600">- Rc7 to final source
- Resovles bz#1618744</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.27-2" date="1588680000">- Backport fix for CVE-2019-19906
- Resolves: rhbz#1804036</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.27-3" date="1588680001">- Backport GSSAPI Channel Bindings support
- Resolves: rhbz#1817054</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.27-4" date="1588680002">- Add support for setting maxssf=0 in GSS-SPNEGO
- Resolves: rhbz#1822133</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.27-5" date="1588680003">- Reduce excessive GSSAPI plugin logging
- Resolves: rhbz#1274734</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.27-6" date="1645099200">- Fix for CVE-2022-24407
- Resolves: rhbz#2055846</changelog>
</package>
<package pkgid="318f6c3378e68e6a61b1d8688670ecd6066015a7ef46bd9387a2222ed36ee6f8" name="cyrus-sasl-ldap-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.1.27" rel="6.el8_5"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 2.1.27-0.1rc7" date="1520251200">- New upstream (pre-)release
- Import LDFLAGS from redhat-rpm-config (#1548437)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 2.1.27-0.2rc7" date="1532520000">- Rebuilt for gdbm</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.1.27-0.3rc7" date="1532952000">- Rebuild with fixed binutils</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.27-0.4rc7" date="1560427200">- Add patch form Upstream PR559 to use RC4 implementation from OpenSSL
- Resolves bz#1618744
- Fix multilib issue bz#1663120</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.27-1" date="1560513600">- Rc7 to final source
- Resovles bz#1618744</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.27-2" date="1588680000">- Backport fix for CVE-2019-19906
- Resolves: rhbz#1804036</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.27-3" date="1588680001">- Backport GSSAPI Channel Bindings support
- Resolves: rhbz#1817054</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.27-4" date="1588680002">- Add support for setting maxssf=0 in GSS-SPNEGO
- Resolves: rhbz#1822133</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.27-5" date="1588680003">- Reduce excessive GSSAPI plugin logging
- Resolves: rhbz#1274734</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.27-6" date="1645099200">- Fix for CVE-2022-24407
- Resolves: rhbz#2055846</changelog>
</package>
<package pkgid="3896c9d59c8b9672f26c2ecd9446b11e55ac23f24098f8a3b8603a692c60dcfe" name="cyrus-sasl-lib-debuginfo" arch="i686">
  <version epoch="0" ver="2.1.27" rel="6.el8_5"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 2.1.27-0.1rc7" date="1520251200">- New upstream (pre-)release
- Import LDFLAGS from redhat-rpm-config (#1548437)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 2.1.27-0.2rc7" date="1532520000">- Rebuilt for gdbm</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.1.27-0.3rc7" date="1532952000">- Rebuild with fixed binutils</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.27-0.4rc7" date="1560427200">- Add patch form Upstream PR559 to use RC4 implementation from OpenSSL
- Resolves bz#1618744
- Fix multilib issue bz#1663120</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.27-1" date="1560513600">- Rc7 to final source
- Resovles bz#1618744</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.27-2" date="1588680000">- Backport fix for CVE-2019-19906
- Resolves: rhbz#1804036</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.27-3" date="1588680001">- Backport GSSAPI Channel Bindings support
- Resolves: rhbz#1817054</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.27-4" date="1588680002">- Add support for setting maxssf=0 in GSS-SPNEGO
- Resolves: rhbz#1822133</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.27-5" date="1588680003">- Reduce excessive GSSAPI plugin logging
- Resolves: rhbz#1274734</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.27-6" date="1645099200">- Fix for CVE-2022-24407
- Resolves: rhbz#2055846</changelog>
</package>
<package pkgid="ed4ba9bb1377048f23a49bb0e45a39f1da6dd404d7f6ea37bc4a669c99baa4a9" name="cyrus-sasl-lib-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.1.27" rel="6.el8_5"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 2.1.27-0.1rc7" date="1520251200">- New upstream (pre-)release
- Import LDFLAGS from redhat-rpm-config (#1548437)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 2.1.27-0.2rc7" date="1532520000">- Rebuilt for gdbm</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.1.27-0.3rc7" date="1532952000">- Rebuild with fixed binutils</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.27-0.4rc7" date="1560427200">- Add patch form Upstream PR559 to use RC4 implementation from OpenSSL
- Resolves bz#1618744
- Fix multilib issue bz#1663120</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.27-1" date="1560513600">- Rc7 to final source
- Resovles bz#1618744</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.27-2" date="1588680000">- Backport fix for CVE-2019-19906
- Resolves: rhbz#1804036</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.27-3" date="1588680001">- Backport GSSAPI Channel Bindings support
- Resolves: rhbz#1817054</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.27-4" date="1588680002">- Add support for setting maxssf=0 in GSS-SPNEGO
- Resolves: rhbz#1822133</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.27-5" date="1588680003">- Reduce excessive GSSAPI plugin logging
- Resolves: rhbz#1274734</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.27-6" date="1645099200">- Fix for CVE-2022-24407
- Resolves: rhbz#2055846</changelog>
</package>
<package pkgid="47a830f82a51cf4ceb3aabc30346827fe9d7709ff1e20880971461028914bb22" name="cyrus-sasl-md5-debuginfo" arch="i686">
  <version epoch="0" ver="2.1.27" rel="6.el8_5"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 2.1.27-0.1rc7" date="1520251200">- New upstream (pre-)release
- Import LDFLAGS from redhat-rpm-config (#1548437)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 2.1.27-0.2rc7" date="1532520000">- Rebuilt for gdbm</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.1.27-0.3rc7" date="1532952000">- Rebuild with fixed binutils</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.27-0.4rc7" date="1560427200">- Add patch form Upstream PR559 to use RC4 implementation from OpenSSL
- Resolves bz#1618744
- Fix multilib issue bz#1663120</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.27-1" date="1560513600">- Rc7 to final source
- Resovles bz#1618744</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.27-2" date="1588680000">- Backport fix for CVE-2019-19906
- Resolves: rhbz#1804036</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.27-3" date="1588680001">- Backport GSSAPI Channel Bindings support
- Resolves: rhbz#1817054</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.27-4" date="1588680002">- Add support for setting maxssf=0 in GSS-SPNEGO
- Resolves: rhbz#1822133</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.27-5" date="1588680003">- Reduce excessive GSSAPI plugin logging
- Resolves: rhbz#1274734</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.27-6" date="1645099200">- Fix for CVE-2022-24407
- Resolves: rhbz#2055846</changelog>
</package>
<package pkgid="6ac523aab847aa23f1d7b491c5b7e78d26227dc7f2f64b64c92fbf93693662c3" name="cyrus-sasl-md5-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.1.27" rel="6.el8_5"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 2.1.27-0.1rc7" date="1520251200">- New upstream (pre-)release
- Import LDFLAGS from redhat-rpm-config (#1548437)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 2.1.27-0.2rc7" date="1532520000">- Rebuilt for gdbm</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.1.27-0.3rc7" date="1532952000">- Rebuild with fixed binutils</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.27-0.4rc7" date="1560427200">- Add patch form Upstream PR559 to use RC4 implementation from OpenSSL
- Resolves bz#1618744
- Fix multilib issue bz#1663120</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.27-1" date="1560513600">- Rc7 to final source
- Resovles bz#1618744</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.27-2" date="1588680000">- Backport fix for CVE-2019-19906
- Resolves: rhbz#1804036</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.27-3" date="1588680001">- Backport GSSAPI Channel Bindings support
- Resolves: rhbz#1817054</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.27-4" date="1588680002">- Add support for setting maxssf=0 in GSS-SPNEGO
- Resolves: rhbz#1822133</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.27-5" date="1588680003">- Reduce excessive GSSAPI plugin logging
- Resolves: rhbz#1274734</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.27-6" date="1645099200">- Fix for CVE-2022-24407
- Resolves: rhbz#2055846</changelog>
</package>
<package pkgid="6b88ffd18a8ec63392e5316455529ae6db92fa0f61819127ca98fe8052608b38" name="cyrus-sasl-ntlm-debuginfo" arch="i686">
  <version epoch="0" ver="2.1.27" rel="6.el8_5"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 2.1.27-0.1rc7" date="1520251200">- New upstream (pre-)release
- Import LDFLAGS from redhat-rpm-config (#1548437)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 2.1.27-0.2rc7" date="1532520000">- Rebuilt for gdbm</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.1.27-0.3rc7" date="1532952000">- Rebuild with fixed binutils</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.27-0.4rc7" date="1560427200">- Add patch form Upstream PR559 to use RC4 implementation from OpenSSL
- Resolves bz#1618744
- Fix multilib issue bz#1663120</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.27-1" date="1560513600">- Rc7 to final source
- Resovles bz#1618744</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.27-2" date="1588680000">- Backport fix for CVE-2019-19906
- Resolves: rhbz#1804036</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.27-3" date="1588680001">- Backport GSSAPI Channel Bindings support
- Resolves: rhbz#1817054</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.27-4" date="1588680002">- Add support for setting maxssf=0 in GSS-SPNEGO
- Resolves: rhbz#1822133</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.27-5" date="1588680003">- Reduce excessive GSSAPI plugin logging
- Resolves: rhbz#1274734</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.27-6" date="1645099200">- Fix for CVE-2022-24407
- Resolves: rhbz#2055846</changelog>
</package>
<package pkgid="b72cfc99ae9536a6c8222012a5a52b75f07fe6f79b02f2395ccc2eda4d8f99ce" name="cyrus-sasl-ntlm-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.1.27" rel="6.el8_5"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 2.1.27-0.1rc7" date="1520251200">- New upstream (pre-)release
- Import LDFLAGS from redhat-rpm-config (#1548437)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 2.1.27-0.2rc7" date="1532520000">- Rebuilt for gdbm</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.1.27-0.3rc7" date="1532952000">- Rebuild with fixed binutils</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.27-0.4rc7" date="1560427200">- Add patch form Upstream PR559 to use RC4 implementation from OpenSSL
- Resolves bz#1618744
- Fix multilib issue bz#1663120</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.27-1" date="1560513600">- Rc7 to final source
- Resovles bz#1618744</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.27-2" date="1588680000">- Backport fix for CVE-2019-19906
- Resolves: rhbz#1804036</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.27-3" date="1588680001">- Backport GSSAPI Channel Bindings support
- Resolves: rhbz#1817054</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.27-4" date="1588680002">- Add support for setting maxssf=0 in GSS-SPNEGO
- Resolves: rhbz#1822133</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.27-5" date="1588680003">- Reduce excessive GSSAPI plugin logging
- Resolves: rhbz#1274734</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.27-6" date="1645099200">- Fix for CVE-2022-24407
- Resolves: rhbz#2055846</changelog>
</package>
<package pkgid="d3c0573809efadd1b82466c1c46146f86d328ac725308e3ae9861625c646785a" name="cyrus-sasl-plain-debuginfo" arch="i686">
  <version epoch="0" ver="2.1.27" rel="6.el8_5"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 2.1.27-0.1rc7" date="1520251200">- New upstream (pre-)release
- Import LDFLAGS from redhat-rpm-config (#1548437)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 2.1.27-0.2rc7" date="1532520000">- Rebuilt for gdbm</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.1.27-0.3rc7" date="1532952000">- Rebuild with fixed binutils</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.27-0.4rc7" date="1560427200">- Add patch form Upstream PR559 to use RC4 implementation from OpenSSL
- Resolves bz#1618744
- Fix multilib issue bz#1663120</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.27-1" date="1560513600">- Rc7 to final source
- Resovles bz#1618744</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.27-2" date="1588680000">- Backport fix for CVE-2019-19906
- Resolves: rhbz#1804036</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.27-3" date="1588680001">- Backport GSSAPI Channel Bindings support
- Resolves: rhbz#1817054</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.27-4" date="1588680002">- Add support for setting maxssf=0 in GSS-SPNEGO
- Resolves: rhbz#1822133</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.27-5" date="1588680003">- Reduce excessive GSSAPI plugin logging
- Resolves: rhbz#1274734</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.27-6" date="1645099200">- Fix for CVE-2022-24407
- Resolves: rhbz#2055846</changelog>
</package>
<package pkgid="c79192452c11935e5fd820b590a1efabf0d2702be06c7e58a3d8fc030e794e4b" name="cyrus-sasl-plain-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.1.27" rel="6.el8_5"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 2.1.27-0.1rc7" date="1520251200">- New upstream (pre-)release
- Import LDFLAGS from redhat-rpm-config (#1548437)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 2.1.27-0.2rc7" date="1532520000">- Rebuilt for gdbm</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.1.27-0.3rc7" date="1532952000">- Rebuild with fixed binutils</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.27-0.4rc7" date="1560427200">- Add patch form Upstream PR559 to use RC4 implementation from OpenSSL
- Resolves bz#1618744
- Fix multilib issue bz#1663120</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.27-1" date="1560513600">- Rc7 to final source
- Resovles bz#1618744</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.27-2" date="1588680000">- Backport fix for CVE-2019-19906
- Resolves: rhbz#1804036</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.27-3" date="1588680001">- Backport GSSAPI Channel Bindings support
- Resolves: rhbz#1817054</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.27-4" date="1588680002">- Add support for setting maxssf=0 in GSS-SPNEGO
- Resolves: rhbz#1822133</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.27-5" date="1588680003">- Reduce excessive GSSAPI plugin logging
- Resolves: rhbz#1274734</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.27-6" date="1645099200">- Fix for CVE-2022-24407
- Resolves: rhbz#2055846</changelog>
</package>
<package pkgid="65a4b9366b94da9cf8d2369d22d0e5d71f5adc96f003f29b198886c9ab985bc0" name="cyrus-sasl-scram-debuginfo" arch="i686">
  <version epoch="0" ver="2.1.27" rel="6.el8_5"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 2.1.27-0.1rc7" date="1520251200">- New upstream (pre-)release
- Import LDFLAGS from redhat-rpm-config (#1548437)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 2.1.27-0.2rc7" date="1532520000">- Rebuilt for gdbm</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.1.27-0.3rc7" date="1532952000">- Rebuild with fixed binutils</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.27-0.4rc7" date="1560427200">- Add patch form Upstream PR559 to use RC4 implementation from OpenSSL
- Resolves bz#1618744
- Fix multilib issue bz#1663120</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.27-1" date="1560513600">- Rc7 to final source
- Resovles bz#1618744</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.27-2" date="1588680000">- Backport fix for CVE-2019-19906
- Resolves: rhbz#1804036</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.27-3" date="1588680001">- Backport GSSAPI Channel Bindings support
- Resolves: rhbz#1817054</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.27-4" date="1588680002">- Add support for setting maxssf=0 in GSS-SPNEGO
- Resolves: rhbz#1822133</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.27-5" date="1588680003">- Reduce excessive GSSAPI plugin logging
- Resolves: rhbz#1274734</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.27-6" date="1645099200">- Fix for CVE-2022-24407
- Resolves: rhbz#2055846</changelog>
</package>
<package pkgid="aab31c72ccdc83570d2ee17f40c7e85838e29c2cd6e25fd417f62a4591306c0e" name="cyrus-sasl-scram-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.1.27" rel="6.el8_5"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 2.1.27-0.1rc7" date="1520251200">- New upstream (pre-)release
- Import LDFLAGS from redhat-rpm-config (#1548437)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 2.1.27-0.2rc7" date="1532520000">- Rebuilt for gdbm</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.1.27-0.3rc7" date="1532952000">- Rebuild with fixed binutils</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.27-0.4rc7" date="1560427200">- Add patch form Upstream PR559 to use RC4 implementation from OpenSSL
- Resolves bz#1618744
- Fix multilib issue bz#1663120</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.27-1" date="1560513600">- Rc7 to final source
- Resovles bz#1618744</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.27-2" date="1588680000">- Backport fix for CVE-2019-19906
- Resolves: rhbz#1804036</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.27-3" date="1588680001">- Backport GSSAPI Channel Bindings support
- Resolves: rhbz#1817054</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.27-4" date="1588680002">- Add support for setting maxssf=0 in GSS-SPNEGO
- Resolves: rhbz#1822133</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.27-5" date="1588680003">- Reduce excessive GSSAPI plugin logging
- Resolves: rhbz#1274734</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.27-6" date="1645099200">- Fix for CVE-2022-24407
- Resolves: rhbz#2055846</changelog>
</package>
<package pkgid="2a879a0c54b980b5b540f76e79858ac08646ab9710097ea223a5a523ea4513c8" name="device-mapper-debuginfo" arch="x86_64">
  <version epoch="8" ver="1.02.177" rel="11.el8_5"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.12-2" date="1622548800">- Fix loading of VDO kernel module.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.12-3" date="1623758400">- Allow extending thin-pool data with writecache on top.
- Fix removing thin-pool data converted to writeache.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.12-4" date="1624363200">- Fix conversion of writecache LVs to thin pool data volume.
- Add deviceidtype option for lvmdevices.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.12-5" date="1626177600">- Fix device_id handling of scsi_debug WWID.
- Add vdoimport support.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.12-6" date="1627992000">- Fix handling of pmspare by vgsplit, vgmerge and vgremove.
- Fix detection of active components of external origin volume.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.12-7" date="1628683200">- Fix missing executable flag on vdoimport.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.12-8" date="1629979200">- Rename vdoimport to lvm_import_vdo.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.12-9" date="1631880000">- Fix various lvm_import_vdo issues.
- Fix conversion to vdo when virtual size is above 2TiB.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.12-10" date="1632139200">- Fix incorrect memory free.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.12-11" date="1645012800">- Fix multiple concurrent LV refreshes failures.</changelog>
</package>
<package pkgid="354bc9c78d29fe9bdffeafcd2c65cc6f15b481304a5283f6effa7a23fc0681b1" name="device-mapper-event-debuginfo" arch="x86_64">
  <version epoch="8" ver="1.02.177" rel="11.el8_5"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.12-2" date="1622548800">- Fix loading of VDO kernel module.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.12-3" date="1623758400">- Allow extending thin-pool data with writecache on top.
- Fix removing thin-pool data converted to writeache.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.12-4" date="1624363200">- Fix conversion of writecache LVs to thin pool data volume.
- Add deviceidtype option for lvmdevices.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.12-5" date="1626177600">- Fix device_id handling of scsi_debug WWID.
- Add vdoimport support.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.12-6" date="1627992000">- Fix handling of pmspare by vgsplit, vgmerge and vgremove.
- Fix detection of active components of external origin volume.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.12-7" date="1628683200">- Fix missing executable flag on vdoimport.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.12-8" date="1629979200">- Rename vdoimport to lvm_import_vdo.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.12-9" date="1631880000">- Fix various lvm_import_vdo issues.
- Fix conversion to vdo when virtual size is above 2TiB.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.12-10" date="1632139200">- Fix incorrect memory free.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.12-11" date="1645012800">- Fix multiple concurrent LV refreshes failures.</changelog>
</package>
<package pkgid="c7bc0f31fa9b172983218aa41cb2e6a5d2e69514141eca647c93fd74904a9ba9" name="device-mapper-event-libs-debuginfo" arch="i686">
  <version epoch="8" ver="1.02.177" rel="11.el8_5"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.12-2" date="1622548800">- Fix loading of VDO kernel module.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.12-3" date="1623758400">- Allow extending thin-pool data with writecache on top.
- Fix removing thin-pool data converted to writeache.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.12-4" date="1624363200">- Fix conversion of writecache LVs to thin pool data volume.
- Add deviceidtype option for lvmdevices.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.12-5" date="1626177600">- Fix device_id handling of scsi_debug WWID.
- Add vdoimport support.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.12-6" date="1627992000">- Fix handling of pmspare by vgsplit, vgmerge and vgremove.
- Fix detection of active components of external origin volume.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.12-7" date="1628683200">- Fix missing executable flag on vdoimport.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.12-8" date="1629979200">- Rename vdoimport to lvm_import_vdo.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.12-9" date="1631880000">- Fix various lvm_import_vdo issues.
- Fix conversion to vdo when virtual size is above 2TiB.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.12-10" date="1632139200">- Fix incorrect memory free.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.12-11" date="1645012800">- Fix multiple concurrent LV refreshes failures.</changelog>
</package>
<package pkgid="1a05816c526e9a41a9a31d1315c49a1a5908ed2b8d37fe8774e7ae66fdee9b18" name="device-mapper-event-libs-debuginfo" arch="x86_64">
  <version epoch="8" ver="1.02.177" rel="11.el8_5"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.12-2" date="1622548800">- Fix loading of VDO kernel module.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.12-3" date="1623758400">- Allow extending thin-pool data with writecache on top.
- Fix removing thin-pool data converted to writeache.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.12-4" date="1624363200">- Fix conversion of writecache LVs to thin pool data volume.
- Add deviceidtype option for lvmdevices.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.12-5" date="1626177600">- Fix device_id handling of scsi_debug WWID.
- Add vdoimport support.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.12-6" date="1627992000">- Fix handling of pmspare by vgsplit, vgmerge and vgremove.
- Fix detection of active components of external origin volume.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.12-7" date="1628683200">- Fix missing executable flag on vdoimport.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.12-8" date="1629979200">- Rename vdoimport to lvm_import_vdo.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.12-9" date="1631880000">- Fix various lvm_import_vdo issues.
- Fix conversion to vdo when virtual size is above 2TiB.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.12-10" date="1632139200">- Fix incorrect memory free.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.12-11" date="1645012800">- Fix multiple concurrent LV refreshes failures.</changelog>
</package>
<package pkgid="08d4d2376323c45edd1fd6424680142ca9c5de8fe72d4c8070a66d7885c08e5f" name="device-mapper-libs-debuginfo" arch="i686">
  <version epoch="8" ver="1.02.177" rel="11.el8_5"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.12-2" date="1622548800">- Fix loading of VDO kernel module.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.12-3" date="1623758400">- Allow extending thin-pool data with writecache on top.
- Fix removing thin-pool data converted to writeache.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.12-4" date="1624363200">- Fix conversion of writecache LVs to thin pool data volume.
- Add deviceidtype option for lvmdevices.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.12-5" date="1626177600">- Fix device_id handling of scsi_debug WWID.
- Add vdoimport support.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.12-6" date="1627992000">- Fix handling of pmspare by vgsplit, vgmerge and vgremove.
- Fix detection of active components of external origin volume.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.12-7" date="1628683200">- Fix missing executable flag on vdoimport.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.12-8" date="1629979200">- Rename vdoimport to lvm_import_vdo.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.12-9" date="1631880000">- Fix various lvm_import_vdo issues.
- Fix conversion to vdo when virtual size is above 2TiB.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.12-10" date="1632139200">- Fix incorrect memory free.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.12-11" date="1645012800">- Fix multiple concurrent LV refreshes failures.</changelog>
</package>
<package pkgid="577d719f044b613831cde7ac43e6c5065ac26cc782af8182dde929d048dd1f1f" name="device-mapper-libs-debuginfo" arch="x86_64">
  <version epoch="8" ver="1.02.177" rel="11.el8_5"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.12-2" date="1622548800">- Fix loading of VDO kernel module.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.12-3" date="1623758400">- Allow extending thin-pool data with writecache on top.
- Fix removing thin-pool data converted to writeache.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.12-4" date="1624363200">- Fix conversion of writecache LVs to thin pool data volume.
- Add deviceidtype option for lvmdevices.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.12-5" date="1626177600">- Fix device_id handling of scsi_debug WWID.
- Add vdoimport support.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.12-6" date="1627992000">- Fix handling of pmspare by vgsplit, vgmerge and vgremove.
- Fix detection of active components of external origin volume.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.12-7" date="1628683200">- Fix missing executable flag on vdoimport.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.12-8" date="1629979200">- Rename vdoimport to lvm_import_vdo.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.12-9" date="1631880000">- Fix various lvm_import_vdo issues.
- Fix conversion to vdo when virtual size is above 2TiB.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.12-10" date="1632139200">- Fix incorrect memory free.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.12-11" date="1645012800">- Fix multiple concurrent LV refreshes failures.</changelog>
</package>
<package pkgid="7bd0d8622d79b4da3294a2f9ba472de967a7ee358ce9fccd010769b5523c82d5" name="device-mapper-multipath-debuginfo" arch="i686">
  <version epoch="0" ver="0.8.4" rel="17.el8_5.1"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-7" date="1611748800">- Add 0052-libmultipath-check-for-null-wwid-before-strcmp.patch
  * Missing part of fix for bz #1897815
- Add 0053-libmultipath-make-find_err_path_by_dev-static.patch
- Add 0054-multipathd-avoid-io_err_stat-crash-during-shutdown.patch
- Add 0055-multipathd-avoid-io_err_stat-ABBA-deadlock.patch
- Add 0056-multipathd-use-get_monotonic_time-in-io_err_stat-cod.patch
- Add 0057-multipathd-combine-free_io_err_stat_path-and-destroy.patch
- Add 0058-multipathd-cleanup-logging-for-marginal-paths.patch
  * The above 6 patches fix bz #1920795
- Add 0059-libmpathpersist-fix-thread-safety-of-default-functio.patch
  * Fixes bz #1913549
- Resolves: bz #1897815, #1913549, #1920795</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-9" date="1612958400">- Add 0060-kpartx-free-loop-device-after-listing-partitions.patch
  * Fixes bz #1925490
- Add 0061-RH-fix-find_multipaths-in-mpathconf.patch
  * Fixes bz #1921651
- Resolves: bz #1921651, #1925490</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-11" date="1615550400">- Add 0062-libmultipath-select_action-don-t-drop-map-if-alias-c.patch
  * Fall back to WWID names instead of removing existing device
- Add 0063-libmultipath-check-if-user_friendly_name-is-in-use.patch
  * make sure to choose a user_friendly_name that isn't in use
  * Fixes bz #1937832
- Add alias_clash CI test
- Remove unused multipath.conf
- Resolves: bz #1937832</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-12" date="1619006400">- Add 0064-libmultipath-check-udev_device_get_-return-value-to-.patch
  * Fixes bz #1946940
- Resolves: bz #1946940</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-13" date="1619611200">- Add 0065-libmultipath-cleanup-code-to-strip-wwid-trailing-spa.patch
- Add 0066-multipathd-add-recheck_wwid-option-to-verify-the-pat.patch
- Add 0067-libmultipath-avoid-infinite-loop-with-bad-vpd-page-8.patch
- Add 0068-libmultipath-fix-priorities-in-parse_vpd_pg83.patch
- Add 0069-RH-make-parse_vpd_pg83-match-scsi_id-output.patch
- Add 0070-multipathd-improve-getting-parent-udevice-in-rescan_.patch
- Add 0071-multipathd-don-t-trigger-uevent-for-partitions-on-ww.patch
  * add recheck_wwid option
  * Fixes bz #1907904
- Resolves: bz #1907904</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-14" date="1626091200">- Add 0072-RH-mpathconf-correctly-handle-spaces-after-option-na.patch
- Resolves: bz #1979470</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-15" date="1626955200">- Add 0073-multipath.conf-fix-typo-in-checker_timeout-descripti.patch
- Resolves: bz #1982598</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-16" date="1626955201">- Add missing patch
- Related: bz #1982598</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-17" date="1627041600">- Add 0074-mpathpersist-fail-commands-when-no-usable-paths-exis.patch
  * Fixes bz #1984723
- Add 0075-multipath-print-warning-if-multipathd-is-not-running.patch
  * Fixes bz #1973592
- Add 0076-multipathd-don-t-access-path-if-it-was-deleted.patch
  * Found by coverity
- Resolves: bz #1973592, #1984723</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-17.1" date="1645099200">- Add 0077-multipathd.socket-add-missing-conditions-from-servic.patch
- Resolves: bz #2054877</changelog>
</package>
<package pkgid="f0317c707f2ac00c3f8f9166f75870c7fbd8bb5fb471edd990c5fcf03c128a4c" name="device-mapper-multipath-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.8.4" rel="17.el8_5.1"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-7" date="1611748800">- Add 0052-libmultipath-check-for-null-wwid-before-strcmp.patch
  * Missing part of fix for bz #1897815
- Add 0053-libmultipath-make-find_err_path_by_dev-static.patch
- Add 0054-multipathd-avoid-io_err_stat-crash-during-shutdown.patch
- Add 0055-multipathd-avoid-io_err_stat-ABBA-deadlock.patch
- Add 0056-multipathd-use-get_monotonic_time-in-io_err_stat-cod.patch
- Add 0057-multipathd-combine-free_io_err_stat_path-and-destroy.patch
- Add 0058-multipathd-cleanup-logging-for-marginal-paths.patch
  * The above 6 patches fix bz #1920795
- Add 0059-libmpathpersist-fix-thread-safety-of-default-functio.patch
  * Fixes bz #1913549
- Resolves: bz #1897815, #1913549, #1920795</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-9" date="1612958400">- Add 0060-kpartx-free-loop-device-after-listing-partitions.patch
  * Fixes bz #1925490
- Add 0061-RH-fix-find_multipaths-in-mpathconf.patch
  * Fixes bz #1921651
- Resolves: bz #1921651, #1925490</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-11" date="1615550400">- Add 0062-libmultipath-select_action-don-t-drop-map-if-alias-c.patch
  * Fall back to WWID names instead of removing existing device
- Add 0063-libmultipath-check-if-user_friendly_name-is-in-use.patch
  * make sure to choose a user_friendly_name that isn't in use
  * Fixes bz #1937832
- Add alias_clash CI test
- Remove unused multipath.conf
- Resolves: bz #1937832</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-12" date="1619006400">- Add 0064-libmultipath-check-udev_device_get_-return-value-to-.patch
  * Fixes bz #1946940
- Resolves: bz #1946940</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-13" date="1619611200">- Add 0065-libmultipath-cleanup-code-to-strip-wwid-trailing-spa.patch
- Add 0066-multipathd-add-recheck_wwid-option-to-verify-the-pat.patch
- Add 0067-libmultipath-avoid-infinite-loop-with-bad-vpd-page-8.patch
- Add 0068-libmultipath-fix-priorities-in-parse_vpd_pg83.patch
- Add 0069-RH-make-parse_vpd_pg83-match-scsi_id-output.patch
- Add 0070-multipathd-improve-getting-parent-udevice-in-rescan_.patch
- Add 0071-multipathd-don-t-trigger-uevent-for-partitions-on-ww.patch
  * add recheck_wwid option
  * Fixes bz #1907904
- Resolves: bz #1907904</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-14" date="1626091200">- Add 0072-RH-mpathconf-correctly-handle-spaces-after-option-na.patch
- Resolves: bz #1979470</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-15" date="1626955200">- Add 0073-multipath.conf-fix-typo-in-checker_timeout-descripti.patch
- Resolves: bz #1982598</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-16" date="1626955201">- Add missing patch
- Related: bz #1982598</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-17" date="1627041600">- Add 0074-mpathpersist-fail-commands-when-no-usable-paths-exis.patch
  * Fixes bz #1984723
- Add 0075-multipath-print-warning-if-multipathd-is-not-running.patch
  * Fixes bz #1973592
- Add 0076-multipathd-don-t-access-path-if-it-was-deleted.patch
  * Found by coverity
- Resolves: bz #1973592, #1984723</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-17.1" date="1645099200">- Add 0077-multipathd.socket-add-missing-conditions-from-servic.patch
- Resolves: bz #2054877</changelog>
</package>
<package pkgid="5c5936c88e58c827d7ebd2e3113e306344c717de9ba3af2cf8f718196f3066a6" name="device-mapper-multipath-debugsource" arch="i686">
  <version epoch="0" ver="0.8.4" rel="17.el8_5.1"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-7" date="1611748800">- Add 0052-libmultipath-check-for-null-wwid-before-strcmp.patch
  * Missing part of fix for bz #1897815
- Add 0053-libmultipath-make-find_err_path_by_dev-static.patch
- Add 0054-multipathd-avoid-io_err_stat-crash-during-shutdown.patch
- Add 0055-multipathd-avoid-io_err_stat-ABBA-deadlock.patch
- Add 0056-multipathd-use-get_monotonic_time-in-io_err_stat-cod.patch
- Add 0057-multipathd-combine-free_io_err_stat_path-and-destroy.patch
- Add 0058-multipathd-cleanup-logging-for-marginal-paths.patch
  * The above 6 patches fix bz #1920795
- Add 0059-libmpathpersist-fix-thread-safety-of-default-functio.patch
  * Fixes bz #1913549
- Resolves: bz #1897815, #1913549, #1920795</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-9" date="1612958400">- Add 0060-kpartx-free-loop-device-after-listing-partitions.patch
  * Fixes bz #1925490
- Add 0061-RH-fix-find_multipaths-in-mpathconf.patch
  * Fixes bz #1921651
- Resolves: bz #1921651, #1925490</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-11" date="1615550400">- Add 0062-libmultipath-select_action-don-t-drop-map-if-alias-c.patch
  * Fall back to WWID names instead of removing existing device
- Add 0063-libmultipath-check-if-user_friendly_name-is-in-use.patch
  * make sure to choose a user_friendly_name that isn't in use
  * Fixes bz #1937832
- Add alias_clash CI test
- Remove unused multipath.conf
- Resolves: bz #1937832</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-12" date="1619006400">- Add 0064-libmultipath-check-udev_device_get_-return-value-to-.patch
  * Fixes bz #1946940
- Resolves: bz #1946940</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-13" date="1619611200">- Add 0065-libmultipath-cleanup-code-to-strip-wwid-trailing-spa.patch
- Add 0066-multipathd-add-recheck_wwid-option-to-verify-the-pat.patch
- Add 0067-libmultipath-avoid-infinite-loop-with-bad-vpd-page-8.patch
- Add 0068-libmultipath-fix-priorities-in-parse_vpd_pg83.patch
- Add 0069-RH-make-parse_vpd_pg83-match-scsi_id-output.patch
- Add 0070-multipathd-improve-getting-parent-udevice-in-rescan_.patch
- Add 0071-multipathd-don-t-trigger-uevent-for-partitions-on-ww.patch
  * add recheck_wwid option
  * Fixes bz #1907904
- Resolves: bz #1907904</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-14" date="1626091200">- Add 0072-RH-mpathconf-correctly-handle-spaces-after-option-na.patch
- Resolves: bz #1979470</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-15" date="1626955200">- Add 0073-multipath.conf-fix-typo-in-checker_timeout-descripti.patch
- Resolves: bz #1982598</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-16" date="1626955201">- Add missing patch
- Related: bz #1982598</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-17" date="1627041600">- Add 0074-mpathpersist-fail-commands-when-no-usable-paths-exis.patch
  * Fixes bz #1984723
- Add 0075-multipath-print-warning-if-multipathd-is-not-running.patch
  * Fixes bz #1973592
- Add 0076-multipathd-don-t-access-path-if-it-was-deleted.patch
  * Found by coverity
- Resolves: bz #1973592, #1984723</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-17.1" date="1645099200">- Add 0077-multipathd.socket-add-missing-conditions-from-servic.patch
- Resolves: bz #2054877</changelog>
</package>
<package pkgid="65d4ec5ea71932ccfb78c16736c00bab569be87773232ebff1c266b0e71ce773" name="device-mapper-multipath-debugsource" arch="x86_64">
  <version epoch="0" ver="0.8.4" rel="17.el8_5.1"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-7" date="1611748800">- Add 0052-libmultipath-check-for-null-wwid-before-strcmp.patch
  * Missing part of fix for bz #1897815
- Add 0053-libmultipath-make-find_err_path_by_dev-static.patch
- Add 0054-multipathd-avoid-io_err_stat-crash-during-shutdown.patch
- Add 0055-multipathd-avoid-io_err_stat-ABBA-deadlock.patch
- Add 0056-multipathd-use-get_monotonic_time-in-io_err_stat-cod.patch
- Add 0057-multipathd-combine-free_io_err_stat_path-and-destroy.patch
- Add 0058-multipathd-cleanup-logging-for-marginal-paths.patch
  * The above 6 patches fix bz #1920795
- Add 0059-libmpathpersist-fix-thread-safety-of-default-functio.patch
  * Fixes bz #1913549
- Resolves: bz #1897815, #1913549, #1920795</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-9" date="1612958400">- Add 0060-kpartx-free-loop-device-after-listing-partitions.patch
  * Fixes bz #1925490
- Add 0061-RH-fix-find_multipaths-in-mpathconf.patch
  * Fixes bz #1921651
- Resolves: bz #1921651, #1925490</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-11" date="1615550400">- Add 0062-libmultipath-select_action-don-t-drop-map-if-alias-c.patch
  * Fall back to WWID names instead of removing existing device
- Add 0063-libmultipath-check-if-user_friendly_name-is-in-use.patch
  * make sure to choose a user_friendly_name that isn't in use
  * Fixes bz #1937832
- Add alias_clash CI test
- Remove unused multipath.conf
- Resolves: bz #1937832</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-12" date="1619006400">- Add 0064-libmultipath-check-udev_device_get_-return-value-to-.patch
  * Fixes bz #1946940
- Resolves: bz #1946940</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-13" date="1619611200">- Add 0065-libmultipath-cleanup-code-to-strip-wwid-trailing-spa.patch
- Add 0066-multipathd-add-recheck_wwid-option-to-verify-the-pat.patch
- Add 0067-libmultipath-avoid-infinite-loop-with-bad-vpd-page-8.patch
- Add 0068-libmultipath-fix-priorities-in-parse_vpd_pg83.patch
- Add 0069-RH-make-parse_vpd_pg83-match-scsi_id-output.patch
- Add 0070-multipathd-improve-getting-parent-udevice-in-rescan_.patch
- Add 0071-multipathd-don-t-trigger-uevent-for-partitions-on-ww.patch
  * add recheck_wwid option
  * Fixes bz #1907904
- Resolves: bz #1907904</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-14" date="1626091200">- Add 0072-RH-mpathconf-correctly-handle-spaces-after-option-na.patch
- Resolves: bz #1979470</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-15" date="1626955200">- Add 0073-multipath.conf-fix-typo-in-checker_timeout-descripti.patch
- Resolves: bz #1982598</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-16" date="1626955201">- Add missing patch
- Related: bz #1982598</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-17" date="1627041600">- Add 0074-mpathpersist-fail-commands-when-no-usable-paths-exis.patch
  * Fixes bz #1984723
- Add 0075-multipath-print-warning-if-multipathd-is-not-running.patch
  * Fixes bz #1973592
- Add 0076-multipathd-don-t-access-path-if-it-was-deleted.patch
  * Found by coverity
- Resolves: bz #1973592, #1984723</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-17.1" date="1645099200">- Add 0077-multipathd.socket-add-missing-conditions-from-servic.patch
- Resolves: bz #2054877</changelog>
</package>
<package pkgid="9bc0abbb61f40f03653219437ec6b98ca84ec4f188f0d6c126bebc9125971d9c" name="device-mapper-multipath-libs-debuginfo" arch="i686">
  <version epoch="0" ver="0.8.4" rel="17.el8_5.1"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-7" date="1611748800">- Add 0052-libmultipath-check-for-null-wwid-before-strcmp.patch
  * Missing part of fix for bz #1897815
- Add 0053-libmultipath-make-find_err_path_by_dev-static.patch
- Add 0054-multipathd-avoid-io_err_stat-crash-during-shutdown.patch
- Add 0055-multipathd-avoid-io_err_stat-ABBA-deadlock.patch
- Add 0056-multipathd-use-get_monotonic_time-in-io_err_stat-cod.patch
- Add 0057-multipathd-combine-free_io_err_stat_path-and-destroy.patch
- Add 0058-multipathd-cleanup-logging-for-marginal-paths.patch
  * The above 6 patches fix bz #1920795
- Add 0059-libmpathpersist-fix-thread-safety-of-default-functio.patch
  * Fixes bz #1913549
- Resolves: bz #1897815, #1913549, #1920795</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-9" date="1612958400">- Add 0060-kpartx-free-loop-device-after-listing-partitions.patch
  * Fixes bz #1925490
- Add 0061-RH-fix-find_multipaths-in-mpathconf.patch
  * Fixes bz #1921651
- Resolves: bz #1921651, #1925490</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-11" date="1615550400">- Add 0062-libmultipath-select_action-don-t-drop-map-if-alias-c.patch
  * Fall back to WWID names instead of removing existing device
- Add 0063-libmultipath-check-if-user_friendly_name-is-in-use.patch
  * make sure to choose a user_friendly_name that isn't in use
  * Fixes bz #1937832
- Add alias_clash CI test
- Remove unused multipath.conf
- Resolves: bz #1937832</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-12" date="1619006400">- Add 0064-libmultipath-check-udev_device_get_-return-value-to-.patch
  * Fixes bz #1946940
- Resolves: bz #1946940</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-13" date="1619611200">- Add 0065-libmultipath-cleanup-code-to-strip-wwid-trailing-spa.patch
- Add 0066-multipathd-add-recheck_wwid-option-to-verify-the-pat.patch
- Add 0067-libmultipath-avoid-infinite-loop-with-bad-vpd-page-8.patch
- Add 0068-libmultipath-fix-priorities-in-parse_vpd_pg83.patch
- Add 0069-RH-make-parse_vpd_pg83-match-scsi_id-output.patch
- Add 0070-multipathd-improve-getting-parent-udevice-in-rescan_.patch
- Add 0071-multipathd-don-t-trigger-uevent-for-partitions-on-ww.patch
  * add recheck_wwid option
  * Fixes bz #1907904
- Resolves: bz #1907904</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-14" date="1626091200">- Add 0072-RH-mpathconf-correctly-handle-spaces-after-option-na.patch
- Resolves: bz #1979470</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-15" date="1626955200">- Add 0073-multipath.conf-fix-typo-in-checker_timeout-descripti.patch
- Resolves: bz #1982598</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-16" date="1626955201">- Add missing patch
- Related: bz #1982598</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-17" date="1627041600">- Add 0074-mpathpersist-fail-commands-when-no-usable-paths-exis.patch
  * Fixes bz #1984723
- Add 0075-multipath-print-warning-if-multipathd-is-not-running.patch
  * Fixes bz #1973592
- Add 0076-multipathd-don-t-access-path-if-it-was-deleted.patch
  * Found by coverity
- Resolves: bz #1973592, #1984723</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-17.1" date="1645099200">- Add 0077-multipathd.socket-add-missing-conditions-from-servic.patch
- Resolves: bz #2054877</changelog>
</package>
<package pkgid="9b5648e8188295e24301ea987e53b021e4acd9dd601f6a1e05f928711cccc707" name="device-mapper-multipath-libs-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.8.4" rel="17.el8_5.1"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-7" date="1611748800">- Add 0052-libmultipath-check-for-null-wwid-before-strcmp.patch
  * Missing part of fix for bz #1897815
- Add 0053-libmultipath-make-find_err_path_by_dev-static.patch
- Add 0054-multipathd-avoid-io_err_stat-crash-during-shutdown.patch
- Add 0055-multipathd-avoid-io_err_stat-ABBA-deadlock.patch
- Add 0056-multipathd-use-get_monotonic_time-in-io_err_stat-cod.patch
- Add 0057-multipathd-combine-free_io_err_stat_path-and-destroy.patch
- Add 0058-multipathd-cleanup-logging-for-marginal-paths.patch
  * The above 6 patches fix bz #1920795
- Add 0059-libmpathpersist-fix-thread-safety-of-default-functio.patch
  * Fixes bz #1913549
- Resolves: bz #1897815, #1913549, #1920795</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-9" date="1612958400">- Add 0060-kpartx-free-loop-device-after-listing-partitions.patch
  * Fixes bz #1925490
- Add 0061-RH-fix-find_multipaths-in-mpathconf.patch
  * Fixes bz #1921651
- Resolves: bz #1921651, #1925490</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-11" date="1615550400">- Add 0062-libmultipath-select_action-don-t-drop-map-if-alias-c.patch
  * Fall back to WWID names instead of removing existing device
- Add 0063-libmultipath-check-if-user_friendly_name-is-in-use.patch
  * make sure to choose a user_friendly_name that isn't in use
  * Fixes bz #1937832
- Add alias_clash CI test
- Remove unused multipath.conf
- Resolves: bz #1937832</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-12" date="1619006400">- Add 0064-libmultipath-check-udev_device_get_-return-value-to-.patch
  * Fixes bz #1946940
- Resolves: bz #1946940</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-13" date="1619611200">- Add 0065-libmultipath-cleanup-code-to-strip-wwid-trailing-spa.patch
- Add 0066-multipathd-add-recheck_wwid-option-to-verify-the-pat.patch
- Add 0067-libmultipath-avoid-infinite-loop-with-bad-vpd-page-8.patch
- Add 0068-libmultipath-fix-priorities-in-parse_vpd_pg83.patch
- Add 0069-RH-make-parse_vpd_pg83-match-scsi_id-output.patch
- Add 0070-multipathd-improve-getting-parent-udevice-in-rescan_.patch
- Add 0071-multipathd-don-t-trigger-uevent-for-partitions-on-ww.patch
  * add recheck_wwid option
  * Fixes bz #1907904
- Resolves: bz #1907904</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-14" date="1626091200">- Add 0072-RH-mpathconf-correctly-handle-spaces-after-option-na.patch
- Resolves: bz #1979470</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-15" date="1626955200">- Add 0073-multipath.conf-fix-typo-in-checker_timeout-descripti.patch
- Resolves: bz #1982598</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-16" date="1626955201">- Add missing patch
- Related: bz #1982598</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-17" date="1627041600">- Add 0074-mpathpersist-fail-commands-when-no-usable-paths-exis.patch
  * Fixes bz #1984723
- Add 0075-multipath-print-warning-if-multipathd-is-not-running.patch
  * Fixes bz #1973592
- Add 0076-multipathd-don-t-access-path-if-it-was-deleted.patch
  * Found by coverity
- Resolves: bz #1973592, #1984723</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-17.1" date="1645099200">- Add 0077-multipathd.socket-add-missing-conditions-from-servic.patch
- Resolves: bz #2054877</changelog>
</package>
<package pkgid="c4fbdc09ccaba8bde6a3bd3576242ffc56a7c9d1ded84e27d5ecb7c3e17c7f36" name="expat-debuginfo" arch="i686">
  <version epoch="0" ver="2.2.5" rel="4.el8_5.3"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.2.2-4" date="1501675200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.2.3-1" date="1501848000">- fix tests with unsigned char (upstream PR 109)
- update to 2.2.3 (#1473266)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.2.4-1" date="1503316800">- update to 2.2.4 (#1483359)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.2.5-1" date="1509624000">- update to 2.2.5 (#1508667)</changelog>
  <changelog author="Igor Gnatenko &lt;ignatenkobrain@fedoraproject.org&gt; - 2.2.5-2" date="1517659200">- Switch to %ldconfig_scriptlets</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.2.5-3" date="1518004800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.2.5-4" date="1587729600">- add security fixes for CVE-2018-20843, CVE-2019-15903</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.2.5-4.1" date="1645012800">- Fix multiple CVEs
- CVE-2022-23852 expat: integer overflow in function XML_GetBuffer
- CVE-2021-45960 expat: Large number of prefixed XML attributes on a single tag can crash libexpat
- CVE-2021-46143 expat: Integer overflow in doProlog in xmlparse.c
- CVE-2022-22827 Integer overflow in storeAtts in xmlparse.c
- CVE-2022-22826 Integer overflow in nextScaffoldPart in xmlparse.c
- CVE-2022-22825 Integer overflow in lookup in xmlparse.c
- CVE-2022-22824 Integer overflow in defineAttribute in xmlparse.c
- CVE-2022-22823 Integer overflow in build_model in xmlparse.c
- CVE-2022-22822 Integer overflow in addBinding in xmlparse.c
- Resolves: CVE-2022-23852
- Resolves: CVE-2021-45960
- Resolves: CVE-2021-46143
- Resolves: CVE-2022-22827
- Resolves: CVE-2022-22826
- Resolves: CVE-2022-22825
- Resolves: CVE-2022-22824
- Resolves: CVE-2022-22823
- Resolves: CVE-2022-22822</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.2.5-4.2" date="1646654400">- Fix multiple CVEs
- Resolves: CVE-2022-25236
- Resolves: CVE-2022-25235
- Resolves: CVE-2022-25315</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.2.5-4.3" date="1647345600">- Improve fix for CVE-2022-25236
- Related: CVE-2022-25236</changelog>
</package>
<package pkgid="f0397d40e65a4ea7e394490a2e6930d1b91829c4a69bcffea9ca0988890cacb0" name="expat-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.2.5" rel="4.el8_5.3"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.2.2-4" date="1501675200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.2.3-1" date="1501848000">- fix tests with unsigned char (upstream PR 109)
- update to 2.2.3 (#1473266)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.2.4-1" date="1503316800">- update to 2.2.4 (#1483359)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.2.5-1" date="1509624000">- update to 2.2.5 (#1508667)</changelog>
  <changelog author="Igor Gnatenko &lt;ignatenkobrain@fedoraproject.org&gt; - 2.2.5-2" date="1517659200">- Switch to %ldconfig_scriptlets</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.2.5-3" date="1518004800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.2.5-4" date="1587729600">- add security fixes for CVE-2018-20843, CVE-2019-15903</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.2.5-4.1" date="1645012800">- Fix multiple CVEs
- CVE-2022-23852 expat: integer overflow in function XML_GetBuffer
- CVE-2021-45960 expat: Large number of prefixed XML attributes on a single tag can crash libexpat
- CVE-2021-46143 expat: Integer overflow in doProlog in xmlparse.c
- CVE-2022-22827 Integer overflow in storeAtts in xmlparse.c
- CVE-2022-22826 Integer overflow in nextScaffoldPart in xmlparse.c
- CVE-2022-22825 Integer overflow in lookup in xmlparse.c
- CVE-2022-22824 Integer overflow in defineAttribute in xmlparse.c
- CVE-2022-22823 Integer overflow in build_model in xmlparse.c
- CVE-2022-22822 Integer overflow in addBinding in xmlparse.c
- Resolves: CVE-2022-23852
- Resolves: CVE-2021-45960
- Resolves: CVE-2021-46143
- Resolves: CVE-2022-22827
- Resolves: CVE-2022-22826
- Resolves: CVE-2022-22825
- Resolves: CVE-2022-22824
- Resolves: CVE-2022-22823
- Resolves: CVE-2022-22822</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.2.5-4.2" date="1646654400">- Fix multiple CVEs
- Resolves: CVE-2022-25236
- Resolves: CVE-2022-25235
- Resolves: CVE-2022-25315</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.2.5-4.3" date="1647345600">- Improve fix for CVE-2022-25236
- Related: CVE-2022-25236</changelog>
</package>
<package pkgid="c1dc3cb9570b83ff191623721136ae8ba70d6eff6e79fafceaa7677ed4b78c2c" name="expat-debugsource" arch="i686">
  <version epoch="0" ver="2.2.5" rel="4.el8_5.3"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.2.2-4" date="1501675200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.2.3-1" date="1501848000">- fix tests with unsigned char (upstream PR 109)
- update to 2.2.3 (#1473266)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.2.4-1" date="1503316800">- update to 2.2.4 (#1483359)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.2.5-1" date="1509624000">- update to 2.2.5 (#1508667)</changelog>
  <changelog author="Igor Gnatenko &lt;ignatenkobrain@fedoraproject.org&gt; - 2.2.5-2" date="1517659200">- Switch to %ldconfig_scriptlets</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.2.5-3" date="1518004800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.2.5-4" date="1587729600">- add security fixes for CVE-2018-20843, CVE-2019-15903</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.2.5-4.1" date="1645012800">- Fix multiple CVEs
- CVE-2022-23852 expat: integer overflow in function XML_GetBuffer
- CVE-2021-45960 expat: Large number of prefixed XML attributes on a single tag can crash libexpat
- CVE-2021-46143 expat: Integer overflow in doProlog in xmlparse.c
- CVE-2022-22827 Integer overflow in storeAtts in xmlparse.c
- CVE-2022-22826 Integer overflow in nextScaffoldPart in xmlparse.c
- CVE-2022-22825 Integer overflow in lookup in xmlparse.c
- CVE-2022-22824 Integer overflow in defineAttribute in xmlparse.c
- CVE-2022-22823 Integer overflow in build_model in xmlparse.c
- CVE-2022-22822 Integer overflow in addBinding in xmlparse.c
- Resolves: CVE-2022-23852
- Resolves: CVE-2021-45960
- Resolves: CVE-2021-46143
- Resolves: CVE-2022-22827
- Resolves: CVE-2022-22826
- Resolves: CVE-2022-22825
- Resolves: CVE-2022-22824
- Resolves: CVE-2022-22823
- Resolves: CVE-2022-22822</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.2.5-4.2" date="1646654400">- Fix multiple CVEs
- Resolves: CVE-2022-25236
- Resolves: CVE-2022-25235
- Resolves: CVE-2022-25315</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.2.5-4.3" date="1647345600">- Improve fix for CVE-2022-25236
- Related: CVE-2022-25236</changelog>
</package>
<package pkgid="c64fe4170c7f0a264af13763b3ce23528b5ebc09cbf0e4c487c13a7e895759b2" name="expat-debugsource" arch="x86_64">
  <version epoch="0" ver="2.2.5" rel="4.el8_5.3"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.2.2-4" date="1501675200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.2.3-1" date="1501848000">- fix tests with unsigned char (upstream PR 109)
- update to 2.2.3 (#1473266)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.2.4-1" date="1503316800">- update to 2.2.4 (#1483359)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.2.5-1" date="1509624000">- update to 2.2.5 (#1508667)</changelog>
  <changelog author="Igor Gnatenko &lt;ignatenkobrain@fedoraproject.org&gt; - 2.2.5-2" date="1517659200">- Switch to %ldconfig_scriptlets</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.2.5-3" date="1518004800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.2.5-4" date="1587729600">- add security fixes for CVE-2018-20843, CVE-2019-15903</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.2.5-4.1" date="1645012800">- Fix multiple CVEs
- CVE-2022-23852 expat: integer overflow in function XML_GetBuffer
- CVE-2021-45960 expat: Large number of prefixed XML attributes on a single tag can crash libexpat
- CVE-2021-46143 expat: Integer overflow in doProlog in xmlparse.c
- CVE-2022-22827 Integer overflow in storeAtts in xmlparse.c
- CVE-2022-22826 Integer overflow in nextScaffoldPart in xmlparse.c
- CVE-2022-22825 Integer overflow in lookup in xmlparse.c
- CVE-2022-22824 Integer overflow in defineAttribute in xmlparse.c
- CVE-2022-22823 Integer overflow in build_model in xmlparse.c
- CVE-2022-22822 Integer overflow in addBinding in xmlparse.c
- Resolves: CVE-2022-23852
- Resolves: CVE-2021-45960
- Resolves: CVE-2021-46143
- Resolves: CVE-2022-22827
- Resolves: CVE-2022-22826
- Resolves: CVE-2022-22825
- Resolves: CVE-2022-22824
- Resolves: CVE-2022-22823
- Resolves: CVE-2022-22822</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.2.5-4.2" date="1646654400">- Fix multiple CVEs
- Resolves: CVE-2022-25236
- Resolves: CVE-2022-25235
- Resolves: CVE-2022-25315</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.2.5-4.3" date="1647345600">- Improve fix for CVE-2022-25236
- Related: CVE-2022-25236</changelog>
</package>
<package pkgid="4b4b1b87abcb3b886a65142814b2e46de4e1570926a12e3a4162daf7ec2ca1d2" name="gcc-debuginfo" arch="i686">
  <version epoch="0" ver="8.5.0" rel="4.el8_5"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.3.1-5.2" date="1594814400">- backport aarch64 LSE atomics (#1821994)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.4.1-1" date="1601380800">- update from GCC 8.4 release (#1868446)
- remove symlinks to 32-bit versions of these static libraries: libasan.a,
  libitm.a, libquadmath.a, libubsan.a, libgfortran.a (#1779597)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.4.1-1.1" date="1617969600">- fix bad use of VMAT_CONTIGUOUS (PR tree-optimization/97236, #1925632)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.4.1-1.2" date="1617969601">- back out the PR97236 patch</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.4.1-2" date="1619179200">- update from GCC 8.4 release (#1946758)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.4.1-2.1" date="1619438400">- remove support for demangling GCC 2.x era mangling schemes (#1668394)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-1" date="1620993600">- update from GCC 8.5 release (#1946758)
- this includes a fix for PR target/87839 (#1958295)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-2" date="1622548800">- revert upstream PR85873 gcc-8 fix, apply the fix from gcc-9 (#1960701)
- fix 'this' adjustment for devirtualized call (PR c++/100797, #1965951)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-3" date="1626177600">- fix mangling of lambdas in default args (PR c++/91241, #1981822)
- add a few Provides: bundled</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-4" date="1635508800">- add -Wbidirectional patch (#2008391)</changelog>
</package>
<package pkgid="5decf87f396e8f46be9404d91dc0b4f2133287efbcddd631622dac27ff9b6b25" name="gcc-debuginfo" arch="x86_64">
  <version epoch="0" ver="8.5.0" rel="4.el8_5"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.3.1-5.2" date="1594814400">- backport aarch64 LSE atomics (#1821994)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.4.1-1" date="1601380800">- update from GCC 8.4 release (#1868446)
- remove symlinks to 32-bit versions of these static libraries: libasan.a,
  libitm.a, libquadmath.a, libubsan.a, libgfortran.a (#1779597)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.4.1-1.1" date="1617969600">- fix bad use of VMAT_CONTIGUOUS (PR tree-optimization/97236, #1925632)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.4.1-1.2" date="1617969601">- back out the PR97236 patch</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.4.1-2" date="1619179200">- update from GCC 8.4 release (#1946758)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.4.1-2.1" date="1619438400">- remove support for demangling GCC 2.x era mangling schemes (#1668394)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-1" date="1620993600">- update from GCC 8.5 release (#1946758)
- this includes a fix for PR target/87839 (#1958295)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-2" date="1622548800">- revert upstream PR85873 gcc-8 fix, apply the fix from gcc-9 (#1960701)
- fix 'this' adjustment for devirtualized call (PR c++/100797, #1965951)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-3" date="1626177600">- fix mangling of lambdas in default args (PR c++/91241, #1981822)
- add a few Provides: bundled</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-4" date="1635508800">- add -Wbidirectional patch (#2008391)</changelog>
</package>
<package pkgid="f96e752ad0c4025f00370129254580a4a3ddcd78e0bf86bcfa8ef9d94cbb636f" name="gcc-debugsource" arch="i686">
  <version epoch="0" ver="8.5.0" rel="4.el8_5"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.3.1-5.2" date="1594814400">- backport aarch64 LSE atomics (#1821994)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.4.1-1" date="1601380800">- update from GCC 8.4 release (#1868446)
- remove symlinks to 32-bit versions of these static libraries: libasan.a,
  libitm.a, libquadmath.a, libubsan.a, libgfortran.a (#1779597)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.4.1-1.1" date="1617969600">- fix bad use of VMAT_CONTIGUOUS (PR tree-optimization/97236, #1925632)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.4.1-1.2" date="1617969601">- back out the PR97236 patch</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.4.1-2" date="1619179200">- update from GCC 8.4 release (#1946758)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.4.1-2.1" date="1619438400">- remove support for demangling GCC 2.x era mangling schemes (#1668394)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-1" date="1620993600">- update from GCC 8.5 release (#1946758)
- this includes a fix for PR target/87839 (#1958295)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-2" date="1622548800">- revert upstream PR85873 gcc-8 fix, apply the fix from gcc-9 (#1960701)
- fix 'this' adjustment for devirtualized call (PR c++/100797, #1965951)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-3" date="1626177600">- fix mangling of lambdas in default args (PR c++/91241, #1981822)
- add a few Provides: bundled</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-4" date="1635508800">- add -Wbidirectional patch (#2008391)</changelog>
</package>
<package pkgid="b53dceb8e7e7bc50513338dcfdb533a4f896071bdbf2fcb1f4a4af8a807da692" name="gcc-debugsource" arch="x86_64">
  <version epoch="0" ver="8.5.0" rel="4.el8_5"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.3.1-5.2" date="1594814400">- backport aarch64 LSE atomics (#1821994)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.4.1-1" date="1601380800">- update from GCC 8.4 release (#1868446)
- remove symlinks to 32-bit versions of these static libraries: libasan.a,
  libitm.a, libquadmath.a, libubsan.a, libgfortran.a (#1779597)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.4.1-1.1" date="1617969600">- fix bad use of VMAT_CONTIGUOUS (PR tree-optimization/97236, #1925632)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.4.1-1.2" date="1617969601">- back out the PR97236 patch</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.4.1-2" date="1619179200">- update from GCC 8.4 release (#1946758)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.4.1-2.1" date="1619438400">- remove support for demangling GCC 2.x era mangling schemes (#1668394)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-1" date="1620993600">- update from GCC 8.5 release (#1946758)
- this includes a fix for PR target/87839 (#1958295)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-2" date="1622548800">- revert upstream PR85873 gcc-8 fix, apply the fix from gcc-9 (#1960701)
- fix 'this' adjustment for devirtualized call (PR c++/100797, #1965951)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-3" date="1626177600">- fix mangling of lambdas in default args (PR c++/91241, #1981822)
- add a few Provides: bundled</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-4" date="1635508800">- add -Wbidirectional patch (#2008391)</changelog>
</package>
<package pkgid="43990535c588d82ccee2014472ba57ab0c61384bd2e825c0e7da2d4aea053dfc" name="glibc-debuginfo" arch="i686">
  <version epoch="0" ver="2.28" rel="164.el8_5.3"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.28-158" date="1619092800">- Rebuild with new binutils (#1946518)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.28-159" date="1622116800">- Backport additional ifunc optimizations for ppc64le (#1956357)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.28-160" date="1622462400">- Backport POWER10 optimized rawmemchr for ppc64le (#1956357)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.28-161" date="1624017600">- Improve POWER10 performance with POWER9 fallbacks (#1956357)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.28-162" date="1625745600">- CVE-2021-35942: wordexp: handle overflow in positional parameter number
  (#1979127)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.28-163" date="1628510400">- CVE-2021-33574: Deep copy pthread attribute in mq_notify (#1966472)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.28-164" date="1628510401">- librt: fix NULL pointer dereference (#1966472).</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.28-164.1" date="1643025600">- CVE-2021-3999: getcwd: Set errno to ERANGE for size == 1 (#2032280)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.28-164.2" date="1643198400">- CVE-2022-23218, CVE-2022-23219: Fix buffer overflows in sunrpc clnt_create
  for "unix" and svcunix_create (#2045062).</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.28-164.3" date="1643284800">- CVE-2021-3999: getcwd: align stack on clone in aarch64 and fix a memory leak
  (#2032280)</changelog>
</package>
<package pkgid="715abeff505231f56011d92d1c88d2e3e5f5bbd65ea92858efa559fe455633e4" name="glibc-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.28" rel="164.el8_5.3"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.28-158" date="1619092800">- Rebuild with new binutils (#1946518)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.28-159" date="1622116800">- Backport additional ifunc optimizations for ppc64le (#1956357)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.28-160" date="1622462400">- Backport POWER10 optimized rawmemchr for ppc64le (#1956357)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.28-161" date="1624017600">- Improve POWER10 performance with POWER9 fallbacks (#1956357)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.28-162" date="1625745600">- CVE-2021-35942: wordexp: handle overflow in positional parameter number
  (#1979127)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.28-163" date="1628510400">- CVE-2021-33574: Deep copy pthread attribute in mq_notify (#1966472)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.28-164" date="1628510401">- librt: fix NULL pointer dereference (#1966472).</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.28-164.1" date="1643025600">- CVE-2021-3999: getcwd: Set errno to ERANGE for size == 1 (#2032280)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.28-164.2" date="1643198400">- CVE-2022-23218, CVE-2022-23219: Fix buffer overflows in sunrpc clnt_create
  for "unix" and svcunix_create (#2045062).</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.28-164.3" date="1643284800">- CVE-2021-3999: getcwd: align stack on clone in aarch64 and fix a memory leak
  (#2032280)</changelog>
</package>
<package pkgid="cef597cef9de7f4af9f6a574280a086813f5180dcb715b7a1c7a2af99bcf1db9" name="glibc-debuginfo-common" arch="i686">
  <version epoch="0" ver="2.28" rel="164.el8_5.3"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.28-158" date="1619092800">- Rebuild with new binutils (#1946518)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.28-159" date="1622116800">- Backport additional ifunc optimizations for ppc64le (#1956357)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.28-160" date="1622462400">- Backport POWER10 optimized rawmemchr for ppc64le (#1956357)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.28-161" date="1624017600">- Improve POWER10 performance with POWER9 fallbacks (#1956357)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.28-162" date="1625745600">- CVE-2021-35942: wordexp: handle overflow in positional parameter number
  (#1979127)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.28-163" date="1628510400">- CVE-2021-33574: Deep copy pthread attribute in mq_notify (#1966472)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.28-164" date="1628510401">- librt: fix NULL pointer dereference (#1966472).</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.28-164.1" date="1643025600">- CVE-2021-3999: getcwd: Set errno to ERANGE for size == 1 (#2032280)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.28-164.2" date="1643198400">- CVE-2022-23218, CVE-2022-23219: Fix buffer overflows in sunrpc clnt_create
  for "unix" and svcunix_create (#2045062).</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.28-164.3" date="1643284800">- CVE-2021-3999: getcwd: align stack on clone in aarch64 and fix a memory leak
  (#2032280)</changelog>
</package>
<package pkgid="923809592d6c4ec0ad5a213359c036c4145b0e06ebbe0b4ebdac101e03c8bb26" name="glibc-debuginfo-common" arch="x86_64">
  <version epoch="0" ver="2.28" rel="164.el8_5.3"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.28-158" date="1619092800">- Rebuild with new binutils (#1946518)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.28-159" date="1622116800">- Backport additional ifunc optimizations for ppc64le (#1956357)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.28-160" date="1622462400">- Backport POWER10 optimized rawmemchr for ppc64le (#1956357)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.28-161" date="1624017600">- Improve POWER10 performance with POWER9 fallbacks (#1956357)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.28-162" date="1625745600">- CVE-2021-35942: wordexp: handle overflow in positional parameter number
  (#1979127)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.28-163" date="1628510400">- CVE-2021-33574: Deep copy pthread attribute in mq_notify (#1966472)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.28-164" date="1628510401">- librt: fix NULL pointer dereference (#1966472).</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.28-164.1" date="1643025600">- CVE-2021-3999: getcwd: Set errno to ERANGE for size == 1 (#2032280)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.28-164.2" date="1643198400">- CVE-2022-23218, CVE-2022-23219: Fix buffer overflows in sunrpc clnt_create
  for "unix" and svcunix_create (#2045062).</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.28-164.3" date="1643284800">- CVE-2021-3999: getcwd: align stack on clone in aarch64 and fix a memory leak
  (#2032280)</changelog>
</package>
<package pkgid="cfca1456993fd8858fd34aa94f0b9c67e3ac2af666761e7c5b20a106216aebed" name="gzip-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.9" rel="13.el8_5"/>
  <changelog author="Igor Gnatenko &lt;ignatenkobrain@fedoraproject.org&gt; - 1.9-3" date="1518177600">- Escape macros in %changelog</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 1.9-5" date="1556798400">- Fix wrong skip size in gzexe
- Add new test dealing with the ^^ (needs autoreconf)
- Enable make check (needs less)
  Resolves: 1705413

 * Tue Aug 07 2018 Jakub Martisko &lt;jamartis@redhat.com&gt; - 1.9-4
 - Fix FTBFS bug (gnulib problems)
 - more details: https://lists.gnu.org/r/bug-gnulib/2018-03/msg00000.html
   Resolves 1611722</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 1.9-6" date="1557144000">- Release bump for gating rebuild
  Related: 1681027</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 1.9-7" date="1557144001">- Apply the IBM s390x optimization patch
  Resolves: 1659434</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 1.9-8" date="1557144002">- Apply fixes to the previous patch
  Resolves: 1659434</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 1.9-9" date="1563192000">- Another fix for the s390 patch
  Related: 1730332</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 1.9-10" date="1603368000">- Fix a segfault on some s390x machines when compressing multiple files
  Resolves: 1883204</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 1.9-11" date="1603368001">- Enable HW optimizations for modes 1-6 on s390x
  Resolves: 1847436</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 1.9-12" date="1610020800">- Fix a test failure introduced by 1.9-10
  Related: 1883204</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 1.9-13" date="1650369600">- fix an arbitrary-file-write vulnerability in zgrep
Resolves: CVE-2022-1271</changelog>
</package>
<package pkgid="6e037ed99ea6af88dbb725d8059f1efaf52bf06852d7989ca0f9c69715e81ab7" name="gzip-debugsource" arch="x86_64">
  <version epoch="0" ver="1.9" rel="13.el8_5"/>
  <changelog author="Igor Gnatenko &lt;ignatenkobrain@fedoraproject.org&gt; - 1.9-3" date="1518177600">- Escape macros in %changelog</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 1.9-5" date="1556798400">- Fix wrong skip size in gzexe
- Add new test dealing with the ^^ (needs autoreconf)
- Enable make check (needs less)
  Resolves: 1705413

 * Tue Aug 07 2018 Jakub Martisko &lt;jamartis@redhat.com&gt; - 1.9-4
 - Fix FTBFS bug (gnulib problems)
 - more details: https://lists.gnu.org/r/bug-gnulib/2018-03/msg00000.html
   Resolves 1611722</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 1.9-6" date="1557144000">- Release bump for gating rebuild
  Related: 1681027</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 1.9-7" date="1557144001">- Apply the IBM s390x optimization patch
  Resolves: 1659434</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 1.9-8" date="1557144002">- Apply fixes to the previous patch
  Resolves: 1659434</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 1.9-9" date="1563192000">- Another fix for the s390 patch
  Related: 1730332</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 1.9-10" date="1603368000">- Fix a segfault on some s390x machines when compressing multiple files
  Resolves: 1883204</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 1.9-11" date="1603368001">- Enable HW optimizations for modes 1-6 on s390x
  Resolves: 1847436</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 1.9-12" date="1610020800">- Fix a test failure introduced by 1.9-10
  Related: 1883204</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 1.9-13" date="1650369600">- fix an arbitrary-file-write vulnerability in zgrep
Resolves: CVE-2022-1271</changelog>
</package>
<package pkgid="2b27fcc87dd0b19fcdd166f61f1daecdd24cf38872c78698f4b283180192c3a9" name="integritysetup-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.3.3" rel="4.el8_5.1"/>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 2.2.0-0.2" date="1560513600">- Updates to reencryption feature.
- Resolves: #1676622</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 2.2.0-1" date="1565870400">- Update to cryptsetup 2.2.0 (final)
- Resolves: #1738263 #1740342 #1733391 #1729600 #1733390</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 2.2.0-2" date="1567166400">- patch: Fix mapped segments overflow on 32bit architectures.
- patch: Take optimal io size in account with LUKS2 reencryption.
- Resolves: #1742815 #1746532</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 2.2.2-1" date="1574078400">- Update to cryptsetup 2.2.2
- LUKS2 reencryption honors activation flags (one time and persistent).
- LUKS2 reencryption works also without volume keys put in kernel
  keyring service.
- Resolves: #1757783 #1750680 #1753597 #1743399</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 2.3.1-1" date="1585915200">- Update to cryptsetup 2.3.1
- Resolves: #1796826 #1743891 #1785748</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 2.3.3-1" date="1590667200">- Update to cryptsetup 2.3.3
- Resolves: #1796826 #1743891 #1785748</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 2.3.3-2" date="1598529600">- patch: Fix possible memory corruption in LUKS2 validation
	 code in 32bit library.
- Resolves: #1872294</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 2.3.3-3" date="1612353600">- patch: Fix crypto backend to properly handle ECB mode.
- Resolves: #1859091</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 2.3.3-4" date="1613563200">- patch: Fix reencryption for custom devices with data segments
  set to use cipher_null.
- Resolves: #1927409</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 2.3.3-4.1" date="1642161600">- patch: fix CVE-2021-4122.
- Resolves: #2036906</changelog>
</package>
<package pkgid="aa5a5b20f21f1a03d49b3f1eff743f8414ffbc802114b0307976b7cf9891d5f3" name="kernel-debug-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="348.12.2.el8_5"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.4.1.el8_5]" date="1637668800">- [RHEL8.6 BZ 1849234] cifs: report error instead of invalid when revalidating a dentry fails (Ronnie Sahlberg) [2017177 1849234]
- kthread: Fix PF_KTHREAD vs to_kthread() race (Waiman Long) [2010333 2001497]
- sched/fair: Ignore percpu threads for imbalance pulls (Waiman Long) [2010333 2001497]
- kthread: Extract KTHREAD_IS_PER_CPU (Waiman Long) [2010333 2001497]
- sched: Optimize finish_lock_switch() (Waiman Long) [2010333 2001497]
- sched/hotplug: Ensure only per-cpu kthreads run during hotplug (Waiman Long) [2010333 2001497]
- sched: Fix balance_callback() (Waiman Long) [2010333 2001497]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.5.1.el8_5]" date="1638273600">- blk-mq: still set q-&gt;make_request_fn for blk-mq (Ming Lei) [2016384 1999728]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.6.1.el8_5]" date="1638878400">- x86/Kconfig: Do not enable AMD_MEM_ENCRYPT_ACTIVE_BY_DEFAULT automatically (Prarit Bhargava) [2024678 2021219]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.7.1.el8_5]" date="1638964800">- sched: Fix CPU hotplug / tighten is_per_cpu_kthread() (Waiman Long) [2026450 2024869]
- sched: Prepare to use balance_push in ttwu() (Waiman Long) [2026450 2024869]
- sched: Don't run cpu-online with balance_push() enabled (Waiman Long) [2026450 2024869]
- workqueue: Tag bound workers with KTHREAD_IS_PER_CPU (Waiman Long) [2026450 2024869]
- workqueue: Use cpu_possible_mask instead of cpu_active_mask to break affinity (Waiman Long) [2026450 2024869]
- sched: Fix hotplug vs CPU bandwidth control (Waiman Long) [2026450 2024869]
- workqueue: Manually break affinity on hotplug (Waiman Long) [2026450 2024869]
- sched/hotplug: Consolidate task migration on CPU unplug (Waiman Long) [2026450 2024869]
- sched/core: Wait for tasks being pushed away on hotplug (Waiman Long) [2026450 2024869]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.8.1.el8_5]" date="1639483200">- ice: Fix VF true promiscuous mode (Jonathan Toppins) [2026698 1970643]
- ice: Remove toggling of antispoof for VF trusted promiscuous mode (Jonathan Toppins) [2026698 1970643]
- ice: Fix replacing VF hardware MAC to existing MAC filter (Jonathan Toppins) [2026698 1970643]
- ice: Fix not stopping Tx queues for VFs (Jonathan Toppins) [2026698 1970643]
- ice: Fix race conditions between virtchnl handling and VF ndo ops (Jonathan Toppins) [2026698 1970643]
- net/netif_receive_skb_core: Use migrate_disable() (Luis Claudio R. Goncalves) [2027689 2024168]
- crypto: jitter - consider 32 LSB for APT (Herbert Xu) [2029365 1994390]
- xfs: fix I_DONTCACHE (Carlos Maiolino) [2028534 2024969]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.9.1.el8_5]" date="1640001600">- ixgbe: Revert "bpf, devmap: Move drop error path to devmap for XDP_REDIRECT" (Ken Cox) [2029845 2024240]
- i40e: Revert "bpf, devmap: Move drop error path to devmap for XDP_REDIRECT" (Stefan Assmann) [2029845 2024225]
- rcu/nocb: Perform deferred wake up before last idle's need_resched() check (Waiman Long) [2029449 2008340]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.10.1.el8_5]" date="1640779200">- selftests: add a test case for mirred egress to ingress (Xin Long) [2024411 1983894]
- net: sched: act_mirred: drop dst for the direction from egress to ingress (Xin Long) [2024411 1983894]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.11.1.el8_5]" date="1641297600">- blk-mq: avoid to iterate over stale request (Ming Lei) [2034396 1997338]
- rcu: Tighten rcu_advance_cbs_nowake() checks (Daniel Vacek) [2032579 2013408]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.12.1.el8_5]" date="1641988800">- tcp: don't free a FIN sk_buff in tcp_remove_empty_skb() (Guillaume Nault) [2021574 2016210]
- kernel.spec: Add support to use vmlinux.h (Jiri Olsa) [2031053 1989087]
- spec: Add vmlinux.h to kernel-devel package (Jiri Olsa) [2031053 1989087]
- x86/mce: Avoid infinite loop for copy from user recovery (Prarit Bhargava) [2008789 1999550]
- x86/mce: Rename kill_it to kill_current_task (Prarit Bhargava) [2008789 1999550]
- x86/mce: Recover from poison found while copying from user space (Prarit Bhargava) [2008789 1999550]
- x86/mce: Delay clearing IA32_MCG_STATUS to the end of do_machine_check() (Prarit Bhargava) [2008789 1999550]
- x86/mce: Send #MC singal from task work (Prarit Bhargava) [2008789 1999550]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-348.12.2.el8_5]" date="1642420800">- vfs: Out-of-bounds write of heap buffer in fs_context.c (Frantisek Hrbata) [2040585 2040586] {CVE-2022-0185}
- xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Bruno Meneguele) [2034864 2034865] {CVE-2021-4155}</changelog>
</package>
<package pkgid="fa0e2d29e9a7968233d72de70449de0ca1851c9ff817541daf6b5755ac8ea525" name="kernel-debug-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="348.2.1.el8_5"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-341.el8]" date="1631275200">- mptcp: Only send extra TCP acks in eligible socket states (Paolo Abeni) [1997178]
- mptcp: fix possible divide by zero (Paolo Abeni) [1997178]
- mptcp: drop tx skb cache (Paolo Abeni) [1997178]
- mptcp: fix memory leak on address flush (Paolo Abeni) [1997178]
- ice: Only lock to update netdev dev_addr (Michal Schmidt) [1995868]
- ice: restart periodic outputs around time changes (Ken Cox) [1992750]
- ice: Fix perout start time rounding (Ken Cox) [1992750]
- net/sched: ets: fix crash when flipping from 'strict' to 'quantum' (Davide Caratti) [1981184]
- ovl: prevent private clone if bind mount is not allowed (Miklos Szeredi) [1993131] {CVE-2021-3732}
- gfs2: Don't call dlm after protocol is unmounted (Bob Peterson) [1997193]
- gfs2: don't stop reads while withdraw in progress (Bob Peterson) [1997193]
- gfs2: Mark journal inodes as "don't cache" (Bob Peterson) [1997193]
- bpf: bpftool: Add -fno-asynchronous-unwind-tables to BPF Clang invocation (Yauheni Kaliuta) [1997124]
- perf/x86/intel: Apply mid ACK for small core (Michael Petlan) [1838573]
- perf/x86/intel/lbr: Zero the xstate buffer on allocation (Michael Petlan) [1838573]
- perf: Fix task context PMU for Hetero (Michael Petlan) [1838573]
- perf/x86/intel: Fix fixed counter check warning for some Alder Lake (Michael Petlan) [1838573]
- perf/x86/lbr: Remove cpuc-&gt;lbr_xsave allocation from atomic context (Michael Petlan) [1838573]
- x86/fpu/xstate: Fix an xstate size check warning with architectural LBRs (Michael Petlan) [1838573]
- perf/x86/rapl: Add support for Intel Alder Lake (Michael Petlan) [1838573]
- perf/x86/cstate: Add Alder Lake CPU support (Michael Petlan) [1838573]
- perf/x86/msr: Add Alder Lake CPU support (Michael Petlan) [1838573]
- perf/x86/intel/uncore: Add Alder Lake support (Michael Petlan) [1838573]
- perf: Extend PERF_TYPE_HARDWARE and PERF_TYPE_HW_CACHE (Michael Petlan) [1838573]
- perf/x86/intel: Add Alder Lake Hybrid support (Michael Petlan) [1838573]
- perf/x86: Support filter_match callback (Michael Petlan) [1838573]
- perf/x86/intel: Add attr_update for Hybrid PMUs (Michael Petlan) [1838573]
- perf/x86: Add structures for the attributes of Hybrid PMUs (Michael Petlan) [1838573]
- perf/x86: Register hybrid PMUs (Michael Petlan) [1838573]
- perf/x86: Factor out x86_pmu_show_pmu_cap (Michael Petlan) [1838573]
- perf/x86: Remove temporary pmu assignment in event_init (Michael Petlan) [1838573]
- perf/x86/intel: Factor out intel_pmu_check_extra_regs (Michael Petlan) [1838573]
- perf/x86/intel: Factor out intel_pmu_check_event_constraints (Michael Petlan) [1838573]
- perf/x86/intel: Factor out intel_pmu_check_num_counters (Michael Petlan) [1838573]
- perf/x86: Hybrid PMU support for extra_regs (Michael Petlan) [1838573]
- perf/x86: Hybrid PMU support for event constraints (Michael Petlan) [1838573]
- perf/x86: Hybrid PMU support for hardware cache event (Michael Petlan) [1838573]
- perf/x86: Hybrid PMU support for unconstrained (Michael Petlan) [1838573]
- perf/x86: Hybrid PMU support for counters (Michael Petlan) [1838573]
- perf/x86: Hybrid PMU support for intel_ctrl (Michael Petlan) [1838573]
- perf/x86/intel: Hybrid PMU support for perf capabilities (Michael Petlan) [1838573]
- perf/x86: Track pmu in per-CPU cpu_hw_events (Michael Petlan) [1838573]
- perf/x86/intel/lbr: Support XSAVES for arch LBR read (Michael Petlan) [1838573]
- perf/x86/intel/lbr: Support XSAVES/XRSTORS for LBR context switch (Michael Petlan) [1838573]
- x86/fpu/xstate: Add helpers for LBR dynamic supervisor feature (Michael Petlan) [1838573]
- x86/fpu/xstate: Support dynamic supervisor feature for LBR (Michael Petlan) [1838573]
- x86/fpu: Use proper mask to replace full instruction mask (Michael Petlan) [1838573]
- x86/cpu: Add helper function to get the type of the current hybrid CPU (Michael Petlan) [1838573]
- x86/cpufeatures: Enumerate Intel Hybrid Technology feature bit (Michael Petlan) [1838573]
- HID: make arrays usage and value to be the same (Benjamin Tissoires) [1974942]
- ACPI: PM: s2idle: Invert Microsoft UUID entry and exit (David Arcari) [1960440]
- platform/x86: amd-pmc: Fix undefined reference to __udivdi3 (David Arcari) [1960440]
- platform/x86: amd-pmc: Fix missing unlock on error in amd_pmc_send_cmd() (David Arcari) [1960440]
- platform/x86: amd-pmc: Use return code on suspend (David Arcari) [1960440]
- platform/x86: amd-pmc: Add new acpi id for future PMC controllers (David Arcari) [1960440]
- platform/x86: amd-pmc: Add support for ACPI ID AMDI0006 (David Arcari) [1960440]
- platform/x86: amd-pmc: Add support for logging s0ix counters (David Arcari) [1960440]
- platform/x86: amd-pmc: Add support for logging SMU metrics (David Arcari) [1960440]
- platform/x86: amd-pmc: call dump registers only once (David Arcari) [1960440]
- platform/x86: amd-pmc: Fix SMU firmware reporting mechanism (David Arcari) [1960440]
- platform/x86: amd-pmc: Fix command completion code (David Arcari) [1960440]
- usb: pci-quirks: disable D3cold on xhci suspend for s2idle on AMD Renoir (David Arcari) [1960440]
- ACPI: PM: Only mark EC GPE for wakeup on Intel systems (David Arcari) [1960440]
- ACPI: PM: Adjust behavior for field problems on AMD systems (David Arcari) [1960440]
- ACPI: PM: s2idle: Add support for new Microsoft UUID (David Arcari) [1960440]
- ACPI: PM: s2idle: Add support for multiple func mask (David Arcari) [1960440]
- ACPI: PM: s2idle: Refactor common code (David Arcari) [1960440]
- ACPI: PM: s2idle: Use correct revision id (David Arcari) [1960440]
- ACPI: PM: s2idle: Add missing LPS0 functions for AMD (David Arcari) [1960440]
- lockd: Fix invalid lockowner cast after vfs_test_lock (Benjamin Coddington) [1986138]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-342.el8]" date="1631620800">- selftest: netfilter: add test case for unreplied tcp connections (Florian Westphal) [1991523]
- netfilter: conntrack: do not renew entry stuck in tcp SYN_SENT state (Florian Westphal) [1991523]
- net/sched: store the last executed chain also for clsact egress (Davide Caratti) [1980537]
- ice: fix Tx queue iteration for Tx timestamp enablement (Ken Cox) [1999743]
- perf evsel: Add missing cloning of evsel-&gt;use_config_name (Michael Petlan) [1838635]
- perf Documentation: Document intel-hybrid support (Michael Petlan) [1838635]
- perf tests: Skip 'perf stat metrics (shadow stat) test' for hybrid (Michael Petlan) [1838635]
- perf tests: Support 'Convert perf time to TSC' test for hybrid (Michael Petlan) [1838635]
- perf tests: Support 'Session topology' test for hybrid (Michael Petlan) [1838635]
- perf tests: Support 'Parse and process metrics' test for hybrid (Michael Petlan) [1838635]
- perf tests: Support 'Track with sched_switch' test for hybrid (Michael Petlan) [1838635]
- perf tests: Skip 'Setup struct perf_event_attr' test for hybrid (Michael Petlan) [1838635]
- perf tests: Add hybrid cases for 'Roundtrip evsel-&gt;name' test (Michael Petlan) [1838635]
- perf tests: Add hybrid cases for 'Parse event definition strings' test (Michael Petlan) [1838635]
- perf record: Uniquify hybrid event name (Michael Petlan) [1838635]
- perf stat: Warn group events from different hybrid PMU (Michael Petlan) [1838635]
- perf stat: Filter out unmatched aggregation for hybrid event (Michael Petlan) [1838635]
- perf stat: Add default hybrid events (Michael Petlan) [1838635]
- perf record: Create two hybrid 'cycles' events by default (Michael Petlan) [1838635]
- perf parse-events: Support event inside hybrid pmu (Michael Petlan) [1838635]
- perf parse-events: Compare with hybrid pmu name (Michael Petlan) [1838635]
- perf parse-events: Create two hybrid raw events (Michael Petlan) [1838635]
- perf parse-events: Create two hybrid cache events (Michael Petlan) [1838635]
- perf parse-events: Create two hybrid hardware events (Michael Petlan) [1838635]
- perf stat: Uniquify hybrid event name (Michael Petlan) [1838635]
- perf pmu: Add hybrid helper functions (Michael Petlan) [1838635]
- perf pmu: Save detected hybrid pmus to a global pmu list (Michael Petlan) [1838635]
- perf pmu: Save pmu name (Michael Petlan) [1838635]
- perf pmu: Simplify arguments of __perf_pmu__new_alias (Michael Petlan) [1838635]
- perf jevents: Support unit value "cpu_core" and "cpu_atom" (Michael Petlan) [1838635]
- tools headers uapi: Update tools's copy of linux/perf_event.h (Michael Petlan) [1838635]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-343.el8]" date="1631793600">- rcu: Avoid unneeded function call in rcu_read_unlock() (Waiman Long) [1997500]
- mt76: connac: do not schedule mac_work if the device is not running (Íñigo Huguet) [1956419 1972045]
- mt7921e: enable module in config (Íñigo Huguet) [1956419 1972045]
- Revert tools/power/cpupower: Read energy_perf_bias from sysfs (Steve Best) [1999926]
- libnvdimm/namespace: Differentiate between probe mapping and runtime mapping (Jeff Moyer) [1795719]
- libnvdimm/pfn_dev: Don't clear device memmap area during generic namespace probe (Jeff Moyer) [1795719]
- perf/x86/intel/uncore: Clean up error handling path of iio mapping (Michael Petlan) [1837330]
- perf/x86/intel/uncore: Fix for iio mapping on Skylake Server (Michael Petlan) [1837330]
- perf/x86/intel/uncore: Generic support for the MMIO type of uncore blocks (Michael Petlan) [1837330]
- perf/x86/intel/uncore: Generic support for the PCI type of uncore blocks (Michael Petlan) [1837330]
- perf/x86/intel/uncore: Rename uncore_notifier to uncore_pci_sub_notifier (Michael Petlan) [1837330]
- perf/x86/intel/uncore: Generic support for the MSR type of uncore blocks (Michael Petlan) [1837330]
- perf/x86/intel/uncore: Parse uncore discovery tables (Michael Petlan) [1837330]
- perf/x86/intel/uncore: Expose an Uncore unit to IIO PMON mapping (Michael Petlan) [1837330]
- perf/x86/intel/uncore: Wrap the max dies calculation into an accessor (Michael Petlan) [1837330]
- perf/x86/intel/uncore: Expose an Uncore unit to PMON mapping (Michael Petlan) [1837330]
- perf/x86/intel/uncore: Validate MMIO address before accessing (Michael Petlan) [1837330]
- perf/x86/intel/uncore: Record the size of mapped area (Michael Petlan) [1837330]
- perf/x86/intel/uncore: Fix oops when counting IMC uncore events on some TGL (Michael Petlan) [1837330]
- crypto: qat - remove unused macro in FW loader (Vladis Dronov) [1920086]
- crypto: qat - check return code of qat_hal_rd_rel_reg() (Vladis Dronov) [1920086]
- crypto: qat - report an error if MMP file size is too large (Vladis Dronov) [1920086]
- crypto: qat - check MMP size before writing to the SRAM (Vladis Dronov) [1920086]
- crypto: qat - return error when failing to map FW (Vladis Dronov) [1920086]
- crypto: qat - enable detection of accelerators hang (Vladis Dronov) [1920086]
- crypto: qat - Fix a double free in adf_create_ring (Vladis Dronov) [1920086]
- crypto: qat - fix error path in adf_isr_resource_alloc() (Vladis Dronov) [1920086]
- crypto: qat - ADF_STATUS_PF_RUNNING should be set after adf_dev_init (Vladis Dronov) [1920086]
- crypto: qat - don't release uninitialized resources (Vladis Dronov) [1920086]
- crypto: qat - fix use of 'dma_map_single' (Vladis Dronov) [1920086]
- crypto: qat - fix unmap invalid dma address (Vladis Dronov) [1920086]
- crypto: qat - fix spelling mistake: "messge" -&gt; "message" (Vladis Dronov) [1920086]
- crypto: qat - reduce size of mapped region (Vladis Dronov) [1920086]
- crypto: qat - change format string and cast ring size (Vladis Dronov) [1920086]
- crypto: qat - fix potential spectre issue (Vladis Dronov) [1920086]
- crypto: qat - configure arbiter mapping based on engines enabled (Vladis Dronov) [1920086]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-344.el8]" date="1632139200">- perf/x86/intel: Fix PEBS-via-PT reload base value for Extended PEBS (Michael Petlan) [1998051]
- perf/x86/intel/uncore: Fix Add BW copypasta (Michael Petlan) [1998051]
- perf/x86/intel/uncore: Add BW counters for GT, IA and IO breakdown (Michael Petlan) [1998051]
- Revert "ice: Add initial support framework for LAG" (Michal Schmidt) [1999016]
- net: re-initialize slow_gro flag at gro_list_prepare time (Paolo Abeni) [2002367]
- cxgb4: dont touch blocked freelist bitmap after free (Rahul Lakkireddy) [1998148]
- cxgb4vf: configure ports accessible by the VF (Rahul Lakkireddy) [1961329]
- scsi: lpfc: Fix memory leaks in error paths while issuing ELS RDF/SCR request (Dick Kennedy) [1976332]
- scsi: lpfc: Keep NDLP reference until after freeing the IOCB after ELS handling (Dick Kennedy) [1976332]
- scsi: lpfc: Move initialization of phba-&gt;poll_list earlier to avoid crash (Dick Kennedy) [1976332]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-345.el8]" date="1632398400">- e1000e: Do not take care about recovery NVM checksum (Ken Cox) [1984558]
- qrtr: disable CONFIG_QRTR for non x86_64 archs (Íñigo Huguet) [1999642]
- ceph: fix possible null-pointer dereference in ceph_mdsmap_decode() (Jeff Layton) [1989999]
- ceph: fix dereference of null pointer cf (Jeff Layton) [1989999]
- ceph: correctly handle releasing an embedded cap flush (Jeff Layton) [1989999]
- ceph: take snap_empty_lock atomically with snaprealm refcount change (Jeff Layton) [1989999]
- ceph: don't WARN if we're still opening a session to an MDS (Jeff Layton) [1989999]
- rbd: don't hold lock_rwsem while running_list is being drained (Jeff Layton) [1989999]
- rbd: always kick acquire on "acquired" and "released" notifications (Jeff Layton) [1989999]
- ceph: take reference to req-&gt;r_parent at point of assignment (Jeff Layton) [1989999]
- ceph: eliminate ceph_async_iput() (Jeff Layton) [1989999]
- ceph: don't take s_mutex in ceph_flush_snaps (Jeff Layton) [1989999]
- ceph: don't take s_mutex in try_flush_caps (Jeff Layton) [1989999]
- ceph: don't take s_mutex or snap_rwsem in ceph_check_caps (Jeff Layton) [1989999]
- ceph: eliminate session-&gt;s_gen_ttl_lock (Jeff Layton) [1989999]
- ceph: allow ceph_put_mds_session to take NULL or ERR_PTR (Jeff Layton) [1989999]
- ceph: clean up locking annotation for ceph_get_snap_realm and __lookup_snap_realm (Jeff Layton) [1989999]
- ceph: add some lockdep assertions around snaprealm handling (Jeff Layton) [1989999]
- ceph: decoding error in ceph_update_snap_realm should return -EIO (Jeff Layton) [1989999]
- ceph: add IO size metrics support (Jeff Layton) [1989999]
- ceph: update and rename __update_latency helper to __update_stdev (Jeff Layton) [1989999]
- ceph: simplify the metrics struct (Jeff Layton) [1989999]
- libceph: fix doc warnings in cls_lock_client.c (Jeff Layton) [1989999]
- libceph: remove unnecessary ret variable in ceph_auth_init() (Jeff Layton) [1989999]
- libceph: kill ceph_none_authorizer::reply_buf (Jeff Layton) [1989999]
- ceph: make ceph_queue_cap_snap static (Jeff Layton) [1989999]
- ceph: remove bogus checks and WARN_ONs from ceph_set_page_dirty (Jeff Layton) [1989999]
- libceph: set global_id as soon as we get an auth ticket (Jeff Layton) [1989999]
- libceph: don't pass result into ac-&gt;ops-&gt;handle_reply() (Jeff Layton) [1989999]
- ceph: fix error handling in ceph_atomic_open and ceph_lookup (Jeff Layton) [1989999]
- ceph: must hold snap_rwsem when filling inode for async create (Jeff Layton) [1989999]
- libceph: Fix spelling mistakes (Jeff Layton) [1989999]
- libceph: don't set global_id until we get an auth ticket (Jeff Layton) [1989999]
- libceph: bump CephXAuthenticate encoding version (Jeff Layton) [1989999]
- ceph: don't allow access to MDS-private inodes (Jeff Layton) [1989999]
- ceph: fix up some bare fetches of i_size (Jeff Layton) [1989999]
- ceph: support getting ceph.dir.rsnaps vxattr (Jeff Layton) [1989999]
- ceph: drop pinned_page parameter from ceph_get_caps (Jeff Layton) [1989999]
- ceph: fix inode leak on getattr error in __fh_to_dentry (Jeff Layton) [1989999]
- ceph: only check pool permissions for regular files (Jeff Layton) [1989999]
- ceph: send opened files/pinned caps/opened inodes metrics to MDS daemon (Jeff Layton) [1989999]
- ceph: avoid counting the same request twice or more (Jeff Layton) [1989999]
- ceph: rename the metric helpers (Jeff Layton) [1989999]
- ceph: fix kerneldoc copypasta over ceph_start_io_direct (Jeff Layton) [1989999]
- ceph: don't use d_add in ceph_handle_snapdir (Jeff Layton) [1989999]
- ceph: don't clobber i_snap_caps on non-I_NEW inode (Jeff Layton) [1989999]
- ceph: fix fall-through warnings for Clang (Jeff Layton) [1989999]
- net: ceph: Fix a typo in osdmap.c (Jeff Layton) [1989999]
- ceph: don't allow type or device number to change on non-I_NEW inodes (Jeff Layton) [1989999]
- ceph: defer flushing the capsnap if the Fb is used (Jeff Layton) [1989999]
- ceph: allow queueing cap/snap handling after putting cap references (Jeff Layton) [1989999]
- ceph: clean up inode work queueing (Jeff Layton) [1989999]
- ceph: fix flush_snap logic after putting caps (Jeff Layton) [1989999]
- libceph: fix "Boolean result is used in bitwise operation" warning (Jeff Layton) [1989999]
- new helper: inode_wrong_type() (Jeff Layton) [1989999]
- kabi: Adding symbol single_release (fs/seq_file.c) (Čestmír Kalina) [1945486]
- kabi: Adding symbol single_open (fs/seq_file.c) (Čestmír Kalina) [1945486]
- kabi: Adding symbol seq_read (fs/seq_file.c) (Čestmír Kalina) [1945486]
- kabi: Adding symbol seq_printf (fs/seq_file.c) (Čestmír Kalina) [1945486]
- kabi: Adding symbol seq_lseek (fs/seq_file.c) (Čestmír Kalina) [1945486]
- kabi: Adding symbol unregister_chrdev_region (fs/char_dev.c) (Čestmír Kalina) [1945486]
- kabi: Adding symbol cdev_init (fs/char_dev.c) (Čestmír Kalina) [1945486]
- kabi: Adding symbol cdev_del (fs/char_dev.c) (Čestmír Kalina) [1945486]
- kabi: Adding symbol cdev_alloc (fs/char_dev.c) (Čestmír Kalina) [1945486]
- kabi: Adding symbol cdev_add (fs/char_dev.c) (Čestmír Kalina) [1945486]
- kabi: Adding symbol alloc_chrdev_region (fs/char_dev.c) (Čestmír Kalina) [1945486]
- kabi: Adding symbol pcie_capability_read_word (drivers/pci/access.c) (Čestmír Kalina) [1945485]
- kabi: Adding symbol pcie_capability_read_dword (drivers/pci/access.c) (Čestmír Kalina) [1945485]
- kabi: Adding symbol pcie_capability_clear_and_set_word (drivers/pci/access.c) (Čestmír Kalina) [1945485]
- kabi: Adding symbol pci_write_config_dword (drivers/pci/access.c) (Čestmír Kalina) [1945485]
- kabi: Adding symbol pci_write_config_byte (drivers/pci/access.c) (Čestmír Kalina) [1945485]
- kabi: Adding symbol pci_set_power_state (drivers/pci/pci.c) (Čestmír Kalina) [1945485]
- kabi: Adding symbol pci_read_config_dword (drivers/pci/access.c) (Čestmír Kalina) [1945485]
- kabi: Adding symbol pci_read_config_byte (drivers/pci/access.c) (Čestmír Kalina) [1945485]
- kabi: Adding symbol pci_irq_vector (drivers/pci/msi.c) (Čestmír Kalina) [1945485]
- kabi: Adding symbol pci_get_device (drivers/pci/search.c) (Čestmír Kalina) [1945485]
- kabi: Adding symbol pci_free_irq_vectors (drivers/pci/msi.c) (Čestmír Kalina) [1945485]
- kabi: Adding symbol pci_alloc_irq_vectors_affinity (drivers/pci/msi.c) (Čestmír Kalina) [1945485]
- kabi: Adding symbol kexec_crash_loaded (kernel/kexec_core.c) (Čestmír Kalina) [1945491]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-346.el8]" date="1633089600">- redhat: switch secureboot kernel image signing to release keys (Bruno Meneguele)
- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Fix RT check branch name (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- Revert "Merge: mt7921e: enable new Mediatek wireless hardware" (Bruno Meneguele) [2009501]
- megaraid_sas: fix concurrent access to ISR between IRQ polling and real interrupt (Tomas Henzl) [2009022]
- scsi: megaraid_sas: mq_poll support (Tomas Henzl) [2009022]
- [PATCH v2] scsi: qla2xxx: Suppress unnecessary log messages during login (Nilesh Javali) [1982186]
- scsi: qla2xxx: Fix excessive messages during device logout (Nilesh Javali) [1982186]
- PCI: pciehp: Ignore Link Down/Up caused by DPC (Myron Stowe) [1981741]
- arm64: kpti: Fix "kpti=off" when KASLR is enabled (Mark Salter) [1979731]
- arm64: Fix CONFIG_ARCH_RANDOM=n build (Mark Salter) [1979731]
- redhat/configs: aarch64: add CONFIG_ARCH_RANDOM (Mark Salter) [1979731]
- arm64: Implement archrandom.h for ARMv8.5-RNG (Mark Salter) [1979731]
- arm64: kconfig: Fix alignment of E0PD help text (Mark Salter) [1979731]
- arm64: Use register field helper in kaslr_requires_kpti() (Mark Salter) [1979731]
- arm64: Simplify early check for broken TX1 when KASLR is enabled (Mark Salter) [1979731]
- arm64: Use a variable to store non-global mappings decision (Mark Salter) [1979731]
- arm64: Don't use KPTI where we have E0PD (Mark Salter) [1979731]
- arm64: Factor out checks for KASLR in KPTI code into separate function (Mark Salter) [1979731]
- redhat/configs: Add CONFIG_ARM64_E0PD (Mark Salter) [1979731]
- arm64: Add initial support for E0PD (Mark Salter) [1979731]
- arm64: cpufeature: Export matrix and other features to userspace (Mark Salter) [1980098]
- arm64: docs: cpu-feature-registers: Document ID_AA64PFR1_EL1 (Mark Salter) [1980098]
- docs/arm64: cpu-feature-registers: Rewrite bitfields that don't follow [e, s] (Mark Salter) [1980098]
- docs/arm64: cpu-feature-registers: Documents missing visible fields (Mark Salter) [1980098]
- arm64: Introduce system_capabilities_finalized() marker (Mark Salter) [1980098]
- arm64: entry.S: Do not preempt from IRQ before all cpufeatures are enabled (Mark Salter) [1980098]
- docs/arm64: elf_hwcaps: Document HWCAP_SB (Mark Salter) [1980098]
- docs/arm64: elf_hwcaps: sort the HWCAP{, 2} documentation by ascending value (Mark Salter) [1980098]
- arm64: cpufeature: Treat ID_AA64ZFR0_EL1 as RAZ when SVE is not enabled (Mark Salter) [1980098]
- arm64: cpufeature: Effectively expose FRINT capability to userspace (Mark Salter) [1980098]
- arm64: cpufeature: Fix feature comparison for CTR_EL0.{CWG,ERG} (Mark Salter) [1980098]
- arm64: Expose FRINT capabilities to userspace (Mark Salter) [1980098]
- arm64: Expose ARMv8.5 CondM capability to userspace (Mark Salter) [1980098]
- docs: arm64: convert perf.txt to ReST format (Mark Salter) [1980098]
- docs: arm64: convert docs to ReST and rename to .rst (Mark Salter) [1980098]
- Documentation/arm64: HugeTLB page implementation (Mark Salter) [1980098]
- Documentation/arm64/sve: Couple of improvements and typos (Mark Salter) [1980098]
- arm64: cpufeature: Fix missing ZFR0 in __read_sysreg_by_encoding() (Mark Salter) [1980098]
- arm64: Expose SVE2 features for userspace (Mark Salter) [1980098]
- arm64: Advertise ARM64_HAS_DCPODP cpu feature (Mark Salter) [1980098]
- arm64: add CVADP support to the cache maintenance helper (Mark Salter) [1980098]
- arm64: Fix minor issues with the dcache_by_line_op macro (Mark Salter) [1980098]
- arm64: Expose DC CVADP to userspace (Mark Salter) [1980098]
- arm64: Handle trapped DC CVADP (Mark Salter) [1980098]
- arm64: HWCAP: encapsulate elf_hwcap (Mark Salter) [1980098]
- arm64: HWCAP: add support for AT_HWCAP2 (Mark Salter) [1980098]
- x86/MCE/AMD, EDAC/mce_amd: Add new SMCA bank types (Aristeu Rozanski) [1965331]
- x86/MCE/AMD, EDAC/mce_amd: Remove struct smca_hwid.xec_bitmap (Aristeu Rozanski) [1965331]
- EDAC, mce_amd: Print ExtErrorCode and description on a single line (Aristeu Rozanski) [1965331]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-347.el8]" date="1633176000">- PCI: Mark TI C667X to avoid bus reset (Alex Williamson) [1975768]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.el8]" date="1633348800">- drm/nouveau/fifo/ga102: initialise chid on return from channel creation (Ben Skeggs) [1997878]
- drm/nouveau/ga102-: support ttm buffer moves via copy engine (Ben Skeggs) [1997878]
- drm/nouveau/kms/tu102-: delay enabling cursor until after assign_windows (Ben Skeggs) [1997878]
- drm/nouveau/kms/nv50: workaround EFI GOP window channel format differences (Ben Skeggs) [1997878]
- drm/nouveau/disp: power down unused DP links during init (Ben Skeggs) [1997878]
- drm/nouveau: recognise GA107 (Ben Skeggs) [1997878]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.1.1.el8_5]" date="1635940800">- lib/timerqueue: Rely on rbtree semantics for next timer (Phil Auld) [2014677 2007099] {CVE-2021-20317}
- mm/hmm: make HMM_MIRROR an implicit option (Rafael Aquini) [2017519 1998534]
- mm/hmm: allow HMM_MIRROR on all architectures with MMU (Rafael Aquini) [2017519 1998534]
- mm: don't select MIGRATE_VMA_HELPER from HMM_MIRROR (Rafael Aquini) [2017519 1998534]
- mm: sort out the DEVICE_PRIVATE Kconfig mess (Rafael Aquini) [2017519 1998534]
- ceph: skip existing superblocks that are blocklisted or shut down when mounting (Jeffrey Layton) [2017071 2011462]
- redhat: switch release to zstream (Bruno Meneguele)</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.2.1.el8_5]" date="1636372800">- tipc: fix size validations for the MSG_CRYPTO type (Bruno Meneguele) [2020506 2020507] {CVE-2021-43267}
- net: Fix skb-&gt;csum update in inet_proto_csum_replace16(). (Balazs Nemeth) [2005981 1975193]</changelog>
</package>
<package pkgid="46f8971eb140ff8fdd572366e910e6114672933973fa0291271b4c7b817f5d6d" name="kernel-debug-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="348.20.1.el8_5"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.11.1.el8_5]" date="1641297600">- blk-mq: avoid to iterate over stale request (Ming Lei) [2034396 1997338]
- rcu: Tighten rcu_advance_cbs_nowake() checks (Daniel Vacek) [2032579 2013408]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.12.1.el8_5]" date="1641988800">- tcp: don't free a FIN sk_buff in tcp_remove_empty_skb() (Guillaume Nault) [2021574 2016210]
- kernel.spec: Add support to use vmlinux.h (Jiri Olsa) [2031053 1989087]
- spec: Add vmlinux.h to kernel-devel package (Jiri Olsa) [2031053 1989087]
- x86/mce: Avoid infinite loop for copy from user recovery (Prarit Bhargava) [2008789 1999550]
- x86/mce: Rename kill_it to kill_current_task (Prarit Bhargava) [2008789 1999550]
- x86/mce: Recover from poison found while copying from user space (Prarit Bhargava) [2008789 1999550]
- x86/mce: Delay clearing IA32_MCG_STATUS to the end of do_machine_check() (Prarit Bhargava) [2008789 1999550]
- x86/mce: Send #MC singal from task work (Prarit Bhargava) [2008789 1999550]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-348.13.1.el8_5]" date="1642507200">- vfs: Out-of-bounds write of heap buffer in fs_context.c (Frantisek Hrbata) [2040585 2040586] {CVE-2022-0185}
- xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Bruno Meneguele) [2034864 2034865] {CVE-2021-4155}
- af_unix: fix garbage collect vs MSG_PEEK (Patrick Talbert) [2031974 2031975] {CVE-2021-0920}
- cgroup: verify that source is a string (Waiman Long) [2034608 2034609] {CVE-2021-4154}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-348.14.1.el8_5]" date="1643198400">- tcp: fix page frag corruption on page fault (Paolo Abeni) [2041529 1996074]
- net: fix sk_page_frag() recursion from memory reclaim (Paolo Abeni) [2041529 1996074]
- KVM: s390: index kvm-&gt;arch.idle_mask by vcpu_idx (Thomas Huth) [2040769 2026230]
- redhat: set LC_ALL=C before sorting config content (Frantisek Hrbata)</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.15.1.el8_5]" date="1643716800">- net/mlx5: DR, Use FW API when updating FW-owned flow table (Michal Schmidt) [2042663 2042651]
- KVM: x86: Wait for IPIs to be delivered when handling Hyper-V TLB flush hypercall (Vitaly Kuznetsov) [2043237 1868572]
- drm/mgag200: Select clock in PLL update functions (Bruno Meneguele) [2034949 1953926]
- drm/i915: Fix HAS_LSPCON macro for platforms between GEN9 and GEN10 (Bruno Meneguele) [2027335 2005586]
- crypto: qat - power up 4xxx device (Vladis Dronov) [2016437 1960307]
- RDMA/core: Fix a double free in add_port error flow (Kamal Heib) [2038724 2008555]
- powerpc/iommu: Report the correct most efficient DMA mask for PCI devices (Steve Best) [2018928 2007425]
- powerpc/dma: Fix dma_map_ops::get_required_mask (Steve Best) [2018928 2007425]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.16.1.el8_5]" date="1644321600">- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047601 2047602] {CVE-2022-22942}
- net: openvswitch: Fix ct_state nat flags for conns arriving from tc (Marcelo Ricardo Leitner) [2043548 2040334]
- net: openvswitch: Fix matching zone id for invalid conns arriving from tc (Marcelo Ricardo Leitner) [2043550 2040452]
- net/sched: flow_dissector: Fix matching on zone id for invalid conns (Marcelo Ricardo Leitner) [2043550 2040452]
- net/sched: Extend qdisc control block with tc control block (Marcelo Ricardo Leitner) [2043550 2040452]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.17.1.el8_5]" date="1644926400">- vfs: check dentry is still valid in get_link() (Ian Kent) [2052558 2014846]
- xfs: don't expose internal symlink metadata buffers to the vfs (Brian Foster) [2052558 2014846]
- CI: Use appropriate zstream builder (Veronika Kabatova)
- CI: Enable baseline realtime checks (Veronika Kabatova)
- CI: Rename pipelines to include release names (Veronika Kabatova)
- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052166 2052167] {CVE-2022-0492}
- ice: Remove boolean vlan_promisc flag from function (Jonathan Toppins) [2051951 2030400]
- ceph: put the requests/sessions when it fails to alloc memory (Jeffrey Layton) [2053725 2017796]
- ceph: fix off by one bugs in unsafe_request_wait() (Jeffrey Layton) [2053725 2017796]
- ceph: flush the mdlog before waiting on unsafe reqs (Jeffrey Layton) [2053725 2017796]
- ceph: flush mdlog before umounting (Jeffrey Layton) [2053725 2017796]
- ceph: make iterate_sessions a global symbol (Jeffrey Layton) [2053725 2017796]
- ceph: make ceph_create_session_msg a global symbol (Jeffrey Layton) [2053725 2017796]
- xfs: check sb_meta_uuid for dabuf buffer recovery (Bill O'Donnell) [2049292 2020764]
- drm/i915: Flush TLBs before releasing backing store (Patrick Talbert) [2044328 2044329] {CVE-2022-0330}
- hugetlb: fix hugetlb cgroup refcounting during vma split (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: fix imbalanced css_get and css_put pair for shared mappings (Waiman Long) [2039015 2032811]
- mm/hugetlb: change hugetlb_reserve_pages() to type bool (Waiman Long) [2039015 2032811]
- hugetlb: fix an error code in hugetlb_reserve_pages() (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: fix offline of hugetlb cgroup with reservations (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: fix reservation accounting (Waiman Long) [2039015 2032811]
- mm/hugetlb: narrow the hugetlb_lock protection area during preparing huge page (Waiman Long) [2039015 2032811]
- mm/hugetlb: a page from buddy is not on any list (Waiman Long) [2039015 2032811]
- mm/hugetlb: not necessary to coalesce regions recursively (Waiman Long) [2039015 2032811]
- selftests/vm/write_to_hugetlbfs.c: fix unused variable warning (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add hugetlb_cgroup reservation tests (Waiman Long) [2039015 2032811]
- hugetlb: support file_region coalescing again (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: support noreserve mappings (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add accounting for shared mappings (Waiman Long) [2039015 2032811]
- hugetlb: disable region_add file_region coalescing (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add reservation accounting for private mappings (Waiman Long) [2039015 2032811]
- mm/hugetlb_cgroup: fix hugetlb_cgroup migration (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add interface for charge/uncharge hugetlb reservations (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add hugetlb_cgroup reservation counter (Waiman Long) [2039015 2032811]
- hugetlb: remove duplicated code (Waiman Long) [2039015 2032811]
- hugetlb: region_chg provides only cache entry (Waiman Long) [2039015 2032811]
- hugetlbfs: always use address space in inode for resv_map pointer (Waiman Long) [2039015 2032811]
- hugetlbfs: fix potential over/underflow setting node specific nr_hugepages (Waiman Long) [2039015 2032811]
- hugetlb: allow to free gigantic pages regardless of the configuration (Waiman Long) [2039015 2032811]
- powerpc/pseries: Fix update of LPAR security flavor after LPM (Steve Best) [2027448 1997294]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.18.1.el8_5]" date="1645531200">- selftests: kvm: Check whether SIDA memop fails for normal guests (Thomas Huth) [2050806 2050807] {CVE-2022-0516}
- KVM: s390: Return error on SIDA memop on normal guest (Thomas Huth) [2050806 2050807] {CVE-2022-0516}
- iommu/amd: Remove iommu_init_ga() (Jerry Snitselaar) [2030854 1998265]
- iommu/amd: Relocate GAMSup check to early_enable_iommus (Jerry Snitselaar) [2030854 1998265]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.19.1.el8_5]" date="1646049600">- tipc: improve size validations for received domain records (Xin Long) [2048970 2048971] {CVE-2022-0435}
- smb3: do not error on fsync when readonly (Ronnie Sahlberg) [2055824 2037811]
- security: implement sctp_assoc_established hook in selinux (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- security: add sctp_assoc_established hook (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- security: call security_sctp_assoc_request in sctp_sf_do_5_1D_ce (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- security: pass asoc to sctp_assoc_request and sctp_sk_clone (Bruno Meneguele) [2054112 2054117 2015525 2048251]
- net: sctp: Fix some typos (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- RDMA/bnxt_re: Fix stats counters (Selvin Xavier) [2049684 2001893]
- net: check skb sec_path when re-initializing slow_gro in gro_list_prepare (Xin Long) [2047427 2030476]
- cpufreq: intel_pstate: Add Icelake servers support in no-HWP mode (David Arcari) [2036888 2003695]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.20.1.el8_5]" date="1646740800">- lib/iov_iter: initialize "flags" in new pipe_buffer (Jan Stancek) [2060874 2060875] {CVE-2022-0847}</changelog>
</package>
<package pkgid="f03f3d53e8fb0b54e7e54884c0ec31b823716f64532d78b7b4a099960041f07c" name="kernel-debug-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="348.23.1.el8_5"/>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-348.14.1.el8_5]" date="1643198400">- tcp: fix page frag corruption on page fault (Paolo Abeni) [2041529 1996074]
- net: fix sk_page_frag() recursion from memory reclaim (Paolo Abeni) [2041529 1996074]
- KVM: s390: index kvm-&gt;arch.idle_mask by vcpu_idx (Thomas Huth) [2040769 2026230]
- redhat: set LC_ALL=C before sorting config content (Frantisek Hrbata)</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.15.1.el8_5]" date="1643716800">- net/mlx5: DR, Use FW API when updating FW-owned flow table (Michal Schmidt) [2042663 2042651]
- KVM: x86: Wait for IPIs to be delivered when handling Hyper-V TLB flush hypercall (Vitaly Kuznetsov) [2043237 1868572]
- drm/mgag200: Select clock in PLL update functions (Bruno Meneguele) [2034949 1953926]
- drm/i915: Fix HAS_LSPCON macro for platforms between GEN9 and GEN10 (Bruno Meneguele) [2027335 2005586]
- crypto: qat - power up 4xxx device (Vladis Dronov) [2016437 1960307]
- RDMA/core: Fix a double free in add_port error flow (Kamal Heib) [2038724 2008555]
- powerpc/iommu: Report the correct most efficient DMA mask for PCI devices (Steve Best) [2018928 2007425]
- powerpc/dma: Fix dma_map_ops::get_required_mask (Steve Best) [2018928 2007425]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.16.1.el8_5]" date="1644321600">- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047601 2047602] {CVE-2022-22942}
- net: openvswitch: Fix ct_state nat flags for conns arriving from tc (Marcelo Ricardo Leitner) [2043548 2040334]
- net: openvswitch: Fix matching zone id for invalid conns arriving from tc (Marcelo Ricardo Leitner) [2043550 2040452]
- net/sched: flow_dissector: Fix matching on zone id for invalid conns (Marcelo Ricardo Leitner) [2043550 2040452]
- net/sched: Extend qdisc control block with tc control block (Marcelo Ricardo Leitner) [2043550 2040452]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.17.1.el8_5]" date="1644926400">- vfs: check dentry is still valid in get_link() (Ian Kent) [2052558 2014846]
- xfs: don't expose internal symlink metadata buffers to the vfs (Brian Foster) [2052558 2014846]
- CI: Use appropriate zstream builder (Veronika Kabatova)
- CI: Enable baseline realtime checks (Veronika Kabatova)
- CI: Rename pipelines to include release names (Veronika Kabatova)
- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052166 2052167] {CVE-2022-0492}
- ice: Remove boolean vlan_promisc flag from function (Jonathan Toppins) [2051951 2030400]
- ceph: put the requests/sessions when it fails to alloc memory (Jeffrey Layton) [2053725 2017796]
- ceph: fix off by one bugs in unsafe_request_wait() (Jeffrey Layton) [2053725 2017796]
- ceph: flush the mdlog before waiting on unsafe reqs (Jeffrey Layton) [2053725 2017796]
- ceph: flush mdlog before umounting (Jeffrey Layton) [2053725 2017796]
- ceph: make iterate_sessions a global symbol (Jeffrey Layton) [2053725 2017796]
- ceph: make ceph_create_session_msg a global symbol (Jeffrey Layton) [2053725 2017796]
- xfs: check sb_meta_uuid for dabuf buffer recovery (Bill O'Donnell) [2049292 2020764]
- drm/i915: Flush TLBs before releasing backing store (Patrick Talbert) [2044328 2044329] {CVE-2022-0330}
- hugetlb: fix hugetlb cgroup refcounting during vma split (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: fix imbalanced css_get and css_put pair for shared mappings (Waiman Long) [2039015 2032811]
- mm/hugetlb: change hugetlb_reserve_pages() to type bool (Waiman Long) [2039015 2032811]
- hugetlb: fix an error code in hugetlb_reserve_pages() (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: fix offline of hugetlb cgroup with reservations (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: fix reservation accounting (Waiman Long) [2039015 2032811]
- mm/hugetlb: narrow the hugetlb_lock protection area during preparing huge page (Waiman Long) [2039015 2032811]
- mm/hugetlb: a page from buddy is not on any list (Waiman Long) [2039015 2032811]
- mm/hugetlb: not necessary to coalesce regions recursively (Waiman Long) [2039015 2032811]
- selftests/vm/write_to_hugetlbfs.c: fix unused variable warning (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add hugetlb_cgroup reservation tests (Waiman Long) [2039015 2032811]
- hugetlb: support file_region coalescing again (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: support noreserve mappings (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add accounting for shared mappings (Waiman Long) [2039015 2032811]
- hugetlb: disable region_add file_region coalescing (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add reservation accounting for private mappings (Waiman Long) [2039015 2032811]
- mm/hugetlb_cgroup: fix hugetlb_cgroup migration (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add interface for charge/uncharge hugetlb reservations (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add hugetlb_cgroup reservation counter (Waiman Long) [2039015 2032811]
- hugetlb: remove duplicated code (Waiman Long) [2039015 2032811]
- hugetlb: region_chg provides only cache entry (Waiman Long) [2039015 2032811]
- hugetlbfs: always use address space in inode for resv_map pointer (Waiman Long) [2039015 2032811]
- hugetlbfs: fix potential over/underflow setting node specific nr_hugepages (Waiman Long) [2039015 2032811]
- hugetlb: allow to free gigantic pages regardless of the configuration (Waiman Long) [2039015 2032811]
- powerpc/pseries: Fix update of LPAR security flavor after LPM (Steve Best) [2027448 1997294]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.18.1.el8_5]" date="1645531200">- selftests: kvm: Check whether SIDA memop fails for normal guests (Thomas Huth) [2050806 2050807] {CVE-2022-0516}
- KVM: s390: Return error on SIDA memop on normal guest (Thomas Huth) [2050806 2050807] {CVE-2022-0516}
- iommu/amd: Remove iommu_init_ga() (Jerry Snitselaar) [2030854 1998265]
- iommu/amd: Relocate GAMSup check to early_enable_iommus (Jerry Snitselaar) [2030854 1998265]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.19.1.el8_5]" date="1646049600">- tipc: improve size validations for received domain records (Xin Long) [2048970 2048971] {CVE-2022-0435}
- smb3: do not error on fsync when readonly (Ronnie Sahlberg) [2055824 2037811]
- security: implement sctp_assoc_established hook in selinux (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- security: add sctp_assoc_established hook (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- security: call security_sctp_assoc_request in sctp_sf_do_5_1D_ce (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- security: pass asoc to sctp_assoc_request and sctp_sk_clone (Bruno Meneguele) [2054112 2054117 2015525 2048251]
- net: sctp: Fix some typos (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- RDMA/bnxt_re: Fix stats counters (Selvin Xavier) [2049684 2001893]
- net: check skb sec_path when re-initializing slow_gro in gro_list_prepare (Xin Long) [2047427 2030476]
- cpufreq: intel_pstate: Add Icelake servers support in no-HWP mode (David Arcari) [2036888 2003695]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.20.1.el8_5]" date="1646740800">- lib/iov_iter: initialize "flags" in new pipe_buffer (Jan Stancek) [2060874 2060875] {CVE-2022-0847}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.21.1.el8_5]" date="1647950400">- netfilter: nf_queue: handle socket prefetch (Florian Westphal) [2061446 2009786]
- netfilter: nf_queue: fix possible use-after-free (Florian Westphal) [2061446 2009786]
- selftests: netfilter: add nfqueue TCP_NEW_SYN_RECV socket race test (Florian Westphal) [2061446 2009786]
- netfilter: nf_queue: don't assume sk is full socket (Florian Westphal) [2061446 2009786]
- netfilter: nf_tables_offload: incorrect flow offload action array size (Florian Westphal) [2056867 2056728] {CVE-2022-25636}
- netfilter: nftables_offload: KASAN slab-out-of-bounds Read in nft_flow_rule_create (Florian Westphal) [2056867 2056728] {CVE-2022-25636}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.22.1.el8_5]" date="1649160000">- scsi: lpfc: Fix non-recovery of remote ports following an unsolicited LOGO (Dick Kennedy) [2058193 2027558]
- cifs: check all path components in resolved dfs target (Ronnie Sahlberg) [2056329 2030880]
- RDMA/cma: Do not change route.addr.src_addr.ss_family (Kamal Heib) [2032073 2032074] {CVE-2021-4028}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.23.1.el8_5]" date="1649764800">- gfs2: dequeue iopen holder in gfs2_inode_lookup error (Bob Peterson) [2069750 2061665]</changelog>
</package>
<package pkgid="f361ec32c521d86bd4f03131c24856aa7d41878a5cf1b211584a083f0669b29d" name="kernel-debug-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="348.7.1.el8_5"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-346.el8]" date="1633089600">- redhat: switch secureboot kernel image signing to release keys (Bruno Meneguele)
- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Fix RT check branch name (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- Revert "Merge: mt7921e: enable new Mediatek wireless hardware" (Bruno Meneguele) [2009501]
- megaraid_sas: fix concurrent access to ISR between IRQ polling and real interrupt (Tomas Henzl) [2009022]
- scsi: megaraid_sas: mq_poll support (Tomas Henzl) [2009022]
- [PATCH v2] scsi: qla2xxx: Suppress unnecessary log messages during login (Nilesh Javali) [1982186]
- scsi: qla2xxx: Fix excessive messages during device logout (Nilesh Javali) [1982186]
- PCI: pciehp: Ignore Link Down/Up caused by DPC (Myron Stowe) [1981741]
- arm64: kpti: Fix "kpti=off" when KASLR is enabled (Mark Salter) [1979731]
- arm64: Fix CONFIG_ARCH_RANDOM=n build (Mark Salter) [1979731]
- redhat/configs: aarch64: add CONFIG_ARCH_RANDOM (Mark Salter) [1979731]
- arm64: Implement archrandom.h for ARMv8.5-RNG (Mark Salter) [1979731]
- arm64: kconfig: Fix alignment of E0PD help text (Mark Salter) [1979731]
- arm64: Use register field helper in kaslr_requires_kpti() (Mark Salter) [1979731]
- arm64: Simplify early check for broken TX1 when KASLR is enabled (Mark Salter) [1979731]
- arm64: Use a variable to store non-global mappings decision (Mark Salter) [1979731]
- arm64: Don't use KPTI where we have E0PD (Mark Salter) [1979731]
- arm64: Factor out checks for KASLR in KPTI code into separate function (Mark Salter) [1979731]
- redhat/configs: Add CONFIG_ARM64_E0PD (Mark Salter) [1979731]
- arm64: Add initial support for E0PD (Mark Salter) [1979731]
- arm64: cpufeature: Export matrix and other features to userspace (Mark Salter) [1980098]
- arm64: docs: cpu-feature-registers: Document ID_AA64PFR1_EL1 (Mark Salter) [1980098]
- docs/arm64: cpu-feature-registers: Rewrite bitfields that don't follow [e, s] (Mark Salter) [1980098]
- docs/arm64: cpu-feature-registers: Documents missing visible fields (Mark Salter) [1980098]
- arm64: Introduce system_capabilities_finalized() marker (Mark Salter) [1980098]
- arm64: entry.S: Do not preempt from IRQ before all cpufeatures are enabled (Mark Salter) [1980098]
- docs/arm64: elf_hwcaps: Document HWCAP_SB (Mark Salter) [1980098]
- docs/arm64: elf_hwcaps: sort the HWCAP{, 2} documentation by ascending value (Mark Salter) [1980098]
- arm64: cpufeature: Treat ID_AA64ZFR0_EL1 as RAZ when SVE is not enabled (Mark Salter) [1980098]
- arm64: cpufeature: Effectively expose FRINT capability to userspace (Mark Salter) [1980098]
- arm64: cpufeature: Fix feature comparison for CTR_EL0.{CWG,ERG} (Mark Salter) [1980098]
- arm64: Expose FRINT capabilities to userspace (Mark Salter) [1980098]
- arm64: Expose ARMv8.5 CondM capability to userspace (Mark Salter) [1980098]
- docs: arm64: convert perf.txt to ReST format (Mark Salter) [1980098]
- docs: arm64: convert docs to ReST and rename to .rst (Mark Salter) [1980098]
- Documentation/arm64: HugeTLB page implementation (Mark Salter) [1980098]
- Documentation/arm64/sve: Couple of improvements and typos (Mark Salter) [1980098]
- arm64: cpufeature: Fix missing ZFR0 in __read_sysreg_by_encoding() (Mark Salter) [1980098]
- arm64: Expose SVE2 features for userspace (Mark Salter) [1980098]
- arm64: Advertise ARM64_HAS_DCPODP cpu feature (Mark Salter) [1980098]
- arm64: add CVADP support to the cache maintenance helper (Mark Salter) [1980098]
- arm64: Fix minor issues with the dcache_by_line_op macro (Mark Salter) [1980098]
- arm64: Expose DC CVADP to userspace (Mark Salter) [1980098]
- arm64: Handle trapped DC CVADP (Mark Salter) [1980098]
- arm64: HWCAP: encapsulate elf_hwcap (Mark Salter) [1980098]
- arm64: HWCAP: add support for AT_HWCAP2 (Mark Salter) [1980098]
- x86/MCE/AMD, EDAC/mce_amd: Add new SMCA bank types (Aristeu Rozanski) [1965331]
- x86/MCE/AMD, EDAC/mce_amd: Remove struct smca_hwid.xec_bitmap (Aristeu Rozanski) [1965331]
- EDAC, mce_amd: Print ExtErrorCode and description on a single line (Aristeu Rozanski) [1965331]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-347.el8]" date="1633176000">- PCI: Mark TI C667X to avoid bus reset (Alex Williamson) [1975768]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.el8]" date="1633348800">- drm/nouveau/fifo/ga102: initialise chid on return from channel creation (Ben Skeggs) [1997878]
- drm/nouveau/ga102-: support ttm buffer moves via copy engine (Ben Skeggs) [1997878]
- drm/nouveau/kms/tu102-: delay enabling cursor until after assign_windows (Ben Skeggs) [1997878]
- drm/nouveau/kms/nv50: workaround EFI GOP window channel format differences (Ben Skeggs) [1997878]
- drm/nouveau/disp: power down unused DP links during init (Ben Skeggs) [1997878]
- drm/nouveau: recognise GA107 (Ben Skeggs) [1997878]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.1.1.el8_5]" date="1635940800">- lib/timerqueue: Rely on rbtree semantics for next timer (Phil Auld) [2014677 2007099] {CVE-2021-20317}
- mm/hmm: make HMM_MIRROR an implicit option (Rafael Aquini) [2017519 1998534]
- mm/hmm: allow HMM_MIRROR on all architectures with MMU (Rafael Aquini) [2017519 1998534]
- mm: don't select MIGRATE_VMA_HELPER from HMM_MIRROR (Rafael Aquini) [2017519 1998534]
- mm: sort out the DEVICE_PRIVATE Kconfig mess (Rafael Aquini) [2017519 1998534]
- ceph: skip existing superblocks that are blocklisted or shut down when mounting (Jeffrey Layton) [2017071 2011462]
- redhat: switch release to zstream (Bruno Meneguele)</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.2.1.el8_5]" date="1636372800">- tipc: fix size validations for the MSG_CRYPTO type (Bruno Meneguele) [2020506 2020507] {CVE-2021-43267}
- net: Fix skb-&gt;csum update in inet_proto_csum_replace16(). (Balazs Nemeth) [2005981 1975193]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.3.1.el8_5]" date="1637064000">- net-sysfs: try not to restart the syscall if it will fail eventually (Antoine Tenart) [2021165 2016005]
- ovl: fix missing negative dentry check in ovl_rename() (Miklos Szeredi) [2016378 2010887 2013318] {CVE-2021-20321}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.4.1.el8_5]" date="1637668800">- [RHEL8.6 BZ 1849234] cifs: report error instead of invalid when revalidating a dentry fails (Ronnie Sahlberg) [2017177 1849234]
- kthread: Fix PF_KTHREAD vs to_kthread() race (Waiman Long) [2010333 2001497]
- sched/fair: Ignore percpu threads for imbalance pulls (Waiman Long) [2010333 2001497]
- kthread: Extract KTHREAD_IS_PER_CPU (Waiman Long) [2010333 2001497]
- sched: Optimize finish_lock_switch() (Waiman Long) [2010333 2001497]
- sched/hotplug: Ensure only per-cpu kthreads run during hotplug (Waiman Long) [2010333 2001497]
- sched: Fix balance_callback() (Waiman Long) [2010333 2001497]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.5.1.el8_5]" date="1638273600">- blk-mq: still set q-&gt;make_request_fn for blk-mq (Ming Lei) [2016384 1999728]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.6.1.el8_5]" date="1638878400">- x86/Kconfig: Do not enable AMD_MEM_ENCRYPT_ACTIVE_BY_DEFAULT automatically (Prarit Bhargava) [2024678 2021219]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.7.1.el8_5]" date="1638964800">- sched: Fix CPU hotplug / tighten is_per_cpu_kthread() (Waiman Long) [2026450 2024869]
- sched: Prepare to use balance_push in ttwu() (Waiman Long) [2026450 2024869]
- sched: Don't run cpu-online with balance_push() enabled (Waiman Long) [2026450 2024869]
- workqueue: Tag bound workers with KTHREAD_IS_PER_CPU (Waiman Long) [2026450 2024869]
- workqueue: Use cpu_possible_mask instead of cpu_active_mask to break affinity (Waiman Long) [2026450 2024869]
- sched: Fix hotplug vs CPU bandwidth control (Waiman Long) [2026450 2024869]
- workqueue: Manually break affinity on hotplug (Waiman Long) [2026450 2024869]
- sched/hotplug: Consolidate task migration on CPU unplug (Waiman Long) [2026450 2024869]
- sched/core: Wait for tasks being pushed away on hotplug (Waiman Long) [2026450 2024869]</changelog>
</package>
<package pkgid="2873559b00fe722297d9f4833605829dc0a62bc444d8d4f04f213207a6a5a844" name="kernel-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="348.12.2.el8_5"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.4.1.el8_5]" date="1637668800">- [RHEL8.6 BZ 1849234] cifs: report error instead of invalid when revalidating a dentry fails (Ronnie Sahlberg) [2017177 1849234]
- kthread: Fix PF_KTHREAD vs to_kthread() race (Waiman Long) [2010333 2001497]
- sched/fair: Ignore percpu threads for imbalance pulls (Waiman Long) [2010333 2001497]
- kthread: Extract KTHREAD_IS_PER_CPU (Waiman Long) [2010333 2001497]
- sched: Optimize finish_lock_switch() (Waiman Long) [2010333 2001497]
- sched/hotplug: Ensure only per-cpu kthreads run during hotplug (Waiman Long) [2010333 2001497]
- sched: Fix balance_callback() (Waiman Long) [2010333 2001497]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.5.1.el8_5]" date="1638273600">- blk-mq: still set q-&gt;make_request_fn for blk-mq (Ming Lei) [2016384 1999728]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.6.1.el8_5]" date="1638878400">- x86/Kconfig: Do not enable AMD_MEM_ENCRYPT_ACTIVE_BY_DEFAULT automatically (Prarit Bhargava) [2024678 2021219]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.7.1.el8_5]" date="1638964800">- sched: Fix CPU hotplug / tighten is_per_cpu_kthread() (Waiman Long) [2026450 2024869]
- sched: Prepare to use balance_push in ttwu() (Waiman Long) [2026450 2024869]
- sched: Don't run cpu-online with balance_push() enabled (Waiman Long) [2026450 2024869]
- workqueue: Tag bound workers with KTHREAD_IS_PER_CPU (Waiman Long) [2026450 2024869]
- workqueue: Use cpu_possible_mask instead of cpu_active_mask to break affinity (Waiman Long) [2026450 2024869]
- sched: Fix hotplug vs CPU bandwidth control (Waiman Long) [2026450 2024869]
- workqueue: Manually break affinity on hotplug (Waiman Long) [2026450 2024869]
- sched/hotplug: Consolidate task migration on CPU unplug (Waiman Long) [2026450 2024869]
- sched/core: Wait for tasks being pushed away on hotplug (Waiman Long) [2026450 2024869]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.8.1.el8_5]" date="1639483200">- ice: Fix VF true promiscuous mode (Jonathan Toppins) [2026698 1970643]
- ice: Remove toggling of antispoof for VF trusted promiscuous mode (Jonathan Toppins) [2026698 1970643]
- ice: Fix replacing VF hardware MAC to existing MAC filter (Jonathan Toppins) [2026698 1970643]
- ice: Fix not stopping Tx queues for VFs (Jonathan Toppins) [2026698 1970643]
- ice: Fix race conditions between virtchnl handling and VF ndo ops (Jonathan Toppins) [2026698 1970643]
- net/netif_receive_skb_core: Use migrate_disable() (Luis Claudio R. Goncalves) [2027689 2024168]
- crypto: jitter - consider 32 LSB for APT (Herbert Xu) [2029365 1994390]
- xfs: fix I_DONTCACHE (Carlos Maiolino) [2028534 2024969]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.9.1.el8_5]" date="1640001600">- ixgbe: Revert "bpf, devmap: Move drop error path to devmap for XDP_REDIRECT" (Ken Cox) [2029845 2024240]
- i40e: Revert "bpf, devmap: Move drop error path to devmap for XDP_REDIRECT" (Stefan Assmann) [2029845 2024225]
- rcu/nocb: Perform deferred wake up before last idle's need_resched() check (Waiman Long) [2029449 2008340]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.10.1.el8_5]" date="1640779200">- selftests: add a test case for mirred egress to ingress (Xin Long) [2024411 1983894]
- net: sched: act_mirred: drop dst for the direction from egress to ingress (Xin Long) [2024411 1983894]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.11.1.el8_5]" date="1641297600">- blk-mq: avoid to iterate over stale request (Ming Lei) [2034396 1997338]
- rcu: Tighten rcu_advance_cbs_nowake() checks (Daniel Vacek) [2032579 2013408]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.12.1.el8_5]" date="1641988800">- tcp: don't free a FIN sk_buff in tcp_remove_empty_skb() (Guillaume Nault) [2021574 2016210]
- kernel.spec: Add support to use vmlinux.h (Jiri Olsa) [2031053 1989087]
- spec: Add vmlinux.h to kernel-devel package (Jiri Olsa) [2031053 1989087]
- x86/mce: Avoid infinite loop for copy from user recovery (Prarit Bhargava) [2008789 1999550]
- x86/mce: Rename kill_it to kill_current_task (Prarit Bhargava) [2008789 1999550]
- x86/mce: Recover from poison found while copying from user space (Prarit Bhargava) [2008789 1999550]
- x86/mce: Delay clearing IA32_MCG_STATUS to the end of do_machine_check() (Prarit Bhargava) [2008789 1999550]
- x86/mce: Send #MC singal from task work (Prarit Bhargava) [2008789 1999550]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-348.12.2.el8_5]" date="1642420800">- vfs: Out-of-bounds write of heap buffer in fs_context.c (Frantisek Hrbata) [2040585 2040586] {CVE-2022-0185}
- xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Bruno Meneguele) [2034864 2034865] {CVE-2021-4155}</changelog>
</package>
<package pkgid="0f50c6129d2a00b103ce94624fc0159c7594ff514b72975a30802905b04ba291" name="kernel-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="348.2.1.el8_5"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-341.el8]" date="1631275200">- mptcp: Only send extra TCP acks in eligible socket states (Paolo Abeni) [1997178]
- mptcp: fix possible divide by zero (Paolo Abeni) [1997178]
- mptcp: drop tx skb cache (Paolo Abeni) [1997178]
- mptcp: fix memory leak on address flush (Paolo Abeni) [1997178]
- ice: Only lock to update netdev dev_addr (Michal Schmidt) [1995868]
- ice: restart periodic outputs around time changes (Ken Cox) [1992750]
- ice: Fix perout start time rounding (Ken Cox) [1992750]
- net/sched: ets: fix crash when flipping from 'strict' to 'quantum' (Davide Caratti) [1981184]
- ovl: prevent private clone if bind mount is not allowed (Miklos Szeredi) [1993131] {CVE-2021-3732}
- gfs2: Don't call dlm after protocol is unmounted (Bob Peterson) [1997193]
- gfs2: don't stop reads while withdraw in progress (Bob Peterson) [1997193]
- gfs2: Mark journal inodes as "don't cache" (Bob Peterson) [1997193]
- bpf: bpftool: Add -fno-asynchronous-unwind-tables to BPF Clang invocation (Yauheni Kaliuta) [1997124]
- perf/x86/intel: Apply mid ACK for small core (Michael Petlan) [1838573]
- perf/x86/intel/lbr: Zero the xstate buffer on allocation (Michael Petlan) [1838573]
- perf: Fix task context PMU for Hetero (Michael Petlan) [1838573]
- perf/x86/intel: Fix fixed counter check warning for some Alder Lake (Michael Petlan) [1838573]
- perf/x86/lbr: Remove cpuc-&gt;lbr_xsave allocation from atomic context (Michael Petlan) [1838573]
- x86/fpu/xstate: Fix an xstate size check warning with architectural LBRs (Michael Petlan) [1838573]
- perf/x86/rapl: Add support for Intel Alder Lake (Michael Petlan) [1838573]
- perf/x86/cstate: Add Alder Lake CPU support (Michael Petlan) [1838573]
- perf/x86/msr: Add Alder Lake CPU support (Michael Petlan) [1838573]
- perf/x86/intel/uncore: Add Alder Lake support (Michael Petlan) [1838573]
- perf: Extend PERF_TYPE_HARDWARE and PERF_TYPE_HW_CACHE (Michael Petlan) [1838573]
- perf/x86/intel: Add Alder Lake Hybrid support (Michael Petlan) [1838573]
- perf/x86: Support filter_match callback (Michael Petlan) [1838573]
- perf/x86/intel: Add attr_update for Hybrid PMUs (Michael Petlan) [1838573]
- perf/x86: Add structures for the attributes of Hybrid PMUs (Michael Petlan) [1838573]
- perf/x86: Register hybrid PMUs (Michael Petlan) [1838573]
- perf/x86: Factor out x86_pmu_show_pmu_cap (Michael Petlan) [1838573]
- perf/x86: Remove temporary pmu assignment in event_init (Michael Petlan) [1838573]
- perf/x86/intel: Factor out intel_pmu_check_extra_regs (Michael Petlan) [1838573]
- perf/x86/intel: Factor out intel_pmu_check_event_constraints (Michael Petlan) [1838573]
- perf/x86/intel: Factor out intel_pmu_check_num_counters (Michael Petlan) [1838573]
- perf/x86: Hybrid PMU support for extra_regs (Michael Petlan) [1838573]
- perf/x86: Hybrid PMU support for event constraints (Michael Petlan) [1838573]
- perf/x86: Hybrid PMU support for hardware cache event (Michael Petlan) [1838573]
- perf/x86: Hybrid PMU support for unconstrained (Michael Petlan) [1838573]
- perf/x86: Hybrid PMU support for counters (Michael Petlan) [1838573]
- perf/x86: Hybrid PMU support for intel_ctrl (Michael Petlan) [1838573]
- perf/x86/intel: Hybrid PMU support for perf capabilities (Michael Petlan) [1838573]
- perf/x86: Track pmu in per-CPU cpu_hw_events (Michael Petlan) [1838573]
- perf/x86/intel/lbr: Support XSAVES for arch LBR read (Michael Petlan) [1838573]
- perf/x86/intel/lbr: Support XSAVES/XRSTORS for LBR context switch (Michael Petlan) [1838573]
- x86/fpu/xstate: Add helpers for LBR dynamic supervisor feature (Michael Petlan) [1838573]
- x86/fpu/xstate: Support dynamic supervisor feature for LBR (Michael Petlan) [1838573]
- x86/fpu: Use proper mask to replace full instruction mask (Michael Petlan) [1838573]
- x86/cpu: Add helper function to get the type of the current hybrid CPU (Michael Petlan) [1838573]
- x86/cpufeatures: Enumerate Intel Hybrid Technology feature bit (Michael Petlan) [1838573]
- HID: make arrays usage and value to be the same (Benjamin Tissoires) [1974942]
- ACPI: PM: s2idle: Invert Microsoft UUID entry and exit (David Arcari) [1960440]
- platform/x86: amd-pmc: Fix undefined reference to __udivdi3 (David Arcari) [1960440]
- platform/x86: amd-pmc: Fix missing unlock on error in amd_pmc_send_cmd() (David Arcari) [1960440]
- platform/x86: amd-pmc: Use return code on suspend (David Arcari) [1960440]
- platform/x86: amd-pmc: Add new acpi id for future PMC controllers (David Arcari) [1960440]
- platform/x86: amd-pmc: Add support for ACPI ID AMDI0006 (David Arcari) [1960440]
- platform/x86: amd-pmc: Add support for logging s0ix counters (David Arcari) [1960440]
- platform/x86: amd-pmc: Add support for logging SMU metrics (David Arcari) [1960440]
- platform/x86: amd-pmc: call dump registers only once (David Arcari) [1960440]
- platform/x86: amd-pmc: Fix SMU firmware reporting mechanism (David Arcari) [1960440]
- platform/x86: amd-pmc: Fix command completion code (David Arcari) [1960440]
- usb: pci-quirks: disable D3cold on xhci suspend for s2idle on AMD Renoir (David Arcari) [1960440]
- ACPI: PM: Only mark EC GPE for wakeup on Intel systems (David Arcari) [1960440]
- ACPI: PM: Adjust behavior for field problems on AMD systems (David Arcari) [1960440]
- ACPI: PM: s2idle: Add support for new Microsoft UUID (David Arcari) [1960440]
- ACPI: PM: s2idle: Add support for multiple func mask (David Arcari) [1960440]
- ACPI: PM: s2idle: Refactor common code (David Arcari) [1960440]
- ACPI: PM: s2idle: Use correct revision id (David Arcari) [1960440]
- ACPI: PM: s2idle: Add missing LPS0 functions for AMD (David Arcari) [1960440]
- lockd: Fix invalid lockowner cast after vfs_test_lock (Benjamin Coddington) [1986138]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-342.el8]" date="1631620800">- selftest: netfilter: add test case for unreplied tcp connections (Florian Westphal) [1991523]
- netfilter: conntrack: do not renew entry stuck in tcp SYN_SENT state (Florian Westphal) [1991523]
- net/sched: store the last executed chain also for clsact egress (Davide Caratti) [1980537]
- ice: fix Tx queue iteration for Tx timestamp enablement (Ken Cox) [1999743]
- perf evsel: Add missing cloning of evsel-&gt;use_config_name (Michael Petlan) [1838635]
- perf Documentation: Document intel-hybrid support (Michael Petlan) [1838635]
- perf tests: Skip 'perf stat metrics (shadow stat) test' for hybrid (Michael Petlan) [1838635]
- perf tests: Support 'Convert perf time to TSC' test for hybrid (Michael Petlan) [1838635]
- perf tests: Support 'Session topology' test for hybrid (Michael Petlan) [1838635]
- perf tests: Support 'Parse and process metrics' test for hybrid (Michael Petlan) [1838635]
- perf tests: Support 'Track with sched_switch' test for hybrid (Michael Petlan) [1838635]
- perf tests: Skip 'Setup struct perf_event_attr' test for hybrid (Michael Petlan) [1838635]
- perf tests: Add hybrid cases for 'Roundtrip evsel-&gt;name' test (Michael Petlan) [1838635]
- perf tests: Add hybrid cases for 'Parse event definition strings' test (Michael Petlan) [1838635]
- perf record: Uniquify hybrid event name (Michael Petlan) [1838635]
- perf stat: Warn group events from different hybrid PMU (Michael Petlan) [1838635]
- perf stat: Filter out unmatched aggregation for hybrid event (Michael Petlan) [1838635]
- perf stat: Add default hybrid events (Michael Petlan) [1838635]
- perf record: Create two hybrid 'cycles' events by default (Michael Petlan) [1838635]
- perf parse-events: Support event inside hybrid pmu (Michael Petlan) [1838635]
- perf parse-events: Compare with hybrid pmu name (Michael Petlan) [1838635]
- perf parse-events: Create two hybrid raw events (Michael Petlan) [1838635]
- perf parse-events: Create two hybrid cache events (Michael Petlan) [1838635]
- perf parse-events: Create two hybrid hardware events (Michael Petlan) [1838635]
- perf stat: Uniquify hybrid event name (Michael Petlan) [1838635]
- perf pmu: Add hybrid helper functions (Michael Petlan) [1838635]
- perf pmu: Save detected hybrid pmus to a global pmu list (Michael Petlan) [1838635]
- perf pmu: Save pmu name (Michael Petlan) [1838635]
- perf pmu: Simplify arguments of __perf_pmu__new_alias (Michael Petlan) [1838635]
- perf jevents: Support unit value "cpu_core" and "cpu_atom" (Michael Petlan) [1838635]
- tools headers uapi: Update tools's copy of linux/perf_event.h (Michael Petlan) [1838635]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-343.el8]" date="1631793600">- rcu: Avoid unneeded function call in rcu_read_unlock() (Waiman Long) [1997500]
- mt76: connac: do not schedule mac_work if the device is not running (Íñigo Huguet) [1956419 1972045]
- mt7921e: enable module in config (Íñigo Huguet) [1956419 1972045]
- Revert tools/power/cpupower: Read energy_perf_bias from sysfs (Steve Best) [1999926]
- libnvdimm/namespace: Differentiate between probe mapping and runtime mapping (Jeff Moyer) [1795719]
- libnvdimm/pfn_dev: Don't clear device memmap area during generic namespace probe (Jeff Moyer) [1795719]
- perf/x86/intel/uncore: Clean up error handling path of iio mapping (Michael Petlan) [1837330]
- perf/x86/intel/uncore: Fix for iio mapping on Skylake Server (Michael Petlan) [1837330]
- perf/x86/intel/uncore: Generic support for the MMIO type of uncore blocks (Michael Petlan) [1837330]
- perf/x86/intel/uncore: Generic support for the PCI type of uncore blocks (Michael Petlan) [1837330]
- perf/x86/intel/uncore: Rename uncore_notifier to uncore_pci_sub_notifier (Michael Petlan) [1837330]
- perf/x86/intel/uncore: Generic support for the MSR type of uncore blocks (Michael Petlan) [1837330]
- perf/x86/intel/uncore: Parse uncore discovery tables (Michael Petlan) [1837330]
- perf/x86/intel/uncore: Expose an Uncore unit to IIO PMON mapping (Michael Petlan) [1837330]
- perf/x86/intel/uncore: Wrap the max dies calculation into an accessor (Michael Petlan) [1837330]
- perf/x86/intel/uncore: Expose an Uncore unit to PMON mapping (Michael Petlan) [1837330]
- perf/x86/intel/uncore: Validate MMIO address before accessing (Michael Petlan) [1837330]
- perf/x86/intel/uncore: Record the size of mapped area (Michael Petlan) [1837330]
- perf/x86/intel/uncore: Fix oops when counting IMC uncore events on some TGL (Michael Petlan) [1837330]
- crypto: qat - remove unused macro in FW loader (Vladis Dronov) [1920086]
- crypto: qat - check return code of qat_hal_rd_rel_reg() (Vladis Dronov) [1920086]
- crypto: qat - report an error if MMP file size is too large (Vladis Dronov) [1920086]
- crypto: qat - check MMP size before writing to the SRAM (Vladis Dronov) [1920086]
- crypto: qat - return error when failing to map FW (Vladis Dronov) [1920086]
- crypto: qat - enable detection of accelerators hang (Vladis Dronov) [1920086]
- crypto: qat - Fix a double free in adf_create_ring (Vladis Dronov) [1920086]
- crypto: qat - fix error path in adf_isr_resource_alloc() (Vladis Dronov) [1920086]
- crypto: qat - ADF_STATUS_PF_RUNNING should be set after adf_dev_init (Vladis Dronov) [1920086]
- crypto: qat - don't release uninitialized resources (Vladis Dronov) [1920086]
- crypto: qat - fix use of 'dma_map_single' (Vladis Dronov) [1920086]
- crypto: qat - fix unmap invalid dma address (Vladis Dronov) [1920086]
- crypto: qat - fix spelling mistake: "messge" -&gt; "message" (Vladis Dronov) [1920086]
- crypto: qat - reduce size of mapped region (Vladis Dronov) [1920086]
- crypto: qat - change format string and cast ring size (Vladis Dronov) [1920086]
- crypto: qat - fix potential spectre issue (Vladis Dronov) [1920086]
- crypto: qat - configure arbiter mapping based on engines enabled (Vladis Dronov) [1920086]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-344.el8]" date="1632139200">- perf/x86/intel: Fix PEBS-via-PT reload base value for Extended PEBS (Michael Petlan) [1998051]
- perf/x86/intel/uncore: Fix Add BW copypasta (Michael Petlan) [1998051]
- perf/x86/intel/uncore: Add BW counters for GT, IA and IO breakdown (Michael Petlan) [1998051]
- Revert "ice: Add initial support framework for LAG" (Michal Schmidt) [1999016]
- net: re-initialize slow_gro flag at gro_list_prepare time (Paolo Abeni) [2002367]
- cxgb4: dont touch blocked freelist bitmap after free (Rahul Lakkireddy) [1998148]
- cxgb4vf: configure ports accessible by the VF (Rahul Lakkireddy) [1961329]
- scsi: lpfc: Fix memory leaks in error paths while issuing ELS RDF/SCR request (Dick Kennedy) [1976332]
- scsi: lpfc: Keep NDLP reference until after freeing the IOCB after ELS handling (Dick Kennedy) [1976332]
- scsi: lpfc: Move initialization of phba-&gt;poll_list earlier to avoid crash (Dick Kennedy) [1976332]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-345.el8]" date="1632398400">- e1000e: Do not take care about recovery NVM checksum (Ken Cox) [1984558]
- qrtr: disable CONFIG_QRTR for non x86_64 archs (Íñigo Huguet) [1999642]
- ceph: fix possible null-pointer dereference in ceph_mdsmap_decode() (Jeff Layton) [1989999]
- ceph: fix dereference of null pointer cf (Jeff Layton) [1989999]
- ceph: correctly handle releasing an embedded cap flush (Jeff Layton) [1989999]
- ceph: take snap_empty_lock atomically with snaprealm refcount change (Jeff Layton) [1989999]
- ceph: don't WARN if we're still opening a session to an MDS (Jeff Layton) [1989999]
- rbd: don't hold lock_rwsem while running_list is being drained (Jeff Layton) [1989999]
- rbd: always kick acquire on "acquired" and "released" notifications (Jeff Layton) [1989999]
- ceph: take reference to req-&gt;r_parent at point of assignment (Jeff Layton) [1989999]
- ceph: eliminate ceph_async_iput() (Jeff Layton) [1989999]
- ceph: don't take s_mutex in ceph_flush_snaps (Jeff Layton) [1989999]
- ceph: don't take s_mutex in try_flush_caps (Jeff Layton) [1989999]
- ceph: don't take s_mutex or snap_rwsem in ceph_check_caps (Jeff Layton) [1989999]
- ceph: eliminate session-&gt;s_gen_ttl_lock (Jeff Layton) [1989999]
- ceph: allow ceph_put_mds_session to take NULL or ERR_PTR (Jeff Layton) [1989999]
- ceph: clean up locking annotation for ceph_get_snap_realm and __lookup_snap_realm (Jeff Layton) [1989999]
- ceph: add some lockdep assertions around snaprealm handling (Jeff Layton) [1989999]
- ceph: decoding error in ceph_update_snap_realm should return -EIO (Jeff Layton) [1989999]
- ceph: add IO size metrics support (Jeff Layton) [1989999]
- ceph: update and rename __update_latency helper to __update_stdev (Jeff Layton) [1989999]
- ceph: simplify the metrics struct (Jeff Layton) [1989999]
- libceph: fix doc warnings in cls_lock_client.c (Jeff Layton) [1989999]
- libceph: remove unnecessary ret variable in ceph_auth_init() (Jeff Layton) [1989999]
- libceph: kill ceph_none_authorizer::reply_buf (Jeff Layton) [1989999]
- ceph: make ceph_queue_cap_snap static (Jeff Layton) [1989999]
- ceph: remove bogus checks and WARN_ONs from ceph_set_page_dirty (Jeff Layton) [1989999]
- libceph: set global_id as soon as we get an auth ticket (Jeff Layton) [1989999]
- libceph: don't pass result into ac-&gt;ops-&gt;handle_reply() (Jeff Layton) [1989999]
- ceph: fix error handling in ceph_atomic_open and ceph_lookup (Jeff Layton) [1989999]
- ceph: must hold snap_rwsem when filling inode for async create (Jeff Layton) [1989999]
- libceph: Fix spelling mistakes (Jeff Layton) [1989999]
- libceph: don't set global_id until we get an auth ticket (Jeff Layton) [1989999]
- libceph: bump CephXAuthenticate encoding version (Jeff Layton) [1989999]
- ceph: don't allow access to MDS-private inodes (Jeff Layton) [1989999]
- ceph: fix up some bare fetches of i_size (Jeff Layton) [1989999]
- ceph: support getting ceph.dir.rsnaps vxattr (Jeff Layton) [1989999]
- ceph: drop pinned_page parameter from ceph_get_caps (Jeff Layton) [1989999]
- ceph: fix inode leak on getattr error in __fh_to_dentry (Jeff Layton) [1989999]
- ceph: only check pool permissions for regular files (Jeff Layton) [1989999]
- ceph: send opened files/pinned caps/opened inodes metrics to MDS daemon (Jeff Layton) [1989999]
- ceph: avoid counting the same request twice or more (Jeff Layton) [1989999]
- ceph: rename the metric helpers (Jeff Layton) [1989999]
- ceph: fix kerneldoc copypasta over ceph_start_io_direct (Jeff Layton) [1989999]
- ceph: don't use d_add in ceph_handle_snapdir (Jeff Layton) [1989999]
- ceph: don't clobber i_snap_caps on non-I_NEW inode (Jeff Layton) [1989999]
- ceph: fix fall-through warnings for Clang (Jeff Layton) [1989999]
- net: ceph: Fix a typo in osdmap.c (Jeff Layton) [1989999]
- ceph: don't allow type or device number to change on non-I_NEW inodes (Jeff Layton) [1989999]
- ceph: defer flushing the capsnap if the Fb is used (Jeff Layton) [1989999]
- ceph: allow queueing cap/snap handling after putting cap references (Jeff Layton) [1989999]
- ceph: clean up inode work queueing (Jeff Layton) [1989999]
- ceph: fix flush_snap logic after putting caps (Jeff Layton) [1989999]
- libceph: fix "Boolean result is used in bitwise operation" warning (Jeff Layton) [1989999]
- new helper: inode_wrong_type() (Jeff Layton) [1989999]
- kabi: Adding symbol single_release (fs/seq_file.c) (Čestmír Kalina) [1945486]
- kabi: Adding symbol single_open (fs/seq_file.c) (Čestmír Kalina) [1945486]
- kabi: Adding symbol seq_read (fs/seq_file.c) (Čestmír Kalina) [1945486]
- kabi: Adding symbol seq_printf (fs/seq_file.c) (Čestmír Kalina) [1945486]
- kabi: Adding symbol seq_lseek (fs/seq_file.c) (Čestmír Kalina) [1945486]
- kabi: Adding symbol unregister_chrdev_region (fs/char_dev.c) (Čestmír Kalina) [1945486]
- kabi: Adding symbol cdev_init (fs/char_dev.c) (Čestmír Kalina) [1945486]
- kabi: Adding symbol cdev_del (fs/char_dev.c) (Čestmír Kalina) [1945486]
- kabi: Adding symbol cdev_alloc (fs/char_dev.c) (Čestmír Kalina) [1945486]
- kabi: Adding symbol cdev_add (fs/char_dev.c) (Čestmír Kalina) [1945486]
- kabi: Adding symbol alloc_chrdev_region (fs/char_dev.c) (Čestmír Kalina) [1945486]
- kabi: Adding symbol pcie_capability_read_word (drivers/pci/access.c) (Čestmír Kalina) [1945485]
- kabi: Adding symbol pcie_capability_read_dword (drivers/pci/access.c) (Čestmír Kalina) [1945485]
- kabi: Adding symbol pcie_capability_clear_and_set_word (drivers/pci/access.c) (Čestmír Kalina) [1945485]
- kabi: Adding symbol pci_write_config_dword (drivers/pci/access.c) (Čestmír Kalina) [1945485]
- kabi: Adding symbol pci_write_config_byte (drivers/pci/access.c) (Čestmír Kalina) [1945485]
- kabi: Adding symbol pci_set_power_state (drivers/pci/pci.c) (Čestmír Kalina) [1945485]
- kabi: Adding symbol pci_read_config_dword (drivers/pci/access.c) (Čestmír Kalina) [1945485]
- kabi: Adding symbol pci_read_config_byte (drivers/pci/access.c) (Čestmír Kalina) [1945485]
- kabi: Adding symbol pci_irq_vector (drivers/pci/msi.c) (Čestmír Kalina) [1945485]
- kabi: Adding symbol pci_get_device (drivers/pci/search.c) (Čestmír Kalina) [1945485]
- kabi: Adding symbol pci_free_irq_vectors (drivers/pci/msi.c) (Čestmír Kalina) [1945485]
- kabi: Adding symbol pci_alloc_irq_vectors_affinity (drivers/pci/msi.c) (Čestmír Kalina) [1945485]
- kabi: Adding symbol kexec_crash_loaded (kernel/kexec_core.c) (Čestmír Kalina) [1945491]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-346.el8]" date="1633089600">- redhat: switch secureboot kernel image signing to release keys (Bruno Meneguele)
- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Fix RT check branch name (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- Revert "Merge: mt7921e: enable new Mediatek wireless hardware" (Bruno Meneguele) [2009501]
- megaraid_sas: fix concurrent access to ISR between IRQ polling and real interrupt (Tomas Henzl) [2009022]
- scsi: megaraid_sas: mq_poll support (Tomas Henzl) [2009022]
- [PATCH v2] scsi: qla2xxx: Suppress unnecessary log messages during login (Nilesh Javali) [1982186]
- scsi: qla2xxx: Fix excessive messages during device logout (Nilesh Javali) [1982186]
- PCI: pciehp: Ignore Link Down/Up caused by DPC (Myron Stowe) [1981741]
- arm64: kpti: Fix "kpti=off" when KASLR is enabled (Mark Salter) [1979731]
- arm64: Fix CONFIG_ARCH_RANDOM=n build (Mark Salter) [1979731]
- redhat/configs: aarch64: add CONFIG_ARCH_RANDOM (Mark Salter) [1979731]
- arm64: Implement archrandom.h for ARMv8.5-RNG (Mark Salter) [1979731]
- arm64: kconfig: Fix alignment of E0PD help text (Mark Salter) [1979731]
- arm64: Use register field helper in kaslr_requires_kpti() (Mark Salter) [1979731]
- arm64: Simplify early check for broken TX1 when KASLR is enabled (Mark Salter) [1979731]
- arm64: Use a variable to store non-global mappings decision (Mark Salter) [1979731]
- arm64: Don't use KPTI where we have E0PD (Mark Salter) [1979731]
- arm64: Factor out checks for KASLR in KPTI code into separate function (Mark Salter) [1979731]
- redhat/configs: Add CONFIG_ARM64_E0PD (Mark Salter) [1979731]
- arm64: Add initial support for E0PD (Mark Salter) [1979731]
- arm64: cpufeature: Export matrix and other features to userspace (Mark Salter) [1980098]
- arm64: docs: cpu-feature-registers: Document ID_AA64PFR1_EL1 (Mark Salter) [1980098]
- docs/arm64: cpu-feature-registers: Rewrite bitfields that don't follow [e, s] (Mark Salter) [1980098]
- docs/arm64: cpu-feature-registers: Documents missing visible fields (Mark Salter) [1980098]
- arm64: Introduce system_capabilities_finalized() marker (Mark Salter) [1980098]
- arm64: entry.S: Do not preempt from IRQ before all cpufeatures are enabled (Mark Salter) [1980098]
- docs/arm64: elf_hwcaps: Document HWCAP_SB (Mark Salter) [1980098]
- docs/arm64: elf_hwcaps: sort the HWCAP{, 2} documentation by ascending value (Mark Salter) [1980098]
- arm64: cpufeature: Treat ID_AA64ZFR0_EL1 as RAZ when SVE is not enabled (Mark Salter) [1980098]
- arm64: cpufeature: Effectively expose FRINT capability to userspace (Mark Salter) [1980098]
- arm64: cpufeature: Fix feature comparison for CTR_EL0.{CWG,ERG} (Mark Salter) [1980098]
- arm64: Expose FRINT capabilities to userspace (Mark Salter) [1980098]
- arm64: Expose ARMv8.5 CondM capability to userspace (Mark Salter) [1980098]
- docs: arm64: convert perf.txt to ReST format (Mark Salter) [1980098]
- docs: arm64: convert docs to ReST and rename to .rst (Mark Salter) [1980098]
- Documentation/arm64: HugeTLB page implementation (Mark Salter) [1980098]
- Documentation/arm64/sve: Couple of improvements and typos (Mark Salter) [1980098]
- arm64: cpufeature: Fix missing ZFR0 in __read_sysreg_by_encoding() (Mark Salter) [1980098]
- arm64: Expose SVE2 features for userspace (Mark Salter) [1980098]
- arm64: Advertise ARM64_HAS_DCPODP cpu feature (Mark Salter) [1980098]
- arm64: add CVADP support to the cache maintenance helper (Mark Salter) [1980098]
- arm64: Fix minor issues with the dcache_by_line_op macro (Mark Salter) [1980098]
- arm64: Expose DC CVADP to userspace (Mark Salter) [1980098]
- arm64: Handle trapped DC CVADP (Mark Salter) [1980098]
- arm64: HWCAP: encapsulate elf_hwcap (Mark Salter) [1980098]
- arm64: HWCAP: add support for AT_HWCAP2 (Mark Salter) [1980098]
- x86/MCE/AMD, EDAC/mce_amd: Add new SMCA bank types (Aristeu Rozanski) [1965331]
- x86/MCE/AMD, EDAC/mce_amd: Remove struct smca_hwid.xec_bitmap (Aristeu Rozanski) [1965331]
- EDAC, mce_amd: Print ExtErrorCode and description on a single line (Aristeu Rozanski) [1965331]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-347.el8]" date="1633176000">- PCI: Mark TI C667X to avoid bus reset (Alex Williamson) [1975768]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.el8]" date="1633348800">- drm/nouveau/fifo/ga102: initialise chid on return from channel creation (Ben Skeggs) [1997878]
- drm/nouveau/ga102-: support ttm buffer moves via copy engine (Ben Skeggs) [1997878]
- drm/nouveau/kms/tu102-: delay enabling cursor until after assign_windows (Ben Skeggs) [1997878]
- drm/nouveau/kms/nv50: workaround EFI GOP window channel format differences (Ben Skeggs) [1997878]
- drm/nouveau/disp: power down unused DP links during init (Ben Skeggs) [1997878]
- drm/nouveau: recognise GA107 (Ben Skeggs) [1997878]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.1.1.el8_5]" date="1635940800">- lib/timerqueue: Rely on rbtree semantics for next timer (Phil Auld) [2014677 2007099] {CVE-2021-20317}
- mm/hmm: make HMM_MIRROR an implicit option (Rafael Aquini) [2017519 1998534]
- mm/hmm: allow HMM_MIRROR on all architectures with MMU (Rafael Aquini) [2017519 1998534]
- mm: don't select MIGRATE_VMA_HELPER from HMM_MIRROR (Rafael Aquini) [2017519 1998534]
- mm: sort out the DEVICE_PRIVATE Kconfig mess (Rafael Aquini) [2017519 1998534]
- ceph: skip existing superblocks that are blocklisted or shut down when mounting (Jeffrey Layton) [2017071 2011462]
- redhat: switch release to zstream (Bruno Meneguele)</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.2.1.el8_5]" date="1636372800">- tipc: fix size validations for the MSG_CRYPTO type (Bruno Meneguele) [2020506 2020507] {CVE-2021-43267}
- net: Fix skb-&gt;csum update in inet_proto_csum_replace16(). (Balazs Nemeth) [2005981 1975193]</changelog>
</package>
<package pkgid="e63ef6ce5179fc9277bd3d3303036285876ea35134f3cf5710c07283ca6e6ca4" name="kernel-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="348.20.1.el8_5"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.11.1.el8_5]" date="1641297600">- blk-mq: avoid to iterate over stale request (Ming Lei) [2034396 1997338]
- rcu: Tighten rcu_advance_cbs_nowake() checks (Daniel Vacek) [2032579 2013408]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.12.1.el8_5]" date="1641988800">- tcp: don't free a FIN sk_buff in tcp_remove_empty_skb() (Guillaume Nault) [2021574 2016210]
- kernel.spec: Add support to use vmlinux.h (Jiri Olsa) [2031053 1989087]
- spec: Add vmlinux.h to kernel-devel package (Jiri Olsa) [2031053 1989087]
- x86/mce: Avoid infinite loop for copy from user recovery (Prarit Bhargava) [2008789 1999550]
- x86/mce: Rename kill_it to kill_current_task (Prarit Bhargava) [2008789 1999550]
- x86/mce: Recover from poison found while copying from user space (Prarit Bhargava) [2008789 1999550]
- x86/mce: Delay clearing IA32_MCG_STATUS to the end of do_machine_check() (Prarit Bhargava) [2008789 1999550]
- x86/mce: Send #MC singal from task work (Prarit Bhargava) [2008789 1999550]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-348.13.1.el8_5]" date="1642507200">- vfs: Out-of-bounds write of heap buffer in fs_context.c (Frantisek Hrbata) [2040585 2040586] {CVE-2022-0185}
- xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Bruno Meneguele) [2034864 2034865] {CVE-2021-4155}
- af_unix: fix garbage collect vs MSG_PEEK (Patrick Talbert) [2031974 2031975] {CVE-2021-0920}
- cgroup: verify that source is a string (Waiman Long) [2034608 2034609] {CVE-2021-4154}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-348.14.1.el8_5]" date="1643198400">- tcp: fix page frag corruption on page fault (Paolo Abeni) [2041529 1996074]
- net: fix sk_page_frag() recursion from memory reclaim (Paolo Abeni) [2041529 1996074]
- KVM: s390: index kvm-&gt;arch.idle_mask by vcpu_idx (Thomas Huth) [2040769 2026230]
- redhat: set LC_ALL=C before sorting config content (Frantisek Hrbata)</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.15.1.el8_5]" date="1643716800">- net/mlx5: DR, Use FW API when updating FW-owned flow table (Michal Schmidt) [2042663 2042651]
- KVM: x86: Wait for IPIs to be delivered when handling Hyper-V TLB flush hypercall (Vitaly Kuznetsov) [2043237 1868572]
- drm/mgag200: Select clock in PLL update functions (Bruno Meneguele) [2034949 1953926]
- drm/i915: Fix HAS_LSPCON macro for platforms between GEN9 and GEN10 (Bruno Meneguele) [2027335 2005586]
- crypto: qat - power up 4xxx device (Vladis Dronov) [2016437 1960307]
- RDMA/core: Fix a double free in add_port error flow (Kamal Heib) [2038724 2008555]
- powerpc/iommu: Report the correct most efficient DMA mask for PCI devices (Steve Best) [2018928 2007425]
- powerpc/dma: Fix dma_map_ops::get_required_mask (Steve Best) [2018928 2007425]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.16.1.el8_5]" date="1644321600">- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047601 2047602] {CVE-2022-22942}
- net: openvswitch: Fix ct_state nat flags for conns arriving from tc (Marcelo Ricardo Leitner) [2043548 2040334]
- net: openvswitch: Fix matching zone id for invalid conns arriving from tc (Marcelo Ricardo Leitner) [2043550 2040452]
- net/sched: flow_dissector: Fix matching on zone id for invalid conns (Marcelo Ricardo Leitner) [2043550 2040452]
- net/sched: Extend qdisc control block with tc control block (Marcelo Ricardo Leitner) [2043550 2040452]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.17.1.el8_5]" date="1644926400">- vfs: check dentry is still valid in get_link() (Ian Kent) [2052558 2014846]
- xfs: don't expose internal symlink metadata buffers to the vfs (Brian Foster) [2052558 2014846]
- CI: Use appropriate zstream builder (Veronika Kabatova)
- CI: Enable baseline realtime checks (Veronika Kabatova)
- CI: Rename pipelines to include release names (Veronika Kabatova)
- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052166 2052167] {CVE-2022-0492}
- ice: Remove boolean vlan_promisc flag from function (Jonathan Toppins) [2051951 2030400]
- ceph: put the requests/sessions when it fails to alloc memory (Jeffrey Layton) [2053725 2017796]
- ceph: fix off by one bugs in unsafe_request_wait() (Jeffrey Layton) [2053725 2017796]
- ceph: flush the mdlog before waiting on unsafe reqs (Jeffrey Layton) [2053725 2017796]
- ceph: flush mdlog before umounting (Jeffrey Layton) [2053725 2017796]
- ceph: make iterate_sessions a global symbol (Jeffrey Layton) [2053725 2017796]
- ceph: make ceph_create_session_msg a global symbol (Jeffrey Layton) [2053725 2017796]
- xfs: check sb_meta_uuid for dabuf buffer recovery (Bill O'Donnell) [2049292 2020764]
- drm/i915: Flush TLBs before releasing backing store (Patrick Talbert) [2044328 2044329] {CVE-2022-0330}
- hugetlb: fix hugetlb cgroup refcounting during vma split (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: fix imbalanced css_get and css_put pair for shared mappings (Waiman Long) [2039015 2032811]
- mm/hugetlb: change hugetlb_reserve_pages() to type bool (Waiman Long) [2039015 2032811]
- hugetlb: fix an error code in hugetlb_reserve_pages() (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: fix offline of hugetlb cgroup with reservations (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: fix reservation accounting (Waiman Long) [2039015 2032811]
- mm/hugetlb: narrow the hugetlb_lock protection area during preparing huge page (Waiman Long) [2039015 2032811]
- mm/hugetlb: a page from buddy is not on any list (Waiman Long) [2039015 2032811]
- mm/hugetlb: not necessary to coalesce regions recursively (Waiman Long) [2039015 2032811]
- selftests/vm/write_to_hugetlbfs.c: fix unused variable warning (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add hugetlb_cgroup reservation tests (Waiman Long) [2039015 2032811]
- hugetlb: support file_region coalescing again (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: support noreserve mappings (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add accounting for shared mappings (Waiman Long) [2039015 2032811]
- hugetlb: disable region_add file_region coalescing (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add reservation accounting for private mappings (Waiman Long) [2039015 2032811]
- mm/hugetlb_cgroup: fix hugetlb_cgroup migration (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add interface for charge/uncharge hugetlb reservations (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add hugetlb_cgroup reservation counter (Waiman Long) [2039015 2032811]
- hugetlb: remove duplicated code (Waiman Long) [2039015 2032811]
- hugetlb: region_chg provides only cache entry (Waiman Long) [2039015 2032811]
- hugetlbfs: always use address space in inode for resv_map pointer (Waiman Long) [2039015 2032811]
- hugetlbfs: fix potential over/underflow setting node specific nr_hugepages (Waiman Long) [2039015 2032811]
- hugetlb: allow to free gigantic pages regardless of the configuration (Waiman Long) [2039015 2032811]
- powerpc/pseries: Fix update of LPAR security flavor after LPM (Steve Best) [2027448 1997294]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.18.1.el8_5]" date="1645531200">- selftests: kvm: Check whether SIDA memop fails for normal guests (Thomas Huth) [2050806 2050807] {CVE-2022-0516}
- KVM: s390: Return error on SIDA memop on normal guest (Thomas Huth) [2050806 2050807] {CVE-2022-0516}
- iommu/amd: Remove iommu_init_ga() (Jerry Snitselaar) [2030854 1998265]
- iommu/amd: Relocate GAMSup check to early_enable_iommus (Jerry Snitselaar) [2030854 1998265]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.19.1.el8_5]" date="1646049600">- tipc: improve size validations for received domain records (Xin Long) [2048970 2048971] {CVE-2022-0435}
- smb3: do not error on fsync when readonly (Ronnie Sahlberg) [2055824 2037811]
- security: implement sctp_assoc_established hook in selinux (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- security: add sctp_assoc_established hook (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- security: call security_sctp_assoc_request in sctp_sf_do_5_1D_ce (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- security: pass asoc to sctp_assoc_request and sctp_sk_clone (Bruno Meneguele) [2054112 2054117 2015525 2048251]
- net: sctp: Fix some typos (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- RDMA/bnxt_re: Fix stats counters (Selvin Xavier) [2049684 2001893]
- net: check skb sec_path when re-initializing slow_gro in gro_list_prepare (Xin Long) [2047427 2030476]
- cpufreq: intel_pstate: Add Icelake servers support in no-HWP mode (David Arcari) [2036888 2003695]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.20.1.el8_5]" date="1646740800">- lib/iov_iter: initialize "flags" in new pipe_buffer (Jan Stancek) [2060874 2060875] {CVE-2022-0847}</changelog>
</package>
<package pkgid="3ea7d072d835a3e2aa287f64d352d5f86ca7ad9ef2c17a44a5404bbb82625728" name="kernel-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="348.23.1.el8_5"/>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-348.14.1.el8_5]" date="1643198400">- tcp: fix page frag corruption on page fault (Paolo Abeni) [2041529 1996074]
- net: fix sk_page_frag() recursion from memory reclaim (Paolo Abeni) [2041529 1996074]
- KVM: s390: index kvm-&gt;arch.idle_mask by vcpu_idx (Thomas Huth) [2040769 2026230]
- redhat: set LC_ALL=C before sorting config content (Frantisek Hrbata)</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.15.1.el8_5]" date="1643716800">- net/mlx5: DR, Use FW API when updating FW-owned flow table (Michal Schmidt) [2042663 2042651]
- KVM: x86: Wait for IPIs to be delivered when handling Hyper-V TLB flush hypercall (Vitaly Kuznetsov) [2043237 1868572]
- drm/mgag200: Select clock in PLL update functions (Bruno Meneguele) [2034949 1953926]
- drm/i915: Fix HAS_LSPCON macro for platforms between GEN9 and GEN10 (Bruno Meneguele) [2027335 2005586]
- crypto: qat - power up 4xxx device (Vladis Dronov) [2016437 1960307]
- RDMA/core: Fix a double free in add_port error flow (Kamal Heib) [2038724 2008555]
- powerpc/iommu: Report the correct most efficient DMA mask for PCI devices (Steve Best) [2018928 2007425]
- powerpc/dma: Fix dma_map_ops::get_required_mask (Steve Best) [2018928 2007425]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.16.1.el8_5]" date="1644321600">- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047601 2047602] {CVE-2022-22942}
- net: openvswitch: Fix ct_state nat flags for conns arriving from tc (Marcelo Ricardo Leitner) [2043548 2040334]
- net: openvswitch: Fix matching zone id for invalid conns arriving from tc (Marcelo Ricardo Leitner) [2043550 2040452]
- net/sched: flow_dissector: Fix matching on zone id for invalid conns (Marcelo Ricardo Leitner) [2043550 2040452]
- net/sched: Extend qdisc control block with tc control block (Marcelo Ricardo Leitner) [2043550 2040452]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.17.1.el8_5]" date="1644926400">- vfs: check dentry is still valid in get_link() (Ian Kent) [2052558 2014846]
- xfs: don't expose internal symlink metadata buffers to the vfs (Brian Foster) [2052558 2014846]
- CI: Use appropriate zstream builder (Veronika Kabatova)
- CI: Enable baseline realtime checks (Veronika Kabatova)
- CI: Rename pipelines to include release names (Veronika Kabatova)
- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052166 2052167] {CVE-2022-0492}
- ice: Remove boolean vlan_promisc flag from function (Jonathan Toppins) [2051951 2030400]
- ceph: put the requests/sessions when it fails to alloc memory (Jeffrey Layton) [2053725 2017796]
- ceph: fix off by one bugs in unsafe_request_wait() (Jeffrey Layton) [2053725 2017796]
- ceph: flush the mdlog before waiting on unsafe reqs (Jeffrey Layton) [2053725 2017796]
- ceph: flush mdlog before umounting (Jeffrey Layton) [2053725 2017796]
- ceph: make iterate_sessions a global symbol (Jeffrey Layton) [2053725 2017796]
- ceph: make ceph_create_session_msg a global symbol (Jeffrey Layton) [2053725 2017796]
- xfs: check sb_meta_uuid for dabuf buffer recovery (Bill O'Donnell) [2049292 2020764]
- drm/i915: Flush TLBs before releasing backing store (Patrick Talbert) [2044328 2044329] {CVE-2022-0330}
- hugetlb: fix hugetlb cgroup refcounting during vma split (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: fix imbalanced css_get and css_put pair for shared mappings (Waiman Long) [2039015 2032811]
- mm/hugetlb: change hugetlb_reserve_pages() to type bool (Waiman Long) [2039015 2032811]
- hugetlb: fix an error code in hugetlb_reserve_pages() (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: fix offline of hugetlb cgroup with reservations (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: fix reservation accounting (Waiman Long) [2039015 2032811]
- mm/hugetlb: narrow the hugetlb_lock protection area during preparing huge page (Waiman Long) [2039015 2032811]
- mm/hugetlb: a page from buddy is not on any list (Waiman Long) [2039015 2032811]
- mm/hugetlb: not necessary to coalesce regions recursively (Waiman Long) [2039015 2032811]
- selftests/vm/write_to_hugetlbfs.c: fix unused variable warning (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add hugetlb_cgroup reservation tests (Waiman Long) [2039015 2032811]
- hugetlb: support file_region coalescing again (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: support noreserve mappings (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add accounting for shared mappings (Waiman Long) [2039015 2032811]
- hugetlb: disable region_add file_region coalescing (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add reservation accounting for private mappings (Waiman Long) [2039015 2032811]
- mm/hugetlb_cgroup: fix hugetlb_cgroup migration (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add interface for charge/uncharge hugetlb reservations (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add hugetlb_cgroup reservation counter (Waiman Long) [2039015 2032811]
- hugetlb: remove duplicated code (Waiman Long) [2039015 2032811]
- hugetlb: region_chg provides only cache entry (Waiman Long) [2039015 2032811]
- hugetlbfs: always use address space in inode for resv_map pointer (Waiman Long) [2039015 2032811]
- hugetlbfs: fix potential over/underflow setting node specific nr_hugepages (Waiman Long) [2039015 2032811]
- hugetlb: allow to free gigantic pages regardless of the configuration (Waiman Long) [2039015 2032811]
- powerpc/pseries: Fix update of LPAR security flavor after LPM (Steve Best) [2027448 1997294]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.18.1.el8_5]" date="1645531200">- selftests: kvm: Check whether SIDA memop fails for normal guests (Thomas Huth) [2050806 2050807] {CVE-2022-0516}
- KVM: s390: Return error on SIDA memop on normal guest (Thomas Huth) [2050806 2050807] {CVE-2022-0516}
- iommu/amd: Remove iommu_init_ga() (Jerry Snitselaar) [2030854 1998265]
- iommu/amd: Relocate GAMSup check to early_enable_iommus (Jerry Snitselaar) [2030854 1998265]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.19.1.el8_5]" date="1646049600">- tipc: improve size validations for received domain records (Xin Long) [2048970 2048971] {CVE-2022-0435}
- smb3: do not error on fsync when readonly (Ronnie Sahlberg) [2055824 2037811]
- security: implement sctp_assoc_established hook in selinux (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- security: add sctp_assoc_established hook (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- security: call security_sctp_assoc_request in sctp_sf_do_5_1D_ce (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- security: pass asoc to sctp_assoc_request and sctp_sk_clone (Bruno Meneguele) [2054112 2054117 2015525 2048251]
- net: sctp: Fix some typos (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- RDMA/bnxt_re: Fix stats counters (Selvin Xavier) [2049684 2001893]
- net: check skb sec_path when re-initializing slow_gro in gro_list_prepare (Xin Long) [2047427 2030476]
- cpufreq: intel_pstate: Add Icelake servers support in no-HWP mode (David Arcari) [2036888 2003695]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.20.1.el8_5]" date="1646740800">- lib/iov_iter: initialize "flags" in new pipe_buffer (Jan Stancek) [2060874 2060875] {CVE-2022-0847}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.21.1.el8_5]" date="1647950400">- netfilter: nf_queue: handle socket prefetch (Florian Westphal) [2061446 2009786]
- netfilter: nf_queue: fix possible use-after-free (Florian Westphal) [2061446 2009786]
- selftests: netfilter: add nfqueue TCP_NEW_SYN_RECV socket race test (Florian Westphal) [2061446 2009786]
- netfilter: nf_queue: don't assume sk is full socket (Florian Westphal) [2061446 2009786]
- netfilter: nf_tables_offload: incorrect flow offload action array size (Florian Westphal) [2056867 2056728] {CVE-2022-25636}
- netfilter: nftables_offload: KASAN slab-out-of-bounds Read in nft_flow_rule_create (Florian Westphal) [2056867 2056728] {CVE-2022-25636}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.22.1.el8_5]" date="1649160000">- scsi: lpfc: Fix non-recovery of remote ports following an unsolicited LOGO (Dick Kennedy) [2058193 2027558]
- cifs: check all path components in resolved dfs target (Ronnie Sahlberg) [2056329 2030880]
- RDMA/cma: Do not change route.addr.src_addr.ss_family (Kamal Heib) [2032073 2032074] {CVE-2021-4028}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.23.1.el8_5]" date="1649764800">- gfs2: dequeue iopen holder in gfs2_inode_lookup error (Bob Peterson) [2069750 2061665]</changelog>
</package>
<package pkgid="c1b19dc32729c8a7cdb164ca9c4397fc302184631843f504d0bba3d42bcf9df2" name="kernel-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="348.7.1.el8_5"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-346.el8]" date="1633089600">- redhat: switch secureboot kernel image signing to release keys (Bruno Meneguele)
- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Fix RT check branch name (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- Revert "Merge: mt7921e: enable new Mediatek wireless hardware" (Bruno Meneguele) [2009501]
- megaraid_sas: fix concurrent access to ISR between IRQ polling and real interrupt (Tomas Henzl) [2009022]
- scsi: megaraid_sas: mq_poll support (Tomas Henzl) [2009022]
- [PATCH v2] scsi: qla2xxx: Suppress unnecessary log messages during login (Nilesh Javali) [1982186]
- scsi: qla2xxx: Fix excessive messages during device logout (Nilesh Javali) [1982186]
- PCI: pciehp: Ignore Link Down/Up caused by DPC (Myron Stowe) [1981741]
- arm64: kpti: Fix "kpti=off" when KASLR is enabled (Mark Salter) [1979731]
- arm64: Fix CONFIG_ARCH_RANDOM=n build (Mark Salter) [1979731]
- redhat/configs: aarch64: add CONFIG_ARCH_RANDOM (Mark Salter) [1979731]
- arm64: Implement archrandom.h for ARMv8.5-RNG (Mark Salter) [1979731]
- arm64: kconfig: Fix alignment of E0PD help text (Mark Salter) [1979731]
- arm64: Use register field helper in kaslr_requires_kpti() (Mark Salter) [1979731]
- arm64: Simplify early check for broken TX1 when KASLR is enabled (Mark Salter) [1979731]
- arm64: Use a variable to store non-global mappings decision (Mark Salter) [1979731]
- arm64: Don't use KPTI where we have E0PD (Mark Salter) [1979731]
- arm64: Factor out checks for KASLR in KPTI code into separate function (Mark Salter) [1979731]
- redhat/configs: Add CONFIG_ARM64_E0PD (Mark Salter) [1979731]
- arm64: Add initial support for E0PD (Mark Salter) [1979731]
- arm64: cpufeature: Export matrix and other features to userspace (Mark Salter) [1980098]
- arm64: docs: cpu-feature-registers: Document ID_AA64PFR1_EL1 (Mark Salter) [1980098]
- docs/arm64: cpu-feature-registers: Rewrite bitfields that don't follow [e, s] (Mark Salter) [1980098]
- docs/arm64: cpu-feature-registers: Documents missing visible fields (Mark Salter) [1980098]
- arm64: Introduce system_capabilities_finalized() marker (Mark Salter) [1980098]
- arm64: entry.S: Do not preempt from IRQ before all cpufeatures are enabled (Mark Salter) [1980098]
- docs/arm64: elf_hwcaps: Document HWCAP_SB (Mark Salter) [1980098]
- docs/arm64: elf_hwcaps: sort the HWCAP{, 2} documentation by ascending value (Mark Salter) [1980098]
- arm64: cpufeature: Treat ID_AA64ZFR0_EL1 as RAZ when SVE is not enabled (Mark Salter) [1980098]
- arm64: cpufeature: Effectively expose FRINT capability to userspace (Mark Salter) [1980098]
- arm64: cpufeature: Fix feature comparison for CTR_EL0.{CWG,ERG} (Mark Salter) [1980098]
- arm64: Expose FRINT capabilities to userspace (Mark Salter) [1980098]
- arm64: Expose ARMv8.5 CondM capability to userspace (Mark Salter) [1980098]
- docs: arm64: convert perf.txt to ReST format (Mark Salter) [1980098]
- docs: arm64: convert docs to ReST and rename to .rst (Mark Salter) [1980098]
- Documentation/arm64: HugeTLB page implementation (Mark Salter) [1980098]
- Documentation/arm64/sve: Couple of improvements and typos (Mark Salter) [1980098]
- arm64: cpufeature: Fix missing ZFR0 in __read_sysreg_by_encoding() (Mark Salter) [1980098]
- arm64: Expose SVE2 features for userspace (Mark Salter) [1980098]
- arm64: Advertise ARM64_HAS_DCPODP cpu feature (Mark Salter) [1980098]
- arm64: add CVADP support to the cache maintenance helper (Mark Salter) [1980098]
- arm64: Fix minor issues with the dcache_by_line_op macro (Mark Salter) [1980098]
- arm64: Expose DC CVADP to userspace (Mark Salter) [1980098]
- arm64: Handle trapped DC CVADP (Mark Salter) [1980098]
- arm64: HWCAP: encapsulate elf_hwcap (Mark Salter) [1980098]
- arm64: HWCAP: add support for AT_HWCAP2 (Mark Salter) [1980098]
- x86/MCE/AMD, EDAC/mce_amd: Add new SMCA bank types (Aristeu Rozanski) [1965331]
- x86/MCE/AMD, EDAC/mce_amd: Remove struct smca_hwid.xec_bitmap (Aristeu Rozanski) [1965331]
- EDAC, mce_amd: Print ExtErrorCode and description on a single line (Aristeu Rozanski) [1965331]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-347.el8]" date="1633176000">- PCI: Mark TI C667X to avoid bus reset (Alex Williamson) [1975768]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.el8]" date="1633348800">- drm/nouveau/fifo/ga102: initialise chid on return from channel creation (Ben Skeggs) [1997878]
- drm/nouveau/ga102-: support ttm buffer moves via copy engine (Ben Skeggs) [1997878]
- drm/nouveau/kms/tu102-: delay enabling cursor until after assign_windows (Ben Skeggs) [1997878]
- drm/nouveau/kms/nv50: workaround EFI GOP window channel format differences (Ben Skeggs) [1997878]
- drm/nouveau/disp: power down unused DP links during init (Ben Skeggs) [1997878]
- drm/nouveau: recognise GA107 (Ben Skeggs) [1997878]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.1.1.el8_5]" date="1635940800">- lib/timerqueue: Rely on rbtree semantics for next timer (Phil Auld) [2014677 2007099] {CVE-2021-20317}
- mm/hmm: make HMM_MIRROR an implicit option (Rafael Aquini) [2017519 1998534]
- mm/hmm: allow HMM_MIRROR on all architectures with MMU (Rafael Aquini) [2017519 1998534]
- mm: don't select MIGRATE_VMA_HELPER from HMM_MIRROR (Rafael Aquini) [2017519 1998534]
- mm: sort out the DEVICE_PRIVATE Kconfig mess (Rafael Aquini) [2017519 1998534]
- ceph: skip existing superblocks that are blocklisted or shut down when mounting (Jeffrey Layton) [2017071 2011462]
- redhat: switch release to zstream (Bruno Meneguele)</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.2.1.el8_5]" date="1636372800">- tipc: fix size validations for the MSG_CRYPTO type (Bruno Meneguele) [2020506 2020507] {CVE-2021-43267}
- net: Fix skb-&gt;csum update in inet_proto_csum_replace16(). (Balazs Nemeth) [2005981 1975193]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.3.1.el8_5]" date="1637064000">- net-sysfs: try not to restart the syscall if it will fail eventually (Antoine Tenart) [2021165 2016005]
- ovl: fix missing negative dentry check in ovl_rename() (Miklos Szeredi) [2016378 2010887 2013318] {CVE-2021-20321}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.4.1.el8_5]" date="1637668800">- [RHEL8.6 BZ 1849234] cifs: report error instead of invalid when revalidating a dentry fails (Ronnie Sahlberg) [2017177 1849234]
- kthread: Fix PF_KTHREAD vs to_kthread() race (Waiman Long) [2010333 2001497]
- sched/fair: Ignore percpu threads for imbalance pulls (Waiman Long) [2010333 2001497]
- kthread: Extract KTHREAD_IS_PER_CPU (Waiman Long) [2010333 2001497]
- sched: Optimize finish_lock_switch() (Waiman Long) [2010333 2001497]
- sched/hotplug: Ensure only per-cpu kthreads run during hotplug (Waiman Long) [2010333 2001497]
- sched: Fix balance_callback() (Waiman Long) [2010333 2001497]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.5.1.el8_5]" date="1638273600">- blk-mq: still set q-&gt;make_request_fn for blk-mq (Ming Lei) [2016384 1999728]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.6.1.el8_5]" date="1638878400">- x86/Kconfig: Do not enable AMD_MEM_ENCRYPT_ACTIVE_BY_DEFAULT automatically (Prarit Bhargava) [2024678 2021219]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.7.1.el8_5]" date="1638964800">- sched: Fix CPU hotplug / tighten is_per_cpu_kthread() (Waiman Long) [2026450 2024869]
- sched: Prepare to use balance_push in ttwu() (Waiman Long) [2026450 2024869]
- sched: Don't run cpu-online with balance_push() enabled (Waiman Long) [2026450 2024869]
- workqueue: Tag bound workers with KTHREAD_IS_PER_CPU (Waiman Long) [2026450 2024869]
- workqueue: Use cpu_possible_mask instead of cpu_active_mask to break affinity (Waiman Long) [2026450 2024869]
- sched: Fix hotplug vs CPU bandwidth control (Waiman Long) [2026450 2024869]
- workqueue: Manually break affinity on hotplug (Waiman Long) [2026450 2024869]
- sched/hotplug: Consolidate task migration on CPU unplug (Waiman Long) [2026450 2024869]
- sched/core: Wait for tasks being pushed away on hotplug (Waiman Long) [2026450 2024869]</changelog>
</package>
<package pkgid="b90a03da8766dcecf5e3d3dea4ac340dac4bdc22726c9a2f27b7a7c3c0f3083e" name="kernel-debuginfo-common-x86_64" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="348.12.2.el8_5"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.4.1.el8_5]" date="1637668800">- [RHEL8.6 BZ 1849234] cifs: report error instead of invalid when revalidating a dentry fails (Ronnie Sahlberg) [2017177 1849234]
- kthread: Fix PF_KTHREAD vs to_kthread() race (Waiman Long) [2010333 2001497]
- sched/fair: Ignore percpu threads for imbalance pulls (Waiman Long) [2010333 2001497]
- kthread: Extract KTHREAD_IS_PER_CPU (Waiman Long) [2010333 2001497]
- sched: Optimize finish_lock_switch() (Waiman Long) [2010333 2001497]
- sched/hotplug: Ensure only per-cpu kthreads run during hotplug (Waiman Long) [2010333 2001497]
- sched: Fix balance_callback() (Waiman Long) [2010333 2001497]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.5.1.el8_5]" date="1638273600">- blk-mq: still set q-&gt;make_request_fn for blk-mq (Ming Lei) [2016384 1999728]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.6.1.el8_5]" date="1638878400">- x86/Kconfig: Do not enable AMD_MEM_ENCRYPT_ACTIVE_BY_DEFAULT automatically (Prarit Bhargava) [2024678 2021219]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.7.1.el8_5]" date="1638964800">- sched: Fix CPU hotplug / tighten is_per_cpu_kthread() (Waiman Long) [2026450 2024869]
- sched: Prepare to use balance_push in ttwu() (Waiman Long) [2026450 2024869]
- sched: Don't run cpu-online with balance_push() enabled (Waiman Long) [2026450 2024869]
- workqueue: Tag bound workers with KTHREAD_IS_PER_CPU (Waiman Long) [2026450 2024869]
- workqueue: Use cpu_possible_mask instead of cpu_active_mask to break affinity (Waiman Long) [2026450 2024869]
- sched: Fix hotplug vs CPU bandwidth control (Waiman Long) [2026450 2024869]
- workqueue: Manually break affinity on hotplug (Waiman Long) [2026450 2024869]
- sched/hotplug: Consolidate task migration on CPU unplug (Waiman Long) [2026450 2024869]
- sched/core: Wait for tasks being pushed away on hotplug (Waiman Long) [2026450 2024869]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.8.1.el8_5]" date="1639483200">- ice: Fix VF true promiscuous mode (Jonathan Toppins) [2026698 1970643]
- ice: Remove toggling of antispoof for VF trusted promiscuous mode (Jonathan Toppins) [2026698 1970643]
- ice: Fix replacing VF hardware MAC to existing MAC filter (Jonathan Toppins) [2026698 1970643]
- ice: Fix not stopping Tx queues for VFs (Jonathan Toppins) [2026698 1970643]
- ice: Fix race conditions between virtchnl handling and VF ndo ops (Jonathan Toppins) [2026698 1970643]
- net/netif_receive_skb_core: Use migrate_disable() (Luis Claudio R. Goncalves) [2027689 2024168]
- crypto: jitter - consider 32 LSB for APT (Herbert Xu) [2029365 1994390]
- xfs: fix I_DONTCACHE (Carlos Maiolino) [2028534 2024969]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.9.1.el8_5]" date="1640001600">- ixgbe: Revert "bpf, devmap: Move drop error path to devmap for XDP_REDIRECT" (Ken Cox) [2029845 2024240]
- i40e: Revert "bpf, devmap: Move drop error path to devmap for XDP_REDIRECT" (Stefan Assmann) [2029845 2024225]
- rcu/nocb: Perform deferred wake up before last idle's need_resched() check (Waiman Long) [2029449 2008340]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.10.1.el8_5]" date="1640779200">- selftests: add a test case for mirred egress to ingress (Xin Long) [2024411 1983894]
- net: sched: act_mirred: drop dst for the direction from egress to ingress (Xin Long) [2024411 1983894]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.11.1.el8_5]" date="1641297600">- blk-mq: avoid to iterate over stale request (Ming Lei) [2034396 1997338]
- rcu: Tighten rcu_advance_cbs_nowake() checks (Daniel Vacek) [2032579 2013408]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.12.1.el8_5]" date="1641988800">- tcp: don't free a FIN sk_buff in tcp_remove_empty_skb() (Guillaume Nault) [2021574 2016210]
- kernel.spec: Add support to use vmlinux.h (Jiri Olsa) [2031053 1989087]
- spec: Add vmlinux.h to kernel-devel package (Jiri Olsa) [2031053 1989087]
- x86/mce: Avoid infinite loop for copy from user recovery (Prarit Bhargava) [2008789 1999550]
- x86/mce: Rename kill_it to kill_current_task (Prarit Bhargava) [2008789 1999550]
- x86/mce: Recover from poison found while copying from user space (Prarit Bhargava) [2008789 1999550]
- x86/mce: Delay clearing IA32_MCG_STATUS to the end of do_machine_check() (Prarit Bhargava) [2008789 1999550]
- x86/mce: Send #MC singal from task work (Prarit Bhargava) [2008789 1999550]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-348.12.2.el8_5]" date="1642420800">- vfs: Out-of-bounds write of heap buffer in fs_context.c (Frantisek Hrbata) [2040585 2040586] {CVE-2022-0185}
- xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Bruno Meneguele) [2034864 2034865] {CVE-2021-4155}</changelog>
</package>
<package pkgid="53ca4c25183587612f06e20a386189f0331f4d935a40f6b019b9a06ec7f059a3" name="kernel-debuginfo-common-x86_64" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="348.2.1.el8_5"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-341.el8]" date="1631275200">- mptcp: Only send extra TCP acks in eligible socket states (Paolo Abeni) [1997178]
- mptcp: fix possible divide by zero (Paolo Abeni) [1997178]
- mptcp: drop tx skb cache (Paolo Abeni) [1997178]
- mptcp: fix memory leak on address flush (Paolo Abeni) [1997178]
- ice: Only lock to update netdev dev_addr (Michal Schmidt) [1995868]
- ice: restart periodic outputs around time changes (Ken Cox) [1992750]
- ice: Fix perout start time rounding (Ken Cox) [1992750]
- net/sched: ets: fix crash when flipping from 'strict' to 'quantum' (Davide Caratti) [1981184]
- ovl: prevent private clone if bind mount is not allowed (Miklos Szeredi) [1993131] {CVE-2021-3732}
- gfs2: Don't call dlm after protocol is unmounted (Bob Peterson) [1997193]
- gfs2: don't stop reads while withdraw in progress (Bob Peterson) [1997193]
- gfs2: Mark journal inodes as "don't cache" (Bob Peterson) [1997193]
- bpf: bpftool: Add -fno-asynchronous-unwind-tables to BPF Clang invocation (Yauheni Kaliuta) [1997124]
- perf/x86/intel: Apply mid ACK for small core (Michael Petlan) [1838573]
- perf/x86/intel/lbr: Zero the xstate buffer on allocation (Michael Petlan) [1838573]
- perf: Fix task context PMU for Hetero (Michael Petlan) [1838573]
- perf/x86/intel: Fix fixed counter check warning for some Alder Lake (Michael Petlan) [1838573]
- perf/x86/lbr: Remove cpuc-&gt;lbr_xsave allocation from atomic context (Michael Petlan) [1838573]
- x86/fpu/xstate: Fix an xstate size check warning with architectural LBRs (Michael Petlan) [1838573]
- perf/x86/rapl: Add support for Intel Alder Lake (Michael Petlan) [1838573]
- perf/x86/cstate: Add Alder Lake CPU support (Michael Petlan) [1838573]
- perf/x86/msr: Add Alder Lake CPU support (Michael Petlan) [1838573]
- perf/x86/intel/uncore: Add Alder Lake support (Michael Petlan) [1838573]
- perf: Extend PERF_TYPE_HARDWARE and PERF_TYPE_HW_CACHE (Michael Petlan) [1838573]
- perf/x86/intel: Add Alder Lake Hybrid support (Michael Petlan) [1838573]
- perf/x86: Support filter_match callback (Michael Petlan) [1838573]
- perf/x86/intel: Add attr_update for Hybrid PMUs (Michael Petlan) [1838573]
- perf/x86: Add structures for the attributes of Hybrid PMUs (Michael Petlan) [1838573]
- perf/x86: Register hybrid PMUs (Michael Petlan) [1838573]
- perf/x86: Factor out x86_pmu_show_pmu_cap (Michael Petlan) [1838573]
- perf/x86: Remove temporary pmu assignment in event_init (Michael Petlan) [1838573]
- perf/x86/intel: Factor out intel_pmu_check_extra_regs (Michael Petlan) [1838573]
- perf/x86/intel: Factor out intel_pmu_check_event_constraints (Michael Petlan) [1838573]
- perf/x86/intel: Factor out intel_pmu_check_num_counters (Michael Petlan) [1838573]
- perf/x86: Hybrid PMU support for extra_regs (Michael Petlan) [1838573]
- perf/x86: Hybrid PMU support for event constraints (Michael Petlan) [1838573]
- perf/x86: Hybrid PMU support for hardware cache event (Michael Petlan) [1838573]
- perf/x86: Hybrid PMU support for unconstrained (Michael Petlan) [1838573]
- perf/x86: Hybrid PMU support for counters (Michael Petlan) [1838573]
- perf/x86: Hybrid PMU support for intel_ctrl (Michael Petlan) [1838573]
- perf/x86/intel: Hybrid PMU support for perf capabilities (Michael Petlan) [1838573]
- perf/x86: Track pmu in per-CPU cpu_hw_events (Michael Petlan) [1838573]
- perf/x86/intel/lbr: Support XSAVES for arch LBR read (Michael Petlan) [1838573]
- perf/x86/intel/lbr: Support XSAVES/XRSTORS for LBR context switch (Michael Petlan) [1838573]
- x86/fpu/xstate: Add helpers for LBR dynamic supervisor feature (Michael Petlan) [1838573]
- x86/fpu/xstate: Support dynamic supervisor feature for LBR (Michael Petlan) [1838573]
- x86/fpu: Use proper mask to replace full instruction mask (Michael Petlan) [1838573]
- x86/cpu: Add helper function to get the type of the current hybrid CPU (Michael Petlan) [1838573]
- x86/cpufeatures: Enumerate Intel Hybrid Technology feature bit (Michael Petlan) [1838573]
- HID: make arrays usage and value to be the same (Benjamin Tissoires) [1974942]
- ACPI: PM: s2idle: Invert Microsoft UUID entry and exit (David Arcari) [1960440]
- platform/x86: amd-pmc: Fix undefined reference to __udivdi3 (David Arcari) [1960440]
- platform/x86: amd-pmc: Fix missing unlock on error in amd_pmc_send_cmd() (David Arcari) [1960440]
- platform/x86: amd-pmc: Use return code on suspend (David Arcari) [1960440]
- platform/x86: amd-pmc: Add new acpi id for future PMC controllers (David Arcari) [1960440]
- platform/x86: amd-pmc: Add support for ACPI ID AMDI0006 (David Arcari) [1960440]
- platform/x86: amd-pmc: Add support for logging s0ix counters (David Arcari) [1960440]
- platform/x86: amd-pmc: Add support for logging SMU metrics (David Arcari) [1960440]
- platform/x86: amd-pmc: call dump registers only once (David Arcari) [1960440]
- platform/x86: amd-pmc: Fix SMU firmware reporting mechanism (David Arcari) [1960440]
- platform/x86: amd-pmc: Fix command completion code (David Arcari) [1960440]
- usb: pci-quirks: disable D3cold on xhci suspend for s2idle on AMD Renoir (David Arcari) [1960440]
- ACPI: PM: Only mark EC GPE for wakeup on Intel systems (David Arcari) [1960440]
- ACPI: PM: Adjust behavior for field problems on AMD systems (David Arcari) [1960440]
- ACPI: PM: s2idle: Add support for new Microsoft UUID (David Arcari) [1960440]
- ACPI: PM: s2idle: Add support for multiple func mask (David Arcari) [1960440]
- ACPI: PM: s2idle: Refactor common code (David Arcari) [1960440]
- ACPI: PM: s2idle: Use correct revision id (David Arcari) [1960440]
- ACPI: PM: s2idle: Add missing LPS0 functions for AMD (David Arcari) [1960440]
- lockd: Fix invalid lockowner cast after vfs_test_lock (Benjamin Coddington) [1986138]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-342.el8]" date="1631620800">- selftest: netfilter: add test case for unreplied tcp connections (Florian Westphal) [1991523]
- netfilter: conntrack: do not renew entry stuck in tcp SYN_SENT state (Florian Westphal) [1991523]
- net/sched: store the last executed chain also for clsact egress (Davide Caratti) [1980537]
- ice: fix Tx queue iteration for Tx timestamp enablement (Ken Cox) [1999743]
- perf evsel: Add missing cloning of evsel-&gt;use_config_name (Michael Petlan) [1838635]
- perf Documentation: Document intel-hybrid support (Michael Petlan) [1838635]
- perf tests: Skip 'perf stat metrics (shadow stat) test' for hybrid (Michael Petlan) [1838635]
- perf tests: Support 'Convert perf time to TSC' test for hybrid (Michael Petlan) [1838635]
- perf tests: Support 'Session topology' test for hybrid (Michael Petlan) [1838635]
- perf tests: Support 'Parse and process metrics' test for hybrid (Michael Petlan) [1838635]
- perf tests: Support 'Track with sched_switch' test for hybrid (Michael Petlan) [1838635]
- perf tests: Skip 'Setup struct perf_event_attr' test for hybrid (Michael Petlan) [1838635]
- perf tests: Add hybrid cases for 'Roundtrip evsel-&gt;name' test (Michael Petlan) [1838635]
- perf tests: Add hybrid cases for 'Parse event definition strings' test (Michael Petlan) [1838635]
- perf record: Uniquify hybrid event name (Michael Petlan) [1838635]
- perf stat: Warn group events from different hybrid PMU (Michael Petlan) [1838635]
- perf stat: Filter out unmatched aggregation for hybrid event (Michael Petlan) [1838635]
- perf stat: Add default hybrid events (Michael Petlan) [1838635]
- perf record: Create two hybrid 'cycles' events by default (Michael Petlan) [1838635]
- perf parse-events: Support event inside hybrid pmu (Michael Petlan) [1838635]
- perf parse-events: Compare with hybrid pmu name (Michael Petlan) [1838635]
- perf parse-events: Create two hybrid raw events (Michael Petlan) [1838635]
- perf parse-events: Create two hybrid cache events (Michael Petlan) [1838635]
- perf parse-events: Create two hybrid hardware events (Michael Petlan) [1838635]
- perf stat: Uniquify hybrid event name (Michael Petlan) [1838635]
- perf pmu: Add hybrid helper functions (Michael Petlan) [1838635]
- perf pmu: Save detected hybrid pmus to a global pmu list (Michael Petlan) [1838635]
- perf pmu: Save pmu name (Michael Petlan) [1838635]
- perf pmu: Simplify arguments of __perf_pmu__new_alias (Michael Petlan) [1838635]
- perf jevents: Support unit value "cpu_core" and "cpu_atom" (Michael Petlan) [1838635]
- tools headers uapi: Update tools's copy of linux/perf_event.h (Michael Petlan) [1838635]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-343.el8]" date="1631793600">- rcu: Avoid unneeded function call in rcu_read_unlock() (Waiman Long) [1997500]
- mt76: connac: do not schedule mac_work if the device is not running (Íñigo Huguet) [1956419 1972045]
- mt7921e: enable module in config (Íñigo Huguet) [1956419 1972045]
- Revert tools/power/cpupower: Read energy_perf_bias from sysfs (Steve Best) [1999926]
- libnvdimm/namespace: Differentiate between probe mapping and runtime mapping (Jeff Moyer) [1795719]
- libnvdimm/pfn_dev: Don't clear device memmap area during generic namespace probe (Jeff Moyer) [1795719]
- perf/x86/intel/uncore: Clean up error handling path of iio mapping (Michael Petlan) [1837330]
- perf/x86/intel/uncore: Fix for iio mapping on Skylake Server (Michael Petlan) [1837330]
- perf/x86/intel/uncore: Generic support for the MMIO type of uncore blocks (Michael Petlan) [1837330]
- perf/x86/intel/uncore: Generic support for the PCI type of uncore blocks (Michael Petlan) [1837330]
- perf/x86/intel/uncore: Rename uncore_notifier to uncore_pci_sub_notifier (Michael Petlan) [1837330]
- perf/x86/intel/uncore: Generic support for the MSR type of uncore blocks (Michael Petlan) [1837330]
- perf/x86/intel/uncore: Parse uncore discovery tables (Michael Petlan) [1837330]
- perf/x86/intel/uncore: Expose an Uncore unit to IIO PMON mapping (Michael Petlan) [1837330]
- perf/x86/intel/uncore: Wrap the max dies calculation into an accessor (Michael Petlan) [1837330]
- perf/x86/intel/uncore: Expose an Uncore unit to PMON mapping (Michael Petlan) [1837330]
- perf/x86/intel/uncore: Validate MMIO address before accessing (Michael Petlan) [1837330]
- perf/x86/intel/uncore: Record the size of mapped area (Michael Petlan) [1837330]
- perf/x86/intel/uncore: Fix oops when counting IMC uncore events on some TGL (Michael Petlan) [1837330]
- crypto: qat - remove unused macro in FW loader (Vladis Dronov) [1920086]
- crypto: qat - check return code of qat_hal_rd_rel_reg() (Vladis Dronov) [1920086]
- crypto: qat - report an error if MMP file size is too large (Vladis Dronov) [1920086]
- crypto: qat - check MMP size before writing to the SRAM (Vladis Dronov) [1920086]
- crypto: qat - return error when failing to map FW (Vladis Dronov) [1920086]
- crypto: qat - enable detection of accelerators hang (Vladis Dronov) [1920086]
- crypto: qat - Fix a double free in adf_create_ring (Vladis Dronov) [1920086]
- crypto: qat - fix error path in adf_isr_resource_alloc() (Vladis Dronov) [1920086]
- crypto: qat - ADF_STATUS_PF_RUNNING should be set after adf_dev_init (Vladis Dronov) [1920086]
- crypto: qat - don't release uninitialized resources (Vladis Dronov) [1920086]
- crypto: qat - fix use of 'dma_map_single' (Vladis Dronov) [1920086]
- crypto: qat - fix unmap invalid dma address (Vladis Dronov) [1920086]
- crypto: qat - fix spelling mistake: "messge" -&gt; "message" (Vladis Dronov) [1920086]
- crypto: qat - reduce size of mapped region (Vladis Dronov) [1920086]
- crypto: qat - change format string and cast ring size (Vladis Dronov) [1920086]
- crypto: qat - fix potential spectre issue (Vladis Dronov) [1920086]
- crypto: qat - configure arbiter mapping based on engines enabled (Vladis Dronov) [1920086]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-344.el8]" date="1632139200">- perf/x86/intel: Fix PEBS-via-PT reload base value for Extended PEBS (Michael Petlan) [1998051]
- perf/x86/intel/uncore: Fix Add BW copypasta (Michael Petlan) [1998051]
- perf/x86/intel/uncore: Add BW counters for GT, IA and IO breakdown (Michael Petlan) [1998051]
- Revert "ice: Add initial support framework for LAG" (Michal Schmidt) [1999016]
- net: re-initialize slow_gro flag at gro_list_prepare time (Paolo Abeni) [2002367]
- cxgb4: dont touch blocked freelist bitmap after free (Rahul Lakkireddy) [1998148]
- cxgb4vf: configure ports accessible by the VF (Rahul Lakkireddy) [1961329]
- scsi: lpfc: Fix memory leaks in error paths while issuing ELS RDF/SCR request (Dick Kennedy) [1976332]
- scsi: lpfc: Keep NDLP reference until after freeing the IOCB after ELS handling (Dick Kennedy) [1976332]
- scsi: lpfc: Move initialization of phba-&gt;poll_list earlier to avoid crash (Dick Kennedy) [1976332]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-345.el8]" date="1632398400">- e1000e: Do not take care about recovery NVM checksum (Ken Cox) [1984558]
- qrtr: disable CONFIG_QRTR for non x86_64 archs (Íñigo Huguet) [1999642]
- ceph: fix possible null-pointer dereference in ceph_mdsmap_decode() (Jeff Layton) [1989999]
- ceph: fix dereference of null pointer cf (Jeff Layton) [1989999]
- ceph: correctly handle releasing an embedded cap flush (Jeff Layton) [1989999]
- ceph: take snap_empty_lock atomically with snaprealm refcount change (Jeff Layton) [1989999]
- ceph: don't WARN if we're still opening a session to an MDS (Jeff Layton) [1989999]
- rbd: don't hold lock_rwsem while running_list is being drained (Jeff Layton) [1989999]
- rbd: always kick acquire on "acquired" and "released" notifications (Jeff Layton) [1989999]
- ceph: take reference to req-&gt;r_parent at point of assignment (Jeff Layton) [1989999]
- ceph: eliminate ceph_async_iput() (Jeff Layton) [1989999]
- ceph: don't take s_mutex in ceph_flush_snaps (Jeff Layton) [1989999]
- ceph: don't take s_mutex in try_flush_caps (Jeff Layton) [1989999]
- ceph: don't take s_mutex or snap_rwsem in ceph_check_caps (Jeff Layton) [1989999]
- ceph: eliminate session-&gt;s_gen_ttl_lock (Jeff Layton) [1989999]
- ceph: allow ceph_put_mds_session to take NULL or ERR_PTR (Jeff Layton) [1989999]
- ceph: clean up locking annotation for ceph_get_snap_realm and __lookup_snap_realm (Jeff Layton) [1989999]
- ceph: add some lockdep assertions around snaprealm handling (Jeff Layton) [1989999]
- ceph: decoding error in ceph_update_snap_realm should return -EIO (Jeff Layton) [1989999]
- ceph: add IO size metrics support (Jeff Layton) [1989999]
- ceph: update and rename __update_latency helper to __update_stdev (Jeff Layton) [1989999]
- ceph: simplify the metrics struct (Jeff Layton) [1989999]
- libceph: fix doc warnings in cls_lock_client.c (Jeff Layton) [1989999]
- libceph: remove unnecessary ret variable in ceph_auth_init() (Jeff Layton) [1989999]
- libceph: kill ceph_none_authorizer::reply_buf (Jeff Layton) [1989999]
- ceph: make ceph_queue_cap_snap static (Jeff Layton) [1989999]
- ceph: remove bogus checks and WARN_ONs from ceph_set_page_dirty (Jeff Layton) [1989999]
- libceph: set global_id as soon as we get an auth ticket (Jeff Layton) [1989999]
- libceph: don't pass result into ac-&gt;ops-&gt;handle_reply() (Jeff Layton) [1989999]
- ceph: fix error handling in ceph_atomic_open and ceph_lookup (Jeff Layton) [1989999]
- ceph: must hold snap_rwsem when filling inode for async create (Jeff Layton) [1989999]
- libceph: Fix spelling mistakes (Jeff Layton) [1989999]
- libceph: don't set global_id until we get an auth ticket (Jeff Layton) [1989999]
- libceph: bump CephXAuthenticate encoding version (Jeff Layton) [1989999]
- ceph: don't allow access to MDS-private inodes (Jeff Layton) [1989999]
- ceph: fix up some bare fetches of i_size (Jeff Layton) [1989999]
- ceph: support getting ceph.dir.rsnaps vxattr (Jeff Layton) [1989999]
- ceph: drop pinned_page parameter from ceph_get_caps (Jeff Layton) [1989999]
- ceph: fix inode leak on getattr error in __fh_to_dentry (Jeff Layton) [1989999]
- ceph: only check pool permissions for regular files (Jeff Layton) [1989999]
- ceph: send opened files/pinned caps/opened inodes metrics to MDS daemon (Jeff Layton) [1989999]
- ceph: avoid counting the same request twice or more (Jeff Layton) [1989999]
- ceph: rename the metric helpers (Jeff Layton) [1989999]
- ceph: fix kerneldoc copypasta over ceph_start_io_direct (Jeff Layton) [1989999]
- ceph: don't use d_add in ceph_handle_snapdir (Jeff Layton) [1989999]
- ceph: don't clobber i_snap_caps on non-I_NEW inode (Jeff Layton) [1989999]
- ceph: fix fall-through warnings for Clang (Jeff Layton) [1989999]
- net: ceph: Fix a typo in osdmap.c (Jeff Layton) [1989999]
- ceph: don't allow type or device number to change on non-I_NEW inodes (Jeff Layton) [1989999]
- ceph: defer flushing the capsnap if the Fb is used (Jeff Layton) [1989999]
- ceph: allow queueing cap/snap handling after putting cap references (Jeff Layton) [1989999]
- ceph: clean up inode work queueing (Jeff Layton) [1989999]
- ceph: fix flush_snap logic after putting caps (Jeff Layton) [1989999]
- libceph: fix "Boolean result is used in bitwise operation" warning (Jeff Layton) [1989999]
- new helper: inode_wrong_type() (Jeff Layton) [1989999]
- kabi: Adding symbol single_release (fs/seq_file.c) (Čestmír Kalina) [1945486]
- kabi: Adding symbol single_open (fs/seq_file.c) (Čestmír Kalina) [1945486]
- kabi: Adding symbol seq_read (fs/seq_file.c) (Čestmír Kalina) [1945486]
- kabi: Adding symbol seq_printf (fs/seq_file.c) (Čestmír Kalina) [1945486]
- kabi: Adding symbol seq_lseek (fs/seq_file.c) (Čestmír Kalina) [1945486]
- kabi: Adding symbol unregister_chrdev_region (fs/char_dev.c) (Čestmír Kalina) [1945486]
- kabi: Adding symbol cdev_init (fs/char_dev.c) (Čestmír Kalina) [1945486]
- kabi: Adding symbol cdev_del (fs/char_dev.c) (Čestmír Kalina) [1945486]
- kabi: Adding symbol cdev_alloc (fs/char_dev.c) (Čestmír Kalina) [1945486]
- kabi: Adding symbol cdev_add (fs/char_dev.c) (Čestmír Kalina) [1945486]
- kabi: Adding symbol alloc_chrdev_region (fs/char_dev.c) (Čestmír Kalina) [1945486]
- kabi: Adding symbol pcie_capability_read_word (drivers/pci/access.c) (Čestmír Kalina) [1945485]
- kabi: Adding symbol pcie_capability_read_dword (drivers/pci/access.c) (Čestmír Kalina) [1945485]
- kabi: Adding symbol pcie_capability_clear_and_set_word (drivers/pci/access.c) (Čestmír Kalina) [1945485]
- kabi: Adding symbol pci_write_config_dword (drivers/pci/access.c) (Čestmír Kalina) [1945485]
- kabi: Adding symbol pci_write_config_byte (drivers/pci/access.c) (Čestmír Kalina) [1945485]
- kabi: Adding symbol pci_set_power_state (drivers/pci/pci.c) (Čestmír Kalina) [1945485]
- kabi: Adding symbol pci_read_config_dword (drivers/pci/access.c) (Čestmír Kalina) [1945485]
- kabi: Adding symbol pci_read_config_byte (drivers/pci/access.c) (Čestmír Kalina) [1945485]
- kabi: Adding symbol pci_irq_vector (drivers/pci/msi.c) (Čestmír Kalina) [1945485]
- kabi: Adding symbol pci_get_device (drivers/pci/search.c) (Čestmír Kalina) [1945485]
- kabi: Adding symbol pci_free_irq_vectors (drivers/pci/msi.c) (Čestmír Kalina) [1945485]
- kabi: Adding symbol pci_alloc_irq_vectors_affinity (drivers/pci/msi.c) (Čestmír Kalina) [1945485]
- kabi: Adding symbol kexec_crash_loaded (kernel/kexec_core.c) (Čestmír Kalina) [1945491]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-346.el8]" date="1633089600">- redhat: switch secureboot kernel image signing to release keys (Bruno Meneguele)
- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Fix RT check branch name (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- Revert "Merge: mt7921e: enable new Mediatek wireless hardware" (Bruno Meneguele) [2009501]
- megaraid_sas: fix concurrent access to ISR between IRQ polling and real interrupt (Tomas Henzl) [2009022]
- scsi: megaraid_sas: mq_poll support (Tomas Henzl) [2009022]
- [PATCH v2] scsi: qla2xxx: Suppress unnecessary log messages during login (Nilesh Javali) [1982186]
- scsi: qla2xxx: Fix excessive messages during device logout (Nilesh Javali) [1982186]
- PCI: pciehp: Ignore Link Down/Up caused by DPC (Myron Stowe) [1981741]
- arm64: kpti: Fix "kpti=off" when KASLR is enabled (Mark Salter) [1979731]
- arm64: Fix CONFIG_ARCH_RANDOM=n build (Mark Salter) [1979731]
- redhat/configs: aarch64: add CONFIG_ARCH_RANDOM (Mark Salter) [1979731]
- arm64: Implement archrandom.h for ARMv8.5-RNG (Mark Salter) [1979731]
- arm64: kconfig: Fix alignment of E0PD help text (Mark Salter) [1979731]
- arm64: Use register field helper in kaslr_requires_kpti() (Mark Salter) [1979731]
- arm64: Simplify early check for broken TX1 when KASLR is enabled (Mark Salter) [1979731]
- arm64: Use a variable to store non-global mappings decision (Mark Salter) [1979731]
- arm64: Don't use KPTI where we have E0PD (Mark Salter) [1979731]
- arm64: Factor out checks for KASLR in KPTI code into separate function (Mark Salter) [1979731]
- redhat/configs: Add CONFIG_ARM64_E0PD (Mark Salter) [1979731]
- arm64: Add initial support for E0PD (Mark Salter) [1979731]
- arm64: cpufeature: Export matrix and other features to userspace (Mark Salter) [1980098]
- arm64: docs: cpu-feature-registers: Document ID_AA64PFR1_EL1 (Mark Salter) [1980098]
- docs/arm64: cpu-feature-registers: Rewrite bitfields that don't follow [e, s] (Mark Salter) [1980098]
- docs/arm64: cpu-feature-registers: Documents missing visible fields (Mark Salter) [1980098]
- arm64: Introduce system_capabilities_finalized() marker (Mark Salter) [1980098]
- arm64: entry.S: Do not preempt from IRQ before all cpufeatures are enabled (Mark Salter) [1980098]
- docs/arm64: elf_hwcaps: Document HWCAP_SB (Mark Salter) [1980098]
- docs/arm64: elf_hwcaps: sort the HWCAP{, 2} documentation by ascending value (Mark Salter) [1980098]
- arm64: cpufeature: Treat ID_AA64ZFR0_EL1 as RAZ when SVE is not enabled (Mark Salter) [1980098]
- arm64: cpufeature: Effectively expose FRINT capability to userspace (Mark Salter) [1980098]
- arm64: cpufeature: Fix feature comparison for CTR_EL0.{CWG,ERG} (Mark Salter) [1980098]
- arm64: Expose FRINT capabilities to userspace (Mark Salter) [1980098]
- arm64: Expose ARMv8.5 CondM capability to userspace (Mark Salter) [1980098]
- docs: arm64: convert perf.txt to ReST format (Mark Salter) [1980098]
- docs: arm64: convert docs to ReST and rename to .rst (Mark Salter) [1980098]
- Documentation/arm64: HugeTLB page implementation (Mark Salter) [1980098]
- Documentation/arm64/sve: Couple of improvements and typos (Mark Salter) [1980098]
- arm64: cpufeature: Fix missing ZFR0 in __read_sysreg_by_encoding() (Mark Salter) [1980098]
- arm64: Expose SVE2 features for userspace (Mark Salter) [1980098]
- arm64: Advertise ARM64_HAS_DCPODP cpu feature (Mark Salter) [1980098]
- arm64: add CVADP support to the cache maintenance helper (Mark Salter) [1980098]
- arm64: Fix minor issues with the dcache_by_line_op macro (Mark Salter) [1980098]
- arm64: Expose DC CVADP to userspace (Mark Salter) [1980098]
- arm64: Handle trapped DC CVADP (Mark Salter) [1980098]
- arm64: HWCAP: encapsulate elf_hwcap (Mark Salter) [1980098]
- arm64: HWCAP: add support for AT_HWCAP2 (Mark Salter) [1980098]
- x86/MCE/AMD, EDAC/mce_amd: Add new SMCA bank types (Aristeu Rozanski) [1965331]
- x86/MCE/AMD, EDAC/mce_amd: Remove struct smca_hwid.xec_bitmap (Aristeu Rozanski) [1965331]
- EDAC, mce_amd: Print ExtErrorCode and description on a single line (Aristeu Rozanski) [1965331]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-347.el8]" date="1633176000">- PCI: Mark TI C667X to avoid bus reset (Alex Williamson) [1975768]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.el8]" date="1633348800">- drm/nouveau/fifo/ga102: initialise chid on return from channel creation (Ben Skeggs) [1997878]
- drm/nouveau/ga102-: support ttm buffer moves via copy engine (Ben Skeggs) [1997878]
- drm/nouveau/kms/tu102-: delay enabling cursor until after assign_windows (Ben Skeggs) [1997878]
- drm/nouveau/kms/nv50: workaround EFI GOP window channel format differences (Ben Skeggs) [1997878]
- drm/nouveau/disp: power down unused DP links during init (Ben Skeggs) [1997878]
- drm/nouveau: recognise GA107 (Ben Skeggs) [1997878]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.1.1.el8_5]" date="1635940800">- lib/timerqueue: Rely on rbtree semantics for next timer (Phil Auld) [2014677 2007099] {CVE-2021-20317}
- mm/hmm: make HMM_MIRROR an implicit option (Rafael Aquini) [2017519 1998534]
- mm/hmm: allow HMM_MIRROR on all architectures with MMU (Rafael Aquini) [2017519 1998534]
- mm: don't select MIGRATE_VMA_HELPER from HMM_MIRROR (Rafael Aquini) [2017519 1998534]
- mm: sort out the DEVICE_PRIVATE Kconfig mess (Rafael Aquini) [2017519 1998534]
- ceph: skip existing superblocks that are blocklisted or shut down when mounting (Jeffrey Layton) [2017071 2011462]
- redhat: switch release to zstream (Bruno Meneguele)</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.2.1.el8_5]" date="1636372800">- tipc: fix size validations for the MSG_CRYPTO type (Bruno Meneguele) [2020506 2020507] {CVE-2021-43267}
- net: Fix skb-&gt;csum update in inet_proto_csum_replace16(). (Balazs Nemeth) [2005981 1975193]</changelog>
</package>
<package pkgid="be74f5db930c09a9b42c6699fa3b4533fc5e386ae55d7b59bd22861094da761d" name="kernel-debuginfo-common-x86_64" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="348.20.1.el8_5"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.11.1.el8_5]" date="1641297600">- blk-mq: avoid to iterate over stale request (Ming Lei) [2034396 1997338]
- rcu: Tighten rcu_advance_cbs_nowake() checks (Daniel Vacek) [2032579 2013408]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.12.1.el8_5]" date="1641988800">- tcp: don't free a FIN sk_buff in tcp_remove_empty_skb() (Guillaume Nault) [2021574 2016210]
- kernel.spec: Add support to use vmlinux.h (Jiri Olsa) [2031053 1989087]
- spec: Add vmlinux.h to kernel-devel package (Jiri Olsa) [2031053 1989087]
- x86/mce: Avoid infinite loop for copy from user recovery (Prarit Bhargava) [2008789 1999550]
- x86/mce: Rename kill_it to kill_current_task (Prarit Bhargava) [2008789 1999550]
- x86/mce: Recover from poison found while copying from user space (Prarit Bhargava) [2008789 1999550]
- x86/mce: Delay clearing IA32_MCG_STATUS to the end of do_machine_check() (Prarit Bhargava) [2008789 1999550]
- x86/mce: Send #MC singal from task work (Prarit Bhargava) [2008789 1999550]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-348.13.1.el8_5]" date="1642507200">- vfs: Out-of-bounds write of heap buffer in fs_context.c (Frantisek Hrbata) [2040585 2040586] {CVE-2022-0185}
- xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Bruno Meneguele) [2034864 2034865] {CVE-2021-4155}
- af_unix: fix garbage collect vs MSG_PEEK (Patrick Talbert) [2031974 2031975] {CVE-2021-0920}
- cgroup: verify that source is a string (Waiman Long) [2034608 2034609] {CVE-2021-4154}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-348.14.1.el8_5]" date="1643198400">- tcp: fix page frag corruption on page fault (Paolo Abeni) [2041529 1996074]
- net: fix sk_page_frag() recursion from memory reclaim (Paolo Abeni) [2041529 1996074]
- KVM: s390: index kvm-&gt;arch.idle_mask by vcpu_idx (Thomas Huth) [2040769 2026230]
- redhat: set LC_ALL=C before sorting config content (Frantisek Hrbata)</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.15.1.el8_5]" date="1643716800">- net/mlx5: DR, Use FW API when updating FW-owned flow table (Michal Schmidt) [2042663 2042651]
- KVM: x86: Wait for IPIs to be delivered when handling Hyper-V TLB flush hypercall (Vitaly Kuznetsov) [2043237 1868572]
- drm/mgag200: Select clock in PLL update functions (Bruno Meneguele) [2034949 1953926]
- drm/i915: Fix HAS_LSPCON macro for platforms between GEN9 and GEN10 (Bruno Meneguele) [2027335 2005586]
- crypto: qat - power up 4xxx device (Vladis Dronov) [2016437 1960307]
- RDMA/core: Fix a double free in add_port error flow (Kamal Heib) [2038724 2008555]
- powerpc/iommu: Report the correct most efficient DMA mask for PCI devices (Steve Best) [2018928 2007425]
- powerpc/dma: Fix dma_map_ops::get_required_mask (Steve Best) [2018928 2007425]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.16.1.el8_5]" date="1644321600">- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047601 2047602] {CVE-2022-22942}
- net: openvswitch: Fix ct_state nat flags for conns arriving from tc (Marcelo Ricardo Leitner) [2043548 2040334]
- net: openvswitch: Fix matching zone id for invalid conns arriving from tc (Marcelo Ricardo Leitner) [2043550 2040452]
- net/sched: flow_dissector: Fix matching on zone id for invalid conns (Marcelo Ricardo Leitner) [2043550 2040452]
- net/sched: Extend qdisc control block with tc control block (Marcelo Ricardo Leitner) [2043550 2040452]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.17.1.el8_5]" date="1644926400">- vfs: check dentry is still valid in get_link() (Ian Kent) [2052558 2014846]
- xfs: don't expose internal symlink metadata buffers to the vfs (Brian Foster) [2052558 2014846]
- CI: Use appropriate zstream builder (Veronika Kabatova)
- CI: Enable baseline realtime checks (Veronika Kabatova)
- CI: Rename pipelines to include release names (Veronika Kabatova)
- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052166 2052167] {CVE-2022-0492}
- ice: Remove boolean vlan_promisc flag from function (Jonathan Toppins) [2051951 2030400]
- ceph: put the requests/sessions when it fails to alloc memory (Jeffrey Layton) [2053725 2017796]
- ceph: fix off by one bugs in unsafe_request_wait() (Jeffrey Layton) [2053725 2017796]
- ceph: flush the mdlog before waiting on unsafe reqs (Jeffrey Layton) [2053725 2017796]
- ceph: flush mdlog before umounting (Jeffrey Layton) [2053725 2017796]
- ceph: make iterate_sessions a global symbol (Jeffrey Layton) [2053725 2017796]
- ceph: make ceph_create_session_msg a global symbol (Jeffrey Layton) [2053725 2017796]
- xfs: check sb_meta_uuid for dabuf buffer recovery (Bill O'Donnell) [2049292 2020764]
- drm/i915: Flush TLBs before releasing backing store (Patrick Talbert) [2044328 2044329] {CVE-2022-0330}
- hugetlb: fix hugetlb cgroup refcounting during vma split (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: fix imbalanced css_get and css_put pair for shared mappings (Waiman Long) [2039015 2032811]
- mm/hugetlb: change hugetlb_reserve_pages() to type bool (Waiman Long) [2039015 2032811]
- hugetlb: fix an error code in hugetlb_reserve_pages() (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: fix offline of hugetlb cgroup with reservations (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: fix reservation accounting (Waiman Long) [2039015 2032811]
- mm/hugetlb: narrow the hugetlb_lock protection area during preparing huge page (Waiman Long) [2039015 2032811]
- mm/hugetlb: a page from buddy is not on any list (Waiman Long) [2039015 2032811]
- mm/hugetlb: not necessary to coalesce regions recursively (Waiman Long) [2039015 2032811]
- selftests/vm/write_to_hugetlbfs.c: fix unused variable warning (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add hugetlb_cgroup reservation tests (Waiman Long) [2039015 2032811]
- hugetlb: support file_region coalescing again (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: support noreserve mappings (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add accounting for shared mappings (Waiman Long) [2039015 2032811]
- hugetlb: disable region_add file_region coalescing (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add reservation accounting for private mappings (Waiman Long) [2039015 2032811]
- mm/hugetlb_cgroup: fix hugetlb_cgroup migration (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add interface for charge/uncharge hugetlb reservations (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add hugetlb_cgroup reservation counter (Waiman Long) [2039015 2032811]
- hugetlb: remove duplicated code (Waiman Long) [2039015 2032811]
- hugetlb: region_chg provides only cache entry (Waiman Long) [2039015 2032811]
- hugetlbfs: always use address space in inode for resv_map pointer (Waiman Long) [2039015 2032811]
- hugetlbfs: fix potential over/underflow setting node specific nr_hugepages (Waiman Long) [2039015 2032811]
- hugetlb: allow to free gigantic pages regardless of the configuration (Waiman Long) [2039015 2032811]
- powerpc/pseries: Fix update of LPAR security flavor after LPM (Steve Best) [2027448 1997294]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.18.1.el8_5]" date="1645531200">- selftests: kvm: Check whether SIDA memop fails for normal guests (Thomas Huth) [2050806 2050807] {CVE-2022-0516}
- KVM: s390: Return error on SIDA memop on normal guest (Thomas Huth) [2050806 2050807] {CVE-2022-0516}
- iommu/amd: Remove iommu_init_ga() (Jerry Snitselaar) [2030854 1998265]
- iommu/amd: Relocate GAMSup check to early_enable_iommus (Jerry Snitselaar) [2030854 1998265]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.19.1.el8_5]" date="1646049600">- tipc: improve size validations for received domain records (Xin Long) [2048970 2048971] {CVE-2022-0435}
- smb3: do not error on fsync when readonly (Ronnie Sahlberg) [2055824 2037811]
- security: implement sctp_assoc_established hook in selinux (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- security: add sctp_assoc_established hook (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- security: call security_sctp_assoc_request in sctp_sf_do_5_1D_ce (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- security: pass asoc to sctp_assoc_request and sctp_sk_clone (Bruno Meneguele) [2054112 2054117 2015525 2048251]
- net: sctp: Fix some typos (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- RDMA/bnxt_re: Fix stats counters (Selvin Xavier) [2049684 2001893]
- net: check skb sec_path when re-initializing slow_gro in gro_list_prepare (Xin Long) [2047427 2030476]
- cpufreq: intel_pstate: Add Icelake servers support in no-HWP mode (David Arcari) [2036888 2003695]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.20.1.el8_5]" date="1646740800">- lib/iov_iter: initialize "flags" in new pipe_buffer (Jan Stancek) [2060874 2060875] {CVE-2022-0847}</changelog>
</package>
<package pkgid="4856956a22222fcbf91517e231210e04b6e0d96f3b9baa653228dac5f24c4b30" name="kernel-debuginfo-common-x86_64" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="348.23.1.el8_5"/>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-348.14.1.el8_5]" date="1643198400">- tcp: fix page frag corruption on page fault (Paolo Abeni) [2041529 1996074]
- net: fix sk_page_frag() recursion from memory reclaim (Paolo Abeni) [2041529 1996074]
- KVM: s390: index kvm-&gt;arch.idle_mask by vcpu_idx (Thomas Huth) [2040769 2026230]
- redhat: set LC_ALL=C before sorting config content (Frantisek Hrbata)</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.15.1.el8_5]" date="1643716800">- net/mlx5: DR, Use FW API when updating FW-owned flow table (Michal Schmidt) [2042663 2042651]
- KVM: x86: Wait for IPIs to be delivered when handling Hyper-V TLB flush hypercall (Vitaly Kuznetsov) [2043237 1868572]
- drm/mgag200: Select clock in PLL update functions (Bruno Meneguele) [2034949 1953926]
- drm/i915: Fix HAS_LSPCON macro for platforms between GEN9 and GEN10 (Bruno Meneguele) [2027335 2005586]
- crypto: qat - power up 4xxx device (Vladis Dronov) [2016437 1960307]
- RDMA/core: Fix a double free in add_port error flow (Kamal Heib) [2038724 2008555]
- powerpc/iommu: Report the correct most efficient DMA mask for PCI devices (Steve Best) [2018928 2007425]
- powerpc/dma: Fix dma_map_ops::get_required_mask (Steve Best) [2018928 2007425]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.16.1.el8_5]" date="1644321600">- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047601 2047602] {CVE-2022-22942}
- net: openvswitch: Fix ct_state nat flags for conns arriving from tc (Marcelo Ricardo Leitner) [2043548 2040334]
- net: openvswitch: Fix matching zone id for invalid conns arriving from tc (Marcelo Ricardo Leitner) [2043550 2040452]
- net/sched: flow_dissector: Fix matching on zone id for invalid conns (Marcelo Ricardo Leitner) [2043550 2040452]
- net/sched: Extend qdisc control block with tc control block (Marcelo Ricardo Leitner) [2043550 2040452]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.17.1.el8_5]" date="1644926400">- vfs: check dentry is still valid in get_link() (Ian Kent) [2052558 2014846]
- xfs: don't expose internal symlink metadata buffers to the vfs (Brian Foster) [2052558 2014846]
- CI: Use appropriate zstream builder (Veronika Kabatova)
- CI: Enable baseline realtime checks (Veronika Kabatova)
- CI: Rename pipelines to include release names (Veronika Kabatova)
- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052166 2052167] {CVE-2022-0492}
- ice: Remove boolean vlan_promisc flag from function (Jonathan Toppins) [2051951 2030400]
- ceph: put the requests/sessions when it fails to alloc memory (Jeffrey Layton) [2053725 2017796]
- ceph: fix off by one bugs in unsafe_request_wait() (Jeffrey Layton) [2053725 2017796]
- ceph: flush the mdlog before waiting on unsafe reqs (Jeffrey Layton) [2053725 2017796]
- ceph: flush mdlog before umounting (Jeffrey Layton) [2053725 2017796]
- ceph: make iterate_sessions a global symbol (Jeffrey Layton) [2053725 2017796]
- ceph: make ceph_create_session_msg a global symbol (Jeffrey Layton) [2053725 2017796]
- xfs: check sb_meta_uuid for dabuf buffer recovery (Bill O'Donnell) [2049292 2020764]
- drm/i915: Flush TLBs before releasing backing store (Patrick Talbert) [2044328 2044329] {CVE-2022-0330}
- hugetlb: fix hugetlb cgroup refcounting during vma split (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: fix imbalanced css_get and css_put pair for shared mappings (Waiman Long) [2039015 2032811]
- mm/hugetlb: change hugetlb_reserve_pages() to type bool (Waiman Long) [2039015 2032811]
- hugetlb: fix an error code in hugetlb_reserve_pages() (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: fix offline of hugetlb cgroup with reservations (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: fix reservation accounting (Waiman Long) [2039015 2032811]
- mm/hugetlb: narrow the hugetlb_lock protection area during preparing huge page (Waiman Long) [2039015 2032811]
- mm/hugetlb: a page from buddy is not on any list (Waiman Long) [2039015 2032811]
- mm/hugetlb: not necessary to coalesce regions recursively (Waiman Long) [2039015 2032811]
- selftests/vm/write_to_hugetlbfs.c: fix unused variable warning (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add hugetlb_cgroup reservation tests (Waiman Long) [2039015 2032811]
- hugetlb: support file_region coalescing again (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: support noreserve mappings (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add accounting for shared mappings (Waiman Long) [2039015 2032811]
- hugetlb: disable region_add file_region coalescing (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add reservation accounting for private mappings (Waiman Long) [2039015 2032811]
- mm/hugetlb_cgroup: fix hugetlb_cgroup migration (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add interface for charge/uncharge hugetlb reservations (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add hugetlb_cgroup reservation counter (Waiman Long) [2039015 2032811]
- hugetlb: remove duplicated code (Waiman Long) [2039015 2032811]
- hugetlb: region_chg provides only cache entry (Waiman Long) [2039015 2032811]
- hugetlbfs: always use address space in inode for resv_map pointer (Waiman Long) [2039015 2032811]
- hugetlbfs: fix potential over/underflow setting node specific nr_hugepages (Waiman Long) [2039015 2032811]
- hugetlb: allow to free gigantic pages regardless of the configuration (Waiman Long) [2039015 2032811]
- powerpc/pseries: Fix update of LPAR security flavor after LPM (Steve Best) [2027448 1997294]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.18.1.el8_5]" date="1645531200">- selftests: kvm: Check whether SIDA memop fails for normal guests (Thomas Huth) [2050806 2050807] {CVE-2022-0516}
- KVM: s390: Return error on SIDA memop on normal guest (Thomas Huth) [2050806 2050807] {CVE-2022-0516}
- iommu/amd: Remove iommu_init_ga() (Jerry Snitselaar) [2030854 1998265]
- iommu/amd: Relocate GAMSup check to early_enable_iommus (Jerry Snitselaar) [2030854 1998265]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.19.1.el8_5]" date="1646049600">- tipc: improve size validations for received domain records (Xin Long) [2048970 2048971] {CVE-2022-0435}
- smb3: do not error on fsync when readonly (Ronnie Sahlberg) [2055824 2037811]
- security: implement sctp_assoc_established hook in selinux (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- security: add sctp_assoc_established hook (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- security: call security_sctp_assoc_request in sctp_sf_do_5_1D_ce (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- security: pass asoc to sctp_assoc_request and sctp_sk_clone (Bruno Meneguele) [2054112 2054117 2015525 2048251]
- net: sctp: Fix some typos (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- RDMA/bnxt_re: Fix stats counters (Selvin Xavier) [2049684 2001893]
- net: check skb sec_path when re-initializing slow_gro in gro_list_prepare (Xin Long) [2047427 2030476]
- cpufreq: intel_pstate: Add Icelake servers support in no-HWP mode (David Arcari) [2036888 2003695]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.20.1.el8_5]" date="1646740800">- lib/iov_iter: initialize "flags" in new pipe_buffer (Jan Stancek) [2060874 2060875] {CVE-2022-0847}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.21.1.el8_5]" date="1647950400">- netfilter: nf_queue: handle socket prefetch (Florian Westphal) [2061446 2009786]
- netfilter: nf_queue: fix possible use-after-free (Florian Westphal) [2061446 2009786]
- selftests: netfilter: add nfqueue TCP_NEW_SYN_RECV socket race test (Florian Westphal) [2061446 2009786]
- netfilter: nf_queue: don't assume sk is full socket (Florian Westphal) [2061446 2009786]
- netfilter: nf_tables_offload: incorrect flow offload action array size (Florian Westphal) [2056867 2056728] {CVE-2022-25636}
- netfilter: nftables_offload: KASAN slab-out-of-bounds Read in nft_flow_rule_create (Florian Westphal) [2056867 2056728] {CVE-2022-25636}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.22.1.el8_5]" date="1649160000">- scsi: lpfc: Fix non-recovery of remote ports following an unsolicited LOGO (Dick Kennedy) [2058193 2027558]
- cifs: check all path components in resolved dfs target (Ronnie Sahlberg) [2056329 2030880]
- RDMA/cma: Do not change route.addr.src_addr.ss_family (Kamal Heib) [2032073 2032074] {CVE-2021-4028}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.23.1.el8_5]" date="1649764800">- gfs2: dequeue iopen holder in gfs2_inode_lookup error (Bob Peterson) [2069750 2061665]</changelog>
</package>
<package pkgid="9ec37c323237a792c36c5f978ead9c6cdfd99e8bafbf2cbe17321b82a7db8417" name="kernel-debuginfo-common-x86_64" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="348.7.1.el8_5"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-346.el8]" date="1633089600">- redhat: switch secureboot kernel image signing to release keys (Bruno Meneguele)
- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Fix RT check branch name (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- Revert "Merge: mt7921e: enable new Mediatek wireless hardware" (Bruno Meneguele) [2009501]
- megaraid_sas: fix concurrent access to ISR between IRQ polling and real interrupt (Tomas Henzl) [2009022]
- scsi: megaraid_sas: mq_poll support (Tomas Henzl) [2009022]
- [PATCH v2] scsi: qla2xxx: Suppress unnecessary log messages during login (Nilesh Javali) [1982186]
- scsi: qla2xxx: Fix excessive messages during device logout (Nilesh Javali) [1982186]
- PCI: pciehp: Ignore Link Down/Up caused by DPC (Myron Stowe) [1981741]
- arm64: kpti: Fix "kpti=off" when KASLR is enabled (Mark Salter) [1979731]
- arm64: Fix CONFIG_ARCH_RANDOM=n build (Mark Salter) [1979731]
- redhat/configs: aarch64: add CONFIG_ARCH_RANDOM (Mark Salter) [1979731]
- arm64: Implement archrandom.h for ARMv8.5-RNG (Mark Salter) [1979731]
- arm64: kconfig: Fix alignment of E0PD help text (Mark Salter) [1979731]
- arm64: Use register field helper in kaslr_requires_kpti() (Mark Salter) [1979731]
- arm64: Simplify early check for broken TX1 when KASLR is enabled (Mark Salter) [1979731]
- arm64: Use a variable to store non-global mappings decision (Mark Salter) [1979731]
- arm64: Don't use KPTI where we have E0PD (Mark Salter) [1979731]
- arm64: Factor out checks for KASLR in KPTI code into separate function (Mark Salter) [1979731]
- redhat/configs: Add CONFIG_ARM64_E0PD (Mark Salter) [1979731]
- arm64: Add initial support for E0PD (Mark Salter) [1979731]
- arm64: cpufeature: Export matrix and other features to userspace (Mark Salter) [1980098]
- arm64: docs: cpu-feature-registers: Document ID_AA64PFR1_EL1 (Mark Salter) [1980098]
- docs/arm64: cpu-feature-registers: Rewrite bitfields that don't follow [e, s] (Mark Salter) [1980098]
- docs/arm64: cpu-feature-registers: Documents missing visible fields (Mark Salter) [1980098]
- arm64: Introduce system_capabilities_finalized() marker (Mark Salter) [1980098]
- arm64: entry.S: Do not preempt from IRQ before all cpufeatures are enabled (Mark Salter) [1980098]
- docs/arm64: elf_hwcaps: Document HWCAP_SB (Mark Salter) [1980098]
- docs/arm64: elf_hwcaps: sort the HWCAP{, 2} documentation by ascending value (Mark Salter) [1980098]
- arm64: cpufeature: Treat ID_AA64ZFR0_EL1 as RAZ when SVE is not enabled (Mark Salter) [1980098]
- arm64: cpufeature: Effectively expose FRINT capability to userspace (Mark Salter) [1980098]
- arm64: cpufeature: Fix feature comparison for CTR_EL0.{CWG,ERG} (Mark Salter) [1980098]
- arm64: Expose FRINT capabilities to userspace (Mark Salter) [1980098]
- arm64: Expose ARMv8.5 CondM capability to userspace (Mark Salter) [1980098]
- docs: arm64: convert perf.txt to ReST format (Mark Salter) [1980098]
- docs: arm64: convert docs to ReST and rename to .rst (Mark Salter) [1980098]
- Documentation/arm64: HugeTLB page implementation (Mark Salter) [1980098]
- Documentation/arm64/sve: Couple of improvements and typos (Mark Salter) [1980098]
- arm64: cpufeature: Fix missing ZFR0 in __read_sysreg_by_encoding() (Mark Salter) [1980098]
- arm64: Expose SVE2 features for userspace (Mark Salter) [1980098]
- arm64: Advertise ARM64_HAS_DCPODP cpu feature (Mark Salter) [1980098]
- arm64: add CVADP support to the cache maintenance helper (Mark Salter) [1980098]
- arm64: Fix minor issues with the dcache_by_line_op macro (Mark Salter) [1980098]
- arm64: Expose DC CVADP to userspace (Mark Salter) [1980098]
- arm64: Handle trapped DC CVADP (Mark Salter) [1980098]
- arm64: HWCAP: encapsulate elf_hwcap (Mark Salter) [1980098]
- arm64: HWCAP: add support for AT_HWCAP2 (Mark Salter) [1980098]
- x86/MCE/AMD, EDAC/mce_amd: Add new SMCA bank types (Aristeu Rozanski) [1965331]
- x86/MCE/AMD, EDAC/mce_amd: Remove struct smca_hwid.xec_bitmap (Aristeu Rozanski) [1965331]
- EDAC, mce_amd: Print ExtErrorCode and description on a single line (Aristeu Rozanski) [1965331]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-347.el8]" date="1633176000">- PCI: Mark TI C667X to avoid bus reset (Alex Williamson) [1975768]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.el8]" date="1633348800">- drm/nouveau/fifo/ga102: initialise chid on return from channel creation (Ben Skeggs) [1997878]
- drm/nouveau/ga102-: support ttm buffer moves via copy engine (Ben Skeggs) [1997878]
- drm/nouveau/kms/tu102-: delay enabling cursor until after assign_windows (Ben Skeggs) [1997878]
- drm/nouveau/kms/nv50: workaround EFI GOP window channel format differences (Ben Skeggs) [1997878]
- drm/nouveau/disp: power down unused DP links during init (Ben Skeggs) [1997878]
- drm/nouveau: recognise GA107 (Ben Skeggs) [1997878]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.1.1.el8_5]" date="1635940800">- lib/timerqueue: Rely on rbtree semantics for next timer (Phil Auld) [2014677 2007099] {CVE-2021-20317}
- mm/hmm: make HMM_MIRROR an implicit option (Rafael Aquini) [2017519 1998534]
- mm/hmm: allow HMM_MIRROR on all architectures with MMU (Rafael Aquini) [2017519 1998534]
- mm: don't select MIGRATE_VMA_HELPER from HMM_MIRROR (Rafael Aquini) [2017519 1998534]
- mm: sort out the DEVICE_PRIVATE Kconfig mess (Rafael Aquini) [2017519 1998534]
- ceph: skip existing superblocks that are blocklisted or shut down when mounting (Jeffrey Layton) [2017071 2011462]
- redhat: switch release to zstream (Bruno Meneguele)</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.2.1.el8_5]" date="1636372800">- tipc: fix size validations for the MSG_CRYPTO type (Bruno Meneguele) [2020506 2020507] {CVE-2021-43267}
- net: Fix skb-&gt;csum update in inet_proto_csum_replace16(). (Balazs Nemeth) [2005981 1975193]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.3.1.el8_5]" date="1637064000">- net-sysfs: try not to restart the syscall if it will fail eventually (Antoine Tenart) [2021165 2016005]
- ovl: fix missing negative dentry check in ovl_rename() (Miklos Szeredi) [2016378 2010887 2013318] {CVE-2021-20321}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.4.1.el8_5]" date="1637668800">- [RHEL8.6 BZ 1849234] cifs: report error instead of invalid when revalidating a dentry fails (Ronnie Sahlberg) [2017177 1849234]
- kthread: Fix PF_KTHREAD vs to_kthread() race (Waiman Long) [2010333 2001497]
- sched/fair: Ignore percpu threads for imbalance pulls (Waiman Long) [2010333 2001497]
- kthread: Extract KTHREAD_IS_PER_CPU (Waiman Long) [2010333 2001497]
- sched: Optimize finish_lock_switch() (Waiman Long) [2010333 2001497]
- sched/hotplug: Ensure only per-cpu kthreads run during hotplug (Waiman Long) [2010333 2001497]
- sched: Fix balance_callback() (Waiman Long) [2010333 2001497]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.5.1.el8_5]" date="1638273600">- blk-mq: still set q-&gt;make_request_fn for blk-mq (Ming Lei) [2016384 1999728]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.6.1.el8_5]" date="1638878400">- x86/Kconfig: Do not enable AMD_MEM_ENCRYPT_ACTIVE_BY_DEFAULT automatically (Prarit Bhargava) [2024678 2021219]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.7.1.el8_5]" date="1638964800">- sched: Fix CPU hotplug / tighten is_per_cpu_kthread() (Waiman Long) [2026450 2024869]
- sched: Prepare to use balance_push in ttwu() (Waiman Long) [2026450 2024869]
- sched: Don't run cpu-online with balance_push() enabled (Waiman Long) [2026450 2024869]
- workqueue: Tag bound workers with KTHREAD_IS_PER_CPU (Waiman Long) [2026450 2024869]
- workqueue: Use cpu_possible_mask instead of cpu_active_mask to break affinity (Waiman Long) [2026450 2024869]
- sched: Fix hotplug vs CPU bandwidth control (Waiman Long) [2026450 2024869]
- workqueue: Manually break affinity on hotplug (Waiman Long) [2026450 2024869]
- sched/hotplug: Consolidate task migration on CPU unplug (Waiman Long) [2026450 2024869]
- sched/core: Wait for tasks being pushed away on hotplug (Waiman Long) [2026450 2024869]</changelog>
</package>
<package pkgid="36f6b638893148262ff6b8e058aafdf279ca0edd7fb35fd3ca4bd76e21a212ca" name="kernel-rt-debug-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="348.12.2.rt7.143.el8_5"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.4.1.rt7.134.el8_5]" date="1637668800">- [rt] build kernel-rt-4.18.0-348.4.1.rt7.134.el8_5 [1939539]
- [RHEL8.6 BZ 1849234] cifs: report error instead of invalid when revalidating a dentry fails (Ronnie Sahlberg) [2017177 1849234]
- kthread: Fix PF_KTHREAD vs to_kthread() race (Waiman Long) [2010333 2001497]
- sched/fair: Ignore percpu threads for imbalance pulls (Waiman Long) [2010333 2001497]
- kthread: Extract KTHREAD_IS_PER_CPU (Waiman Long) [2010333 2001497]
- sched: Optimize finish_lock_switch() (Waiman Long) [2010333 2001497]
- sched/hotplug: Ensure only per-cpu kthreads run during hotplug (Waiman Long) [2010333 2001497]
- sched: Fix balance_callback() (Waiman Long) [2010333 2001497]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.5.1.rt7.135.el8_5]" date="1638273600">- [rt] build kernel-rt-4.18.0-348.5.1.rt7.135.el8_5 [1939539]
- blk-mq: still set q-&gt;make_request_fn for blk-mq (Ming Lei) [2016384 1999728]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.6.1.rt7.136.el8_5]" date="1638878400">- [rt] build kernel-rt-4.18.0-348.6.1.rt7.136.el8_5 [1939539]
- x86/Kconfig: Do not enable AMD_MEM_ENCRYPT_ACTIVE_BY_DEFAULT automatically (Prarit Bhargava) [2024678 2021219]
- sched/vtime: Work around an unitialized variable warning (Leah Leshchinsky)
- [rt] disable KASAN, KCSAN and UBSAN for kernel-rt (Leah Leshchinsky)</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.7.1.rt7.137.el8_5]" date="1638964800">- [rt] build kernel-rt-4.18.0-348.7.1.rt7.137.el8_5 [1939539]
- sched/core: Re-add dropped __migrate_disabled() check (Fernando Pacheco)
- sched: Fix CPU hotplug / tighten is_per_cpu_kthread() (Waiman Long) [2026450 2024869]
- sched: Prepare to use balance_push in ttwu() (Waiman Long) [2026450 2024869]
- sched: Don't run cpu-online with balance_push() enabled (Waiman Long) [2026450 2024869]
- workqueue: Tag bound workers with KTHREAD_IS_PER_CPU (Waiman Long) [2026450 2024869]
- workqueue: Use cpu_possible_mask instead of cpu_active_mask to break affinity (Waiman Long) [2026450 2024869]
- sched: Fix hotplug vs CPU bandwidth control (Waiman Long) [2026450 2024869]
- workqueue: Manually break affinity on hotplug (Waiman Long) [2026450 2024869]
- sched/hotplug: Consolidate task migration on CPU unplug (Waiman Long) [2026450 2024869]
- sched/core: Wait for tasks being pushed away on hotplug (Waiman Long) [2026450 2024869]
- sched/core: Prep code for merging mr1787 (Fernando Pacheco)</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.8.1.rt7.138.el8_5]" date="1639483200">- [rt] build kernel-rt-4.18.0-348.8.1.rt7.138.el8_5 [1939539]
- ice: Fix VF true promiscuous mode (Jonathan Toppins) [2026698 1970643]
- ice: Remove toggling of antispoof for VF trusted promiscuous mode (Jonathan Toppins) [2026698 1970643]
- ice: Fix replacing VF hardware MAC to existing MAC filter (Jonathan Toppins) [2026698 1970643]
- ice: Fix not stopping Tx queues for VFs (Jonathan Toppins) [2026698 1970643]
- ice: Fix race conditions between virtchnl handling and VF ndo ops (Jonathan Toppins) [2026698 1970643]
- net/netif_receive_skb_core: Use migrate_disable() (Luis Claudio R. Goncalves) [2027689 2024168]
- crypto: jitter - consider 32 LSB for APT (Herbert Xu) [2029365 1994390]
- xfs: fix I_DONTCACHE (Carlos Maiolino) [2028534 2024969]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.9.1.rt7.139.el8_5]" date="1640001600">- [rt] build kernel-rt-4.18.0-348.9.1.rt7.139.el8_5 [2032059]
- ixgbe: Revert "bpf, devmap: Move drop error path to devmap for XDP_REDIRECT" (Ken Cox) [2029845 2024240]
- i40e: Revert "bpf, devmap: Move drop error path to devmap for XDP_REDIRECT" (Stefan Assmann) [2029845 2024225]
- rcu/nocb: Perform deferred wake up before last idle's need_resched() check (Waiman Long) [2029449 2008340]
- locking/rwsem-rt: Remove might_sleep() in __up_read() (Andrew Halaney) [2029422 1903578]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.10.1.rt7.140.el8_5]" date="1640779200">- [rt] build kernel-rt-4.18.0-348.10.1.rt7.140.el8_5 [2032059]
- selftests: add a test case for mirred egress to ingress (Xin Long) [2024411 1983894]
- net: sched: act_mirred: drop dst for the direction from egress to ingress (Xin Long) [2024411 1983894]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.11.1.rt7.141.el8_5]" date="1641297600">- [rt] build kernel-rt-4.18.0-348.11.1.rt7.141.el8_5 [2032059]
- blk-mq: avoid to iterate over stale request (Ming Lei) [2034396 1997338]
- rcu: Tighten rcu_advance_cbs_nowake() checks (Daniel Vacek) [2032579 2013408]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.12.1.rt7.142.el8_5]" date="1641988800">- [rt] build kernel-rt-4.18.0-348.12.1.rt7.142.el8_5 [2032059]
- tcp: don't free a FIN sk_buff in tcp_remove_empty_skb() (Guillaume Nault) [2021574 2016210]
- kernel.spec: Add support to use vmlinux.h (Jiri Olsa) [2031053 1989087]
- spec: Add vmlinux.h to kernel-devel package (Jiri Olsa) [2031053 1989087]
- x86/mce: Avoid infinite loop for copy from user recovery (Prarit Bhargava) [2008789 1999550]
- x86/mce: Rename kill_it to kill_current_task (Prarit Bhargava) [2008789 1999550]
- x86/mce: Recover from poison found while copying from user space (Prarit Bhargava) [2008789 1999550]
- x86/mce: Delay clearing IA32_MCG_STATUS to the end of do_machine_check() (Prarit Bhargava) [2008789 1999550]
- x86/mce: Send #MC singal from task work (Prarit Bhargava) [2008789 1999550]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-348.12.2.rt7.143.el8_5]" date="1642420800">- [rt] build kernel-rt-4.18.0-348.12.2.rt7.143.el8_5 [2032059]
- vfs: Out-of-bounds write of heap buffer in fs_context.c (Frantisek Hrbata) [2040580 2040581] {CVE-2022-0185}
- xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Bruno Meneguele) [2034869 2034870] {CVE-2021-4155}</changelog>
</package>
<package pkgid="ef31365d8d1d866f5c5c4d4b37c507c07e92421c90de685eb62c6d1f6aa61a1e" name="kernel-rt-debug-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="348.2.1.rt7.132.el8_5"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-342.rt7.123.el8]" date="1631620800">- [rt] build kernel-rt-4.18.0-342.rt7.123.el8 [1939539]
- selftest: netfilter: add test case for unreplied tcp connections (Florian Westphal) [1991523]
- netfilter: conntrack: do not renew entry stuck in tcp SYN_SENT state (Florian Westphal) [1991523]
- net/sched: store the last executed chain also for clsact egress (Davide Caratti) [1980537]
- ice: fix Tx queue iteration for Tx timestamp enablement (Ken Cox) [1999743]
- perf evsel: Add missing cloning of evsel-&gt;use_config_name (Michael Petlan) [1838635]
- perf Documentation: Document intel-hybrid support (Michael Petlan) [1838635]
- perf tests: Skip 'perf stat metrics (shadow stat) test' for hybrid (Michael Petlan) [1838635]
- perf tests: Support 'Convert perf time to TSC' test for hybrid (Michael Petlan) [1838635]
- perf tests: Support 'Session topology' test for hybrid (Michael Petlan) [1838635]
- perf tests: Support 'Parse and process metrics' test for hybrid (Michael Petlan) [1838635]
- perf tests: Support 'Track with sched_switch' test for hybrid (Michael Petlan) [1838635]
- perf tests: Skip 'Setup struct perf_event_attr' test for hybrid (Michael Petlan) [1838635]
- perf tests: Add hybrid cases for 'Roundtrip evsel-&gt;name' test (Michael Petlan) [1838635]
- perf tests: Add hybrid cases for 'Parse event definition strings' test (Michael Petlan) [1838635]
- perf record: Uniquify hybrid event name (Michael Petlan) [1838635]
- perf stat: Warn group events from different hybrid PMU (Michael Petlan) [1838635]
- perf stat: Filter out unmatched aggregation for hybrid event (Michael Petlan) [1838635]
- perf stat: Add default hybrid events (Michael Petlan) [1838635]
- perf record: Create two hybrid 'cycles' events by default (Michael Petlan) [1838635]
- perf parse-events: Support event inside hybrid pmu (Michael Petlan) [1838635]
- perf parse-events: Compare with hybrid pmu name (Michael Petlan) [1838635]
- perf parse-events: Create two hybrid raw events (Michael Petlan) [1838635]
- perf parse-events: Create two hybrid cache events (Michael Petlan) [1838635]
- perf parse-events: Create two hybrid hardware events (Michael Petlan) [1838635]
- perf stat: Uniquify hybrid event name (Michael Petlan) [1838635]
- perf pmu: Add hybrid helper functions (Michael Petlan) [1838635]
- perf pmu: Save detected hybrid pmus to a global pmu list (Michael Petlan) [1838635]
- perf pmu: Save pmu name (Michael Petlan) [1838635]
- perf pmu: Simplify arguments of __perf_pmu__new_alias (Michael Petlan) [1838635]
- perf jevents: Support unit value "cpu_core" and "cpu_atom" (Michael Petlan) [1838635]
- tools headers uapi: Update tools's copy of linux/perf_event.h (Michael Petlan) [1838635]</changelog>
  <changelog author="Luis Claudio R. Goncalves &lt;lgoncalv@redhat.com&gt; [4.18.0-342.rt7.124.el8]" date="1631707200">- [rt] build kernel-rt-4.18.0-342.rt7.124.el8 [1939539]
- [rt] wqueue: fix bad unlock balance in destroy_workqueue() [1998682]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-343.rt7.125.el8]" date="1631793600">- [rt] build kernel-rt-4.18.0-343.rt7.125.el8 [1939539]
- rcu: Avoid unneeded function call in rcu_read_unlock() (Waiman Long) [1997500]
- mt76: connac: do not schedule mac_work if the device is not running (Íñigo Huguet) [1956419 1972045]
- mt7921e: enable module in config (Íñigo Huguet) [1956419 1972045]
- Revert tools/power/cpupower: Read energy_perf_bias from sysfs (Steve Best) [1999926]
- libnvdimm/namespace: Differentiate between probe mapping and runtime mapping (Jeff Moyer) [1795719]
- libnvdimm/pfn_dev: Don't clear device memmap area during generic namespace probe (Jeff Moyer) [1795719]
- perf/x86/intel/uncore: Clean up error handling path of iio mapping (Michael Petlan) [1837330]
- perf/x86/intel/uncore: Fix for iio mapping on Skylake Server (Michael Petlan) [1837330]
- perf/x86/intel/uncore: Generic support for the MMIO type of uncore blocks (Michael Petlan) [1837330]
- perf/x86/intel/uncore: Generic support for the PCI type of uncore blocks (Michael Petlan) [1837330]
- perf/x86/intel/uncore: Rename uncore_notifier to uncore_pci_sub_notifier (Michael Petlan) [1837330]
- perf/x86/intel/uncore: Generic support for the MSR type of uncore blocks (Michael Petlan) [1837330]
- perf/x86/intel/uncore: Parse uncore discovery tables (Michael Petlan) [1837330]
- perf/x86/intel/uncore: Expose an Uncore unit to IIO PMON mapping (Michael Petlan) [1837330]
- perf/x86/intel/uncore: Wrap the max dies calculation into an accessor (Michael Petlan) [1837330]
- perf/x86/intel/uncore: Expose an Uncore unit to PMON mapping (Michael Petlan) [1837330]
- perf/x86/intel/uncore: Validate MMIO address before accessing (Michael Petlan) [1837330]
- perf/x86/intel/uncore: Record the size of mapped area (Michael Petlan) [1837330]
- perf/x86/intel/uncore: Fix oops when counting IMC uncore events on some TGL (Michael Petlan) [1837330]
- crypto: qat - remove unused macro in FW loader (Vladis Dronov) [1920086]
- crypto: qat - check return code of qat_hal_rd_rel_reg() (Vladis Dronov) [1920086]
- crypto: qat - report an error if MMP file size is too large (Vladis Dronov) [1920086]
- crypto: qat - check MMP size before writing to the SRAM (Vladis Dronov) [1920086]
- crypto: qat - return error when failing to map FW (Vladis Dronov) [1920086]
- crypto: qat - enable detection of accelerators hang (Vladis Dronov) [1920086]
- crypto: qat - Fix a double free in adf_create_ring (Vladis Dronov) [1920086]
- crypto: qat - fix error path in adf_isr_resource_alloc() (Vladis Dronov) [1920086]
- crypto: qat - ADF_STATUS_PF_RUNNING should be set after adf_dev_init (Vladis Dronov) [1920086]
- crypto: qat - don't release uninitialized resources (Vladis Dronov) [1920086]
- crypto: qat - fix use of 'dma_map_single' (Vladis Dronov) [1920086]
- crypto: qat - fix unmap invalid dma address (Vladis Dronov) [1920086]
- crypto: qat - fix spelling mistake: "messge" -&gt; "message" (Vladis Dronov) [1920086]
- crypto: qat - reduce size of mapped region (Vladis Dronov) [1920086]
- crypto: qat - change format string and cast ring size (Vladis Dronov) [1920086]
- crypto: qat - fix potential spectre issue (Vladis Dronov) [1920086]
- crypto: qat - configure arbiter mapping based on engines enabled (Vladis Dronov) [1920086]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-344.rt7.126.el8]" date="1632139200">- [rt] build kernel-rt-4.18.0-344.rt7.126.el8 [1939539]
- perf/x86/intel: Fix PEBS-via-PT reload base value for Extended PEBS (Michael Petlan) [1998051]
- perf/x86/intel/uncore: Fix Add BW copypasta (Michael Petlan) [1998051]
- perf/x86/intel/uncore: Add BW counters for GT, IA and IO breakdown (Michael Petlan) [1998051]
- Revert "ice: Add initial support framework for LAG" (Michal Schmidt) [1999016]
- net: re-initialize slow_gro flag at gro_list_prepare time (Paolo Abeni) [2002367]
- cxgb4: dont touch blocked freelist bitmap after free (Rahul Lakkireddy) [1998148]
- cxgb4vf: configure ports accessible by the VF (Rahul Lakkireddy) [1961329]
- scsi: lpfc: Fix memory leaks in error paths while issuing ELS RDF/SCR request (Dick Kennedy) [1976332]
- scsi: lpfc: Keep NDLP reference until after freeing the IOCB after ELS handling (Dick Kennedy) [1976332]
- scsi: lpfc: Move initialization of phba-&gt;poll_list earlier to avoid crash (Dick Kennedy) [1976332]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-345.rt7.127.el8]" date="1632398400">- [rt] build kernel-rt-4.18.0-345.rt7.127.el8 [1939539]
- e1000e: Do not take care about recovery NVM checksum (Ken Cox) [1984558]
- qrtr: disable CONFIG_QRTR for non x86_64 archs (Íñigo Huguet) [1999642]
- ceph: fix possible null-pointer dereference in ceph_mdsmap_decode() (Jeff Layton) [1989999]
- ceph: fix dereference of null pointer cf (Jeff Layton) [1989999]
- ceph: correctly handle releasing an embedded cap flush (Jeff Layton) [1989999]
- ceph: take snap_empty_lock atomically with snaprealm refcount change (Jeff Layton) [1989999]
- ceph: don't WARN if we're still opening a session to an MDS (Jeff Layton) [1989999]
- rbd: don't hold lock_rwsem while running_list is being drained (Jeff Layton) [1989999]
- rbd: always kick acquire on "acquired" and "released" notifications (Jeff Layton) [1989999]
- ceph: take reference to req-&gt;r_parent at point of assignment (Jeff Layton) [1989999]
- ceph: eliminate ceph_async_iput() (Jeff Layton) [1989999]
- ceph: don't take s_mutex in ceph_flush_snaps (Jeff Layton) [1989999]
- ceph: don't take s_mutex in try_flush_caps (Jeff Layton) [1989999]
- ceph: don't take s_mutex or snap_rwsem in ceph_check_caps (Jeff Layton) [1989999]
- ceph: eliminate session-&gt;s_gen_ttl_lock (Jeff Layton) [1989999]
- ceph: allow ceph_put_mds_session to take NULL or ERR_PTR (Jeff Layton) [1989999]
- ceph: clean up locking annotation for ceph_get_snap_realm and __lookup_snap_realm (Jeff Layton) [1989999]
- ceph: add some lockdep assertions around snaprealm handling (Jeff Layton) [1989999]
- ceph: decoding error in ceph_update_snap_realm should return -EIO (Jeff Layton) [1989999]
- ceph: add IO size metrics support (Jeff Layton) [1989999]
- ceph: update and rename __update_latency helper to __update_stdev (Jeff Layton) [1989999]
- ceph: simplify the metrics struct (Jeff Layton) [1989999]
- libceph: fix doc warnings in cls_lock_client.c (Jeff Layton) [1989999]
- libceph: remove unnecessary ret variable in ceph_auth_init() (Jeff Layton) [1989999]
- libceph: kill ceph_none_authorizer::reply_buf (Jeff Layton) [1989999]
- ceph: make ceph_queue_cap_snap static (Jeff Layton) [1989999]
- ceph: remove bogus checks and WARN_ONs from ceph_set_page_dirty (Jeff Layton) [1989999]
- libceph: set global_id as soon as we get an auth ticket (Jeff Layton) [1989999]
- libceph: don't pass result into ac-&gt;ops-&gt;handle_reply() (Jeff Layton) [1989999]
- ceph: fix error handling in ceph_atomic_open and ceph_lookup (Jeff Layton) [1989999]
- ceph: must hold snap_rwsem when filling inode for async create (Jeff Layton) [1989999]
- libceph: Fix spelling mistakes (Jeff Layton) [1989999]
- libceph: don't set global_id until we get an auth ticket (Jeff Layton) [1989999]
- libceph: bump CephXAuthenticate encoding version (Jeff Layton) [1989999]
- ceph: don't allow access to MDS-private inodes (Jeff Layton) [1989999]
- ceph: fix up some bare fetches of i_size (Jeff Layton) [1989999]
- ceph: support getting ceph.dir.rsnaps vxattr (Jeff Layton) [1989999]
- ceph: drop pinned_page parameter from ceph_get_caps (Jeff Layton) [1989999]
- ceph: fix inode leak on getattr error in __fh_to_dentry (Jeff Layton) [1989999]
- ceph: only check pool permissions for regular files (Jeff Layton) [1989999]
- ceph: send opened files/pinned caps/opened inodes metrics to MDS daemon (Jeff Layton) [1989999]
- ceph: avoid counting the same request twice or more (Jeff Layton) [1989999]
- ceph: rename the metric helpers (Jeff Layton) [1989999]
- ceph: fix kerneldoc copypasta over ceph_start_io_direct (Jeff Layton) [1989999]
- ceph: don't use d_add in ceph_handle_snapdir (Jeff Layton) [1989999]
- ceph: don't clobber i_snap_caps on non-I_NEW inode (Jeff Layton) [1989999]
- ceph: fix fall-through warnings for Clang (Jeff Layton) [1989999]
- net: ceph: Fix a typo in osdmap.c (Jeff Layton) [1989999]
- ceph: don't allow type or device number to change on non-I_NEW inodes (Jeff Layton) [1989999]
- ceph: defer flushing the capsnap if the Fb is used (Jeff Layton) [1989999]
- ceph: allow queueing cap/snap handling after putting cap references (Jeff Layton) [1989999]
- ceph: clean up inode work queueing (Jeff Layton) [1989999]
- ceph: fix flush_snap logic after putting caps (Jeff Layton) [1989999]
- libceph: fix "Boolean result is used in bitwise operation" warning (Jeff Layton) [1989999]
- new helper: inode_wrong_type() (Jeff Layton) [1989999]
- kabi: Adding symbol single_release (fs/seq_file.c) (Čestmír Kalina) [1945486]
- kabi: Adding symbol single_open (fs/seq_file.c) (Čestmír Kalina) [1945486]
- kabi: Adding symbol seq_read (fs/seq_file.c) (Čestmír Kalina) [1945486]
- kabi: Adding symbol seq_printf (fs/seq_file.c) (Čestmír Kalina) [1945486]
- kabi: Adding symbol seq_lseek (fs/seq_file.c) (Čestmír Kalina) [1945486]
- kabi: Adding symbol unregister_chrdev_region (fs/char_dev.c) (Čestmír Kalina) [1945486]
- kabi: Adding symbol cdev_init (fs/char_dev.c) (Čestmír Kalina) [1945486]
- kabi: Adding symbol cdev_del (fs/char_dev.c) (Čestmír Kalina) [1945486]
- kabi: Adding symbol cdev_alloc (fs/char_dev.c) (Čestmír Kalina) [1945486]
- kabi: Adding symbol cdev_add (fs/char_dev.c) (Čestmír Kalina) [1945486]
- kabi: Adding symbol alloc_chrdev_region (fs/char_dev.c) (Čestmír Kalina) [1945486]
- kabi: Adding symbol pcie_capability_read_word (drivers/pci/access.c) (Čestmír Kalina) [1945485]
- kabi: Adding symbol pcie_capability_read_dword (drivers/pci/access.c) (Čestmír Kalina) [1945485]
- kabi: Adding symbol pcie_capability_clear_and_set_word (drivers/pci/access.c) (Čestmír Kalina) [1945485]
- kabi: Adding symbol pci_write_config_dword (drivers/pci/access.c) (Čestmír Kalina) [1945485]
- kabi: Adding symbol pci_write_config_byte (drivers/pci/access.c) (Čestmír Kalina) [1945485]
- kabi: Adding symbol pci_set_power_state (drivers/pci/pci.c) (Čestmír Kalina) [1945485]
- kabi: Adding symbol pci_read_config_dword (drivers/pci/access.c) (Čestmír Kalina) [1945485]
- kabi: Adding symbol pci_read_config_byte (drivers/pci/access.c) (Čestmír Kalina) [1945485]
- kabi: Adding symbol pci_irq_vector (drivers/pci/msi.c) (Čestmír Kalina) [1945485]
- kabi: Adding symbol pci_get_device (drivers/pci/search.c) (Čestmír Kalina) [1945485]
- kabi: Adding symbol pci_free_irq_vectors (drivers/pci/msi.c) (Čestmír Kalina) [1945485]
- kabi: Adding symbol pci_alloc_irq_vectors_affinity (drivers/pci/msi.c) (Čestmír Kalina) [1945485]
- kabi: Adding symbol kexec_crash_loaded (kernel/kexec_core.c) (Čestmír Kalina) [1945491]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-346.rt7.128.el8]" date="1633089600">- [rt] build kernel-rt-4.18.0-346.rt7.128.el8 [1939539]
- redhat: switch secureboot kernel image signing to release keys (Bruno Meneguele)
- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Fix RT check branch name (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- Revert "Merge: mt7921e: enable new Mediatek wireless hardware" (Bruno Meneguele) [2009501]
- megaraid_sas: fix concurrent access to ISR between IRQ polling and real interrupt (Tomas Henzl) [2009022]
- scsi: megaraid_sas: mq_poll support (Tomas Henzl) [2009022]
- [PATCH v2] scsi: qla2xxx: Suppress unnecessary log messages during login (Nilesh Javali) [1982186]
- scsi: qla2xxx: Fix excessive messages during device logout (Nilesh Javali) [1982186]
- PCI: pciehp: Ignore Link Down/Up caused by DPC (Myron Stowe) [1981741]
- arm64: kpti: Fix "kpti=off" when KASLR is enabled (Mark Salter) [1979731]
- arm64: Fix CONFIG_ARCH_RANDOM=n build (Mark Salter) [1979731]
- redhat/configs: aarch64: add CONFIG_ARCH_RANDOM (Mark Salter) [1979731]
- arm64: Implement archrandom.h for ARMv8.5-RNG (Mark Salter) [1979731]
- arm64: kconfig: Fix alignment of E0PD help text (Mark Salter) [1979731]
- arm64: Use register field helper in kaslr_requires_kpti() (Mark Salter) [1979731]
- arm64: Simplify early check for broken TX1 when KASLR is enabled (Mark Salter) [1979731]
- arm64: Use a variable to store non-global mappings decision (Mark Salter) [1979731]
- arm64: Don't use KPTI where we have E0PD (Mark Salter) [1979731]
- arm64: Factor out checks for KASLR in KPTI code into separate function (Mark Salter) [1979731]
- redhat/configs: Add CONFIG_ARM64_E0PD (Mark Salter) [1979731]
- arm64: Add initial support for E0PD (Mark Salter) [1979731]
- arm64: cpufeature: Export matrix and other features to userspace (Mark Salter) [1980098]
- arm64: docs: cpu-feature-registers: Document ID_AA64PFR1_EL1 (Mark Salter) [1980098]
- docs/arm64: cpu-feature-registers: Rewrite bitfields that don't follow [e, s] (Mark Salter) [1980098]
- docs/arm64: cpu-feature-registers: Documents missing visible fields (Mark Salter) [1980098]
- arm64: Introduce system_capabilities_finalized() marker (Mark Salter) [1980098]
- arm64: entry.S: Do not preempt from IRQ before all cpufeatures are enabled (Mark Salter) [1980098]
- docs/arm64: elf_hwcaps: Document HWCAP_SB (Mark Salter) [1980098]
- docs/arm64: elf_hwcaps: sort the HWCAP{, 2} documentation by ascending value (Mark Salter) [1980098]
- arm64: cpufeature: Treat ID_AA64ZFR0_EL1 as RAZ when SVE is not enabled (Mark Salter) [1980098]
- arm64: cpufeature: Effectively expose FRINT capability to userspace (Mark Salter) [1980098]
- arm64: cpufeature: Fix feature comparison for CTR_EL0.{CWG,ERG} (Mark Salter) [1980098]
- arm64: Expose FRINT capabilities to userspace (Mark Salter) [1980098]
- arm64: Expose ARMv8.5 CondM capability to userspace (Mark Salter) [1980098]
- docs: arm64: convert perf.txt to ReST format (Mark Salter) [1980098]
- docs: arm64: convert docs to ReST and rename to .rst (Mark Salter) [1980098]
- Documentation/arm64: HugeTLB page implementation (Mark Salter) [1980098]
- Documentation/arm64/sve: Couple of improvements and typos (Mark Salter) [1980098]
- arm64: cpufeature: Fix missing ZFR0 in __read_sysreg_by_encoding() (Mark Salter) [1980098]
- arm64: Expose SVE2 features for userspace (Mark Salter) [1980098]
- arm64: Advertise ARM64_HAS_DCPODP cpu feature (Mark Salter) [1980098]
- arm64: add CVADP support to the cache maintenance helper (Mark Salter) [1980098]
- arm64: Fix minor issues with the dcache_by_line_op macro (Mark Salter) [1980098]
- arm64: Expose DC CVADP to userspace (Mark Salter) [1980098]
- arm64: Handle trapped DC CVADP (Mark Salter) [1980098]
- arm64: HWCAP: encapsulate elf_hwcap (Mark Salter) [1980098]
- arm64: HWCAP: add support for AT_HWCAP2 (Mark Salter) [1980098]
- x86/MCE/AMD, EDAC/mce_amd: Add new SMCA bank types (Aristeu Rozanski) [1965331]
- x86/MCE/AMD, EDAC/mce_amd: Remove struct smca_hwid.xec_bitmap (Aristeu Rozanski) [1965331]
- EDAC, mce_amd: Print ExtErrorCode and description on a single line (Aristeu Rozanski) [1965331]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-347.rt7.129.el8]" date="1633176000">- [rt] build kernel-rt-4.18.0-347.rt7.129.el8 [1939539]
- PCI: Mark TI C667X to avoid bus reset (Alex Williamson) [1975768]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.rt7.130.el8]" date="1633348800">- [rt] build kernel-rt-4.18.0-348.rt7.130.el8 [1939539]
- drm/nouveau/fifo/ga102: initialise chid on return from channel creation (Ben Skeggs) [1997878]
- drm/nouveau/ga102-: support ttm buffer moves via copy engine (Ben Skeggs) [1997878]
- drm/nouveau/kms/tu102-: delay enabling cursor until after assign_windows (Ben Skeggs) [1997878]
- drm/nouveau/kms/nv50: workaround EFI GOP window channel format differences (Ben Skeggs) [1997878]
- drm/nouveau/disp: power down unused DP links during init (Ben Skeggs) [1997878]
- drm/nouveau: recognise GA107 (Ben Skeggs) [1997878]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.1.1.rt7.131.el8_5]" date="1635940800">- [rt] build kernel-rt-4.18.0-348.1.1.rt7.131.el8_5 [1939539]
- lib/timerqueue: Rely on rbtree semantics for next timer (Phil Auld) [2014677 2007099] {CVE-2021-20317}
- mm/hmm: make HMM_MIRROR an implicit option (Rafael Aquini) [2017519 1998534]
- mm/hmm: allow HMM_MIRROR on all architectures with MMU (Rafael Aquini) [2017519 1998534]
- mm: don't select MIGRATE_VMA_HELPER from HMM_MIRROR (Rafael Aquini) [2017519 1998534]
- mm: sort out the DEVICE_PRIVATE Kconfig mess (Rafael Aquini) [2017519 1998534]
- ceph: skip existing superblocks that are blocklisted or shut down when mounting (Jeffrey Layton) [2017071 2011462]
- redhat: switch release to zstream (Bruno Meneguele)</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.2.1.rt7.132.el8_5]" date="1636372800">- [rt] build kernel-rt-4.18.0-348.2.1.rt7.132.el8_5 [1939539]
- tipc: fix size validations for the MSG_CRYPTO type (Bruno Meneguele) [2020511 2020512] {CVE-2021-43267}
- net: Fix skb-&gt;csum update in inet_proto_csum_replace16(). (Balazs Nemeth) [2005981 1975193]</changelog>
</package>
<package pkgid="bb61102e72bc3f7e55f4fb29a0ada5c480d005f2aeb4ddeccb267ea6ef678e40" name="kernel-rt-debug-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="348.20.1.rt7.150.el8_5"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.11.1.rt7.141.el8_5]" date="1641297600">- [rt] build kernel-rt-4.18.0-348.11.1.rt7.141.el8_5 [2032059]
- blk-mq: avoid to iterate over stale request (Ming Lei) [2034396 1997338]
- rcu: Tighten rcu_advance_cbs_nowake() checks (Daniel Vacek) [2032579 2013408]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.12.1.rt7.142.el8_5]" date="1641988800">- [rt] build kernel-rt-4.18.0-348.12.1.rt7.142.el8_5 [2032059]
- tcp: don't free a FIN sk_buff in tcp_remove_empty_skb() (Guillaume Nault) [2021574 2016210]
- kernel.spec: Add support to use vmlinux.h (Jiri Olsa) [2031053 1989087]
- spec: Add vmlinux.h to kernel-devel package (Jiri Olsa) [2031053 1989087]
- x86/mce: Avoid infinite loop for copy from user recovery (Prarit Bhargava) [2008789 1999550]
- x86/mce: Rename kill_it to kill_current_task (Prarit Bhargava) [2008789 1999550]
- x86/mce: Recover from poison found while copying from user space (Prarit Bhargava) [2008789 1999550]
- x86/mce: Delay clearing IA32_MCG_STATUS to the end of do_machine_check() (Prarit Bhargava) [2008789 1999550]
- x86/mce: Send #MC singal from task work (Prarit Bhargava) [2008789 1999550]</changelog>
  <changelog author="Fernando Pacheco &lt;fpacheco@redhat.com&gt; [4.18.0-348.13.1.rt7.143.el8_5]" date="1642507200">- [rt] build kernel-rt-4.18.0-348.13.1.rt7.143.el8_5 [2032059]
- kernel/locking: Export __rt_mutex_init to non-GPL (Juri Lelli) [2038423 2028992]
- vfs: Out-of-bounds write of heap buffer in fs_context.c (Frantisek Hrbata) [2040580 2040581] {CVE-2022-0185}
- xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Bruno Meneguele) [2034869 2034870] {CVE-2021-4155}
- af_unix: fix garbage collect vs MSG_PEEK (Patrick Talbert) [2031982 2031983] {CVE-2021-0920}
- cgroup: verify that source is a string (Waiman Long) [2034613 2034614] {CVE-2021-4154}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-348.14.1.rt7.144.el8_5]" date="1643198400">- [rt] build kernel-rt-4.18.0-348.14.1.rt7.144.el8_5 [2045589]
- redhat: don't copy Module.kabi files to dist-git (Frantisek Hrbata)
- tcp: fix page frag corruption on page fault (Paolo Abeni) [2041529 1996074]
- net: fix sk_page_frag() recursion from memory reclaim (Paolo Abeni) [2041529 1996074]
- KVM: s390: index kvm-&gt;arch.idle_mask by vcpu_idx (Thomas Huth) [2040769 2026230]
- redhat: set LC_ALL=C before sorting config content (Frantisek Hrbata)</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.15.1.rt7.145.el8_5]" date="1643716800">- [rt] build kernel-rt-4.18.0-348.15.1.rt7.145.el8_5 [2045589]
- net/mlx5: DR, Use FW API when updating FW-owned flow table (Michal Schmidt) [2042663 2042651]
- KVM: x86: Wait for IPIs to be delivered when handling Hyper-V TLB flush hypercall (Vitaly Kuznetsov) [2043237 1868572]
- drm/mgag200: Select clock in PLL update functions (Bruno Meneguele) [2034949 1953926]
- drm/i915: Fix HAS_LSPCON macro for platforms between GEN9 and GEN10 (Bruno Meneguele) [2027335 2005586]
- crypto: qat - power up 4xxx device (Vladis Dronov) [2016437 1960307]
- RDMA/core: Fix a double free in add_port error flow (Kamal Heib) [2038724 2008555]
- powerpc/iommu: Report the correct most efficient DMA mask for PCI devices (Steve Best) [2018928 2007425]
- powerpc/dma: Fix dma_map_ops::get_required_mask (Steve Best) [2018928 2007425]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.16.1.rt7.146.el8_5]" date="1644321600">- [rt] build kernel-rt-4.18.0-348.16.1.rt7.146.el8_5 [2045589]
- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047610 2047611] {CVE-2022-22942}
- net: openvswitch: Fix ct_state nat flags for conns arriving from tc (Marcelo Ricardo Leitner) [2043548 2040334]
- net: openvswitch: Fix matching zone id for invalid conns arriving from tc (Marcelo Ricardo Leitner) [2043550 2040452]
- net/sched: flow_dissector: Fix matching on zone id for invalid conns (Marcelo Ricardo Leitner) [2043550 2040452]
- net/sched: Extend qdisc control block with tc control block (Marcelo Ricardo Leitner) [2043550 2040452]
- redhat/Makefile: fix access issue on shared build system (Bruno Meneguele)</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.17.1.rt7.147.el8_5]" date="1644926400">- [rt] build kernel-rt-4.18.0-348.17.1.rt7.147.el8_5 [2045589]
- vfs: check dentry is still valid in get_link() (Ian Kent) [2052558 2014846]
- xfs: don't expose internal symlink metadata buffers to the vfs (Brian Foster) [2052558 2014846]
- CI: Use appropriate zstream builder (Veronika Kabatova)
- CI: Enable baseline realtime checks (Veronika Kabatova)
- CI: Rename pipelines to include release names (Veronika Kabatova)
- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052176 2052177] {CVE-2022-0492}
- ice: Remove boolean vlan_promisc flag from function (Jonathan Toppins) [2051951 2030400]
- ceph: put the requests/sessions when it fails to alloc memory (Jeffrey Layton) [2053725 2017796]
- ceph: fix off by one bugs in unsafe_request_wait() (Jeffrey Layton) [2053725 2017796]
- ceph: flush the mdlog before waiting on unsafe reqs (Jeffrey Layton) [2053725 2017796]
- ceph: flush mdlog before umounting (Jeffrey Layton) [2053725 2017796]
- ceph: make iterate_sessions a global symbol (Jeffrey Layton) [2053725 2017796]
- ceph: make ceph_create_session_msg a global symbol (Jeffrey Layton) [2053725 2017796]
- xfs: check sb_meta_uuid for dabuf buffer recovery (Bill O'Donnell) [2049292 2020764]
- drm/i915: Flush TLBs before releasing backing store (Patrick Talbert) [2044333 2044334] {CVE-2022-0330}
- hugetlb: fix hugetlb cgroup refcounting during vma split (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: fix imbalanced css_get and css_put pair for shared mappings (Waiman Long) [2039015 2032811]
- mm/hugetlb: change hugetlb_reserve_pages() to type bool (Waiman Long) [2039015 2032811]
- hugetlb: fix an error code in hugetlb_reserve_pages() (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: fix offline of hugetlb cgroup with reservations (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: fix reservation accounting (Waiman Long) [2039015 2032811]
- mm/hugetlb: narrow the hugetlb_lock protection area during preparing huge page (Waiman Long) [2039015 2032811]
- mm/hugetlb: a page from buddy is not on any list (Waiman Long) [2039015 2032811]
- mm/hugetlb: not necessary to coalesce regions recursively (Waiman Long) [2039015 2032811]
- selftests/vm/write_to_hugetlbfs.c: fix unused variable warning (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add hugetlb_cgroup reservation tests (Waiman Long) [2039015 2032811]
- hugetlb: support file_region coalescing again (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: support noreserve mappings (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add accounting for shared mappings (Waiman Long) [2039015 2032811]
- hugetlb: disable region_add file_region coalescing (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add reservation accounting for private mappings (Waiman Long) [2039015 2032811]
- mm/hugetlb_cgroup: fix hugetlb_cgroup migration (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add interface for charge/uncharge hugetlb reservations (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add hugetlb_cgroup reservation counter (Waiman Long) [2039015 2032811]
- hugetlb: remove duplicated code (Waiman Long) [2039015 2032811]
- hugetlb: region_chg provides only cache entry (Waiman Long) [2039015 2032811]
- hugetlbfs: always use address space in inode for resv_map pointer (Waiman Long) [2039015 2032811]
- hugetlbfs: fix potential over/underflow setting node specific nr_hugepages (Waiman Long) [2039015 2032811]
- hugetlb: allow to free gigantic pages regardless of the configuration (Waiman Long) [2039015 2032811]
- powerpc/pseries: Fix update of LPAR security flavor after LPM (Steve Best) [2027448 1997294]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.18.1.rt7.148.el8_5]" date="1645531200">- [rt] build kernel-rt-4.18.0-348.18.1.rt7.148.el8_5 [2045589]
- selftests: kvm: Check whether SIDA memop fails for normal guests (Thomas Huth) [2050811 2050812] {CVE-2022-0516}
- KVM: s390: Return error on SIDA memop on normal guest (Thomas Huth) [2050811 2050812] {CVE-2022-0516}
- iommu/amd: Remove iommu_init_ga() (Jerry Snitselaar) [2030854 1998265]
- iommu/amd: Relocate GAMSup check to early_enable_iommus (Jerry Snitselaar) [2030854 1998265]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.19.1.rt7.149.el8_5]" date="1646049600">- [rt] build kernel-rt-4.18.0-348.19.1.rt7.149.el8_5 [2045589]
- tipc: improve size validations for received domain records (Xin Long) [2048976 2048977] {CVE-2022-0435}
- smb3: do not error on fsync when readonly (Ronnie Sahlberg) [2055824 2037811]
- security: implement sctp_assoc_established hook in selinux (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- security: add sctp_assoc_established hook (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- security: call security_sctp_assoc_request in sctp_sf_do_5_1D_ce (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- security: pass asoc to sctp_assoc_request and sctp_sk_clone (Bruno Meneguele) [2054112 2054117 2015525 2048251]
- net: sctp: Fix some typos (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- RDMA/bnxt_re: Fix stats counters (Selvin Xavier) [2049684 2001893]
- net: check skb sec_path when re-initializing slow_gro in gro_list_prepare (Xin Long) [2047427 2030476]
- cpufreq: intel_pstate: Add Icelake servers support in no-HWP mode (David Arcari) [2036888 2003695]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.20.1.rt7.150.el8_5]" date="1646740800">- [rt] build kernel-rt-4.18.0-348.20.1.rt7.150.el8_5 [2045589]
- lib/iov_iter: initialize "flags" in new pipe_buffer (Jan Stancek) [2060879 2060880] {CVE-2022-0847}</changelog>
</package>
<package pkgid="467009f98f97a6bd3d4fd63a72e1c3fca9daa804c0d348d4daac02413d0dccd1" name="kernel-rt-debug-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="348.23.1.rt7.153.el8_5"/>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-348.14.1.rt7.144.el8_5]" date="1643198400">- [rt] build kernel-rt-4.18.0-348.14.1.rt7.144.el8_5 [2045589]
- redhat: don't copy Module.kabi files to dist-git (Frantisek Hrbata)
- tcp: fix page frag corruption on page fault (Paolo Abeni) [2041529 1996074]
- net: fix sk_page_frag() recursion from memory reclaim (Paolo Abeni) [2041529 1996074]
- KVM: s390: index kvm-&gt;arch.idle_mask by vcpu_idx (Thomas Huth) [2040769 2026230]
- redhat: set LC_ALL=C before sorting config content (Frantisek Hrbata)</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.15.1.rt7.145.el8_5]" date="1643716800">- [rt] build kernel-rt-4.18.0-348.15.1.rt7.145.el8_5 [2045589]
- net/mlx5: DR, Use FW API when updating FW-owned flow table (Michal Schmidt) [2042663 2042651]
- KVM: x86: Wait for IPIs to be delivered when handling Hyper-V TLB flush hypercall (Vitaly Kuznetsov) [2043237 1868572]
- drm/mgag200: Select clock in PLL update functions (Bruno Meneguele) [2034949 1953926]
- drm/i915: Fix HAS_LSPCON macro for platforms between GEN9 and GEN10 (Bruno Meneguele) [2027335 2005586]
- crypto: qat - power up 4xxx device (Vladis Dronov) [2016437 1960307]
- RDMA/core: Fix a double free in add_port error flow (Kamal Heib) [2038724 2008555]
- powerpc/iommu: Report the correct most efficient DMA mask for PCI devices (Steve Best) [2018928 2007425]
- powerpc/dma: Fix dma_map_ops::get_required_mask (Steve Best) [2018928 2007425]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.16.1.rt7.146.el8_5]" date="1644321600">- [rt] build kernel-rt-4.18.0-348.16.1.rt7.146.el8_5 [2045589]
- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047610 2047611] {CVE-2022-22942}
- net: openvswitch: Fix ct_state nat flags for conns arriving from tc (Marcelo Ricardo Leitner) [2043548 2040334]
- net: openvswitch: Fix matching zone id for invalid conns arriving from tc (Marcelo Ricardo Leitner) [2043550 2040452]
- net/sched: flow_dissector: Fix matching on zone id for invalid conns (Marcelo Ricardo Leitner) [2043550 2040452]
- net/sched: Extend qdisc control block with tc control block (Marcelo Ricardo Leitner) [2043550 2040452]
- redhat/Makefile: fix access issue on shared build system (Bruno Meneguele)</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.17.1.rt7.147.el8_5]" date="1644926400">- [rt] build kernel-rt-4.18.0-348.17.1.rt7.147.el8_5 [2045589]
- vfs: check dentry is still valid in get_link() (Ian Kent) [2052558 2014846]
- xfs: don't expose internal symlink metadata buffers to the vfs (Brian Foster) [2052558 2014846]
- CI: Use appropriate zstream builder (Veronika Kabatova)
- CI: Enable baseline realtime checks (Veronika Kabatova)
- CI: Rename pipelines to include release names (Veronika Kabatova)
- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052176 2052177] {CVE-2022-0492}
- ice: Remove boolean vlan_promisc flag from function (Jonathan Toppins) [2051951 2030400]
- ceph: put the requests/sessions when it fails to alloc memory (Jeffrey Layton) [2053725 2017796]
- ceph: fix off by one bugs in unsafe_request_wait() (Jeffrey Layton) [2053725 2017796]
- ceph: flush the mdlog before waiting on unsafe reqs (Jeffrey Layton) [2053725 2017796]
- ceph: flush mdlog before umounting (Jeffrey Layton) [2053725 2017796]
- ceph: make iterate_sessions a global symbol (Jeffrey Layton) [2053725 2017796]
- ceph: make ceph_create_session_msg a global symbol (Jeffrey Layton) [2053725 2017796]
- xfs: check sb_meta_uuid for dabuf buffer recovery (Bill O'Donnell) [2049292 2020764]
- drm/i915: Flush TLBs before releasing backing store (Patrick Talbert) [2044333 2044334] {CVE-2022-0330}
- hugetlb: fix hugetlb cgroup refcounting during vma split (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: fix imbalanced css_get and css_put pair for shared mappings (Waiman Long) [2039015 2032811]
- mm/hugetlb: change hugetlb_reserve_pages() to type bool (Waiman Long) [2039015 2032811]
- hugetlb: fix an error code in hugetlb_reserve_pages() (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: fix offline of hugetlb cgroup with reservations (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: fix reservation accounting (Waiman Long) [2039015 2032811]
- mm/hugetlb: narrow the hugetlb_lock protection area during preparing huge page (Waiman Long) [2039015 2032811]
- mm/hugetlb: a page from buddy is not on any list (Waiman Long) [2039015 2032811]
- mm/hugetlb: not necessary to coalesce regions recursively (Waiman Long) [2039015 2032811]
- selftests/vm/write_to_hugetlbfs.c: fix unused variable warning (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add hugetlb_cgroup reservation tests (Waiman Long) [2039015 2032811]
- hugetlb: support file_region coalescing again (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: support noreserve mappings (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add accounting for shared mappings (Waiman Long) [2039015 2032811]
- hugetlb: disable region_add file_region coalescing (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add reservation accounting for private mappings (Waiman Long) [2039015 2032811]
- mm/hugetlb_cgroup: fix hugetlb_cgroup migration (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add interface for charge/uncharge hugetlb reservations (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add hugetlb_cgroup reservation counter (Waiman Long) [2039015 2032811]
- hugetlb: remove duplicated code (Waiman Long) [2039015 2032811]
- hugetlb: region_chg provides only cache entry (Waiman Long) [2039015 2032811]
- hugetlbfs: always use address space in inode for resv_map pointer (Waiman Long) [2039015 2032811]
- hugetlbfs: fix potential over/underflow setting node specific nr_hugepages (Waiman Long) [2039015 2032811]
- hugetlb: allow to free gigantic pages regardless of the configuration (Waiman Long) [2039015 2032811]
- powerpc/pseries: Fix update of LPAR security flavor after LPM (Steve Best) [2027448 1997294]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.18.1.rt7.148.el8_5]" date="1645531200">- [rt] build kernel-rt-4.18.0-348.18.1.rt7.148.el8_5 [2045589]
- selftests: kvm: Check whether SIDA memop fails for normal guests (Thomas Huth) [2050811 2050812] {CVE-2022-0516}
- KVM: s390: Return error on SIDA memop on normal guest (Thomas Huth) [2050811 2050812] {CVE-2022-0516}
- iommu/amd: Remove iommu_init_ga() (Jerry Snitselaar) [2030854 1998265]
- iommu/amd: Relocate GAMSup check to early_enable_iommus (Jerry Snitselaar) [2030854 1998265]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.19.1.rt7.149.el8_5]" date="1646049600">- [rt] build kernel-rt-4.18.0-348.19.1.rt7.149.el8_5 [2045589]
- tipc: improve size validations for received domain records (Xin Long) [2048976 2048977] {CVE-2022-0435}
- smb3: do not error on fsync when readonly (Ronnie Sahlberg) [2055824 2037811]
- security: implement sctp_assoc_established hook in selinux (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- security: add sctp_assoc_established hook (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- security: call security_sctp_assoc_request in sctp_sf_do_5_1D_ce (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- security: pass asoc to sctp_assoc_request and sctp_sk_clone (Bruno Meneguele) [2054112 2054117 2015525 2048251]
- net: sctp: Fix some typos (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- RDMA/bnxt_re: Fix stats counters (Selvin Xavier) [2049684 2001893]
- net: check skb sec_path when re-initializing slow_gro in gro_list_prepare (Xin Long) [2047427 2030476]
- cpufreq: intel_pstate: Add Icelake servers support in no-HWP mode (David Arcari) [2036888 2003695]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.20.1.rt7.150.el8_5]" date="1646740800">- [rt] build kernel-rt-4.18.0-348.20.1.rt7.150.el8_5 [2045589]
- lib/iov_iter: initialize "flags" in new pipe_buffer (Jan Stancek) [2060879 2060880] {CVE-2022-0847}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.21.1.rt7.151.el8_5]" date="1647950400">- [rt] build kernel-rt-4.18.0-348.21.1.rt7.151.el8_5 [2045589]
- netfilter: nf_queue: handle socket prefetch (Florian Westphal) [2061446 2009786]
- netfilter: nf_queue: fix possible use-after-free (Florian Westphal) [2061446 2009786]
- selftests: netfilter: add nfqueue TCP_NEW_SYN_RECV socket race test (Florian Westphal) [2061446 2009786]
- netfilter: nf_queue: don't assume sk is full socket (Florian Westphal) [2061446 2009786]
- netfilter: nf_tables_offload: incorrect flow offload action array size (Florian Westphal) [2056867 2056728] {CVE-2022-25636}
- netfilter: nftables_offload: KASAN slab-out-of-bounds Read in nft_flow_rule_create (Florian Westphal) [2056867 2056728] {CVE-2022-25636}
- rt: update the authentication scheme for the bugzilla script (Luis Claudio R. Goncalves)</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.22.1.rt7.152.el8_5]" date="1649160000">- [rt] build kernel-rt-4.18.0-348.22.1.rt7.152.el8_5 [2067266]
- scsi: lpfc: Fix non-recovery of remote ports following an unsolicited LOGO (Dick Kennedy) [2058193 2027558]
- cifs: check all path components in resolved dfs target (Ronnie Sahlberg) [2056329 2030880]
- RDMA/cma: Do not change route.addr.src_addr.ss_family (Kamal Heib) [2032073 2032074] {CVE-2021-4028}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.23.1.rt7.153.el8_5]" date="1649764800">- [rt] build kernel-rt-4.18.0-348.23.1.rt7.153.el8_5 [2067266]
- gfs2: dequeue iopen holder in gfs2_inode_lookup error (Bob Peterson) [2069750 2061665]</changelog>
</package>
<package pkgid="1f659b161df1fb1dea9b59d3669d6c5f7852251c34e150356bcc31a05ea5693e" name="kernel-rt-debug-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="348.7.1.rt7.137.el8_5"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-346.rt7.128.el8]" date="1633089600">- [rt] build kernel-rt-4.18.0-346.rt7.128.el8 [1939539]
- redhat: switch secureboot kernel image signing to release keys (Bruno Meneguele)
- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Fix RT check branch name (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- Revert "Merge: mt7921e: enable new Mediatek wireless hardware" (Bruno Meneguele) [2009501]
- megaraid_sas: fix concurrent access to ISR between IRQ polling and real interrupt (Tomas Henzl) [2009022]
- scsi: megaraid_sas: mq_poll support (Tomas Henzl) [2009022]
- [PATCH v2] scsi: qla2xxx: Suppress unnecessary log messages during login (Nilesh Javali) [1982186]
- scsi: qla2xxx: Fix excessive messages during device logout (Nilesh Javali) [1982186]
- PCI: pciehp: Ignore Link Down/Up caused by DPC (Myron Stowe) [1981741]
- arm64: kpti: Fix "kpti=off" when KASLR is enabled (Mark Salter) [1979731]
- arm64: Fix CONFIG_ARCH_RANDOM=n build (Mark Salter) [1979731]
- redhat/configs: aarch64: add CONFIG_ARCH_RANDOM (Mark Salter) [1979731]
- arm64: Implement archrandom.h for ARMv8.5-RNG (Mark Salter) [1979731]
- arm64: kconfig: Fix alignment of E0PD help text (Mark Salter) [1979731]
- arm64: Use register field helper in kaslr_requires_kpti() (Mark Salter) [1979731]
- arm64: Simplify early check for broken TX1 when KASLR is enabled (Mark Salter) [1979731]
- arm64: Use a variable to store non-global mappings decision (Mark Salter) [1979731]
- arm64: Don't use KPTI where we have E0PD (Mark Salter) [1979731]
- arm64: Factor out checks for KASLR in KPTI code into separate function (Mark Salter) [1979731]
- redhat/configs: Add CONFIG_ARM64_E0PD (Mark Salter) [1979731]
- arm64: Add initial support for E0PD (Mark Salter) [1979731]
- arm64: cpufeature: Export matrix and other features to userspace (Mark Salter) [1980098]
- arm64: docs: cpu-feature-registers: Document ID_AA64PFR1_EL1 (Mark Salter) [1980098]
- docs/arm64: cpu-feature-registers: Rewrite bitfields that don't follow [e, s] (Mark Salter) [1980098]
- docs/arm64: cpu-feature-registers: Documents missing visible fields (Mark Salter) [1980098]
- arm64: Introduce system_capabilities_finalized() marker (Mark Salter) [1980098]
- arm64: entry.S: Do not preempt from IRQ before all cpufeatures are enabled (Mark Salter) [1980098]
- docs/arm64: elf_hwcaps: Document HWCAP_SB (Mark Salter) [1980098]
- docs/arm64: elf_hwcaps: sort the HWCAP{, 2} documentation by ascending value (Mark Salter) [1980098]
- arm64: cpufeature: Treat ID_AA64ZFR0_EL1 as RAZ when SVE is not enabled (Mark Salter) [1980098]
- arm64: cpufeature: Effectively expose FRINT capability to userspace (Mark Salter) [1980098]
- arm64: cpufeature: Fix feature comparison for CTR_EL0.{CWG,ERG} (Mark Salter) [1980098]
- arm64: Expose FRINT capabilities to userspace (Mark Salter) [1980098]
- arm64: Expose ARMv8.5 CondM capability to userspace (Mark Salter) [1980098]
- docs: arm64: convert perf.txt to ReST format (Mark Salter) [1980098]
- docs: arm64: convert docs to ReST and rename to .rst (Mark Salter) [1980098]
- Documentation/arm64: HugeTLB page implementation (Mark Salter) [1980098]
- Documentation/arm64/sve: Couple of improvements and typos (Mark Salter) [1980098]
- arm64: cpufeature: Fix missing ZFR0 in __read_sysreg_by_encoding() (Mark Salter) [1980098]
- arm64: Expose SVE2 features for userspace (Mark Salter) [1980098]
- arm64: Advertise ARM64_HAS_DCPODP cpu feature (Mark Salter) [1980098]
- arm64: add CVADP support to the cache maintenance helper (Mark Salter) [1980098]
- arm64: Fix minor issues with the dcache_by_line_op macro (Mark Salter) [1980098]
- arm64: Expose DC CVADP to userspace (Mark Salter) [1980098]
- arm64: Handle trapped DC CVADP (Mark Salter) [1980098]
- arm64: HWCAP: encapsulate elf_hwcap (Mark Salter) [1980098]
- arm64: HWCAP: add support for AT_HWCAP2 (Mark Salter) [1980098]
- x86/MCE/AMD, EDAC/mce_amd: Add new SMCA bank types (Aristeu Rozanski) [1965331]
- x86/MCE/AMD, EDAC/mce_amd: Remove struct smca_hwid.xec_bitmap (Aristeu Rozanski) [1965331]
- EDAC, mce_amd: Print ExtErrorCode and description on a single line (Aristeu Rozanski) [1965331]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-347.rt7.129.el8]" date="1633176000">- [rt] build kernel-rt-4.18.0-347.rt7.129.el8 [1939539]
- PCI: Mark TI C667X to avoid bus reset (Alex Williamson) [1975768]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.rt7.130.el8]" date="1633348800">- [rt] build kernel-rt-4.18.0-348.rt7.130.el8 [1939539]
- drm/nouveau/fifo/ga102: initialise chid on return from channel creation (Ben Skeggs) [1997878]
- drm/nouveau/ga102-: support ttm buffer moves via copy engine (Ben Skeggs) [1997878]
- drm/nouveau/kms/tu102-: delay enabling cursor until after assign_windows (Ben Skeggs) [1997878]
- drm/nouveau/kms/nv50: workaround EFI GOP window channel format differences (Ben Skeggs) [1997878]
- drm/nouveau/disp: power down unused DP links during init (Ben Skeggs) [1997878]
- drm/nouveau: recognise GA107 (Ben Skeggs) [1997878]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.1.1.rt7.131.el8_5]" date="1635940800">- [rt] build kernel-rt-4.18.0-348.1.1.rt7.131.el8_5 [1939539]
- lib/timerqueue: Rely on rbtree semantics for next timer (Phil Auld) [2014677 2007099] {CVE-2021-20317}
- mm/hmm: make HMM_MIRROR an implicit option (Rafael Aquini) [2017519 1998534]
- mm/hmm: allow HMM_MIRROR on all architectures with MMU (Rafael Aquini) [2017519 1998534]
- mm: don't select MIGRATE_VMA_HELPER from HMM_MIRROR (Rafael Aquini) [2017519 1998534]
- mm: sort out the DEVICE_PRIVATE Kconfig mess (Rafael Aquini) [2017519 1998534]
- ceph: skip existing superblocks that are blocklisted or shut down when mounting (Jeffrey Layton) [2017071 2011462]
- redhat: switch release to zstream (Bruno Meneguele)</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.2.1.rt7.132.el8_5]" date="1636372800">- [rt] build kernel-rt-4.18.0-348.2.1.rt7.132.el8_5 [1939539]
- tipc: fix size validations for the MSG_CRYPTO type (Bruno Meneguele) [2020511 2020512] {CVE-2021-43267}
- net: Fix skb-&gt;csum update in inet_proto_csum_replace16(). (Balazs Nemeth) [2005981 1975193]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.3.1.rt7.133.el8_5]" date="1637064000">- [rt] build kernel-rt-4.18.0-348.3.1.rt7.133.el8_5 [1939539]
- net-sysfs: try not to restart the syscall if it will fail eventually (Antoine Tenart) [2021165 2016005]
- ovl: fix missing negative dentry check in ovl_rename() (Miklos Szeredi) [2016378 2010887 2013318] {CVE-2021-20321}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.4.1.rt7.134.el8_5]" date="1637668800">- [rt] build kernel-rt-4.18.0-348.4.1.rt7.134.el8_5 [1939539]
- [RHEL8.6 BZ 1849234] cifs: report error instead of invalid when revalidating a dentry fails (Ronnie Sahlberg) [2017177 1849234]
- kthread: Fix PF_KTHREAD vs to_kthread() race (Waiman Long) [2010333 2001497]
- sched/fair: Ignore percpu threads for imbalance pulls (Waiman Long) [2010333 2001497]
- kthread: Extract KTHREAD_IS_PER_CPU (Waiman Long) [2010333 2001497]
- sched: Optimize finish_lock_switch() (Waiman Long) [2010333 2001497]
- sched/hotplug: Ensure only per-cpu kthreads run during hotplug (Waiman Long) [2010333 2001497]
- sched: Fix balance_callback() (Waiman Long) [2010333 2001497]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.5.1.rt7.135.el8_5]" date="1638273600">- [rt] build kernel-rt-4.18.0-348.5.1.rt7.135.el8_5 [1939539]
- blk-mq: still set q-&gt;make_request_fn for blk-mq (Ming Lei) [2016384 1999728]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.6.1.rt7.136.el8_5]" date="1638878400">- [rt] build kernel-rt-4.18.0-348.6.1.rt7.136.el8_5 [1939539]
- x86/Kconfig: Do not enable AMD_MEM_ENCRYPT_ACTIVE_BY_DEFAULT automatically (Prarit Bhargava) [2024678 2021219]
- sched/vtime: Work around an unitialized variable warning (Leah Leshchinsky)
- [rt] disable KASAN, KCSAN and UBSAN for kernel-rt (Leah Leshchinsky)</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.7.1.rt7.137.el8_5]" date="1638964800">- [rt] build kernel-rt-4.18.0-348.7.1.rt7.137.el8_5 [1939539]
- sched/core: Re-add dropped __migrate_disabled() check (Fernando Pacheco)
- sched: Fix CPU hotplug / tighten is_per_cpu_kthread() (Waiman Long) [2026450 2024869]
- sched: Prepare to use balance_push in ttwu() (Waiman Long) [2026450 2024869]
- sched: Don't run cpu-online with balance_push() enabled (Waiman Long) [2026450 2024869]
- workqueue: Tag bound workers with KTHREAD_IS_PER_CPU (Waiman Long) [2026450 2024869]
- workqueue: Use cpu_possible_mask instead of cpu_active_mask to break affinity (Waiman Long) [2026450 2024869]
- sched: Fix hotplug vs CPU bandwidth control (Waiman Long) [2026450 2024869]
- workqueue: Manually break affinity on hotplug (Waiman Long) [2026450 2024869]
- sched/hotplug: Consolidate task migration on CPU unplug (Waiman Long) [2026450 2024869]
- sched/core: Wait for tasks being pushed away on hotplug (Waiman Long) [2026450 2024869]
- sched/core: Prep code for merging mr1787 (Fernando Pacheco)</changelog>
</package>
<package pkgid="095433c2667258d2caafbcab2e8a4515caa51830a6a3dcfa964e76c9295c7511" name="kernel-rt-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="348.12.2.rt7.143.el8_5"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.4.1.rt7.134.el8_5]" date="1637668800">- [rt] build kernel-rt-4.18.0-348.4.1.rt7.134.el8_5 [1939539]
- [RHEL8.6 BZ 1849234] cifs: report error instead of invalid when revalidating a dentry fails (Ronnie Sahlberg) [2017177 1849234]
- kthread: Fix PF_KTHREAD vs to_kthread() race (Waiman Long) [2010333 2001497]
- sched/fair: Ignore percpu threads for imbalance pulls (Waiman Long) [2010333 2001497]
- kthread: Extract KTHREAD_IS_PER_CPU (Waiman Long) [2010333 2001497]
- sched: Optimize finish_lock_switch() (Waiman Long) [2010333 2001497]
- sched/hotplug: Ensure only per-cpu kthreads run during hotplug (Waiman Long) [2010333 2001497]
- sched: Fix balance_callback() (Waiman Long) [2010333 2001497]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.5.1.rt7.135.el8_5]" date="1638273600">- [rt] build kernel-rt-4.18.0-348.5.1.rt7.135.el8_5 [1939539]
- blk-mq: still set q-&gt;make_request_fn for blk-mq (Ming Lei) [2016384 1999728]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.6.1.rt7.136.el8_5]" date="1638878400">- [rt] build kernel-rt-4.18.0-348.6.1.rt7.136.el8_5 [1939539]
- x86/Kconfig: Do not enable AMD_MEM_ENCRYPT_ACTIVE_BY_DEFAULT automatically (Prarit Bhargava) [2024678 2021219]
- sched/vtime: Work around an unitialized variable warning (Leah Leshchinsky)
- [rt] disable KASAN, KCSAN and UBSAN for kernel-rt (Leah Leshchinsky)</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.7.1.rt7.137.el8_5]" date="1638964800">- [rt] build kernel-rt-4.18.0-348.7.1.rt7.137.el8_5 [1939539]
- sched/core: Re-add dropped __migrate_disabled() check (Fernando Pacheco)
- sched: Fix CPU hotplug / tighten is_per_cpu_kthread() (Waiman Long) [2026450 2024869]
- sched: Prepare to use balance_push in ttwu() (Waiman Long) [2026450 2024869]
- sched: Don't run cpu-online with balance_push() enabled (Waiman Long) [2026450 2024869]
- workqueue: Tag bound workers with KTHREAD_IS_PER_CPU (Waiman Long) [2026450 2024869]
- workqueue: Use cpu_possible_mask instead of cpu_active_mask to break affinity (Waiman Long) [2026450 2024869]
- sched: Fix hotplug vs CPU bandwidth control (Waiman Long) [2026450 2024869]
- workqueue: Manually break affinity on hotplug (Waiman Long) [2026450 2024869]
- sched/hotplug: Consolidate task migration on CPU unplug (Waiman Long) [2026450 2024869]
- sched/core: Wait for tasks being pushed away on hotplug (Waiman Long) [2026450 2024869]
- sched/core: Prep code for merging mr1787 (Fernando Pacheco)</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.8.1.rt7.138.el8_5]" date="1639483200">- [rt] build kernel-rt-4.18.0-348.8.1.rt7.138.el8_5 [1939539]
- ice: Fix VF true promiscuous mode (Jonathan Toppins) [2026698 1970643]
- ice: Remove toggling of antispoof for VF trusted promiscuous mode (Jonathan Toppins) [2026698 1970643]
- ice: Fix replacing VF hardware MAC to existing MAC filter (Jonathan Toppins) [2026698 1970643]
- ice: Fix not stopping Tx queues for VFs (Jonathan Toppins) [2026698 1970643]
- ice: Fix race conditions between virtchnl handling and VF ndo ops (Jonathan Toppins) [2026698 1970643]
- net/netif_receive_skb_core: Use migrate_disable() (Luis Claudio R. Goncalves) [2027689 2024168]
- crypto: jitter - consider 32 LSB for APT (Herbert Xu) [2029365 1994390]
- xfs: fix I_DONTCACHE (Carlos Maiolino) [2028534 2024969]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.9.1.rt7.139.el8_5]" date="1640001600">- [rt] build kernel-rt-4.18.0-348.9.1.rt7.139.el8_5 [2032059]
- ixgbe: Revert "bpf, devmap: Move drop error path to devmap for XDP_REDIRECT" (Ken Cox) [2029845 2024240]
- i40e: Revert "bpf, devmap: Move drop error path to devmap for XDP_REDIRECT" (Stefan Assmann) [2029845 2024225]
- rcu/nocb: Perform deferred wake up before last idle's need_resched() check (Waiman Long) [2029449 2008340]
- locking/rwsem-rt: Remove might_sleep() in __up_read() (Andrew Halaney) [2029422 1903578]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.10.1.rt7.140.el8_5]" date="1640779200">- [rt] build kernel-rt-4.18.0-348.10.1.rt7.140.el8_5 [2032059]
- selftests: add a test case for mirred egress to ingress (Xin Long) [2024411 1983894]
- net: sched: act_mirred: drop dst for the direction from egress to ingress (Xin Long) [2024411 1983894]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.11.1.rt7.141.el8_5]" date="1641297600">- [rt] build kernel-rt-4.18.0-348.11.1.rt7.141.el8_5 [2032059]
- blk-mq: avoid to iterate over stale request (Ming Lei) [2034396 1997338]
- rcu: Tighten rcu_advance_cbs_nowake() checks (Daniel Vacek) [2032579 2013408]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.12.1.rt7.142.el8_5]" date="1641988800">- [rt] build kernel-rt-4.18.0-348.12.1.rt7.142.el8_5 [2032059]
- tcp: don't free a FIN sk_buff in tcp_remove_empty_skb() (Guillaume Nault) [2021574 2016210]
- kernel.spec: Add support to use vmlinux.h (Jiri Olsa) [2031053 1989087]
- spec: Add vmlinux.h to kernel-devel package (Jiri Olsa) [2031053 1989087]
- x86/mce: Avoid infinite loop for copy from user recovery (Prarit Bhargava) [2008789 1999550]
- x86/mce: Rename kill_it to kill_current_task (Prarit Bhargava) [2008789 1999550]
- x86/mce: Recover from poison found while copying from user space (Prarit Bhargava) [2008789 1999550]
- x86/mce: Delay clearing IA32_MCG_STATUS to the end of do_machine_check() (Prarit Bhargava) [2008789 1999550]
- x86/mce: Send #MC singal from task work (Prarit Bhargava) [2008789 1999550]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-348.12.2.rt7.143.el8_5]" date="1642420800">- [rt] build kernel-rt-4.18.0-348.12.2.rt7.143.el8_5 [2032059]
- vfs: Out-of-bounds write of heap buffer in fs_context.c (Frantisek Hrbata) [2040580 2040581] {CVE-2022-0185}
- xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Bruno Meneguele) [2034869 2034870] {CVE-2021-4155}</changelog>
</package>
<package pkgid="2ce7a07565a0e9f4ef4f7fe460e174cd414437d9e355071b2d3ebadaf6344d34" name="kernel-rt-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="348.2.1.rt7.132.el8_5"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-342.rt7.123.el8]" date="1631620800">- [rt] build kernel-rt-4.18.0-342.rt7.123.el8 [1939539]
- selftest: netfilter: add test case for unreplied tcp connections (Florian Westphal) [1991523]
- netfilter: conntrack: do not renew entry stuck in tcp SYN_SENT state (Florian Westphal) [1991523]
- net/sched: store the last executed chain also for clsact egress (Davide Caratti) [1980537]
- ice: fix Tx queue iteration for Tx timestamp enablement (Ken Cox) [1999743]
- perf evsel: Add missing cloning of evsel-&gt;use_config_name (Michael Petlan) [1838635]
- perf Documentation: Document intel-hybrid support (Michael Petlan) [1838635]
- perf tests: Skip 'perf stat metrics (shadow stat) test' for hybrid (Michael Petlan) [1838635]
- perf tests: Support 'Convert perf time to TSC' test for hybrid (Michael Petlan) [1838635]
- perf tests: Support 'Session topology' test for hybrid (Michael Petlan) [1838635]
- perf tests: Support 'Parse and process metrics' test for hybrid (Michael Petlan) [1838635]
- perf tests: Support 'Track with sched_switch' test for hybrid (Michael Petlan) [1838635]
- perf tests: Skip 'Setup struct perf_event_attr' test for hybrid (Michael Petlan) [1838635]
- perf tests: Add hybrid cases for 'Roundtrip evsel-&gt;name' test (Michael Petlan) [1838635]
- perf tests: Add hybrid cases for 'Parse event definition strings' test (Michael Petlan) [1838635]
- perf record: Uniquify hybrid event name (Michael Petlan) [1838635]
- perf stat: Warn group events from different hybrid PMU (Michael Petlan) [1838635]
- perf stat: Filter out unmatched aggregation for hybrid event (Michael Petlan) [1838635]
- perf stat: Add default hybrid events (Michael Petlan) [1838635]
- perf record: Create two hybrid 'cycles' events by default (Michael Petlan) [1838635]
- perf parse-events: Support event inside hybrid pmu (Michael Petlan) [1838635]
- perf parse-events: Compare with hybrid pmu name (Michael Petlan) [1838635]
- perf parse-events: Create two hybrid raw events (Michael Petlan) [1838635]
- perf parse-events: Create two hybrid cache events (Michael Petlan) [1838635]
- perf parse-events: Create two hybrid hardware events (Michael Petlan) [1838635]
- perf stat: Uniquify hybrid event name (Michael Petlan) [1838635]
- perf pmu: Add hybrid helper functions (Michael Petlan) [1838635]
- perf pmu: Save detected hybrid pmus to a global pmu list (Michael Petlan) [1838635]
- perf pmu: Save pmu name (Michael Petlan) [1838635]
- perf pmu: Simplify arguments of __perf_pmu__new_alias (Michael Petlan) [1838635]
- perf jevents: Support unit value "cpu_core" and "cpu_atom" (Michael Petlan) [1838635]
- tools headers uapi: Update tools's copy of linux/perf_event.h (Michael Petlan) [1838635]</changelog>
  <changelog author="Luis Claudio R. Goncalves &lt;lgoncalv@redhat.com&gt; [4.18.0-342.rt7.124.el8]" date="1631707200">- [rt] build kernel-rt-4.18.0-342.rt7.124.el8 [1939539]
- [rt] wqueue: fix bad unlock balance in destroy_workqueue() [1998682]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-343.rt7.125.el8]" date="1631793600">- [rt] build kernel-rt-4.18.0-343.rt7.125.el8 [1939539]
- rcu: Avoid unneeded function call in rcu_read_unlock() (Waiman Long) [1997500]
- mt76: connac: do not schedule mac_work if the device is not running (Íñigo Huguet) [1956419 1972045]
- mt7921e: enable module in config (Íñigo Huguet) [1956419 1972045]
- Revert tools/power/cpupower: Read energy_perf_bias from sysfs (Steve Best) [1999926]
- libnvdimm/namespace: Differentiate between probe mapping and runtime mapping (Jeff Moyer) [1795719]
- libnvdimm/pfn_dev: Don't clear device memmap area during generic namespace probe (Jeff Moyer) [1795719]
- perf/x86/intel/uncore: Clean up error handling path of iio mapping (Michael Petlan) [1837330]
- perf/x86/intel/uncore: Fix for iio mapping on Skylake Server (Michael Petlan) [1837330]
- perf/x86/intel/uncore: Generic support for the MMIO type of uncore blocks (Michael Petlan) [1837330]
- perf/x86/intel/uncore: Generic support for the PCI type of uncore blocks (Michael Petlan) [1837330]
- perf/x86/intel/uncore: Rename uncore_notifier to uncore_pci_sub_notifier (Michael Petlan) [1837330]
- perf/x86/intel/uncore: Generic support for the MSR type of uncore blocks (Michael Petlan) [1837330]
- perf/x86/intel/uncore: Parse uncore discovery tables (Michael Petlan) [1837330]
- perf/x86/intel/uncore: Expose an Uncore unit to IIO PMON mapping (Michael Petlan) [1837330]
- perf/x86/intel/uncore: Wrap the max dies calculation into an accessor (Michael Petlan) [1837330]
- perf/x86/intel/uncore: Expose an Uncore unit to PMON mapping (Michael Petlan) [1837330]
- perf/x86/intel/uncore: Validate MMIO address before accessing (Michael Petlan) [1837330]
- perf/x86/intel/uncore: Record the size of mapped area (Michael Petlan) [1837330]
- perf/x86/intel/uncore: Fix oops when counting IMC uncore events on some TGL (Michael Petlan) [1837330]
- crypto: qat - remove unused macro in FW loader (Vladis Dronov) [1920086]
- crypto: qat - check return code of qat_hal_rd_rel_reg() (Vladis Dronov) [1920086]
- crypto: qat - report an error if MMP file size is too large (Vladis Dronov) [1920086]
- crypto: qat - check MMP size before writing to the SRAM (Vladis Dronov) [1920086]
- crypto: qat - return error when failing to map FW (Vladis Dronov) [1920086]
- crypto: qat - enable detection of accelerators hang (Vladis Dronov) [1920086]
- crypto: qat - Fix a double free in adf_create_ring (Vladis Dronov) [1920086]
- crypto: qat - fix error path in adf_isr_resource_alloc() (Vladis Dronov) [1920086]
- crypto: qat - ADF_STATUS_PF_RUNNING should be set after adf_dev_init (Vladis Dronov) [1920086]
- crypto: qat - don't release uninitialized resources (Vladis Dronov) [1920086]
- crypto: qat - fix use of 'dma_map_single' (Vladis Dronov) [1920086]
- crypto: qat - fix unmap invalid dma address (Vladis Dronov) [1920086]
- crypto: qat - fix spelling mistake: "messge" -&gt; "message" (Vladis Dronov) [1920086]
- crypto: qat - reduce size of mapped region (Vladis Dronov) [1920086]
- crypto: qat - change format string and cast ring size (Vladis Dronov) [1920086]
- crypto: qat - fix potential spectre issue (Vladis Dronov) [1920086]
- crypto: qat - configure arbiter mapping based on engines enabled (Vladis Dronov) [1920086]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-344.rt7.126.el8]" date="1632139200">- [rt] build kernel-rt-4.18.0-344.rt7.126.el8 [1939539]
- perf/x86/intel: Fix PEBS-via-PT reload base value for Extended PEBS (Michael Petlan) [1998051]
- perf/x86/intel/uncore: Fix Add BW copypasta (Michael Petlan) [1998051]
- perf/x86/intel/uncore: Add BW counters for GT, IA and IO breakdown (Michael Petlan) [1998051]
- Revert "ice: Add initial support framework for LAG" (Michal Schmidt) [1999016]
- net: re-initialize slow_gro flag at gro_list_prepare time (Paolo Abeni) [2002367]
- cxgb4: dont touch blocked freelist bitmap after free (Rahul Lakkireddy) [1998148]
- cxgb4vf: configure ports accessible by the VF (Rahul Lakkireddy) [1961329]
- scsi: lpfc: Fix memory leaks in error paths while issuing ELS RDF/SCR request (Dick Kennedy) [1976332]
- scsi: lpfc: Keep NDLP reference until after freeing the IOCB after ELS handling (Dick Kennedy) [1976332]
- scsi: lpfc: Move initialization of phba-&gt;poll_list earlier to avoid crash (Dick Kennedy) [1976332]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-345.rt7.127.el8]" date="1632398400">- [rt] build kernel-rt-4.18.0-345.rt7.127.el8 [1939539]
- e1000e: Do not take care about recovery NVM checksum (Ken Cox) [1984558]
- qrtr: disable CONFIG_QRTR for non x86_64 archs (Íñigo Huguet) [1999642]
- ceph: fix possible null-pointer dereference in ceph_mdsmap_decode() (Jeff Layton) [1989999]
- ceph: fix dereference of null pointer cf (Jeff Layton) [1989999]
- ceph: correctly handle releasing an embedded cap flush (Jeff Layton) [1989999]
- ceph: take snap_empty_lock atomically with snaprealm refcount change (Jeff Layton) [1989999]
- ceph: don't WARN if we're still opening a session to an MDS (Jeff Layton) [1989999]
- rbd: don't hold lock_rwsem while running_list is being drained (Jeff Layton) [1989999]
- rbd: always kick acquire on "acquired" and "released" notifications (Jeff Layton) [1989999]
- ceph: take reference to req-&gt;r_parent at point of assignment (Jeff Layton) [1989999]
- ceph: eliminate ceph_async_iput() (Jeff Layton) [1989999]
- ceph: don't take s_mutex in ceph_flush_snaps (Jeff Layton) [1989999]
- ceph: don't take s_mutex in try_flush_caps (Jeff Layton) [1989999]
- ceph: don't take s_mutex or snap_rwsem in ceph_check_caps (Jeff Layton) [1989999]
- ceph: eliminate session-&gt;s_gen_ttl_lock (Jeff Layton) [1989999]
- ceph: allow ceph_put_mds_session to take NULL or ERR_PTR (Jeff Layton) [1989999]
- ceph: clean up locking annotation for ceph_get_snap_realm and __lookup_snap_realm (Jeff Layton) [1989999]
- ceph: add some lockdep assertions around snaprealm handling (Jeff Layton) [1989999]
- ceph: decoding error in ceph_update_snap_realm should return -EIO (Jeff Layton) [1989999]
- ceph: add IO size metrics support (Jeff Layton) [1989999]
- ceph: update and rename __update_latency helper to __update_stdev (Jeff Layton) [1989999]
- ceph: simplify the metrics struct (Jeff Layton) [1989999]
- libceph: fix doc warnings in cls_lock_client.c (Jeff Layton) [1989999]
- libceph: remove unnecessary ret variable in ceph_auth_init() (Jeff Layton) [1989999]
- libceph: kill ceph_none_authorizer::reply_buf (Jeff Layton) [1989999]
- ceph: make ceph_queue_cap_snap static (Jeff Layton) [1989999]
- ceph: remove bogus checks and WARN_ONs from ceph_set_page_dirty (Jeff Layton) [1989999]
- libceph: set global_id as soon as we get an auth ticket (Jeff Layton) [1989999]
- libceph: don't pass result into ac-&gt;ops-&gt;handle_reply() (Jeff Layton) [1989999]
- ceph: fix error handling in ceph_atomic_open and ceph_lookup (Jeff Layton) [1989999]
- ceph: must hold snap_rwsem when filling inode for async create (Jeff Layton) [1989999]
- libceph: Fix spelling mistakes (Jeff Layton) [1989999]
- libceph: don't set global_id until we get an auth ticket (Jeff Layton) [1989999]
- libceph: bump CephXAuthenticate encoding version (Jeff Layton) [1989999]
- ceph: don't allow access to MDS-private inodes (Jeff Layton) [1989999]
- ceph: fix up some bare fetches of i_size (Jeff Layton) [1989999]
- ceph: support getting ceph.dir.rsnaps vxattr (Jeff Layton) [1989999]
- ceph: drop pinned_page parameter from ceph_get_caps (Jeff Layton) [1989999]
- ceph: fix inode leak on getattr error in __fh_to_dentry (Jeff Layton) [1989999]
- ceph: only check pool permissions for regular files (Jeff Layton) [1989999]
- ceph: send opened files/pinned caps/opened inodes metrics to MDS daemon (Jeff Layton) [1989999]
- ceph: avoid counting the same request twice or more (Jeff Layton) [1989999]
- ceph: rename the metric helpers (Jeff Layton) [1989999]
- ceph: fix kerneldoc copypasta over ceph_start_io_direct (Jeff Layton) [1989999]
- ceph: don't use d_add in ceph_handle_snapdir (Jeff Layton) [1989999]
- ceph: don't clobber i_snap_caps on non-I_NEW inode (Jeff Layton) [1989999]
- ceph: fix fall-through warnings for Clang (Jeff Layton) [1989999]
- net: ceph: Fix a typo in osdmap.c (Jeff Layton) [1989999]
- ceph: don't allow type or device number to change on non-I_NEW inodes (Jeff Layton) [1989999]
- ceph: defer flushing the capsnap if the Fb is used (Jeff Layton) [1989999]
- ceph: allow queueing cap/snap handling after putting cap references (Jeff Layton) [1989999]
- ceph: clean up inode work queueing (Jeff Layton) [1989999]
- ceph: fix flush_snap logic after putting caps (Jeff Layton) [1989999]
- libceph: fix "Boolean result is used in bitwise operation" warning (Jeff Layton) [1989999]
- new helper: inode_wrong_type() (Jeff Layton) [1989999]
- kabi: Adding symbol single_release (fs/seq_file.c) (Čestmír Kalina) [1945486]
- kabi: Adding symbol single_open (fs/seq_file.c) (Čestmír Kalina) [1945486]
- kabi: Adding symbol seq_read (fs/seq_file.c) (Čestmír Kalina) [1945486]
- kabi: Adding symbol seq_printf (fs/seq_file.c) (Čestmír Kalina) [1945486]
- kabi: Adding symbol seq_lseek (fs/seq_file.c) (Čestmír Kalina) [1945486]
- kabi: Adding symbol unregister_chrdev_region (fs/char_dev.c) (Čestmír Kalina) [1945486]
- kabi: Adding symbol cdev_init (fs/char_dev.c) (Čestmír Kalina) [1945486]
- kabi: Adding symbol cdev_del (fs/char_dev.c) (Čestmír Kalina) [1945486]
- kabi: Adding symbol cdev_alloc (fs/char_dev.c) (Čestmír Kalina) [1945486]
- kabi: Adding symbol cdev_add (fs/char_dev.c) (Čestmír Kalina) [1945486]
- kabi: Adding symbol alloc_chrdev_region (fs/char_dev.c) (Čestmír Kalina) [1945486]
- kabi: Adding symbol pcie_capability_read_word (drivers/pci/access.c) (Čestmír Kalina) [1945485]
- kabi: Adding symbol pcie_capability_read_dword (drivers/pci/access.c) (Čestmír Kalina) [1945485]
- kabi: Adding symbol pcie_capability_clear_and_set_word (drivers/pci/access.c) (Čestmír Kalina) [1945485]
- kabi: Adding symbol pci_write_config_dword (drivers/pci/access.c) (Čestmír Kalina) [1945485]
- kabi: Adding symbol pci_write_config_byte (drivers/pci/access.c) (Čestmír Kalina) [1945485]
- kabi: Adding symbol pci_set_power_state (drivers/pci/pci.c) (Čestmír Kalina) [1945485]
- kabi: Adding symbol pci_read_config_dword (drivers/pci/access.c) (Čestmír Kalina) [1945485]
- kabi: Adding symbol pci_read_config_byte (drivers/pci/access.c) (Čestmír Kalina) [1945485]
- kabi: Adding symbol pci_irq_vector (drivers/pci/msi.c) (Čestmír Kalina) [1945485]
- kabi: Adding symbol pci_get_device (drivers/pci/search.c) (Čestmír Kalina) [1945485]
- kabi: Adding symbol pci_free_irq_vectors (drivers/pci/msi.c) (Čestmír Kalina) [1945485]
- kabi: Adding symbol pci_alloc_irq_vectors_affinity (drivers/pci/msi.c) (Čestmír Kalina) [1945485]
- kabi: Adding symbol kexec_crash_loaded (kernel/kexec_core.c) (Čestmír Kalina) [1945491]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-346.rt7.128.el8]" date="1633089600">- [rt] build kernel-rt-4.18.0-346.rt7.128.el8 [1939539]
- redhat: switch secureboot kernel image signing to release keys (Bruno Meneguele)
- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Fix RT check branch name (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- Revert "Merge: mt7921e: enable new Mediatek wireless hardware" (Bruno Meneguele) [2009501]
- megaraid_sas: fix concurrent access to ISR between IRQ polling and real interrupt (Tomas Henzl) [2009022]
- scsi: megaraid_sas: mq_poll support (Tomas Henzl) [2009022]
- [PATCH v2] scsi: qla2xxx: Suppress unnecessary log messages during login (Nilesh Javali) [1982186]
- scsi: qla2xxx: Fix excessive messages during device logout (Nilesh Javali) [1982186]
- PCI: pciehp: Ignore Link Down/Up caused by DPC (Myron Stowe) [1981741]
- arm64: kpti: Fix "kpti=off" when KASLR is enabled (Mark Salter) [1979731]
- arm64: Fix CONFIG_ARCH_RANDOM=n build (Mark Salter) [1979731]
- redhat/configs: aarch64: add CONFIG_ARCH_RANDOM (Mark Salter) [1979731]
- arm64: Implement archrandom.h for ARMv8.5-RNG (Mark Salter) [1979731]
- arm64: kconfig: Fix alignment of E0PD help text (Mark Salter) [1979731]
- arm64: Use register field helper in kaslr_requires_kpti() (Mark Salter) [1979731]
- arm64: Simplify early check for broken TX1 when KASLR is enabled (Mark Salter) [1979731]
- arm64: Use a variable to store non-global mappings decision (Mark Salter) [1979731]
- arm64: Don't use KPTI where we have E0PD (Mark Salter) [1979731]
- arm64: Factor out checks for KASLR in KPTI code into separate function (Mark Salter) [1979731]
- redhat/configs: Add CONFIG_ARM64_E0PD (Mark Salter) [1979731]
- arm64: Add initial support for E0PD (Mark Salter) [1979731]
- arm64: cpufeature: Export matrix and other features to userspace (Mark Salter) [1980098]
- arm64: docs: cpu-feature-registers: Document ID_AA64PFR1_EL1 (Mark Salter) [1980098]
- docs/arm64: cpu-feature-registers: Rewrite bitfields that don't follow [e, s] (Mark Salter) [1980098]
- docs/arm64: cpu-feature-registers: Documents missing visible fields (Mark Salter) [1980098]
- arm64: Introduce system_capabilities_finalized() marker (Mark Salter) [1980098]
- arm64: entry.S: Do not preempt from IRQ before all cpufeatures are enabled (Mark Salter) [1980098]
- docs/arm64: elf_hwcaps: Document HWCAP_SB (Mark Salter) [1980098]
- docs/arm64: elf_hwcaps: sort the HWCAP{, 2} documentation by ascending value (Mark Salter) [1980098]
- arm64: cpufeature: Treat ID_AA64ZFR0_EL1 as RAZ when SVE is not enabled (Mark Salter) [1980098]
- arm64: cpufeature: Effectively expose FRINT capability to userspace (Mark Salter) [1980098]
- arm64: cpufeature: Fix feature comparison for CTR_EL0.{CWG,ERG} (Mark Salter) [1980098]
- arm64: Expose FRINT capabilities to userspace (Mark Salter) [1980098]
- arm64: Expose ARMv8.5 CondM capability to userspace (Mark Salter) [1980098]
- docs: arm64: convert perf.txt to ReST format (Mark Salter) [1980098]
- docs: arm64: convert docs to ReST and rename to .rst (Mark Salter) [1980098]
- Documentation/arm64: HugeTLB page implementation (Mark Salter) [1980098]
- Documentation/arm64/sve: Couple of improvements and typos (Mark Salter) [1980098]
- arm64: cpufeature: Fix missing ZFR0 in __read_sysreg_by_encoding() (Mark Salter) [1980098]
- arm64: Expose SVE2 features for userspace (Mark Salter) [1980098]
- arm64: Advertise ARM64_HAS_DCPODP cpu feature (Mark Salter) [1980098]
- arm64: add CVADP support to the cache maintenance helper (Mark Salter) [1980098]
- arm64: Fix minor issues with the dcache_by_line_op macro (Mark Salter) [1980098]
- arm64: Expose DC CVADP to userspace (Mark Salter) [1980098]
- arm64: Handle trapped DC CVADP (Mark Salter) [1980098]
- arm64: HWCAP: encapsulate elf_hwcap (Mark Salter) [1980098]
- arm64: HWCAP: add support for AT_HWCAP2 (Mark Salter) [1980098]
- x86/MCE/AMD, EDAC/mce_amd: Add new SMCA bank types (Aristeu Rozanski) [1965331]
- x86/MCE/AMD, EDAC/mce_amd: Remove struct smca_hwid.xec_bitmap (Aristeu Rozanski) [1965331]
- EDAC, mce_amd: Print ExtErrorCode and description on a single line (Aristeu Rozanski) [1965331]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-347.rt7.129.el8]" date="1633176000">- [rt] build kernel-rt-4.18.0-347.rt7.129.el8 [1939539]
- PCI: Mark TI C667X to avoid bus reset (Alex Williamson) [1975768]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.rt7.130.el8]" date="1633348800">- [rt] build kernel-rt-4.18.0-348.rt7.130.el8 [1939539]
- drm/nouveau/fifo/ga102: initialise chid on return from channel creation (Ben Skeggs) [1997878]
- drm/nouveau/ga102-: support ttm buffer moves via copy engine (Ben Skeggs) [1997878]
- drm/nouveau/kms/tu102-: delay enabling cursor until after assign_windows (Ben Skeggs) [1997878]
- drm/nouveau/kms/nv50: workaround EFI GOP window channel format differences (Ben Skeggs) [1997878]
- drm/nouveau/disp: power down unused DP links during init (Ben Skeggs) [1997878]
- drm/nouveau: recognise GA107 (Ben Skeggs) [1997878]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.1.1.rt7.131.el8_5]" date="1635940800">- [rt] build kernel-rt-4.18.0-348.1.1.rt7.131.el8_5 [1939539]
- lib/timerqueue: Rely on rbtree semantics for next timer (Phil Auld) [2014677 2007099] {CVE-2021-20317}
- mm/hmm: make HMM_MIRROR an implicit option (Rafael Aquini) [2017519 1998534]
- mm/hmm: allow HMM_MIRROR on all architectures with MMU (Rafael Aquini) [2017519 1998534]
- mm: don't select MIGRATE_VMA_HELPER from HMM_MIRROR (Rafael Aquini) [2017519 1998534]
- mm: sort out the DEVICE_PRIVATE Kconfig mess (Rafael Aquini) [2017519 1998534]
- ceph: skip existing superblocks that are blocklisted or shut down when mounting (Jeffrey Layton) [2017071 2011462]
- redhat: switch release to zstream (Bruno Meneguele)</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.2.1.rt7.132.el8_5]" date="1636372800">- [rt] build kernel-rt-4.18.0-348.2.1.rt7.132.el8_5 [1939539]
- tipc: fix size validations for the MSG_CRYPTO type (Bruno Meneguele) [2020511 2020512] {CVE-2021-43267}
- net: Fix skb-&gt;csum update in inet_proto_csum_replace16(). (Balazs Nemeth) [2005981 1975193]</changelog>
</package>
<package pkgid="e05fbb7e1f4865f828f14845acfda03fe027a3b6453dc0f3ecda9dcf36e67017" name="kernel-rt-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="348.20.1.rt7.150.el8_5"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.11.1.rt7.141.el8_5]" date="1641297600">- [rt] build kernel-rt-4.18.0-348.11.1.rt7.141.el8_5 [2032059]
- blk-mq: avoid to iterate over stale request (Ming Lei) [2034396 1997338]
- rcu: Tighten rcu_advance_cbs_nowake() checks (Daniel Vacek) [2032579 2013408]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.12.1.rt7.142.el8_5]" date="1641988800">- [rt] build kernel-rt-4.18.0-348.12.1.rt7.142.el8_5 [2032059]
- tcp: don't free a FIN sk_buff in tcp_remove_empty_skb() (Guillaume Nault) [2021574 2016210]
- kernel.spec: Add support to use vmlinux.h (Jiri Olsa) [2031053 1989087]
- spec: Add vmlinux.h to kernel-devel package (Jiri Olsa) [2031053 1989087]
- x86/mce: Avoid infinite loop for copy from user recovery (Prarit Bhargava) [2008789 1999550]
- x86/mce: Rename kill_it to kill_current_task (Prarit Bhargava) [2008789 1999550]
- x86/mce: Recover from poison found while copying from user space (Prarit Bhargava) [2008789 1999550]
- x86/mce: Delay clearing IA32_MCG_STATUS to the end of do_machine_check() (Prarit Bhargava) [2008789 1999550]
- x86/mce: Send #MC singal from task work (Prarit Bhargava) [2008789 1999550]</changelog>
  <changelog author="Fernando Pacheco &lt;fpacheco@redhat.com&gt; [4.18.0-348.13.1.rt7.143.el8_5]" date="1642507200">- [rt] build kernel-rt-4.18.0-348.13.1.rt7.143.el8_5 [2032059]
- kernel/locking: Export __rt_mutex_init to non-GPL (Juri Lelli) [2038423 2028992]
- vfs: Out-of-bounds write of heap buffer in fs_context.c (Frantisek Hrbata) [2040580 2040581] {CVE-2022-0185}
- xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Bruno Meneguele) [2034869 2034870] {CVE-2021-4155}
- af_unix: fix garbage collect vs MSG_PEEK (Patrick Talbert) [2031982 2031983] {CVE-2021-0920}
- cgroup: verify that source is a string (Waiman Long) [2034613 2034614] {CVE-2021-4154}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-348.14.1.rt7.144.el8_5]" date="1643198400">- [rt] build kernel-rt-4.18.0-348.14.1.rt7.144.el8_5 [2045589]
- redhat: don't copy Module.kabi files to dist-git (Frantisek Hrbata)
- tcp: fix page frag corruption on page fault (Paolo Abeni) [2041529 1996074]
- net: fix sk_page_frag() recursion from memory reclaim (Paolo Abeni) [2041529 1996074]
- KVM: s390: index kvm-&gt;arch.idle_mask by vcpu_idx (Thomas Huth) [2040769 2026230]
- redhat: set LC_ALL=C before sorting config content (Frantisek Hrbata)</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.15.1.rt7.145.el8_5]" date="1643716800">- [rt] build kernel-rt-4.18.0-348.15.1.rt7.145.el8_5 [2045589]
- net/mlx5: DR, Use FW API when updating FW-owned flow table (Michal Schmidt) [2042663 2042651]
- KVM: x86: Wait for IPIs to be delivered when handling Hyper-V TLB flush hypercall (Vitaly Kuznetsov) [2043237 1868572]
- drm/mgag200: Select clock in PLL update functions (Bruno Meneguele) [2034949 1953926]
- drm/i915: Fix HAS_LSPCON macro for platforms between GEN9 and GEN10 (Bruno Meneguele) [2027335 2005586]
- crypto: qat - power up 4xxx device (Vladis Dronov) [2016437 1960307]
- RDMA/core: Fix a double free in add_port error flow (Kamal Heib) [2038724 2008555]
- powerpc/iommu: Report the correct most efficient DMA mask for PCI devices (Steve Best) [2018928 2007425]
- powerpc/dma: Fix dma_map_ops::get_required_mask (Steve Best) [2018928 2007425]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.16.1.rt7.146.el8_5]" date="1644321600">- [rt] build kernel-rt-4.18.0-348.16.1.rt7.146.el8_5 [2045589]
- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047610 2047611] {CVE-2022-22942}
- net: openvswitch: Fix ct_state nat flags for conns arriving from tc (Marcelo Ricardo Leitner) [2043548 2040334]
- net: openvswitch: Fix matching zone id for invalid conns arriving from tc (Marcelo Ricardo Leitner) [2043550 2040452]
- net/sched: flow_dissector: Fix matching on zone id for invalid conns (Marcelo Ricardo Leitner) [2043550 2040452]
- net/sched: Extend qdisc control block with tc control block (Marcelo Ricardo Leitner) [2043550 2040452]
- redhat/Makefile: fix access issue on shared build system (Bruno Meneguele)</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.17.1.rt7.147.el8_5]" date="1644926400">- [rt] build kernel-rt-4.18.0-348.17.1.rt7.147.el8_5 [2045589]
- vfs: check dentry is still valid in get_link() (Ian Kent) [2052558 2014846]
- xfs: don't expose internal symlink metadata buffers to the vfs (Brian Foster) [2052558 2014846]
- CI: Use appropriate zstream builder (Veronika Kabatova)
- CI: Enable baseline realtime checks (Veronika Kabatova)
- CI: Rename pipelines to include release names (Veronika Kabatova)
- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052176 2052177] {CVE-2022-0492}
- ice: Remove boolean vlan_promisc flag from function (Jonathan Toppins) [2051951 2030400]
- ceph: put the requests/sessions when it fails to alloc memory (Jeffrey Layton) [2053725 2017796]
- ceph: fix off by one bugs in unsafe_request_wait() (Jeffrey Layton) [2053725 2017796]
- ceph: flush the mdlog before waiting on unsafe reqs (Jeffrey Layton) [2053725 2017796]
- ceph: flush mdlog before umounting (Jeffrey Layton) [2053725 2017796]
- ceph: make iterate_sessions a global symbol (Jeffrey Layton) [2053725 2017796]
- ceph: make ceph_create_session_msg a global symbol (Jeffrey Layton) [2053725 2017796]
- xfs: check sb_meta_uuid for dabuf buffer recovery (Bill O'Donnell) [2049292 2020764]
- drm/i915: Flush TLBs before releasing backing store (Patrick Talbert) [2044333 2044334] {CVE-2022-0330}
- hugetlb: fix hugetlb cgroup refcounting during vma split (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: fix imbalanced css_get and css_put pair for shared mappings (Waiman Long) [2039015 2032811]
- mm/hugetlb: change hugetlb_reserve_pages() to type bool (Waiman Long) [2039015 2032811]
- hugetlb: fix an error code in hugetlb_reserve_pages() (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: fix offline of hugetlb cgroup with reservations (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: fix reservation accounting (Waiman Long) [2039015 2032811]
- mm/hugetlb: narrow the hugetlb_lock protection area during preparing huge page (Waiman Long) [2039015 2032811]
- mm/hugetlb: a page from buddy is not on any list (Waiman Long) [2039015 2032811]
- mm/hugetlb: not necessary to coalesce regions recursively (Waiman Long) [2039015 2032811]
- selftests/vm/write_to_hugetlbfs.c: fix unused variable warning (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add hugetlb_cgroup reservation tests (Waiman Long) [2039015 2032811]
- hugetlb: support file_region coalescing again (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: support noreserve mappings (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add accounting for shared mappings (Waiman Long) [2039015 2032811]
- hugetlb: disable region_add file_region coalescing (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add reservation accounting for private mappings (Waiman Long) [2039015 2032811]
- mm/hugetlb_cgroup: fix hugetlb_cgroup migration (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add interface for charge/uncharge hugetlb reservations (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add hugetlb_cgroup reservation counter (Waiman Long) [2039015 2032811]
- hugetlb: remove duplicated code (Waiman Long) [2039015 2032811]
- hugetlb: region_chg provides only cache entry (Waiman Long) [2039015 2032811]
- hugetlbfs: always use address space in inode for resv_map pointer (Waiman Long) [2039015 2032811]
- hugetlbfs: fix potential over/underflow setting node specific nr_hugepages (Waiman Long) [2039015 2032811]
- hugetlb: allow to free gigantic pages regardless of the configuration (Waiman Long) [2039015 2032811]
- powerpc/pseries: Fix update of LPAR security flavor after LPM (Steve Best) [2027448 1997294]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.18.1.rt7.148.el8_5]" date="1645531200">- [rt] build kernel-rt-4.18.0-348.18.1.rt7.148.el8_5 [2045589]
- selftests: kvm: Check whether SIDA memop fails for normal guests (Thomas Huth) [2050811 2050812] {CVE-2022-0516}
- KVM: s390: Return error on SIDA memop on normal guest (Thomas Huth) [2050811 2050812] {CVE-2022-0516}
- iommu/amd: Remove iommu_init_ga() (Jerry Snitselaar) [2030854 1998265]
- iommu/amd: Relocate GAMSup check to early_enable_iommus (Jerry Snitselaar) [2030854 1998265]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.19.1.rt7.149.el8_5]" date="1646049600">- [rt] build kernel-rt-4.18.0-348.19.1.rt7.149.el8_5 [2045589]
- tipc: improve size validations for received domain records (Xin Long) [2048976 2048977] {CVE-2022-0435}
- smb3: do not error on fsync when readonly (Ronnie Sahlberg) [2055824 2037811]
- security: implement sctp_assoc_established hook in selinux (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- security: add sctp_assoc_established hook (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- security: call security_sctp_assoc_request in sctp_sf_do_5_1D_ce (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- security: pass asoc to sctp_assoc_request and sctp_sk_clone (Bruno Meneguele) [2054112 2054117 2015525 2048251]
- net: sctp: Fix some typos (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- RDMA/bnxt_re: Fix stats counters (Selvin Xavier) [2049684 2001893]
- net: check skb sec_path when re-initializing slow_gro in gro_list_prepare (Xin Long) [2047427 2030476]
- cpufreq: intel_pstate: Add Icelake servers support in no-HWP mode (David Arcari) [2036888 2003695]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.20.1.rt7.150.el8_5]" date="1646740800">- [rt] build kernel-rt-4.18.0-348.20.1.rt7.150.el8_5 [2045589]
- lib/iov_iter: initialize "flags" in new pipe_buffer (Jan Stancek) [2060879 2060880] {CVE-2022-0847}</changelog>
</package>
<package pkgid="ddfdac5e7f89e7f6bb5e2a45865498ec667125f60eee9da340fcce234341471c" name="kernel-rt-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="348.23.1.rt7.153.el8_5"/>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-348.14.1.rt7.144.el8_5]" date="1643198400">- [rt] build kernel-rt-4.18.0-348.14.1.rt7.144.el8_5 [2045589]
- redhat: don't copy Module.kabi files to dist-git (Frantisek Hrbata)
- tcp: fix page frag corruption on page fault (Paolo Abeni) [2041529 1996074]
- net: fix sk_page_frag() recursion from memory reclaim (Paolo Abeni) [2041529 1996074]
- KVM: s390: index kvm-&gt;arch.idle_mask by vcpu_idx (Thomas Huth) [2040769 2026230]
- redhat: set LC_ALL=C before sorting config content (Frantisek Hrbata)</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.15.1.rt7.145.el8_5]" date="1643716800">- [rt] build kernel-rt-4.18.0-348.15.1.rt7.145.el8_5 [2045589]
- net/mlx5: DR, Use FW API when updating FW-owned flow table (Michal Schmidt) [2042663 2042651]
- KVM: x86: Wait for IPIs to be delivered when handling Hyper-V TLB flush hypercall (Vitaly Kuznetsov) [2043237 1868572]
- drm/mgag200: Select clock in PLL update functions (Bruno Meneguele) [2034949 1953926]
- drm/i915: Fix HAS_LSPCON macro for platforms between GEN9 and GEN10 (Bruno Meneguele) [2027335 2005586]
- crypto: qat - power up 4xxx device (Vladis Dronov) [2016437 1960307]
- RDMA/core: Fix a double free in add_port error flow (Kamal Heib) [2038724 2008555]
- powerpc/iommu: Report the correct most efficient DMA mask for PCI devices (Steve Best) [2018928 2007425]
- powerpc/dma: Fix dma_map_ops::get_required_mask (Steve Best) [2018928 2007425]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.16.1.rt7.146.el8_5]" date="1644321600">- [rt] build kernel-rt-4.18.0-348.16.1.rt7.146.el8_5 [2045589]
- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047610 2047611] {CVE-2022-22942}
- net: openvswitch: Fix ct_state nat flags for conns arriving from tc (Marcelo Ricardo Leitner) [2043548 2040334]
- net: openvswitch: Fix matching zone id for invalid conns arriving from tc (Marcelo Ricardo Leitner) [2043550 2040452]
- net/sched: flow_dissector: Fix matching on zone id for invalid conns (Marcelo Ricardo Leitner) [2043550 2040452]
- net/sched: Extend qdisc control block with tc control block (Marcelo Ricardo Leitner) [2043550 2040452]
- redhat/Makefile: fix access issue on shared build system (Bruno Meneguele)</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.17.1.rt7.147.el8_5]" date="1644926400">- [rt] build kernel-rt-4.18.0-348.17.1.rt7.147.el8_5 [2045589]
- vfs: check dentry is still valid in get_link() (Ian Kent) [2052558 2014846]
- xfs: don't expose internal symlink metadata buffers to the vfs (Brian Foster) [2052558 2014846]
- CI: Use appropriate zstream builder (Veronika Kabatova)
- CI: Enable baseline realtime checks (Veronika Kabatova)
- CI: Rename pipelines to include release names (Veronika Kabatova)
- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052176 2052177] {CVE-2022-0492}
- ice: Remove boolean vlan_promisc flag from function (Jonathan Toppins) [2051951 2030400]
- ceph: put the requests/sessions when it fails to alloc memory (Jeffrey Layton) [2053725 2017796]
- ceph: fix off by one bugs in unsafe_request_wait() (Jeffrey Layton) [2053725 2017796]
- ceph: flush the mdlog before waiting on unsafe reqs (Jeffrey Layton) [2053725 2017796]
- ceph: flush mdlog before umounting (Jeffrey Layton) [2053725 2017796]
- ceph: make iterate_sessions a global symbol (Jeffrey Layton) [2053725 2017796]
- ceph: make ceph_create_session_msg a global symbol (Jeffrey Layton) [2053725 2017796]
- xfs: check sb_meta_uuid for dabuf buffer recovery (Bill O'Donnell) [2049292 2020764]
- drm/i915: Flush TLBs before releasing backing store (Patrick Talbert) [2044333 2044334] {CVE-2022-0330}
- hugetlb: fix hugetlb cgroup refcounting during vma split (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: fix imbalanced css_get and css_put pair for shared mappings (Waiman Long) [2039015 2032811]
- mm/hugetlb: change hugetlb_reserve_pages() to type bool (Waiman Long) [2039015 2032811]
- hugetlb: fix an error code in hugetlb_reserve_pages() (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: fix offline of hugetlb cgroup with reservations (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: fix reservation accounting (Waiman Long) [2039015 2032811]
- mm/hugetlb: narrow the hugetlb_lock protection area during preparing huge page (Waiman Long) [2039015 2032811]
- mm/hugetlb: a page from buddy is not on any list (Waiman Long) [2039015 2032811]
- mm/hugetlb: not necessary to coalesce regions recursively (Waiman Long) [2039015 2032811]
- selftests/vm/write_to_hugetlbfs.c: fix unused variable warning (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add hugetlb_cgroup reservation tests (Waiman Long) [2039015 2032811]
- hugetlb: support file_region coalescing again (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: support noreserve mappings (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add accounting for shared mappings (Waiman Long) [2039015 2032811]
- hugetlb: disable region_add file_region coalescing (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add reservation accounting for private mappings (Waiman Long) [2039015 2032811]
- mm/hugetlb_cgroup: fix hugetlb_cgroup migration (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add interface for charge/uncharge hugetlb reservations (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add hugetlb_cgroup reservation counter (Waiman Long) [2039015 2032811]
- hugetlb: remove duplicated code (Waiman Long) [2039015 2032811]
- hugetlb: region_chg provides only cache entry (Waiman Long) [2039015 2032811]
- hugetlbfs: always use address space in inode for resv_map pointer (Waiman Long) [2039015 2032811]
- hugetlbfs: fix potential over/underflow setting node specific nr_hugepages (Waiman Long) [2039015 2032811]
- hugetlb: allow to free gigantic pages regardless of the configuration (Waiman Long) [2039015 2032811]
- powerpc/pseries: Fix update of LPAR security flavor after LPM (Steve Best) [2027448 1997294]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.18.1.rt7.148.el8_5]" date="1645531200">- [rt] build kernel-rt-4.18.0-348.18.1.rt7.148.el8_5 [2045589]
- selftests: kvm: Check whether SIDA memop fails for normal guests (Thomas Huth) [2050811 2050812] {CVE-2022-0516}
- KVM: s390: Return error on SIDA memop on normal guest (Thomas Huth) [2050811 2050812] {CVE-2022-0516}
- iommu/amd: Remove iommu_init_ga() (Jerry Snitselaar) [2030854 1998265]
- iommu/amd: Relocate GAMSup check to early_enable_iommus (Jerry Snitselaar) [2030854 1998265]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.19.1.rt7.149.el8_5]" date="1646049600">- [rt] build kernel-rt-4.18.0-348.19.1.rt7.149.el8_5 [2045589]
- tipc: improve size validations for received domain records (Xin Long) [2048976 2048977] {CVE-2022-0435}
- smb3: do not error on fsync when readonly (Ronnie Sahlberg) [2055824 2037811]
- security: implement sctp_assoc_established hook in selinux (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- security: add sctp_assoc_established hook (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- security: call security_sctp_assoc_request in sctp_sf_do_5_1D_ce (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- security: pass asoc to sctp_assoc_request and sctp_sk_clone (Bruno Meneguele) [2054112 2054117 2015525 2048251]
- net: sctp: Fix some typos (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- RDMA/bnxt_re: Fix stats counters (Selvin Xavier) [2049684 2001893]
- net: check skb sec_path when re-initializing slow_gro in gro_list_prepare (Xin Long) [2047427 2030476]
- cpufreq: intel_pstate: Add Icelake servers support in no-HWP mode (David Arcari) [2036888 2003695]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.20.1.rt7.150.el8_5]" date="1646740800">- [rt] build kernel-rt-4.18.0-348.20.1.rt7.150.el8_5 [2045589]
- lib/iov_iter: initialize "flags" in new pipe_buffer (Jan Stancek) [2060879 2060880] {CVE-2022-0847}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.21.1.rt7.151.el8_5]" date="1647950400">- [rt] build kernel-rt-4.18.0-348.21.1.rt7.151.el8_5 [2045589]
- netfilter: nf_queue: handle socket prefetch (Florian Westphal) [2061446 2009786]
- netfilter: nf_queue: fix possible use-after-free (Florian Westphal) [2061446 2009786]
- selftests: netfilter: add nfqueue TCP_NEW_SYN_RECV socket race test (Florian Westphal) [2061446 2009786]
- netfilter: nf_queue: don't assume sk is full socket (Florian Westphal) [2061446 2009786]
- netfilter: nf_tables_offload: incorrect flow offload action array size (Florian Westphal) [2056867 2056728] {CVE-2022-25636}
- netfilter: nftables_offload: KASAN slab-out-of-bounds Read in nft_flow_rule_create (Florian Westphal) [2056867 2056728] {CVE-2022-25636}
- rt: update the authentication scheme for the bugzilla script (Luis Claudio R. Goncalves)</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.22.1.rt7.152.el8_5]" date="1649160000">- [rt] build kernel-rt-4.18.0-348.22.1.rt7.152.el8_5 [2067266]
- scsi: lpfc: Fix non-recovery of remote ports following an unsolicited LOGO (Dick Kennedy) [2058193 2027558]
- cifs: check all path components in resolved dfs target (Ronnie Sahlberg) [2056329 2030880]
- RDMA/cma: Do not change route.addr.src_addr.ss_family (Kamal Heib) [2032073 2032074] {CVE-2021-4028}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.23.1.rt7.153.el8_5]" date="1649764800">- [rt] build kernel-rt-4.18.0-348.23.1.rt7.153.el8_5 [2067266]
- gfs2: dequeue iopen holder in gfs2_inode_lookup error (Bob Peterson) [2069750 2061665]</changelog>
</package>
<package pkgid="24a2af98ebd3fd160aa68ab3fbc7a8700a4d1cb6f46adda99289da289668f98f" name="kernel-rt-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="348.7.1.rt7.137.el8_5"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-346.rt7.128.el8]" date="1633089600">- [rt] build kernel-rt-4.18.0-346.rt7.128.el8 [1939539]
- redhat: switch secureboot kernel image signing to release keys (Bruno Meneguele)
- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Fix RT check branch name (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- Revert "Merge: mt7921e: enable new Mediatek wireless hardware" (Bruno Meneguele) [2009501]
- megaraid_sas: fix concurrent access to ISR between IRQ polling and real interrupt (Tomas Henzl) [2009022]
- scsi: megaraid_sas: mq_poll support (Tomas Henzl) [2009022]
- [PATCH v2] scsi: qla2xxx: Suppress unnecessary log messages during login (Nilesh Javali) [1982186]
- scsi: qla2xxx: Fix excessive messages during device logout (Nilesh Javali) [1982186]
- PCI: pciehp: Ignore Link Down/Up caused by DPC (Myron Stowe) [1981741]
- arm64: kpti: Fix "kpti=off" when KASLR is enabled (Mark Salter) [1979731]
- arm64: Fix CONFIG_ARCH_RANDOM=n build (Mark Salter) [1979731]
- redhat/configs: aarch64: add CONFIG_ARCH_RANDOM (Mark Salter) [1979731]
- arm64: Implement archrandom.h for ARMv8.5-RNG (Mark Salter) [1979731]
- arm64: kconfig: Fix alignment of E0PD help text (Mark Salter) [1979731]
- arm64: Use register field helper in kaslr_requires_kpti() (Mark Salter) [1979731]
- arm64: Simplify early check for broken TX1 when KASLR is enabled (Mark Salter) [1979731]
- arm64: Use a variable to store non-global mappings decision (Mark Salter) [1979731]
- arm64: Don't use KPTI where we have E0PD (Mark Salter) [1979731]
- arm64: Factor out checks for KASLR in KPTI code into separate function (Mark Salter) [1979731]
- redhat/configs: Add CONFIG_ARM64_E0PD (Mark Salter) [1979731]
- arm64: Add initial support for E0PD (Mark Salter) [1979731]
- arm64: cpufeature: Export matrix and other features to userspace (Mark Salter) [1980098]
- arm64: docs: cpu-feature-registers: Document ID_AA64PFR1_EL1 (Mark Salter) [1980098]
- docs/arm64: cpu-feature-registers: Rewrite bitfields that don't follow [e, s] (Mark Salter) [1980098]
- docs/arm64: cpu-feature-registers: Documents missing visible fields (Mark Salter) [1980098]
- arm64: Introduce system_capabilities_finalized() marker (Mark Salter) [1980098]
- arm64: entry.S: Do not preempt from IRQ before all cpufeatures are enabled (Mark Salter) [1980098]
- docs/arm64: elf_hwcaps: Document HWCAP_SB (Mark Salter) [1980098]
- docs/arm64: elf_hwcaps: sort the HWCAP{, 2} documentation by ascending value (Mark Salter) [1980098]
- arm64: cpufeature: Treat ID_AA64ZFR0_EL1 as RAZ when SVE is not enabled (Mark Salter) [1980098]
- arm64: cpufeature: Effectively expose FRINT capability to userspace (Mark Salter) [1980098]
- arm64: cpufeature: Fix feature comparison for CTR_EL0.{CWG,ERG} (Mark Salter) [1980098]
- arm64: Expose FRINT capabilities to userspace (Mark Salter) [1980098]
- arm64: Expose ARMv8.5 CondM capability to userspace (Mark Salter) [1980098]
- docs: arm64: convert perf.txt to ReST format (Mark Salter) [1980098]
- docs: arm64: convert docs to ReST and rename to .rst (Mark Salter) [1980098]
- Documentation/arm64: HugeTLB page implementation (Mark Salter) [1980098]
- Documentation/arm64/sve: Couple of improvements and typos (Mark Salter) [1980098]
- arm64: cpufeature: Fix missing ZFR0 in __read_sysreg_by_encoding() (Mark Salter) [1980098]
- arm64: Expose SVE2 features for userspace (Mark Salter) [1980098]
- arm64: Advertise ARM64_HAS_DCPODP cpu feature (Mark Salter) [1980098]
- arm64: add CVADP support to the cache maintenance helper (Mark Salter) [1980098]
- arm64: Fix minor issues with the dcache_by_line_op macro (Mark Salter) [1980098]
- arm64: Expose DC CVADP to userspace (Mark Salter) [1980098]
- arm64: Handle trapped DC CVADP (Mark Salter) [1980098]
- arm64: HWCAP: encapsulate elf_hwcap (Mark Salter) [1980098]
- arm64: HWCAP: add support for AT_HWCAP2 (Mark Salter) [1980098]
- x86/MCE/AMD, EDAC/mce_amd: Add new SMCA bank types (Aristeu Rozanski) [1965331]
- x86/MCE/AMD, EDAC/mce_amd: Remove struct smca_hwid.xec_bitmap (Aristeu Rozanski) [1965331]
- EDAC, mce_amd: Print ExtErrorCode and description on a single line (Aristeu Rozanski) [1965331]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-347.rt7.129.el8]" date="1633176000">- [rt] build kernel-rt-4.18.0-347.rt7.129.el8 [1939539]
- PCI: Mark TI C667X to avoid bus reset (Alex Williamson) [1975768]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.rt7.130.el8]" date="1633348800">- [rt] build kernel-rt-4.18.0-348.rt7.130.el8 [1939539]
- drm/nouveau/fifo/ga102: initialise chid on return from channel creation (Ben Skeggs) [1997878]
- drm/nouveau/ga102-: support ttm buffer moves via copy engine (Ben Skeggs) [1997878]
- drm/nouveau/kms/tu102-: delay enabling cursor until after assign_windows (Ben Skeggs) [1997878]
- drm/nouveau/kms/nv50: workaround EFI GOP window channel format differences (Ben Skeggs) [1997878]
- drm/nouveau/disp: power down unused DP links during init (Ben Skeggs) [1997878]
- drm/nouveau: recognise GA107 (Ben Skeggs) [1997878]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.1.1.rt7.131.el8_5]" date="1635940800">- [rt] build kernel-rt-4.18.0-348.1.1.rt7.131.el8_5 [1939539]
- lib/timerqueue: Rely on rbtree semantics for next timer (Phil Auld) [2014677 2007099] {CVE-2021-20317}
- mm/hmm: make HMM_MIRROR an implicit option (Rafael Aquini) [2017519 1998534]
- mm/hmm: allow HMM_MIRROR on all architectures with MMU (Rafael Aquini) [2017519 1998534]
- mm: don't select MIGRATE_VMA_HELPER from HMM_MIRROR (Rafael Aquini) [2017519 1998534]
- mm: sort out the DEVICE_PRIVATE Kconfig mess (Rafael Aquini) [2017519 1998534]
- ceph: skip existing superblocks that are blocklisted or shut down when mounting (Jeffrey Layton) [2017071 2011462]
- redhat: switch release to zstream (Bruno Meneguele)</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.2.1.rt7.132.el8_5]" date="1636372800">- [rt] build kernel-rt-4.18.0-348.2.1.rt7.132.el8_5 [1939539]
- tipc: fix size validations for the MSG_CRYPTO type (Bruno Meneguele) [2020511 2020512] {CVE-2021-43267}
- net: Fix skb-&gt;csum update in inet_proto_csum_replace16(). (Balazs Nemeth) [2005981 1975193]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.3.1.rt7.133.el8_5]" date="1637064000">- [rt] build kernel-rt-4.18.0-348.3.1.rt7.133.el8_5 [1939539]
- net-sysfs: try not to restart the syscall if it will fail eventually (Antoine Tenart) [2021165 2016005]
- ovl: fix missing negative dentry check in ovl_rename() (Miklos Szeredi) [2016378 2010887 2013318] {CVE-2021-20321}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.4.1.rt7.134.el8_5]" date="1637668800">- [rt] build kernel-rt-4.18.0-348.4.1.rt7.134.el8_5 [1939539]
- [RHEL8.6 BZ 1849234] cifs: report error instead of invalid when revalidating a dentry fails (Ronnie Sahlberg) [2017177 1849234]
- kthread: Fix PF_KTHREAD vs to_kthread() race (Waiman Long) [2010333 2001497]
- sched/fair: Ignore percpu threads for imbalance pulls (Waiman Long) [2010333 2001497]
- kthread: Extract KTHREAD_IS_PER_CPU (Waiman Long) [2010333 2001497]
- sched: Optimize finish_lock_switch() (Waiman Long) [2010333 2001497]
- sched/hotplug: Ensure only per-cpu kthreads run during hotplug (Waiman Long) [2010333 2001497]
- sched: Fix balance_callback() (Waiman Long) [2010333 2001497]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.5.1.rt7.135.el8_5]" date="1638273600">- [rt] build kernel-rt-4.18.0-348.5.1.rt7.135.el8_5 [1939539]
- blk-mq: still set q-&gt;make_request_fn for blk-mq (Ming Lei) [2016384 1999728]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.6.1.rt7.136.el8_5]" date="1638878400">- [rt] build kernel-rt-4.18.0-348.6.1.rt7.136.el8_5 [1939539]
- x86/Kconfig: Do not enable AMD_MEM_ENCRYPT_ACTIVE_BY_DEFAULT automatically (Prarit Bhargava) [2024678 2021219]
- sched/vtime: Work around an unitialized variable warning (Leah Leshchinsky)
- [rt] disable KASAN, KCSAN and UBSAN for kernel-rt (Leah Leshchinsky)</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.7.1.rt7.137.el8_5]" date="1638964800">- [rt] build kernel-rt-4.18.0-348.7.1.rt7.137.el8_5 [1939539]
- sched/core: Re-add dropped __migrate_disabled() check (Fernando Pacheco)
- sched: Fix CPU hotplug / tighten is_per_cpu_kthread() (Waiman Long) [2026450 2024869]
- sched: Prepare to use balance_push in ttwu() (Waiman Long) [2026450 2024869]
- sched: Don't run cpu-online with balance_push() enabled (Waiman Long) [2026450 2024869]
- workqueue: Tag bound workers with KTHREAD_IS_PER_CPU (Waiman Long) [2026450 2024869]
- workqueue: Use cpu_possible_mask instead of cpu_active_mask to break affinity (Waiman Long) [2026450 2024869]
- sched: Fix hotplug vs CPU bandwidth control (Waiman Long) [2026450 2024869]
- workqueue: Manually break affinity on hotplug (Waiman Long) [2026450 2024869]
- sched/hotplug: Consolidate task migration on CPU unplug (Waiman Long) [2026450 2024869]
- sched/core: Wait for tasks being pushed away on hotplug (Waiman Long) [2026450 2024869]
- sched/core: Prep code for merging mr1787 (Fernando Pacheco)</changelog>
</package>
<package pkgid="418d30fe274a4ed77be2c04645dd9e8eef70209e62e58f98e672006737c8ea1e" name="kernel-rt-debuginfo-common-x86_64" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="348.12.2.rt7.143.el8_5"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.4.1.rt7.134.el8_5]" date="1637668800">- [rt] build kernel-rt-4.18.0-348.4.1.rt7.134.el8_5 [1939539]
- [RHEL8.6 BZ 1849234] cifs: report error instead of invalid when revalidating a dentry fails (Ronnie Sahlberg) [2017177 1849234]
- kthread: Fix PF_KTHREAD vs to_kthread() race (Waiman Long) [2010333 2001497]
- sched/fair: Ignore percpu threads for imbalance pulls (Waiman Long) [2010333 2001497]
- kthread: Extract KTHREAD_IS_PER_CPU (Waiman Long) [2010333 2001497]
- sched: Optimize finish_lock_switch() (Waiman Long) [2010333 2001497]
- sched/hotplug: Ensure only per-cpu kthreads run during hotplug (Waiman Long) [2010333 2001497]
- sched: Fix balance_callback() (Waiman Long) [2010333 2001497]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.5.1.rt7.135.el8_5]" date="1638273600">- [rt] build kernel-rt-4.18.0-348.5.1.rt7.135.el8_5 [1939539]
- blk-mq: still set q-&gt;make_request_fn for blk-mq (Ming Lei) [2016384 1999728]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.6.1.rt7.136.el8_5]" date="1638878400">- [rt] build kernel-rt-4.18.0-348.6.1.rt7.136.el8_5 [1939539]
- x86/Kconfig: Do not enable AMD_MEM_ENCRYPT_ACTIVE_BY_DEFAULT automatically (Prarit Bhargava) [2024678 2021219]
- sched/vtime: Work around an unitialized variable warning (Leah Leshchinsky)
- [rt] disable KASAN, KCSAN and UBSAN for kernel-rt (Leah Leshchinsky)</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.7.1.rt7.137.el8_5]" date="1638964800">- [rt] build kernel-rt-4.18.0-348.7.1.rt7.137.el8_5 [1939539]
- sched/core: Re-add dropped __migrate_disabled() check (Fernando Pacheco)
- sched: Fix CPU hotplug / tighten is_per_cpu_kthread() (Waiman Long) [2026450 2024869]
- sched: Prepare to use balance_push in ttwu() (Waiman Long) [2026450 2024869]
- sched: Don't run cpu-online with balance_push() enabled (Waiman Long) [2026450 2024869]
- workqueue: Tag bound workers with KTHREAD_IS_PER_CPU (Waiman Long) [2026450 2024869]
- workqueue: Use cpu_possible_mask instead of cpu_active_mask to break affinity (Waiman Long) [2026450 2024869]
- sched: Fix hotplug vs CPU bandwidth control (Waiman Long) [2026450 2024869]
- workqueue: Manually break affinity on hotplug (Waiman Long) [2026450 2024869]
- sched/hotplug: Consolidate task migration on CPU unplug (Waiman Long) [2026450 2024869]
- sched/core: Wait for tasks being pushed away on hotplug (Waiman Long) [2026450 2024869]
- sched/core: Prep code for merging mr1787 (Fernando Pacheco)</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.8.1.rt7.138.el8_5]" date="1639483200">- [rt] build kernel-rt-4.18.0-348.8.1.rt7.138.el8_5 [1939539]
- ice: Fix VF true promiscuous mode (Jonathan Toppins) [2026698 1970643]
- ice: Remove toggling of antispoof for VF trusted promiscuous mode (Jonathan Toppins) [2026698 1970643]
- ice: Fix replacing VF hardware MAC to existing MAC filter (Jonathan Toppins) [2026698 1970643]
- ice: Fix not stopping Tx queues for VFs (Jonathan Toppins) [2026698 1970643]
- ice: Fix race conditions between virtchnl handling and VF ndo ops (Jonathan Toppins) [2026698 1970643]
- net/netif_receive_skb_core: Use migrate_disable() (Luis Claudio R. Goncalves) [2027689 2024168]
- crypto: jitter - consider 32 LSB for APT (Herbert Xu) [2029365 1994390]
- xfs: fix I_DONTCACHE (Carlos Maiolino) [2028534 2024969]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.9.1.rt7.139.el8_5]" date="1640001600">- [rt] build kernel-rt-4.18.0-348.9.1.rt7.139.el8_5 [2032059]
- ixgbe: Revert "bpf, devmap: Move drop error path to devmap for XDP_REDIRECT" (Ken Cox) [2029845 2024240]
- i40e: Revert "bpf, devmap: Move drop error path to devmap for XDP_REDIRECT" (Stefan Assmann) [2029845 2024225]
- rcu/nocb: Perform deferred wake up before last idle's need_resched() check (Waiman Long) [2029449 2008340]
- locking/rwsem-rt: Remove might_sleep() in __up_read() (Andrew Halaney) [2029422 1903578]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.10.1.rt7.140.el8_5]" date="1640779200">- [rt] build kernel-rt-4.18.0-348.10.1.rt7.140.el8_5 [2032059]
- selftests: add a test case for mirred egress to ingress (Xin Long) [2024411 1983894]
- net: sched: act_mirred: drop dst for the direction from egress to ingress (Xin Long) [2024411 1983894]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.11.1.rt7.141.el8_5]" date="1641297600">- [rt] build kernel-rt-4.18.0-348.11.1.rt7.141.el8_5 [2032059]
- blk-mq: avoid to iterate over stale request (Ming Lei) [2034396 1997338]
- rcu: Tighten rcu_advance_cbs_nowake() checks (Daniel Vacek) [2032579 2013408]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.12.1.rt7.142.el8_5]" date="1641988800">- [rt] build kernel-rt-4.18.0-348.12.1.rt7.142.el8_5 [2032059]
- tcp: don't free a FIN sk_buff in tcp_remove_empty_skb() (Guillaume Nault) [2021574 2016210]
- kernel.spec: Add support to use vmlinux.h (Jiri Olsa) [2031053 1989087]
- spec: Add vmlinux.h to kernel-devel package (Jiri Olsa) [2031053 1989087]
- x86/mce: Avoid infinite loop for copy from user recovery (Prarit Bhargava) [2008789 1999550]
- x86/mce: Rename kill_it to kill_current_task (Prarit Bhargava) [2008789 1999550]
- x86/mce: Recover from poison found while copying from user space (Prarit Bhargava) [2008789 1999550]
- x86/mce: Delay clearing IA32_MCG_STATUS to the end of do_machine_check() (Prarit Bhargava) [2008789 1999550]
- x86/mce: Send #MC singal from task work (Prarit Bhargava) [2008789 1999550]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-348.12.2.rt7.143.el8_5]" date="1642420800">- [rt] build kernel-rt-4.18.0-348.12.2.rt7.143.el8_5 [2032059]
- vfs: Out-of-bounds write of heap buffer in fs_context.c (Frantisek Hrbata) [2040580 2040581] {CVE-2022-0185}
- xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Bruno Meneguele) [2034869 2034870] {CVE-2021-4155}</changelog>
</package>
<package pkgid="1099d3ad361f165874fcf474d28d178e4e94a29cd0ee97017275abde8528cda4" name="kernel-rt-debuginfo-common-x86_64" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="348.2.1.rt7.132.el8_5"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-342.rt7.123.el8]" date="1631620800">- [rt] build kernel-rt-4.18.0-342.rt7.123.el8 [1939539]
- selftest: netfilter: add test case for unreplied tcp connections (Florian Westphal) [1991523]
- netfilter: conntrack: do not renew entry stuck in tcp SYN_SENT state (Florian Westphal) [1991523]
- net/sched: store the last executed chain also for clsact egress (Davide Caratti) [1980537]
- ice: fix Tx queue iteration for Tx timestamp enablement (Ken Cox) [1999743]
- perf evsel: Add missing cloning of evsel-&gt;use_config_name (Michael Petlan) [1838635]
- perf Documentation: Document intel-hybrid support (Michael Petlan) [1838635]
- perf tests: Skip 'perf stat metrics (shadow stat) test' for hybrid (Michael Petlan) [1838635]
- perf tests: Support 'Convert perf time to TSC' test for hybrid (Michael Petlan) [1838635]
- perf tests: Support 'Session topology' test for hybrid (Michael Petlan) [1838635]
- perf tests: Support 'Parse and process metrics' test for hybrid (Michael Petlan) [1838635]
- perf tests: Support 'Track with sched_switch' test for hybrid (Michael Petlan) [1838635]
- perf tests: Skip 'Setup struct perf_event_attr' test for hybrid (Michael Petlan) [1838635]
- perf tests: Add hybrid cases for 'Roundtrip evsel-&gt;name' test (Michael Petlan) [1838635]
- perf tests: Add hybrid cases for 'Parse event definition strings' test (Michael Petlan) [1838635]
- perf record: Uniquify hybrid event name (Michael Petlan) [1838635]
- perf stat: Warn group events from different hybrid PMU (Michael Petlan) [1838635]
- perf stat: Filter out unmatched aggregation for hybrid event (Michael Petlan) [1838635]
- perf stat: Add default hybrid events (Michael Petlan) [1838635]
- perf record: Create two hybrid 'cycles' events by default (Michael Petlan) [1838635]
- perf parse-events: Support event inside hybrid pmu (Michael Petlan) [1838635]
- perf parse-events: Compare with hybrid pmu name (Michael Petlan) [1838635]
- perf parse-events: Create two hybrid raw events (Michael Petlan) [1838635]
- perf parse-events: Create two hybrid cache events (Michael Petlan) [1838635]
- perf parse-events: Create two hybrid hardware events (Michael Petlan) [1838635]
- perf stat: Uniquify hybrid event name (Michael Petlan) [1838635]
- perf pmu: Add hybrid helper functions (Michael Petlan) [1838635]
- perf pmu: Save detected hybrid pmus to a global pmu list (Michael Petlan) [1838635]
- perf pmu: Save pmu name (Michael Petlan) [1838635]
- perf pmu: Simplify arguments of __perf_pmu__new_alias (Michael Petlan) [1838635]
- perf jevents: Support unit value "cpu_core" and "cpu_atom" (Michael Petlan) [1838635]
- tools headers uapi: Update tools's copy of linux/perf_event.h (Michael Petlan) [1838635]</changelog>
  <changelog author="Luis Claudio R. Goncalves &lt;lgoncalv@redhat.com&gt; [4.18.0-342.rt7.124.el8]" date="1631707200">- [rt] build kernel-rt-4.18.0-342.rt7.124.el8 [1939539]
- [rt] wqueue: fix bad unlock balance in destroy_workqueue() [1998682]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-343.rt7.125.el8]" date="1631793600">- [rt] build kernel-rt-4.18.0-343.rt7.125.el8 [1939539]
- rcu: Avoid unneeded function call in rcu_read_unlock() (Waiman Long) [1997500]
- mt76: connac: do not schedule mac_work if the device is not running (Íñigo Huguet) [1956419 1972045]
- mt7921e: enable module in config (Íñigo Huguet) [1956419 1972045]
- Revert tools/power/cpupower: Read energy_perf_bias from sysfs (Steve Best) [1999926]
- libnvdimm/namespace: Differentiate between probe mapping and runtime mapping (Jeff Moyer) [1795719]
- libnvdimm/pfn_dev: Don't clear device memmap area during generic namespace probe (Jeff Moyer) [1795719]
- perf/x86/intel/uncore: Clean up error handling path of iio mapping (Michael Petlan) [1837330]
- perf/x86/intel/uncore: Fix for iio mapping on Skylake Server (Michael Petlan) [1837330]
- perf/x86/intel/uncore: Generic support for the MMIO type of uncore blocks (Michael Petlan) [1837330]
- perf/x86/intel/uncore: Generic support for the PCI type of uncore blocks (Michael Petlan) [1837330]
- perf/x86/intel/uncore: Rename uncore_notifier to uncore_pci_sub_notifier (Michael Petlan) [1837330]
- perf/x86/intel/uncore: Generic support for the MSR type of uncore blocks (Michael Petlan) [1837330]
- perf/x86/intel/uncore: Parse uncore discovery tables (Michael Petlan) [1837330]
- perf/x86/intel/uncore: Expose an Uncore unit to IIO PMON mapping (Michael Petlan) [1837330]
- perf/x86/intel/uncore: Wrap the max dies calculation into an accessor (Michael Petlan) [1837330]
- perf/x86/intel/uncore: Expose an Uncore unit to PMON mapping (Michael Petlan) [1837330]
- perf/x86/intel/uncore: Validate MMIO address before accessing (Michael Petlan) [1837330]
- perf/x86/intel/uncore: Record the size of mapped area (Michael Petlan) [1837330]
- perf/x86/intel/uncore: Fix oops when counting IMC uncore events on some TGL (Michael Petlan) [1837330]
- crypto: qat - remove unused macro in FW loader (Vladis Dronov) [1920086]
- crypto: qat - check return code of qat_hal_rd_rel_reg() (Vladis Dronov) [1920086]
- crypto: qat - report an error if MMP file size is too large (Vladis Dronov) [1920086]
- crypto: qat - check MMP size before writing to the SRAM (Vladis Dronov) [1920086]
- crypto: qat - return error when failing to map FW (Vladis Dronov) [1920086]
- crypto: qat - enable detection of accelerators hang (Vladis Dronov) [1920086]
- crypto: qat - Fix a double free in adf_create_ring (Vladis Dronov) [1920086]
- crypto: qat - fix error path in adf_isr_resource_alloc() (Vladis Dronov) [1920086]
- crypto: qat - ADF_STATUS_PF_RUNNING should be set after adf_dev_init (Vladis Dronov) [1920086]
- crypto: qat - don't release uninitialized resources (Vladis Dronov) [1920086]
- crypto: qat - fix use of 'dma_map_single' (Vladis Dronov) [1920086]
- crypto: qat - fix unmap invalid dma address (Vladis Dronov) [1920086]
- crypto: qat - fix spelling mistake: "messge" -&gt; "message" (Vladis Dronov) [1920086]
- crypto: qat - reduce size of mapped region (Vladis Dronov) [1920086]
- crypto: qat - change format string and cast ring size (Vladis Dronov) [1920086]
- crypto: qat - fix potential spectre issue (Vladis Dronov) [1920086]
- crypto: qat - configure arbiter mapping based on engines enabled (Vladis Dronov) [1920086]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-344.rt7.126.el8]" date="1632139200">- [rt] build kernel-rt-4.18.0-344.rt7.126.el8 [1939539]
- perf/x86/intel: Fix PEBS-via-PT reload base value for Extended PEBS (Michael Petlan) [1998051]
- perf/x86/intel/uncore: Fix Add BW copypasta (Michael Petlan) [1998051]
- perf/x86/intel/uncore: Add BW counters for GT, IA and IO breakdown (Michael Petlan) [1998051]
- Revert "ice: Add initial support framework for LAG" (Michal Schmidt) [1999016]
- net: re-initialize slow_gro flag at gro_list_prepare time (Paolo Abeni) [2002367]
- cxgb4: dont touch blocked freelist bitmap after free (Rahul Lakkireddy) [1998148]
- cxgb4vf: configure ports accessible by the VF (Rahul Lakkireddy) [1961329]
- scsi: lpfc: Fix memory leaks in error paths while issuing ELS RDF/SCR request (Dick Kennedy) [1976332]
- scsi: lpfc: Keep NDLP reference until after freeing the IOCB after ELS handling (Dick Kennedy) [1976332]
- scsi: lpfc: Move initialization of phba-&gt;poll_list earlier to avoid crash (Dick Kennedy) [1976332]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-345.rt7.127.el8]" date="1632398400">- [rt] build kernel-rt-4.18.0-345.rt7.127.el8 [1939539]
- e1000e: Do not take care about recovery NVM checksum (Ken Cox) [1984558]
- qrtr: disable CONFIG_QRTR for non x86_64 archs (Íñigo Huguet) [1999642]
- ceph: fix possible null-pointer dereference in ceph_mdsmap_decode() (Jeff Layton) [1989999]
- ceph: fix dereference of null pointer cf (Jeff Layton) [1989999]
- ceph: correctly handle releasing an embedded cap flush (Jeff Layton) [1989999]
- ceph: take snap_empty_lock atomically with snaprealm refcount change (Jeff Layton) [1989999]
- ceph: don't WARN if we're still opening a session to an MDS (Jeff Layton) [1989999]
- rbd: don't hold lock_rwsem while running_list is being drained (Jeff Layton) [1989999]
- rbd: always kick acquire on "acquired" and "released" notifications (Jeff Layton) [1989999]
- ceph: take reference to req-&gt;r_parent at point of assignment (Jeff Layton) [1989999]
- ceph: eliminate ceph_async_iput() (Jeff Layton) [1989999]
- ceph: don't take s_mutex in ceph_flush_snaps (Jeff Layton) [1989999]
- ceph: don't take s_mutex in try_flush_caps (Jeff Layton) [1989999]
- ceph: don't take s_mutex or snap_rwsem in ceph_check_caps (Jeff Layton) [1989999]
- ceph: eliminate session-&gt;s_gen_ttl_lock (Jeff Layton) [1989999]
- ceph: allow ceph_put_mds_session to take NULL or ERR_PTR (Jeff Layton) [1989999]
- ceph: clean up locking annotation for ceph_get_snap_realm and __lookup_snap_realm (Jeff Layton) [1989999]
- ceph: add some lockdep assertions around snaprealm handling (Jeff Layton) [1989999]
- ceph: decoding error in ceph_update_snap_realm should return -EIO (Jeff Layton) [1989999]
- ceph: add IO size metrics support (Jeff Layton) [1989999]
- ceph: update and rename __update_latency helper to __update_stdev (Jeff Layton) [1989999]
- ceph: simplify the metrics struct (Jeff Layton) [1989999]
- libceph: fix doc warnings in cls_lock_client.c (Jeff Layton) [1989999]
- libceph: remove unnecessary ret variable in ceph_auth_init() (Jeff Layton) [1989999]
- libceph: kill ceph_none_authorizer::reply_buf (Jeff Layton) [1989999]
- ceph: make ceph_queue_cap_snap static (Jeff Layton) [1989999]
- ceph: remove bogus checks and WARN_ONs from ceph_set_page_dirty (Jeff Layton) [1989999]
- libceph: set global_id as soon as we get an auth ticket (Jeff Layton) [1989999]
- libceph: don't pass result into ac-&gt;ops-&gt;handle_reply() (Jeff Layton) [1989999]
- ceph: fix error handling in ceph_atomic_open and ceph_lookup (Jeff Layton) [1989999]
- ceph: must hold snap_rwsem when filling inode for async create (Jeff Layton) [1989999]
- libceph: Fix spelling mistakes (Jeff Layton) [1989999]
- libceph: don't set global_id until we get an auth ticket (Jeff Layton) [1989999]
- libceph: bump CephXAuthenticate encoding version (Jeff Layton) [1989999]
- ceph: don't allow access to MDS-private inodes (Jeff Layton) [1989999]
- ceph: fix up some bare fetches of i_size (Jeff Layton) [1989999]
- ceph: support getting ceph.dir.rsnaps vxattr (Jeff Layton) [1989999]
- ceph: drop pinned_page parameter from ceph_get_caps (Jeff Layton) [1989999]
- ceph: fix inode leak on getattr error in __fh_to_dentry (Jeff Layton) [1989999]
- ceph: only check pool permissions for regular files (Jeff Layton) [1989999]
- ceph: send opened files/pinned caps/opened inodes metrics to MDS daemon (Jeff Layton) [1989999]
- ceph: avoid counting the same request twice or more (Jeff Layton) [1989999]
- ceph: rename the metric helpers (Jeff Layton) [1989999]
- ceph: fix kerneldoc copypasta over ceph_start_io_direct (Jeff Layton) [1989999]
- ceph: don't use d_add in ceph_handle_snapdir (Jeff Layton) [1989999]
- ceph: don't clobber i_snap_caps on non-I_NEW inode (Jeff Layton) [1989999]
- ceph: fix fall-through warnings for Clang (Jeff Layton) [1989999]
- net: ceph: Fix a typo in osdmap.c (Jeff Layton) [1989999]
- ceph: don't allow type or device number to change on non-I_NEW inodes (Jeff Layton) [1989999]
- ceph: defer flushing the capsnap if the Fb is used (Jeff Layton) [1989999]
- ceph: allow queueing cap/snap handling after putting cap references (Jeff Layton) [1989999]
- ceph: clean up inode work queueing (Jeff Layton) [1989999]
- ceph: fix flush_snap logic after putting caps (Jeff Layton) [1989999]
- libceph: fix "Boolean result is used in bitwise operation" warning (Jeff Layton) [1989999]
- new helper: inode_wrong_type() (Jeff Layton) [1989999]
- kabi: Adding symbol single_release (fs/seq_file.c) (Čestmír Kalina) [1945486]
- kabi: Adding symbol single_open (fs/seq_file.c) (Čestmír Kalina) [1945486]
- kabi: Adding symbol seq_read (fs/seq_file.c) (Čestmír Kalina) [1945486]
- kabi: Adding symbol seq_printf (fs/seq_file.c) (Čestmír Kalina) [1945486]
- kabi: Adding symbol seq_lseek (fs/seq_file.c) (Čestmír Kalina) [1945486]
- kabi: Adding symbol unregister_chrdev_region (fs/char_dev.c) (Čestmír Kalina) [1945486]
- kabi: Adding symbol cdev_init (fs/char_dev.c) (Čestmír Kalina) [1945486]
- kabi: Adding symbol cdev_del (fs/char_dev.c) (Čestmír Kalina) [1945486]
- kabi: Adding symbol cdev_alloc (fs/char_dev.c) (Čestmír Kalina) [1945486]
- kabi: Adding symbol cdev_add (fs/char_dev.c) (Čestmír Kalina) [1945486]
- kabi: Adding symbol alloc_chrdev_region (fs/char_dev.c) (Čestmír Kalina) [1945486]
- kabi: Adding symbol pcie_capability_read_word (drivers/pci/access.c) (Čestmír Kalina) [1945485]
- kabi: Adding symbol pcie_capability_read_dword (drivers/pci/access.c) (Čestmír Kalina) [1945485]
- kabi: Adding symbol pcie_capability_clear_and_set_word (drivers/pci/access.c) (Čestmír Kalina) [1945485]
- kabi: Adding symbol pci_write_config_dword (drivers/pci/access.c) (Čestmír Kalina) [1945485]
- kabi: Adding symbol pci_write_config_byte (drivers/pci/access.c) (Čestmír Kalina) [1945485]
- kabi: Adding symbol pci_set_power_state (drivers/pci/pci.c) (Čestmír Kalina) [1945485]
- kabi: Adding symbol pci_read_config_dword (drivers/pci/access.c) (Čestmír Kalina) [1945485]
- kabi: Adding symbol pci_read_config_byte (drivers/pci/access.c) (Čestmír Kalina) [1945485]
- kabi: Adding symbol pci_irq_vector (drivers/pci/msi.c) (Čestmír Kalina) [1945485]
- kabi: Adding symbol pci_get_device (drivers/pci/search.c) (Čestmír Kalina) [1945485]
- kabi: Adding symbol pci_free_irq_vectors (drivers/pci/msi.c) (Čestmír Kalina) [1945485]
- kabi: Adding symbol pci_alloc_irq_vectors_affinity (drivers/pci/msi.c) (Čestmír Kalina) [1945485]
- kabi: Adding symbol kexec_crash_loaded (kernel/kexec_core.c) (Čestmír Kalina) [1945491]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-346.rt7.128.el8]" date="1633089600">- [rt] build kernel-rt-4.18.0-346.rt7.128.el8 [1939539]
- redhat: switch secureboot kernel image signing to release keys (Bruno Meneguele)
- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Fix RT check branch name (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- Revert "Merge: mt7921e: enable new Mediatek wireless hardware" (Bruno Meneguele) [2009501]
- megaraid_sas: fix concurrent access to ISR between IRQ polling and real interrupt (Tomas Henzl) [2009022]
- scsi: megaraid_sas: mq_poll support (Tomas Henzl) [2009022]
- [PATCH v2] scsi: qla2xxx: Suppress unnecessary log messages during login (Nilesh Javali) [1982186]
- scsi: qla2xxx: Fix excessive messages during device logout (Nilesh Javali) [1982186]
- PCI: pciehp: Ignore Link Down/Up caused by DPC (Myron Stowe) [1981741]
- arm64: kpti: Fix "kpti=off" when KASLR is enabled (Mark Salter) [1979731]
- arm64: Fix CONFIG_ARCH_RANDOM=n build (Mark Salter) [1979731]
- redhat/configs: aarch64: add CONFIG_ARCH_RANDOM (Mark Salter) [1979731]
- arm64: Implement archrandom.h for ARMv8.5-RNG (Mark Salter) [1979731]
- arm64: kconfig: Fix alignment of E0PD help text (Mark Salter) [1979731]
- arm64: Use register field helper in kaslr_requires_kpti() (Mark Salter) [1979731]
- arm64: Simplify early check for broken TX1 when KASLR is enabled (Mark Salter) [1979731]
- arm64: Use a variable to store non-global mappings decision (Mark Salter) [1979731]
- arm64: Don't use KPTI where we have E0PD (Mark Salter) [1979731]
- arm64: Factor out checks for KASLR in KPTI code into separate function (Mark Salter) [1979731]
- redhat/configs: Add CONFIG_ARM64_E0PD (Mark Salter) [1979731]
- arm64: Add initial support for E0PD (Mark Salter) [1979731]
- arm64: cpufeature: Export matrix and other features to userspace (Mark Salter) [1980098]
- arm64: docs: cpu-feature-registers: Document ID_AA64PFR1_EL1 (Mark Salter) [1980098]
- docs/arm64: cpu-feature-registers: Rewrite bitfields that don't follow [e, s] (Mark Salter) [1980098]
- docs/arm64: cpu-feature-registers: Documents missing visible fields (Mark Salter) [1980098]
- arm64: Introduce system_capabilities_finalized() marker (Mark Salter) [1980098]
- arm64: entry.S: Do not preempt from IRQ before all cpufeatures are enabled (Mark Salter) [1980098]
- docs/arm64: elf_hwcaps: Document HWCAP_SB (Mark Salter) [1980098]
- docs/arm64: elf_hwcaps: sort the HWCAP{, 2} documentation by ascending value (Mark Salter) [1980098]
- arm64: cpufeature: Treat ID_AA64ZFR0_EL1 as RAZ when SVE is not enabled (Mark Salter) [1980098]
- arm64: cpufeature: Effectively expose FRINT capability to userspace (Mark Salter) [1980098]
- arm64: cpufeature: Fix feature comparison for CTR_EL0.{CWG,ERG} (Mark Salter) [1980098]
- arm64: Expose FRINT capabilities to userspace (Mark Salter) [1980098]
- arm64: Expose ARMv8.5 CondM capability to userspace (Mark Salter) [1980098]
- docs: arm64: convert perf.txt to ReST format (Mark Salter) [1980098]
- docs: arm64: convert docs to ReST and rename to .rst (Mark Salter) [1980098]
- Documentation/arm64: HugeTLB page implementation (Mark Salter) [1980098]
- Documentation/arm64/sve: Couple of improvements and typos (Mark Salter) [1980098]
- arm64: cpufeature: Fix missing ZFR0 in __read_sysreg_by_encoding() (Mark Salter) [1980098]
- arm64: Expose SVE2 features for userspace (Mark Salter) [1980098]
- arm64: Advertise ARM64_HAS_DCPODP cpu feature (Mark Salter) [1980098]
- arm64: add CVADP support to the cache maintenance helper (Mark Salter) [1980098]
- arm64: Fix minor issues with the dcache_by_line_op macro (Mark Salter) [1980098]
- arm64: Expose DC CVADP to userspace (Mark Salter) [1980098]
- arm64: Handle trapped DC CVADP (Mark Salter) [1980098]
- arm64: HWCAP: encapsulate elf_hwcap (Mark Salter) [1980098]
- arm64: HWCAP: add support for AT_HWCAP2 (Mark Salter) [1980098]
- x86/MCE/AMD, EDAC/mce_amd: Add new SMCA bank types (Aristeu Rozanski) [1965331]
- x86/MCE/AMD, EDAC/mce_amd: Remove struct smca_hwid.xec_bitmap (Aristeu Rozanski) [1965331]
- EDAC, mce_amd: Print ExtErrorCode and description on a single line (Aristeu Rozanski) [1965331]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-347.rt7.129.el8]" date="1633176000">- [rt] build kernel-rt-4.18.0-347.rt7.129.el8 [1939539]
- PCI: Mark TI C667X to avoid bus reset (Alex Williamson) [1975768]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.rt7.130.el8]" date="1633348800">- [rt] build kernel-rt-4.18.0-348.rt7.130.el8 [1939539]
- drm/nouveau/fifo/ga102: initialise chid on return from channel creation (Ben Skeggs) [1997878]
- drm/nouveau/ga102-: support ttm buffer moves via copy engine (Ben Skeggs) [1997878]
- drm/nouveau/kms/tu102-: delay enabling cursor until after assign_windows (Ben Skeggs) [1997878]
- drm/nouveau/kms/nv50: workaround EFI GOP window channel format differences (Ben Skeggs) [1997878]
- drm/nouveau/disp: power down unused DP links during init (Ben Skeggs) [1997878]
- drm/nouveau: recognise GA107 (Ben Skeggs) [1997878]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.1.1.rt7.131.el8_5]" date="1635940800">- [rt] build kernel-rt-4.18.0-348.1.1.rt7.131.el8_5 [1939539]
- lib/timerqueue: Rely on rbtree semantics for next timer (Phil Auld) [2014677 2007099] {CVE-2021-20317}
- mm/hmm: make HMM_MIRROR an implicit option (Rafael Aquini) [2017519 1998534]
- mm/hmm: allow HMM_MIRROR on all architectures with MMU (Rafael Aquini) [2017519 1998534]
- mm: don't select MIGRATE_VMA_HELPER from HMM_MIRROR (Rafael Aquini) [2017519 1998534]
- mm: sort out the DEVICE_PRIVATE Kconfig mess (Rafael Aquini) [2017519 1998534]
- ceph: skip existing superblocks that are blocklisted or shut down when mounting (Jeffrey Layton) [2017071 2011462]
- redhat: switch release to zstream (Bruno Meneguele)</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.2.1.rt7.132.el8_5]" date="1636372800">- [rt] build kernel-rt-4.18.0-348.2.1.rt7.132.el8_5 [1939539]
- tipc: fix size validations for the MSG_CRYPTO type (Bruno Meneguele) [2020511 2020512] {CVE-2021-43267}
- net: Fix skb-&gt;csum update in inet_proto_csum_replace16(). (Balazs Nemeth) [2005981 1975193]</changelog>
</package>
<package pkgid="e4f89a919cd74d6e092f58b8bc40274a0076af863b4db25a7db2c4af7abfdb84" name="kernel-rt-debuginfo-common-x86_64" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="348.20.1.rt7.150.el8_5"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.11.1.rt7.141.el8_5]" date="1641297600">- [rt] build kernel-rt-4.18.0-348.11.1.rt7.141.el8_5 [2032059]
- blk-mq: avoid to iterate over stale request (Ming Lei) [2034396 1997338]
- rcu: Tighten rcu_advance_cbs_nowake() checks (Daniel Vacek) [2032579 2013408]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.12.1.rt7.142.el8_5]" date="1641988800">- [rt] build kernel-rt-4.18.0-348.12.1.rt7.142.el8_5 [2032059]
- tcp: don't free a FIN sk_buff in tcp_remove_empty_skb() (Guillaume Nault) [2021574 2016210]
- kernel.spec: Add support to use vmlinux.h (Jiri Olsa) [2031053 1989087]
- spec: Add vmlinux.h to kernel-devel package (Jiri Olsa) [2031053 1989087]
- x86/mce: Avoid infinite loop for copy from user recovery (Prarit Bhargava) [2008789 1999550]
- x86/mce: Rename kill_it to kill_current_task (Prarit Bhargava) [2008789 1999550]
- x86/mce: Recover from poison found while copying from user space (Prarit Bhargava) [2008789 1999550]
- x86/mce: Delay clearing IA32_MCG_STATUS to the end of do_machine_check() (Prarit Bhargava) [2008789 1999550]
- x86/mce: Send #MC singal from task work (Prarit Bhargava) [2008789 1999550]</changelog>
  <changelog author="Fernando Pacheco &lt;fpacheco@redhat.com&gt; [4.18.0-348.13.1.rt7.143.el8_5]" date="1642507200">- [rt] build kernel-rt-4.18.0-348.13.1.rt7.143.el8_5 [2032059]
- kernel/locking: Export __rt_mutex_init to non-GPL (Juri Lelli) [2038423 2028992]
- vfs: Out-of-bounds write of heap buffer in fs_context.c (Frantisek Hrbata) [2040580 2040581] {CVE-2022-0185}
- xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Bruno Meneguele) [2034869 2034870] {CVE-2021-4155}
- af_unix: fix garbage collect vs MSG_PEEK (Patrick Talbert) [2031982 2031983] {CVE-2021-0920}
- cgroup: verify that source is a string (Waiman Long) [2034613 2034614] {CVE-2021-4154}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-348.14.1.rt7.144.el8_5]" date="1643198400">- [rt] build kernel-rt-4.18.0-348.14.1.rt7.144.el8_5 [2045589]
- redhat: don't copy Module.kabi files to dist-git (Frantisek Hrbata)
- tcp: fix page frag corruption on page fault (Paolo Abeni) [2041529 1996074]
- net: fix sk_page_frag() recursion from memory reclaim (Paolo Abeni) [2041529 1996074]
- KVM: s390: index kvm-&gt;arch.idle_mask by vcpu_idx (Thomas Huth) [2040769 2026230]
- redhat: set LC_ALL=C before sorting config content (Frantisek Hrbata)</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.15.1.rt7.145.el8_5]" date="1643716800">- [rt] build kernel-rt-4.18.0-348.15.1.rt7.145.el8_5 [2045589]
- net/mlx5: DR, Use FW API when updating FW-owned flow table (Michal Schmidt) [2042663 2042651]
- KVM: x86: Wait for IPIs to be delivered when handling Hyper-V TLB flush hypercall (Vitaly Kuznetsov) [2043237 1868572]
- drm/mgag200: Select clock in PLL update functions (Bruno Meneguele) [2034949 1953926]
- drm/i915: Fix HAS_LSPCON macro for platforms between GEN9 and GEN10 (Bruno Meneguele) [2027335 2005586]
- crypto: qat - power up 4xxx device (Vladis Dronov) [2016437 1960307]
- RDMA/core: Fix a double free in add_port error flow (Kamal Heib) [2038724 2008555]
- powerpc/iommu: Report the correct most efficient DMA mask for PCI devices (Steve Best) [2018928 2007425]
- powerpc/dma: Fix dma_map_ops::get_required_mask (Steve Best) [2018928 2007425]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.16.1.rt7.146.el8_5]" date="1644321600">- [rt] build kernel-rt-4.18.0-348.16.1.rt7.146.el8_5 [2045589]
- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047610 2047611] {CVE-2022-22942}
- net: openvswitch: Fix ct_state nat flags for conns arriving from tc (Marcelo Ricardo Leitner) [2043548 2040334]
- net: openvswitch: Fix matching zone id for invalid conns arriving from tc (Marcelo Ricardo Leitner) [2043550 2040452]
- net/sched: flow_dissector: Fix matching on zone id for invalid conns (Marcelo Ricardo Leitner) [2043550 2040452]
- net/sched: Extend qdisc control block with tc control block (Marcelo Ricardo Leitner) [2043550 2040452]
- redhat/Makefile: fix access issue on shared build system (Bruno Meneguele)</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.17.1.rt7.147.el8_5]" date="1644926400">- [rt] build kernel-rt-4.18.0-348.17.1.rt7.147.el8_5 [2045589]
- vfs: check dentry is still valid in get_link() (Ian Kent) [2052558 2014846]
- xfs: don't expose internal symlink metadata buffers to the vfs (Brian Foster) [2052558 2014846]
- CI: Use appropriate zstream builder (Veronika Kabatova)
- CI: Enable baseline realtime checks (Veronika Kabatova)
- CI: Rename pipelines to include release names (Veronika Kabatova)
- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052176 2052177] {CVE-2022-0492}
- ice: Remove boolean vlan_promisc flag from function (Jonathan Toppins) [2051951 2030400]
- ceph: put the requests/sessions when it fails to alloc memory (Jeffrey Layton) [2053725 2017796]
- ceph: fix off by one bugs in unsafe_request_wait() (Jeffrey Layton) [2053725 2017796]
- ceph: flush the mdlog before waiting on unsafe reqs (Jeffrey Layton) [2053725 2017796]
- ceph: flush mdlog before umounting (Jeffrey Layton) [2053725 2017796]
- ceph: make iterate_sessions a global symbol (Jeffrey Layton) [2053725 2017796]
- ceph: make ceph_create_session_msg a global symbol (Jeffrey Layton) [2053725 2017796]
- xfs: check sb_meta_uuid for dabuf buffer recovery (Bill O'Donnell) [2049292 2020764]
- drm/i915: Flush TLBs before releasing backing store (Patrick Talbert) [2044333 2044334] {CVE-2022-0330}
- hugetlb: fix hugetlb cgroup refcounting during vma split (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: fix imbalanced css_get and css_put pair for shared mappings (Waiman Long) [2039015 2032811]
- mm/hugetlb: change hugetlb_reserve_pages() to type bool (Waiman Long) [2039015 2032811]
- hugetlb: fix an error code in hugetlb_reserve_pages() (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: fix offline of hugetlb cgroup with reservations (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: fix reservation accounting (Waiman Long) [2039015 2032811]
- mm/hugetlb: narrow the hugetlb_lock protection area during preparing huge page (Waiman Long) [2039015 2032811]
- mm/hugetlb: a page from buddy is not on any list (Waiman Long) [2039015 2032811]
- mm/hugetlb: not necessary to coalesce regions recursively (Waiman Long) [2039015 2032811]
- selftests/vm/write_to_hugetlbfs.c: fix unused variable warning (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add hugetlb_cgroup reservation tests (Waiman Long) [2039015 2032811]
- hugetlb: support file_region coalescing again (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: support noreserve mappings (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add accounting for shared mappings (Waiman Long) [2039015 2032811]
- hugetlb: disable region_add file_region coalescing (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add reservation accounting for private mappings (Waiman Long) [2039015 2032811]
- mm/hugetlb_cgroup: fix hugetlb_cgroup migration (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add interface for charge/uncharge hugetlb reservations (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add hugetlb_cgroup reservation counter (Waiman Long) [2039015 2032811]
- hugetlb: remove duplicated code (Waiman Long) [2039015 2032811]
- hugetlb: region_chg provides only cache entry (Waiman Long) [2039015 2032811]
- hugetlbfs: always use address space in inode for resv_map pointer (Waiman Long) [2039015 2032811]
- hugetlbfs: fix potential over/underflow setting node specific nr_hugepages (Waiman Long) [2039015 2032811]
- hugetlb: allow to free gigantic pages regardless of the configuration (Waiman Long) [2039015 2032811]
- powerpc/pseries: Fix update of LPAR security flavor after LPM (Steve Best) [2027448 1997294]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.18.1.rt7.148.el8_5]" date="1645531200">- [rt] build kernel-rt-4.18.0-348.18.1.rt7.148.el8_5 [2045589]
- selftests: kvm: Check whether SIDA memop fails for normal guests (Thomas Huth) [2050811 2050812] {CVE-2022-0516}
- KVM: s390: Return error on SIDA memop on normal guest (Thomas Huth) [2050811 2050812] {CVE-2022-0516}
- iommu/amd: Remove iommu_init_ga() (Jerry Snitselaar) [2030854 1998265]
- iommu/amd: Relocate GAMSup check to early_enable_iommus (Jerry Snitselaar) [2030854 1998265]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.19.1.rt7.149.el8_5]" date="1646049600">- [rt] build kernel-rt-4.18.0-348.19.1.rt7.149.el8_5 [2045589]
- tipc: improve size validations for received domain records (Xin Long) [2048976 2048977] {CVE-2022-0435}
- smb3: do not error on fsync when readonly (Ronnie Sahlberg) [2055824 2037811]
- security: implement sctp_assoc_established hook in selinux (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- security: add sctp_assoc_established hook (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- security: call security_sctp_assoc_request in sctp_sf_do_5_1D_ce (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- security: pass asoc to sctp_assoc_request and sctp_sk_clone (Bruno Meneguele) [2054112 2054117 2015525 2048251]
- net: sctp: Fix some typos (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- RDMA/bnxt_re: Fix stats counters (Selvin Xavier) [2049684 2001893]
- net: check skb sec_path when re-initializing slow_gro in gro_list_prepare (Xin Long) [2047427 2030476]
- cpufreq: intel_pstate: Add Icelake servers support in no-HWP mode (David Arcari) [2036888 2003695]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.20.1.rt7.150.el8_5]" date="1646740800">- [rt] build kernel-rt-4.18.0-348.20.1.rt7.150.el8_5 [2045589]
- lib/iov_iter: initialize "flags" in new pipe_buffer (Jan Stancek) [2060879 2060880] {CVE-2022-0847}</changelog>
</package>
<package pkgid="044a7bdf6232d4db6eeadec77243cd0bf7834d882bc2faa57f4c597c79d1fe78" name="kernel-rt-debuginfo-common-x86_64" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="348.23.1.rt7.153.el8_5"/>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-348.14.1.rt7.144.el8_5]" date="1643198400">- [rt] build kernel-rt-4.18.0-348.14.1.rt7.144.el8_5 [2045589]
- redhat: don't copy Module.kabi files to dist-git (Frantisek Hrbata)
- tcp: fix page frag corruption on page fault (Paolo Abeni) [2041529 1996074]
- net: fix sk_page_frag() recursion from memory reclaim (Paolo Abeni) [2041529 1996074]
- KVM: s390: index kvm-&gt;arch.idle_mask by vcpu_idx (Thomas Huth) [2040769 2026230]
- redhat: set LC_ALL=C before sorting config content (Frantisek Hrbata)</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.15.1.rt7.145.el8_5]" date="1643716800">- [rt] build kernel-rt-4.18.0-348.15.1.rt7.145.el8_5 [2045589]
- net/mlx5: DR, Use FW API when updating FW-owned flow table (Michal Schmidt) [2042663 2042651]
- KVM: x86: Wait for IPIs to be delivered when handling Hyper-V TLB flush hypercall (Vitaly Kuznetsov) [2043237 1868572]
- drm/mgag200: Select clock in PLL update functions (Bruno Meneguele) [2034949 1953926]
- drm/i915: Fix HAS_LSPCON macro for platforms between GEN9 and GEN10 (Bruno Meneguele) [2027335 2005586]
- crypto: qat - power up 4xxx device (Vladis Dronov) [2016437 1960307]
- RDMA/core: Fix a double free in add_port error flow (Kamal Heib) [2038724 2008555]
- powerpc/iommu: Report the correct most efficient DMA mask for PCI devices (Steve Best) [2018928 2007425]
- powerpc/dma: Fix dma_map_ops::get_required_mask (Steve Best) [2018928 2007425]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.16.1.rt7.146.el8_5]" date="1644321600">- [rt] build kernel-rt-4.18.0-348.16.1.rt7.146.el8_5 [2045589]
- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047610 2047611] {CVE-2022-22942}
- net: openvswitch: Fix ct_state nat flags for conns arriving from tc (Marcelo Ricardo Leitner) [2043548 2040334]
- net: openvswitch: Fix matching zone id for invalid conns arriving from tc (Marcelo Ricardo Leitner) [2043550 2040452]
- net/sched: flow_dissector: Fix matching on zone id for invalid conns (Marcelo Ricardo Leitner) [2043550 2040452]
- net/sched: Extend qdisc control block with tc control block (Marcelo Ricardo Leitner) [2043550 2040452]
- redhat/Makefile: fix access issue on shared build system (Bruno Meneguele)</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.17.1.rt7.147.el8_5]" date="1644926400">- [rt] build kernel-rt-4.18.0-348.17.1.rt7.147.el8_5 [2045589]
- vfs: check dentry is still valid in get_link() (Ian Kent) [2052558 2014846]
- xfs: don't expose internal symlink metadata buffers to the vfs (Brian Foster) [2052558 2014846]
- CI: Use appropriate zstream builder (Veronika Kabatova)
- CI: Enable baseline realtime checks (Veronika Kabatova)
- CI: Rename pipelines to include release names (Veronika Kabatova)
- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052176 2052177] {CVE-2022-0492}
- ice: Remove boolean vlan_promisc flag from function (Jonathan Toppins) [2051951 2030400]
- ceph: put the requests/sessions when it fails to alloc memory (Jeffrey Layton) [2053725 2017796]
- ceph: fix off by one bugs in unsafe_request_wait() (Jeffrey Layton) [2053725 2017796]
- ceph: flush the mdlog before waiting on unsafe reqs (Jeffrey Layton) [2053725 2017796]
- ceph: flush mdlog before umounting (Jeffrey Layton) [2053725 2017796]
- ceph: make iterate_sessions a global symbol (Jeffrey Layton) [2053725 2017796]
- ceph: make ceph_create_session_msg a global symbol (Jeffrey Layton) [2053725 2017796]
- xfs: check sb_meta_uuid for dabuf buffer recovery (Bill O'Donnell) [2049292 2020764]
- drm/i915: Flush TLBs before releasing backing store (Patrick Talbert) [2044333 2044334] {CVE-2022-0330}
- hugetlb: fix hugetlb cgroup refcounting during vma split (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: fix imbalanced css_get and css_put pair for shared mappings (Waiman Long) [2039015 2032811]
- mm/hugetlb: change hugetlb_reserve_pages() to type bool (Waiman Long) [2039015 2032811]
- hugetlb: fix an error code in hugetlb_reserve_pages() (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: fix offline of hugetlb cgroup with reservations (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: fix reservation accounting (Waiman Long) [2039015 2032811]
- mm/hugetlb: narrow the hugetlb_lock protection area during preparing huge page (Waiman Long) [2039015 2032811]
- mm/hugetlb: a page from buddy is not on any list (Waiman Long) [2039015 2032811]
- mm/hugetlb: not necessary to coalesce regions recursively (Waiman Long) [2039015 2032811]
- selftests/vm/write_to_hugetlbfs.c: fix unused variable warning (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add hugetlb_cgroup reservation tests (Waiman Long) [2039015 2032811]
- hugetlb: support file_region coalescing again (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: support noreserve mappings (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add accounting for shared mappings (Waiman Long) [2039015 2032811]
- hugetlb: disable region_add file_region coalescing (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add reservation accounting for private mappings (Waiman Long) [2039015 2032811]
- mm/hugetlb_cgroup: fix hugetlb_cgroup migration (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add interface for charge/uncharge hugetlb reservations (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add hugetlb_cgroup reservation counter (Waiman Long) [2039015 2032811]
- hugetlb: remove duplicated code (Waiman Long) [2039015 2032811]
- hugetlb: region_chg provides only cache entry (Waiman Long) [2039015 2032811]
- hugetlbfs: always use address space in inode for resv_map pointer (Waiman Long) [2039015 2032811]
- hugetlbfs: fix potential over/underflow setting node specific nr_hugepages (Waiman Long) [2039015 2032811]
- hugetlb: allow to free gigantic pages regardless of the configuration (Waiman Long) [2039015 2032811]
- powerpc/pseries: Fix update of LPAR security flavor after LPM (Steve Best) [2027448 1997294]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.18.1.rt7.148.el8_5]" date="1645531200">- [rt] build kernel-rt-4.18.0-348.18.1.rt7.148.el8_5 [2045589]
- selftests: kvm: Check whether SIDA memop fails for normal guests (Thomas Huth) [2050811 2050812] {CVE-2022-0516}
- KVM: s390: Return error on SIDA memop on normal guest (Thomas Huth) [2050811 2050812] {CVE-2022-0516}
- iommu/amd: Remove iommu_init_ga() (Jerry Snitselaar) [2030854 1998265]
- iommu/amd: Relocate GAMSup check to early_enable_iommus (Jerry Snitselaar) [2030854 1998265]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.19.1.rt7.149.el8_5]" date="1646049600">- [rt] build kernel-rt-4.18.0-348.19.1.rt7.149.el8_5 [2045589]
- tipc: improve size validations for received domain records (Xin Long) [2048976 2048977] {CVE-2022-0435}
- smb3: do not error on fsync when readonly (Ronnie Sahlberg) [2055824 2037811]
- security: implement sctp_assoc_established hook in selinux (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- security: add sctp_assoc_established hook (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- security: call security_sctp_assoc_request in sctp_sf_do_5_1D_ce (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- security: pass asoc to sctp_assoc_request and sctp_sk_clone (Bruno Meneguele) [2054112 2054117 2015525 2048251]
- net: sctp: Fix some typos (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- RDMA/bnxt_re: Fix stats counters (Selvin Xavier) [2049684 2001893]
- net: check skb sec_path when re-initializing slow_gro in gro_list_prepare (Xin Long) [2047427 2030476]
- cpufreq: intel_pstate: Add Icelake servers support in no-HWP mode (David Arcari) [2036888 2003695]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.20.1.rt7.150.el8_5]" date="1646740800">- [rt] build kernel-rt-4.18.0-348.20.1.rt7.150.el8_5 [2045589]
- lib/iov_iter: initialize "flags" in new pipe_buffer (Jan Stancek) [2060879 2060880] {CVE-2022-0847}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.21.1.rt7.151.el8_5]" date="1647950400">- [rt] build kernel-rt-4.18.0-348.21.1.rt7.151.el8_5 [2045589]
- netfilter: nf_queue: handle socket prefetch (Florian Westphal) [2061446 2009786]
- netfilter: nf_queue: fix possible use-after-free (Florian Westphal) [2061446 2009786]
- selftests: netfilter: add nfqueue TCP_NEW_SYN_RECV socket race test (Florian Westphal) [2061446 2009786]
- netfilter: nf_queue: don't assume sk is full socket (Florian Westphal) [2061446 2009786]
- netfilter: nf_tables_offload: incorrect flow offload action array size (Florian Westphal) [2056867 2056728] {CVE-2022-25636}
- netfilter: nftables_offload: KASAN slab-out-of-bounds Read in nft_flow_rule_create (Florian Westphal) [2056867 2056728] {CVE-2022-25636}
- rt: update the authentication scheme for the bugzilla script (Luis Claudio R. Goncalves)</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.22.1.rt7.152.el8_5]" date="1649160000">- [rt] build kernel-rt-4.18.0-348.22.1.rt7.152.el8_5 [2067266]
- scsi: lpfc: Fix non-recovery of remote ports following an unsolicited LOGO (Dick Kennedy) [2058193 2027558]
- cifs: check all path components in resolved dfs target (Ronnie Sahlberg) [2056329 2030880]
- RDMA/cma: Do not change route.addr.src_addr.ss_family (Kamal Heib) [2032073 2032074] {CVE-2021-4028}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.23.1.rt7.153.el8_5]" date="1649764800">- [rt] build kernel-rt-4.18.0-348.23.1.rt7.153.el8_5 [2067266]
- gfs2: dequeue iopen holder in gfs2_inode_lookup error (Bob Peterson) [2069750 2061665]</changelog>
</package>
<package pkgid="57203a33ad0f09bc05276a80f61b199549b3f4eda12670df4c7432f96138d962" name="kernel-rt-debuginfo-common-x86_64" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="348.7.1.rt7.137.el8_5"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-346.rt7.128.el8]" date="1633089600">- [rt] build kernel-rt-4.18.0-346.rt7.128.el8 [1939539]
- redhat: switch secureboot kernel image signing to release keys (Bruno Meneguele)
- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Fix RT check branch name (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- Revert "Merge: mt7921e: enable new Mediatek wireless hardware" (Bruno Meneguele) [2009501]
- megaraid_sas: fix concurrent access to ISR between IRQ polling and real interrupt (Tomas Henzl) [2009022]
- scsi: megaraid_sas: mq_poll support (Tomas Henzl) [2009022]
- [PATCH v2] scsi: qla2xxx: Suppress unnecessary log messages during login (Nilesh Javali) [1982186]
- scsi: qla2xxx: Fix excessive messages during device logout (Nilesh Javali) [1982186]
- PCI: pciehp: Ignore Link Down/Up caused by DPC (Myron Stowe) [1981741]
- arm64: kpti: Fix "kpti=off" when KASLR is enabled (Mark Salter) [1979731]
- arm64: Fix CONFIG_ARCH_RANDOM=n build (Mark Salter) [1979731]
- redhat/configs: aarch64: add CONFIG_ARCH_RANDOM (Mark Salter) [1979731]
- arm64: Implement archrandom.h for ARMv8.5-RNG (Mark Salter) [1979731]
- arm64: kconfig: Fix alignment of E0PD help text (Mark Salter) [1979731]
- arm64: Use register field helper in kaslr_requires_kpti() (Mark Salter) [1979731]
- arm64: Simplify early check for broken TX1 when KASLR is enabled (Mark Salter) [1979731]
- arm64: Use a variable to store non-global mappings decision (Mark Salter) [1979731]
- arm64: Don't use KPTI where we have E0PD (Mark Salter) [1979731]
- arm64: Factor out checks for KASLR in KPTI code into separate function (Mark Salter) [1979731]
- redhat/configs: Add CONFIG_ARM64_E0PD (Mark Salter) [1979731]
- arm64: Add initial support for E0PD (Mark Salter) [1979731]
- arm64: cpufeature: Export matrix and other features to userspace (Mark Salter) [1980098]
- arm64: docs: cpu-feature-registers: Document ID_AA64PFR1_EL1 (Mark Salter) [1980098]
- docs/arm64: cpu-feature-registers: Rewrite bitfields that don't follow [e, s] (Mark Salter) [1980098]
- docs/arm64: cpu-feature-registers: Documents missing visible fields (Mark Salter) [1980098]
- arm64: Introduce system_capabilities_finalized() marker (Mark Salter) [1980098]
- arm64: entry.S: Do not preempt from IRQ before all cpufeatures are enabled (Mark Salter) [1980098]
- docs/arm64: elf_hwcaps: Document HWCAP_SB (Mark Salter) [1980098]
- docs/arm64: elf_hwcaps: sort the HWCAP{, 2} documentation by ascending value (Mark Salter) [1980098]
- arm64: cpufeature: Treat ID_AA64ZFR0_EL1 as RAZ when SVE is not enabled (Mark Salter) [1980098]
- arm64: cpufeature: Effectively expose FRINT capability to userspace (Mark Salter) [1980098]
- arm64: cpufeature: Fix feature comparison for CTR_EL0.{CWG,ERG} (Mark Salter) [1980098]
- arm64: Expose FRINT capabilities to userspace (Mark Salter) [1980098]
- arm64: Expose ARMv8.5 CondM capability to userspace (Mark Salter) [1980098]
- docs: arm64: convert perf.txt to ReST format (Mark Salter) [1980098]
- docs: arm64: convert docs to ReST and rename to .rst (Mark Salter) [1980098]
- Documentation/arm64: HugeTLB page implementation (Mark Salter) [1980098]
- Documentation/arm64/sve: Couple of improvements and typos (Mark Salter) [1980098]
- arm64: cpufeature: Fix missing ZFR0 in __read_sysreg_by_encoding() (Mark Salter) [1980098]
- arm64: Expose SVE2 features for userspace (Mark Salter) [1980098]
- arm64: Advertise ARM64_HAS_DCPODP cpu feature (Mark Salter) [1980098]
- arm64: add CVADP support to the cache maintenance helper (Mark Salter) [1980098]
- arm64: Fix minor issues with the dcache_by_line_op macro (Mark Salter) [1980098]
- arm64: Expose DC CVADP to userspace (Mark Salter) [1980098]
- arm64: Handle trapped DC CVADP (Mark Salter) [1980098]
- arm64: HWCAP: encapsulate elf_hwcap (Mark Salter) [1980098]
- arm64: HWCAP: add support for AT_HWCAP2 (Mark Salter) [1980098]
- x86/MCE/AMD, EDAC/mce_amd: Add new SMCA bank types (Aristeu Rozanski) [1965331]
- x86/MCE/AMD, EDAC/mce_amd: Remove struct smca_hwid.xec_bitmap (Aristeu Rozanski) [1965331]
- EDAC, mce_amd: Print ExtErrorCode and description on a single line (Aristeu Rozanski) [1965331]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-347.rt7.129.el8]" date="1633176000">- [rt] build kernel-rt-4.18.0-347.rt7.129.el8 [1939539]
- PCI: Mark TI C667X to avoid bus reset (Alex Williamson) [1975768]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.rt7.130.el8]" date="1633348800">- [rt] build kernel-rt-4.18.0-348.rt7.130.el8 [1939539]
- drm/nouveau/fifo/ga102: initialise chid on return from channel creation (Ben Skeggs) [1997878]
- drm/nouveau/ga102-: support ttm buffer moves via copy engine (Ben Skeggs) [1997878]
- drm/nouveau/kms/tu102-: delay enabling cursor until after assign_windows (Ben Skeggs) [1997878]
- drm/nouveau/kms/nv50: workaround EFI GOP window channel format differences (Ben Skeggs) [1997878]
- drm/nouveau/disp: power down unused DP links during init (Ben Skeggs) [1997878]
- drm/nouveau: recognise GA107 (Ben Skeggs) [1997878]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.1.1.rt7.131.el8_5]" date="1635940800">- [rt] build kernel-rt-4.18.0-348.1.1.rt7.131.el8_5 [1939539]
- lib/timerqueue: Rely on rbtree semantics for next timer (Phil Auld) [2014677 2007099] {CVE-2021-20317}
- mm/hmm: make HMM_MIRROR an implicit option (Rafael Aquini) [2017519 1998534]
- mm/hmm: allow HMM_MIRROR on all architectures with MMU (Rafael Aquini) [2017519 1998534]
- mm: don't select MIGRATE_VMA_HELPER from HMM_MIRROR (Rafael Aquini) [2017519 1998534]
- mm: sort out the DEVICE_PRIVATE Kconfig mess (Rafael Aquini) [2017519 1998534]
- ceph: skip existing superblocks that are blocklisted or shut down when mounting (Jeffrey Layton) [2017071 2011462]
- redhat: switch release to zstream (Bruno Meneguele)</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.2.1.rt7.132.el8_5]" date="1636372800">- [rt] build kernel-rt-4.18.0-348.2.1.rt7.132.el8_5 [1939539]
- tipc: fix size validations for the MSG_CRYPTO type (Bruno Meneguele) [2020511 2020512] {CVE-2021-43267}
- net: Fix skb-&gt;csum update in inet_proto_csum_replace16(). (Balazs Nemeth) [2005981 1975193]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.3.1.rt7.133.el8_5]" date="1637064000">- [rt] build kernel-rt-4.18.0-348.3.1.rt7.133.el8_5 [1939539]
- net-sysfs: try not to restart the syscall if it will fail eventually (Antoine Tenart) [2021165 2016005]
- ovl: fix missing negative dentry check in ovl_rename() (Miklos Szeredi) [2016378 2010887 2013318] {CVE-2021-20321}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.4.1.rt7.134.el8_5]" date="1637668800">- [rt] build kernel-rt-4.18.0-348.4.1.rt7.134.el8_5 [1939539]
- [RHEL8.6 BZ 1849234] cifs: report error instead of invalid when revalidating a dentry fails (Ronnie Sahlberg) [2017177 1849234]
- kthread: Fix PF_KTHREAD vs to_kthread() race (Waiman Long) [2010333 2001497]
- sched/fair: Ignore percpu threads for imbalance pulls (Waiman Long) [2010333 2001497]
- kthread: Extract KTHREAD_IS_PER_CPU (Waiman Long) [2010333 2001497]
- sched: Optimize finish_lock_switch() (Waiman Long) [2010333 2001497]
- sched/hotplug: Ensure only per-cpu kthreads run during hotplug (Waiman Long) [2010333 2001497]
- sched: Fix balance_callback() (Waiman Long) [2010333 2001497]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.5.1.rt7.135.el8_5]" date="1638273600">- [rt] build kernel-rt-4.18.0-348.5.1.rt7.135.el8_5 [1939539]
- blk-mq: still set q-&gt;make_request_fn for blk-mq (Ming Lei) [2016384 1999728]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.6.1.rt7.136.el8_5]" date="1638878400">- [rt] build kernel-rt-4.18.0-348.6.1.rt7.136.el8_5 [1939539]
- x86/Kconfig: Do not enable AMD_MEM_ENCRYPT_ACTIVE_BY_DEFAULT automatically (Prarit Bhargava) [2024678 2021219]
- sched/vtime: Work around an unitialized variable warning (Leah Leshchinsky)
- [rt] disable KASAN, KCSAN and UBSAN for kernel-rt (Leah Leshchinsky)</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.7.1.rt7.137.el8_5]" date="1638964800">- [rt] build kernel-rt-4.18.0-348.7.1.rt7.137.el8_5 [1939539]
- sched/core: Re-add dropped __migrate_disabled() check (Fernando Pacheco)
- sched: Fix CPU hotplug / tighten is_per_cpu_kthread() (Waiman Long) [2026450 2024869]
- sched: Prepare to use balance_push in ttwu() (Waiman Long) [2026450 2024869]
- sched: Don't run cpu-online with balance_push() enabled (Waiman Long) [2026450 2024869]
- workqueue: Tag bound workers with KTHREAD_IS_PER_CPU (Waiman Long) [2026450 2024869]
- workqueue: Use cpu_possible_mask instead of cpu_active_mask to break affinity (Waiman Long) [2026450 2024869]
- sched: Fix hotplug vs CPU bandwidth control (Waiman Long) [2026450 2024869]
- workqueue: Manually break affinity on hotplug (Waiman Long) [2026450 2024869]
- sched/hotplug: Consolidate task migration on CPU unplug (Waiman Long) [2026450 2024869]
- sched/core: Wait for tasks being pushed away on hotplug (Waiman Long) [2026450 2024869]
- sched/core: Prep code for merging mr1787 (Fernando Pacheco)</changelog>
</package>
<package pkgid="d1b15f7d3b7a6e65adc62c8a30de3d76599b3a2e2face868cfd86d4b143761ec" name="kernel-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="348.12.2.el8_5"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.4.1.el8_5]" date="1637668800">- [RHEL8.6 BZ 1849234] cifs: report error instead of invalid when revalidating a dentry fails (Ronnie Sahlberg) [2017177 1849234]
- kthread: Fix PF_KTHREAD vs to_kthread() race (Waiman Long) [2010333 2001497]
- sched/fair: Ignore percpu threads for imbalance pulls (Waiman Long) [2010333 2001497]
- kthread: Extract KTHREAD_IS_PER_CPU (Waiman Long) [2010333 2001497]
- sched: Optimize finish_lock_switch() (Waiman Long) [2010333 2001497]
- sched/hotplug: Ensure only per-cpu kthreads run during hotplug (Waiman Long) [2010333 2001497]
- sched: Fix balance_callback() (Waiman Long) [2010333 2001497]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.5.1.el8_5]" date="1638273600">- blk-mq: still set q-&gt;make_request_fn for blk-mq (Ming Lei) [2016384 1999728]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.6.1.el8_5]" date="1638878400">- x86/Kconfig: Do not enable AMD_MEM_ENCRYPT_ACTIVE_BY_DEFAULT automatically (Prarit Bhargava) [2024678 2021219]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.7.1.el8_5]" date="1638964800">- sched: Fix CPU hotplug / tighten is_per_cpu_kthread() (Waiman Long) [2026450 2024869]
- sched: Prepare to use balance_push in ttwu() (Waiman Long) [2026450 2024869]
- sched: Don't run cpu-online with balance_push() enabled (Waiman Long) [2026450 2024869]
- workqueue: Tag bound workers with KTHREAD_IS_PER_CPU (Waiman Long) [2026450 2024869]
- workqueue: Use cpu_possible_mask instead of cpu_active_mask to break affinity (Waiman Long) [2026450 2024869]
- sched: Fix hotplug vs CPU bandwidth control (Waiman Long) [2026450 2024869]
- workqueue: Manually break affinity on hotplug (Waiman Long) [2026450 2024869]
- sched/hotplug: Consolidate task migration on CPU unplug (Waiman Long) [2026450 2024869]
- sched/core: Wait for tasks being pushed away on hotplug (Waiman Long) [2026450 2024869]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.8.1.el8_5]" date="1639483200">- ice: Fix VF true promiscuous mode (Jonathan Toppins) [2026698 1970643]
- ice: Remove toggling of antispoof for VF trusted promiscuous mode (Jonathan Toppins) [2026698 1970643]
- ice: Fix replacing VF hardware MAC to existing MAC filter (Jonathan Toppins) [2026698 1970643]
- ice: Fix not stopping Tx queues for VFs (Jonathan Toppins) [2026698 1970643]
- ice: Fix race conditions between virtchnl handling and VF ndo ops (Jonathan Toppins) [2026698 1970643]
- net/netif_receive_skb_core: Use migrate_disable() (Luis Claudio R. Goncalves) [2027689 2024168]
- crypto: jitter - consider 32 LSB for APT (Herbert Xu) [2029365 1994390]
- xfs: fix I_DONTCACHE (Carlos Maiolino) [2028534 2024969]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.9.1.el8_5]" date="1640001600">- ixgbe: Revert "bpf, devmap: Move drop error path to devmap for XDP_REDIRECT" (Ken Cox) [2029845 2024240]
- i40e: Revert "bpf, devmap: Move drop error path to devmap for XDP_REDIRECT" (Stefan Assmann) [2029845 2024225]
- rcu/nocb: Perform deferred wake up before last idle's need_resched() check (Waiman Long) [2029449 2008340]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.10.1.el8_5]" date="1640779200">- selftests: add a test case for mirred egress to ingress (Xin Long) [2024411 1983894]
- net: sched: act_mirred: drop dst for the direction from egress to ingress (Xin Long) [2024411 1983894]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.11.1.el8_5]" date="1641297600">- blk-mq: avoid to iterate over stale request (Ming Lei) [2034396 1997338]
- rcu: Tighten rcu_advance_cbs_nowake() checks (Daniel Vacek) [2032579 2013408]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.12.1.el8_5]" date="1641988800">- tcp: don't free a FIN sk_buff in tcp_remove_empty_skb() (Guillaume Nault) [2021574 2016210]
- kernel.spec: Add support to use vmlinux.h (Jiri Olsa) [2031053 1989087]
- spec: Add vmlinux.h to kernel-devel package (Jiri Olsa) [2031053 1989087]
- x86/mce: Avoid infinite loop for copy from user recovery (Prarit Bhargava) [2008789 1999550]
- x86/mce: Rename kill_it to kill_current_task (Prarit Bhargava) [2008789 1999550]
- x86/mce: Recover from poison found while copying from user space (Prarit Bhargava) [2008789 1999550]
- x86/mce: Delay clearing IA32_MCG_STATUS to the end of do_machine_check() (Prarit Bhargava) [2008789 1999550]
- x86/mce: Send #MC singal from task work (Prarit Bhargava) [2008789 1999550]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-348.12.2.el8_5]" date="1642420800">- vfs: Out-of-bounds write of heap buffer in fs_context.c (Frantisek Hrbata) [2040585 2040586] {CVE-2022-0185}
- xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Bruno Meneguele) [2034864 2034865] {CVE-2021-4155}</changelog>
</package>
<package pkgid="0aeb36aaf373628b7436a986bfc3e1cce716f4d8696965daa82da55c8c11f848" name="kernel-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="348.2.1.el8_5"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-341.el8]" date="1631275200">- mptcp: Only send extra TCP acks in eligible socket states (Paolo Abeni) [1997178]
- mptcp: fix possible divide by zero (Paolo Abeni) [1997178]
- mptcp: drop tx skb cache (Paolo Abeni) [1997178]
- mptcp: fix memory leak on address flush (Paolo Abeni) [1997178]
- ice: Only lock to update netdev dev_addr (Michal Schmidt) [1995868]
- ice: restart periodic outputs around time changes (Ken Cox) [1992750]
- ice: Fix perout start time rounding (Ken Cox) [1992750]
- net/sched: ets: fix crash when flipping from 'strict' to 'quantum' (Davide Caratti) [1981184]
- ovl: prevent private clone if bind mount is not allowed (Miklos Szeredi) [1993131] {CVE-2021-3732}
- gfs2: Don't call dlm after protocol is unmounted (Bob Peterson) [1997193]
- gfs2: don't stop reads while withdraw in progress (Bob Peterson) [1997193]
- gfs2: Mark journal inodes as "don't cache" (Bob Peterson) [1997193]
- bpf: bpftool: Add -fno-asynchronous-unwind-tables to BPF Clang invocation (Yauheni Kaliuta) [1997124]
- perf/x86/intel: Apply mid ACK for small core (Michael Petlan) [1838573]
- perf/x86/intel/lbr: Zero the xstate buffer on allocation (Michael Petlan) [1838573]
- perf: Fix task context PMU for Hetero (Michael Petlan) [1838573]
- perf/x86/intel: Fix fixed counter check warning for some Alder Lake (Michael Petlan) [1838573]
- perf/x86/lbr: Remove cpuc-&gt;lbr_xsave allocation from atomic context (Michael Petlan) [1838573]
- x86/fpu/xstate: Fix an xstate size check warning with architectural LBRs (Michael Petlan) [1838573]
- perf/x86/rapl: Add support for Intel Alder Lake (Michael Petlan) [1838573]
- perf/x86/cstate: Add Alder Lake CPU support (Michael Petlan) [1838573]
- perf/x86/msr: Add Alder Lake CPU support (Michael Petlan) [1838573]
- perf/x86/intel/uncore: Add Alder Lake support (Michael Petlan) [1838573]
- perf: Extend PERF_TYPE_HARDWARE and PERF_TYPE_HW_CACHE (Michael Petlan) [1838573]
- perf/x86/intel: Add Alder Lake Hybrid support (Michael Petlan) [1838573]
- perf/x86: Support filter_match callback (Michael Petlan) [1838573]
- perf/x86/intel: Add attr_update for Hybrid PMUs (Michael Petlan) [1838573]
- perf/x86: Add structures for the attributes of Hybrid PMUs (Michael Petlan) [1838573]
- perf/x86: Register hybrid PMUs (Michael Petlan) [1838573]
- perf/x86: Factor out x86_pmu_show_pmu_cap (Michael Petlan) [1838573]
- perf/x86: Remove temporary pmu assignment in event_init (Michael Petlan) [1838573]
- perf/x86/intel: Factor out intel_pmu_check_extra_regs (Michael Petlan) [1838573]
- perf/x86/intel: Factor out intel_pmu_check_event_constraints (Michael Petlan) [1838573]
- perf/x86/intel: Factor out intel_pmu_check_num_counters (Michael Petlan) [1838573]
- perf/x86: Hybrid PMU support for extra_regs (Michael Petlan) [1838573]
- perf/x86: Hybrid PMU support for event constraints (Michael Petlan) [1838573]
- perf/x86: Hybrid PMU support for hardware cache event (Michael Petlan) [1838573]
- perf/x86: Hybrid PMU support for unconstrained (Michael Petlan) [1838573]
- perf/x86: Hybrid PMU support for counters (Michael Petlan) [1838573]
- perf/x86: Hybrid PMU support for intel_ctrl (Michael Petlan) [1838573]
- perf/x86/intel: Hybrid PMU support for perf capabilities (Michael Petlan) [1838573]
- perf/x86: Track pmu in per-CPU cpu_hw_events (Michael Petlan) [1838573]
- perf/x86/intel/lbr: Support XSAVES for arch LBR read (Michael Petlan) [1838573]
- perf/x86/intel/lbr: Support XSAVES/XRSTORS for LBR context switch (Michael Petlan) [1838573]
- x86/fpu/xstate: Add helpers for LBR dynamic supervisor feature (Michael Petlan) [1838573]
- x86/fpu/xstate: Support dynamic supervisor feature for LBR (Michael Petlan) [1838573]
- x86/fpu: Use proper mask to replace full instruction mask (Michael Petlan) [1838573]
- x86/cpu: Add helper function to get the type of the current hybrid CPU (Michael Petlan) [1838573]
- x86/cpufeatures: Enumerate Intel Hybrid Technology feature bit (Michael Petlan) [1838573]
- HID: make arrays usage and value to be the same (Benjamin Tissoires) [1974942]
- ACPI: PM: s2idle: Invert Microsoft UUID entry and exit (David Arcari) [1960440]
- platform/x86: amd-pmc: Fix undefined reference to __udivdi3 (David Arcari) [1960440]
- platform/x86: amd-pmc: Fix missing unlock on error in amd_pmc_send_cmd() (David Arcari) [1960440]
- platform/x86: amd-pmc: Use return code on suspend (David Arcari) [1960440]
- platform/x86: amd-pmc: Add new acpi id for future PMC controllers (David Arcari) [1960440]
- platform/x86: amd-pmc: Add support for ACPI ID AMDI0006 (David Arcari) [1960440]
- platform/x86: amd-pmc: Add support for logging s0ix counters (David Arcari) [1960440]
- platform/x86: amd-pmc: Add support for logging SMU metrics (David Arcari) [1960440]
- platform/x86: amd-pmc: call dump registers only once (David Arcari) [1960440]
- platform/x86: amd-pmc: Fix SMU firmware reporting mechanism (David Arcari) [1960440]
- platform/x86: amd-pmc: Fix command completion code (David Arcari) [1960440]
- usb: pci-quirks: disable D3cold on xhci suspend for s2idle on AMD Renoir (David Arcari) [1960440]
- ACPI: PM: Only mark EC GPE for wakeup on Intel systems (David Arcari) [1960440]
- ACPI: PM: Adjust behavior for field problems on AMD systems (David Arcari) [1960440]
- ACPI: PM: s2idle: Add support for new Microsoft UUID (David Arcari) [1960440]
- ACPI: PM: s2idle: Add support for multiple func mask (David Arcari) [1960440]
- ACPI: PM: s2idle: Refactor common code (David Arcari) [1960440]
- ACPI: PM: s2idle: Use correct revision id (David Arcari) [1960440]
- ACPI: PM: s2idle: Add missing LPS0 functions for AMD (David Arcari) [1960440]
- lockd: Fix invalid lockowner cast after vfs_test_lock (Benjamin Coddington) [1986138]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-342.el8]" date="1631620800">- selftest: netfilter: add test case for unreplied tcp connections (Florian Westphal) [1991523]
- netfilter: conntrack: do not renew entry stuck in tcp SYN_SENT state (Florian Westphal) [1991523]
- net/sched: store the last executed chain also for clsact egress (Davide Caratti) [1980537]
- ice: fix Tx queue iteration for Tx timestamp enablement (Ken Cox) [1999743]
- perf evsel: Add missing cloning of evsel-&gt;use_config_name (Michael Petlan) [1838635]
- perf Documentation: Document intel-hybrid support (Michael Petlan) [1838635]
- perf tests: Skip 'perf stat metrics (shadow stat) test' for hybrid (Michael Petlan) [1838635]
- perf tests: Support 'Convert perf time to TSC' test for hybrid (Michael Petlan) [1838635]
- perf tests: Support 'Session topology' test for hybrid (Michael Petlan) [1838635]
- perf tests: Support 'Parse and process metrics' test for hybrid (Michael Petlan) [1838635]
- perf tests: Support 'Track with sched_switch' test for hybrid (Michael Petlan) [1838635]
- perf tests: Skip 'Setup struct perf_event_attr' test for hybrid (Michael Petlan) [1838635]
- perf tests: Add hybrid cases for 'Roundtrip evsel-&gt;name' test (Michael Petlan) [1838635]
- perf tests: Add hybrid cases for 'Parse event definition strings' test (Michael Petlan) [1838635]
- perf record: Uniquify hybrid event name (Michael Petlan) [1838635]
- perf stat: Warn group events from different hybrid PMU (Michael Petlan) [1838635]
- perf stat: Filter out unmatched aggregation for hybrid event (Michael Petlan) [1838635]
- perf stat: Add default hybrid events (Michael Petlan) [1838635]
- perf record: Create two hybrid 'cycles' events by default (Michael Petlan) [1838635]
- perf parse-events: Support event inside hybrid pmu (Michael Petlan) [1838635]
- perf parse-events: Compare with hybrid pmu name (Michael Petlan) [1838635]
- perf parse-events: Create two hybrid raw events (Michael Petlan) [1838635]
- perf parse-events: Create two hybrid cache events (Michael Petlan) [1838635]
- perf parse-events: Create two hybrid hardware events (Michael Petlan) [1838635]
- perf stat: Uniquify hybrid event name (Michael Petlan) [1838635]
- perf pmu: Add hybrid helper functions (Michael Petlan) [1838635]
- perf pmu: Save detected hybrid pmus to a global pmu list (Michael Petlan) [1838635]
- perf pmu: Save pmu name (Michael Petlan) [1838635]
- perf pmu: Simplify arguments of __perf_pmu__new_alias (Michael Petlan) [1838635]
- perf jevents: Support unit value "cpu_core" and "cpu_atom" (Michael Petlan) [1838635]
- tools headers uapi: Update tools's copy of linux/perf_event.h (Michael Petlan) [1838635]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-343.el8]" date="1631793600">- rcu: Avoid unneeded function call in rcu_read_unlock() (Waiman Long) [1997500]
- mt76: connac: do not schedule mac_work if the device is not running (Íñigo Huguet) [1956419 1972045]
- mt7921e: enable module in config (Íñigo Huguet) [1956419 1972045]
- Revert tools/power/cpupower: Read energy_perf_bias from sysfs (Steve Best) [1999926]
- libnvdimm/namespace: Differentiate between probe mapping and runtime mapping (Jeff Moyer) [1795719]
- libnvdimm/pfn_dev: Don't clear device memmap area during generic namespace probe (Jeff Moyer) [1795719]
- perf/x86/intel/uncore: Clean up error handling path of iio mapping (Michael Petlan) [1837330]
- perf/x86/intel/uncore: Fix for iio mapping on Skylake Server (Michael Petlan) [1837330]
- perf/x86/intel/uncore: Generic support for the MMIO type of uncore blocks (Michael Petlan) [1837330]
- perf/x86/intel/uncore: Generic support for the PCI type of uncore blocks (Michael Petlan) [1837330]
- perf/x86/intel/uncore: Rename uncore_notifier to uncore_pci_sub_notifier (Michael Petlan) [1837330]
- perf/x86/intel/uncore: Generic support for the MSR type of uncore blocks (Michael Petlan) [1837330]
- perf/x86/intel/uncore: Parse uncore discovery tables (Michael Petlan) [1837330]
- perf/x86/intel/uncore: Expose an Uncore unit to IIO PMON mapping (Michael Petlan) [1837330]
- perf/x86/intel/uncore: Wrap the max dies calculation into an accessor (Michael Petlan) [1837330]
- perf/x86/intel/uncore: Expose an Uncore unit to PMON mapping (Michael Petlan) [1837330]
- perf/x86/intel/uncore: Validate MMIO address before accessing (Michael Petlan) [1837330]
- perf/x86/intel/uncore: Record the size of mapped area (Michael Petlan) [1837330]
- perf/x86/intel/uncore: Fix oops when counting IMC uncore events on some TGL (Michael Petlan) [1837330]
- crypto: qat - remove unused macro in FW loader (Vladis Dronov) [1920086]
- crypto: qat - check return code of qat_hal_rd_rel_reg() (Vladis Dronov) [1920086]
- crypto: qat - report an error if MMP file size is too large (Vladis Dronov) [1920086]
- crypto: qat - check MMP size before writing to the SRAM (Vladis Dronov) [1920086]
- crypto: qat - return error when failing to map FW (Vladis Dronov) [1920086]
- crypto: qat - enable detection of accelerators hang (Vladis Dronov) [1920086]
- crypto: qat - Fix a double free in adf_create_ring (Vladis Dronov) [1920086]
- crypto: qat - fix error path in adf_isr_resource_alloc() (Vladis Dronov) [1920086]
- crypto: qat - ADF_STATUS_PF_RUNNING should be set after adf_dev_init (Vladis Dronov) [1920086]
- crypto: qat - don't release uninitialized resources (Vladis Dronov) [1920086]
- crypto: qat - fix use of 'dma_map_single' (Vladis Dronov) [1920086]
- crypto: qat - fix unmap invalid dma address (Vladis Dronov) [1920086]
- crypto: qat - fix spelling mistake: "messge" -&gt; "message" (Vladis Dronov) [1920086]
- crypto: qat - reduce size of mapped region (Vladis Dronov) [1920086]
- crypto: qat - change format string and cast ring size (Vladis Dronov) [1920086]
- crypto: qat - fix potential spectre issue (Vladis Dronov) [1920086]
- crypto: qat - configure arbiter mapping based on engines enabled (Vladis Dronov) [1920086]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-344.el8]" date="1632139200">- perf/x86/intel: Fix PEBS-via-PT reload base value for Extended PEBS (Michael Petlan) [1998051]
- perf/x86/intel/uncore: Fix Add BW copypasta (Michael Petlan) [1998051]
- perf/x86/intel/uncore: Add BW counters for GT, IA and IO breakdown (Michael Petlan) [1998051]
- Revert "ice: Add initial support framework for LAG" (Michal Schmidt) [1999016]
- net: re-initialize slow_gro flag at gro_list_prepare time (Paolo Abeni) [2002367]
- cxgb4: dont touch blocked freelist bitmap after free (Rahul Lakkireddy) [1998148]
- cxgb4vf: configure ports accessible by the VF (Rahul Lakkireddy) [1961329]
- scsi: lpfc: Fix memory leaks in error paths while issuing ELS RDF/SCR request (Dick Kennedy) [1976332]
- scsi: lpfc: Keep NDLP reference until after freeing the IOCB after ELS handling (Dick Kennedy) [1976332]
- scsi: lpfc: Move initialization of phba-&gt;poll_list earlier to avoid crash (Dick Kennedy) [1976332]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-345.el8]" date="1632398400">- e1000e: Do not take care about recovery NVM checksum (Ken Cox) [1984558]
- qrtr: disable CONFIG_QRTR for non x86_64 archs (Íñigo Huguet) [1999642]
- ceph: fix possible null-pointer dereference in ceph_mdsmap_decode() (Jeff Layton) [1989999]
- ceph: fix dereference of null pointer cf (Jeff Layton) [1989999]
- ceph: correctly handle releasing an embedded cap flush (Jeff Layton) [1989999]
- ceph: take snap_empty_lock atomically with snaprealm refcount change (Jeff Layton) [1989999]
- ceph: don't WARN if we're still opening a session to an MDS (Jeff Layton) [1989999]
- rbd: don't hold lock_rwsem while running_list is being drained (Jeff Layton) [1989999]
- rbd: always kick acquire on "acquired" and "released" notifications (Jeff Layton) [1989999]
- ceph: take reference to req-&gt;r_parent at point of assignment (Jeff Layton) [1989999]
- ceph: eliminate ceph_async_iput() (Jeff Layton) [1989999]
- ceph: don't take s_mutex in ceph_flush_snaps (Jeff Layton) [1989999]
- ceph: don't take s_mutex in try_flush_caps (Jeff Layton) [1989999]
- ceph: don't take s_mutex or snap_rwsem in ceph_check_caps (Jeff Layton) [1989999]
- ceph: eliminate session-&gt;s_gen_ttl_lock (Jeff Layton) [1989999]
- ceph: allow ceph_put_mds_session to take NULL or ERR_PTR (Jeff Layton) [1989999]
- ceph: clean up locking annotation for ceph_get_snap_realm and __lookup_snap_realm (Jeff Layton) [1989999]
- ceph: add some lockdep assertions around snaprealm handling (Jeff Layton) [1989999]
- ceph: decoding error in ceph_update_snap_realm should return -EIO (Jeff Layton) [1989999]
- ceph: add IO size metrics support (Jeff Layton) [1989999]
- ceph: update and rename __update_latency helper to __update_stdev (Jeff Layton) [1989999]
- ceph: simplify the metrics struct (Jeff Layton) [1989999]
- libceph: fix doc warnings in cls_lock_client.c (Jeff Layton) [1989999]
- libceph: remove unnecessary ret variable in ceph_auth_init() (Jeff Layton) [1989999]
- libceph: kill ceph_none_authorizer::reply_buf (Jeff Layton) [1989999]
- ceph: make ceph_queue_cap_snap static (Jeff Layton) [1989999]
- ceph: remove bogus checks and WARN_ONs from ceph_set_page_dirty (Jeff Layton) [1989999]
- libceph: set global_id as soon as we get an auth ticket (Jeff Layton) [1989999]
- libceph: don't pass result into ac-&gt;ops-&gt;handle_reply() (Jeff Layton) [1989999]
- ceph: fix error handling in ceph_atomic_open and ceph_lookup (Jeff Layton) [1989999]
- ceph: must hold snap_rwsem when filling inode for async create (Jeff Layton) [1989999]
- libceph: Fix spelling mistakes (Jeff Layton) [1989999]
- libceph: don't set global_id until we get an auth ticket (Jeff Layton) [1989999]
- libceph: bump CephXAuthenticate encoding version (Jeff Layton) [1989999]
- ceph: don't allow access to MDS-private inodes (Jeff Layton) [1989999]
- ceph: fix up some bare fetches of i_size (Jeff Layton) [1989999]
- ceph: support getting ceph.dir.rsnaps vxattr (Jeff Layton) [1989999]
- ceph: drop pinned_page parameter from ceph_get_caps (Jeff Layton) [1989999]
- ceph: fix inode leak on getattr error in __fh_to_dentry (Jeff Layton) [1989999]
- ceph: only check pool permissions for regular files (Jeff Layton) [1989999]
- ceph: send opened files/pinned caps/opened inodes metrics to MDS daemon (Jeff Layton) [1989999]
- ceph: avoid counting the same request twice or more (Jeff Layton) [1989999]
- ceph: rename the metric helpers (Jeff Layton) [1989999]
- ceph: fix kerneldoc copypasta over ceph_start_io_direct (Jeff Layton) [1989999]
- ceph: don't use d_add in ceph_handle_snapdir (Jeff Layton) [1989999]
- ceph: don't clobber i_snap_caps on non-I_NEW inode (Jeff Layton) [1989999]
- ceph: fix fall-through warnings for Clang (Jeff Layton) [1989999]
- net: ceph: Fix a typo in osdmap.c (Jeff Layton) [1989999]
- ceph: don't allow type or device number to change on non-I_NEW inodes (Jeff Layton) [1989999]
- ceph: defer flushing the capsnap if the Fb is used (Jeff Layton) [1989999]
- ceph: allow queueing cap/snap handling after putting cap references (Jeff Layton) [1989999]
- ceph: clean up inode work queueing (Jeff Layton) [1989999]
- ceph: fix flush_snap logic after putting caps (Jeff Layton) [1989999]
- libceph: fix "Boolean result is used in bitwise operation" warning (Jeff Layton) [1989999]
- new helper: inode_wrong_type() (Jeff Layton) [1989999]
- kabi: Adding symbol single_release (fs/seq_file.c) (Čestmír Kalina) [1945486]
- kabi: Adding symbol single_open (fs/seq_file.c) (Čestmír Kalina) [1945486]
- kabi: Adding symbol seq_read (fs/seq_file.c) (Čestmír Kalina) [1945486]
- kabi: Adding symbol seq_printf (fs/seq_file.c) (Čestmír Kalina) [1945486]
- kabi: Adding symbol seq_lseek (fs/seq_file.c) (Čestmír Kalina) [1945486]
- kabi: Adding symbol unregister_chrdev_region (fs/char_dev.c) (Čestmír Kalina) [1945486]
- kabi: Adding symbol cdev_init (fs/char_dev.c) (Čestmír Kalina) [1945486]
- kabi: Adding symbol cdev_del (fs/char_dev.c) (Čestmír Kalina) [1945486]
- kabi: Adding symbol cdev_alloc (fs/char_dev.c) (Čestmír Kalina) [1945486]
- kabi: Adding symbol cdev_add (fs/char_dev.c) (Čestmír Kalina) [1945486]
- kabi: Adding symbol alloc_chrdev_region (fs/char_dev.c) (Čestmír Kalina) [1945486]
- kabi: Adding symbol pcie_capability_read_word (drivers/pci/access.c) (Čestmír Kalina) [1945485]
- kabi: Adding symbol pcie_capability_read_dword (drivers/pci/access.c) (Čestmír Kalina) [1945485]
- kabi: Adding symbol pcie_capability_clear_and_set_word (drivers/pci/access.c) (Čestmír Kalina) [1945485]
- kabi: Adding symbol pci_write_config_dword (drivers/pci/access.c) (Čestmír Kalina) [1945485]
- kabi: Adding symbol pci_write_config_byte (drivers/pci/access.c) (Čestmír Kalina) [1945485]
- kabi: Adding symbol pci_set_power_state (drivers/pci/pci.c) (Čestmír Kalina) [1945485]
- kabi: Adding symbol pci_read_config_dword (drivers/pci/access.c) (Čestmír Kalina) [1945485]
- kabi: Adding symbol pci_read_config_byte (drivers/pci/access.c) (Čestmír Kalina) [1945485]
- kabi: Adding symbol pci_irq_vector (drivers/pci/msi.c) (Čestmír Kalina) [1945485]
- kabi: Adding symbol pci_get_device (drivers/pci/search.c) (Čestmír Kalina) [1945485]
- kabi: Adding symbol pci_free_irq_vectors (drivers/pci/msi.c) (Čestmír Kalina) [1945485]
- kabi: Adding symbol pci_alloc_irq_vectors_affinity (drivers/pci/msi.c) (Čestmír Kalina) [1945485]
- kabi: Adding symbol kexec_crash_loaded (kernel/kexec_core.c) (Čestmír Kalina) [1945491]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-346.el8]" date="1633089600">- redhat: switch secureboot kernel image signing to release keys (Bruno Meneguele)
- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Fix RT check branch name (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- Revert "Merge: mt7921e: enable new Mediatek wireless hardware" (Bruno Meneguele) [2009501]
- megaraid_sas: fix concurrent access to ISR between IRQ polling and real interrupt (Tomas Henzl) [2009022]
- scsi: megaraid_sas: mq_poll support (Tomas Henzl) [2009022]
- [PATCH v2] scsi: qla2xxx: Suppress unnecessary log messages during login (Nilesh Javali) [1982186]
- scsi: qla2xxx: Fix excessive messages during device logout (Nilesh Javali) [1982186]
- PCI: pciehp: Ignore Link Down/Up caused by DPC (Myron Stowe) [1981741]
- arm64: kpti: Fix "kpti=off" when KASLR is enabled (Mark Salter) [1979731]
- arm64: Fix CONFIG_ARCH_RANDOM=n build (Mark Salter) [1979731]
- redhat/configs: aarch64: add CONFIG_ARCH_RANDOM (Mark Salter) [1979731]
- arm64: Implement archrandom.h for ARMv8.5-RNG (Mark Salter) [1979731]
- arm64: kconfig: Fix alignment of E0PD help text (Mark Salter) [1979731]
- arm64: Use register field helper in kaslr_requires_kpti() (Mark Salter) [1979731]
- arm64: Simplify early check for broken TX1 when KASLR is enabled (Mark Salter) [1979731]
- arm64: Use a variable to store non-global mappings decision (Mark Salter) [1979731]
- arm64: Don't use KPTI where we have E0PD (Mark Salter) [1979731]
- arm64: Factor out checks for KASLR in KPTI code into separate function (Mark Salter) [1979731]
- redhat/configs: Add CONFIG_ARM64_E0PD (Mark Salter) [1979731]
- arm64: Add initial support for E0PD (Mark Salter) [1979731]
- arm64: cpufeature: Export matrix and other features to userspace (Mark Salter) [1980098]
- arm64: docs: cpu-feature-registers: Document ID_AA64PFR1_EL1 (Mark Salter) [1980098]
- docs/arm64: cpu-feature-registers: Rewrite bitfields that don't follow [e, s] (Mark Salter) [1980098]
- docs/arm64: cpu-feature-registers: Documents missing visible fields (Mark Salter) [1980098]
- arm64: Introduce system_capabilities_finalized() marker (Mark Salter) [1980098]
- arm64: entry.S: Do not preempt from IRQ before all cpufeatures are enabled (Mark Salter) [1980098]
- docs/arm64: elf_hwcaps: Document HWCAP_SB (Mark Salter) [1980098]
- docs/arm64: elf_hwcaps: sort the HWCAP{, 2} documentation by ascending value (Mark Salter) [1980098]
- arm64: cpufeature: Treat ID_AA64ZFR0_EL1 as RAZ when SVE is not enabled (Mark Salter) [1980098]
- arm64: cpufeature: Effectively expose FRINT capability to userspace (Mark Salter) [1980098]
- arm64: cpufeature: Fix feature comparison for CTR_EL0.{CWG,ERG} (Mark Salter) [1980098]
- arm64: Expose FRINT capabilities to userspace (Mark Salter) [1980098]
- arm64: Expose ARMv8.5 CondM capability to userspace (Mark Salter) [1980098]
- docs: arm64: convert perf.txt to ReST format (Mark Salter) [1980098]
- docs: arm64: convert docs to ReST and rename to .rst (Mark Salter) [1980098]
- Documentation/arm64: HugeTLB page implementation (Mark Salter) [1980098]
- Documentation/arm64/sve: Couple of improvements and typos (Mark Salter) [1980098]
- arm64: cpufeature: Fix missing ZFR0 in __read_sysreg_by_encoding() (Mark Salter) [1980098]
- arm64: Expose SVE2 features for userspace (Mark Salter) [1980098]
- arm64: Advertise ARM64_HAS_DCPODP cpu feature (Mark Salter) [1980098]
- arm64: add CVADP support to the cache maintenance helper (Mark Salter) [1980098]
- arm64: Fix minor issues with the dcache_by_line_op macro (Mark Salter) [1980098]
- arm64: Expose DC CVADP to userspace (Mark Salter) [1980098]
- arm64: Handle trapped DC CVADP (Mark Salter) [1980098]
- arm64: HWCAP: encapsulate elf_hwcap (Mark Salter) [1980098]
- arm64: HWCAP: add support for AT_HWCAP2 (Mark Salter) [1980098]
- x86/MCE/AMD, EDAC/mce_amd: Add new SMCA bank types (Aristeu Rozanski) [1965331]
- x86/MCE/AMD, EDAC/mce_amd: Remove struct smca_hwid.xec_bitmap (Aristeu Rozanski) [1965331]
- EDAC, mce_amd: Print ExtErrorCode and description on a single line (Aristeu Rozanski) [1965331]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-347.el8]" date="1633176000">- PCI: Mark TI C667X to avoid bus reset (Alex Williamson) [1975768]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.el8]" date="1633348800">- drm/nouveau/fifo/ga102: initialise chid on return from channel creation (Ben Skeggs) [1997878]
- drm/nouveau/ga102-: support ttm buffer moves via copy engine (Ben Skeggs) [1997878]
- drm/nouveau/kms/tu102-: delay enabling cursor until after assign_windows (Ben Skeggs) [1997878]
- drm/nouveau/kms/nv50: workaround EFI GOP window channel format differences (Ben Skeggs) [1997878]
- drm/nouveau/disp: power down unused DP links during init (Ben Skeggs) [1997878]
- drm/nouveau: recognise GA107 (Ben Skeggs) [1997878]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.1.1.el8_5]" date="1635940800">- lib/timerqueue: Rely on rbtree semantics for next timer (Phil Auld) [2014677 2007099] {CVE-2021-20317}
- mm/hmm: make HMM_MIRROR an implicit option (Rafael Aquini) [2017519 1998534]
- mm/hmm: allow HMM_MIRROR on all architectures with MMU (Rafael Aquini) [2017519 1998534]
- mm: don't select MIGRATE_VMA_HELPER from HMM_MIRROR (Rafael Aquini) [2017519 1998534]
- mm: sort out the DEVICE_PRIVATE Kconfig mess (Rafael Aquini) [2017519 1998534]
- ceph: skip existing superblocks that are blocklisted or shut down when mounting (Jeffrey Layton) [2017071 2011462]
- redhat: switch release to zstream (Bruno Meneguele)</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.2.1.el8_5]" date="1636372800">- tipc: fix size validations for the MSG_CRYPTO type (Bruno Meneguele) [2020506 2020507] {CVE-2021-43267}
- net: Fix skb-&gt;csum update in inet_proto_csum_replace16(). (Balazs Nemeth) [2005981 1975193]</changelog>
</package>
<package pkgid="602b450bb7e61708e47266f39c0fb2ae5ed6e7674a577d61d06e2b7ee062c190" name="kernel-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="348.20.1.el8_5"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.11.1.el8_5]" date="1641297600">- blk-mq: avoid to iterate over stale request (Ming Lei) [2034396 1997338]
- rcu: Tighten rcu_advance_cbs_nowake() checks (Daniel Vacek) [2032579 2013408]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.12.1.el8_5]" date="1641988800">- tcp: don't free a FIN sk_buff in tcp_remove_empty_skb() (Guillaume Nault) [2021574 2016210]
- kernel.spec: Add support to use vmlinux.h (Jiri Olsa) [2031053 1989087]
- spec: Add vmlinux.h to kernel-devel package (Jiri Olsa) [2031053 1989087]
- x86/mce: Avoid infinite loop for copy from user recovery (Prarit Bhargava) [2008789 1999550]
- x86/mce: Rename kill_it to kill_current_task (Prarit Bhargava) [2008789 1999550]
- x86/mce: Recover from poison found while copying from user space (Prarit Bhargava) [2008789 1999550]
- x86/mce: Delay clearing IA32_MCG_STATUS to the end of do_machine_check() (Prarit Bhargava) [2008789 1999550]
- x86/mce: Send #MC singal from task work (Prarit Bhargava) [2008789 1999550]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-348.13.1.el8_5]" date="1642507200">- vfs: Out-of-bounds write of heap buffer in fs_context.c (Frantisek Hrbata) [2040585 2040586] {CVE-2022-0185}
- xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Bruno Meneguele) [2034864 2034865] {CVE-2021-4155}
- af_unix: fix garbage collect vs MSG_PEEK (Patrick Talbert) [2031974 2031975] {CVE-2021-0920}
- cgroup: verify that source is a string (Waiman Long) [2034608 2034609] {CVE-2021-4154}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-348.14.1.el8_5]" date="1643198400">- tcp: fix page frag corruption on page fault (Paolo Abeni) [2041529 1996074]
- net: fix sk_page_frag() recursion from memory reclaim (Paolo Abeni) [2041529 1996074]
- KVM: s390: index kvm-&gt;arch.idle_mask by vcpu_idx (Thomas Huth) [2040769 2026230]
- redhat: set LC_ALL=C before sorting config content (Frantisek Hrbata)</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.15.1.el8_5]" date="1643716800">- net/mlx5: DR, Use FW API when updating FW-owned flow table (Michal Schmidt) [2042663 2042651]
- KVM: x86: Wait for IPIs to be delivered when handling Hyper-V TLB flush hypercall (Vitaly Kuznetsov) [2043237 1868572]
- drm/mgag200: Select clock in PLL update functions (Bruno Meneguele) [2034949 1953926]
- drm/i915: Fix HAS_LSPCON macro for platforms between GEN9 and GEN10 (Bruno Meneguele) [2027335 2005586]
- crypto: qat - power up 4xxx device (Vladis Dronov) [2016437 1960307]
- RDMA/core: Fix a double free in add_port error flow (Kamal Heib) [2038724 2008555]
- powerpc/iommu: Report the correct most efficient DMA mask for PCI devices (Steve Best) [2018928 2007425]
- powerpc/dma: Fix dma_map_ops::get_required_mask (Steve Best) [2018928 2007425]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.16.1.el8_5]" date="1644321600">- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047601 2047602] {CVE-2022-22942}
- net: openvswitch: Fix ct_state nat flags for conns arriving from tc (Marcelo Ricardo Leitner) [2043548 2040334]
- net: openvswitch: Fix matching zone id for invalid conns arriving from tc (Marcelo Ricardo Leitner) [2043550 2040452]
- net/sched: flow_dissector: Fix matching on zone id for invalid conns (Marcelo Ricardo Leitner) [2043550 2040452]
- net/sched: Extend qdisc control block with tc control block (Marcelo Ricardo Leitner) [2043550 2040452]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.17.1.el8_5]" date="1644926400">- vfs: check dentry is still valid in get_link() (Ian Kent) [2052558 2014846]
- xfs: don't expose internal symlink metadata buffers to the vfs (Brian Foster) [2052558 2014846]
- CI: Use appropriate zstream builder (Veronika Kabatova)
- CI: Enable baseline realtime checks (Veronika Kabatova)
- CI: Rename pipelines to include release names (Veronika Kabatova)
- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052166 2052167] {CVE-2022-0492}
- ice: Remove boolean vlan_promisc flag from function (Jonathan Toppins) [2051951 2030400]
- ceph: put the requests/sessions when it fails to alloc memory (Jeffrey Layton) [2053725 2017796]
- ceph: fix off by one bugs in unsafe_request_wait() (Jeffrey Layton) [2053725 2017796]
- ceph: flush the mdlog before waiting on unsafe reqs (Jeffrey Layton) [2053725 2017796]
- ceph: flush mdlog before umounting (Jeffrey Layton) [2053725 2017796]
- ceph: make iterate_sessions a global symbol (Jeffrey Layton) [2053725 2017796]
- ceph: make ceph_create_session_msg a global symbol (Jeffrey Layton) [2053725 2017796]
- xfs: check sb_meta_uuid for dabuf buffer recovery (Bill O'Donnell) [2049292 2020764]
- drm/i915: Flush TLBs before releasing backing store (Patrick Talbert) [2044328 2044329] {CVE-2022-0330}
- hugetlb: fix hugetlb cgroup refcounting during vma split (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: fix imbalanced css_get and css_put pair for shared mappings (Waiman Long) [2039015 2032811]
- mm/hugetlb: change hugetlb_reserve_pages() to type bool (Waiman Long) [2039015 2032811]
- hugetlb: fix an error code in hugetlb_reserve_pages() (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: fix offline of hugetlb cgroup with reservations (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: fix reservation accounting (Waiman Long) [2039015 2032811]
- mm/hugetlb: narrow the hugetlb_lock protection area during preparing huge page (Waiman Long) [2039015 2032811]
- mm/hugetlb: a page from buddy is not on any list (Waiman Long) [2039015 2032811]
- mm/hugetlb: not necessary to coalesce regions recursively (Waiman Long) [2039015 2032811]
- selftests/vm/write_to_hugetlbfs.c: fix unused variable warning (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add hugetlb_cgroup reservation tests (Waiman Long) [2039015 2032811]
- hugetlb: support file_region coalescing again (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: support noreserve mappings (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add accounting for shared mappings (Waiman Long) [2039015 2032811]
- hugetlb: disable region_add file_region coalescing (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add reservation accounting for private mappings (Waiman Long) [2039015 2032811]
- mm/hugetlb_cgroup: fix hugetlb_cgroup migration (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add interface for charge/uncharge hugetlb reservations (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add hugetlb_cgroup reservation counter (Waiman Long) [2039015 2032811]
- hugetlb: remove duplicated code (Waiman Long) [2039015 2032811]
- hugetlb: region_chg provides only cache entry (Waiman Long) [2039015 2032811]
- hugetlbfs: always use address space in inode for resv_map pointer (Waiman Long) [2039015 2032811]
- hugetlbfs: fix potential over/underflow setting node specific nr_hugepages (Waiman Long) [2039015 2032811]
- hugetlb: allow to free gigantic pages regardless of the configuration (Waiman Long) [2039015 2032811]
- powerpc/pseries: Fix update of LPAR security flavor after LPM (Steve Best) [2027448 1997294]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.18.1.el8_5]" date="1645531200">- selftests: kvm: Check whether SIDA memop fails for normal guests (Thomas Huth) [2050806 2050807] {CVE-2022-0516}
- KVM: s390: Return error on SIDA memop on normal guest (Thomas Huth) [2050806 2050807] {CVE-2022-0516}
- iommu/amd: Remove iommu_init_ga() (Jerry Snitselaar) [2030854 1998265]
- iommu/amd: Relocate GAMSup check to early_enable_iommus (Jerry Snitselaar) [2030854 1998265]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.19.1.el8_5]" date="1646049600">- tipc: improve size validations for received domain records (Xin Long) [2048970 2048971] {CVE-2022-0435}
- smb3: do not error on fsync when readonly (Ronnie Sahlberg) [2055824 2037811]
- security: implement sctp_assoc_established hook in selinux (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- security: add sctp_assoc_established hook (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- security: call security_sctp_assoc_request in sctp_sf_do_5_1D_ce (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- security: pass asoc to sctp_assoc_request and sctp_sk_clone (Bruno Meneguele) [2054112 2054117 2015525 2048251]
- net: sctp: Fix some typos (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- RDMA/bnxt_re: Fix stats counters (Selvin Xavier) [2049684 2001893]
- net: check skb sec_path when re-initializing slow_gro in gro_list_prepare (Xin Long) [2047427 2030476]
- cpufreq: intel_pstate: Add Icelake servers support in no-HWP mode (David Arcari) [2036888 2003695]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.20.1.el8_5]" date="1646740800">- lib/iov_iter: initialize "flags" in new pipe_buffer (Jan Stancek) [2060874 2060875] {CVE-2022-0847}</changelog>
</package>
<package pkgid="913a35b9a83f97d9635139acb81bc9a675100f0616aa8d580f2bfaaaff743244" name="kernel-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="348.23.1.el8_5"/>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-348.14.1.el8_5]" date="1643198400">- tcp: fix page frag corruption on page fault (Paolo Abeni) [2041529 1996074]
- net: fix sk_page_frag() recursion from memory reclaim (Paolo Abeni) [2041529 1996074]
- KVM: s390: index kvm-&gt;arch.idle_mask by vcpu_idx (Thomas Huth) [2040769 2026230]
- redhat: set LC_ALL=C before sorting config content (Frantisek Hrbata)</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.15.1.el8_5]" date="1643716800">- net/mlx5: DR, Use FW API when updating FW-owned flow table (Michal Schmidt) [2042663 2042651]
- KVM: x86: Wait for IPIs to be delivered when handling Hyper-V TLB flush hypercall (Vitaly Kuznetsov) [2043237 1868572]
- drm/mgag200: Select clock in PLL update functions (Bruno Meneguele) [2034949 1953926]
- drm/i915: Fix HAS_LSPCON macro for platforms between GEN9 and GEN10 (Bruno Meneguele) [2027335 2005586]
- crypto: qat - power up 4xxx device (Vladis Dronov) [2016437 1960307]
- RDMA/core: Fix a double free in add_port error flow (Kamal Heib) [2038724 2008555]
- powerpc/iommu: Report the correct most efficient DMA mask for PCI devices (Steve Best) [2018928 2007425]
- powerpc/dma: Fix dma_map_ops::get_required_mask (Steve Best) [2018928 2007425]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.16.1.el8_5]" date="1644321600">- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047601 2047602] {CVE-2022-22942}
- net: openvswitch: Fix ct_state nat flags for conns arriving from tc (Marcelo Ricardo Leitner) [2043548 2040334]
- net: openvswitch: Fix matching zone id for invalid conns arriving from tc (Marcelo Ricardo Leitner) [2043550 2040452]
- net/sched: flow_dissector: Fix matching on zone id for invalid conns (Marcelo Ricardo Leitner) [2043550 2040452]
- net/sched: Extend qdisc control block with tc control block (Marcelo Ricardo Leitner) [2043550 2040452]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.17.1.el8_5]" date="1644926400">- vfs: check dentry is still valid in get_link() (Ian Kent) [2052558 2014846]
- xfs: don't expose internal symlink metadata buffers to the vfs (Brian Foster) [2052558 2014846]
- CI: Use appropriate zstream builder (Veronika Kabatova)
- CI: Enable baseline realtime checks (Veronika Kabatova)
- CI: Rename pipelines to include release names (Veronika Kabatova)
- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052166 2052167] {CVE-2022-0492}
- ice: Remove boolean vlan_promisc flag from function (Jonathan Toppins) [2051951 2030400]
- ceph: put the requests/sessions when it fails to alloc memory (Jeffrey Layton) [2053725 2017796]
- ceph: fix off by one bugs in unsafe_request_wait() (Jeffrey Layton) [2053725 2017796]
- ceph: flush the mdlog before waiting on unsafe reqs (Jeffrey Layton) [2053725 2017796]
- ceph: flush mdlog before umounting (Jeffrey Layton) [2053725 2017796]
- ceph: make iterate_sessions a global symbol (Jeffrey Layton) [2053725 2017796]
- ceph: make ceph_create_session_msg a global symbol (Jeffrey Layton) [2053725 2017796]
- xfs: check sb_meta_uuid for dabuf buffer recovery (Bill O'Donnell) [2049292 2020764]
- drm/i915: Flush TLBs before releasing backing store (Patrick Talbert) [2044328 2044329] {CVE-2022-0330}
- hugetlb: fix hugetlb cgroup refcounting during vma split (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: fix imbalanced css_get and css_put pair for shared mappings (Waiman Long) [2039015 2032811]
- mm/hugetlb: change hugetlb_reserve_pages() to type bool (Waiman Long) [2039015 2032811]
- hugetlb: fix an error code in hugetlb_reserve_pages() (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: fix offline of hugetlb cgroup with reservations (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: fix reservation accounting (Waiman Long) [2039015 2032811]
- mm/hugetlb: narrow the hugetlb_lock protection area during preparing huge page (Waiman Long) [2039015 2032811]
- mm/hugetlb: a page from buddy is not on any list (Waiman Long) [2039015 2032811]
- mm/hugetlb: not necessary to coalesce regions recursively (Waiman Long) [2039015 2032811]
- selftests/vm/write_to_hugetlbfs.c: fix unused variable warning (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add hugetlb_cgroup reservation tests (Waiman Long) [2039015 2032811]
- hugetlb: support file_region coalescing again (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: support noreserve mappings (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add accounting for shared mappings (Waiman Long) [2039015 2032811]
- hugetlb: disable region_add file_region coalescing (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add reservation accounting for private mappings (Waiman Long) [2039015 2032811]
- mm/hugetlb_cgroup: fix hugetlb_cgroup migration (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add interface for charge/uncharge hugetlb reservations (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add hugetlb_cgroup reservation counter (Waiman Long) [2039015 2032811]
- hugetlb: remove duplicated code (Waiman Long) [2039015 2032811]
- hugetlb: region_chg provides only cache entry (Waiman Long) [2039015 2032811]
- hugetlbfs: always use address space in inode for resv_map pointer (Waiman Long) [2039015 2032811]
- hugetlbfs: fix potential over/underflow setting node specific nr_hugepages (Waiman Long) [2039015 2032811]
- hugetlb: allow to free gigantic pages regardless of the configuration (Waiman Long) [2039015 2032811]
- powerpc/pseries: Fix update of LPAR security flavor after LPM (Steve Best) [2027448 1997294]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.18.1.el8_5]" date="1645531200">- selftests: kvm: Check whether SIDA memop fails for normal guests (Thomas Huth) [2050806 2050807] {CVE-2022-0516}
- KVM: s390: Return error on SIDA memop on normal guest (Thomas Huth) [2050806 2050807] {CVE-2022-0516}
- iommu/amd: Remove iommu_init_ga() (Jerry Snitselaar) [2030854 1998265]
- iommu/amd: Relocate GAMSup check to early_enable_iommus (Jerry Snitselaar) [2030854 1998265]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.19.1.el8_5]" date="1646049600">- tipc: improve size validations for received domain records (Xin Long) [2048970 2048971] {CVE-2022-0435}
- smb3: do not error on fsync when readonly (Ronnie Sahlberg) [2055824 2037811]
- security: implement sctp_assoc_established hook in selinux (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- security: add sctp_assoc_established hook (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- security: call security_sctp_assoc_request in sctp_sf_do_5_1D_ce (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- security: pass asoc to sctp_assoc_request and sctp_sk_clone (Bruno Meneguele) [2054112 2054117 2015525 2048251]
- net: sctp: Fix some typos (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- RDMA/bnxt_re: Fix stats counters (Selvin Xavier) [2049684 2001893]
- net: check skb sec_path when re-initializing slow_gro in gro_list_prepare (Xin Long) [2047427 2030476]
- cpufreq: intel_pstate: Add Icelake servers support in no-HWP mode (David Arcari) [2036888 2003695]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.20.1.el8_5]" date="1646740800">- lib/iov_iter: initialize "flags" in new pipe_buffer (Jan Stancek) [2060874 2060875] {CVE-2022-0847}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.21.1.el8_5]" date="1647950400">- netfilter: nf_queue: handle socket prefetch (Florian Westphal) [2061446 2009786]
- netfilter: nf_queue: fix possible use-after-free (Florian Westphal) [2061446 2009786]
- selftests: netfilter: add nfqueue TCP_NEW_SYN_RECV socket race test (Florian Westphal) [2061446 2009786]
- netfilter: nf_queue: don't assume sk is full socket (Florian Westphal) [2061446 2009786]
- netfilter: nf_tables_offload: incorrect flow offload action array size (Florian Westphal) [2056867 2056728] {CVE-2022-25636}
- netfilter: nftables_offload: KASAN slab-out-of-bounds Read in nft_flow_rule_create (Florian Westphal) [2056867 2056728] {CVE-2022-25636}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.22.1.el8_5]" date="1649160000">- scsi: lpfc: Fix non-recovery of remote ports following an unsolicited LOGO (Dick Kennedy) [2058193 2027558]
- cifs: check all path components in resolved dfs target (Ronnie Sahlberg) [2056329 2030880]
- RDMA/cma: Do not change route.addr.src_addr.ss_family (Kamal Heib) [2032073 2032074] {CVE-2021-4028}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.23.1.el8_5]" date="1649764800">- gfs2: dequeue iopen holder in gfs2_inode_lookup error (Bob Peterson) [2069750 2061665]</changelog>
</package>
<package pkgid="016d8ec4e543035d706048a26971958447cff2928c22581c0e6800ae7ce00f28" name="kernel-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="348.7.1.el8_5"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-346.el8]" date="1633089600">- redhat: switch secureboot kernel image signing to release keys (Bruno Meneguele)
- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Fix RT check branch name (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- Revert "Merge: mt7921e: enable new Mediatek wireless hardware" (Bruno Meneguele) [2009501]
- megaraid_sas: fix concurrent access to ISR between IRQ polling and real interrupt (Tomas Henzl) [2009022]
- scsi: megaraid_sas: mq_poll support (Tomas Henzl) [2009022]
- [PATCH v2] scsi: qla2xxx: Suppress unnecessary log messages during login (Nilesh Javali) [1982186]
- scsi: qla2xxx: Fix excessive messages during device logout (Nilesh Javali) [1982186]
- PCI: pciehp: Ignore Link Down/Up caused by DPC (Myron Stowe) [1981741]
- arm64: kpti: Fix "kpti=off" when KASLR is enabled (Mark Salter) [1979731]
- arm64: Fix CONFIG_ARCH_RANDOM=n build (Mark Salter) [1979731]
- redhat/configs: aarch64: add CONFIG_ARCH_RANDOM (Mark Salter) [1979731]
- arm64: Implement archrandom.h for ARMv8.5-RNG (Mark Salter) [1979731]
- arm64: kconfig: Fix alignment of E0PD help text (Mark Salter) [1979731]
- arm64: Use register field helper in kaslr_requires_kpti() (Mark Salter) [1979731]
- arm64: Simplify early check for broken TX1 when KASLR is enabled (Mark Salter) [1979731]
- arm64: Use a variable to store non-global mappings decision (Mark Salter) [1979731]
- arm64: Don't use KPTI where we have E0PD (Mark Salter) [1979731]
- arm64: Factor out checks for KASLR in KPTI code into separate function (Mark Salter) [1979731]
- redhat/configs: Add CONFIG_ARM64_E0PD (Mark Salter) [1979731]
- arm64: Add initial support for E0PD (Mark Salter) [1979731]
- arm64: cpufeature: Export matrix and other features to userspace (Mark Salter) [1980098]
- arm64: docs: cpu-feature-registers: Document ID_AA64PFR1_EL1 (Mark Salter) [1980098]
- docs/arm64: cpu-feature-registers: Rewrite bitfields that don't follow [e, s] (Mark Salter) [1980098]
- docs/arm64: cpu-feature-registers: Documents missing visible fields (Mark Salter) [1980098]
- arm64: Introduce system_capabilities_finalized() marker (Mark Salter) [1980098]
- arm64: entry.S: Do not preempt from IRQ before all cpufeatures are enabled (Mark Salter) [1980098]
- docs/arm64: elf_hwcaps: Document HWCAP_SB (Mark Salter) [1980098]
- docs/arm64: elf_hwcaps: sort the HWCAP{, 2} documentation by ascending value (Mark Salter) [1980098]
- arm64: cpufeature: Treat ID_AA64ZFR0_EL1 as RAZ when SVE is not enabled (Mark Salter) [1980098]
- arm64: cpufeature: Effectively expose FRINT capability to userspace (Mark Salter) [1980098]
- arm64: cpufeature: Fix feature comparison for CTR_EL0.{CWG,ERG} (Mark Salter) [1980098]
- arm64: Expose FRINT capabilities to userspace (Mark Salter) [1980098]
- arm64: Expose ARMv8.5 CondM capability to userspace (Mark Salter) [1980098]
- docs: arm64: convert perf.txt to ReST format (Mark Salter) [1980098]
- docs: arm64: convert docs to ReST and rename to .rst (Mark Salter) [1980098]
- Documentation/arm64: HugeTLB page implementation (Mark Salter) [1980098]
- Documentation/arm64/sve: Couple of improvements and typos (Mark Salter) [1980098]
- arm64: cpufeature: Fix missing ZFR0 in __read_sysreg_by_encoding() (Mark Salter) [1980098]
- arm64: Expose SVE2 features for userspace (Mark Salter) [1980098]
- arm64: Advertise ARM64_HAS_DCPODP cpu feature (Mark Salter) [1980098]
- arm64: add CVADP support to the cache maintenance helper (Mark Salter) [1980098]
- arm64: Fix minor issues with the dcache_by_line_op macro (Mark Salter) [1980098]
- arm64: Expose DC CVADP to userspace (Mark Salter) [1980098]
- arm64: Handle trapped DC CVADP (Mark Salter) [1980098]
- arm64: HWCAP: encapsulate elf_hwcap (Mark Salter) [1980098]
- arm64: HWCAP: add support for AT_HWCAP2 (Mark Salter) [1980098]
- x86/MCE/AMD, EDAC/mce_amd: Add new SMCA bank types (Aristeu Rozanski) [1965331]
- x86/MCE/AMD, EDAC/mce_amd: Remove struct smca_hwid.xec_bitmap (Aristeu Rozanski) [1965331]
- EDAC, mce_amd: Print ExtErrorCode and description on a single line (Aristeu Rozanski) [1965331]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-347.el8]" date="1633176000">- PCI: Mark TI C667X to avoid bus reset (Alex Williamson) [1975768]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.el8]" date="1633348800">- drm/nouveau/fifo/ga102: initialise chid on return from channel creation (Ben Skeggs) [1997878]
- drm/nouveau/ga102-: support ttm buffer moves via copy engine (Ben Skeggs) [1997878]
- drm/nouveau/kms/tu102-: delay enabling cursor until after assign_windows (Ben Skeggs) [1997878]
- drm/nouveau/kms/nv50: workaround EFI GOP window channel format differences (Ben Skeggs) [1997878]
- drm/nouveau/disp: power down unused DP links during init (Ben Skeggs) [1997878]
- drm/nouveau: recognise GA107 (Ben Skeggs) [1997878]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.1.1.el8_5]" date="1635940800">- lib/timerqueue: Rely on rbtree semantics for next timer (Phil Auld) [2014677 2007099] {CVE-2021-20317}
- mm/hmm: make HMM_MIRROR an implicit option (Rafael Aquini) [2017519 1998534]
- mm/hmm: allow HMM_MIRROR on all architectures with MMU (Rafael Aquini) [2017519 1998534]
- mm: don't select MIGRATE_VMA_HELPER from HMM_MIRROR (Rafael Aquini) [2017519 1998534]
- mm: sort out the DEVICE_PRIVATE Kconfig mess (Rafael Aquini) [2017519 1998534]
- ceph: skip existing superblocks that are blocklisted or shut down when mounting (Jeffrey Layton) [2017071 2011462]
- redhat: switch release to zstream (Bruno Meneguele)</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.2.1.el8_5]" date="1636372800">- tipc: fix size validations for the MSG_CRYPTO type (Bruno Meneguele) [2020506 2020507] {CVE-2021-43267}
- net: Fix skb-&gt;csum update in inet_proto_csum_replace16(). (Balazs Nemeth) [2005981 1975193]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.3.1.el8_5]" date="1637064000">- net-sysfs: try not to restart the syscall if it will fail eventually (Antoine Tenart) [2021165 2016005]
- ovl: fix missing negative dentry check in ovl_rename() (Miklos Szeredi) [2016378 2010887 2013318] {CVE-2021-20321}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.4.1.el8_5]" date="1637668800">- [RHEL8.6 BZ 1849234] cifs: report error instead of invalid when revalidating a dentry fails (Ronnie Sahlberg) [2017177 1849234]
- kthread: Fix PF_KTHREAD vs to_kthread() race (Waiman Long) [2010333 2001497]
- sched/fair: Ignore percpu threads for imbalance pulls (Waiman Long) [2010333 2001497]
- kthread: Extract KTHREAD_IS_PER_CPU (Waiman Long) [2010333 2001497]
- sched: Optimize finish_lock_switch() (Waiman Long) [2010333 2001497]
- sched/hotplug: Ensure only per-cpu kthreads run during hotplug (Waiman Long) [2010333 2001497]
- sched: Fix balance_callback() (Waiman Long) [2010333 2001497]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.5.1.el8_5]" date="1638273600">- blk-mq: still set q-&gt;make_request_fn for blk-mq (Ming Lei) [2016384 1999728]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.6.1.el8_5]" date="1638878400">- x86/Kconfig: Do not enable AMD_MEM_ENCRYPT_ACTIVE_BY_DEFAULT automatically (Prarit Bhargava) [2024678 2021219]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.7.1.el8_5]" date="1638964800">- sched: Fix CPU hotplug / tighten is_per_cpu_kthread() (Waiman Long) [2026450 2024869]
- sched: Prepare to use balance_push in ttwu() (Waiman Long) [2026450 2024869]
- sched: Don't run cpu-online with balance_push() enabled (Waiman Long) [2026450 2024869]
- workqueue: Tag bound workers with KTHREAD_IS_PER_CPU (Waiman Long) [2026450 2024869]
- workqueue: Use cpu_possible_mask instead of cpu_active_mask to break affinity (Waiman Long) [2026450 2024869]
- sched: Fix hotplug vs CPU bandwidth control (Waiman Long) [2026450 2024869]
- workqueue: Manually break affinity on hotplug (Waiman Long) [2026450 2024869]
- sched/hotplug: Consolidate task migration on CPU unplug (Waiman Long) [2026450 2024869]
- sched/core: Wait for tasks being pushed away on hotplug (Waiman Long) [2026450 2024869]</changelog>
</package>
<package pkgid="4fdcb00ada542cf01127270565c1be9d7e4c6c7c39e0d3b98629b785f57ad3e2" name="kexec-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.0.20" rel="57.el8_5.1"/>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.20-49" date="1621944000">- kdump-lib.sh: fix the case if no enough total RAM for kdump  in get_recommend_size()</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.20-50" date="1621944001">- rd.route should use the name from kdump_setup_ifname
- get kdump ifname once in kdump_install_netdev</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.20-51" date="1622635200">- Stop reloading kdump service on CPU hotplug event for FADump
- fadump: improve fadump-howto.txt about remote dump target setup</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.20-52" date="1623931200">- Write to `/var/lib/kdump` if $KDUMP_BOOTDIR not writable
- Iterate /sys/bus/ccwgroup/devices to tell if we should set up rd.znet
- mkdumprd: display the absolute path of dump location in the check_user_configured_target()</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.20-53" date="1625227200">- check for invalid physical address of /proc/kcore when making ELF dumpfile
- check for invalid physical address of /proc/kcore when finding max_paddr
- fix format issue in find_online_znet_device
- check the existence of /sys/bus/ccwgroup/devices before trying to find online network device
- kdump-lib.sh: fix a warning in prepare_kdump_bootinfo()</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.20-54" date="1627041600">- kdump/ppc64: rebuild initramfs image after migration
- Check the existence of /sys/bus/ccwgroup/devices/*/online beforehand
- kdump.sysconfig.s390: Remove "prot_virt" from kdump kernel cmdline</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.20-55" date="1627905600">- kdump/ppc64: migration action registration clean up</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.20-56" date="1628251200">- kdumpctl: fix a typo</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.20-57" date="1630065600">- kdumpctl: enable secure boot on ppc64le LPARs</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.20-57.1" date="1635854400">- mkdumprd: Use xz for squash image compression</changelog>
</package>
<package pkgid="735d3b339bfa156ea5678f455370f4c30e9d9e8975ae16d99fd557dbc0418bb4" name="kexec-tools-debugsource" arch="x86_64">
  <version epoch="0" ver="2.0.20" rel="57.el8_5.1"/>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.20-49" date="1621944000">- kdump-lib.sh: fix the case if no enough total RAM for kdump  in get_recommend_size()</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.20-50" date="1621944001">- rd.route should use the name from kdump_setup_ifname
- get kdump ifname once in kdump_install_netdev</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.20-51" date="1622635200">- Stop reloading kdump service on CPU hotplug event for FADump
- fadump: improve fadump-howto.txt about remote dump target setup</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.20-52" date="1623931200">- Write to `/var/lib/kdump` if $KDUMP_BOOTDIR not writable
- Iterate /sys/bus/ccwgroup/devices to tell if we should set up rd.znet
- mkdumprd: display the absolute path of dump location in the check_user_configured_target()</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.20-53" date="1625227200">- check for invalid physical address of /proc/kcore when making ELF dumpfile
- check for invalid physical address of /proc/kcore when finding max_paddr
- fix format issue in find_online_znet_device
- check the existence of /sys/bus/ccwgroup/devices before trying to find online network device
- kdump-lib.sh: fix a warning in prepare_kdump_bootinfo()</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.20-54" date="1627041600">- kdump/ppc64: rebuild initramfs image after migration
- Check the existence of /sys/bus/ccwgroup/devices/*/online beforehand
- kdump.sysconfig.s390: Remove "prot_virt" from kdump kernel cmdline</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.20-55" date="1627905600">- kdump/ppc64: migration action registration clean up</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.20-56" date="1628251200">- kdumpctl: fix a typo</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.20-57" date="1630065600">- kdumpctl: enable secure boot on ppc64le LPARs</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.20-57.1" date="1635854400">- mkdumprd: Use xz for squash image compression</changelog>
</package>
<package pkgid="accd38c89d4620105265e79654b8c9fb551ceed6b8f3859c9008d8841ebace90" name="kpartx-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.8.4" rel="17.el8_5.1"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-7" date="1611748800">- Add 0052-libmultipath-check-for-null-wwid-before-strcmp.patch
  * Missing part of fix for bz #1897815
- Add 0053-libmultipath-make-find_err_path_by_dev-static.patch
- Add 0054-multipathd-avoid-io_err_stat-crash-during-shutdown.patch
- Add 0055-multipathd-avoid-io_err_stat-ABBA-deadlock.patch
- Add 0056-multipathd-use-get_monotonic_time-in-io_err_stat-cod.patch
- Add 0057-multipathd-combine-free_io_err_stat_path-and-destroy.patch
- Add 0058-multipathd-cleanup-logging-for-marginal-paths.patch
  * The above 6 patches fix bz #1920795
- Add 0059-libmpathpersist-fix-thread-safety-of-default-functio.patch
  * Fixes bz #1913549
- Resolves: bz #1897815, #1913549, #1920795</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-9" date="1612958400">- Add 0060-kpartx-free-loop-device-after-listing-partitions.patch
  * Fixes bz #1925490
- Add 0061-RH-fix-find_multipaths-in-mpathconf.patch
  * Fixes bz #1921651
- Resolves: bz #1921651, #1925490</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-11" date="1615550400">- Add 0062-libmultipath-select_action-don-t-drop-map-if-alias-c.patch
  * Fall back to WWID names instead of removing existing device
- Add 0063-libmultipath-check-if-user_friendly_name-is-in-use.patch
  * make sure to choose a user_friendly_name that isn't in use
  * Fixes bz #1937832
- Add alias_clash CI test
- Remove unused multipath.conf
- Resolves: bz #1937832</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-12" date="1619006400">- Add 0064-libmultipath-check-udev_device_get_-return-value-to-.patch
  * Fixes bz #1946940
- Resolves: bz #1946940</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-13" date="1619611200">- Add 0065-libmultipath-cleanup-code-to-strip-wwid-trailing-spa.patch
- Add 0066-multipathd-add-recheck_wwid-option-to-verify-the-pat.patch
- Add 0067-libmultipath-avoid-infinite-loop-with-bad-vpd-page-8.patch
- Add 0068-libmultipath-fix-priorities-in-parse_vpd_pg83.patch
- Add 0069-RH-make-parse_vpd_pg83-match-scsi_id-output.patch
- Add 0070-multipathd-improve-getting-parent-udevice-in-rescan_.patch
- Add 0071-multipathd-don-t-trigger-uevent-for-partitions-on-ww.patch
  * add recheck_wwid option
  * Fixes bz #1907904
- Resolves: bz #1907904</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-14" date="1626091200">- Add 0072-RH-mpathconf-correctly-handle-spaces-after-option-na.patch
- Resolves: bz #1979470</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-15" date="1626955200">- Add 0073-multipath.conf-fix-typo-in-checker_timeout-descripti.patch
- Resolves: bz #1982598</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-16" date="1626955201">- Add missing patch
- Related: bz #1982598</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-17" date="1627041600">- Add 0074-mpathpersist-fail-commands-when-no-usable-paths-exis.patch
  * Fixes bz #1984723
- Add 0075-multipath-print-warning-if-multipathd-is-not-running.patch
  * Fixes bz #1973592
- Add 0076-multipathd-don-t-access-path-if-it-was-deleted.patch
  * Found by coverity
- Resolves: bz #1973592, #1984723</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-17.1" date="1645099200">- Add 0077-multipathd.socket-add-missing-conditions-from-servic.patch
- Resolves: bz #2054877</changelog>
</package>
<package pkgid="c15d70ad8c0ed37d306774dfeee22a3685860be61399b60e9f7162cd384eae0a" name="kronosnet-debugsource" arch="i686">
  <version epoch="0" ver="1.18" rel="2.el8_4"/>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; - 1.9-2" date="1557835200">add some covscan fixes
  Resolves: rhbz#1688880</changelog>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; - 1.9-3" date="1558440000">Fix kronosnet-tests dependancies and add workaround for dwz crash
  Resolves: rhbz#1688880</changelog>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; - 1.10-1" date="1560340800">Rebase to 1.10 for ACL support
  Resolves: rhbz#1688880</changelog>
  <changelog author="Fabio M. Di Nitto &lt;fdinitto@redhat.com&gt; - 1.10-2" date="1571227200">link: Fix memory corruption when too many up/down events are recorded
  Resolves: rhbz#1753517</changelog>
  <changelog author="Fabio M. Di Nitto &lt;fdinitto@redhat.com&gt; - 1.10-3" date="1571227201">PMTUd: Fix MTU calculation when using crypto
  Resolves: rhbz#1736872
  host: Fix defrag buffer reclaim logic that could cause delivery
        of corrupted data
  ResolveS: rhbz#1761711</changelog>
  <changelog author="Fabio M. Di Nitto &lt;fdinitto@redhat.com&gt; - 1.10-4" date="1571313600">Disable fun_pmtud_crypto_test as it can take several hours to run
  Resolves: rhbz#1736872</changelog>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; - 1.15-1" date="1586952000">Rebase to 1.15
  Resolves: rhbz#1796503</changelog>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; - 1.16-1" date="1588766400">Rebase to 1.16
  Resolves: rhbz#1796503</changelog>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; - 1.18-1" date="1600862400">Rebase to 1.18
  Resolves: rhbz#1855301</changelog>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; - 1.18-2" date="1632916800">Calculate the defrag buffers correctly
  Resolves: rhbz#2008195</changelog>
</package>
<package pkgid="43c8f88acbf511b054e3fea364b01995aed7824abf50e33f4609ab1a8ca0f0bd" name="kronosnet-debugsource" arch="x86_64">
  <version epoch="0" ver="1.18" rel="2.el8_4"/>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; - 1.9-2" date="1557835200">add some covscan fixes
  Resolves: rhbz#1688880</changelog>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; - 1.9-3" date="1558440000">Fix kronosnet-tests dependancies and add workaround for dwz crash
  Resolves: rhbz#1688880</changelog>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; - 1.10-1" date="1560340800">Rebase to 1.10 for ACL support
  Resolves: rhbz#1688880</changelog>
  <changelog author="Fabio M. Di Nitto &lt;fdinitto@redhat.com&gt; - 1.10-2" date="1571227200">link: Fix memory corruption when too many up/down events are recorded
  Resolves: rhbz#1753517</changelog>
  <changelog author="Fabio M. Di Nitto &lt;fdinitto@redhat.com&gt; - 1.10-3" date="1571227201">PMTUd: Fix MTU calculation when using crypto
  Resolves: rhbz#1736872
  host: Fix defrag buffer reclaim logic that could cause delivery
        of corrupted data
  ResolveS: rhbz#1761711</changelog>
  <changelog author="Fabio M. Di Nitto &lt;fdinitto@redhat.com&gt; - 1.10-4" date="1571313600">Disable fun_pmtud_crypto_test as it can take several hours to run
  Resolves: rhbz#1736872</changelog>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; - 1.15-1" date="1586952000">Rebase to 1.15
  Resolves: rhbz#1796503</changelog>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; - 1.16-1" date="1588766400">Rebase to 1.16
  Resolves: rhbz#1796503</changelog>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; - 1.18-1" date="1600862400">Rebase to 1.18
  Resolves: rhbz#1855301</changelog>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; - 1.18-2" date="1632916800">Calculate the defrag buffers correctly
  Resolves: rhbz#2008195</changelog>
</package>
<package pkgid="60047bba54111eb6c1745b33a427388bfa91012c263e4ba20d359c4d63c3cb29" name="kronosnet-debugsource" arch="i686">
  <version epoch="0" ver="1.18" rel="4.el8_5"/>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; - 1.10-1" date="1560340800">Rebase to 1.10 for ACL support
  Resolves: rhbz#1688880</changelog>
  <changelog author="Fabio M. Di Nitto &lt;fdinitto@redhat.com&gt; - 1.10-2" date="1571227200">link: Fix memory corruption when too many up/down events are recorded
  Resolves: rhbz#1753517</changelog>
  <changelog author="Fabio M. Di Nitto &lt;fdinitto@redhat.com&gt; - 1.10-3" date="1571227201">PMTUd: Fix MTU calculation when using crypto
  Resolves: rhbz#1736872
  host: Fix defrag buffer reclaim logic that could cause delivery
        of corrupted data
  ResolveS: rhbz#1761711</changelog>
  <changelog author="Fabio M. Di Nitto &lt;fdinitto@redhat.com&gt; - 1.10-4" date="1571313600">Disable fun_pmtud_crypto_test as it can take several hours to run
  Resolves: rhbz#1736872</changelog>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; - 1.15-1" date="1586952000">Rebase to 1.15
  Resolves: rhbz#1796503</changelog>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; - 1.16-1" date="1588766400">Rebase to 1.16
  Resolves: rhbz#1796503</changelog>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; - 1.18-1" date="1600862400">Rebase to 1.18
  Resolves: rhbz#1855301</changelog>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; - 1.18-3" date="1632916800">Calculate defrag buffers correctly
  Resolves: rhbz#2008196</changelog>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; - 1.18-3" date="1636632000">Rebuild to, hopefully, fix tag error
  Resolves: rhbz#2008196</changelog>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; - 1.18-4" date="1637150400">Revert defrag buffer change
  Resolves: rhbz#2023847</changelog>
</package>
<package pkgid="bfd207a73b699c82424ecff201c226bcc3329b41a4995d4e4afe5b38362d3cf0" name="kronosnet-debugsource" arch="x86_64">
  <version epoch="0" ver="1.18" rel="4.el8_5"/>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; - 1.10-1" date="1560340800">Rebase to 1.10 for ACL support
  Resolves: rhbz#1688880</changelog>
  <changelog author="Fabio M. Di Nitto &lt;fdinitto@redhat.com&gt; - 1.10-2" date="1571227200">link: Fix memory corruption when too many up/down events are recorded
  Resolves: rhbz#1753517</changelog>
  <changelog author="Fabio M. Di Nitto &lt;fdinitto@redhat.com&gt; - 1.10-3" date="1571227201">PMTUd: Fix MTU calculation when using crypto
  Resolves: rhbz#1736872
  host: Fix defrag buffer reclaim logic that could cause delivery
        of corrupted data
  ResolveS: rhbz#1761711</changelog>
  <changelog author="Fabio M. Di Nitto &lt;fdinitto@redhat.com&gt; - 1.10-4" date="1571313600">Disable fun_pmtud_crypto_test as it can take several hours to run
  Resolves: rhbz#1736872</changelog>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; - 1.15-1" date="1586952000">Rebase to 1.15
  Resolves: rhbz#1796503</changelog>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; - 1.16-1" date="1588766400">Rebase to 1.16
  Resolves: rhbz#1796503</changelog>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; - 1.18-1" date="1600862400">Rebase to 1.18
  Resolves: rhbz#1855301</changelog>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; - 1.18-3" date="1632916800">Calculate defrag buffers correctly
  Resolves: rhbz#2008196</changelog>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; - 1.18-3" date="1636632000">Rebuild to, hopefully, fix tag error
  Resolves: rhbz#2008196</changelog>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; - 1.18-4" date="1637150400">Revert defrag buffer change
  Resolves: rhbz#2023847</changelog>
</package>
<package pkgid="c3215d4e8e33b944556eae81ae04f330d94c5978cc351fc340b190fa96fe5bfc" name="libarchive-debuginfo" arch="i686">
  <version epoch="0" ver="3.3.3" rel="3.el8_5"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 3.3.2-3" date="1531915200">- drop use of %ldconfig_scriptlets</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 3.3.2-4" date="1550836800">- fix out-of-bounds read within lha_read_data_none() (CVE-2017-14503)
- fix crash on crafted 7zip archives (CVE-2019-1000019)
- fix infinite loop in ISO9660 (CVE-2019-1000020)</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 3.3.2-5" date="1554206400">- release bump due to gating (#1680768)</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 3.3.2-6" date="1556625600">- fixed use after free in RAR decoder (#1700752)
- fixed double free in RAR decoder (#1700753)</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 3.3.2-7" date="1558958400">- fix use-after-free in delayed newc link processing (#1602575)
- fix a few obvious resource leaks and strcpy() misuses (#1602575)</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 3.3.2-8" date="1579089600">- Fix CVE-2019-18408: RAR use-after-free</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 3.3.2-9" date="1585051200">- Fix out-of-bounds read (CVE-2019-19221) (#1803967)</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 3.3.3-1" date="1588248000">- Rebase to version 3.3.3</changelog>
  <changelog author="Matej Mu&#x17E;ila &lt;mmuzila@redhat.com&gt; - 3.3.3-2" date="1640001600">- Fix handling of symbolic link ACLs (CVE-2021-23177)</changelog>
  <changelog author="Matej Mu&#x17E;ila &lt;mmuzila@redhat.com&gt; - 3.3.3-3" date="1640088000">- Do not follow symlinks when processing the fixup list (CVE-2021-31566)</changelog>
</package>
<package pkgid="86d623c3f9fcb936a088af560646f960be5c7a9f4125f3cc33a312ddd358adda" name="libarchive-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.3.3" rel="3.el8_5"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 3.3.2-3" date="1531915200">- drop use of %ldconfig_scriptlets</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 3.3.2-4" date="1550836800">- fix out-of-bounds read within lha_read_data_none() (CVE-2017-14503)
- fix crash on crafted 7zip archives (CVE-2019-1000019)
- fix infinite loop in ISO9660 (CVE-2019-1000020)</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 3.3.2-5" date="1554206400">- release bump due to gating (#1680768)</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 3.3.2-6" date="1556625600">- fixed use after free in RAR decoder (#1700752)
- fixed double free in RAR decoder (#1700753)</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 3.3.2-7" date="1558958400">- fix use-after-free in delayed newc link processing (#1602575)
- fix a few obvious resource leaks and strcpy() misuses (#1602575)</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 3.3.2-8" date="1579089600">- Fix CVE-2019-18408: RAR use-after-free</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 3.3.2-9" date="1585051200">- Fix out-of-bounds read (CVE-2019-19221) (#1803967)</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 3.3.3-1" date="1588248000">- Rebase to version 3.3.3</changelog>
  <changelog author="Matej Mu&#x17E;ila &lt;mmuzila@redhat.com&gt; - 3.3.3-2" date="1640001600">- Fix handling of symbolic link ACLs (CVE-2021-23177)</changelog>
  <changelog author="Matej Mu&#x17E;ila &lt;mmuzila@redhat.com&gt; - 3.3.3-3" date="1640088000">- Do not follow symlinks when processing the fixup list (CVE-2021-31566)</changelog>
</package>
<package pkgid="7285f8a2ab94cb739cc227b0b154c5f594795c5f59eff1fc2a0166f51525c734" name="libarchive-debugsource" arch="i686">
  <version epoch="0" ver="3.3.3" rel="3.el8_5"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 3.3.2-3" date="1531915200">- drop use of %ldconfig_scriptlets</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 3.3.2-4" date="1550836800">- fix out-of-bounds read within lha_read_data_none() (CVE-2017-14503)
- fix crash on crafted 7zip archives (CVE-2019-1000019)
- fix infinite loop in ISO9660 (CVE-2019-1000020)</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 3.3.2-5" date="1554206400">- release bump due to gating (#1680768)</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 3.3.2-6" date="1556625600">- fixed use after free in RAR decoder (#1700752)
- fixed double free in RAR decoder (#1700753)</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 3.3.2-7" date="1558958400">- fix use-after-free in delayed newc link processing (#1602575)
- fix a few obvious resource leaks and strcpy() misuses (#1602575)</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 3.3.2-8" date="1579089600">- Fix CVE-2019-18408: RAR use-after-free</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 3.3.2-9" date="1585051200">- Fix out-of-bounds read (CVE-2019-19221) (#1803967)</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 3.3.3-1" date="1588248000">- Rebase to version 3.3.3</changelog>
  <changelog author="Matej Mu&#x17E;ila &lt;mmuzila@redhat.com&gt; - 3.3.3-2" date="1640001600">- Fix handling of symbolic link ACLs (CVE-2021-23177)</changelog>
  <changelog author="Matej Mu&#x17E;ila &lt;mmuzila@redhat.com&gt; - 3.3.3-3" date="1640088000">- Do not follow symlinks when processing the fixup list (CVE-2021-31566)</changelog>
</package>
<package pkgid="11fe14d9c0eb3f75bbdd145172264ac0af6c0abc8b5a3be74ae9d8fcd0977660" name="libarchive-debugsource" arch="x86_64">
  <version epoch="0" ver="3.3.3" rel="3.el8_5"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 3.3.2-3" date="1531915200">- drop use of %ldconfig_scriptlets</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 3.3.2-4" date="1550836800">- fix out-of-bounds read within lha_read_data_none() (CVE-2017-14503)
- fix crash on crafted 7zip archives (CVE-2019-1000019)
- fix infinite loop in ISO9660 (CVE-2019-1000020)</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 3.3.2-5" date="1554206400">- release bump due to gating (#1680768)</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 3.3.2-6" date="1556625600">- fixed use after free in RAR decoder (#1700752)
- fixed double free in RAR decoder (#1700753)</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 3.3.2-7" date="1558958400">- fix use-after-free in delayed newc link processing (#1602575)
- fix a few obvious resource leaks and strcpy() misuses (#1602575)</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 3.3.2-8" date="1579089600">- Fix CVE-2019-18408: RAR use-after-free</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 3.3.2-9" date="1585051200">- Fix out-of-bounds read (CVE-2019-19221) (#1803967)</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 3.3.3-1" date="1588248000">- Rebase to version 3.3.3</changelog>
  <changelog author="Matej Mu&#x17E;ila &lt;mmuzila@redhat.com&gt; - 3.3.3-2" date="1640001600">- Fix handling of symbolic link ACLs (CVE-2021-23177)</changelog>
  <changelog author="Matej Mu&#x17E;ila &lt;mmuzila@redhat.com&gt; - 3.3.3-3" date="1640088000">- Do not follow symlinks when processing the fixup list (CVE-2021-31566)</changelog>
</package>
<package pkgid="dcf2d65cd0911b8cb05cae5b10da1c4b74dd8aee264202fb2869a2c34504493c" name="libasan-debuginfo" arch="i686">
  <version epoch="0" ver="8.5.0" rel="4.el8_5"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.3.1-5.2" date="1594814400">- backport aarch64 LSE atomics (#1821994)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.4.1-1" date="1601380800">- update from GCC 8.4 release (#1868446)
- remove symlinks to 32-bit versions of these static libraries: libasan.a,
  libitm.a, libquadmath.a, libubsan.a, libgfortran.a (#1779597)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.4.1-1.1" date="1617969600">- fix bad use of VMAT_CONTIGUOUS (PR tree-optimization/97236, #1925632)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.4.1-1.2" date="1617969601">- back out the PR97236 patch</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.4.1-2" date="1619179200">- update from GCC 8.4 release (#1946758)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.4.1-2.1" date="1619438400">- remove support for demangling GCC 2.x era mangling schemes (#1668394)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-1" date="1620993600">- update from GCC 8.5 release (#1946758)
- this includes a fix for PR target/87839 (#1958295)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-2" date="1622548800">- revert upstream PR85873 gcc-8 fix, apply the fix from gcc-9 (#1960701)
- fix 'this' adjustment for devirtualized call (PR c++/100797, #1965951)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-3" date="1626177600">- fix mangling of lambdas in default args (PR c++/91241, #1981822)
- add a few Provides: bundled</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-4" date="1635508800">- add -Wbidirectional patch (#2008391)</changelog>
</package>
<package pkgid="4cece80379330f828c1ae4636db5bb22d83266961b925d5b26d2ac591f4f3ffe" name="libasan-debuginfo" arch="x86_64">
  <version epoch="0" ver="8.5.0" rel="4.el8_5"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.3.1-5.2" date="1594814400">- backport aarch64 LSE atomics (#1821994)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.4.1-1" date="1601380800">- update from GCC 8.4 release (#1868446)
- remove symlinks to 32-bit versions of these static libraries: libasan.a,
  libitm.a, libquadmath.a, libubsan.a, libgfortran.a (#1779597)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.4.1-1.1" date="1617969600">- fix bad use of VMAT_CONTIGUOUS (PR tree-optimization/97236, #1925632)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.4.1-1.2" date="1617969601">- back out the PR97236 patch</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.4.1-2" date="1619179200">- update from GCC 8.4 release (#1946758)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.4.1-2.1" date="1619438400">- remove support for demangling GCC 2.x era mangling schemes (#1668394)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-1" date="1620993600">- update from GCC 8.5 release (#1946758)
- this includes a fix for PR target/87839 (#1958295)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-2" date="1622548800">- revert upstream PR85873 gcc-8 fix, apply the fix from gcc-9 (#1960701)
- fix 'this' adjustment for devirtualized call (PR c++/100797, #1965951)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-3" date="1626177600">- fix mangling of lambdas in default args (PR c++/91241, #1981822)
- add a few Provides: bundled</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-4" date="1635508800">- add -Wbidirectional patch (#2008391)</changelog>
</package>
<package pkgid="3e367e380fccdb07f9929fe076ff76f260df895b4617186c5cd364a65e8c46e3" name="libatomic-debuginfo" arch="i686">
  <version epoch="0" ver="8.5.0" rel="4.el8_5"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.3.1-5.2" date="1594814400">- backport aarch64 LSE atomics (#1821994)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.4.1-1" date="1601380800">- update from GCC 8.4 release (#1868446)
- remove symlinks to 32-bit versions of these static libraries: libasan.a,
  libitm.a, libquadmath.a, libubsan.a, libgfortran.a (#1779597)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.4.1-1.1" date="1617969600">- fix bad use of VMAT_CONTIGUOUS (PR tree-optimization/97236, #1925632)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.4.1-1.2" date="1617969601">- back out the PR97236 patch</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.4.1-2" date="1619179200">- update from GCC 8.4 release (#1946758)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.4.1-2.1" date="1619438400">- remove support for demangling GCC 2.x era mangling schemes (#1668394)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-1" date="1620993600">- update from GCC 8.5 release (#1946758)
- this includes a fix for PR target/87839 (#1958295)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-2" date="1622548800">- revert upstream PR85873 gcc-8 fix, apply the fix from gcc-9 (#1960701)
- fix 'this' adjustment for devirtualized call (PR c++/100797, #1965951)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-3" date="1626177600">- fix mangling of lambdas in default args (PR c++/91241, #1981822)
- add a few Provides: bundled</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-4" date="1635508800">- add -Wbidirectional patch (#2008391)</changelog>
</package>
<package pkgid="b1818b61bdb334ee4fe8b68001b03d260d2ce75a69e4cfbb46f052c1e166202f" name="libatomic-debuginfo" arch="x86_64">
  <version epoch="0" ver="8.5.0" rel="4.el8_5"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.3.1-5.2" date="1594814400">- backport aarch64 LSE atomics (#1821994)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.4.1-1" date="1601380800">- update from GCC 8.4 release (#1868446)
- remove symlinks to 32-bit versions of these static libraries: libasan.a,
  libitm.a, libquadmath.a, libubsan.a, libgfortran.a (#1779597)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.4.1-1.1" date="1617969600">- fix bad use of VMAT_CONTIGUOUS (PR tree-optimization/97236, #1925632)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.4.1-1.2" date="1617969601">- back out the PR97236 patch</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.4.1-2" date="1619179200">- update from GCC 8.4 release (#1946758)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.4.1-2.1" date="1619438400">- remove support for demangling GCC 2.x era mangling schemes (#1668394)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-1" date="1620993600">- update from GCC 8.5 release (#1946758)
- this includes a fix for PR target/87839 (#1958295)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-2" date="1622548800">- revert upstream PR85873 gcc-8 fix, apply the fix from gcc-9 (#1960701)
- fix 'this' adjustment for devirtualized call (PR c++/100797, #1965951)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-3" date="1626177600">- fix mangling of lambdas in default args (PR c++/91241, #1981822)
- add a few Provides: bundled</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-4" date="1635508800">- add -Wbidirectional patch (#2008391)</changelog>
</package>
<package pkgid="f1214496f3a3a0c979ef7a1428068481d2b8f40888dc38550b56721c1720ee1a" name="libdmmp-debuginfo" arch="i686">
  <version epoch="0" ver="0.8.4" rel="17.el8_5.1"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-7" date="1611748800">- Add 0052-libmultipath-check-for-null-wwid-before-strcmp.patch
  * Missing part of fix for bz #1897815
- Add 0053-libmultipath-make-find_err_path_by_dev-static.patch
- Add 0054-multipathd-avoid-io_err_stat-crash-during-shutdown.patch
- Add 0055-multipathd-avoid-io_err_stat-ABBA-deadlock.patch
- Add 0056-multipathd-use-get_monotonic_time-in-io_err_stat-cod.patch
- Add 0057-multipathd-combine-free_io_err_stat_path-and-destroy.patch
- Add 0058-multipathd-cleanup-logging-for-marginal-paths.patch
  * The above 6 patches fix bz #1920795
- Add 0059-libmpathpersist-fix-thread-safety-of-default-functio.patch
  * Fixes bz #1913549
- Resolves: bz #1897815, #1913549, #1920795</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-9" date="1612958400">- Add 0060-kpartx-free-loop-device-after-listing-partitions.patch
  * Fixes bz #1925490
- Add 0061-RH-fix-find_multipaths-in-mpathconf.patch
  * Fixes bz #1921651
- Resolves: bz #1921651, #1925490</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-11" date="1615550400">- Add 0062-libmultipath-select_action-don-t-drop-map-if-alias-c.patch
  * Fall back to WWID names instead of removing existing device
- Add 0063-libmultipath-check-if-user_friendly_name-is-in-use.patch
  * make sure to choose a user_friendly_name that isn't in use
  * Fixes bz #1937832
- Add alias_clash CI test
- Remove unused multipath.conf
- Resolves: bz #1937832</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-12" date="1619006400">- Add 0064-libmultipath-check-udev_device_get_-return-value-to-.patch
  * Fixes bz #1946940
- Resolves: bz #1946940</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-13" date="1619611200">- Add 0065-libmultipath-cleanup-code-to-strip-wwid-trailing-spa.patch
- Add 0066-multipathd-add-recheck_wwid-option-to-verify-the-pat.patch
- Add 0067-libmultipath-avoid-infinite-loop-with-bad-vpd-page-8.patch
- Add 0068-libmultipath-fix-priorities-in-parse_vpd_pg83.patch
- Add 0069-RH-make-parse_vpd_pg83-match-scsi_id-output.patch
- Add 0070-multipathd-improve-getting-parent-udevice-in-rescan_.patch
- Add 0071-multipathd-don-t-trigger-uevent-for-partitions-on-ww.patch
  * add recheck_wwid option
  * Fixes bz #1907904
- Resolves: bz #1907904</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-14" date="1626091200">- Add 0072-RH-mpathconf-correctly-handle-spaces-after-option-na.patch
- Resolves: bz #1979470</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-15" date="1626955200">- Add 0073-multipath.conf-fix-typo-in-checker_timeout-descripti.patch
- Resolves: bz #1982598</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-16" date="1626955201">- Add missing patch
- Related: bz #1982598</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-17" date="1627041600">- Add 0074-mpathpersist-fail-commands-when-no-usable-paths-exis.patch
  * Fixes bz #1984723
- Add 0075-multipath-print-warning-if-multipathd-is-not-running.patch
  * Fixes bz #1973592
- Add 0076-multipathd-don-t-access-path-if-it-was-deleted.patch
  * Found by coverity
- Resolves: bz #1973592, #1984723</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-17.1" date="1645099200">- Add 0077-multipathd.socket-add-missing-conditions-from-servic.patch
- Resolves: bz #2054877</changelog>
</package>
<package pkgid="0fd142e4e34a1779efed5cff31677a8f60485d2142b214c2d7d23d411b8ac098" name="libdmmp-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.8.4" rel="17.el8_5.1"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-7" date="1611748800">- Add 0052-libmultipath-check-for-null-wwid-before-strcmp.patch
  * Missing part of fix for bz #1897815
- Add 0053-libmultipath-make-find_err_path_by_dev-static.patch
- Add 0054-multipathd-avoid-io_err_stat-crash-during-shutdown.patch
- Add 0055-multipathd-avoid-io_err_stat-ABBA-deadlock.patch
- Add 0056-multipathd-use-get_monotonic_time-in-io_err_stat-cod.patch
- Add 0057-multipathd-combine-free_io_err_stat_path-and-destroy.patch
- Add 0058-multipathd-cleanup-logging-for-marginal-paths.patch
  * The above 6 patches fix bz #1920795
- Add 0059-libmpathpersist-fix-thread-safety-of-default-functio.patch
  * Fixes bz #1913549
- Resolves: bz #1897815, #1913549, #1920795</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-9" date="1612958400">- Add 0060-kpartx-free-loop-device-after-listing-partitions.patch
  * Fixes bz #1925490
- Add 0061-RH-fix-find_multipaths-in-mpathconf.patch
  * Fixes bz #1921651
- Resolves: bz #1921651, #1925490</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-11" date="1615550400">- Add 0062-libmultipath-select_action-don-t-drop-map-if-alias-c.patch
  * Fall back to WWID names instead of removing existing device
- Add 0063-libmultipath-check-if-user_friendly_name-is-in-use.patch
  * make sure to choose a user_friendly_name that isn't in use
  * Fixes bz #1937832
- Add alias_clash CI test
- Remove unused multipath.conf
- Resolves: bz #1937832</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-12" date="1619006400">- Add 0064-libmultipath-check-udev_device_get_-return-value-to-.patch
  * Fixes bz #1946940
- Resolves: bz #1946940</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-13" date="1619611200">- Add 0065-libmultipath-cleanup-code-to-strip-wwid-trailing-spa.patch
- Add 0066-multipathd-add-recheck_wwid-option-to-verify-the-pat.patch
- Add 0067-libmultipath-avoid-infinite-loop-with-bad-vpd-page-8.patch
- Add 0068-libmultipath-fix-priorities-in-parse_vpd_pg83.patch
- Add 0069-RH-make-parse_vpd_pg83-match-scsi_id-output.patch
- Add 0070-multipathd-improve-getting-parent-udevice-in-rescan_.patch
- Add 0071-multipathd-don-t-trigger-uevent-for-partitions-on-ww.patch
  * add recheck_wwid option
  * Fixes bz #1907904
- Resolves: bz #1907904</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-14" date="1626091200">- Add 0072-RH-mpathconf-correctly-handle-spaces-after-option-na.patch
- Resolves: bz #1979470</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-15" date="1626955200">- Add 0073-multipath.conf-fix-typo-in-checker_timeout-descripti.patch
- Resolves: bz #1982598</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-16" date="1626955201">- Add missing patch
- Related: bz #1982598</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-17" date="1627041600">- Add 0074-mpathpersist-fail-commands-when-no-usable-paths-exis.patch
  * Fixes bz #1984723
- Add 0075-multipath-print-warning-if-multipathd-is-not-running.patch
  * Fixes bz #1973592
- Add 0076-multipathd-don-t-access-path-if-it-was-deleted.patch
  * Found by coverity
- Resolves: bz #1973592, #1984723</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-17.1" date="1645099200">- Add 0077-multipathd.socket-add-missing-conditions-from-servic.patch
- Resolves: bz #2054877</changelog>
</package>
<package pkgid="8da3eb7b47f092b96cacc81107dda7641c72b842ca8792f51be574dfe5f0bc67" name="libgcc-debuginfo" arch="i686">
  <version epoch="0" ver="8.5.0" rel="4.el8_5"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.3.1-5.2" date="1594814400">- backport aarch64 LSE atomics (#1821994)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.4.1-1" date="1601380800">- update from GCC 8.4 release (#1868446)
- remove symlinks to 32-bit versions of these static libraries: libasan.a,
  libitm.a, libquadmath.a, libubsan.a, libgfortran.a (#1779597)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.4.1-1.1" date="1617969600">- fix bad use of VMAT_CONTIGUOUS (PR tree-optimization/97236, #1925632)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.4.1-1.2" date="1617969601">- back out the PR97236 patch</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.4.1-2" date="1619179200">- update from GCC 8.4 release (#1946758)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.4.1-2.1" date="1619438400">- remove support for demangling GCC 2.x era mangling schemes (#1668394)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-1" date="1620993600">- update from GCC 8.5 release (#1946758)
- this includes a fix for PR target/87839 (#1958295)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-2" date="1622548800">- revert upstream PR85873 gcc-8 fix, apply the fix from gcc-9 (#1960701)
- fix 'this' adjustment for devirtualized call (PR c++/100797, #1965951)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-3" date="1626177600">- fix mangling of lambdas in default args (PR c++/91241, #1981822)
- add a few Provides: bundled</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-4" date="1635508800">- add -Wbidirectional patch (#2008391)</changelog>
</package>
<package pkgid="ddb0e818ffc08873dadba2d2e83c01570a9b06ba7c297428a6291b8558761f00" name="libgcc-debuginfo" arch="x86_64">
  <version epoch="0" ver="8.5.0" rel="4.el8_5"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.3.1-5.2" date="1594814400">- backport aarch64 LSE atomics (#1821994)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.4.1-1" date="1601380800">- update from GCC 8.4 release (#1868446)
- remove symlinks to 32-bit versions of these static libraries: libasan.a,
  libitm.a, libquadmath.a, libubsan.a, libgfortran.a (#1779597)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.4.1-1.1" date="1617969600">- fix bad use of VMAT_CONTIGUOUS (PR tree-optimization/97236, #1925632)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.4.1-1.2" date="1617969601">- back out the PR97236 patch</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.4.1-2" date="1619179200">- update from GCC 8.4 release (#1946758)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.4.1-2.1" date="1619438400">- remove support for demangling GCC 2.x era mangling schemes (#1668394)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-1" date="1620993600">- update from GCC 8.5 release (#1946758)
- this includes a fix for PR target/87839 (#1958295)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-2" date="1622548800">- revert upstream PR85873 gcc-8 fix, apply the fix from gcc-9 (#1960701)
- fix 'this' adjustment for devirtualized call (PR c++/100797, #1965951)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-3" date="1626177600">- fix mangling of lambdas in default args (PR c++/91241, #1981822)
- add a few Provides: bundled</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-4" date="1635508800">- add -Wbidirectional patch (#2008391)</changelog>
</package>
<package pkgid="0ce857733c5efc7ad534fe3b1ffdf831808d90b4ffd09b43db9c33282593e418" name="libgfortran-debuginfo" arch="i686">
  <version epoch="0" ver="8.5.0" rel="4.el8_5"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.3.1-5.2" date="1594814400">- backport aarch64 LSE atomics (#1821994)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.4.1-1" date="1601380800">- update from GCC 8.4 release (#1868446)
- remove symlinks to 32-bit versions of these static libraries: libasan.a,
  libitm.a, libquadmath.a, libubsan.a, libgfortran.a (#1779597)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.4.1-1.1" date="1617969600">- fix bad use of VMAT_CONTIGUOUS (PR tree-optimization/97236, #1925632)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.4.1-1.2" date="1617969601">- back out the PR97236 patch</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.4.1-2" date="1619179200">- update from GCC 8.4 release (#1946758)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.4.1-2.1" date="1619438400">- remove support for demangling GCC 2.x era mangling schemes (#1668394)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-1" date="1620993600">- update from GCC 8.5 release (#1946758)
- this includes a fix for PR target/87839 (#1958295)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-2" date="1622548800">- revert upstream PR85873 gcc-8 fix, apply the fix from gcc-9 (#1960701)
- fix 'this' adjustment for devirtualized call (PR c++/100797, #1965951)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-3" date="1626177600">- fix mangling of lambdas in default args (PR c++/91241, #1981822)
- add a few Provides: bundled</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-4" date="1635508800">- add -Wbidirectional patch (#2008391)</changelog>
</package>
<package pkgid="a516cc29656ba8f03a08295ddf11349e61315e10ce2b0da16a40c2a4771b975f" name="libgfortran-debuginfo" arch="x86_64">
  <version epoch="0" ver="8.5.0" rel="4.el8_5"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.3.1-5.2" date="1594814400">- backport aarch64 LSE atomics (#1821994)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.4.1-1" date="1601380800">- update from GCC 8.4 release (#1868446)
- remove symlinks to 32-bit versions of these static libraries: libasan.a,
  libitm.a, libquadmath.a, libubsan.a, libgfortran.a (#1779597)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.4.1-1.1" date="1617969600">- fix bad use of VMAT_CONTIGUOUS (PR tree-optimization/97236, #1925632)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.4.1-1.2" date="1617969601">- back out the PR97236 patch</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.4.1-2" date="1619179200">- update from GCC 8.4 release (#1946758)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.4.1-2.1" date="1619438400">- remove support for demangling GCC 2.x era mangling schemes (#1668394)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-1" date="1620993600">- update from GCC 8.5 release (#1946758)
- this includes a fix for PR target/87839 (#1958295)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-2" date="1622548800">- revert upstream PR85873 gcc-8 fix, apply the fix from gcc-9 (#1960701)
- fix 'this' adjustment for devirtualized call (PR c++/100797, #1965951)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-3" date="1626177600">- fix mangling of lambdas in default args (PR c++/91241, #1981822)
- add a few Provides: bundled</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-4" date="1635508800">- add -Wbidirectional patch (#2008391)</changelog>
</package>
<package pkgid="f9e0beeb87351effab976d7979f56099648fb3989c5a93c8e1a45ab5e6fa1739" name="libgomp-debuginfo" arch="i686">
  <version epoch="0" ver="8.5.0" rel="4.el8_5"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.3.1-5.2" date="1594814400">- backport aarch64 LSE atomics (#1821994)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.4.1-1" date="1601380800">- update from GCC 8.4 release (#1868446)
- remove symlinks to 32-bit versions of these static libraries: libasan.a,
  libitm.a, libquadmath.a, libubsan.a, libgfortran.a (#1779597)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.4.1-1.1" date="1617969600">- fix bad use of VMAT_CONTIGUOUS (PR tree-optimization/97236, #1925632)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.4.1-1.2" date="1617969601">- back out the PR97236 patch</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.4.1-2" date="1619179200">- update from GCC 8.4 release (#1946758)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.4.1-2.1" date="1619438400">- remove support for demangling GCC 2.x era mangling schemes (#1668394)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-1" date="1620993600">- update from GCC 8.5 release (#1946758)
- this includes a fix for PR target/87839 (#1958295)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-2" date="1622548800">- revert upstream PR85873 gcc-8 fix, apply the fix from gcc-9 (#1960701)
- fix 'this' adjustment for devirtualized call (PR c++/100797, #1965951)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-3" date="1626177600">- fix mangling of lambdas in default args (PR c++/91241, #1981822)
- add a few Provides: bundled</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-4" date="1635508800">- add -Wbidirectional patch (#2008391)</changelog>
</package>
<package pkgid="d5ad7fadca945da310b7758be90d6a00d0f15c9d6cd8864abf5f10f69504d948" name="libgomp-debuginfo" arch="x86_64">
  <version epoch="0" ver="8.5.0" rel="4.el8_5"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.3.1-5.2" date="1594814400">- backport aarch64 LSE atomics (#1821994)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.4.1-1" date="1601380800">- update from GCC 8.4 release (#1868446)
- remove symlinks to 32-bit versions of these static libraries: libasan.a,
  libitm.a, libquadmath.a, libubsan.a, libgfortran.a (#1779597)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.4.1-1.1" date="1617969600">- fix bad use of VMAT_CONTIGUOUS (PR tree-optimization/97236, #1925632)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.4.1-1.2" date="1617969601">- back out the PR97236 patch</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.4.1-2" date="1619179200">- update from GCC 8.4 release (#1946758)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.4.1-2.1" date="1619438400">- remove support for demangling GCC 2.x era mangling schemes (#1668394)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-1" date="1620993600">- update from GCC 8.5 release (#1946758)
- this includes a fix for PR target/87839 (#1958295)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-2" date="1622548800">- revert upstream PR85873 gcc-8 fix, apply the fix from gcc-9 (#1960701)
- fix 'this' adjustment for devirtualized call (PR c++/100797, #1965951)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-3" date="1626177600">- fix mangling of lambdas in default args (PR c++/91241, #1981822)
- add a few Provides: bundled</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-4" date="1635508800">- add -Wbidirectional patch (#2008391)</changelog>
</package>
<package pkgid="eb781995eccde2aa48c2de2921aa3c91557372f4a29c7d1db237d7b0e5843a44" name="libgomp-offload-nvptx-debuginfo" arch="x86_64">
  <version epoch="0" ver="8.5.0" rel="4.el8_5"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.3.1-5.2" date="1594814400">- backport aarch64 LSE atomics (#1821994)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.4.1-1" date="1601380800">- update from GCC 8.4 release (#1868446)
- remove symlinks to 32-bit versions of these static libraries: libasan.a,
  libitm.a, libquadmath.a, libubsan.a, libgfortran.a (#1779597)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.4.1-1.1" date="1617969600">- fix bad use of VMAT_CONTIGUOUS (PR tree-optimization/97236, #1925632)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.4.1-1.2" date="1617969601">- back out the PR97236 patch</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.4.1-2" date="1619179200">- update from GCC 8.4 release (#1946758)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.4.1-2.1" date="1619438400">- remove support for demangling GCC 2.x era mangling schemes (#1668394)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-1" date="1620993600">- update from GCC 8.5 release (#1946758)
- this includes a fix for PR target/87839 (#1958295)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-2" date="1622548800">- revert upstream PR85873 gcc-8 fix, apply the fix from gcc-9 (#1960701)
- fix 'this' adjustment for devirtualized call (PR c++/100797, #1965951)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-3" date="1626177600">- fix mangling of lambdas in default args (PR c++/91241, #1981822)
- add a few Provides: bundled</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-4" date="1635508800">- add -Wbidirectional patch (#2008391)</changelog>
</package>
<package pkgid="d92f17cdaef865efa359db9f5cc8f19ce70894040a937b723dd4754634a8d180" name="libipa_hbac-debuginfo" arch="i686">
  <version epoch="0" ver="2.5.2" rel="2.el8_5.1"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-5" date="1609156800">- Resolves: rhbz#1631410 - Can't login with smartcard with multiple certs having same ID value
- Resolves: rhbz#1884213 - [RFE] add offline_timeout_max config option to control offline interval backoff (additional patches)
- Resolves: rhbz#1893159 - Default debug level should report all errors / failures
- Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-6" date="1610971200">- Resolves: rhbz#1113639 - autofs: return a connection failure until maps have been fetched
- Resolves: rhbz#1915395 - Memory leak in the simple access provider
- Resolves: rhbz#1915319 - SSSD: SBUS: failures during servers startup
- Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication (additional patches)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-7" date="1611662400">- Resolves: rhbz#1920001 - Do not add '%' to group names already prefixed with '%' in IPA sudo rules
- Resolves: rhbz#1918433 - sssd unable to lookup certmap rules
- Resolves: rhbz#1917382 - [abrt] [faf] sssd: dp_client_handshake_timeout(): /usr/libexec/sssd/sssd_be killed by 11</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-8" date="1613131200">- Resolves: rhbz#1926622 - Add support to verify authentication indicators in pam_sss_gss
- Resolves: rhbz#1926454 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0.
- Resolves: rhbz#1893159 - Default debug level should report all errors / failures (additional patch)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.0-1" date="1620648000">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1930535 - [abrt] [faf] sssd: monitor_service_shutdown(): /usr/sbin/sssd killed by 11
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1945888 - Inconsistant debug level for connection logging
- Resolves: rhbz#1948657 - pam_sss_gss.so doesn't work with large kerberos tickets
- Resolves: rhbz#1949149 - [RFE] Poor man's backtrace
- Resolves: rhbz#1920500 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR
- Resolves: rhbz#1923964 - [RFE] SSSD Error Msg Improvement: write_krb5info_file failed, authentication might fail.
- Resolves: rhbz#1928648 - SSSD logs improvements: clarify which config option applies to each timeout in the logs
- Resolves: rhbz#1632159 - sssd-kcm starts successfully for non existent socket_path
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm
- Resolves: rhbz#1925505 - [RFE] improve the sssd refresh timers for SUDO queries
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1925561 - sssd-ldap(5) does not report how to disable the SUDO smart queries
- Resolves: rhbz#1925621 - document impact of indices and of scope on performance of LDAP queries
- Resolves: rhbz#1855320 - [RFE] RHEL8 sssd: inheritance of the case_sensitive parameter for subdomains.
- Resolves: rhbz#1925608 - [RFE] make 'random_offset' addon to 'offline_timeout' option configurable
- Resolves: rhbz#1447945 - man page / docs update required: if two certificate matching rules with the same priority match only one is used
- Resolves: rhbz#1703436 - sssd not thread-safe in innetgr()
- Resolves: rhbz#1713143 - SSSD does not translate the 2FA text labels("first factor" / "second factor") on GDM login and screensaver unlock screen
- Resolves: rhbz#1888977 - sss_override: Usage limitations clarification in man page
- Resolves: rhbz#1890177 - Clarify "single_prompt" option in "PROMPTING CONFIGURATION SECTION" section of sssd.conf man page
- Resolves: rhbz#1902280 - fix sss_cache to also reset cached timestamp
- Resolves: rhbz#1935683 - SSSD not detecting subdomain from AD forest (RHEL 8.3)
- Resolves: rhbz#1937919 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7
- Resolves: rhbz#1944665 - No gpo found and ad_gpo_implicit_deny set to True still permits user login
- Resolves: rhbz#1919942 - sss_override does not take precedence over override_homedir directive</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-1" date="1623153600">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1917444 - SSSD Error Msg Improvement: Server resolution failed: [2]: No such file or directory
- Resolves: rhbz#1917511 - SSSD Error Msg Improvement: Failed to resolve server 'server.example.com': Error reading file
- Resolves: rhbz#1917535 - sssd.conf man page: parameter dns_resolver_server_timeout and dns_resolver_op_timeout
- Resolves: rhbz#1940509 - [RFE] Health and Support Analyzer: Link frontend to backend requests
- Resolves: rhbz#1649464 - auto_private_groups not working as expected with posix ipa/ad trust
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1961215 - Invalid sssd-kcm return code if requested operation is not found
- Resolves: rhbz#1837090 - SSSD fails nss_getby_name for IPA user with SID if the user has user private group
- Resolves: rhbz#1879869 - sudo commands incorrectly exports the KRB5CCNAME environment variable
- Resolves: rhbz#1962550 - sss_pac_make_request fails on systems joined to Active Directory.
- Resolves: rhbz#1737489 - [RFE] SSSD should honor default Kerberos settings (keytab name) in /etc/krb5.conf</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-2" date="1624276800">- Resolves: rhbz#1974257 - 'debug_microseconds' config option is broken
- Resolves: rhbz#1936902 - SSSD Error Msg Improvement: Invalid argument
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm (additional patches and rebuild)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-1" date="1626091200">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1693379 - sssd_be and sss_cache too heavy on CPU
- Resolves: rhbz#1909373 - Missing search index for `originalADgidNumber`
- Resolves: rhbz#1954630 - [RFE] Improve debug messages by adding a unique tag for each request the backend is handling
- Resolves: rhbz#1936891 - SSSD Error Msg Improvement: Bad address
- Resolves: rhbz#1364596 - sssd still showing ipa user after removed from last group
- Resolves: rhbz#1979404 - Changes made to /etc/pam.d/sssd-shadowutils are overwritten back to default on sssd-common package upgrade</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2" date="1627905600">- Resolves: rhbz#1975169 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-8]
- Resolves: rhbz#1962042 - [sssd] RHEL 8.5 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.1" date="1634558400">- Resolves: rhbz#2014460 - tps tests fail with cross dependency on sssd debuginfo package: removal of 'sssd-libwbclient-debuginfo' is missing [rhel-8.5.0.z]</changelog>
</package>
<package pkgid="9fc3a74feef801bcb814a7e0c0ee6d3e5999b2676b1c9ff067ac38b56ebe9c93" name="libipa_hbac-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="2.el8_5.1"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-5" date="1609156800">- Resolves: rhbz#1631410 - Can't login with smartcard with multiple certs having same ID value
- Resolves: rhbz#1884213 - [RFE] add offline_timeout_max config option to control offline interval backoff (additional patches)
- Resolves: rhbz#1893159 - Default debug level should report all errors / failures
- Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-6" date="1610971200">- Resolves: rhbz#1113639 - autofs: return a connection failure until maps have been fetched
- Resolves: rhbz#1915395 - Memory leak in the simple access provider
- Resolves: rhbz#1915319 - SSSD: SBUS: failures during servers startup
- Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication (additional patches)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-7" date="1611662400">- Resolves: rhbz#1920001 - Do not add '%' to group names already prefixed with '%' in IPA sudo rules
- Resolves: rhbz#1918433 - sssd unable to lookup certmap rules
- Resolves: rhbz#1917382 - [abrt] [faf] sssd: dp_client_handshake_timeout(): /usr/libexec/sssd/sssd_be killed by 11</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-8" date="1613131200">- Resolves: rhbz#1926622 - Add support to verify authentication indicators in pam_sss_gss
- Resolves: rhbz#1926454 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0.
- Resolves: rhbz#1893159 - Default debug level should report all errors / failures (additional patch)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.0-1" date="1620648000">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1930535 - [abrt] [faf] sssd: monitor_service_shutdown(): /usr/sbin/sssd killed by 11
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1945888 - Inconsistant debug level for connection logging
- Resolves: rhbz#1948657 - pam_sss_gss.so doesn't work with large kerberos tickets
- Resolves: rhbz#1949149 - [RFE] Poor man's backtrace
- Resolves: rhbz#1920500 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR
- Resolves: rhbz#1923964 - [RFE] SSSD Error Msg Improvement: write_krb5info_file failed, authentication might fail.
- Resolves: rhbz#1928648 - SSSD logs improvements: clarify which config option applies to each timeout in the logs
- Resolves: rhbz#1632159 - sssd-kcm starts successfully for non existent socket_path
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm
- Resolves: rhbz#1925505 - [RFE] improve the sssd refresh timers for SUDO queries
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1925561 - sssd-ldap(5) does not report how to disable the SUDO smart queries
- Resolves: rhbz#1925621 - document impact of indices and of scope on performance of LDAP queries
- Resolves: rhbz#1855320 - [RFE] RHEL8 sssd: inheritance of the case_sensitive parameter for subdomains.
- Resolves: rhbz#1925608 - [RFE] make 'random_offset' addon to 'offline_timeout' option configurable
- Resolves: rhbz#1447945 - man page / docs update required: if two certificate matching rules with the same priority match only one is used
- Resolves: rhbz#1703436 - sssd not thread-safe in innetgr()
- Resolves: rhbz#1713143 - SSSD does not translate the 2FA text labels("first factor" / "second factor") on GDM login and screensaver unlock screen
- Resolves: rhbz#1888977 - sss_override: Usage limitations clarification in man page
- Resolves: rhbz#1890177 - Clarify "single_prompt" option in "PROMPTING CONFIGURATION SECTION" section of sssd.conf man page
- Resolves: rhbz#1902280 - fix sss_cache to also reset cached timestamp
- Resolves: rhbz#1935683 - SSSD not detecting subdomain from AD forest (RHEL 8.3)
- Resolves: rhbz#1937919 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7
- Resolves: rhbz#1944665 - No gpo found and ad_gpo_implicit_deny set to True still permits user login
- Resolves: rhbz#1919942 - sss_override does not take precedence over override_homedir directive</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-1" date="1623153600">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1917444 - SSSD Error Msg Improvement: Server resolution failed: [2]: No such file or directory
- Resolves: rhbz#1917511 - SSSD Error Msg Improvement: Failed to resolve server 'server.example.com': Error reading file
- Resolves: rhbz#1917535 - sssd.conf man page: parameter dns_resolver_server_timeout and dns_resolver_op_timeout
- Resolves: rhbz#1940509 - [RFE] Health and Support Analyzer: Link frontend to backend requests
- Resolves: rhbz#1649464 - auto_private_groups not working as expected with posix ipa/ad trust
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1961215 - Invalid sssd-kcm return code if requested operation is not found
- Resolves: rhbz#1837090 - SSSD fails nss_getby_name for IPA user with SID if the user has user private group
- Resolves: rhbz#1879869 - sudo commands incorrectly exports the KRB5CCNAME environment variable
- Resolves: rhbz#1962550 - sss_pac_make_request fails on systems joined to Active Directory.
- Resolves: rhbz#1737489 - [RFE] SSSD should honor default Kerberos settings (keytab name) in /etc/krb5.conf</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-2" date="1624276800">- Resolves: rhbz#1974257 - 'debug_microseconds' config option is broken
- Resolves: rhbz#1936902 - SSSD Error Msg Improvement: Invalid argument
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm (additional patches and rebuild)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-1" date="1626091200">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1693379 - sssd_be and sss_cache too heavy on CPU
- Resolves: rhbz#1909373 - Missing search index for `originalADgidNumber`
- Resolves: rhbz#1954630 - [RFE] Improve debug messages by adding a unique tag for each request the backend is handling
- Resolves: rhbz#1936891 - SSSD Error Msg Improvement: Bad address
- Resolves: rhbz#1364596 - sssd still showing ipa user after removed from last group
- Resolves: rhbz#1979404 - Changes made to /etc/pam.d/sssd-shadowutils are overwritten back to default on sssd-common package upgrade</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2" date="1627905600">- Resolves: rhbz#1975169 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-8]
- Resolves: rhbz#1962042 - [sssd] RHEL 8.5 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.1" date="1634558400">- Resolves: rhbz#2014460 - tps tests fail with cross dependency on sssd debuginfo package: removal of 'sssd-libwbclient-debuginfo' is missing [rhel-8.5.0.z]</changelog>
</package>
<package pkgid="a9825e68deca9e508292925c242b8f933cab32a41955861ac4f7b1fefec21ed8" name="libipa_hbac-debuginfo" arch="i686">
  <version epoch="0" ver="2.5.2" rel="2.el8_5.3"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-7" date="1611662400">- Resolves: rhbz#1920001 - Do not add '%' to group names already prefixed with '%' in IPA sudo rules
- Resolves: rhbz#1918433 - sssd unable to lookup certmap rules
- Resolves: rhbz#1917382 - [abrt] [faf] sssd: dp_client_handshake_timeout(): /usr/libexec/sssd/sssd_be killed by 11</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-8" date="1613131200">- Resolves: rhbz#1926622 - Add support to verify authentication indicators in pam_sss_gss
- Resolves: rhbz#1926454 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0.
- Resolves: rhbz#1893159 - Default debug level should report all errors / failures (additional patch)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.0-1" date="1620648000">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1930535 - [abrt] [faf] sssd: monitor_service_shutdown(): /usr/sbin/sssd killed by 11
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1945888 - Inconsistant debug level for connection logging
- Resolves: rhbz#1948657 - pam_sss_gss.so doesn't work with large kerberos tickets
- Resolves: rhbz#1949149 - [RFE] Poor man's backtrace
- Resolves: rhbz#1920500 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR
- Resolves: rhbz#1923964 - [RFE] SSSD Error Msg Improvement: write_krb5info_file failed, authentication might fail.
- Resolves: rhbz#1928648 - SSSD logs improvements: clarify which config option applies to each timeout in the logs
- Resolves: rhbz#1632159 - sssd-kcm starts successfully for non existent socket_path
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm
- Resolves: rhbz#1925505 - [RFE] improve the sssd refresh timers for SUDO queries
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1925561 - sssd-ldap(5) does not report how to disable the SUDO smart queries
- Resolves: rhbz#1925621 - document impact of indices and of scope on performance of LDAP queries
- Resolves: rhbz#1855320 - [RFE] RHEL8 sssd: inheritance of the case_sensitive parameter for subdomains.
- Resolves: rhbz#1925608 - [RFE] make 'random_offset' addon to 'offline_timeout' option configurable
- Resolves: rhbz#1447945 - man page / docs update required: if two certificate matching rules with the same priority match only one is used
- Resolves: rhbz#1703436 - sssd not thread-safe in innetgr()
- Resolves: rhbz#1713143 - SSSD does not translate the 2FA text labels("first factor" / "second factor") on GDM login and screensaver unlock screen
- Resolves: rhbz#1888977 - sss_override: Usage limitations clarification in man page
- Resolves: rhbz#1890177 - Clarify "single_prompt" option in "PROMPTING CONFIGURATION SECTION" section of sssd.conf man page
- Resolves: rhbz#1902280 - fix sss_cache to also reset cached timestamp
- Resolves: rhbz#1935683 - SSSD not detecting subdomain from AD forest (RHEL 8.3)
- Resolves: rhbz#1937919 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7
- Resolves: rhbz#1944665 - No gpo found and ad_gpo_implicit_deny set to True still permits user login
- Resolves: rhbz#1919942 - sss_override does not take precedence over override_homedir directive</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-1" date="1623153600">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1917444 - SSSD Error Msg Improvement: Server resolution failed: [2]: No such file or directory
- Resolves: rhbz#1917511 - SSSD Error Msg Improvement: Failed to resolve server 'server.example.com': Error reading file
- Resolves: rhbz#1917535 - sssd.conf man page: parameter dns_resolver_server_timeout and dns_resolver_op_timeout
- Resolves: rhbz#1940509 - [RFE] Health and Support Analyzer: Link frontend to backend requests
- Resolves: rhbz#1649464 - auto_private_groups not working as expected with posix ipa/ad trust
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1961215 - Invalid sssd-kcm return code if requested operation is not found
- Resolves: rhbz#1837090 - SSSD fails nss_getby_name for IPA user with SID if the user has user private group
- Resolves: rhbz#1879869 - sudo commands incorrectly exports the KRB5CCNAME environment variable
- Resolves: rhbz#1962550 - sss_pac_make_request fails on systems joined to Active Directory.
- Resolves: rhbz#1737489 - [RFE] SSSD should honor default Kerberos settings (keytab name) in /etc/krb5.conf</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-2" date="1624276800">- Resolves: rhbz#1974257 - 'debug_microseconds' config option is broken
- Resolves: rhbz#1936902 - SSSD Error Msg Improvement: Invalid argument
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm (additional patches and rebuild)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-1" date="1626091200">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1693379 - sssd_be and sss_cache too heavy on CPU
- Resolves: rhbz#1909373 - Missing search index for `originalADgidNumber`
- Resolves: rhbz#1954630 - [RFE] Improve debug messages by adding a unique tag for each request the backend is handling
- Resolves: rhbz#1936891 - SSSD Error Msg Improvement: Bad address
- Resolves: rhbz#1364596 - sssd still showing ipa user after removed from last group
- Resolves: rhbz#1979404 - Changes made to /etc/pam.d/sssd-shadowutils are overwritten back to default on sssd-common package upgrade</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2" date="1627905600">- Resolves: rhbz#1975169 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-8]
- Resolves: rhbz#1962042 - [sssd] RHEL 8.5 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.1" date="1634558400">- Resolves: rhbz#2014460 - tps tests fail with cross dependency on sssd debuginfo package: removal of 'sssd-libwbclient-debuginfo' is missing [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.2" date="1638187200">- Resolves: rhbz#2018440 - 2.5.x based SSSD adds more AD domains than it should based on the configuration file (not trusted and from a different forest) [rhel-8.5.0.z]
- Resolves: rhbz#2016923 - autofs lookups for unknown mounts are delayed for 50s [rhel-8.5.0.z]
- Resolves: rhbz#2021499 - Make backtrace less "chatty" (avoid duplicate backtraces) [rhel-8.5.0.z]
- Resolves: rhbz#2013379 - Lookup with fully-qualified name does not work with 'cache_first = True' [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.3" date="1638878400">- Resolves: rhbz#2028828 - pam responder does not call initgroups to refresh the user entry [rhel-8.5.0.z]</changelog>
</package>
<package pkgid="201513dc86dc03730b631feb78db1f535efde771be719f0c572623b68df65c3b" name="libipa_hbac-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="2.el8_5.3"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-7" date="1611662400">- Resolves: rhbz#1920001 - Do not add '%' to group names already prefixed with '%' in IPA sudo rules
- Resolves: rhbz#1918433 - sssd unable to lookup certmap rules
- Resolves: rhbz#1917382 - [abrt] [faf] sssd: dp_client_handshake_timeout(): /usr/libexec/sssd/sssd_be killed by 11</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-8" date="1613131200">- Resolves: rhbz#1926622 - Add support to verify authentication indicators in pam_sss_gss
- Resolves: rhbz#1926454 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0.
- Resolves: rhbz#1893159 - Default debug level should report all errors / failures (additional patch)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.0-1" date="1620648000">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1930535 - [abrt] [faf] sssd: monitor_service_shutdown(): /usr/sbin/sssd killed by 11
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1945888 - Inconsistant debug level for connection logging
- Resolves: rhbz#1948657 - pam_sss_gss.so doesn't work with large kerberos tickets
- Resolves: rhbz#1949149 - [RFE] Poor man's backtrace
- Resolves: rhbz#1920500 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR
- Resolves: rhbz#1923964 - [RFE] SSSD Error Msg Improvement: write_krb5info_file failed, authentication might fail.
- Resolves: rhbz#1928648 - SSSD logs improvements: clarify which config option applies to each timeout in the logs
- Resolves: rhbz#1632159 - sssd-kcm starts successfully for non existent socket_path
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm
- Resolves: rhbz#1925505 - [RFE] improve the sssd refresh timers for SUDO queries
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1925561 - sssd-ldap(5) does not report how to disable the SUDO smart queries
- Resolves: rhbz#1925621 - document impact of indices and of scope on performance of LDAP queries
- Resolves: rhbz#1855320 - [RFE] RHEL8 sssd: inheritance of the case_sensitive parameter for subdomains.
- Resolves: rhbz#1925608 - [RFE] make 'random_offset' addon to 'offline_timeout' option configurable
- Resolves: rhbz#1447945 - man page / docs update required: if two certificate matching rules with the same priority match only one is used
- Resolves: rhbz#1703436 - sssd not thread-safe in innetgr()
- Resolves: rhbz#1713143 - SSSD does not translate the 2FA text labels("first factor" / "second factor") on GDM login and screensaver unlock screen
- Resolves: rhbz#1888977 - sss_override: Usage limitations clarification in man page
- Resolves: rhbz#1890177 - Clarify "single_prompt" option in "PROMPTING CONFIGURATION SECTION" section of sssd.conf man page
- Resolves: rhbz#1902280 - fix sss_cache to also reset cached timestamp
- Resolves: rhbz#1935683 - SSSD not detecting subdomain from AD forest (RHEL 8.3)
- Resolves: rhbz#1937919 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7
- Resolves: rhbz#1944665 - No gpo found and ad_gpo_implicit_deny set to True still permits user login
- Resolves: rhbz#1919942 - sss_override does not take precedence over override_homedir directive</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-1" date="1623153600">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1917444 - SSSD Error Msg Improvement: Server resolution failed: [2]: No such file or directory
- Resolves: rhbz#1917511 - SSSD Error Msg Improvement: Failed to resolve server 'server.example.com': Error reading file
- Resolves: rhbz#1917535 - sssd.conf man page: parameter dns_resolver_server_timeout and dns_resolver_op_timeout
- Resolves: rhbz#1940509 - [RFE] Health and Support Analyzer: Link frontend to backend requests
- Resolves: rhbz#1649464 - auto_private_groups not working as expected with posix ipa/ad trust
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1961215 - Invalid sssd-kcm return code if requested operation is not found
- Resolves: rhbz#1837090 - SSSD fails nss_getby_name for IPA user with SID if the user has user private group
- Resolves: rhbz#1879869 - sudo commands incorrectly exports the KRB5CCNAME environment variable
- Resolves: rhbz#1962550 - sss_pac_make_request fails on systems joined to Active Directory.
- Resolves: rhbz#1737489 - [RFE] SSSD should honor default Kerberos settings (keytab name) in /etc/krb5.conf</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-2" date="1624276800">- Resolves: rhbz#1974257 - 'debug_microseconds' config option is broken
- Resolves: rhbz#1936902 - SSSD Error Msg Improvement: Invalid argument
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm (additional patches and rebuild)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-1" date="1626091200">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1693379 - sssd_be and sss_cache too heavy on CPU
- Resolves: rhbz#1909373 - Missing search index for `originalADgidNumber`
- Resolves: rhbz#1954630 - [RFE] Improve debug messages by adding a unique tag for each request the backend is handling
- Resolves: rhbz#1936891 - SSSD Error Msg Improvement: Bad address
- Resolves: rhbz#1364596 - sssd still showing ipa user after removed from last group
- Resolves: rhbz#1979404 - Changes made to /etc/pam.d/sssd-shadowutils are overwritten back to default on sssd-common package upgrade</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2" date="1627905600">- Resolves: rhbz#1975169 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-8]
- Resolves: rhbz#1962042 - [sssd] RHEL 8.5 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.1" date="1634558400">- Resolves: rhbz#2014460 - tps tests fail with cross dependency on sssd debuginfo package: removal of 'sssd-libwbclient-debuginfo' is missing [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.2" date="1638187200">- Resolves: rhbz#2018440 - 2.5.x based SSSD adds more AD domains than it should based on the configuration file (not trusted and from a different forest) [rhel-8.5.0.z]
- Resolves: rhbz#2016923 - autofs lookups for unknown mounts are delayed for 50s [rhel-8.5.0.z]
- Resolves: rhbz#2021499 - Make backtrace less "chatty" (avoid duplicate backtraces) [rhel-8.5.0.z]
- Resolves: rhbz#2013379 - Lookup with fully-qualified name does not work with 'cache_first = True' [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.3" date="1638878400">- Resolves: rhbz#2028828 - pam responder does not call initgroups to refresh the user entry [rhel-8.5.0.z]</changelog>
</package>
<package pkgid="141940c5f6a8f4413c9ca10a18f5319501a5f910f28dc95378a08bdb9c0d5793" name="libipa_hbac-debuginfo" arch="i686">
  <version epoch="0" ver="2.5.2" rel="2.el8_5.4"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-8" date="1613131200">- Resolves: rhbz#1926622 - Add support to verify authentication indicators in pam_sss_gss
- Resolves: rhbz#1926454 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0.
- Resolves: rhbz#1893159 - Default debug level should report all errors / failures (additional patch)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.0-1" date="1620648000">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1930535 - [abrt] [faf] sssd: monitor_service_shutdown(): /usr/sbin/sssd killed by 11
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1945888 - Inconsistant debug level for connection logging
- Resolves: rhbz#1948657 - pam_sss_gss.so doesn't work with large kerberos tickets
- Resolves: rhbz#1949149 - [RFE] Poor man's backtrace
- Resolves: rhbz#1920500 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR
- Resolves: rhbz#1923964 - [RFE] SSSD Error Msg Improvement: write_krb5info_file failed, authentication might fail.
- Resolves: rhbz#1928648 - SSSD logs improvements: clarify which config option applies to each timeout in the logs
- Resolves: rhbz#1632159 - sssd-kcm starts successfully for non existent socket_path
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm
- Resolves: rhbz#1925505 - [RFE] improve the sssd refresh timers for SUDO queries
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1925561 - sssd-ldap(5) does not report how to disable the SUDO smart queries
- Resolves: rhbz#1925621 - document impact of indices and of scope on performance of LDAP queries
- Resolves: rhbz#1855320 - [RFE] RHEL8 sssd: inheritance of the case_sensitive parameter for subdomains.
- Resolves: rhbz#1925608 - [RFE] make 'random_offset' addon to 'offline_timeout' option configurable
- Resolves: rhbz#1447945 - man page / docs update required: if two certificate matching rules with the same priority match only one is used
- Resolves: rhbz#1703436 - sssd not thread-safe in innetgr()
- Resolves: rhbz#1713143 - SSSD does not translate the 2FA text labels("first factor" / "second factor") on GDM login and screensaver unlock screen
- Resolves: rhbz#1888977 - sss_override: Usage limitations clarification in man page
- Resolves: rhbz#1890177 - Clarify "single_prompt" option in "PROMPTING CONFIGURATION SECTION" section of sssd.conf man page
- Resolves: rhbz#1902280 - fix sss_cache to also reset cached timestamp
- Resolves: rhbz#1935683 - SSSD not detecting subdomain from AD forest (RHEL 8.3)
- Resolves: rhbz#1937919 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7
- Resolves: rhbz#1944665 - No gpo found and ad_gpo_implicit_deny set to True still permits user login
- Resolves: rhbz#1919942 - sss_override does not take precedence over override_homedir directive</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-1" date="1623153600">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1917444 - SSSD Error Msg Improvement: Server resolution failed: [2]: No such file or directory
- Resolves: rhbz#1917511 - SSSD Error Msg Improvement: Failed to resolve server 'server.example.com': Error reading file
- Resolves: rhbz#1917535 - sssd.conf man page: parameter dns_resolver_server_timeout and dns_resolver_op_timeout
- Resolves: rhbz#1940509 - [RFE] Health and Support Analyzer: Link frontend to backend requests
- Resolves: rhbz#1649464 - auto_private_groups not working as expected with posix ipa/ad trust
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1961215 - Invalid sssd-kcm return code if requested operation is not found
- Resolves: rhbz#1837090 - SSSD fails nss_getby_name for IPA user with SID if the user has user private group
- Resolves: rhbz#1879869 - sudo commands incorrectly exports the KRB5CCNAME environment variable
- Resolves: rhbz#1962550 - sss_pac_make_request fails on systems joined to Active Directory.
- Resolves: rhbz#1737489 - [RFE] SSSD should honor default Kerberos settings (keytab name) in /etc/krb5.conf</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-2" date="1624276800">- Resolves: rhbz#1974257 - 'debug_microseconds' config option is broken
- Resolves: rhbz#1936902 - SSSD Error Msg Improvement: Invalid argument
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm (additional patches and rebuild)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-1" date="1626091200">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1693379 - sssd_be and sss_cache too heavy on CPU
- Resolves: rhbz#1909373 - Missing search index for `originalADgidNumber`
- Resolves: rhbz#1954630 - [RFE] Improve debug messages by adding a unique tag for each request the backend is handling
- Resolves: rhbz#1936891 - SSSD Error Msg Improvement: Bad address
- Resolves: rhbz#1364596 - sssd still showing ipa user after removed from last group
- Resolves: rhbz#1979404 - Changes made to /etc/pam.d/sssd-shadowutils are overwritten back to default on sssd-common package upgrade</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2" date="1627905600">- Resolves: rhbz#1975169 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-8]
- Resolves: rhbz#1962042 - [sssd] RHEL 8.5 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.1" date="1634558400">- Resolves: rhbz#2014460 - tps tests fail with cross dependency on sssd debuginfo package: removal of 'sssd-libwbclient-debuginfo' is missing [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.2" date="1638187200">- Resolves: rhbz#2018440 - 2.5.x based SSSD adds more AD domains than it should based on the configuration file (not trusted and from a different forest) [rhel-8.5.0.z]
- Resolves: rhbz#2016923 - autofs lookups for unknown mounts are delayed for 50s [rhel-8.5.0.z]
- Resolves: rhbz#2021499 - Make backtrace less "chatty" (avoid duplicate backtraces) [rhel-8.5.0.z]
- Resolves: rhbz#2013379 - Lookup with fully-qualified name does not work with 'cache_first = True' [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.3" date="1638878400">- Resolves: rhbz#2028828 - pam responder does not call initgroups to refresh the user entry [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.4" date="1642420800">- Resolves: rhbz#2030651 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries [rhel-8.5.0.z]
- Resolves: rhbz#2035285 - AD Domain in the AD Forest Missing after sssd latest update [rhel-8.5.0.z]</changelog>
</package>
<package pkgid="6de38bbf1f2b295096e23105756ebdc890ef230a243b447270afeedb6a23e007" name="libipa_hbac-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="2.el8_5.4"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-8" date="1613131200">- Resolves: rhbz#1926622 - Add support to verify authentication indicators in pam_sss_gss
- Resolves: rhbz#1926454 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0.
- Resolves: rhbz#1893159 - Default debug level should report all errors / failures (additional patch)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.0-1" date="1620648000">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1930535 - [abrt] [faf] sssd: monitor_service_shutdown(): /usr/sbin/sssd killed by 11
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1945888 - Inconsistant debug level for connection logging
- Resolves: rhbz#1948657 - pam_sss_gss.so doesn't work with large kerberos tickets
- Resolves: rhbz#1949149 - [RFE] Poor man's backtrace
- Resolves: rhbz#1920500 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR
- Resolves: rhbz#1923964 - [RFE] SSSD Error Msg Improvement: write_krb5info_file failed, authentication might fail.
- Resolves: rhbz#1928648 - SSSD logs improvements: clarify which config option applies to each timeout in the logs
- Resolves: rhbz#1632159 - sssd-kcm starts successfully for non existent socket_path
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm
- Resolves: rhbz#1925505 - [RFE] improve the sssd refresh timers for SUDO queries
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1925561 - sssd-ldap(5) does not report how to disable the SUDO smart queries
- Resolves: rhbz#1925621 - document impact of indices and of scope on performance of LDAP queries
- Resolves: rhbz#1855320 - [RFE] RHEL8 sssd: inheritance of the case_sensitive parameter for subdomains.
- Resolves: rhbz#1925608 - [RFE] make 'random_offset' addon to 'offline_timeout' option configurable
- Resolves: rhbz#1447945 - man page / docs update required: if two certificate matching rules with the same priority match only one is used
- Resolves: rhbz#1703436 - sssd not thread-safe in innetgr()
- Resolves: rhbz#1713143 - SSSD does not translate the 2FA text labels("first factor" / "second factor") on GDM login and screensaver unlock screen
- Resolves: rhbz#1888977 - sss_override: Usage limitations clarification in man page
- Resolves: rhbz#1890177 - Clarify "single_prompt" option in "PROMPTING CONFIGURATION SECTION" section of sssd.conf man page
- Resolves: rhbz#1902280 - fix sss_cache to also reset cached timestamp
- Resolves: rhbz#1935683 - SSSD not detecting subdomain from AD forest (RHEL 8.3)
- Resolves: rhbz#1937919 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7
- Resolves: rhbz#1944665 - No gpo found and ad_gpo_implicit_deny set to True still permits user login
- Resolves: rhbz#1919942 - sss_override does not take precedence over override_homedir directive</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-1" date="1623153600">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1917444 - SSSD Error Msg Improvement: Server resolution failed: [2]: No such file or directory
- Resolves: rhbz#1917511 - SSSD Error Msg Improvement: Failed to resolve server 'server.example.com': Error reading file
- Resolves: rhbz#1917535 - sssd.conf man page: parameter dns_resolver_server_timeout and dns_resolver_op_timeout
- Resolves: rhbz#1940509 - [RFE] Health and Support Analyzer: Link frontend to backend requests
- Resolves: rhbz#1649464 - auto_private_groups not working as expected with posix ipa/ad trust
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1961215 - Invalid sssd-kcm return code if requested operation is not found
- Resolves: rhbz#1837090 - SSSD fails nss_getby_name for IPA user with SID if the user has user private group
- Resolves: rhbz#1879869 - sudo commands incorrectly exports the KRB5CCNAME environment variable
- Resolves: rhbz#1962550 - sss_pac_make_request fails on systems joined to Active Directory.
- Resolves: rhbz#1737489 - [RFE] SSSD should honor default Kerberos settings (keytab name) in /etc/krb5.conf</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-2" date="1624276800">- Resolves: rhbz#1974257 - 'debug_microseconds' config option is broken
- Resolves: rhbz#1936902 - SSSD Error Msg Improvement: Invalid argument
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm (additional patches and rebuild)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-1" date="1626091200">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1693379 - sssd_be and sss_cache too heavy on CPU
- Resolves: rhbz#1909373 - Missing search index for `originalADgidNumber`
- Resolves: rhbz#1954630 - [RFE] Improve debug messages by adding a unique tag for each request the backend is handling
- Resolves: rhbz#1936891 - SSSD Error Msg Improvement: Bad address
- Resolves: rhbz#1364596 - sssd still showing ipa user after removed from last group
- Resolves: rhbz#1979404 - Changes made to /etc/pam.d/sssd-shadowutils are overwritten back to default on sssd-common package upgrade</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2" date="1627905600">- Resolves: rhbz#1975169 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-8]
- Resolves: rhbz#1962042 - [sssd] RHEL 8.5 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.1" date="1634558400">- Resolves: rhbz#2014460 - tps tests fail with cross dependency on sssd debuginfo package: removal of 'sssd-libwbclient-debuginfo' is missing [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.2" date="1638187200">- Resolves: rhbz#2018440 - 2.5.x based SSSD adds more AD domains than it should based on the configuration file (not trusted and from a different forest) [rhel-8.5.0.z]
- Resolves: rhbz#2016923 - autofs lookups for unknown mounts are delayed for 50s [rhel-8.5.0.z]
- Resolves: rhbz#2021499 - Make backtrace less "chatty" (avoid duplicate backtraces) [rhel-8.5.0.z]
- Resolves: rhbz#2013379 - Lookup with fully-qualified name does not work with 'cache_first = True' [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.3" date="1638878400">- Resolves: rhbz#2028828 - pam responder does not call initgroups to refresh the user entry [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.4" date="1642420800">- Resolves: rhbz#2030651 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries [rhel-8.5.0.z]
- Resolves: rhbz#2035285 - AD Domain in the AD Forest Missing after sssd latest update [rhel-8.5.0.z]</changelog>
</package>
<package pkgid="b119b311d6fe580ba71fc30498f0ce7371b953ab61321c786a896d2ca6cd56df" name="libitm-debuginfo" arch="i686">
  <version epoch="0" ver="8.5.0" rel="4.el8_5"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.3.1-5.2" date="1594814400">- backport aarch64 LSE atomics (#1821994)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.4.1-1" date="1601380800">- update from GCC 8.4 release (#1868446)
- remove symlinks to 32-bit versions of these static libraries: libasan.a,
  libitm.a, libquadmath.a, libubsan.a, libgfortran.a (#1779597)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.4.1-1.1" date="1617969600">- fix bad use of VMAT_CONTIGUOUS (PR tree-optimization/97236, #1925632)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.4.1-1.2" date="1617969601">- back out the PR97236 patch</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.4.1-2" date="1619179200">- update from GCC 8.4 release (#1946758)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.4.1-2.1" date="1619438400">- remove support for demangling GCC 2.x era mangling schemes (#1668394)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-1" date="1620993600">- update from GCC 8.5 release (#1946758)
- this includes a fix for PR target/87839 (#1958295)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-2" date="1622548800">- revert upstream PR85873 gcc-8 fix, apply the fix from gcc-9 (#1960701)
- fix 'this' adjustment for devirtualized call (PR c++/100797, #1965951)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-3" date="1626177600">- fix mangling of lambdas in default args (PR c++/91241, #1981822)
- add a few Provides: bundled</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-4" date="1635508800">- add -Wbidirectional patch (#2008391)</changelog>
</package>
<package pkgid="c982e77f497868722f0cfe900c388b4cbadf2131b87fb53a81ee09be08819a8a" name="libitm-debuginfo" arch="x86_64">
  <version epoch="0" ver="8.5.0" rel="4.el8_5"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.3.1-5.2" date="1594814400">- backport aarch64 LSE atomics (#1821994)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.4.1-1" date="1601380800">- update from GCC 8.4 release (#1868446)
- remove symlinks to 32-bit versions of these static libraries: libasan.a,
  libitm.a, libquadmath.a, libubsan.a, libgfortran.a (#1779597)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.4.1-1.1" date="1617969600">- fix bad use of VMAT_CONTIGUOUS (PR tree-optimization/97236, #1925632)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.4.1-1.2" date="1617969601">- back out the PR97236 patch</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.4.1-2" date="1619179200">- update from GCC 8.4 release (#1946758)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.4.1-2.1" date="1619438400">- remove support for demangling GCC 2.x era mangling schemes (#1668394)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-1" date="1620993600">- update from GCC 8.5 release (#1946758)
- this includes a fix for PR target/87839 (#1958295)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-2" date="1622548800">- revert upstream PR85873 gcc-8 fix, apply the fix from gcc-9 (#1960701)
- fix 'this' adjustment for devirtualized call (PR c++/100797, #1965951)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-3" date="1626177600">- fix mangling of lambdas in default args (PR c++/91241, #1981822)
- add a few Provides: bundled</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-4" date="1635508800">- add -Wbidirectional patch (#2008391)</changelog>
</package>
<package pkgid="07987ba0cae6f1af0a44d38b8b441a364fb24c0aaecf7c014744d61d3dcdb0ed" name="libknet1-debuginfo" arch="i686">
  <version epoch="0" ver="1.18" rel="2.el8_4"/>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; - 1.9-2" date="1557835200">add some covscan fixes
  Resolves: rhbz#1688880</changelog>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; - 1.9-3" date="1558440000">Fix kronosnet-tests dependancies and add workaround for dwz crash
  Resolves: rhbz#1688880</changelog>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; - 1.10-1" date="1560340800">Rebase to 1.10 for ACL support
  Resolves: rhbz#1688880</changelog>
  <changelog author="Fabio M. Di Nitto &lt;fdinitto@redhat.com&gt; - 1.10-2" date="1571227200">link: Fix memory corruption when too many up/down events are recorded
  Resolves: rhbz#1753517</changelog>
  <changelog author="Fabio M. Di Nitto &lt;fdinitto@redhat.com&gt; - 1.10-3" date="1571227201">PMTUd: Fix MTU calculation when using crypto
  Resolves: rhbz#1736872
  host: Fix defrag buffer reclaim logic that could cause delivery
        of corrupted data
  ResolveS: rhbz#1761711</changelog>
  <changelog author="Fabio M. Di Nitto &lt;fdinitto@redhat.com&gt; - 1.10-4" date="1571313600">Disable fun_pmtud_crypto_test as it can take several hours to run
  Resolves: rhbz#1736872</changelog>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; - 1.15-1" date="1586952000">Rebase to 1.15
  Resolves: rhbz#1796503</changelog>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; - 1.16-1" date="1588766400">Rebase to 1.16
  Resolves: rhbz#1796503</changelog>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; - 1.18-1" date="1600862400">Rebase to 1.18
  Resolves: rhbz#1855301</changelog>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; - 1.18-2" date="1632916800">Calculate the defrag buffers correctly
  Resolves: rhbz#2008195</changelog>
</package>
<package pkgid="8e61759e4e596c9f3f19ccb8e75fcd9f483226bc291dcc588f802d601804d557" name="libknet1-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.18" rel="2.el8_4"/>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; - 1.9-2" date="1557835200">add some covscan fixes
  Resolves: rhbz#1688880</changelog>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; - 1.9-3" date="1558440000">Fix kronosnet-tests dependancies and add workaround for dwz crash
  Resolves: rhbz#1688880</changelog>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; - 1.10-1" date="1560340800">Rebase to 1.10 for ACL support
  Resolves: rhbz#1688880</changelog>
  <changelog author="Fabio M. Di Nitto &lt;fdinitto@redhat.com&gt; - 1.10-2" date="1571227200">link: Fix memory corruption when too many up/down events are recorded
  Resolves: rhbz#1753517</changelog>
  <changelog author="Fabio M. Di Nitto &lt;fdinitto@redhat.com&gt; - 1.10-3" date="1571227201">PMTUd: Fix MTU calculation when using crypto
  Resolves: rhbz#1736872
  host: Fix defrag buffer reclaim logic that could cause delivery
        of corrupted data
  ResolveS: rhbz#1761711</changelog>
  <changelog author="Fabio M. Di Nitto &lt;fdinitto@redhat.com&gt; - 1.10-4" date="1571313600">Disable fun_pmtud_crypto_test as it can take several hours to run
  Resolves: rhbz#1736872</changelog>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; - 1.15-1" date="1586952000">Rebase to 1.15
  Resolves: rhbz#1796503</changelog>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; - 1.16-1" date="1588766400">Rebase to 1.16
  Resolves: rhbz#1796503</changelog>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; - 1.18-1" date="1600862400">Rebase to 1.18
  Resolves: rhbz#1855301</changelog>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; - 1.18-2" date="1632916800">Calculate the defrag buffers correctly
  Resolves: rhbz#2008195</changelog>
</package>
<package pkgid="f6ef92c78478989bc22b4ad589f7879ed22d581dcd76106da4356ea4ecbce58a" name="libknet1-debuginfo" arch="i686">
  <version epoch="0" ver="1.18" rel="4.el8_5"/>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; - 1.10-1" date="1560340800">Rebase to 1.10 for ACL support
  Resolves: rhbz#1688880</changelog>
  <changelog author="Fabio M. Di Nitto &lt;fdinitto@redhat.com&gt; - 1.10-2" date="1571227200">link: Fix memory corruption when too many up/down events are recorded
  Resolves: rhbz#1753517</changelog>
  <changelog author="Fabio M. Di Nitto &lt;fdinitto@redhat.com&gt; - 1.10-3" date="1571227201">PMTUd: Fix MTU calculation when using crypto
  Resolves: rhbz#1736872
  host: Fix defrag buffer reclaim logic that could cause delivery
        of corrupted data
  ResolveS: rhbz#1761711</changelog>
  <changelog author="Fabio M. Di Nitto &lt;fdinitto@redhat.com&gt; - 1.10-4" date="1571313600">Disable fun_pmtud_crypto_test as it can take several hours to run
  Resolves: rhbz#1736872</changelog>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; - 1.15-1" date="1586952000">Rebase to 1.15
  Resolves: rhbz#1796503</changelog>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; - 1.16-1" date="1588766400">Rebase to 1.16
  Resolves: rhbz#1796503</changelog>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; - 1.18-1" date="1600862400">Rebase to 1.18
  Resolves: rhbz#1855301</changelog>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; - 1.18-3" date="1632916800">Calculate defrag buffers correctly
  Resolves: rhbz#2008196</changelog>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; - 1.18-3" date="1636632000">Rebuild to, hopefully, fix tag error
  Resolves: rhbz#2008196</changelog>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; - 1.18-4" date="1637150400">Revert defrag buffer change
  Resolves: rhbz#2023847</changelog>
</package>
<package pkgid="37bf9ed75129b53be04033ef2abc9ba8519287e0a8953495ed4e36c598a29ed1" name="libknet1-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.18" rel="4.el8_5"/>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; - 1.10-1" date="1560340800">Rebase to 1.10 for ACL support
  Resolves: rhbz#1688880</changelog>
  <changelog author="Fabio M. Di Nitto &lt;fdinitto@redhat.com&gt; - 1.10-2" date="1571227200">link: Fix memory corruption when too many up/down events are recorded
  Resolves: rhbz#1753517</changelog>
  <changelog author="Fabio M. Di Nitto &lt;fdinitto@redhat.com&gt; - 1.10-3" date="1571227201">PMTUd: Fix MTU calculation when using crypto
  Resolves: rhbz#1736872
  host: Fix defrag buffer reclaim logic that could cause delivery
        of corrupted data
  ResolveS: rhbz#1761711</changelog>
  <changelog author="Fabio M. Di Nitto &lt;fdinitto@redhat.com&gt; - 1.10-4" date="1571313600">Disable fun_pmtud_crypto_test as it can take several hours to run
  Resolves: rhbz#1736872</changelog>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; - 1.15-1" date="1586952000">Rebase to 1.15
  Resolves: rhbz#1796503</changelog>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; - 1.16-1" date="1588766400">Rebase to 1.16
  Resolves: rhbz#1796503</changelog>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; - 1.18-1" date="1600862400">Rebase to 1.18
  Resolves: rhbz#1855301</changelog>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; - 1.18-3" date="1632916800">Calculate defrag buffers correctly
  Resolves: rhbz#2008196</changelog>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; - 1.18-3" date="1636632000">Rebuild to, hopefully, fix tag error
  Resolves: rhbz#2008196</changelog>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; - 1.18-4" date="1637150400">Revert defrag buffer change
  Resolves: rhbz#2023847</changelog>
</package>
<package pkgid="58f745e721817682c9de3568a1855cba8533d31722182e40963ec6d77e759de0" name="liblsan-debuginfo" arch="x86_64">
  <version epoch="0" ver="8.5.0" rel="4.el8_5"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.3.1-5.2" date="1594814400">- backport aarch64 LSE atomics (#1821994)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.4.1-1" date="1601380800">- update from GCC 8.4 release (#1868446)
- remove symlinks to 32-bit versions of these static libraries: libasan.a,
  libitm.a, libquadmath.a, libubsan.a, libgfortran.a (#1779597)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.4.1-1.1" date="1617969600">- fix bad use of VMAT_CONTIGUOUS (PR tree-optimization/97236, #1925632)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.4.1-1.2" date="1617969601">- back out the PR97236 patch</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.4.1-2" date="1619179200">- update from GCC 8.4 release (#1946758)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.4.1-2.1" date="1619438400">- remove support for demangling GCC 2.x era mangling schemes (#1668394)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-1" date="1620993600">- update from GCC 8.5 release (#1946758)
- this includes a fix for PR target/87839 (#1958295)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-2" date="1622548800">- revert upstream PR85873 gcc-8 fix, apply the fix from gcc-9 (#1960701)
- fix 'this' adjustment for devirtualized call (PR c++/100797, #1965951)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-3" date="1626177600">- fix mangling of lambdas in default args (PR c++/91241, #1981822)
- add a few Provides: bundled</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-4" date="1635508800">- add -Wbidirectional patch (#2008391)</changelog>
</package>
<package pkgid="1f33aa08af83f04518f9283cef3df8d1aaf162804c60e645324b9ea012a0cb8b" name="libnozzle1-debuginfo" arch="i686">
  <version epoch="0" ver="1.18" rel="2.el8_4"/>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; - 1.9-2" date="1557835200">add some covscan fixes
  Resolves: rhbz#1688880</changelog>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; - 1.9-3" date="1558440000">Fix kronosnet-tests dependancies and add workaround for dwz crash
  Resolves: rhbz#1688880</changelog>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; - 1.10-1" date="1560340800">Rebase to 1.10 for ACL support
  Resolves: rhbz#1688880</changelog>
  <changelog author="Fabio M. Di Nitto &lt;fdinitto@redhat.com&gt; - 1.10-2" date="1571227200">link: Fix memory corruption when too many up/down events are recorded
  Resolves: rhbz#1753517</changelog>
  <changelog author="Fabio M. Di Nitto &lt;fdinitto@redhat.com&gt; - 1.10-3" date="1571227201">PMTUd: Fix MTU calculation when using crypto
  Resolves: rhbz#1736872
  host: Fix defrag buffer reclaim logic that could cause delivery
        of corrupted data
  ResolveS: rhbz#1761711</changelog>
  <changelog author="Fabio M. Di Nitto &lt;fdinitto@redhat.com&gt; - 1.10-4" date="1571313600">Disable fun_pmtud_crypto_test as it can take several hours to run
  Resolves: rhbz#1736872</changelog>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; - 1.15-1" date="1586952000">Rebase to 1.15
  Resolves: rhbz#1796503</changelog>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; - 1.16-1" date="1588766400">Rebase to 1.16
  Resolves: rhbz#1796503</changelog>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; - 1.18-1" date="1600862400">Rebase to 1.18
  Resolves: rhbz#1855301</changelog>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; - 1.18-2" date="1632916800">Calculate the defrag buffers correctly
  Resolves: rhbz#2008195</changelog>
</package>
<package pkgid="67c14e06526535719baa3645798c536eb6102132ed4390fbecc69ea19488731b" name="libnozzle1-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.18" rel="2.el8_4"/>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; - 1.9-2" date="1557835200">add some covscan fixes
  Resolves: rhbz#1688880</changelog>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; - 1.9-3" date="1558440000">Fix kronosnet-tests dependancies and add workaround for dwz crash
  Resolves: rhbz#1688880</changelog>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; - 1.10-1" date="1560340800">Rebase to 1.10 for ACL support
  Resolves: rhbz#1688880</changelog>
  <changelog author="Fabio M. Di Nitto &lt;fdinitto@redhat.com&gt; - 1.10-2" date="1571227200">link: Fix memory corruption when too many up/down events are recorded
  Resolves: rhbz#1753517</changelog>
  <changelog author="Fabio M. Di Nitto &lt;fdinitto@redhat.com&gt; - 1.10-3" date="1571227201">PMTUd: Fix MTU calculation when using crypto
  Resolves: rhbz#1736872
  host: Fix defrag buffer reclaim logic that could cause delivery
        of corrupted data
  ResolveS: rhbz#1761711</changelog>
  <changelog author="Fabio M. Di Nitto &lt;fdinitto@redhat.com&gt; - 1.10-4" date="1571313600">Disable fun_pmtud_crypto_test as it can take several hours to run
  Resolves: rhbz#1736872</changelog>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; - 1.15-1" date="1586952000">Rebase to 1.15
  Resolves: rhbz#1796503</changelog>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; - 1.16-1" date="1588766400">Rebase to 1.16
  Resolves: rhbz#1796503</changelog>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; - 1.18-1" date="1600862400">Rebase to 1.18
  Resolves: rhbz#1855301</changelog>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; - 1.18-2" date="1632916800">Calculate the defrag buffers correctly
  Resolves: rhbz#2008195</changelog>
</package>
<package pkgid="aa9a41780877dfd9ec38b98199f383d58fc6e548fca683c606c51670c8331d0e" name="libnozzle1-debuginfo" arch="i686">
  <version epoch="0" ver="1.18" rel="4.el8_5"/>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; - 1.10-1" date="1560340800">Rebase to 1.10 for ACL support
  Resolves: rhbz#1688880</changelog>
  <changelog author="Fabio M. Di Nitto &lt;fdinitto@redhat.com&gt; - 1.10-2" date="1571227200">link: Fix memory corruption when too many up/down events are recorded
  Resolves: rhbz#1753517</changelog>
  <changelog author="Fabio M. Di Nitto &lt;fdinitto@redhat.com&gt; - 1.10-3" date="1571227201">PMTUd: Fix MTU calculation when using crypto
  Resolves: rhbz#1736872
  host: Fix defrag buffer reclaim logic that could cause delivery
        of corrupted data
  ResolveS: rhbz#1761711</changelog>
  <changelog author="Fabio M. Di Nitto &lt;fdinitto@redhat.com&gt; - 1.10-4" date="1571313600">Disable fun_pmtud_crypto_test as it can take several hours to run
  Resolves: rhbz#1736872</changelog>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; - 1.15-1" date="1586952000">Rebase to 1.15
  Resolves: rhbz#1796503</changelog>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; - 1.16-1" date="1588766400">Rebase to 1.16
  Resolves: rhbz#1796503</changelog>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; - 1.18-1" date="1600862400">Rebase to 1.18
  Resolves: rhbz#1855301</changelog>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; - 1.18-3" date="1632916800">Calculate defrag buffers correctly
  Resolves: rhbz#2008196</changelog>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; - 1.18-3" date="1636632000">Rebuild to, hopefully, fix tag error
  Resolves: rhbz#2008196</changelog>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; - 1.18-4" date="1637150400">Revert defrag buffer change
  Resolves: rhbz#2023847</changelog>
</package>
<package pkgid="38b7cf04937aff6551f8ac257314af789b00f7e3391a23c12517ff7c209551ae" name="libnozzle1-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.18" rel="4.el8_5"/>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; - 1.10-1" date="1560340800">Rebase to 1.10 for ACL support
  Resolves: rhbz#1688880</changelog>
  <changelog author="Fabio M. Di Nitto &lt;fdinitto@redhat.com&gt; - 1.10-2" date="1571227200">link: Fix memory corruption when too many up/down events are recorded
  Resolves: rhbz#1753517</changelog>
  <changelog author="Fabio M. Di Nitto &lt;fdinitto@redhat.com&gt; - 1.10-3" date="1571227201">PMTUd: Fix MTU calculation when using crypto
  Resolves: rhbz#1736872
  host: Fix defrag buffer reclaim logic that could cause delivery
        of corrupted data
  ResolveS: rhbz#1761711</changelog>
  <changelog author="Fabio M. Di Nitto &lt;fdinitto@redhat.com&gt; - 1.10-4" date="1571313600">Disable fun_pmtud_crypto_test as it can take several hours to run
  Resolves: rhbz#1736872</changelog>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; - 1.15-1" date="1586952000">Rebase to 1.15
  Resolves: rhbz#1796503</changelog>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; - 1.16-1" date="1588766400">Rebase to 1.16
  Resolves: rhbz#1796503</changelog>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; - 1.18-1" date="1600862400">Rebase to 1.18
  Resolves: rhbz#1855301</changelog>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; - 1.18-3" date="1632916800">Calculate defrag buffers correctly
  Resolves: rhbz#2008196</changelog>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; - 1.18-3" date="1636632000">Rebuild to, hopefully, fix tag error
  Resolves: rhbz#2008196</changelog>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; - 1.18-4" date="1637150400">Revert defrag buffer change
  Resolves: rhbz#2023847</changelog>
</package>
<package pkgid="5840516bc9b991a0f2dd28e6f55876a350f9cd7bdd6248a925dea2885ea865c8" name="libquadmath-debuginfo" arch="i686">
  <version epoch="0" ver="8.5.0" rel="4.el8_5"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.3.1-5.2" date="1594814400">- backport aarch64 LSE atomics (#1821994)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.4.1-1" date="1601380800">- update from GCC 8.4 release (#1868446)
- remove symlinks to 32-bit versions of these static libraries: libasan.a,
  libitm.a, libquadmath.a, libubsan.a, libgfortran.a (#1779597)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.4.1-1.1" date="1617969600">- fix bad use of VMAT_CONTIGUOUS (PR tree-optimization/97236, #1925632)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.4.1-1.2" date="1617969601">- back out the PR97236 patch</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.4.1-2" date="1619179200">- update from GCC 8.4 release (#1946758)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.4.1-2.1" date="1619438400">- remove support for demangling GCC 2.x era mangling schemes (#1668394)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-1" date="1620993600">- update from GCC 8.5 release (#1946758)
- this includes a fix for PR target/87839 (#1958295)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-2" date="1622548800">- revert upstream PR85873 gcc-8 fix, apply the fix from gcc-9 (#1960701)
- fix 'this' adjustment for devirtualized call (PR c++/100797, #1965951)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-3" date="1626177600">- fix mangling of lambdas in default args (PR c++/91241, #1981822)
- add a few Provides: bundled</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-4" date="1635508800">- add -Wbidirectional patch (#2008391)</changelog>
</package>
<package pkgid="024bbe9696d994c13e3ff1ebc509d6f2064d6c74582440a3bf0369a7e495ff04" name="libquadmath-debuginfo" arch="x86_64">
  <version epoch="0" ver="8.5.0" rel="4.el8_5"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.3.1-5.2" date="1594814400">- backport aarch64 LSE atomics (#1821994)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.4.1-1" date="1601380800">- update from GCC 8.4 release (#1868446)
- remove symlinks to 32-bit versions of these static libraries: libasan.a,
  libitm.a, libquadmath.a, libubsan.a, libgfortran.a (#1779597)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.4.1-1.1" date="1617969600">- fix bad use of VMAT_CONTIGUOUS (PR tree-optimization/97236, #1925632)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.4.1-1.2" date="1617969601">- back out the PR97236 patch</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.4.1-2" date="1619179200">- update from GCC 8.4 release (#1946758)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.4.1-2.1" date="1619438400">- remove support for demangling GCC 2.x era mangling schemes (#1668394)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-1" date="1620993600">- update from GCC 8.5 release (#1946758)
- this includes a fix for PR target/87839 (#1958295)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-2" date="1622548800">- revert upstream PR85873 gcc-8 fix, apply the fix from gcc-9 (#1960701)
- fix 'this' adjustment for devirtualized call (PR c++/100797, #1965951)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-3" date="1626177600">- fix mangling of lambdas in default args (PR c++/91241, #1981822)
- add a few Provides: bundled</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-4" date="1635508800">- add -Wbidirectional patch (#2008391)</changelog>
</package>
<package pkgid="76f710f4522a17124d3df3870862e9432365c8025da7e30f8c6fe8b6051e8fd8" name="libsmbclient-debuginfo" arch="i686">
  <version epoch="0" ver="4.14.5" rel="10.el8_5"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-0" date="1623326400">- related: rhbz#1944657 - Update to version 4.14.5
- resolves: rhbz#1969787 - Fix memory leak in RPC server
- resolves: rhbz#1954974 - Validate smb.conf option for domain members with testparm
- resolves: rhbz#1963298 - Fix smbd trying to delete files with wrong permissions
- resolves: rhbz#1890008 - Update rpcclient manpage to list all available commands
- resolves: rhbz#1857254 - Update smbcacls manpage to document inhertance flags</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-1" date="1624536000">- resolves: rhbz#1974792 - Create a subpackage for vfs-io-uring
- resolves: rhbz#1965397 - Raise log level for dfs ENOENT debug message</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; -  4.14.4-2" date="1626177600">- related: rhbz#1980346 - Rebuild for libtalloc 0.11.0</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-4" date="1636113600">- resolves: rhbz#2021163
  Fix CVE-2016-2124
- resolves: rhbz#2021167
  Fix CVE-2021-23192
- resolves: rhbz#2021171
  Fix CVE-2020-25717</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-5" date="1636459200">- resolves: rhbz#2021493 - Add missing PAC buffer types to krb5pac.idl
- related: rbhz#2021171 - Fix regression with 'allow trusted domains = no'</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.14.5-6" date="1636804800">- related: rhbz#2021171 - Fix CVE-2020-25717
- Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-7" date="1637582400">- related: rhbz#2021171 - Fix CVE-2020-25717
- Fix running ktest (selftest)</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.14.5-8" date="1638446400">- resolves: rhbz#2026717 - Dir containing dangling symlinks cannot be deleted</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-9" date="1643284800">- resolves: rhbz#2046174 - Fix username map script regression of CVE-2020-25717
- resolves: rhbz#2046160 - Fix possible segfault while joining a domain
- resolves: rhbz#2046152 - Fix CVE-2021-44142</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.14.5-10" date="1645531200">- resolves: rhbz#2029417 - Fix virusfilter_vfs_openat: Not scanned: Directory or special file</changelog>
</package>
<package pkgid="d4b27cf12e200d347b943183f25dcd294cc22b5e3f20e50d76fe5116daa703d1" name="libsmbclient-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.14.5" rel="10.el8_5"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-0" date="1623326400">- related: rhbz#1944657 - Update to version 4.14.5
- resolves: rhbz#1969787 - Fix memory leak in RPC server
- resolves: rhbz#1954974 - Validate smb.conf option for domain members with testparm
- resolves: rhbz#1963298 - Fix smbd trying to delete files with wrong permissions
- resolves: rhbz#1890008 - Update rpcclient manpage to list all available commands
- resolves: rhbz#1857254 - Update smbcacls manpage to document inhertance flags</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-1" date="1624536000">- resolves: rhbz#1974792 - Create a subpackage for vfs-io-uring
- resolves: rhbz#1965397 - Raise log level for dfs ENOENT debug message</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; -  4.14.4-2" date="1626177600">- related: rhbz#1980346 - Rebuild for libtalloc 0.11.0</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-4" date="1636113600">- resolves: rhbz#2021163
  Fix CVE-2016-2124
- resolves: rhbz#2021167
  Fix CVE-2021-23192
- resolves: rhbz#2021171
  Fix CVE-2020-25717</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-5" date="1636459200">- resolves: rhbz#2021493 - Add missing PAC buffer types to krb5pac.idl
- related: rbhz#2021171 - Fix regression with 'allow trusted domains = no'</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.14.5-6" date="1636804800">- related: rhbz#2021171 - Fix CVE-2020-25717
- Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-7" date="1637582400">- related: rhbz#2021171 - Fix CVE-2020-25717
- Fix running ktest (selftest)</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.14.5-8" date="1638446400">- resolves: rhbz#2026717 - Dir containing dangling symlinks cannot be deleted</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-9" date="1643284800">- resolves: rhbz#2046174 - Fix username map script regression of CVE-2020-25717
- resolves: rhbz#2046160 - Fix possible segfault while joining a domain
- resolves: rhbz#2046152 - Fix CVE-2021-44142</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.14.5-10" date="1645531200">- resolves: rhbz#2029417 - Fix virusfilter_vfs_openat: Not scanned: Directory or special file</changelog>
</package>
<package pkgid="06f2421978ad05452c8d5fd12ead322b038e51c165f0d7ba66da67a47ceaa133" name="libsmbclient-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.14.5" rel="7.el8_5"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.13.3-3" date="1612440000">- resolves: #1924615 - Fix a memcache bug when cache is full
- resolves: #1924571 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-2" date="1620734400">- resolves: rhbz#1944657 - Update to version 4.14.4
- resolves: rhbz#1949445 - Fix CVE-2021-20254
- resolves: rhbz#1947945 - Fix libsmbldap.so.2 not being a symbolic link
- resolves: rhbz#1908506 - Fix creating the gencache user directory
- resolves: rhbz#1901029 - Build the vfs_io_uring module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-4" date="1620820800">- related: rhbz#1944657 - Fix possible upgrade issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-0" date="1623326400">- related: rhbz#1944657 - Update to version 4.14.5
- resolves: rhbz#1969787 - Fix memory leak in RPC server
- resolves: rhbz#1954974 - Validate smb.conf option for domain members with testparm
- resolves: rhbz#1963298 - Fix smbd trying to delete files with wrong permissions
- resolves: rhbz#1890008 - Update rpcclient manpage to list all available commands
- resolves: rhbz#1857254 - Update smbcacls manpage to document inhertance flags</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-1" date="1624536000">- resolves: rhbz#1974792 - Create a subpackage for vfs-io-uring
- resolves: rhbz#1965397 - Raise log level for dfs ENOENT debug message</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; -  4.14.4-2" date="1626177600">- related: rhbz#1980346 - Rebuild for libtalloc 0.11.0</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-4" date="1636113600">- resolves: rhbz#2021163
  Fix CVE-2016-2124
- resolves: rhbz#2021167
  Fix CVE-2021-23192
- resolves: rhbz#2021171
  Fix CVE-2020-25717</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-5" date="1636459200">- resolves: rhbz#2021493 - Add missing PAC buffer types to krb5pac.idl
- related: rbhz#2021171 - Fix regression with 'allow trusted domains = no'</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.14.5-6" date="1636804800">- related: rhbz#2021171 - Fix CVE-2020-25717
- Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-7" date="1637582400">- related: rhbz#2021171 - Fix CVE-2020-25717
- Fix running ktest (selftest)</changelog>
</package>
<package pkgid="558ece2b813fa65cdb261103725918f0d4cde8e636ed3c34991f65f8c308c67c" name="libsmbclient-debuginfo" arch="i686">
  <version epoch="0" ver="4.14.5" rel="9.el8_5"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-4" date="1620820800">- related: rhbz#1944657 - Fix possible upgrade issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-0" date="1623326400">- related: rhbz#1944657 - Update to version 4.14.5
- resolves: rhbz#1969787 - Fix memory leak in RPC server
- resolves: rhbz#1954974 - Validate smb.conf option for domain members with testparm
- resolves: rhbz#1963298 - Fix smbd trying to delete files with wrong permissions
- resolves: rhbz#1890008 - Update rpcclient manpage to list all available commands
- resolves: rhbz#1857254 - Update smbcacls manpage to document inhertance flags</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-1" date="1624536000">- resolves: rhbz#1974792 - Create a subpackage for vfs-io-uring
- resolves: rhbz#1965397 - Raise log level for dfs ENOENT debug message</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; -  4.14.4-2" date="1626177600">- related: rhbz#1980346 - Rebuild for libtalloc 0.11.0</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-4" date="1636113600">- resolves: rhbz#2021163
  Fix CVE-2016-2124
- resolves: rhbz#2021167
  Fix CVE-2021-23192
- resolves: rhbz#2021171
  Fix CVE-2020-25717</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-5" date="1636459200">- resolves: rhbz#2021493 - Add missing PAC buffer types to krb5pac.idl
- related: rbhz#2021171 - Fix regression with 'allow trusted domains = no'</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.14.5-6" date="1636804800">- related: rhbz#2021171 - Fix CVE-2020-25717
- Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-7" date="1637582400">- related: rhbz#2021171 - Fix CVE-2020-25717
- Fix running ktest (selftest)</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.14.5-8" date="1638446400">- resolves: rhbz#2026717 - Dir containing dangling symlinks cannot be deleted</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-9" date="1643284800">- resolves: rhbz#2046174 - Fix username map script regression of CVE-2020-25717
- resolves: rhbz#2046160 - Fix possible segfault while joining a domain
- resolves: rhbz#2046152 - Fix CVE-2021-44142</changelog>
</package>
<package pkgid="ef2c00919a180852ab0f327c66dfba30569a7f7906126af53a3c456811ff8968" name="libsmbclient-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.14.5" rel="9.el8_5"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-4" date="1620820800">- related: rhbz#1944657 - Fix possible upgrade issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-0" date="1623326400">- related: rhbz#1944657 - Update to version 4.14.5
- resolves: rhbz#1969787 - Fix memory leak in RPC server
- resolves: rhbz#1954974 - Validate smb.conf option for domain members with testparm
- resolves: rhbz#1963298 - Fix smbd trying to delete files with wrong permissions
- resolves: rhbz#1890008 - Update rpcclient manpage to list all available commands
- resolves: rhbz#1857254 - Update smbcacls manpage to document inhertance flags</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-1" date="1624536000">- resolves: rhbz#1974792 - Create a subpackage for vfs-io-uring
- resolves: rhbz#1965397 - Raise log level for dfs ENOENT debug message</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; -  4.14.4-2" date="1626177600">- related: rhbz#1980346 - Rebuild for libtalloc 0.11.0</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-4" date="1636113600">- resolves: rhbz#2021163
  Fix CVE-2016-2124
- resolves: rhbz#2021167
  Fix CVE-2021-23192
- resolves: rhbz#2021171
  Fix CVE-2020-25717</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-5" date="1636459200">- resolves: rhbz#2021493 - Add missing PAC buffer types to krb5pac.idl
- related: rbhz#2021171 - Fix regression with 'allow trusted domains = no'</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.14.5-6" date="1636804800">- related: rhbz#2021171 - Fix CVE-2020-25717
- Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-7" date="1637582400">- related: rhbz#2021171 - Fix CVE-2020-25717
- Fix running ktest (selftest)</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.14.5-8" date="1638446400">- resolves: rhbz#2026717 - Dir containing dangling symlinks cannot be deleted</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-9" date="1643284800">- resolves: rhbz#2046174 - Fix username map script regression of CVE-2020-25717
- resolves: rhbz#2046160 - Fix possible segfault while joining a domain
- resolves: rhbz#2046152 - Fix CVE-2021-44142</changelog>
</package>
<package pkgid="41e20315aee56f2fff351ae723ac06a9f3c4cd708de2ea4d8c4fb0c5ec7ceafe" name="libsss_autofs-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="2.el8_5.1"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-5" date="1609156800">- Resolves: rhbz#1631410 - Can't login with smartcard with multiple certs having same ID value
- Resolves: rhbz#1884213 - [RFE] add offline_timeout_max config option to control offline interval backoff (additional patches)
- Resolves: rhbz#1893159 - Default debug level should report all errors / failures
- Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-6" date="1610971200">- Resolves: rhbz#1113639 - autofs: return a connection failure until maps have been fetched
- Resolves: rhbz#1915395 - Memory leak in the simple access provider
- Resolves: rhbz#1915319 - SSSD: SBUS: failures during servers startup
- Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication (additional patches)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-7" date="1611662400">- Resolves: rhbz#1920001 - Do not add '%' to group names already prefixed with '%' in IPA sudo rules
- Resolves: rhbz#1918433 - sssd unable to lookup certmap rules
- Resolves: rhbz#1917382 - [abrt] [faf] sssd: dp_client_handshake_timeout(): /usr/libexec/sssd/sssd_be killed by 11</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-8" date="1613131200">- Resolves: rhbz#1926622 - Add support to verify authentication indicators in pam_sss_gss
- Resolves: rhbz#1926454 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0.
- Resolves: rhbz#1893159 - Default debug level should report all errors / failures (additional patch)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.0-1" date="1620648000">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1930535 - [abrt] [faf] sssd: monitor_service_shutdown(): /usr/sbin/sssd killed by 11
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1945888 - Inconsistant debug level for connection logging
- Resolves: rhbz#1948657 - pam_sss_gss.so doesn't work with large kerberos tickets
- Resolves: rhbz#1949149 - [RFE] Poor man's backtrace
- Resolves: rhbz#1920500 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR
- Resolves: rhbz#1923964 - [RFE] SSSD Error Msg Improvement: write_krb5info_file failed, authentication might fail.
- Resolves: rhbz#1928648 - SSSD logs improvements: clarify which config option applies to each timeout in the logs
- Resolves: rhbz#1632159 - sssd-kcm starts successfully for non existent socket_path
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm
- Resolves: rhbz#1925505 - [RFE] improve the sssd refresh timers for SUDO queries
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1925561 - sssd-ldap(5) does not report how to disable the SUDO smart queries
- Resolves: rhbz#1925621 - document impact of indices and of scope on performance of LDAP queries
- Resolves: rhbz#1855320 - [RFE] RHEL8 sssd: inheritance of the case_sensitive parameter for subdomains.
- Resolves: rhbz#1925608 - [RFE] make 'random_offset' addon to 'offline_timeout' option configurable
- Resolves: rhbz#1447945 - man page / docs update required: if two certificate matching rules with the same priority match only one is used
- Resolves: rhbz#1703436 - sssd not thread-safe in innetgr()
- Resolves: rhbz#1713143 - SSSD does not translate the 2FA text labels("first factor" / "second factor") on GDM login and screensaver unlock screen
- Resolves: rhbz#1888977 - sss_override: Usage limitations clarification in man page
- Resolves: rhbz#1890177 - Clarify "single_prompt" option in "PROMPTING CONFIGURATION SECTION" section of sssd.conf man page
- Resolves: rhbz#1902280 - fix sss_cache to also reset cached timestamp
- Resolves: rhbz#1935683 - SSSD not detecting subdomain from AD forest (RHEL 8.3)
- Resolves: rhbz#1937919 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7
- Resolves: rhbz#1944665 - No gpo found and ad_gpo_implicit_deny set to True still permits user login
- Resolves: rhbz#1919942 - sss_override does not take precedence over override_homedir directive</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-1" date="1623153600">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1917444 - SSSD Error Msg Improvement: Server resolution failed: [2]: No such file or directory
- Resolves: rhbz#1917511 - SSSD Error Msg Improvement: Failed to resolve server 'server.example.com': Error reading file
- Resolves: rhbz#1917535 - sssd.conf man page: parameter dns_resolver_server_timeout and dns_resolver_op_timeout
- Resolves: rhbz#1940509 - [RFE] Health and Support Analyzer: Link frontend to backend requests
- Resolves: rhbz#1649464 - auto_private_groups not working as expected with posix ipa/ad trust
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1961215 - Invalid sssd-kcm return code if requested operation is not found
- Resolves: rhbz#1837090 - SSSD fails nss_getby_name for IPA user with SID if the user has user private group
- Resolves: rhbz#1879869 - sudo commands incorrectly exports the KRB5CCNAME environment variable
- Resolves: rhbz#1962550 - sss_pac_make_request fails on systems joined to Active Directory.
- Resolves: rhbz#1737489 - [RFE] SSSD should honor default Kerberos settings (keytab name) in /etc/krb5.conf</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-2" date="1624276800">- Resolves: rhbz#1974257 - 'debug_microseconds' config option is broken
- Resolves: rhbz#1936902 - SSSD Error Msg Improvement: Invalid argument
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm (additional patches and rebuild)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-1" date="1626091200">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1693379 - sssd_be and sss_cache too heavy on CPU
- Resolves: rhbz#1909373 - Missing search index for `originalADgidNumber`
- Resolves: rhbz#1954630 - [RFE] Improve debug messages by adding a unique tag for each request the backend is handling
- Resolves: rhbz#1936891 - SSSD Error Msg Improvement: Bad address
- Resolves: rhbz#1364596 - sssd still showing ipa user after removed from last group
- Resolves: rhbz#1979404 - Changes made to /etc/pam.d/sssd-shadowutils are overwritten back to default on sssd-common package upgrade</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2" date="1627905600">- Resolves: rhbz#1975169 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-8]
- Resolves: rhbz#1962042 - [sssd] RHEL 8.5 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.1" date="1634558400">- Resolves: rhbz#2014460 - tps tests fail with cross dependency on sssd debuginfo package: removal of 'sssd-libwbclient-debuginfo' is missing [rhel-8.5.0.z]</changelog>
</package>
<package pkgid="bfaf681791a8ab19b2e6e53af3e6b69e3c705e789c7e8b3e5d66b4c048a4fda2" name="libsss_autofs-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="2.el8_5.3"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-7" date="1611662400">- Resolves: rhbz#1920001 - Do not add '%' to group names already prefixed with '%' in IPA sudo rules
- Resolves: rhbz#1918433 - sssd unable to lookup certmap rules
- Resolves: rhbz#1917382 - [abrt] [faf] sssd: dp_client_handshake_timeout(): /usr/libexec/sssd/sssd_be killed by 11</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-8" date="1613131200">- Resolves: rhbz#1926622 - Add support to verify authentication indicators in pam_sss_gss
- Resolves: rhbz#1926454 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0.
- Resolves: rhbz#1893159 - Default debug level should report all errors / failures (additional patch)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.0-1" date="1620648000">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1930535 - [abrt] [faf] sssd: monitor_service_shutdown(): /usr/sbin/sssd killed by 11
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1945888 - Inconsistant debug level for connection logging
- Resolves: rhbz#1948657 - pam_sss_gss.so doesn't work with large kerberos tickets
- Resolves: rhbz#1949149 - [RFE] Poor man's backtrace
- Resolves: rhbz#1920500 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR
- Resolves: rhbz#1923964 - [RFE] SSSD Error Msg Improvement: write_krb5info_file failed, authentication might fail.
- Resolves: rhbz#1928648 - SSSD logs improvements: clarify which config option applies to each timeout in the logs
- Resolves: rhbz#1632159 - sssd-kcm starts successfully for non existent socket_path
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm
- Resolves: rhbz#1925505 - [RFE] improve the sssd refresh timers for SUDO queries
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1925561 - sssd-ldap(5) does not report how to disable the SUDO smart queries
- Resolves: rhbz#1925621 - document impact of indices and of scope on performance of LDAP queries
- Resolves: rhbz#1855320 - [RFE] RHEL8 sssd: inheritance of the case_sensitive parameter for subdomains.
- Resolves: rhbz#1925608 - [RFE] make 'random_offset' addon to 'offline_timeout' option configurable
- Resolves: rhbz#1447945 - man page / docs update required: if two certificate matching rules with the same priority match only one is used
- Resolves: rhbz#1703436 - sssd not thread-safe in innetgr()
- Resolves: rhbz#1713143 - SSSD does not translate the 2FA text labels("first factor" / "second factor") on GDM login and screensaver unlock screen
- Resolves: rhbz#1888977 - sss_override: Usage limitations clarification in man page
- Resolves: rhbz#1890177 - Clarify "single_prompt" option in "PROMPTING CONFIGURATION SECTION" section of sssd.conf man page
- Resolves: rhbz#1902280 - fix sss_cache to also reset cached timestamp
- Resolves: rhbz#1935683 - SSSD not detecting subdomain from AD forest (RHEL 8.3)
- Resolves: rhbz#1937919 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7
- Resolves: rhbz#1944665 - No gpo found and ad_gpo_implicit_deny set to True still permits user login
- Resolves: rhbz#1919942 - sss_override does not take precedence over override_homedir directive</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-1" date="1623153600">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1917444 - SSSD Error Msg Improvement: Server resolution failed: [2]: No such file or directory
- Resolves: rhbz#1917511 - SSSD Error Msg Improvement: Failed to resolve server 'server.example.com': Error reading file
- Resolves: rhbz#1917535 - sssd.conf man page: parameter dns_resolver_server_timeout and dns_resolver_op_timeout
- Resolves: rhbz#1940509 - [RFE] Health and Support Analyzer: Link frontend to backend requests
- Resolves: rhbz#1649464 - auto_private_groups not working as expected with posix ipa/ad trust
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1961215 - Invalid sssd-kcm return code if requested operation is not found
- Resolves: rhbz#1837090 - SSSD fails nss_getby_name for IPA user with SID if the user has user private group
- Resolves: rhbz#1879869 - sudo commands incorrectly exports the KRB5CCNAME environment variable
- Resolves: rhbz#1962550 - sss_pac_make_request fails on systems joined to Active Directory.
- Resolves: rhbz#1737489 - [RFE] SSSD should honor default Kerberos settings (keytab name) in /etc/krb5.conf</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-2" date="1624276800">- Resolves: rhbz#1974257 - 'debug_microseconds' config option is broken
- Resolves: rhbz#1936902 - SSSD Error Msg Improvement: Invalid argument
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm (additional patches and rebuild)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-1" date="1626091200">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1693379 - sssd_be and sss_cache too heavy on CPU
- Resolves: rhbz#1909373 - Missing search index for `originalADgidNumber`
- Resolves: rhbz#1954630 - [RFE] Improve debug messages by adding a unique tag for each request the backend is handling
- Resolves: rhbz#1936891 - SSSD Error Msg Improvement: Bad address
- Resolves: rhbz#1364596 - sssd still showing ipa user after removed from last group
- Resolves: rhbz#1979404 - Changes made to /etc/pam.d/sssd-shadowutils are overwritten back to default on sssd-common package upgrade</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2" date="1627905600">- Resolves: rhbz#1975169 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-8]
- Resolves: rhbz#1962042 - [sssd] RHEL 8.5 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.1" date="1634558400">- Resolves: rhbz#2014460 - tps tests fail with cross dependency on sssd debuginfo package: removal of 'sssd-libwbclient-debuginfo' is missing [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.2" date="1638187200">- Resolves: rhbz#2018440 - 2.5.x based SSSD adds more AD domains than it should based on the configuration file (not trusted and from a different forest) [rhel-8.5.0.z]
- Resolves: rhbz#2016923 - autofs lookups for unknown mounts are delayed for 50s [rhel-8.5.0.z]
- Resolves: rhbz#2021499 - Make backtrace less "chatty" (avoid duplicate backtraces) [rhel-8.5.0.z]
- Resolves: rhbz#2013379 - Lookup with fully-qualified name does not work with 'cache_first = True' [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.3" date="1638878400">- Resolves: rhbz#2028828 - pam responder does not call initgroups to refresh the user entry [rhel-8.5.0.z]</changelog>
</package>
<package pkgid="19b229bcfa20253797f82265f141487b52ff295de0eba40fdc46b5bd57c1566e" name="libsss_autofs-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="2.el8_5.4"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-8" date="1613131200">- Resolves: rhbz#1926622 - Add support to verify authentication indicators in pam_sss_gss
- Resolves: rhbz#1926454 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0.
- Resolves: rhbz#1893159 - Default debug level should report all errors / failures (additional patch)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.0-1" date="1620648000">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1930535 - [abrt] [faf] sssd: monitor_service_shutdown(): /usr/sbin/sssd killed by 11
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1945888 - Inconsistant debug level for connection logging
- Resolves: rhbz#1948657 - pam_sss_gss.so doesn't work with large kerberos tickets
- Resolves: rhbz#1949149 - [RFE] Poor man's backtrace
- Resolves: rhbz#1920500 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR
- Resolves: rhbz#1923964 - [RFE] SSSD Error Msg Improvement: write_krb5info_file failed, authentication might fail.
- Resolves: rhbz#1928648 - SSSD logs improvements: clarify which config option applies to each timeout in the logs
- Resolves: rhbz#1632159 - sssd-kcm starts successfully for non existent socket_path
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm
- Resolves: rhbz#1925505 - [RFE] improve the sssd refresh timers for SUDO queries
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1925561 - sssd-ldap(5) does not report how to disable the SUDO smart queries
- Resolves: rhbz#1925621 - document impact of indices and of scope on performance of LDAP queries
- Resolves: rhbz#1855320 - [RFE] RHEL8 sssd: inheritance of the case_sensitive parameter for subdomains.
- Resolves: rhbz#1925608 - [RFE] make 'random_offset' addon to 'offline_timeout' option configurable
- Resolves: rhbz#1447945 - man page / docs update required: if two certificate matching rules with the same priority match only one is used
- Resolves: rhbz#1703436 - sssd not thread-safe in innetgr()
- Resolves: rhbz#1713143 - SSSD does not translate the 2FA text labels("first factor" / "second factor") on GDM login and screensaver unlock screen
- Resolves: rhbz#1888977 - sss_override: Usage limitations clarification in man page
- Resolves: rhbz#1890177 - Clarify "single_prompt" option in "PROMPTING CONFIGURATION SECTION" section of sssd.conf man page
- Resolves: rhbz#1902280 - fix sss_cache to also reset cached timestamp
- Resolves: rhbz#1935683 - SSSD not detecting subdomain from AD forest (RHEL 8.3)
- Resolves: rhbz#1937919 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7
- Resolves: rhbz#1944665 - No gpo found and ad_gpo_implicit_deny set to True still permits user login
- Resolves: rhbz#1919942 - sss_override does not take precedence over override_homedir directive</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-1" date="1623153600">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1917444 - SSSD Error Msg Improvement: Server resolution failed: [2]: No such file or directory
- Resolves: rhbz#1917511 - SSSD Error Msg Improvement: Failed to resolve server 'server.example.com': Error reading file
- Resolves: rhbz#1917535 - sssd.conf man page: parameter dns_resolver_server_timeout and dns_resolver_op_timeout
- Resolves: rhbz#1940509 - [RFE] Health and Support Analyzer: Link frontend to backend requests
- Resolves: rhbz#1649464 - auto_private_groups not working as expected with posix ipa/ad trust
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1961215 - Invalid sssd-kcm return code if requested operation is not found
- Resolves: rhbz#1837090 - SSSD fails nss_getby_name for IPA user with SID if the user has user private group
- Resolves: rhbz#1879869 - sudo commands incorrectly exports the KRB5CCNAME environment variable
- Resolves: rhbz#1962550 - sss_pac_make_request fails on systems joined to Active Directory.
- Resolves: rhbz#1737489 - [RFE] SSSD should honor default Kerberos settings (keytab name) in /etc/krb5.conf</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-2" date="1624276800">- Resolves: rhbz#1974257 - 'debug_microseconds' config option is broken
- Resolves: rhbz#1936902 - SSSD Error Msg Improvement: Invalid argument
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm (additional patches and rebuild)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-1" date="1626091200">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1693379 - sssd_be and sss_cache too heavy on CPU
- Resolves: rhbz#1909373 - Missing search index for `originalADgidNumber`
- Resolves: rhbz#1954630 - [RFE] Improve debug messages by adding a unique tag for each request the backend is handling
- Resolves: rhbz#1936891 - SSSD Error Msg Improvement: Bad address
- Resolves: rhbz#1364596 - sssd still showing ipa user after removed from last group
- Resolves: rhbz#1979404 - Changes made to /etc/pam.d/sssd-shadowutils are overwritten back to default on sssd-common package upgrade</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2" date="1627905600">- Resolves: rhbz#1975169 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-8]
- Resolves: rhbz#1962042 - [sssd] RHEL 8.5 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.1" date="1634558400">- Resolves: rhbz#2014460 - tps tests fail with cross dependency on sssd debuginfo package: removal of 'sssd-libwbclient-debuginfo' is missing [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.2" date="1638187200">- Resolves: rhbz#2018440 - 2.5.x based SSSD adds more AD domains than it should based on the configuration file (not trusted and from a different forest) [rhel-8.5.0.z]
- Resolves: rhbz#2016923 - autofs lookups for unknown mounts are delayed for 50s [rhel-8.5.0.z]
- Resolves: rhbz#2021499 - Make backtrace less "chatty" (avoid duplicate backtraces) [rhel-8.5.0.z]
- Resolves: rhbz#2013379 - Lookup with fully-qualified name does not work with 'cache_first = True' [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.3" date="1638878400">- Resolves: rhbz#2028828 - pam responder does not call initgroups to refresh the user entry [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.4" date="1642420800">- Resolves: rhbz#2030651 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries [rhel-8.5.0.z]
- Resolves: rhbz#2035285 - AD Domain in the AD Forest Missing after sssd latest update [rhel-8.5.0.z]</changelog>
</package>
<package pkgid="a887386c526dc96c55a350b66e3886ac0ab7acbd8e797b1838928220e18530df" name="libsss_certmap-debuginfo" arch="i686">
  <version epoch="0" ver="2.5.2" rel="2.el8_5.1"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-5" date="1609156800">- Resolves: rhbz#1631410 - Can't login with smartcard with multiple certs having same ID value
- Resolves: rhbz#1884213 - [RFE] add offline_timeout_max config option to control offline interval backoff (additional patches)
- Resolves: rhbz#1893159 - Default debug level should report all errors / failures
- Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-6" date="1610971200">- Resolves: rhbz#1113639 - autofs: return a connection failure until maps have been fetched
- Resolves: rhbz#1915395 - Memory leak in the simple access provider
- Resolves: rhbz#1915319 - SSSD: SBUS: failures during servers startup
- Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication (additional patches)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-7" date="1611662400">- Resolves: rhbz#1920001 - Do not add '%' to group names already prefixed with '%' in IPA sudo rules
- Resolves: rhbz#1918433 - sssd unable to lookup certmap rules
- Resolves: rhbz#1917382 - [abrt] [faf] sssd: dp_client_handshake_timeout(): /usr/libexec/sssd/sssd_be killed by 11</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-8" date="1613131200">- Resolves: rhbz#1926622 - Add support to verify authentication indicators in pam_sss_gss
- Resolves: rhbz#1926454 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0.
- Resolves: rhbz#1893159 - Default debug level should report all errors / failures (additional patch)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.0-1" date="1620648000">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1930535 - [abrt] [faf] sssd: monitor_service_shutdown(): /usr/sbin/sssd killed by 11
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1945888 - Inconsistant debug level for connection logging
- Resolves: rhbz#1948657 - pam_sss_gss.so doesn't work with large kerberos tickets
- Resolves: rhbz#1949149 - [RFE] Poor man's backtrace
- Resolves: rhbz#1920500 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR
- Resolves: rhbz#1923964 - [RFE] SSSD Error Msg Improvement: write_krb5info_file failed, authentication might fail.
- Resolves: rhbz#1928648 - SSSD logs improvements: clarify which config option applies to each timeout in the logs
- Resolves: rhbz#1632159 - sssd-kcm starts successfully for non existent socket_path
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm
- Resolves: rhbz#1925505 - [RFE] improve the sssd refresh timers for SUDO queries
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1925561 - sssd-ldap(5) does not report how to disable the SUDO smart queries
- Resolves: rhbz#1925621 - document impact of indices and of scope on performance of LDAP queries
- Resolves: rhbz#1855320 - [RFE] RHEL8 sssd: inheritance of the case_sensitive parameter for subdomains.
- Resolves: rhbz#1925608 - [RFE] make 'random_offset' addon to 'offline_timeout' option configurable
- Resolves: rhbz#1447945 - man page / docs update required: if two certificate matching rules with the same priority match only one is used
- Resolves: rhbz#1703436 - sssd not thread-safe in innetgr()
- Resolves: rhbz#1713143 - SSSD does not translate the 2FA text labels("first factor" / "second factor") on GDM login and screensaver unlock screen
- Resolves: rhbz#1888977 - sss_override: Usage limitations clarification in man page
- Resolves: rhbz#1890177 - Clarify "single_prompt" option in "PROMPTING CONFIGURATION SECTION" section of sssd.conf man page
- Resolves: rhbz#1902280 - fix sss_cache to also reset cached timestamp
- Resolves: rhbz#1935683 - SSSD not detecting subdomain from AD forest (RHEL 8.3)
- Resolves: rhbz#1937919 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7
- Resolves: rhbz#1944665 - No gpo found and ad_gpo_implicit_deny set to True still permits user login
- Resolves: rhbz#1919942 - sss_override does not take precedence over override_homedir directive</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-1" date="1623153600">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1917444 - SSSD Error Msg Improvement: Server resolution failed: [2]: No such file or directory
- Resolves: rhbz#1917511 - SSSD Error Msg Improvement: Failed to resolve server 'server.example.com': Error reading file
- Resolves: rhbz#1917535 - sssd.conf man page: parameter dns_resolver_server_timeout and dns_resolver_op_timeout
- Resolves: rhbz#1940509 - [RFE] Health and Support Analyzer: Link frontend to backend requests
- Resolves: rhbz#1649464 - auto_private_groups not working as expected with posix ipa/ad trust
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1961215 - Invalid sssd-kcm return code if requested operation is not found
- Resolves: rhbz#1837090 - SSSD fails nss_getby_name for IPA user with SID if the user has user private group
- Resolves: rhbz#1879869 - sudo commands incorrectly exports the KRB5CCNAME environment variable
- Resolves: rhbz#1962550 - sss_pac_make_request fails on systems joined to Active Directory.
- Resolves: rhbz#1737489 - [RFE] SSSD should honor default Kerberos settings (keytab name) in /etc/krb5.conf</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-2" date="1624276800">- Resolves: rhbz#1974257 - 'debug_microseconds' config option is broken
- Resolves: rhbz#1936902 - SSSD Error Msg Improvement: Invalid argument
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm (additional patches and rebuild)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-1" date="1626091200">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1693379 - sssd_be and sss_cache too heavy on CPU
- Resolves: rhbz#1909373 - Missing search index for `originalADgidNumber`
- Resolves: rhbz#1954630 - [RFE] Improve debug messages by adding a unique tag for each request the backend is handling
- Resolves: rhbz#1936891 - SSSD Error Msg Improvement: Bad address
- Resolves: rhbz#1364596 - sssd still showing ipa user after removed from last group
- Resolves: rhbz#1979404 - Changes made to /etc/pam.d/sssd-shadowutils are overwritten back to default on sssd-common package upgrade</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2" date="1627905600">- Resolves: rhbz#1975169 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-8]
- Resolves: rhbz#1962042 - [sssd] RHEL 8.5 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.1" date="1634558400">- Resolves: rhbz#2014460 - tps tests fail with cross dependency on sssd debuginfo package: removal of 'sssd-libwbclient-debuginfo' is missing [rhel-8.5.0.z]</changelog>
</package>
<package pkgid="035e9d29f0db6659a9127e1634c6b4a460026a9bdfda9bddeafa13434fb973d9" name="libsss_certmap-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="2.el8_5.1"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-5" date="1609156800">- Resolves: rhbz#1631410 - Can't login with smartcard with multiple certs having same ID value
- Resolves: rhbz#1884213 - [RFE] add offline_timeout_max config option to control offline interval backoff (additional patches)
- Resolves: rhbz#1893159 - Default debug level should report all errors / failures
- Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-6" date="1610971200">- Resolves: rhbz#1113639 - autofs: return a connection failure until maps have been fetched
- Resolves: rhbz#1915395 - Memory leak in the simple access provider
- Resolves: rhbz#1915319 - SSSD: SBUS: failures during servers startup
- Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication (additional patches)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-7" date="1611662400">- Resolves: rhbz#1920001 - Do not add '%' to group names already prefixed with '%' in IPA sudo rules
- Resolves: rhbz#1918433 - sssd unable to lookup certmap rules
- Resolves: rhbz#1917382 - [abrt] [faf] sssd: dp_client_handshake_timeout(): /usr/libexec/sssd/sssd_be killed by 11</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-8" date="1613131200">- Resolves: rhbz#1926622 - Add support to verify authentication indicators in pam_sss_gss
- Resolves: rhbz#1926454 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0.
- Resolves: rhbz#1893159 - Default debug level should report all errors / failures (additional patch)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.0-1" date="1620648000">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1930535 - [abrt] [faf] sssd: monitor_service_shutdown(): /usr/sbin/sssd killed by 11
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1945888 - Inconsistant debug level for connection logging
- Resolves: rhbz#1948657 - pam_sss_gss.so doesn't work with large kerberos tickets
- Resolves: rhbz#1949149 - [RFE] Poor man's backtrace
- Resolves: rhbz#1920500 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR
- Resolves: rhbz#1923964 - [RFE] SSSD Error Msg Improvement: write_krb5info_file failed, authentication might fail.
- Resolves: rhbz#1928648 - SSSD logs improvements: clarify which config option applies to each timeout in the logs
- Resolves: rhbz#1632159 - sssd-kcm starts successfully for non existent socket_path
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm
- Resolves: rhbz#1925505 - [RFE] improve the sssd refresh timers for SUDO queries
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1925561 - sssd-ldap(5) does not report how to disable the SUDO smart queries
- Resolves: rhbz#1925621 - document impact of indices and of scope on performance of LDAP queries
- Resolves: rhbz#1855320 - [RFE] RHEL8 sssd: inheritance of the case_sensitive parameter for subdomains.
- Resolves: rhbz#1925608 - [RFE] make 'random_offset' addon to 'offline_timeout' option configurable
- Resolves: rhbz#1447945 - man page / docs update required: if two certificate matching rules with the same priority match only one is used
- Resolves: rhbz#1703436 - sssd not thread-safe in innetgr()
- Resolves: rhbz#1713143 - SSSD does not translate the 2FA text labels("first factor" / "second factor") on GDM login and screensaver unlock screen
- Resolves: rhbz#1888977 - sss_override: Usage limitations clarification in man page
- Resolves: rhbz#1890177 - Clarify "single_prompt" option in "PROMPTING CONFIGURATION SECTION" section of sssd.conf man page
- Resolves: rhbz#1902280 - fix sss_cache to also reset cached timestamp
- Resolves: rhbz#1935683 - SSSD not detecting subdomain from AD forest (RHEL 8.3)
- Resolves: rhbz#1937919 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7
- Resolves: rhbz#1944665 - No gpo found and ad_gpo_implicit_deny set to True still permits user login
- Resolves: rhbz#1919942 - sss_override does not take precedence over override_homedir directive</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-1" date="1623153600">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1917444 - SSSD Error Msg Improvement: Server resolution failed: [2]: No such file or directory
- Resolves: rhbz#1917511 - SSSD Error Msg Improvement: Failed to resolve server 'server.example.com': Error reading file
- Resolves: rhbz#1917535 - sssd.conf man page: parameter dns_resolver_server_timeout and dns_resolver_op_timeout
- Resolves: rhbz#1940509 - [RFE] Health and Support Analyzer: Link frontend to backend requests
- Resolves: rhbz#1649464 - auto_private_groups not working as expected with posix ipa/ad trust
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1961215 - Invalid sssd-kcm return code if requested operation is not found
- Resolves: rhbz#1837090 - SSSD fails nss_getby_name for IPA user with SID if the user has user private group
- Resolves: rhbz#1879869 - sudo commands incorrectly exports the KRB5CCNAME environment variable
- Resolves: rhbz#1962550 - sss_pac_make_request fails on systems joined to Active Directory.
- Resolves: rhbz#1737489 - [RFE] SSSD should honor default Kerberos settings (keytab name) in /etc/krb5.conf</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-2" date="1624276800">- Resolves: rhbz#1974257 - 'debug_microseconds' config option is broken
- Resolves: rhbz#1936902 - SSSD Error Msg Improvement: Invalid argument
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm (additional patches and rebuild)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-1" date="1626091200">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1693379 - sssd_be and sss_cache too heavy on CPU
- Resolves: rhbz#1909373 - Missing search index for `originalADgidNumber`
- Resolves: rhbz#1954630 - [RFE] Improve debug messages by adding a unique tag for each request the backend is handling
- Resolves: rhbz#1936891 - SSSD Error Msg Improvement: Bad address
- Resolves: rhbz#1364596 - sssd still showing ipa user after removed from last group
- Resolves: rhbz#1979404 - Changes made to /etc/pam.d/sssd-shadowutils are overwritten back to default on sssd-common package upgrade</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2" date="1627905600">- Resolves: rhbz#1975169 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-8]
- Resolves: rhbz#1962042 - [sssd] RHEL 8.5 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.1" date="1634558400">- Resolves: rhbz#2014460 - tps tests fail with cross dependency on sssd debuginfo package: removal of 'sssd-libwbclient-debuginfo' is missing [rhel-8.5.0.z]</changelog>
</package>
<package pkgid="1e26ac5abe77716e5e620098e85f97b6fab81bd838082296e7ac0210af25aaf5" name="libsss_certmap-debuginfo" arch="i686">
  <version epoch="0" ver="2.5.2" rel="2.el8_5.3"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-7" date="1611662400">- Resolves: rhbz#1920001 - Do not add '%' to group names already prefixed with '%' in IPA sudo rules
- Resolves: rhbz#1918433 - sssd unable to lookup certmap rules
- Resolves: rhbz#1917382 - [abrt] [faf] sssd: dp_client_handshake_timeout(): /usr/libexec/sssd/sssd_be killed by 11</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-8" date="1613131200">- Resolves: rhbz#1926622 - Add support to verify authentication indicators in pam_sss_gss
- Resolves: rhbz#1926454 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0.
- Resolves: rhbz#1893159 - Default debug level should report all errors / failures (additional patch)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.0-1" date="1620648000">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1930535 - [abrt] [faf] sssd: monitor_service_shutdown(): /usr/sbin/sssd killed by 11
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1945888 - Inconsistant debug level for connection logging
- Resolves: rhbz#1948657 - pam_sss_gss.so doesn't work with large kerberos tickets
- Resolves: rhbz#1949149 - [RFE] Poor man's backtrace
- Resolves: rhbz#1920500 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR
- Resolves: rhbz#1923964 - [RFE] SSSD Error Msg Improvement: write_krb5info_file failed, authentication might fail.
- Resolves: rhbz#1928648 - SSSD logs improvements: clarify which config option applies to each timeout in the logs
- Resolves: rhbz#1632159 - sssd-kcm starts successfully for non existent socket_path
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm
- Resolves: rhbz#1925505 - [RFE] improve the sssd refresh timers for SUDO queries
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1925561 - sssd-ldap(5) does not report how to disable the SUDO smart queries
- Resolves: rhbz#1925621 - document impact of indices and of scope on performance of LDAP queries
- Resolves: rhbz#1855320 - [RFE] RHEL8 sssd: inheritance of the case_sensitive parameter for subdomains.
- Resolves: rhbz#1925608 - [RFE] make 'random_offset' addon to 'offline_timeout' option configurable
- Resolves: rhbz#1447945 - man page / docs update required: if two certificate matching rules with the same priority match only one is used
- Resolves: rhbz#1703436 - sssd not thread-safe in innetgr()
- Resolves: rhbz#1713143 - SSSD does not translate the 2FA text labels("first factor" / "second factor") on GDM login and screensaver unlock screen
- Resolves: rhbz#1888977 - sss_override: Usage limitations clarification in man page
- Resolves: rhbz#1890177 - Clarify "single_prompt" option in "PROMPTING CONFIGURATION SECTION" section of sssd.conf man page
- Resolves: rhbz#1902280 - fix sss_cache to also reset cached timestamp
- Resolves: rhbz#1935683 - SSSD not detecting subdomain from AD forest (RHEL 8.3)
- Resolves: rhbz#1937919 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7
- Resolves: rhbz#1944665 - No gpo found and ad_gpo_implicit_deny set to True still permits user login
- Resolves: rhbz#1919942 - sss_override does not take precedence over override_homedir directive</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-1" date="1623153600">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1917444 - SSSD Error Msg Improvement: Server resolution failed: [2]: No such file or directory
- Resolves: rhbz#1917511 - SSSD Error Msg Improvement: Failed to resolve server 'server.example.com': Error reading file
- Resolves: rhbz#1917535 - sssd.conf man page: parameter dns_resolver_server_timeout and dns_resolver_op_timeout
- Resolves: rhbz#1940509 - [RFE] Health and Support Analyzer: Link frontend to backend requests
- Resolves: rhbz#1649464 - auto_private_groups not working as expected with posix ipa/ad trust
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1961215 - Invalid sssd-kcm return code if requested operation is not found
- Resolves: rhbz#1837090 - SSSD fails nss_getby_name for IPA user with SID if the user has user private group
- Resolves: rhbz#1879869 - sudo commands incorrectly exports the KRB5CCNAME environment variable
- Resolves: rhbz#1962550 - sss_pac_make_request fails on systems joined to Active Directory.
- Resolves: rhbz#1737489 - [RFE] SSSD should honor default Kerberos settings (keytab name) in /etc/krb5.conf</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-2" date="1624276800">- Resolves: rhbz#1974257 - 'debug_microseconds' config option is broken
- Resolves: rhbz#1936902 - SSSD Error Msg Improvement: Invalid argument
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm (additional patches and rebuild)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-1" date="1626091200">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1693379 - sssd_be and sss_cache too heavy on CPU
- Resolves: rhbz#1909373 - Missing search index for `originalADgidNumber`
- Resolves: rhbz#1954630 - [RFE] Improve debug messages by adding a unique tag for each request the backend is handling
- Resolves: rhbz#1936891 - SSSD Error Msg Improvement: Bad address
- Resolves: rhbz#1364596 - sssd still showing ipa user after removed from last group
- Resolves: rhbz#1979404 - Changes made to /etc/pam.d/sssd-shadowutils are overwritten back to default on sssd-common package upgrade</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2" date="1627905600">- Resolves: rhbz#1975169 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-8]
- Resolves: rhbz#1962042 - [sssd] RHEL 8.5 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.1" date="1634558400">- Resolves: rhbz#2014460 - tps tests fail with cross dependency on sssd debuginfo package: removal of 'sssd-libwbclient-debuginfo' is missing [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.2" date="1638187200">- Resolves: rhbz#2018440 - 2.5.x based SSSD adds more AD domains than it should based on the configuration file (not trusted and from a different forest) [rhel-8.5.0.z]
- Resolves: rhbz#2016923 - autofs lookups for unknown mounts are delayed for 50s [rhel-8.5.0.z]
- Resolves: rhbz#2021499 - Make backtrace less "chatty" (avoid duplicate backtraces) [rhel-8.5.0.z]
- Resolves: rhbz#2013379 - Lookup with fully-qualified name does not work with 'cache_first = True' [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.3" date="1638878400">- Resolves: rhbz#2028828 - pam responder does not call initgroups to refresh the user entry [rhel-8.5.0.z]</changelog>
</package>
<package pkgid="ab744453721758deb45126fa92f36c1d92cf3623c259187dfbf05813cf72b68f" name="libsss_certmap-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="2.el8_5.3"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-7" date="1611662400">- Resolves: rhbz#1920001 - Do not add '%' to group names already prefixed with '%' in IPA sudo rules
- Resolves: rhbz#1918433 - sssd unable to lookup certmap rules
- Resolves: rhbz#1917382 - [abrt] [faf] sssd: dp_client_handshake_timeout(): /usr/libexec/sssd/sssd_be killed by 11</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-8" date="1613131200">- Resolves: rhbz#1926622 - Add support to verify authentication indicators in pam_sss_gss
- Resolves: rhbz#1926454 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0.
- Resolves: rhbz#1893159 - Default debug level should report all errors / failures (additional patch)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.0-1" date="1620648000">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1930535 - [abrt] [faf] sssd: monitor_service_shutdown(): /usr/sbin/sssd killed by 11
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1945888 - Inconsistant debug level for connection logging
- Resolves: rhbz#1948657 - pam_sss_gss.so doesn't work with large kerberos tickets
- Resolves: rhbz#1949149 - [RFE] Poor man's backtrace
- Resolves: rhbz#1920500 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR
- Resolves: rhbz#1923964 - [RFE] SSSD Error Msg Improvement: write_krb5info_file failed, authentication might fail.
- Resolves: rhbz#1928648 - SSSD logs improvements: clarify which config option applies to each timeout in the logs
- Resolves: rhbz#1632159 - sssd-kcm starts successfully for non existent socket_path
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm
- Resolves: rhbz#1925505 - [RFE] improve the sssd refresh timers for SUDO queries
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1925561 - sssd-ldap(5) does not report how to disable the SUDO smart queries
- Resolves: rhbz#1925621 - document impact of indices and of scope on performance of LDAP queries
- Resolves: rhbz#1855320 - [RFE] RHEL8 sssd: inheritance of the case_sensitive parameter for subdomains.
- Resolves: rhbz#1925608 - [RFE] make 'random_offset' addon to 'offline_timeout' option configurable
- Resolves: rhbz#1447945 - man page / docs update required: if two certificate matching rules with the same priority match only one is used
- Resolves: rhbz#1703436 - sssd not thread-safe in innetgr()
- Resolves: rhbz#1713143 - SSSD does not translate the 2FA text labels("first factor" / "second factor") on GDM login and screensaver unlock screen
- Resolves: rhbz#1888977 - sss_override: Usage limitations clarification in man page
- Resolves: rhbz#1890177 - Clarify "single_prompt" option in "PROMPTING CONFIGURATION SECTION" section of sssd.conf man page
- Resolves: rhbz#1902280 - fix sss_cache to also reset cached timestamp
- Resolves: rhbz#1935683 - SSSD not detecting subdomain from AD forest (RHEL 8.3)
- Resolves: rhbz#1937919 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7
- Resolves: rhbz#1944665 - No gpo found and ad_gpo_implicit_deny set to True still permits user login
- Resolves: rhbz#1919942 - sss_override does not take precedence over override_homedir directive</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-1" date="1623153600">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1917444 - SSSD Error Msg Improvement: Server resolution failed: [2]: No such file or directory
- Resolves: rhbz#1917511 - SSSD Error Msg Improvement: Failed to resolve server 'server.example.com': Error reading file
- Resolves: rhbz#1917535 - sssd.conf man page: parameter dns_resolver_server_timeout and dns_resolver_op_timeout
- Resolves: rhbz#1940509 - [RFE] Health and Support Analyzer: Link frontend to backend requests
- Resolves: rhbz#1649464 - auto_private_groups not working as expected with posix ipa/ad trust
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1961215 - Invalid sssd-kcm return code if requested operation is not found
- Resolves: rhbz#1837090 - SSSD fails nss_getby_name for IPA user with SID if the user has user private group
- Resolves: rhbz#1879869 - sudo commands incorrectly exports the KRB5CCNAME environment variable
- Resolves: rhbz#1962550 - sss_pac_make_request fails on systems joined to Active Directory.
- Resolves: rhbz#1737489 - [RFE] SSSD should honor default Kerberos settings (keytab name) in /etc/krb5.conf</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-2" date="1624276800">- Resolves: rhbz#1974257 - 'debug_microseconds' config option is broken
- Resolves: rhbz#1936902 - SSSD Error Msg Improvement: Invalid argument
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm (additional patches and rebuild)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-1" date="1626091200">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1693379 - sssd_be and sss_cache too heavy on CPU
- Resolves: rhbz#1909373 - Missing search index for `originalADgidNumber`
- Resolves: rhbz#1954630 - [RFE] Improve debug messages by adding a unique tag for each request the backend is handling
- Resolves: rhbz#1936891 - SSSD Error Msg Improvement: Bad address
- Resolves: rhbz#1364596 - sssd still showing ipa user after removed from last group
- Resolves: rhbz#1979404 - Changes made to /etc/pam.d/sssd-shadowutils are overwritten back to default on sssd-common package upgrade</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2" date="1627905600">- Resolves: rhbz#1975169 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-8]
- Resolves: rhbz#1962042 - [sssd] RHEL 8.5 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.1" date="1634558400">- Resolves: rhbz#2014460 - tps tests fail with cross dependency on sssd debuginfo package: removal of 'sssd-libwbclient-debuginfo' is missing [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.2" date="1638187200">- Resolves: rhbz#2018440 - 2.5.x based SSSD adds more AD domains than it should based on the configuration file (not trusted and from a different forest) [rhel-8.5.0.z]
- Resolves: rhbz#2016923 - autofs lookups for unknown mounts are delayed for 50s [rhel-8.5.0.z]
- Resolves: rhbz#2021499 - Make backtrace less "chatty" (avoid duplicate backtraces) [rhel-8.5.0.z]
- Resolves: rhbz#2013379 - Lookup with fully-qualified name does not work with 'cache_first = True' [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.3" date="1638878400">- Resolves: rhbz#2028828 - pam responder does not call initgroups to refresh the user entry [rhel-8.5.0.z]</changelog>
</package>
<package pkgid="89461c0e94840b7e60776521ad08953410ad508ab99f9f2dbd51c229f26fb0d9" name="libsss_certmap-debuginfo" arch="i686">
  <version epoch="0" ver="2.5.2" rel="2.el8_5.4"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-8" date="1613131200">- Resolves: rhbz#1926622 - Add support to verify authentication indicators in pam_sss_gss
- Resolves: rhbz#1926454 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0.
- Resolves: rhbz#1893159 - Default debug level should report all errors / failures (additional patch)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.0-1" date="1620648000">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1930535 - [abrt] [faf] sssd: monitor_service_shutdown(): /usr/sbin/sssd killed by 11
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1945888 - Inconsistant debug level for connection logging
- Resolves: rhbz#1948657 - pam_sss_gss.so doesn't work with large kerberos tickets
- Resolves: rhbz#1949149 - [RFE] Poor man's backtrace
- Resolves: rhbz#1920500 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR
- Resolves: rhbz#1923964 - [RFE] SSSD Error Msg Improvement: write_krb5info_file failed, authentication might fail.
- Resolves: rhbz#1928648 - SSSD logs improvements: clarify which config option applies to each timeout in the logs
- Resolves: rhbz#1632159 - sssd-kcm starts successfully for non existent socket_path
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm
- Resolves: rhbz#1925505 - [RFE] improve the sssd refresh timers for SUDO queries
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1925561 - sssd-ldap(5) does not report how to disable the SUDO smart queries
- Resolves: rhbz#1925621 - document impact of indices and of scope on performance of LDAP queries
- Resolves: rhbz#1855320 - [RFE] RHEL8 sssd: inheritance of the case_sensitive parameter for subdomains.
- Resolves: rhbz#1925608 - [RFE] make 'random_offset' addon to 'offline_timeout' option configurable
- Resolves: rhbz#1447945 - man page / docs update required: if two certificate matching rules with the same priority match only one is used
- Resolves: rhbz#1703436 - sssd not thread-safe in innetgr()
- Resolves: rhbz#1713143 - SSSD does not translate the 2FA text labels("first factor" / "second factor") on GDM login and screensaver unlock screen
- Resolves: rhbz#1888977 - sss_override: Usage limitations clarification in man page
- Resolves: rhbz#1890177 - Clarify "single_prompt" option in "PROMPTING CONFIGURATION SECTION" section of sssd.conf man page
- Resolves: rhbz#1902280 - fix sss_cache to also reset cached timestamp
- Resolves: rhbz#1935683 - SSSD not detecting subdomain from AD forest (RHEL 8.3)
- Resolves: rhbz#1937919 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7
- Resolves: rhbz#1944665 - No gpo found and ad_gpo_implicit_deny set to True still permits user login
- Resolves: rhbz#1919942 - sss_override does not take precedence over override_homedir directive</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-1" date="1623153600">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1917444 - SSSD Error Msg Improvement: Server resolution failed: [2]: No such file or directory
- Resolves: rhbz#1917511 - SSSD Error Msg Improvement: Failed to resolve server 'server.example.com': Error reading file
- Resolves: rhbz#1917535 - sssd.conf man page: parameter dns_resolver_server_timeout and dns_resolver_op_timeout
- Resolves: rhbz#1940509 - [RFE] Health and Support Analyzer: Link frontend to backend requests
- Resolves: rhbz#1649464 - auto_private_groups not working as expected with posix ipa/ad trust
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1961215 - Invalid sssd-kcm return code if requested operation is not found
- Resolves: rhbz#1837090 - SSSD fails nss_getby_name for IPA user with SID if the user has user private group
- Resolves: rhbz#1879869 - sudo commands incorrectly exports the KRB5CCNAME environment variable
- Resolves: rhbz#1962550 - sss_pac_make_request fails on systems joined to Active Directory.
- Resolves: rhbz#1737489 - [RFE] SSSD should honor default Kerberos settings (keytab name) in /etc/krb5.conf</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-2" date="1624276800">- Resolves: rhbz#1974257 - 'debug_microseconds' config option is broken
- Resolves: rhbz#1936902 - SSSD Error Msg Improvement: Invalid argument
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm (additional patches and rebuild)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-1" date="1626091200">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1693379 - sssd_be and sss_cache too heavy on CPU
- Resolves: rhbz#1909373 - Missing search index for `originalADgidNumber`
- Resolves: rhbz#1954630 - [RFE] Improve debug messages by adding a unique tag for each request the backend is handling
- Resolves: rhbz#1936891 - SSSD Error Msg Improvement: Bad address
- Resolves: rhbz#1364596 - sssd still showing ipa user after removed from last group
- Resolves: rhbz#1979404 - Changes made to /etc/pam.d/sssd-shadowutils are overwritten back to default on sssd-common package upgrade</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2" date="1627905600">- Resolves: rhbz#1975169 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-8]
- Resolves: rhbz#1962042 - [sssd] RHEL 8.5 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.1" date="1634558400">- Resolves: rhbz#2014460 - tps tests fail with cross dependency on sssd debuginfo package: removal of 'sssd-libwbclient-debuginfo' is missing [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.2" date="1638187200">- Resolves: rhbz#2018440 - 2.5.x based SSSD adds more AD domains than it should based on the configuration file (not trusted and from a different forest) [rhel-8.5.0.z]
- Resolves: rhbz#2016923 - autofs lookups for unknown mounts are delayed for 50s [rhel-8.5.0.z]
- Resolves: rhbz#2021499 - Make backtrace less "chatty" (avoid duplicate backtraces) [rhel-8.5.0.z]
- Resolves: rhbz#2013379 - Lookup with fully-qualified name does not work with 'cache_first = True' [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.3" date="1638878400">- Resolves: rhbz#2028828 - pam responder does not call initgroups to refresh the user entry [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.4" date="1642420800">- Resolves: rhbz#2030651 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries [rhel-8.5.0.z]
- Resolves: rhbz#2035285 - AD Domain in the AD Forest Missing after sssd latest update [rhel-8.5.0.z]</changelog>
</package>
<package pkgid="68691d4feaa6d0a2d132bbd7b94be31488823915f1f26cdaa3943c9a93c71f90" name="libsss_certmap-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="2.el8_5.4"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-8" date="1613131200">- Resolves: rhbz#1926622 - Add support to verify authentication indicators in pam_sss_gss
- Resolves: rhbz#1926454 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0.
- Resolves: rhbz#1893159 - Default debug level should report all errors / failures (additional patch)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.0-1" date="1620648000">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1930535 - [abrt] [faf] sssd: monitor_service_shutdown(): /usr/sbin/sssd killed by 11
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1945888 - Inconsistant debug level for connection logging
- Resolves: rhbz#1948657 - pam_sss_gss.so doesn't work with large kerberos tickets
- Resolves: rhbz#1949149 - [RFE] Poor man's backtrace
- Resolves: rhbz#1920500 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR
- Resolves: rhbz#1923964 - [RFE] SSSD Error Msg Improvement: write_krb5info_file failed, authentication might fail.
- Resolves: rhbz#1928648 - SSSD logs improvements: clarify which config option applies to each timeout in the logs
- Resolves: rhbz#1632159 - sssd-kcm starts successfully for non existent socket_path
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm
- Resolves: rhbz#1925505 - [RFE] improve the sssd refresh timers for SUDO queries
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1925561 - sssd-ldap(5) does not report how to disable the SUDO smart queries
- Resolves: rhbz#1925621 - document impact of indices and of scope on performance of LDAP queries
- Resolves: rhbz#1855320 - [RFE] RHEL8 sssd: inheritance of the case_sensitive parameter for subdomains.
- Resolves: rhbz#1925608 - [RFE] make 'random_offset' addon to 'offline_timeout' option configurable
- Resolves: rhbz#1447945 - man page / docs update required: if two certificate matching rules with the same priority match only one is used
- Resolves: rhbz#1703436 - sssd not thread-safe in innetgr()
- Resolves: rhbz#1713143 - SSSD does not translate the 2FA text labels("first factor" / "second factor") on GDM login and screensaver unlock screen
- Resolves: rhbz#1888977 - sss_override: Usage limitations clarification in man page
- Resolves: rhbz#1890177 - Clarify "single_prompt" option in "PROMPTING CONFIGURATION SECTION" section of sssd.conf man page
- Resolves: rhbz#1902280 - fix sss_cache to also reset cached timestamp
- Resolves: rhbz#1935683 - SSSD not detecting subdomain from AD forest (RHEL 8.3)
- Resolves: rhbz#1937919 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7
- Resolves: rhbz#1944665 - No gpo found and ad_gpo_implicit_deny set to True still permits user login
- Resolves: rhbz#1919942 - sss_override does not take precedence over override_homedir directive</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-1" date="1623153600">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1917444 - SSSD Error Msg Improvement: Server resolution failed: [2]: No such file or directory
- Resolves: rhbz#1917511 - SSSD Error Msg Improvement: Failed to resolve server 'server.example.com': Error reading file
- Resolves: rhbz#1917535 - sssd.conf man page: parameter dns_resolver_server_timeout and dns_resolver_op_timeout
- Resolves: rhbz#1940509 - [RFE] Health and Support Analyzer: Link frontend to backend requests
- Resolves: rhbz#1649464 - auto_private_groups not working as expected with posix ipa/ad trust
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1961215 - Invalid sssd-kcm return code if requested operation is not found
- Resolves: rhbz#1837090 - SSSD fails nss_getby_name for IPA user with SID if the user has user private group
- Resolves: rhbz#1879869 - sudo commands incorrectly exports the KRB5CCNAME environment variable
- Resolves: rhbz#1962550 - sss_pac_make_request fails on systems joined to Active Directory.
- Resolves: rhbz#1737489 - [RFE] SSSD should honor default Kerberos settings (keytab name) in /etc/krb5.conf</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-2" date="1624276800">- Resolves: rhbz#1974257 - 'debug_microseconds' config option is broken
- Resolves: rhbz#1936902 - SSSD Error Msg Improvement: Invalid argument
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm (additional patches and rebuild)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-1" date="1626091200">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1693379 - sssd_be and sss_cache too heavy on CPU
- Resolves: rhbz#1909373 - Missing search index for `originalADgidNumber`
- Resolves: rhbz#1954630 - [RFE] Improve debug messages by adding a unique tag for each request the backend is handling
- Resolves: rhbz#1936891 - SSSD Error Msg Improvement: Bad address
- Resolves: rhbz#1364596 - sssd still showing ipa user after removed from last group
- Resolves: rhbz#1979404 - Changes made to /etc/pam.d/sssd-shadowutils are overwritten back to default on sssd-common package upgrade</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2" date="1627905600">- Resolves: rhbz#1975169 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-8]
- Resolves: rhbz#1962042 - [sssd] RHEL 8.5 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.1" date="1634558400">- Resolves: rhbz#2014460 - tps tests fail with cross dependency on sssd debuginfo package: removal of 'sssd-libwbclient-debuginfo' is missing [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.2" date="1638187200">- Resolves: rhbz#2018440 - 2.5.x based SSSD adds more AD domains than it should based on the configuration file (not trusted and from a different forest) [rhel-8.5.0.z]
- Resolves: rhbz#2016923 - autofs lookups for unknown mounts are delayed for 50s [rhel-8.5.0.z]
- Resolves: rhbz#2021499 - Make backtrace less "chatty" (avoid duplicate backtraces) [rhel-8.5.0.z]
- Resolves: rhbz#2013379 - Lookup with fully-qualified name does not work with 'cache_first = True' [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.3" date="1638878400">- Resolves: rhbz#2028828 - pam responder does not call initgroups to refresh the user entry [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.4" date="1642420800">- Resolves: rhbz#2030651 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries [rhel-8.5.0.z]
- Resolves: rhbz#2035285 - AD Domain in the AD Forest Missing after sssd latest update [rhel-8.5.0.z]</changelog>
</package>
<package pkgid="44d347686034e36801b12ac8484db22a2f95d930c9c324804b0c5eb3dc75c5f5" name="libsss_idmap-debuginfo" arch="i686">
  <version epoch="0" ver="2.5.2" rel="2.el8_5.1"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-5" date="1609156800">- Resolves: rhbz#1631410 - Can't login with smartcard with multiple certs having same ID value
- Resolves: rhbz#1884213 - [RFE] add offline_timeout_max config option to control offline interval backoff (additional patches)
- Resolves: rhbz#1893159 - Default debug level should report all errors / failures
- Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-6" date="1610971200">- Resolves: rhbz#1113639 - autofs: return a connection failure until maps have been fetched
- Resolves: rhbz#1915395 - Memory leak in the simple access provider
- Resolves: rhbz#1915319 - SSSD: SBUS: failures during servers startup
- Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication (additional patches)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-7" date="1611662400">- Resolves: rhbz#1920001 - Do not add '%' to group names already prefixed with '%' in IPA sudo rules
- Resolves: rhbz#1918433 - sssd unable to lookup certmap rules
- Resolves: rhbz#1917382 - [abrt] [faf] sssd: dp_client_handshake_timeout(): /usr/libexec/sssd/sssd_be killed by 11</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-8" date="1613131200">- Resolves: rhbz#1926622 - Add support to verify authentication indicators in pam_sss_gss
- Resolves: rhbz#1926454 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0.
- Resolves: rhbz#1893159 - Default debug level should report all errors / failures (additional patch)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.0-1" date="1620648000">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1930535 - [abrt] [faf] sssd: monitor_service_shutdown(): /usr/sbin/sssd killed by 11
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1945888 - Inconsistant debug level for connection logging
- Resolves: rhbz#1948657 - pam_sss_gss.so doesn't work with large kerberos tickets
- Resolves: rhbz#1949149 - [RFE] Poor man's backtrace
- Resolves: rhbz#1920500 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR
- Resolves: rhbz#1923964 - [RFE] SSSD Error Msg Improvement: write_krb5info_file failed, authentication might fail.
- Resolves: rhbz#1928648 - SSSD logs improvements: clarify which config option applies to each timeout in the logs
- Resolves: rhbz#1632159 - sssd-kcm starts successfully for non existent socket_path
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm
- Resolves: rhbz#1925505 - [RFE] improve the sssd refresh timers for SUDO queries
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1925561 - sssd-ldap(5) does not report how to disable the SUDO smart queries
- Resolves: rhbz#1925621 - document impact of indices and of scope on performance of LDAP queries
- Resolves: rhbz#1855320 - [RFE] RHEL8 sssd: inheritance of the case_sensitive parameter for subdomains.
- Resolves: rhbz#1925608 - [RFE] make 'random_offset' addon to 'offline_timeout' option configurable
- Resolves: rhbz#1447945 - man page / docs update required: if two certificate matching rules with the same priority match only one is used
- Resolves: rhbz#1703436 - sssd not thread-safe in innetgr()
- Resolves: rhbz#1713143 - SSSD does not translate the 2FA text labels("first factor" / "second factor") on GDM login and screensaver unlock screen
- Resolves: rhbz#1888977 - sss_override: Usage limitations clarification in man page
- Resolves: rhbz#1890177 - Clarify "single_prompt" option in "PROMPTING CONFIGURATION SECTION" section of sssd.conf man page
- Resolves: rhbz#1902280 - fix sss_cache to also reset cached timestamp
- Resolves: rhbz#1935683 - SSSD not detecting subdomain from AD forest (RHEL 8.3)
- Resolves: rhbz#1937919 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7
- Resolves: rhbz#1944665 - No gpo found and ad_gpo_implicit_deny set to True still permits user login
- Resolves: rhbz#1919942 - sss_override does not take precedence over override_homedir directive</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-1" date="1623153600">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1917444 - SSSD Error Msg Improvement: Server resolution failed: [2]: No such file or directory
- Resolves: rhbz#1917511 - SSSD Error Msg Improvement: Failed to resolve server 'server.example.com': Error reading file
- Resolves: rhbz#1917535 - sssd.conf man page: parameter dns_resolver_server_timeout and dns_resolver_op_timeout
- Resolves: rhbz#1940509 - [RFE] Health and Support Analyzer: Link frontend to backend requests
- Resolves: rhbz#1649464 - auto_private_groups not working as expected with posix ipa/ad trust
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1961215 - Invalid sssd-kcm return code if requested operation is not found
- Resolves: rhbz#1837090 - SSSD fails nss_getby_name for IPA user with SID if the user has user private group
- Resolves: rhbz#1879869 - sudo commands incorrectly exports the KRB5CCNAME environment variable
- Resolves: rhbz#1962550 - sss_pac_make_request fails on systems joined to Active Directory.
- Resolves: rhbz#1737489 - [RFE] SSSD should honor default Kerberos settings (keytab name) in /etc/krb5.conf</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-2" date="1624276800">- Resolves: rhbz#1974257 - 'debug_microseconds' config option is broken
- Resolves: rhbz#1936902 - SSSD Error Msg Improvement: Invalid argument
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm (additional patches and rebuild)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-1" date="1626091200">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1693379 - sssd_be and sss_cache too heavy on CPU
- Resolves: rhbz#1909373 - Missing search index for `originalADgidNumber`
- Resolves: rhbz#1954630 - [RFE] Improve debug messages by adding a unique tag for each request the backend is handling
- Resolves: rhbz#1936891 - SSSD Error Msg Improvement: Bad address
- Resolves: rhbz#1364596 - sssd still showing ipa user after removed from last group
- Resolves: rhbz#1979404 - Changes made to /etc/pam.d/sssd-shadowutils are overwritten back to default on sssd-common package upgrade</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2" date="1627905600">- Resolves: rhbz#1975169 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-8]
- Resolves: rhbz#1962042 - [sssd] RHEL 8.5 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.1" date="1634558400">- Resolves: rhbz#2014460 - tps tests fail with cross dependency on sssd debuginfo package: removal of 'sssd-libwbclient-debuginfo' is missing [rhel-8.5.0.z]</changelog>
</package>
<package pkgid="dc8a4f2714f1f2782108f48d495f3a4eb2d25a595931df01a905190a755c04b9" name="libsss_idmap-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="2.el8_5.1"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-5" date="1609156800">- Resolves: rhbz#1631410 - Can't login with smartcard with multiple certs having same ID value
- Resolves: rhbz#1884213 - [RFE] add offline_timeout_max config option to control offline interval backoff (additional patches)
- Resolves: rhbz#1893159 - Default debug level should report all errors / failures
- Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-6" date="1610971200">- Resolves: rhbz#1113639 - autofs: return a connection failure until maps have been fetched
- Resolves: rhbz#1915395 - Memory leak in the simple access provider
- Resolves: rhbz#1915319 - SSSD: SBUS: failures during servers startup
- Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication (additional patches)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-7" date="1611662400">- Resolves: rhbz#1920001 - Do not add '%' to group names already prefixed with '%' in IPA sudo rules
- Resolves: rhbz#1918433 - sssd unable to lookup certmap rules
- Resolves: rhbz#1917382 - [abrt] [faf] sssd: dp_client_handshake_timeout(): /usr/libexec/sssd/sssd_be killed by 11</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-8" date="1613131200">- Resolves: rhbz#1926622 - Add support to verify authentication indicators in pam_sss_gss
- Resolves: rhbz#1926454 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0.
- Resolves: rhbz#1893159 - Default debug level should report all errors / failures (additional patch)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.0-1" date="1620648000">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1930535 - [abrt] [faf] sssd: monitor_service_shutdown(): /usr/sbin/sssd killed by 11
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1945888 - Inconsistant debug level for connection logging
- Resolves: rhbz#1948657 - pam_sss_gss.so doesn't work with large kerberos tickets
- Resolves: rhbz#1949149 - [RFE] Poor man's backtrace
- Resolves: rhbz#1920500 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR
- Resolves: rhbz#1923964 - [RFE] SSSD Error Msg Improvement: write_krb5info_file failed, authentication might fail.
- Resolves: rhbz#1928648 - SSSD logs improvements: clarify which config option applies to each timeout in the logs
- Resolves: rhbz#1632159 - sssd-kcm starts successfully for non existent socket_path
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm
- Resolves: rhbz#1925505 - [RFE] improve the sssd refresh timers for SUDO queries
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1925561 - sssd-ldap(5) does not report how to disable the SUDO smart queries
- Resolves: rhbz#1925621 - document impact of indices and of scope on performance of LDAP queries
- Resolves: rhbz#1855320 - [RFE] RHEL8 sssd: inheritance of the case_sensitive parameter for subdomains.
- Resolves: rhbz#1925608 - [RFE] make 'random_offset' addon to 'offline_timeout' option configurable
- Resolves: rhbz#1447945 - man page / docs update required: if two certificate matching rules with the same priority match only one is used
- Resolves: rhbz#1703436 - sssd not thread-safe in innetgr()
- Resolves: rhbz#1713143 - SSSD does not translate the 2FA text labels("first factor" / "second factor") on GDM login and screensaver unlock screen
- Resolves: rhbz#1888977 - sss_override: Usage limitations clarification in man page
- Resolves: rhbz#1890177 - Clarify "single_prompt" option in "PROMPTING CONFIGURATION SECTION" section of sssd.conf man page
- Resolves: rhbz#1902280 - fix sss_cache to also reset cached timestamp
- Resolves: rhbz#1935683 - SSSD not detecting subdomain from AD forest (RHEL 8.3)
- Resolves: rhbz#1937919 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7
- Resolves: rhbz#1944665 - No gpo found and ad_gpo_implicit_deny set to True still permits user login
- Resolves: rhbz#1919942 - sss_override does not take precedence over override_homedir directive</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-1" date="1623153600">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1917444 - SSSD Error Msg Improvement: Server resolution failed: [2]: No such file or directory
- Resolves: rhbz#1917511 - SSSD Error Msg Improvement: Failed to resolve server 'server.example.com': Error reading file
- Resolves: rhbz#1917535 - sssd.conf man page: parameter dns_resolver_server_timeout and dns_resolver_op_timeout
- Resolves: rhbz#1940509 - [RFE] Health and Support Analyzer: Link frontend to backend requests
- Resolves: rhbz#1649464 - auto_private_groups not working as expected with posix ipa/ad trust
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1961215 - Invalid sssd-kcm return code if requested operation is not found
- Resolves: rhbz#1837090 - SSSD fails nss_getby_name for IPA user with SID if the user has user private group
- Resolves: rhbz#1879869 - sudo commands incorrectly exports the KRB5CCNAME environment variable
- Resolves: rhbz#1962550 - sss_pac_make_request fails on systems joined to Active Directory.
- Resolves: rhbz#1737489 - [RFE] SSSD should honor default Kerberos settings (keytab name) in /etc/krb5.conf</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-2" date="1624276800">- Resolves: rhbz#1974257 - 'debug_microseconds' config option is broken
- Resolves: rhbz#1936902 - SSSD Error Msg Improvement: Invalid argument
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm (additional patches and rebuild)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-1" date="1626091200">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1693379 - sssd_be and sss_cache too heavy on CPU
- Resolves: rhbz#1909373 - Missing search index for `originalADgidNumber`
- Resolves: rhbz#1954630 - [RFE] Improve debug messages by adding a unique tag for each request the backend is handling
- Resolves: rhbz#1936891 - SSSD Error Msg Improvement: Bad address
- Resolves: rhbz#1364596 - sssd still showing ipa user after removed from last group
- Resolves: rhbz#1979404 - Changes made to /etc/pam.d/sssd-shadowutils are overwritten back to default on sssd-common package upgrade</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2" date="1627905600">- Resolves: rhbz#1975169 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-8]
- Resolves: rhbz#1962042 - [sssd] RHEL 8.5 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.1" date="1634558400">- Resolves: rhbz#2014460 - tps tests fail with cross dependency on sssd debuginfo package: removal of 'sssd-libwbclient-debuginfo' is missing [rhel-8.5.0.z]</changelog>
</package>
<package pkgid="e449ecc2040ec324e0779fce7049abcd0bf8136f8db1babd5241c33fd1f8ebfb" name="libsss_idmap-debuginfo" arch="i686">
  <version epoch="0" ver="2.5.2" rel="2.el8_5.3"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-7" date="1611662400">- Resolves: rhbz#1920001 - Do not add '%' to group names already prefixed with '%' in IPA sudo rules
- Resolves: rhbz#1918433 - sssd unable to lookup certmap rules
- Resolves: rhbz#1917382 - [abrt] [faf] sssd: dp_client_handshake_timeout(): /usr/libexec/sssd/sssd_be killed by 11</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-8" date="1613131200">- Resolves: rhbz#1926622 - Add support to verify authentication indicators in pam_sss_gss
- Resolves: rhbz#1926454 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0.
- Resolves: rhbz#1893159 - Default debug level should report all errors / failures (additional patch)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.0-1" date="1620648000">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1930535 - [abrt] [faf] sssd: monitor_service_shutdown(): /usr/sbin/sssd killed by 11
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1945888 - Inconsistant debug level for connection logging
- Resolves: rhbz#1948657 - pam_sss_gss.so doesn't work with large kerberos tickets
- Resolves: rhbz#1949149 - [RFE] Poor man's backtrace
- Resolves: rhbz#1920500 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR
- Resolves: rhbz#1923964 - [RFE] SSSD Error Msg Improvement: write_krb5info_file failed, authentication might fail.
- Resolves: rhbz#1928648 - SSSD logs improvements: clarify which config option applies to each timeout in the logs
- Resolves: rhbz#1632159 - sssd-kcm starts successfully for non existent socket_path
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm
- Resolves: rhbz#1925505 - [RFE] improve the sssd refresh timers for SUDO queries
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1925561 - sssd-ldap(5) does not report how to disable the SUDO smart queries
- Resolves: rhbz#1925621 - document impact of indices and of scope on performance of LDAP queries
- Resolves: rhbz#1855320 - [RFE] RHEL8 sssd: inheritance of the case_sensitive parameter for subdomains.
- Resolves: rhbz#1925608 - [RFE] make 'random_offset' addon to 'offline_timeout' option configurable
- Resolves: rhbz#1447945 - man page / docs update required: if two certificate matching rules with the same priority match only one is used
- Resolves: rhbz#1703436 - sssd not thread-safe in innetgr()
- Resolves: rhbz#1713143 - SSSD does not translate the 2FA text labels("first factor" / "second factor") on GDM login and screensaver unlock screen
- Resolves: rhbz#1888977 - sss_override: Usage limitations clarification in man page
- Resolves: rhbz#1890177 - Clarify "single_prompt" option in "PROMPTING CONFIGURATION SECTION" section of sssd.conf man page
- Resolves: rhbz#1902280 - fix sss_cache to also reset cached timestamp
- Resolves: rhbz#1935683 - SSSD not detecting subdomain from AD forest (RHEL 8.3)
- Resolves: rhbz#1937919 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7
- Resolves: rhbz#1944665 - No gpo found and ad_gpo_implicit_deny set to True still permits user login
- Resolves: rhbz#1919942 - sss_override does not take precedence over override_homedir directive</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-1" date="1623153600">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1917444 - SSSD Error Msg Improvement: Server resolution failed: [2]: No such file or directory
- Resolves: rhbz#1917511 - SSSD Error Msg Improvement: Failed to resolve server 'server.example.com': Error reading file
- Resolves: rhbz#1917535 - sssd.conf man page: parameter dns_resolver_server_timeout and dns_resolver_op_timeout
- Resolves: rhbz#1940509 - [RFE] Health and Support Analyzer: Link frontend to backend requests
- Resolves: rhbz#1649464 - auto_private_groups not working as expected with posix ipa/ad trust
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1961215 - Invalid sssd-kcm return code if requested operation is not found
- Resolves: rhbz#1837090 - SSSD fails nss_getby_name for IPA user with SID if the user has user private group
- Resolves: rhbz#1879869 - sudo commands incorrectly exports the KRB5CCNAME environment variable
- Resolves: rhbz#1962550 - sss_pac_make_request fails on systems joined to Active Directory.
- Resolves: rhbz#1737489 - [RFE] SSSD should honor default Kerberos settings (keytab name) in /etc/krb5.conf</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-2" date="1624276800">- Resolves: rhbz#1974257 - 'debug_microseconds' config option is broken
- Resolves: rhbz#1936902 - SSSD Error Msg Improvement: Invalid argument
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm (additional patches and rebuild)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-1" date="1626091200">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1693379 - sssd_be and sss_cache too heavy on CPU
- Resolves: rhbz#1909373 - Missing search index for `originalADgidNumber`
- Resolves: rhbz#1954630 - [RFE] Improve debug messages by adding a unique tag for each request the backend is handling
- Resolves: rhbz#1936891 - SSSD Error Msg Improvement: Bad address
- Resolves: rhbz#1364596 - sssd still showing ipa user after removed from last group
- Resolves: rhbz#1979404 - Changes made to /etc/pam.d/sssd-shadowutils are overwritten back to default on sssd-common package upgrade</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2" date="1627905600">- Resolves: rhbz#1975169 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-8]
- Resolves: rhbz#1962042 - [sssd] RHEL 8.5 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.1" date="1634558400">- Resolves: rhbz#2014460 - tps tests fail with cross dependency on sssd debuginfo package: removal of 'sssd-libwbclient-debuginfo' is missing [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.2" date="1638187200">- Resolves: rhbz#2018440 - 2.5.x based SSSD adds more AD domains than it should based on the configuration file (not trusted and from a different forest) [rhel-8.5.0.z]
- Resolves: rhbz#2016923 - autofs lookups for unknown mounts are delayed for 50s [rhel-8.5.0.z]
- Resolves: rhbz#2021499 - Make backtrace less "chatty" (avoid duplicate backtraces) [rhel-8.5.0.z]
- Resolves: rhbz#2013379 - Lookup with fully-qualified name does not work with 'cache_first = True' [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.3" date="1638878400">- Resolves: rhbz#2028828 - pam responder does not call initgroups to refresh the user entry [rhel-8.5.0.z]</changelog>
</package>
<package pkgid="f722aba60406f103a7e80857d2cdb2bffbad83fa19fb300b8ad1dcb5ef9aadce" name="libsss_idmap-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="2.el8_5.3"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-7" date="1611662400">- Resolves: rhbz#1920001 - Do not add '%' to group names already prefixed with '%' in IPA sudo rules
- Resolves: rhbz#1918433 - sssd unable to lookup certmap rules
- Resolves: rhbz#1917382 - [abrt] [faf] sssd: dp_client_handshake_timeout(): /usr/libexec/sssd/sssd_be killed by 11</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-8" date="1613131200">- Resolves: rhbz#1926622 - Add support to verify authentication indicators in pam_sss_gss
- Resolves: rhbz#1926454 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0.
- Resolves: rhbz#1893159 - Default debug level should report all errors / failures (additional patch)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.0-1" date="1620648000">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1930535 - [abrt] [faf] sssd: monitor_service_shutdown(): /usr/sbin/sssd killed by 11
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1945888 - Inconsistant debug level for connection logging
- Resolves: rhbz#1948657 - pam_sss_gss.so doesn't work with large kerberos tickets
- Resolves: rhbz#1949149 - [RFE] Poor man's backtrace
- Resolves: rhbz#1920500 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR
- Resolves: rhbz#1923964 - [RFE] SSSD Error Msg Improvement: write_krb5info_file failed, authentication might fail.
- Resolves: rhbz#1928648 - SSSD logs improvements: clarify which config option applies to each timeout in the logs
- Resolves: rhbz#1632159 - sssd-kcm starts successfully for non existent socket_path
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm
- Resolves: rhbz#1925505 - [RFE] improve the sssd refresh timers for SUDO queries
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1925561 - sssd-ldap(5) does not report how to disable the SUDO smart queries
- Resolves: rhbz#1925621 - document impact of indices and of scope on performance of LDAP queries
- Resolves: rhbz#1855320 - [RFE] RHEL8 sssd: inheritance of the case_sensitive parameter for subdomains.
- Resolves: rhbz#1925608 - [RFE] make 'random_offset' addon to 'offline_timeout' option configurable
- Resolves: rhbz#1447945 - man page / docs update required: if two certificate matching rules with the same priority match only one is used
- Resolves: rhbz#1703436 - sssd not thread-safe in innetgr()
- Resolves: rhbz#1713143 - SSSD does not translate the 2FA text labels("first factor" / "second factor") on GDM login and screensaver unlock screen
- Resolves: rhbz#1888977 - sss_override: Usage limitations clarification in man page
- Resolves: rhbz#1890177 - Clarify "single_prompt" option in "PROMPTING CONFIGURATION SECTION" section of sssd.conf man page
- Resolves: rhbz#1902280 - fix sss_cache to also reset cached timestamp
- Resolves: rhbz#1935683 - SSSD not detecting subdomain from AD forest (RHEL 8.3)
- Resolves: rhbz#1937919 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7
- Resolves: rhbz#1944665 - No gpo found and ad_gpo_implicit_deny set to True still permits user login
- Resolves: rhbz#1919942 - sss_override does not take precedence over override_homedir directive</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-1" date="1623153600">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1917444 - SSSD Error Msg Improvement: Server resolution failed: [2]: No such file or directory
- Resolves: rhbz#1917511 - SSSD Error Msg Improvement: Failed to resolve server 'server.example.com': Error reading file
- Resolves: rhbz#1917535 - sssd.conf man page: parameter dns_resolver_server_timeout and dns_resolver_op_timeout
- Resolves: rhbz#1940509 - [RFE] Health and Support Analyzer: Link frontend to backend requests
- Resolves: rhbz#1649464 - auto_private_groups not working as expected with posix ipa/ad trust
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1961215 - Invalid sssd-kcm return code if requested operation is not found
- Resolves: rhbz#1837090 - SSSD fails nss_getby_name for IPA user with SID if the user has user private group
- Resolves: rhbz#1879869 - sudo commands incorrectly exports the KRB5CCNAME environment variable
- Resolves: rhbz#1962550 - sss_pac_make_request fails on systems joined to Active Directory.
- Resolves: rhbz#1737489 - [RFE] SSSD should honor default Kerberos settings (keytab name) in /etc/krb5.conf</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-2" date="1624276800">- Resolves: rhbz#1974257 - 'debug_microseconds' config option is broken
- Resolves: rhbz#1936902 - SSSD Error Msg Improvement: Invalid argument
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm (additional patches and rebuild)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-1" date="1626091200">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1693379 - sssd_be and sss_cache too heavy on CPU
- Resolves: rhbz#1909373 - Missing search index for `originalADgidNumber`
- Resolves: rhbz#1954630 - [RFE] Improve debug messages by adding a unique tag for each request the backend is handling
- Resolves: rhbz#1936891 - SSSD Error Msg Improvement: Bad address
- Resolves: rhbz#1364596 - sssd still showing ipa user after removed from last group
- Resolves: rhbz#1979404 - Changes made to /etc/pam.d/sssd-shadowutils are overwritten back to default on sssd-common package upgrade</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2" date="1627905600">- Resolves: rhbz#1975169 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-8]
- Resolves: rhbz#1962042 - [sssd] RHEL 8.5 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.1" date="1634558400">- Resolves: rhbz#2014460 - tps tests fail with cross dependency on sssd debuginfo package: removal of 'sssd-libwbclient-debuginfo' is missing [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.2" date="1638187200">- Resolves: rhbz#2018440 - 2.5.x based SSSD adds more AD domains than it should based on the configuration file (not trusted and from a different forest) [rhel-8.5.0.z]
- Resolves: rhbz#2016923 - autofs lookups for unknown mounts are delayed for 50s [rhel-8.5.0.z]
- Resolves: rhbz#2021499 - Make backtrace less "chatty" (avoid duplicate backtraces) [rhel-8.5.0.z]
- Resolves: rhbz#2013379 - Lookup with fully-qualified name does not work with 'cache_first = True' [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.3" date="1638878400">- Resolves: rhbz#2028828 - pam responder does not call initgroups to refresh the user entry [rhel-8.5.0.z]</changelog>
</package>
<package pkgid="4bb4960e51d624cacffe5e648ad1e7e685582475b75cb6da200039843593733a" name="libsss_idmap-debuginfo" arch="i686">
  <version epoch="0" ver="2.5.2" rel="2.el8_5.4"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-8" date="1613131200">- Resolves: rhbz#1926622 - Add support to verify authentication indicators in pam_sss_gss
- Resolves: rhbz#1926454 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0.
- Resolves: rhbz#1893159 - Default debug level should report all errors / failures (additional patch)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.0-1" date="1620648000">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1930535 - [abrt] [faf] sssd: monitor_service_shutdown(): /usr/sbin/sssd killed by 11
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1945888 - Inconsistant debug level for connection logging
- Resolves: rhbz#1948657 - pam_sss_gss.so doesn't work with large kerberos tickets
- Resolves: rhbz#1949149 - [RFE] Poor man's backtrace
- Resolves: rhbz#1920500 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR
- Resolves: rhbz#1923964 - [RFE] SSSD Error Msg Improvement: write_krb5info_file failed, authentication might fail.
- Resolves: rhbz#1928648 - SSSD logs improvements: clarify which config option applies to each timeout in the logs
- Resolves: rhbz#1632159 - sssd-kcm starts successfully for non existent socket_path
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm
- Resolves: rhbz#1925505 - [RFE] improve the sssd refresh timers for SUDO queries
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1925561 - sssd-ldap(5) does not report how to disable the SUDO smart queries
- Resolves: rhbz#1925621 - document impact of indices and of scope on performance of LDAP queries
- Resolves: rhbz#1855320 - [RFE] RHEL8 sssd: inheritance of the case_sensitive parameter for subdomains.
- Resolves: rhbz#1925608 - [RFE] make 'random_offset' addon to 'offline_timeout' option configurable
- Resolves: rhbz#1447945 - man page / docs update required: if two certificate matching rules with the same priority match only one is used
- Resolves: rhbz#1703436 - sssd not thread-safe in innetgr()
- Resolves: rhbz#1713143 - SSSD does not translate the 2FA text labels("first factor" / "second factor") on GDM login and screensaver unlock screen
- Resolves: rhbz#1888977 - sss_override: Usage limitations clarification in man page
- Resolves: rhbz#1890177 - Clarify "single_prompt" option in "PROMPTING CONFIGURATION SECTION" section of sssd.conf man page
- Resolves: rhbz#1902280 - fix sss_cache to also reset cached timestamp
- Resolves: rhbz#1935683 - SSSD not detecting subdomain from AD forest (RHEL 8.3)
- Resolves: rhbz#1937919 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7
- Resolves: rhbz#1944665 - No gpo found and ad_gpo_implicit_deny set to True still permits user login
- Resolves: rhbz#1919942 - sss_override does not take precedence over override_homedir directive</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-1" date="1623153600">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1917444 - SSSD Error Msg Improvement: Server resolution failed: [2]: No such file or directory
- Resolves: rhbz#1917511 - SSSD Error Msg Improvement: Failed to resolve server 'server.example.com': Error reading file
- Resolves: rhbz#1917535 - sssd.conf man page: parameter dns_resolver_server_timeout and dns_resolver_op_timeout
- Resolves: rhbz#1940509 - [RFE] Health and Support Analyzer: Link frontend to backend requests
- Resolves: rhbz#1649464 - auto_private_groups not working as expected with posix ipa/ad trust
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1961215 - Invalid sssd-kcm return code if requested operation is not found
- Resolves: rhbz#1837090 - SSSD fails nss_getby_name for IPA user with SID if the user has user private group
- Resolves: rhbz#1879869 - sudo commands incorrectly exports the KRB5CCNAME environment variable
- Resolves: rhbz#1962550 - sss_pac_make_request fails on systems joined to Active Directory.
- Resolves: rhbz#1737489 - [RFE] SSSD should honor default Kerberos settings (keytab name) in /etc/krb5.conf</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-2" date="1624276800">- Resolves: rhbz#1974257 - 'debug_microseconds' config option is broken
- Resolves: rhbz#1936902 - SSSD Error Msg Improvement: Invalid argument
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm (additional patches and rebuild)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-1" date="1626091200">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1693379 - sssd_be and sss_cache too heavy on CPU
- Resolves: rhbz#1909373 - Missing search index for `originalADgidNumber`
- Resolves: rhbz#1954630 - [RFE] Improve debug messages by adding a unique tag for each request the backend is handling
- Resolves: rhbz#1936891 - SSSD Error Msg Improvement: Bad address
- Resolves: rhbz#1364596 - sssd still showing ipa user after removed from last group
- Resolves: rhbz#1979404 - Changes made to /etc/pam.d/sssd-shadowutils are overwritten back to default on sssd-common package upgrade</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2" date="1627905600">- Resolves: rhbz#1975169 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-8]
- Resolves: rhbz#1962042 - [sssd] RHEL 8.5 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.1" date="1634558400">- Resolves: rhbz#2014460 - tps tests fail with cross dependency on sssd debuginfo package: removal of 'sssd-libwbclient-debuginfo' is missing [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.2" date="1638187200">- Resolves: rhbz#2018440 - 2.5.x based SSSD adds more AD domains than it should based on the configuration file (not trusted and from a different forest) [rhel-8.5.0.z]
- Resolves: rhbz#2016923 - autofs lookups for unknown mounts are delayed for 50s [rhel-8.5.0.z]
- Resolves: rhbz#2021499 - Make backtrace less "chatty" (avoid duplicate backtraces) [rhel-8.5.0.z]
- Resolves: rhbz#2013379 - Lookup with fully-qualified name does not work with 'cache_first = True' [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.3" date="1638878400">- Resolves: rhbz#2028828 - pam responder does not call initgroups to refresh the user entry [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.4" date="1642420800">- Resolves: rhbz#2030651 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries [rhel-8.5.0.z]
- Resolves: rhbz#2035285 - AD Domain in the AD Forest Missing after sssd latest update [rhel-8.5.0.z]</changelog>
</package>
<package pkgid="1b42b92af008ee3a061d2d2f69cf7128360f65dcdea5d040b2217a276a4407a1" name="libsss_idmap-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="2.el8_5.4"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-8" date="1613131200">- Resolves: rhbz#1926622 - Add support to verify authentication indicators in pam_sss_gss
- Resolves: rhbz#1926454 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0.
- Resolves: rhbz#1893159 - Default debug level should report all errors / failures (additional patch)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.0-1" date="1620648000">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1930535 - [abrt] [faf] sssd: monitor_service_shutdown(): /usr/sbin/sssd killed by 11
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1945888 - Inconsistant debug level for connection logging
- Resolves: rhbz#1948657 - pam_sss_gss.so doesn't work with large kerberos tickets
- Resolves: rhbz#1949149 - [RFE] Poor man's backtrace
- Resolves: rhbz#1920500 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR
- Resolves: rhbz#1923964 - [RFE] SSSD Error Msg Improvement: write_krb5info_file failed, authentication might fail.
- Resolves: rhbz#1928648 - SSSD logs improvements: clarify which config option applies to each timeout in the logs
- Resolves: rhbz#1632159 - sssd-kcm starts successfully for non existent socket_path
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm
- Resolves: rhbz#1925505 - [RFE] improve the sssd refresh timers for SUDO queries
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1925561 - sssd-ldap(5) does not report how to disable the SUDO smart queries
- Resolves: rhbz#1925621 - document impact of indices and of scope on performance of LDAP queries
- Resolves: rhbz#1855320 - [RFE] RHEL8 sssd: inheritance of the case_sensitive parameter for subdomains.
- Resolves: rhbz#1925608 - [RFE] make 'random_offset' addon to 'offline_timeout' option configurable
- Resolves: rhbz#1447945 - man page / docs update required: if two certificate matching rules with the same priority match only one is used
- Resolves: rhbz#1703436 - sssd not thread-safe in innetgr()
- Resolves: rhbz#1713143 - SSSD does not translate the 2FA text labels("first factor" / "second factor") on GDM login and screensaver unlock screen
- Resolves: rhbz#1888977 - sss_override: Usage limitations clarification in man page
- Resolves: rhbz#1890177 - Clarify "single_prompt" option in "PROMPTING CONFIGURATION SECTION" section of sssd.conf man page
- Resolves: rhbz#1902280 - fix sss_cache to also reset cached timestamp
- Resolves: rhbz#1935683 - SSSD not detecting subdomain from AD forest (RHEL 8.3)
- Resolves: rhbz#1937919 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7
- Resolves: rhbz#1944665 - No gpo found and ad_gpo_implicit_deny set to True still permits user login
- Resolves: rhbz#1919942 - sss_override does not take precedence over override_homedir directive</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-1" date="1623153600">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1917444 - SSSD Error Msg Improvement: Server resolution failed: [2]: No such file or directory
- Resolves: rhbz#1917511 - SSSD Error Msg Improvement: Failed to resolve server 'server.example.com': Error reading file
- Resolves: rhbz#1917535 - sssd.conf man page: parameter dns_resolver_server_timeout and dns_resolver_op_timeout
- Resolves: rhbz#1940509 - [RFE] Health and Support Analyzer: Link frontend to backend requests
- Resolves: rhbz#1649464 - auto_private_groups not working as expected with posix ipa/ad trust
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1961215 - Invalid sssd-kcm return code if requested operation is not found
- Resolves: rhbz#1837090 - SSSD fails nss_getby_name for IPA user with SID if the user has user private group
- Resolves: rhbz#1879869 - sudo commands incorrectly exports the KRB5CCNAME environment variable
- Resolves: rhbz#1962550 - sss_pac_make_request fails on systems joined to Active Directory.
- Resolves: rhbz#1737489 - [RFE] SSSD should honor default Kerberos settings (keytab name) in /etc/krb5.conf</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-2" date="1624276800">- Resolves: rhbz#1974257 - 'debug_microseconds' config option is broken
- Resolves: rhbz#1936902 - SSSD Error Msg Improvement: Invalid argument
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm (additional patches and rebuild)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-1" date="1626091200">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1693379 - sssd_be and sss_cache too heavy on CPU
- Resolves: rhbz#1909373 - Missing search index for `originalADgidNumber`
- Resolves: rhbz#1954630 - [RFE] Improve debug messages by adding a unique tag for each request the backend is handling
- Resolves: rhbz#1936891 - SSSD Error Msg Improvement: Bad address
- Resolves: rhbz#1364596 - sssd still showing ipa user after removed from last group
- Resolves: rhbz#1979404 - Changes made to /etc/pam.d/sssd-shadowutils are overwritten back to default on sssd-common package upgrade</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2" date="1627905600">- Resolves: rhbz#1975169 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-8]
- Resolves: rhbz#1962042 - [sssd] RHEL 8.5 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.1" date="1634558400">- Resolves: rhbz#2014460 - tps tests fail with cross dependency on sssd debuginfo package: removal of 'sssd-libwbclient-debuginfo' is missing [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.2" date="1638187200">- Resolves: rhbz#2018440 - 2.5.x based SSSD adds more AD domains than it should based on the configuration file (not trusted and from a different forest) [rhel-8.5.0.z]
- Resolves: rhbz#2016923 - autofs lookups for unknown mounts are delayed for 50s [rhel-8.5.0.z]
- Resolves: rhbz#2021499 - Make backtrace less "chatty" (avoid duplicate backtraces) [rhel-8.5.0.z]
- Resolves: rhbz#2013379 - Lookup with fully-qualified name does not work with 'cache_first = True' [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.3" date="1638878400">- Resolves: rhbz#2028828 - pam responder does not call initgroups to refresh the user entry [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.4" date="1642420800">- Resolves: rhbz#2030651 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries [rhel-8.5.0.z]
- Resolves: rhbz#2035285 - AD Domain in the AD Forest Missing after sssd latest update [rhel-8.5.0.z]</changelog>
</package>
<package pkgid="22029fec9d9439a87c8813107214e2ec103bab6e3ae63cf13508b4d82be3035b" name="libsss_nss_idmap-debuginfo" arch="i686">
  <version epoch="0" ver="2.5.2" rel="2.el8_5.1"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-5" date="1609156800">- Resolves: rhbz#1631410 - Can't login with smartcard with multiple certs having same ID value
- Resolves: rhbz#1884213 - [RFE] add offline_timeout_max config option to control offline interval backoff (additional patches)
- Resolves: rhbz#1893159 - Default debug level should report all errors / failures
- Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-6" date="1610971200">- Resolves: rhbz#1113639 - autofs: return a connection failure until maps have been fetched
- Resolves: rhbz#1915395 - Memory leak in the simple access provider
- Resolves: rhbz#1915319 - SSSD: SBUS: failures during servers startup
- Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication (additional patches)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-7" date="1611662400">- Resolves: rhbz#1920001 - Do not add '%' to group names already prefixed with '%' in IPA sudo rules
- Resolves: rhbz#1918433 - sssd unable to lookup certmap rules
- Resolves: rhbz#1917382 - [abrt] [faf] sssd: dp_client_handshake_timeout(): /usr/libexec/sssd/sssd_be killed by 11</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-8" date="1613131200">- Resolves: rhbz#1926622 - Add support to verify authentication indicators in pam_sss_gss
- Resolves: rhbz#1926454 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0.
- Resolves: rhbz#1893159 - Default debug level should report all errors / failures (additional patch)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.0-1" date="1620648000">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1930535 - [abrt] [faf] sssd: monitor_service_shutdown(): /usr/sbin/sssd killed by 11
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1945888 - Inconsistant debug level for connection logging
- Resolves: rhbz#1948657 - pam_sss_gss.so doesn't work with large kerberos tickets
- Resolves: rhbz#1949149 - [RFE] Poor man's backtrace
- Resolves: rhbz#1920500 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR
- Resolves: rhbz#1923964 - [RFE] SSSD Error Msg Improvement: write_krb5info_file failed, authentication might fail.
- Resolves: rhbz#1928648 - SSSD logs improvements: clarify which config option applies to each timeout in the logs
- Resolves: rhbz#1632159 - sssd-kcm starts successfully for non existent socket_path
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm
- Resolves: rhbz#1925505 - [RFE] improve the sssd refresh timers for SUDO queries
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1925561 - sssd-ldap(5) does not report how to disable the SUDO smart queries
- Resolves: rhbz#1925621 - document impact of indices and of scope on performance of LDAP queries
- Resolves: rhbz#1855320 - [RFE] RHEL8 sssd: inheritance of the case_sensitive parameter for subdomains.
- Resolves: rhbz#1925608 - [RFE] make 'random_offset' addon to 'offline_timeout' option configurable
- Resolves: rhbz#1447945 - man page / docs update required: if two certificate matching rules with the same priority match only one is used
- Resolves: rhbz#1703436 - sssd not thread-safe in innetgr()
- Resolves: rhbz#1713143 - SSSD does not translate the 2FA text labels("first factor" / "second factor") on GDM login and screensaver unlock screen
- Resolves: rhbz#1888977 - sss_override: Usage limitations clarification in man page
- Resolves: rhbz#1890177 - Clarify "single_prompt" option in "PROMPTING CONFIGURATION SECTION" section of sssd.conf man page
- Resolves: rhbz#1902280 - fix sss_cache to also reset cached timestamp
- Resolves: rhbz#1935683 - SSSD not detecting subdomain from AD forest (RHEL 8.3)
- Resolves: rhbz#1937919 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7
- Resolves: rhbz#1944665 - No gpo found and ad_gpo_implicit_deny set to True still permits user login
- Resolves: rhbz#1919942 - sss_override does not take precedence over override_homedir directive</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-1" date="1623153600">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1917444 - SSSD Error Msg Improvement: Server resolution failed: [2]: No such file or directory
- Resolves: rhbz#1917511 - SSSD Error Msg Improvement: Failed to resolve server 'server.example.com': Error reading file
- Resolves: rhbz#1917535 - sssd.conf man page: parameter dns_resolver_server_timeout and dns_resolver_op_timeout
- Resolves: rhbz#1940509 - [RFE] Health and Support Analyzer: Link frontend to backend requests
- Resolves: rhbz#1649464 - auto_private_groups not working as expected with posix ipa/ad trust
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1961215 - Invalid sssd-kcm return code if requested operation is not found
- Resolves: rhbz#1837090 - SSSD fails nss_getby_name for IPA user with SID if the user has user private group
- Resolves: rhbz#1879869 - sudo commands incorrectly exports the KRB5CCNAME environment variable
- Resolves: rhbz#1962550 - sss_pac_make_request fails on systems joined to Active Directory.
- Resolves: rhbz#1737489 - [RFE] SSSD should honor default Kerberos settings (keytab name) in /etc/krb5.conf</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-2" date="1624276800">- Resolves: rhbz#1974257 - 'debug_microseconds' config option is broken
- Resolves: rhbz#1936902 - SSSD Error Msg Improvement: Invalid argument
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm (additional patches and rebuild)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-1" date="1626091200">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1693379 - sssd_be and sss_cache too heavy on CPU
- Resolves: rhbz#1909373 - Missing search index for `originalADgidNumber`
- Resolves: rhbz#1954630 - [RFE] Improve debug messages by adding a unique tag for each request the backend is handling
- Resolves: rhbz#1936891 - SSSD Error Msg Improvement: Bad address
- Resolves: rhbz#1364596 - sssd still showing ipa user after removed from last group
- Resolves: rhbz#1979404 - Changes made to /etc/pam.d/sssd-shadowutils are overwritten back to default on sssd-common package upgrade</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2" date="1627905600">- Resolves: rhbz#1975169 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-8]
- Resolves: rhbz#1962042 - [sssd] RHEL 8.5 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.1" date="1634558400">- Resolves: rhbz#2014460 - tps tests fail with cross dependency on sssd debuginfo package: removal of 'sssd-libwbclient-debuginfo' is missing [rhel-8.5.0.z]</changelog>
</package>
<package pkgid="c8dcb1db6f1b134f58c2dfae5b980442f486c34e5e8fdb0a2cf344a17912303f" name="libsss_nss_idmap-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="2.el8_5.1"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-5" date="1609156800">- Resolves: rhbz#1631410 - Can't login with smartcard with multiple certs having same ID value
- Resolves: rhbz#1884213 - [RFE] add offline_timeout_max config option to control offline interval backoff (additional patches)
- Resolves: rhbz#1893159 - Default debug level should report all errors / failures
- Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-6" date="1610971200">- Resolves: rhbz#1113639 - autofs: return a connection failure until maps have been fetched
- Resolves: rhbz#1915395 - Memory leak in the simple access provider
- Resolves: rhbz#1915319 - SSSD: SBUS: failures during servers startup
- Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication (additional patches)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-7" date="1611662400">- Resolves: rhbz#1920001 - Do not add '%' to group names already prefixed with '%' in IPA sudo rules
- Resolves: rhbz#1918433 - sssd unable to lookup certmap rules
- Resolves: rhbz#1917382 - [abrt] [faf] sssd: dp_client_handshake_timeout(): /usr/libexec/sssd/sssd_be killed by 11</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-8" date="1613131200">- Resolves: rhbz#1926622 - Add support to verify authentication indicators in pam_sss_gss
- Resolves: rhbz#1926454 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0.
- Resolves: rhbz#1893159 - Default debug level should report all errors / failures (additional patch)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.0-1" date="1620648000">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1930535 - [abrt] [faf] sssd: monitor_service_shutdown(): /usr/sbin/sssd killed by 11
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1945888 - Inconsistant debug level for connection logging
- Resolves: rhbz#1948657 - pam_sss_gss.so doesn't work with large kerberos tickets
- Resolves: rhbz#1949149 - [RFE] Poor man's backtrace
- Resolves: rhbz#1920500 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR
- Resolves: rhbz#1923964 - [RFE] SSSD Error Msg Improvement: write_krb5info_file failed, authentication might fail.
- Resolves: rhbz#1928648 - SSSD logs improvements: clarify which config option applies to each timeout in the logs
- Resolves: rhbz#1632159 - sssd-kcm starts successfully for non existent socket_path
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm
- Resolves: rhbz#1925505 - [RFE] improve the sssd refresh timers for SUDO queries
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1925561 - sssd-ldap(5) does not report how to disable the SUDO smart queries
- Resolves: rhbz#1925621 - document impact of indices and of scope on performance of LDAP queries
- Resolves: rhbz#1855320 - [RFE] RHEL8 sssd: inheritance of the case_sensitive parameter for subdomains.
- Resolves: rhbz#1925608 - [RFE] make 'random_offset' addon to 'offline_timeout' option configurable
- Resolves: rhbz#1447945 - man page / docs update required: if two certificate matching rules with the same priority match only one is used
- Resolves: rhbz#1703436 - sssd not thread-safe in innetgr()
- Resolves: rhbz#1713143 - SSSD does not translate the 2FA text labels("first factor" / "second factor") on GDM login and screensaver unlock screen
- Resolves: rhbz#1888977 - sss_override: Usage limitations clarification in man page
- Resolves: rhbz#1890177 - Clarify "single_prompt" option in "PROMPTING CONFIGURATION SECTION" section of sssd.conf man page
- Resolves: rhbz#1902280 - fix sss_cache to also reset cached timestamp
- Resolves: rhbz#1935683 - SSSD not detecting subdomain from AD forest (RHEL 8.3)
- Resolves: rhbz#1937919 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7
- Resolves: rhbz#1944665 - No gpo found and ad_gpo_implicit_deny set to True still permits user login
- Resolves: rhbz#1919942 - sss_override does not take precedence over override_homedir directive</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-1" date="1623153600">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1917444 - SSSD Error Msg Improvement: Server resolution failed: [2]: No such file or directory
- Resolves: rhbz#1917511 - SSSD Error Msg Improvement: Failed to resolve server 'server.example.com': Error reading file
- Resolves: rhbz#1917535 - sssd.conf man page: parameter dns_resolver_server_timeout and dns_resolver_op_timeout
- Resolves: rhbz#1940509 - [RFE] Health and Support Analyzer: Link frontend to backend requests
- Resolves: rhbz#1649464 - auto_private_groups not working as expected with posix ipa/ad trust
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1961215 - Invalid sssd-kcm return code if requested operation is not found
- Resolves: rhbz#1837090 - SSSD fails nss_getby_name for IPA user with SID if the user has user private group
- Resolves: rhbz#1879869 - sudo commands incorrectly exports the KRB5CCNAME environment variable
- Resolves: rhbz#1962550 - sss_pac_make_request fails on systems joined to Active Directory.
- Resolves: rhbz#1737489 - [RFE] SSSD should honor default Kerberos settings (keytab name) in /etc/krb5.conf</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-2" date="1624276800">- Resolves: rhbz#1974257 - 'debug_microseconds' config option is broken
- Resolves: rhbz#1936902 - SSSD Error Msg Improvement: Invalid argument
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm (additional patches and rebuild)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-1" date="1626091200">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1693379 - sssd_be and sss_cache too heavy on CPU
- Resolves: rhbz#1909373 - Missing search index for `originalADgidNumber`
- Resolves: rhbz#1954630 - [RFE] Improve debug messages by adding a unique tag for each request the backend is handling
- Resolves: rhbz#1936891 - SSSD Error Msg Improvement: Bad address
- Resolves: rhbz#1364596 - sssd still showing ipa user after removed from last group
- Resolves: rhbz#1979404 - Changes made to /etc/pam.d/sssd-shadowutils are overwritten back to default on sssd-common package upgrade</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2" date="1627905600">- Resolves: rhbz#1975169 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-8]
- Resolves: rhbz#1962042 - [sssd] RHEL 8.5 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.1" date="1634558400">- Resolves: rhbz#2014460 - tps tests fail with cross dependency on sssd debuginfo package: removal of 'sssd-libwbclient-debuginfo' is missing [rhel-8.5.0.z]</changelog>
</package>
<package pkgid="4f7a9377040d5242a89082fbdb5f43e901f4c858aa97ae261eaca93a0a48cd74" name="libsss_nss_idmap-debuginfo" arch="i686">
  <version epoch="0" ver="2.5.2" rel="2.el8_5.3"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-7" date="1611662400">- Resolves: rhbz#1920001 - Do not add '%' to group names already prefixed with '%' in IPA sudo rules
- Resolves: rhbz#1918433 - sssd unable to lookup certmap rules
- Resolves: rhbz#1917382 - [abrt] [faf] sssd: dp_client_handshake_timeout(): /usr/libexec/sssd/sssd_be killed by 11</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-8" date="1613131200">- Resolves: rhbz#1926622 - Add support to verify authentication indicators in pam_sss_gss
- Resolves: rhbz#1926454 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0.
- Resolves: rhbz#1893159 - Default debug level should report all errors / failures (additional patch)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.0-1" date="1620648000">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1930535 - [abrt] [faf] sssd: monitor_service_shutdown(): /usr/sbin/sssd killed by 11
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1945888 - Inconsistant debug level for connection logging
- Resolves: rhbz#1948657 - pam_sss_gss.so doesn't work with large kerberos tickets
- Resolves: rhbz#1949149 - [RFE] Poor man's backtrace
- Resolves: rhbz#1920500 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR
- Resolves: rhbz#1923964 - [RFE] SSSD Error Msg Improvement: write_krb5info_file failed, authentication might fail.
- Resolves: rhbz#1928648 - SSSD logs improvements: clarify which config option applies to each timeout in the logs
- Resolves: rhbz#1632159 - sssd-kcm starts successfully for non existent socket_path
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm
- Resolves: rhbz#1925505 - [RFE] improve the sssd refresh timers for SUDO queries
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1925561 - sssd-ldap(5) does not report how to disable the SUDO smart queries
- Resolves: rhbz#1925621 - document impact of indices and of scope on performance of LDAP queries
- Resolves: rhbz#1855320 - [RFE] RHEL8 sssd: inheritance of the case_sensitive parameter for subdomains.
- Resolves: rhbz#1925608 - [RFE] make 'random_offset' addon to 'offline_timeout' option configurable
- Resolves: rhbz#1447945 - man page / docs update required: if two certificate matching rules with the same priority match only one is used
- Resolves: rhbz#1703436 - sssd not thread-safe in innetgr()
- Resolves: rhbz#1713143 - SSSD does not translate the 2FA text labels("first factor" / "second factor") on GDM login and screensaver unlock screen
- Resolves: rhbz#1888977 - sss_override: Usage limitations clarification in man page
- Resolves: rhbz#1890177 - Clarify "single_prompt" option in "PROMPTING CONFIGURATION SECTION" section of sssd.conf man page
- Resolves: rhbz#1902280 - fix sss_cache to also reset cached timestamp
- Resolves: rhbz#1935683 - SSSD not detecting subdomain from AD forest (RHEL 8.3)
- Resolves: rhbz#1937919 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7
- Resolves: rhbz#1944665 - No gpo found and ad_gpo_implicit_deny set to True still permits user login
- Resolves: rhbz#1919942 - sss_override does not take precedence over override_homedir directive</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-1" date="1623153600">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1917444 - SSSD Error Msg Improvement: Server resolution failed: [2]: No such file or directory
- Resolves: rhbz#1917511 - SSSD Error Msg Improvement: Failed to resolve server 'server.example.com': Error reading file
- Resolves: rhbz#1917535 - sssd.conf man page: parameter dns_resolver_server_timeout and dns_resolver_op_timeout
- Resolves: rhbz#1940509 - [RFE] Health and Support Analyzer: Link frontend to backend requests
- Resolves: rhbz#1649464 - auto_private_groups not working as expected with posix ipa/ad trust
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1961215 - Invalid sssd-kcm return code if requested operation is not found
- Resolves: rhbz#1837090 - SSSD fails nss_getby_name for IPA user with SID if the user has user private group
- Resolves: rhbz#1879869 - sudo commands incorrectly exports the KRB5CCNAME environment variable
- Resolves: rhbz#1962550 - sss_pac_make_request fails on systems joined to Active Directory.
- Resolves: rhbz#1737489 - [RFE] SSSD should honor default Kerberos settings (keytab name) in /etc/krb5.conf</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-2" date="1624276800">- Resolves: rhbz#1974257 - 'debug_microseconds' config option is broken
- Resolves: rhbz#1936902 - SSSD Error Msg Improvement: Invalid argument
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm (additional patches and rebuild)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-1" date="1626091200">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1693379 - sssd_be and sss_cache too heavy on CPU
- Resolves: rhbz#1909373 - Missing search index for `originalADgidNumber`
- Resolves: rhbz#1954630 - [RFE] Improve debug messages by adding a unique tag for each request the backend is handling
- Resolves: rhbz#1936891 - SSSD Error Msg Improvement: Bad address
- Resolves: rhbz#1364596 - sssd still showing ipa user after removed from last group
- Resolves: rhbz#1979404 - Changes made to /etc/pam.d/sssd-shadowutils are overwritten back to default on sssd-common package upgrade</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2" date="1627905600">- Resolves: rhbz#1975169 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-8]
- Resolves: rhbz#1962042 - [sssd] RHEL 8.5 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.1" date="1634558400">- Resolves: rhbz#2014460 - tps tests fail with cross dependency on sssd debuginfo package: removal of 'sssd-libwbclient-debuginfo' is missing [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.2" date="1638187200">- Resolves: rhbz#2018440 - 2.5.x based SSSD adds more AD domains than it should based on the configuration file (not trusted and from a different forest) [rhel-8.5.0.z]
- Resolves: rhbz#2016923 - autofs lookups for unknown mounts are delayed for 50s [rhel-8.5.0.z]
- Resolves: rhbz#2021499 - Make backtrace less "chatty" (avoid duplicate backtraces) [rhel-8.5.0.z]
- Resolves: rhbz#2013379 - Lookup with fully-qualified name does not work with 'cache_first = True' [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.3" date="1638878400">- Resolves: rhbz#2028828 - pam responder does not call initgroups to refresh the user entry [rhel-8.5.0.z]</changelog>
</package>
<package pkgid="023c57c9ee18487ee3a9f4814ceb036c45a85992fe6cc5eb329e029d78b86d4d" name="libsss_nss_idmap-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="2.el8_5.3"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-7" date="1611662400">- Resolves: rhbz#1920001 - Do not add '%' to group names already prefixed with '%' in IPA sudo rules
- Resolves: rhbz#1918433 - sssd unable to lookup certmap rules
- Resolves: rhbz#1917382 - [abrt] [faf] sssd: dp_client_handshake_timeout(): /usr/libexec/sssd/sssd_be killed by 11</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-8" date="1613131200">- Resolves: rhbz#1926622 - Add support to verify authentication indicators in pam_sss_gss
- Resolves: rhbz#1926454 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0.
- Resolves: rhbz#1893159 - Default debug level should report all errors / failures (additional patch)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.0-1" date="1620648000">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1930535 - [abrt] [faf] sssd: monitor_service_shutdown(): /usr/sbin/sssd killed by 11
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1945888 - Inconsistant debug level for connection logging
- Resolves: rhbz#1948657 - pam_sss_gss.so doesn't work with large kerberos tickets
- Resolves: rhbz#1949149 - [RFE] Poor man's backtrace
- Resolves: rhbz#1920500 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR
- Resolves: rhbz#1923964 - [RFE] SSSD Error Msg Improvement: write_krb5info_file failed, authentication might fail.
- Resolves: rhbz#1928648 - SSSD logs improvements: clarify which config option applies to each timeout in the logs
- Resolves: rhbz#1632159 - sssd-kcm starts successfully for non existent socket_path
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm
- Resolves: rhbz#1925505 - [RFE] improve the sssd refresh timers for SUDO queries
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1925561 - sssd-ldap(5) does not report how to disable the SUDO smart queries
- Resolves: rhbz#1925621 - document impact of indices and of scope on performance of LDAP queries
- Resolves: rhbz#1855320 - [RFE] RHEL8 sssd: inheritance of the case_sensitive parameter for subdomains.
- Resolves: rhbz#1925608 - [RFE] make 'random_offset' addon to 'offline_timeout' option configurable
- Resolves: rhbz#1447945 - man page / docs update required: if two certificate matching rules with the same priority match only one is used
- Resolves: rhbz#1703436 - sssd not thread-safe in innetgr()
- Resolves: rhbz#1713143 - SSSD does not translate the 2FA text labels("first factor" / "second factor") on GDM login and screensaver unlock screen
- Resolves: rhbz#1888977 - sss_override: Usage limitations clarification in man page
- Resolves: rhbz#1890177 - Clarify "single_prompt" option in "PROMPTING CONFIGURATION SECTION" section of sssd.conf man page
- Resolves: rhbz#1902280 - fix sss_cache to also reset cached timestamp
- Resolves: rhbz#1935683 - SSSD not detecting subdomain from AD forest (RHEL 8.3)
- Resolves: rhbz#1937919 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7
- Resolves: rhbz#1944665 - No gpo found and ad_gpo_implicit_deny set to True still permits user login
- Resolves: rhbz#1919942 - sss_override does not take precedence over override_homedir directive</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-1" date="1623153600">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1917444 - SSSD Error Msg Improvement: Server resolution failed: [2]: No such file or directory
- Resolves: rhbz#1917511 - SSSD Error Msg Improvement: Failed to resolve server 'server.example.com': Error reading file
- Resolves: rhbz#1917535 - sssd.conf man page: parameter dns_resolver_server_timeout and dns_resolver_op_timeout
- Resolves: rhbz#1940509 - [RFE] Health and Support Analyzer: Link frontend to backend requests
- Resolves: rhbz#1649464 - auto_private_groups not working as expected with posix ipa/ad trust
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1961215 - Invalid sssd-kcm return code if requested operation is not found
- Resolves: rhbz#1837090 - SSSD fails nss_getby_name for IPA user with SID if the user has user private group
- Resolves: rhbz#1879869 - sudo commands incorrectly exports the KRB5CCNAME environment variable
- Resolves: rhbz#1962550 - sss_pac_make_request fails on systems joined to Active Directory.
- Resolves: rhbz#1737489 - [RFE] SSSD should honor default Kerberos settings (keytab name) in /etc/krb5.conf</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-2" date="1624276800">- Resolves: rhbz#1974257 - 'debug_microseconds' config option is broken
- Resolves: rhbz#1936902 - SSSD Error Msg Improvement: Invalid argument
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm (additional patches and rebuild)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-1" date="1626091200">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1693379 - sssd_be and sss_cache too heavy on CPU
- Resolves: rhbz#1909373 - Missing search index for `originalADgidNumber`
- Resolves: rhbz#1954630 - [RFE] Improve debug messages by adding a unique tag for each request the backend is handling
- Resolves: rhbz#1936891 - SSSD Error Msg Improvement: Bad address
- Resolves: rhbz#1364596 - sssd still showing ipa user after removed from last group
- Resolves: rhbz#1979404 - Changes made to /etc/pam.d/sssd-shadowutils are overwritten back to default on sssd-common package upgrade</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2" date="1627905600">- Resolves: rhbz#1975169 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-8]
- Resolves: rhbz#1962042 - [sssd] RHEL 8.5 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.1" date="1634558400">- Resolves: rhbz#2014460 - tps tests fail with cross dependency on sssd debuginfo package: removal of 'sssd-libwbclient-debuginfo' is missing [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.2" date="1638187200">- Resolves: rhbz#2018440 - 2.5.x based SSSD adds more AD domains than it should based on the configuration file (not trusted and from a different forest) [rhel-8.5.0.z]
- Resolves: rhbz#2016923 - autofs lookups for unknown mounts are delayed for 50s [rhel-8.5.0.z]
- Resolves: rhbz#2021499 - Make backtrace less "chatty" (avoid duplicate backtraces) [rhel-8.5.0.z]
- Resolves: rhbz#2013379 - Lookup with fully-qualified name does not work with 'cache_first = True' [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.3" date="1638878400">- Resolves: rhbz#2028828 - pam responder does not call initgroups to refresh the user entry [rhel-8.5.0.z]</changelog>
</package>
<package pkgid="5395c0ed93b38f747dcc7cd9af1cb5723f1999ab5549a4cb64f4b539cd21d086" name="libsss_nss_idmap-debuginfo" arch="i686">
  <version epoch="0" ver="2.5.2" rel="2.el8_5.4"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-8" date="1613131200">- Resolves: rhbz#1926622 - Add support to verify authentication indicators in pam_sss_gss
- Resolves: rhbz#1926454 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0.
- Resolves: rhbz#1893159 - Default debug level should report all errors / failures (additional patch)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.0-1" date="1620648000">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1930535 - [abrt] [faf] sssd: monitor_service_shutdown(): /usr/sbin/sssd killed by 11
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1945888 - Inconsistant debug level for connection logging
- Resolves: rhbz#1948657 - pam_sss_gss.so doesn't work with large kerberos tickets
- Resolves: rhbz#1949149 - [RFE] Poor man's backtrace
- Resolves: rhbz#1920500 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR
- Resolves: rhbz#1923964 - [RFE] SSSD Error Msg Improvement: write_krb5info_file failed, authentication might fail.
- Resolves: rhbz#1928648 - SSSD logs improvements: clarify which config option applies to each timeout in the logs
- Resolves: rhbz#1632159 - sssd-kcm starts successfully for non existent socket_path
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm
- Resolves: rhbz#1925505 - [RFE] improve the sssd refresh timers for SUDO queries
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1925561 - sssd-ldap(5) does not report how to disable the SUDO smart queries
- Resolves: rhbz#1925621 - document impact of indices and of scope on performance of LDAP queries
- Resolves: rhbz#1855320 - [RFE] RHEL8 sssd: inheritance of the case_sensitive parameter for subdomains.
- Resolves: rhbz#1925608 - [RFE] make 'random_offset' addon to 'offline_timeout' option configurable
- Resolves: rhbz#1447945 - man page / docs update required: if two certificate matching rules with the same priority match only one is used
- Resolves: rhbz#1703436 - sssd not thread-safe in innetgr()
- Resolves: rhbz#1713143 - SSSD does not translate the 2FA text labels("first factor" / "second factor") on GDM login and screensaver unlock screen
- Resolves: rhbz#1888977 - sss_override: Usage limitations clarification in man page
- Resolves: rhbz#1890177 - Clarify "single_prompt" option in "PROMPTING CONFIGURATION SECTION" section of sssd.conf man page
- Resolves: rhbz#1902280 - fix sss_cache to also reset cached timestamp
- Resolves: rhbz#1935683 - SSSD not detecting subdomain from AD forest (RHEL 8.3)
- Resolves: rhbz#1937919 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7
- Resolves: rhbz#1944665 - No gpo found and ad_gpo_implicit_deny set to True still permits user login
- Resolves: rhbz#1919942 - sss_override does not take precedence over override_homedir directive</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-1" date="1623153600">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1917444 - SSSD Error Msg Improvement: Server resolution failed: [2]: No such file or directory
- Resolves: rhbz#1917511 - SSSD Error Msg Improvement: Failed to resolve server 'server.example.com': Error reading file
- Resolves: rhbz#1917535 - sssd.conf man page: parameter dns_resolver_server_timeout and dns_resolver_op_timeout
- Resolves: rhbz#1940509 - [RFE] Health and Support Analyzer: Link frontend to backend requests
- Resolves: rhbz#1649464 - auto_private_groups not working as expected with posix ipa/ad trust
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1961215 - Invalid sssd-kcm return code if requested operation is not found
- Resolves: rhbz#1837090 - SSSD fails nss_getby_name for IPA user with SID if the user has user private group
- Resolves: rhbz#1879869 - sudo commands incorrectly exports the KRB5CCNAME environment variable
- Resolves: rhbz#1962550 - sss_pac_make_request fails on systems joined to Active Directory.
- Resolves: rhbz#1737489 - [RFE] SSSD should honor default Kerberos settings (keytab name) in /etc/krb5.conf</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-2" date="1624276800">- Resolves: rhbz#1974257 - 'debug_microseconds' config option is broken
- Resolves: rhbz#1936902 - SSSD Error Msg Improvement: Invalid argument
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm (additional patches and rebuild)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-1" date="1626091200">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1693379 - sssd_be and sss_cache too heavy on CPU
- Resolves: rhbz#1909373 - Missing search index for `originalADgidNumber`
- Resolves: rhbz#1954630 - [RFE] Improve debug messages by adding a unique tag for each request the backend is handling
- Resolves: rhbz#1936891 - SSSD Error Msg Improvement: Bad address
- Resolves: rhbz#1364596 - sssd still showing ipa user after removed from last group
- Resolves: rhbz#1979404 - Changes made to /etc/pam.d/sssd-shadowutils are overwritten back to default on sssd-common package upgrade</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2" date="1627905600">- Resolves: rhbz#1975169 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-8]
- Resolves: rhbz#1962042 - [sssd] RHEL 8.5 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.1" date="1634558400">- Resolves: rhbz#2014460 - tps tests fail with cross dependency on sssd debuginfo package: removal of 'sssd-libwbclient-debuginfo' is missing [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.2" date="1638187200">- Resolves: rhbz#2018440 - 2.5.x based SSSD adds more AD domains than it should based on the configuration file (not trusted and from a different forest) [rhel-8.5.0.z]
- Resolves: rhbz#2016923 - autofs lookups for unknown mounts are delayed for 50s [rhel-8.5.0.z]
- Resolves: rhbz#2021499 - Make backtrace less "chatty" (avoid duplicate backtraces) [rhel-8.5.0.z]
- Resolves: rhbz#2013379 - Lookup with fully-qualified name does not work with 'cache_first = True' [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.3" date="1638878400">- Resolves: rhbz#2028828 - pam responder does not call initgroups to refresh the user entry [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.4" date="1642420800">- Resolves: rhbz#2030651 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries [rhel-8.5.0.z]
- Resolves: rhbz#2035285 - AD Domain in the AD Forest Missing after sssd latest update [rhel-8.5.0.z]</changelog>
</package>
<package pkgid="e64f60a7ad490c08b90aa25fd9811f50869ba36d781c0e29674ce036a7ebaf4d" name="libsss_nss_idmap-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="2.el8_5.4"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-8" date="1613131200">- Resolves: rhbz#1926622 - Add support to verify authentication indicators in pam_sss_gss
- Resolves: rhbz#1926454 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0.
- Resolves: rhbz#1893159 - Default debug level should report all errors / failures (additional patch)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.0-1" date="1620648000">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1930535 - [abrt] [faf] sssd: monitor_service_shutdown(): /usr/sbin/sssd killed by 11
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1945888 - Inconsistant debug level for connection logging
- Resolves: rhbz#1948657 - pam_sss_gss.so doesn't work with large kerberos tickets
- Resolves: rhbz#1949149 - [RFE] Poor man's backtrace
- Resolves: rhbz#1920500 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR
- Resolves: rhbz#1923964 - [RFE] SSSD Error Msg Improvement: write_krb5info_file failed, authentication might fail.
- Resolves: rhbz#1928648 - SSSD logs improvements: clarify which config option applies to each timeout in the logs
- Resolves: rhbz#1632159 - sssd-kcm starts successfully for non existent socket_path
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm
- Resolves: rhbz#1925505 - [RFE] improve the sssd refresh timers for SUDO queries
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1925561 - sssd-ldap(5) does not report how to disable the SUDO smart queries
- Resolves: rhbz#1925621 - document impact of indices and of scope on performance of LDAP queries
- Resolves: rhbz#1855320 - [RFE] RHEL8 sssd: inheritance of the case_sensitive parameter for subdomains.
- Resolves: rhbz#1925608 - [RFE] make 'random_offset' addon to 'offline_timeout' option configurable
- Resolves: rhbz#1447945 - man page / docs update required: if two certificate matching rules with the same priority match only one is used
- Resolves: rhbz#1703436 - sssd not thread-safe in innetgr()
- Resolves: rhbz#1713143 - SSSD does not translate the 2FA text labels("first factor" / "second factor") on GDM login and screensaver unlock screen
- Resolves: rhbz#1888977 - sss_override: Usage limitations clarification in man page
- Resolves: rhbz#1890177 - Clarify "single_prompt" option in "PROMPTING CONFIGURATION SECTION" section of sssd.conf man page
- Resolves: rhbz#1902280 - fix sss_cache to also reset cached timestamp
- Resolves: rhbz#1935683 - SSSD not detecting subdomain from AD forest (RHEL 8.3)
- Resolves: rhbz#1937919 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7
- Resolves: rhbz#1944665 - No gpo found and ad_gpo_implicit_deny set to True still permits user login
- Resolves: rhbz#1919942 - sss_override does not take precedence over override_homedir directive</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-1" date="1623153600">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1917444 - SSSD Error Msg Improvement: Server resolution failed: [2]: No such file or directory
- Resolves: rhbz#1917511 - SSSD Error Msg Improvement: Failed to resolve server 'server.example.com': Error reading file
- Resolves: rhbz#1917535 - sssd.conf man page: parameter dns_resolver_server_timeout and dns_resolver_op_timeout
- Resolves: rhbz#1940509 - [RFE] Health and Support Analyzer: Link frontend to backend requests
- Resolves: rhbz#1649464 - auto_private_groups not working as expected with posix ipa/ad trust
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1961215 - Invalid sssd-kcm return code if requested operation is not found
- Resolves: rhbz#1837090 - SSSD fails nss_getby_name for IPA user with SID if the user has user private group
- Resolves: rhbz#1879869 - sudo commands incorrectly exports the KRB5CCNAME environment variable
- Resolves: rhbz#1962550 - sss_pac_make_request fails on systems joined to Active Directory.
- Resolves: rhbz#1737489 - [RFE] SSSD should honor default Kerberos settings (keytab name) in /etc/krb5.conf</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-2" date="1624276800">- Resolves: rhbz#1974257 - 'debug_microseconds' config option is broken
- Resolves: rhbz#1936902 - SSSD Error Msg Improvement: Invalid argument
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm (additional patches and rebuild)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-1" date="1626091200">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1693379 - sssd_be and sss_cache too heavy on CPU
- Resolves: rhbz#1909373 - Missing search index for `originalADgidNumber`
- Resolves: rhbz#1954630 - [RFE] Improve debug messages by adding a unique tag for each request the backend is handling
- Resolves: rhbz#1936891 - SSSD Error Msg Improvement: Bad address
- Resolves: rhbz#1364596 - sssd still showing ipa user after removed from last group
- Resolves: rhbz#1979404 - Changes made to /etc/pam.d/sssd-shadowutils are overwritten back to default on sssd-common package upgrade</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2" date="1627905600">- Resolves: rhbz#1975169 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-8]
- Resolves: rhbz#1962042 - [sssd] RHEL 8.5 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.1" date="1634558400">- Resolves: rhbz#2014460 - tps tests fail with cross dependency on sssd debuginfo package: removal of 'sssd-libwbclient-debuginfo' is missing [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.2" date="1638187200">- Resolves: rhbz#2018440 - 2.5.x based SSSD adds more AD domains than it should based on the configuration file (not trusted and from a different forest) [rhel-8.5.0.z]
- Resolves: rhbz#2016923 - autofs lookups for unknown mounts are delayed for 50s [rhel-8.5.0.z]
- Resolves: rhbz#2021499 - Make backtrace less "chatty" (avoid duplicate backtraces) [rhel-8.5.0.z]
- Resolves: rhbz#2013379 - Lookup with fully-qualified name does not work with 'cache_first = True' [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.3" date="1638878400">- Resolves: rhbz#2028828 - pam responder does not call initgroups to refresh the user entry [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.4" date="1642420800">- Resolves: rhbz#2030651 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries [rhel-8.5.0.z]
- Resolves: rhbz#2035285 - AD Domain in the AD Forest Missing after sssd latest update [rhel-8.5.0.z]</changelog>
</package>
<package pkgid="d4a46d3c7e2ad089d0423d20013da42d7495d3aad141de63cce05525f08641c9" name="libsss_simpleifp-debuginfo" arch="i686">
  <version epoch="0" ver="2.5.2" rel="2.el8_5.1"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-5" date="1609156800">- Resolves: rhbz#1631410 - Can't login with smartcard with multiple certs having same ID value
- Resolves: rhbz#1884213 - [RFE] add offline_timeout_max config option to control offline interval backoff (additional patches)
- Resolves: rhbz#1893159 - Default debug level should report all errors / failures
- Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-6" date="1610971200">- Resolves: rhbz#1113639 - autofs: return a connection failure until maps have been fetched
- Resolves: rhbz#1915395 - Memory leak in the simple access provider
- Resolves: rhbz#1915319 - SSSD: SBUS: failures during servers startup
- Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication (additional patches)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-7" date="1611662400">- Resolves: rhbz#1920001 - Do not add '%' to group names already prefixed with '%' in IPA sudo rules
- Resolves: rhbz#1918433 - sssd unable to lookup certmap rules
- Resolves: rhbz#1917382 - [abrt] [faf] sssd: dp_client_handshake_timeout(): /usr/libexec/sssd/sssd_be killed by 11</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-8" date="1613131200">- Resolves: rhbz#1926622 - Add support to verify authentication indicators in pam_sss_gss
- Resolves: rhbz#1926454 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0.
- Resolves: rhbz#1893159 - Default debug level should report all errors / failures (additional patch)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.0-1" date="1620648000">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1930535 - [abrt] [faf] sssd: monitor_service_shutdown(): /usr/sbin/sssd killed by 11
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1945888 - Inconsistant debug level for connection logging
- Resolves: rhbz#1948657 - pam_sss_gss.so doesn't work with large kerberos tickets
- Resolves: rhbz#1949149 - [RFE] Poor man's backtrace
- Resolves: rhbz#1920500 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR
- Resolves: rhbz#1923964 - [RFE] SSSD Error Msg Improvement: write_krb5info_file failed, authentication might fail.
- Resolves: rhbz#1928648 - SSSD logs improvements: clarify which config option applies to each timeout in the logs
- Resolves: rhbz#1632159 - sssd-kcm starts successfully for non existent socket_path
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm
- Resolves: rhbz#1925505 - [RFE] improve the sssd refresh timers for SUDO queries
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1925561 - sssd-ldap(5) does not report how to disable the SUDO smart queries
- Resolves: rhbz#1925621 - document impact of indices and of scope on performance of LDAP queries
- Resolves: rhbz#1855320 - [RFE] RHEL8 sssd: inheritance of the case_sensitive parameter for subdomains.
- Resolves: rhbz#1925608 - [RFE] make 'random_offset' addon to 'offline_timeout' option configurable
- Resolves: rhbz#1447945 - man page / docs update required: if two certificate matching rules with the same priority match only one is used
- Resolves: rhbz#1703436 - sssd not thread-safe in innetgr()
- Resolves: rhbz#1713143 - SSSD does not translate the 2FA text labels("first factor" / "second factor") on GDM login and screensaver unlock screen
- Resolves: rhbz#1888977 - sss_override: Usage limitations clarification in man page
- Resolves: rhbz#1890177 - Clarify "single_prompt" option in "PROMPTING CONFIGURATION SECTION" section of sssd.conf man page
- Resolves: rhbz#1902280 - fix sss_cache to also reset cached timestamp
- Resolves: rhbz#1935683 - SSSD not detecting subdomain from AD forest (RHEL 8.3)
- Resolves: rhbz#1937919 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7
- Resolves: rhbz#1944665 - No gpo found and ad_gpo_implicit_deny set to True still permits user login
- Resolves: rhbz#1919942 - sss_override does not take precedence over override_homedir directive</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-1" date="1623153600">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1917444 - SSSD Error Msg Improvement: Server resolution failed: [2]: No such file or directory
- Resolves: rhbz#1917511 - SSSD Error Msg Improvement: Failed to resolve server 'server.example.com': Error reading file
- Resolves: rhbz#1917535 - sssd.conf man page: parameter dns_resolver_server_timeout and dns_resolver_op_timeout
- Resolves: rhbz#1940509 - [RFE] Health and Support Analyzer: Link frontend to backend requests
- Resolves: rhbz#1649464 - auto_private_groups not working as expected with posix ipa/ad trust
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1961215 - Invalid sssd-kcm return code if requested operation is not found
- Resolves: rhbz#1837090 - SSSD fails nss_getby_name for IPA user with SID if the user has user private group
- Resolves: rhbz#1879869 - sudo commands incorrectly exports the KRB5CCNAME environment variable
- Resolves: rhbz#1962550 - sss_pac_make_request fails on systems joined to Active Directory.
- Resolves: rhbz#1737489 - [RFE] SSSD should honor default Kerberos settings (keytab name) in /etc/krb5.conf</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-2" date="1624276800">- Resolves: rhbz#1974257 - 'debug_microseconds' config option is broken
- Resolves: rhbz#1936902 - SSSD Error Msg Improvement: Invalid argument
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm (additional patches and rebuild)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-1" date="1626091200">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1693379 - sssd_be and sss_cache too heavy on CPU
- Resolves: rhbz#1909373 - Missing search index for `originalADgidNumber`
- Resolves: rhbz#1954630 - [RFE] Improve debug messages by adding a unique tag for each request the backend is handling
- Resolves: rhbz#1936891 - SSSD Error Msg Improvement: Bad address
- Resolves: rhbz#1364596 - sssd still showing ipa user after removed from last group
- Resolves: rhbz#1979404 - Changes made to /etc/pam.d/sssd-shadowutils are overwritten back to default on sssd-common package upgrade</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2" date="1627905600">- Resolves: rhbz#1975169 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-8]
- Resolves: rhbz#1962042 - [sssd] RHEL 8.5 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.1" date="1634558400">- Resolves: rhbz#2014460 - tps tests fail with cross dependency on sssd debuginfo package: removal of 'sssd-libwbclient-debuginfo' is missing [rhel-8.5.0.z]</changelog>
</package>
<package pkgid="2885de583f6bd716bb4ce97ea8c8cb8f5bffdcc5b086e87c8915227d2f49999d" name="libsss_simpleifp-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="2.el8_5.1"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-5" date="1609156800">- Resolves: rhbz#1631410 - Can't login with smartcard with multiple certs having same ID value
- Resolves: rhbz#1884213 - [RFE] add offline_timeout_max config option to control offline interval backoff (additional patches)
- Resolves: rhbz#1893159 - Default debug level should report all errors / failures
- Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-6" date="1610971200">- Resolves: rhbz#1113639 - autofs: return a connection failure until maps have been fetched
- Resolves: rhbz#1915395 - Memory leak in the simple access provider
- Resolves: rhbz#1915319 - SSSD: SBUS: failures during servers startup
- Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication (additional patches)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-7" date="1611662400">- Resolves: rhbz#1920001 - Do not add '%' to group names already prefixed with '%' in IPA sudo rules
- Resolves: rhbz#1918433 - sssd unable to lookup certmap rules
- Resolves: rhbz#1917382 - [abrt] [faf] sssd: dp_client_handshake_timeout(): /usr/libexec/sssd/sssd_be killed by 11</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-8" date="1613131200">- Resolves: rhbz#1926622 - Add support to verify authentication indicators in pam_sss_gss
- Resolves: rhbz#1926454 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0.
- Resolves: rhbz#1893159 - Default debug level should report all errors / failures (additional patch)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.0-1" date="1620648000">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1930535 - [abrt] [faf] sssd: monitor_service_shutdown(): /usr/sbin/sssd killed by 11
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1945888 - Inconsistant debug level for connection logging
- Resolves: rhbz#1948657 - pam_sss_gss.so doesn't work with large kerberos tickets
- Resolves: rhbz#1949149 - [RFE] Poor man's backtrace
- Resolves: rhbz#1920500 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR
- Resolves: rhbz#1923964 - [RFE] SSSD Error Msg Improvement: write_krb5info_file failed, authentication might fail.
- Resolves: rhbz#1928648 - SSSD logs improvements: clarify which config option applies to each timeout in the logs
- Resolves: rhbz#1632159 - sssd-kcm starts successfully for non existent socket_path
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm
- Resolves: rhbz#1925505 - [RFE] improve the sssd refresh timers for SUDO queries
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1925561 - sssd-ldap(5) does not report how to disable the SUDO smart queries
- Resolves: rhbz#1925621 - document impact of indices and of scope on performance of LDAP queries
- Resolves: rhbz#1855320 - [RFE] RHEL8 sssd: inheritance of the case_sensitive parameter for subdomains.
- Resolves: rhbz#1925608 - [RFE] make 'random_offset' addon to 'offline_timeout' option configurable
- Resolves: rhbz#1447945 - man page / docs update required: if two certificate matching rules with the same priority match only one is used
- Resolves: rhbz#1703436 - sssd not thread-safe in innetgr()
- Resolves: rhbz#1713143 - SSSD does not translate the 2FA text labels("first factor" / "second factor") on GDM login and screensaver unlock screen
- Resolves: rhbz#1888977 - sss_override: Usage limitations clarification in man page
- Resolves: rhbz#1890177 - Clarify "single_prompt" option in "PROMPTING CONFIGURATION SECTION" section of sssd.conf man page
- Resolves: rhbz#1902280 - fix sss_cache to also reset cached timestamp
- Resolves: rhbz#1935683 - SSSD not detecting subdomain from AD forest (RHEL 8.3)
- Resolves: rhbz#1937919 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7
- Resolves: rhbz#1944665 - No gpo found and ad_gpo_implicit_deny set to True still permits user login
- Resolves: rhbz#1919942 - sss_override does not take precedence over override_homedir directive</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-1" date="1623153600">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1917444 - SSSD Error Msg Improvement: Server resolution failed: [2]: No such file or directory
- Resolves: rhbz#1917511 - SSSD Error Msg Improvement: Failed to resolve server 'server.example.com': Error reading file
- Resolves: rhbz#1917535 - sssd.conf man page: parameter dns_resolver_server_timeout and dns_resolver_op_timeout
- Resolves: rhbz#1940509 - [RFE] Health and Support Analyzer: Link frontend to backend requests
- Resolves: rhbz#1649464 - auto_private_groups not working as expected with posix ipa/ad trust
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1961215 - Invalid sssd-kcm return code if requested operation is not found
- Resolves: rhbz#1837090 - SSSD fails nss_getby_name for IPA user with SID if the user has user private group
- Resolves: rhbz#1879869 - sudo commands incorrectly exports the KRB5CCNAME environment variable
- Resolves: rhbz#1962550 - sss_pac_make_request fails on systems joined to Active Directory.
- Resolves: rhbz#1737489 - [RFE] SSSD should honor default Kerberos settings (keytab name) in /etc/krb5.conf</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-2" date="1624276800">- Resolves: rhbz#1974257 - 'debug_microseconds' config option is broken
- Resolves: rhbz#1936902 - SSSD Error Msg Improvement: Invalid argument
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm (additional patches and rebuild)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-1" date="1626091200">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1693379 - sssd_be and sss_cache too heavy on CPU
- Resolves: rhbz#1909373 - Missing search index for `originalADgidNumber`
- Resolves: rhbz#1954630 - [RFE] Improve debug messages by adding a unique tag for each request the backend is handling
- Resolves: rhbz#1936891 - SSSD Error Msg Improvement: Bad address
- Resolves: rhbz#1364596 - sssd still showing ipa user after removed from last group
- Resolves: rhbz#1979404 - Changes made to /etc/pam.d/sssd-shadowutils are overwritten back to default on sssd-common package upgrade</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2" date="1627905600">- Resolves: rhbz#1975169 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-8]
- Resolves: rhbz#1962042 - [sssd] RHEL 8.5 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.1" date="1634558400">- Resolves: rhbz#2014460 - tps tests fail with cross dependency on sssd debuginfo package: removal of 'sssd-libwbclient-debuginfo' is missing [rhel-8.5.0.z]</changelog>
</package>
<package pkgid="f189207bdf0d1f4b8d1759e731433e3ae172852f7ceb23911a34f3b9faede675" name="libsss_simpleifp-debuginfo" arch="i686">
  <version epoch="0" ver="2.5.2" rel="2.el8_5.3"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-7" date="1611662400">- Resolves: rhbz#1920001 - Do not add '%' to group names already prefixed with '%' in IPA sudo rules
- Resolves: rhbz#1918433 - sssd unable to lookup certmap rules
- Resolves: rhbz#1917382 - [abrt] [faf] sssd: dp_client_handshake_timeout(): /usr/libexec/sssd/sssd_be killed by 11</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-8" date="1613131200">- Resolves: rhbz#1926622 - Add support to verify authentication indicators in pam_sss_gss
- Resolves: rhbz#1926454 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0.
- Resolves: rhbz#1893159 - Default debug level should report all errors / failures (additional patch)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.0-1" date="1620648000">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1930535 - [abrt] [faf] sssd: monitor_service_shutdown(): /usr/sbin/sssd killed by 11
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1945888 - Inconsistant debug level for connection logging
- Resolves: rhbz#1948657 - pam_sss_gss.so doesn't work with large kerberos tickets
- Resolves: rhbz#1949149 - [RFE] Poor man's backtrace
- Resolves: rhbz#1920500 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR
- Resolves: rhbz#1923964 - [RFE] SSSD Error Msg Improvement: write_krb5info_file failed, authentication might fail.
- Resolves: rhbz#1928648 - SSSD logs improvements: clarify which config option applies to each timeout in the logs
- Resolves: rhbz#1632159 - sssd-kcm starts successfully for non existent socket_path
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm
- Resolves: rhbz#1925505 - [RFE] improve the sssd refresh timers for SUDO queries
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1925561 - sssd-ldap(5) does not report how to disable the SUDO smart queries
- Resolves: rhbz#1925621 - document impact of indices and of scope on performance of LDAP queries
- Resolves: rhbz#1855320 - [RFE] RHEL8 sssd: inheritance of the case_sensitive parameter for subdomains.
- Resolves: rhbz#1925608 - [RFE] make 'random_offset' addon to 'offline_timeout' option configurable
- Resolves: rhbz#1447945 - man page / docs update required: if two certificate matching rules with the same priority match only one is used
- Resolves: rhbz#1703436 - sssd not thread-safe in innetgr()
- Resolves: rhbz#1713143 - SSSD does not translate the 2FA text labels("first factor" / "second factor") on GDM login and screensaver unlock screen
- Resolves: rhbz#1888977 - sss_override: Usage limitations clarification in man page
- Resolves: rhbz#1890177 - Clarify "single_prompt" option in "PROMPTING CONFIGURATION SECTION" section of sssd.conf man page
- Resolves: rhbz#1902280 - fix sss_cache to also reset cached timestamp
- Resolves: rhbz#1935683 - SSSD not detecting subdomain from AD forest (RHEL 8.3)
- Resolves: rhbz#1937919 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7
- Resolves: rhbz#1944665 - No gpo found and ad_gpo_implicit_deny set to True still permits user login
- Resolves: rhbz#1919942 - sss_override does not take precedence over override_homedir directive</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-1" date="1623153600">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1917444 - SSSD Error Msg Improvement: Server resolution failed: [2]: No such file or directory
- Resolves: rhbz#1917511 - SSSD Error Msg Improvement: Failed to resolve server 'server.example.com': Error reading file
- Resolves: rhbz#1917535 - sssd.conf man page: parameter dns_resolver_server_timeout and dns_resolver_op_timeout
- Resolves: rhbz#1940509 - [RFE] Health and Support Analyzer: Link frontend to backend requests
- Resolves: rhbz#1649464 - auto_private_groups not working as expected with posix ipa/ad trust
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1961215 - Invalid sssd-kcm return code if requested operation is not found
- Resolves: rhbz#1837090 - SSSD fails nss_getby_name for IPA user with SID if the user has user private group
- Resolves: rhbz#1879869 - sudo commands incorrectly exports the KRB5CCNAME environment variable
- Resolves: rhbz#1962550 - sss_pac_make_request fails on systems joined to Active Directory.
- Resolves: rhbz#1737489 - [RFE] SSSD should honor default Kerberos settings (keytab name) in /etc/krb5.conf</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-2" date="1624276800">- Resolves: rhbz#1974257 - 'debug_microseconds' config option is broken
- Resolves: rhbz#1936902 - SSSD Error Msg Improvement: Invalid argument
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm (additional patches and rebuild)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-1" date="1626091200">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1693379 - sssd_be and sss_cache too heavy on CPU
- Resolves: rhbz#1909373 - Missing search index for `originalADgidNumber`
- Resolves: rhbz#1954630 - [RFE] Improve debug messages by adding a unique tag for each request the backend is handling
- Resolves: rhbz#1936891 - SSSD Error Msg Improvement: Bad address
- Resolves: rhbz#1364596 - sssd still showing ipa user after removed from last group
- Resolves: rhbz#1979404 - Changes made to /etc/pam.d/sssd-shadowutils are overwritten back to default on sssd-common package upgrade</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2" date="1627905600">- Resolves: rhbz#1975169 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-8]
- Resolves: rhbz#1962042 - [sssd] RHEL 8.5 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.1" date="1634558400">- Resolves: rhbz#2014460 - tps tests fail with cross dependency on sssd debuginfo package: removal of 'sssd-libwbclient-debuginfo' is missing [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.2" date="1638187200">- Resolves: rhbz#2018440 - 2.5.x based SSSD adds more AD domains than it should based on the configuration file (not trusted and from a different forest) [rhel-8.5.0.z]
- Resolves: rhbz#2016923 - autofs lookups for unknown mounts are delayed for 50s [rhel-8.5.0.z]
- Resolves: rhbz#2021499 - Make backtrace less "chatty" (avoid duplicate backtraces) [rhel-8.5.0.z]
- Resolves: rhbz#2013379 - Lookup with fully-qualified name does not work with 'cache_first = True' [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.3" date="1638878400">- Resolves: rhbz#2028828 - pam responder does not call initgroups to refresh the user entry [rhel-8.5.0.z]</changelog>
</package>
<package pkgid="065eeec5f9e19c3b2f0b176e01408681a830eba7f11bdcfb870d09de545af47c" name="libsss_simpleifp-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="2.el8_5.3"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-7" date="1611662400">- Resolves: rhbz#1920001 - Do not add '%' to group names already prefixed with '%' in IPA sudo rules
- Resolves: rhbz#1918433 - sssd unable to lookup certmap rules
- Resolves: rhbz#1917382 - [abrt] [faf] sssd: dp_client_handshake_timeout(): /usr/libexec/sssd/sssd_be killed by 11</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-8" date="1613131200">- Resolves: rhbz#1926622 - Add support to verify authentication indicators in pam_sss_gss
- Resolves: rhbz#1926454 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0.
- Resolves: rhbz#1893159 - Default debug level should report all errors / failures (additional patch)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.0-1" date="1620648000">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1930535 - [abrt] [faf] sssd: monitor_service_shutdown(): /usr/sbin/sssd killed by 11
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1945888 - Inconsistant debug level for connection logging
- Resolves: rhbz#1948657 - pam_sss_gss.so doesn't work with large kerberos tickets
- Resolves: rhbz#1949149 - [RFE] Poor man's backtrace
- Resolves: rhbz#1920500 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR
- Resolves: rhbz#1923964 - [RFE] SSSD Error Msg Improvement: write_krb5info_file failed, authentication might fail.
- Resolves: rhbz#1928648 - SSSD logs improvements: clarify which config option applies to each timeout in the logs
- Resolves: rhbz#1632159 - sssd-kcm starts successfully for non existent socket_path
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm
- Resolves: rhbz#1925505 - [RFE] improve the sssd refresh timers for SUDO queries
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1925561 - sssd-ldap(5) does not report how to disable the SUDO smart queries
- Resolves: rhbz#1925621 - document impact of indices and of scope on performance of LDAP queries
- Resolves: rhbz#1855320 - [RFE] RHEL8 sssd: inheritance of the case_sensitive parameter for subdomains.
- Resolves: rhbz#1925608 - [RFE] make 'random_offset' addon to 'offline_timeout' option configurable
- Resolves: rhbz#1447945 - man page / docs update required: if two certificate matching rules with the same priority match only one is used
- Resolves: rhbz#1703436 - sssd not thread-safe in innetgr()
- Resolves: rhbz#1713143 - SSSD does not translate the 2FA text labels("first factor" / "second factor") on GDM login and screensaver unlock screen
- Resolves: rhbz#1888977 - sss_override: Usage limitations clarification in man page
- Resolves: rhbz#1890177 - Clarify "single_prompt" option in "PROMPTING CONFIGURATION SECTION" section of sssd.conf man page
- Resolves: rhbz#1902280 - fix sss_cache to also reset cached timestamp
- Resolves: rhbz#1935683 - SSSD not detecting subdomain from AD forest (RHEL 8.3)
- Resolves: rhbz#1937919 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7
- Resolves: rhbz#1944665 - No gpo found and ad_gpo_implicit_deny set to True still permits user login
- Resolves: rhbz#1919942 - sss_override does not take precedence over override_homedir directive</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-1" date="1623153600">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1917444 - SSSD Error Msg Improvement: Server resolution failed: [2]: No such file or directory
- Resolves: rhbz#1917511 - SSSD Error Msg Improvement: Failed to resolve server 'server.example.com': Error reading file
- Resolves: rhbz#1917535 - sssd.conf man page: parameter dns_resolver_server_timeout and dns_resolver_op_timeout
- Resolves: rhbz#1940509 - [RFE] Health and Support Analyzer: Link frontend to backend requests
- Resolves: rhbz#1649464 - auto_private_groups not working as expected with posix ipa/ad trust
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1961215 - Invalid sssd-kcm return code if requested operation is not found
- Resolves: rhbz#1837090 - SSSD fails nss_getby_name for IPA user with SID if the user has user private group
- Resolves: rhbz#1879869 - sudo commands incorrectly exports the KRB5CCNAME environment variable
- Resolves: rhbz#1962550 - sss_pac_make_request fails on systems joined to Active Directory.
- Resolves: rhbz#1737489 - [RFE] SSSD should honor default Kerberos settings (keytab name) in /etc/krb5.conf</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-2" date="1624276800">- Resolves: rhbz#1974257 - 'debug_microseconds' config option is broken
- Resolves: rhbz#1936902 - SSSD Error Msg Improvement: Invalid argument
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm (additional patches and rebuild)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-1" date="1626091200">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1693379 - sssd_be and sss_cache too heavy on CPU
- Resolves: rhbz#1909373 - Missing search index for `originalADgidNumber`
- Resolves: rhbz#1954630 - [RFE] Improve debug messages by adding a unique tag for each request the backend is handling
- Resolves: rhbz#1936891 - SSSD Error Msg Improvement: Bad address
- Resolves: rhbz#1364596 - sssd still showing ipa user after removed from last group
- Resolves: rhbz#1979404 - Changes made to /etc/pam.d/sssd-shadowutils are overwritten back to default on sssd-common package upgrade</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2" date="1627905600">- Resolves: rhbz#1975169 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-8]
- Resolves: rhbz#1962042 - [sssd] RHEL 8.5 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.1" date="1634558400">- Resolves: rhbz#2014460 - tps tests fail with cross dependency on sssd debuginfo package: removal of 'sssd-libwbclient-debuginfo' is missing [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.2" date="1638187200">- Resolves: rhbz#2018440 - 2.5.x based SSSD adds more AD domains than it should based on the configuration file (not trusted and from a different forest) [rhel-8.5.0.z]
- Resolves: rhbz#2016923 - autofs lookups for unknown mounts are delayed for 50s [rhel-8.5.0.z]
- Resolves: rhbz#2021499 - Make backtrace less "chatty" (avoid duplicate backtraces) [rhel-8.5.0.z]
- Resolves: rhbz#2013379 - Lookup with fully-qualified name does not work with 'cache_first = True' [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.3" date="1638878400">- Resolves: rhbz#2028828 - pam responder does not call initgroups to refresh the user entry [rhel-8.5.0.z]</changelog>
</package>
<package pkgid="4ce8678af188cbe8b7c03df7fa381927d8c5ecc79eecd6fefd250742e1184001" name="libsss_simpleifp-debuginfo" arch="i686">
  <version epoch="0" ver="2.5.2" rel="2.el8_5.4"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-8" date="1613131200">- Resolves: rhbz#1926622 - Add support to verify authentication indicators in pam_sss_gss
- Resolves: rhbz#1926454 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0.
- Resolves: rhbz#1893159 - Default debug level should report all errors / failures (additional patch)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.0-1" date="1620648000">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1930535 - [abrt] [faf] sssd: monitor_service_shutdown(): /usr/sbin/sssd killed by 11
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1945888 - Inconsistant debug level for connection logging
- Resolves: rhbz#1948657 - pam_sss_gss.so doesn't work with large kerberos tickets
- Resolves: rhbz#1949149 - [RFE] Poor man's backtrace
- Resolves: rhbz#1920500 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR
- Resolves: rhbz#1923964 - [RFE] SSSD Error Msg Improvement: write_krb5info_file failed, authentication might fail.
- Resolves: rhbz#1928648 - SSSD logs improvements: clarify which config option applies to each timeout in the logs
- Resolves: rhbz#1632159 - sssd-kcm starts successfully for non existent socket_path
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm
- Resolves: rhbz#1925505 - [RFE] improve the sssd refresh timers for SUDO queries
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1925561 - sssd-ldap(5) does not report how to disable the SUDO smart queries
- Resolves: rhbz#1925621 - document impact of indices and of scope on performance of LDAP queries
- Resolves: rhbz#1855320 - [RFE] RHEL8 sssd: inheritance of the case_sensitive parameter for subdomains.
- Resolves: rhbz#1925608 - [RFE] make 'random_offset' addon to 'offline_timeout' option configurable
- Resolves: rhbz#1447945 - man page / docs update required: if two certificate matching rules with the same priority match only one is used
- Resolves: rhbz#1703436 - sssd not thread-safe in innetgr()
- Resolves: rhbz#1713143 - SSSD does not translate the 2FA text labels("first factor" / "second factor") on GDM login and screensaver unlock screen
- Resolves: rhbz#1888977 - sss_override: Usage limitations clarification in man page
- Resolves: rhbz#1890177 - Clarify "single_prompt" option in "PROMPTING CONFIGURATION SECTION" section of sssd.conf man page
- Resolves: rhbz#1902280 - fix sss_cache to also reset cached timestamp
- Resolves: rhbz#1935683 - SSSD not detecting subdomain from AD forest (RHEL 8.3)
- Resolves: rhbz#1937919 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7
- Resolves: rhbz#1944665 - No gpo found and ad_gpo_implicit_deny set to True still permits user login
- Resolves: rhbz#1919942 - sss_override does not take precedence over override_homedir directive</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-1" date="1623153600">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1917444 - SSSD Error Msg Improvement: Server resolution failed: [2]: No such file or directory
- Resolves: rhbz#1917511 - SSSD Error Msg Improvement: Failed to resolve server 'server.example.com': Error reading file
- Resolves: rhbz#1917535 - sssd.conf man page: parameter dns_resolver_server_timeout and dns_resolver_op_timeout
- Resolves: rhbz#1940509 - [RFE] Health and Support Analyzer: Link frontend to backend requests
- Resolves: rhbz#1649464 - auto_private_groups not working as expected with posix ipa/ad trust
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1961215 - Invalid sssd-kcm return code if requested operation is not found
- Resolves: rhbz#1837090 - SSSD fails nss_getby_name for IPA user with SID if the user has user private group
- Resolves: rhbz#1879869 - sudo commands incorrectly exports the KRB5CCNAME environment variable
- Resolves: rhbz#1962550 - sss_pac_make_request fails on systems joined to Active Directory.
- Resolves: rhbz#1737489 - [RFE] SSSD should honor default Kerberos settings (keytab name) in /etc/krb5.conf</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-2" date="1624276800">- Resolves: rhbz#1974257 - 'debug_microseconds' config option is broken
- Resolves: rhbz#1936902 - SSSD Error Msg Improvement: Invalid argument
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm (additional patches and rebuild)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-1" date="1626091200">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1693379 - sssd_be and sss_cache too heavy on CPU
- Resolves: rhbz#1909373 - Missing search index for `originalADgidNumber`
- Resolves: rhbz#1954630 - [RFE] Improve debug messages by adding a unique tag for each request the backend is handling
- Resolves: rhbz#1936891 - SSSD Error Msg Improvement: Bad address
- Resolves: rhbz#1364596 - sssd still showing ipa user after removed from last group
- Resolves: rhbz#1979404 - Changes made to /etc/pam.d/sssd-shadowutils are overwritten back to default on sssd-common package upgrade</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2" date="1627905600">- Resolves: rhbz#1975169 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-8]
- Resolves: rhbz#1962042 - [sssd] RHEL 8.5 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.1" date="1634558400">- Resolves: rhbz#2014460 - tps tests fail with cross dependency on sssd debuginfo package: removal of 'sssd-libwbclient-debuginfo' is missing [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.2" date="1638187200">- Resolves: rhbz#2018440 - 2.5.x based SSSD adds more AD domains than it should based on the configuration file (not trusted and from a different forest) [rhel-8.5.0.z]
- Resolves: rhbz#2016923 - autofs lookups for unknown mounts are delayed for 50s [rhel-8.5.0.z]
- Resolves: rhbz#2021499 - Make backtrace less "chatty" (avoid duplicate backtraces) [rhel-8.5.0.z]
- Resolves: rhbz#2013379 - Lookup with fully-qualified name does not work with 'cache_first = True' [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.3" date="1638878400">- Resolves: rhbz#2028828 - pam responder does not call initgroups to refresh the user entry [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.4" date="1642420800">- Resolves: rhbz#2030651 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries [rhel-8.5.0.z]
- Resolves: rhbz#2035285 - AD Domain in the AD Forest Missing after sssd latest update [rhel-8.5.0.z]</changelog>
</package>
<package pkgid="1a3c32f1375c5b1685969fbf5b589d80f8509d0fe6dc67ca2a71ae29e7a5f1fe" name="libsss_simpleifp-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="2.el8_5.4"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-8" date="1613131200">- Resolves: rhbz#1926622 - Add support to verify authentication indicators in pam_sss_gss
- Resolves: rhbz#1926454 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0.
- Resolves: rhbz#1893159 - Default debug level should report all errors / failures (additional patch)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.0-1" date="1620648000">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1930535 - [abrt] [faf] sssd: monitor_service_shutdown(): /usr/sbin/sssd killed by 11
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1945888 - Inconsistant debug level for connection logging
- Resolves: rhbz#1948657 - pam_sss_gss.so doesn't work with large kerberos tickets
- Resolves: rhbz#1949149 - [RFE] Poor man's backtrace
- Resolves: rhbz#1920500 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR
- Resolves: rhbz#1923964 - [RFE] SSSD Error Msg Improvement: write_krb5info_file failed, authentication might fail.
- Resolves: rhbz#1928648 - SSSD logs improvements: clarify which config option applies to each timeout in the logs
- Resolves: rhbz#1632159 - sssd-kcm starts successfully for non existent socket_path
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm
- Resolves: rhbz#1925505 - [RFE] improve the sssd refresh timers for SUDO queries
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1925561 - sssd-ldap(5) does not report how to disable the SUDO smart queries
- Resolves: rhbz#1925621 - document impact of indices and of scope on performance of LDAP queries
- Resolves: rhbz#1855320 - [RFE] RHEL8 sssd: inheritance of the case_sensitive parameter for subdomains.
- Resolves: rhbz#1925608 - [RFE] make 'random_offset' addon to 'offline_timeout' option configurable
- Resolves: rhbz#1447945 - man page / docs update required: if two certificate matching rules with the same priority match only one is used
- Resolves: rhbz#1703436 - sssd not thread-safe in innetgr()
- Resolves: rhbz#1713143 - SSSD does not translate the 2FA text labels("first factor" / "second factor") on GDM login and screensaver unlock screen
- Resolves: rhbz#1888977 - sss_override: Usage limitations clarification in man page
- Resolves: rhbz#1890177 - Clarify "single_prompt" option in "PROMPTING CONFIGURATION SECTION" section of sssd.conf man page
- Resolves: rhbz#1902280 - fix sss_cache to also reset cached timestamp
- Resolves: rhbz#1935683 - SSSD not detecting subdomain from AD forest (RHEL 8.3)
- Resolves: rhbz#1937919 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7
- Resolves: rhbz#1944665 - No gpo found and ad_gpo_implicit_deny set to True still permits user login
- Resolves: rhbz#1919942 - sss_override does not take precedence over override_homedir directive</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-1" date="1623153600">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1917444 - SSSD Error Msg Improvement: Server resolution failed: [2]: No such file or directory
- Resolves: rhbz#1917511 - SSSD Error Msg Improvement: Failed to resolve server 'server.example.com': Error reading file
- Resolves: rhbz#1917535 - sssd.conf man page: parameter dns_resolver_server_timeout and dns_resolver_op_timeout
- Resolves: rhbz#1940509 - [RFE] Health and Support Analyzer: Link frontend to backend requests
- Resolves: rhbz#1649464 - auto_private_groups not working as expected with posix ipa/ad trust
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1961215 - Invalid sssd-kcm return code if requested operation is not found
- Resolves: rhbz#1837090 - SSSD fails nss_getby_name for IPA user with SID if the user has user private group
- Resolves: rhbz#1879869 - sudo commands incorrectly exports the KRB5CCNAME environment variable
- Resolves: rhbz#1962550 - sss_pac_make_request fails on systems joined to Active Directory.
- Resolves: rhbz#1737489 - [RFE] SSSD should honor default Kerberos settings (keytab name) in /etc/krb5.conf</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-2" date="1624276800">- Resolves: rhbz#1974257 - 'debug_microseconds' config option is broken
- Resolves: rhbz#1936902 - SSSD Error Msg Improvement: Invalid argument
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm (additional patches and rebuild)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-1" date="1626091200">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1693379 - sssd_be and sss_cache too heavy on CPU
- Resolves: rhbz#1909373 - Missing search index for `originalADgidNumber`
- Resolves: rhbz#1954630 - [RFE] Improve debug messages by adding a unique tag for each request the backend is handling
- Resolves: rhbz#1936891 - SSSD Error Msg Improvement: Bad address
- Resolves: rhbz#1364596 - sssd still showing ipa user after removed from last group
- Resolves: rhbz#1979404 - Changes made to /etc/pam.d/sssd-shadowutils are overwritten back to default on sssd-common package upgrade</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2" date="1627905600">- Resolves: rhbz#1975169 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-8]
- Resolves: rhbz#1962042 - [sssd] RHEL 8.5 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.1" date="1634558400">- Resolves: rhbz#2014460 - tps tests fail with cross dependency on sssd debuginfo package: removal of 'sssd-libwbclient-debuginfo' is missing [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.2" date="1638187200">- Resolves: rhbz#2018440 - 2.5.x based SSSD adds more AD domains than it should based on the configuration file (not trusted and from a different forest) [rhel-8.5.0.z]
- Resolves: rhbz#2016923 - autofs lookups for unknown mounts are delayed for 50s [rhel-8.5.0.z]
- Resolves: rhbz#2021499 - Make backtrace less "chatty" (avoid duplicate backtraces) [rhel-8.5.0.z]
- Resolves: rhbz#2013379 - Lookup with fully-qualified name does not work with 'cache_first = True' [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.3" date="1638878400">- Resolves: rhbz#2028828 - pam responder does not call initgroups to refresh the user entry [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.4" date="1642420800">- Resolves: rhbz#2030651 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries [rhel-8.5.0.z]
- Resolves: rhbz#2035285 - AD Domain in the AD Forest Missing after sssd latest update [rhel-8.5.0.z]</changelog>
</package>
<package pkgid="772f1a9410ef378a760ade67313b12f23ae2f061297aae044c6c59e9298851ed" name="libsss_sudo-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="2.el8_5.1"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-5" date="1609156800">- Resolves: rhbz#1631410 - Can't login with smartcard with multiple certs having same ID value
- Resolves: rhbz#1884213 - [RFE] add offline_timeout_max config option to control offline interval backoff (additional patches)
- Resolves: rhbz#1893159 - Default debug level should report all errors / failures
- Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-6" date="1610971200">- Resolves: rhbz#1113639 - autofs: return a connection failure until maps have been fetched
- Resolves: rhbz#1915395 - Memory leak in the simple access provider
- Resolves: rhbz#1915319 - SSSD: SBUS: failures during servers startup
- Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication (additional patches)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-7" date="1611662400">- Resolves: rhbz#1920001 - Do not add '%' to group names already prefixed with '%' in IPA sudo rules
- Resolves: rhbz#1918433 - sssd unable to lookup certmap rules
- Resolves: rhbz#1917382 - [abrt] [faf] sssd: dp_client_handshake_timeout(): /usr/libexec/sssd/sssd_be killed by 11</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-8" date="1613131200">- Resolves: rhbz#1926622 - Add support to verify authentication indicators in pam_sss_gss
- Resolves: rhbz#1926454 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0.
- Resolves: rhbz#1893159 - Default debug level should report all errors / failures (additional patch)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.0-1" date="1620648000">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1930535 - [abrt] [faf] sssd: monitor_service_shutdown(): /usr/sbin/sssd killed by 11
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1945888 - Inconsistant debug level for connection logging
- Resolves: rhbz#1948657 - pam_sss_gss.so doesn't work with large kerberos tickets
- Resolves: rhbz#1949149 - [RFE] Poor man's backtrace
- Resolves: rhbz#1920500 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR
- Resolves: rhbz#1923964 - [RFE] SSSD Error Msg Improvement: write_krb5info_file failed, authentication might fail.
- Resolves: rhbz#1928648 - SSSD logs improvements: clarify which config option applies to each timeout in the logs
- Resolves: rhbz#1632159 - sssd-kcm starts successfully for non existent socket_path
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm
- Resolves: rhbz#1925505 - [RFE] improve the sssd refresh timers for SUDO queries
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1925561 - sssd-ldap(5) does not report how to disable the SUDO smart queries
- Resolves: rhbz#1925621 - document impact of indices and of scope on performance of LDAP queries
- Resolves: rhbz#1855320 - [RFE] RHEL8 sssd: inheritance of the case_sensitive parameter for subdomains.
- Resolves: rhbz#1925608 - [RFE] make 'random_offset' addon to 'offline_timeout' option configurable
- Resolves: rhbz#1447945 - man page / docs update required: if two certificate matching rules with the same priority match only one is used
- Resolves: rhbz#1703436 - sssd not thread-safe in innetgr()
- Resolves: rhbz#1713143 - SSSD does not translate the 2FA text labels("first factor" / "second factor") on GDM login and screensaver unlock screen
- Resolves: rhbz#1888977 - sss_override: Usage limitations clarification in man page
- Resolves: rhbz#1890177 - Clarify "single_prompt" option in "PROMPTING CONFIGURATION SECTION" section of sssd.conf man page
- Resolves: rhbz#1902280 - fix sss_cache to also reset cached timestamp
- Resolves: rhbz#1935683 - SSSD not detecting subdomain from AD forest (RHEL 8.3)
- Resolves: rhbz#1937919 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7
- Resolves: rhbz#1944665 - No gpo found and ad_gpo_implicit_deny set to True still permits user login
- Resolves: rhbz#1919942 - sss_override does not take precedence over override_homedir directive</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-1" date="1623153600">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1917444 - SSSD Error Msg Improvement: Server resolution failed: [2]: No such file or directory
- Resolves: rhbz#1917511 - SSSD Error Msg Improvement: Failed to resolve server 'server.example.com': Error reading file
- Resolves: rhbz#1917535 - sssd.conf man page: parameter dns_resolver_server_timeout and dns_resolver_op_timeout
- Resolves: rhbz#1940509 - [RFE] Health and Support Analyzer: Link frontend to backend requests
- Resolves: rhbz#1649464 - auto_private_groups not working as expected with posix ipa/ad trust
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1961215 - Invalid sssd-kcm return code if requested operation is not found
- Resolves: rhbz#1837090 - SSSD fails nss_getby_name for IPA user with SID if the user has user private group
- Resolves: rhbz#1879869 - sudo commands incorrectly exports the KRB5CCNAME environment variable
- Resolves: rhbz#1962550 - sss_pac_make_request fails on systems joined to Active Directory.
- Resolves: rhbz#1737489 - [RFE] SSSD should honor default Kerberos settings (keytab name) in /etc/krb5.conf</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-2" date="1624276800">- Resolves: rhbz#1974257 - 'debug_microseconds' config option is broken
- Resolves: rhbz#1936902 - SSSD Error Msg Improvement: Invalid argument
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm (additional patches and rebuild)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-1" date="1626091200">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1693379 - sssd_be and sss_cache too heavy on CPU
- Resolves: rhbz#1909373 - Missing search index for `originalADgidNumber`
- Resolves: rhbz#1954630 - [RFE] Improve debug messages by adding a unique tag for each request the backend is handling
- Resolves: rhbz#1936891 - SSSD Error Msg Improvement: Bad address
- Resolves: rhbz#1364596 - sssd still showing ipa user after removed from last group
- Resolves: rhbz#1979404 - Changes made to /etc/pam.d/sssd-shadowutils are overwritten back to default on sssd-common package upgrade</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2" date="1627905600">- Resolves: rhbz#1975169 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-8]
- Resolves: rhbz#1962042 - [sssd] RHEL 8.5 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.1" date="1634558400">- Resolves: rhbz#2014460 - tps tests fail with cross dependency on sssd debuginfo package: removal of 'sssd-libwbclient-debuginfo' is missing [rhel-8.5.0.z]</changelog>
</package>
<package pkgid="41a6acf519e47b69276d40bc1faa5c14420c3efc99140637351238c7bf1566c3" name="libsss_sudo-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="2.el8_5.3"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-7" date="1611662400">- Resolves: rhbz#1920001 - Do not add '%' to group names already prefixed with '%' in IPA sudo rules
- Resolves: rhbz#1918433 - sssd unable to lookup certmap rules
- Resolves: rhbz#1917382 - [abrt] [faf] sssd: dp_client_handshake_timeout(): /usr/libexec/sssd/sssd_be killed by 11</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-8" date="1613131200">- Resolves: rhbz#1926622 - Add support to verify authentication indicators in pam_sss_gss
- Resolves: rhbz#1926454 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0.
- Resolves: rhbz#1893159 - Default debug level should report all errors / failures (additional patch)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.0-1" date="1620648000">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1930535 - [abrt] [faf] sssd: monitor_service_shutdown(): /usr/sbin/sssd killed by 11
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1945888 - Inconsistant debug level for connection logging
- Resolves: rhbz#1948657 - pam_sss_gss.so doesn't work with large kerberos tickets
- Resolves: rhbz#1949149 - [RFE] Poor man's backtrace
- Resolves: rhbz#1920500 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR
- Resolves: rhbz#1923964 - [RFE] SSSD Error Msg Improvement: write_krb5info_file failed, authentication might fail.
- Resolves: rhbz#1928648 - SSSD logs improvements: clarify which config option applies to each timeout in the logs
- Resolves: rhbz#1632159 - sssd-kcm starts successfully for non existent socket_path
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm
- Resolves: rhbz#1925505 - [RFE] improve the sssd refresh timers for SUDO queries
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1925561 - sssd-ldap(5) does not report how to disable the SUDO smart queries
- Resolves: rhbz#1925621 - document impact of indices and of scope on performance of LDAP queries
- Resolves: rhbz#1855320 - [RFE] RHEL8 sssd: inheritance of the case_sensitive parameter for subdomains.
- Resolves: rhbz#1925608 - [RFE] make 'random_offset' addon to 'offline_timeout' option configurable
- Resolves: rhbz#1447945 - man page / docs update required: if two certificate matching rules with the same priority match only one is used
- Resolves: rhbz#1703436 - sssd not thread-safe in innetgr()
- Resolves: rhbz#1713143 - SSSD does not translate the 2FA text labels("first factor" / "second factor") on GDM login and screensaver unlock screen
- Resolves: rhbz#1888977 - sss_override: Usage limitations clarification in man page
- Resolves: rhbz#1890177 - Clarify "single_prompt" option in "PROMPTING CONFIGURATION SECTION" section of sssd.conf man page
- Resolves: rhbz#1902280 - fix sss_cache to also reset cached timestamp
- Resolves: rhbz#1935683 - SSSD not detecting subdomain from AD forest (RHEL 8.3)
- Resolves: rhbz#1937919 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7
- Resolves: rhbz#1944665 - No gpo found and ad_gpo_implicit_deny set to True still permits user login
- Resolves: rhbz#1919942 - sss_override does not take precedence over override_homedir directive</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-1" date="1623153600">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1917444 - SSSD Error Msg Improvement: Server resolution failed: [2]: No such file or directory
- Resolves: rhbz#1917511 - SSSD Error Msg Improvement: Failed to resolve server 'server.example.com': Error reading file
- Resolves: rhbz#1917535 - sssd.conf man page: parameter dns_resolver_server_timeout and dns_resolver_op_timeout
- Resolves: rhbz#1940509 - [RFE] Health and Support Analyzer: Link frontend to backend requests
- Resolves: rhbz#1649464 - auto_private_groups not working as expected with posix ipa/ad trust
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1961215 - Invalid sssd-kcm return code if requested operation is not found
- Resolves: rhbz#1837090 - SSSD fails nss_getby_name for IPA user with SID if the user has user private group
- Resolves: rhbz#1879869 - sudo commands incorrectly exports the KRB5CCNAME environment variable
- Resolves: rhbz#1962550 - sss_pac_make_request fails on systems joined to Active Directory.
- Resolves: rhbz#1737489 - [RFE] SSSD should honor default Kerberos settings (keytab name) in /etc/krb5.conf</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-2" date="1624276800">- Resolves: rhbz#1974257 - 'debug_microseconds' config option is broken
- Resolves: rhbz#1936902 - SSSD Error Msg Improvement: Invalid argument
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm (additional patches and rebuild)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-1" date="1626091200">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1693379 - sssd_be and sss_cache too heavy on CPU
- Resolves: rhbz#1909373 - Missing search index for `originalADgidNumber`
- Resolves: rhbz#1954630 - [RFE] Improve debug messages by adding a unique tag for each request the backend is handling
- Resolves: rhbz#1936891 - SSSD Error Msg Improvement: Bad address
- Resolves: rhbz#1364596 - sssd still showing ipa user after removed from last group
- Resolves: rhbz#1979404 - Changes made to /etc/pam.d/sssd-shadowutils are overwritten back to default on sssd-common package upgrade</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2" date="1627905600">- Resolves: rhbz#1975169 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-8]
- Resolves: rhbz#1962042 - [sssd] RHEL 8.5 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.1" date="1634558400">- Resolves: rhbz#2014460 - tps tests fail with cross dependency on sssd debuginfo package: removal of 'sssd-libwbclient-debuginfo' is missing [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.2" date="1638187200">- Resolves: rhbz#2018440 - 2.5.x based SSSD adds more AD domains than it should based on the configuration file (not trusted and from a different forest) [rhel-8.5.0.z]
- Resolves: rhbz#2016923 - autofs lookups for unknown mounts are delayed for 50s [rhel-8.5.0.z]
- Resolves: rhbz#2021499 - Make backtrace less "chatty" (avoid duplicate backtraces) [rhel-8.5.0.z]
- Resolves: rhbz#2013379 - Lookup with fully-qualified name does not work with 'cache_first = True' [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.3" date="1638878400">- Resolves: rhbz#2028828 - pam responder does not call initgroups to refresh the user entry [rhel-8.5.0.z]</changelog>
</package>
<package pkgid="5c9796210b9621d88dd1ef8837df91c3c138b0cfef22cd85b3e5232264cd35d9" name="libsss_sudo-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="2.el8_5.4"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-8" date="1613131200">- Resolves: rhbz#1926622 - Add support to verify authentication indicators in pam_sss_gss
- Resolves: rhbz#1926454 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0.
- Resolves: rhbz#1893159 - Default debug level should report all errors / failures (additional patch)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.0-1" date="1620648000">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1930535 - [abrt] [faf] sssd: monitor_service_shutdown(): /usr/sbin/sssd killed by 11
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1945888 - Inconsistant debug level for connection logging
- Resolves: rhbz#1948657 - pam_sss_gss.so doesn't work with large kerberos tickets
- Resolves: rhbz#1949149 - [RFE] Poor man's backtrace
- Resolves: rhbz#1920500 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR
- Resolves: rhbz#1923964 - [RFE] SSSD Error Msg Improvement: write_krb5info_file failed, authentication might fail.
- Resolves: rhbz#1928648 - SSSD logs improvements: clarify which config option applies to each timeout in the logs
- Resolves: rhbz#1632159 - sssd-kcm starts successfully for non existent socket_path
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm
- Resolves: rhbz#1925505 - [RFE] improve the sssd refresh timers for SUDO queries
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1925561 - sssd-ldap(5) does not report how to disable the SUDO smart queries
- Resolves: rhbz#1925621 - document impact of indices and of scope on performance of LDAP queries
- Resolves: rhbz#1855320 - [RFE] RHEL8 sssd: inheritance of the case_sensitive parameter for subdomains.
- Resolves: rhbz#1925608 - [RFE] make 'random_offset' addon to 'offline_timeout' option configurable
- Resolves: rhbz#1447945 - man page / docs update required: if two certificate matching rules with the same priority match only one is used
- Resolves: rhbz#1703436 - sssd not thread-safe in innetgr()
- Resolves: rhbz#1713143 - SSSD does not translate the 2FA text labels("first factor" / "second factor") on GDM login and screensaver unlock screen
- Resolves: rhbz#1888977 - sss_override: Usage limitations clarification in man page
- Resolves: rhbz#1890177 - Clarify "single_prompt" option in "PROMPTING CONFIGURATION SECTION" section of sssd.conf man page
- Resolves: rhbz#1902280 - fix sss_cache to also reset cached timestamp
- Resolves: rhbz#1935683 - SSSD not detecting subdomain from AD forest (RHEL 8.3)
- Resolves: rhbz#1937919 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7
- Resolves: rhbz#1944665 - No gpo found and ad_gpo_implicit_deny set to True still permits user login
- Resolves: rhbz#1919942 - sss_override does not take precedence over override_homedir directive</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-1" date="1623153600">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1917444 - SSSD Error Msg Improvement: Server resolution failed: [2]: No such file or directory
- Resolves: rhbz#1917511 - SSSD Error Msg Improvement: Failed to resolve server 'server.example.com': Error reading file
- Resolves: rhbz#1917535 - sssd.conf man page: parameter dns_resolver_server_timeout and dns_resolver_op_timeout
- Resolves: rhbz#1940509 - [RFE] Health and Support Analyzer: Link frontend to backend requests
- Resolves: rhbz#1649464 - auto_private_groups not working as expected with posix ipa/ad trust
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1961215 - Invalid sssd-kcm return code if requested operation is not found
- Resolves: rhbz#1837090 - SSSD fails nss_getby_name for IPA user with SID if the user has user private group
- Resolves: rhbz#1879869 - sudo commands incorrectly exports the KRB5CCNAME environment variable
- Resolves: rhbz#1962550 - sss_pac_make_request fails on systems joined to Active Directory.
- Resolves: rhbz#1737489 - [RFE] SSSD should honor default Kerberos settings (keytab name) in /etc/krb5.conf</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-2" date="1624276800">- Resolves: rhbz#1974257 - 'debug_microseconds' config option is broken
- Resolves: rhbz#1936902 - SSSD Error Msg Improvement: Invalid argument
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm (additional patches and rebuild)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-1" date="1626091200">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1693379 - sssd_be and sss_cache too heavy on CPU
- Resolves: rhbz#1909373 - Missing search index for `originalADgidNumber`
- Resolves: rhbz#1954630 - [RFE] Improve debug messages by adding a unique tag for each request the backend is handling
- Resolves: rhbz#1936891 - SSSD Error Msg Improvement: Bad address
- Resolves: rhbz#1364596 - sssd still showing ipa user after removed from last group
- Resolves: rhbz#1979404 - Changes made to /etc/pam.d/sssd-shadowutils are overwritten back to default on sssd-common package upgrade</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2" date="1627905600">- Resolves: rhbz#1975169 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-8]
- Resolves: rhbz#1962042 - [sssd] RHEL 8.5 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.1" date="1634558400">- Resolves: rhbz#2014460 - tps tests fail with cross dependency on sssd debuginfo package: removal of 'sssd-libwbclient-debuginfo' is missing [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.2" date="1638187200">- Resolves: rhbz#2018440 - 2.5.x based SSSD adds more AD domains than it should based on the configuration file (not trusted and from a different forest) [rhel-8.5.0.z]
- Resolves: rhbz#2016923 - autofs lookups for unknown mounts are delayed for 50s [rhel-8.5.0.z]
- Resolves: rhbz#2021499 - Make backtrace less "chatty" (avoid duplicate backtraces) [rhel-8.5.0.z]
- Resolves: rhbz#2013379 - Lookup with fully-qualified name does not work with 'cache_first = True' [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.3" date="1638878400">- Resolves: rhbz#2028828 - pam responder does not call initgroups to refresh the user entry [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.4" date="1642420800">- Resolves: rhbz#2030651 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries [rhel-8.5.0.z]
- Resolves: rhbz#2035285 - AD Domain in the AD Forest Missing after sssd latest update [rhel-8.5.0.z]</changelog>
</package>
<package pkgid="d2ca1a38e8fc40bc5847a225d37f103c1be46f02e701ee95923f556c1bf1033d" name="libstdc++-debuginfo" arch="i686">
  <version epoch="0" ver="8.5.0" rel="4.el8_5"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.3.1-5.2" date="1594814400">- backport aarch64 LSE atomics (#1821994)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.4.1-1" date="1601380800">- update from GCC 8.4 release (#1868446)
- remove symlinks to 32-bit versions of these static libraries: libasan.a,
  libitm.a, libquadmath.a, libubsan.a, libgfortran.a (#1779597)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.4.1-1.1" date="1617969600">- fix bad use of VMAT_CONTIGUOUS (PR tree-optimization/97236, #1925632)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.4.1-1.2" date="1617969601">- back out the PR97236 patch</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.4.1-2" date="1619179200">- update from GCC 8.4 release (#1946758)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.4.1-2.1" date="1619438400">- remove support for demangling GCC 2.x era mangling schemes (#1668394)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-1" date="1620993600">- update from GCC 8.5 release (#1946758)
- this includes a fix for PR target/87839 (#1958295)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-2" date="1622548800">- revert upstream PR85873 gcc-8 fix, apply the fix from gcc-9 (#1960701)
- fix 'this' adjustment for devirtualized call (PR c++/100797, #1965951)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-3" date="1626177600">- fix mangling of lambdas in default args (PR c++/91241, #1981822)
- add a few Provides: bundled</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-4" date="1635508800">- add -Wbidirectional patch (#2008391)</changelog>
</package>
<package pkgid="d679b339c155f4bd487065eecfda8b6d83aaffe66f96edb334c9de0c965b2b82" name="libstdc++-debuginfo" arch="x86_64">
  <version epoch="0" ver="8.5.0" rel="4.el8_5"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.3.1-5.2" date="1594814400">- backport aarch64 LSE atomics (#1821994)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.4.1-1" date="1601380800">- update from GCC 8.4 release (#1868446)
- remove symlinks to 32-bit versions of these static libraries: libasan.a,
  libitm.a, libquadmath.a, libubsan.a, libgfortran.a (#1779597)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.4.1-1.1" date="1617969600">- fix bad use of VMAT_CONTIGUOUS (PR tree-optimization/97236, #1925632)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.4.1-1.2" date="1617969601">- back out the PR97236 patch</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.4.1-2" date="1619179200">- update from GCC 8.4 release (#1946758)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.4.1-2.1" date="1619438400">- remove support for demangling GCC 2.x era mangling schemes (#1668394)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-1" date="1620993600">- update from GCC 8.5 release (#1946758)
- this includes a fix for PR target/87839 (#1958295)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-2" date="1622548800">- revert upstream PR85873 gcc-8 fix, apply the fix from gcc-9 (#1960701)
- fix 'this' adjustment for devirtualized call (PR c++/100797, #1965951)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-3" date="1626177600">- fix mangling of lambdas in default args (PR c++/91241, #1981822)
- add a few Provides: bundled</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-4" date="1635508800">- add -Wbidirectional patch (#2008391)</changelog>
</package>
<package pkgid="312ef390b44988e362f126918179627537e851f51cf3c3eaba1357b48bc4c3bb" name="libtsan-debuginfo" arch="x86_64">
  <version epoch="0" ver="8.5.0" rel="4.el8_5"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.3.1-5.2" date="1594814400">- backport aarch64 LSE atomics (#1821994)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.4.1-1" date="1601380800">- update from GCC 8.4 release (#1868446)
- remove symlinks to 32-bit versions of these static libraries: libasan.a,
  libitm.a, libquadmath.a, libubsan.a, libgfortran.a (#1779597)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.4.1-1.1" date="1617969600">- fix bad use of VMAT_CONTIGUOUS (PR tree-optimization/97236, #1925632)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.4.1-1.2" date="1617969601">- back out the PR97236 patch</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.4.1-2" date="1619179200">- update from GCC 8.4 release (#1946758)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.4.1-2.1" date="1619438400">- remove support for demangling GCC 2.x era mangling schemes (#1668394)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-1" date="1620993600">- update from GCC 8.5 release (#1946758)
- this includes a fix for PR target/87839 (#1958295)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-2" date="1622548800">- revert upstream PR85873 gcc-8 fix, apply the fix from gcc-9 (#1960701)
- fix 'this' adjustment for devirtualized call (PR c++/100797, #1965951)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-3" date="1626177600">- fix mangling of lambdas in default args (PR c++/91241, #1981822)
- add a few Provides: bundled</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-4" date="1635508800">- add -Wbidirectional patch (#2008391)</changelog>
</package>
<package pkgid="8e6be6fed5d303a91ea27479ddae3a76b759fc1cb732b206644d464e637269bc" name="libubsan-debuginfo" arch="i686">
  <version epoch="0" ver="8.5.0" rel="4.el8_5"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.3.1-5.2" date="1594814400">- backport aarch64 LSE atomics (#1821994)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.4.1-1" date="1601380800">- update from GCC 8.4 release (#1868446)
- remove symlinks to 32-bit versions of these static libraries: libasan.a,
  libitm.a, libquadmath.a, libubsan.a, libgfortran.a (#1779597)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.4.1-1.1" date="1617969600">- fix bad use of VMAT_CONTIGUOUS (PR tree-optimization/97236, #1925632)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.4.1-1.2" date="1617969601">- back out the PR97236 patch</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.4.1-2" date="1619179200">- update from GCC 8.4 release (#1946758)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.4.1-2.1" date="1619438400">- remove support for demangling GCC 2.x era mangling schemes (#1668394)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-1" date="1620993600">- update from GCC 8.5 release (#1946758)
- this includes a fix for PR target/87839 (#1958295)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-2" date="1622548800">- revert upstream PR85873 gcc-8 fix, apply the fix from gcc-9 (#1960701)
- fix 'this' adjustment for devirtualized call (PR c++/100797, #1965951)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-3" date="1626177600">- fix mangling of lambdas in default args (PR c++/91241, #1981822)
- add a few Provides: bundled</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-4" date="1635508800">- add -Wbidirectional patch (#2008391)</changelog>
</package>
<package pkgid="c4a3c4c42e72219224fb7460aefe5bc1a2e781651f2256d7ac199b960cb191cc" name="libubsan-debuginfo" arch="x86_64">
  <version epoch="0" ver="8.5.0" rel="4.el8_5"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.3.1-5.2" date="1594814400">- backport aarch64 LSE atomics (#1821994)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.4.1-1" date="1601380800">- update from GCC 8.4 release (#1868446)
- remove symlinks to 32-bit versions of these static libraries: libasan.a,
  libitm.a, libquadmath.a, libubsan.a, libgfortran.a (#1779597)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.4.1-1.1" date="1617969600">- fix bad use of VMAT_CONTIGUOUS (PR tree-optimization/97236, #1925632)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.4.1-1.2" date="1617969601">- back out the PR97236 patch</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.4.1-2" date="1619179200">- update from GCC 8.4 release (#1946758)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.4.1-2.1" date="1619438400">- remove support for demangling GCC 2.x era mangling schemes (#1668394)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-1" date="1620993600">- update from GCC 8.5 release (#1946758)
- this includes a fix for PR target/87839 (#1958295)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-2" date="1622548800">- revert upstream PR85873 gcc-8 fix, apply the fix from gcc-9 (#1960701)
- fix 'this' adjustment for devirtualized call (PR c++/100797, #1965951)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-3" date="1626177600">- fix mangling of lambdas in default args (PR c++/91241, #1981822)
- add a few Provides: bundled</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-4" date="1635508800">- add -Wbidirectional patch (#2008391)</changelog>
</package>
<package pkgid="32f2ef855da350ddab937c06864ef5324db3f6858f8b951d3bfa4a5e885ca80d" name="libwbclient-debuginfo" arch="i686">
  <version epoch="0" ver="4.14.5" rel="10.el8_5"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-0" date="1623326400">- related: rhbz#1944657 - Update to version 4.14.5
- resolves: rhbz#1969787 - Fix memory leak in RPC server
- resolves: rhbz#1954974 - Validate smb.conf option for domain members with testparm
- resolves: rhbz#1963298 - Fix smbd trying to delete files with wrong permissions
- resolves: rhbz#1890008 - Update rpcclient manpage to list all available commands
- resolves: rhbz#1857254 - Update smbcacls manpage to document inhertance flags</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-1" date="1624536000">- resolves: rhbz#1974792 - Create a subpackage for vfs-io-uring
- resolves: rhbz#1965397 - Raise log level for dfs ENOENT debug message</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; -  4.14.4-2" date="1626177600">- related: rhbz#1980346 - Rebuild for libtalloc 0.11.0</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-4" date="1636113600">- resolves: rhbz#2021163
  Fix CVE-2016-2124
- resolves: rhbz#2021167
  Fix CVE-2021-23192
- resolves: rhbz#2021171
  Fix CVE-2020-25717</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-5" date="1636459200">- resolves: rhbz#2021493 - Add missing PAC buffer types to krb5pac.idl
- related: rbhz#2021171 - Fix regression with 'allow trusted domains = no'</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.14.5-6" date="1636804800">- related: rhbz#2021171 - Fix CVE-2020-25717
- Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-7" date="1637582400">- related: rhbz#2021171 - Fix CVE-2020-25717
- Fix running ktest (selftest)</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.14.5-8" date="1638446400">- resolves: rhbz#2026717 - Dir containing dangling symlinks cannot be deleted</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-9" date="1643284800">- resolves: rhbz#2046174 - Fix username map script regression of CVE-2020-25717
- resolves: rhbz#2046160 - Fix possible segfault while joining a domain
- resolves: rhbz#2046152 - Fix CVE-2021-44142</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.14.5-10" date="1645531200">- resolves: rhbz#2029417 - Fix virusfilter_vfs_openat: Not scanned: Directory or special file</changelog>
</package>
<package pkgid="a1c3da0fd5ac3ff813bd687e37760b3a3a573777cd6727df7c00f7affc2714c8" name="libwbclient-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.14.5" rel="10.el8_5"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-0" date="1623326400">- related: rhbz#1944657 - Update to version 4.14.5
- resolves: rhbz#1969787 - Fix memory leak in RPC server
- resolves: rhbz#1954974 - Validate smb.conf option for domain members with testparm
- resolves: rhbz#1963298 - Fix smbd trying to delete files with wrong permissions
- resolves: rhbz#1890008 - Update rpcclient manpage to list all available commands
- resolves: rhbz#1857254 - Update smbcacls manpage to document inhertance flags</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-1" date="1624536000">- resolves: rhbz#1974792 - Create a subpackage for vfs-io-uring
- resolves: rhbz#1965397 - Raise log level for dfs ENOENT debug message</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; -  4.14.4-2" date="1626177600">- related: rhbz#1980346 - Rebuild for libtalloc 0.11.0</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-4" date="1636113600">- resolves: rhbz#2021163
  Fix CVE-2016-2124
- resolves: rhbz#2021167
  Fix CVE-2021-23192
- resolves: rhbz#2021171
  Fix CVE-2020-25717</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-5" date="1636459200">- resolves: rhbz#2021493 - Add missing PAC buffer types to krb5pac.idl
- related: rbhz#2021171 - Fix regression with 'allow trusted domains = no'</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.14.5-6" date="1636804800">- related: rhbz#2021171 - Fix CVE-2020-25717
- Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-7" date="1637582400">- related: rhbz#2021171 - Fix CVE-2020-25717
- Fix running ktest (selftest)</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.14.5-8" date="1638446400">- resolves: rhbz#2026717 - Dir containing dangling symlinks cannot be deleted</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-9" date="1643284800">- resolves: rhbz#2046174 - Fix username map script regression of CVE-2020-25717
- resolves: rhbz#2046160 - Fix possible segfault while joining a domain
- resolves: rhbz#2046152 - Fix CVE-2021-44142</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.14.5-10" date="1645531200">- resolves: rhbz#2029417 - Fix virusfilter_vfs_openat: Not scanned: Directory or special file</changelog>
</package>
<package pkgid="718ed4248a75beaa767ad33a6716ec6df1baa6ba7eb9cb5d7660c3045041a17d" name="libwbclient-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.14.5" rel="7.el8_5"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.13.3-3" date="1612440000">- resolves: #1924615 - Fix a memcache bug when cache is full
- resolves: #1924571 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-2" date="1620734400">- resolves: rhbz#1944657 - Update to version 4.14.4
- resolves: rhbz#1949445 - Fix CVE-2021-20254
- resolves: rhbz#1947945 - Fix libsmbldap.so.2 not being a symbolic link
- resolves: rhbz#1908506 - Fix creating the gencache user directory
- resolves: rhbz#1901029 - Build the vfs_io_uring module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-4" date="1620820800">- related: rhbz#1944657 - Fix possible upgrade issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-0" date="1623326400">- related: rhbz#1944657 - Update to version 4.14.5
- resolves: rhbz#1969787 - Fix memory leak in RPC server
- resolves: rhbz#1954974 - Validate smb.conf option for domain members with testparm
- resolves: rhbz#1963298 - Fix smbd trying to delete files with wrong permissions
- resolves: rhbz#1890008 - Update rpcclient manpage to list all available commands
- resolves: rhbz#1857254 - Update smbcacls manpage to document inhertance flags</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-1" date="1624536000">- resolves: rhbz#1974792 - Create a subpackage for vfs-io-uring
- resolves: rhbz#1965397 - Raise log level for dfs ENOENT debug message</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; -  4.14.4-2" date="1626177600">- related: rhbz#1980346 - Rebuild for libtalloc 0.11.0</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-4" date="1636113600">- resolves: rhbz#2021163
  Fix CVE-2016-2124
- resolves: rhbz#2021167
  Fix CVE-2021-23192
- resolves: rhbz#2021171
  Fix CVE-2020-25717</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-5" date="1636459200">- resolves: rhbz#2021493 - Add missing PAC buffer types to krb5pac.idl
- related: rbhz#2021171 - Fix regression with 'allow trusted domains = no'</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.14.5-6" date="1636804800">- related: rhbz#2021171 - Fix CVE-2020-25717
- Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-7" date="1637582400">- related: rhbz#2021171 - Fix CVE-2020-25717
- Fix running ktest (selftest)</changelog>
</package>
<package pkgid="80cd4f923311b8110db198b945bf641124eb8ca3e8b4e5537010347f74cb3775" name="libwbclient-debuginfo" arch="i686">
  <version epoch="0" ver="4.14.5" rel="9.el8_5"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-4" date="1620820800">- related: rhbz#1944657 - Fix possible upgrade issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-0" date="1623326400">- related: rhbz#1944657 - Update to version 4.14.5
- resolves: rhbz#1969787 - Fix memory leak in RPC server
- resolves: rhbz#1954974 - Validate smb.conf option for domain members with testparm
- resolves: rhbz#1963298 - Fix smbd trying to delete files with wrong permissions
- resolves: rhbz#1890008 - Update rpcclient manpage to list all available commands
- resolves: rhbz#1857254 - Update smbcacls manpage to document inhertance flags</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-1" date="1624536000">- resolves: rhbz#1974792 - Create a subpackage for vfs-io-uring
- resolves: rhbz#1965397 - Raise log level for dfs ENOENT debug message</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; -  4.14.4-2" date="1626177600">- related: rhbz#1980346 - Rebuild for libtalloc 0.11.0</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-4" date="1636113600">- resolves: rhbz#2021163
  Fix CVE-2016-2124
- resolves: rhbz#2021167
  Fix CVE-2021-23192
- resolves: rhbz#2021171
  Fix CVE-2020-25717</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-5" date="1636459200">- resolves: rhbz#2021493 - Add missing PAC buffer types to krb5pac.idl
- related: rbhz#2021171 - Fix regression with 'allow trusted domains = no'</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.14.5-6" date="1636804800">- related: rhbz#2021171 - Fix CVE-2020-25717
- Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-7" date="1637582400">- related: rhbz#2021171 - Fix CVE-2020-25717
- Fix running ktest (selftest)</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.14.5-8" date="1638446400">- resolves: rhbz#2026717 - Dir containing dangling symlinks cannot be deleted</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-9" date="1643284800">- resolves: rhbz#2046174 - Fix username map script regression of CVE-2020-25717
- resolves: rhbz#2046160 - Fix possible segfault while joining a domain
- resolves: rhbz#2046152 - Fix CVE-2021-44142</changelog>
</package>
<package pkgid="97f59a932f8a0536ba334fa724c8ee98b14de60ee80d85a05e2a13aed01a99c1" name="libwbclient-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.14.5" rel="9.el8_5"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-4" date="1620820800">- related: rhbz#1944657 - Fix possible upgrade issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-0" date="1623326400">- related: rhbz#1944657 - Update to version 4.14.5
- resolves: rhbz#1969787 - Fix memory leak in RPC server
- resolves: rhbz#1954974 - Validate smb.conf option for domain members with testparm
- resolves: rhbz#1963298 - Fix smbd trying to delete files with wrong permissions
- resolves: rhbz#1890008 - Update rpcclient manpage to list all available commands
- resolves: rhbz#1857254 - Update smbcacls manpage to document inhertance flags</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-1" date="1624536000">- resolves: rhbz#1974792 - Create a subpackage for vfs-io-uring
- resolves: rhbz#1965397 - Raise log level for dfs ENOENT debug message</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; -  4.14.4-2" date="1626177600">- related: rhbz#1980346 - Rebuild for libtalloc 0.11.0</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-4" date="1636113600">- resolves: rhbz#2021163
  Fix CVE-2016-2124
- resolves: rhbz#2021167
  Fix CVE-2021-23192
- resolves: rhbz#2021171
  Fix CVE-2020-25717</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-5" date="1636459200">- resolves: rhbz#2021493 - Add missing PAC buffer types to krb5pac.idl
- related: rbhz#2021171 - Fix regression with 'allow trusted domains = no'</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.14.5-6" date="1636804800">- related: rhbz#2021171 - Fix CVE-2020-25717
- Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-7" date="1637582400">- related: rhbz#2021171 - Fix CVE-2020-25717
- Fix running ktest (selftest)</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.14.5-8" date="1638446400">- resolves: rhbz#2026717 - Dir containing dangling symlinks cannot be deleted</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-9" date="1643284800">- resolves: rhbz#2046174 - Fix username map script regression of CVE-2020-25717
- resolves: rhbz#2046160 - Fix possible segfault while joining a domain
- resolves: rhbz#2046152 - Fix CVE-2021-44142</changelog>
</package>
<package pkgid="59cd583d37e36d63462702c1b421e1106f6c86dfaaad7d9bc509dd30299ff589" name="libxml2-debuginfo" arch="i686">
  <version epoch="0" ver="2.9.7" rel="12.el8_5"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.9.7-3" date="1518004800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.9.7-4" date="1519473600">- Rebuild with new LDFLAGS from redhat-rpm-config</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.9.7-5" date="1533297600">- Fix some crashes under Python 3
- Conditionalize the python2 subpackage</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.7-6" date="1571918400">- Fix CVE-2018-9251 (#1565322)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.7-7" date="1571918401">- Fix CVE-2018-14404 (#1595989)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.7-8" date="1579521600">- Fix CVE-2019-19956 (#1793001)
- Fix CVE-2020-7595 (#1799786)
- Fix CVE-2019-20388 (#1810058)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.7-9" date="1603108800">- Fix CVE-2020-24977 (#1878252)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.7-10" date="1620388800">- Fix CVE-2021-3516 (#1956976)
- Fix CVE-2021-3517 (#1957001)
- Fix CVE-2021-3518 (#1957028)
- Fix CVE-2021-3537 (#1957284)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.7-11" date="1621425600">- Fix CVE-2021-3541 (#1958783)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.7-12" date="1645704000">- Fix CVE-2022-23308 (#2057663)</changelog>
</package>
<package pkgid="ef8e2363a207a303c3268bdae143ea2f258cb58b48bc8350d06783a647bdfc74" name="libxml2-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.9.7" rel="12.el8_5"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.9.7-3" date="1518004800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.9.7-4" date="1519473600">- Rebuild with new LDFLAGS from redhat-rpm-config</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.9.7-5" date="1533297600">- Fix some crashes under Python 3
- Conditionalize the python2 subpackage</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.7-6" date="1571918400">- Fix CVE-2018-9251 (#1565322)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.7-7" date="1571918401">- Fix CVE-2018-14404 (#1595989)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.7-8" date="1579521600">- Fix CVE-2019-19956 (#1793001)
- Fix CVE-2020-7595 (#1799786)
- Fix CVE-2019-20388 (#1810058)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.7-9" date="1603108800">- Fix CVE-2020-24977 (#1878252)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.7-10" date="1620388800">- Fix CVE-2021-3516 (#1956976)
- Fix CVE-2021-3517 (#1957001)
- Fix CVE-2021-3518 (#1957028)
- Fix CVE-2021-3537 (#1957284)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.7-11" date="1621425600">- Fix CVE-2021-3541 (#1958783)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.7-12" date="1645704000">- Fix CVE-2022-23308 (#2057663)</changelog>
</package>
<package pkgid="cee4e3739e44595c0da6ca4fc82d4b897f248dae837ce74e50498ab70f052f33" name="libxml2-debugsource" arch="i686">
  <version epoch="0" ver="2.9.7" rel="12.el8_5"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.9.7-3" date="1518004800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.9.7-4" date="1519473600">- Rebuild with new LDFLAGS from redhat-rpm-config</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.9.7-5" date="1533297600">- Fix some crashes under Python 3
- Conditionalize the python2 subpackage</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.7-6" date="1571918400">- Fix CVE-2018-9251 (#1565322)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.7-7" date="1571918401">- Fix CVE-2018-14404 (#1595989)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.7-8" date="1579521600">- Fix CVE-2019-19956 (#1793001)
- Fix CVE-2020-7595 (#1799786)
- Fix CVE-2019-20388 (#1810058)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.7-9" date="1603108800">- Fix CVE-2020-24977 (#1878252)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.7-10" date="1620388800">- Fix CVE-2021-3516 (#1956976)
- Fix CVE-2021-3517 (#1957001)
- Fix CVE-2021-3518 (#1957028)
- Fix CVE-2021-3537 (#1957284)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.7-11" date="1621425600">- Fix CVE-2021-3541 (#1958783)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.7-12" date="1645704000">- Fix CVE-2022-23308 (#2057663)</changelog>
</package>
<package pkgid="a6e9133cdc6a311da4ddafcc6511e7dd03df4a49cab6e25bb8b801b190e57667" name="libxml2-debugsource" arch="x86_64">
  <version epoch="0" ver="2.9.7" rel="12.el8_5"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.9.7-3" date="1518004800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.9.7-4" date="1519473600">- Rebuild with new LDFLAGS from redhat-rpm-config</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.9.7-5" date="1533297600">- Fix some crashes under Python 3
- Conditionalize the python2 subpackage</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.7-6" date="1571918400">- Fix CVE-2018-9251 (#1565322)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.7-7" date="1571918401">- Fix CVE-2018-14404 (#1595989)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.7-8" date="1579521600">- Fix CVE-2019-19956 (#1793001)
- Fix CVE-2020-7595 (#1799786)
- Fix CVE-2019-20388 (#1810058)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.7-9" date="1603108800">- Fix CVE-2020-24977 (#1878252)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.7-10" date="1620388800">- Fix CVE-2021-3516 (#1956976)
- Fix CVE-2021-3517 (#1957001)
- Fix CVE-2021-3518 (#1957028)
- Fix CVE-2021-3537 (#1957284)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.7-11" date="1621425600">- Fix CVE-2021-3541 (#1958783)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.7-12" date="1645704000">- Fix CVE-2022-23308 (#2057663)</changelog>
</package>
<package pkgid="534d79eaa9a4b748a5cd565bcb8160c5f784efb696537b1c619eae4ca5389886" name="lvm2-debuginfo" arch="i686">
  <version epoch="8" ver="2.03.12" rel="11.el8_5"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.12-2" date="1622548800">- Fix loading of VDO kernel module.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.12-3" date="1623758400">- Allow extending thin-pool data with writecache on top.
- Fix removing thin-pool data converted to writeache.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.12-4" date="1624363200">- Fix conversion of writecache LVs to thin pool data volume.
- Add deviceidtype option for lvmdevices.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.12-5" date="1626177600">- Fix device_id handling of scsi_debug WWID.
- Add vdoimport support.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.12-6" date="1627992000">- Fix handling of pmspare by vgsplit, vgmerge and vgremove.
- Fix detection of active components of external origin volume.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.12-7" date="1628683200">- Fix missing executable flag on vdoimport.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.12-8" date="1629979200">- Rename vdoimport to lvm_import_vdo.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.12-9" date="1631880000">- Fix various lvm_import_vdo issues.
- Fix conversion to vdo when virtual size is above 2TiB.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.12-10" date="1632139200">- Fix incorrect memory free.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.12-11" date="1645012800">- Fix multiple concurrent LV refreshes failures.</changelog>
</package>
<package pkgid="64ced7805a0ffdd93b1a7b5f4236a95f2e9c2f179d5179c48bf42b7b60811bc3" name="lvm2-debuginfo" arch="x86_64">
  <version epoch="8" ver="2.03.12" rel="11.el8_5"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.12-2" date="1622548800">- Fix loading of VDO kernel module.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.12-3" date="1623758400">- Allow extending thin-pool data with writecache on top.
- Fix removing thin-pool data converted to writeache.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.12-4" date="1624363200">- Fix conversion of writecache LVs to thin pool data volume.
- Add deviceidtype option for lvmdevices.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.12-5" date="1626177600">- Fix device_id handling of scsi_debug WWID.
- Add vdoimport support.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.12-6" date="1627992000">- Fix handling of pmspare by vgsplit, vgmerge and vgremove.
- Fix detection of active components of external origin volume.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.12-7" date="1628683200">- Fix missing executable flag on vdoimport.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.12-8" date="1629979200">- Rename vdoimport to lvm_import_vdo.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.12-9" date="1631880000">- Fix various lvm_import_vdo issues.
- Fix conversion to vdo when virtual size is above 2TiB.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.12-10" date="1632139200">- Fix incorrect memory free.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.12-11" date="1645012800">- Fix multiple concurrent LV refreshes failures.</changelog>
</package>
<package pkgid="a3673a9cf599c871781c5e47f39358c1fc220769911dba40110bd8e750b762da" name="lvm2-debugsource" arch="i686">
  <version epoch="8" ver="2.03.12" rel="11.el8_5"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.12-2" date="1622548800">- Fix loading of VDO kernel module.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.12-3" date="1623758400">- Allow extending thin-pool data with writecache on top.
- Fix removing thin-pool data converted to writeache.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.12-4" date="1624363200">- Fix conversion of writecache LVs to thin pool data volume.
- Add deviceidtype option for lvmdevices.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.12-5" date="1626177600">- Fix device_id handling of scsi_debug WWID.
- Add vdoimport support.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.12-6" date="1627992000">- Fix handling of pmspare by vgsplit, vgmerge and vgremove.
- Fix detection of active components of external origin volume.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.12-7" date="1628683200">- Fix missing executable flag on vdoimport.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.12-8" date="1629979200">- Rename vdoimport to lvm_import_vdo.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.12-9" date="1631880000">- Fix various lvm_import_vdo issues.
- Fix conversion to vdo when virtual size is above 2TiB.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.12-10" date="1632139200">- Fix incorrect memory free.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.12-11" date="1645012800">- Fix multiple concurrent LV refreshes failures.</changelog>
</package>
<package pkgid="ab7211876f77049d3bceb99310c8cc7681671c7b98be6d786886d7175982e54c" name="lvm2-debugsource" arch="x86_64">
  <version epoch="8" ver="2.03.12" rel="11.el8_5"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.12-2" date="1622548800">- Fix loading of VDO kernel module.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.12-3" date="1623758400">- Allow extending thin-pool data with writecache on top.
- Fix removing thin-pool data converted to writeache.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.12-4" date="1624363200">- Fix conversion of writecache LVs to thin pool data volume.
- Add deviceidtype option for lvmdevices.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.12-5" date="1626177600">- Fix device_id handling of scsi_debug WWID.
- Add vdoimport support.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.12-6" date="1627992000">- Fix handling of pmspare by vgsplit, vgmerge and vgremove.
- Fix detection of active components of external origin volume.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.12-7" date="1628683200">- Fix missing executable flag on vdoimport.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.12-8" date="1629979200">- Rename vdoimport to lvm_import_vdo.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.12-9" date="1631880000">- Fix various lvm_import_vdo issues.
- Fix conversion to vdo when virtual size is above 2TiB.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.12-10" date="1632139200">- Fix incorrect memory free.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.12-11" date="1645012800">- Fix multiple concurrent LV refreshes failures.</changelog>
</package>
<package pkgid="c31ec298e9d38bade75360374e9acd28da244721126d3e12acfa1ee45de5c276" name="lvm2-libs-debuginfo" arch="i686">
  <version epoch="8" ver="2.03.12" rel="11.el8_5"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.12-2" date="1622548800">- Fix loading of VDO kernel module.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.12-3" date="1623758400">- Allow extending thin-pool data with writecache on top.
- Fix removing thin-pool data converted to writeache.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.12-4" date="1624363200">- Fix conversion of writecache LVs to thin pool data volume.
- Add deviceidtype option for lvmdevices.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.12-5" date="1626177600">- Fix device_id handling of scsi_debug WWID.
- Add vdoimport support.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.12-6" date="1627992000">- Fix handling of pmspare by vgsplit, vgmerge and vgremove.
- Fix detection of active components of external origin volume.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.12-7" date="1628683200">- Fix missing executable flag on vdoimport.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.12-8" date="1629979200">- Rename vdoimport to lvm_import_vdo.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.12-9" date="1631880000">- Fix various lvm_import_vdo issues.
- Fix conversion to vdo when virtual size is above 2TiB.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.12-10" date="1632139200">- Fix incorrect memory free.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.12-11" date="1645012800">- Fix multiple concurrent LV refreshes failures.</changelog>
</package>
<package pkgid="736204c05bc3ada423dfa21dba4d3563658934d839801c49b8a444b073c416c3" name="lvm2-libs-debuginfo" arch="x86_64">
  <version epoch="8" ver="2.03.12" rel="11.el8_5"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.12-2" date="1622548800">- Fix loading of VDO kernel module.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.12-3" date="1623758400">- Allow extending thin-pool data with writecache on top.
- Fix removing thin-pool data converted to writeache.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.12-4" date="1624363200">- Fix conversion of writecache LVs to thin pool data volume.
- Add deviceidtype option for lvmdevices.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.12-5" date="1626177600">- Fix device_id handling of scsi_debug WWID.
- Add vdoimport support.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.12-6" date="1627992000">- Fix handling of pmspare by vgsplit, vgmerge and vgremove.
- Fix detection of active components of external origin volume.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.12-7" date="1628683200">- Fix missing executable flag on vdoimport.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.12-8" date="1629979200">- Rename vdoimport to lvm_import_vdo.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.12-9" date="1631880000">- Fix various lvm_import_vdo issues.
- Fix conversion to vdo when virtual size is above 2TiB.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.12-10" date="1632139200">- Fix incorrect memory free.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.12-11" date="1645012800">- Fix multiple concurrent LV refreshes failures.</changelog>
</package>
<package pkgid="7dfa213dbf571a6bc305414cac8ef60db29a3a589570ab841e04e23512f009d0" name="lvm2-lockd-debuginfo" arch="x86_64">
  <version epoch="8" ver="2.03.12" rel="11.el8_5"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.12-2" date="1622548800">- Fix loading of VDO kernel module.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.12-3" date="1623758400">- Allow extending thin-pool data with writecache on top.
- Fix removing thin-pool data converted to writeache.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.12-4" date="1624363200">- Fix conversion of writecache LVs to thin pool data volume.
- Add deviceidtype option for lvmdevices.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.12-5" date="1626177600">- Fix device_id handling of scsi_debug WWID.
- Add vdoimport support.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.12-6" date="1627992000">- Fix handling of pmspare by vgsplit, vgmerge and vgremove.
- Fix detection of active components of external origin volume.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.12-7" date="1628683200">- Fix missing executable flag on vdoimport.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.12-8" date="1629979200">- Rename vdoimport to lvm_import_vdo.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.12-9" date="1631880000">- Fix various lvm_import_vdo issues.
- Fix conversion to vdo when virtual size is above 2TiB.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.12-10" date="1632139200">- Fix incorrect memory free.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.12-11" date="1645012800">- Fix multiple concurrent LV refreshes failures.</changelog>
</package>
<package pkgid="f56b17be78416b203c27541047eb71c59b2510880bd4eff42a7ccdc1a0a87b50" name="opencryptoki-debuginfo" arch="i686">
  <version epoch="0" ver="3.16.0" rel="7.el8_5"/>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.15.1-3" date="1606392000">- Resolves: #1902022
   Fix compiling with c++
   Added error message handling for p11sak remove-key command</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.15.1-4" date="1613131200">- Resolves: #1927745, pkcscca migration fails with usr/sb2 is not a valid slot ID</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.15.1-5" date="1613131201">- Resolves: #1928120, Fix problem with C_Get/SetOperationState and digest contexts</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.16.0-1" date="1622548800">- Resolves: #1919223, rebase to 3.16.0
- Resolves: #1922195, Event Notification Support
- Resolves: #1959936, Soft token does not check if an EC key is valid
- Resolves: #1851104, import and export of secure key objects
- Resolves: #1851106, openCryptoki ep11 token: protected key support
- Resolves: #1851107, openCryptoki ep11 token: support attribute bound keys</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.16.0-2" date="1623412800">- Related: #1919223, add requirement on selinux-policy &gt;= 3.14.3-70 for using ipsec</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.16.0-3" date="1623758400">- Related: #1919223, add conditional requirement</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.16.0-4" date="1626436800">- Resolves: #1964304, Fix detection if pkcsslotd is still running</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.16.0-5" date="1629374400">- Resolves: #1987256, pkcstok_migrate leaves options with multiple strings in opencryptoki.conf options without double-quotes</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.16.0-6" date="1631534400">- Fix: Could not open /run/lock/opencryptoki/LCK..APIlock</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.16.0-7" date="1634558400">- Rebuilt</changelog>
</package>
<package pkgid="15ff9db991ff920c8bcc270ecddd778151e1e325b75c5b0745a328691e252e7a" name="opencryptoki-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.16.0" rel="7.el8_5"/>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.15.1-3" date="1606392000">- Resolves: #1902022
   Fix compiling with c++
   Added error message handling for p11sak remove-key command</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.15.1-4" date="1613131200">- Resolves: #1927745, pkcscca migration fails with usr/sb2 is not a valid slot ID</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.15.1-5" date="1613131201">- Resolves: #1928120, Fix problem with C_Get/SetOperationState and digest contexts</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.16.0-1" date="1622548800">- Resolves: #1919223, rebase to 3.16.0
- Resolves: #1922195, Event Notification Support
- Resolves: #1959936, Soft token does not check if an EC key is valid
- Resolves: #1851104, import and export of secure key objects
- Resolves: #1851106, openCryptoki ep11 token: protected key support
- Resolves: #1851107, openCryptoki ep11 token: support attribute bound keys</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.16.0-2" date="1623412800">- Related: #1919223, add requirement on selinux-policy &gt;= 3.14.3-70 for using ipsec</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.16.0-3" date="1623758400">- Related: #1919223, add conditional requirement</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.16.0-4" date="1626436800">- Resolves: #1964304, Fix detection if pkcsslotd is still running</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.16.0-5" date="1629374400">- Resolves: #1987256, pkcstok_migrate leaves options with multiple strings in opencryptoki.conf options without double-quotes</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.16.0-6" date="1631534400">- Fix: Could not open /run/lock/opencryptoki/LCK..APIlock</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.16.0-7" date="1634558400">- Rebuilt</changelog>
</package>
<package pkgid="b5ea0ad4208f2b778bb20e02a1bb2d3c7fbf4208500b48f8f9fdd618efdb4a0d" name="opencryptoki-debugsource" arch="i686">
  <version epoch="0" ver="3.16.0" rel="7.el8_5"/>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.15.1-3" date="1606392000">- Resolves: #1902022
   Fix compiling with c++
   Added error message handling for p11sak remove-key command</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.15.1-4" date="1613131200">- Resolves: #1927745, pkcscca migration fails with usr/sb2 is not a valid slot ID</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.15.1-5" date="1613131201">- Resolves: #1928120, Fix problem with C_Get/SetOperationState and digest contexts</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.16.0-1" date="1622548800">- Resolves: #1919223, rebase to 3.16.0
- Resolves: #1922195, Event Notification Support
- Resolves: #1959936, Soft token does not check if an EC key is valid
- Resolves: #1851104, import and export of secure key objects
- Resolves: #1851106, openCryptoki ep11 token: protected key support
- Resolves: #1851107, openCryptoki ep11 token: support attribute bound keys</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.16.0-2" date="1623412800">- Related: #1919223, add requirement on selinux-policy &gt;= 3.14.3-70 for using ipsec</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.16.0-3" date="1623758400">- Related: #1919223, add conditional requirement</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.16.0-4" date="1626436800">- Resolves: #1964304, Fix detection if pkcsslotd is still running</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.16.0-5" date="1629374400">- Resolves: #1987256, pkcstok_migrate leaves options with multiple strings in opencryptoki.conf options without double-quotes</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.16.0-6" date="1631534400">- Fix: Could not open /run/lock/opencryptoki/LCK..APIlock</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.16.0-7" date="1634558400">- Rebuilt</changelog>
</package>
<package pkgid="4228b6aac190ac08af30f87a07a98ddaa005067b130c6a5a819a12be9ac580c6" name="opencryptoki-debugsource" arch="x86_64">
  <version epoch="0" ver="3.16.0" rel="7.el8_5"/>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.15.1-3" date="1606392000">- Resolves: #1902022
   Fix compiling with c++
   Added error message handling for p11sak remove-key command</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.15.1-4" date="1613131200">- Resolves: #1927745, pkcscca migration fails with usr/sb2 is not a valid slot ID</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.15.1-5" date="1613131201">- Resolves: #1928120, Fix problem with C_Get/SetOperationState and digest contexts</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.16.0-1" date="1622548800">- Resolves: #1919223, rebase to 3.16.0
- Resolves: #1922195, Event Notification Support
- Resolves: #1959936, Soft token does not check if an EC key is valid
- Resolves: #1851104, import and export of secure key objects
- Resolves: #1851106, openCryptoki ep11 token: protected key support
- Resolves: #1851107, openCryptoki ep11 token: support attribute bound keys</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.16.0-2" date="1623412800">- Related: #1919223, add requirement on selinux-policy &gt;= 3.14.3-70 for using ipsec</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.16.0-3" date="1623758400">- Related: #1919223, add conditional requirement</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.16.0-4" date="1626436800">- Resolves: #1964304, Fix detection if pkcsslotd is still running</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.16.0-5" date="1629374400">- Resolves: #1987256, pkcstok_migrate leaves options with multiple strings in opencryptoki.conf options without double-quotes</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.16.0-6" date="1631534400">- Fix: Could not open /run/lock/opencryptoki/LCK..APIlock</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.16.0-7" date="1634558400">- Rebuilt</changelog>
</package>
<package pkgid="8aae5870b085989cd6f0888b16d045f1e47de522d0e352efbfa60a20d24faede" name="opencryptoki-icsftok-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.16.0" rel="7.el8_5"/>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.15.1-3" date="1606392000">- Resolves: #1902022
   Fix compiling with c++
   Added error message handling for p11sak remove-key command</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.15.1-4" date="1613131200">- Resolves: #1927745, pkcscca migration fails with usr/sb2 is not a valid slot ID</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.15.1-5" date="1613131201">- Resolves: #1928120, Fix problem with C_Get/SetOperationState and digest contexts</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.16.0-1" date="1622548800">- Resolves: #1919223, rebase to 3.16.0
- Resolves: #1922195, Event Notification Support
- Resolves: #1959936, Soft token does not check if an EC key is valid
- Resolves: #1851104, import and export of secure key objects
- Resolves: #1851106, openCryptoki ep11 token: protected key support
- Resolves: #1851107, openCryptoki ep11 token: support attribute bound keys</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.16.0-2" date="1623412800">- Related: #1919223, add requirement on selinux-policy &gt;= 3.14.3-70 for using ipsec</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.16.0-3" date="1623758400">- Related: #1919223, add conditional requirement</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.16.0-4" date="1626436800">- Resolves: #1964304, Fix detection if pkcsslotd is still running</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.16.0-5" date="1629374400">- Resolves: #1987256, pkcstok_migrate leaves options with multiple strings in opencryptoki.conf options without double-quotes</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.16.0-6" date="1631534400">- Fix: Could not open /run/lock/opencryptoki/LCK..APIlock</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.16.0-7" date="1634558400">- Rebuilt</changelog>
</package>
<package pkgid="13f83ee27c290aaf75a93a07bea4372c2e563a27fa40b955c007fe7e5e8d12df" name="opencryptoki-libs-debuginfo" arch="i686">
  <version epoch="0" ver="3.16.0" rel="7.el8_5"/>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.15.1-3" date="1606392000">- Resolves: #1902022
   Fix compiling with c++
   Added error message handling for p11sak remove-key command</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.15.1-4" date="1613131200">- Resolves: #1927745, pkcscca migration fails with usr/sb2 is not a valid slot ID</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.15.1-5" date="1613131201">- Resolves: #1928120, Fix problem with C_Get/SetOperationState and digest contexts</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.16.0-1" date="1622548800">- Resolves: #1919223, rebase to 3.16.0
- Resolves: #1922195, Event Notification Support
- Resolves: #1959936, Soft token does not check if an EC key is valid
- Resolves: #1851104, import and export of secure key objects
- Resolves: #1851106, openCryptoki ep11 token: protected key support
- Resolves: #1851107, openCryptoki ep11 token: support attribute bound keys</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.16.0-2" date="1623412800">- Related: #1919223, add requirement on selinux-policy &gt;= 3.14.3-70 for using ipsec</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.16.0-3" date="1623758400">- Related: #1919223, add conditional requirement</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.16.0-4" date="1626436800">- Resolves: #1964304, Fix detection if pkcsslotd is still running</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.16.0-5" date="1629374400">- Resolves: #1987256, pkcstok_migrate leaves options with multiple strings in opencryptoki.conf options without double-quotes</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.16.0-6" date="1631534400">- Fix: Could not open /run/lock/opencryptoki/LCK..APIlock</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.16.0-7" date="1634558400">- Rebuilt</changelog>
</package>
<package pkgid="935b3c69ce538d1691bfdd9aacccabdb38bac2f20dbb5e568235f13e67795e3d" name="opencryptoki-libs-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.16.0" rel="7.el8_5"/>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.15.1-3" date="1606392000">- Resolves: #1902022
   Fix compiling with c++
   Added error message handling for p11sak remove-key command</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.15.1-4" date="1613131200">- Resolves: #1927745, pkcscca migration fails with usr/sb2 is not a valid slot ID</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.15.1-5" date="1613131201">- Resolves: #1928120, Fix problem with C_Get/SetOperationState and digest contexts</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.16.0-1" date="1622548800">- Resolves: #1919223, rebase to 3.16.0
- Resolves: #1922195, Event Notification Support
- Resolves: #1959936, Soft token does not check if an EC key is valid
- Resolves: #1851104, import and export of secure key objects
- Resolves: #1851106, openCryptoki ep11 token: protected key support
- Resolves: #1851107, openCryptoki ep11 token: support attribute bound keys</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.16.0-2" date="1623412800">- Related: #1919223, add requirement on selinux-policy &gt;= 3.14.3-70 for using ipsec</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.16.0-3" date="1623758400">- Related: #1919223, add conditional requirement</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.16.0-4" date="1626436800">- Resolves: #1964304, Fix detection if pkcsslotd is still running</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.16.0-5" date="1629374400">- Resolves: #1987256, pkcstok_migrate leaves options with multiple strings in opencryptoki.conf options without double-quotes</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.16.0-6" date="1631534400">- Fix: Could not open /run/lock/opencryptoki/LCK..APIlock</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.16.0-7" date="1634558400">- Rebuilt</changelog>
</package>
<package pkgid="31278b6633d666c4b1df698dc2fc3b970d487b87f577707364d29f695a9f7877" name="opencryptoki-swtok-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.16.0" rel="7.el8_5"/>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.15.1-3" date="1606392000">- Resolves: #1902022
   Fix compiling with c++
   Added error message handling for p11sak remove-key command</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.15.1-4" date="1613131200">- Resolves: #1927745, pkcscca migration fails with usr/sb2 is not a valid slot ID</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.15.1-5" date="1613131201">- Resolves: #1928120, Fix problem with C_Get/SetOperationState and digest contexts</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.16.0-1" date="1622548800">- Resolves: #1919223, rebase to 3.16.0
- Resolves: #1922195, Event Notification Support
- Resolves: #1959936, Soft token does not check if an EC key is valid
- Resolves: #1851104, import and export of secure key objects
- Resolves: #1851106, openCryptoki ep11 token: protected key support
- Resolves: #1851107, openCryptoki ep11 token: support attribute bound keys</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.16.0-2" date="1623412800">- Related: #1919223, add requirement on selinux-policy &gt;= 3.14.3-70 for using ipsec</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.16.0-3" date="1623758400">- Related: #1919223, add conditional requirement</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.16.0-4" date="1626436800">- Resolves: #1964304, Fix detection if pkcsslotd is still running</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.16.0-5" date="1629374400">- Resolves: #1987256, pkcstok_migrate leaves options with multiple strings in opencryptoki.conf options without double-quotes</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.16.0-6" date="1631534400">- Fix: Could not open /run/lock/opencryptoki/LCK..APIlock</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.16.0-7" date="1634558400">- Rebuilt</changelog>
</package>
<package pkgid="b520e9124cd6427f5e456e0b0ae9f388b806239ee7f4b9c51a79ac95f051e944" name="opencryptoki-tpmtok-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.16.0" rel="7.el8_5"/>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.15.1-3" date="1606392000">- Resolves: #1902022
   Fix compiling with c++
   Added error message handling for p11sak remove-key command</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.15.1-4" date="1613131200">- Resolves: #1927745, pkcscca migration fails with usr/sb2 is not a valid slot ID</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.15.1-5" date="1613131201">- Resolves: #1928120, Fix problem with C_Get/SetOperationState and digest contexts</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.16.0-1" date="1622548800">- Resolves: #1919223, rebase to 3.16.0
- Resolves: #1922195, Event Notification Support
- Resolves: #1959936, Soft token does not check if an EC key is valid
- Resolves: #1851104, import and export of secure key objects
- Resolves: #1851106, openCryptoki ep11 token: protected key support
- Resolves: #1851107, openCryptoki ep11 token: support attribute bound keys</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.16.0-2" date="1623412800">- Related: #1919223, add requirement on selinux-policy &gt;= 3.14.3-70 for using ipsec</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.16.0-3" date="1623758400">- Related: #1919223, add conditional requirement</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.16.0-4" date="1626436800">- Resolves: #1964304, Fix detection if pkcsslotd is still running</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.16.0-5" date="1629374400">- Resolves: #1987256, pkcstok_migrate leaves options with multiple strings in opencryptoki.conf options without double-quotes</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.16.0-6" date="1631534400">- Fix: Could not open /run/lock/opencryptoki/LCK..APIlock</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.16.0-7" date="1634558400">- Rebuilt</changelog>
</package>
<package pkgid="a6b4d0abf70a47731a3913073367c5a5a49e59940d7df822e46ed1e5509f5c91" name="openssl-debuginfo" arch="i686">
  <version epoch="1" ver="1.1.1k" rel="5.el8_5"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.1.1g-12" date="1603454400">- Implemented new FIPS requirements in regards to KDF and DH selftests
- Disallow certificates with explicit EC parameters</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.1.1g-13" date="1607083200">- Fix CVE-2020-1971 ediparty null pointer dereference</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.1.1g-14" date="1617019200">- Fix CVE-2021-3450 openssl: CA certificate check bypass with
  X509_V_FLAG_X509_STRICT
- Fix CVE-2021-3449 NULL pointer deref in signature_algorithms processing</changelog>
  <changelog author="Dmitry Belyavski &lt;dbelyavs@redhat.com&gt; 1.1.1g-15" date="1618574400">- Remove 2-key 3DES test from FIPS_selftest</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; 1.1.1g-16" date="1619438400">- Use AI_ADDRCONFIG only when explicit host name is given
- Allow only curves defined in RFC 8446 in TLS 1.3</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.1.1k-1" date="1621857600">- Update to version 1.1.1k</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:1.1.1k-2" date="1624449600">- Fixes FIPS_selftest to work in FIPS mode. Resolves: rhbz#1940085
- Using safe primes for FIPS DH self-test</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; - 1:1.1.1k-3" date="1624536000">- Cleansup the peer point formats on renegotiation
- Resolves rhbz#1965362</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; - 1:1.1.1k-4" date="1626436800">- Fixes bugs in s390x AES code.
- Uses the first detected address family if IPv6 is not available
- Reverts the changes in https://github.com/openssl/openssl/pull/13305
  as it introduces a regression if server has a DSA key pair, the handshake fails
  when the protocol is not explicitly set to TLS 1.2. However, if the patch is reverted,
  it has an effect on the "ssl_reject_handshake" feature in nginx. Although, this feature
  will continue to work, TLS 1.3 protocol becomes unavailable/disabled. This is already
  known - https://trac.nginx.org/nginx/ticket/2071#comment:1
  As per https://github.com/openssl/openssl/issues/16075#issuecomment-879939938, nginx
  could early callback instead of servername callback.
- Resolves: rhbz#1978214
- Related: rhbz#1934534</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; - 1:1.1.1k-5" date="1636718400">- CVE-2021-3712 openssl: Read buffer overruns processing ASN.1 strings
- Resolves: rhbz#2005400</changelog>
</package>
<package pkgid="7be1d326962a320fa29bd5a304216fa22de5bb75295c0983b2a8fb4b70803a78" name="openssl-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.1.1k" rel="5.el8_5"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.1.1g-12" date="1603454400">- Implemented new FIPS requirements in regards to KDF and DH selftests
- Disallow certificates with explicit EC parameters</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.1.1g-13" date="1607083200">- Fix CVE-2020-1971 ediparty null pointer dereference</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.1.1g-14" date="1617019200">- Fix CVE-2021-3450 openssl: CA certificate check bypass with
  X509_V_FLAG_X509_STRICT
- Fix CVE-2021-3449 NULL pointer deref in signature_algorithms processing</changelog>
  <changelog author="Dmitry Belyavski &lt;dbelyavs@redhat.com&gt; 1.1.1g-15" date="1618574400">- Remove 2-key 3DES test from FIPS_selftest</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; 1.1.1g-16" date="1619438400">- Use AI_ADDRCONFIG only when explicit host name is given
- Allow only curves defined in RFC 8446 in TLS 1.3</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.1.1k-1" date="1621857600">- Update to version 1.1.1k</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:1.1.1k-2" date="1624449600">- Fixes FIPS_selftest to work in FIPS mode. Resolves: rhbz#1940085
- Using safe primes for FIPS DH self-test</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; - 1:1.1.1k-3" date="1624536000">- Cleansup the peer point formats on renegotiation
- Resolves rhbz#1965362</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; - 1:1.1.1k-4" date="1626436800">- Fixes bugs in s390x AES code.
- Uses the first detected address family if IPv6 is not available
- Reverts the changes in https://github.com/openssl/openssl/pull/13305
  as it introduces a regression if server has a DSA key pair, the handshake fails
  when the protocol is not explicitly set to TLS 1.2. However, if the patch is reverted,
  it has an effect on the "ssl_reject_handshake" feature in nginx. Although, this feature
  will continue to work, TLS 1.3 protocol becomes unavailable/disabled. This is already
  known - https://trac.nginx.org/nginx/ticket/2071#comment:1
  As per https://github.com/openssl/openssl/issues/16075#issuecomment-879939938, nginx
  could early callback instead of servername callback.
- Resolves: rhbz#1978214
- Related: rhbz#1934534</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; - 1:1.1.1k-5" date="1636718400">- CVE-2021-3712 openssl: Read buffer overruns processing ASN.1 strings
- Resolves: rhbz#2005400</changelog>
</package>
<package pkgid="c78f3775ea31527d021ce85e236dc675b59a59cb12f65c06c44ea192e30f6ee5" name="openssl-debuginfo" arch="i686">
  <version epoch="1" ver="1.1.1k" rel="6.el8_5"/>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.1.1g-13" date="1607083200">- Fix CVE-2020-1971 ediparty null pointer dereference</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.1.1g-14" date="1617019200">- Fix CVE-2021-3450 openssl: CA certificate check bypass with
  X509_V_FLAG_X509_STRICT
- Fix CVE-2021-3449 NULL pointer deref in signature_algorithms processing</changelog>
  <changelog author="Dmitry Belyavski &lt;dbelyavs@redhat.com&gt; 1.1.1g-15" date="1618574400">- Remove 2-key 3DES test from FIPS_selftest</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; 1.1.1g-16" date="1619438400">- Use AI_ADDRCONFIG only when explicit host name is given
- Allow only curves defined in RFC 8446 in TLS 1.3</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.1.1k-1" date="1621857600">- Update to version 1.1.1k</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:1.1.1k-2" date="1624449600">- Fixes FIPS_selftest to work in FIPS mode. Resolves: rhbz#1940085
- Using safe primes for FIPS DH self-test</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; - 1:1.1.1k-3" date="1624536000">- Cleansup the peer point formats on renegotiation
- Resolves rhbz#1965362</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; - 1:1.1.1k-4" date="1626436800">- Fixes bugs in s390x AES code.
- Uses the first detected address family if IPv6 is not available
- Reverts the changes in https://github.com/openssl/openssl/pull/13305
  as it introduces a regression if server has a DSA key pair, the handshake fails
  when the protocol is not explicitly set to TLS 1.2. However, if the patch is reverted,
  it has an effect on the "ssl_reject_handshake" feature in nginx. Although, this feature
  will continue to work, TLS 1.3 protocol becomes unavailable/disabled. This is already
  known - https://trac.nginx.org/nginx/ticket/2071#comment:1
  As per https://github.com/openssl/openssl/issues/16075#issuecomment-879939938, nginx
  could early callback instead of servername callback.
- Resolves: rhbz#1978214
- Related: rhbz#1934534</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; - 1:1.1.1k-5" date="1636718400">- CVE-2021-3712 openssl: Read buffer overruns processing ASN.1 strings
- Resolves: rhbz#2005400</changelog>
  <changelog author="Clemens Lang &lt;cllang@redhat.com&gt; - 1:1.1.1k-6" date="1648036800">- Fixes CVE-2022-0778 openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates
- Resolves: rhbz#2067144</changelog>
</package>
<package pkgid="9534f56e408077c82cf739cb044383e62f3567234310d7640bac275d3b5f67a7" name="openssl-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.1.1k" rel="6.el8_5"/>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.1.1g-13" date="1607083200">- Fix CVE-2020-1971 ediparty null pointer dereference</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.1.1g-14" date="1617019200">- Fix CVE-2021-3450 openssl: CA certificate check bypass with
  X509_V_FLAG_X509_STRICT
- Fix CVE-2021-3449 NULL pointer deref in signature_algorithms processing</changelog>
  <changelog author="Dmitry Belyavski &lt;dbelyavs@redhat.com&gt; 1.1.1g-15" date="1618574400">- Remove 2-key 3DES test from FIPS_selftest</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; 1.1.1g-16" date="1619438400">- Use AI_ADDRCONFIG only when explicit host name is given
- Allow only curves defined in RFC 8446 in TLS 1.3</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.1.1k-1" date="1621857600">- Update to version 1.1.1k</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:1.1.1k-2" date="1624449600">- Fixes FIPS_selftest to work in FIPS mode. Resolves: rhbz#1940085
- Using safe primes for FIPS DH self-test</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; - 1:1.1.1k-3" date="1624536000">- Cleansup the peer point formats on renegotiation
- Resolves rhbz#1965362</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; - 1:1.1.1k-4" date="1626436800">- Fixes bugs in s390x AES code.
- Uses the first detected address family if IPv6 is not available
- Reverts the changes in https://github.com/openssl/openssl/pull/13305
  as it introduces a regression if server has a DSA key pair, the handshake fails
  when the protocol is not explicitly set to TLS 1.2. However, if the patch is reverted,
  it has an effect on the "ssl_reject_handshake" feature in nginx. Although, this feature
  will continue to work, TLS 1.3 protocol becomes unavailable/disabled. This is already
  known - https://trac.nginx.org/nginx/ticket/2071#comment:1
  As per https://github.com/openssl/openssl/issues/16075#issuecomment-879939938, nginx
  could early callback instead of servername callback.
- Resolves: rhbz#1978214
- Related: rhbz#1934534</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; - 1:1.1.1k-5" date="1636718400">- CVE-2021-3712 openssl: Read buffer overruns processing ASN.1 strings
- Resolves: rhbz#2005400</changelog>
  <changelog author="Clemens Lang &lt;cllang@redhat.com&gt; - 1:1.1.1k-6" date="1648036800">- Fixes CVE-2022-0778 openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates
- Resolves: rhbz#2067144</changelog>
</package>
<package pkgid="f01b0c18c5c0d8bd4294b054921f6685f37617194364e1bf000be6a80eda8d8c" name="openssl-debugsource" arch="i686">
  <version epoch="1" ver="1.1.1k" rel="5.el8_5"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.1.1g-12" date="1603454400">- Implemented new FIPS requirements in regards to KDF and DH selftests
- Disallow certificates with explicit EC parameters</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.1.1g-13" date="1607083200">- Fix CVE-2020-1971 ediparty null pointer dereference</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.1.1g-14" date="1617019200">- Fix CVE-2021-3450 openssl: CA certificate check bypass with
  X509_V_FLAG_X509_STRICT
- Fix CVE-2021-3449 NULL pointer deref in signature_algorithms processing</changelog>
  <changelog author="Dmitry Belyavski &lt;dbelyavs@redhat.com&gt; 1.1.1g-15" date="1618574400">- Remove 2-key 3DES test from FIPS_selftest</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; 1.1.1g-16" date="1619438400">- Use AI_ADDRCONFIG only when explicit host name is given
- Allow only curves defined in RFC 8446 in TLS 1.3</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.1.1k-1" date="1621857600">- Update to version 1.1.1k</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:1.1.1k-2" date="1624449600">- Fixes FIPS_selftest to work in FIPS mode. Resolves: rhbz#1940085
- Using safe primes for FIPS DH self-test</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; - 1:1.1.1k-3" date="1624536000">- Cleansup the peer point formats on renegotiation
- Resolves rhbz#1965362</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; - 1:1.1.1k-4" date="1626436800">- Fixes bugs in s390x AES code.
- Uses the first detected address family if IPv6 is not available
- Reverts the changes in https://github.com/openssl/openssl/pull/13305
  as it introduces a regression if server has a DSA key pair, the handshake fails
  when the protocol is not explicitly set to TLS 1.2. However, if the patch is reverted,
  it has an effect on the "ssl_reject_handshake" feature in nginx. Although, this feature
  will continue to work, TLS 1.3 protocol becomes unavailable/disabled. This is already
  known - https://trac.nginx.org/nginx/ticket/2071#comment:1
  As per https://github.com/openssl/openssl/issues/16075#issuecomment-879939938, nginx
  could early callback instead of servername callback.
- Resolves: rhbz#1978214
- Related: rhbz#1934534</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; - 1:1.1.1k-5" date="1636718400">- CVE-2021-3712 openssl: Read buffer overruns processing ASN.1 strings
- Resolves: rhbz#2005400</changelog>
</package>
<package pkgid="3b5aa4ccd942cce20cbb3e36596c90d168f888e3ab14621efef95ddfe4bf7cb3" name="openssl-debugsource" arch="x86_64">
  <version epoch="1" ver="1.1.1k" rel="5.el8_5"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.1.1g-12" date="1603454400">- Implemented new FIPS requirements in regards to KDF and DH selftests
- Disallow certificates with explicit EC parameters</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.1.1g-13" date="1607083200">- Fix CVE-2020-1971 ediparty null pointer dereference</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.1.1g-14" date="1617019200">- Fix CVE-2021-3450 openssl: CA certificate check bypass with
  X509_V_FLAG_X509_STRICT
- Fix CVE-2021-3449 NULL pointer deref in signature_algorithms processing</changelog>
  <changelog author="Dmitry Belyavski &lt;dbelyavs@redhat.com&gt; 1.1.1g-15" date="1618574400">- Remove 2-key 3DES test from FIPS_selftest</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; 1.1.1g-16" date="1619438400">- Use AI_ADDRCONFIG only when explicit host name is given
- Allow only curves defined in RFC 8446 in TLS 1.3</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.1.1k-1" date="1621857600">- Update to version 1.1.1k</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:1.1.1k-2" date="1624449600">- Fixes FIPS_selftest to work in FIPS mode. Resolves: rhbz#1940085
- Using safe primes for FIPS DH self-test</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; - 1:1.1.1k-3" date="1624536000">- Cleansup the peer point formats on renegotiation
- Resolves rhbz#1965362</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; - 1:1.1.1k-4" date="1626436800">- Fixes bugs in s390x AES code.
- Uses the first detected address family if IPv6 is not available
- Reverts the changes in https://github.com/openssl/openssl/pull/13305
  as it introduces a regression if server has a DSA key pair, the handshake fails
  when the protocol is not explicitly set to TLS 1.2. However, if the patch is reverted,
  it has an effect on the "ssl_reject_handshake" feature in nginx. Although, this feature
  will continue to work, TLS 1.3 protocol becomes unavailable/disabled. This is already
  known - https://trac.nginx.org/nginx/ticket/2071#comment:1
  As per https://github.com/openssl/openssl/issues/16075#issuecomment-879939938, nginx
  could early callback instead of servername callback.
- Resolves: rhbz#1978214
- Related: rhbz#1934534</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; - 1:1.1.1k-5" date="1636718400">- CVE-2021-3712 openssl: Read buffer overruns processing ASN.1 strings
- Resolves: rhbz#2005400</changelog>
</package>
<package pkgid="f032ba9ad8fe9d850802e8ec98894e829320ffdc9f11d699324972c798f9e2bd" name="openssl-debugsource" arch="i686">
  <version epoch="1" ver="1.1.1k" rel="6.el8_5"/>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.1.1g-13" date="1607083200">- Fix CVE-2020-1971 ediparty null pointer dereference</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.1.1g-14" date="1617019200">- Fix CVE-2021-3450 openssl: CA certificate check bypass with
  X509_V_FLAG_X509_STRICT
- Fix CVE-2021-3449 NULL pointer deref in signature_algorithms processing</changelog>
  <changelog author="Dmitry Belyavski &lt;dbelyavs@redhat.com&gt; 1.1.1g-15" date="1618574400">- Remove 2-key 3DES test from FIPS_selftest</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; 1.1.1g-16" date="1619438400">- Use AI_ADDRCONFIG only when explicit host name is given
- Allow only curves defined in RFC 8446 in TLS 1.3</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.1.1k-1" date="1621857600">- Update to version 1.1.1k</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:1.1.1k-2" date="1624449600">- Fixes FIPS_selftest to work in FIPS mode. Resolves: rhbz#1940085
- Using safe primes for FIPS DH self-test</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; - 1:1.1.1k-3" date="1624536000">- Cleansup the peer point formats on renegotiation
- Resolves rhbz#1965362</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; - 1:1.1.1k-4" date="1626436800">- Fixes bugs in s390x AES code.
- Uses the first detected address family if IPv6 is not available
- Reverts the changes in https://github.com/openssl/openssl/pull/13305
  as it introduces a regression if server has a DSA key pair, the handshake fails
  when the protocol is not explicitly set to TLS 1.2. However, if the patch is reverted,
  it has an effect on the "ssl_reject_handshake" feature in nginx. Although, this feature
  will continue to work, TLS 1.3 protocol becomes unavailable/disabled. This is already
  known - https://trac.nginx.org/nginx/ticket/2071#comment:1
  As per https://github.com/openssl/openssl/issues/16075#issuecomment-879939938, nginx
  could early callback instead of servername callback.
- Resolves: rhbz#1978214
- Related: rhbz#1934534</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; - 1:1.1.1k-5" date="1636718400">- CVE-2021-3712 openssl: Read buffer overruns processing ASN.1 strings
- Resolves: rhbz#2005400</changelog>
  <changelog author="Clemens Lang &lt;cllang@redhat.com&gt; - 1:1.1.1k-6" date="1648036800">- Fixes CVE-2022-0778 openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates
- Resolves: rhbz#2067144</changelog>
</package>
<package pkgid="c00708bf0e40825266f805f6b94391d91d0a849937957d2bc1ee02ecc7c43b3b" name="openssl-debugsource" arch="x86_64">
  <version epoch="1" ver="1.1.1k" rel="6.el8_5"/>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.1.1g-13" date="1607083200">- Fix CVE-2020-1971 ediparty null pointer dereference</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.1.1g-14" date="1617019200">- Fix CVE-2021-3450 openssl: CA certificate check bypass with
  X509_V_FLAG_X509_STRICT
- Fix CVE-2021-3449 NULL pointer deref in signature_algorithms processing</changelog>
  <changelog author="Dmitry Belyavski &lt;dbelyavs@redhat.com&gt; 1.1.1g-15" date="1618574400">- Remove 2-key 3DES test from FIPS_selftest</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; 1.1.1g-16" date="1619438400">- Use AI_ADDRCONFIG only when explicit host name is given
- Allow only curves defined in RFC 8446 in TLS 1.3</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.1.1k-1" date="1621857600">- Update to version 1.1.1k</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:1.1.1k-2" date="1624449600">- Fixes FIPS_selftest to work in FIPS mode. Resolves: rhbz#1940085
- Using safe primes for FIPS DH self-test</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; - 1:1.1.1k-3" date="1624536000">- Cleansup the peer point formats on renegotiation
- Resolves rhbz#1965362</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; - 1:1.1.1k-4" date="1626436800">- Fixes bugs in s390x AES code.
- Uses the first detected address family if IPv6 is not available
- Reverts the changes in https://github.com/openssl/openssl/pull/13305
  as it introduces a regression if server has a DSA key pair, the handshake fails
  when the protocol is not explicitly set to TLS 1.2. However, if the patch is reverted,
  it has an effect on the "ssl_reject_handshake" feature in nginx. Although, this feature
  will continue to work, TLS 1.3 protocol becomes unavailable/disabled. This is already
  known - https://trac.nginx.org/nginx/ticket/2071#comment:1
  As per https://github.com/openssl/openssl/issues/16075#issuecomment-879939938, nginx
  could early callback instead of servername callback.
- Resolves: rhbz#1978214
- Related: rhbz#1934534</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; - 1:1.1.1k-5" date="1636718400">- CVE-2021-3712 openssl: Read buffer overruns processing ASN.1 strings
- Resolves: rhbz#2005400</changelog>
  <changelog author="Clemens Lang &lt;cllang@redhat.com&gt; - 1:1.1.1k-6" date="1648036800">- Fixes CVE-2022-0778 openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates
- Resolves: rhbz#2067144</changelog>
</package>
<package pkgid="7c973cbb6c34dd5af82dd2d211f5fcfae673b7cd622afbef5fde5fcddc38d30e" name="openssl-libs-debuginfo" arch="i686">
  <version epoch="1" ver="1.1.1k" rel="5.el8_5"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.1.1g-12" date="1603454400">- Implemented new FIPS requirements in regards to KDF and DH selftests
- Disallow certificates with explicit EC parameters</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.1.1g-13" date="1607083200">- Fix CVE-2020-1971 ediparty null pointer dereference</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.1.1g-14" date="1617019200">- Fix CVE-2021-3450 openssl: CA certificate check bypass with
  X509_V_FLAG_X509_STRICT
- Fix CVE-2021-3449 NULL pointer deref in signature_algorithms processing</changelog>
  <changelog author="Dmitry Belyavski &lt;dbelyavs@redhat.com&gt; 1.1.1g-15" date="1618574400">- Remove 2-key 3DES test from FIPS_selftest</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; 1.1.1g-16" date="1619438400">- Use AI_ADDRCONFIG only when explicit host name is given
- Allow only curves defined in RFC 8446 in TLS 1.3</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.1.1k-1" date="1621857600">- Update to version 1.1.1k</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:1.1.1k-2" date="1624449600">- Fixes FIPS_selftest to work in FIPS mode. Resolves: rhbz#1940085
- Using safe primes for FIPS DH self-test</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; - 1:1.1.1k-3" date="1624536000">- Cleansup the peer point formats on renegotiation
- Resolves rhbz#1965362</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; - 1:1.1.1k-4" date="1626436800">- Fixes bugs in s390x AES code.
- Uses the first detected address family if IPv6 is not available
- Reverts the changes in https://github.com/openssl/openssl/pull/13305
  as it introduces a regression if server has a DSA key pair, the handshake fails
  when the protocol is not explicitly set to TLS 1.2. However, if the patch is reverted,
  it has an effect on the "ssl_reject_handshake" feature in nginx. Although, this feature
  will continue to work, TLS 1.3 protocol becomes unavailable/disabled. This is already
  known - https://trac.nginx.org/nginx/ticket/2071#comment:1
  As per https://github.com/openssl/openssl/issues/16075#issuecomment-879939938, nginx
  could early callback instead of servername callback.
- Resolves: rhbz#1978214
- Related: rhbz#1934534</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; - 1:1.1.1k-5" date="1636718400">- CVE-2021-3712 openssl: Read buffer overruns processing ASN.1 strings
- Resolves: rhbz#2005400</changelog>
</package>
<package pkgid="c79db28f95f748d60cdbb4926980c7ec523384822a1aeef7cda007fa74210833" name="openssl-libs-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.1.1k" rel="5.el8_5"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.1.1g-12" date="1603454400">- Implemented new FIPS requirements in regards to KDF and DH selftests
- Disallow certificates with explicit EC parameters</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.1.1g-13" date="1607083200">- Fix CVE-2020-1971 ediparty null pointer dereference</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.1.1g-14" date="1617019200">- Fix CVE-2021-3450 openssl: CA certificate check bypass with
  X509_V_FLAG_X509_STRICT
- Fix CVE-2021-3449 NULL pointer deref in signature_algorithms processing</changelog>
  <changelog author="Dmitry Belyavski &lt;dbelyavs@redhat.com&gt; 1.1.1g-15" date="1618574400">- Remove 2-key 3DES test from FIPS_selftest</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; 1.1.1g-16" date="1619438400">- Use AI_ADDRCONFIG only when explicit host name is given
- Allow only curves defined in RFC 8446 in TLS 1.3</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.1.1k-1" date="1621857600">- Update to version 1.1.1k</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:1.1.1k-2" date="1624449600">- Fixes FIPS_selftest to work in FIPS mode. Resolves: rhbz#1940085
- Using safe primes for FIPS DH self-test</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; - 1:1.1.1k-3" date="1624536000">- Cleansup the peer point formats on renegotiation
- Resolves rhbz#1965362</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; - 1:1.1.1k-4" date="1626436800">- Fixes bugs in s390x AES code.
- Uses the first detected address family if IPv6 is not available
- Reverts the changes in https://github.com/openssl/openssl/pull/13305
  as it introduces a regression if server has a DSA key pair, the handshake fails
  when the protocol is not explicitly set to TLS 1.2. However, if the patch is reverted,
  it has an effect on the "ssl_reject_handshake" feature in nginx. Although, this feature
  will continue to work, TLS 1.3 protocol becomes unavailable/disabled. This is already
  known - https://trac.nginx.org/nginx/ticket/2071#comment:1
  As per https://github.com/openssl/openssl/issues/16075#issuecomment-879939938, nginx
  could early callback instead of servername callback.
- Resolves: rhbz#1978214
- Related: rhbz#1934534</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; - 1:1.1.1k-5" date="1636718400">- CVE-2021-3712 openssl: Read buffer overruns processing ASN.1 strings
- Resolves: rhbz#2005400</changelog>
</package>
<package pkgid="600e19d813cbbeda86faa526927eb29e47aac89d5f006772e6221fa7eab98b2c" name="openssl-libs-debuginfo" arch="i686">
  <version epoch="1" ver="1.1.1k" rel="6.el8_5"/>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.1.1g-13" date="1607083200">- Fix CVE-2020-1971 ediparty null pointer dereference</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.1.1g-14" date="1617019200">- Fix CVE-2021-3450 openssl: CA certificate check bypass with
  X509_V_FLAG_X509_STRICT
- Fix CVE-2021-3449 NULL pointer deref in signature_algorithms processing</changelog>
  <changelog author="Dmitry Belyavski &lt;dbelyavs@redhat.com&gt; 1.1.1g-15" date="1618574400">- Remove 2-key 3DES test from FIPS_selftest</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; 1.1.1g-16" date="1619438400">- Use AI_ADDRCONFIG only when explicit host name is given
- Allow only curves defined in RFC 8446 in TLS 1.3</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.1.1k-1" date="1621857600">- Update to version 1.1.1k</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:1.1.1k-2" date="1624449600">- Fixes FIPS_selftest to work in FIPS mode. Resolves: rhbz#1940085
- Using safe primes for FIPS DH self-test</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; - 1:1.1.1k-3" date="1624536000">- Cleansup the peer point formats on renegotiation
- Resolves rhbz#1965362</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; - 1:1.1.1k-4" date="1626436800">- Fixes bugs in s390x AES code.
- Uses the first detected address family if IPv6 is not available
- Reverts the changes in https://github.com/openssl/openssl/pull/13305
  as it introduces a regression if server has a DSA key pair, the handshake fails
  when the protocol is not explicitly set to TLS 1.2. However, if the patch is reverted,
  it has an effect on the "ssl_reject_handshake" feature in nginx. Although, this feature
  will continue to work, TLS 1.3 protocol becomes unavailable/disabled. This is already
  known - https://trac.nginx.org/nginx/ticket/2071#comment:1
  As per https://github.com/openssl/openssl/issues/16075#issuecomment-879939938, nginx
  could early callback instead of servername callback.
- Resolves: rhbz#1978214
- Related: rhbz#1934534</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; - 1:1.1.1k-5" date="1636718400">- CVE-2021-3712 openssl: Read buffer overruns processing ASN.1 strings
- Resolves: rhbz#2005400</changelog>
  <changelog author="Clemens Lang &lt;cllang@redhat.com&gt; - 1:1.1.1k-6" date="1648036800">- Fixes CVE-2022-0778 openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates
- Resolves: rhbz#2067144</changelog>
</package>
<package pkgid="bfa0d3e7d66371c21fd3ec845f6cc26152b7096fde9700c4dec971affc4f46d9" name="openssl-libs-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.1.1k" rel="6.el8_5"/>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.1.1g-13" date="1607083200">- Fix CVE-2020-1971 ediparty null pointer dereference</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.1.1g-14" date="1617019200">- Fix CVE-2021-3450 openssl: CA certificate check bypass with
  X509_V_FLAG_X509_STRICT
- Fix CVE-2021-3449 NULL pointer deref in signature_algorithms processing</changelog>
  <changelog author="Dmitry Belyavski &lt;dbelyavs@redhat.com&gt; 1.1.1g-15" date="1618574400">- Remove 2-key 3DES test from FIPS_selftest</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; 1.1.1g-16" date="1619438400">- Use AI_ADDRCONFIG only when explicit host name is given
- Allow only curves defined in RFC 8446 in TLS 1.3</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.1.1k-1" date="1621857600">- Update to version 1.1.1k</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:1.1.1k-2" date="1624449600">- Fixes FIPS_selftest to work in FIPS mode. Resolves: rhbz#1940085
- Using safe primes for FIPS DH self-test</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; - 1:1.1.1k-3" date="1624536000">- Cleansup the peer point formats on renegotiation
- Resolves rhbz#1965362</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; - 1:1.1.1k-4" date="1626436800">- Fixes bugs in s390x AES code.
- Uses the first detected address family if IPv6 is not available
- Reverts the changes in https://github.com/openssl/openssl/pull/13305
  as it introduces a regression if server has a DSA key pair, the handshake fails
  when the protocol is not explicitly set to TLS 1.2. However, if the patch is reverted,
  it has an effect on the "ssl_reject_handshake" feature in nginx. Although, this feature
  will continue to work, TLS 1.3 protocol becomes unavailable/disabled. This is already
  known - https://trac.nginx.org/nginx/ticket/2071#comment:1
  As per https://github.com/openssl/openssl/issues/16075#issuecomment-879939938, nginx
  could early callback instead of servername callback.
- Resolves: rhbz#1978214
- Related: rhbz#1934534</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; - 1:1.1.1k-5" date="1636718400">- CVE-2021-3712 openssl: Read buffer overruns processing ASN.1 strings
- Resolves: rhbz#2005400</changelog>
  <changelog author="Clemens Lang &lt;cllang@redhat.com&gt; - 1:1.1.1k-6" date="1648036800">- Fixes CVE-2022-0778 openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates
- Resolves: rhbz#2067144</changelog>
</package>
<package pkgid="dfd2ebc25054743b059d2b3b33509fe449c90d4d2c5056de63e87fe137079fcd" name="perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="348.12.2.el8_5"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.4.1.el8_5]" date="1637668800">- [RHEL8.6 BZ 1849234] cifs: report error instead of invalid when revalidating a dentry fails (Ronnie Sahlberg) [2017177 1849234]
- kthread: Fix PF_KTHREAD vs to_kthread() race (Waiman Long) [2010333 2001497]
- sched/fair: Ignore percpu threads for imbalance pulls (Waiman Long) [2010333 2001497]
- kthread: Extract KTHREAD_IS_PER_CPU (Waiman Long) [2010333 2001497]
- sched: Optimize finish_lock_switch() (Waiman Long) [2010333 2001497]
- sched/hotplug: Ensure only per-cpu kthreads run during hotplug (Waiman Long) [2010333 2001497]
- sched: Fix balance_callback() (Waiman Long) [2010333 2001497]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.5.1.el8_5]" date="1638273600">- blk-mq: still set q-&gt;make_request_fn for blk-mq (Ming Lei) [2016384 1999728]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.6.1.el8_5]" date="1638878400">- x86/Kconfig: Do not enable AMD_MEM_ENCRYPT_ACTIVE_BY_DEFAULT automatically (Prarit Bhargava) [2024678 2021219]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.7.1.el8_5]" date="1638964800">- sched: Fix CPU hotplug / tighten is_per_cpu_kthread() (Waiman Long) [2026450 2024869]
- sched: Prepare to use balance_push in ttwu() (Waiman Long) [2026450 2024869]
- sched: Don't run cpu-online with balance_push() enabled (Waiman Long) [2026450 2024869]
- workqueue: Tag bound workers with KTHREAD_IS_PER_CPU (Waiman Long) [2026450 2024869]
- workqueue: Use cpu_possible_mask instead of cpu_active_mask to break affinity (Waiman Long) [2026450 2024869]
- sched: Fix hotplug vs CPU bandwidth control (Waiman Long) [2026450 2024869]
- workqueue: Manually break affinity on hotplug (Waiman Long) [2026450 2024869]
- sched/hotplug: Consolidate task migration on CPU unplug (Waiman Long) [2026450 2024869]
- sched/core: Wait for tasks being pushed away on hotplug (Waiman Long) [2026450 2024869]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.8.1.el8_5]" date="1639483200">- ice: Fix VF true promiscuous mode (Jonathan Toppins) [2026698 1970643]
- ice: Remove toggling of antispoof for VF trusted promiscuous mode (Jonathan Toppins) [2026698 1970643]
- ice: Fix replacing VF hardware MAC to existing MAC filter (Jonathan Toppins) [2026698 1970643]
- ice: Fix not stopping Tx queues for VFs (Jonathan Toppins) [2026698 1970643]
- ice: Fix race conditions between virtchnl handling and VF ndo ops (Jonathan Toppins) [2026698 1970643]
- net/netif_receive_skb_core: Use migrate_disable() (Luis Claudio R. Goncalves) [2027689 2024168]
- crypto: jitter - consider 32 LSB for APT (Herbert Xu) [2029365 1994390]
- xfs: fix I_DONTCACHE (Carlos Maiolino) [2028534 2024969]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.9.1.el8_5]" date="1640001600">- ixgbe: Revert "bpf, devmap: Move drop error path to devmap for XDP_REDIRECT" (Ken Cox) [2029845 2024240]
- i40e: Revert "bpf, devmap: Move drop error path to devmap for XDP_REDIRECT" (Stefan Assmann) [2029845 2024225]
- rcu/nocb: Perform deferred wake up before last idle's need_resched() check (Waiman Long) [2029449 2008340]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.10.1.el8_5]" date="1640779200">- selftests: add a test case for mirred egress to ingress (Xin Long) [2024411 1983894]
- net: sched: act_mirred: drop dst for the direction from egress to ingress (Xin Long) [2024411 1983894]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.11.1.el8_5]" date="1641297600">- blk-mq: avoid to iterate over stale request (Ming Lei) [2034396 1997338]
- rcu: Tighten rcu_advance_cbs_nowake() checks (Daniel Vacek) [2032579 2013408]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.12.1.el8_5]" date="1641988800">- tcp: don't free a FIN sk_buff in tcp_remove_empty_skb() (Guillaume Nault) [2021574 2016210]
- kernel.spec: Add support to use vmlinux.h (Jiri Olsa) [2031053 1989087]
- spec: Add vmlinux.h to kernel-devel package (Jiri Olsa) [2031053 1989087]
- x86/mce: Avoid infinite loop for copy from user recovery (Prarit Bhargava) [2008789 1999550]
- x86/mce: Rename kill_it to kill_current_task (Prarit Bhargava) [2008789 1999550]
- x86/mce: Recover from poison found while copying from user space (Prarit Bhargava) [2008789 1999550]
- x86/mce: Delay clearing IA32_MCG_STATUS to the end of do_machine_check() (Prarit Bhargava) [2008789 1999550]
- x86/mce: Send #MC singal from task work (Prarit Bhargava) [2008789 1999550]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-348.12.2.el8_5]" date="1642420800">- vfs: Out-of-bounds write of heap buffer in fs_context.c (Frantisek Hrbata) [2040585 2040586] {CVE-2022-0185}
- xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Bruno Meneguele) [2034864 2034865] {CVE-2021-4155}</changelog>
</package>
<package pkgid="ca4652af93ca4cd62b4cede260b740ee4d5659bb3208ae4142148f6921e74f65" name="perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="348.2.1.el8_5"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-341.el8]" date="1631275200">- mptcp: Only send extra TCP acks in eligible socket states (Paolo Abeni) [1997178]
- mptcp: fix possible divide by zero (Paolo Abeni) [1997178]
- mptcp: drop tx skb cache (Paolo Abeni) [1997178]
- mptcp: fix memory leak on address flush (Paolo Abeni) [1997178]
- ice: Only lock to update netdev dev_addr (Michal Schmidt) [1995868]
- ice: restart periodic outputs around time changes (Ken Cox) [1992750]
- ice: Fix perout start time rounding (Ken Cox) [1992750]
- net/sched: ets: fix crash when flipping from 'strict' to 'quantum' (Davide Caratti) [1981184]
- ovl: prevent private clone if bind mount is not allowed (Miklos Szeredi) [1993131] {CVE-2021-3732}
- gfs2: Don't call dlm after protocol is unmounted (Bob Peterson) [1997193]
- gfs2: don't stop reads while withdraw in progress (Bob Peterson) [1997193]
- gfs2: Mark journal inodes as "don't cache" (Bob Peterson) [1997193]
- bpf: bpftool: Add -fno-asynchronous-unwind-tables to BPF Clang invocation (Yauheni Kaliuta) [1997124]
- perf/x86/intel: Apply mid ACK for small core (Michael Petlan) [1838573]
- perf/x86/intel/lbr: Zero the xstate buffer on allocation (Michael Petlan) [1838573]
- perf: Fix task context PMU for Hetero (Michael Petlan) [1838573]
- perf/x86/intel: Fix fixed counter check warning for some Alder Lake (Michael Petlan) [1838573]
- perf/x86/lbr: Remove cpuc-&gt;lbr_xsave allocation from atomic context (Michael Petlan) [1838573]
- x86/fpu/xstate: Fix an xstate size check warning with architectural LBRs (Michael Petlan) [1838573]
- perf/x86/rapl: Add support for Intel Alder Lake (Michael Petlan) [1838573]
- perf/x86/cstate: Add Alder Lake CPU support (Michael Petlan) [1838573]
- perf/x86/msr: Add Alder Lake CPU support (Michael Petlan) [1838573]
- perf/x86/intel/uncore: Add Alder Lake support (Michael Petlan) [1838573]
- perf: Extend PERF_TYPE_HARDWARE and PERF_TYPE_HW_CACHE (Michael Petlan) [1838573]
- perf/x86/intel: Add Alder Lake Hybrid support (Michael Petlan) [1838573]
- perf/x86: Support filter_match callback (Michael Petlan) [1838573]
- perf/x86/intel: Add attr_update for Hybrid PMUs (Michael Petlan) [1838573]
- perf/x86: Add structures for the attributes of Hybrid PMUs (Michael Petlan) [1838573]
- perf/x86: Register hybrid PMUs (Michael Petlan) [1838573]
- perf/x86: Factor out x86_pmu_show_pmu_cap (Michael Petlan) [1838573]
- perf/x86: Remove temporary pmu assignment in event_init (Michael Petlan) [1838573]
- perf/x86/intel: Factor out intel_pmu_check_extra_regs (Michael Petlan) [1838573]
- perf/x86/intel: Factor out intel_pmu_check_event_constraints (Michael Petlan) [1838573]
- perf/x86/intel: Factor out intel_pmu_check_num_counters (Michael Petlan) [1838573]
- perf/x86: Hybrid PMU support for extra_regs (Michael Petlan) [1838573]
- perf/x86: Hybrid PMU support for event constraints (Michael Petlan) [1838573]
- perf/x86: Hybrid PMU support for hardware cache event (Michael Petlan) [1838573]
- perf/x86: Hybrid PMU support for unconstrained (Michael Petlan) [1838573]
- perf/x86: Hybrid PMU support for counters (Michael Petlan) [1838573]
- perf/x86: Hybrid PMU support for intel_ctrl (Michael Petlan) [1838573]
- perf/x86/intel: Hybrid PMU support for perf capabilities (Michael Petlan) [1838573]
- perf/x86: Track pmu in per-CPU cpu_hw_events (Michael Petlan) [1838573]
- perf/x86/intel/lbr: Support XSAVES for arch LBR read (Michael Petlan) [1838573]
- perf/x86/intel/lbr: Support XSAVES/XRSTORS for LBR context switch (Michael Petlan) [1838573]
- x86/fpu/xstate: Add helpers for LBR dynamic supervisor feature (Michael Petlan) [1838573]
- x86/fpu/xstate: Support dynamic supervisor feature for LBR (Michael Petlan) [1838573]
- x86/fpu: Use proper mask to replace full instruction mask (Michael Petlan) [1838573]
- x86/cpu: Add helper function to get the type of the current hybrid CPU (Michael Petlan) [1838573]
- x86/cpufeatures: Enumerate Intel Hybrid Technology feature bit (Michael Petlan) [1838573]
- HID: make arrays usage and value to be the same (Benjamin Tissoires) [1974942]
- ACPI: PM: s2idle: Invert Microsoft UUID entry and exit (David Arcari) [1960440]
- platform/x86: amd-pmc: Fix undefined reference to __udivdi3 (David Arcari) [1960440]
- platform/x86: amd-pmc: Fix missing unlock on error in amd_pmc_send_cmd() (David Arcari) [1960440]
- platform/x86: amd-pmc: Use return code on suspend (David Arcari) [1960440]
- platform/x86: amd-pmc: Add new acpi id for future PMC controllers (David Arcari) [1960440]
- platform/x86: amd-pmc: Add support for ACPI ID AMDI0006 (David Arcari) [1960440]
- platform/x86: amd-pmc: Add support for logging s0ix counters (David Arcari) [1960440]
- platform/x86: amd-pmc: Add support for logging SMU metrics (David Arcari) [1960440]
- platform/x86: amd-pmc: call dump registers only once (David Arcari) [1960440]
- platform/x86: amd-pmc: Fix SMU firmware reporting mechanism (David Arcari) [1960440]
- platform/x86: amd-pmc: Fix command completion code (David Arcari) [1960440]
- usb: pci-quirks: disable D3cold on xhci suspend for s2idle on AMD Renoir (David Arcari) [1960440]
- ACPI: PM: Only mark EC GPE for wakeup on Intel systems (David Arcari) [1960440]
- ACPI: PM: Adjust behavior for field problems on AMD systems (David Arcari) [1960440]
- ACPI: PM: s2idle: Add support for new Microsoft UUID (David Arcari) [1960440]
- ACPI: PM: s2idle: Add support for multiple func mask (David Arcari) [1960440]
- ACPI: PM: s2idle: Refactor common code (David Arcari) [1960440]
- ACPI: PM: s2idle: Use correct revision id (David Arcari) [1960440]
- ACPI: PM: s2idle: Add missing LPS0 functions for AMD (David Arcari) [1960440]
- lockd: Fix invalid lockowner cast after vfs_test_lock (Benjamin Coddington) [1986138]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-342.el8]" date="1631620800">- selftest: netfilter: add test case for unreplied tcp connections (Florian Westphal) [1991523]
- netfilter: conntrack: do not renew entry stuck in tcp SYN_SENT state (Florian Westphal) [1991523]
- net/sched: store the last executed chain also for clsact egress (Davide Caratti) [1980537]
- ice: fix Tx queue iteration for Tx timestamp enablement (Ken Cox) [1999743]
- perf evsel: Add missing cloning of evsel-&gt;use_config_name (Michael Petlan) [1838635]
- perf Documentation: Document intel-hybrid support (Michael Petlan) [1838635]
- perf tests: Skip 'perf stat metrics (shadow stat) test' for hybrid (Michael Petlan) [1838635]
- perf tests: Support 'Convert perf time to TSC' test for hybrid (Michael Petlan) [1838635]
- perf tests: Support 'Session topology' test for hybrid (Michael Petlan) [1838635]
- perf tests: Support 'Parse and process metrics' test for hybrid (Michael Petlan) [1838635]
- perf tests: Support 'Track with sched_switch' test for hybrid (Michael Petlan) [1838635]
- perf tests: Skip 'Setup struct perf_event_attr' test for hybrid (Michael Petlan) [1838635]
- perf tests: Add hybrid cases for 'Roundtrip evsel-&gt;name' test (Michael Petlan) [1838635]
- perf tests: Add hybrid cases for 'Parse event definition strings' test (Michael Petlan) [1838635]
- perf record: Uniquify hybrid event name (Michael Petlan) [1838635]
- perf stat: Warn group events from different hybrid PMU (Michael Petlan) [1838635]
- perf stat: Filter out unmatched aggregation for hybrid event (Michael Petlan) [1838635]
- perf stat: Add default hybrid events (Michael Petlan) [1838635]
- perf record: Create two hybrid 'cycles' events by default (Michael Petlan) [1838635]
- perf parse-events: Support event inside hybrid pmu (Michael Petlan) [1838635]
- perf parse-events: Compare with hybrid pmu name (Michael Petlan) [1838635]
- perf parse-events: Create two hybrid raw events (Michael Petlan) [1838635]
- perf parse-events: Create two hybrid cache events (Michael Petlan) [1838635]
- perf parse-events: Create two hybrid hardware events (Michael Petlan) [1838635]
- perf stat: Uniquify hybrid event name (Michael Petlan) [1838635]
- perf pmu: Add hybrid helper functions (Michael Petlan) [1838635]
- perf pmu: Save detected hybrid pmus to a global pmu list (Michael Petlan) [1838635]
- perf pmu: Save pmu name (Michael Petlan) [1838635]
- perf pmu: Simplify arguments of __perf_pmu__new_alias (Michael Petlan) [1838635]
- perf jevents: Support unit value "cpu_core" and "cpu_atom" (Michael Petlan) [1838635]
- tools headers uapi: Update tools's copy of linux/perf_event.h (Michael Petlan) [1838635]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-343.el8]" date="1631793600">- rcu: Avoid unneeded function call in rcu_read_unlock() (Waiman Long) [1997500]
- mt76: connac: do not schedule mac_work if the device is not running (Íñigo Huguet) [1956419 1972045]
- mt7921e: enable module in config (Íñigo Huguet) [1956419 1972045]
- Revert tools/power/cpupower: Read energy_perf_bias from sysfs (Steve Best) [1999926]
- libnvdimm/namespace: Differentiate between probe mapping and runtime mapping (Jeff Moyer) [1795719]
- libnvdimm/pfn_dev: Don't clear device memmap area during generic namespace probe (Jeff Moyer) [1795719]
- perf/x86/intel/uncore: Clean up error handling path of iio mapping (Michael Petlan) [1837330]
- perf/x86/intel/uncore: Fix for iio mapping on Skylake Server (Michael Petlan) [1837330]
- perf/x86/intel/uncore: Generic support for the MMIO type of uncore blocks (Michael Petlan) [1837330]
- perf/x86/intel/uncore: Generic support for the PCI type of uncore blocks (Michael Petlan) [1837330]
- perf/x86/intel/uncore: Rename uncore_notifier to uncore_pci_sub_notifier (Michael Petlan) [1837330]
- perf/x86/intel/uncore: Generic support for the MSR type of uncore blocks (Michael Petlan) [1837330]
- perf/x86/intel/uncore: Parse uncore discovery tables (Michael Petlan) [1837330]
- perf/x86/intel/uncore: Expose an Uncore unit to IIO PMON mapping (Michael Petlan) [1837330]
- perf/x86/intel/uncore: Wrap the max dies calculation into an accessor (Michael Petlan) [1837330]
- perf/x86/intel/uncore: Expose an Uncore unit to PMON mapping (Michael Petlan) [1837330]
- perf/x86/intel/uncore: Validate MMIO address before accessing (Michael Petlan) [1837330]
- perf/x86/intel/uncore: Record the size of mapped area (Michael Petlan) [1837330]
- perf/x86/intel/uncore: Fix oops when counting IMC uncore events on some TGL (Michael Petlan) [1837330]
- crypto: qat - remove unused macro in FW loader (Vladis Dronov) [1920086]
- crypto: qat - check return code of qat_hal_rd_rel_reg() (Vladis Dronov) [1920086]
- crypto: qat - report an error if MMP file size is too large (Vladis Dronov) [1920086]
- crypto: qat - check MMP size before writing to the SRAM (Vladis Dronov) [1920086]
- crypto: qat - return error when failing to map FW (Vladis Dronov) [1920086]
- crypto: qat - enable detection of accelerators hang (Vladis Dronov) [1920086]
- crypto: qat - Fix a double free in adf_create_ring (Vladis Dronov) [1920086]
- crypto: qat - fix error path in adf_isr_resource_alloc() (Vladis Dronov) [1920086]
- crypto: qat - ADF_STATUS_PF_RUNNING should be set after adf_dev_init (Vladis Dronov) [1920086]
- crypto: qat - don't release uninitialized resources (Vladis Dronov) [1920086]
- crypto: qat - fix use of 'dma_map_single' (Vladis Dronov) [1920086]
- crypto: qat - fix unmap invalid dma address (Vladis Dronov) [1920086]
- crypto: qat - fix spelling mistake: "messge" -&gt; "message" (Vladis Dronov) [1920086]
- crypto: qat - reduce size of mapped region (Vladis Dronov) [1920086]
- crypto: qat - change format string and cast ring size (Vladis Dronov) [1920086]
- crypto: qat - fix potential spectre issue (Vladis Dronov) [1920086]
- crypto: qat - configure arbiter mapping based on engines enabled (Vladis Dronov) [1920086]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-344.el8]" date="1632139200">- perf/x86/intel: Fix PEBS-via-PT reload base value for Extended PEBS (Michael Petlan) [1998051]
- perf/x86/intel/uncore: Fix Add BW copypasta (Michael Petlan) [1998051]
- perf/x86/intel/uncore: Add BW counters for GT, IA and IO breakdown (Michael Petlan) [1998051]
- Revert "ice: Add initial support framework for LAG" (Michal Schmidt) [1999016]
- net: re-initialize slow_gro flag at gro_list_prepare time (Paolo Abeni) [2002367]
- cxgb4: dont touch blocked freelist bitmap after free (Rahul Lakkireddy) [1998148]
- cxgb4vf: configure ports accessible by the VF (Rahul Lakkireddy) [1961329]
- scsi: lpfc: Fix memory leaks in error paths while issuing ELS RDF/SCR request (Dick Kennedy) [1976332]
- scsi: lpfc: Keep NDLP reference until after freeing the IOCB after ELS handling (Dick Kennedy) [1976332]
- scsi: lpfc: Move initialization of phba-&gt;poll_list earlier to avoid crash (Dick Kennedy) [1976332]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-345.el8]" date="1632398400">- e1000e: Do not take care about recovery NVM checksum (Ken Cox) [1984558]
- qrtr: disable CONFIG_QRTR for non x86_64 archs (Íñigo Huguet) [1999642]
- ceph: fix possible null-pointer dereference in ceph_mdsmap_decode() (Jeff Layton) [1989999]
- ceph: fix dereference of null pointer cf (Jeff Layton) [1989999]
- ceph: correctly handle releasing an embedded cap flush (Jeff Layton) [1989999]
- ceph: take snap_empty_lock atomically with snaprealm refcount change (Jeff Layton) [1989999]
- ceph: don't WARN if we're still opening a session to an MDS (Jeff Layton) [1989999]
- rbd: don't hold lock_rwsem while running_list is being drained (Jeff Layton) [1989999]
- rbd: always kick acquire on "acquired" and "released" notifications (Jeff Layton) [1989999]
- ceph: take reference to req-&gt;r_parent at point of assignment (Jeff Layton) [1989999]
- ceph: eliminate ceph_async_iput() (Jeff Layton) [1989999]
- ceph: don't take s_mutex in ceph_flush_snaps (Jeff Layton) [1989999]
- ceph: don't take s_mutex in try_flush_caps (Jeff Layton) [1989999]
- ceph: don't take s_mutex or snap_rwsem in ceph_check_caps (Jeff Layton) [1989999]
- ceph: eliminate session-&gt;s_gen_ttl_lock (Jeff Layton) [1989999]
- ceph: allow ceph_put_mds_session to take NULL or ERR_PTR (Jeff Layton) [1989999]
- ceph: clean up locking annotation for ceph_get_snap_realm and __lookup_snap_realm (Jeff Layton) [1989999]
- ceph: add some lockdep assertions around snaprealm handling (Jeff Layton) [1989999]
- ceph: decoding error in ceph_update_snap_realm should return -EIO (Jeff Layton) [1989999]
- ceph: add IO size metrics support (Jeff Layton) [1989999]
- ceph: update and rename __update_latency helper to __update_stdev (Jeff Layton) [1989999]
- ceph: simplify the metrics struct (Jeff Layton) [1989999]
- libceph: fix doc warnings in cls_lock_client.c (Jeff Layton) [1989999]
- libceph: remove unnecessary ret variable in ceph_auth_init() (Jeff Layton) [1989999]
- libceph: kill ceph_none_authorizer::reply_buf (Jeff Layton) [1989999]
- ceph: make ceph_queue_cap_snap static (Jeff Layton) [1989999]
- ceph: remove bogus checks and WARN_ONs from ceph_set_page_dirty (Jeff Layton) [1989999]
- libceph: set global_id as soon as we get an auth ticket (Jeff Layton) [1989999]
- libceph: don't pass result into ac-&gt;ops-&gt;handle_reply() (Jeff Layton) [1989999]
- ceph: fix error handling in ceph_atomic_open and ceph_lookup (Jeff Layton) [1989999]
- ceph: must hold snap_rwsem when filling inode for async create (Jeff Layton) [1989999]
- libceph: Fix spelling mistakes (Jeff Layton) [1989999]
- libceph: don't set global_id until we get an auth ticket (Jeff Layton) [1989999]
- libceph: bump CephXAuthenticate encoding version (Jeff Layton) [1989999]
- ceph: don't allow access to MDS-private inodes (Jeff Layton) [1989999]
- ceph: fix up some bare fetches of i_size (Jeff Layton) [1989999]
- ceph: support getting ceph.dir.rsnaps vxattr (Jeff Layton) [1989999]
- ceph: drop pinned_page parameter from ceph_get_caps (Jeff Layton) [1989999]
- ceph: fix inode leak on getattr error in __fh_to_dentry (Jeff Layton) [1989999]
- ceph: only check pool permissions for regular files (Jeff Layton) [1989999]
- ceph: send opened files/pinned caps/opened inodes metrics to MDS daemon (Jeff Layton) [1989999]
- ceph: avoid counting the same request twice or more (Jeff Layton) [1989999]
- ceph: rename the metric helpers (Jeff Layton) [1989999]
- ceph: fix kerneldoc copypasta over ceph_start_io_direct (Jeff Layton) [1989999]
- ceph: don't use d_add in ceph_handle_snapdir (Jeff Layton) [1989999]
- ceph: don't clobber i_snap_caps on non-I_NEW inode (Jeff Layton) [1989999]
- ceph: fix fall-through warnings for Clang (Jeff Layton) [1989999]
- net: ceph: Fix a typo in osdmap.c (Jeff Layton) [1989999]
- ceph: don't allow type or device number to change on non-I_NEW inodes (Jeff Layton) [1989999]
- ceph: defer flushing the capsnap if the Fb is used (Jeff Layton) [1989999]
- ceph: allow queueing cap/snap handling after putting cap references (Jeff Layton) [1989999]
- ceph: clean up inode work queueing (Jeff Layton) [1989999]
- ceph: fix flush_snap logic after putting caps (Jeff Layton) [1989999]
- libceph: fix "Boolean result is used in bitwise operation" warning (Jeff Layton) [1989999]
- new helper: inode_wrong_type() (Jeff Layton) [1989999]
- kabi: Adding symbol single_release (fs/seq_file.c) (Čestmír Kalina) [1945486]
- kabi: Adding symbol single_open (fs/seq_file.c) (Čestmír Kalina) [1945486]
- kabi: Adding symbol seq_read (fs/seq_file.c) (Čestmír Kalina) [1945486]
- kabi: Adding symbol seq_printf (fs/seq_file.c) (Čestmír Kalina) [1945486]
- kabi: Adding symbol seq_lseek (fs/seq_file.c) (Čestmír Kalina) [1945486]
- kabi: Adding symbol unregister_chrdev_region (fs/char_dev.c) (Čestmír Kalina) [1945486]
- kabi: Adding symbol cdev_init (fs/char_dev.c) (Čestmír Kalina) [1945486]
- kabi: Adding symbol cdev_del (fs/char_dev.c) (Čestmír Kalina) [1945486]
- kabi: Adding symbol cdev_alloc (fs/char_dev.c) (Čestmír Kalina) [1945486]
- kabi: Adding symbol cdev_add (fs/char_dev.c) (Čestmír Kalina) [1945486]
- kabi: Adding symbol alloc_chrdev_region (fs/char_dev.c) (Čestmír Kalina) [1945486]
- kabi: Adding symbol pcie_capability_read_word (drivers/pci/access.c) (Čestmír Kalina) [1945485]
- kabi: Adding symbol pcie_capability_read_dword (drivers/pci/access.c) (Čestmír Kalina) [1945485]
- kabi: Adding symbol pcie_capability_clear_and_set_word (drivers/pci/access.c) (Čestmír Kalina) [1945485]
- kabi: Adding symbol pci_write_config_dword (drivers/pci/access.c) (Čestmír Kalina) [1945485]
- kabi: Adding symbol pci_write_config_byte (drivers/pci/access.c) (Čestmír Kalina) [1945485]
- kabi: Adding symbol pci_set_power_state (drivers/pci/pci.c) (Čestmír Kalina) [1945485]
- kabi: Adding symbol pci_read_config_dword (drivers/pci/access.c) (Čestmír Kalina) [1945485]
- kabi: Adding symbol pci_read_config_byte (drivers/pci/access.c) (Čestmír Kalina) [1945485]
- kabi: Adding symbol pci_irq_vector (drivers/pci/msi.c) (Čestmír Kalina) [1945485]
- kabi: Adding symbol pci_get_device (drivers/pci/search.c) (Čestmír Kalina) [1945485]
- kabi: Adding symbol pci_free_irq_vectors (drivers/pci/msi.c) (Čestmír Kalina) [1945485]
- kabi: Adding symbol pci_alloc_irq_vectors_affinity (drivers/pci/msi.c) (Čestmír Kalina) [1945485]
- kabi: Adding symbol kexec_crash_loaded (kernel/kexec_core.c) (Čestmír Kalina) [1945491]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-346.el8]" date="1633089600">- redhat: switch secureboot kernel image signing to release keys (Bruno Meneguele)
- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Fix RT check branch name (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- Revert "Merge: mt7921e: enable new Mediatek wireless hardware" (Bruno Meneguele) [2009501]
- megaraid_sas: fix concurrent access to ISR between IRQ polling and real interrupt (Tomas Henzl) [2009022]
- scsi: megaraid_sas: mq_poll support (Tomas Henzl) [2009022]
- [PATCH v2] scsi: qla2xxx: Suppress unnecessary log messages during login (Nilesh Javali) [1982186]
- scsi: qla2xxx: Fix excessive messages during device logout (Nilesh Javali) [1982186]
- PCI: pciehp: Ignore Link Down/Up caused by DPC (Myron Stowe) [1981741]
- arm64: kpti: Fix "kpti=off" when KASLR is enabled (Mark Salter) [1979731]
- arm64: Fix CONFIG_ARCH_RANDOM=n build (Mark Salter) [1979731]
- redhat/configs: aarch64: add CONFIG_ARCH_RANDOM (Mark Salter) [1979731]
- arm64: Implement archrandom.h for ARMv8.5-RNG (Mark Salter) [1979731]
- arm64: kconfig: Fix alignment of E0PD help text (Mark Salter) [1979731]
- arm64: Use register field helper in kaslr_requires_kpti() (Mark Salter) [1979731]
- arm64: Simplify early check for broken TX1 when KASLR is enabled (Mark Salter) [1979731]
- arm64: Use a variable to store non-global mappings decision (Mark Salter) [1979731]
- arm64: Don't use KPTI where we have E0PD (Mark Salter) [1979731]
- arm64: Factor out checks for KASLR in KPTI code into separate function (Mark Salter) [1979731]
- redhat/configs: Add CONFIG_ARM64_E0PD (Mark Salter) [1979731]
- arm64: Add initial support for E0PD (Mark Salter) [1979731]
- arm64: cpufeature: Export matrix and other features to userspace (Mark Salter) [1980098]
- arm64: docs: cpu-feature-registers: Document ID_AA64PFR1_EL1 (Mark Salter) [1980098]
- docs/arm64: cpu-feature-registers: Rewrite bitfields that don't follow [e, s] (Mark Salter) [1980098]
- docs/arm64: cpu-feature-registers: Documents missing visible fields (Mark Salter) [1980098]
- arm64: Introduce system_capabilities_finalized() marker (Mark Salter) [1980098]
- arm64: entry.S: Do not preempt from IRQ before all cpufeatures are enabled (Mark Salter) [1980098]
- docs/arm64: elf_hwcaps: Document HWCAP_SB (Mark Salter) [1980098]
- docs/arm64: elf_hwcaps: sort the HWCAP{, 2} documentation by ascending value (Mark Salter) [1980098]
- arm64: cpufeature: Treat ID_AA64ZFR0_EL1 as RAZ when SVE is not enabled (Mark Salter) [1980098]
- arm64: cpufeature: Effectively expose FRINT capability to userspace (Mark Salter) [1980098]
- arm64: cpufeature: Fix feature comparison for CTR_EL0.{CWG,ERG} (Mark Salter) [1980098]
- arm64: Expose FRINT capabilities to userspace (Mark Salter) [1980098]
- arm64: Expose ARMv8.5 CondM capability to userspace (Mark Salter) [1980098]
- docs: arm64: convert perf.txt to ReST format (Mark Salter) [1980098]
- docs: arm64: convert docs to ReST and rename to .rst (Mark Salter) [1980098]
- Documentation/arm64: HugeTLB page implementation (Mark Salter) [1980098]
- Documentation/arm64/sve: Couple of improvements and typos (Mark Salter) [1980098]
- arm64: cpufeature: Fix missing ZFR0 in __read_sysreg_by_encoding() (Mark Salter) [1980098]
- arm64: Expose SVE2 features for userspace (Mark Salter) [1980098]
- arm64: Advertise ARM64_HAS_DCPODP cpu feature (Mark Salter) [1980098]
- arm64: add CVADP support to the cache maintenance helper (Mark Salter) [1980098]
- arm64: Fix minor issues with the dcache_by_line_op macro (Mark Salter) [1980098]
- arm64: Expose DC CVADP to userspace (Mark Salter) [1980098]
- arm64: Handle trapped DC CVADP (Mark Salter) [1980098]
- arm64: HWCAP: encapsulate elf_hwcap (Mark Salter) [1980098]
- arm64: HWCAP: add support for AT_HWCAP2 (Mark Salter) [1980098]
- x86/MCE/AMD, EDAC/mce_amd: Add new SMCA bank types (Aristeu Rozanski) [1965331]
- x86/MCE/AMD, EDAC/mce_amd: Remove struct smca_hwid.xec_bitmap (Aristeu Rozanski) [1965331]
- EDAC, mce_amd: Print ExtErrorCode and description on a single line (Aristeu Rozanski) [1965331]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-347.el8]" date="1633176000">- PCI: Mark TI C667X to avoid bus reset (Alex Williamson) [1975768]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.el8]" date="1633348800">- drm/nouveau/fifo/ga102: initialise chid on return from channel creation (Ben Skeggs) [1997878]
- drm/nouveau/ga102-: support ttm buffer moves via copy engine (Ben Skeggs) [1997878]
- drm/nouveau/kms/tu102-: delay enabling cursor until after assign_windows (Ben Skeggs) [1997878]
- drm/nouveau/kms/nv50: workaround EFI GOP window channel format differences (Ben Skeggs) [1997878]
- drm/nouveau/disp: power down unused DP links during init (Ben Skeggs) [1997878]
- drm/nouveau: recognise GA107 (Ben Skeggs) [1997878]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.1.1.el8_5]" date="1635940800">- lib/timerqueue: Rely on rbtree semantics for next timer (Phil Auld) [2014677 2007099] {CVE-2021-20317}
- mm/hmm: make HMM_MIRROR an implicit option (Rafael Aquini) [2017519 1998534]
- mm/hmm: allow HMM_MIRROR on all architectures with MMU (Rafael Aquini) [2017519 1998534]
- mm: don't select MIGRATE_VMA_HELPER from HMM_MIRROR (Rafael Aquini) [2017519 1998534]
- mm: sort out the DEVICE_PRIVATE Kconfig mess (Rafael Aquini) [2017519 1998534]
- ceph: skip existing superblocks that are blocklisted or shut down when mounting (Jeffrey Layton) [2017071 2011462]
- redhat: switch release to zstream (Bruno Meneguele)</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.2.1.el8_5]" date="1636372800">- tipc: fix size validations for the MSG_CRYPTO type (Bruno Meneguele) [2020506 2020507] {CVE-2021-43267}
- net: Fix skb-&gt;csum update in inet_proto_csum_replace16(). (Balazs Nemeth) [2005981 1975193]</changelog>
</package>
<package pkgid="104df45ee8e621eb3075aee0bc0eae9923dbdc3d48b58cb8c6c98cdffb28488b" name="perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="348.20.1.el8_5"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.11.1.el8_5]" date="1641297600">- blk-mq: avoid to iterate over stale request (Ming Lei) [2034396 1997338]
- rcu: Tighten rcu_advance_cbs_nowake() checks (Daniel Vacek) [2032579 2013408]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.12.1.el8_5]" date="1641988800">- tcp: don't free a FIN sk_buff in tcp_remove_empty_skb() (Guillaume Nault) [2021574 2016210]
- kernel.spec: Add support to use vmlinux.h (Jiri Olsa) [2031053 1989087]
- spec: Add vmlinux.h to kernel-devel package (Jiri Olsa) [2031053 1989087]
- x86/mce: Avoid infinite loop for copy from user recovery (Prarit Bhargava) [2008789 1999550]
- x86/mce: Rename kill_it to kill_current_task (Prarit Bhargava) [2008789 1999550]
- x86/mce: Recover from poison found while copying from user space (Prarit Bhargava) [2008789 1999550]
- x86/mce: Delay clearing IA32_MCG_STATUS to the end of do_machine_check() (Prarit Bhargava) [2008789 1999550]
- x86/mce: Send #MC singal from task work (Prarit Bhargava) [2008789 1999550]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-348.13.1.el8_5]" date="1642507200">- vfs: Out-of-bounds write of heap buffer in fs_context.c (Frantisek Hrbata) [2040585 2040586] {CVE-2022-0185}
- xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Bruno Meneguele) [2034864 2034865] {CVE-2021-4155}
- af_unix: fix garbage collect vs MSG_PEEK (Patrick Talbert) [2031974 2031975] {CVE-2021-0920}
- cgroup: verify that source is a string (Waiman Long) [2034608 2034609] {CVE-2021-4154}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-348.14.1.el8_5]" date="1643198400">- tcp: fix page frag corruption on page fault (Paolo Abeni) [2041529 1996074]
- net: fix sk_page_frag() recursion from memory reclaim (Paolo Abeni) [2041529 1996074]
- KVM: s390: index kvm-&gt;arch.idle_mask by vcpu_idx (Thomas Huth) [2040769 2026230]
- redhat: set LC_ALL=C before sorting config content (Frantisek Hrbata)</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.15.1.el8_5]" date="1643716800">- net/mlx5: DR, Use FW API when updating FW-owned flow table (Michal Schmidt) [2042663 2042651]
- KVM: x86: Wait for IPIs to be delivered when handling Hyper-V TLB flush hypercall (Vitaly Kuznetsov) [2043237 1868572]
- drm/mgag200: Select clock in PLL update functions (Bruno Meneguele) [2034949 1953926]
- drm/i915: Fix HAS_LSPCON macro for platforms between GEN9 and GEN10 (Bruno Meneguele) [2027335 2005586]
- crypto: qat - power up 4xxx device (Vladis Dronov) [2016437 1960307]
- RDMA/core: Fix a double free in add_port error flow (Kamal Heib) [2038724 2008555]
- powerpc/iommu: Report the correct most efficient DMA mask for PCI devices (Steve Best) [2018928 2007425]
- powerpc/dma: Fix dma_map_ops::get_required_mask (Steve Best) [2018928 2007425]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.16.1.el8_5]" date="1644321600">- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047601 2047602] {CVE-2022-22942}
- net: openvswitch: Fix ct_state nat flags for conns arriving from tc (Marcelo Ricardo Leitner) [2043548 2040334]
- net: openvswitch: Fix matching zone id for invalid conns arriving from tc (Marcelo Ricardo Leitner) [2043550 2040452]
- net/sched: flow_dissector: Fix matching on zone id for invalid conns (Marcelo Ricardo Leitner) [2043550 2040452]
- net/sched: Extend qdisc control block with tc control block (Marcelo Ricardo Leitner) [2043550 2040452]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.17.1.el8_5]" date="1644926400">- vfs: check dentry is still valid in get_link() (Ian Kent) [2052558 2014846]
- xfs: don't expose internal symlink metadata buffers to the vfs (Brian Foster) [2052558 2014846]
- CI: Use appropriate zstream builder (Veronika Kabatova)
- CI: Enable baseline realtime checks (Veronika Kabatova)
- CI: Rename pipelines to include release names (Veronika Kabatova)
- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052166 2052167] {CVE-2022-0492}
- ice: Remove boolean vlan_promisc flag from function (Jonathan Toppins) [2051951 2030400]
- ceph: put the requests/sessions when it fails to alloc memory (Jeffrey Layton) [2053725 2017796]
- ceph: fix off by one bugs in unsafe_request_wait() (Jeffrey Layton) [2053725 2017796]
- ceph: flush the mdlog before waiting on unsafe reqs (Jeffrey Layton) [2053725 2017796]
- ceph: flush mdlog before umounting (Jeffrey Layton) [2053725 2017796]
- ceph: make iterate_sessions a global symbol (Jeffrey Layton) [2053725 2017796]
- ceph: make ceph_create_session_msg a global symbol (Jeffrey Layton) [2053725 2017796]
- xfs: check sb_meta_uuid for dabuf buffer recovery (Bill O'Donnell) [2049292 2020764]
- drm/i915: Flush TLBs before releasing backing store (Patrick Talbert) [2044328 2044329] {CVE-2022-0330}
- hugetlb: fix hugetlb cgroup refcounting during vma split (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: fix imbalanced css_get and css_put pair for shared mappings (Waiman Long) [2039015 2032811]
- mm/hugetlb: change hugetlb_reserve_pages() to type bool (Waiman Long) [2039015 2032811]
- hugetlb: fix an error code in hugetlb_reserve_pages() (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: fix offline of hugetlb cgroup with reservations (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: fix reservation accounting (Waiman Long) [2039015 2032811]
- mm/hugetlb: narrow the hugetlb_lock protection area during preparing huge page (Waiman Long) [2039015 2032811]
- mm/hugetlb: a page from buddy is not on any list (Waiman Long) [2039015 2032811]
- mm/hugetlb: not necessary to coalesce regions recursively (Waiman Long) [2039015 2032811]
- selftests/vm/write_to_hugetlbfs.c: fix unused variable warning (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add hugetlb_cgroup reservation tests (Waiman Long) [2039015 2032811]
- hugetlb: support file_region coalescing again (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: support noreserve mappings (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add accounting for shared mappings (Waiman Long) [2039015 2032811]
- hugetlb: disable region_add file_region coalescing (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add reservation accounting for private mappings (Waiman Long) [2039015 2032811]
- mm/hugetlb_cgroup: fix hugetlb_cgroup migration (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add interface for charge/uncharge hugetlb reservations (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add hugetlb_cgroup reservation counter (Waiman Long) [2039015 2032811]
- hugetlb: remove duplicated code (Waiman Long) [2039015 2032811]
- hugetlb: region_chg provides only cache entry (Waiman Long) [2039015 2032811]
- hugetlbfs: always use address space in inode for resv_map pointer (Waiman Long) [2039015 2032811]
- hugetlbfs: fix potential over/underflow setting node specific nr_hugepages (Waiman Long) [2039015 2032811]
- hugetlb: allow to free gigantic pages regardless of the configuration (Waiman Long) [2039015 2032811]
- powerpc/pseries: Fix update of LPAR security flavor after LPM (Steve Best) [2027448 1997294]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.18.1.el8_5]" date="1645531200">- selftests: kvm: Check whether SIDA memop fails for normal guests (Thomas Huth) [2050806 2050807] {CVE-2022-0516}
- KVM: s390: Return error on SIDA memop on normal guest (Thomas Huth) [2050806 2050807] {CVE-2022-0516}
- iommu/amd: Remove iommu_init_ga() (Jerry Snitselaar) [2030854 1998265]
- iommu/amd: Relocate GAMSup check to early_enable_iommus (Jerry Snitselaar) [2030854 1998265]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.19.1.el8_5]" date="1646049600">- tipc: improve size validations for received domain records (Xin Long) [2048970 2048971] {CVE-2022-0435}
- smb3: do not error on fsync when readonly (Ronnie Sahlberg) [2055824 2037811]
- security: implement sctp_assoc_established hook in selinux (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- security: add sctp_assoc_established hook (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- security: call security_sctp_assoc_request in sctp_sf_do_5_1D_ce (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- security: pass asoc to sctp_assoc_request and sctp_sk_clone (Bruno Meneguele) [2054112 2054117 2015525 2048251]
- net: sctp: Fix some typos (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- RDMA/bnxt_re: Fix stats counters (Selvin Xavier) [2049684 2001893]
- net: check skb sec_path when re-initializing slow_gro in gro_list_prepare (Xin Long) [2047427 2030476]
- cpufreq: intel_pstate: Add Icelake servers support in no-HWP mode (David Arcari) [2036888 2003695]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.20.1.el8_5]" date="1646740800">- lib/iov_iter: initialize "flags" in new pipe_buffer (Jan Stancek) [2060874 2060875] {CVE-2022-0847}</changelog>
</package>
<package pkgid="1b74db5d8bc07145615673959510f38ff7a8d09e230e0c2e1a8cc5313bef559d" name="perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="348.23.1.el8_5"/>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-348.14.1.el8_5]" date="1643198400">- tcp: fix page frag corruption on page fault (Paolo Abeni) [2041529 1996074]
- net: fix sk_page_frag() recursion from memory reclaim (Paolo Abeni) [2041529 1996074]
- KVM: s390: index kvm-&gt;arch.idle_mask by vcpu_idx (Thomas Huth) [2040769 2026230]
- redhat: set LC_ALL=C before sorting config content (Frantisek Hrbata)</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.15.1.el8_5]" date="1643716800">- net/mlx5: DR, Use FW API when updating FW-owned flow table (Michal Schmidt) [2042663 2042651]
- KVM: x86: Wait for IPIs to be delivered when handling Hyper-V TLB flush hypercall (Vitaly Kuznetsov) [2043237 1868572]
- drm/mgag200: Select clock in PLL update functions (Bruno Meneguele) [2034949 1953926]
- drm/i915: Fix HAS_LSPCON macro for platforms between GEN9 and GEN10 (Bruno Meneguele) [2027335 2005586]
- crypto: qat - power up 4xxx device (Vladis Dronov) [2016437 1960307]
- RDMA/core: Fix a double free in add_port error flow (Kamal Heib) [2038724 2008555]
- powerpc/iommu: Report the correct most efficient DMA mask for PCI devices (Steve Best) [2018928 2007425]
- powerpc/dma: Fix dma_map_ops::get_required_mask (Steve Best) [2018928 2007425]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.16.1.el8_5]" date="1644321600">- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047601 2047602] {CVE-2022-22942}
- net: openvswitch: Fix ct_state nat flags for conns arriving from tc (Marcelo Ricardo Leitner) [2043548 2040334]
- net: openvswitch: Fix matching zone id for invalid conns arriving from tc (Marcelo Ricardo Leitner) [2043550 2040452]
- net/sched: flow_dissector: Fix matching on zone id for invalid conns (Marcelo Ricardo Leitner) [2043550 2040452]
- net/sched: Extend qdisc control block with tc control block (Marcelo Ricardo Leitner) [2043550 2040452]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.17.1.el8_5]" date="1644926400">- vfs: check dentry is still valid in get_link() (Ian Kent) [2052558 2014846]
- xfs: don't expose internal symlink metadata buffers to the vfs (Brian Foster) [2052558 2014846]
- CI: Use appropriate zstream builder (Veronika Kabatova)
- CI: Enable baseline realtime checks (Veronika Kabatova)
- CI: Rename pipelines to include release names (Veronika Kabatova)
- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052166 2052167] {CVE-2022-0492}
- ice: Remove boolean vlan_promisc flag from function (Jonathan Toppins) [2051951 2030400]
- ceph: put the requests/sessions when it fails to alloc memory (Jeffrey Layton) [2053725 2017796]
- ceph: fix off by one bugs in unsafe_request_wait() (Jeffrey Layton) [2053725 2017796]
- ceph: flush the mdlog before waiting on unsafe reqs (Jeffrey Layton) [2053725 2017796]
- ceph: flush mdlog before umounting (Jeffrey Layton) [2053725 2017796]
- ceph: make iterate_sessions a global symbol (Jeffrey Layton) [2053725 2017796]
- ceph: make ceph_create_session_msg a global symbol (Jeffrey Layton) [2053725 2017796]
- xfs: check sb_meta_uuid for dabuf buffer recovery (Bill O'Donnell) [2049292 2020764]
- drm/i915: Flush TLBs before releasing backing store (Patrick Talbert) [2044328 2044329] {CVE-2022-0330}
- hugetlb: fix hugetlb cgroup refcounting during vma split (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: fix imbalanced css_get and css_put pair for shared mappings (Waiman Long) [2039015 2032811]
- mm/hugetlb: change hugetlb_reserve_pages() to type bool (Waiman Long) [2039015 2032811]
- hugetlb: fix an error code in hugetlb_reserve_pages() (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: fix offline of hugetlb cgroup with reservations (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: fix reservation accounting (Waiman Long) [2039015 2032811]
- mm/hugetlb: narrow the hugetlb_lock protection area during preparing huge page (Waiman Long) [2039015 2032811]
- mm/hugetlb: a page from buddy is not on any list (Waiman Long) [2039015 2032811]
- mm/hugetlb: not necessary to coalesce regions recursively (Waiman Long) [2039015 2032811]
- selftests/vm/write_to_hugetlbfs.c: fix unused variable warning (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add hugetlb_cgroup reservation tests (Waiman Long) [2039015 2032811]
- hugetlb: support file_region coalescing again (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: support noreserve mappings (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add accounting for shared mappings (Waiman Long) [2039015 2032811]
- hugetlb: disable region_add file_region coalescing (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add reservation accounting for private mappings (Waiman Long) [2039015 2032811]
- mm/hugetlb_cgroup: fix hugetlb_cgroup migration (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add interface for charge/uncharge hugetlb reservations (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add hugetlb_cgroup reservation counter (Waiman Long) [2039015 2032811]
- hugetlb: remove duplicated code (Waiman Long) [2039015 2032811]
- hugetlb: region_chg provides only cache entry (Waiman Long) [2039015 2032811]
- hugetlbfs: always use address space in inode for resv_map pointer (Waiman Long) [2039015 2032811]
- hugetlbfs: fix potential over/underflow setting node specific nr_hugepages (Waiman Long) [2039015 2032811]
- hugetlb: allow to free gigantic pages regardless of the configuration (Waiman Long) [2039015 2032811]
- powerpc/pseries: Fix update of LPAR security flavor after LPM (Steve Best) [2027448 1997294]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.18.1.el8_5]" date="1645531200">- selftests: kvm: Check whether SIDA memop fails for normal guests (Thomas Huth) [2050806 2050807] {CVE-2022-0516}
- KVM: s390: Return error on SIDA memop on normal guest (Thomas Huth) [2050806 2050807] {CVE-2022-0516}
- iommu/amd: Remove iommu_init_ga() (Jerry Snitselaar) [2030854 1998265]
- iommu/amd: Relocate GAMSup check to early_enable_iommus (Jerry Snitselaar) [2030854 1998265]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.19.1.el8_5]" date="1646049600">- tipc: improve size validations for received domain records (Xin Long) [2048970 2048971] {CVE-2022-0435}
- smb3: do not error on fsync when readonly (Ronnie Sahlberg) [2055824 2037811]
- security: implement sctp_assoc_established hook in selinux (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- security: add sctp_assoc_established hook (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- security: call security_sctp_assoc_request in sctp_sf_do_5_1D_ce (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- security: pass asoc to sctp_assoc_request and sctp_sk_clone (Bruno Meneguele) [2054112 2054117 2015525 2048251]
- net: sctp: Fix some typos (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- RDMA/bnxt_re: Fix stats counters (Selvin Xavier) [2049684 2001893]
- net: check skb sec_path when re-initializing slow_gro in gro_list_prepare (Xin Long) [2047427 2030476]
- cpufreq: intel_pstate: Add Icelake servers support in no-HWP mode (David Arcari) [2036888 2003695]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.20.1.el8_5]" date="1646740800">- lib/iov_iter: initialize "flags" in new pipe_buffer (Jan Stancek) [2060874 2060875] {CVE-2022-0847}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.21.1.el8_5]" date="1647950400">- netfilter: nf_queue: handle socket prefetch (Florian Westphal) [2061446 2009786]
- netfilter: nf_queue: fix possible use-after-free (Florian Westphal) [2061446 2009786]
- selftests: netfilter: add nfqueue TCP_NEW_SYN_RECV socket race test (Florian Westphal) [2061446 2009786]
- netfilter: nf_queue: don't assume sk is full socket (Florian Westphal) [2061446 2009786]
- netfilter: nf_tables_offload: incorrect flow offload action array size (Florian Westphal) [2056867 2056728] {CVE-2022-25636}
- netfilter: nftables_offload: KASAN slab-out-of-bounds Read in nft_flow_rule_create (Florian Westphal) [2056867 2056728] {CVE-2022-25636}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.22.1.el8_5]" date="1649160000">- scsi: lpfc: Fix non-recovery of remote ports following an unsolicited LOGO (Dick Kennedy) [2058193 2027558]
- cifs: check all path components in resolved dfs target (Ronnie Sahlberg) [2056329 2030880]
- RDMA/cma: Do not change route.addr.src_addr.ss_family (Kamal Heib) [2032073 2032074] {CVE-2021-4028}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.23.1.el8_5]" date="1649764800">- gfs2: dequeue iopen holder in gfs2_inode_lookup error (Bob Peterson) [2069750 2061665]</changelog>
</package>
<package pkgid="13c5fab906e718f01e20fc9de07b6050dbd62def4b913bd7f86c5bd808ab77b3" name="perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="348.7.1.el8_5"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-346.el8]" date="1633089600">- redhat: switch secureboot kernel image signing to release keys (Bruno Meneguele)
- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Fix RT check branch name (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- Revert "Merge: mt7921e: enable new Mediatek wireless hardware" (Bruno Meneguele) [2009501]
- megaraid_sas: fix concurrent access to ISR between IRQ polling and real interrupt (Tomas Henzl) [2009022]
- scsi: megaraid_sas: mq_poll support (Tomas Henzl) [2009022]
- [PATCH v2] scsi: qla2xxx: Suppress unnecessary log messages during login (Nilesh Javali) [1982186]
- scsi: qla2xxx: Fix excessive messages during device logout (Nilesh Javali) [1982186]
- PCI: pciehp: Ignore Link Down/Up caused by DPC (Myron Stowe) [1981741]
- arm64: kpti: Fix "kpti=off" when KASLR is enabled (Mark Salter) [1979731]
- arm64: Fix CONFIG_ARCH_RANDOM=n build (Mark Salter) [1979731]
- redhat/configs: aarch64: add CONFIG_ARCH_RANDOM (Mark Salter) [1979731]
- arm64: Implement archrandom.h for ARMv8.5-RNG (Mark Salter) [1979731]
- arm64: kconfig: Fix alignment of E0PD help text (Mark Salter) [1979731]
- arm64: Use register field helper in kaslr_requires_kpti() (Mark Salter) [1979731]
- arm64: Simplify early check for broken TX1 when KASLR is enabled (Mark Salter) [1979731]
- arm64: Use a variable to store non-global mappings decision (Mark Salter) [1979731]
- arm64: Don't use KPTI where we have E0PD (Mark Salter) [1979731]
- arm64: Factor out checks for KASLR in KPTI code into separate function (Mark Salter) [1979731]
- redhat/configs: Add CONFIG_ARM64_E0PD (Mark Salter) [1979731]
- arm64: Add initial support for E0PD (Mark Salter) [1979731]
- arm64: cpufeature: Export matrix and other features to userspace (Mark Salter) [1980098]
- arm64: docs: cpu-feature-registers: Document ID_AA64PFR1_EL1 (Mark Salter) [1980098]
- docs/arm64: cpu-feature-registers: Rewrite bitfields that don't follow [e, s] (Mark Salter) [1980098]
- docs/arm64: cpu-feature-registers: Documents missing visible fields (Mark Salter) [1980098]
- arm64: Introduce system_capabilities_finalized() marker (Mark Salter) [1980098]
- arm64: entry.S: Do not preempt from IRQ before all cpufeatures are enabled (Mark Salter) [1980098]
- docs/arm64: elf_hwcaps: Document HWCAP_SB (Mark Salter) [1980098]
- docs/arm64: elf_hwcaps: sort the HWCAP{, 2} documentation by ascending value (Mark Salter) [1980098]
- arm64: cpufeature: Treat ID_AA64ZFR0_EL1 as RAZ when SVE is not enabled (Mark Salter) [1980098]
- arm64: cpufeature: Effectively expose FRINT capability to userspace (Mark Salter) [1980098]
- arm64: cpufeature: Fix feature comparison for CTR_EL0.{CWG,ERG} (Mark Salter) [1980098]
- arm64: Expose FRINT capabilities to userspace (Mark Salter) [1980098]
- arm64: Expose ARMv8.5 CondM capability to userspace (Mark Salter) [1980098]
- docs: arm64: convert perf.txt to ReST format (Mark Salter) [1980098]
- docs: arm64: convert docs to ReST and rename to .rst (Mark Salter) [1980098]
- Documentation/arm64: HugeTLB page implementation (Mark Salter) [1980098]
- Documentation/arm64/sve: Couple of improvements and typos (Mark Salter) [1980098]
- arm64: cpufeature: Fix missing ZFR0 in __read_sysreg_by_encoding() (Mark Salter) [1980098]
- arm64: Expose SVE2 features for userspace (Mark Salter) [1980098]
- arm64: Advertise ARM64_HAS_DCPODP cpu feature (Mark Salter) [1980098]
- arm64: add CVADP support to the cache maintenance helper (Mark Salter) [1980098]
- arm64: Fix minor issues with the dcache_by_line_op macro (Mark Salter) [1980098]
- arm64: Expose DC CVADP to userspace (Mark Salter) [1980098]
- arm64: Handle trapped DC CVADP (Mark Salter) [1980098]
- arm64: HWCAP: encapsulate elf_hwcap (Mark Salter) [1980098]
- arm64: HWCAP: add support for AT_HWCAP2 (Mark Salter) [1980098]
- x86/MCE/AMD, EDAC/mce_amd: Add new SMCA bank types (Aristeu Rozanski) [1965331]
- x86/MCE/AMD, EDAC/mce_amd: Remove struct smca_hwid.xec_bitmap (Aristeu Rozanski) [1965331]
- EDAC, mce_amd: Print ExtErrorCode and description on a single line (Aristeu Rozanski) [1965331]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-347.el8]" date="1633176000">- PCI: Mark TI C667X to avoid bus reset (Alex Williamson) [1975768]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.el8]" date="1633348800">- drm/nouveau/fifo/ga102: initialise chid on return from channel creation (Ben Skeggs) [1997878]
- drm/nouveau/ga102-: support ttm buffer moves via copy engine (Ben Skeggs) [1997878]
- drm/nouveau/kms/tu102-: delay enabling cursor until after assign_windows (Ben Skeggs) [1997878]
- drm/nouveau/kms/nv50: workaround EFI GOP window channel format differences (Ben Skeggs) [1997878]
- drm/nouveau/disp: power down unused DP links during init (Ben Skeggs) [1997878]
- drm/nouveau: recognise GA107 (Ben Skeggs) [1997878]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.1.1.el8_5]" date="1635940800">- lib/timerqueue: Rely on rbtree semantics for next timer (Phil Auld) [2014677 2007099] {CVE-2021-20317}
- mm/hmm: make HMM_MIRROR an implicit option (Rafael Aquini) [2017519 1998534]
- mm/hmm: allow HMM_MIRROR on all architectures with MMU (Rafael Aquini) [2017519 1998534]
- mm: don't select MIGRATE_VMA_HELPER from HMM_MIRROR (Rafael Aquini) [2017519 1998534]
- mm: sort out the DEVICE_PRIVATE Kconfig mess (Rafael Aquini) [2017519 1998534]
- ceph: skip existing superblocks that are blocklisted or shut down when mounting (Jeffrey Layton) [2017071 2011462]
- redhat: switch release to zstream (Bruno Meneguele)</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.2.1.el8_5]" date="1636372800">- tipc: fix size validations for the MSG_CRYPTO type (Bruno Meneguele) [2020506 2020507] {CVE-2021-43267}
- net: Fix skb-&gt;csum update in inet_proto_csum_replace16(). (Balazs Nemeth) [2005981 1975193]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.3.1.el8_5]" date="1637064000">- net-sysfs: try not to restart the syscall if it will fail eventually (Antoine Tenart) [2021165 2016005]
- ovl: fix missing negative dentry check in ovl_rename() (Miklos Szeredi) [2016378 2010887 2013318] {CVE-2021-20321}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.4.1.el8_5]" date="1637668800">- [RHEL8.6 BZ 1849234] cifs: report error instead of invalid when revalidating a dentry fails (Ronnie Sahlberg) [2017177 1849234]
- kthread: Fix PF_KTHREAD vs to_kthread() race (Waiman Long) [2010333 2001497]
- sched/fair: Ignore percpu threads for imbalance pulls (Waiman Long) [2010333 2001497]
- kthread: Extract KTHREAD_IS_PER_CPU (Waiman Long) [2010333 2001497]
- sched: Optimize finish_lock_switch() (Waiman Long) [2010333 2001497]
- sched/hotplug: Ensure only per-cpu kthreads run during hotplug (Waiman Long) [2010333 2001497]
- sched: Fix balance_callback() (Waiman Long) [2010333 2001497]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.5.1.el8_5]" date="1638273600">- blk-mq: still set q-&gt;make_request_fn for blk-mq (Ming Lei) [2016384 1999728]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.6.1.el8_5]" date="1638878400">- x86/Kconfig: Do not enable AMD_MEM_ENCRYPT_ACTIVE_BY_DEFAULT automatically (Prarit Bhargava) [2024678 2021219]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.7.1.el8_5]" date="1638964800">- sched: Fix CPU hotplug / tighten is_per_cpu_kthread() (Waiman Long) [2026450 2024869]
- sched: Prepare to use balance_push in ttwu() (Waiman Long) [2026450 2024869]
- sched: Don't run cpu-online with balance_push() enabled (Waiman Long) [2026450 2024869]
- workqueue: Tag bound workers with KTHREAD_IS_PER_CPU (Waiman Long) [2026450 2024869]
- workqueue: Use cpu_possible_mask instead of cpu_active_mask to break affinity (Waiman Long) [2026450 2024869]
- sched: Fix hotplug vs CPU bandwidth control (Waiman Long) [2026450 2024869]
- workqueue: Manually break affinity on hotplug (Waiman Long) [2026450 2024869]
- sched/hotplug: Consolidate task migration on CPU unplug (Waiman Long) [2026450 2024869]
- sched/core: Wait for tasks being pushed away on hotplug (Waiman Long) [2026450 2024869]</changelog>
</package>
<package pkgid="feda7cad2dbfbb3914a8509944a4cc8e104321cabc8b85f132293bd309fd1425" name="polkit-debuginfo" arch="i686">
  <version epoch="0" ver="0.115" rel="13.el8_5.1"/>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.115-4" date="1534420800">- Spawned zombie subprocesses not reaped
- Resolves: rhbz#1616282</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.115-5" date="1544097600">- Fix of CVE-2018-19788, priv escalation with high UIDs
- Resolves: rhbz#1656378</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.115-6" date="1548072000">- Fix of CVE-2019-6133, PID reuse via slow fork
- Resolves: rhbz#1667778</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.115-7" date="1560427200">- pkttyagent: polkit-agent-helper-1 timeout leaves tty echo disabled
- Mitigation of regression caused by fix of CVE-2018-19788
- Resolves: rhbz#1693781
- Resolves: rhbz#1693814</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.115-8" date="1560427201">- Backport changing dependency to mozjs60
- Resolves: rhbz#1729416</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.115-9" date="1568116800">- Rebuild to reflect mozjs60 s390 abi change
- Related: rhbz#1746889</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.115-10" date="1572350400">- Fix of jasuthority memleak
- Resolves: rhbz#1745918</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.115-11" date="1572868800">- pkttyagent: resetting terminal erases rest of input line
- Resolves: rhbz#1757853</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.115-12" date="1621944000">- early disconnection from D-Bus results in privilege esc.
- Resolves: CVE-2021-3560</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.115-13.el8_5.1" date="1638532800">- pkexec: argv overflow results in local privilege esc.
- Resolves: CVE-2021-4034</changelog>
</package>
<package pkgid="f5f3e6f95ba3bbe935150e666d1ccde27c271820d30b7703b916ff9c8a703a67" name="polkit-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.115" rel="13.el8_5.1"/>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.115-4" date="1534420800">- Spawned zombie subprocesses not reaped
- Resolves: rhbz#1616282</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.115-5" date="1544097600">- Fix of CVE-2018-19788, priv escalation with high UIDs
- Resolves: rhbz#1656378</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.115-6" date="1548072000">- Fix of CVE-2019-6133, PID reuse via slow fork
- Resolves: rhbz#1667778</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.115-7" date="1560427200">- pkttyagent: polkit-agent-helper-1 timeout leaves tty echo disabled
- Mitigation of regression caused by fix of CVE-2018-19788
- Resolves: rhbz#1693781
- Resolves: rhbz#1693814</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.115-8" date="1560427201">- Backport changing dependency to mozjs60
- Resolves: rhbz#1729416</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.115-9" date="1568116800">- Rebuild to reflect mozjs60 s390 abi change
- Related: rhbz#1746889</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.115-10" date="1572350400">- Fix of jasuthority memleak
- Resolves: rhbz#1745918</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.115-11" date="1572868800">- pkttyagent: resetting terminal erases rest of input line
- Resolves: rhbz#1757853</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.115-12" date="1621944000">- early disconnection from D-Bus results in privilege esc.
- Resolves: CVE-2021-3560</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.115-13.el8_5.1" date="1638532800">- pkexec: argv overflow results in local privilege esc.
- Resolves: CVE-2021-4034</changelog>
</package>
<package pkgid="7ea6a7d0fd73e9b9c3104e52ae4aa73f4ecafec8396549abfaef9884fb3d377c" name="polkit-debuginfo" arch="i686">
  <version epoch="0" ver="0.115" rel="13.el8_5.2"/>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.115-6" date="1548072000">- Fix of CVE-2019-6133, PID reuse via slow fork
- Resolves: rhbz#1667778</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.115-7" date="1560427200">- pkttyagent: polkit-agent-helper-1 timeout leaves tty echo disabled
- Mitigation of regression caused by fix of CVE-2018-19788
- Resolves: rhbz#1693781
- Resolves: rhbz#1693814</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.115-8" date="1560427201">- Backport changing dependency to mozjs60
- Resolves: rhbz#1729416</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.115-9" date="1568116800">- Rebuild to reflect mozjs60 s390 abi change
- Related: rhbz#1746889</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.115-10" date="1572350400">- Fix of jasuthority memleak
- Resolves: rhbz#1745918</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.115-11" date="1572868800">- pkttyagent: resetting terminal erases rest of input line
- Resolves: rhbz#1757853</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.115-12" date="1621944000">- early disconnection from D-Bus results in privilege esc.
- Resolves: CVE-2021-3560</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.115-12.el8_5.1" date="1638532800">- pkexec: argv overflow results in local privilege esc.
- Resolves: CVE-2021-4034</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.115-12.el8_5.2" date="1644926400">- file descriptor exhaustion (GHSL-2021-077)
- Resolves: CVE-2021-4115</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.115-13.el8_5.2" date="1645012800">- necessary version bump due to build versioning
- Resolves: CVE-2021-4115</changelog>
</package>
<package pkgid="0da28c869d1b0145de0bcaa0fb4fc448e8bb01b287d89916d48cb5854eadd615" name="polkit-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.115" rel="13.el8_5.2"/>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.115-6" date="1548072000">- Fix of CVE-2019-6133, PID reuse via slow fork
- Resolves: rhbz#1667778</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.115-7" date="1560427200">- pkttyagent: polkit-agent-helper-1 timeout leaves tty echo disabled
- Mitigation of regression caused by fix of CVE-2018-19788
- Resolves: rhbz#1693781
- Resolves: rhbz#1693814</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.115-8" date="1560427201">- Backport changing dependency to mozjs60
- Resolves: rhbz#1729416</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.115-9" date="1568116800">- Rebuild to reflect mozjs60 s390 abi change
- Related: rhbz#1746889</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.115-10" date="1572350400">- Fix of jasuthority memleak
- Resolves: rhbz#1745918</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.115-11" date="1572868800">- pkttyagent: resetting terminal erases rest of input line
- Resolves: rhbz#1757853</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.115-12" date="1621944000">- early disconnection from D-Bus results in privilege esc.
- Resolves: CVE-2021-3560</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.115-12.el8_5.1" date="1638532800">- pkexec: argv overflow results in local privilege esc.
- Resolves: CVE-2021-4034</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.115-12.el8_5.2" date="1644926400">- file descriptor exhaustion (GHSL-2021-077)
- Resolves: CVE-2021-4115</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.115-13.el8_5.2" date="1645012800">- necessary version bump due to build versioning
- Resolves: CVE-2021-4115</changelog>
</package>
<package pkgid="06fa7d76397a8e3e329f316452d0e7d42fcde3d445e0a329b0de846c702c8616" name="polkit-debugsource" arch="i686">
  <version epoch="0" ver="0.115" rel="13.el8_5.1"/>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.115-4" date="1534420800">- Spawned zombie subprocesses not reaped
- Resolves: rhbz#1616282</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.115-5" date="1544097600">- Fix of CVE-2018-19788, priv escalation with high UIDs
- Resolves: rhbz#1656378</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.115-6" date="1548072000">- Fix of CVE-2019-6133, PID reuse via slow fork
- Resolves: rhbz#1667778</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.115-7" date="1560427200">- pkttyagent: polkit-agent-helper-1 timeout leaves tty echo disabled
- Mitigation of regression caused by fix of CVE-2018-19788
- Resolves: rhbz#1693781
- Resolves: rhbz#1693814</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.115-8" date="1560427201">- Backport changing dependency to mozjs60
- Resolves: rhbz#1729416</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.115-9" date="1568116800">- Rebuild to reflect mozjs60 s390 abi change
- Related: rhbz#1746889</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.115-10" date="1572350400">- Fix of jasuthority memleak
- Resolves: rhbz#1745918</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.115-11" date="1572868800">- pkttyagent: resetting terminal erases rest of input line
- Resolves: rhbz#1757853</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.115-12" date="1621944000">- early disconnection from D-Bus results in privilege esc.
- Resolves: CVE-2021-3560</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.115-13.el8_5.1" date="1638532800">- pkexec: argv overflow results in local privilege esc.
- Resolves: CVE-2021-4034</changelog>
</package>
<package pkgid="9c7326f922672b2c199d7b4f1b9a345a5a2c506d04cdeab9934b48b83b7a05ec" name="polkit-debugsource" arch="x86_64">
  <version epoch="0" ver="0.115" rel="13.el8_5.1"/>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.115-4" date="1534420800">- Spawned zombie subprocesses not reaped
- Resolves: rhbz#1616282</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.115-5" date="1544097600">- Fix of CVE-2018-19788, priv escalation with high UIDs
- Resolves: rhbz#1656378</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.115-6" date="1548072000">- Fix of CVE-2019-6133, PID reuse via slow fork
- Resolves: rhbz#1667778</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.115-7" date="1560427200">- pkttyagent: polkit-agent-helper-1 timeout leaves tty echo disabled
- Mitigation of regression caused by fix of CVE-2018-19788
- Resolves: rhbz#1693781
- Resolves: rhbz#1693814</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.115-8" date="1560427201">- Backport changing dependency to mozjs60
- Resolves: rhbz#1729416</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.115-9" date="1568116800">- Rebuild to reflect mozjs60 s390 abi change
- Related: rhbz#1746889</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.115-10" date="1572350400">- Fix of jasuthority memleak
- Resolves: rhbz#1745918</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.115-11" date="1572868800">- pkttyagent: resetting terminal erases rest of input line
- Resolves: rhbz#1757853</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.115-12" date="1621944000">- early disconnection from D-Bus results in privilege esc.
- Resolves: CVE-2021-3560</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.115-13.el8_5.1" date="1638532800">- pkexec: argv overflow results in local privilege esc.
- Resolves: CVE-2021-4034</changelog>
</package>
<package pkgid="a1bad3ab630ff7f0cf90b3770ff6c8de796ad5645c8b643faf120d9f1af08cd0" name="polkit-debugsource" arch="i686">
  <version epoch="0" ver="0.115" rel="13.el8_5.2"/>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.115-6" date="1548072000">- Fix of CVE-2019-6133, PID reuse via slow fork
- Resolves: rhbz#1667778</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.115-7" date="1560427200">- pkttyagent: polkit-agent-helper-1 timeout leaves tty echo disabled
- Mitigation of regression caused by fix of CVE-2018-19788
- Resolves: rhbz#1693781
- Resolves: rhbz#1693814</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.115-8" date="1560427201">- Backport changing dependency to mozjs60
- Resolves: rhbz#1729416</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.115-9" date="1568116800">- Rebuild to reflect mozjs60 s390 abi change
- Related: rhbz#1746889</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.115-10" date="1572350400">- Fix of jasuthority memleak
- Resolves: rhbz#1745918</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.115-11" date="1572868800">- pkttyagent: resetting terminal erases rest of input line
- Resolves: rhbz#1757853</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.115-12" date="1621944000">- early disconnection from D-Bus results in privilege esc.
- Resolves: CVE-2021-3560</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.115-12.el8_5.1" date="1638532800">- pkexec: argv overflow results in local privilege esc.
- Resolves: CVE-2021-4034</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.115-12.el8_5.2" date="1644926400">- file descriptor exhaustion (GHSL-2021-077)
- Resolves: CVE-2021-4115</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.115-13.el8_5.2" date="1645012800">- necessary version bump due to build versioning
- Resolves: CVE-2021-4115</changelog>
</package>
<package pkgid="9877f491270a1bf9e84dc10c71b516a7f099c97cc7ce18c0b00567ec28395812" name="polkit-debugsource" arch="x86_64">
  <version epoch="0" ver="0.115" rel="13.el8_5.2"/>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.115-6" date="1548072000">- Fix of CVE-2019-6133, PID reuse via slow fork
- Resolves: rhbz#1667778</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.115-7" date="1560427200">- pkttyagent: polkit-agent-helper-1 timeout leaves tty echo disabled
- Mitigation of regression caused by fix of CVE-2018-19788
- Resolves: rhbz#1693781
- Resolves: rhbz#1693814</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.115-8" date="1560427201">- Backport changing dependency to mozjs60
- Resolves: rhbz#1729416</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.115-9" date="1568116800">- Rebuild to reflect mozjs60 s390 abi change
- Related: rhbz#1746889</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.115-10" date="1572350400">- Fix of jasuthority memleak
- Resolves: rhbz#1745918</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.115-11" date="1572868800">- pkttyagent: resetting terminal erases rest of input line
- Resolves: rhbz#1757853</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.115-12" date="1621944000">- early disconnection from D-Bus results in privilege esc.
- Resolves: CVE-2021-3560</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.115-12.el8_5.1" date="1638532800">- pkexec: argv overflow results in local privilege esc.
- Resolves: CVE-2021-4034</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.115-12.el8_5.2" date="1644926400">- file descriptor exhaustion (GHSL-2021-077)
- Resolves: CVE-2021-4115</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.115-13.el8_5.2" date="1645012800">- necessary version bump due to build versioning
- Resolves: CVE-2021-4115</changelog>
</package>
<package pkgid="8f930a2b209b18fbeab6c4357abb814ba1617798380b471cbebf2dde11cb1c80" name="polkit-libs-debuginfo" arch="i686">
  <version epoch="0" ver="0.115" rel="13.el8_5.1"/>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.115-4" date="1534420800">- Spawned zombie subprocesses not reaped
- Resolves: rhbz#1616282</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.115-5" date="1544097600">- Fix of CVE-2018-19788, priv escalation with high UIDs
- Resolves: rhbz#1656378</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.115-6" date="1548072000">- Fix of CVE-2019-6133, PID reuse via slow fork
- Resolves: rhbz#1667778</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.115-7" date="1560427200">- pkttyagent: polkit-agent-helper-1 timeout leaves tty echo disabled
- Mitigation of regression caused by fix of CVE-2018-19788
- Resolves: rhbz#1693781
- Resolves: rhbz#1693814</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.115-8" date="1560427201">- Backport changing dependency to mozjs60
- Resolves: rhbz#1729416</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.115-9" date="1568116800">- Rebuild to reflect mozjs60 s390 abi change
- Related: rhbz#1746889</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.115-10" date="1572350400">- Fix of jasuthority memleak
- Resolves: rhbz#1745918</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.115-11" date="1572868800">- pkttyagent: resetting terminal erases rest of input line
- Resolves: rhbz#1757853</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.115-12" date="1621944000">- early disconnection from D-Bus results in privilege esc.
- Resolves: CVE-2021-3560</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.115-13.el8_5.1" date="1638532800">- pkexec: argv overflow results in local privilege esc.
- Resolves: CVE-2021-4034</changelog>
</package>
<package pkgid="597da73491cc9a76e92e9acac9813f3b29368ecf1380ca2a567ac7353176280a" name="polkit-libs-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.115" rel="13.el8_5.1"/>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.115-4" date="1534420800">- Spawned zombie subprocesses not reaped
- Resolves: rhbz#1616282</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.115-5" date="1544097600">- Fix of CVE-2018-19788, priv escalation with high UIDs
- Resolves: rhbz#1656378</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.115-6" date="1548072000">- Fix of CVE-2019-6133, PID reuse via slow fork
- Resolves: rhbz#1667778</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.115-7" date="1560427200">- pkttyagent: polkit-agent-helper-1 timeout leaves tty echo disabled
- Mitigation of regression caused by fix of CVE-2018-19788
- Resolves: rhbz#1693781
- Resolves: rhbz#1693814</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.115-8" date="1560427201">- Backport changing dependency to mozjs60
- Resolves: rhbz#1729416</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.115-9" date="1568116800">- Rebuild to reflect mozjs60 s390 abi change
- Related: rhbz#1746889</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.115-10" date="1572350400">- Fix of jasuthority memleak
- Resolves: rhbz#1745918</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.115-11" date="1572868800">- pkttyagent: resetting terminal erases rest of input line
- Resolves: rhbz#1757853</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.115-12" date="1621944000">- early disconnection from D-Bus results in privilege esc.
- Resolves: CVE-2021-3560</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.115-13.el8_5.1" date="1638532800">- pkexec: argv overflow results in local privilege esc.
- Resolves: CVE-2021-4034</changelog>
</package>
<package pkgid="63118ab4120daa61eb8e272af75e66e05969031284e3ec8227e9d4f5035ef55a" name="polkit-libs-debuginfo" arch="i686">
  <version epoch="0" ver="0.115" rel="13.el8_5.2"/>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.115-6" date="1548072000">- Fix of CVE-2019-6133, PID reuse via slow fork
- Resolves: rhbz#1667778</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.115-7" date="1560427200">- pkttyagent: polkit-agent-helper-1 timeout leaves tty echo disabled
- Mitigation of regression caused by fix of CVE-2018-19788
- Resolves: rhbz#1693781
- Resolves: rhbz#1693814</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.115-8" date="1560427201">- Backport changing dependency to mozjs60
- Resolves: rhbz#1729416</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.115-9" date="1568116800">- Rebuild to reflect mozjs60 s390 abi change
- Related: rhbz#1746889</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.115-10" date="1572350400">- Fix of jasuthority memleak
- Resolves: rhbz#1745918</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.115-11" date="1572868800">- pkttyagent: resetting terminal erases rest of input line
- Resolves: rhbz#1757853</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.115-12" date="1621944000">- early disconnection from D-Bus results in privilege esc.
- Resolves: CVE-2021-3560</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.115-12.el8_5.1" date="1638532800">- pkexec: argv overflow results in local privilege esc.
- Resolves: CVE-2021-4034</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.115-12.el8_5.2" date="1644926400">- file descriptor exhaustion (GHSL-2021-077)
- Resolves: CVE-2021-4115</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.115-13.el8_5.2" date="1645012800">- necessary version bump due to build versioning
- Resolves: CVE-2021-4115</changelog>
</package>
<package pkgid="5e4d058ae70f01fa14d9bd871c8940637b4074864eee8cae3d1faac7dd415fc9" name="polkit-libs-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.115" rel="13.el8_5.2"/>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.115-6" date="1548072000">- Fix of CVE-2019-6133, PID reuse via slow fork
- Resolves: rhbz#1667778</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.115-7" date="1560427200">- pkttyagent: polkit-agent-helper-1 timeout leaves tty echo disabled
- Mitigation of regression caused by fix of CVE-2018-19788
- Resolves: rhbz#1693781
- Resolves: rhbz#1693814</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.115-8" date="1560427201">- Backport changing dependency to mozjs60
- Resolves: rhbz#1729416</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.115-9" date="1568116800">- Rebuild to reflect mozjs60 s390 abi change
- Related: rhbz#1746889</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.115-10" date="1572350400">- Fix of jasuthority memleak
- Resolves: rhbz#1745918</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.115-11" date="1572868800">- pkttyagent: resetting terminal erases rest of input line
- Resolves: rhbz#1757853</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.115-12" date="1621944000">- early disconnection from D-Bus results in privilege esc.
- Resolves: CVE-2021-3560</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.115-12.el8_5.1" date="1638532800">- pkexec: argv overflow results in local privilege esc.
- Resolves: CVE-2021-4034</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.115-12.el8_5.2" date="1644926400">- file descriptor exhaustion (GHSL-2021-077)
- Resolves: CVE-2021-4115</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.115-13.el8_5.2" date="1645012800">- necessary version bump due to build versioning
- Resolves: CVE-2021-4115</changelog>
</package>
<package pkgid="73330752ae977d049c6f0dce7e15b78b817c265e9c6a47b403ea4aadee4bd627" name="python3-libipa_hbac-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="2.el8_5.1"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-5" date="1609156800">- Resolves: rhbz#1631410 - Can't login with smartcard with multiple certs having same ID value
- Resolves: rhbz#1884213 - [RFE] add offline_timeout_max config option to control offline interval backoff (additional patches)
- Resolves: rhbz#1893159 - Default debug level should report all errors / failures
- Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-6" date="1610971200">- Resolves: rhbz#1113639 - autofs: return a connection failure until maps have been fetched
- Resolves: rhbz#1915395 - Memory leak in the simple access provider
- Resolves: rhbz#1915319 - SSSD: SBUS: failures during servers startup
- Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication (additional patches)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-7" date="1611662400">- Resolves: rhbz#1920001 - Do not add '%' to group names already prefixed with '%' in IPA sudo rules
- Resolves: rhbz#1918433 - sssd unable to lookup certmap rules
- Resolves: rhbz#1917382 - [abrt] [faf] sssd: dp_client_handshake_timeout(): /usr/libexec/sssd/sssd_be killed by 11</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-8" date="1613131200">- Resolves: rhbz#1926622 - Add support to verify authentication indicators in pam_sss_gss
- Resolves: rhbz#1926454 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0.
- Resolves: rhbz#1893159 - Default debug level should report all errors / failures (additional patch)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.0-1" date="1620648000">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1930535 - [abrt] [faf] sssd: monitor_service_shutdown(): /usr/sbin/sssd killed by 11
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1945888 - Inconsistant debug level for connection logging
- Resolves: rhbz#1948657 - pam_sss_gss.so doesn't work with large kerberos tickets
- Resolves: rhbz#1949149 - [RFE] Poor man's backtrace
- Resolves: rhbz#1920500 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR
- Resolves: rhbz#1923964 - [RFE] SSSD Error Msg Improvement: write_krb5info_file failed, authentication might fail.
- Resolves: rhbz#1928648 - SSSD logs improvements: clarify which config option applies to each timeout in the logs
- Resolves: rhbz#1632159 - sssd-kcm starts successfully for non existent socket_path
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm
- Resolves: rhbz#1925505 - [RFE] improve the sssd refresh timers for SUDO queries
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1925561 - sssd-ldap(5) does not report how to disable the SUDO smart queries
- Resolves: rhbz#1925621 - document impact of indices and of scope on performance of LDAP queries
- Resolves: rhbz#1855320 - [RFE] RHEL8 sssd: inheritance of the case_sensitive parameter for subdomains.
- Resolves: rhbz#1925608 - [RFE] make 'random_offset' addon to 'offline_timeout' option configurable
- Resolves: rhbz#1447945 - man page / docs update required: if two certificate matching rules with the same priority match only one is used
- Resolves: rhbz#1703436 - sssd not thread-safe in innetgr()
- Resolves: rhbz#1713143 - SSSD does not translate the 2FA text labels("first factor" / "second factor") on GDM login and screensaver unlock screen
- Resolves: rhbz#1888977 - sss_override: Usage limitations clarification in man page
- Resolves: rhbz#1890177 - Clarify "single_prompt" option in "PROMPTING CONFIGURATION SECTION" section of sssd.conf man page
- Resolves: rhbz#1902280 - fix sss_cache to also reset cached timestamp
- Resolves: rhbz#1935683 - SSSD not detecting subdomain from AD forest (RHEL 8.3)
- Resolves: rhbz#1937919 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7
- Resolves: rhbz#1944665 - No gpo found and ad_gpo_implicit_deny set to True still permits user login
- Resolves: rhbz#1919942 - sss_override does not take precedence over override_homedir directive</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-1" date="1623153600">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1917444 - SSSD Error Msg Improvement: Server resolution failed: [2]: No such file or directory
- Resolves: rhbz#1917511 - SSSD Error Msg Improvement: Failed to resolve server 'server.example.com': Error reading file
- Resolves: rhbz#1917535 - sssd.conf man page: parameter dns_resolver_server_timeout and dns_resolver_op_timeout
- Resolves: rhbz#1940509 - [RFE] Health and Support Analyzer: Link frontend to backend requests
- Resolves: rhbz#1649464 - auto_private_groups not working as expected with posix ipa/ad trust
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1961215 - Invalid sssd-kcm return code if requested operation is not found
- Resolves: rhbz#1837090 - SSSD fails nss_getby_name for IPA user with SID if the user has user private group
- Resolves: rhbz#1879869 - sudo commands incorrectly exports the KRB5CCNAME environment variable
- Resolves: rhbz#1962550 - sss_pac_make_request fails on systems joined to Active Directory.
- Resolves: rhbz#1737489 - [RFE] SSSD should honor default Kerberos settings (keytab name) in /etc/krb5.conf</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-2" date="1624276800">- Resolves: rhbz#1974257 - 'debug_microseconds' config option is broken
- Resolves: rhbz#1936902 - SSSD Error Msg Improvement: Invalid argument
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm (additional patches and rebuild)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-1" date="1626091200">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1693379 - sssd_be and sss_cache too heavy on CPU
- Resolves: rhbz#1909373 - Missing search index for `originalADgidNumber`
- Resolves: rhbz#1954630 - [RFE] Improve debug messages by adding a unique tag for each request the backend is handling
- Resolves: rhbz#1936891 - SSSD Error Msg Improvement: Bad address
- Resolves: rhbz#1364596 - sssd still showing ipa user after removed from last group
- Resolves: rhbz#1979404 - Changes made to /etc/pam.d/sssd-shadowutils are overwritten back to default on sssd-common package upgrade</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2" date="1627905600">- Resolves: rhbz#1975169 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-8]
- Resolves: rhbz#1962042 - [sssd] RHEL 8.5 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.1" date="1634558400">- Resolves: rhbz#2014460 - tps tests fail with cross dependency on sssd debuginfo package: removal of 'sssd-libwbclient-debuginfo' is missing [rhel-8.5.0.z]</changelog>
</package>
<package pkgid="895da22b1aa316abbf2ef91ee7aa4fc5e7ff3192c49b3c7f5c12b6992bc99758" name="python3-libipa_hbac-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="2.el8_5.3"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-7" date="1611662400">- Resolves: rhbz#1920001 - Do not add '%' to group names already prefixed with '%' in IPA sudo rules
- Resolves: rhbz#1918433 - sssd unable to lookup certmap rules
- Resolves: rhbz#1917382 - [abrt] [faf] sssd: dp_client_handshake_timeout(): /usr/libexec/sssd/sssd_be killed by 11</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-8" date="1613131200">- Resolves: rhbz#1926622 - Add support to verify authentication indicators in pam_sss_gss
- Resolves: rhbz#1926454 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0.
- Resolves: rhbz#1893159 - Default debug level should report all errors / failures (additional patch)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.0-1" date="1620648000">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1930535 - [abrt] [faf] sssd: monitor_service_shutdown(): /usr/sbin/sssd killed by 11
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1945888 - Inconsistant debug level for connection logging
- Resolves: rhbz#1948657 - pam_sss_gss.so doesn't work with large kerberos tickets
- Resolves: rhbz#1949149 - [RFE] Poor man's backtrace
- Resolves: rhbz#1920500 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR
- Resolves: rhbz#1923964 - [RFE] SSSD Error Msg Improvement: write_krb5info_file failed, authentication might fail.
- Resolves: rhbz#1928648 - SSSD logs improvements: clarify which config option applies to each timeout in the logs
- Resolves: rhbz#1632159 - sssd-kcm starts successfully for non existent socket_path
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm
- Resolves: rhbz#1925505 - [RFE] improve the sssd refresh timers for SUDO queries
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1925561 - sssd-ldap(5) does not report how to disable the SUDO smart queries
- Resolves: rhbz#1925621 - document impact of indices and of scope on performance of LDAP queries
- Resolves: rhbz#1855320 - [RFE] RHEL8 sssd: inheritance of the case_sensitive parameter for subdomains.
- Resolves: rhbz#1925608 - [RFE] make 'random_offset' addon to 'offline_timeout' option configurable
- Resolves: rhbz#1447945 - man page / docs update required: if two certificate matching rules with the same priority match only one is used
- Resolves: rhbz#1703436 - sssd not thread-safe in innetgr()
- Resolves: rhbz#1713143 - SSSD does not translate the 2FA text labels("first factor" / "second factor") on GDM login and screensaver unlock screen
- Resolves: rhbz#1888977 - sss_override: Usage limitations clarification in man page
- Resolves: rhbz#1890177 - Clarify "single_prompt" option in "PROMPTING CONFIGURATION SECTION" section of sssd.conf man page
- Resolves: rhbz#1902280 - fix sss_cache to also reset cached timestamp
- Resolves: rhbz#1935683 - SSSD not detecting subdomain from AD forest (RHEL 8.3)
- Resolves: rhbz#1937919 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7
- Resolves: rhbz#1944665 - No gpo found and ad_gpo_implicit_deny set to True still permits user login
- Resolves: rhbz#1919942 - sss_override does not take precedence over override_homedir directive</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-1" date="1623153600">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1917444 - SSSD Error Msg Improvement: Server resolution failed: [2]: No such file or directory
- Resolves: rhbz#1917511 - SSSD Error Msg Improvement: Failed to resolve server 'server.example.com': Error reading file
- Resolves: rhbz#1917535 - sssd.conf man page: parameter dns_resolver_server_timeout and dns_resolver_op_timeout
- Resolves: rhbz#1940509 - [RFE] Health and Support Analyzer: Link frontend to backend requests
- Resolves: rhbz#1649464 - auto_private_groups not working as expected with posix ipa/ad trust
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1961215 - Invalid sssd-kcm return code if requested operation is not found
- Resolves: rhbz#1837090 - SSSD fails nss_getby_name for IPA user with SID if the user has user private group
- Resolves: rhbz#1879869 - sudo commands incorrectly exports the KRB5CCNAME environment variable
- Resolves: rhbz#1962550 - sss_pac_make_request fails on systems joined to Active Directory.
- Resolves: rhbz#1737489 - [RFE] SSSD should honor default Kerberos settings (keytab name) in /etc/krb5.conf</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-2" date="1624276800">- Resolves: rhbz#1974257 - 'debug_microseconds' config option is broken
- Resolves: rhbz#1936902 - SSSD Error Msg Improvement: Invalid argument
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm (additional patches and rebuild)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-1" date="1626091200">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1693379 - sssd_be and sss_cache too heavy on CPU
- Resolves: rhbz#1909373 - Missing search index for `originalADgidNumber`
- Resolves: rhbz#1954630 - [RFE] Improve debug messages by adding a unique tag for each request the backend is handling
- Resolves: rhbz#1936891 - SSSD Error Msg Improvement: Bad address
- Resolves: rhbz#1364596 - sssd still showing ipa user after removed from last group
- Resolves: rhbz#1979404 - Changes made to /etc/pam.d/sssd-shadowutils are overwritten back to default on sssd-common package upgrade</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2" date="1627905600">- Resolves: rhbz#1975169 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-8]
- Resolves: rhbz#1962042 - [sssd] RHEL 8.5 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.1" date="1634558400">- Resolves: rhbz#2014460 - tps tests fail with cross dependency on sssd debuginfo package: removal of 'sssd-libwbclient-debuginfo' is missing [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.2" date="1638187200">- Resolves: rhbz#2018440 - 2.5.x based SSSD adds more AD domains than it should based on the configuration file (not trusted and from a different forest) [rhel-8.5.0.z]
- Resolves: rhbz#2016923 - autofs lookups for unknown mounts are delayed for 50s [rhel-8.5.0.z]
- Resolves: rhbz#2021499 - Make backtrace less "chatty" (avoid duplicate backtraces) [rhel-8.5.0.z]
- Resolves: rhbz#2013379 - Lookup with fully-qualified name does not work with 'cache_first = True' [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.3" date="1638878400">- Resolves: rhbz#2028828 - pam responder does not call initgroups to refresh the user entry [rhel-8.5.0.z]</changelog>
</package>
<package pkgid="13cf25a4c5bdce4d166863da4d10f88e3e8ebd5e39387f3e44196c5c7a6e7e6d" name="python3-libipa_hbac-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="2.el8_5.4"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-8" date="1613131200">- Resolves: rhbz#1926622 - Add support to verify authentication indicators in pam_sss_gss
- Resolves: rhbz#1926454 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0.
- Resolves: rhbz#1893159 - Default debug level should report all errors / failures (additional patch)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.0-1" date="1620648000">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1930535 - [abrt] [faf] sssd: monitor_service_shutdown(): /usr/sbin/sssd killed by 11
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1945888 - Inconsistant debug level for connection logging
- Resolves: rhbz#1948657 - pam_sss_gss.so doesn't work with large kerberos tickets
- Resolves: rhbz#1949149 - [RFE] Poor man's backtrace
- Resolves: rhbz#1920500 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR
- Resolves: rhbz#1923964 - [RFE] SSSD Error Msg Improvement: write_krb5info_file failed, authentication might fail.
- Resolves: rhbz#1928648 - SSSD logs improvements: clarify which config option applies to each timeout in the logs
- Resolves: rhbz#1632159 - sssd-kcm starts successfully for non existent socket_path
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm
- Resolves: rhbz#1925505 - [RFE] improve the sssd refresh timers for SUDO queries
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1925561 - sssd-ldap(5) does not report how to disable the SUDO smart queries
- Resolves: rhbz#1925621 - document impact of indices and of scope on performance of LDAP queries
- Resolves: rhbz#1855320 - [RFE] RHEL8 sssd: inheritance of the case_sensitive parameter for subdomains.
- Resolves: rhbz#1925608 - [RFE] make 'random_offset' addon to 'offline_timeout' option configurable
- Resolves: rhbz#1447945 - man page / docs update required: if two certificate matching rules with the same priority match only one is used
- Resolves: rhbz#1703436 - sssd not thread-safe in innetgr()
- Resolves: rhbz#1713143 - SSSD does not translate the 2FA text labels("first factor" / "second factor") on GDM login and screensaver unlock screen
- Resolves: rhbz#1888977 - sss_override: Usage limitations clarification in man page
- Resolves: rhbz#1890177 - Clarify "single_prompt" option in "PROMPTING CONFIGURATION SECTION" section of sssd.conf man page
- Resolves: rhbz#1902280 - fix sss_cache to also reset cached timestamp
- Resolves: rhbz#1935683 - SSSD not detecting subdomain from AD forest (RHEL 8.3)
- Resolves: rhbz#1937919 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7
- Resolves: rhbz#1944665 - No gpo found and ad_gpo_implicit_deny set to True still permits user login
- Resolves: rhbz#1919942 - sss_override does not take precedence over override_homedir directive</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-1" date="1623153600">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1917444 - SSSD Error Msg Improvement: Server resolution failed: [2]: No such file or directory
- Resolves: rhbz#1917511 - SSSD Error Msg Improvement: Failed to resolve server 'server.example.com': Error reading file
- Resolves: rhbz#1917535 - sssd.conf man page: parameter dns_resolver_server_timeout and dns_resolver_op_timeout
- Resolves: rhbz#1940509 - [RFE] Health and Support Analyzer: Link frontend to backend requests
- Resolves: rhbz#1649464 - auto_private_groups not working as expected with posix ipa/ad trust
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1961215 - Invalid sssd-kcm return code if requested operation is not found
- Resolves: rhbz#1837090 - SSSD fails nss_getby_name for IPA user with SID if the user has user private group
- Resolves: rhbz#1879869 - sudo commands incorrectly exports the KRB5CCNAME environment variable
- Resolves: rhbz#1962550 - sss_pac_make_request fails on systems joined to Active Directory.
- Resolves: rhbz#1737489 - [RFE] SSSD should honor default Kerberos settings (keytab name) in /etc/krb5.conf</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-2" date="1624276800">- Resolves: rhbz#1974257 - 'debug_microseconds' config option is broken
- Resolves: rhbz#1936902 - SSSD Error Msg Improvement: Invalid argument
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm (additional patches and rebuild)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-1" date="1626091200">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1693379 - sssd_be and sss_cache too heavy on CPU
- Resolves: rhbz#1909373 - Missing search index for `originalADgidNumber`
- Resolves: rhbz#1954630 - [RFE] Improve debug messages by adding a unique tag for each request the backend is handling
- Resolves: rhbz#1936891 - SSSD Error Msg Improvement: Bad address
- Resolves: rhbz#1364596 - sssd still showing ipa user after removed from last group
- Resolves: rhbz#1979404 - Changes made to /etc/pam.d/sssd-shadowutils are overwritten back to default on sssd-common package upgrade</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2" date="1627905600">- Resolves: rhbz#1975169 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-8]
- Resolves: rhbz#1962042 - [sssd] RHEL 8.5 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.1" date="1634558400">- Resolves: rhbz#2014460 - tps tests fail with cross dependency on sssd debuginfo package: removal of 'sssd-libwbclient-debuginfo' is missing [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.2" date="1638187200">- Resolves: rhbz#2018440 - 2.5.x based SSSD adds more AD domains than it should based on the configuration file (not trusted and from a different forest) [rhel-8.5.0.z]
- Resolves: rhbz#2016923 - autofs lookups for unknown mounts are delayed for 50s [rhel-8.5.0.z]
- Resolves: rhbz#2021499 - Make backtrace less "chatty" (avoid duplicate backtraces) [rhel-8.5.0.z]
- Resolves: rhbz#2013379 - Lookup with fully-qualified name does not work with 'cache_first = True' [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.3" date="1638878400">- Resolves: rhbz#2028828 - pam responder does not call initgroups to refresh the user entry [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.4" date="1642420800">- Resolves: rhbz#2030651 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries [rhel-8.5.0.z]
- Resolves: rhbz#2035285 - AD Domain in the AD Forest Missing after sssd latest update [rhel-8.5.0.z]</changelog>
</package>
<package pkgid="08b4585d9e55f610a6765d0cfa7b77badcd410e14ea8dd84faeda6f50e6651e1" name="python3-libsss_nss_idmap-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="2.el8_5.1"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-5" date="1609156800">- Resolves: rhbz#1631410 - Can't login with smartcard with multiple certs having same ID value
- Resolves: rhbz#1884213 - [RFE] add offline_timeout_max config option to control offline interval backoff (additional patches)
- Resolves: rhbz#1893159 - Default debug level should report all errors / failures
- Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-6" date="1610971200">- Resolves: rhbz#1113639 - autofs: return a connection failure until maps have been fetched
- Resolves: rhbz#1915395 - Memory leak in the simple access provider
- Resolves: rhbz#1915319 - SSSD: SBUS: failures during servers startup
- Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication (additional patches)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-7" date="1611662400">- Resolves: rhbz#1920001 - Do not add '%' to group names already prefixed with '%' in IPA sudo rules
- Resolves: rhbz#1918433 - sssd unable to lookup certmap rules
- Resolves: rhbz#1917382 - [abrt] [faf] sssd: dp_client_handshake_timeout(): /usr/libexec/sssd/sssd_be killed by 11</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-8" date="1613131200">- Resolves: rhbz#1926622 - Add support to verify authentication indicators in pam_sss_gss
- Resolves: rhbz#1926454 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0.
- Resolves: rhbz#1893159 - Default debug level should report all errors / failures (additional patch)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.0-1" date="1620648000">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1930535 - [abrt] [faf] sssd: monitor_service_shutdown(): /usr/sbin/sssd killed by 11
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1945888 - Inconsistant debug level for connection logging
- Resolves: rhbz#1948657 - pam_sss_gss.so doesn't work with large kerberos tickets
- Resolves: rhbz#1949149 - [RFE] Poor man's backtrace
- Resolves: rhbz#1920500 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR
- Resolves: rhbz#1923964 - [RFE] SSSD Error Msg Improvement: write_krb5info_file failed, authentication might fail.
- Resolves: rhbz#1928648 - SSSD logs improvements: clarify which config option applies to each timeout in the logs
- Resolves: rhbz#1632159 - sssd-kcm starts successfully for non existent socket_path
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm
- Resolves: rhbz#1925505 - [RFE] improve the sssd refresh timers for SUDO queries
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1925561 - sssd-ldap(5) does not report how to disable the SUDO smart queries
- Resolves: rhbz#1925621 - document impact of indices and of scope on performance of LDAP queries
- Resolves: rhbz#1855320 - [RFE] RHEL8 sssd: inheritance of the case_sensitive parameter for subdomains.
- Resolves: rhbz#1925608 - [RFE] make 'random_offset' addon to 'offline_timeout' option configurable
- Resolves: rhbz#1447945 - man page / docs update required: if two certificate matching rules with the same priority match only one is used
- Resolves: rhbz#1703436 - sssd not thread-safe in innetgr()
- Resolves: rhbz#1713143 - SSSD does not translate the 2FA text labels("first factor" / "second factor") on GDM login and screensaver unlock screen
- Resolves: rhbz#1888977 - sss_override: Usage limitations clarification in man page
- Resolves: rhbz#1890177 - Clarify "single_prompt" option in "PROMPTING CONFIGURATION SECTION" section of sssd.conf man page
- Resolves: rhbz#1902280 - fix sss_cache to also reset cached timestamp
- Resolves: rhbz#1935683 - SSSD not detecting subdomain from AD forest (RHEL 8.3)
- Resolves: rhbz#1937919 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7
- Resolves: rhbz#1944665 - No gpo found and ad_gpo_implicit_deny set to True still permits user login
- Resolves: rhbz#1919942 - sss_override does not take precedence over override_homedir directive</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-1" date="1623153600">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1917444 - SSSD Error Msg Improvement: Server resolution failed: [2]: No such file or directory
- Resolves: rhbz#1917511 - SSSD Error Msg Improvement: Failed to resolve server 'server.example.com': Error reading file
- Resolves: rhbz#1917535 - sssd.conf man page: parameter dns_resolver_server_timeout and dns_resolver_op_timeout
- Resolves: rhbz#1940509 - [RFE] Health and Support Analyzer: Link frontend to backend requests
- Resolves: rhbz#1649464 - auto_private_groups not working as expected with posix ipa/ad trust
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1961215 - Invalid sssd-kcm return code if requested operation is not found
- Resolves: rhbz#1837090 - SSSD fails nss_getby_name for IPA user with SID if the user has user private group
- Resolves: rhbz#1879869 - sudo commands incorrectly exports the KRB5CCNAME environment variable
- Resolves: rhbz#1962550 - sss_pac_make_request fails on systems joined to Active Directory.
- Resolves: rhbz#1737489 - [RFE] SSSD should honor default Kerberos settings (keytab name) in /etc/krb5.conf</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-2" date="1624276800">- Resolves: rhbz#1974257 - 'debug_microseconds' config option is broken
- Resolves: rhbz#1936902 - SSSD Error Msg Improvement: Invalid argument
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm (additional patches and rebuild)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-1" date="1626091200">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1693379 - sssd_be and sss_cache too heavy on CPU
- Resolves: rhbz#1909373 - Missing search index for `originalADgidNumber`
- Resolves: rhbz#1954630 - [RFE] Improve debug messages by adding a unique tag for each request the backend is handling
- Resolves: rhbz#1936891 - SSSD Error Msg Improvement: Bad address
- Resolves: rhbz#1364596 - sssd still showing ipa user after removed from last group
- Resolves: rhbz#1979404 - Changes made to /etc/pam.d/sssd-shadowutils are overwritten back to default on sssd-common package upgrade</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2" date="1627905600">- Resolves: rhbz#1975169 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-8]
- Resolves: rhbz#1962042 - [sssd] RHEL 8.5 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.1" date="1634558400">- Resolves: rhbz#2014460 - tps tests fail with cross dependency on sssd debuginfo package: removal of 'sssd-libwbclient-debuginfo' is missing [rhel-8.5.0.z]</changelog>
</package>
<package pkgid="726226762aa1f946a0a458c8ea07076c08a7ae3ea23f5e41a1a6469035763b39" name="python3-libsss_nss_idmap-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="2.el8_5.3"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-7" date="1611662400">- Resolves: rhbz#1920001 - Do not add '%' to group names already prefixed with '%' in IPA sudo rules
- Resolves: rhbz#1918433 - sssd unable to lookup certmap rules
- Resolves: rhbz#1917382 - [abrt] [faf] sssd: dp_client_handshake_timeout(): /usr/libexec/sssd/sssd_be killed by 11</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-8" date="1613131200">- Resolves: rhbz#1926622 - Add support to verify authentication indicators in pam_sss_gss
- Resolves: rhbz#1926454 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0.
- Resolves: rhbz#1893159 - Default debug level should report all errors / failures (additional patch)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.0-1" date="1620648000">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1930535 - [abrt] [faf] sssd: monitor_service_shutdown(): /usr/sbin/sssd killed by 11
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1945888 - Inconsistant debug level for connection logging
- Resolves: rhbz#1948657 - pam_sss_gss.so doesn't work with large kerberos tickets
- Resolves: rhbz#1949149 - [RFE] Poor man's backtrace
- Resolves: rhbz#1920500 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR
- Resolves: rhbz#1923964 - [RFE] SSSD Error Msg Improvement: write_krb5info_file failed, authentication might fail.
- Resolves: rhbz#1928648 - SSSD logs improvements: clarify which config option applies to each timeout in the logs
- Resolves: rhbz#1632159 - sssd-kcm starts successfully for non existent socket_path
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm
- Resolves: rhbz#1925505 - [RFE] improve the sssd refresh timers for SUDO queries
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1925561 - sssd-ldap(5) does not report how to disable the SUDO smart queries
- Resolves: rhbz#1925621 - document impact of indices and of scope on performance of LDAP queries
- Resolves: rhbz#1855320 - [RFE] RHEL8 sssd: inheritance of the case_sensitive parameter for subdomains.
- Resolves: rhbz#1925608 - [RFE] make 'random_offset' addon to 'offline_timeout' option configurable
- Resolves: rhbz#1447945 - man page / docs update required: if two certificate matching rules with the same priority match only one is used
- Resolves: rhbz#1703436 - sssd not thread-safe in innetgr()
- Resolves: rhbz#1713143 - SSSD does not translate the 2FA text labels("first factor" / "second factor") on GDM login and screensaver unlock screen
- Resolves: rhbz#1888977 - sss_override: Usage limitations clarification in man page
- Resolves: rhbz#1890177 - Clarify "single_prompt" option in "PROMPTING CONFIGURATION SECTION" section of sssd.conf man page
- Resolves: rhbz#1902280 - fix sss_cache to also reset cached timestamp
- Resolves: rhbz#1935683 - SSSD not detecting subdomain from AD forest (RHEL 8.3)
- Resolves: rhbz#1937919 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7
- Resolves: rhbz#1944665 - No gpo found and ad_gpo_implicit_deny set to True still permits user login
- Resolves: rhbz#1919942 - sss_override does not take precedence over override_homedir directive</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-1" date="1623153600">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1917444 - SSSD Error Msg Improvement: Server resolution failed: [2]: No such file or directory
- Resolves: rhbz#1917511 - SSSD Error Msg Improvement: Failed to resolve server 'server.example.com': Error reading file
- Resolves: rhbz#1917535 - sssd.conf man page: parameter dns_resolver_server_timeout and dns_resolver_op_timeout
- Resolves: rhbz#1940509 - [RFE] Health and Support Analyzer: Link frontend to backend requests
- Resolves: rhbz#1649464 - auto_private_groups not working as expected with posix ipa/ad trust
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1961215 - Invalid sssd-kcm return code if requested operation is not found
- Resolves: rhbz#1837090 - SSSD fails nss_getby_name for IPA user with SID if the user has user private group
- Resolves: rhbz#1879869 - sudo commands incorrectly exports the KRB5CCNAME environment variable
- Resolves: rhbz#1962550 - sss_pac_make_request fails on systems joined to Active Directory.
- Resolves: rhbz#1737489 - [RFE] SSSD should honor default Kerberos settings (keytab name) in /etc/krb5.conf</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-2" date="1624276800">- Resolves: rhbz#1974257 - 'debug_microseconds' config option is broken
- Resolves: rhbz#1936902 - SSSD Error Msg Improvement: Invalid argument
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm (additional patches and rebuild)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-1" date="1626091200">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1693379 - sssd_be and sss_cache too heavy on CPU
- Resolves: rhbz#1909373 - Missing search index for `originalADgidNumber`
- Resolves: rhbz#1954630 - [RFE] Improve debug messages by adding a unique tag for each request the backend is handling
- Resolves: rhbz#1936891 - SSSD Error Msg Improvement: Bad address
- Resolves: rhbz#1364596 - sssd still showing ipa user after removed from last group
- Resolves: rhbz#1979404 - Changes made to /etc/pam.d/sssd-shadowutils are overwritten back to default on sssd-common package upgrade</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2" date="1627905600">- Resolves: rhbz#1975169 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-8]
- Resolves: rhbz#1962042 - [sssd] RHEL 8.5 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.1" date="1634558400">- Resolves: rhbz#2014460 - tps tests fail with cross dependency on sssd debuginfo package: removal of 'sssd-libwbclient-debuginfo' is missing [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.2" date="1638187200">- Resolves: rhbz#2018440 - 2.5.x based SSSD adds more AD domains than it should based on the configuration file (not trusted and from a different forest) [rhel-8.5.0.z]
- Resolves: rhbz#2016923 - autofs lookups for unknown mounts are delayed for 50s [rhel-8.5.0.z]
- Resolves: rhbz#2021499 - Make backtrace less "chatty" (avoid duplicate backtraces) [rhel-8.5.0.z]
- Resolves: rhbz#2013379 - Lookup with fully-qualified name does not work with 'cache_first = True' [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.3" date="1638878400">- Resolves: rhbz#2028828 - pam responder does not call initgroups to refresh the user entry [rhel-8.5.0.z]</changelog>
</package>
<package pkgid="58e9f55b07fe2fffde9efb7e5bdcd8f94fb5deedf2e36f2cb408e5637a5b3dab" name="python3-libsss_nss_idmap-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="2.el8_5.4"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-8" date="1613131200">- Resolves: rhbz#1926622 - Add support to verify authentication indicators in pam_sss_gss
- Resolves: rhbz#1926454 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0.
- Resolves: rhbz#1893159 - Default debug level should report all errors / failures (additional patch)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.0-1" date="1620648000">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1930535 - [abrt] [faf] sssd: monitor_service_shutdown(): /usr/sbin/sssd killed by 11
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1945888 - Inconsistant debug level for connection logging
- Resolves: rhbz#1948657 - pam_sss_gss.so doesn't work with large kerberos tickets
- Resolves: rhbz#1949149 - [RFE] Poor man's backtrace
- Resolves: rhbz#1920500 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR
- Resolves: rhbz#1923964 - [RFE] SSSD Error Msg Improvement: write_krb5info_file failed, authentication might fail.
- Resolves: rhbz#1928648 - SSSD logs improvements: clarify which config option applies to each timeout in the logs
- Resolves: rhbz#1632159 - sssd-kcm starts successfully for non existent socket_path
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm
- Resolves: rhbz#1925505 - [RFE] improve the sssd refresh timers for SUDO queries
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1925561 - sssd-ldap(5) does not report how to disable the SUDO smart queries
- Resolves: rhbz#1925621 - document impact of indices and of scope on performance of LDAP queries
- Resolves: rhbz#1855320 - [RFE] RHEL8 sssd: inheritance of the case_sensitive parameter for subdomains.
- Resolves: rhbz#1925608 - [RFE] make 'random_offset' addon to 'offline_timeout' option configurable
- Resolves: rhbz#1447945 - man page / docs update required: if two certificate matching rules with the same priority match only one is used
- Resolves: rhbz#1703436 - sssd not thread-safe in innetgr()
- Resolves: rhbz#1713143 - SSSD does not translate the 2FA text labels("first factor" / "second factor") on GDM login and screensaver unlock screen
- Resolves: rhbz#1888977 - sss_override: Usage limitations clarification in man page
- Resolves: rhbz#1890177 - Clarify "single_prompt" option in "PROMPTING CONFIGURATION SECTION" section of sssd.conf man page
- Resolves: rhbz#1902280 - fix sss_cache to also reset cached timestamp
- Resolves: rhbz#1935683 - SSSD not detecting subdomain from AD forest (RHEL 8.3)
- Resolves: rhbz#1937919 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7
- Resolves: rhbz#1944665 - No gpo found and ad_gpo_implicit_deny set to True still permits user login
- Resolves: rhbz#1919942 - sss_override does not take precedence over override_homedir directive</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-1" date="1623153600">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1917444 - SSSD Error Msg Improvement: Server resolution failed: [2]: No such file or directory
- Resolves: rhbz#1917511 - SSSD Error Msg Improvement: Failed to resolve server 'server.example.com': Error reading file
- Resolves: rhbz#1917535 - sssd.conf man page: parameter dns_resolver_server_timeout and dns_resolver_op_timeout
- Resolves: rhbz#1940509 - [RFE] Health and Support Analyzer: Link frontend to backend requests
- Resolves: rhbz#1649464 - auto_private_groups not working as expected with posix ipa/ad trust
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1961215 - Invalid sssd-kcm return code if requested operation is not found
- Resolves: rhbz#1837090 - SSSD fails nss_getby_name for IPA user with SID if the user has user private group
- Resolves: rhbz#1879869 - sudo commands incorrectly exports the KRB5CCNAME environment variable
- Resolves: rhbz#1962550 - sss_pac_make_request fails on systems joined to Active Directory.
- Resolves: rhbz#1737489 - [RFE] SSSD should honor default Kerberos settings (keytab name) in /etc/krb5.conf</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-2" date="1624276800">- Resolves: rhbz#1974257 - 'debug_microseconds' config option is broken
- Resolves: rhbz#1936902 - SSSD Error Msg Improvement: Invalid argument
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm (additional patches and rebuild)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-1" date="1626091200">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1693379 - sssd_be and sss_cache too heavy on CPU
- Resolves: rhbz#1909373 - Missing search index for `originalADgidNumber`
- Resolves: rhbz#1954630 - [RFE] Improve debug messages by adding a unique tag for each request the backend is handling
- Resolves: rhbz#1936891 - SSSD Error Msg Improvement: Bad address
- Resolves: rhbz#1364596 - sssd still showing ipa user after removed from last group
- Resolves: rhbz#1979404 - Changes made to /etc/pam.d/sssd-shadowutils are overwritten back to default on sssd-common package upgrade</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2" date="1627905600">- Resolves: rhbz#1975169 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-8]
- Resolves: rhbz#1962042 - [sssd] RHEL 8.5 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.1" date="1634558400">- Resolves: rhbz#2014460 - tps tests fail with cross dependency on sssd debuginfo package: removal of 'sssd-libwbclient-debuginfo' is missing [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.2" date="1638187200">- Resolves: rhbz#2018440 - 2.5.x based SSSD adds more AD domains than it should based on the configuration file (not trusted and from a different forest) [rhel-8.5.0.z]
- Resolves: rhbz#2016923 - autofs lookups for unknown mounts are delayed for 50s [rhel-8.5.0.z]
- Resolves: rhbz#2021499 - Make backtrace less "chatty" (avoid duplicate backtraces) [rhel-8.5.0.z]
- Resolves: rhbz#2013379 - Lookup with fully-qualified name does not work with 'cache_first = True' [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.3" date="1638878400">- Resolves: rhbz#2028828 - pam responder does not call initgroups to refresh the user entry [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.4" date="1642420800">- Resolves: rhbz#2030651 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries [rhel-8.5.0.z]
- Resolves: rhbz#2035285 - AD Domain in the AD Forest Missing after sssd latest update [rhel-8.5.0.z]</changelog>
</package>
<package pkgid="a2f1c497977c5aa2f4e624d9b99a6b32a94b1d32b31c4f896f905bdac242ba49" name="python3-libxml2-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.9.7" rel="12.el8_5"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.9.7-3" date="1518004800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.9.7-4" date="1519473600">- Rebuild with new LDFLAGS from redhat-rpm-config</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.9.7-5" date="1533297600">- Fix some crashes under Python 3
- Conditionalize the python2 subpackage</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.7-6" date="1571918400">- Fix CVE-2018-9251 (#1565322)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.7-7" date="1571918401">- Fix CVE-2018-14404 (#1595989)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.7-8" date="1579521600">- Fix CVE-2019-19956 (#1793001)
- Fix CVE-2020-7595 (#1799786)
- Fix CVE-2019-20388 (#1810058)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.7-9" date="1603108800">- Fix CVE-2020-24977 (#1878252)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.7-10" date="1620388800">- Fix CVE-2021-3516 (#1956976)
- Fix CVE-2021-3517 (#1957001)
- Fix CVE-2021-3518 (#1957028)
- Fix CVE-2021-3537 (#1957284)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.7-11" date="1621425600">- Fix CVE-2021-3541 (#1958783)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.7-12" date="1645704000">- Fix CVE-2022-23308 (#2057663)</changelog>
</package>
<package pkgid="5f5817148b4afc0a65249cf16b2b869d07dad7cf16ca3828453a85fff6e25865" name="python3-perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="348.12.2.el8_5"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.4.1.el8_5]" date="1637668800">- [RHEL8.6 BZ 1849234] cifs: report error instead of invalid when revalidating a dentry fails (Ronnie Sahlberg) [2017177 1849234]
- kthread: Fix PF_KTHREAD vs to_kthread() race (Waiman Long) [2010333 2001497]
- sched/fair: Ignore percpu threads for imbalance pulls (Waiman Long) [2010333 2001497]
- kthread: Extract KTHREAD_IS_PER_CPU (Waiman Long) [2010333 2001497]
- sched: Optimize finish_lock_switch() (Waiman Long) [2010333 2001497]
- sched/hotplug: Ensure only per-cpu kthreads run during hotplug (Waiman Long) [2010333 2001497]
- sched: Fix balance_callback() (Waiman Long) [2010333 2001497]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.5.1.el8_5]" date="1638273600">- blk-mq: still set q-&gt;make_request_fn for blk-mq (Ming Lei) [2016384 1999728]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.6.1.el8_5]" date="1638878400">- x86/Kconfig: Do not enable AMD_MEM_ENCRYPT_ACTIVE_BY_DEFAULT automatically (Prarit Bhargava) [2024678 2021219]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.7.1.el8_5]" date="1638964800">- sched: Fix CPU hotplug / tighten is_per_cpu_kthread() (Waiman Long) [2026450 2024869]
- sched: Prepare to use balance_push in ttwu() (Waiman Long) [2026450 2024869]
- sched: Don't run cpu-online with balance_push() enabled (Waiman Long) [2026450 2024869]
- workqueue: Tag bound workers with KTHREAD_IS_PER_CPU (Waiman Long) [2026450 2024869]
- workqueue: Use cpu_possible_mask instead of cpu_active_mask to break affinity (Waiman Long) [2026450 2024869]
- sched: Fix hotplug vs CPU bandwidth control (Waiman Long) [2026450 2024869]
- workqueue: Manually break affinity on hotplug (Waiman Long) [2026450 2024869]
- sched/hotplug: Consolidate task migration on CPU unplug (Waiman Long) [2026450 2024869]
- sched/core: Wait for tasks being pushed away on hotplug (Waiman Long) [2026450 2024869]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.8.1.el8_5]" date="1639483200">- ice: Fix VF true promiscuous mode (Jonathan Toppins) [2026698 1970643]
- ice: Remove toggling of antispoof for VF trusted promiscuous mode (Jonathan Toppins) [2026698 1970643]
- ice: Fix replacing VF hardware MAC to existing MAC filter (Jonathan Toppins) [2026698 1970643]
- ice: Fix not stopping Tx queues for VFs (Jonathan Toppins) [2026698 1970643]
- ice: Fix race conditions between virtchnl handling and VF ndo ops (Jonathan Toppins) [2026698 1970643]
- net/netif_receive_skb_core: Use migrate_disable() (Luis Claudio R. Goncalves) [2027689 2024168]
- crypto: jitter - consider 32 LSB for APT (Herbert Xu) [2029365 1994390]
- xfs: fix I_DONTCACHE (Carlos Maiolino) [2028534 2024969]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.9.1.el8_5]" date="1640001600">- ixgbe: Revert "bpf, devmap: Move drop error path to devmap for XDP_REDIRECT" (Ken Cox) [2029845 2024240]
- i40e: Revert "bpf, devmap: Move drop error path to devmap for XDP_REDIRECT" (Stefan Assmann) [2029845 2024225]
- rcu/nocb: Perform deferred wake up before last idle's need_resched() check (Waiman Long) [2029449 2008340]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.10.1.el8_5]" date="1640779200">- selftests: add a test case for mirred egress to ingress (Xin Long) [2024411 1983894]
- net: sched: act_mirred: drop dst for the direction from egress to ingress (Xin Long) [2024411 1983894]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.11.1.el8_5]" date="1641297600">- blk-mq: avoid to iterate over stale request (Ming Lei) [2034396 1997338]
- rcu: Tighten rcu_advance_cbs_nowake() checks (Daniel Vacek) [2032579 2013408]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.12.1.el8_5]" date="1641988800">- tcp: don't free a FIN sk_buff in tcp_remove_empty_skb() (Guillaume Nault) [2021574 2016210]
- kernel.spec: Add support to use vmlinux.h (Jiri Olsa) [2031053 1989087]
- spec: Add vmlinux.h to kernel-devel package (Jiri Olsa) [2031053 1989087]
- x86/mce: Avoid infinite loop for copy from user recovery (Prarit Bhargava) [2008789 1999550]
- x86/mce: Rename kill_it to kill_current_task (Prarit Bhargava) [2008789 1999550]
- x86/mce: Recover from poison found while copying from user space (Prarit Bhargava) [2008789 1999550]
- x86/mce: Delay clearing IA32_MCG_STATUS to the end of do_machine_check() (Prarit Bhargava) [2008789 1999550]
- x86/mce: Send #MC singal from task work (Prarit Bhargava) [2008789 1999550]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-348.12.2.el8_5]" date="1642420800">- vfs: Out-of-bounds write of heap buffer in fs_context.c (Frantisek Hrbata) [2040585 2040586] {CVE-2022-0185}
- xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Bruno Meneguele) [2034864 2034865] {CVE-2021-4155}</changelog>
</package>
<package pkgid="65f372200603128c2753532571a822ea8833bc9b0b31ad903f3fb9667ad7fbc0" name="python3-perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="348.2.1.el8_5"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-341.el8]" date="1631275200">- mptcp: Only send extra TCP acks in eligible socket states (Paolo Abeni) [1997178]
- mptcp: fix possible divide by zero (Paolo Abeni) [1997178]
- mptcp: drop tx skb cache (Paolo Abeni) [1997178]
- mptcp: fix memory leak on address flush (Paolo Abeni) [1997178]
- ice: Only lock to update netdev dev_addr (Michal Schmidt) [1995868]
- ice: restart periodic outputs around time changes (Ken Cox) [1992750]
- ice: Fix perout start time rounding (Ken Cox) [1992750]
- net/sched: ets: fix crash when flipping from 'strict' to 'quantum' (Davide Caratti) [1981184]
- ovl: prevent private clone if bind mount is not allowed (Miklos Szeredi) [1993131] {CVE-2021-3732}
- gfs2: Don't call dlm after protocol is unmounted (Bob Peterson) [1997193]
- gfs2: don't stop reads while withdraw in progress (Bob Peterson) [1997193]
- gfs2: Mark journal inodes as "don't cache" (Bob Peterson) [1997193]
- bpf: bpftool: Add -fno-asynchronous-unwind-tables to BPF Clang invocation (Yauheni Kaliuta) [1997124]
- perf/x86/intel: Apply mid ACK for small core (Michael Petlan) [1838573]
- perf/x86/intel/lbr: Zero the xstate buffer on allocation (Michael Petlan) [1838573]
- perf: Fix task context PMU for Hetero (Michael Petlan) [1838573]
- perf/x86/intel: Fix fixed counter check warning for some Alder Lake (Michael Petlan) [1838573]
- perf/x86/lbr: Remove cpuc-&gt;lbr_xsave allocation from atomic context (Michael Petlan) [1838573]
- x86/fpu/xstate: Fix an xstate size check warning with architectural LBRs (Michael Petlan) [1838573]
- perf/x86/rapl: Add support for Intel Alder Lake (Michael Petlan) [1838573]
- perf/x86/cstate: Add Alder Lake CPU support (Michael Petlan) [1838573]
- perf/x86/msr: Add Alder Lake CPU support (Michael Petlan) [1838573]
- perf/x86/intel/uncore: Add Alder Lake support (Michael Petlan) [1838573]
- perf: Extend PERF_TYPE_HARDWARE and PERF_TYPE_HW_CACHE (Michael Petlan) [1838573]
- perf/x86/intel: Add Alder Lake Hybrid support (Michael Petlan) [1838573]
- perf/x86: Support filter_match callback (Michael Petlan) [1838573]
- perf/x86/intel: Add attr_update for Hybrid PMUs (Michael Petlan) [1838573]
- perf/x86: Add structures for the attributes of Hybrid PMUs (Michael Petlan) [1838573]
- perf/x86: Register hybrid PMUs (Michael Petlan) [1838573]
- perf/x86: Factor out x86_pmu_show_pmu_cap (Michael Petlan) [1838573]
- perf/x86: Remove temporary pmu assignment in event_init (Michael Petlan) [1838573]
- perf/x86/intel: Factor out intel_pmu_check_extra_regs (Michael Petlan) [1838573]
- perf/x86/intel: Factor out intel_pmu_check_event_constraints (Michael Petlan) [1838573]
- perf/x86/intel: Factor out intel_pmu_check_num_counters (Michael Petlan) [1838573]
- perf/x86: Hybrid PMU support for extra_regs (Michael Petlan) [1838573]
- perf/x86: Hybrid PMU support for event constraints (Michael Petlan) [1838573]
- perf/x86: Hybrid PMU support for hardware cache event (Michael Petlan) [1838573]
- perf/x86: Hybrid PMU support for unconstrained (Michael Petlan) [1838573]
- perf/x86: Hybrid PMU support for counters (Michael Petlan) [1838573]
- perf/x86: Hybrid PMU support for intel_ctrl (Michael Petlan) [1838573]
- perf/x86/intel: Hybrid PMU support for perf capabilities (Michael Petlan) [1838573]
- perf/x86: Track pmu in per-CPU cpu_hw_events (Michael Petlan) [1838573]
- perf/x86/intel/lbr: Support XSAVES for arch LBR read (Michael Petlan) [1838573]
- perf/x86/intel/lbr: Support XSAVES/XRSTORS for LBR context switch (Michael Petlan) [1838573]
- x86/fpu/xstate: Add helpers for LBR dynamic supervisor feature (Michael Petlan) [1838573]
- x86/fpu/xstate: Support dynamic supervisor feature for LBR (Michael Petlan) [1838573]
- x86/fpu: Use proper mask to replace full instruction mask (Michael Petlan) [1838573]
- x86/cpu: Add helper function to get the type of the current hybrid CPU (Michael Petlan) [1838573]
- x86/cpufeatures: Enumerate Intel Hybrid Technology feature bit (Michael Petlan) [1838573]
- HID: make arrays usage and value to be the same (Benjamin Tissoires) [1974942]
- ACPI: PM: s2idle: Invert Microsoft UUID entry and exit (David Arcari) [1960440]
- platform/x86: amd-pmc: Fix undefined reference to __udivdi3 (David Arcari) [1960440]
- platform/x86: amd-pmc: Fix missing unlock on error in amd_pmc_send_cmd() (David Arcari) [1960440]
- platform/x86: amd-pmc: Use return code on suspend (David Arcari) [1960440]
- platform/x86: amd-pmc: Add new acpi id for future PMC controllers (David Arcari) [1960440]
- platform/x86: amd-pmc: Add support for ACPI ID AMDI0006 (David Arcari) [1960440]
- platform/x86: amd-pmc: Add support for logging s0ix counters (David Arcari) [1960440]
- platform/x86: amd-pmc: Add support for logging SMU metrics (David Arcari) [1960440]
- platform/x86: amd-pmc: call dump registers only once (David Arcari) [1960440]
- platform/x86: amd-pmc: Fix SMU firmware reporting mechanism (David Arcari) [1960440]
- platform/x86: amd-pmc: Fix command completion code (David Arcari) [1960440]
- usb: pci-quirks: disable D3cold on xhci suspend for s2idle on AMD Renoir (David Arcari) [1960440]
- ACPI: PM: Only mark EC GPE for wakeup on Intel systems (David Arcari) [1960440]
- ACPI: PM: Adjust behavior for field problems on AMD systems (David Arcari) [1960440]
- ACPI: PM: s2idle: Add support for new Microsoft UUID (David Arcari) [1960440]
- ACPI: PM: s2idle: Add support for multiple func mask (David Arcari) [1960440]
- ACPI: PM: s2idle: Refactor common code (David Arcari) [1960440]
- ACPI: PM: s2idle: Use correct revision id (David Arcari) [1960440]
- ACPI: PM: s2idle: Add missing LPS0 functions for AMD (David Arcari) [1960440]
- lockd: Fix invalid lockowner cast after vfs_test_lock (Benjamin Coddington) [1986138]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-342.el8]" date="1631620800">- selftest: netfilter: add test case for unreplied tcp connections (Florian Westphal) [1991523]
- netfilter: conntrack: do not renew entry stuck in tcp SYN_SENT state (Florian Westphal) [1991523]
- net/sched: store the last executed chain also for clsact egress (Davide Caratti) [1980537]
- ice: fix Tx queue iteration for Tx timestamp enablement (Ken Cox) [1999743]
- perf evsel: Add missing cloning of evsel-&gt;use_config_name (Michael Petlan) [1838635]
- perf Documentation: Document intel-hybrid support (Michael Petlan) [1838635]
- perf tests: Skip 'perf stat metrics (shadow stat) test' for hybrid (Michael Petlan) [1838635]
- perf tests: Support 'Convert perf time to TSC' test for hybrid (Michael Petlan) [1838635]
- perf tests: Support 'Session topology' test for hybrid (Michael Petlan) [1838635]
- perf tests: Support 'Parse and process metrics' test for hybrid (Michael Petlan) [1838635]
- perf tests: Support 'Track with sched_switch' test for hybrid (Michael Petlan) [1838635]
- perf tests: Skip 'Setup struct perf_event_attr' test for hybrid (Michael Petlan) [1838635]
- perf tests: Add hybrid cases for 'Roundtrip evsel-&gt;name' test (Michael Petlan) [1838635]
- perf tests: Add hybrid cases for 'Parse event definition strings' test (Michael Petlan) [1838635]
- perf record: Uniquify hybrid event name (Michael Petlan) [1838635]
- perf stat: Warn group events from different hybrid PMU (Michael Petlan) [1838635]
- perf stat: Filter out unmatched aggregation for hybrid event (Michael Petlan) [1838635]
- perf stat: Add default hybrid events (Michael Petlan) [1838635]
- perf record: Create two hybrid 'cycles' events by default (Michael Petlan) [1838635]
- perf parse-events: Support event inside hybrid pmu (Michael Petlan) [1838635]
- perf parse-events: Compare with hybrid pmu name (Michael Petlan) [1838635]
- perf parse-events: Create two hybrid raw events (Michael Petlan) [1838635]
- perf parse-events: Create two hybrid cache events (Michael Petlan) [1838635]
- perf parse-events: Create two hybrid hardware events (Michael Petlan) [1838635]
- perf stat: Uniquify hybrid event name (Michael Petlan) [1838635]
- perf pmu: Add hybrid helper functions (Michael Petlan) [1838635]
- perf pmu: Save detected hybrid pmus to a global pmu list (Michael Petlan) [1838635]
- perf pmu: Save pmu name (Michael Petlan) [1838635]
- perf pmu: Simplify arguments of __perf_pmu__new_alias (Michael Petlan) [1838635]
- perf jevents: Support unit value "cpu_core" and "cpu_atom" (Michael Petlan) [1838635]
- tools headers uapi: Update tools's copy of linux/perf_event.h (Michael Petlan) [1838635]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-343.el8]" date="1631793600">- rcu: Avoid unneeded function call in rcu_read_unlock() (Waiman Long) [1997500]
- mt76: connac: do not schedule mac_work if the device is not running (Íñigo Huguet) [1956419 1972045]
- mt7921e: enable module in config (Íñigo Huguet) [1956419 1972045]
- Revert tools/power/cpupower: Read energy_perf_bias from sysfs (Steve Best) [1999926]
- libnvdimm/namespace: Differentiate between probe mapping and runtime mapping (Jeff Moyer) [1795719]
- libnvdimm/pfn_dev: Don't clear device memmap area during generic namespace probe (Jeff Moyer) [1795719]
- perf/x86/intel/uncore: Clean up error handling path of iio mapping (Michael Petlan) [1837330]
- perf/x86/intel/uncore: Fix for iio mapping on Skylake Server (Michael Petlan) [1837330]
- perf/x86/intel/uncore: Generic support for the MMIO type of uncore blocks (Michael Petlan) [1837330]
- perf/x86/intel/uncore: Generic support for the PCI type of uncore blocks (Michael Petlan) [1837330]
- perf/x86/intel/uncore: Rename uncore_notifier to uncore_pci_sub_notifier (Michael Petlan) [1837330]
- perf/x86/intel/uncore: Generic support for the MSR type of uncore blocks (Michael Petlan) [1837330]
- perf/x86/intel/uncore: Parse uncore discovery tables (Michael Petlan) [1837330]
- perf/x86/intel/uncore: Expose an Uncore unit to IIO PMON mapping (Michael Petlan) [1837330]
- perf/x86/intel/uncore: Wrap the max dies calculation into an accessor (Michael Petlan) [1837330]
- perf/x86/intel/uncore: Expose an Uncore unit to PMON mapping (Michael Petlan) [1837330]
- perf/x86/intel/uncore: Validate MMIO address before accessing (Michael Petlan) [1837330]
- perf/x86/intel/uncore: Record the size of mapped area (Michael Petlan) [1837330]
- perf/x86/intel/uncore: Fix oops when counting IMC uncore events on some TGL (Michael Petlan) [1837330]
- crypto: qat - remove unused macro in FW loader (Vladis Dronov) [1920086]
- crypto: qat - check return code of qat_hal_rd_rel_reg() (Vladis Dronov) [1920086]
- crypto: qat - report an error if MMP file size is too large (Vladis Dronov) [1920086]
- crypto: qat - check MMP size before writing to the SRAM (Vladis Dronov) [1920086]
- crypto: qat - return error when failing to map FW (Vladis Dronov) [1920086]
- crypto: qat - enable detection of accelerators hang (Vladis Dronov) [1920086]
- crypto: qat - Fix a double free in adf_create_ring (Vladis Dronov) [1920086]
- crypto: qat - fix error path in adf_isr_resource_alloc() (Vladis Dronov) [1920086]
- crypto: qat - ADF_STATUS_PF_RUNNING should be set after adf_dev_init (Vladis Dronov) [1920086]
- crypto: qat - don't release uninitialized resources (Vladis Dronov) [1920086]
- crypto: qat - fix use of 'dma_map_single' (Vladis Dronov) [1920086]
- crypto: qat - fix unmap invalid dma address (Vladis Dronov) [1920086]
- crypto: qat - fix spelling mistake: "messge" -&gt; "message" (Vladis Dronov) [1920086]
- crypto: qat - reduce size of mapped region (Vladis Dronov) [1920086]
- crypto: qat - change format string and cast ring size (Vladis Dronov) [1920086]
- crypto: qat - fix potential spectre issue (Vladis Dronov) [1920086]
- crypto: qat - configure arbiter mapping based on engines enabled (Vladis Dronov) [1920086]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-344.el8]" date="1632139200">- perf/x86/intel: Fix PEBS-via-PT reload base value for Extended PEBS (Michael Petlan) [1998051]
- perf/x86/intel/uncore: Fix Add BW copypasta (Michael Petlan) [1998051]
- perf/x86/intel/uncore: Add BW counters for GT, IA and IO breakdown (Michael Petlan) [1998051]
- Revert "ice: Add initial support framework for LAG" (Michal Schmidt) [1999016]
- net: re-initialize slow_gro flag at gro_list_prepare time (Paolo Abeni) [2002367]
- cxgb4: dont touch blocked freelist bitmap after free (Rahul Lakkireddy) [1998148]
- cxgb4vf: configure ports accessible by the VF (Rahul Lakkireddy) [1961329]
- scsi: lpfc: Fix memory leaks in error paths while issuing ELS RDF/SCR request (Dick Kennedy) [1976332]
- scsi: lpfc: Keep NDLP reference until after freeing the IOCB after ELS handling (Dick Kennedy) [1976332]
- scsi: lpfc: Move initialization of phba-&gt;poll_list earlier to avoid crash (Dick Kennedy) [1976332]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-345.el8]" date="1632398400">- e1000e: Do not take care about recovery NVM checksum (Ken Cox) [1984558]
- qrtr: disable CONFIG_QRTR for non x86_64 archs (Íñigo Huguet) [1999642]
- ceph: fix possible null-pointer dereference in ceph_mdsmap_decode() (Jeff Layton) [1989999]
- ceph: fix dereference of null pointer cf (Jeff Layton) [1989999]
- ceph: correctly handle releasing an embedded cap flush (Jeff Layton) [1989999]
- ceph: take snap_empty_lock atomically with snaprealm refcount change (Jeff Layton) [1989999]
- ceph: don't WARN if we're still opening a session to an MDS (Jeff Layton) [1989999]
- rbd: don't hold lock_rwsem while running_list is being drained (Jeff Layton) [1989999]
- rbd: always kick acquire on "acquired" and "released" notifications (Jeff Layton) [1989999]
- ceph: take reference to req-&gt;r_parent at point of assignment (Jeff Layton) [1989999]
- ceph: eliminate ceph_async_iput() (Jeff Layton) [1989999]
- ceph: don't take s_mutex in ceph_flush_snaps (Jeff Layton) [1989999]
- ceph: don't take s_mutex in try_flush_caps (Jeff Layton) [1989999]
- ceph: don't take s_mutex or snap_rwsem in ceph_check_caps (Jeff Layton) [1989999]
- ceph: eliminate session-&gt;s_gen_ttl_lock (Jeff Layton) [1989999]
- ceph: allow ceph_put_mds_session to take NULL or ERR_PTR (Jeff Layton) [1989999]
- ceph: clean up locking annotation for ceph_get_snap_realm and __lookup_snap_realm (Jeff Layton) [1989999]
- ceph: add some lockdep assertions around snaprealm handling (Jeff Layton) [1989999]
- ceph: decoding error in ceph_update_snap_realm should return -EIO (Jeff Layton) [1989999]
- ceph: add IO size metrics support (Jeff Layton) [1989999]
- ceph: update and rename __update_latency helper to __update_stdev (Jeff Layton) [1989999]
- ceph: simplify the metrics struct (Jeff Layton) [1989999]
- libceph: fix doc warnings in cls_lock_client.c (Jeff Layton) [1989999]
- libceph: remove unnecessary ret variable in ceph_auth_init() (Jeff Layton) [1989999]
- libceph: kill ceph_none_authorizer::reply_buf (Jeff Layton) [1989999]
- ceph: make ceph_queue_cap_snap static (Jeff Layton) [1989999]
- ceph: remove bogus checks and WARN_ONs from ceph_set_page_dirty (Jeff Layton) [1989999]
- libceph: set global_id as soon as we get an auth ticket (Jeff Layton) [1989999]
- libceph: don't pass result into ac-&gt;ops-&gt;handle_reply() (Jeff Layton) [1989999]
- ceph: fix error handling in ceph_atomic_open and ceph_lookup (Jeff Layton) [1989999]
- ceph: must hold snap_rwsem when filling inode for async create (Jeff Layton) [1989999]
- libceph: Fix spelling mistakes (Jeff Layton) [1989999]
- libceph: don't set global_id until we get an auth ticket (Jeff Layton) [1989999]
- libceph: bump CephXAuthenticate encoding version (Jeff Layton) [1989999]
- ceph: don't allow access to MDS-private inodes (Jeff Layton) [1989999]
- ceph: fix up some bare fetches of i_size (Jeff Layton) [1989999]
- ceph: support getting ceph.dir.rsnaps vxattr (Jeff Layton) [1989999]
- ceph: drop pinned_page parameter from ceph_get_caps (Jeff Layton) [1989999]
- ceph: fix inode leak on getattr error in __fh_to_dentry (Jeff Layton) [1989999]
- ceph: only check pool permissions for regular files (Jeff Layton) [1989999]
- ceph: send opened files/pinned caps/opened inodes metrics to MDS daemon (Jeff Layton) [1989999]
- ceph: avoid counting the same request twice or more (Jeff Layton) [1989999]
- ceph: rename the metric helpers (Jeff Layton) [1989999]
- ceph: fix kerneldoc copypasta over ceph_start_io_direct (Jeff Layton) [1989999]
- ceph: don't use d_add in ceph_handle_snapdir (Jeff Layton) [1989999]
- ceph: don't clobber i_snap_caps on non-I_NEW inode (Jeff Layton) [1989999]
- ceph: fix fall-through warnings for Clang (Jeff Layton) [1989999]
- net: ceph: Fix a typo in osdmap.c (Jeff Layton) [1989999]
- ceph: don't allow type or device number to change on non-I_NEW inodes (Jeff Layton) [1989999]
- ceph: defer flushing the capsnap if the Fb is used (Jeff Layton) [1989999]
- ceph: allow queueing cap/snap handling after putting cap references (Jeff Layton) [1989999]
- ceph: clean up inode work queueing (Jeff Layton) [1989999]
- ceph: fix flush_snap logic after putting caps (Jeff Layton) [1989999]
- libceph: fix "Boolean result is used in bitwise operation" warning (Jeff Layton) [1989999]
- new helper: inode_wrong_type() (Jeff Layton) [1989999]
- kabi: Adding symbol single_release (fs/seq_file.c) (Čestmír Kalina) [1945486]
- kabi: Adding symbol single_open (fs/seq_file.c) (Čestmír Kalina) [1945486]
- kabi: Adding symbol seq_read (fs/seq_file.c) (Čestmír Kalina) [1945486]
- kabi: Adding symbol seq_printf (fs/seq_file.c) (Čestmír Kalina) [1945486]
- kabi: Adding symbol seq_lseek (fs/seq_file.c) (Čestmír Kalina) [1945486]
- kabi: Adding symbol unregister_chrdev_region (fs/char_dev.c) (Čestmír Kalina) [1945486]
- kabi: Adding symbol cdev_init (fs/char_dev.c) (Čestmír Kalina) [1945486]
- kabi: Adding symbol cdev_del (fs/char_dev.c) (Čestmír Kalina) [1945486]
- kabi: Adding symbol cdev_alloc (fs/char_dev.c) (Čestmír Kalina) [1945486]
- kabi: Adding symbol cdev_add (fs/char_dev.c) (Čestmír Kalina) [1945486]
- kabi: Adding symbol alloc_chrdev_region (fs/char_dev.c) (Čestmír Kalina) [1945486]
- kabi: Adding symbol pcie_capability_read_word (drivers/pci/access.c) (Čestmír Kalina) [1945485]
- kabi: Adding symbol pcie_capability_read_dword (drivers/pci/access.c) (Čestmír Kalina) [1945485]
- kabi: Adding symbol pcie_capability_clear_and_set_word (drivers/pci/access.c) (Čestmír Kalina) [1945485]
- kabi: Adding symbol pci_write_config_dword (drivers/pci/access.c) (Čestmír Kalina) [1945485]
- kabi: Adding symbol pci_write_config_byte (drivers/pci/access.c) (Čestmír Kalina) [1945485]
- kabi: Adding symbol pci_set_power_state (drivers/pci/pci.c) (Čestmír Kalina) [1945485]
- kabi: Adding symbol pci_read_config_dword (drivers/pci/access.c) (Čestmír Kalina) [1945485]
- kabi: Adding symbol pci_read_config_byte (drivers/pci/access.c) (Čestmír Kalina) [1945485]
- kabi: Adding symbol pci_irq_vector (drivers/pci/msi.c) (Čestmír Kalina) [1945485]
- kabi: Adding symbol pci_get_device (drivers/pci/search.c) (Čestmír Kalina) [1945485]
- kabi: Adding symbol pci_free_irq_vectors (drivers/pci/msi.c) (Čestmír Kalina) [1945485]
- kabi: Adding symbol pci_alloc_irq_vectors_affinity (drivers/pci/msi.c) (Čestmír Kalina) [1945485]
- kabi: Adding symbol kexec_crash_loaded (kernel/kexec_core.c) (Čestmír Kalina) [1945491]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-346.el8]" date="1633089600">- redhat: switch secureboot kernel image signing to release keys (Bruno Meneguele)
- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Fix RT check branch name (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- Revert "Merge: mt7921e: enable new Mediatek wireless hardware" (Bruno Meneguele) [2009501]
- megaraid_sas: fix concurrent access to ISR between IRQ polling and real interrupt (Tomas Henzl) [2009022]
- scsi: megaraid_sas: mq_poll support (Tomas Henzl) [2009022]
- [PATCH v2] scsi: qla2xxx: Suppress unnecessary log messages during login (Nilesh Javali) [1982186]
- scsi: qla2xxx: Fix excessive messages during device logout (Nilesh Javali) [1982186]
- PCI: pciehp: Ignore Link Down/Up caused by DPC (Myron Stowe) [1981741]
- arm64: kpti: Fix "kpti=off" when KASLR is enabled (Mark Salter) [1979731]
- arm64: Fix CONFIG_ARCH_RANDOM=n build (Mark Salter) [1979731]
- redhat/configs: aarch64: add CONFIG_ARCH_RANDOM (Mark Salter) [1979731]
- arm64: Implement archrandom.h for ARMv8.5-RNG (Mark Salter) [1979731]
- arm64: kconfig: Fix alignment of E0PD help text (Mark Salter) [1979731]
- arm64: Use register field helper in kaslr_requires_kpti() (Mark Salter) [1979731]
- arm64: Simplify early check for broken TX1 when KASLR is enabled (Mark Salter) [1979731]
- arm64: Use a variable to store non-global mappings decision (Mark Salter) [1979731]
- arm64: Don't use KPTI where we have E0PD (Mark Salter) [1979731]
- arm64: Factor out checks for KASLR in KPTI code into separate function (Mark Salter) [1979731]
- redhat/configs: Add CONFIG_ARM64_E0PD (Mark Salter) [1979731]
- arm64: Add initial support for E0PD (Mark Salter) [1979731]
- arm64: cpufeature: Export matrix and other features to userspace (Mark Salter) [1980098]
- arm64: docs: cpu-feature-registers: Document ID_AA64PFR1_EL1 (Mark Salter) [1980098]
- docs/arm64: cpu-feature-registers: Rewrite bitfields that don't follow [e, s] (Mark Salter) [1980098]
- docs/arm64: cpu-feature-registers: Documents missing visible fields (Mark Salter) [1980098]
- arm64: Introduce system_capabilities_finalized() marker (Mark Salter) [1980098]
- arm64: entry.S: Do not preempt from IRQ before all cpufeatures are enabled (Mark Salter) [1980098]
- docs/arm64: elf_hwcaps: Document HWCAP_SB (Mark Salter) [1980098]
- docs/arm64: elf_hwcaps: sort the HWCAP{, 2} documentation by ascending value (Mark Salter) [1980098]
- arm64: cpufeature: Treat ID_AA64ZFR0_EL1 as RAZ when SVE is not enabled (Mark Salter) [1980098]
- arm64: cpufeature: Effectively expose FRINT capability to userspace (Mark Salter) [1980098]
- arm64: cpufeature: Fix feature comparison for CTR_EL0.{CWG,ERG} (Mark Salter) [1980098]
- arm64: Expose FRINT capabilities to userspace (Mark Salter) [1980098]
- arm64: Expose ARMv8.5 CondM capability to userspace (Mark Salter) [1980098]
- docs: arm64: convert perf.txt to ReST format (Mark Salter) [1980098]
- docs: arm64: convert docs to ReST and rename to .rst (Mark Salter) [1980098]
- Documentation/arm64: HugeTLB page implementation (Mark Salter) [1980098]
- Documentation/arm64/sve: Couple of improvements and typos (Mark Salter) [1980098]
- arm64: cpufeature: Fix missing ZFR0 in __read_sysreg_by_encoding() (Mark Salter) [1980098]
- arm64: Expose SVE2 features for userspace (Mark Salter) [1980098]
- arm64: Advertise ARM64_HAS_DCPODP cpu feature (Mark Salter) [1980098]
- arm64: add CVADP support to the cache maintenance helper (Mark Salter) [1980098]
- arm64: Fix minor issues with the dcache_by_line_op macro (Mark Salter) [1980098]
- arm64: Expose DC CVADP to userspace (Mark Salter) [1980098]
- arm64: Handle trapped DC CVADP (Mark Salter) [1980098]
- arm64: HWCAP: encapsulate elf_hwcap (Mark Salter) [1980098]
- arm64: HWCAP: add support for AT_HWCAP2 (Mark Salter) [1980098]
- x86/MCE/AMD, EDAC/mce_amd: Add new SMCA bank types (Aristeu Rozanski) [1965331]
- x86/MCE/AMD, EDAC/mce_amd: Remove struct smca_hwid.xec_bitmap (Aristeu Rozanski) [1965331]
- EDAC, mce_amd: Print ExtErrorCode and description on a single line (Aristeu Rozanski) [1965331]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-347.el8]" date="1633176000">- PCI: Mark TI C667X to avoid bus reset (Alex Williamson) [1975768]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.el8]" date="1633348800">- drm/nouveau/fifo/ga102: initialise chid on return from channel creation (Ben Skeggs) [1997878]
- drm/nouveau/ga102-: support ttm buffer moves via copy engine (Ben Skeggs) [1997878]
- drm/nouveau/kms/tu102-: delay enabling cursor until after assign_windows (Ben Skeggs) [1997878]
- drm/nouveau/kms/nv50: workaround EFI GOP window channel format differences (Ben Skeggs) [1997878]
- drm/nouveau/disp: power down unused DP links during init (Ben Skeggs) [1997878]
- drm/nouveau: recognise GA107 (Ben Skeggs) [1997878]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.1.1.el8_5]" date="1635940800">- lib/timerqueue: Rely on rbtree semantics for next timer (Phil Auld) [2014677 2007099] {CVE-2021-20317}
- mm/hmm: make HMM_MIRROR an implicit option (Rafael Aquini) [2017519 1998534]
- mm/hmm: allow HMM_MIRROR on all architectures with MMU (Rafael Aquini) [2017519 1998534]
- mm: don't select MIGRATE_VMA_HELPER from HMM_MIRROR (Rafael Aquini) [2017519 1998534]
- mm: sort out the DEVICE_PRIVATE Kconfig mess (Rafael Aquini) [2017519 1998534]
- ceph: skip existing superblocks that are blocklisted or shut down when mounting (Jeffrey Layton) [2017071 2011462]
- redhat: switch release to zstream (Bruno Meneguele)</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.2.1.el8_5]" date="1636372800">- tipc: fix size validations for the MSG_CRYPTO type (Bruno Meneguele) [2020506 2020507] {CVE-2021-43267}
- net: Fix skb-&gt;csum update in inet_proto_csum_replace16(). (Balazs Nemeth) [2005981 1975193]</changelog>
</package>
<package pkgid="633ef58f562308294fb4f504e25385abb4c57c3082ec0cbd9204d55a06b5c417" name="python3-perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="348.20.1.el8_5"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.11.1.el8_5]" date="1641297600">- blk-mq: avoid to iterate over stale request (Ming Lei) [2034396 1997338]
- rcu: Tighten rcu_advance_cbs_nowake() checks (Daniel Vacek) [2032579 2013408]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.12.1.el8_5]" date="1641988800">- tcp: don't free a FIN sk_buff in tcp_remove_empty_skb() (Guillaume Nault) [2021574 2016210]
- kernel.spec: Add support to use vmlinux.h (Jiri Olsa) [2031053 1989087]
- spec: Add vmlinux.h to kernel-devel package (Jiri Olsa) [2031053 1989087]
- x86/mce: Avoid infinite loop for copy from user recovery (Prarit Bhargava) [2008789 1999550]
- x86/mce: Rename kill_it to kill_current_task (Prarit Bhargava) [2008789 1999550]
- x86/mce: Recover from poison found while copying from user space (Prarit Bhargava) [2008789 1999550]
- x86/mce: Delay clearing IA32_MCG_STATUS to the end of do_machine_check() (Prarit Bhargava) [2008789 1999550]
- x86/mce: Send #MC singal from task work (Prarit Bhargava) [2008789 1999550]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-348.13.1.el8_5]" date="1642507200">- vfs: Out-of-bounds write of heap buffer in fs_context.c (Frantisek Hrbata) [2040585 2040586] {CVE-2022-0185}
- xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Bruno Meneguele) [2034864 2034865] {CVE-2021-4155}
- af_unix: fix garbage collect vs MSG_PEEK (Patrick Talbert) [2031974 2031975] {CVE-2021-0920}
- cgroup: verify that source is a string (Waiman Long) [2034608 2034609] {CVE-2021-4154}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-348.14.1.el8_5]" date="1643198400">- tcp: fix page frag corruption on page fault (Paolo Abeni) [2041529 1996074]
- net: fix sk_page_frag() recursion from memory reclaim (Paolo Abeni) [2041529 1996074]
- KVM: s390: index kvm-&gt;arch.idle_mask by vcpu_idx (Thomas Huth) [2040769 2026230]
- redhat: set LC_ALL=C before sorting config content (Frantisek Hrbata)</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.15.1.el8_5]" date="1643716800">- net/mlx5: DR, Use FW API when updating FW-owned flow table (Michal Schmidt) [2042663 2042651]
- KVM: x86: Wait for IPIs to be delivered when handling Hyper-V TLB flush hypercall (Vitaly Kuznetsov) [2043237 1868572]
- drm/mgag200: Select clock in PLL update functions (Bruno Meneguele) [2034949 1953926]
- drm/i915: Fix HAS_LSPCON macro for platforms between GEN9 and GEN10 (Bruno Meneguele) [2027335 2005586]
- crypto: qat - power up 4xxx device (Vladis Dronov) [2016437 1960307]
- RDMA/core: Fix a double free in add_port error flow (Kamal Heib) [2038724 2008555]
- powerpc/iommu: Report the correct most efficient DMA mask for PCI devices (Steve Best) [2018928 2007425]
- powerpc/dma: Fix dma_map_ops::get_required_mask (Steve Best) [2018928 2007425]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.16.1.el8_5]" date="1644321600">- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047601 2047602] {CVE-2022-22942}
- net: openvswitch: Fix ct_state nat flags for conns arriving from tc (Marcelo Ricardo Leitner) [2043548 2040334]
- net: openvswitch: Fix matching zone id for invalid conns arriving from tc (Marcelo Ricardo Leitner) [2043550 2040452]
- net/sched: flow_dissector: Fix matching on zone id for invalid conns (Marcelo Ricardo Leitner) [2043550 2040452]
- net/sched: Extend qdisc control block with tc control block (Marcelo Ricardo Leitner) [2043550 2040452]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.17.1.el8_5]" date="1644926400">- vfs: check dentry is still valid in get_link() (Ian Kent) [2052558 2014846]
- xfs: don't expose internal symlink metadata buffers to the vfs (Brian Foster) [2052558 2014846]
- CI: Use appropriate zstream builder (Veronika Kabatova)
- CI: Enable baseline realtime checks (Veronika Kabatova)
- CI: Rename pipelines to include release names (Veronika Kabatova)
- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052166 2052167] {CVE-2022-0492}
- ice: Remove boolean vlan_promisc flag from function (Jonathan Toppins) [2051951 2030400]
- ceph: put the requests/sessions when it fails to alloc memory (Jeffrey Layton) [2053725 2017796]
- ceph: fix off by one bugs in unsafe_request_wait() (Jeffrey Layton) [2053725 2017796]
- ceph: flush the mdlog before waiting on unsafe reqs (Jeffrey Layton) [2053725 2017796]
- ceph: flush mdlog before umounting (Jeffrey Layton) [2053725 2017796]
- ceph: make iterate_sessions a global symbol (Jeffrey Layton) [2053725 2017796]
- ceph: make ceph_create_session_msg a global symbol (Jeffrey Layton) [2053725 2017796]
- xfs: check sb_meta_uuid for dabuf buffer recovery (Bill O'Donnell) [2049292 2020764]
- drm/i915: Flush TLBs before releasing backing store (Patrick Talbert) [2044328 2044329] {CVE-2022-0330}
- hugetlb: fix hugetlb cgroup refcounting during vma split (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: fix imbalanced css_get and css_put pair for shared mappings (Waiman Long) [2039015 2032811]
- mm/hugetlb: change hugetlb_reserve_pages() to type bool (Waiman Long) [2039015 2032811]
- hugetlb: fix an error code in hugetlb_reserve_pages() (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: fix offline of hugetlb cgroup with reservations (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: fix reservation accounting (Waiman Long) [2039015 2032811]
- mm/hugetlb: narrow the hugetlb_lock protection area during preparing huge page (Waiman Long) [2039015 2032811]
- mm/hugetlb: a page from buddy is not on any list (Waiman Long) [2039015 2032811]
- mm/hugetlb: not necessary to coalesce regions recursively (Waiman Long) [2039015 2032811]
- selftests/vm/write_to_hugetlbfs.c: fix unused variable warning (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add hugetlb_cgroup reservation tests (Waiman Long) [2039015 2032811]
- hugetlb: support file_region coalescing again (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: support noreserve mappings (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add accounting for shared mappings (Waiman Long) [2039015 2032811]
- hugetlb: disable region_add file_region coalescing (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add reservation accounting for private mappings (Waiman Long) [2039015 2032811]
- mm/hugetlb_cgroup: fix hugetlb_cgroup migration (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add interface for charge/uncharge hugetlb reservations (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add hugetlb_cgroup reservation counter (Waiman Long) [2039015 2032811]
- hugetlb: remove duplicated code (Waiman Long) [2039015 2032811]
- hugetlb: region_chg provides only cache entry (Waiman Long) [2039015 2032811]
- hugetlbfs: always use address space in inode for resv_map pointer (Waiman Long) [2039015 2032811]
- hugetlbfs: fix potential over/underflow setting node specific nr_hugepages (Waiman Long) [2039015 2032811]
- hugetlb: allow to free gigantic pages regardless of the configuration (Waiman Long) [2039015 2032811]
- powerpc/pseries: Fix update of LPAR security flavor after LPM (Steve Best) [2027448 1997294]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.18.1.el8_5]" date="1645531200">- selftests: kvm: Check whether SIDA memop fails for normal guests (Thomas Huth) [2050806 2050807] {CVE-2022-0516}
- KVM: s390: Return error on SIDA memop on normal guest (Thomas Huth) [2050806 2050807] {CVE-2022-0516}
- iommu/amd: Remove iommu_init_ga() (Jerry Snitselaar) [2030854 1998265]
- iommu/amd: Relocate GAMSup check to early_enable_iommus (Jerry Snitselaar) [2030854 1998265]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.19.1.el8_5]" date="1646049600">- tipc: improve size validations for received domain records (Xin Long) [2048970 2048971] {CVE-2022-0435}
- smb3: do not error on fsync when readonly (Ronnie Sahlberg) [2055824 2037811]
- security: implement sctp_assoc_established hook in selinux (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- security: add sctp_assoc_established hook (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- security: call security_sctp_assoc_request in sctp_sf_do_5_1D_ce (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- security: pass asoc to sctp_assoc_request and sctp_sk_clone (Bruno Meneguele) [2054112 2054117 2015525 2048251]
- net: sctp: Fix some typos (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- RDMA/bnxt_re: Fix stats counters (Selvin Xavier) [2049684 2001893]
- net: check skb sec_path when re-initializing slow_gro in gro_list_prepare (Xin Long) [2047427 2030476]
- cpufreq: intel_pstate: Add Icelake servers support in no-HWP mode (David Arcari) [2036888 2003695]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.20.1.el8_5]" date="1646740800">- lib/iov_iter: initialize "flags" in new pipe_buffer (Jan Stancek) [2060874 2060875] {CVE-2022-0847}</changelog>
</package>
<package pkgid="9f77826bd31fa56546d10d0001fa1cac840b1a2e21ea322cbd2179b587ed4420" name="python3-perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="348.23.1.el8_5"/>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-348.14.1.el8_5]" date="1643198400">- tcp: fix page frag corruption on page fault (Paolo Abeni) [2041529 1996074]
- net: fix sk_page_frag() recursion from memory reclaim (Paolo Abeni) [2041529 1996074]
- KVM: s390: index kvm-&gt;arch.idle_mask by vcpu_idx (Thomas Huth) [2040769 2026230]
- redhat: set LC_ALL=C before sorting config content (Frantisek Hrbata)</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.15.1.el8_5]" date="1643716800">- net/mlx5: DR, Use FW API when updating FW-owned flow table (Michal Schmidt) [2042663 2042651]
- KVM: x86: Wait for IPIs to be delivered when handling Hyper-V TLB flush hypercall (Vitaly Kuznetsov) [2043237 1868572]
- drm/mgag200: Select clock in PLL update functions (Bruno Meneguele) [2034949 1953926]
- drm/i915: Fix HAS_LSPCON macro for platforms between GEN9 and GEN10 (Bruno Meneguele) [2027335 2005586]
- crypto: qat - power up 4xxx device (Vladis Dronov) [2016437 1960307]
- RDMA/core: Fix a double free in add_port error flow (Kamal Heib) [2038724 2008555]
- powerpc/iommu: Report the correct most efficient DMA mask for PCI devices (Steve Best) [2018928 2007425]
- powerpc/dma: Fix dma_map_ops::get_required_mask (Steve Best) [2018928 2007425]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.16.1.el8_5]" date="1644321600">- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047601 2047602] {CVE-2022-22942}
- net: openvswitch: Fix ct_state nat flags for conns arriving from tc (Marcelo Ricardo Leitner) [2043548 2040334]
- net: openvswitch: Fix matching zone id for invalid conns arriving from tc (Marcelo Ricardo Leitner) [2043550 2040452]
- net/sched: flow_dissector: Fix matching on zone id for invalid conns (Marcelo Ricardo Leitner) [2043550 2040452]
- net/sched: Extend qdisc control block with tc control block (Marcelo Ricardo Leitner) [2043550 2040452]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.17.1.el8_5]" date="1644926400">- vfs: check dentry is still valid in get_link() (Ian Kent) [2052558 2014846]
- xfs: don't expose internal symlink metadata buffers to the vfs (Brian Foster) [2052558 2014846]
- CI: Use appropriate zstream builder (Veronika Kabatova)
- CI: Enable baseline realtime checks (Veronika Kabatova)
- CI: Rename pipelines to include release names (Veronika Kabatova)
- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052166 2052167] {CVE-2022-0492}
- ice: Remove boolean vlan_promisc flag from function (Jonathan Toppins) [2051951 2030400]
- ceph: put the requests/sessions when it fails to alloc memory (Jeffrey Layton) [2053725 2017796]
- ceph: fix off by one bugs in unsafe_request_wait() (Jeffrey Layton) [2053725 2017796]
- ceph: flush the mdlog before waiting on unsafe reqs (Jeffrey Layton) [2053725 2017796]
- ceph: flush mdlog before umounting (Jeffrey Layton) [2053725 2017796]
- ceph: make iterate_sessions a global symbol (Jeffrey Layton) [2053725 2017796]
- ceph: make ceph_create_session_msg a global symbol (Jeffrey Layton) [2053725 2017796]
- xfs: check sb_meta_uuid for dabuf buffer recovery (Bill O'Donnell) [2049292 2020764]
- drm/i915: Flush TLBs before releasing backing store (Patrick Talbert) [2044328 2044329] {CVE-2022-0330}
- hugetlb: fix hugetlb cgroup refcounting during vma split (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: fix imbalanced css_get and css_put pair for shared mappings (Waiman Long) [2039015 2032811]
- mm/hugetlb: change hugetlb_reserve_pages() to type bool (Waiman Long) [2039015 2032811]
- hugetlb: fix an error code in hugetlb_reserve_pages() (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: fix offline of hugetlb cgroup with reservations (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: fix reservation accounting (Waiman Long) [2039015 2032811]
- mm/hugetlb: narrow the hugetlb_lock protection area during preparing huge page (Waiman Long) [2039015 2032811]
- mm/hugetlb: a page from buddy is not on any list (Waiman Long) [2039015 2032811]
- mm/hugetlb: not necessary to coalesce regions recursively (Waiman Long) [2039015 2032811]
- selftests/vm/write_to_hugetlbfs.c: fix unused variable warning (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add hugetlb_cgroup reservation tests (Waiman Long) [2039015 2032811]
- hugetlb: support file_region coalescing again (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: support noreserve mappings (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add accounting for shared mappings (Waiman Long) [2039015 2032811]
- hugetlb: disable region_add file_region coalescing (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add reservation accounting for private mappings (Waiman Long) [2039015 2032811]
- mm/hugetlb_cgroup: fix hugetlb_cgroup migration (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add interface for charge/uncharge hugetlb reservations (Waiman Long) [2039015 2032811]
- hugetlb_cgroup: add hugetlb_cgroup reservation counter (Waiman Long) [2039015 2032811]
- hugetlb: remove duplicated code (Waiman Long) [2039015 2032811]
- hugetlb: region_chg provides only cache entry (Waiman Long) [2039015 2032811]
- hugetlbfs: always use address space in inode for resv_map pointer (Waiman Long) [2039015 2032811]
- hugetlbfs: fix potential over/underflow setting node specific nr_hugepages (Waiman Long) [2039015 2032811]
- hugetlb: allow to free gigantic pages regardless of the configuration (Waiman Long) [2039015 2032811]
- powerpc/pseries: Fix update of LPAR security flavor after LPM (Steve Best) [2027448 1997294]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.18.1.el8_5]" date="1645531200">- selftests: kvm: Check whether SIDA memop fails for normal guests (Thomas Huth) [2050806 2050807] {CVE-2022-0516}
- KVM: s390: Return error on SIDA memop on normal guest (Thomas Huth) [2050806 2050807] {CVE-2022-0516}
- iommu/amd: Remove iommu_init_ga() (Jerry Snitselaar) [2030854 1998265]
- iommu/amd: Relocate GAMSup check to early_enable_iommus (Jerry Snitselaar) [2030854 1998265]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.19.1.el8_5]" date="1646049600">- tipc: improve size validations for received domain records (Xin Long) [2048970 2048971] {CVE-2022-0435}
- smb3: do not error on fsync when readonly (Ronnie Sahlberg) [2055824 2037811]
- security: implement sctp_assoc_established hook in selinux (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- security: add sctp_assoc_established hook (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- security: call security_sctp_assoc_request in sctp_sf_do_5_1D_ce (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- security: pass asoc to sctp_assoc_request and sctp_sk_clone (Bruno Meneguele) [2054112 2054117 2015525 2048251]
- net: sctp: Fix some typos (Ondrej Mosnacek) [2054112 2054117 2015525 2048251]
- RDMA/bnxt_re: Fix stats counters (Selvin Xavier) [2049684 2001893]
- net: check skb sec_path when re-initializing slow_gro in gro_list_prepare (Xin Long) [2047427 2030476]
- cpufreq: intel_pstate: Add Icelake servers support in no-HWP mode (David Arcari) [2036888 2003695]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.20.1.el8_5]" date="1646740800">- lib/iov_iter: initialize "flags" in new pipe_buffer (Jan Stancek) [2060874 2060875] {CVE-2022-0847}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.21.1.el8_5]" date="1647950400">- netfilter: nf_queue: handle socket prefetch (Florian Westphal) [2061446 2009786]
- netfilter: nf_queue: fix possible use-after-free (Florian Westphal) [2061446 2009786]
- selftests: netfilter: add nfqueue TCP_NEW_SYN_RECV socket race test (Florian Westphal) [2061446 2009786]
- netfilter: nf_queue: don't assume sk is full socket (Florian Westphal) [2061446 2009786]
- netfilter: nf_tables_offload: incorrect flow offload action array size (Florian Westphal) [2056867 2056728] {CVE-2022-25636}
- netfilter: nftables_offload: KASAN slab-out-of-bounds Read in nft_flow_rule_create (Florian Westphal) [2056867 2056728] {CVE-2022-25636}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.22.1.el8_5]" date="1649160000">- scsi: lpfc: Fix non-recovery of remote ports following an unsolicited LOGO (Dick Kennedy) [2058193 2027558]
- cifs: check all path components in resolved dfs target (Ronnie Sahlberg) [2056329 2030880]
- RDMA/cma: Do not change route.addr.src_addr.ss_family (Kamal Heib) [2032073 2032074] {CVE-2021-4028}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.23.1.el8_5]" date="1649764800">- gfs2: dequeue iopen holder in gfs2_inode_lookup error (Bob Peterson) [2069750 2061665]</changelog>
</package>
<package pkgid="518e9b15105dcee579683abe5be8a49f7d96911e2fddc52b2a783f901ad16c8c" name="python3-perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.18.0" rel="348.7.1.el8_5"/>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-346.el8]" date="1633089600">- redhat: switch secureboot kernel image signing to release keys (Bruno Meneguele)
- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Fix RT check branch name (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- Revert "Merge: mt7921e: enable new Mediatek wireless hardware" (Bruno Meneguele) [2009501]
- megaraid_sas: fix concurrent access to ISR between IRQ polling and real interrupt (Tomas Henzl) [2009022]
- scsi: megaraid_sas: mq_poll support (Tomas Henzl) [2009022]
- [PATCH v2] scsi: qla2xxx: Suppress unnecessary log messages during login (Nilesh Javali) [1982186]
- scsi: qla2xxx: Fix excessive messages during device logout (Nilesh Javali) [1982186]
- PCI: pciehp: Ignore Link Down/Up caused by DPC (Myron Stowe) [1981741]
- arm64: kpti: Fix "kpti=off" when KASLR is enabled (Mark Salter) [1979731]
- arm64: Fix CONFIG_ARCH_RANDOM=n build (Mark Salter) [1979731]
- redhat/configs: aarch64: add CONFIG_ARCH_RANDOM (Mark Salter) [1979731]
- arm64: Implement archrandom.h for ARMv8.5-RNG (Mark Salter) [1979731]
- arm64: kconfig: Fix alignment of E0PD help text (Mark Salter) [1979731]
- arm64: Use register field helper in kaslr_requires_kpti() (Mark Salter) [1979731]
- arm64: Simplify early check for broken TX1 when KASLR is enabled (Mark Salter) [1979731]
- arm64: Use a variable to store non-global mappings decision (Mark Salter) [1979731]
- arm64: Don't use KPTI where we have E0PD (Mark Salter) [1979731]
- arm64: Factor out checks for KASLR in KPTI code into separate function (Mark Salter) [1979731]
- redhat/configs: Add CONFIG_ARM64_E0PD (Mark Salter) [1979731]
- arm64: Add initial support for E0PD (Mark Salter) [1979731]
- arm64: cpufeature: Export matrix and other features to userspace (Mark Salter) [1980098]
- arm64: docs: cpu-feature-registers: Document ID_AA64PFR1_EL1 (Mark Salter) [1980098]
- docs/arm64: cpu-feature-registers: Rewrite bitfields that don't follow [e, s] (Mark Salter) [1980098]
- docs/arm64: cpu-feature-registers: Documents missing visible fields (Mark Salter) [1980098]
- arm64: Introduce system_capabilities_finalized() marker (Mark Salter) [1980098]
- arm64: entry.S: Do not preempt from IRQ before all cpufeatures are enabled (Mark Salter) [1980098]
- docs/arm64: elf_hwcaps: Document HWCAP_SB (Mark Salter) [1980098]
- docs/arm64: elf_hwcaps: sort the HWCAP{, 2} documentation by ascending value (Mark Salter) [1980098]
- arm64: cpufeature: Treat ID_AA64ZFR0_EL1 as RAZ when SVE is not enabled (Mark Salter) [1980098]
- arm64: cpufeature: Effectively expose FRINT capability to userspace (Mark Salter) [1980098]
- arm64: cpufeature: Fix feature comparison for CTR_EL0.{CWG,ERG} (Mark Salter) [1980098]
- arm64: Expose FRINT capabilities to userspace (Mark Salter) [1980098]
- arm64: Expose ARMv8.5 CondM capability to userspace (Mark Salter) [1980098]
- docs: arm64: convert perf.txt to ReST format (Mark Salter) [1980098]
- docs: arm64: convert docs to ReST and rename to .rst (Mark Salter) [1980098]
- Documentation/arm64: HugeTLB page implementation (Mark Salter) [1980098]
- Documentation/arm64/sve: Couple of improvements and typos (Mark Salter) [1980098]
- arm64: cpufeature: Fix missing ZFR0 in __read_sysreg_by_encoding() (Mark Salter) [1980098]
- arm64: Expose SVE2 features for userspace (Mark Salter) [1980098]
- arm64: Advertise ARM64_HAS_DCPODP cpu feature (Mark Salter) [1980098]
- arm64: add CVADP support to the cache maintenance helper (Mark Salter) [1980098]
- arm64: Fix minor issues with the dcache_by_line_op macro (Mark Salter) [1980098]
- arm64: Expose DC CVADP to userspace (Mark Salter) [1980098]
- arm64: Handle trapped DC CVADP (Mark Salter) [1980098]
- arm64: HWCAP: encapsulate elf_hwcap (Mark Salter) [1980098]
- arm64: HWCAP: add support for AT_HWCAP2 (Mark Salter) [1980098]
- x86/MCE/AMD, EDAC/mce_amd: Add new SMCA bank types (Aristeu Rozanski) [1965331]
- x86/MCE/AMD, EDAC/mce_amd: Remove struct smca_hwid.xec_bitmap (Aristeu Rozanski) [1965331]
- EDAC, mce_amd: Print ExtErrorCode and description on a single line (Aristeu Rozanski) [1965331]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-347.el8]" date="1633176000">- PCI: Mark TI C667X to avoid bus reset (Alex Williamson) [1975768]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.el8]" date="1633348800">- drm/nouveau/fifo/ga102: initialise chid on return from channel creation (Ben Skeggs) [1997878]
- drm/nouveau/ga102-: support ttm buffer moves via copy engine (Ben Skeggs) [1997878]
- drm/nouveau/kms/tu102-: delay enabling cursor until after assign_windows (Ben Skeggs) [1997878]
- drm/nouveau/kms/nv50: workaround EFI GOP window channel format differences (Ben Skeggs) [1997878]
- drm/nouveau/disp: power down unused DP links during init (Ben Skeggs) [1997878]
- drm/nouveau: recognise GA107 (Ben Skeggs) [1997878]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.1.1.el8_5]" date="1635940800">- lib/timerqueue: Rely on rbtree semantics for next timer (Phil Auld) [2014677 2007099] {CVE-2021-20317}
- mm/hmm: make HMM_MIRROR an implicit option (Rafael Aquini) [2017519 1998534]
- mm/hmm: allow HMM_MIRROR on all architectures with MMU (Rafael Aquini) [2017519 1998534]
- mm: don't select MIGRATE_VMA_HELPER from HMM_MIRROR (Rafael Aquini) [2017519 1998534]
- mm: sort out the DEVICE_PRIVATE Kconfig mess (Rafael Aquini) [2017519 1998534]
- ceph: skip existing superblocks that are blocklisted or shut down when mounting (Jeffrey Layton) [2017071 2011462]
- redhat: switch release to zstream (Bruno Meneguele)</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.2.1.el8_5]" date="1636372800">- tipc: fix size validations for the MSG_CRYPTO type (Bruno Meneguele) [2020506 2020507] {CVE-2021-43267}
- net: Fix skb-&gt;csum update in inet_proto_csum_replace16(). (Balazs Nemeth) [2005981 1975193]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.3.1.el8_5]" date="1637064000">- net-sysfs: try not to restart the syscall if it will fail eventually (Antoine Tenart) [2021165 2016005]
- ovl: fix missing negative dentry check in ovl_rename() (Miklos Szeredi) [2016378 2010887 2013318] {CVE-2021-20321}</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.4.1.el8_5]" date="1637668800">- [RHEL8.6 BZ 1849234] cifs: report error instead of invalid when revalidating a dentry fails (Ronnie Sahlberg) [2017177 1849234]
- kthread: Fix PF_KTHREAD vs to_kthread() race (Waiman Long) [2010333 2001497]
- sched/fair: Ignore percpu threads for imbalance pulls (Waiman Long) [2010333 2001497]
- kthread: Extract KTHREAD_IS_PER_CPU (Waiman Long) [2010333 2001497]
- sched: Optimize finish_lock_switch() (Waiman Long) [2010333 2001497]
- sched/hotplug: Ensure only per-cpu kthreads run during hotplug (Waiman Long) [2010333 2001497]
- sched: Fix balance_callback() (Waiman Long) [2010333 2001497]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.5.1.el8_5]" date="1638273600">- blk-mq: still set q-&gt;make_request_fn for blk-mq (Ming Lei) [2016384 1999728]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.6.1.el8_5]" date="1638878400">- x86/Kconfig: Do not enable AMD_MEM_ENCRYPT_ACTIVE_BY_DEFAULT automatically (Prarit Bhargava) [2024678 2021219]</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; [4.18.0-348.7.1.el8_5]" date="1638964800">- sched: Fix CPU hotplug / tighten is_per_cpu_kthread() (Waiman Long) [2026450 2024869]
- sched: Prepare to use balance_push in ttwu() (Waiman Long) [2026450 2024869]
- sched: Don't run cpu-online with balance_push() enabled (Waiman Long) [2026450 2024869]
- workqueue: Tag bound workers with KTHREAD_IS_PER_CPU (Waiman Long) [2026450 2024869]
- workqueue: Use cpu_possible_mask instead of cpu_active_mask to break affinity (Waiman Long) [2026450 2024869]
- sched: Fix hotplug vs CPU bandwidth control (Waiman Long) [2026450 2024869]
- workqueue: Manually break affinity on hotplug (Waiman Long) [2026450 2024869]
- sched/hotplug: Consolidate task migration on CPU unplug (Waiman Long) [2026450 2024869]
- sched/core: Wait for tasks being pushed away on hotplug (Waiman Long) [2026450 2024869]</changelog>
</package>
<package pkgid="f04cc2f791a1d96a37b23c12d38a2c1ef571051f8204fa1629315cfa9e39f69a" name="python3-rpm-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.14.3" rel="19.el8_5.2"/>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-12" date="1612872000">- Bump up the limit of signature header to 64MB (#1918777)
- Add fapolicyd plugin (#1923167)
- Unblock signals in forked scriptlets (#1913765)
- Fix ambiguous diagnostics output on file triggers (#1883338)
- Ensure ELF files get stripped when debuginfo is disabled (#1634084)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-13" date="1613131200">- Fix minor issues found by COVSCAN in fapolicyd plugin
- Actually honor libarchive bcond at configure time (#1902887)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-14" date="1622116800">- Be more careful about copying data from signature header (#1958477)
- Fixes CVE-2021-20271</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-15" date="1626350400">- Add out-of-bounds checks to hdrblobInit() (#1929445)
- Fixes CVE-2021-20266
- Fix regression in brp-strip causing kmods to lose SecureBoot sig (#1967291)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-16" date="1629374400">- Add support for read-only sqlite rpmdb (#1938928)
- Drop compat .decode() method from returned Py3 strings (#1840142)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-17" date="1629720000">- Address important covscan issues (#1996665)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-18" date="1629979200">- Address important covscan issues (#1996665), vol. 2</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-19" date="1633521600">- Unbreak in-tree kmod strip by reverting brp-strip fix (#1967291)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-19.1" date="1641470400">- Validate and require subkey binding sigs on PGP pubkeys (#2022537)
- Fixes CVE-2021-3521</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-19.2" date="1641816000">- Address covscan issues in binding sigs validation patch (#2022537)</changelog>
</package>
<package pkgid="16c7f0645f90c679920167138e582593cabfb6fb91f957db7b54f57ab8513b1a" name="python3-samba-debuginfo" arch="i686">
  <version epoch="0" ver="4.14.5" rel="10.el8_5"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-0" date="1623326400">- related: rhbz#1944657 - Update to version 4.14.5
- resolves: rhbz#1969787 - Fix memory leak in RPC server
- resolves: rhbz#1954974 - Validate smb.conf option for domain members with testparm
- resolves: rhbz#1963298 - Fix smbd trying to delete files with wrong permissions
- resolves: rhbz#1890008 - Update rpcclient manpage to list all available commands
- resolves: rhbz#1857254 - Update smbcacls manpage to document inhertance flags</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-1" date="1624536000">- resolves: rhbz#1974792 - Create a subpackage for vfs-io-uring
- resolves: rhbz#1965397 - Raise log level for dfs ENOENT debug message</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; -  4.14.4-2" date="1626177600">- related: rhbz#1980346 - Rebuild for libtalloc 0.11.0</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-4" date="1636113600">- resolves: rhbz#2021163
  Fix CVE-2016-2124
- resolves: rhbz#2021167
  Fix CVE-2021-23192
- resolves: rhbz#2021171
  Fix CVE-2020-25717</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-5" date="1636459200">- resolves: rhbz#2021493 - Add missing PAC buffer types to krb5pac.idl
- related: rbhz#2021171 - Fix regression with 'allow trusted domains = no'</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.14.5-6" date="1636804800">- related: rhbz#2021171 - Fix CVE-2020-25717
- Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-7" date="1637582400">- related: rhbz#2021171 - Fix CVE-2020-25717
- Fix running ktest (selftest)</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.14.5-8" date="1638446400">- resolves: rhbz#2026717 - Dir containing dangling symlinks cannot be deleted</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-9" date="1643284800">- resolves: rhbz#2046174 - Fix username map script regression of CVE-2020-25717
- resolves: rhbz#2046160 - Fix possible segfault while joining a domain
- resolves: rhbz#2046152 - Fix CVE-2021-44142</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.14.5-10" date="1645531200">- resolves: rhbz#2029417 - Fix virusfilter_vfs_openat: Not scanned: Directory or special file</changelog>
</package>
<package pkgid="dc159b76b7e0fc0487565f71a685067e5e4dad021b781b22d085c6369a1ca7d1" name="python3-samba-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.14.5" rel="10.el8_5"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-0" date="1623326400">- related: rhbz#1944657 - Update to version 4.14.5
- resolves: rhbz#1969787 - Fix memory leak in RPC server
- resolves: rhbz#1954974 - Validate smb.conf option for domain members with testparm
- resolves: rhbz#1963298 - Fix smbd trying to delete files with wrong permissions
- resolves: rhbz#1890008 - Update rpcclient manpage to list all available commands
- resolves: rhbz#1857254 - Update smbcacls manpage to document inhertance flags</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-1" date="1624536000">- resolves: rhbz#1974792 - Create a subpackage for vfs-io-uring
- resolves: rhbz#1965397 - Raise log level for dfs ENOENT debug message</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; -  4.14.4-2" date="1626177600">- related: rhbz#1980346 - Rebuild for libtalloc 0.11.0</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-4" date="1636113600">- resolves: rhbz#2021163
  Fix CVE-2016-2124
- resolves: rhbz#2021167
  Fix CVE-2021-23192
- resolves: rhbz#2021171
  Fix CVE-2020-25717</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-5" date="1636459200">- resolves: rhbz#2021493 - Add missing PAC buffer types to krb5pac.idl
- related: rbhz#2021171 - Fix regression with 'allow trusted domains = no'</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.14.5-6" date="1636804800">- related: rhbz#2021171 - Fix CVE-2020-25717
- Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-7" date="1637582400">- related: rhbz#2021171 - Fix CVE-2020-25717
- Fix running ktest (selftest)</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.14.5-8" date="1638446400">- resolves: rhbz#2026717 - Dir containing dangling symlinks cannot be deleted</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-9" date="1643284800">- resolves: rhbz#2046174 - Fix username map script regression of CVE-2020-25717
- resolves: rhbz#2046160 - Fix possible segfault while joining a domain
- resolves: rhbz#2046152 - Fix CVE-2021-44142</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.14.5-10" date="1645531200">- resolves: rhbz#2029417 - Fix virusfilter_vfs_openat: Not scanned: Directory or special file</changelog>
</package>
<package pkgid="8d2e1eb98d2c7b4d6680af6114e9c13c827424170b9c67afc56a7ea9c3aedd00" name="python3-samba-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.14.5" rel="7.el8_5"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.13.3-3" date="1612440000">- resolves: #1924615 - Fix a memcache bug when cache is full
- resolves: #1924571 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-2" date="1620734400">- resolves: rhbz#1944657 - Update to version 4.14.4
- resolves: rhbz#1949445 - Fix CVE-2021-20254
- resolves: rhbz#1947945 - Fix libsmbldap.so.2 not being a symbolic link
- resolves: rhbz#1908506 - Fix creating the gencache user directory
- resolves: rhbz#1901029 - Build the vfs_io_uring module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-4" date="1620820800">- related: rhbz#1944657 - Fix possible upgrade issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-0" date="1623326400">- related: rhbz#1944657 - Update to version 4.14.5
- resolves: rhbz#1969787 - Fix memory leak in RPC server
- resolves: rhbz#1954974 - Validate smb.conf option for domain members with testparm
- resolves: rhbz#1963298 - Fix smbd trying to delete files with wrong permissions
- resolves: rhbz#1890008 - Update rpcclient manpage to list all available commands
- resolves: rhbz#1857254 - Update smbcacls manpage to document inhertance flags</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-1" date="1624536000">- resolves: rhbz#1974792 - Create a subpackage for vfs-io-uring
- resolves: rhbz#1965397 - Raise log level for dfs ENOENT debug message</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; -  4.14.4-2" date="1626177600">- related: rhbz#1980346 - Rebuild for libtalloc 0.11.0</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-4" date="1636113600">- resolves: rhbz#2021163
  Fix CVE-2016-2124
- resolves: rhbz#2021167
  Fix CVE-2021-23192
- resolves: rhbz#2021171
  Fix CVE-2020-25717</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-5" date="1636459200">- resolves: rhbz#2021493 - Add missing PAC buffer types to krb5pac.idl
- related: rbhz#2021171 - Fix regression with 'allow trusted domains = no'</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.14.5-6" date="1636804800">- related: rhbz#2021171 - Fix CVE-2020-25717
- Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-7" date="1637582400">- related: rhbz#2021171 - Fix CVE-2020-25717
- Fix running ktest (selftest)</changelog>
</package>
<package pkgid="e43e889ab83d6d79db2c78d99ce704f8574a8b6bf711933f0c574a950437b5d6" name="python3-samba-debuginfo" arch="i686">
  <version epoch="0" ver="4.14.5" rel="9.el8_5"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-4" date="1620820800">- related: rhbz#1944657 - Fix possible upgrade issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-0" date="1623326400">- related: rhbz#1944657 - Update to version 4.14.5
- resolves: rhbz#1969787 - Fix memory leak in RPC server
- resolves: rhbz#1954974 - Validate smb.conf option for domain members with testparm
- resolves: rhbz#1963298 - Fix smbd trying to delete files with wrong permissions
- resolves: rhbz#1890008 - Update rpcclient manpage to list all available commands
- resolves: rhbz#1857254 - Update smbcacls manpage to document inhertance flags</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-1" date="1624536000">- resolves: rhbz#1974792 - Create a subpackage for vfs-io-uring
- resolves: rhbz#1965397 - Raise log level for dfs ENOENT debug message</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; -  4.14.4-2" date="1626177600">- related: rhbz#1980346 - Rebuild for libtalloc 0.11.0</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-4" date="1636113600">- resolves: rhbz#2021163
  Fix CVE-2016-2124
- resolves: rhbz#2021167
  Fix CVE-2021-23192
- resolves: rhbz#2021171
  Fix CVE-2020-25717</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-5" date="1636459200">- resolves: rhbz#2021493 - Add missing PAC buffer types to krb5pac.idl
- related: rbhz#2021171 - Fix regression with 'allow trusted domains = no'</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.14.5-6" date="1636804800">- related: rhbz#2021171 - Fix CVE-2020-25717
- Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-7" date="1637582400">- related: rhbz#2021171 - Fix CVE-2020-25717
- Fix running ktest (selftest)</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.14.5-8" date="1638446400">- resolves: rhbz#2026717 - Dir containing dangling symlinks cannot be deleted</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-9" date="1643284800">- resolves: rhbz#2046174 - Fix username map script regression of CVE-2020-25717
- resolves: rhbz#2046160 - Fix possible segfault while joining a domain
- resolves: rhbz#2046152 - Fix CVE-2021-44142</changelog>
</package>
<package pkgid="db9a7162271f687aefa11e72e201c28706650158246e0c9f0882d462935766d7" name="python3-samba-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.14.5" rel="9.el8_5"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-4" date="1620820800">- related: rhbz#1944657 - Fix possible upgrade issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-0" date="1623326400">- related: rhbz#1944657 - Update to version 4.14.5
- resolves: rhbz#1969787 - Fix memory leak in RPC server
- resolves: rhbz#1954974 - Validate smb.conf option for domain members with testparm
- resolves: rhbz#1963298 - Fix smbd trying to delete files with wrong permissions
- resolves: rhbz#1890008 - Update rpcclient manpage to list all available commands
- resolves: rhbz#1857254 - Update smbcacls manpage to document inhertance flags</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-1" date="1624536000">- resolves: rhbz#1974792 - Create a subpackage for vfs-io-uring
- resolves: rhbz#1965397 - Raise log level for dfs ENOENT debug message</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; -  4.14.4-2" date="1626177600">- related: rhbz#1980346 - Rebuild for libtalloc 0.11.0</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-4" date="1636113600">- resolves: rhbz#2021163
  Fix CVE-2016-2124
- resolves: rhbz#2021167
  Fix CVE-2021-23192
- resolves: rhbz#2021171
  Fix CVE-2020-25717</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-5" date="1636459200">- resolves: rhbz#2021493 - Add missing PAC buffer types to krb5pac.idl
- related: rbhz#2021171 - Fix regression with 'allow trusted domains = no'</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.14.5-6" date="1636804800">- related: rhbz#2021171 - Fix CVE-2020-25717
- Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-7" date="1637582400">- related: rhbz#2021171 - Fix CVE-2020-25717
- Fix running ktest (selftest)</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.14.5-8" date="1638446400">- resolves: rhbz#2026717 - Dir containing dangling symlinks cannot be deleted</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-9" date="1643284800">- resolves: rhbz#2046174 - Fix username map script regression of CVE-2020-25717
- resolves: rhbz#2046160 - Fix possible segfault while joining a domain
- resolves: rhbz#2046152 - Fix CVE-2021-44142</changelog>
</package>
<package pkgid="10309365801ca457a5d92a317872d6a51739cdf96d98eeb09431f09b51a445c3" name="python3-sss-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="2.el8_5.1"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-5" date="1609156800">- Resolves: rhbz#1631410 - Can't login with smartcard with multiple certs having same ID value
- Resolves: rhbz#1884213 - [RFE] add offline_timeout_max config option to control offline interval backoff (additional patches)
- Resolves: rhbz#1893159 - Default debug level should report all errors / failures
- Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-6" date="1610971200">- Resolves: rhbz#1113639 - autofs: return a connection failure until maps have been fetched
- Resolves: rhbz#1915395 - Memory leak in the simple access provider
- Resolves: rhbz#1915319 - SSSD: SBUS: failures during servers startup
- Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication (additional patches)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-7" date="1611662400">- Resolves: rhbz#1920001 - Do not add '%' to group names already prefixed with '%' in IPA sudo rules
- Resolves: rhbz#1918433 - sssd unable to lookup certmap rules
- Resolves: rhbz#1917382 - [abrt] [faf] sssd: dp_client_handshake_timeout(): /usr/libexec/sssd/sssd_be killed by 11</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-8" date="1613131200">- Resolves: rhbz#1926622 - Add support to verify authentication indicators in pam_sss_gss
- Resolves: rhbz#1926454 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0.
- Resolves: rhbz#1893159 - Default debug level should report all errors / failures (additional patch)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.0-1" date="1620648000">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1930535 - [abrt] [faf] sssd: monitor_service_shutdown(): /usr/sbin/sssd killed by 11
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1945888 - Inconsistant debug level for connection logging
- Resolves: rhbz#1948657 - pam_sss_gss.so doesn't work with large kerberos tickets
- Resolves: rhbz#1949149 - [RFE] Poor man's backtrace
- Resolves: rhbz#1920500 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR
- Resolves: rhbz#1923964 - [RFE] SSSD Error Msg Improvement: write_krb5info_file failed, authentication might fail.
- Resolves: rhbz#1928648 - SSSD logs improvements: clarify which config option applies to each timeout in the logs
- Resolves: rhbz#1632159 - sssd-kcm starts successfully for non existent socket_path
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm
- Resolves: rhbz#1925505 - [RFE] improve the sssd refresh timers for SUDO queries
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1925561 - sssd-ldap(5) does not report how to disable the SUDO smart queries
- Resolves: rhbz#1925621 - document impact of indices and of scope on performance of LDAP queries
- Resolves: rhbz#1855320 - [RFE] RHEL8 sssd: inheritance of the case_sensitive parameter for subdomains.
- Resolves: rhbz#1925608 - [RFE] make 'random_offset' addon to 'offline_timeout' option configurable
- Resolves: rhbz#1447945 - man page / docs update required: if two certificate matching rules with the same priority match only one is used
- Resolves: rhbz#1703436 - sssd not thread-safe in innetgr()
- Resolves: rhbz#1713143 - SSSD does not translate the 2FA text labels("first factor" / "second factor") on GDM login and screensaver unlock screen
- Resolves: rhbz#1888977 - sss_override: Usage limitations clarification in man page
- Resolves: rhbz#1890177 - Clarify "single_prompt" option in "PROMPTING CONFIGURATION SECTION" section of sssd.conf man page
- Resolves: rhbz#1902280 - fix sss_cache to also reset cached timestamp
- Resolves: rhbz#1935683 - SSSD not detecting subdomain from AD forest (RHEL 8.3)
- Resolves: rhbz#1937919 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7
- Resolves: rhbz#1944665 - No gpo found and ad_gpo_implicit_deny set to True still permits user login
- Resolves: rhbz#1919942 - sss_override does not take precedence over override_homedir directive</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-1" date="1623153600">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1917444 - SSSD Error Msg Improvement: Server resolution failed: [2]: No such file or directory
- Resolves: rhbz#1917511 - SSSD Error Msg Improvement: Failed to resolve server 'server.example.com': Error reading file
- Resolves: rhbz#1917535 - sssd.conf man page: parameter dns_resolver_server_timeout and dns_resolver_op_timeout
- Resolves: rhbz#1940509 - [RFE] Health and Support Analyzer: Link frontend to backend requests
- Resolves: rhbz#1649464 - auto_private_groups not working as expected with posix ipa/ad trust
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1961215 - Invalid sssd-kcm return code if requested operation is not found
- Resolves: rhbz#1837090 - SSSD fails nss_getby_name for IPA user with SID if the user has user private group
- Resolves: rhbz#1879869 - sudo commands incorrectly exports the KRB5CCNAME environment variable
- Resolves: rhbz#1962550 - sss_pac_make_request fails on systems joined to Active Directory.
- Resolves: rhbz#1737489 - [RFE] SSSD should honor default Kerberos settings (keytab name) in /etc/krb5.conf</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-2" date="1624276800">- Resolves: rhbz#1974257 - 'debug_microseconds' config option is broken
- Resolves: rhbz#1936902 - SSSD Error Msg Improvement: Invalid argument
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm (additional patches and rebuild)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-1" date="1626091200">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1693379 - sssd_be and sss_cache too heavy on CPU
- Resolves: rhbz#1909373 - Missing search index for `originalADgidNumber`
- Resolves: rhbz#1954630 - [RFE] Improve debug messages by adding a unique tag for each request the backend is handling
- Resolves: rhbz#1936891 - SSSD Error Msg Improvement: Bad address
- Resolves: rhbz#1364596 - sssd still showing ipa user after removed from last group
- Resolves: rhbz#1979404 - Changes made to /etc/pam.d/sssd-shadowutils are overwritten back to default on sssd-common package upgrade</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2" date="1627905600">- Resolves: rhbz#1975169 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-8]
- Resolves: rhbz#1962042 - [sssd] RHEL 8.5 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.1" date="1634558400">- Resolves: rhbz#2014460 - tps tests fail with cross dependency on sssd debuginfo package: removal of 'sssd-libwbclient-debuginfo' is missing [rhel-8.5.0.z]</changelog>
</package>
<package pkgid="f6375d32d1b9a58c5a4f7cafc2225aeb7a63af1a9b637576da86f4499bd6e896" name="python3-sss-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="2.el8_5.3"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-7" date="1611662400">- Resolves: rhbz#1920001 - Do not add '%' to group names already prefixed with '%' in IPA sudo rules
- Resolves: rhbz#1918433 - sssd unable to lookup certmap rules
- Resolves: rhbz#1917382 - [abrt] [faf] sssd: dp_client_handshake_timeout(): /usr/libexec/sssd/sssd_be killed by 11</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-8" date="1613131200">- Resolves: rhbz#1926622 - Add support to verify authentication indicators in pam_sss_gss
- Resolves: rhbz#1926454 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0.
- Resolves: rhbz#1893159 - Default debug level should report all errors / failures (additional patch)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.0-1" date="1620648000">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1930535 - [abrt] [faf] sssd: monitor_service_shutdown(): /usr/sbin/sssd killed by 11
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1945888 - Inconsistant debug level for connection logging
- Resolves: rhbz#1948657 - pam_sss_gss.so doesn't work with large kerberos tickets
- Resolves: rhbz#1949149 - [RFE] Poor man's backtrace
- Resolves: rhbz#1920500 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR
- Resolves: rhbz#1923964 - [RFE] SSSD Error Msg Improvement: write_krb5info_file failed, authentication might fail.
- Resolves: rhbz#1928648 - SSSD logs improvements: clarify which config option applies to each timeout in the logs
- Resolves: rhbz#1632159 - sssd-kcm starts successfully for non existent socket_path
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm
- Resolves: rhbz#1925505 - [RFE] improve the sssd refresh timers for SUDO queries
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1925561 - sssd-ldap(5) does not report how to disable the SUDO smart queries
- Resolves: rhbz#1925621 - document impact of indices and of scope on performance of LDAP queries
- Resolves: rhbz#1855320 - [RFE] RHEL8 sssd: inheritance of the case_sensitive parameter for subdomains.
- Resolves: rhbz#1925608 - [RFE] make 'random_offset' addon to 'offline_timeout' option configurable
- Resolves: rhbz#1447945 - man page / docs update required: if two certificate matching rules with the same priority match only one is used
- Resolves: rhbz#1703436 - sssd not thread-safe in innetgr()
- Resolves: rhbz#1713143 - SSSD does not translate the 2FA text labels("first factor" / "second factor") on GDM login and screensaver unlock screen
- Resolves: rhbz#1888977 - sss_override: Usage limitations clarification in man page
- Resolves: rhbz#1890177 - Clarify "single_prompt" option in "PROMPTING CONFIGURATION SECTION" section of sssd.conf man page
- Resolves: rhbz#1902280 - fix sss_cache to also reset cached timestamp
- Resolves: rhbz#1935683 - SSSD not detecting subdomain from AD forest (RHEL 8.3)
- Resolves: rhbz#1937919 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7
- Resolves: rhbz#1944665 - No gpo found and ad_gpo_implicit_deny set to True still permits user login
- Resolves: rhbz#1919942 - sss_override does not take precedence over override_homedir directive</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-1" date="1623153600">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1917444 - SSSD Error Msg Improvement: Server resolution failed: [2]: No such file or directory
- Resolves: rhbz#1917511 - SSSD Error Msg Improvement: Failed to resolve server 'server.example.com': Error reading file
- Resolves: rhbz#1917535 - sssd.conf man page: parameter dns_resolver_server_timeout and dns_resolver_op_timeout
- Resolves: rhbz#1940509 - [RFE] Health and Support Analyzer: Link frontend to backend requests
- Resolves: rhbz#1649464 - auto_private_groups not working as expected with posix ipa/ad trust
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1961215 - Invalid sssd-kcm return code if requested operation is not found
- Resolves: rhbz#1837090 - SSSD fails nss_getby_name for IPA user with SID if the user has user private group
- Resolves: rhbz#1879869 - sudo commands incorrectly exports the KRB5CCNAME environment variable
- Resolves: rhbz#1962550 - sss_pac_make_request fails on systems joined to Active Directory.
- Resolves: rhbz#1737489 - [RFE] SSSD should honor default Kerberos settings (keytab name) in /etc/krb5.conf</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-2" date="1624276800">- Resolves: rhbz#1974257 - 'debug_microseconds' config option is broken
- Resolves: rhbz#1936902 - SSSD Error Msg Improvement: Invalid argument
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm (additional patches and rebuild)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-1" date="1626091200">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1693379 - sssd_be and sss_cache too heavy on CPU
- Resolves: rhbz#1909373 - Missing search index for `originalADgidNumber`
- Resolves: rhbz#1954630 - [RFE] Improve debug messages by adding a unique tag for each request the backend is handling
- Resolves: rhbz#1936891 - SSSD Error Msg Improvement: Bad address
- Resolves: rhbz#1364596 - sssd still showing ipa user after removed from last group
- Resolves: rhbz#1979404 - Changes made to /etc/pam.d/sssd-shadowutils are overwritten back to default on sssd-common package upgrade</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2" date="1627905600">- Resolves: rhbz#1975169 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-8]
- Resolves: rhbz#1962042 - [sssd] RHEL 8.5 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.1" date="1634558400">- Resolves: rhbz#2014460 - tps tests fail with cross dependency on sssd debuginfo package: removal of 'sssd-libwbclient-debuginfo' is missing [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.2" date="1638187200">- Resolves: rhbz#2018440 - 2.5.x based SSSD adds more AD domains than it should based on the configuration file (not trusted and from a different forest) [rhel-8.5.0.z]
- Resolves: rhbz#2016923 - autofs lookups for unknown mounts are delayed for 50s [rhel-8.5.0.z]
- Resolves: rhbz#2021499 - Make backtrace less "chatty" (avoid duplicate backtraces) [rhel-8.5.0.z]
- Resolves: rhbz#2013379 - Lookup with fully-qualified name does not work with 'cache_first = True' [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.3" date="1638878400">- Resolves: rhbz#2028828 - pam responder does not call initgroups to refresh the user entry [rhel-8.5.0.z]</changelog>
</package>
<package pkgid="324d9babbce89eecc10f6a4f5d274ffee878ea3141dfff92a606317cd7011922" name="python3-sss-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="2.el8_5.4"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-8" date="1613131200">- Resolves: rhbz#1926622 - Add support to verify authentication indicators in pam_sss_gss
- Resolves: rhbz#1926454 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0.
- Resolves: rhbz#1893159 - Default debug level should report all errors / failures (additional patch)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.0-1" date="1620648000">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1930535 - [abrt] [faf] sssd: monitor_service_shutdown(): /usr/sbin/sssd killed by 11
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1945888 - Inconsistant debug level for connection logging
- Resolves: rhbz#1948657 - pam_sss_gss.so doesn't work with large kerberos tickets
- Resolves: rhbz#1949149 - [RFE] Poor man's backtrace
- Resolves: rhbz#1920500 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR
- Resolves: rhbz#1923964 - [RFE] SSSD Error Msg Improvement: write_krb5info_file failed, authentication might fail.
- Resolves: rhbz#1928648 - SSSD logs improvements: clarify which config option applies to each timeout in the logs
- Resolves: rhbz#1632159 - sssd-kcm starts successfully for non existent socket_path
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm
- Resolves: rhbz#1925505 - [RFE] improve the sssd refresh timers for SUDO queries
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1925561 - sssd-ldap(5) does not report how to disable the SUDO smart queries
- Resolves: rhbz#1925621 - document impact of indices and of scope on performance of LDAP queries
- Resolves: rhbz#1855320 - [RFE] RHEL8 sssd: inheritance of the case_sensitive parameter for subdomains.
- Resolves: rhbz#1925608 - [RFE] make 'random_offset' addon to 'offline_timeout' option configurable
- Resolves: rhbz#1447945 - man page / docs update required: if two certificate matching rules with the same priority match only one is used
- Resolves: rhbz#1703436 - sssd not thread-safe in innetgr()
- Resolves: rhbz#1713143 - SSSD does not translate the 2FA text labels("first factor" / "second factor") on GDM login and screensaver unlock screen
- Resolves: rhbz#1888977 - sss_override: Usage limitations clarification in man page
- Resolves: rhbz#1890177 - Clarify "single_prompt" option in "PROMPTING CONFIGURATION SECTION" section of sssd.conf man page
- Resolves: rhbz#1902280 - fix sss_cache to also reset cached timestamp
- Resolves: rhbz#1935683 - SSSD not detecting subdomain from AD forest (RHEL 8.3)
- Resolves: rhbz#1937919 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7
- Resolves: rhbz#1944665 - No gpo found and ad_gpo_implicit_deny set to True still permits user login
- Resolves: rhbz#1919942 - sss_override does not take precedence over override_homedir directive</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-1" date="1623153600">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1917444 - SSSD Error Msg Improvement: Server resolution failed: [2]: No such file or directory
- Resolves: rhbz#1917511 - SSSD Error Msg Improvement: Failed to resolve server 'server.example.com': Error reading file
- Resolves: rhbz#1917535 - sssd.conf man page: parameter dns_resolver_server_timeout and dns_resolver_op_timeout
- Resolves: rhbz#1940509 - [RFE] Health and Support Analyzer: Link frontend to backend requests
- Resolves: rhbz#1649464 - auto_private_groups not working as expected with posix ipa/ad trust
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1961215 - Invalid sssd-kcm return code if requested operation is not found
- Resolves: rhbz#1837090 - SSSD fails nss_getby_name for IPA user with SID if the user has user private group
- Resolves: rhbz#1879869 - sudo commands incorrectly exports the KRB5CCNAME environment variable
- Resolves: rhbz#1962550 - sss_pac_make_request fails on systems joined to Active Directory.
- Resolves: rhbz#1737489 - [RFE] SSSD should honor default Kerberos settings (keytab name) in /etc/krb5.conf</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-2" date="1624276800">- Resolves: rhbz#1974257 - 'debug_microseconds' config option is broken
- Resolves: rhbz#1936902 - SSSD Error Msg Improvement: Invalid argument
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm (additional patches and rebuild)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-1" date="1626091200">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1693379 - sssd_be and sss_cache too heavy on CPU
- Resolves: rhbz#1909373 - Missing search index for `originalADgidNumber`
- Resolves: rhbz#1954630 - [RFE] Improve debug messages by adding a unique tag for each request the backend is handling
- Resolves: rhbz#1936891 - SSSD Error Msg Improvement: Bad address
- Resolves: rhbz#1364596 - sssd still showing ipa user after removed from last group
- Resolves: rhbz#1979404 - Changes made to /etc/pam.d/sssd-shadowutils are overwritten back to default on sssd-common package upgrade</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2" date="1627905600">- Resolves: rhbz#1975169 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-8]
- Resolves: rhbz#1962042 - [sssd] RHEL 8.5 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.1" date="1634558400">- Resolves: rhbz#2014460 - tps tests fail with cross dependency on sssd debuginfo package: removal of 'sssd-libwbclient-debuginfo' is missing [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.2" date="1638187200">- Resolves: rhbz#2018440 - 2.5.x based SSSD adds more AD domains than it should based on the configuration file (not trusted and from a different forest) [rhel-8.5.0.z]
- Resolves: rhbz#2016923 - autofs lookups for unknown mounts are delayed for 50s [rhel-8.5.0.z]
- Resolves: rhbz#2021499 - Make backtrace less "chatty" (avoid duplicate backtraces) [rhel-8.5.0.z]
- Resolves: rhbz#2013379 - Lookup with fully-qualified name does not work with 'cache_first = True' [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.3" date="1638878400">- Resolves: rhbz#2028828 - pam responder does not call initgroups to refresh the user entry [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.4" date="1642420800">- Resolves: rhbz#2030651 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries [rhel-8.5.0.z]
- Resolves: rhbz#2035285 - AD Domain in the AD Forest Missing after sssd latest update [rhel-8.5.0.z]</changelog>
</package>
<package pkgid="fa8b957b0f5f5d58f6c9e094dd89ef3390e37ff9a0c2fac5d7f9d2fab2d55a1d" name="python3-sss-murmur-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="2.el8_5.1"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-5" date="1609156800">- Resolves: rhbz#1631410 - Can't login with smartcard with multiple certs having same ID value
- Resolves: rhbz#1884213 - [RFE] add offline_timeout_max config option to control offline interval backoff (additional patches)
- Resolves: rhbz#1893159 - Default debug level should report all errors / failures
- Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-6" date="1610971200">- Resolves: rhbz#1113639 - autofs: return a connection failure until maps have been fetched
- Resolves: rhbz#1915395 - Memory leak in the simple access provider
- Resolves: rhbz#1915319 - SSSD: SBUS: failures during servers startup
- Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication (additional patches)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-7" date="1611662400">- Resolves: rhbz#1920001 - Do not add '%' to group names already prefixed with '%' in IPA sudo rules
- Resolves: rhbz#1918433 - sssd unable to lookup certmap rules
- Resolves: rhbz#1917382 - [abrt] [faf] sssd: dp_client_handshake_timeout(): /usr/libexec/sssd/sssd_be killed by 11</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-8" date="1613131200">- Resolves: rhbz#1926622 - Add support to verify authentication indicators in pam_sss_gss
- Resolves: rhbz#1926454 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0.
- Resolves: rhbz#1893159 - Default debug level should report all errors / failures (additional patch)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.0-1" date="1620648000">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1930535 - [abrt] [faf] sssd: monitor_service_shutdown(): /usr/sbin/sssd killed by 11
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1945888 - Inconsistant debug level for connection logging
- Resolves: rhbz#1948657 - pam_sss_gss.so doesn't work with large kerberos tickets
- Resolves: rhbz#1949149 - [RFE] Poor man's backtrace
- Resolves: rhbz#1920500 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR
- Resolves: rhbz#1923964 - [RFE] SSSD Error Msg Improvement: write_krb5info_file failed, authentication might fail.
- Resolves: rhbz#1928648 - SSSD logs improvements: clarify which config option applies to each timeout in the logs
- Resolves: rhbz#1632159 - sssd-kcm starts successfully for non existent socket_path
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm
- Resolves: rhbz#1925505 - [RFE] improve the sssd refresh timers for SUDO queries
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1925561 - sssd-ldap(5) does not report how to disable the SUDO smart queries
- Resolves: rhbz#1925621 - document impact of indices and of scope on performance of LDAP queries
- Resolves: rhbz#1855320 - [RFE] RHEL8 sssd: inheritance of the case_sensitive parameter for subdomains.
- Resolves: rhbz#1925608 - [RFE] make 'random_offset' addon to 'offline_timeout' option configurable
- Resolves: rhbz#1447945 - man page / docs update required: if two certificate matching rules with the same priority match only one is used
- Resolves: rhbz#1703436 - sssd not thread-safe in innetgr()
- Resolves: rhbz#1713143 - SSSD does not translate the 2FA text labels("first factor" / "second factor") on GDM login and screensaver unlock screen
- Resolves: rhbz#1888977 - sss_override: Usage limitations clarification in man page
- Resolves: rhbz#1890177 - Clarify "single_prompt" option in "PROMPTING CONFIGURATION SECTION" section of sssd.conf man page
- Resolves: rhbz#1902280 - fix sss_cache to also reset cached timestamp
- Resolves: rhbz#1935683 - SSSD not detecting subdomain from AD forest (RHEL 8.3)
- Resolves: rhbz#1937919 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7
- Resolves: rhbz#1944665 - No gpo found and ad_gpo_implicit_deny set to True still permits user login
- Resolves: rhbz#1919942 - sss_override does not take precedence over override_homedir directive</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-1" date="1623153600">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1917444 - SSSD Error Msg Improvement: Server resolution failed: [2]: No such file or directory
- Resolves: rhbz#1917511 - SSSD Error Msg Improvement: Failed to resolve server 'server.example.com': Error reading file
- Resolves: rhbz#1917535 - sssd.conf man page: parameter dns_resolver_server_timeout and dns_resolver_op_timeout
- Resolves: rhbz#1940509 - [RFE] Health and Support Analyzer: Link frontend to backend requests
- Resolves: rhbz#1649464 - auto_private_groups not working as expected with posix ipa/ad trust
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1961215 - Invalid sssd-kcm return code if requested operation is not found
- Resolves: rhbz#1837090 - SSSD fails nss_getby_name for IPA user with SID if the user has user private group
- Resolves: rhbz#1879869 - sudo commands incorrectly exports the KRB5CCNAME environment variable
- Resolves: rhbz#1962550 - sss_pac_make_request fails on systems joined to Active Directory.
- Resolves: rhbz#1737489 - [RFE] SSSD should honor default Kerberos settings (keytab name) in /etc/krb5.conf</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-2" date="1624276800">- Resolves: rhbz#1974257 - 'debug_microseconds' config option is broken
- Resolves: rhbz#1936902 - SSSD Error Msg Improvement: Invalid argument
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm (additional patches and rebuild)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-1" date="1626091200">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1693379 - sssd_be and sss_cache too heavy on CPU
- Resolves: rhbz#1909373 - Missing search index for `originalADgidNumber`
- Resolves: rhbz#1954630 - [RFE] Improve debug messages by adding a unique tag for each request the backend is handling
- Resolves: rhbz#1936891 - SSSD Error Msg Improvement: Bad address
- Resolves: rhbz#1364596 - sssd still showing ipa user after removed from last group
- Resolves: rhbz#1979404 - Changes made to /etc/pam.d/sssd-shadowutils are overwritten back to default on sssd-common package upgrade</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2" date="1627905600">- Resolves: rhbz#1975169 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-8]
- Resolves: rhbz#1962042 - [sssd] RHEL 8.5 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.1" date="1634558400">- Resolves: rhbz#2014460 - tps tests fail with cross dependency on sssd debuginfo package: removal of 'sssd-libwbclient-debuginfo' is missing [rhel-8.5.0.z]</changelog>
</package>
<package pkgid="d43ecd91859c4846724e9019e8b93d76b810f086e3ac7ae947ad7fc56df60c21" name="python3-sss-murmur-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="2.el8_5.3"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-7" date="1611662400">- Resolves: rhbz#1920001 - Do not add '%' to group names already prefixed with '%' in IPA sudo rules
- Resolves: rhbz#1918433 - sssd unable to lookup certmap rules
- Resolves: rhbz#1917382 - [abrt] [faf] sssd: dp_client_handshake_timeout(): /usr/libexec/sssd/sssd_be killed by 11</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-8" date="1613131200">- Resolves: rhbz#1926622 - Add support to verify authentication indicators in pam_sss_gss
- Resolves: rhbz#1926454 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0.
- Resolves: rhbz#1893159 - Default debug level should report all errors / failures (additional patch)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.0-1" date="1620648000">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1930535 - [abrt] [faf] sssd: monitor_service_shutdown(): /usr/sbin/sssd killed by 11
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1945888 - Inconsistant debug level for connection logging
- Resolves: rhbz#1948657 - pam_sss_gss.so doesn't work with large kerberos tickets
- Resolves: rhbz#1949149 - [RFE] Poor man's backtrace
- Resolves: rhbz#1920500 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR
- Resolves: rhbz#1923964 - [RFE] SSSD Error Msg Improvement: write_krb5info_file failed, authentication might fail.
- Resolves: rhbz#1928648 - SSSD logs improvements: clarify which config option applies to each timeout in the logs
- Resolves: rhbz#1632159 - sssd-kcm starts successfully for non existent socket_path
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm
- Resolves: rhbz#1925505 - [RFE] improve the sssd refresh timers for SUDO queries
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1925561 - sssd-ldap(5) does not report how to disable the SUDO smart queries
- Resolves: rhbz#1925621 - document impact of indices and of scope on performance of LDAP queries
- Resolves: rhbz#1855320 - [RFE] RHEL8 sssd: inheritance of the case_sensitive parameter for subdomains.
- Resolves: rhbz#1925608 - [RFE] make 'random_offset' addon to 'offline_timeout' option configurable
- Resolves: rhbz#1447945 - man page / docs update required: if two certificate matching rules with the same priority match only one is used
- Resolves: rhbz#1703436 - sssd not thread-safe in innetgr()
- Resolves: rhbz#1713143 - SSSD does not translate the 2FA text labels("first factor" / "second factor") on GDM login and screensaver unlock screen
- Resolves: rhbz#1888977 - sss_override: Usage limitations clarification in man page
- Resolves: rhbz#1890177 - Clarify "single_prompt" option in "PROMPTING CONFIGURATION SECTION" section of sssd.conf man page
- Resolves: rhbz#1902280 - fix sss_cache to also reset cached timestamp
- Resolves: rhbz#1935683 - SSSD not detecting subdomain from AD forest (RHEL 8.3)
- Resolves: rhbz#1937919 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7
- Resolves: rhbz#1944665 - No gpo found and ad_gpo_implicit_deny set to True still permits user login
- Resolves: rhbz#1919942 - sss_override does not take precedence over override_homedir directive</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-1" date="1623153600">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1917444 - SSSD Error Msg Improvement: Server resolution failed: [2]: No such file or directory
- Resolves: rhbz#1917511 - SSSD Error Msg Improvement: Failed to resolve server 'server.example.com': Error reading file
- Resolves: rhbz#1917535 - sssd.conf man page: parameter dns_resolver_server_timeout and dns_resolver_op_timeout
- Resolves: rhbz#1940509 - [RFE] Health and Support Analyzer: Link frontend to backend requests
- Resolves: rhbz#1649464 - auto_private_groups not working as expected with posix ipa/ad trust
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1961215 - Invalid sssd-kcm return code if requested operation is not found
- Resolves: rhbz#1837090 - SSSD fails nss_getby_name for IPA user with SID if the user has user private group
- Resolves: rhbz#1879869 - sudo commands incorrectly exports the KRB5CCNAME environment variable
- Resolves: rhbz#1962550 - sss_pac_make_request fails on systems joined to Active Directory.
- Resolves: rhbz#1737489 - [RFE] SSSD should honor default Kerberos settings (keytab name) in /etc/krb5.conf</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-2" date="1624276800">- Resolves: rhbz#1974257 - 'debug_microseconds' config option is broken
- Resolves: rhbz#1936902 - SSSD Error Msg Improvement: Invalid argument
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm (additional patches and rebuild)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-1" date="1626091200">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1693379 - sssd_be and sss_cache too heavy on CPU
- Resolves: rhbz#1909373 - Missing search index for `originalADgidNumber`
- Resolves: rhbz#1954630 - [RFE] Improve debug messages by adding a unique tag for each request the backend is handling
- Resolves: rhbz#1936891 - SSSD Error Msg Improvement: Bad address
- Resolves: rhbz#1364596 - sssd still showing ipa user after removed from last group
- Resolves: rhbz#1979404 - Changes made to /etc/pam.d/sssd-shadowutils are overwritten back to default on sssd-common package upgrade</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2" date="1627905600">- Resolves: rhbz#1975169 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-8]
- Resolves: rhbz#1962042 - [sssd] RHEL 8.5 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.1" date="1634558400">- Resolves: rhbz#2014460 - tps tests fail with cross dependency on sssd debuginfo package: removal of 'sssd-libwbclient-debuginfo' is missing [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.2" date="1638187200">- Resolves: rhbz#2018440 - 2.5.x based SSSD adds more AD domains than it should based on the configuration file (not trusted and from a different forest) [rhel-8.5.0.z]
- Resolves: rhbz#2016923 - autofs lookups for unknown mounts are delayed for 50s [rhel-8.5.0.z]
- Resolves: rhbz#2021499 - Make backtrace less "chatty" (avoid duplicate backtraces) [rhel-8.5.0.z]
- Resolves: rhbz#2013379 - Lookup with fully-qualified name does not work with 'cache_first = True' [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.3" date="1638878400">- Resolves: rhbz#2028828 - pam responder does not call initgroups to refresh the user entry [rhel-8.5.0.z]</changelog>
</package>
<package pkgid="bb4d5b3b7bb9f37774cfd5b2a3c4ac51a7eac68d6c30881fc09fd6ee016a4b80" name="python3-sss-murmur-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="2.el8_5.4"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-8" date="1613131200">- Resolves: rhbz#1926622 - Add support to verify authentication indicators in pam_sss_gss
- Resolves: rhbz#1926454 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0.
- Resolves: rhbz#1893159 - Default debug level should report all errors / failures (additional patch)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.0-1" date="1620648000">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1930535 - [abrt] [faf] sssd: monitor_service_shutdown(): /usr/sbin/sssd killed by 11
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1945888 - Inconsistant debug level for connection logging
- Resolves: rhbz#1948657 - pam_sss_gss.so doesn't work with large kerberos tickets
- Resolves: rhbz#1949149 - [RFE] Poor man's backtrace
- Resolves: rhbz#1920500 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR
- Resolves: rhbz#1923964 - [RFE] SSSD Error Msg Improvement: write_krb5info_file failed, authentication might fail.
- Resolves: rhbz#1928648 - SSSD logs improvements: clarify which config option applies to each timeout in the logs
- Resolves: rhbz#1632159 - sssd-kcm starts successfully for non existent socket_path
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm
- Resolves: rhbz#1925505 - [RFE] improve the sssd refresh timers for SUDO queries
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1925561 - sssd-ldap(5) does not report how to disable the SUDO smart queries
- Resolves: rhbz#1925621 - document impact of indices and of scope on performance of LDAP queries
- Resolves: rhbz#1855320 - [RFE] RHEL8 sssd: inheritance of the case_sensitive parameter for subdomains.
- Resolves: rhbz#1925608 - [RFE] make 'random_offset' addon to 'offline_timeout' option configurable
- Resolves: rhbz#1447945 - man page / docs update required: if two certificate matching rules with the same priority match only one is used
- Resolves: rhbz#1703436 - sssd not thread-safe in innetgr()
- Resolves: rhbz#1713143 - SSSD does not translate the 2FA text labels("first factor" / "second factor") on GDM login and screensaver unlock screen
- Resolves: rhbz#1888977 - sss_override: Usage limitations clarification in man page
- Resolves: rhbz#1890177 - Clarify "single_prompt" option in "PROMPTING CONFIGURATION SECTION" section of sssd.conf man page
- Resolves: rhbz#1902280 - fix sss_cache to also reset cached timestamp
- Resolves: rhbz#1935683 - SSSD not detecting subdomain from AD forest (RHEL 8.3)
- Resolves: rhbz#1937919 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7
- Resolves: rhbz#1944665 - No gpo found and ad_gpo_implicit_deny set to True still permits user login
- Resolves: rhbz#1919942 - sss_override does not take precedence over override_homedir directive</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-1" date="1623153600">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1917444 - SSSD Error Msg Improvement: Server resolution failed: [2]: No such file or directory
- Resolves: rhbz#1917511 - SSSD Error Msg Improvement: Failed to resolve server 'server.example.com': Error reading file
- Resolves: rhbz#1917535 - sssd.conf man page: parameter dns_resolver_server_timeout and dns_resolver_op_timeout
- Resolves: rhbz#1940509 - [RFE] Health and Support Analyzer: Link frontend to backend requests
- Resolves: rhbz#1649464 - auto_private_groups not working as expected with posix ipa/ad trust
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1961215 - Invalid sssd-kcm return code if requested operation is not found
- Resolves: rhbz#1837090 - SSSD fails nss_getby_name for IPA user with SID if the user has user private group
- Resolves: rhbz#1879869 - sudo commands incorrectly exports the KRB5CCNAME environment variable
- Resolves: rhbz#1962550 - sss_pac_make_request fails on systems joined to Active Directory.
- Resolves: rhbz#1737489 - [RFE] SSSD should honor default Kerberos settings (keytab name) in /etc/krb5.conf</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-2" date="1624276800">- Resolves: rhbz#1974257 - 'debug_microseconds' config option is broken
- Resolves: rhbz#1936902 - SSSD Error Msg Improvement: Invalid argument
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm (additional patches and rebuild)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-1" date="1626091200">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1693379 - sssd_be and sss_cache too heavy on CPU
- Resolves: rhbz#1909373 - Missing search index for `originalADgidNumber`
- Resolves: rhbz#1954630 - [RFE] Improve debug messages by adding a unique tag for each request the backend is handling
- Resolves: rhbz#1936891 - SSSD Error Msg Improvement: Bad address
- Resolves: rhbz#1364596 - sssd still showing ipa user after removed from last group
- Resolves: rhbz#1979404 - Changes made to /etc/pam.d/sssd-shadowutils are overwritten back to default on sssd-common package upgrade</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2" date="1627905600">- Resolves: rhbz#1975169 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-8]
- Resolves: rhbz#1962042 - [sssd] RHEL 8.5 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.1" date="1634558400">- Resolves: rhbz#2014460 - tps tests fail with cross dependency on sssd debuginfo package: removal of 'sssd-libwbclient-debuginfo' is missing [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.2" date="1638187200">- Resolves: rhbz#2018440 - 2.5.x based SSSD adds more AD domains than it should based on the configuration file (not trusted and from a different forest) [rhel-8.5.0.z]
- Resolves: rhbz#2016923 - autofs lookups for unknown mounts are delayed for 50s [rhel-8.5.0.z]
- Resolves: rhbz#2021499 - Make backtrace less "chatty" (avoid duplicate backtraces) [rhel-8.5.0.z]
- Resolves: rhbz#2013379 - Lookup with fully-qualified name does not work with 'cache_first = True' [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.3" date="1638878400">- Resolves: rhbz#2028828 - pam responder does not call initgroups to refresh the user entry [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.4" date="1642420800">- Resolves: rhbz#2030651 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries [rhel-8.5.0.z]
- Resolves: rhbz#2035285 - AD Domain in the AD Forest Missing after sssd latest update [rhel-8.5.0.z]</changelog>
</package>
<package pkgid="4f9590a275dd56c18e01458334e494de99916ac45b37be6dd4fb9ae452400203" name="rpm-build-libs-debuginfo" arch="i686">
  <version epoch="0" ver="4.14.3" rel="19.el8_5.2"/>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-12" date="1612872000">- Bump up the limit of signature header to 64MB (#1918777)
- Add fapolicyd plugin (#1923167)
- Unblock signals in forked scriptlets (#1913765)
- Fix ambiguous diagnostics output on file triggers (#1883338)
- Ensure ELF files get stripped when debuginfo is disabled (#1634084)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-13" date="1613131200">- Fix minor issues found by COVSCAN in fapolicyd plugin
- Actually honor libarchive bcond at configure time (#1902887)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-14" date="1622116800">- Be more careful about copying data from signature header (#1958477)
- Fixes CVE-2021-20271</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-15" date="1626350400">- Add out-of-bounds checks to hdrblobInit() (#1929445)
- Fixes CVE-2021-20266
- Fix regression in brp-strip causing kmods to lose SecureBoot sig (#1967291)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-16" date="1629374400">- Add support for read-only sqlite rpmdb (#1938928)
- Drop compat .decode() method from returned Py3 strings (#1840142)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-17" date="1629720000">- Address important covscan issues (#1996665)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-18" date="1629979200">- Address important covscan issues (#1996665), vol. 2</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-19" date="1633521600">- Unbreak in-tree kmod strip by reverting brp-strip fix (#1967291)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-19.1" date="1641470400">- Validate and require subkey binding sigs on PGP pubkeys (#2022537)
- Fixes CVE-2021-3521</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-19.2" date="1641816000">- Address covscan issues in binding sigs validation patch (#2022537)</changelog>
</package>
<package pkgid="8ae44088c7ebd293014b83b9c3dbdaaf8a78d3817bcf6b4d8c91a7a278c0cc09" name="rpm-build-libs-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.14.3" rel="19.el8_5.2"/>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-12" date="1612872000">- Bump up the limit of signature header to 64MB (#1918777)
- Add fapolicyd plugin (#1923167)
- Unblock signals in forked scriptlets (#1913765)
- Fix ambiguous diagnostics output on file triggers (#1883338)
- Ensure ELF files get stripped when debuginfo is disabled (#1634084)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-13" date="1613131200">- Fix minor issues found by COVSCAN in fapolicyd plugin
- Actually honor libarchive bcond at configure time (#1902887)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-14" date="1622116800">- Be more careful about copying data from signature header (#1958477)
- Fixes CVE-2021-20271</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-15" date="1626350400">- Add out-of-bounds checks to hdrblobInit() (#1929445)
- Fixes CVE-2021-20266
- Fix regression in brp-strip causing kmods to lose SecureBoot sig (#1967291)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-16" date="1629374400">- Add support for read-only sqlite rpmdb (#1938928)
- Drop compat .decode() method from returned Py3 strings (#1840142)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-17" date="1629720000">- Address important covscan issues (#1996665)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-18" date="1629979200">- Address important covscan issues (#1996665), vol. 2</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-19" date="1633521600">- Unbreak in-tree kmod strip by reverting brp-strip fix (#1967291)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-19.1" date="1641470400">- Validate and require subkey binding sigs on PGP pubkeys (#2022537)
- Fixes CVE-2021-3521</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-19.2" date="1641816000">- Address covscan issues in binding sigs validation patch (#2022537)</changelog>
</package>
<package pkgid="03e2f6c8f0b9a76bab2821de25f14a6e4603ba1c412302d3ac127505cd5fab6d" name="rpm-debuginfo" arch="i686">
  <version epoch="0" ver="4.14.3" rel="19.el8_5.2"/>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-12" date="1612872000">- Bump up the limit of signature header to 64MB (#1918777)
- Add fapolicyd plugin (#1923167)
- Unblock signals in forked scriptlets (#1913765)
- Fix ambiguous diagnostics output on file triggers (#1883338)
- Ensure ELF files get stripped when debuginfo is disabled (#1634084)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-13" date="1613131200">- Fix minor issues found by COVSCAN in fapolicyd plugin
- Actually honor libarchive bcond at configure time (#1902887)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-14" date="1622116800">- Be more careful about copying data from signature header (#1958477)
- Fixes CVE-2021-20271</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-15" date="1626350400">- Add out-of-bounds checks to hdrblobInit() (#1929445)
- Fixes CVE-2021-20266
- Fix regression in brp-strip causing kmods to lose SecureBoot sig (#1967291)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-16" date="1629374400">- Add support for read-only sqlite rpmdb (#1938928)
- Drop compat .decode() method from returned Py3 strings (#1840142)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-17" date="1629720000">- Address important covscan issues (#1996665)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-18" date="1629979200">- Address important covscan issues (#1996665), vol. 2</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-19" date="1633521600">- Unbreak in-tree kmod strip by reverting brp-strip fix (#1967291)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-19.1" date="1641470400">- Validate and require subkey binding sigs on PGP pubkeys (#2022537)
- Fixes CVE-2021-3521</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-19.2" date="1641816000">- Address covscan issues in binding sigs validation patch (#2022537)</changelog>
</package>
<package pkgid="bb03bb79137e86a9de90323161aac87884135704a77ce6706b74bb5938674982" name="rpm-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.14.3" rel="19.el8_5.2"/>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-12" date="1612872000">- Bump up the limit of signature header to 64MB (#1918777)
- Add fapolicyd plugin (#1923167)
- Unblock signals in forked scriptlets (#1913765)
- Fix ambiguous diagnostics output on file triggers (#1883338)
- Ensure ELF files get stripped when debuginfo is disabled (#1634084)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-13" date="1613131200">- Fix minor issues found by COVSCAN in fapolicyd plugin
- Actually honor libarchive bcond at configure time (#1902887)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-14" date="1622116800">- Be more careful about copying data from signature header (#1958477)
- Fixes CVE-2021-20271</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-15" date="1626350400">- Add out-of-bounds checks to hdrblobInit() (#1929445)
- Fixes CVE-2021-20266
- Fix regression in brp-strip causing kmods to lose SecureBoot sig (#1967291)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-16" date="1629374400">- Add support for read-only sqlite rpmdb (#1938928)
- Drop compat .decode() method from returned Py3 strings (#1840142)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-17" date="1629720000">- Address important covscan issues (#1996665)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-18" date="1629979200">- Address important covscan issues (#1996665), vol. 2</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-19" date="1633521600">- Unbreak in-tree kmod strip by reverting brp-strip fix (#1967291)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-19.1" date="1641470400">- Validate and require subkey binding sigs on PGP pubkeys (#2022537)
- Fixes CVE-2021-3521</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-19.2" date="1641816000">- Address covscan issues in binding sigs validation patch (#2022537)</changelog>
</package>
<package pkgid="b81ab00b809c24a2869826c452ccb043730c596293b99fc3053c181ecb722d8e" name="rpm-debugsource" arch="i686">
  <version epoch="0" ver="4.14.3" rel="19.el8_5.2"/>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-12" date="1612872000">- Bump up the limit of signature header to 64MB (#1918777)
- Add fapolicyd plugin (#1923167)
- Unblock signals in forked scriptlets (#1913765)
- Fix ambiguous diagnostics output on file triggers (#1883338)
- Ensure ELF files get stripped when debuginfo is disabled (#1634084)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-13" date="1613131200">- Fix minor issues found by COVSCAN in fapolicyd plugin
- Actually honor libarchive bcond at configure time (#1902887)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-14" date="1622116800">- Be more careful about copying data from signature header (#1958477)
- Fixes CVE-2021-20271</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-15" date="1626350400">- Add out-of-bounds checks to hdrblobInit() (#1929445)
- Fixes CVE-2021-20266
- Fix regression in brp-strip causing kmods to lose SecureBoot sig (#1967291)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-16" date="1629374400">- Add support for read-only sqlite rpmdb (#1938928)
- Drop compat .decode() method from returned Py3 strings (#1840142)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-17" date="1629720000">- Address important covscan issues (#1996665)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-18" date="1629979200">- Address important covscan issues (#1996665), vol. 2</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-19" date="1633521600">- Unbreak in-tree kmod strip by reverting brp-strip fix (#1967291)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-19.1" date="1641470400">- Validate and require subkey binding sigs on PGP pubkeys (#2022537)
- Fixes CVE-2021-3521</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-19.2" date="1641816000">- Address covscan issues in binding sigs validation patch (#2022537)</changelog>
</package>
<package pkgid="e15c58b7c35637e215ba0f0ea041e32c2a03c295bdb534c7fabca01d34bcb588" name="rpm-debugsource" arch="x86_64">
  <version epoch="0" ver="4.14.3" rel="19.el8_5.2"/>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-12" date="1612872000">- Bump up the limit of signature header to 64MB (#1918777)
- Add fapolicyd plugin (#1923167)
- Unblock signals in forked scriptlets (#1913765)
- Fix ambiguous diagnostics output on file triggers (#1883338)
- Ensure ELF files get stripped when debuginfo is disabled (#1634084)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-13" date="1613131200">- Fix minor issues found by COVSCAN in fapolicyd plugin
- Actually honor libarchive bcond at configure time (#1902887)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-14" date="1622116800">- Be more careful about copying data from signature header (#1958477)
- Fixes CVE-2021-20271</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-15" date="1626350400">- Add out-of-bounds checks to hdrblobInit() (#1929445)
- Fixes CVE-2021-20266
- Fix regression in brp-strip causing kmods to lose SecureBoot sig (#1967291)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-16" date="1629374400">- Add support for read-only sqlite rpmdb (#1938928)
- Drop compat .decode() method from returned Py3 strings (#1840142)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-17" date="1629720000">- Address important covscan issues (#1996665)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-18" date="1629979200">- Address important covscan issues (#1996665), vol. 2</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-19" date="1633521600">- Unbreak in-tree kmod strip by reverting brp-strip fix (#1967291)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-19.1" date="1641470400">- Validate and require subkey binding sigs on PGP pubkeys (#2022537)
- Fixes CVE-2021-3521</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-19.2" date="1641816000">- Address covscan issues in binding sigs validation patch (#2022537)</changelog>
</package>
<package pkgid="e4c4db1946b4a376d748b8683061842f1ba06d16c82f33edd100337c36f3cadc" name="rpm-devel-debuginfo" arch="i686">
  <version epoch="0" ver="4.14.3" rel="19.el8_5.2"/>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-12" date="1612872000">- Bump up the limit of signature header to 64MB (#1918777)
- Add fapolicyd plugin (#1923167)
- Unblock signals in forked scriptlets (#1913765)
- Fix ambiguous diagnostics output on file triggers (#1883338)
- Ensure ELF files get stripped when debuginfo is disabled (#1634084)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-13" date="1613131200">- Fix minor issues found by COVSCAN in fapolicyd plugin
- Actually honor libarchive bcond at configure time (#1902887)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-14" date="1622116800">- Be more careful about copying data from signature header (#1958477)
- Fixes CVE-2021-20271</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-15" date="1626350400">- Add out-of-bounds checks to hdrblobInit() (#1929445)
- Fixes CVE-2021-20266
- Fix regression in brp-strip causing kmods to lose SecureBoot sig (#1967291)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-16" date="1629374400">- Add support for read-only sqlite rpmdb (#1938928)
- Drop compat .decode() method from returned Py3 strings (#1840142)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-17" date="1629720000">- Address important covscan issues (#1996665)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-18" date="1629979200">- Address important covscan issues (#1996665), vol. 2</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-19" date="1633521600">- Unbreak in-tree kmod strip by reverting brp-strip fix (#1967291)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-19.1" date="1641470400">- Validate and require subkey binding sigs on PGP pubkeys (#2022537)
- Fixes CVE-2021-3521</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-19.2" date="1641816000">- Address covscan issues in binding sigs validation patch (#2022537)</changelog>
</package>
<package pkgid="65e86e8f22b78872de9f146e421acb8feb521b3fd06b43a9a7f3dca6e3cc27e1" name="rpm-devel-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.14.3" rel="19.el8_5.2"/>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-12" date="1612872000">- Bump up the limit of signature header to 64MB (#1918777)
- Add fapolicyd plugin (#1923167)
- Unblock signals in forked scriptlets (#1913765)
- Fix ambiguous diagnostics output on file triggers (#1883338)
- Ensure ELF files get stripped when debuginfo is disabled (#1634084)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-13" date="1613131200">- Fix minor issues found by COVSCAN in fapolicyd plugin
- Actually honor libarchive bcond at configure time (#1902887)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-14" date="1622116800">- Be more careful about copying data from signature header (#1958477)
- Fixes CVE-2021-20271</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-15" date="1626350400">- Add out-of-bounds checks to hdrblobInit() (#1929445)
- Fixes CVE-2021-20266
- Fix regression in brp-strip causing kmods to lose SecureBoot sig (#1967291)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-16" date="1629374400">- Add support for read-only sqlite rpmdb (#1938928)
- Drop compat .decode() method from returned Py3 strings (#1840142)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-17" date="1629720000">- Address important covscan issues (#1996665)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-18" date="1629979200">- Address important covscan issues (#1996665), vol. 2</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-19" date="1633521600">- Unbreak in-tree kmod strip by reverting brp-strip fix (#1967291)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-19.1" date="1641470400">- Validate and require subkey binding sigs on PGP pubkeys (#2022537)
- Fixes CVE-2021-3521</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-19.2" date="1641816000">- Address covscan issues in binding sigs validation patch (#2022537)</changelog>
</package>
<package pkgid="0a2df24da9e067c30370066f0bc37ad374c453a3e7401ffe51a7eaca94f7035a" name="rpm-libs-debuginfo" arch="i686">
  <version epoch="0" ver="4.14.3" rel="19.el8_5.2"/>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-12" date="1612872000">- Bump up the limit of signature header to 64MB (#1918777)
- Add fapolicyd plugin (#1923167)
- Unblock signals in forked scriptlets (#1913765)
- Fix ambiguous diagnostics output on file triggers (#1883338)
- Ensure ELF files get stripped when debuginfo is disabled (#1634084)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-13" date="1613131200">- Fix minor issues found by COVSCAN in fapolicyd plugin
- Actually honor libarchive bcond at configure time (#1902887)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-14" date="1622116800">- Be more careful about copying data from signature header (#1958477)
- Fixes CVE-2021-20271</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-15" date="1626350400">- Add out-of-bounds checks to hdrblobInit() (#1929445)
- Fixes CVE-2021-20266
- Fix regression in brp-strip causing kmods to lose SecureBoot sig (#1967291)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-16" date="1629374400">- Add support for read-only sqlite rpmdb (#1938928)
- Drop compat .decode() method from returned Py3 strings (#1840142)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-17" date="1629720000">- Address important covscan issues (#1996665)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-18" date="1629979200">- Address important covscan issues (#1996665), vol. 2</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-19" date="1633521600">- Unbreak in-tree kmod strip by reverting brp-strip fix (#1967291)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-19.1" date="1641470400">- Validate and require subkey binding sigs on PGP pubkeys (#2022537)
- Fixes CVE-2021-3521</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-19.2" date="1641816000">- Address covscan issues in binding sigs validation patch (#2022537)</changelog>
</package>
<package pkgid="1c7fb0ab89205740a097b66e1f070d07a1c8c274e339a0d6e314ff54c5f26a8e" name="rpm-libs-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.14.3" rel="19.el8_5.2"/>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-12" date="1612872000">- Bump up the limit of signature header to 64MB (#1918777)
- Add fapolicyd plugin (#1923167)
- Unblock signals in forked scriptlets (#1913765)
- Fix ambiguous diagnostics output on file triggers (#1883338)
- Ensure ELF files get stripped when debuginfo is disabled (#1634084)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-13" date="1613131200">- Fix minor issues found by COVSCAN in fapolicyd plugin
- Actually honor libarchive bcond at configure time (#1902887)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-14" date="1622116800">- Be more careful about copying data from signature header (#1958477)
- Fixes CVE-2021-20271</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-15" date="1626350400">- Add out-of-bounds checks to hdrblobInit() (#1929445)
- Fixes CVE-2021-20266
- Fix regression in brp-strip causing kmods to lose SecureBoot sig (#1967291)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-16" date="1629374400">- Add support for read-only sqlite rpmdb (#1938928)
- Drop compat .decode() method from returned Py3 strings (#1840142)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-17" date="1629720000">- Address important covscan issues (#1996665)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-18" date="1629979200">- Address important covscan issues (#1996665), vol. 2</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-19" date="1633521600">- Unbreak in-tree kmod strip by reverting brp-strip fix (#1967291)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-19.1" date="1641470400">- Validate and require subkey binding sigs on PGP pubkeys (#2022537)
- Fixes CVE-2021-3521</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-19.2" date="1641816000">- Address covscan issues in binding sigs validation patch (#2022537)</changelog>
</package>
<package pkgid="4a53a4032c3fb67d955145221b249a18a1820bcdf2ab534fdf2bf35541a61156" name="rpm-plugin-ima-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.14.3" rel="19.el8_5.2"/>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-12" date="1612872000">- Bump up the limit of signature header to 64MB (#1918777)
- Add fapolicyd plugin (#1923167)
- Unblock signals in forked scriptlets (#1913765)
- Fix ambiguous diagnostics output on file triggers (#1883338)
- Ensure ELF files get stripped when debuginfo is disabled (#1634084)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-13" date="1613131200">- Fix minor issues found by COVSCAN in fapolicyd plugin
- Actually honor libarchive bcond at configure time (#1902887)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-14" date="1622116800">- Be more careful about copying data from signature header (#1958477)
- Fixes CVE-2021-20271</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-15" date="1626350400">- Add out-of-bounds checks to hdrblobInit() (#1929445)
- Fixes CVE-2021-20266
- Fix regression in brp-strip causing kmods to lose SecureBoot sig (#1967291)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-16" date="1629374400">- Add support for read-only sqlite rpmdb (#1938928)
- Drop compat .decode() method from returned Py3 strings (#1840142)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-17" date="1629720000">- Address important covscan issues (#1996665)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-18" date="1629979200">- Address important covscan issues (#1996665), vol. 2</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-19" date="1633521600">- Unbreak in-tree kmod strip by reverting brp-strip fix (#1967291)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-19.1" date="1641470400">- Validate and require subkey binding sigs on PGP pubkeys (#2022537)
- Fixes CVE-2021-3521</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-19.2" date="1641816000">- Address covscan issues in binding sigs validation patch (#2022537)</changelog>
</package>
<package pkgid="a9b9f4c7da13fb2390f4fc18b460e61c584fba71a2115d2df96ef36cafb10cc5" name="rpm-plugin-prioreset-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.14.3" rel="19.el8_5.2"/>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-12" date="1612872000">- Bump up the limit of signature header to 64MB (#1918777)
- Add fapolicyd plugin (#1923167)
- Unblock signals in forked scriptlets (#1913765)
- Fix ambiguous diagnostics output on file triggers (#1883338)
- Ensure ELF files get stripped when debuginfo is disabled (#1634084)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-13" date="1613131200">- Fix minor issues found by COVSCAN in fapolicyd plugin
- Actually honor libarchive bcond at configure time (#1902887)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-14" date="1622116800">- Be more careful about copying data from signature header (#1958477)
- Fixes CVE-2021-20271</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-15" date="1626350400">- Add out-of-bounds checks to hdrblobInit() (#1929445)
- Fixes CVE-2021-20266
- Fix regression in brp-strip causing kmods to lose SecureBoot sig (#1967291)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-16" date="1629374400">- Add support for read-only sqlite rpmdb (#1938928)
- Drop compat .decode() method from returned Py3 strings (#1840142)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-17" date="1629720000">- Address important covscan issues (#1996665)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-18" date="1629979200">- Address important covscan issues (#1996665), vol. 2</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-19" date="1633521600">- Unbreak in-tree kmod strip by reverting brp-strip fix (#1967291)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-19.1" date="1641470400">- Validate and require subkey binding sigs on PGP pubkeys (#2022537)
- Fixes CVE-2021-3521</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-19.2" date="1641816000">- Address covscan issues in binding sigs validation patch (#2022537)</changelog>
</package>
<package pkgid="5915117f892bb324b0da5f26d091fd21151a1748563922ff41b5f67d7e60df93" name="rpm-plugin-selinux-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.14.3" rel="19.el8_5.2"/>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-12" date="1612872000">- Bump up the limit of signature header to 64MB (#1918777)
- Add fapolicyd plugin (#1923167)
- Unblock signals in forked scriptlets (#1913765)
- Fix ambiguous diagnostics output on file triggers (#1883338)
- Ensure ELF files get stripped when debuginfo is disabled (#1634084)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-13" date="1613131200">- Fix minor issues found by COVSCAN in fapolicyd plugin
- Actually honor libarchive bcond at configure time (#1902887)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-14" date="1622116800">- Be more careful about copying data from signature header (#1958477)
- Fixes CVE-2021-20271</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-15" date="1626350400">- Add out-of-bounds checks to hdrblobInit() (#1929445)
- Fixes CVE-2021-20266
- Fix regression in brp-strip causing kmods to lose SecureBoot sig (#1967291)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-16" date="1629374400">- Add support for read-only sqlite rpmdb (#1938928)
- Drop compat .decode() method from returned Py3 strings (#1840142)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-17" date="1629720000">- Address important covscan issues (#1996665)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-18" date="1629979200">- Address important covscan issues (#1996665), vol. 2</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-19" date="1633521600">- Unbreak in-tree kmod strip by reverting brp-strip fix (#1967291)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-19.1" date="1641470400">- Validate and require subkey binding sigs on PGP pubkeys (#2022537)
- Fixes CVE-2021-3521</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-19.2" date="1641816000">- Address covscan issues in binding sigs validation patch (#2022537)</changelog>
</package>
<package pkgid="c2111ea32faa25e6bfa1c178ccfde847d427067f5fabfdec6c0f7c1b7b895fcc" name="rpm-plugin-syslog-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.14.3" rel="19.el8_5.2"/>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-12" date="1612872000">- Bump up the limit of signature header to 64MB (#1918777)
- Add fapolicyd plugin (#1923167)
- Unblock signals in forked scriptlets (#1913765)
- Fix ambiguous diagnostics output on file triggers (#1883338)
- Ensure ELF files get stripped when debuginfo is disabled (#1634084)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-13" date="1613131200">- Fix minor issues found by COVSCAN in fapolicyd plugin
- Actually honor libarchive bcond at configure time (#1902887)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-14" date="1622116800">- Be more careful about copying data from signature header (#1958477)
- Fixes CVE-2021-20271</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-15" date="1626350400">- Add out-of-bounds checks to hdrblobInit() (#1929445)
- Fixes CVE-2021-20266
- Fix regression in brp-strip causing kmods to lose SecureBoot sig (#1967291)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-16" date="1629374400">- Add support for read-only sqlite rpmdb (#1938928)
- Drop compat .decode() method from returned Py3 strings (#1840142)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-17" date="1629720000">- Address important covscan issues (#1996665)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-18" date="1629979200">- Address important covscan issues (#1996665), vol. 2</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-19" date="1633521600">- Unbreak in-tree kmod strip by reverting brp-strip fix (#1967291)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-19.1" date="1641470400">- Validate and require subkey binding sigs on PGP pubkeys (#2022537)
- Fixes CVE-2021-3521</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-19.2" date="1641816000">- Address covscan issues in binding sigs validation patch (#2022537)</changelog>
</package>
<package pkgid="9d9230a999fd704ad0ac42819416b5cc36bf0f9c68f24dbb04baa75ce995555d" name="rpm-plugin-systemd-inhibit-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.14.3" rel="19.el8_5.2"/>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-12" date="1612872000">- Bump up the limit of signature header to 64MB (#1918777)
- Add fapolicyd plugin (#1923167)
- Unblock signals in forked scriptlets (#1913765)
- Fix ambiguous diagnostics output on file triggers (#1883338)
- Ensure ELF files get stripped when debuginfo is disabled (#1634084)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-13" date="1613131200">- Fix minor issues found by COVSCAN in fapolicyd plugin
- Actually honor libarchive bcond at configure time (#1902887)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-14" date="1622116800">- Be more careful about copying data from signature header (#1958477)
- Fixes CVE-2021-20271</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-15" date="1626350400">- Add out-of-bounds checks to hdrblobInit() (#1929445)
- Fixes CVE-2021-20266
- Fix regression in brp-strip causing kmods to lose SecureBoot sig (#1967291)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-16" date="1629374400">- Add support for read-only sqlite rpmdb (#1938928)
- Drop compat .decode() method from returned Py3 strings (#1840142)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-17" date="1629720000">- Address important covscan issues (#1996665)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-18" date="1629979200">- Address important covscan issues (#1996665), vol. 2</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-19" date="1633521600">- Unbreak in-tree kmod strip by reverting brp-strip fix (#1967291)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-19.1" date="1641470400">- Validate and require subkey binding sigs on PGP pubkeys (#2022537)
- Fixes CVE-2021-3521</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-19.2" date="1641816000">- Address covscan issues in binding sigs validation patch (#2022537)</changelog>
</package>
<package pkgid="14e132f0cbd7ab67cc9ed6b7b37cb0896fb8cb1301911a281b521ab951cf9349" name="rpm-sign-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.14.3" rel="19.el8_5.2"/>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-12" date="1612872000">- Bump up the limit of signature header to 64MB (#1918777)
- Add fapolicyd plugin (#1923167)
- Unblock signals in forked scriptlets (#1913765)
- Fix ambiguous diagnostics output on file triggers (#1883338)
- Ensure ELF files get stripped when debuginfo is disabled (#1634084)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-13" date="1613131200">- Fix minor issues found by COVSCAN in fapolicyd plugin
- Actually honor libarchive bcond at configure time (#1902887)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-14" date="1622116800">- Be more careful about copying data from signature header (#1958477)
- Fixes CVE-2021-20271</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-15" date="1626350400">- Add out-of-bounds checks to hdrblobInit() (#1929445)
- Fixes CVE-2021-20266
- Fix regression in brp-strip causing kmods to lose SecureBoot sig (#1967291)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-16" date="1629374400">- Add support for read-only sqlite rpmdb (#1938928)
- Drop compat .decode() method from returned Py3 strings (#1840142)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-17" date="1629720000">- Address important covscan issues (#1996665)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-18" date="1629979200">- Address important covscan issues (#1996665), vol. 2</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-19" date="1633521600">- Unbreak in-tree kmod strip by reverting brp-strip fix (#1967291)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-19.1" date="1641470400">- Validate and require subkey binding sigs on PGP pubkeys (#2022537)
- Fixes CVE-2021-3521</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-19.2" date="1641816000">- Address covscan issues in binding sigs validation patch (#2022537)</changelog>
</package>
<package pkgid="83a9e4defbd5e2d130bf187a1ce1752bb28c5f0a4765e254fbf96cacd2808f52" name="samba-client-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.14.5" rel="10.el8_5"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-0" date="1623326400">- related: rhbz#1944657 - Update to version 4.14.5
- resolves: rhbz#1969787 - Fix memory leak in RPC server
- resolves: rhbz#1954974 - Validate smb.conf option for domain members with testparm
- resolves: rhbz#1963298 - Fix smbd trying to delete files with wrong permissions
- resolves: rhbz#1890008 - Update rpcclient manpage to list all available commands
- resolves: rhbz#1857254 - Update smbcacls manpage to document inhertance flags</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-1" date="1624536000">- resolves: rhbz#1974792 - Create a subpackage for vfs-io-uring
- resolves: rhbz#1965397 - Raise log level for dfs ENOENT debug message</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; -  4.14.4-2" date="1626177600">- related: rhbz#1980346 - Rebuild for libtalloc 0.11.0</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-4" date="1636113600">- resolves: rhbz#2021163
  Fix CVE-2016-2124
- resolves: rhbz#2021167
  Fix CVE-2021-23192
- resolves: rhbz#2021171
  Fix CVE-2020-25717</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-5" date="1636459200">- resolves: rhbz#2021493 - Add missing PAC buffer types to krb5pac.idl
- related: rbhz#2021171 - Fix regression with 'allow trusted domains = no'</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.14.5-6" date="1636804800">- related: rhbz#2021171 - Fix CVE-2020-25717
- Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-7" date="1637582400">- related: rhbz#2021171 - Fix CVE-2020-25717
- Fix running ktest (selftest)</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.14.5-8" date="1638446400">- resolves: rhbz#2026717 - Dir containing dangling symlinks cannot be deleted</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-9" date="1643284800">- resolves: rhbz#2046174 - Fix username map script regression of CVE-2020-25717
- resolves: rhbz#2046160 - Fix possible segfault while joining a domain
- resolves: rhbz#2046152 - Fix CVE-2021-44142</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.14.5-10" date="1645531200">- resolves: rhbz#2029417 - Fix virusfilter_vfs_openat: Not scanned: Directory or special file</changelog>
</package>
<package pkgid="40c4be47a49451407e7d7f399ed92914f6d27701bb5e8e624cfc12caf9a7c340" name="samba-client-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.14.5" rel="7.el8_5"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.13.3-3" date="1612440000">- resolves: #1924615 - Fix a memcache bug when cache is full
- resolves: #1924571 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-2" date="1620734400">- resolves: rhbz#1944657 - Update to version 4.14.4
- resolves: rhbz#1949445 - Fix CVE-2021-20254
- resolves: rhbz#1947945 - Fix libsmbldap.so.2 not being a symbolic link
- resolves: rhbz#1908506 - Fix creating the gencache user directory
- resolves: rhbz#1901029 - Build the vfs_io_uring module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-4" date="1620820800">- related: rhbz#1944657 - Fix possible upgrade issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-0" date="1623326400">- related: rhbz#1944657 - Update to version 4.14.5
- resolves: rhbz#1969787 - Fix memory leak in RPC server
- resolves: rhbz#1954974 - Validate smb.conf option for domain members with testparm
- resolves: rhbz#1963298 - Fix smbd trying to delete files with wrong permissions
- resolves: rhbz#1890008 - Update rpcclient manpage to list all available commands
- resolves: rhbz#1857254 - Update smbcacls manpage to document inhertance flags</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-1" date="1624536000">- resolves: rhbz#1974792 - Create a subpackage for vfs-io-uring
- resolves: rhbz#1965397 - Raise log level for dfs ENOENT debug message</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; -  4.14.4-2" date="1626177600">- related: rhbz#1980346 - Rebuild for libtalloc 0.11.0</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-4" date="1636113600">- resolves: rhbz#2021163
  Fix CVE-2016-2124
- resolves: rhbz#2021167
  Fix CVE-2021-23192
- resolves: rhbz#2021171
  Fix CVE-2020-25717</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-5" date="1636459200">- resolves: rhbz#2021493 - Add missing PAC buffer types to krb5pac.idl
- related: rbhz#2021171 - Fix regression with 'allow trusted domains = no'</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.14.5-6" date="1636804800">- related: rhbz#2021171 - Fix CVE-2020-25717
- Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-7" date="1637582400">- related: rhbz#2021171 - Fix CVE-2020-25717
- Fix running ktest (selftest)</changelog>
</package>
<package pkgid="707f6b4cb53ad654cbca6496aab16b59fb0bd6c57edaaf2749a0e89fdf709cf8" name="samba-client-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.14.5" rel="9.el8_5"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-4" date="1620820800">- related: rhbz#1944657 - Fix possible upgrade issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-0" date="1623326400">- related: rhbz#1944657 - Update to version 4.14.5
- resolves: rhbz#1969787 - Fix memory leak in RPC server
- resolves: rhbz#1954974 - Validate smb.conf option for domain members with testparm
- resolves: rhbz#1963298 - Fix smbd trying to delete files with wrong permissions
- resolves: rhbz#1890008 - Update rpcclient manpage to list all available commands
- resolves: rhbz#1857254 - Update smbcacls manpage to document inhertance flags</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-1" date="1624536000">- resolves: rhbz#1974792 - Create a subpackage for vfs-io-uring
- resolves: rhbz#1965397 - Raise log level for dfs ENOENT debug message</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; -  4.14.4-2" date="1626177600">- related: rhbz#1980346 - Rebuild for libtalloc 0.11.0</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-4" date="1636113600">- resolves: rhbz#2021163
  Fix CVE-2016-2124
- resolves: rhbz#2021167
  Fix CVE-2021-23192
- resolves: rhbz#2021171
  Fix CVE-2020-25717</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-5" date="1636459200">- resolves: rhbz#2021493 - Add missing PAC buffer types to krb5pac.idl
- related: rbhz#2021171 - Fix regression with 'allow trusted domains = no'</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.14.5-6" date="1636804800">- related: rhbz#2021171 - Fix CVE-2020-25717
- Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-7" date="1637582400">- related: rhbz#2021171 - Fix CVE-2020-25717
- Fix running ktest (selftest)</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.14.5-8" date="1638446400">- resolves: rhbz#2026717 - Dir containing dangling symlinks cannot be deleted</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-9" date="1643284800">- resolves: rhbz#2046174 - Fix username map script regression of CVE-2020-25717
- resolves: rhbz#2046160 - Fix possible segfault while joining a domain
- resolves: rhbz#2046152 - Fix CVE-2021-44142</changelog>
</package>
<package pkgid="cafec851434aef6077b5674e9f72868807fec755ea5da146ddbf7a8d14987ab8" name="samba-client-libs-debuginfo" arch="i686">
  <version epoch="0" ver="4.14.5" rel="10.el8_5"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-0" date="1623326400">- related: rhbz#1944657 - Update to version 4.14.5
- resolves: rhbz#1969787 - Fix memory leak in RPC server
- resolves: rhbz#1954974 - Validate smb.conf option for domain members with testparm
- resolves: rhbz#1963298 - Fix smbd trying to delete files with wrong permissions
- resolves: rhbz#1890008 - Update rpcclient manpage to list all available commands
- resolves: rhbz#1857254 - Update smbcacls manpage to document inhertance flags</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-1" date="1624536000">- resolves: rhbz#1974792 - Create a subpackage for vfs-io-uring
- resolves: rhbz#1965397 - Raise log level for dfs ENOENT debug message</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; -  4.14.4-2" date="1626177600">- related: rhbz#1980346 - Rebuild for libtalloc 0.11.0</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-4" date="1636113600">- resolves: rhbz#2021163
  Fix CVE-2016-2124
- resolves: rhbz#2021167
  Fix CVE-2021-23192
- resolves: rhbz#2021171
  Fix CVE-2020-25717</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-5" date="1636459200">- resolves: rhbz#2021493 - Add missing PAC buffer types to krb5pac.idl
- related: rbhz#2021171 - Fix regression with 'allow trusted domains = no'</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.14.5-6" date="1636804800">- related: rhbz#2021171 - Fix CVE-2020-25717
- Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-7" date="1637582400">- related: rhbz#2021171 - Fix CVE-2020-25717
- Fix running ktest (selftest)</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.14.5-8" date="1638446400">- resolves: rhbz#2026717 - Dir containing dangling symlinks cannot be deleted</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-9" date="1643284800">- resolves: rhbz#2046174 - Fix username map script regression of CVE-2020-25717
- resolves: rhbz#2046160 - Fix possible segfault while joining a domain
- resolves: rhbz#2046152 - Fix CVE-2021-44142</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.14.5-10" date="1645531200">- resolves: rhbz#2029417 - Fix virusfilter_vfs_openat: Not scanned: Directory or special file</changelog>
</package>
<package pkgid="dabc305d2e95a3d7e827b02c8f436d27ebf39f57af155ad8f423eb2692e2bc9f" name="samba-client-libs-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.14.5" rel="10.el8_5"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-0" date="1623326400">- related: rhbz#1944657 - Update to version 4.14.5
- resolves: rhbz#1969787 - Fix memory leak in RPC server
- resolves: rhbz#1954974 - Validate smb.conf option for domain members with testparm
- resolves: rhbz#1963298 - Fix smbd trying to delete files with wrong permissions
- resolves: rhbz#1890008 - Update rpcclient manpage to list all available commands
- resolves: rhbz#1857254 - Update smbcacls manpage to document inhertance flags</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-1" date="1624536000">- resolves: rhbz#1974792 - Create a subpackage for vfs-io-uring
- resolves: rhbz#1965397 - Raise log level for dfs ENOENT debug message</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; -  4.14.4-2" date="1626177600">- related: rhbz#1980346 - Rebuild for libtalloc 0.11.0</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-4" date="1636113600">- resolves: rhbz#2021163
  Fix CVE-2016-2124
- resolves: rhbz#2021167
  Fix CVE-2021-23192
- resolves: rhbz#2021171
  Fix CVE-2020-25717</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-5" date="1636459200">- resolves: rhbz#2021493 - Add missing PAC buffer types to krb5pac.idl
- related: rbhz#2021171 - Fix regression with 'allow trusted domains = no'</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.14.5-6" date="1636804800">- related: rhbz#2021171 - Fix CVE-2020-25717
- Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-7" date="1637582400">- related: rhbz#2021171 - Fix CVE-2020-25717
- Fix running ktest (selftest)</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.14.5-8" date="1638446400">- resolves: rhbz#2026717 - Dir containing dangling symlinks cannot be deleted</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-9" date="1643284800">- resolves: rhbz#2046174 - Fix username map script regression of CVE-2020-25717
- resolves: rhbz#2046160 - Fix possible segfault while joining a domain
- resolves: rhbz#2046152 - Fix CVE-2021-44142</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.14.5-10" date="1645531200">- resolves: rhbz#2029417 - Fix virusfilter_vfs_openat: Not scanned: Directory or special file</changelog>
</package>
<package pkgid="2ee1b806f206744c3e01b0888b53e654988294b5a681c98c906c77ac888c2da2" name="samba-client-libs-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.14.5" rel="7.el8_5"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.13.3-3" date="1612440000">- resolves: #1924615 - Fix a memcache bug when cache is full
- resolves: #1924571 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-2" date="1620734400">- resolves: rhbz#1944657 - Update to version 4.14.4
- resolves: rhbz#1949445 - Fix CVE-2021-20254
- resolves: rhbz#1947945 - Fix libsmbldap.so.2 not being a symbolic link
- resolves: rhbz#1908506 - Fix creating the gencache user directory
- resolves: rhbz#1901029 - Build the vfs_io_uring module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-4" date="1620820800">- related: rhbz#1944657 - Fix possible upgrade issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-0" date="1623326400">- related: rhbz#1944657 - Update to version 4.14.5
- resolves: rhbz#1969787 - Fix memory leak in RPC server
- resolves: rhbz#1954974 - Validate smb.conf option for domain members with testparm
- resolves: rhbz#1963298 - Fix smbd trying to delete files with wrong permissions
- resolves: rhbz#1890008 - Update rpcclient manpage to list all available commands
- resolves: rhbz#1857254 - Update smbcacls manpage to document inhertance flags</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-1" date="1624536000">- resolves: rhbz#1974792 - Create a subpackage for vfs-io-uring
- resolves: rhbz#1965397 - Raise log level for dfs ENOENT debug message</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; -  4.14.4-2" date="1626177600">- related: rhbz#1980346 - Rebuild for libtalloc 0.11.0</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-4" date="1636113600">- resolves: rhbz#2021163
  Fix CVE-2016-2124
- resolves: rhbz#2021167
  Fix CVE-2021-23192
- resolves: rhbz#2021171
  Fix CVE-2020-25717</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-5" date="1636459200">- resolves: rhbz#2021493 - Add missing PAC buffer types to krb5pac.idl
- related: rbhz#2021171 - Fix regression with 'allow trusted domains = no'</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.14.5-6" date="1636804800">- related: rhbz#2021171 - Fix CVE-2020-25717
- Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-7" date="1637582400">- related: rhbz#2021171 - Fix CVE-2020-25717
- Fix running ktest (selftest)</changelog>
</package>
<package pkgid="d917bd42e4d36a9b4c16bf6fd61afd484f95721e313c3e9e13c307e2679d97e7" name="samba-client-libs-debuginfo" arch="i686">
  <version epoch="0" ver="4.14.5" rel="9.el8_5"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-4" date="1620820800">- related: rhbz#1944657 - Fix possible upgrade issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-0" date="1623326400">- related: rhbz#1944657 - Update to version 4.14.5
- resolves: rhbz#1969787 - Fix memory leak in RPC server
- resolves: rhbz#1954974 - Validate smb.conf option for domain members with testparm
- resolves: rhbz#1963298 - Fix smbd trying to delete files with wrong permissions
- resolves: rhbz#1890008 - Update rpcclient manpage to list all available commands
- resolves: rhbz#1857254 - Update smbcacls manpage to document inhertance flags</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-1" date="1624536000">- resolves: rhbz#1974792 - Create a subpackage for vfs-io-uring
- resolves: rhbz#1965397 - Raise log level for dfs ENOENT debug message</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; -  4.14.4-2" date="1626177600">- related: rhbz#1980346 - Rebuild for libtalloc 0.11.0</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-4" date="1636113600">- resolves: rhbz#2021163
  Fix CVE-2016-2124
- resolves: rhbz#2021167
  Fix CVE-2021-23192
- resolves: rhbz#2021171
  Fix CVE-2020-25717</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-5" date="1636459200">- resolves: rhbz#2021493 - Add missing PAC buffer types to krb5pac.idl
- related: rbhz#2021171 - Fix regression with 'allow trusted domains = no'</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.14.5-6" date="1636804800">- related: rhbz#2021171 - Fix CVE-2020-25717
- Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-7" date="1637582400">- related: rhbz#2021171 - Fix CVE-2020-25717
- Fix running ktest (selftest)</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.14.5-8" date="1638446400">- resolves: rhbz#2026717 - Dir containing dangling symlinks cannot be deleted</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-9" date="1643284800">- resolves: rhbz#2046174 - Fix username map script regression of CVE-2020-25717
- resolves: rhbz#2046160 - Fix possible segfault while joining a domain
- resolves: rhbz#2046152 - Fix CVE-2021-44142</changelog>
</package>
<package pkgid="d37ad36be942efb4cb7b781a79c1797c68caa91c36badc96a7eec563e944a8a8" name="samba-client-libs-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.14.5" rel="9.el8_5"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-4" date="1620820800">- related: rhbz#1944657 - Fix possible upgrade issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-0" date="1623326400">- related: rhbz#1944657 - Update to version 4.14.5
- resolves: rhbz#1969787 - Fix memory leak in RPC server
- resolves: rhbz#1954974 - Validate smb.conf option for domain members with testparm
- resolves: rhbz#1963298 - Fix smbd trying to delete files with wrong permissions
- resolves: rhbz#1890008 - Update rpcclient manpage to list all available commands
- resolves: rhbz#1857254 - Update smbcacls manpage to document inhertance flags</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-1" date="1624536000">- resolves: rhbz#1974792 - Create a subpackage for vfs-io-uring
- resolves: rhbz#1965397 - Raise log level for dfs ENOENT debug message</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; -  4.14.4-2" date="1626177600">- related: rhbz#1980346 - Rebuild for libtalloc 0.11.0</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-4" date="1636113600">- resolves: rhbz#2021163
  Fix CVE-2016-2124
- resolves: rhbz#2021167
  Fix CVE-2021-23192
- resolves: rhbz#2021171
  Fix CVE-2020-25717</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-5" date="1636459200">- resolves: rhbz#2021493 - Add missing PAC buffer types to krb5pac.idl
- related: rbhz#2021171 - Fix regression with 'allow trusted domains = no'</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.14.5-6" date="1636804800">- related: rhbz#2021171 - Fix CVE-2020-25717
- Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-7" date="1637582400">- related: rhbz#2021171 - Fix CVE-2020-25717
- Fix running ktest (selftest)</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.14.5-8" date="1638446400">- resolves: rhbz#2026717 - Dir containing dangling symlinks cannot be deleted</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-9" date="1643284800">- resolves: rhbz#2046174 - Fix username map script regression of CVE-2020-25717
- resolves: rhbz#2046160 - Fix possible segfault while joining a domain
- resolves: rhbz#2046152 - Fix CVE-2021-44142</changelog>
</package>
<package pkgid="7152a1c09426447ccf099f9c66e0fb3dd2556f519c9abb80c9a8ebb98f07cc1a" name="samba-common-libs-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.14.5" rel="10.el8_5"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-0" date="1623326400">- related: rhbz#1944657 - Update to version 4.14.5
- resolves: rhbz#1969787 - Fix memory leak in RPC server
- resolves: rhbz#1954974 - Validate smb.conf option for domain members with testparm
- resolves: rhbz#1963298 - Fix smbd trying to delete files with wrong permissions
- resolves: rhbz#1890008 - Update rpcclient manpage to list all available commands
- resolves: rhbz#1857254 - Update smbcacls manpage to document inhertance flags</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-1" date="1624536000">- resolves: rhbz#1974792 - Create a subpackage for vfs-io-uring
- resolves: rhbz#1965397 - Raise log level for dfs ENOENT debug message</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; -  4.14.4-2" date="1626177600">- related: rhbz#1980346 - Rebuild for libtalloc 0.11.0</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-4" date="1636113600">- resolves: rhbz#2021163
  Fix CVE-2016-2124
- resolves: rhbz#2021167
  Fix CVE-2021-23192
- resolves: rhbz#2021171
  Fix CVE-2020-25717</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-5" date="1636459200">- resolves: rhbz#2021493 - Add missing PAC buffer types to krb5pac.idl
- related: rbhz#2021171 - Fix regression with 'allow trusted domains = no'</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.14.5-6" date="1636804800">- related: rhbz#2021171 - Fix CVE-2020-25717
- Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-7" date="1637582400">- related: rhbz#2021171 - Fix CVE-2020-25717
- Fix running ktest (selftest)</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.14.5-8" date="1638446400">- resolves: rhbz#2026717 - Dir containing dangling symlinks cannot be deleted</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-9" date="1643284800">- resolves: rhbz#2046174 - Fix username map script regression of CVE-2020-25717
- resolves: rhbz#2046160 - Fix possible segfault while joining a domain
- resolves: rhbz#2046152 - Fix CVE-2021-44142</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.14.5-10" date="1645531200">- resolves: rhbz#2029417 - Fix virusfilter_vfs_openat: Not scanned: Directory or special file</changelog>
</package>
<package pkgid="598296e9d9ee356ae8de6766b194130d11fc38b72af4a814027b4ef0a92f18df" name="samba-common-libs-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.14.5" rel="7.el8_5"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.13.3-3" date="1612440000">- resolves: #1924615 - Fix a memcache bug when cache is full
- resolves: #1924571 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-2" date="1620734400">- resolves: rhbz#1944657 - Update to version 4.14.4
- resolves: rhbz#1949445 - Fix CVE-2021-20254
- resolves: rhbz#1947945 - Fix libsmbldap.so.2 not being a symbolic link
- resolves: rhbz#1908506 - Fix creating the gencache user directory
- resolves: rhbz#1901029 - Build the vfs_io_uring module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-4" date="1620820800">- related: rhbz#1944657 - Fix possible upgrade issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-0" date="1623326400">- related: rhbz#1944657 - Update to version 4.14.5
- resolves: rhbz#1969787 - Fix memory leak in RPC server
- resolves: rhbz#1954974 - Validate smb.conf option for domain members with testparm
- resolves: rhbz#1963298 - Fix smbd trying to delete files with wrong permissions
- resolves: rhbz#1890008 - Update rpcclient manpage to list all available commands
- resolves: rhbz#1857254 - Update smbcacls manpage to document inhertance flags</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-1" date="1624536000">- resolves: rhbz#1974792 - Create a subpackage for vfs-io-uring
- resolves: rhbz#1965397 - Raise log level for dfs ENOENT debug message</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; -  4.14.4-2" date="1626177600">- related: rhbz#1980346 - Rebuild for libtalloc 0.11.0</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-4" date="1636113600">- resolves: rhbz#2021163
  Fix CVE-2016-2124
- resolves: rhbz#2021167
  Fix CVE-2021-23192
- resolves: rhbz#2021171
  Fix CVE-2020-25717</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-5" date="1636459200">- resolves: rhbz#2021493 - Add missing PAC buffer types to krb5pac.idl
- related: rbhz#2021171 - Fix regression with 'allow trusted domains = no'</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.14.5-6" date="1636804800">- related: rhbz#2021171 - Fix CVE-2020-25717
- Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-7" date="1637582400">- related: rhbz#2021171 - Fix CVE-2020-25717
- Fix running ktest (selftest)</changelog>
</package>
<package pkgid="21df5091191b051e69b0fe09783f15922efd5e3125902f54100dc234a300d9ce" name="samba-common-libs-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.14.5" rel="9.el8_5"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-4" date="1620820800">- related: rhbz#1944657 - Fix possible upgrade issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-0" date="1623326400">- related: rhbz#1944657 - Update to version 4.14.5
- resolves: rhbz#1969787 - Fix memory leak in RPC server
- resolves: rhbz#1954974 - Validate smb.conf option for domain members with testparm
- resolves: rhbz#1963298 - Fix smbd trying to delete files with wrong permissions
- resolves: rhbz#1890008 - Update rpcclient manpage to list all available commands
- resolves: rhbz#1857254 - Update smbcacls manpage to document inhertance flags</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-1" date="1624536000">- resolves: rhbz#1974792 - Create a subpackage for vfs-io-uring
- resolves: rhbz#1965397 - Raise log level for dfs ENOENT debug message</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; -  4.14.4-2" date="1626177600">- related: rhbz#1980346 - Rebuild for libtalloc 0.11.0</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-4" date="1636113600">- resolves: rhbz#2021163
  Fix CVE-2016-2124
- resolves: rhbz#2021167
  Fix CVE-2021-23192
- resolves: rhbz#2021171
  Fix CVE-2020-25717</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-5" date="1636459200">- resolves: rhbz#2021493 - Add missing PAC buffer types to krb5pac.idl
- related: rbhz#2021171 - Fix regression with 'allow trusted domains = no'</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.14.5-6" date="1636804800">- related: rhbz#2021171 - Fix CVE-2020-25717
- Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-7" date="1637582400">- related: rhbz#2021171 - Fix CVE-2020-25717
- Fix running ktest (selftest)</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.14.5-8" date="1638446400">- resolves: rhbz#2026717 - Dir containing dangling symlinks cannot be deleted</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-9" date="1643284800">- resolves: rhbz#2046174 - Fix username map script regression of CVE-2020-25717
- resolves: rhbz#2046160 - Fix possible segfault while joining a domain
- resolves: rhbz#2046152 - Fix CVE-2021-44142</changelog>
</package>
<package pkgid="b8583fe383a1e7bb2046a8b2d780b00894a05883214efc2cf635f0d75e3a9e9c" name="samba-common-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.14.5" rel="10.el8_5"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-0" date="1623326400">- related: rhbz#1944657 - Update to version 4.14.5
- resolves: rhbz#1969787 - Fix memory leak in RPC server
- resolves: rhbz#1954974 - Validate smb.conf option for domain members with testparm
- resolves: rhbz#1963298 - Fix smbd trying to delete files with wrong permissions
- resolves: rhbz#1890008 - Update rpcclient manpage to list all available commands
- resolves: rhbz#1857254 - Update smbcacls manpage to document inhertance flags</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-1" date="1624536000">- resolves: rhbz#1974792 - Create a subpackage for vfs-io-uring
- resolves: rhbz#1965397 - Raise log level for dfs ENOENT debug message</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; -  4.14.4-2" date="1626177600">- related: rhbz#1980346 - Rebuild for libtalloc 0.11.0</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-4" date="1636113600">- resolves: rhbz#2021163
  Fix CVE-2016-2124
- resolves: rhbz#2021167
  Fix CVE-2021-23192
- resolves: rhbz#2021171
  Fix CVE-2020-25717</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-5" date="1636459200">- resolves: rhbz#2021493 - Add missing PAC buffer types to krb5pac.idl
- related: rbhz#2021171 - Fix regression with 'allow trusted domains = no'</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.14.5-6" date="1636804800">- related: rhbz#2021171 - Fix CVE-2020-25717
- Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-7" date="1637582400">- related: rhbz#2021171 - Fix CVE-2020-25717
- Fix running ktest (selftest)</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.14.5-8" date="1638446400">- resolves: rhbz#2026717 - Dir containing dangling symlinks cannot be deleted</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-9" date="1643284800">- resolves: rhbz#2046174 - Fix username map script regression of CVE-2020-25717
- resolves: rhbz#2046160 - Fix possible segfault while joining a domain
- resolves: rhbz#2046152 - Fix CVE-2021-44142</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.14.5-10" date="1645531200">- resolves: rhbz#2029417 - Fix virusfilter_vfs_openat: Not scanned: Directory or special file</changelog>
</package>
<package pkgid="062188b59517203b6d7089f87667fd40cc7108aa75131a3b2611a0f7d2dab441" name="samba-common-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.14.5" rel="7.el8_5"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.13.3-3" date="1612440000">- resolves: #1924615 - Fix a memcache bug when cache is full
- resolves: #1924571 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-2" date="1620734400">- resolves: rhbz#1944657 - Update to version 4.14.4
- resolves: rhbz#1949445 - Fix CVE-2021-20254
- resolves: rhbz#1947945 - Fix libsmbldap.so.2 not being a symbolic link
- resolves: rhbz#1908506 - Fix creating the gencache user directory
- resolves: rhbz#1901029 - Build the vfs_io_uring module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-4" date="1620820800">- related: rhbz#1944657 - Fix possible upgrade issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-0" date="1623326400">- related: rhbz#1944657 - Update to version 4.14.5
- resolves: rhbz#1969787 - Fix memory leak in RPC server
- resolves: rhbz#1954974 - Validate smb.conf option for domain members with testparm
- resolves: rhbz#1963298 - Fix smbd trying to delete files with wrong permissions
- resolves: rhbz#1890008 - Update rpcclient manpage to list all available commands
- resolves: rhbz#1857254 - Update smbcacls manpage to document inhertance flags</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-1" date="1624536000">- resolves: rhbz#1974792 - Create a subpackage for vfs-io-uring
- resolves: rhbz#1965397 - Raise log level for dfs ENOENT debug message</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; -  4.14.4-2" date="1626177600">- related: rhbz#1980346 - Rebuild for libtalloc 0.11.0</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-4" date="1636113600">- resolves: rhbz#2021163
  Fix CVE-2016-2124
- resolves: rhbz#2021167
  Fix CVE-2021-23192
- resolves: rhbz#2021171
  Fix CVE-2020-25717</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-5" date="1636459200">- resolves: rhbz#2021493 - Add missing PAC buffer types to krb5pac.idl
- related: rbhz#2021171 - Fix regression with 'allow trusted domains = no'</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.14.5-6" date="1636804800">- related: rhbz#2021171 - Fix CVE-2020-25717
- Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-7" date="1637582400">- related: rhbz#2021171 - Fix CVE-2020-25717
- Fix running ktest (selftest)</changelog>
</package>
<package pkgid="b466ba8366bf7153477b48a06950b52d42a256532b9645567a506509bf13d586" name="samba-common-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.14.5" rel="9.el8_5"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-4" date="1620820800">- related: rhbz#1944657 - Fix possible upgrade issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-0" date="1623326400">- related: rhbz#1944657 - Update to version 4.14.5
- resolves: rhbz#1969787 - Fix memory leak in RPC server
- resolves: rhbz#1954974 - Validate smb.conf option for domain members with testparm
- resolves: rhbz#1963298 - Fix smbd trying to delete files with wrong permissions
- resolves: rhbz#1890008 - Update rpcclient manpage to list all available commands
- resolves: rhbz#1857254 - Update smbcacls manpage to document inhertance flags</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-1" date="1624536000">- resolves: rhbz#1974792 - Create a subpackage for vfs-io-uring
- resolves: rhbz#1965397 - Raise log level for dfs ENOENT debug message</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; -  4.14.4-2" date="1626177600">- related: rhbz#1980346 - Rebuild for libtalloc 0.11.0</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-4" date="1636113600">- resolves: rhbz#2021163
  Fix CVE-2016-2124
- resolves: rhbz#2021167
  Fix CVE-2021-23192
- resolves: rhbz#2021171
  Fix CVE-2020-25717</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-5" date="1636459200">- resolves: rhbz#2021493 - Add missing PAC buffer types to krb5pac.idl
- related: rbhz#2021171 - Fix regression with 'allow trusted domains = no'</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.14.5-6" date="1636804800">- related: rhbz#2021171 - Fix CVE-2020-25717
- Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-7" date="1637582400">- related: rhbz#2021171 - Fix CVE-2020-25717
- Fix running ktest (selftest)</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.14.5-8" date="1638446400">- resolves: rhbz#2026717 - Dir containing dangling symlinks cannot be deleted</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-9" date="1643284800">- resolves: rhbz#2046174 - Fix username map script regression of CVE-2020-25717
- resolves: rhbz#2046160 - Fix possible segfault while joining a domain
- resolves: rhbz#2046152 - Fix CVE-2021-44142</changelog>
</package>
<package pkgid="7476d3f84aaffad91ef19e53dd947e9e6825ca335397d1194c783077ab542341" name="samba-debuginfo" arch="i686">
  <version epoch="0" ver="4.14.5" rel="10.el8_5"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-0" date="1623326400">- related: rhbz#1944657 - Update to version 4.14.5
- resolves: rhbz#1969787 - Fix memory leak in RPC server
- resolves: rhbz#1954974 - Validate smb.conf option for domain members with testparm
- resolves: rhbz#1963298 - Fix smbd trying to delete files with wrong permissions
- resolves: rhbz#1890008 - Update rpcclient manpage to list all available commands
- resolves: rhbz#1857254 - Update smbcacls manpage to document inhertance flags</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-1" date="1624536000">- resolves: rhbz#1974792 - Create a subpackage for vfs-io-uring
- resolves: rhbz#1965397 - Raise log level for dfs ENOENT debug message</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; -  4.14.4-2" date="1626177600">- related: rhbz#1980346 - Rebuild for libtalloc 0.11.0</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-4" date="1636113600">- resolves: rhbz#2021163
  Fix CVE-2016-2124
- resolves: rhbz#2021167
  Fix CVE-2021-23192
- resolves: rhbz#2021171
  Fix CVE-2020-25717</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-5" date="1636459200">- resolves: rhbz#2021493 - Add missing PAC buffer types to krb5pac.idl
- related: rbhz#2021171 - Fix regression with 'allow trusted domains = no'</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.14.5-6" date="1636804800">- related: rhbz#2021171 - Fix CVE-2020-25717
- Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-7" date="1637582400">- related: rhbz#2021171 - Fix CVE-2020-25717
- Fix running ktest (selftest)</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.14.5-8" date="1638446400">- resolves: rhbz#2026717 - Dir containing dangling symlinks cannot be deleted</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-9" date="1643284800">- resolves: rhbz#2046174 - Fix username map script regression of CVE-2020-25717
- resolves: rhbz#2046160 - Fix possible segfault while joining a domain
- resolves: rhbz#2046152 - Fix CVE-2021-44142</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.14.5-10" date="1645531200">- resolves: rhbz#2029417 - Fix virusfilter_vfs_openat: Not scanned: Directory or special file</changelog>
</package>
<package pkgid="37387073ec46f7010b756c3159f81057b32f5641f44b749f13c400745abf30e2" name="samba-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.14.5" rel="10.el8_5"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-0" date="1623326400">- related: rhbz#1944657 - Update to version 4.14.5
- resolves: rhbz#1969787 - Fix memory leak in RPC server
- resolves: rhbz#1954974 - Validate smb.conf option for domain members with testparm
- resolves: rhbz#1963298 - Fix smbd trying to delete files with wrong permissions
- resolves: rhbz#1890008 - Update rpcclient manpage to list all available commands
- resolves: rhbz#1857254 - Update smbcacls manpage to document inhertance flags</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-1" date="1624536000">- resolves: rhbz#1974792 - Create a subpackage for vfs-io-uring
- resolves: rhbz#1965397 - Raise log level for dfs ENOENT debug message</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; -  4.14.4-2" date="1626177600">- related: rhbz#1980346 - Rebuild for libtalloc 0.11.0</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-4" date="1636113600">- resolves: rhbz#2021163
  Fix CVE-2016-2124
- resolves: rhbz#2021167
  Fix CVE-2021-23192
- resolves: rhbz#2021171
  Fix CVE-2020-25717</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-5" date="1636459200">- resolves: rhbz#2021493 - Add missing PAC buffer types to krb5pac.idl
- related: rbhz#2021171 - Fix regression with 'allow trusted domains = no'</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.14.5-6" date="1636804800">- related: rhbz#2021171 - Fix CVE-2020-25717
- Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-7" date="1637582400">- related: rhbz#2021171 - Fix CVE-2020-25717
- Fix running ktest (selftest)</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.14.5-8" date="1638446400">- resolves: rhbz#2026717 - Dir containing dangling symlinks cannot be deleted</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-9" date="1643284800">- resolves: rhbz#2046174 - Fix username map script regression of CVE-2020-25717
- resolves: rhbz#2046160 - Fix possible segfault while joining a domain
- resolves: rhbz#2046152 - Fix CVE-2021-44142</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.14.5-10" date="1645531200">- resolves: rhbz#2029417 - Fix virusfilter_vfs_openat: Not scanned: Directory or special file</changelog>
</package>
<package pkgid="dd352e4bc20d3353d6fbe7c52f80ce56c48cd2250333fa458c1fc3a8ae561f11" name="samba-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.14.5" rel="7.el8_5"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.13.3-3" date="1612440000">- resolves: #1924615 - Fix a memcache bug when cache is full
- resolves: #1924571 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-2" date="1620734400">- resolves: rhbz#1944657 - Update to version 4.14.4
- resolves: rhbz#1949445 - Fix CVE-2021-20254
- resolves: rhbz#1947945 - Fix libsmbldap.so.2 not being a symbolic link
- resolves: rhbz#1908506 - Fix creating the gencache user directory
- resolves: rhbz#1901029 - Build the vfs_io_uring module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-4" date="1620820800">- related: rhbz#1944657 - Fix possible upgrade issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-0" date="1623326400">- related: rhbz#1944657 - Update to version 4.14.5
- resolves: rhbz#1969787 - Fix memory leak in RPC server
- resolves: rhbz#1954974 - Validate smb.conf option for domain members with testparm
- resolves: rhbz#1963298 - Fix smbd trying to delete files with wrong permissions
- resolves: rhbz#1890008 - Update rpcclient manpage to list all available commands
- resolves: rhbz#1857254 - Update smbcacls manpage to document inhertance flags</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-1" date="1624536000">- resolves: rhbz#1974792 - Create a subpackage for vfs-io-uring
- resolves: rhbz#1965397 - Raise log level for dfs ENOENT debug message</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; -  4.14.4-2" date="1626177600">- related: rhbz#1980346 - Rebuild for libtalloc 0.11.0</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-4" date="1636113600">- resolves: rhbz#2021163
  Fix CVE-2016-2124
- resolves: rhbz#2021167
  Fix CVE-2021-23192
- resolves: rhbz#2021171
  Fix CVE-2020-25717</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-5" date="1636459200">- resolves: rhbz#2021493 - Add missing PAC buffer types to krb5pac.idl
- related: rbhz#2021171 - Fix regression with 'allow trusted domains = no'</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.14.5-6" date="1636804800">- related: rhbz#2021171 - Fix CVE-2020-25717
- Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-7" date="1637582400">- related: rhbz#2021171 - Fix CVE-2020-25717
- Fix running ktest (selftest)</changelog>
</package>
<package pkgid="1633c3fa032c1e6f1db9354197c4282b517960fb90eefd8880717e68cb7bc84a" name="samba-debuginfo" arch="i686">
  <version epoch="0" ver="4.14.5" rel="9.el8_5"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-4" date="1620820800">- related: rhbz#1944657 - Fix possible upgrade issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-0" date="1623326400">- related: rhbz#1944657 - Update to version 4.14.5
- resolves: rhbz#1969787 - Fix memory leak in RPC server
- resolves: rhbz#1954974 - Validate smb.conf option for domain members with testparm
- resolves: rhbz#1963298 - Fix smbd trying to delete files with wrong permissions
- resolves: rhbz#1890008 - Update rpcclient manpage to list all available commands
- resolves: rhbz#1857254 - Update smbcacls manpage to document inhertance flags</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-1" date="1624536000">- resolves: rhbz#1974792 - Create a subpackage for vfs-io-uring
- resolves: rhbz#1965397 - Raise log level for dfs ENOENT debug message</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; -  4.14.4-2" date="1626177600">- related: rhbz#1980346 - Rebuild for libtalloc 0.11.0</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-4" date="1636113600">- resolves: rhbz#2021163
  Fix CVE-2016-2124
- resolves: rhbz#2021167
  Fix CVE-2021-23192
- resolves: rhbz#2021171
  Fix CVE-2020-25717</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-5" date="1636459200">- resolves: rhbz#2021493 - Add missing PAC buffer types to krb5pac.idl
- related: rbhz#2021171 - Fix regression with 'allow trusted domains = no'</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.14.5-6" date="1636804800">- related: rhbz#2021171 - Fix CVE-2020-25717
- Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-7" date="1637582400">- related: rhbz#2021171 - Fix CVE-2020-25717
- Fix running ktest (selftest)</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.14.5-8" date="1638446400">- resolves: rhbz#2026717 - Dir containing dangling symlinks cannot be deleted</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-9" date="1643284800">- resolves: rhbz#2046174 - Fix username map script regression of CVE-2020-25717
- resolves: rhbz#2046160 - Fix possible segfault while joining a domain
- resolves: rhbz#2046152 - Fix CVE-2021-44142</changelog>
</package>
<package pkgid="8fadc503733cc2fde12d398faa1d6c493af3bf479e3cbc59f2570e465e5e9bdf" name="samba-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.14.5" rel="9.el8_5"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-4" date="1620820800">- related: rhbz#1944657 - Fix possible upgrade issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-0" date="1623326400">- related: rhbz#1944657 - Update to version 4.14.5
- resolves: rhbz#1969787 - Fix memory leak in RPC server
- resolves: rhbz#1954974 - Validate smb.conf option for domain members with testparm
- resolves: rhbz#1963298 - Fix smbd trying to delete files with wrong permissions
- resolves: rhbz#1890008 - Update rpcclient manpage to list all available commands
- resolves: rhbz#1857254 - Update smbcacls manpage to document inhertance flags</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-1" date="1624536000">- resolves: rhbz#1974792 - Create a subpackage for vfs-io-uring
- resolves: rhbz#1965397 - Raise log level for dfs ENOENT debug message</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; -  4.14.4-2" date="1626177600">- related: rhbz#1980346 - Rebuild for libtalloc 0.11.0</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-4" date="1636113600">- resolves: rhbz#2021163
  Fix CVE-2016-2124
- resolves: rhbz#2021167
  Fix CVE-2021-23192
- resolves: rhbz#2021171
  Fix CVE-2020-25717</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-5" date="1636459200">- resolves: rhbz#2021493 - Add missing PAC buffer types to krb5pac.idl
- related: rbhz#2021171 - Fix regression with 'allow trusted domains = no'</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.14.5-6" date="1636804800">- related: rhbz#2021171 - Fix CVE-2020-25717
- Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-7" date="1637582400">- related: rhbz#2021171 - Fix CVE-2020-25717
- Fix running ktest (selftest)</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.14.5-8" date="1638446400">- resolves: rhbz#2026717 - Dir containing dangling symlinks cannot be deleted</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-9" date="1643284800">- resolves: rhbz#2046174 - Fix username map script regression of CVE-2020-25717
- resolves: rhbz#2046160 - Fix possible segfault while joining a domain
- resolves: rhbz#2046152 - Fix CVE-2021-44142</changelog>
</package>
<package pkgid="dbb317c281bd832d7e374573b33f6522d176ac2d5998bc9ca572f0c762a4496d" name="samba-debugsource" arch="i686">
  <version epoch="0" ver="4.14.5" rel="10.el8_5"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-0" date="1623326400">- related: rhbz#1944657 - Update to version 4.14.5
- resolves: rhbz#1969787 - Fix memory leak in RPC server
- resolves: rhbz#1954974 - Validate smb.conf option for domain members with testparm
- resolves: rhbz#1963298 - Fix smbd trying to delete files with wrong permissions
- resolves: rhbz#1890008 - Update rpcclient manpage to list all available commands
- resolves: rhbz#1857254 - Update smbcacls manpage to document inhertance flags</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-1" date="1624536000">- resolves: rhbz#1974792 - Create a subpackage for vfs-io-uring
- resolves: rhbz#1965397 - Raise log level for dfs ENOENT debug message</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; -  4.14.4-2" date="1626177600">- related: rhbz#1980346 - Rebuild for libtalloc 0.11.0</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-4" date="1636113600">- resolves: rhbz#2021163
  Fix CVE-2016-2124
- resolves: rhbz#2021167
  Fix CVE-2021-23192
- resolves: rhbz#2021171
  Fix CVE-2020-25717</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-5" date="1636459200">- resolves: rhbz#2021493 - Add missing PAC buffer types to krb5pac.idl
- related: rbhz#2021171 - Fix regression with 'allow trusted domains = no'</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.14.5-6" date="1636804800">- related: rhbz#2021171 - Fix CVE-2020-25717
- Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-7" date="1637582400">- related: rhbz#2021171 - Fix CVE-2020-25717
- Fix running ktest (selftest)</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.14.5-8" date="1638446400">- resolves: rhbz#2026717 - Dir containing dangling symlinks cannot be deleted</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-9" date="1643284800">- resolves: rhbz#2046174 - Fix username map script regression of CVE-2020-25717
- resolves: rhbz#2046160 - Fix possible segfault while joining a domain
- resolves: rhbz#2046152 - Fix CVE-2021-44142</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.14.5-10" date="1645531200">- resolves: rhbz#2029417 - Fix virusfilter_vfs_openat: Not scanned: Directory or special file</changelog>
</package>
<package pkgid="5edbb57c6f358d51b174325188944b3871f1b9f6284241c7dfd5cc3ed7296b8d" name="samba-debugsource" arch="x86_64">
  <version epoch="0" ver="4.14.5" rel="10.el8_5"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-0" date="1623326400">- related: rhbz#1944657 - Update to version 4.14.5
- resolves: rhbz#1969787 - Fix memory leak in RPC server
- resolves: rhbz#1954974 - Validate smb.conf option for domain members with testparm
- resolves: rhbz#1963298 - Fix smbd trying to delete files with wrong permissions
- resolves: rhbz#1890008 - Update rpcclient manpage to list all available commands
- resolves: rhbz#1857254 - Update smbcacls manpage to document inhertance flags</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-1" date="1624536000">- resolves: rhbz#1974792 - Create a subpackage for vfs-io-uring
- resolves: rhbz#1965397 - Raise log level for dfs ENOENT debug message</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; -  4.14.4-2" date="1626177600">- related: rhbz#1980346 - Rebuild for libtalloc 0.11.0</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-4" date="1636113600">- resolves: rhbz#2021163
  Fix CVE-2016-2124
- resolves: rhbz#2021167
  Fix CVE-2021-23192
- resolves: rhbz#2021171
  Fix CVE-2020-25717</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-5" date="1636459200">- resolves: rhbz#2021493 - Add missing PAC buffer types to krb5pac.idl
- related: rbhz#2021171 - Fix regression with 'allow trusted domains = no'</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.14.5-6" date="1636804800">- related: rhbz#2021171 - Fix CVE-2020-25717
- Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-7" date="1637582400">- related: rhbz#2021171 - Fix CVE-2020-25717
- Fix running ktest (selftest)</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.14.5-8" date="1638446400">- resolves: rhbz#2026717 - Dir containing dangling symlinks cannot be deleted</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-9" date="1643284800">- resolves: rhbz#2046174 - Fix username map script regression of CVE-2020-25717
- resolves: rhbz#2046160 - Fix possible segfault while joining a domain
- resolves: rhbz#2046152 - Fix CVE-2021-44142</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.14.5-10" date="1645531200">- resolves: rhbz#2029417 - Fix virusfilter_vfs_openat: Not scanned: Directory or special file</changelog>
</package>
<package pkgid="86c34e00334f2bf3d20a16769a926f6f35d1323fddc76a2b578eb96c6c1f1e1b" name="samba-debugsource" arch="x86_64">
  <version epoch="0" ver="4.14.5" rel="7.el8_5"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.13.3-3" date="1612440000">- resolves: #1924615 - Fix a memcache bug when cache is full
- resolves: #1924571 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-2" date="1620734400">- resolves: rhbz#1944657 - Update to version 4.14.4
- resolves: rhbz#1949445 - Fix CVE-2021-20254
- resolves: rhbz#1947945 - Fix libsmbldap.so.2 not being a symbolic link
- resolves: rhbz#1908506 - Fix creating the gencache user directory
- resolves: rhbz#1901029 - Build the vfs_io_uring module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-4" date="1620820800">- related: rhbz#1944657 - Fix possible upgrade issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-0" date="1623326400">- related: rhbz#1944657 - Update to version 4.14.5
- resolves: rhbz#1969787 - Fix memory leak in RPC server
- resolves: rhbz#1954974 - Validate smb.conf option for domain members with testparm
- resolves: rhbz#1963298 - Fix smbd trying to delete files with wrong permissions
- resolves: rhbz#1890008 - Update rpcclient manpage to list all available commands
- resolves: rhbz#1857254 - Update smbcacls manpage to document inhertance flags</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-1" date="1624536000">- resolves: rhbz#1974792 - Create a subpackage for vfs-io-uring
- resolves: rhbz#1965397 - Raise log level for dfs ENOENT debug message</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; -  4.14.4-2" date="1626177600">- related: rhbz#1980346 - Rebuild for libtalloc 0.11.0</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-4" date="1636113600">- resolves: rhbz#2021163
  Fix CVE-2016-2124
- resolves: rhbz#2021167
  Fix CVE-2021-23192
- resolves: rhbz#2021171
  Fix CVE-2020-25717</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-5" date="1636459200">- resolves: rhbz#2021493 - Add missing PAC buffer types to krb5pac.idl
- related: rbhz#2021171 - Fix regression with 'allow trusted domains = no'</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.14.5-6" date="1636804800">- related: rhbz#2021171 - Fix CVE-2020-25717
- Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-7" date="1637582400">- related: rhbz#2021171 - Fix CVE-2020-25717
- Fix running ktest (selftest)</changelog>
</package>
<package pkgid="3078f183adcec2d1feb6539a6efbdbdc0956a44ef8f416503f8b2166efd5d224" name="samba-debugsource" arch="i686">
  <version epoch="0" ver="4.14.5" rel="9.el8_5"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-4" date="1620820800">- related: rhbz#1944657 - Fix possible upgrade issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-0" date="1623326400">- related: rhbz#1944657 - Update to version 4.14.5
- resolves: rhbz#1969787 - Fix memory leak in RPC server
- resolves: rhbz#1954974 - Validate smb.conf option for domain members with testparm
- resolves: rhbz#1963298 - Fix smbd trying to delete files with wrong permissions
- resolves: rhbz#1890008 - Update rpcclient manpage to list all available commands
- resolves: rhbz#1857254 - Update smbcacls manpage to document inhertance flags</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-1" date="1624536000">- resolves: rhbz#1974792 - Create a subpackage for vfs-io-uring
- resolves: rhbz#1965397 - Raise log level for dfs ENOENT debug message</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; -  4.14.4-2" date="1626177600">- related: rhbz#1980346 - Rebuild for libtalloc 0.11.0</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-4" date="1636113600">- resolves: rhbz#2021163
  Fix CVE-2016-2124
- resolves: rhbz#2021167
  Fix CVE-2021-23192
- resolves: rhbz#2021171
  Fix CVE-2020-25717</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-5" date="1636459200">- resolves: rhbz#2021493 - Add missing PAC buffer types to krb5pac.idl
- related: rbhz#2021171 - Fix regression with 'allow trusted domains = no'</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.14.5-6" date="1636804800">- related: rhbz#2021171 - Fix CVE-2020-25717
- Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-7" date="1637582400">- related: rhbz#2021171 - Fix CVE-2020-25717
- Fix running ktest (selftest)</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.14.5-8" date="1638446400">- resolves: rhbz#2026717 - Dir containing dangling symlinks cannot be deleted</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-9" date="1643284800">- resolves: rhbz#2046174 - Fix username map script regression of CVE-2020-25717
- resolves: rhbz#2046160 - Fix possible segfault while joining a domain
- resolves: rhbz#2046152 - Fix CVE-2021-44142</changelog>
</package>
<package pkgid="d674f5a182628afb02f3ae5775bac29bcf55a086c167e040061c21c2988b6f26" name="samba-debugsource" arch="x86_64">
  <version epoch="0" ver="4.14.5" rel="9.el8_5"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-4" date="1620820800">- related: rhbz#1944657 - Fix possible upgrade issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-0" date="1623326400">- related: rhbz#1944657 - Update to version 4.14.5
- resolves: rhbz#1969787 - Fix memory leak in RPC server
- resolves: rhbz#1954974 - Validate smb.conf option for domain members with testparm
- resolves: rhbz#1963298 - Fix smbd trying to delete files with wrong permissions
- resolves: rhbz#1890008 - Update rpcclient manpage to list all available commands
- resolves: rhbz#1857254 - Update smbcacls manpage to document inhertance flags</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-1" date="1624536000">- resolves: rhbz#1974792 - Create a subpackage for vfs-io-uring
- resolves: rhbz#1965397 - Raise log level for dfs ENOENT debug message</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; -  4.14.4-2" date="1626177600">- related: rhbz#1980346 - Rebuild for libtalloc 0.11.0</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-4" date="1636113600">- resolves: rhbz#2021163
  Fix CVE-2016-2124
- resolves: rhbz#2021167
  Fix CVE-2021-23192
- resolves: rhbz#2021171
  Fix CVE-2020-25717</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-5" date="1636459200">- resolves: rhbz#2021493 - Add missing PAC buffer types to krb5pac.idl
- related: rbhz#2021171 - Fix regression with 'allow trusted domains = no'</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.14.5-6" date="1636804800">- related: rhbz#2021171 - Fix CVE-2020-25717
- Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-7" date="1637582400">- related: rhbz#2021171 - Fix CVE-2020-25717
- Fix running ktest (selftest)</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.14.5-8" date="1638446400">- resolves: rhbz#2026717 - Dir containing dangling symlinks cannot be deleted</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-9" date="1643284800">- resolves: rhbz#2046174 - Fix username map script regression of CVE-2020-25717
- resolves: rhbz#2046160 - Fix possible segfault while joining a domain
- resolves: rhbz#2046152 - Fix CVE-2021-44142</changelog>
</package>
<package pkgid="781f4ffbba370104638e3f5c9bcbfba93fdb40cf12e6a326a6edcd9b414895b4" name="samba-krb5-printing-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.14.5" rel="10.el8_5"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-0" date="1623326400">- related: rhbz#1944657 - Update to version 4.14.5
- resolves: rhbz#1969787 - Fix memory leak in RPC server
- resolves: rhbz#1954974 - Validate smb.conf option for domain members with testparm
- resolves: rhbz#1963298 - Fix smbd trying to delete files with wrong permissions
- resolves: rhbz#1890008 - Update rpcclient manpage to list all available commands
- resolves: rhbz#1857254 - Update smbcacls manpage to document inhertance flags</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-1" date="1624536000">- resolves: rhbz#1974792 - Create a subpackage for vfs-io-uring
- resolves: rhbz#1965397 - Raise log level for dfs ENOENT debug message</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; -  4.14.4-2" date="1626177600">- related: rhbz#1980346 - Rebuild for libtalloc 0.11.0</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-4" date="1636113600">- resolves: rhbz#2021163
  Fix CVE-2016-2124
- resolves: rhbz#2021167
  Fix CVE-2021-23192
- resolves: rhbz#2021171
  Fix CVE-2020-25717</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-5" date="1636459200">- resolves: rhbz#2021493 - Add missing PAC buffer types to krb5pac.idl
- related: rbhz#2021171 - Fix regression with 'allow trusted domains = no'</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.14.5-6" date="1636804800">- related: rhbz#2021171 - Fix CVE-2020-25717
- Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-7" date="1637582400">- related: rhbz#2021171 - Fix CVE-2020-25717
- Fix running ktest (selftest)</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.14.5-8" date="1638446400">- resolves: rhbz#2026717 - Dir containing dangling symlinks cannot be deleted</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-9" date="1643284800">- resolves: rhbz#2046174 - Fix username map script regression of CVE-2020-25717
- resolves: rhbz#2046160 - Fix possible segfault while joining a domain
- resolves: rhbz#2046152 - Fix CVE-2021-44142</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.14.5-10" date="1645531200">- resolves: rhbz#2029417 - Fix virusfilter_vfs_openat: Not scanned: Directory or special file</changelog>
</package>
<package pkgid="2c0a0de97962b093a3c87b107912c0445b8940190cd62fc86a67ee37d3ffce15" name="samba-krb5-printing-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.14.5" rel="7.el8_5"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.13.3-3" date="1612440000">- resolves: #1924615 - Fix a memcache bug when cache is full
- resolves: #1924571 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-2" date="1620734400">- resolves: rhbz#1944657 - Update to version 4.14.4
- resolves: rhbz#1949445 - Fix CVE-2021-20254
- resolves: rhbz#1947945 - Fix libsmbldap.so.2 not being a symbolic link
- resolves: rhbz#1908506 - Fix creating the gencache user directory
- resolves: rhbz#1901029 - Build the vfs_io_uring module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-4" date="1620820800">- related: rhbz#1944657 - Fix possible upgrade issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-0" date="1623326400">- related: rhbz#1944657 - Update to version 4.14.5
- resolves: rhbz#1969787 - Fix memory leak in RPC server
- resolves: rhbz#1954974 - Validate smb.conf option for domain members with testparm
- resolves: rhbz#1963298 - Fix smbd trying to delete files with wrong permissions
- resolves: rhbz#1890008 - Update rpcclient manpage to list all available commands
- resolves: rhbz#1857254 - Update smbcacls manpage to document inhertance flags</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-1" date="1624536000">- resolves: rhbz#1974792 - Create a subpackage for vfs-io-uring
- resolves: rhbz#1965397 - Raise log level for dfs ENOENT debug message</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; -  4.14.4-2" date="1626177600">- related: rhbz#1980346 - Rebuild for libtalloc 0.11.0</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-4" date="1636113600">- resolves: rhbz#2021163
  Fix CVE-2016-2124
- resolves: rhbz#2021167
  Fix CVE-2021-23192
- resolves: rhbz#2021171
  Fix CVE-2020-25717</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-5" date="1636459200">- resolves: rhbz#2021493 - Add missing PAC buffer types to krb5pac.idl
- related: rbhz#2021171 - Fix regression with 'allow trusted domains = no'</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.14.5-6" date="1636804800">- related: rhbz#2021171 - Fix CVE-2020-25717
- Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-7" date="1637582400">- related: rhbz#2021171 - Fix CVE-2020-25717
- Fix running ktest (selftest)</changelog>
</package>
<package pkgid="96906006365b0f5038d9f1ae5ea6855cfb4b47eb74f9016364bc683e11c7c958" name="samba-krb5-printing-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.14.5" rel="9.el8_5"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-4" date="1620820800">- related: rhbz#1944657 - Fix possible upgrade issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-0" date="1623326400">- related: rhbz#1944657 - Update to version 4.14.5
- resolves: rhbz#1969787 - Fix memory leak in RPC server
- resolves: rhbz#1954974 - Validate smb.conf option for domain members with testparm
- resolves: rhbz#1963298 - Fix smbd trying to delete files with wrong permissions
- resolves: rhbz#1890008 - Update rpcclient manpage to list all available commands
- resolves: rhbz#1857254 - Update smbcacls manpage to document inhertance flags</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-1" date="1624536000">- resolves: rhbz#1974792 - Create a subpackage for vfs-io-uring
- resolves: rhbz#1965397 - Raise log level for dfs ENOENT debug message</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; -  4.14.4-2" date="1626177600">- related: rhbz#1980346 - Rebuild for libtalloc 0.11.0</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-4" date="1636113600">- resolves: rhbz#2021163
  Fix CVE-2016-2124
- resolves: rhbz#2021167
  Fix CVE-2021-23192
- resolves: rhbz#2021171
  Fix CVE-2020-25717</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-5" date="1636459200">- resolves: rhbz#2021493 - Add missing PAC buffer types to krb5pac.idl
- related: rbhz#2021171 - Fix regression with 'allow trusted domains = no'</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.14.5-6" date="1636804800">- related: rhbz#2021171 - Fix CVE-2020-25717
- Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-7" date="1637582400">- related: rhbz#2021171 - Fix CVE-2020-25717
- Fix running ktest (selftest)</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.14.5-8" date="1638446400">- resolves: rhbz#2026717 - Dir containing dangling symlinks cannot be deleted</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-9" date="1643284800">- resolves: rhbz#2046174 - Fix username map script regression of CVE-2020-25717
- resolves: rhbz#2046160 - Fix possible segfault while joining a domain
- resolves: rhbz#2046152 - Fix CVE-2021-44142</changelog>
</package>
<package pkgid="3ecfaa304554bbedaa8baca92b2d63ef98e355ff39f7b7bb7c492b7de741bed2" name="samba-libs-debuginfo" arch="i686">
  <version epoch="0" ver="4.14.5" rel="10.el8_5"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-0" date="1623326400">- related: rhbz#1944657 - Update to version 4.14.5
- resolves: rhbz#1969787 - Fix memory leak in RPC server
- resolves: rhbz#1954974 - Validate smb.conf option for domain members with testparm
- resolves: rhbz#1963298 - Fix smbd trying to delete files with wrong permissions
- resolves: rhbz#1890008 - Update rpcclient manpage to list all available commands
- resolves: rhbz#1857254 - Update smbcacls manpage to document inhertance flags</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-1" date="1624536000">- resolves: rhbz#1974792 - Create a subpackage for vfs-io-uring
- resolves: rhbz#1965397 - Raise log level for dfs ENOENT debug message</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; -  4.14.4-2" date="1626177600">- related: rhbz#1980346 - Rebuild for libtalloc 0.11.0</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-4" date="1636113600">- resolves: rhbz#2021163
  Fix CVE-2016-2124
- resolves: rhbz#2021167
  Fix CVE-2021-23192
- resolves: rhbz#2021171
  Fix CVE-2020-25717</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-5" date="1636459200">- resolves: rhbz#2021493 - Add missing PAC buffer types to krb5pac.idl
- related: rbhz#2021171 - Fix regression with 'allow trusted domains = no'</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.14.5-6" date="1636804800">- related: rhbz#2021171 - Fix CVE-2020-25717
- Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-7" date="1637582400">- related: rhbz#2021171 - Fix CVE-2020-25717
- Fix running ktest (selftest)</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.14.5-8" date="1638446400">- resolves: rhbz#2026717 - Dir containing dangling symlinks cannot be deleted</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-9" date="1643284800">- resolves: rhbz#2046174 - Fix username map script regression of CVE-2020-25717
- resolves: rhbz#2046160 - Fix possible segfault while joining a domain
- resolves: rhbz#2046152 - Fix CVE-2021-44142</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.14.5-10" date="1645531200">- resolves: rhbz#2029417 - Fix virusfilter_vfs_openat: Not scanned: Directory or special file</changelog>
</package>
<package pkgid="09d2fe4bc7254ade5e58d27752959a1652caf1bf26a5231cf535039a0a57246d" name="samba-libs-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.14.5" rel="10.el8_5"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-0" date="1623326400">- related: rhbz#1944657 - Update to version 4.14.5
- resolves: rhbz#1969787 - Fix memory leak in RPC server
- resolves: rhbz#1954974 - Validate smb.conf option for domain members with testparm
- resolves: rhbz#1963298 - Fix smbd trying to delete files with wrong permissions
- resolves: rhbz#1890008 - Update rpcclient manpage to list all available commands
- resolves: rhbz#1857254 - Update smbcacls manpage to document inhertance flags</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-1" date="1624536000">- resolves: rhbz#1974792 - Create a subpackage for vfs-io-uring
- resolves: rhbz#1965397 - Raise log level for dfs ENOENT debug message</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; -  4.14.4-2" date="1626177600">- related: rhbz#1980346 - Rebuild for libtalloc 0.11.0</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-4" date="1636113600">- resolves: rhbz#2021163
  Fix CVE-2016-2124
- resolves: rhbz#2021167
  Fix CVE-2021-23192
- resolves: rhbz#2021171
  Fix CVE-2020-25717</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-5" date="1636459200">- resolves: rhbz#2021493 - Add missing PAC buffer types to krb5pac.idl
- related: rbhz#2021171 - Fix regression with 'allow trusted domains = no'</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.14.5-6" date="1636804800">- related: rhbz#2021171 - Fix CVE-2020-25717
- Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-7" date="1637582400">- related: rhbz#2021171 - Fix CVE-2020-25717
- Fix running ktest (selftest)</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.14.5-8" date="1638446400">- resolves: rhbz#2026717 - Dir containing dangling symlinks cannot be deleted</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-9" date="1643284800">- resolves: rhbz#2046174 - Fix username map script regression of CVE-2020-25717
- resolves: rhbz#2046160 - Fix possible segfault while joining a domain
- resolves: rhbz#2046152 - Fix CVE-2021-44142</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.14.5-10" date="1645531200">- resolves: rhbz#2029417 - Fix virusfilter_vfs_openat: Not scanned: Directory or special file</changelog>
</package>
<package pkgid="17484f03f7f5cf93cdb13ad5adcc59d5d5124f5e611c6121dec3e5eba0a0cbd6" name="samba-libs-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.14.5" rel="7.el8_5"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.13.3-3" date="1612440000">- resolves: #1924615 - Fix a memcache bug when cache is full
- resolves: #1924571 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-2" date="1620734400">- resolves: rhbz#1944657 - Update to version 4.14.4
- resolves: rhbz#1949445 - Fix CVE-2021-20254
- resolves: rhbz#1947945 - Fix libsmbldap.so.2 not being a symbolic link
- resolves: rhbz#1908506 - Fix creating the gencache user directory
- resolves: rhbz#1901029 - Build the vfs_io_uring module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-4" date="1620820800">- related: rhbz#1944657 - Fix possible upgrade issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-0" date="1623326400">- related: rhbz#1944657 - Update to version 4.14.5
- resolves: rhbz#1969787 - Fix memory leak in RPC server
- resolves: rhbz#1954974 - Validate smb.conf option for domain members with testparm
- resolves: rhbz#1963298 - Fix smbd trying to delete files with wrong permissions
- resolves: rhbz#1890008 - Update rpcclient manpage to list all available commands
- resolves: rhbz#1857254 - Update smbcacls manpage to document inhertance flags</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-1" date="1624536000">- resolves: rhbz#1974792 - Create a subpackage for vfs-io-uring
- resolves: rhbz#1965397 - Raise log level for dfs ENOENT debug message</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; -  4.14.4-2" date="1626177600">- related: rhbz#1980346 - Rebuild for libtalloc 0.11.0</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-4" date="1636113600">- resolves: rhbz#2021163
  Fix CVE-2016-2124
- resolves: rhbz#2021167
  Fix CVE-2021-23192
- resolves: rhbz#2021171
  Fix CVE-2020-25717</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-5" date="1636459200">- resolves: rhbz#2021493 - Add missing PAC buffer types to krb5pac.idl
- related: rbhz#2021171 - Fix regression with 'allow trusted domains = no'</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.14.5-6" date="1636804800">- related: rhbz#2021171 - Fix CVE-2020-25717
- Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-7" date="1637582400">- related: rhbz#2021171 - Fix CVE-2020-25717
- Fix running ktest (selftest)</changelog>
</package>
<package pkgid="8596aeda4a73a7c2bddb4111559af49a7017fc26b4a842aec73f3cffafb4103e" name="samba-libs-debuginfo" arch="i686">
  <version epoch="0" ver="4.14.5" rel="9.el8_5"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-4" date="1620820800">- related: rhbz#1944657 - Fix possible upgrade issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-0" date="1623326400">- related: rhbz#1944657 - Update to version 4.14.5
- resolves: rhbz#1969787 - Fix memory leak in RPC server
- resolves: rhbz#1954974 - Validate smb.conf option for domain members with testparm
- resolves: rhbz#1963298 - Fix smbd trying to delete files with wrong permissions
- resolves: rhbz#1890008 - Update rpcclient manpage to list all available commands
- resolves: rhbz#1857254 - Update smbcacls manpage to document inhertance flags</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-1" date="1624536000">- resolves: rhbz#1974792 - Create a subpackage for vfs-io-uring
- resolves: rhbz#1965397 - Raise log level for dfs ENOENT debug message</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; -  4.14.4-2" date="1626177600">- related: rhbz#1980346 - Rebuild for libtalloc 0.11.0</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-4" date="1636113600">- resolves: rhbz#2021163
  Fix CVE-2016-2124
- resolves: rhbz#2021167
  Fix CVE-2021-23192
- resolves: rhbz#2021171
  Fix CVE-2020-25717</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-5" date="1636459200">- resolves: rhbz#2021493 - Add missing PAC buffer types to krb5pac.idl
- related: rbhz#2021171 - Fix regression with 'allow trusted domains = no'</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.14.5-6" date="1636804800">- related: rhbz#2021171 - Fix CVE-2020-25717
- Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-7" date="1637582400">- related: rhbz#2021171 - Fix CVE-2020-25717
- Fix running ktest (selftest)</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.14.5-8" date="1638446400">- resolves: rhbz#2026717 - Dir containing dangling symlinks cannot be deleted</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-9" date="1643284800">- resolves: rhbz#2046174 - Fix username map script regression of CVE-2020-25717
- resolves: rhbz#2046160 - Fix possible segfault while joining a domain
- resolves: rhbz#2046152 - Fix CVE-2021-44142</changelog>
</package>
<package pkgid="f54c4f49d3710f2b1d5fac598487fe32407cf0d3a5c369c333c0c20417601341" name="samba-libs-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.14.5" rel="9.el8_5"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-4" date="1620820800">- related: rhbz#1944657 - Fix possible upgrade issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-0" date="1623326400">- related: rhbz#1944657 - Update to version 4.14.5
- resolves: rhbz#1969787 - Fix memory leak in RPC server
- resolves: rhbz#1954974 - Validate smb.conf option for domain members with testparm
- resolves: rhbz#1963298 - Fix smbd trying to delete files with wrong permissions
- resolves: rhbz#1890008 - Update rpcclient manpage to list all available commands
- resolves: rhbz#1857254 - Update smbcacls manpage to document inhertance flags</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-1" date="1624536000">- resolves: rhbz#1974792 - Create a subpackage for vfs-io-uring
- resolves: rhbz#1965397 - Raise log level for dfs ENOENT debug message</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; -  4.14.4-2" date="1626177600">- related: rhbz#1980346 - Rebuild for libtalloc 0.11.0</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-4" date="1636113600">- resolves: rhbz#2021163
  Fix CVE-2016-2124
- resolves: rhbz#2021167
  Fix CVE-2021-23192
- resolves: rhbz#2021171
  Fix CVE-2020-25717</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-5" date="1636459200">- resolves: rhbz#2021493 - Add missing PAC buffer types to krb5pac.idl
- related: rbhz#2021171 - Fix regression with 'allow trusted domains = no'</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.14.5-6" date="1636804800">- related: rhbz#2021171 - Fix CVE-2020-25717
- Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-7" date="1637582400">- related: rhbz#2021171 - Fix CVE-2020-25717
- Fix running ktest (selftest)</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.14.5-8" date="1638446400">- resolves: rhbz#2026717 - Dir containing dangling symlinks cannot be deleted</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-9" date="1643284800">- resolves: rhbz#2046174 - Fix username map script regression of CVE-2020-25717
- resolves: rhbz#2046160 - Fix possible segfault while joining a domain
- resolves: rhbz#2046152 - Fix CVE-2021-44142</changelog>
</package>
<package pkgid="be385d5ab5bb177cedb49497f5c6a48d0e0060de7b12c1a324f03fa8385b9257" name="samba-test-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.14.5" rel="10.el8_5"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-0" date="1623326400">- related: rhbz#1944657 - Update to version 4.14.5
- resolves: rhbz#1969787 - Fix memory leak in RPC server
- resolves: rhbz#1954974 - Validate smb.conf option for domain members with testparm
- resolves: rhbz#1963298 - Fix smbd trying to delete files with wrong permissions
- resolves: rhbz#1890008 - Update rpcclient manpage to list all available commands
- resolves: rhbz#1857254 - Update smbcacls manpage to document inhertance flags</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-1" date="1624536000">- resolves: rhbz#1974792 - Create a subpackage for vfs-io-uring
- resolves: rhbz#1965397 - Raise log level for dfs ENOENT debug message</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; -  4.14.4-2" date="1626177600">- related: rhbz#1980346 - Rebuild for libtalloc 0.11.0</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-4" date="1636113600">- resolves: rhbz#2021163
  Fix CVE-2016-2124
- resolves: rhbz#2021167
  Fix CVE-2021-23192
- resolves: rhbz#2021171
  Fix CVE-2020-25717</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-5" date="1636459200">- resolves: rhbz#2021493 - Add missing PAC buffer types to krb5pac.idl
- related: rbhz#2021171 - Fix regression with 'allow trusted domains = no'</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.14.5-6" date="1636804800">- related: rhbz#2021171 - Fix CVE-2020-25717
- Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-7" date="1637582400">- related: rhbz#2021171 - Fix CVE-2020-25717
- Fix running ktest (selftest)</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.14.5-8" date="1638446400">- resolves: rhbz#2026717 - Dir containing dangling symlinks cannot be deleted</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-9" date="1643284800">- resolves: rhbz#2046174 - Fix username map script regression of CVE-2020-25717
- resolves: rhbz#2046160 - Fix possible segfault while joining a domain
- resolves: rhbz#2046152 - Fix CVE-2021-44142</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.14.5-10" date="1645531200">- resolves: rhbz#2029417 - Fix virusfilter_vfs_openat: Not scanned: Directory or special file</changelog>
</package>
<package pkgid="c321d7db2213d183adb0d01ce87732f3b09f3b0595ca1e9f63d1e2dc536855f1" name="samba-test-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.14.5" rel="7.el8_5"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.13.3-3" date="1612440000">- resolves: #1924615 - Fix a memcache bug when cache is full
- resolves: #1924571 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-2" date="1620734400">- resolves: rhbz#1944657 - Update to version 4.14.4
- resolves: rhbz#1949445 - Fix CVE-2021-20254
- resolves: rhbz#1947945 - Fix libsmbldap.so.2 not being a symbolic link
- resolves: rhbz#1908506 - Fix creating the gencache user directory
- resolves: rhbz#1901029 - Build the vfs_io_uring module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-4" date="1620820800">- related: rhbz#1944657 - Fix possible upgrade issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-0" date="1623326400">- related: rhbz#1944657 - Update to version 4.14.5
- resolves: rhbz#1969787 - Fix memory leak in RPC server
- resolves: rhbz#1954974 - Validate smb.conf option for domain members with testparm
- resolves: rhbz#1963298 - Fix smbd trying to delete files with wrong permissions
- resolves: rhbz#1890008 - Update rpcclient manpage to list all available commands
- resolves: rhbz#1857254 - Update smbcacls manpage to document inhertance flags</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-1" date="1624536000">- resolves: rhbz#1974792 - Create a subpackage for vfs-io-uring
- resolves: rhbz#1965397 - Raise log level for dfs ENOENT debug message</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; -  4.14.4-2" date="1626177600">- related: rhbz#1980346 - Rebuild for libtalloc 0.11.0</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-4" date="1636113600">- resolves: rhbz#2021163
  Fix CVE-2016-2124
- resolves: rhbz#2021167
  Fix CVE-2021-23192
- resolves: rhbz#2021171
  Fix CVE-2020-25717</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-5" date="1636459200">- resolves: rhbz#2021493 - Add missing PAC buffer types to krb5pac.idl
- related: rbhz#2021171 - Fix regression with 'allow trusted domains = no'</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.14.5-6" date="1636804800">- related: rhbz#2021171 - Fix CVE-2020-25717
- Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-7" date="1637582400">- related: rhbz#2021171 - Fix CVE-2020-25717
- Fix running ktest (selftest)</changelog>
</package>
<package pkgid="818bfec4db9cfff78b6283c6eae2c55b71b981d40182e4f7315218f90234a865" name="samba-test-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.14.5" rel="9.el8_5"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-4" date="1620820800">- related: rhbz#1944657 - Fix possible upgrade issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-0" date="1623326400">- related: rhbz#1944657 - Update to version 4.14.5
- resolves: rhbz#1969787 - Fix memory leak in RPC server
- resolves: rhbz#1954974 - Validate smb.conf option for domain members with testparm
- resolves: rhbz#1963298 - Fix smbd trying to delete files with wrong permissions
- resolves: rhbz#1890008 - Update rpcclient manpage to list all available commands
- resolves: rhbz#1857254 - Update smbcacls manpage to document inhertance flags</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-1" date="1624536000">- resolves: rhbz#1974792 - Create a subpackage for vfs-io-uring
- resolves: rhbz#1965397 - Raise log level for dfs ENOENT debug message</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; -  4.14.4-2" date="1626177600">- related: rhbz#1980346 - Rebuild for libtalloc 0.11.0</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-4" date="1636113600">- resolves: rhbz#2021163
  Fix CVE-2016-2124
- resolves: rhbz#2021167
  Fix CVE-2021-23192
- resolves: rhbz#2021171
  Fix CVE-2020-25717</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-5" date="1636459200">- resolves: rhbz#2021493 - Add missing PAC buffer types to krb5pac.idl
- related: rbhz#2021171 - Fix regression with 'allow trusted domains = no'</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.14.5-6" date="1636804800">- related: rhbz#2021171 - Fix CVE-2020-25717
- Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-7" date="1637582400">- related: rhbz#2021171 - Fix CVE-2020-25717
- Fix running ktest (selftest)</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.14.5-8" date="1638446400">- resolves: rhbz#2026717 - Dir containing dangling symlinks cannot be deleted</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-9" date="1643284800">- resolves: rhbz#2046174 - Fix username map script regression of CVE-2020-25717
- resolves: rhbz#2046160 - Fix possible segfault while joining a domain
- resolves: rhbz#2046152 - Fix CVE-2021-44142</changelog>
</package>
<package pkgid="5aad6847b15233d6647f29461fcc22834db3ca276a9ec9188f77c25c5c49ec0c" name="samba-test-libs-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.14.5" rel="10.el8_5"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-0" date="1623326400">- related: rhbz#1944657 - Update to version 4.14.5
- resolves: rhbz#1969787 - Fix memory leak in RPC server
- resolves: rhbz#1954974 - Validate smb.conf option for domain members with testparm
- resolves: rhbz#1963298 - Fix smbd trying to delete files with wrong permissions
- resolves: rhbz#1890008 - Update rpcclient manpage to list all available commands
- resolves: rhbz#1857254 - Update smbcacls manpage to document inhertance flags</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-1" date="1624536000">- resolves: rhbz#1974792 - Create a subpackage for vfs-io-uring
- resolves: rhbz#1965397 - Raise log level for dfs ENOENT debug message</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; -  4.14.4-2" date="1626177600">- related: rhbz#1980346 - Rebuild for libtalloc 0.11.0</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-4" date="1636113600">- resolves: rhbz#2021163
  Fix CVE-2016-2124
- resolves: rhbz#2021167
  Fix CVE-2021-23192
- resolves: rhbz#2021171
  Fix CVE-2020-25717</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-5" date="1636459200">- resolves: rhbz#2021493 - Add missing PAC buffer types to krb5pac.idl
- related: rbhz#2021171 - Fix regression with 'allow trusted domains = no'</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.14.5-6" date="1636804800">- related: rhbz#2021171 - Fix CVE-2020-25717
- Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-7" date="1637582400">- related: rhbz#2021171 - Fix CVE-2020-25717
- Fix running ktest (selftest)</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.14.5-8" date="1638446400">- resolves: rhbz#2026717 - Dir containing dangling symlinks cannot be deleted</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-9" date="1643284800">- resolves: rhbz#2046174 - Fix username map script regression of CVE-2020-25717
- resolves: rhbz#2046160 - Fix possible segfault while joining a domain
- resolves: rhbz#2046152 - Fix CVE-2021-44142</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.14.5-10" date="1645531200">- resolves: rhbz#2029417 - Fix virusfilter_vfs_openat: Not scanned: Directory or special file</changelog>
</package>
<package pkgid="b735db884c64934ad06da6c968b7210d39ba2e31f63d3f8ecc969e9e5d85b3fb" name="samba-test-libs-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.14.5" rel="7.el8_5"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.13.3-3" date="1612440000">- resolves: #1924615 - Fix a memcache bug when cache is full
- resolves: #1924571 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-2" date="1620734400">- resolves: rhbz#1944657 - Update to version 4.14.4
- resolves: rhbz#1949445 - Fix CVE-2021-20254
- resolves: rhbz#1947945 - Fix libsmbldap.so.2 not being a symbolic link
- resolves: rhbz#1908506 - Fix creating the gencache user directory
- resolves: rhbz#1901029 - Build the vfs_io_uring module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-4" date="1620820800">- related: rhbz#1944657 - Fix possible upgrade issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-0" date="1623326400">- related: rhbz#1944657 - Update to version 4.14.5
- resolves: rhbz#1969787 - Fix memory leak in RPC server
- resolves: rhbz#1954974 - Validate smb.conf option for domain members with testparm
- resolves: rhbz#1963298 - Fix smbd trying to delete files with wrong permissions
- resolves: rhbz#1890008 - Update rpcclient manpage to list all available commands
- resolves: rhbz#1857254 - Update smbcacls manpage to document inhertance flags</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-1" date="1624536000">- resolves: rhbz#1974792 - Create a subpackage for vfs-io-uring
- resolves: rhbz#1965397 - Raise log level for dfs ENOENT debug message</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; -  4.14.4-2" date="1626177600">- related: rhbz#1980346 - Rebuild for libtalloc 0.11.0</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-4" date="1636113600">- resolves: rhbz#2021163
  Fix CVE-2016-2124
- resolves: rhbz#2021167
  Fix CVE-2021-23192
- resolves: rhbz#2021171
  Fix CVE-2020-25717</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-5" date="1636459200">- resolves: rhbz#2021493 - Add missing PAC buffer types to krb5pac.idl
- related: rbhz#2021171 - Fix regression with 'allow trusted domains = no'</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.14.5-6" date="1636804800">- related: rhbz#2021171 - Fix CVE-2020-25717
- Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-7" date="1637582400">- related: rhbz#2021171 - Fix CVE-2020-25717
- Fix running ktest (selftest)</changelog>
</package>
<package pkgid="e6eec882f84da1070859aa46456345e7608efe91d2b0f2398ab1245971265bc1" name="samba-test-libs-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.14.5" rel="9.el8_5"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-4" date="1620820800">- related: rhbz#1944657 - Fix possible upgrade issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-0" date="1623326400">- related: rhbz#1944657 - Update to version 4.14.5
- resolves: rhbz#1969787 - Fix memory leak in RPC server
- resolves: rhbz#1954974 - Validate smb.conf option for domain members with testparm
- resolves: rhbz#1963298 - Fix smbd trying to delete files with wrong permissions
- resolves: rhbz#1890008 - Update rpcclient manpage to list all available commands
- resolves: rhbz#1857254 - Update smbcacls manpage to document inhertance flags</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-1" date="1624536000">- resolves: rhbz#1974792 - Create a subpackage for vfs-io-uring
- resolves: rhbz#1965397 - Raise log level for dfs ENOENT debug message</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; -  4.14.4-2" date="1626177600">- related: rhbz#1980346 - Rebuild for libtalloc 0.11.0</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-4" date="1636113600">- resolves: rhbz#2021163
  Fix CVE-2016-2124
- resolves: rhbz#2021167
  Fix CVE-2021-23192
- resolves: rhbz#2021171
  Fix CVE-2020-25717</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-5" date="1636459200">- resolves: rhbz#2021493 - Add missing PAC buffer types to krb5pac.idl
- related: rbhz#2021171 - Fix regression with 'allow trusted domains = no'</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.14.5-6" date="1636804800">- related: rhbz#2021171 - Fix CVE-2020-25717
- Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-7" date="1637582400">- related: rhbz#2021171 - Fix CVE-2020-25717
- Fix running ktest (selftest)</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.14.5-8" date="1638446400">- resolves: rhbz#2026717 - Dir containing dangling symlinks cannot be deleted</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-9" date="1643284800">- resolves: rhbz#2046174 - Fix username map script regression of CVE-2020-25717
- resolves: rhbz#2046160 - Fix possible segfault while joining a domain
- resolves: rhbz#2046152 - Fix CVE-2021-44142</changelog>
</package>
<package pkgid="5c4b5375d45a9ea2ac4dd20195a8197552df23b57df1e03d75675ea4f998bf2b" name="samba-winbind-clients-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.14.5" rel="10.el8_5"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-0" date="1623326400">- related: rhbz#1944657 - Update to version 4.14.5
- resolves: rhbz#1969787 - Fix memory leak in RPC server
- resolves: rhbz#1954974 - Validate smb.conf option for domain members with testparm
- resolves: rhbz#1963298 - Fix smbd trying to delete files with wrong permissions
- resolves: rhbz#1890008 - Update rpcclient manpage to list all available commands
- resolves: rhbz#1857254 - Update smbcacls manpage to document inhertance flags</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-1" date="1624536000">- resolves: rhbz#1974792 - Create a subpackage for vfs-io-uring
- resolves: rhbz#1965397 - Raise log level for dfs ENOENT debug message</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; -  4.14.4-2" date="1626177600">- related: rhbz#1980346 - Rebuild for libtalloc 0.11.0</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-4" date="1636113600">- resolves: rhbz#2021163
  Fix CVE-2016-2124
- resolves: rhbz#2021167
  Fix CVE-2021-23192
- resolves: rhbz#2021171
  Fix CVE-2020-25717</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-5" date="1636459200">- resolves: rhbz#2021493 - Add missing PAC buffer types to krb5pac.idl
- related: rbhz#2021171 - Fix regression with 'allow trusted domains = no'</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.14.5-6" date="1636804800">- related: rhbz#2021171 - Fix CVE-2020-25717
- Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-7" date="1637582400">- related: rhbz#2021171 - Fix CVE-2020-25717
- Fix running ktest (selftest)</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.14.5-8" date="1638446400">- resolves: rhbz#2026717 - Dir containing dangling symlinks cannot be deleted</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-9" date="1643284800">- resolves: rhbz#2046174 - Fix username map script regression of CVE-2020-25717
- resolves: rhbz#2046160 - Fix possible segfault while joining a domain
- resolves: rhbz#2046152 - Fix CVE-2021-44142</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.14.5-10" date="1645531200">- resolves: rhbz#2029417 - Fix virusfilter_vfs_openat: Not scanned: Directory or special file</changelog>
</package>
<package pkgid="f46bea206c4af71cfcfd4a2d4ed636f36f711bae3d4a64ba40fb71c4daa3d143" name="samba-winbind-clients-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.14.5" rel="7.el8_5"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.13.3-3" date="1612440000">- resolves: #1924615 - Fix a memcache bug when cache is full
- resolves: #1924571 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-2" date="1620734400">- resolves: rhbz#1944657 - Update to version 4.14.4
- resolves: rhbz#1949445 - Fix CVE-2021-20254
- resolves: rhbz#1947945 - Fix libsmbldap.so.2 not being a symbolic link
- resolves: rhbz#1908506 - Fix creating the gencache user directory
- resolves: rhbz#1901029 - Build the vfs_io_uring module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-4" date="1620820800">- related: rhbz#1944657 - Fix possible upgrade issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-0" date="1623326400">- related: rhbz#1944657 - Update to version 4.14.5
- resolves: rhbz#1969787 - Fix memory leak in RPC server
- resolves: rhbz#1954974 - Validate smb.conf option for domain members with testparm
- resolves: rhbz#1963298 - Fix smbd trying to delete files with wrong permissions
- resolves: rhbz#1890008 - Update rpcclient manpage to list all available commands
- resolves: rhbz#1857254 - Update smbcacls manpage to document inhertance flags</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-1" date="1624536000">- resolves: rhbz#1974792 - Create a subpackage for vfs-io-uring
- resolves: rhbz#1965397 - Raise log level for dfs ENOENT debug message</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; -  4.14.4-2" date="1626177600">- related: rhbz#1980346 - Rebuild for libtalloc 0.11.0</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-4" date="1636113600">- resolves: rhbz#2021163
  Fix CVE-2016-2124
- resolves: rhbz#2021167
  Fix CVE-2021-23192
- resolves: rhbz#2021171
  Fix CVE-2020-25717</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-5" date="1636459200">- resolves: rhbz#2021493 - Add missing PAC buffer types to krb5pac.idl
- related: rbhz#2021171 - Fix regression with 'allow trusted domains = no'</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.14.5-6" date="1636804800">- related: rhbz#2021171 - Fix CVE-2020-25717
- Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-7" date="1637582400">- related: rhbz#2021171 - Fix CVE-2020-25717
- Fix running ktest (selftest)</changelog>
</package>
<package pkgid="8c29a7af1949a84c622be87677221fc3d9c9761f82b37f3b141f4e8e08ae557d" name="samba-winbind-clients-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.14.5" rel="9.el8_5"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-4" date="1620820800">- related: rhbz#1944657 - Fix possible upgrade issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-0" date="1623326400">- related: rhbz#1944657 - Update to version 4.14.5
- resolves: rhbz#1969787 - Fix memory leak in RPC server
- resolves: rhbz#1954974 - Validate smb.conf option for domain members with testparm
- resolves: rhbz#1963298 - Fix smbd trying to delete files with wrong permissions
- resolves: rhbz#1890008 - Update rpcclient manpage to list all available commands
- resolves: rhbz#1857254 - Update smbcacls manpage to document inhertance flags</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-1" date="1624536000">- resolves: rhbz#1974792 - Create a subpackage for vfs-io-uring
- resolves: rhbz#1965397 - Raise log level for dfs ENOENT debug message</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; -  4.14.4-2" date="1626177600">- related: rhbz#1980346 - Rebuild for libtalloc 0.11.0</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-4" date="1636113600">- resolves: rhbz#2021163
  Fix CVE-2016-2124
- resolves: rhbz#2021167
  Fix CVE-2021-23192
- resolves: rhbz#2021171
  Fix CVE-2020-25717</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-5" date="1636459200">- resolves: rhbz#2021493 - Add missing PAC buffer types to krb5pac.idl
- related: rbhz#2021171 - Fix regression with 'allow trusted domains = no'</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.14.5-6" date="1636804800">- related: rhbz#2021171 - Fix CVE-2020-25717
- Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-7" date="1637582400">- related: rhbz#2021171 - Fix CVE-2020-25717
- Fix running ktest (selftest)</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.14.5-8" date="1638446400">- resolves: rhbz#2026717 - Dir containing dangling symlinks cannot be deleted</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-9" date="1643284800">- resolves: rhbz#2046174 - Fix username map script regression of CVE-2020-25717
- resolves: rhbz#2046160 - Fix possible segfault while joining a domain
- resolves: rhbz#2046152 - Fix CVE-2021-44142</changelog>
</package>
<package pkgid="60104a86c731b5af2c94f580cfe201bb18434f504b4e38fd2706089b102be686" name="samba-winbind-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.14.5" rel="10.el8_5"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-0" date="1623326400">- related: rhbz#1944657 - Update to version 4.14.5
- resolves: rhbz#1969787 - Fix memory leak in RPC server
- resolves: rhbz#1954974 - Validate smb.conf option for domain members with testparm
- resolves: rhbz#1963298 - Fix smbd trying to delete files with wrong permissions
- resolves: rhbz#1890008 - Update rpcclient manpage to list all available commands
- resolves: rhbz#1857254 - Update smbcacls manpage to document inhertance flags</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-1" date="1624536000">- resolves: rhbz#1974792 - Create a subpackage for vfs-io-uring
- resolves: rhbz#1965397 - Raise log level for dfs ENOENT debug message</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; -  4.14.4-2" date="1626177600">- related: rhbz#1980346 - Rebuild for libtalloc 0.11.0</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-4" date="1636113600">- resolves: rhbz#2021163
  Fix CVE-2016-2124
- resolves: rhbz#2021167
  Fix CVE-2021-23192
- resolves: rhbz#2021171
  Fix CVE-2020-25717</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-5" date="1636459200">- resolves: rhbz#2021493 - Add missing PAC buffer types to krb5pac.idl
- related: rbhz#2021171 - Fix regression with 'allow trusted domains = no'</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.14.5-6" date="1636804800">- related: rhbz#2021171 - Fix CVE-2020-25717
- Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-7" date="1637582400">- related: rhbz#2021171 - Fix CVE-2020-25717
- Fix running ktest (selftest)</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.14.5-8" date="1638446400">- resolves: rhbz#2026717 - Dir containing dangling symlinks cannot be deleted</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-9" date="1643284800">- resolves: rhbz#2046174 - Fix username map script regression of CVE-2020-25717
- resolves: rhbz#2046160 - Fix possible segfault while joining a domain
- resolves: rhbz#2046152 - Fix CVE-2021-44142</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.14.5-10" date="1645531200">- resolves: rhbz#2029417 - Fix virusfilter_vfs_openat: Not scanned: Directory or special file</changelog>
</package>
<package pkgid="3bf88dbd05eded656164e04978525aaa365a04d2b322b4aad59f5c457c095fe5" name="samba-winbind-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.14.5" rel="7.el8_5"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.13.3-3" date="1612440000">- resolves: #1924615 - Fix a memcache bug when cache is full
- resolves: #1924571 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-2" date="1620734400">- resolves: rhbz#1944657 - Update to version 4.14.4
- resolves: rhbz#1949445 - Fix CVE-2021-20254
- resolves: rhbz#1947945 - Fix libsmbldap.so.2 not being a symbolic link
- resolves: rhbz#1908506 - Fix creating the gencache user directory
- resolves: rhbz#1901029 - Build the vfs_io_uring module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-4" date="1620820800">- related: rhbz#1944657 - Fix possible upgrade issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-0" date="1623326400">- related: rhbz#1944657 - Update to version 4.14.5
- resolves: rhbz#1969787 - Fix memory leak in RPC server
- resolves: rhbz#1954974 - Validate smb.conf option for domain members with testparm
- resolves: rhbz#1963298 - Fix smbd trying to delete files with wrong permissions
- resolves: rhbz#1890008 - Update rpcclient manpage to list all available commands
- resolves: rhbz#1857254 - Update smbcacls manpage to document inhertance flags</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-1" date="1624536000">- resolves: rhbz#1974792 - Create a subpackage for vfs-io-uring
- resolves: rhbz#1965397 - Raise log level for dfs ENOENT debug message</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; -  4.14.4-2" date="1626177600">- related: rhbz#1980346 - Rebuild for libtalloc 0.11.0</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-4" date="1636113600">- resolves: rhbz#2021163
  Fix CVE-2016-2124
- resolves: rhbz#2021167
  Fix CVE-2021-23192
- resolves: rhbz#2021171
  Fix CVE-2020-25717</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-5" date="1636459200">- resolves: rhbz#2021493 - Add missing PAC buffer types to krb5pac.idl
- related: rbhz#2021171 - Fix regression with 'allow trusted domains = no'</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.14.5-6" date="1636804800">- related: rhbz#2021171 - Fix CVE-2020-25717
- Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-7" date="1637582400">- related: rhbz#2021171 - Fix CVE-2020-25717
- Fix running ktest (selftest)</changelog>
</package>
<package pkgid="80444267bb91b87d4499a364a0da0483feea3e237a6bc68159f76a1a59e5bb21" name="samba-winbind-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.14.5" rel="9.el8_5"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-4" date="1620820800">- related: rhbz#1944657 - Fix possible upgrade issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-0" date="1623326400">- related: rhbz#1944657 - Update to version 4.14.5
- resolves: rhbz#1969787 - Fix memory leak in RPC server
- resolves: rhbz#1954974 - Validate smb.conf option for domain members with testparm
- resolves: rhbz#1963298 - Fix smbd trying to delete files with wrong permissions
- resolves: rhbz#1890008 - Update rpcclient manpage to list all available commands
- resolves: rhbz#1857254 - Update smbcacls manpage to document inhertance flags</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-1" date="1624536000">- resolves: rhbz#1974792 - Create a subpackage for vfs-io-uring
- resolves: rhbz#1965397 - Raise log level for dfs ENOENT debug message</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; -  4.14.4-2" date="1626177600">- related: rhbz#1980346 - Rebuild for libtalloc 0.11.0</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-4" date="1636113600">- resolves: rhbz#2021163
  Fix CVE-2016-2124
- resolves: rhbz#2021167
  Fix CVE-2021-23192
- resolves: rhbz#2021171
  Fix CVE-2020-25717</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-5" date="1636459200">- resolves: rhbz#2021493 - Add missing PAC buffer types to krb5pac.idl
- related: rbhz#2021171 - Fix regression with 'allow trusted domains = no'</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.14.5-6" date="1636804800">- related: rhbz#2021171 - Fix CVE-2020-25717
- Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-7" date="1637582400">- related: rhbz#2021171 - Fix CVE-2020-25717
- Fix running ktest (selftest)</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.14.5-8" date="1638446400">- resolves: rhbz#2026717 - Dir containing dangling symlinks cannot be deleted</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-9" date="1643284800">- resolves: rhbz#2046174 - Fix username map script regression of CVE-2020-25717
- resolves: rhbz#2046160 - Fix possible segfault while joining a domain
- resolves: rhbz#2046152 - Fix CVE-2021-44142</changelog>
</package>
<package pkgid="d5f5a1a7bdc61762c129ddaeda0393c3796731f362a979ad38eadcd8bb29f4c6" name="samba-winbind-krb5-locator-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.14.5" rel="10.el8_5"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-0" date="1623326400">- related: rhbz#1944657 - Update to version 4.14.5
- resolves: rhbz#1969787 - Fix memory leak in RPC server
- resolves: rhbz#1954974 - Validate smb.conf option for domain members with testparm
- resolves: rhbz#1963298 - Fix smbd trying to delete files with wrong permissions
- resolves: rhbz#1890008 - Update rpcclient manpage to list all available commands
- resolves: rhbz#1857254 - Update smbcacls manpage to document inhertance flags</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-1" date="1624536000">- resolves: rhbz#1974792 - Create a subpackage for vfs-io-uring
- resolves: rhbz#1965397 - Raise log level for dfs ENOENT debug message</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; -  4.14.4-2" date="1626177600">- related: rhbz#1980346 - Rebuild for libtalloc 0.11.0</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-4" date="1636113600">- resolves: rhbz#2021163
  Fix CVE-2016-2124
- resolves: rhbz#2021167
  Fix CVE-2021-23192
- resolves: rhbz#2021171
  Fix CVE-2020-25717</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-5" date="1636459200">- resolves: rhbz#2021493 - Add missing PAC buffer types to krb5pac.idl
- related: rbhz#2021171 - Fix regression with 'allow trusted domains = no'</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.14.5-6" date="1636804800">- related: rhbz#2021171 - Fix CVE-2020-25717
- Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-7" date="1637582400">- related: rhbz#2021171 - Fix CVE-2020-25717
- Fix running ktest (selftest)</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.14.5-8" date="1638446400">- resolves: rhbz#2026717 - Dir containing dangling symlinks cannot be deleted</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-9" date="1643284800">- resolves: rhbz#2046174 - Fix username map script regression of CVE-2020-25717
- resolves: rhbz#2046160 - Fix possible segfault while joining a domain
- resolves: rhbz#2046152 - Fix CVE-2021-44142</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.14.5-10" date="1645531200">- resolves: rhbz#2029417 - Fix virusfilter_vfs_openat: Not scanned: Directory or special file</changelog>
</package>
<package pkgid="035aa9f75a2d379821462c90ba31c3532af9175d2a8213b0c63341a3cfaad2d5" name="samba-winbind-krb5-locator-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.14.5" rel="7.el8_5"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.13.3-3" date="1612440000">- resolves: #1924615 - Fix a memcache bug when cache is full
- resolves: #1924571 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-2" date="1620734400">- resolves: rhbz#1944657 - Update to version 4.14.4
- resolves: rhbz#1949445 - Fix CVE-2021-20254
- resolves: rhbz#1947945 - Fix libsmbldap.so.2 not being a symbolic link
- resolves: rhbz#1908506 - Fix creating the gencache user directory
- resolves: rhbz#1901029 - Build the vfs_io_uring module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-4" date="1620820800">- related: rhbz#1944657 - Fix possible upgrade issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-0" date="1623326400">- related: rhbz#1944657 - Update to version 4.14.5
- resolves: rhbz#1969787 - Fix memory leak in RPC server
- resolves: rhbz#1954974 - Validate smb.conf option for domain members with testparm
- resolves: rhbz#1963298 - Fix smbd trying to delete files with wrong permissions
- resolves: rhbz#1890008 - Update rpcclient manpage to list all available commands
- resolves: rhbz#1857254 - Update smbcacls manpage to document inhertance flags</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-1" date="1624536000">- resolves: rhbz#1974792 - Create a subpackage for vfs-io-uring
- resolves: rhbz#1965397 - Raise log level for dfs ENOENT debug message</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; -  4.14.4-2" date="1626177600">- related: rhbz#1980346 - Rebuild for libtalloc 0.11.0</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-4" date="1636113600">- resolves: rhbz#2021163
  Fix CVE-2016-2124
- resolves: rhbz#2021167
  Fix CVE-2021-23192
- resolves: rhbz#2021171
  Fix CVE-2020-25717</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-5" date="1636459200">- resolves: rhbz#2021493 - Add missing PAC buffer types to krb5pac.idl
- related: rbhz#2021171 - Fix regression with 'allow trusted domains = no'</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.14.5-6" date="1636804800">- related: rhbz#2021171 - Fix CVE-2020-25717
- Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-7" date="1637582400">- related: rhbz#2021171 - Fix CVE-2020-25717
- Fix running ktest (selftest)</changelog>
</package>
<package pkgid="202c289911130d17511e6b1b082b17c8f8d9829e9683191aa87ef5081439e137" name="samba-winbind-krb5-locator-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.14.5" rel="9.el8_5"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-4" date="1620820800">- related: rhbz#1944657 - Fix possible upgrade issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-0" date="1623326400">- related: rhbz#1944657 - Update to version 4.14.5
- resolves: rhbz#1969787 - Fix memory leak in RPC server
- resolves: rhbz#1954974 - Validate smb.conf option for domain members with testparm
- resolves: rhbz#1963298 - Fix smbd trying to delete files with wrong permissions
- resolves: rhbz#1890008 - Update rpcclient manpage to list all available commands
- resolves: rhbz#1857254 - Update smbcacls manpage to document inhertance flags</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-1" date="1624536000">- resolves: rhbz#1974792 - Create a subpackage for vfs-io-uring
- resolves: rhbz#1965397 - Raise log level for dfs ENOENT debug message</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; -  4.14.4-2" date="1626177600">- related: rhbz#1980346 - Rebuild for libtalloc 0.11.0</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-4" date="1636113600">- resolves: rhbz#2021163
  Fix CVE-2016-2124
- resolves: rhbz#2021167
  Fix CVE-2021-23192
- resolves: rhbz#2021171
  Fix CVE-2020-25717</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-5" date="1636459200">- resolves: rhbz#2021493 - Add missing PAC buffer types to krb5pac.idl
- related: rbhz#2021171 - Fix regression with 'allow trusted domains = no'</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.14.5-6" date="1636804800">- related: rhbz#2021171 - Fix CVE-2020-25717
- Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-7" date="1637582400">- related: rhbz#2021171 - Fix CVE-2020-25717
- Fix running ktest (selftest)</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.14.5-8" date="1638446400">- resolves: rhbz#2026717 - Dir containing dangling symlinks cannot be deleted</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-9" date="1643284800">- resolves: rhbz#2046174 - Fix username map script regression of CVE-2020-25717
- resolves: rhbz#2046160 - Fix possible segfault while joining a domain
- resolves: rhbz#2046152 - Fix CVE-2021-44142</changelog>
</package>
<package pkgid="9d5d9abc928a06705b39f153c754496bc0b87b8d4686d9425a8cff5da5552573" name="samba-winbind-modules-debuginfo" arch="i686">
  <version epoch="0" ver="4.14.5" rel="10.el8_5"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-0" date="1623326400">- related: rhbz#1944657 - Update to version 4.14.5
- resolves: rhbz#1969787 - Fix memory leak in RPC server
- resolves: rhbz#1954974 - Validate smb.conf option for domain members with testparm
- resolves: rhbz#1963298 - Fix smbd trying to delete files with wrong permissions
- resolves: rhbz#1890008 - Update rpcclient manpage to list all available commands
- resolves: rhbz#1857254 - Update smbcacls manpage to document inhertance flags</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-1" date="1624536000">- resolves: rhbz#1974792 - Create a subpackage for vfs-io-uring
- resolves: rhbz#1965397 - Raise log level for dfs ENOENT debug message</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; -  4.14.4-2" date="1626177600">- related: rhbz#1980346 - Rebuild for libtalloc 0.11.0</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-4" date="1636113600">- resolves: rhbz#2021163
  Fix CVE-2016-2124
- resolves: rhbz#2021167
  Fix CVE-2021-23192
- resolves: rhbz#2021171
  Fix CVE-2020-25717</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-5" date="1636459200">- resolves: rhbz#2021493 - Add missing PAC buffer types to krb5pac.idl
- related: rbhz#2021171 - Fix regression with 'allow trusted domains = no'</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.14.5-6" date="1636804800">- related: rhbz#2021171 - Fix CVE-2020-25717
- Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-7" date="1637582400">- related: rhbz#2021171 - Fix CVE-2020-25717
- Fix running ktest (selftest)</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.14.5-8" date="1638446400">- resolves: rhbz#2026717 - Dir containing dangling symlinks cannot be deleted</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-9" date="1643284800">- resolves: rhbz#2046174 - Fix username map script regression of CVE-2020-25717
- resolves: rhbz#2046160 - Fix possible segfault while joining a domain
- resolves: rhbz#2046152 - Fix CVE-2021-44142</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.14.5-10" date="1645531200">- resolves: rhbz#2029417 - Fix virusfilter_vfs_openat: Not scanned: Directory or special file</changelog>
</package>
<package pkgid="726a824fd06498f11f9627cdacd2b4a5c77deeffda2a79059b842bafa0bfedee" name="samba-winbind-modules-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.14.5" rel="10.el8_5"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-0" date="1623326400">- related: rhbz#1944657 - Update to version 4.14.5
- resolves: rhbz#1969787 - Fix memory leak in RPC server
- resolves: rhbz#1954974 - Validate smb.conf option for domain members with testparm
- resolves: rhbz#1963298 - Fix smbd trying to delete files with wrong permissions
- resolves: rhbz#1890008 - Update rpcclient manpage to list all available commands
- resolves: rhbz#1857254 - Update smbcacls manpage to document inhertance flags</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-1" date="1624536000">- resolves: rhbz#1974792 - Create a subpackage for vfs-io-uring
- resolves: rhbz#1965397 - Raise log level for dfs ENOENT debug message</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; -  4.14.4-2" date="1626177600">- related: rhbz#1980346 - Rebuild for libtalloc 0.11.0</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-4" date="1636113600">- resolves: rhbz#2021163
  Fix CVE-2016-2124
- resolves: rhbz#2021167
  Fix CVE-2021-23192
- resolves: rhbz#2021171
  Fix CVE-2020-25717</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-5" date="1636459200">- resolves: rhbz#2021493 - Add missing PAC buffer types to krb5pac.idl
- related: rbhz#2021171 - Fix regression with 'allow trusted domains = no'</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.14.5-6" date="1636804800">- related: rhbz#2021171 - Fix CVE-2020-25717
- Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-7" date="1637582400">- related: rhbz#2021171 - Fix CVE-2020-25717
- Fix running ktest (selftest)</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.14.5-8" date="1638446400">- resolves: rhbz#2026717 - Dir containing dangling symlinks cannot be deleted</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-9" date="1643284800">- resolves: rhbz#2046174 - Fix username map script regression of CVE-2020-25717
- resolves: rhbz#2046160 - Fix possible segfault while joining a domain
- resolves: rhbz#2046152 - Fix CVE-2021-44142</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.14.5-10" date="1645531200">- resolves: rhbz#2029417 - Fix virusfilter_vfs_openat: Not scanned: Directory or special file</changelog>
</package>
<package pkgid="66b34a4115354798be43b78d5c3e6d52b7511f4201f366c3a136b3eb19384aca" name="samba-winbind-modules-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.14.5" rel="7.el8_5"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.13.3-3" date="1612440000">- resolves: #1924615 - Fix a memcache bug when cache is full
- resolves: #1924571 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-2" date="1620734400">- resolves: rhbz#1944657 - Update to version 4.14.4
- resolves: rhbz#1949445 - Fix CVE-2021-20254
- resolves: rhbz#1947945 - Fix libsmbldap.so.2 not being a symbolic link
- resolves: rhbz#1908506 - Fix creating the gencache user directory
- resolves: rhbz#1901029 - Build the vfs_io_uring module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-4" date="1620820800">- related: rhbz#1944657 - Fix possible upgrade issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-0" date="1623326400">- related: rhbz#1944657 - Update to version 4.14.5
- resolves: rhbz#1969787 - Fix memory leak in RPC server
- resolves: rhbz#1954974 - Validate smb.conf option for domain members with testparm
- resolves: rhbz#1963298 - Fix smbd trying to delete files with wrong permissions
- resolves: rhbz#1890008 - Update rpcclient manpage to list all available commands
- resolves: rhbz#1857254 - Update smbcacls manpage to document inhertance flags</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-1" date="1624536000">- resolves: rhbz#1974792 - Create a subpackage for vfs-io-uring
- resolves: rhbz#1965397 - Raise log level for dfs ENOENT debug message</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; -  4.14.4-2" date="1626177600">- related: rhbz#1980346 - Rebuild for libtalloc 0.11.0</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-4" date="1636113600">- resolves: rhbz#2021163
  Fix CVE-2016-2124
- resolves: rhbz#2021167
  Fix CVE-2021-23192
- resolves: rhbz#2021171
  Fix CVE-2020-25717</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-5" date="1636459200">- resolves: rhbz#2021493 - Add missing PAC buffer types to krb5pac.idl
- related: rbhz#2021171 - Fix regression with 'allow trusted domains = no'</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.14.5-6" date="1636804800">- related: rhbz#2021171 - Fix CVE-2020-25717
- Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-7" date="1637582400">- related: rhbz#2021171 - Fix CVE-2020-25717
- Fix running ktest (selftest)</changelog>
</package>
<package pkgid="5e4f701235985d303b7d0298b6a27ba349b716164a2ab80aed860701a86579e3" name="samba-winbind-modules-debuginfo" arch="i686">
  <version epoch="0" ver="4.14.5" rel="9.el8_5"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-4" date="1620820800">- related: rhbz#1944657 - Fix possible upgrade issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-0" date="1623326400">- related: rhbz#1944657 - Update to version 4.14.5
- resolves: rhbz#1969787 - Fix memory leak in RPC server
- resolves: rhbz#1954974 - Validate smb.conf option for domain members with testparm
- resolves: rhbz#1963298 - Fix smbd trying to delete files with wrong permissions
- resolves: rhbz#1890008 - Update rpcclient manpage to list all available commands
- resolves: rhbz#1857254 - Update smbcacls manpage to document inhertance flags</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-1" date="1624536000">- resolves: rhbz#1974792 - Create a subpackage for vfs-io-uring
- resolves: rhbz#1965397 - Raise log level for dfs ENOENT debug message</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; -  4.14.4-2" date="1626177600">- related: rhbz#1980346 - Rebuild for libtalloc 0.11.0</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-4" date="1636113600">- resolves: rhbz#2021163
  Fix CVE-2016-2124
- resolves: rhbz#2021167
  Fix CVE-2021-23192
- resolves: rhbz#2021171
  Fix CVE-2020-25717</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-5" date="1636459200">- resolves: rhbz#2021493 - Add missing PAC buffer types to krb5pac.idl
- related: rbhz#2021171 - Fix regression with 'allow trusted domains = no'</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.14.5-6" date="1636804800">- related: rhbz#2021171 - Fix CVE-2020-25717
- Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-7" date="1637582400">- related: rhbz#2021171 - Fix CVE-2020-25717
- Fix running ktest (selftest)</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.14.5-8" date="1638446400">- resolves: rhbz#2026717 - Dir containing dangling symlinks cannot be deleted</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-9" date="1643284800">- resolves: rhbz#2046174 - Fix username map script regression of CVE-2020-25717
- resolves: rhbz#2046160 - Fix possible segfault while joining a domain
- resolves: rhbz#2046152 - Fix CVE-2021-44142</changelog>
</package>
<package pkgid="c98338942968e7d68227add4e0236e868511dce35044148054a4a80f1a3d6f59" name="samba-winbind-modules-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.14.5" rel="9.el8_5"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-4" date="1620820800">- related: rhbz#1944657 - Fix possible upgrade issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-0" date="1623326400">- related: rhbz#1944657 - Update to version 4.14.5
- resolves: rhbz#1969787 - Fix memory leak in RPC server
- resolves: rhbz#1954974 - Validate smb.conf option for domain members with testparm
- resolves: rhbz#1963298 - Fix smbd trying to delete files with wrong permissions
- resolves: rhbz#1890008 - Update rpcclient manpage to list all available commands
- resolves: rhbz#1857254 - Update smbcacls manpage to document inhertance flags</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-1" date="1624536000">- resolves: rhbz#1974792 - Create a subpackage for vfs-io-uring
- resolves: rhbz#1965397 - Raise log level for dfs ENOENT debug message</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; -  4.14.4-2" date="1626177600">- related: rhbz#1980346 - Rebuild for libtalloc 0.11.0</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-4" date="1636113600">- resolves: rhbz#2021163
  Fix CVE-2016-2124
- resolves: rhbz#2021167
  Fix CVE-2021-23192
- resolves: rhbz#2021171
  Fix CVE-2020-25717</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-5" date="1636459200">- resolves: rhbz#2021493 - Add missing PAC buffer types to krb5pac.idl
- related: rbhz#2021171 - Fix regression with 'allow trusted domains = no'</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.14.5-6" date="1636804800">- related: rhbz#2021171 - Fix CVE-2020-25717
- Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-7" date="1637582400">- related: rhbz#2021171 - Fix CVE-2020-25717
- Fix running ktest (selftest)</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.14.5-8" date="1638446400">- resolves: rhbz#2026717 - Dir containing dangling symlinks cannot be deleted</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-9" date="1643284800">- resolves: rhbz#2046174 - Fix username map script regression of CVE-2020-25717
- resolves: rhbz#2046160 - Fix possible segfault while joining a domain
- resolves: rhbz#2046152 - Fix CVE-2021-44142</changelog>
</package>
<package pkgid="9d76a240737b94599f487a435d7faae89b6a0436ebf15595fbb46905fa46c78c" name="samba-winexe-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.14.5" rel="10.el8_5"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-0" date="1623326400">- related: rhbz#1944657 - Update to version 4.14.5
- resolves: rhbz#1969787 - Fix memory leak in RPC server
- resolves: rhbz#1954974 - Validate smb.conf option for domain members with testparm
- resolves: rhbz#1963298 - Fix smbd trying to delete files with wrong permissions
- resolves: rhbz#1890008 - Update rpcclient manpage to list all available commands
- resolves: rhbz#1857254 - Update smbcacls manpage to document inhertance flags</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-1" date="1624536000">- resolves: rhbz#1974792 - Create a subpackage for vfs-io-uring
- resolves: rhbz#1965397 - Raise log level for dfs ENOENT debug message</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; -  4.14.4-2" date="1626177600">- related: rhbz#1980346 - Rebuild for libtalloc 0.11.0</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-4" date="1636113600">- resolves: rhbz#2021163
  Fix CVE-2016-2124
- resolves: rhbz#2021167
  Fix CVE-2021-23192
- resolves: rhbz#2021171
  Fix CVE-2020-25717</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-5" date="1636459200">- resolves: rhbz#2021493 - Add missing PAC buffer types to krb5pac.idl
- related: rbhz#2021171 - Fix regression with 'allow trusted domains = no'</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.14.5-6" date="1636804800">- related: rhbz#2021171 - Fix CVE-2020-25717
- Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-7" date="1637582400">- related: rhbz#2021171 - Fix CVE-2020-25717
- Fix running ktest (selftest)</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.14.5-8" date="1638446400">- resolves: rhbz#2026717 - Dir containing dangling symlinks cannot be deleted</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-9" date="1643284800">- resolves: rhbz#2046174 - Fix username map script regression of CVE-2020-25717
- resolves: rhbz#2046160 - Fix possible segfault while joining a domain
- resolves: rhbz#2046152 - Fix CVE-2021-44142</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.14.5-10" date="1645531200">- resolves: rhbz#2029417 - Fix virusfilter_vfs_openat: Not scanned: Directory or special file</changelog>
</package>
<package pkgid="57f0122a6689d7c32c9c1d07d0789244ed2dc446ab102296437427c2f316b654" name="samba-winexe-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.14.5" rel="7.el8_5"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.13.3-3" date="1612440000">- resolves: #1924615 - Fix a memcache bug when cache is full
- resolves: #1924571 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-2" date="1620734400">- resolves: rhbz#1944657 - Update to version 4.14.4
- resolves: rhbz#1949445 - Fix CVE-2021-20254
- resolves: rhbz#1947945 - Fix libsmbldap.so.2 not being a symbolic link
- resolves: rhbz#1908506 - Fix creating the gencache user directory
- resolves: rhbz#1901029 - Build the vfs_io_uring module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-4" date="1620820800">- related: rhbz#1944657 - Fix possible upgrade issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-0" date="1623326400">- related: rhbz#1944657 - Update to version 4.14.5
- resolves: rhbz#1969787 - Fix memory leak in RPC server
- resolves: rhbz#1954974 - Validate smb.conf option for domain members with testparm
- resolves: rhbz#1963298 - Fix smbd trying to delete files with wrong permissions
- resolves: rhbz#1890008 - Update rpcclient manpage to list all available commands
- resolves: rhbz#1857254 - Update smbcacls manpage to document inhertance flags</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-1" date="1624536000">- resolves: rhbz#1974792 - Create a subpackage for vfs-io-uring
- resolves: rhbz#1965397 - Raise log level for dfs ENOENT debug message</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; -  4.14.4-2" date="1626177600">- related: rhbz#1980346 - Rebuild for libtalloc 0.11.0</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-4" date="1636113600">- resolves: rhbz#2021163
  Fix CVE-2016-2124
- resolves: rhbz#2021167
  Fix CVE-2021-23192
- resolves: rhbz#2021171
  Fix CVE-2020-25717</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-5" date="1636459200">- resolves: rhbz#2021493 - Add missing PAC buffer types to krb5pac.idl
- related: rbhz#2021171 - Fix regression with 'allow trusted domains = no'</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.14.5-6" date="1636804800">- related: rhbz#2021171 - Fix CVE-2020-25717
- Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-7" date="1637582400">- related: rhbz#2021171 - Fix CVE-2020-25717
- Fix running ktest (selftest)</changelog>
</package>
<package pkgid="2025373f2a67d2c6d5c01360fd4e70687af5eb88ce6e9449afbbe9b8ae3b7d57" name="samba-winexe-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.14.5" rel="9.el8_5"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-4" date="1620820800">- related: rhbz#1944657 - Fix possible upgrade issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-0" date="1623326400">- related: rhbz#1944657 - Update to version 4.14.5
- resolves: rhbz#1969787 - Fix memory leak in RPC server
- resolves: rhbz#1954974 - Validate smb.conf option for domain members with testparm
- resolves: rhbz#1963298 - Fix smbd trying to delete files with wrong permissions
- resolves: rhbz#1890008 - Update rpcclient manpage to list all available commands
- resolves: rhbz#1857254 - Update smbcacls manpage to document inhertance flags</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-1" date="1624536000">- resolves: rhbz#1974792 - Create a subpackage for vfs-io-uring
- resolves: rhbz#1965397 - Raise log level for dfs ENOENT debug message</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; -  4.14.4-2" date="1626177600">- related: rhbz#1980346 - Rebuild for libtalloc 0.11.0</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.4-4" date="1636113600">- resolves: rhbz#2021163
  Fix CVE-2016-2124
- resolves: rhbz#2021167
  Fix CVE-2021-23192
- resolves: rhbz#2021171
  Fix CVE-2020-25717</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-5" date="1636459200">- resolves: rhbz#2021493 - Add missing PAC buffer types to krb5pac.idl
- related: rbhz#2021171 - Fix regression with 'allow trusted domains = no'</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.14.5-6" date="1636804800">- related: rhbz#2021171 - Fix CVE-2020-25717
- Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-7" date="1637582400">- related: rhbz#2021171 - Fix CVE-2020-25717
- Fix running ktest (selftest)</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.14.5-8" date="1638446400">- resolves: rhbz#2026717 - Dir containing dangling symlinks cannot be deleted</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.14.5-9" date="1643284800">- resolves: rhbz#2046174 - Fix username map script regression of CVE-2020-25717
- resolves: rhbz#2046160 - Fix possible segfault while joining a domain
- resolves: rhbz#2046152 - Fix CVE-2021-44142</changelog>
</package>
<package pkgid="07e3f24a33c825d6efad74cd346cca2daae7d30732e7980ed2b5e3781822b819" name="sanlock-debuginfo" arch="i686">
  <version epoch="0" ver="3.8.4" rel="2.el8_5"/>
  <changelog author="David Teigland &lt;teigland@redhat.com&gt; - 3.6.0-4" date="1538654400">- makefile gcc flags</changelog>
  <changelog author="David Teigland &lt;teigland@redhat.com&gt; - 3.6.0-5" date="1544097600">- Fix selinux lockfile error</changelog>
  <changelog author="Nir Soffer &lt;nsoffer@redhat.com&gt; 3.8.0-1" date="1560340800">- Cleanup spec and convert to python3</changelog>
  <changelog author="Nir Soffer &lt;nsoffer@redhat.com&gt; 3.8.0-2" date="1560340801">- kick the gating tests to run</changelog>
  <changelog author="David Teigland &lt;teigland@redhat.com&gt; 3.8.1-1" date="1594296000">- Update to sanlock-3.8.1</changelog>
  <changelog author="David Teigland &lt;teigland@redhat.com&gt; 3.8.2-1" date="1597060800">- Update to sanlock-3.8.2</changelog>
  <changelog author="David Teigland &lt;teigland@redhat.com&gt; 3.8.3-1" date="1611057600">- Update to sanlock-3.8.3</changelog>
  <changelog author="David Teigland &lt;teigland@redhat.com&gt; 3.8.3-2" date="1621512000">- Fix connection close and add python inquire api</changelog>
  <changelog author="David Teigland &lt;teigland@redhat.com&gt; 3.8.4-1" date="1622548800">- Update to sanlock-3.8.4</changelog>
  <changelog author="David Teigland &lt;teigland@redhat.com&gt; - 3.8.4-2" date="1647604800">- fixes for thread/memory leak</changelog>
</package>
<package pkgid="f1ed7b45a61b108240dff7788c076b86e5b9339b91a66ea6eadcdf4e680ea2ca" name="sanlock-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.8.4" rel="2.el8_5"/>
  <changelog author="David Teigland &lt;teigland@redhat.com&gt; - 3.6.0-4" date="1538654400">- makefile gcc flags</changelog>
  <changelog author="David Teigland &lt;teigland@redhat.com&gt; - 3.6.0-5" date="1544097600">- Fix selinux lockfile error</changelog>
  <changelog author="Nir Soffer &lt;nsoffer@redhat.com&gt; 3.8.0-1" date="1560340800">- Cleanup spec and convert to python3</changelog>
  <changelog author="Nir Soffer &lt;nsoffer@redhat.com&gt; 3.8.0-2" date="1560340801">- kick the gating tests to run</changelog>
  <changelog author="David Teigland &lt;teigland@redhat.com&gt; 3.8.1-1" date="1594296000">- Update to sanlock-3.8.1</changelog>
  <changelog author="David Teigland &lt;teigland@redhat.com&gt; 3.8.2-1" date="1597060800">- Update to sanlock-3.8.2</changelog>
  <changelog author="David Teigland &lt;teigland@redhat.com&gt; 3.8.3-1" date="1611057600">- Update to sanlock-3.8.3</changelog>
  <changelog author="David Teigland &lt;teigland@redhat.com&gt; 3.8.3-2" date="1621512000">- Fix connection close and add python inquire api</changelog>
  <changelog author="David Teigland &lt;teigland@redhat.com&gt; 3.8.4-1" date="1622548800">- Update to sanlock-3.8.4</changelog>
  <changelog author="David Teigland &lt;teigland@redhat.com&gt; - 3.8.4-2" date="1647604800">- fixes for thread/memory leak</changelog>
</package>
<package pkgid="663880b1ba8df9938c0982fd7efbdf4e81b3d9fb172d79f934b1fb53ea78660b" name="sanlock-debugsource" arch="i686">
  <version epoch="0" ver="3.8.4" rel="2.el8_5"/>
  <changelog author="David Teigland &lt;teigland@redhat.com&gt; - 3.6.0-4" date="1538654400">- makefile gcc flags</changelog>
  <changelog author="David Teigland &lt;teigland@redhat.com&gt; - 3.6.0-5" date="1544097600">- Fix selinux lockfile error</changelog>
  <changelog author="Nir Soffer &lt;nsoffer@redhat.com&gt; 3.8.0-1" date="1560340800">- Cleanup spec and convert to python3</changelog>
  <changelog author="Nir Soffer &lt;nsoffer@redhat.com&gt; 3.8.0-2" date="1560340801">- kick the gating tests to run</changelog>
  <changelog author="David Teigland &lt;teigland@redhat.com&gt; 3.8.1-1" date="1594296000">- Update to sanlock-3.8.1</changelog>
  <changelog author="David Teigland &lt;teigland@redhat.com&gt; 3.8.2-1" date="1597060800">- Update to sanlock-3.8.2</changelog>
  <changelog author="David Teigland &lt;teigland@redhat.com&gt; 3.8.3-1" date="1611057600">- Update to sanlock-3.8.3</changelog>
  <changelog author="David Teigland &lt;teigland@redhat.com&gt; 3.8.3-2" date="1621512000">- Fix connection close and add python inquire api</changelog>
  <changelog author="David Teigland &lt;teigland@redhat.com&gt; 3.8.4-1" date="1622548800">- Update to sanlock-3.8.4</changelog>
  <changelog author="David Teigland &lt;teigland@redhat.com&gt; - 3.8.4-2" date="1647604800">- fixes for thread/memory leak</changelog>
</package>
<package pkgid="29edf92e9684e75488c38c6ad583b8d89a3cecc83fe4a0234a75320c04236c41" name="sanlock-debugsource" arch="x86_64">
  <version epoch="0" ver="3.8.4" rel="2.el8_5"/>
  <changelog author="David Teigland &lt;teigland@redhat.com&gt; - 3.6.0-4" date="1538654400">- makefile gcc flags</changelog>
  <changelog author="David Teigland &lt;teigland@redhat.com&gt; - 3.6.0-5" date="1544097600">- Fix selinux lockfile error</changelog>
  <changelog author="Nir Soffer &lt;nsoffer@redhat.com&gt; 3.8.0-1" date="1560340800">- Cleanup spec and convert to python3</changelog>
  <changelog author="Nir Soffer &lt;nsoffer@redhat.com&gt; 3.8.0-2" date="1560340801">- kick the gating tests to run</changelog>
  <changelog author="David Teigland &lt;teigland@redhat.com&gt; 3.8.1-1" date="1594296000">- Update to sanlock-3.8.1</changelog>
  <changelog author="David Teigland &lt;teigland@redhat.com&gt; 3.8.2-1" date="1597060800">- Update to sanlock-3.8.2</changelog>
  <changelog author="David Teigland &lt;teigland@redhat.com&gt; 3.8.3-1" date="1611057600">- Update to sanlock-3.8.3</changelog>
  <changelog author="David Teigland &lt;teigland@redhat.com&gt; 3.8.3-2" date="1621512000">- Fix connection close and add python inquire api</changelog>
  <changelog author="David Teigland &lt;teigland@redhat.com&gt; 3.8.4-1" date="1622548800">- Update to sanlock-3.8.4</changelog>
  <changelog author="David Teigland &lt;teigland@redhat.com&gt; - 3.8.4-2" date="1647604800">- fixes for thread/memory leak</changelog>
</package>
<package pkgid="56533d0a9871062511857121b1f11022fac6cbf84fead7c887dcbe8f73810ec7" name="sanlock-lib-debuginfo" arch="i686">
  <version epoch="0" ver="3.8.4" rel="2.el8_5"/>
  <changelog author="David Teigland &lt;teigland@redhat.com&gt; - 3.6.0-4" date="1538654400">- makefile gcc flags</changelog>
  <changelog author="David Teigland &lt;teigland@redhat.com&gt; - 3.6.0-5" date="1544097600">- Fix selinux lockfile error</changelog>
  <changelog author="Nir Soffer &lt;nsoffer@redhat.com&gt; 3.8.0-1" date="1560340800">- Cleanup spec and convert to python3</changelog>
  <changelog author="Nir Soffer &lt;nsoffer@redhat.com&gt; 3.8.0-2" date="1560340801">- kick the gating tests to run</changelog>
  <changelog author="David Teigland &lt;teigland@redhat.com&gt; 3.8.1-1" date="1594296000">- Update to sanlock-3.8.1</changelog>
  <changelog author="David Teigland &lt;teigland@redhat.com&gt; 3.8.2-1" date="1597060800">- Update to sanlock-3.8.2</changelog>
  <changelog author="David Teigland &lt;teigland@redhat.com&gt; 3.8.3-1" date="1611057600">- Update to sanlock-3.8.3</changelog>
  <changelog author="David Teigland &lt;teigland@redhat.com&gt; 3.8.3-2" date="1621512000">- Fix connection close and add python inquire api</changelog>
  <changelog author="David Teigland &lt;teigland@redhat.com&gt; 3.8.4-1" date="1622548800">- Update to sanlock-3.8.4</changelog>
  <changelog author="David Teigland &lt;teigland@redhat.com&gt; - 3.8.4-2" date="1647604800">- fixes for thread/memory leak</changelog>
</package>
<package pkgid="6f5f55b247be9c118af94d96a0be6fd60bd447c25181d8a01ea1d5a58ba75b51" name="sanlock-lib-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.8.4" rel="2.el8_5"/>
  <changelog author="David Teigland &lt;teigland@redhat.com&gt; - 3.6.0-4" date="1538654400">- makefile gcc flags</changelog>
  <changelog author="David Teigland &lt;teigland@redhat.com&gt; - 3.6.0-5" date="1544097600">- Fix selinux lockfile error</changelog>
  <changelog author="Nir Soffer &lt;nsoffer@redhat.com&gt; 3.8.0-1" date="1560340800">- Cleanup spec and convert to python3</changelog>
  <changelog author="Nir Soffer &lt;nsoffer@redhat.com&gt; 3.8.0-2" date="1560340801">- kick the gating tests to run</changelog>
  <changelog author="David Teigland &lt;teigland@redhat.com&gt; 3.8.1-1" date="1594296000">- Update to sanlock-3.8.1</changelog>
  <changelog author="David Teigland &lt;teigland@redhat.com&gt; 3.8.2-1" date="1597060800">- Update to sanlock-3.8.2</changelog>
  <changelog author="David Teigland &lt;teigland@redhat.com&gt; 3.8.3-1" date="1611057600">- Update to sanlock-3.8.3</changelog>
  <changelog author="David Teigland &lt;teigland@redhat.com&gt; 3.8.3-2" date="1621512000">- Fix connection close and add python inquire api</changelog>
  <changelog author="David Teigland &lt;teigland@redhat.com&gt; 3.8.4-1" date="1622548800">- Update to sanlock-3.8.4</changelog>
  <changelog author="David Teigland &lt;teigland@redhat.com&gt; - 3.8.4-2" date="1647604800">- fixes for thread/memory leak</changelog>
</package>
<package pkgid="d646694618ccfb7c1c9cf7d0e9520c30a15177edc2094f55caa0ea8598960c77" name="sssd-ad-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="2.el8_5.1"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-5" date="1609156800">- Resolves: rhbz#1631410 - Can't login with smartcard with multiple certs having same ID value
- Resolves: rhbz#1884213 - [RFE] add offline_timeout_max config option to control offline interval backoff (additional patches)
- Resolves: rhbz#1893159 - Default debug level should report all errors / failures
- Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-6" date="1610971200">- Resolves: rhbz#1113639 - autofs: return a connection failure until maps have been fetched
- Resolves: rhbz#1915395 - Memory leak in the simple access provider
- Resolves: rhbz#1915319 - SSSD: SBUS: failures during servers startup
- Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication (additional patches)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-7" date="1611662400">- Resolves: rhbz#1920001 - Do not add '%' to group names already prefixed with '%' in IPA sudo rules
- Resolves: rhbz#1918433 - sssd unable to lookup certmap rules
- Resolves: rhbz#1917382 - [abrt] [faf] sssd: dp_client_handshake_timeout(): /usr/libexec/sssd/sssd_be killed by 11</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-8" date="1613131200">- Resolves: rhbz#1926622 - Add support to verify authentication indicators in pam_sss_gss
- Resolves: rhbz#1926454 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0.
- Resolves: rhbz#1893159 - Default debug level should report all errors / failures (additional patch)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.0-1" date="1620648000">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1930535 - [abrt] [faf] sssd: monitor_service_shutdown(): /usr/sbin/sssd killed by 11
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1945888 - Inconsistant debug level for connection logging
- Resolves: rhbz#1948657 - pam_sss_gss.so doesn't work with large kerberos tickets
- Resolves: rhbz#1949149 - [RFE] Poor man's backtrace
- Resolves: rhbz#1920500 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR
- Resolves: rhbz#1923964 - [RFE] SSSD Error Msg Improvement: write_krb5info_file failed, authentication might fail.
- Resolves: rhbz#1928648 - SSSD logs improvements: clarify which config option applies to each timeout in the logs
- Resolves: rhbz#1632159 - sssd-kcm starts successfully for non existent socket_path
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm
- Resolves: rhbz#1925505 - [RFE] improve the sssd refresh timers for SUDO queries
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1925561 - sssd-ldap(5) does not report how to disable the SUDO smart queries
- Resolves: rhbz#1925621 - document impact of indices and of scope on performance of LDAP queries
- Resolves: rhbz#1855320 - [RFE] RHEL8 sssd: inheritance of the case_sensitive parameter for subdomains.
- Resolves: rhbz#1925608 - [RFE] make 'random_offset' addon to 'offline_timeout' option configurable
- Resolves: rhbz#1447945 - man page / docs update required: if two certificate matching rules with the same priority match only one is used
- Resolves: rhbz#1703436 - sssd not thread-safe in innetgr()
- Resolves: rhbz#1713143 - SSSD does not translate the 2FA text labels("first factor" / "second factor") on GDM login and screensaver unlock screen
- Resolves: rhbz#1888977 - sss_override: Usage limitations clarification in man page
- Resolves: rhbz#1890177 - Clarify "single_prompt" option in "PROMPTING CONFIGURATION SECTION" section of sssd.conf man page
- Resolves: rhbz#1902280 - fix sss_cache to also reset cached timestamp
- Resolves: rhbz#1935683 - SSSD not detecting subdomain from AD forest (RHEL 8.3)
- Resolves: rhbz#1937919 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7
- Resolves: rhbz#1944665 - No gpo found and ad_gpo_implicit_deny set to True still permits user login
- Resolves: rhbz#1919942 - sss_override does not take precedence over override_homedir directive</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-1" date="1623153600">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1917444 - SSSD Error Msg Improvement: Server resolution failed: [2]: No such file or directory
- Resolves: rhbz#1917511 - SSSD Error Msg Improvement: Failed to resolve server 'server.example.com': Error reading file
- Resolves: rhbz#1917535 - sssd.conf man page: parameter dns_resolver_server_timeout and dns_resolver_op_timeout
- Resolves: rhbz#1940509 - [RFE] Health and Support Analyzer: Link frontend to backend requests
- Resolves: rhbz#1649464 - auto_private_groups not working as expected with posix ipa/ad trust
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1961215 - Invalid sssd-kcm return code if requested operation is not found
- Resolves: rhbz#1837090 - SSSD fails nss_getby_name for IPA user with SID if the user has user private group
- Resolves: rhbz#1879869 - sudo commands incorrectly exports the KRB5CCNAME environment variable
- Resolves: rhbz#1962550 - sss_pac_make_request fails on systems joined to Active Directory.
- Resolves: rhbz#1737489 - [RFE] SSSD should honor default Kerberos settings (keytab name) in /etc/krb5.conf</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-2" date="1624276800">- Resolves: rhbz#1974257 - 'debug_microseconds' config option is broken
- Resolves: rhbz#1936902 - SSSD Error Msg Improvement: Invalid argument
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm (additional patches and rebuild)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-1" date="1626091200">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1693379 - sssd_be and sss_cache too heavy on CPU
- Resolves: rhbz#1909373 - Missing search index for `originalADgidNumber`
- Resolves: rhbz#1954630 - [RFE] Improve debug messages by adding a unique tag for each request the backend is handling
- Resolves: rhbz#1936891 - SSSD Error Msg Improvement: Bad address
- Resolves: rhbz#1364596 - sssd still showing ipa user after removed from last group
- Resolves: rhbz#1979404 - Changes made to /etc/pam.d/sssd-shadowutils are overwritten back to default on sssd-common package upgrade</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2" date="1627905600">- Resolves: rhbz#1975169 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-8]
- Resolves: rhbz#1962042 - [sssd] RHEL 8.5 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.1" date="1634558400">- Resolves: rhbz#2014460 - tps tests fail with cross dependency on sssd debuginfo package: removal of 'sssd-libwbclient-debuginfo' is missing [rhel-8.5.0.z]</changelog>
</package>
<package pkgid="b127ad7cd3dc6ec742e1a2245f7e73f9811d336ca807e1518639799f6fc9d300" name="sssd-ad-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="2.el8_5.3"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-7" date="1611662400">- Resolves: rhbz#1920001 - Do not add '%' to group names already prefixed with '%' in IPA sudo rules
- Resolves: rhbz#1918433 - sssd unable to lookup certmap rules
- Resolves: rhbz#1917382 - [abrt] [faf] sssd: dp_client_handshake_timeout(): /usr/libexec/sssd/sssd_be killed by 11</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-8" date="1613131200">- Resolves: rhbz#1926622 - Add support to verify authentication indicators in pam_sss_gss
- Resolves: rhbz#1926454 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0.
- Resolves: rhbz#1893159 - Default debug level should report all errors / failures (additional patch)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.0-1" date="1620648000">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1930535 - [abrt] [faf] sssd: monitor_service_shutdown(): /usr/sbin/sssd killed by 11
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1945888 - Inconsistant debug level for connection logging
- Resolves: rhbz#1948657 - pam_sss_gss.so doesn't work with large kerberos tickets
- Resolves: rhbz#1949149 - [RFE] Poor man's backtrace
- Resolves: rhbz#1920500 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR
- Resolves: rhbz#1923964 - [RFE] SSSD Error Msg Improvement: write_krb5info_file failed, authentication might fail.
- Resolves: rhbz#1928648 - SSSD logs improvements: clarify which config option applies to each timeout in the logs
- Resolves: rhbz#1632159 - sssd-kcm starts successfully for non existent socket_path
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm
- Resolves: rhbz#1925505 - [RFE] improve the sssd refresh timers for SUDO queries
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1925561 - sssd-ldap(5) does not report how to disable the SUDO smart queries
- Resolves: rhbz#1925621 - document impact of indices and of scope on performance of LDAP queries
- Resolves: rhbz#1855320 - [RFE] RHEL8 sssd: inheritance of the case_sensitive parameter for subdomains.
- Resolves: rhbz#1925608 - [RFE] make 'random_offset' addon to 'offline_timeout' option configurable
- Resolves: rhbz#1447945 - man page / docs update required: if two certificate matching rules with the same priority match only one is used
- Resolves: rhbz#1703436 - sssd not thread-safe in innetgr()
- Resolves: rhbz#1713143 - SSSD does not translate the 2FA text labels("first factor" / "second factor") on GDM login and screensaver unlock screen
- Resolves: rhbz#1888977 - sss_override: Usage limitations clarification in man page
- Resolves: rhbz#1890177 - Clarify "single_prompt" option in "PROMPTING CONFIGURATION SECTION" section of sssd.conf man page
- Resolves: rhbz#1902280 - fix sss_cache to also reset cached timestamp
- Resolves: rhbz#1935683 - SSSD not detecting subdomain from AD forest (RHEL 8.3)
- Resolves: rhbz#1937919 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7
- Resolves: rhbz#1944665 - No gpo found and ad_gpo_implicit_deny set to True still permits user login
- Resolves: rhbz#1919942 - sss_override does not take precedence over override_homedir directive</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-1" date="1623153600">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1917444 - SSSD Error Msg Improvement: Server resolution failed: [2]: No such file or directory
- Resolves: rhbz#1917511 - SSSD Error Msg Improvement: Failed to resolve server 'server.example.com': Error reading file
- Resolves: rhbz#1917535 - sssd.conf man page: parameter dns_resolver_server_timeout and dns_resolver_op_timeout
- Resolves: rhbz#1940509 - [RFE] Health and Support Analyzer: Link frontend to backend requests
- Resolves: rhbz#1649464 - auto_private_groups not working as expected with posix ipa/ad trust
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1961215 - Invalid sssd-kcm return code if requested operation is not found
- Resolves: rhbz#1837090 - SSSD fails nss_getby_name for IPA user with SID if the user has user private group
- Resolves: rhbz#1879869 - sudo commands incorrectly exports the KRB5CCNAME environment variable
- Resolves: rhbz#1962550 - sss_pac_make_request fails on systems joined to Active Directory.
- Resolves: rhbz#1737489 - [RFE] SSSD should honor default Kerberos settings (keytab name) in /etc/krb5.conf</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-2" date="1624276800">- Resolves: rhbz#1974257 - 'debug_microseconds' config option is broken
- Resolves: rhbz#1936902 - SSSD Error Msg Improvement: Invalid argument
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm (additional patches and rebuild)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-1" date="1626091200">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1693379 - sssd_be and sss_cache too heavy on CPU
- Resolves: rhbz#1909373 - Missing search index for `originalADgidNumber`
- Resolves: rhbz#1954630 - [RFE] Improve debug messages by adding a unique tag for each request the backend is handling
- Resolves: rhbz#1936891 - SSSD Error Msg Improvement: Bad address
- Resolves: rhbz#1364596 - sssd still showing ipa user after removed from last group
- Resolves: rhbz#1979404 - Changes made to /etc/pam.d/sssd-shadowutils are overwritten back to default on sssd-common package upgrade</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2" date="1627905600">- Resolves: rhbz#1975169 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-8]
- Resolves: rhbz#1962042 - [sssd] RHEL 8.5 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.1" date="1634558400">- Resolves: rhbz#2014460 - tps tests fail with cross dependency on sssd debuginfo package: removal of 'sssd-libwbclient-debuginfo' is missing [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.2" date="1638187200">- Resolves: rhbz#2018440 - 2.5.x based SSSD adds more AD domains than it should based on the configuration file (not trusted and from a different forest) [rhel-8.5.0.z]
- Resolves: rhbz#2016923 - autofs lookups for unknown mounts are delayed for 50s [rhel-8.5.0.z]
- Resolves: rhbz#2021499 - Make backtrace less "chatty" (avoid duplicate backtraces) [rhel-8.5.0.z]
- Resolves: rhbz#2013379 - Lookup with fully-qualified name does not work with 'cache_first = True' [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.3" date="1638878400">- Resolves: rhbz#2028828 - pam responder does not call initgroups to refresh the user entry [rhel-8.5.0.z]</changelog>
</package>
<package pkgid="ed58ab2478117b2e8de0f3943c789bedf9ef5467bf5221c1acf2553625a5429e" name="sssd-ad-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="2.el8_5.4"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-8" date="1613131200">- Resolves: rhbz#1926622 - Add support to verify authentication indicators in pam_sss_gss
- Resolves: rhbz#1926454 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0.
- Resolves: rhbz#1893159 - Default debug level should report all errors / failures (additional patch)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.0-1" date="1620648000">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1930535 - [abrt] [faf] sssd: monitor_service_shutdown(): /usr/sbin/sssd killed by 11
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1945888 - Inconsistant debug level for connection logging
- Resolves: rhbz#1948657 - pam_sss_gss.so doesn't work with large kerberos tickets
- Resolves: rhbz#1949149 - [RFE] Poor man's backtrace
- Resolves: rhbz#1920500 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR
- Resolves: rhbz#1923964 - [RFE] SSSD Error Msg Improvement: write_krb5info_file failed, authentication might fail.
- Resolves: rhbz#1928648 - SSSD logs improvements: clarify which config option applies to each timeout in the logs
- Resolves: rhbz#1632159 - sssd-kcm starts successfully for non existent socket_path
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm
- Resolves: rhbz#1925505 - [RFE] improve the sssd refresh timers for SUDO queries
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1925561 - sssd-ldap(5) does not report how to disable the SUDO smart queries
- Resolves: rhbz#1925621 - document impact of indices and of scope on performance of LDAP queries
- Resolves: rhbz#1855320 - [RFE] RHEL8 sssd: inheritance of the case_sensitive parameter for subdomains.
- Resolves: rhbz#1925608 - [RFE] make 'random_offset' addon to 'offline_timeout' option configurable
- Resolves: rhbz#1447945 - man page / docs update required: if two certificate matching rules with the same priority match only one is used
- Resolves: rhbz#1703436 - sssd not thread-safe in innetgr()
- Resolves: rhbz#1713143 - SSSD does not translate the 2FA text labels("first factor" / "second factor") on GDM login and screensaver unlock screen
- Resolves: rhbz#1888977 - sss_override: Usage limitations clarification in man page
- Resolves: rhbz#1890177 - Clarify "single_prompt" option in "PROMPTING CONFIGURATION SECTION" section of sssd.conf man page
- Resolves: rhbz#1902280 - fix sss_cache to also reset cached timestamp
- Resolves: rhbz#1935683 - SSSD not detecting subdomain from AD forest (RHEL 8.3)
- Resolves: rhbz#1937919 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7
- Resolves: rhbz#1944665 - No gpo found and ad_gpo_implicit_deny set to True still permits user login
- Resolves: rhbz#1919942 - sss_override does not take precedence over override_homedir directive</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-1" date="1623153600">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1917444 - SSSD Error Msg Improvement: Server resolution failed: [2]: No such file or directory
- Resolves: rhbz#1917511 - SSSD Error Msg Improvement: Failed to resolve server 'server.example.com': Error reading file
- Resolves: rhbz#1917535 - sssd.conf man page: parameter dns_resolver_server_timeout and dns_resolver_op_timeout
- Resolves: rhbz#1940509 - [RFE] Health and Support Analyzer: Link frontend to backend requests
- Resolves: rhbz#1649464 - auto_private_groups not working as expected with posix ipa/ad trust
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1961215 - Invalid sssd-kcm return code if requested operation is not found
- Resolves: rhbz#1837090 - SSSD fails nss_getby_name for IPA user with SID if the user has user private group
- Resolves: rhbz#1879869 - sudo commands incorrectly exports the KRB5CCNAME environment variable
- Resolves: rhbz#1962550 - sss_pac_make_request fails on systems joined to Active Directory.
- Resolves: rhbz#1737489 - [RFE] SSSD should honor default Kerberos settings (keytab name) in /etc/krb5.conf</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-2" date="1624276800">- Resolves: rhbz#1974257 - 'debug_microseconds' config option is broken
- Resolves: rhbz#1936902 - SSSD Error Msg Improvement: Invalid argument
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm (additional patches and rebuild)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-1" date="1626091200">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1693379 - sssd_be and sss_cache too heavy on CPU
- Resolves: rhbz#1909373 - Missing search index for `originalADgidNumber`
- Resolves: rhbz#1954630 - [RFE] Improve debug messages by adding a unique tag for each request the backend is handling
- Resolves: rhbz#1936891 - SSSD Error Msg Improvement: Bad address
- Resolves: rhbz#1364596 - sssd still showing ipa user after removed from last group
- Resolves: rhbz#1979404 - Changes made to /etc/pam.d/sssd-shadowutils are overwritten back to default on sssd-common package upgrade</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2" date="1627905600">- Resolves: rhbz#1975169 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-8]
- Resolves: rhbz#1962042 - [sssd] RHEL 8.5 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.1" date="1634558400">- Resolves: rhbz#2014460 - tps tests fail with cross dependency on sssd debuginfo package: removal of 'sssd-libwbclient-debuginfo' is missing [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.2" date="1638187200">- Resolves: rhbz#2018440 - 2.5.x based SSSD adds more AD domains than it should based on the configuration file (not trusted and from a different forest) [rhel-8.5.0.z]
- Resolves: rhbz#2016923 - autofs lookups for unknown mounts are delayed for 50s [rhel-8.5.0.z]
- Resolves: rhbz#2021499 - Make backtrace less "chatty" (avoid duplicate backtraces) [rhel-8.5.0.z]
- Resolves: rhbz#2013379 - Lookup with fully-qualified name does not work with 'cache_first = True' [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.3" date="1638878400">- Resolves: rhbz#2028828 - pam responder does not call initgroups to refresh the user entry [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.4" date="1642420800">- Resolves: rhbz#2030651 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries [rhel-8.5.0.z]
- Resolves: rhbz#2035285 - AD Domain in the AD Forest Missing after sssd latest update [rhel-8.5.0.z]</changelog>
</package>
<package pkgid="6c2611553c309390264a7f66d3f1f68481a4129bb55428966fbaedddf23d259b" name="sssd-client-debuginfo" arch="i686">
  <version epoch="0" ver="2.5.2" rel="2.el8_5.1"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-5" date="1609156800">- Resolves: rhbz#1631410 - Can't login with smartcard with multiple certs having same ID value
- Resolves: rhbz#1884213 - [RFE] add offline_timeout_max config option to control offline interval backoff (additional patches)
- Resolves: rhbz#1893159 - Default debug level should report all errors / failures
- Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-6" date="1610971200">- Resolves: rhbz#1113639 - autofs: return a connection failure until maps have been fetched
- Resolves: rhbz#1915395 - Memory leak in the simple access provider
- Resolves: rhbz#1915319 - SSSD: SBUS: failures during servers startup
- Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication (additional patches)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-7" date="1611662400">- Resolves: rhbz#1920001 - Do not add '%' to group names already prefixed with '%' in IPA sudo rules
- Resolves: rhbz#1918433 - sssd unable to lookup certmap rules
- Resolves: rhbz#1917382 - [abrt] [faf] sssd: dp_client_handshake_timeout(): /usr/libexec/sssd/sssd_be killed by 11</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-8" date="1613131200">- Resolves: rhbz#1926622 - Add support to verify authentication indicators in pam_sss_gss
- Resolves: rhbz#1926454 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0.
- Resolves: rhbz#1893159 - Default debug level should report all errors / failures (additional patch)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.0-1" date="1620648000">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1930535 - [abrt] [faf] sssd: monitor_service_shutdown(): /usr/sbin/sssd killed by 11
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1945888 - Inconsistant debug level for connection logging
- Resolves: rhbz#1948657 - pam_sss_gss.so doesn't work with large kerberos tickets
- Resolves: rhbz#1949149 - [RFE] Poor man's backtrace
- Resolves: rhbz#1920500 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR
- Resolves: rhbz#1923964 - [RFE] SSSD Error Msg Improvement: write_krb5info_file failed, authentication might fail.
- Resolves: rhbz#1928648 - SSSD logs improvements: clarify which config option applies to each timeout in the logs
- Resolves: rhbz#1632159 - sssd-kcm starts successfully for non existent socket_path
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm
- Resolves: rhbz#1925505 - [RFE] improve the sssd refresh timers for SUDO queries
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1925561 - sssd-ldap(5) does not report how to disable the SUDO smart queries
- Resolves: rhbz#1925621 - document impact of indices and of scope on performance of LDAP queries
- Resolves: rhbz#1855320 - [RFE] RHEL8 sssd: inheritance of the case_sensitive parameter for subdomains.
- Resolves: rhbz#1925608 - [RFE] make 'random_offset' addon to 'offline_timeout' option configurable
- Resolves: rhbz#1447945 - man page / docs update required: if two certificate matching rules with the same priority match only one is used
- Resolves: rhbz#1703436 - sssd not thread-safe in innetgr()
- Resolves: rhbz#1713143 - SSSD does not translate the 2FA text labels("first factor" / "second factor") on GDM login and screensaver unlock screen
- Resolves: rhbz#1888977 - sss_override: Usage limitations clarification in man page
- Resolves: rhbz#1890177 - Clarify "single_prompt" option in "PROMPTING CONFIGURATION SECTION" section of sssd.conf man page
- Resolves: rhbz#1902280 - fix sss_cache to also reset cached timestamp
- Resolves: rhbz#1935683 - SSSD not detecting subdomain from AD forest (RHEL 8.3)
- Resolves: rhbz#1937919 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7
- Resolves: rhbz#1944665 - No gpo found and ad_gpo_implicit_deny set to True still permits user login
- Resolves: rhbz#1919942 - sss_override does not take precedence over override_homedir directive</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-1" date="1623153600">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1917444 - SSSD Error Msg Improvement: Server resolution failed: [2]: No such file or directory
- Resolves: rhbz#1917511 - SSSD Error Msg Improvement: Failed to resolve server 'server.example.com': Error reading file
- Resolves: rhbz#1917535 - sssd.conf man page: parameter dns_resolver_server_timeout and dns_resolver_op_timeout
- Resolves: rhbz#1940509 - [RFE] Health and Support Analyzer: Link frontend to backend requests
- Resolves: rhbz#1649464 - auto_private_groups not working as expected with posix ipa/ad trust
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1961215 - Invalid sssd-kcm return code if requested operation is not found
- Resolves: rhbz#1837090 - SSSD fails nss_getby_name for IPA user with SID if the user has user private group
- Resolves: rhbz#1879869 - sudo commands incorrectly exports the KRB5CCNAME environment variable
- Resolves: rhbz#1962550 - sss_pac_make_request fails on systems joined to Active Directory.
- Resolves: rhbz#1737489 - [RFE] SSSD should honor default Kerberos settings (keytab name) in /etc/krb5.conf</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-2" date="1624276800">- Resolves: rhbz#1974257 - 'debug_microseconds' config option is broken
- Resolves: rhbz#1936902 - SSSD Error Msg Improvement: Invalid argument
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm (additional patches and rebuild)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-1" date="1626091200">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1693379 - sssd_be and sss_cache too heavy on CPU
- Resolves: rhbz#1909373 - Missing search index for `originalADgidNumber`
- Resolves: rhbz#1954630 - [RFE] Improve debug messages by adding a unique tag for each request the backend is handling
- Resolves: rhbz#1936891 - SSSD Error Msg Improvement: Bad address
- Resolves: rhbz#1364596 - sssd still showing ipa user after removed from last group
- Resolves: rhbz#1979404 - Changes made to /etc/pam.d/sssd-shadowutils are overwritten back to default on sssd-common package upgrade</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2" date="1627905600">- Resolves: rhbz#1975169 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-8]
- Resolves: rhbz#1962042 - [sssd] RHEL 8.5 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.1" date="1634558400">- Resolves: rhbz#2014460 - tps tests fail with cross dependency on sssd debuginfo package: removal of 'sssd-libwbclient-debuginfo' is missing [rhel-8.5.0.z]</changelog>
</package>
<package pkgid="5bee22b4d01f975204825c760bd1d8ffde04c25786e29e27b5dd557e97b653df" name="sssd-client-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="2.el8_5.1"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-5" date="1609156800">- Resolves: rhbz#1631410 - Can't login with smartcard with multiple certs having same ID value
- Resolves: rhbz#1884213 - [RFE] add offline_timeout_max config option to control offline interval backoff (additional patches)
- Resolves: rhbz#1893159 - Default debug level should report all errors / failures
- Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-6" date="1610971200">- Resolves: rhbz#1113639 - autofs: return a connection failure until maps have been fetched
- Resolves: rhbz#1915395 - Memory leak in the simple access provider
- Resolves: rhbz#1915319 - SSSD: SBUS: failures during servers startup
- Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication (additional patches)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-7" date="1611662400">- Resolves: rhbz#1920001 - Do not add '%' to group names already prefixed with '%' in IPA sudo rules
- Resolves: rhbz#1918433 - sssd unable to lookup certmap rules
- Resolves: rhbz#1917382 - [abrt] [faf] sssd: dp_client_handshake_timeout(): /usr/libexec/sssd/sssd_be killed by 11</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-8" date="1613131200">- Resolves: rhbz#1926622 - Add support to verify authentication indicators in pam_sss_gss
- Resolves: rhbz#1926454 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0.
- Resolves: rhbz#1893159 - Default debug level should report all errors / failures (additional patch)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.0-1" date="1620648000">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1930535 - [abrt] [faf] sssd: monitor_service_shutdown(): /usr/sbin/sssd killed by 11
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1945888 - Inconsistant debug level for connection logging
- Resolves: rhbz#1948657 - pam_sss_gss.so doesn't work with large kerberos tickets
- Resolves: rhbz#1949149 - [RFE] Poor man's backtrace
- Resolves: rhbz#1920500 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR
- Resolves: rhbz#1923964 - [RFE] SSSD Error Msg Improvement: write_krb5info_file failed, authentication might fail.
- Resolves: rhbz#1928648 - SSSD logs improvements: clarify which config option applies to each timeout in the logs
- Resolves: rhbz#1632159 - sssd-kcm starts successfully for non existent socket_path
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm
- Resolves: rhbz#1925505 - [RFE] improve the sssd refresh timers for SUDO queries
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1925561 - sssd-ldap(5) does not report how to disable the SUDO smart queries
- Resolves: rhbz#1925621 - document impact of indices and of scope on performance of LDAP queries
- Resolves: rhbz#1855320 - [RFE] RHEL8 sssd: inheritance of the case_sensitive parameter for subdomains.
- Resolves: rhbz#1925608 - [RFE] make 'random_offset' addon to 'offline_timeout' option configurable
- Resolves: rhbz#1447945 - man page / docs update required: if two certificate matching rules with the same priority match only one is used
- Resolves: rhbz#1703436 - sssd not thread-safe in innetgr()
- Resolves: rhbz#1713143 - SSSD does not translate the 2FA text labels("first factor" / "second factor") on GDM login and screensaver unlock screen
- Resolves: rhbz#1888977 - sss_override: Usage limitations clarification in man page
- Resolves: rhbz#1890177 - Clarify "single_prompt" option in "PROMPTING CONFIGURATION SECTION" section of sssd.conf man page
- Resolves: rhbz#1902280 - fix sss_cache to also reset cached timestamp
- Resolves: rhbz#1935683 - SSSD not detecting subdomain from AD forest (RHEL 8.3)
- Resolves: rhbz#1937919 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7
- Resolves: rhbz#1944665 - No gpo found and ad_gpo_implicit_deny set to True still permits user login
- Resolves: rhbz#1919942 - sss_override does not take precedence over override_homedir directive</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-1" date="1623153600">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1917444 - SSSD Error Msg Improvement: Server resolution failed: [2]: No such file or directory
- Resolves: rhbz#1917511 - SSSD Error Msg Improvement: Failed to resolve server 'server.example.com': Error reading file
- Resolves: rhbz#1917535 - sssd.conf man page: parameter dns_resolver_server_timeout and dns_resolver_op_timeout
- Resolves: rhbz#1940509 - [RFE] Health and Support Analyzer: Link frontend to backend requests
- Resolves: rhbz#1649464 - auto_private_groups not working as expected with posix ipa/ad trust
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1961215 - Invalid sssd-kcm return code if requested operation is not found
- Resolves: rhbz#1837090 - SSSD fails nss_getby_name for IPA user with SID if the user has user private group
- Resolves: rhbz#1879869 - sudo commands incorrectly exports the KRB5CCNAME environment variable
- Resolves: rhbz#1962550 - sss_pac_make_request fails on systems joined to Active Directory.
- Resolves: rhbz#1737489 - [RFE] SSSD should honor default Kerberos settings (keytab name) in /etc/krb5.conf</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-2" date="1624276800">- Resolves: rhbz#1974257 - 'debug_microseconds' config option is broken
- Resolves: rhbz#1936902 - SSSD Error Msg Improvement: Invalid argument
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm (additional patches and rebuild)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-1" date="1626091200">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1693379 - sssd_be and sss_cache too heavy on CPU
- Resolves: rhbz#1909373 - Missing search index for `originalADgidNumber`
- Resolves: rhbz#1954630 - [RFE] Improve debug messages by adding a unique tag for each request the backend is handling
- Resolves: rhbz#1936891 - SSSD Error Msg Improvement: Bad address
- Resolves: rhbz#1364596 - sssd still showing ipa user after removed from last group
- Resolves: rhbz#1979404 - Changes made to /etc/pam.d/sssd-shadowutils are overwritten back to default on sssd-common package upgrade</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2" date="1627905600">- Resolves: rhbz#1975169 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-8]
- Resolves: rhbz#1962042 - [sssd] RHEL 8.5 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.1" date="1634558400">- Resolves: rhbz#2014460 - tps tests fail with cross dependency on sssd debuginfo package: removal of 'sssd-libwbclient-debuginfo' is missing [rhel-8.5.0.z]</changelog>
</package>
<package pkgid="8c3c8972d45a0b8bf4c622e361816a9b9014f0121e9b54bc24eb96fe931e31d3" name="sssd-client-debuginfo" arch="i686">
  <version epoch="0" ver="2.5.2" rel="2.el8_5.3"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-7" date="1611662400">- Resolves: rhbz#1920001 - Do not add '%' to group names already prefixed with '%' in IPA sudo rules
- Resolves: rhbz#1918433 - sssd unable to lookup certmap rules
- Resolves: rhbz#1917382 - [abrt] [faf] sssd: dp_client_handshake_timeout(): /usr/libexec/sssd/sssd_be killed by 11</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-8" date="1613131200">- Resolves: rhbz#1926622 - Add support to verify authentication indicators in pam_sss_gss
- Resolves: rhbz#1926454 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0.
- Resolves: rhbz#1893159 - Default debug level should report all errors / failures (additional patch)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.0-1" date="1620648000">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1930535 - [abrt] [faf] sssd: monitor_service_shutdown(): /usr/sbin/sssd killed by 11
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1945888 - Inconsistant debug level for connection logging
- Resolves: rhbz#1948657 - pam_sss_gss.so doesn't work with large kerberos tickets
- Resolves: rhbz#1949149 - [RFE] Poor man's backtrace
- Resolves: rhbz#1920500 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR
- Resolves: rhbz#1923964 - [RFE] SSSD Error Msg Improvement: write_krb5info_file failed, authentication might fail.
- Resolves: rhbz#1928648 - SSSD logs improvements: clarify which config option applies to each timeout in the logs
- Resolves: rhbz#1632159 - sssd-kcm starts successfully for non existent socket_path
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm
- Resolves: rhbz#1925505 - [RFE] improve the sssd refresh timers for SUDO queries
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1925561 - sssd-ldap(5) does not report how to disable the SUDO smart queries
- Resolves: rhbz#1925621 - document impact of indices and of scope on performance of LDAP queries
- Resolves: rhbz#1855320 - [RFE] RHEL8 sssd: inheritance of the case_sensitive parameter for subdomains.
- Resolves: rhbz#1925608 - [RFE] make 'random_offset' addon to 'offline_timeout' option configurable
- Resolves: rhbz#1447945 - man page / docs update required: if two certificate matching rules with the same priority match only one is used
- Resolves: rhbz#1703436 - sssd not thread-safe in innetgr()
- Resolves: rhbz#1713143 - SSSD does not translate the 2FA text labels("first factor" / "second factor") on GDM login and screensaver unlock screen
- Resolves: rhbz#1888977 - sss_override: Usage limitations clarification in man page
- Resolves: rhbz#1890177 - Clarify "single_prompt" option in "PROMPTING CONFIGURATION SECTION" section of sssd.conf man page
- Resolves: rhbz#1902280 - fix sss_cache to also reset cached timestamp
- Resolves: rhbz#1935683 - SSSD not detecting subdomain from AD forest (RHEL 8.3)
- Resolves: rhbz#1937919 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7
- Resolves: rhbz#1944665 - No gpo found and ad_gpo_implicit_deny set to True still permits user login
- Resolves: rhbz#1919942 - sss_override does not take precedence over override_homedir directive</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-1" date="1623153600">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1917444 - SSSD Error Msg Improvement: Server resolution failed: [2]: No such file or directory
- Resolves: rhbz#1917511 - SSSD Error Msg Improvement: Failed to resolve server 'server.example.com': Error reading file
- Resolves: rhbz#1917535 - sssd.conf man page: parameter dns_resolver_server_timeout and dns_resolver_op_timeout
- Resolves: rhbz#1940509 - [RFE] Health and Support Analyzer: Link frontend to backend requests
- Resolves: rhbz#1649464 - auto_private_groups not working as expected with posix ipa/ad trust
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1961215 - Invalid sssd-kcm return code if requested operation is not found
- Resolves: rhbz#1837090 - SSSD fails nss_getby_name for IPA user with SID if the user has user private group
- Resolves: rhbz#1879869 - sudo commands incorrectly exports the KRB5CCNAME environment variable
- Resolves: rhbz#1962550 - sss_pac_make_request fails on systems joined to Active Directory.
- Resolves: rhbz#1737489 - [RFE] SSSD should honor default Kerberos settings (keytab name) in /etc/krb5.conf</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-2" date="1624276800">- Resolves: rhbz#1974257 - 'debug_microseconds' config option is broken
- Resolves: rhbz#1936902 - SSSD Error Msg Improvement: Invalid argument
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm (additional patches and rebuild)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-1" date="1626091200">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1693379 - sssd_be and sss_cache too heavy on CPU
- Resolves: rhbz#1909373 - Missing search index for `originalADgidNumber`
- Resolves: rhbz#1954630 - [RFE] Improve debug messages by adding a unique tag for each request the backend is handling
- Resolves: rhbz#1936891 - SSSD Error Msg Improvement: Bad address
- Resolves: rhbz#1364596 - sssd still showing ipa user after removed from last group
- Resolves: rhbz#1979404 - Changes made to /etc/pam.d/sssd-shadowutils are overwritten back to default on sssd-common package upgrade</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2" date="1627905600">- Resolves: rhbz#1975169 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-8]
- Resolves: rhbz#1962042 - [sssd] RHEL 8.5 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.1" date="1634558400">- Resolves: rhbz#2014460 - tps tests fail with cross dependency on sssd debuginfo package: removal of 'sssd-libwbclient-debuginfo' is missing [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.2" date="1638187200">- Resolves: rhbz#2018440 - 2.5.x based SSSD adds more AD domains than it should based on the configuration file (not trusted and from a different forest) [rhel-8.5.0.z]
- Resolves: rhbz#2016923 - autofs lookups for unknown mounts are delayed for 50s [rhel-8.5.0.z]
- Resolves: rhbz#2021499 - Make backtrace less "chatty" (avoid duplicate backtraces) [rhel-8.5.0.z]
- Resolves: rhbz#2013379 - Lookup with fully-qualified name does not work with 'cache_first = True' [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.3" date="1638878400">- Resolves: rhbz#2028828 - pam responder does not call initgroups to refresh the user entry [rhel-8.5.0.z]</changelog>
</package>
<package pkgid="b81b0b6bfb096790f736e8de52ae8a8f3f254fdfedc3605908eef2547c3da65f" name="sssd-client-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="2.el8_5.3"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-7" date="1611662400">- Resolves: rhbz#1920001 - Do not add '%' to group names already prefixed with '%' in IPA sudo rules
- Resolves: rhbz#1918433 - sssd unable to lookup certmap rules
- Resolves: rhbz#1917382 - [abrt] [faf] sssd: dp_client_handshake_timeout(): /usr/libexec/sssd/sssd_be killed by 11</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-8" date="1613131200">- Resolves: rhbz#1926622 - Add support to verify authentication indicators in pam_sss_gss
- Resolves: rhbz#1926454 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0.
- Resolves: rhbz#1893159 - Default debug level should report all errors / failures (additional patch)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.0-1" date="1620648000">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1930535 - [abrt] [faf] sssd: monitor_service_shutdown(): /usr/sbin/sssd killed by 11
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1945888 - Inconsistant debug level for connection logging
- Resolves: rhbz#1948657 - pam_sss_gss.so doesn't work with large kerberos tickets
- Resolves: rhbz#1949149 - [RFE] Poor man's backtrace
- Resolves: rhbz#1920500 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR
- Resolves: rhbz#1923964 - [RFE] SSSD Error Msg Improvement: write_krb5info_file failed, authentication might fail.
- Resolves: rhbz#1928648 - SSSD logs improvements: clarify which config option applies to each timeout in the logs
- Resolves: rhbz#1632159 - sssd-kcm starts successfully for non existent socket_path
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm
- Resolves: rhbz#1925505 - [RFE] improve the sssd refresh timers for SUDO queries
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1925561 - sssd-ldap(5) does not report how to disable the SUDO smart queries
- Resolves: rhbz#1925621 - document impact of indices and of scope on performance of LDAP queries
- Resolves: rhbz#1855320 - [RFE] RHEL8 sssd: inheritance of the case_sensitive parameter for subdomains.
- Resolves: rhbz#1925608 - [RFE] make 'random_offset' addon to 'offline_timeout' option configurable
- Resolves: rhbz#1447945 - man page / docs update required: if two certificate matching rules with the same priority match only one is used
- Resolves: rhbz#1703436 - sssd not thread-safe in innetgr()
- Resolves: rhbz#1713143 - SSSD does not translate the 2FA text labels("first factor" / "second factor") on GDM login and screensaver unlock screen
- Resolves: rhbz#1888977 - sss_override: Usage limitations clarification in man page
- Resolves: rhbz#1890177 - Clarify "single_prompt" option in "PROMPTING CONFIGURATION SECTION" section of sssd.conf man page
- Resolves: rhbz#1902280 - fix sss_cache to also reset cached timestamp
- Resolves: rhbz#1935683 - SSSD not detecting subdomain from AD forest (RHEL 8.3)
- Resolves: rhbz#1937919 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7
- Resolves: rhbz#1944665 - No gpo found and ad_gpo_implicit_deny set to True still permits user login
- Resolves: rhbz#1919942 - sss_override does not take precedence over override_homedir directive</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-1" date="1623153600">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1917444 - SSSD Error Msg Improvement: Server resolution failed: [2]: No such file or directory
- Resolves: rhbz#1917511 - SSSD Error Msg Improvement: Failed to resolve server 'server.example.com': Error reading file
- Resolves: rhbz#1917535 - sssd.conf man page: parameter dns_resolver_server_timeout and dns_resolver_op_timeout
- Resolves: rhbz#1940509 - [RFE] Health and Support Analyzer: Link frontend to backend requests
- Resolves: rhbz#1649464 - auto_private_groups not working as expected with posix ipa/ad trust
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1961215 - Invalid sssd-kcm return code if requested operation is not found
- Resolves: rhbz#1837090 - SSSD fails nss_getby_name for IPA user with SID if the user has user private group
- Resolves: rhbz#1879869 - sudo commands incorrectly exports the KRB5CCNAME environment variable
- Resolves: rhbz#1962550 - sss_pac_make_request fails on systems joined to Active Directory.
- Resolves: rhbz#1737489 - [RFE] SSSD should honor default Kerberos settings (keytab name) in /etc/krb5.conf</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-2" date="1624276800">- Resolves: rhbz#1974257 - 'debug_microseconds' config option is broken
- Resolves: rhbz#1936902 - SSSD Error Msg Improvement: Invalid argument
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm (additional patches and rebuild)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-1" date="1626091200">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1693379 - sssd_be and sss_cache too heavy on CPU
- Resolves: rhbz#1909373 - Missing search index for `originalADgidNumber`
- Resolves: rhbz#1954630 - [RFE] Improve debug messages by adding a unique tag for each request the backend is handling
- Resolves: rhbz#1936891 - SSSD Error Msg Improvement: Bad address
- Resolves: rhbz#1364596 - sssd still showing ipa user after removed from last group
- Resolves: rhbz#1979404 - Changes made to /etc/pam.d/sssd-shadowutils are overwritten back to default on sssd-common package upgrade</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2" date="1627905600">- Resolves: rhbz#1975169 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-8]
- Resolves: rhbz#1962042 - [sssd] RHEL 8.5 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.1" date="1634558400">- Resolves: rhbz#2014460 - tps tests fail with cross dependency on sssd debuginfo package: removal of 'sssd-libwbclient-debuginfo' is missing [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.2" date="1638187200">- Resolves: rhbz#2018440 - 2.5.x based SSSD adds more AD domains than it should based on the configuration file (not trusted and from a different forest) [rhel-8.5.0.z]
- Resolves: rhbz#2016923 - autofs lookups for unknown mounts are delayed for 50s [rhel-8.5.0.z]
- Resolves: rhbz#2021499 - Make backtrace less "chatty" (avoid duplicate backtraces) [rhel-8.5.0.z]
- Resolves: rhbz#2013379 - Lookup with fully-qualified name does not work with 'cache_first = True' [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.3" date="1638878400">- Resolves: rhbz#2028828 - pam responder does not call initgroups to refresh the user entry [rhel-8.5.0.z]</changelog>
</package>
<package pkgid="90d218208e987638036dd7bd668cc621ac209b987bb6ff5af4862365238fbc68" name="sssd-client-debuginfo" arch="i686">
  <version epoch="0" ver="2.5.2" rel="2.el8_5.4"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-8" date="1613131200">- Resolves: rhbz#1926622 - Add support to verify authentication indicators in pam_sss_gss
- Resolves: rhbz#1926454 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0.
- Resolves: rhbz#1893159 - Default debug level should report all errors / failures (additional patch)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.0-1" date="1620648000">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1930535 - [abrt] [faf] sssd: monitor_service_shutdown(): /usr/sbin/sssd killed by 11
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1945888 - Inconsistant debug level for connection logging
- Resolves: rhbz#1948657 - pam_sss_gss.so doesn't work with large kerberos tickets
- Resolves: rhbz#1949149 - [RFE] Poor man's backtrace
- Resolves: rhbz#1920500 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR
- Resolves: rhbz#1923964 - [RFE] SSSD Error Msg Improvement: write_krb5info_file failed, authentication might fail.
- Resolves: rhbz#1928648 - SSSD logs improvements: clarify which config option applies to each timeout in the logs
- Resolves: rhbz#1632159 - sssd-kcm starts successfully for non existent socket_path
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm
- Resolves: rhbz#1925505 - [RFE] improve the sssd refresh timers for SUDO queries
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1925561 - sssd-ldap(5) does not report how to disable the SUDO smart queries
- Resolves: rhbz#1925621 - document impact of indices and of scope on performance of LDAP queries
- Resolves: rhbz#1855320 - [RFE] RHEL8 sssd: inheritance of the case_sensitive parameter for subdomains.
- Resolves: rhbz#1925608 - [RFE] make 'random_offset' addon to 'offline_timeout' option configurable
- Resolves: rhbz#1447945 - man page / docs update required: if two certificate matching rules with the same priority match only one is used
- Resolves: rhbz#1703436 - sssd not thread-safe in innetgr()
- Resolves: rhbz#1713143 - SSSD does not translate the 2FA text labels("first factor" / "second factor") on GDM login and screensaver unlock screen
- Resolves: rhbz#1888977 - sss_override: Usage limitations clarification in man page
- Resolves: rhbz#1890177 - Clarify "single_prompt" option in "PROMPTING CONFIGURATION SECTION" section of sssd.conf man page
- Resolves: rhbz#1902280 - fix sss_cache to also reset cached timestamp
- Resolves: rhbz#1935683 - SSSD not detecting subdomain from AD forest (RHEL 8.3)
- Resolves: rhbz#1937919 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7
- Resolves: rhbz#1944665 - No gpo found and ad_gpo_implicit_deny set to True still permits user login
- Resolves: rhbz#1919942 - sss_override does not take precedence over override_homedir directive</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-1" date="1623153600">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1917444 - SSSD Error Msg Improvement: Server resolution failed: [2]: No such file or directory
- Resolves: rhbz#1917511 - SSSD Error Msg Improvement: Failed to resolve server 'server.example.com': Error reading file
- Resolves: rhbz#1917535 - sssd.conf man page: parameter dns_resolver_server_timeout and dns_resolver_op_timeout
- Resolves: rhbz#1940509 - [RFE] Health and Support Analyzer: Link frontend to backend requests
- Resolves: rhbz#1649464 - auto_private_groups not working as expected with posix ipa/ad trust
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1961215 - Invalid sssd-kcm return code if requested operation is not found
- Resolves: rhbz#1837090 - SSSD fails nss_getby_name for IPA user with SID if the user has user private group
- Resolves: rhbz#1879869 - sudo commands incorrectly exports the KRB5CCNAME environment variable
- Resolves: rhbz#1962550 - sss_pac_make_request fails on systems joined to Active Directory.
- Resolves: rhbz#1737489 - [RFE] SSSD should honor default Kerberos settings (keytab name) in /etc/krb5.conf</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-2" date="1624276800">- Resolves: rhbz#1974257 - 'debug_microseconds' config option is broken
- Resolves: rhbz#1936902 - SSSD Error Msg Improvement: Invalid argument
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm (additional patches and rebuild)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-1" date="1626091200">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1693379 - sssd_be and sss_cache too heavy on CPU
- Resolves: rhbz#1909373 - Missing search index for `originalADgidNumber`
- Resolves: rhbz#1954630 - [RFE] Improve debug messages by adding a unique tag for each request the backend is handling
- Resolves: rhbz#1936891 - SSSD Error Msg Improvement: Bad address
- Resolves: rhbz#1364596 - sssd still showing ipa user after removed from last group
- Resolves: rhbz#1979404 - Changes made to /etc/pam.d/sssd-shadowutils are overwritten back to default on sssd-common package upgrade</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2" date="1627905600">- Resolves: rhbz#1975169 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-8]
- Resolves: rhbz#1962042 - [sssd] RHEL 8.5 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.1" date="1634558400">- Resolves: rhbz#2014460 - tps tests fail with cross dependency on sssd debuginfo package: removal of 'sssd-libwbclient-debuginfo' is missing [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.2" date="1638187200">- Resolves: rhbz#2018440 - 2.5.x based SSSD adds more AD domains than it should based on the configuration file (not trusted and from a different forest) [rhel-8.5.0.z]
- Resolves: rhbz#2016923 - autofs lookups for unknown mounts are delayed for 50s [rhel-8.5.0.z]
- Resolves: rhbz#2021499 - Make backtrace less "chatty" (avoid duplicate backtraces) [rhel-8.5.0.z]
- Resolves: rhbz#2013379 - Lookup with fully-qualified name does not work with 'cache_first = True' [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.3" date="1638878400">- Resolves: rhbz#2028828 - pam responder does not call initgroups to refresh the user entry [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.4" date="1642420800">- Resolves: rhbz#2030651 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries [rhel-8.5.0.z]
- Resolves: rhbz#2035285 - AD Domain in the AD Forest Missing after sssd latest update [rhel-8.5.0.z]</changelog>
</package>
<package pkgid="5437bf6ae41cab525f044ed7563603dfc56d17ea6c9822998896a0308fd26baa" name="sssd-client-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="2.el8_5.4"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-8" date="1613131200">- Resolves: rhbz#1926622 - Add support to verify authentication indicators in pam_sss_gss
- Resolves: rhbz#1926454 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0.
- Resolves: rhbz#1893159 - Default debug level should report all errors / failures (additional patch)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.0-1" date="1620648000">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1930535 - [abrt] [faf] sssd: monitor_service_shutdown(): /usr/sbin/sssd killed by 11
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1945888 - Inconsistant debug level for connection logging
- Resolves: rhbz#1948657 - pam_sss_gss.so doesn't work with large kerberos tickets
- Resolves: rhbz#1949149 - [RFE] Poor man's backtrace
- Resolves: rhbz#1920500 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR
- Resolves: rhbz#1923964 - [RFE] SSSD Error Msg Improvement: write_krb5info_file failed, authentication might fail.
- Resolves: rhbz#1928648 - SSSD logs improvements: clarify which config option applies to each timeout in the logs
- Resolves: rhbz#1632159 - sssd-kcm starts successfully for non existent socket_path
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm
- Resolves: rhbz#1925505 - [RFE] improve the sssd refresh timers for SUDO queries
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1925561 - sssd-ldap(5) does not report how to disable the SUDO smart queries
- Resolves: rhbz#1925621 - document impact of indices and of scope on performance of LDAP queries
- Resolves: rhbz#1855320 - [RFE] RHEL8 sssd: inheritance of the case_sensitive parameter for subdomains.
- Resolves: rhbz#1925608 - [RFE] make 'random_offset' addon to 'offline_timeout' option configurable
- Resolves: rhbz#1447945 - man page / docs update required: if two certificate matching rules with the same priority match only one is used
- Resolves: rhbz#1703436 - sssd not thread-safe in innetgr()
- Resolves: rhbz#1713143 - SSSD does not translate the 2FA text labels("first factor" / "second factor") on GDM login and screensaver unlock screen
- Resolves: rhbz#1888977 - sss_override: Usage limitations clarification in man page
- Resolves: rhbz#1890177 - Clarify "single_prompt" option in "PROMPTING CONFIGURATION SECTION" section of sssd.conf man page
- Resolves: rhbz#1902280 - fix sss_cache to also reset cached timestamp
- Resolves: rhbz#1935683 - SSSD not detecting subdomain from AD forest (RHEL 8.3)
- Resolves: rhbz#1937919 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7
- Resolves: rhbz#1944665 - No gpo found and ad_gpo_implicit_deny set to True still permits user login
- Resolves: rhbz#1919942 - sss_override does not take precedence over override_homedir directive</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-1" date="1623153600">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1917444 - SSSD Error Msg Improvement: Server resolution failed: [2]: No such file or directory
- Resolves: rhbz#1917511 - SSSD Error Msg Improvement: Failed to resolve server 'server.example.com': Error reading file
- Resolves: rhbz#1917535 - sssd.conf man page: parameter dns_resolver_server_timeout and dns_resolver_op_timeout
- Resolves: rhbz#1940509 - [RFE] Health and Support Analyzer: Link frontend to backend requests
- Resolves: rhbz#1649464 - auto_private_groups not working as expected with posix ipa/ad trust
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1961215 - Invalid sssd-kcm return code if requested operation is not found
- Resolves: rhbz#1837090 - SSSD fails nss_getby_name for IPA user with SID if the user has user private group
- Resolves: rhbz#1879869 - sudo commands incorrectly exports the KRB5CCNAME environment variable
- Resolves: rhbz#1962550 - sss_pac_make_request fails on systems joined to Active Directory.
- Resolves: rhbz#1737489 - [RFE] SSSD should honor default Kerberos settings (keytab name) in /etc/krb5.conf</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-2" date="1624276800">- Resolves: rhbz#1974257 - 'debug_microseconds' config option is broken
- Resolves: rhbz#1936902 - SSSD Error Msg Improvement: Invalid argument
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm (additional patches and rebuild)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-1" date="1626091200">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1693379 - sssd_be and sss_cache too heavy on CPU
- Resolves: rhbz#1909373 - Missing search index for `originalADgidNumber`
- Resolves: rhbz#1954630 - [RFE] Improve debug messages by adding a unique tag for each request the backend is handling
- Resolves: rhbz#1936891 - SSSD Error Msg Improvement: Bad address
- Resolves: rhbz#1364596 - sssd still showing ipa user after removed from last group
- Resolves: rhbz#1979404 - Changes made to /etc/pam.d/sssd-shadowutils are overwritten back to default on sssd-common package upgrade</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2" date="1627905600">- Resolves: rhbz#1975169 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-8]
- Resolves: rhbz#1962042 - [sssd] RHEL 8.5 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.1" date="1634558400">- Resolves: rhbz#2014460 - tps tests fail with cross dependency on sssd debuginfo package: removal of 'sssd-libwbclient-debuginfo' is missing [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.2" date="1638187200">- Resolves: rhbz#2018440 - 2.5.x based SSSD adds more AD domains than it should based on the configuration file (not trusted and from a different forest) [rhel-8.5.0.z]
- Resolves: rhbz#2016923 - autofs lookups for unknown mounts are delayed for 50s [rhel-8.5.0.z]
- Resolves: rhbz#2021499 - Make backtrace less "chatty" (avoid duplicate backtraces) [rhel-8.5.0.z]
- Resolves: rhbz#2013379 - Lookup with fully-qualified name does not work with 'cache_first = True' [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.3" date="1638878400">- Resolves: rhbz#2028828 - pam responder does not call initgroups to refresh the user entry [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.4" date="1642420800">- Resolves: rhbz#2030651 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries [rhel-8.5.0.z]
- Resolves: rhbz#2035285 - AD Domain in the AD Forest Missing after sssd latest update [rhel-8.5.0.z]</changelog>
</package>
<package pkgid="15400835b69931ab7fdfe8e8c1e2268e951a49b71b2543d2bce2efad4bcc1577" name="sssd-common-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="2.el8_5.1"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-5" date="1609156800">- Resolves: rhbz#1631410 - Can't login with smartcard with multiple certs having same ID value
- Resolves: rhbz#1884213 - [RFE] add offline_timeout_max config option to control offline interval backoff (additional patches)
- Resolves: rhbz#1893159 - Default debug level should report all errors / failures
- Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-6" date="1610971200">- Resolves: rhbz#1113639 - autofs: return a connection failure until maps have been fetched
- Resolves: rhbz#1915395 - Memory leak in the simple access provider
- Resolves: rhbz#1915319 - SSSD: SBUS: failures during servers startup
- Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication (additional patches)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-7" date="1611662400">- Resolves: rhbz#1920001 - Do not add '%' to group names already prefixed with '%' in IPA sudo rules
- Resolves: rhbz#1918433 - sssd unable to lookup certmap rules
- Resolves: rhbz#1917382 - [abrt] [faf] sssd: dp_client_handshake_timeout(): /usr/libexec/sssd/sssd_be killed by 11</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-8" date="1613131200">- Resolves: rhbz#1926622 - Add support to verify authentication indicators in pam_sss_gss
- Resolves: rhbz#1926454 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0.
- Resolves: rhbz#1893159 - Default debug level should report all errors / failures (additional patch)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.0-1" date="1620648000">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1930535 - [abrt] [faf] sssd: monitor_service_shutdown(): /usr/sbin/sssd killed by 11
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1945888 - Inconsistant debug level for connection logging
- Resolves: rhbz#1948657 - pam_sss_gss.so doesn't work with large kerberos tickets
- Resolves: rhbz#1949149 - [RFE] Poor man's backtrace
- Resolves: rhbz#1920500 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR
- Resolves: rhbz#1923964 - [RFE] SSSD Error Msg Improvement: write_krb5info_file failed, authentication might fail.
- Resolves: rhbz#1928648 - SSSD logs improvements: clarify which config option applies to each timeout in the logs
- Resolves: rhbz#1632159 - sssd-kcm starts successfully for non existent socket_path
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm
- Resolves: rhbz#1925505 - [RFE] improve the sssd refresh timers for SUDO queries
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1925561 - sssd-ldap(5) does not report how to disable the SUDO smart queries
- Resolves: rhbz#1925621 - document impact of indices and of scope on performance of LDAP queries
- Resolves: rhbz#1855320 - [RFE] RHEL8 sssd: inheritance of the case_sensitive parameter for subdomains.
- Resolves: rhbz#1925608 - [RFE] make 'random_offset' addon to 'offline_timeout' option configurable
- Resolves: rhbz#1447945 - man page / docs update required: if two certificate matching rules with the same priority match only one is used
- Resolves: rhbz#1703436 - sssd not thread-safe in innetgr()
- Resolves: rhbz#1713143 - SSSD does not translate the 2FA text labels("first factor" / "second factor") on GDM login and screensaver unlock screen
- Resolves: rhbz#1888977 - sss_override: Usage limitations clarification in man page
- Resolves: rhbz#1890177 - Clarify "single_prompt" option in "PROMPTING CONFIGURATION SECTION" section of sssd.conf man page
- Resolves: rhbz#1902280 - fix sss_cache to also reset cached timestamp
- Resolves: rhbz#1935683 - SSSD not detecting subdomain from AD forest (RHEL 8.3)
- Resolves: rhbz#1937919 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7
- Resolves: rhbz#1944665 - No gpo found and ad_gpo_implicit_deny set to True still permits user login
- Resolves: rhbz#1919942 - sss_override does not take precedence over override_homedir directive</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-1" date="1623153600">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1917444 - SSSD Error Msg Improvement: Server resolution failed: [2]: No such file or directory
- Resolves: rhbz#1917511 - SSSD Error Msg Improvement: Failed to resolve server 'server.example.com': Error reading file
- Resolves: rhbz#1917535 - sssd.conf man page: parameter dns_resolver_server_timeout and dns_resolver_op_timeout
- Resolves: rhbz#1940509 - [RFE] Health and Support Analyzer: Link frontend to backend requests
- Resolves: rhbz#1649464 - auto_private_groups not working as expected with posix ipa/ad trust
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1961215 - Invalid sssd-kcm return code if requested operation is not found
- Resolves: rhbz#1837090 - SSSD fails nss_getby_name for IPA user with SID if the user has user private group
- Resolves: rhbz#1879869 - sudo commands incorrectly exports the KRB5CCNAME environment variable
- Resolves: rhbz#1962550 - sss_pac_make_request fails on systems joined to Active Directory.
- Resolves: rhbz#1737489 - [RFE] SSSD should honor default Kerberos settings (keytab name) in /etc/krb5.conf</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-2" date="1624276800">- Resolves: rhbz#1974257 - 'debug_microseconds' config option is broken
- Resolves: rhbz#1936902 - SSSD Error Msg Improvement: Invalid argument
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm (additional patches and rebuild)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-1" date="1626091200">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1693379 - sssd_be and sss_cache too heavy on CPU
- Resolves: rhbz#1909373 - Missing search index for `originalADgidNumber`
- Resolves: rhbz#1954630 - [RFE] Improve debug messages by adding a unique tag for each request the backend is handling
- Resolves: rhbz#1936891 - SSSD Error Msg Improvement: Bad address
- Resolves: rhbz#1364596 - sssd still showing ipa user after removed from last group
- Resolves: rhbz#1979404 - Changes made to /etc/pam.d/sssd-shadowutils are overwritten back to default on sssd-common package upgrade</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2" date="1627905600">- Resolves: rhbz#1975169 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-8]
- Resolves: rhbz#1962042 - [sssd] RHEL 8.5 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.1" date="1634558400">- Resolves: rhbz#2014460 - tps tests fail with cross dependency on sssd debuginfo package: removal of 'sssd-libwbclient-debuginfo' is missing [rhel-8.5.0.z]</changelog>
</package>
<package pkgid="92c103804c602793b0e3d4471c9b4be4b3576c757d7d325c95f2c7b506f2950c" name="sssd-common-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="2.el8_5.3"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-7" date="1611662400">- Resolves: rhbz#1920001 - Do not add '%' to group names already prefixed with '%' in IPA sudo rules
- Resolves: rhbz#1918433 - sssd unable to lookup certmap rules
- Resolves: rhbz#1917382 - [abrt] [faf] sssd: dp_client_handshake_timeout(): /usr/libexec/sssd/sssd_be killed by 11</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-8" date="1613131200">- Resolves: rhbz#1926622 - Add support to verify authentication indicators in pam_sss_gss
- Resolves: rhbz#1926454 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0.
- Resolves: rhbz#1893159 - Default debug level should report all errors / failures (additional patch)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.0-1" date="1620648000">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1930535 - [abrt] [faf] sssd: monitor_service_shutdown(): /usr/sbin/sssd killed by 11
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1945888 - Inconsistant debug level for connection logging
- Resolves: rhbz#1948657 - pam_sss_gss.so doesn't work with large kerberos tickets
- Resolves: rhbz#1949149 - [RFE] Poor man's backtrace
- Resolves: rhbz#1920500 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR
- Resolves: rhbz#1923964 - [RFE] SSSD Error Msg Improvement: write_krb5info_file failed, authentication might fail.
- Resolves: rhbz#1928648 - SSSD logs improvements: clarify which config option applies to each timeout in the logs
- Resolves: rhbz#1632159 - sssd-kcm starts successfully for non existent socket_path
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm
- Resolves: rhbz#1925505 - [RFE] improve the sssd refresh timers for SUDO queries
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1925561 - sssd-ldap(5) does not report how to disable the SUDO smart queries
- Resolves: rhbz#1925621 - document impact of indices and of scope on performance of LDAP queries
- Resolves: rhbz#1855320 - [RFE] RHEL8 sssd: inheritance of the case_sensitive parameter for subdomains.
- Resolves: rhbz#1925608 - [RFE] make 'random_offset' addon to 'offline_timeout' option configurable
- Resolves: rhbz#1447945 - man page / docs update required: if two certificate matching rules with the same priority match only one is used
- Resolves: rhbz#1703436 - sssd not thread-safe in innetgr()
- Resolves: rhbz#1713143 - SSSD does not translate the 2FA text labels("first factor" / "second factor") on GDM login and screensaver unlock screen
- Resolves: rhbz#1888977 - sss_override: Usage limitations clarification in man page
- Resolves: rhbz#1890177 - Clarify "single_prompt" option in "PROMPTING CONFIGURATION SECTION" section of sssd.conf man page
- Resolves: rhbz#1902280 - fix sss_cache to also reset cached timestamp
- Resolves: rhbz#1935683 - SSSD not detecting subdomain from AD forest (RHEL 8.3)
- Resolves: rhbz#1937919 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7
- Resolves: rhbz#1944665 - No gpo found and ad_gpo_implicit_deny set to True still permits user login
- Resolves: rhbz#1919942 - sss_override does not take precedence over override_homedir directive</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-1" date="1623153600">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1917444 - SSSD Error Msg Improvement: Server resolution failed: [2]: No such file or directory
- Resolves: rhbz#1917511 - SSSD Error Msg Improvement: Failed to resolve server 'server.example.com': Error reading file
- Resolves: rhbz#1917535 - sssd.conf man page: parameter dns_resolver_server_timeout and dns_resolver_op_timeout
- Resolves: rhbz#1940509 - [RFE] Health and Support Analyzer: Link frontend to backend requests
- Resolves: rhbz#1649464 - auto_private_groups not working as expected with posix ipa/ad trust
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1961215 - Invalid sssd-kcm return code if requested operation is not found
- Resolves: rhbz#1837090 - SSSD fails nss_getby_name for IPA user with SID if the user has user private group
- Resolves: rhbz#1879869 - sudo commands incorrectly exports the KRB5CCNAME environment variable
- Resolves: rhbz#1962550 - sss_pac_make_request fails on systems joined to Active Directory.
- Resolves: rhbz#1737489 - [RFE] SSSD should honor default Kerberos settings (keytab name) in /etc/krb5.conf</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-2" date="1624276800">- Resolves: rhbz#1974257 - 'debug_microseconds' config option is broken
- Resolves: rhbz#1936902 - SSSD Error Msg Improvement: Invalid argument
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm (additional patches and rebuild)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-1" date="1626091200">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1693379 - sssd_be and sss_cache too heavy on CPU
- Resolves: rhbz#1909373 - Missing search index for `originalADgidNumber`
- Resolves: rhbz#1954630 - [RFE] Improve debug messages by adding a unique tag for each request the backend is handling
- Resolves: rhbz#1936891 - SSSD Error Msg Improvement: Bad address
- Resolves: rhbz#1364596 - sssd still showing ipa user after removed from last group
- Resolves: rhbz#1979404 - Changes made to /etc/pam.d/sssd-shadowutils are overwritten back to default on sssd-common package upgrade</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2" date="1627905600">- Resolves: rhbz#1975169 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-8]
- Resolves: rhbz#1962042 - [sssd] RHEL 8.5 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.1" date="1634558400">- Resolves: rhbz#2014460 - tps tests fail with cross dependency on sssd debuginfo package: removal of 'sssd-libwbclient-debuginfo' is missing [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.2" date="1638187200">- Resolves: rhbz#2018440 - 2.5.x based SSSD adds more AD domains than it should based on the configuration file (not trusted and from a different forest) [rhel-8.5.0.z]
- Resolves: rhbz#2016923 - autofs lookups for unknown mounts are delayed for 50s [rhel-8.5.0.z]
- Resolves: rhbz#2021499 - Make backtrace less "chatty" (avoid duplicate backtraces) [rhel-8.5.0.z]
- Resolves: rhbz#2013379 - Lookup with fully-qualified name does not work with 'cache_first = True' [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.3" date="1638878400">- Resolves: rhbz#2028828 - pam responder does not call initgroups to refresh the user entry [rhel-8.5.0.z]</changelog>
</package>
<package pkgid="a77613ee6cfdcc20f3042d6f42950840fa29e1d21cb75dfc5444eca76c475621" name="sssd-common-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="2.el8_5.4"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-8" date="1613131200">- Resolves: rhbz#1926622 - Add support to verify authentication indicators in pam_sss_gss
- Resolves: rhbz#1926454 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0.
- Resolves: rhbz#1893159 - Default debug level should report all errors / failures (additional patch)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.0-1" date="1620648000">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1930535 - [abrt] [faf] sssd: monitor_service_shutdown(): /usr/sbin/sssd killed by 11
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1945888 - Inconsistant debug level for connection logging
- Resolves: rhbz#1948657 - pam_sss_gss.so doesn't work with large kerberos tickets
- Resolves: rhbz#1949149 - [RFE] Poor man's backtrace
- Resolves: rhbz#1920500 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR
- Resolves: rhbz#1923964 - [RFE] SSSD Error Msg Improvement: write_krb5info_file failed, authentication might fail.
- Resolves: rhbz#1928648 - SSSD logs improvements: clarify which config option applies to each timeout in the logs
- Resolves: rhbz#1632159 - sssd-kcm starts successfully for non existent socket_path
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm
- Resolves: rhbz#1925505 - [RFE] improve the sssd refresh timers for SUDO queries
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1925561 - sssd-ldap(5) does not report how to disable the SUDO smart queries
- Resolves: rhbz#1925621 - document impact of indices and of scope on performance of LDAP queries
- Resolves: rhbz#1855320 - [RFE] RHEL8 sssd: inheritance of the case_sensitive parameter for subdomains.
- Resolves: rhbz#1925608 - [RFE] make 'random_offset' addon to 'offline_timeout' option configurable
- Resolves: rhbz#1447945 - man page / docs update required: if two certificate matching rules with the same priority match only one is used
- Resolves: rhbz#1703436 - sssd not thread-safe in innetgr()
- Resolves: rhbz#1713143 - SSSD does not translate the 2FA text labels("first factor" / "second factor") on GDM login and screensaver unlock screen
- Resolves: rhbz#1888977 - sss_override: Usage limitations clarification in man page
- Resolves: rhbz#1890177 - Clarify "single_prompt" option in "PROMPTING CONFIGURATION SECTION" section of sssd.conf man page
- Resolves: rhbz#1902280 - fix sss_cache to also reset cached timestamp
- Resolves: rhbz#1935683 - SSSD not detecting subdomain from AD forest (RHEL 8.3)
- Resolves: rhbz#1937919 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7
- Resolves: rhbz#1944665 - No gpo found and ad_gpo_implicit_deny set to True still permits user login
- Resolves: rhbz#1919942 - sss_override does not take precedence over override_homedir directive</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-1" date="1623153600">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1917444 - SSSD Error Msg Improvement: Server resolution failed: [2]: No such file or directory
- Resolves: rhbz#1917511 - SSSD Error Msg Improvement: Failed to resolve server 'server.example.com': Error reading file
- Resolves: rhbz#1917535 - sssd.conf man page: parameter dns_resolver_server_timeout and dns_resolver_op_timeout
- Resolves: rhbz#1940509 - [RFE] Health and Support Analyzer: Link frontend to backend requests
- Resolves: rhbz#1649464 - auto_private_groups not working as expected with posix ipa/ad trust
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1961215 - Invalid sssd-kcm return code if requested operation is not found
- Resolves: rhbz#1837090 - SSSD fails nss_getby_name for IPA user with SID if the user has user private group
- Resolves: rhbz#1879869 - sudo commands incorrectly exports the KRB5CCNAME environment variable
- Resolves: rhbz#1962550 - sss_pac_make_request fails on systems joined to Active Directory.
- Resolves: rhbz#1737489 - [RFE] SSSD should honor default Kerberos settings (keytab name) in /etc/krb5.conf</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-2" date="1624276800">- Resolves: rhbz#1974257 - 'debug_microseconds' config option is broken
- Resolves: rhbz#1936902 - SSSD Error Msg Improvement: Invalid argument
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm (additional patches and rebuild)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-1" date="1626091200">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1693379 - sssd_be and sss_cache too heavy on CPU
- Resolves: rhbz#1909373 - Missing search index for `originalADgidNumber`
- Resolves: rhbz#1954630 - [RFE] Improve debug messages by adding a unique tag for each request the backend is handling
- Resolves: rhbz#1936891 - SSSD Error Msg Improvement: Bad address
- Resolves: rhbz#1364596 - sssd still showing ipa user after removed from last group
- Resolves: rhbz#1979404 - Changes made to /etc/pam.d/sssd-shadowutils are overwritten back to default on sssd-common package upgrade</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2" date="1627905600">- Resolves: rhbz#1975169 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-8]
- Resolves: rhbz#1962042 - [sssd] RHEL 8.5 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.1" date="1634558400">- Resolves: rhbz#2014460 - tps tests fail with cross dependency on sssd debuginfo package: removal of 'sssd-libwbclient-debuginfo' is missing [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.2" date="1638187200">- Resolves: rhbz#2018440 - 2.5.x based SSSD adds more AD domains than it should based on the configuration file (not trusted and from a different forest) [rhel-8.5.0.z]
- Resolves: rhbz#2016923 - autofs lookups for unknown mounts are delayed for 50s [rhel-8.5.0.z]
- Resolves: rhbz#2021499 - Make backtrace less "chatty" (avoid duplicate backtraces) [rhel-8.5.0.z]
- Resolves: rhbz#2013379 - Lookup with fully-qualified name does not work with 'cache_first = True' [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.3" date="1638878400">- Resolves: rhbz#2028828 - pam responder does not call initgroups to refresh the user entry [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.4" date="1642420800">- Resolves: rhbz#2030651 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries [rhel-8.5.0.z]
- Resolves: rhbz#2035285 - AD Domain in the AD Forest Missing after sssd latest update [rhel-8.5.0.z]</changelog>
</package>
<package pkgid="9d5c7701a0336931f3708a3d366dc152984232d44ae4a936cc9f7c430a3dc504" name="sssd-common-pac-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="2.el8_5.1"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-5" date="1609156800">- Resolves: rhbz#1631410 - Can't login with smartcard with multiple certs having same ID value
- Resolves: rhbz#1884213 - [RFE] add offline_timeout_max config option to control offline interval backoff (additional patches)
- Resolves: rhbz#1893159 - Default debug level should report all errors / failures
- Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-6" date="1610971200">- Resolves: rhbz#1113639 - autofs: return a connection failure until maps have been fetched
- Resolves: rhbz#1915395 - Memory leak in the simple access provider
- Resolves: rhbz#1915319 - SSSD: SBUS: failures during servers startup
- Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication (additional patches)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-7" date="1611662400">- Resolves: rhbz#1920001 - Do not add '%' to group names already prefixed with '%' in IPA sudo rules
- Resolves: rhbz#1918433 - sssd unable to lookup certmap rules
- Resolves: rhbz#1917382 - [abrt] [faf] sssd: dp_client_handshake_timeout(): /usr/libexec/sssd/sssd_be killed by 11</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-8" date="1613131200">- Resolves: rhbz#1926622 - Add support to verify authentication indicators in pam_sss_gss
- Resolves: rhbz#1926454 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0.
- Resolves: rhbz#1893159 - Default debug level should report all errors / failures (additional patch)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.0-1" date="1620648000">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1930535 - [abrt] [faf] sssd: monitor_service_shutdown(): /usr/sbin/sssd killed by 11
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1945888 - Inconsistant debug level for connection logging
- Resolves: rhbz#1948657 - pam_sss_gss.so doesn't work with large kerberos tickets
- Resolves: rhbz#1949149 - [RFE] Poor man's backtrace
- Resolves: rhbz#1920500 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR
- Resolves: rhbz#1923964 - [RFE] SSSD Error Msg Improvement: write_krb5info_file failed, authentication might fail.
- Resolves: rhbz#1928648 - SSSD logs improvements: clarify which config option applies to each timeout in the logs
- Resolves: rhbz#1632159 - sssd-kcm starts successfully for non existent socket_path
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm
- Resolves: rhbz#1925505 - [RFE] improve the sssd refresh timers for SUDO queries
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1925561 - sssd-ldap(5) does not report how to disable the SUDO smart queries
- Resolves: rhbz#1925621 - document impact of indices and of scope on performance of LDAP queries
- Resolves: rhbz#1855320 - [RFE] RHEL8 sssd: inheritance of the case_sensitive parameter for subdomains.
- Resolves: rhbz#1925608 - [RFE] make 'random_offset' addon to 'offline_timeout' option configurable
- Resolves: rhbz#1447945 - man page / docs update required: if two certificate matching rules with the same priority match only one is used
- Resolves: rhbz#1703436 - sssd not thread-safe in innetgr()
- Resolves: rhbz#1713143 - SSSD does not translate the 2FA text labels("first factor" / "second factor") on GDM login and screensaver unlock screen
- Resolves: rhbz#1888977 - sss_override: Usage limitations clarification in man page
- Resolves: rhbz#1890177 - Clarify "single_prompt" option in "PROMPTING CONFIGURATION SECTION" section of sssd.conf man page
- Resolves: rhbz#1902280 - fix sss_cache to also reset cached timestamp
- Resolves: rhbz#1935683 - SSSD not detecting subdomain from AD forest (RHEL 8.3)
- Resolves: rhbz#1937919 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7
- Resolves: rhbz#1944665 - No gpo found and ad_gpo_implicit_deny set to True still permits user login
- Resolves: rhbz#1919942 - sss_override does not take precedence over override_homedir directive</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-1" date="1623153600">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1917444 - SSSD Error Msg Improvement: Server resolution failed: [2]: No such file or directory
- Resolves: rhbz#1917511 - SSSD Error Msg Improvement: Failed to resolve server 'server.example.com': Error reading file
- Resolves: rhbz#1917535 - sssd.conf man page: parameter dns_resolver_server_timeout and dns_resolver_op_timeout
- Resolves: rhbz#1940509 - [RFE] Health and Support Analyzer: Link frontend to backend requests
- Resolves: rhbz#1649464 - auto_private_groups not working as expected with posix ipa/ad trust
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1961215 - Invalid sssd-kcm return code if requested operation is not found
- Resolves: rhbz#1837090 - SSSD fails nss_getby_name for IPA user with SID if the user has user private group
- Resolves: rhbz#1879869 - sudo commands incorrectly exports the KRB5CCNAME environment variable
- Resolves: rhbz#1962550 - sss_pac_make_request fails on systems joined to Active Directory.
- Resolves: rhbz#1737489 - [RFE] SSSD should honor default Kerberos settings (keytab name) in /etc/krb5.conf</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-2" date="1624276800">- Resolves: rhbz#1974257 - 'debug_microseconds' config option is broken
- Resolves: rhbz#1936902 - SSSD Error Msg Improvement: Invalid argument
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm (additional patches and rebuild)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-1" date="1626091200">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1693379 - sssd_be and sss_cache too heavy on CPU
- Resolves: rhbz#1909373 - Missing search index for `originalADgidNumber`
- Resolves: rhbz#1954630 - [RFE] Improve debug messages by adding a unique tag for each request the backend is handling
- Resolves: rhbz#1936891 - SSSD Error Msg Improvement: Bad address
- Resolves: rhbz#1364596 - sssd still showing ipa user after removed from last group
- Resolves: rhbz#1979404 - Changes made to /etc/pam.d/sssd-shadowutils are overwritten back to default on sssd-common package upgrade</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2" date="1627905600">- Resolves: rhbz#1975169 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-8]
- Resolves: rhbz#1962042 - [sssd] RHEL 8.5 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.1" date="1634558400">- Resolves: rhbz#2014460 - tps tests fail with cross dependency on sssd debuginfo package: removal of 'sssd-libwbclient-debuginfo' is missing [rhel-8.5.0.z]</changelog>
</package>
<package pkgid="ba84d6259ca880c63226d95ae31028a597c7ebb50b1ab8e33024778c8f831879" name="sssd-common-pac-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="2.el8_5.3"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-7" date="1611662400">- Resolves: rhbz#1920001 - Do not add '%' to group names already prefixed with '%' in IPA sudo rules
- Resolves: rhbz#1918433 - sssd unable to lookup certmap rules
- Resolves: rhbz#1917382 - [abrt] [faf] sssd: dp_client_handshake_timeout(): /usr/libexec/sssd/sssd_be killed by 11</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-8" date="1613131200">- Resolves: rhbz#1926622 - Add support to verify authentication indicators in pam_sss_gss
- Resolves: rhbz#1926454 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0.
- Resolves: rhbz#1893159 - Default debug level should report all errors / failures (additional patch)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.0-1" date="1620648000">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1930535 - [abrt] [faf] sssd: monitor_service_shutdown(): /usr/sbin/sssd killed by 11
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1945888 - Inconsistant debug level for connection logging
- Resolves: rhbz#1948657 - pam_sss_gss.so doesn't work with large kerberos tickets
- Resolves: rhbz#1949149 - [RFE] Poor man's backtrace
- Resolves: rhbz#1920500 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR
- Resolves: rhbz#1923964 - [RFE] SSSD Error Msg Improvement: write_krb5info_file failed, authentication might fail.
- Resolves: rhbz#1928648 - SSSD logs improvements: clarify which config option applies to each timeout in the logs
- Resolves: rhbz#1632159 - sssd-kcm starts successfully for non existent socket_path
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm
- Resolves: rhbz#1925505 - [RFE] improve the sssd refresh timers for SUDO queries
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1925561 - sssd-ldap(5) does not report how to disable the SUDO smart queries
- Resolves: rhbz#1925621 - document impact of indices and of scope on performance of LDAP queries
- Resolves: rhbz#1855320 - [RFE] RHEL8 sssd: inheritance of the case_sensitive parameter for subdomains.
- Resolves: rhbz#1925608 - [RFE] make 'random_offset' addon to 'offline_timeout' option configurable
- Resolves: rhbz#1447945 - man page / docs update required: if two certificate matching rules with the same priority match only one is used
- Resolves: rhbz#1703436 - sssd not thread-safe in innetgr()
- Resolves: rhbz#1713143 - SSSD does not translate the 2FA text labels("first factor" / "second factor") on GDM login and screensaver unlock screen
- Resolves: rhbz#1888977 - sss_override: Usage limitations clarification in man page
- Resolves: rhbz#1890177 - Clarify "single_prompt" option in "PROMPTING CONFIGURATION SECTION" section of sssd.conf man page
- Resolves: rhbz#1902280 - fix sss_cache to also reset cached timestamp
- Resolves: rhbz#1935683 - SSSD not detecting subdomain from AD forest (RHEL 8.3)
- Resolves: rhbz#1937919 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7
- Resolves: rhbz#1944665 - No gpo found and ad_gpo_implicit_deny set to True still permits user login
- Resolves: rhbz#1919942 - sss_override does not take precedence over override_homedir directive</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-1" date="1623153600">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1917444 - SSSD Error Msg Improvement: Server resolution failed: [2]: No such file or directory
- Resolves: rhbz#1917511 - SSSD Error Msg Improvement: Failed to resolve server 'server.example.com': Error reading file
- Resolves: rhbz#1917535 - sssd.conf man page: parameter dns_resolver_server_timeout and dns_resolver_op_timeout
- Resolves: rhbz#1940509 - [RFE] Health and Support Analyzer: Link frontend to backend requests
- Resolves: rhbz#1649464 - auto_private_groups not working as expected with posix ipa/ad trust
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1961215 - Invalid sssd-kcm return code if requested operation is not found
- Resolves: rhbz#1837090 - SSSD fails nss_getby_name for IPA user with SID if the user has user private group
- Resolves: rhbz#1879869 - sudo commands incorrectly exports the KRB5CCNAME environment variable
- Resolves: rhbz#1962550 - sss_pac_make_request fails on systems joined to Active Directory.
- Resolves: rhbz#1737489 - [RFE] SSSD should honor default Kerberos settings (keytab name) in /etc/krb5.conf</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-2" date="1624276800">- Resolves: rhbz#1974257 - 'debug_microseconds' config option is broken
- Resolves: rhbz#1936902 - SSSD Error Msg Improvement: Invalid argument
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm (additional patches and rebuild)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-1" date="1626091200">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1693379 - sssd_be and sss_cache too heavy on CPU
- Resolves: rhbz#1909373 - Missing search index for `originalADgidNumber`
- Resolves: rhbz#1954630 - [RFE] Improve debug messages by adding a unique tag for each request the backend is handling
- Resolves: rhbz#1936891 - SSSD Error Msg Improvement: Bad address
- Resolves: rhbz#1364596 - sssd still showing ipa user after removed from last group
- Resolves: rhbz#1979404 - Changes made to /etc/pam.d/sssd-shadowutils are overwritten back to default on sssd-common package upgrade</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2" date="1627905600">- Resolves: rhbz#1975169 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-8]
- Resolves: rhbz#1962042 - [sssd] RHEL 8.5 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.1" date="1634558400">- Resolves: rhbz#2014460 - tps tests fail with cross dependency on sssd debuginfo package: removal of 'sssd-libwbclient-debuginfo' is missing [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.2" date="1638187200">- Resolves: rhbz#2018440 - 2.5.x based SSSD adds more AD domains than it should based on the configuration file (not trusted and from a different forest) [rhel-8.5.0.z]
- Resolves: rhbz#2016923 - autofs lookups for unknown mounts are delayed for 50s [rhel-8.5.0.z]
- Resolves: rhbz#2021499 - Make backtrace less "chatty" (avoid duplicate backtraces) [rhel-8.5.0.z]
- Resolves: rhbz#2013379 - Lookup with fully-qualified name does not work with 'cache_first = True' [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.3" date="1638878400">- Resolves: rhbz#2028828 - pam responder does not call initgroups to refresh the user entry [rhel-8.5.0.z]</changelog>
</package>
<package pkgid="e875a399b6c200fb584ff4953011c45c0634abac420f99802c20baf069d7f69c" name="sssd-common-pac-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="2.el8_5.4"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-8" date="1613131200">- Resolves: rhbz#1926622 - Add support to verify authentication indicators in pam_sss_gss
- Resolves: rhbz#1926454 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0.
- Resolves: rhbz#1893159 - Default debug level should report all errors / failures (additional patch)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.0-1" date="1620648000">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1930535 - [abrt] [faf] sssd: monitor_service_shutdown(): /usr/sbin/sssd killed by 11
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1945888 - Inconsistant debug level for connection logging
- Resolves: rhbz#1948657 - pam_sss_gss.so doesn't work with large kerberos tickets
- Resolves: rhbz#1949149 - [RFE] Poor man's backtrace
- Resolves: rhbz#1920500 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR
- Resolves: rhbz#1923964 - [RFE] SSSD Error Msg Improvement: write_krb5info_file failed, authentication might fail.
- Resolves: rhbz#1928648 - SSSD logs improvements: clarify which config option applies to each timeout in the logs
- Resolves: rhbz#1632159 - sssd-kcm starts successfully for non existent socket_path
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm
- Resolves: rhbz#1925505 - [RFE] improve the sssd refresh timers for SUDO queries
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1925561 - sssd-ldap(5) does not report how to disable the SUDO smart queries
- Resolves: rhbz#1925621 - document impact of indices and of scope on performance of LDAP queries
- Resolves: rhbz#1855320 - [RFE] RHEL8 sssd: inheritance of the case_sensitive parameter for subdomains.
- Resolves: rhbz#1925608 - [RFE] make 'random_offset' addon to 'offline_timeout' option configurable
- Resolves: rhbz#1447945 - man page / docs update required: if two certificate matching rules with the same priority match only one is used
- Resolves: rhbz#1703436 - sssd not thread-safe in innetgr()
- Resolves: rhbz#1713143 - SSSD does not translate the 2FA text labels("first factor" / "second factor") on GDM login and screensaver unlock screen
- Resolves: rhbz#1888977 - sss_override: Usage limitations clarification in man page
- Resolves: rhbz#1890177 - Clarify "single_prompt" option in "PROMPTING CONFIGURATION SECTION" section of sssd.conf man page
- Resolves: rhbz#1902280 - fix sss_cache to also reset cached timestamp
- Resolves: rhbz#1935683 - SSSD not detecting subdomain from AD forest (RHEL 8.3)
- Resolves: rhbz#1937919 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7
- Resolves: rhbz#1944665 - No gpo found and ad_gpo_implicit_deny set to True still permits user login
- Resolves: rhbz#1919942 - sss_override does not take precedence over override_homedir directive</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-1" date="1623153600">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1917444 - SSSD Error Msg Improvement: Server resolution failed: [2]: No such file or directory
- Resolves: rhbz#1917511 - SSSD Error Msg Improvement: Failed to resolve server 'server.example.com': Error reading file
- Resolves: rhbz#1917535 - sssd.conf man page: parameter dns_resolver_server_timeout and dns_resolver_op_timeout
- Resolves: rhbz#1940509 - [RFE] Health and Support Analyzer: Link frontend to backend requests
- Resolves: rhbz#1649464 - auto_private_groups not working as expected with posix ipa/ad trust
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1961215 - Invalid sssd-kcm return code if requested operation is not found
- Resolves: rhbz#1837090 - SSSD fails nss_getby_name for IPA user with SID if the user has user private group
- Resolves: rhbz#1879869 - sudo commands incorrectly exports the KRB5CCNAME environment variable
- Resolves: rhbz#1962550 - sss_pac_make_request fails on systems joined to Active Directory.
- Resolves: rhbz#1737489 - [RFE] SSSD should honor default Kerberos settings (keytab name) in /etc/krb5.conf</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-2" date="1624276800">- Resolves: rhbz#1974257 - 'debug_microseconds' config option is broken
- Resolves: rhbz#1936902 - SSSD Error Msg Improvement: Invalid argument
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm (additional patches and rebuild)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-1" date="1626091200">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1693379 - sssd_be and sss_cache too heavy on CPU
- Resolves: rhbz#1909373 - Missing search index for `originalADgidNumber`
- Resolves: rhbz#1954630 - [RFE] Improve debug messages by adding a unique tag for each request the backend is handling
- Resolves: rhbz#1936891 - SSSD Error Msg Improvement: Bad address
- Resolves: rhbz#1364596 - sssd still showing ipa user after removed from last group
- Resolves: rhbz#1979404 - Changes made to /etc/pam.d/sssd-shadowutils are overwritten back to default on sssd-common package upgrade</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2" date="1627905600">- Resolves: rhbz#1975169 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-8]
- Resolves: rhbz#1962042 - [sssd] RHEL 8.5 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.1" date="1634558400">- Resolves: rhbz#2014460 - tps tests fail with cross dependency on sssd debuginfo package: removal of 'sssd-libwbclient-debuginfo' is missing [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.2" date="1638187200">- Resolves: rhbz#2018440 - 2.5.x based SSSD adds more AD domains than it should based on the configuration file (not trusted and from a different forest) [rhel-8.5.0.z]
- Resolves: rhbz#2016923 - autofs lookups for unknown mounts are delayed for 50s [rhel-8.5.0.z]
- Resolves: rhbz#2021499 - Make backtrace less "chatty" (avoid duplicate backtraces) [rhel-8.5.0.z]
- Resolves: rhbz#2013379 - Lookup with fully-qualified name does not work with 'cache_first = True' [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.3" date="1638878400">- Resolves: rhbz#2028828 - pam responder does not call initgroups to refresh the user entry [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.4" date="1642420800">- Resolves: rhbz#2030651 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries [rhel-8.5.0.z]
- Resolves: rhbz#2035285 - AD Domain in the AD Forest Missing after sssd latest update [rhel-8.5.0.z]</changelog>
</package>
<package pkgid="af2d99d9046e2a89d0cb596ad899afcbf1a843fc6d3ac4fad28a452e21b6d303" name="sssd-dbus-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="2.el8_5.1"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-5" date="1609156800">- Resolves: rhbz#1631410 - Can't login with smartcard with multiple certs having same ID value
- Resolves: rhbz#1884213 - [RFE] add offline_timeout_max config option to control offline interval backoff (additional patches)
- Resolves: rhbz#1893159 - Default debug level should report all errors / failures
- Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-6" date="1610971200">- Resolves: rhbz#1113639 - autofs: return a connection failure until maps have been fetched
- Resolves: rhbz#1915395 - Memory leak in the simple access provider
- Resolves: rhbz#1915319 - SSSD: SBUS: failures during servers startup
- Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication (additional patches)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-7" date="1611662400">- Resolves: rhbz#1920001 - Do not add '%' to group names already prefixed with '%' in IPA sudo rules
- Resolves: rhbz#1918433 - sssd unable to lookup certmap rules
- Resolves: rhbz#1917382 - [abrt] [faf] sssd: dp_client_handshake_timeout(): /usr/libexec/sssd/sssd_be killed by 11</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-8" date="1613131200">- Resolves: rhbz#1926622 - Add support to verify authentication indicators in pam_sss_gss
- Resolves: rhbz#1926454 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0.
- Resolves: rhbz#1893159 - Default debug level should report all errors / failures (additional patch)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.0-1" date="1620648000">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1930535 - [abrt] [faf] sssd: monitor_service_shutdown(): /usr/sbin/sssd killed by 11
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1945888 - Inconsistant debug level for connection logging
- Resolves: rhbz#1948657 - pam_sss_gss.so doesn't work with large kerberos tickets
- Resolves: rhbz#1949149 - [RFE] Poor man's backtrace
- Resolves: rhbz#1920500 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR
- Resolves: rhbz#1923964 - [RFE] SSSD Error Msg Improvement: write_krb5info_file failed, authentication might fail.
- Resolves: rhbz#1928648 - SSSD logs improvements: clarify which config option applies to each timeout in the logs
- Resolves: rhbz#1632159 - sssd-kcm starts successfully for non existent socket_path
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm
- Resolves: rhbz#1925505 - [RFE] improve the sssd refresh timers for SUDO queries
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1925561 - sssd-ldap(5) does not report how to disable the SUDO smart queries
- Resolves: rhbz#1925621 - document impact of indices and of scope on performance of LDAP queries
- Resolves: rhbz#1855320 - [RFE] RHEL8 sssd: inheritance of the case_sensitive parameter for subdomains.
- Resolves: rhbz#1925608 - [RFE] make 'random_offset' addon to 'offline_timeout' option configurable
- Resolves: rhbz#1447945 - man page / docs update required: if two certificate matching rules with the same priority match only one is used
- Resolves: rhbz#1703436 - sssd not thread-safe in innetgr()
- Resolves: rhbz#1713143 - SSSD does not translate the 2FA text labels("first factor" / "second factor") on GDM login and screensaver unlock screen
- Resolves: rhbz#1888977 - sss_override: Usage limitations clarification in man page
- Resolves: rhbz#1890177 - Clarify "single_prompt" option in "PROMPTING CONFIGURATION SECTION" section of sssd.conf man page
- Resolves: rhbz#1902280 - fix sss_cache to also reset cached timestamp
- Resolves: rhbz#1935683 - SSSD not detecting subdomain from AD forest (RHEL 8.3)
- Resolves: rhbz#1937919 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7
- Resolves: rhbz#1944665 - No gpo found and ad_gpo_implicit_deny set to True still permits user login
- Resolves: rhbz#1919942 - sss_override does not take precedence over override_homedir directive</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-1" date="1623153600">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1917444 - SSSD Error Msg Improvement: Server resolution failed: [2]: No such file or directory
- Resolves: rhbz#1917511 - SSSD Error Msg Improvement: Failed to resolve server 'server.example.com': Error reading file
- Resolves: rhbz#1917535 - sssd.conf man page: parameter dns_resolver_server_timeout and dns_resolver_op_timeout
- Resolves: rhbz#1940509 - [RFE] Health and Support Analyzer: Link frontend to backend requests
- Resolves: rhbz#1649464 - auto_private_groups not working as expected with posix ipa/ad trust
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1961215 - Invalid sssd-kcm return code if requested operation is not found
- Resolves: rhbz#1837090 - SSSD fails nss_getby_name for IPA user with SID if the user has user private group
- Resolves: rhbz#1879869 - sudo commands incorrectly exports the KRB5CCNAME environment variable
- Resolves: rhbz#1962550 - sss_pac_make_request fails on systems joined to Active Directory.
- Resolves: rhbz#1737489 - [RFE] SSSD should honor default Kerberos settings (keytab name) in /etc/krb5.conf</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-2" date="1624276800">- Resolves: rhbz#1974257 - 'debug_microseconds' config option is broken
- Resolves: rhbz#1936902 - SSSD Error Msg Improvement: Invalid argument
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm (additional patches and rebuild)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-1" date="1626091200">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1693379 - sssd_be and sss_cache too heavy on CPU
- Resolves: rhbz#1909373 - Missing search index for `originalADgidNumber`
- Resolves: rhbz#1954630 - [RFE] Improve debug messages by adding a unique tag for each request the backend is handling
- Resolves: rhbz#1936891 - SSSD Error Msg Improvement: Bad address
- Resolves: rhbz#1364596 - sssd still showing ipa user after removed from last group
- Resolves: rhbz#1979404 - Changes made to /etc/pam.d/sssd-shadowutils are overwritten back to default on sssd-common package upgrade</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2" date="1627905600">- Resolves: rhbz#1975169 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-8]
- Resolves: rhbz#1962042 - [sssd] RHEL 8.5 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.1" date="1634558400">- Resolves: rhbz#2014460 - tps tests fail with cross dependency on sssd debuginfo package: removal of 'sssd-libwbclient-debuginfo' is missing [rhel-8.5.0.z]</changelog>
</package>
<package pkgid="1e101eec28285eda573f4411e0ea50318d87ce9e07c54b4d395568e333831fb6" name="sssd-dbus-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="2.el8_5.3"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-7" date="1611662400">- Resolves: rhbz#1920001 - Do not add '%' to group names already prefixed with '%' in IPA sudo rules
- Resolves: rhbz#1918433 - sssd unable to lookup certmap rules
- Resolves: rhbz#1917382 - [abrt] [faf] sssd: dp_client_handshake_timeout(): /usr/libexec/sssd/sssd_be killed by 11</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-8" date="1613131200">- Resolves: rhbz#1926622 - Add support to verify authentication indicators in pam_sss_gss
- Resolves: rhbz#1926454 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0.
- Resolves: rhbz#1893159 - Default debug level should report all errors / failures (additional patch)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.0-1" date="1620648000">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1930535 - [abrt] [faf] sssd: monitor_service_shutdown(): /usr/sbin/sssd killed by 11
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1945888 - Inconsistant debug level for connection logging
- Resolves: rhbz#1948657 - pam_sss_gss.so doesn't work with large kerberos tickets
- Resolves: rhbz#1949149 - [RFE] Poor man's backtrace
- Resolves: rhbz#1920500 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR
- Resolves: rhbz#1923964 - [RFE] SSSD Error Msg Improvement: write_krb5info_file failed, authentication might fail.
- Resolves: rhbz#1928648 - SSSD logs improvements: clarify which config option applies to each timeout in the logs
- Resolves: rhbz#1632159 - sssd-kcm starts successfully for non existent socket_path
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm
- Resolves: rhbz#1925505 - [RFE] improve the sssd refresh timers for SUDO queries
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1925561 - sssd-ldap(5) does not report how to disable the SUDO smart queries
- Resolves: rhbz#1925621 - document impact of indices and of scope on performance of LDAP queries
- Resolves: rhbz#1855320 - [RFE] RHEL8 sssd: inheritance of the case_sensitive parameter for subdomains.
- Resolves: rhbz#1925608 - [RFE] make 'random_offset' addon to 'offline_timeout' option configurable
- Resolves: rhbz#1447945 - man page / docs update required: if two certificate matching rules with the same priority match only one is used
- Resolves: rhbz#1703436 - sssd not thread-safe in innetgr()
- Resolves: rhbz#1713143 - SSSD does not translate the 2FA text labels("first factor" / "second factor") on GDM login and screensaver unlock screen
- Resolves: rhbz#1888977 - sss_override: Usage limitations clarification in man page
- Resolves: rhbz#1890177 - Clarify "single_prompt" option in "PROMPTING CONFIGURATION SECTION" section of sssd.conf man page
- Resolves: rhbz#1902280 - fix sss_cache to also reset cached timestamp
- Resolves: rhbz#1935683 - SSSD not detecting subdomain from AD forest (RHEL 8.3)
- Resolves: rhbz#1937919 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7
- Resolves: rhbz#1944665 - No gpo found and ad_gpo_implicit_deny set to True still permits user login
- Resolves: rhbz#1919942 - sss_override does not take precedence over override_homedir directive</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-1" date="1623153600">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1917444 - SSSD Error Msg Improvement: Server resolution failed: [2]: No such file or directory
- Resolves: rhbz#1917511 - SSSD Error Msg Improvement: Failed to resolve server 'server.example.com': Error reading file
- Resolves: rhbz#1917535 - sssd.conf man page: parameter dns_resolver_server_timeout and dns_resolver_op_timeout
- Resolves: rhbz#1940509 - [RFE] Health and Support Analyzer: Link frontend to backend requests
- Resolves: rhbz#1649464 - auto_private_groups not working as expected with posix ipa/ad trust
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1961215 - Invalid sssd-kcm return code if requested operation is not found
- Resolves: rhbz#1837090 - SSSD fails nss_getby_name for IPA user with SID if the user has user private group
- Resolves: rhbz#1879869 - sudo commands incorrectly exports the KRB5CCNAME environment variable
- Resolves: rhbz#1962550 - sss_pac_make_request fails on systems joined to Active Directory.
- Resolves: rhbz#1737489 - [RFE] SSSD should honor default Kerberos settings (keytab name) in /etc/krb5.conf</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-2" date="1624276800">- Resolves: rhbz#1974257 - 'debug_microseconds' config option is broken
- Resolves: rhbz#1936902 - SSSD Error Msg Improvement: Invalid argument
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm (additional patches and rebuild)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-1" date="1626091200">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1693379 - sssd_be and sss_cache too heavy on CPU
- Resolves: rhbz#1909373 - Missing search index for `originalADgidNumber`
- Resolves: rhbz#1954630 - [RFE] Improve debug messages by adding a unique tag for each request the backend is handling
- Resolves: rhbz#1936891 - SSSD Error Msg Improvement: Bad address
- Resolves: rhbz#1364596 - sssd still showing ipa user after removed from last group
- Resolves: rhbz#1979404 - Changes made to /etc/pam.d/sssd-shadowutils are overwritten back to default on sssd-common package upgrade</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2" date="1627905600">- Resolves: rhbz#1975169 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-8]
- Resolves: rhbz#1962042 - [sssd] RHEL 8.5 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.1" date="1634558400">- Resolves: rhbz#2014460 - tps tests fail with cross dependency on sssd debuginfo package: removal of 'sssd-libwbclient-debuginfo' is missing [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.2" date="1638187200">- Resolves: rhbz#2018440 - 2.5.x based SSSD adds more AD domains than it should based on the configuration file (not trusted and from a different forest) [rhel-8.5.0.z]
- Resolves: rhbz#2016923 - autofs lookups for unknown mounts are delayed for 50s [rhel-8.5.0.z]
- Resolves: rhbz#2021499 - Make backtrace less "chatty" (avoid duplicate backtraces) [rhel-8.5.0.z]
- Resolves: rhbz#2013379 - Lookup with fully-qualified name does not work with 'cache_first = True' [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.3" date="1638878400">- Resolves: rhbz#2028828 - pam responder does not call initgroups to refresh the user entry [rhel-8.5.0.z]</changelog>
</package>
<package pkgid="1ad59b11eb0260b54dadf91f30e243a8e6d7b5b42534c354243718c66d7a72ee" name="sssd-dbus-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="2.el8_5.4"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-8" date="1613131200">- Resolves: rhbz#1926622 - Add support to verify authentication indicators in pam_sss_gss
- Resolves: rhbz#1926454 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0.
- Resolves: rhbz#1893159 - Default debug level should report all errors / failures (additional patch)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.0-1" date="1620648000">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1930535 - [abrt] [faf] sssd: monitor_service_shutdown(): /usr/sbin/sssd killed by 11
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1945888 - Inconsistant debug level for connection logging
- Resolves: rhbz#1948657 - pam_sss_gss.so doesn't work with large kerberos tickets
- Resolves: rhbz#1949149 - [RFE] Poor man's backtrace
- Resolves: rhbz#1920500 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR
- Resolves: rhbz#1923964 - [RFE] SSSD Error Msg Improvement: write_krb5info_file failed, authentication might fail.
- Resolves: rhbz#1928648 - SSSD logs improvements: clarify which config option applies to each timeout in the logs
- Resolves: rhbz#1632159 - sssd-kcm starts successfully for non existent socket_path
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm
- Resolves: rhbz#1925505 - [RFE] improve the sssd refresh timers for SUDO queries
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1925561 - sssd-ldap(5) does not report how to disable the SUDO smart queries
- Resolves: rhbz#1925621 - document impact of indices and of scope on performance of LDAP queries
- Resolves: rhbz#1855320 - [RFE] RHEL8 sssd: inheritance of the case_sensitive parameter for subdomains.
- Resolves: rhbz#1925608 - [RFE] make 'random_offset' addon to 'offline_timeout' option configurable
- Resolves: rhbz#1447945 - man page / docs update required: if two certificate matching rules with the same priority match only one is used
- Resolves: rhbz#1703436 - sssd not thread-safe in innetgr()
- Resolves: rhbz#1713143 - SSSD does not translate the 2FA text labels("first factor" / "second factor") on GDM login and screensaver unlock screen
- Resolves: rhbz#1888977 - sss_override: Usage limitations clarification in man page
- Resolves: rhbz#1890177 - Clarify "single_prompt" option in "PROMPTING CONFIGURATION SECTION" section of sssd.conf man page
- Resolves: rhbz#1902280 - fix sss_cache to also reset cached timestamp
- Resolves: rhbz#1935683 - SSSD not detecting subdomain from AD forest (RHEL 8.3)
- Resolves: rhbz#1937919 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7
- Resolves: rhbz#1944665 - No gpo found and ad_gpo_implicit_deny set to True still permits user login
- Resolves: rhbz#1919942 - sss_override does not take precedence over override_homedir directive</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-1" date="1623153600">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1917444 - SSSD Error Msg Improvement: Server resolution failed: [2]: No such file or directory
- Resolves: rhbz#1917511 - SSSD Error Msg Improvement: Failed to resolve server 'server.example.com': Error reading file
- Resolves: rhbz#1917535 - sssd.conf man page: parameter dns_resolver_server_timeout and dns_resolver_op_timeout
- Resolves: rhbz#1940509 - [RFE] Health and Support Analyzer: Link frontend to backend requests
- Resolves: rhbz#1649464 - auto_private_groups not working as expected with posix ipa/ad trust
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1961215 - Invalid sssd-kcm return code if requested operation is not found
- Resolves: rhbz#1837090 - SSSD fails nss_getby_name for IPA user with SID if the user has user private group
- Resolves: rhbz#1879869 - sudo commands incorrectly exports the KRB5CCNAME environment variable
- Resolves: rhbz#1962550 - sss_pac_make_request fails on systems joined to Active Directory.
- Resolves: rhbz#1737489 - [RFE] SSSD should honor default Kerberos settings (keytab name) in /etc/krb5.conf</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-2" date="1624276800">- Resolves: rhbz#1974257 - 'debug_microseconds' config option is broken
- Resolves: rhbz#1936902 - SSSD Error Msg Improvement: Invalid argument
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm (additional patches and rebuild)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-1" date="1626091200">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1693379 - sssd_be and sss_cache too heavy on CPU
- Resolves: rhbz#1909373 - Missing search index for `originalADgidNumber`
- Resolves: rhbz#1954630 - [RFE] Improve debug messages by adding a unique tag for each request the backend is handling
- Resolves: rhbz#1936891 - SSSD Error Msg Improvement: Bad address
- Resolves: rhbz#1364596 - sssd still showing ipa user after removed from last group
- Resolves: rhbz#1979404 - Changes made to /etc/pam.d/sssd-shadowutils are overwritten back to default on sssd-common package upgrade</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2" date="1627905600">- Resolves: rhbz#1975169 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-8]
- Resolves: rhbz#1962042 - [sssd] RHEL 8.5 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.1" date="1634558400">- Resolves: rhbz#2014460 - tps tests fail with cross dependency on sssd debuginfo package: removal of 'sssd-libwbclient-debuginfo' is missing [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.2" date="1638187200">- Resolves: rhbz#2018440 - 2.5.x based SSSD adds more AD domains than it should based on the configuration file (not trusted and from a different forest) [rhel-8.5.0.z]
- Resolves: rhbz#2016923 - autofs lookups for unknown mounts are delayed for 50s [rhel-8.5.0.z]
- Resolves: rhbz#2021499 - Make backtrace less "chatty" (avoid duplicate backtraces) [rhel-8.5.0.z]
- Resolves: rhbz#2013379 - Lookup with fully-qualified name does not work with 'cache_first = True' [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.3" date="1638878400">- Resolves: rhbz#2028828 - pam responder does not call initgroups to refresh the user entry [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.4" date="1642420800">- Resolves: rhbz#2030651 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries [rhel-8.5.0.z]
- Resolves: rhbz#2035285 - AD Domain in the AD Forest Missing after sssd latest update [rhel-8.5.0.z]</changelog>
</package>
<package pkgid="f9ce46ca05dc7288fc65c3c3e6a399a07b8cb8b30a8792a7bd4e17ec7a710439" name="sssd-debuginfo" arch="i686">
  <version epoch="0" ver="2.5.2" rel="2.el8_5.1"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-5" date="1609156800">- Resolves: rhbz#1631410 - Can't login with smartcard with multiple certs having same ID value
- Resolves: rhbz#1884213 - [RFE] add offline_timeout_max config option to control offline interval backoff (additional patches)
- Resolves: rhbz#1893159 - Default debug level should report all errors / failures
- Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-6" date="1610971200">- Resolves: rhbz#1113639 - autofs: return a connection failure until maps have been fetched
- Resolves: rhbz#1915395 - Memory leak in the simple access provider
- Resolves: rhbz#1915319 - SSSD: SBUS: failures during servers startup
- Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication (additional patches)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-7" date="1611662400">- Resolves: rhbz#1920001 - Do not add '%' to group names already prefixed with '%' in IPA sudo rules
- Resolves: rhbz#1918433 - sssd unable to lookup certmap rules
- Resolves: rhbz#1917382 - [abrt] [faf] sssd: dp_client_handshake_timeout(): /usr/libexec/sssd/sssd_be killed by 11</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-8" date="1613131200">- Resolves: rhbz#1926622 - Add support to verify authentication indicators in pam_sss_gss
- Resolves: rhbz#1926454 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0.
- Resolves: rhbz#1893159 - Default debug level should report all errors / failures (additional patch)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.0-1" date="1620648000">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1930535 - [abrt] [faf] sssd: monitor_service_shutdown(): /usr/sbin/sssd killed by 11
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1945888 - Inconsistant debug level for connection logging
- Resolves: rhbz#1948657 - pam_sss_gss.so doesn't work with large kerberos tickets
- Resolves: rhbz#1949149 - [RFE] Poor man's backtrace
- Resolves: rhbz#1920500 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR
- Resolves: rhbz#1923964 - [RFE] SSSD Error Msg Improvement: write_krb5info_file failed, authentication might fail.
- Resolves: rhbz#1928648 - SSSD logs improvements: clarify which config option applies to each timeout in the logs
- Resolves: rhbz#1632159 - sssd-kcm starts successfully for non existent socket_path
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm
- Resolves: rhbz#1925505 - [RFE] improve the sssd refresh timers for SUDO queries
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1925561 - sssd-ldap(5) does not report how to disable the SUDO smart queries
- Resolves: rhbz#1925621 - document impact of indices and of scope on performance of LDAP queries
- Resolves: rhbz#1855320 - [RFE] RHEL8 sssd: inheritance of the case_sensitive parameter for subdomains.
- Resolves: rhbz#1925608 - [RFE] make 'random_offset' addon to 'offline_timeout' option configurable
- Resolves: rhbz#1447945 - man page / docs update required: if two certificate matching rules with the same priority match only one is used
- Resolves: rhbz#1703436 - sssd not thread-safe in innetgr()
- Resolves: rhbz#1713143 - SSSD does not translate the 2FA text labels("first factor" / "second factor") on GDM login and screensaver unlock screen
- Resolves: rhbz#1888977 - sss_override: Usage limitations clarification in man page
- Resolves: rhbz#1890177 - Clarify "single_prompt" option in "PROMPTING CONFIGURATION SECTION" section of sssd.conf man page
- Resolves: rhbz#1902280 - fix sss_cache to also reset cached timestamp
- Resolves: rhbz#1935683 - SSSD not detecting subdomain from AD forest (RHEL 8.3)
- Resolves: rhbz#1937919 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7
- Resolves: rhbz#1944665 - No gpo found and ad_gpo_implicit_deny set to True still permits user login
- Resolves: rhbz#1919942 - sss_override does not take precedence over override_homedir directive</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-1" date="1623153600">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1917444 - SSSD Error Msg Improvement: Server resolution failed: [2]: No such file or directory
- Resolves: rhbz#1917511 - SSSD Error Msg Improvement: Failed to resolve server 'server.example.com': Error reading file
- Resolves: rhbz#1917535 - sssd.conf man page: parameter dns_resolver_server_timeout and dns_resolver_op_timeout
- Resolves: rhbz#1940509 - [RFE] Health and Support Analyzer: Link frontend to backend requests
- Resolves: rhbz#1649464 - auto_private_groups not working as expected with posix ipa/ad trust
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1961215 - Invalid sssd-kcm return code if requested operation is not found
- Resolves: rhbz#1837090 - SSSD fails nss_getby_name for IPA user with SID if the user has user private group
- Resolves: rhbz#1879869 - sudo commands incorrectly exports the KRB5CCNAME environment variable
- Resolves: rhbz#1962550 - sss_pac_make_request fails on systems joined to Active Directory.
- Resolves: rhbz#1737489 - [RFE] SSSD should honor default Kerberos settings (keytab name) in /etc/krb5.conf</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-2" date="1624276800">- Resolves: rhbz#1974257 - 'debug_microseconds' config option is broken
- Resolves: rhbz#1936902 - SSSD Error Msg Improvement: Invalid argument
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm (additional patches and rebuild)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-1" date="1626091200">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1693379 - sssd_be and sss_cache too heavy on CPU
- Resolves: rhbz#1909373 - Missing search index for `originalADgidNumber`
- Resolves: rhbz#1954630 - [RFE] Improve debug messages by adding a unique tag for each request the backend is handling
- Resolves: rhbz#1936891 - SSSD Error Msg Improvement: Bad address
- Resolves: rhbz#1364596 - sssd still showing ipa user after removed from last group
- Resolves: rhbz#1979404 - Changes made to /etc/pam.d/sssd-shadowutils are overwritten back to default on sssd-common package upgrade</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2" date="1627905600">- Resolves: rhbz#1975169 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-8]
- Resolves: rhbz#1962042 - [sssd] RHEL 8.5 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.1" date="1634558400">- Resolves: rhbz#2014460 - tps tests fail with cross dependency on sssd debuginfo package: removal of 'sssd-libwbclient-debuginfo' is missing [rhel-8.5.0.z]</changelog>
</package>
<package pkgid="65913d922cbf64d52dad7a137fd8ed4f08d47c3523c44055a7bd4acb03c317e7" name="sssd-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="2.el8_5.1"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-5" date="1609156800">- Resolves: rhbz#1631410 - Can't login with smartcard with multiple certs having same ID value
- Resolves: rhbz#1884213 - [RFE] add offline_timeout_max config option to control offline interval backoff (additional patches)
- Resolves: rhbz#1893159 - Default debug level should report all errors / failures
- Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-6" date="1610971200">- Resolves: rhbz#1113639 - autofs: return a connection failure until maps have been fetched
- Resolves: rhbz#1915395 - Memory leak in the simple access provider
- Resolves: rhbz#1915319 - SSSD: SBUS: failures during servers startup
- Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication (additional patches)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-7" date="1611662400">- Resolves: rhbz#1920001 - Do not add '%' to group names already prefixed with '%' in IPA sudo rules
- Resolves: rhbz#1918433 - sssd unable to lookup certmap rules
- Resolves: rhbz#1917382 - [abrt] [faf] sssd: dp_client_handshake_timeout(): /usr/libexec/sssd/sssd_be killed by 11</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-8" date="1613131200">- Resolves: rhbz#1926622 - Add support to verify authentication indicators in pam_sss_gss
- Resolves: rhbz#1926454 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0.
- Resolves: rhbz#1893159 - Default debug level should report all errors / failures (additional patch)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.0-1" date="1620648000">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1930535 - [abrt] [faf] sssd: monitor_service_shutdown(): /usr/sbin/sssd killed by 11
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1945888 - Inconsistant debug level for connection logging
- Resolves: rhbz#1948657 - pam_sss_gss.so doesn't work with large kerberos tickets
- Resolves: rhbz#1949149 - [RFE] Poor man's backtrace
- Resolves: rhbz#1920500 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR
- Resolves: rhbz#1923964 - [RFE] SSSD Error Msg Improvement: write_krb5info_file failed, authentication might fail.
- Resolves: rhbz#1928648 - SSSD logs improvements: clarify which config option applies to each timeout in the logs
- Resolves: rhbz#1632159 - sssd-kcm starts successfully for non existent socket_path
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm
- Resolves: rhbz#1925505 - [RFE] improve the sssd refresh timers for SUDO queries
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1925561 - sssd-ldap(5) does not report how to disable the SUDO smart queries
- Resolves: rhbz#1925621 - document impact of indices and of scope on performance of LDAP queries
- Resolves: rhbz#1855320 - [RFE] RHEL8 sssd: inheritance of the case_sensitive parameter for subdomains.
- Resolves: rhbz#1925608 - [RFE] make 'random_offset' addon to 'offline_timeout' option configurable
- Resolves: rhbz#1447945 - man page / docs update required: if two certificate matching rules with the same priority match only one is used
- Resolves: rhbz#1703436 - sssd not thread-safe in innetgr()
- Resolves: rhbz#1713143 - SSSD does not translate the 2FA text labels("first factor" / "second factor") on GDM login and screensaver unlock screen
- Resolves: rhbz#1888977 - sss_override: Usage limitations clarification in man page
- Resolves: rhbz#1890177 - Clarify "single_prompt" option in "PROMPTING CONFIGURATION SECTION" section of sssd.conf man page
- Resolves: rhbz#1902280 - fix sss_cache to also reset cached timestamp
- Resolves: rhbz#1935683 - SSSD not detecting subdomain from AD forest (RHEL 8.3)
- Resolves: rhbz#1937919 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7
- Resolves: rhbz#1944665 - No gpo found and ad_gpo_implicit_deny set to True still permits user login
- Resolves: rhbz#1919942 - sss_override does not take precedence over override_homedir directive</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-1" date="1623153600">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1917444 - SSSD Error Msg Improvement: Server resolution failed: [2]: No such file or directory
- Resolves: rhbz#1917511 - SSSD Error Msg Improvement: Failed to resolve server 'server.example.com': Error reading file
- Resolves: rhbz#1917535 - sssd.conf man page: parameter dns_resolver_server_timeout and dns_resolver_op_timeout
- Resolves: rhbz#1940509 - [RFE] Health and Support Analyzer: Link frontend to backend requests
- Resolves: rhbz#1649464 - auto_private_groups not working as expected with posix ipa/ad trust
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1961215 - Invalid sssd-kcm return code if requested operation is not found
- Resolves: rhbz#1837090 - SSSD fails nss_getby_name for IPA user with SID if the user has user private group
- Resolves: rhbz#1879869 - sudo commands incorrectly exports the KRB5CCNAME environment variable
- Resolves: rhbz#1962550 - sss_pac_make_request fails on systems joined to Active Directory.
- Resolves: rhbz#1737489 - [RFE] SSSD should honor default Kerberos settings (keytab name) in /etc/krb5.conf</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-2" date="1624276800">- Resolves: rhbz#1974257 - 'debug_microseconds' config option is broken
- Resolves: rhbz#1936902 - SSSD Error Msg Improvement: Invalid argument
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm (additional patches and rebuild)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-1" date="1626091200">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1693379 - sssd_be and sss_cache too heavy on CPU
- Resolves: rhbz#1909373 - Missing search index for `originalADgidNumber`
- Resolves: rhbz#1954630 - [RFE] Improve debug messages by adding a unique tag for each request the backend is handling
- Resolves: rhbz#1936891 - SSSD Error Msg Improvement: Bad address
- Resolves: rhbz#1364596 - sssd still showing ipa user after removed from last group
- Resolves: rhbz#1979404 - Changes made to /etc/pam.d/sssd-shadowutils are overwritten back to default on sssd-common package upgrade</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2" date="1627905600">- Resolves: rhbz#1975169 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-8]
- Resolves: rhbz#1962042 - [sssd] RHEL 8.5 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.1" date="1634558400">- Resolves: rhbz#2014460 - tps tests fail with cross dependency on sssd debuginfo package: removal of 'sssd-libwbclient-debuginfo' is missing [rhel-8.5.0.z]</changelog>
</package>
<package pkgid="e62f2cf115d9feb05a20afe17ba945c36ad575dcdb2c8052217cd98137d6a4f8" name="sssd-debuginfo" arch="i686">
  <version epoch="0" ver="2.5.2" rel="2.el8_5.3"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-7" date="1611662400">- Resolves: rhbz#1920001 - Do not add '%' to group names already prefixed with '%' in IPA sudo rules
- Resolves: rhbz#1918433 - sssd unable to lookup certmap rules
- Resolves: rhbz#1917382 - [abrt] [faf] sssd: dp_client_handshake_timeout(): /usr/libexec/sssd/sssd_be killed by 11</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-8" date="1613131200">- Resolves: rhbz#1926622 - Add support to verify authentication indicators in pam_sss_gss
- Resolves: rhbz#1926454 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0.
- Resolves: rhbz#1893159 - Default debug level should report all errors / failures (additional patch)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.0-1" date="1620648000">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1930535 - [abrt] [faf] sssd: monitor_service_shutdown(): /usr/sbin/sssd killed by 11
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1945888 - Inconsistant debug level for connection logging
- Resolves: rhbz#1948657 - pam_sss_gss.so doesn't work with large kerberos tickets
- Resolves: rhbz#1949149 - [RFE] Poor man's backtrace
- Resolves: rhbz#1920500 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR
- Resolves: rhbz#1923964 - [RFE] SSSD Error Msg Improvement: write_krb5info_file failed, authentication might fail.
- Resolves: rhbz#1928648 - SSSD logs improvements: clarify which config option applies to each timeout in the logs
- Resolves: rhbz#1632159 - sssd-kcm starts successfully for non existent socket_path
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm
- Resolves: rhbz#1925505 - [RFE] improve the sssd refresh timers for SUDO queries
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1925561 - sssd-ldap(5) does not report how to disable the SUDO smart queries
- Resolves: rhbz#1925621 - document impact of indices and of scope on performance of LDAP queries
- Resolves: rhbz#1855320 - [RFE] RHEL8 sssd: inheritance of the case_sensitive parameter for subdomains.
- Resolves: rhbz#1925608 - [RFE] make 'random_offset' addon to 'offline_timeout' option configurable
- Resolves: rhbz#1447945 - man page / docs update required: if two certificate matching rules with the same priority match only one is used
- Resolves: rhbz#1703436 - sssd not thread-safe in innetgr()
- Resolves: rhbz#1713143 - SSSD does not translate the 2FA text labels("first factor" / "second factor") on GDM login and screensaver unlock screen
- Resolves: rhbz#1888977 - sss_override: Usage limitations clarification in man page
- Resolves: rhbz#1890177 - Clarify "single_prompt" option in "PROMPTING CONFIGURATION SECTION" section of sssd.conf man page
- Resolves: rhbz#1902280 - fix sss_cache to also reset cached timestamp
- Resolves: rhbz#1935683 - SSSD not detecting subdomain from AD forest (RHEL 8.3)
- Resolves: rhbz#1937919 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7
- Resolves: rhbz#1944665 - No gpo found and ad_gpo_implicit_deny set to True still permits user login
- Resolves: rhbz#1919942 - sss_override does not take precedence over override_homedir directive</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-1" date="1623153600">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1917444 - SSSD Error Msg Improvement: Server resolution failed: [2]: No such file or directory
- Resolves: rhbz#1917511 - SSSD Error Msg Improvement: Failed to resolve server 'server.example.com': Error reading file
- Resolves: rhbz#1917535 - sssd.conf man page: parameter dns_resolver_server_timeout and dns_resolver_op_timeout
- Resolves: rhbz#1940509 - [RFE] Health and Support Analyzer: Link frontend to backend requests
- Resolves: rhbz#1649464 - auto_private_groups not working as expected with posix ipa/ad trust
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1961215 - Invalid sssd-kcm return code if requested operation is not found
- Resolves: rhbz#1837090 - SSSD fails nss_getby_name for IPA user with SID if the user has user private group
- Resolves: rhbz#1879869 - sudo commands incorrectly exports the KRB5CCNAME environment variable
- Resolves: rhbz#1962550 - sss_pac_make_request fails on systems joined to Active Directory.
- Resolves: rhbz#1737489 - [RFE] SSSD should honor default Kerberos settings (keytab name) in /etc/krb5.conf</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-2" date="1624276800">- Resolves: rhbz#1974257 - 'debug_microseconds' config option is broken
- Resolves: rhbz#1936902 - SSSD Error Msg Improvement: Invalid argument
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm (additional patches and rebuild)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-1" date="1626091200">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1693379 - sssd_be and sss_cache too heavy on CPU
- Resolves: rhbz#1909373 - Missing search index for `originalADgidNumber`
- Resolves: rhbz#1954630 - [RFE] Improve debug messages by adding a unique tag for each request the backend is handling
- Resolves: rhbz#1936891 - SSSD Error Msg Improvement: Bad address
- Resolves: rhbz#1364596 - sssd still showing ipa user after removed from last group
- Resolves: rhbz#1979404 - Changes made to /etc/pam.d/sssd-shadowutils are overwritten back to default on sssd-common package upgrade</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2" date="1627905600">- Resolves: rhbz#1975169 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-8]
- Resolves: rhbz#1962042 - [sssd] RHEL 8.5 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.1" date="1634558400">- Resolves: rhbz#2014460 - tps tests fail with cross dependency on sssd debuginfo package: removal of 'sssd-libwbclient-debuginfo' is missing [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.2" date="1638187200">- Resolves: rhbz#2018440 - 2.5.x based SSSD adds more AD domains than it should based on the configuration file (not trusted and from a different forest) [rhel-8.5.0.z]
- Resolves: rhbz#2016923 - autofs lookups for unknown mounts are delayed for 50s [rhel-8.5.0.z]
- Resolves: rhbz#2021499 - Make backtrace less "chatty" (avoid duplicate backtraces) [rhel-8.5.0.z]
- Resolves: rhbz#2013379 - Lookup with fully-qualified name does not work with 'cache_first = True' [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.3" date="1638878400">- Resolves: rhbz#2028828 - pam responder does not call initgroups to refresh the user entry [rhel-8.5.0.z]</changelog>
</package>
<package pkgid="9eba47caa1931641dbb76bc411b409d29f40c257ceb42890a82b697b676f7ac6" name="sssd-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="2.el8_5.3"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-7" date="1611662400">- Resolves: rhbz#1920001 - Do not add '%' to group names already prefixed with '%' in IPA sudo rules
- Resolves: rhbz#1918433 - sssd unable to lookup certmap rules
- Resolves: rhbz#1917382 - [abrt] [faf] sssd: dp_client_handshake_timeout(): /usr/libexec/sssd/sssd_be killed by 11</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-8" date="1613131200">- Resolves: rhbz#1926622 - Add support to verify authentication indicators in pam_sss_gss
- Resolves: rhbz#1926454 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0.
- Resolves: rhbz#1893159 - Default debug level should report all errors / failures (additional patch)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.0-1" date="1620648000">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1930535 - [abrt] [faf] sssd: monitor_service_shutdown(): /usr/sbin/sssd killed by 11
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1945888 - Inconsistant debug level for connection logging
- Resolves: rhbz#1948657 - pam_sss_gss.so doesn't work with large kerberos tickets
- Resolves: rhbz#1949149 - [RFE] Poor man's backtrace
- Resolves: rhbz#1920500 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR
- Resolves: rhbz#1923964 - [RFE] SSSD Error Msg Improvement: write_krb5info_file failed, authentication might fail.
- Resolves: rhbz#1928648 - SSSD logs improvements: clarify which config option applies to each timeout in the logs
- Resolves: rhbz#1632159 - sssd-kcm starts successfully for non existent socket_path
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm
- Resolves: rhbz#1925505 - [RFE] improve the sssd refresh timers for SUDO queries
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1925561 - sssd-ldap(5) does not report how to disable the SUDO smart queries
- Resolves: rhbz#1925621 - document impact of indices and of scope on performance of LDAP queries
- Resolves: rhbz#1855320 - [RFE] RHEL8 sssd: inheritance of the case_sensitive parameter for subdomains.
- Resolves: rhbz#1925608 - [RFE] make 'random_offset' addon to 'offline_timeout' option configurable
- Resolves: rhbz#1447945 - man page / docs update required: if two certificate matching rules with the same priority match only one is used
- Resolves: rhbz#1703436 - sssd not thread-safe in innetgr()
- Resolves: rhbz#1713143 - SSSD does not translate the 2FA text labels("first factor" / "second factor") on GDM login and screensaver unlock screen
- Resolves: rhbz#1888977 - sss_override: Usage limitations clarification in man page
- Resolves: rhbz#1890177 - Clarify "single_prompt" option in "PROMPTING CONFIGURATION SECTION" section of sssd.conf man page
- Resolves: rhbz#1902280 - fix sss_cache to also reset cached timestamp
- Resolves: rhbz#1935683 - SSSD not detecting subdomain from AD forest (RHEL 8.3)
- Resolves: rhbz#1937919 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7
- Resolves: rhbz#1944665 - No gpo found and ad_gpo_implicit_deny set to True still permits user login
- Resolves: rhbz#1919942 - sss_override does not take precedence over override_homedir directive</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-1" date="1623153600">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1917444 - SSSD Error Msg Improvement: Server resolution failed: [2]: No such file or directory
- Resolves: rhbz#1917511 - SSSD Error Msg Improvement: Failed to resolve server 'server.example.com': Error reading file
- Resolves: rhbz#1917535 - sssd.conf man page: parameter dns_resolver_server_timeout and dns_resolver_op_timeout
- Resolves: rhbz#1940509 - [RFE] Health and Support Analyzer: Link frontend to backend requests
- Resolves: rhbz#1649464 - auto_private_groups not working as expected with posix ipa/ad trust
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1961215 - Invalid sssd-kcm return code if requested operation is not found
- Resolves: rhbz#1837090 - SSSD fails nss_getby_name for IPA user with SID if the user has user private group
- Resolves: rhbz#1879869 - sudo commands incorrectly exports the KRB5CCNAME environment variable
- Resolves: rhbz#1962550 - sss_pac_make_request fails on systems joined to Active Directory.
- Resolves: rhbz#1737489 - [RFE] SSSD should honor default Kerberos settings (keytab name) in /etc/krb5.conf</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-2" date="1624276800">- Resolves: rhbz#1974257 - 'debug_microseconds' config option is broken
- Resolves: rhbz#1936902 - SSSD Error Msg Improvement: Invalid argument
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm (additional patches and rebuild)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-1" date="1626091200">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1693379 - sssd_be and sss_cache too heavy on CPU
- Resolves: rhbz#1909373 - Missing search index for `originalADgidNumber`
- Resolves: rhbz#1954630 - [RFE] Improve debug messages by adding a unique tag for each request the backend is handling
- Resolves: rhbz#1936891 - SSSD Error Msg Improvement: Bad address
- Resolves: rhbz#1364596 - sssd still showing ipa user after removed from last group
- Resolves: rhbz#1979404 - Changes made to /etc/pam.d/sssd-shadowutils are overwritten back to default on sssd-common package upgrade</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2" date="1627905600">- Resolves: rhbz#1975169 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-8]
- Resolves: rhbz#1962042 - [sssd] RHEL 8.5 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.1" date="1634558400">- Resolves: rhbz#2014460 - tps tests fail with cross dependency on sssd debuginfo package: removal of 'sssd-libwbclient-debuginfo' is missing [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.2" date="1638187200">- Resolves: rhbz#2018440 - 2.5.x based SSSD adds more AD domains than it should based on the configuration file (not trusted and from a different forest) [rhel-8.5.0.z]
- Resolves: rhbz#2016923 - autofs lookups for unknown mounts are delayed for 50s [rhel-8.5.0.z]
- Resolves: rhbz#2021499 - Make backtrace less "chatty" (avoid duplicate backtraces) [rhel-8.5.0.z]
- Resolves: rhbz#2013379 - Lookup with fully-qualified name does not work with 'cache_first = True' [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.3" date="1638878400">- Resolves: rhbz#2028828 - pam responder does not call initgroups to refresh the user entry [rhel-8.5.0.z]</changelog>
</package>
<package pkgid="12a3b8dae261c86c82a42bc2011cc7ec18a280b2288cc7486622a9a0c30ecaac" name="sssd-debuginfo" arch="i686">
  <version epoch="0" ver="2.5.2" rel="2.el8_5.4"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-8" date="1613131200">- Resolves: rhbz#1926622 - Add support to verify authentication indicators in pam_sss_gss
- Resolves: rhbz#1926454 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0.
- Resolves: rhbz#1893159 - Default debug level should report all errors / failures (additional patch)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.0-1" date="1620648000">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1930535 - [abrt] [faf] sssd: monitor_service_shutdown(): /usr/sbin/sssd killed by 11
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1945888 - Inconsistant debug level for connection logging
- Resolves: rhbz#1948657 - pam_sss_gss.so doesn't work with large kerberos tickets
- Resolves: rhbz#1949149 - [RFE] Poor man's backtrace
- Resolves: rhbz#1920500 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR
- Resolves: rhbz#1923964 - [RFE] SSSD Error Msg Improvement: write_krb5info_file failed, authentication might fail.
- Resolves: rhbz#1928648 - SSSD logs improvements: clarify which config option applies to each timeout in the logs
- Resolves: rhbz#1632159 - sssd-kcm starts successfully for non existent socket_path
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm
- Resolves: rhbz#1925505 - [RFE] improve the sssd refresh timers for SUDO queries
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1925561 - sssd-ldap(5) does not report how to disable the SUDO smart queries
- Resolves: rhbz#1925621 - document impact of indices and of scope on performance of LDAP queries
- Resolves: rhbz#1855320 - [RFE] RHEL8 sssd: inheritance of the case_sensitive parameter for subdomains.
- Resolves: rhbz#1925608 - [RFE] make 'random_offset' addon to 'offline_timeout' option configurable
- Resolves: rhbz#1447945 - man page / docs update required: if two certificate matching rules with the same priority match only one is used
- Resolves: rhbz#1703436 - sssd not thread-safe in innetgr()
- Resolves: rhbz#1713143 - SSSD does not translate the 2FA text labels("first factor" / "second factor") on GDM login and screensaver unlock screen
- Resolves: rhbz#1888977 - sss_override: Usage limitations clarification in man page
- Resolves: rhbz#1890177 - Clarify "single_prompt" option in "PROMPTING CONFIGURATION SECTION" section of sssd.conf man page
- Resolves: rhbz#1902280 - fix sss_cache to also reset cached timestamp
- Resolves: rhbz#1935683 - SSSD not detecting subdomain from AD forest (RHEL 8.3)
- Resolves: rhbz#1937919 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7
- Resolves: rhbz#1944665 - No gpo found and ad_gpo_implicit_deny set to True still permits user login
- Resolves: rhbz#1919942 - sss_override does not take precedence over override_homedir directive</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-1" date="1623153600">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1917444 - SSSD Error Msg Improvement: Server resolution failed: [2]: No such file or directory
- Resolves: rhbz#1917511 - SSSD Error Msg Improvement: Failed to resolve server 'server.example.com': Error reading file
- Resolves: rhbz#1917535 - sssd.conf man page: parameter dns_resolver_server_timeout and dns_resolver_op_timeout
- Resolves: rhbz#1940509 - [RFE] Health and Support Analyzer: Link frontend to backend requests
- Resolves: rhbz#1649464 - auto_private_groups not working as expected with posix ipa/ad trust
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1961215 - Invalid sssd-kcm return code if requested operation is not found
- Resolves: rhbz#1837090 - SSSD fails nss_getby_name for IPA user with SID if the user has user private group
- Resolves: rhbz#1879869 - sudo commands incorrectly exports the KRB5CCNAME environment variable
- Resolves: rhbz#1962550 - sss_pac_make_request fails on systems joined to Active Directory.
- Resolves: rhbz#1737489 - [RFE] SSSD should honor default Kerberos settings (keytab name) in /etc/krb5.conf</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-2" date="1624276800">- Resolves: rhbz#1974257 - 'debug_microseconds' config option is broken
- Resolves: rhbz#1936902 - SSSD Error Msg Improvement: Invalid argument
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm (additional patches and rebuild)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-1" date="1626091200">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1693379 - sssd_be and sss_cache too heavy on CPU
- Resolves: rhbz#1909373 - Missing search index for `originalADgidNumber`
- Resolves: rhbz#1954630 - [RFE] Improve debug messages by adding a unique tag for each request the backend is handling
- Resolves: rhbz#1936891 - SSSD Error Msg Improvement: Bad address
- Resolves: rhbz#1364596 - sssd still showing ipa user after removed from last group
- Resolves: rhbz#1979404 - Changes made to /etc/pam.d/sssd-shadowutils are overwritten back to default on sssd-common package upgrade</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2" date="1627905600">- Resolves: rhbz#1975169 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-8]
- Resolves: rhbz#1962042 - [sssd] RHEL 8.5 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.1" date="1634558400">- Resolves: rhbz#2014460 - tps tests fail with cross dependency on sssd debuginfo package: removal of 'sssd-libwbclient-debuginfo' is missing [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.2" date="1638187200">- Resolves: rhbz#2018440 - 2.5.x based SSSD adds more AD domains than it should based on the configuration file (not trusted and from a different forest) [rhel-8.5.0.z]
- Resolves: rhbz#2016923 - autofs lookups for unknown mounts are delayed for 50s [rhel-8.5.0.z]
- Resolves: rhbz#2021499 - Make backtrace less "chatty" (avoid duplicate backtraces) [rhel-8.5.0.z]
- Resolves: rhbz#2013379 - Lookup with fully-qualified name does not work with 'cache_first = True' [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.3" date="1638878400">- Resolves: rhbz#2028828 - pam responder does not call initgroups to refresh the user entry [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.4" date="1642420800">- Resolves: rhbz#2030651 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries [rhel-8.5.0.z]
- Resolves: rhbz#2035285 - AD Domain in the AD Forest Missing after sssd latest update [rhel-8.5.0.z]</changelog>
</package>
<package pkgid="bbe4b687d6f602a402ab9e7bb3cbf4351a6d32af1e65bf83c23b11777fb22733" name="sssd-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="2.el8_5.4"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-8" date="1613131200">- Resolves: rhbz#1926622 - Add support to verify authentication indicators in pam_sss_gss
- Resolves: rhbz#1926454 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0.
- Resolves: rhbz#1893159 - Default debug level should report all errors / failures (additional patch)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.0-1" date="1620648000">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1930535 - [abrt] [faf] sssd: monitor_service_shutdown(): /usr/sbin/sssd killed by 11
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1945888 - Inconsistant debug level for connection logging
- Resolves: rhbz#1948657 - pam_sss_gss.so doesn't work with large kerberos tickets
- Resolves: rhbz#1949149 - [RFE] Poor man's backtrace
- Resolves: rhbz#1920500 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR
- Resolves: rhbz#1923964 - [RFE] SSSD Error Msg Improvement: write_krb5info_file failed, authentication might fail.
- Resolves: rhbz#1928648 - SSSD logs improvements: clarify which config option applies to each timeout in the logs
- Resolves: rhbz#1632159 - sssd-kcm starts successfully for non existent socket_path
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm
- Resolves: rhbz#1925505 - [RFE] improve the sssd refresh timers for SUDO queries
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1925561 - sssd-ldap(5) does not report how to disable the SUDO smart queries
- Resolves: rhbz#1925621 - document impact of indices and of scope on performance of LDAP queries
- Resolves: rhbz#1855320 - [RFE] RHEL8 sssd: inheritance of the case_sensitive parameter for subdomains.
- Resolves: rhbz#1925608 - [RFE] make 'random_offset' addon to 'offline_timeout' option configurable
- Resolves: rhbz#1447945 - man page / docs update required: if two certificate matching rules with the same priority match only one is used
- Resolves: rhbz#1703436 - sssd not thread-safe in innetgr()
- Resolves: rhbz#1713143 - SSSD does not translate the 2FA text labels("first factor" / "second factor") on GDM login and screensaver unlock screen
- Resolves: rhbz#1888977 - sss_override: Usage limitations clarification in man page
- Resolves: rhbz#1890177 - Clarify "single_prompt" option in "PROMPTING CONFIGURATION SECTION" section of sssd.conf man page
- Resolves: rhbz#1902280 - fix sss_cache to also reset cached timestamp
- Resolves: rhbz#1935683 - SSSD not detecting subdomain from AD forest (RHEL 8.3)
- Resolves: rhbz#1937919 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7
- Resolves: rhbz#1944665 - No gpo found and ad_gpo_implicit_deny set to True still permits user login
- Resolves: rhbz#1919942 - sss_override does not take precedence over override_homedir directive</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-1" date="1623153600">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1917444 - SSSD Error Msg Improvement: Server resolution failed: [2]: No such file or directory
- Resolves: rhbz#1917511 - SSSD Error Msg Improvement: Failed to resolve server 'server.example.com': Error reading file
- Resolves: rhbz#1917535 - sssd.conf man page: parameter dns_resolver_server_timeout and dns_resolver_op_timeout
- Resolves: rhbz#1940509 - [RFE] Health and Support Analyzer: Link frontend to backend requests
- Resolves: rhbz#1649464 - auto_private_groups not working as expected with posix ipa/ad trust
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1961215 - Invalid sssd-kcm return code if requested operation is not found
- Resolves: rhbz#1837090 - SSSD fails nss_getby_name for IPA user with SID if the user has user private group
- Resolves: rhbz#1879869 - sudo commands incorrectly exports the KRB5CCNAME environment variable
- Resolves: rhbz#1962550 - sss_pac_make_request fails on systems joined to Active Directory.
- Resolves: rhbz#1737489 - [RFE] SSSD should honor default Kerberos settings (keytab name) in /etc/krb5.conf</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-2" date="1624276800">- Resolves: rhbz#1974257 - 'debug_microseconds' config option is broken
- Resolves: rhbz#1936902 - SSSD Error Msg Improvement: Invalid argument
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm (additional patches and rebuild)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-1" date="1626091200">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1693379 - sssd_be and sss_cache too heavy on CPU
- Resolves: rhbz#1909373 - Missing search index for `originalADgidNumber`
- Resolves: rhbz#1954630 - [RFE] Improve debug messages by adding a unique tag for each request the backend is handling
- Resolves: rhbz#1936891 - SSSD Error Msg Improvement: Bad address
- Resolves: rhbz#1364596 - sssd still showing ipa user after removed from last group
- Resolves: rhbz#1979404 - Changes made to /etc/pam.d/sssd-shadowutils are overwritten back to default on sssd-common package upgrade</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2" date="1627905600">- Resolves: rhbz#1975169 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-8]
- Resolves: rhbz#1962042 - [sssd] RHEL 8.5 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.1" date="1634558400">- Resolves: rhbz#2014460 - tps tests fail with cross dependency on sssd debuginfo package: removal of 'sssd-libwbclient-debuginfo' is missing [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.2" date="1638187200">- Resolves: rhbz#2018440 - 2.5.x based SSSD adds more AD domains than it should based on the configuration file (not trusted and from a different forest) [rhel-8.5.0.z]
- Resolves: rhbz#2016923 - autofs lookups for unknown mounts are delayed for 50s [rhel-8.5.0.z]
- Resolves: rhbz#2021499 - Make backtrace less "chatty" (avoid duplicate backtraces) [rhel-8.5.0.z]
- Resolves: rhbz#2013379 - Lookup with fully-qualified name does not work with 'cache_first = True' [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.3" date="1638878400">- Resolves: rhbz#2028828 - pam responder does not call initgroups to refresh the user entry [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.4" date="1642420800">- Resolves: rhbz#2030651 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries [rhel-8.5.0.z]
- Resolves: rhbz#2035285 - AD Domain in the AD Forest Missing after sssd latest update [rhel-8.5.0.z]</changelog>
</package>
<package pkgid="8f5e82b6bfeac06fc792ccac3c9f4891e24d831328f9bad5f91cb1ae23c87651" name="sssd-debugsource" arch="i686">
  <version epoch="0" ver="2.5.2" rel="2.el8_5.1"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-5" date="1609156800">- Resolves: rhbz#1631410 - Can't login with smartcard with multiple certs having same ID value
- Resolves: rhbz#1884213 - [RFE] add offline_timeout_max config option to control offline interval backoff (additional patches)
- Resolves: rhbz#1893159 - Default debug level should report all errors / failures
- Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-6" date="1610971200">- Resolves: rhbz#1113639 - autofs: return a connection failure until maps have been fetched
- Resolves: rhbz#1915395 - Memory leak in the simple access provider
- Resolves: rhbz#1915319 - SSSD: SBUS: failures during servers startup
- Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication (additional patches)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-7" date="1611662400">- Resolves: rhbz#1920001 - Do not add '%' to group names already prefixed with '%' in IPA sudo rules
- Resolves: rhbz#1918433 - sssd unable to lookup certmap rules
- Resolves: rhbz#1917382 - [abrt] [faf] sssd: dp_client_handshake_timeout(): /usr/libexec/sssd/sssd_be killed by 11</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-8" date="1613131200">- Resolves: rhbz#1926622 - Add support to verify authentication indicators in pam_sss_gss
- Resolves: rhbz#1926454 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0.
- Resolves: rhbz#1893159 - Default debug level should report all errors / failures (additional patch)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.0-1" date="1620648000">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1930535 - [abrt] [faf] sssd: monitor_service_shutdown(): /usr/sbin/sssd killed by 11
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1945888 - Inconsistant debug level for connection logging
- Resolves: rhbz#1948657 - pam_sss_gss.so doesn't work with large kerberos tickets
- Resolves: rhbz#1949149 - [RFE] Poor man's backtrace
- Resolves: rhbz#1920500 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR
- Resolves: rhbz#1923964 - [RFE] SSSD Error Msg Improvement: write_krb5info_file failed, authentication might fail.
- Resolves: rhbz#1928648 - SSSD logs improvements: clarify which config option applies to each timeout in the logs
- Resolves: rhbz#1632159 - sssd-kcm starts successfully for non existent socket_path
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm
- Resolves: rhbz#1925505 - [RFE] improve the sssd refresh timers for SUDO queries
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1925561 - sssd-ldap(5) does not report how to disable the SUDO smart queries
- Resolves: rhbz#1925621 - document impact of indices and of scope on performance of LDAP queries
- Resolves: rhbz#1855320 - [RFE] RHEL8 sssd: inheritance of the case_sensitive parameter for subdomains.
- Resolves: rhbz#1925608 - [RFE] make 'random_offset' addon to 'offline_timeout' option configurable
- Resolves: rhbz#1447945 - man page / docs update required: if two certificate matching rules with the same priority match only one is used
- Resolves: rhbz#1703436 - sssd not thread-safe in innetgr()
- Resolves: rhbz#1713143 - SSSD does not translate the 2FA text labels("first factor" / "second factor") on GDM login and screensaver unlock screen
- Resolves: rhbz#1888977 - sss_override: Usage limitations clarification in man page
- Resolves: rhbz#1890177 - Clarify "single_prompt" option in "PROMPTING CONFIGURATION SECTION" section of sssd.conf man page
- Resolves: rhbz#1902280 - fix sss_cache to also reset cached timestamp
- Resolves: rhbz#1935683 - SSSD not detecting subdomain from AD forest (RHEL 8.3)
- Resolves: rhbz#1937919 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7
- Resolves: rhbz#1944665 - No gpo found and ad_gpo_implicit_deny set to True still permits user login
- Resolves: rhbz#1919942 - sss_override does not take precedence over override_homedir directive</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-1" date="1623153600">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1917444 - SSSD Error Msg Improvement: Server resolution failed: [2]: No such file or directory
- Resolves: rhbz#1917511 - SSSD Error Msg Improvement: Failed to resolve server 'server.example.com': Error reading file
- Resolves: rhbz#1917535 - sssd.conf man page: parameter dns_resolver_server_timeout and dns_resolver_op_timeout
- Resolves: rhbz#1940509 - [RFE] Health and Support Analyzer: Link frontend to backend requests
- Resolves: rhbz#1649464 - auto_private_groups not working as expected with posix ipa/ad trust
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1961215 - Invalid sssd-kcm return code if requested operation is not found
- Resolves: rhbz#1837090 - SSSD fails nss_getby_name for IPA user with SID if the user has user private group
- Resolves: rhbz#1879869 - sudo commands incorrectly exports the KRB5CCNAME environment variable
- Resolves: rhbz#1962550 - sss_pac_make_request fails on systems joined to Active Directory.
- Resolves: rhbz#1737489 - [RFE] SSSD should honor default Kerberos settings (keytab name) in /etc/krb5.conf</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-2" date="1624276800">- Resolves: rhbz#1974257 - 'debug_microseconds' config option is broken
- Resolves: rhbz#1936902 - SSSD Error Msg Improvement: Invalid argument
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm (additional patches and rebuild)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-1" date="1626091200">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1693379 - sssd_be and sss_cache too heavy on CPU
- Resolves: rhbz#1909373 - Missing search index for `originalADgidNumber`
- Resolves: rhbz#1954630 - [RFE] Improve debug messages by adding a unique tag for each request the backend is handling
- Resolves: rhbz#1936891 - SSSD Error Msg Improvement: Bad address
- Resolves: rhbz#1364596 - sssd still showing ipa user after removed from last group
- Resolves: rhbz#1979404 - Changes made to /etc/pam.d/sssd-shadowutils are overwritten back to default on sssd-common package upgrade</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2" date="1627905600">- Resolves: rhbz#1975169 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-8]
- Resolves: rhbz#1962042 - [sssd] RHEL 8.5 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.1" date="1634558400">- Resolves: rhbz#2014460 - tps tests fail with cross dependency on sssd debuginfo package: removal of 'sssd-libwbclient-debuginfo' is missing [rhel-8.5.0.z]</changelog>
</package>
<package pkgid="3671c4fb1b7b2092ffd0d7bf3d905896c693a89656029cb66126665d06b26f09" name="sssd-debugsource" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="2.el8_5.1"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-5" date="1609156800">- Resolves: rhbz#1631410 - Can't login with smartcard with multiple certs having same ID value
- Resolves: rhbz#1884213 - [RFE] add offline_timeout_max config option to control offline interval backoff (additional patches)
- Resolves: rhbz#1893159 - Default debug level should report all errors / failures
- Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-6" date="1610971200">- Resolves: rhbz#1113639 - autofs: return a connection failure until maps have been fetched
- Resolves: rhbz#1915395 - Memory leak in the simple access provider
- Resolves: rhbz#1915319 - SSSD: SBUS: failures during servers startup
- Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication (additional patches)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-7" date="1611662400">- Resolves: rhbz#1920001 - Do not add '%' to group names already prefixed with '%' in IPA sudo rules
- Resolves: rhbz#1918433 - sssd unable to lookup certmap rules
- Resolves: rhbz#1917382 - [abrt] [faf] sssd: dp_client_handshake_timeout(): /usr/libexec/sssd/sssd_be killed by 11</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-8" date="1613131200">- Resolves: rhbz#1926622 - Add support to verify authentication indicators in pam_sss_gss
- Resolves: rhbz#1926454 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0.
- Resolves: rhbz#1893159 - Default debug level should report all errors / failures (additional patch)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.0-1" date="1620648000">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1930535 - [abrt] [faf] sssd: monitor_service_shutdown(): /usr/sbin/sssd killed by 11
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1945888 - Inconsistant debug level for connection logging
- Resolves: rhbz#1948657 - pam_sss_gss.so doesn't work with large kerberos tickets
- Resolves: rhbz#1949149 - [RFE] Poor man's backtrace
- Resolves: rhbz#1920500 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR
- Resolves: rhbz#1923964 - [RFE] SSSD Error Msg Improvement: write_krb5info_file failed, authentication might fail.
- Resolves: rhbz#1928648 - SSSD logs improvements: clarify which config option applies to each timeout in the logs
- Resolves: rhbz#1632159 - sssd-kcm starts successfully for non existent socket_path
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm
- Resolves: rhbz#1925505 - [RFE] improve the sssd refresh timers for SUDO queries
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1925561 - sssd-ldap(5) does not report how to disable the SUDO smart queries
- Resolves: rhbz#1925621 - document impact of indices and of scope on performance of LDAP queries
- Resolves: rhbz#1855320 - [RFE] RHEL8 sssd: inheritance of the case_sensitive parameter for subdomains.
- Resolves: rhbz#1925608 - [RFE] make 'random_offset' addon to 'offline_timeout' option configurable
- Resolves: rhbz#1447945 - man page / docs update required: if two certificate matching rules with the same priority match only one is used
- Resolves: rhbz#1703436 - sssd not thread-safe in innetgr()
- Resolves: rhbz#1713143 - SSSD does not translate the 2FA text labels("first factor" / "second factor") on GDM login and screensaver unlock screen
- Resolves: rhbz#1888977 - sss_override: Usage limitations clarification in man page
- Resolves: rhbz#1890177 - Clarify "single_prompt" option in "PROMPTING CONFIGURATION SECTION" section of sssd.conf man page
- Resolves: rhbz#1902280 - fix sss_cache to also reset cached timestamp
- Resolves: rhbz#1935683 - SSSD not detecting subdomain from AD forest (RHEL 8.3)
- Resolves: rhbz#1937919 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7
- Resolves: rhbz#1944665 - No gpo found and ad_gpo_implicit_deny set to True still permits user login
- Resolves: rhbz#1919942 - sss_override does not take precedence over override_homedir directive</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-1" date="1623153600">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1917444 - SSSD Error Msg Improvement: Server resolution failed: [2]: No such file or directory
- Resolves: rhbz#1917511 - SSSD Error Msg Improvement: Failed to resolve server 'server.example.com': Error reading file
- Resolves: rhbz#1917535 - sssd.conf man page: parameter dns_resolver_server_timeout and dns_resolver_op_timeout
- Resolves: rhbz#1940509 - [RFE] Health and Support Analyzer: Link frontend to backend requests
- Resolves: rhbz#1649464 - auto_private_groups not working as expected with posix ipa/ad trust
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1961215 - Invalid sssd-kcm return code if requested operation is not found
- Resolves: rhbz#1837090 - SSSD fails nss_getby_name for IPA user with SID if the user has user private group
- Resolves: rhbz#1879869 - sudo commands incorrectly exports the KRB5CCNAME environment variable
- Resolves: rhbz#1962550 - sss_pac_make_request fails on systems joined to Active Directory.
- Resolves: rhbz#1737489 - [RFE] SSSD should honor default Kerberos settings (keytab name) in /etc/krb5.conf</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-2" date="1624276800">- Resolves: rhbz#1974257 - 'debug_microseconds' config option is broken
- Resolves: rhbz#1936902 - SSSD Error Msg Improvement: Invalid argument
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm (additional patches and rebuild)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-1" date="1626091200">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1693379 - sssd_be and sss_cache too heavy on CPU
- Resolves: rhbz#1909373 - Missing search index for `originalADgidNumber`
- Resolves: rhbz#1954630 - [RFE] Improve debug messages by adding a unique tag for each request the backend is handling
- Resolves: rhbz#1936891 - SSSD Error Msg Improvement: Bad address
- Resolves: rhbz#1364596 - sssd still showing ipa user after removed from last group
- Resolves: rhbz#1979404 - Changes made to /etc/pam.d/sssd-shadowutils are overwritten back to default on sssd-common package upgrade</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2" date="1627905600">- Resolves: rhbz#1975169 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-8]
- Resolves: rhbz#1962042 - [sssd] RHEL 8.5 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.1" date="1634558400">- Resolves: rhbz#2014460 - tps tests fail with cross dependency on sssd debuginfo package: removal of 'sssd-libwbclient-debuginfo' is missing [rhel-8.5.0.z]</changelog>
</package>
<package pkgid="a7f0322a5e56f438a35fede5dee59e77e5f99351113df35c120d2ce4704c65ce" name="sssd-debugsource" arch="i686">
  <version epoch="0" ver="2.5.2" rel="2.el8_5.3"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-7" date="1611662400">- Resolves: rhbz#1920001 - Do not add '%' to group names already prefixed with '%' in IPA sudo rules
- Resolves: rhbz#1918433 - sssd unable to lookup certmap rules
- Resolves: rhbz#1917382 - [abrt] [faf] sssd: dp_client_handshake_timeout(): /usr/libexec/sssd/sssd_be killed by 11</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-8" date="1613131200">- Resolves: rhbz#1926622 - Add support to verify authentication indicators in pam_sss_gss
- Resolves: rhbz#1926454 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0.
- Resolves: rhbz#1893159 - Default debug level should report all errors / failures (additional patch)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.0-1" date="1620648000">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1930535 - [abrt] [faf] sssd: monitor_service_shutdown(): /usr/sbin/sssd killed by 11
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1945888 - Inconsistant debug level for connection logging
- Resolves: rhbz#1948657 - pam_sss_gss.so doesn't work with large kerberos tickets
- Resolves: rhbz#1949149 - [RFE] Poor man's backtrace
- Resolves: rhbz#1920500 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR
- Resolves: rhbz#1923964 - [RFE] SSSD Error Msg Improvement: write_krb5info_file failed, authentication might fail.
- Resolves: rhbz#1928648 - SSSD logs improvements: clarify which config option applies to each timeout in the logs
- Resolves: rhbz#1632159 - sssd-kcm starts successfully for non existent socket_path
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm
- Resolves: rhbz#1925505 - [RFE] improve the sssd refresh timers for SUDO queries
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1925561 - sssd-ldap(5) does not report how to disable the SUDO smart queries
- Resolves: rhbz#1925621 - document impact of indices and of scope on performance of LDAP queries
- Resolves: rhbz#1855320 - [RFE] RHEL8 sssd: inheritance of the case_sensitive parameter for subdomains.
- Resolves: rhbz#1925608 - [RFE] make 'random_offset' addon to 'offline_timeout' option configurable
- Resolves: rhbz#1447945 - man page / docs update required: if two certificate matching rules with the same priority match only one is used
- Resolves: rhbz#1703436 - sssd not thread-safe in innetgr()
- Resolves: rhbz#1713143 - SSSD does not translate the 2FA text labels("first factor" / "second factor") on GDM login and screensaver unlock screen
- Resolves: rhbz#1888977 - sss_override: Usage limitations clarification in man page
- Resolves: rhbz#1890177 - Clarify "single_prompt" option in "PROMPTING CONFIGURATION SECTION" section of sssd.conf man page
- Resolves: rhbz#1902280 - fix sss_cache to also reset cached timestamp
- Resolves: rhbz#1935683 - SSSD not detecting subdomain from AD forest (RHEL 8.3)
- Resolves: rhbz#1937919 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7
- Resolves: rhbz#1944665 - No gpo found and ad_gpo_implicit_deny set to True still permits user login
- Resolves: rhbz#1919942 - sss_override does not take precedence over override_homedir directive</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-1" date="1623153600">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1917444 - SSSD Error Msg Improvement: Server resolution failed: [2]: No such file or directory
- Resolves: rhbz#1917511 - SSSD Error Msg Improvement: Failed to resolve server 'server.example.com': Error reading file
- Resolves: rhbz#1917535 - sssd.conf man page: parameter dns_resolver_server_timeout and dns_resolver_op_timeout
- Resolves: rhbz#1940509 - [RFE] Health and Support Analyzer: Link frontend to backend requests
- Resolves: rhbz#1649464 - auto_private_groups not working as expected with posix ipa/ad trust
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1961215 - Invalid sssd-kcm return code if requested operation is not found
- Resolves: rhbz#1837090 - SSSD fails nss_getby_name for IPA user with SID if the user has user private group
- Resolves: rhbz#1879869 - sudo commands incorrectly exports the KRB5CCNAME environment variable
- Resolves: rhbz#1962550 - sss_pac_make_request fails on systems joined to Active Directory.
- Resolves: rhbz#1737489 - [RFE] SSSD should honor default Kerberos settings (keytab name) in /etc/krb5.conf</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-2" date="1624276800">- Resolves: rhbz#1974257 - 'debug_microseconds' config option is broken
- Resolves: rhbz#1936902 - SSSD Error Msg Improvement: Invalid argument
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm (additional patches and rebuild)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-1" date="1626091200">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1693379 - sssd_be and sss_cache too heavy on CPU
- Resolves: rhbz#1909373 - Missing search index for `originalADgidNumber`
- Resolves: rhbz#1954630 - [RFE] Improve debug messages by adding a unique tag for each request the backend is handling
- Resolves: rhbz#1936891 - SSSD Error Msg Improvement: Bad address
- Resolves: rhbz#1364596 - sssd still showing ipa user after removed from last group
- Resolves: rhbz#1979404 - Changes made to /etc/pam.d/sssd-shadowutils are overwritten back to default on sssd-common package upgrade</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2" date="1627905600">- Resolves: rhbz#1975169 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-8]
- Resolves: rhbz#1962042 - [sssd] RHEL 8.5 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.1" date="1634558400">- Resolves: rhbz#2014460 - tps tests fail with cross dependency on sssd debuginfo package: removal of 'sssd-libwbclient-debuginfo' is missing [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.2" date="1638187200">- Resolves: rhbz#2018440 - 2.5.x based SSSD adds more AD domains than it should based on the configuration file (not trusted and from a different forest) [rhel-8.5.0.z]
- Resolves: rhbz#2016923 - autofs lookups for unknown mounts are delayed for 50s [rhel-8.5.0.z]
- Resolves: rhbz#2021499 - Make backtrace less "chatty" (avoid duplicate backtraces) [rhel-8.5.0.z]
- Resolves: rhbz#2013379 - Lookup with fully-qualified name does not work with 'cache_first = True' [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.3" date="1638878400">- Resolves: rhbz#2028828 - pam responder does not call initgroups to refresh the user entry [rhel-8.5.0.z]</changelog>
</package>
<package pkgid="5c5b6e04d11355422d16b5aa9e96fb7b56beb056b37a5bca4fe01633981b134d" name="sssd-debugsource" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="2.el8_5.3"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-7" date="1611662400">- Resolves: rhbz#1920001 - Do not add '%' to group names already prefixed with '%' in IPA sudo rules
- Resolves: rhbz#1918433 - sssd unable to lookup certmap rules
- Resolves: rhbz#1917382 - [abrt] [faf] sssd: dp_client_handshake_timeout(): /usr/libexec/sssd/sssd_be killed by 11</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-8" date="1613131200">- Resolves: rhbz#1926622 - Add support to verify authentication indicators in pam_sss_gss
- Resolves: rhbz#1926454 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0.
- Resolves: rhbz#1893159 - Default debug level should report all errors / failures (additional patch)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.0-1" date="1620648000">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1930535 - [abrt] [faf] sssd: monitor_service_shutdown(): /usr/sbin/sssd killed by 11
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1945888 - Inconsistant debug level for connection logging
- Resolves: rhbz#1948657 - pam_sss_gss.so doesn't work with large kerberos tickets
- Resolves: rhbz#1949149 - [RFE] Poor man's backtrace
- Resolves: rhbz#1920500 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR
- Resolves: rhbz#1923964 - [RFE] SSSD Error Msg Improvement: write_krb5info_file failed, authentication might fail.
- Resolves: rhbz#1928648 - SSSD logs improvements: clarify which config option applies to each timeout in the logs
- Resolves: rhbz#1632159 - sssd-kcm starts successfully for non existent socket_path
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm
- Resolves: rhbz#1925505 - [RFE] improve the sssd refresh timers for SUDO queries
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1925561 - sssd-ldap(5) does not report how to disable the SUDO smart queries
- Resolves: rhbz#1925621 - document impact of indices and of scope on performance of LDAP queries
- Resolves: rhbz#1855320 - [RFE] RHEL8 sssd: inheritance of the case_sensitive parameter for subdomains.
- Resolves: rhbz#1925608 - [RFE] make 'random_offset' addon to 'offline_timeout' option configurable
- Resolves: rhbz#1447945 - man page / docs update required: if two certificate matching rules with the same priority match only one is used
- Resolves: rhbz#1703436 - sssd not thread-safe in innetgr()
- Resolves: rhbz#1713143 - SSSD does not translate the 2FA text labels("first factor" / "second factor") on GDM login and screensaver unlock screen
- Resolves: rhbz#1888977 - sss_override: Usage limitations clarification in man page
- Resolves: rhbz#1890177 - Clarify "single_prompt" option in "PROMPTING CONFIGURATION SECTION" section of sssd.conf man page
- Resolves: rhbz#1902280 - fix sss_cache to also reset cached timestamp
- Resolves: rhbz#1935683 - SSSD not detecting subdomain from AD forest (RHEL 8.3)
- Resolves: rhbz#1937919 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7
- Resolves: rhbz#1944665 - No gpo found and ad_gpo_implicit_deny set to True still permits user login
- Resolves: rhbz#1919942 - sss_override does not take precedence over override_homedir directive</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-1" date="1623153600">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1917444 - SSSD Error Msg Improvement: Server resolution failed: [2]: No such file or directory
- Resolves: rhbz#1917511 - SSSD Error Msg Improvement: Failed to resolve server 'server.example.com': Error reading file
- Resolves: rhbz#1917535 - sssd.conf man page: parameter dns_resolver_server_timeout and dns_resolver_op_timeout
- Resolves: rhbz#1940509 - [RFE] Health and Support Analyzer: Link frontend to backend requests
- Resolves: rhbz#1649464 - auto_private_groups not working as expected with posix ipa/ad trust
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1961215 - Invalid sssd-kcm return code if requested operation is not found
- Resolves: rhbz#1837090 - SSSD fails nss_getby_name for IPA user with SID if the user has user private group
- Resolves: rhbz#1879869 - sudo commands incorrectly exports the KRB5CCNAME environment variable
- Resolves: rhbz#1962550 - sss_pac_make_request fails on systems joined to Active Directory.
- Resolves: rhbz#1737489 - [RFE] SSSD should honor default Kerberos settings (keytab name) in /etc/krb5.conf</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-2" date="1624276800">- Resolves: rhbz#1974257 - 'debug_microseconds' config option is broken
- Resolves: rhbz#1936902 - SSSD Error Msg Improvement: Invalid argument
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm (additional patches and rebuild)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-1" date="1626091200">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1693379 - sssd_be and sss_cache too heavy on CPU
- Resolves: rhbz#1909373 - Missing search index for `originalADgidNumber`
- Resolves: rhbz#1954630 - [RFE] Improve debug messages by adding a unique tag for each request the backend is handling
- Resolves: rhbz#1936891 - SSSD Error Msg Improvement: Bad address
- Resolves: rhbz#1364596 - sssd still showing ipa user after removed from last group
- Resolves: rhbz#1979404 - Changes made to /etc/pam.d/sssd-shadowutils are overwritten back to default on sssd-common package upgrade</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2" date="1627905600">- Resolves: rhbz#1975169 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-8]
- Resolves: rhbz#1962042 - [sssd] RHEL 8.5 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.1" date="1634558400">- Resolves: rhbz#2014460 - tps tests fail with cross dependency on sssd debuginfo package: removal of 'sssd-libwbclient-debuginfo' is missing [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.2" date="1638187200">- Resolves: rhbz#2018440 - 2.5.x based SSSD adds more AD domains than it should based on the configuration file (not trusted and from a different forest) [rhel-8.5.0.z]
- Resolves: rhbz#2016923 - autofs lookups for unknown mounts are delayed for 50s [rhel-8.5.0.z]
- Resolves: rhbz#2021499 - Make backtrace less "chatty" (avoid duplicate backtraces) [rhel-8.5.0.z]
- Resolves: rhbz#2013379 - Lookup with fully-qualified name does not work with 'cache_first = True' [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.3" date="1638878400">- Resolves: rhbz#2028828 - pam responder does not call initgroups to refresh the user entry [rhel-8.5.0.z]</changelog>
</package>
<package pkgid="6b9ce96c9166e5fc5be117e29c30c15f2b3fcb05e3dd1415396183d38359d239" name="sssd-debugsource" arch="i686">
  <version epoch="0" ver="2.5.2" rel="2.el8_5.4"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-8" date="1613131200">- Resolves: rhbz#1926622 - Add support to verify authentication indicators in pam_sss_gss
- Resolves: rhbz#1926454 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0.
- Resolves: rhbz#1893159 - Default debug level should report all errors / failures (additional patch)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.0-1" date="1620648000">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1930535 - [abrt] [faf] sssd: monitor_service_shutdown(): /usr/sbin/sssd killed by 11
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1945888 - Inconsistant debug level for connection logging
- Resolves: rhbz#1948657 - pam_sss_gss.so doesn't work with large kerberos tickets
- Resolves: rhbz#1949149 - [RFE] Poor man's backtrace
- Resolves: rhbz#1920500 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR
- Resolves: rhbz#1923964 - [RFE] SSSD Error Msg Improvement: write_krb5info_file failed, authentication might fail.
- Resolves: rhbz#1928648 - SSSD logs improvements: clarify which config option applies to each timeout in the logs
- Resolves: rhbz#1632159 - sssd-kcm starts successfully for non existent socket_path
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm
- Resolves: rhbz#1925505 - [RFE] improve the sssd refresh timers for SUDO queries
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1925561 - sssd-ldap(5) does not report how to disable the SUDO smart queries
- Resolves: rhbz#1925621 - document impact of indices and of scope on performance of LDAP queries
- Resolves: rhbz#1855320 - [RFE] RHEL8 sssd: inheritance of the case_sensitive parameter for subdomains.
- Resolves: rhbz#1925608 - [RFE] make 'random_offset' addon to 'offline_timeout' option configurable
- Resolves: rhbz#1447945 - man page / docs update required: if two certificate matching rules with the same priority match only one is used
- Resolves: rhbz#1703436 - sssd not thread-safe in innetgr()
- Resolves: rhbz#1713143 - SSSD does not translate the 2FA text labels("first factor" / "second factor") on GDM login and screensaver unlock screen
- Resolves: rhbz#1888977 - sss_override: Usage limitations clarification in man page
- Resolves: rhbz#1890177 - Clarify "single_prompt" option in "PROMPTING CONFIGURATION SECTION" section of sssd.conf man page
- Resolves: rhbz#1902280 - fix sss_cache to also reset cached timestamp
- Resolves: rhbz#1935683 - SSSD not detecting subdomain from AD forest (RHEL 8.3)
- Resolves: rhbz#1937919 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7
- Resolves: rhbz#1944665 - No gpo found and ad_gpo_implicit_deny set to True still permits user login
- Resolves: rhbz#1919942 - sss_override does not take precedence over override_homedir directive</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-1" date="1623153600">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1917444 - SSSD Error Msg Improvement: Server resolution failed: [2]: No such file or directory
- Resolves: rhbz#1917511 - SSSD Error Msg Improvement: Failed to resolve server 'server.example.com': Error reading file
- Resolves: rhbz#1917535 - sssd.conf man page: parameter dns_resolver_server_timeout and dns_resolver_op_timeout
- Resolves: rhbz#1940509 - [RFE] Health and Support Analyzer: Link frontend to backend requests
- Resolves: rhbz#1649464 - auto_private_groups not working as expected with posix ipa/ad trust
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1961215 - Invalid sssd-kcm return code if requested operation is not found
- Resolves: rhbz#1837090 - SSSD fails nss_getby_name for IPA user with SID if the user has user private group
- Resolves: rhbz#1879869 - sudo commands incorrectly exports the KRB5CCNAME environment variable
- Resolves: rhbz#1962550 - sss_pac_make_request fails on systems joined to Active Directory.
- Resolves: rhbz#1737489 - [RFE] SSSD should honor default Kerberos settings (keytab name) in /etc/krb5.conf</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-2" date="1624276800">- Resolves: rhbz#1974257 - 'debug_microseconds' config option is broken
- Resolves: rhbz#1936902 - SSSD Error Msg Improvement: Invalid argument
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm (additional patches and rebuild)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-1" date="1626091200">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1693379 - sssd_be and sss_cache too heavy on CPU
- Resolves: rhbz#1909373 - Missing search index for `originalADgidNumber`
- Resolves: rhbz#1954630 - [RFE] Improve debug messages by adding a unique tag for each request the backend is handling
- Resolves: rhbz#1936891 - SSSD Error Msg Improvement: Bad address
- Resolves: rhbz#1364596 - sssd still showing ipa user after removed from last group
- Resolves: rhbz#1979404 - Changes made to /etc/pam.d/sssd-shadowutils are overwritten back to default on sssd-common package upgrade</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2" date="1627905600">- Resolves: rhbz#1975169 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-8]
- Resolves: rhbz#1962042 - [sssd] RHEL 8.5 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.1" date="1634558400">- Resolves: rhbz#2014460 - tps tests fail with cross dependency on sssd debuginfo package: removal of 'sssd-libwbclient-debuginfo' is missing [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.2" date="1638187200">- Resolves: rhbz#2018440 - 2.5.x based SSSD adds more AD domains than it should based on the configuration file (not trusted and from a different forest) [rhel-8.5.0.z]
- Resolves: rhbz#2016923 - autofs lookups for unknown mounts are delayed for 50s [rhel-8.5.0.z]
- Resolves: rhbz#2021499 - Make backtrace less "chatty" (avoid duplicate backtraces) [rhel-8.5.0.z]
- Resolves: rhbz#2013379 - Lookup with fully-qualified name does not work with 'cache_first = True' [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.3" date="1638878400">- Resolves: rhbz#2028828 - pam responder does not call initgroups to refresh the user entry [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.4" date="1642420800">- Resolves: rhbz#2030651 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries [rhel-8.5.0.z]
- Resolves: rhbz#2035285 - AD Domain in the AD Forest Missing after sssd latest update [rhel-8.5.0.z]</changelog>
</package>
<package pkgid="97eced5ad32fed8145e7cfc175a5c8906724464bce0c52cd3a20a197e8c87f39" name="sssd-debugsource" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="2.el8_5.4"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-8" date="1613131200">- Resolves: rhbz#1926622 - Add support to verify authentication indicators in pam_sss_gss
- Resolves: rhbz#1926454 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0.
- Resolves: rhbz#1893159 - Default debug level should report all errors / failures (additional patch)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.0-1" date="1620648000">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1930535 - [abrt] [faf] sssd: monitor_service_shutdown(): /usr/sbin/sssd killed by 11
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1945888 - Inconsistant debug level for connection logging
- Resolves: rhbz#1948657 - pam_sss_gss.so doesn't work with large kerberos tickets
- Resolves: rhbz#1949149 - [RFE] Poor man's backtrace
- Resolves: rhbz#1920500 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR
- Resolves: rhbz#1923964 - [RFE] SSSD Error Msg Improvement: write_krb5info_file failed, authentication might fail.
- Resolves: rhbz#1928648 - SSSD logs improvements: clarify which config option applies to each timeout in the logs
- Resolves: rhbz#1632159 - sssd-kcm starts successfully for non existent socket_path
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm
- Resolves: rhbz#1925505 - [RFE] improve the sssd refresh timers for SUDO queries
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1925561 - sssd-ldap(5) does not report how to disable the SUDO smart queries
- Resolves: rhbz#1925621 - document impact of indices and of scope on performance of LDAP queries
- Resolves: rhbz#1855320 - [RFE] RHEL8 sssd: inheritance of the case_sensitive parameter for subdomains.
- Resolves: rhbz#1925608 - [RFE] make 'random_offset' addon to 'offline_timeout' option configurable
- Resolves: rhbz#1447945 - man page / docs update required: if two certificate matching rules with the same priority match only one is used
- Resolves: rhbz#1703436 - sssd not thread-safe in innetgr()
- Resolves: rhbz#1713143 - SSSD does not translate the 2FA text labels("first factor" / "second factor") on GDM login and screensaver unlock screen
- Resolves: rhbz#1888977 - sss_override: Usage limitations clarification in man page
- Resolves: rhbz#1890177 - Clarify "single_prompt" option in "PROMPTING CONFIGURATION SECTION" section of sssd.conf man page
- Resolves: rhbz#1902280 - fix sss_cache to also reset cached timestamp
- Resolves: rhbz#1935683 - SSSD not detecting subdomain from AD forest (RHEL 8.3)
- Resolves: rhbz#1937919 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7
- Resolves: rhbz#1944665 - No gpo found and ad_gpo_implicit_deny set to True still permits user login
- Resolves: rhbz#1919942 - sss_override does not take precedence over override_homedir directive</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-1" date="1623153600">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1917444 - SSSD Error Msg Improvement: Server resolution failed: [2]: No such file or directory
- Resolves: rhbz#1917511 - SSSD Error Msg Improvement: Failed to resolve server 'server.example.com': Error reading file
- Resolves: rhbz#1917535 - sssd.conf man page: parameter dns_resolver_server_timeout and dns_resolver_op_timeout
- Resolves: rhbz#1940509 - [RFE] Health and Support Analyzer: Link frontend to backend requests
- Resolves: rhbz#1649464 - auto_private_groups not working as expected with posix ipa/ad trust
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1961215 - Invalid sssd-kcm return code if requested operation is not found
- Resolves: rhbz#1837090 - SSSD fails nss_getby_name for IPA user with SID if the user has user private group
- Resolves: rhbz#1879869 - sudo commands incorrectly exports the KRB5CCNAME environment variable
- Resolves: rhbz#1962550 - sss_pac_make_request fails on systems joined to Active Directory.
- Resolves: rhbz#1737489 - [RFE] SSSD should honor default Kerberos settings (keytab name) in /etc/krb5.conf</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-2" date="1624276800">- Resolves: rhbz#1974257 - 'debug_microseconds' config option is broken
- Resolves: rhbz#1936902 - SSSD Error Msg Improvement: Invalid argument
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm (additional patches and rebuild)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-1" date="1626091200">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1693379 - sssd_be and sss_cache too heavy on CPU
- Resolves: rhbz#1909373 - Missing search index for `originalADgidNumber`
- Resolves: rhbz#1954630 - [RFE] Improve debug messages by adding a unique tag for each request the backend is handling
- Resolves: rhbz#1936891 - SSSD Error Msg Improvement: Bad address
- Resolves: rhbz#1364596 - sssd still showing ipa user after removed from last group
- Resolves: rhbz#1979404 - Changes made to /etc/pam.d/sssd-shadowutils are overwritten back to default on sssd-common package upgrade</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2" date="1627905600">- Resolves: rhbz#1975169 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-8]
- Resolves: rhbz#1962042 - [sssd] RHEL 8.5 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.1" date="1634558400">- Resolves: rhbz#2014460 - tps tests fail with cross dependency on sssd debuginfo package: removal of 'sssd-libwbclient-debuginfo' is missing [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.2" date="1638187200">- Resolves: rhbz#2018440 - 2.5.x based SSSD adds more AD domains than it should based on the configuration file (not trusted and from a different forest) [rhel-8.5.0.z]
- Resolves: rhbz#2016923 - autofs lookups for unknown mounts are delayed for 50s [rhel-8.5.0.z]
- Resolves: rhbz#2021499 - Make backtrace less "chatty" (avoid duplicate backtraces) [rhel-8.5.0.z]
- Resolves: rhbz#2013379 - Lookup with fully-qualified name does not work with 'cache_first = True' [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.3" date="1638878400">- Resolves: rhbz#2028828 - pam responder does not call initgroups to refresh the user entry [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.4" date="1642420800">- Resolves: rhbz#2030651 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries [rhel-8.5.0.z]
- Resolves: rhbz#2035285 - AD Domain in the AD Forest Missing after sssd latest update [rhel-8.5.0.z]</changelog>
</package>
<package pkgid="1fd98963b34f992f0f6802f98305adc33ba1c6b621f0c5abc6c27da6cc44831c" name="sssd-ipa-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="2.el8_5.1"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-5" date="1609156800">- Resolves: rhbz#1631410 - Can't login with smartcard with multiple certs having same ID value
- Resolves: rhbz#1884213 - [RFE] add offline_timeout_max config option to control offline interval backoff (additional patches)
- Resolves: rhbz#1893159 - Default debug level should report all errors / failures
- Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-6" date="1610971200">- Resolves: rhbz#1113639 - autofs: return a connection failure until maps have been fetched
- Resolves: rhbz#1915395 - Memory leak in the simple access provider
- Resolves: rhbz#1915319 - SSSD: SBUS: failures during servers startup
- Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication (additional patches)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-7" date="1611662400">- Resolves: rhbz#1920001 - Do not add '%' to group names already prefixed with '%' in IPA sudo rules
- Resolves: rhbz#1918433 - sssd unable to lookup certmap rules
- Resolves: rhbz#1917382 - [abrt] [faf] sssd: dp_client_handshake_timeout(): /usr/libexec/sssd/sssd_be killed by 11</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-8" date="1613131200">- Resolves: rhbz#1926622 - Add support to verify authentication indicators in pam_sss_gss
- Resolves: rhbz#1926454 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0.
- Resolves: rhbz#1893159 - Default debug level should report all errors / failures (additional patch)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.0-1" date="1620648000">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1930535 - [abrt] [faf] sssd: monitor_service_shutdown(): /usr/sbin/sssd killed by 11
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1945888 - Inconsistant debug level for connection logging
- Resolves: rhbz#1948657 - pam_sss_gss.so doesn't work with large kerberos tickets
- Resolves: rhbz#1949149 - [RFE] Poor man's backtrace
- Resolves: rhbz#1920500 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR
- Resolves: rhbz#1923964 - [RFE] SSSD Error Msg Improvement: write_krb5info_file failed, authentication might fail.
- Resolves: rhbz#1928648 - SSSD logs improvements: clarify which config option applies to each timeout in the logs
- Resolves: rhbz#1632159 - sssd-kcm starts successfully for non existent socket_path
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm
- Resolves: rhbz#1925505 - [RFE] improve the sssd refresh timers for SUDO queries
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1925561 - sssd-ldap(5) does not report how to disable the SUDO smart queries
- Resolves: rhbz#1925621 - document impact of indices and of scope on performance of LDAP queries
- Resolves: rhbz#1855320 - [RFE] RHEL8 sssd: inheritance of the case_sensitive parameter for subdomains.
- Resolves: rhbz#1925608 - [RFE] make 'random_offset' addon to 'offline_timeout' option configurable
- Resolves: rhbz#1447945 - man page / docs update required: if two certificate matching rules with the same priority match only one is used
- Resolves: rhbz#1703436 - sssd not thread-safe in innetgr()
- Resolves: rhbz#1713143 - SSSD does not translate the 2FA text labels("first factor" / "second factor") on GDM login and screensaver unlock screen
- Resolves: rhbz#1888977 - sss_override: Usage limitations clarification in man page
- Resolves: rhbz#1890177 - Clarify "single_prompt" option in "PROMPTING CONFIGURATION SECTION" section of sssd.conf man page
- Resolves: rhbz#1902280 - fix sss_cache to also reset cached timestamp
- Resolves: rhbz#1935683 - SSSD not detecting subdomain from AD forest (RHEL 8.3)
- Resolves: rhbz#1937919 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7
- Resolves: rhbz#1944665 - No gpo found and ad_gpo_implicit_deny set to True still permits user login
- Resolves: rhbz#1919942 - sss_override does not take precedence over override_homedir directive</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-1" date="1623153600">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1917444 - SSSD Error Msg Improvement: Server resolution failed: [2]: No such file or directory
- Resolves: rhbz#1917511 - SSSD Error Msg Improvement: Failed to resolve server 'server.example.com': Error reading file
- Resolves: rhbz#1917535 - sssd.conf man page: parameter dns_resolver_server_timeout and dns_resolver_op_timeout
- Resolves: rhbz#1940509 - [RFE] Health and Support Analyzer: Link frontend to backend requests
- Resolves: rhbz#1649464 - auto_private_groups not working as expected with posix ipa/ad trust
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1961215 - Invalid sssd-kcm return code if requested operation is not found
- Resolves: rhbz#1837090 - SSSD fails nss_getby_name for IPA user with SID if the user has user private group
- Resolves: rhbz#1879869 - sudo commands incorrectly exports the KRB5CCNAME environment variable
- Resolves: rhbz#1962550 - sss_pac_make_request fails on systems joined to Active Directory.
- Resolves: rhbz#1737489 - [RFE] SSSD should honor default Kerberos settings (keytab name) in /etc/krb5.conf</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-2" date="1624276800">- Resolves: rhbz#1974257 - 'debug_microseconds' config option is broken
- Resolves: rhbz#1936902 - SSSD Error Msg Improvement: Invalid argument
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm (additional patches and rebuild)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-1" date="1626091200">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1693379 - sssd_be and sss_cache too heavy on CPU
- Resolves: rhbz#1909373 - Missing search index for `originalADgidNumber`
- Resolves: rhbz#1954630 - [RFE] Improve debug messages by adding a unique tag for each request the backend is handling
- Resolves: rhbz#1936891 - SSSD Error Msg Improvement: Bad address
- Resolves: rhbz#1364596 - sssd still showing ipa user after removed from last group
- Resolves: rhbz#1979404 - Changes made to /etc/pam.d/sssd-shadowutils are overwritten back to default on sssd-common package upgrade</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2" date="1627905600">- Resolves: rhbz#1975169 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-8]
- Resolves: rhbz#1962042 - [sssd] RHEL 8.5 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.1" date="1634558400">- Resolves: rhbz#2014460 - tps tests fail with cross dependency on sssd debuginfo package: removal of 'sssd-libwbclient-debuginfo' is missing [rhel-8.5.0.z]</changelog>
</package>
<package pkgid="f4186c9c80efb357e8deda3cbad61a78a3f634aa2a8e29dff4e7b3d52642a839" name="sssd-ipa-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="2.el8_5.3"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-7" date="1611662400">- Resolves: rhbz#1920001 - Do not add '%' to group names already prefixed with '%' in IPA sudo rules
- Resolves: rhbz#1918433 - sssd unable to lookup certmap rules
- Resolves: rhbz#1917382 - [abrt] [faf] sssd: dp_client_handshake_timeout(): /usr/libexec/sssd/sssd_be killed by 11</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-8" date="1613131200">- Resolves: rhbz#1926622 - Add support to verify authentication indicators in pam_sss_gss
- Resolves: rhbz#1926454 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0.
- Resolves: rhbz#1893159 - Default debug level should report all errors / failures (additional patch)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.0-1" date="1620648000">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1930535 - [abrt] [faf] sssd: monitor_service_shutdown(): /usr/sbin/sssd killed by 11
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1945888 - Inconsistant debug level for connection logging
- Resolves: rhbz#1948657 - pam_sss_gss.so doesn't work with large kerberos tickets
- Resolves: rhbz#1949149 - [RFE] Poor man's backtrace
- Resolves: rhbz#1920500 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR
- Resolves: rhbz#1923964 - [RFE] SSSD Error Msg Improvement: write_krb5info_file failed, authentication might fail.
- Resolves: rhbz#1928648 - SSSD logs improvements: clarify which config option applies to each timeout in the logs
- Resolves: rhbz#1632159 - sssd-kcm starts successfully for non existent socket_path
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm
- Resolves: rhbz#1925505 - [RFE] improve the sssd refresh timers for SUDO queries
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1925561 - sssd-ldap(5) does not report how to disable the SUDO smart queries
- Resolves: rhbz#1925621 - document impact of indices and of scope on performance of LDAP queries
- Resolves: rhbz#1855320 - [RFE] RHEL8 sssd: inheritance of the case_sensitive parameter for subdomains.
- Resolves: rhbz#1925608 - [RFE] make 'random_offset' addon to 'offline_timeout' option configurable
- Resolves: rhbz#1447945 - man page / docs update required: if two certificate matching rules with the same priority match only one is used
- Resolves: rhbz#1703436 - sssd not thread-safe in innetgr()
- Resolves: rhbz#1713143 - SSSD does not translate the 2FA text labels("first factor" / "second factor") on GDM login and screensaver unlock screen
- Resolves: rhbz#1888977 - sss_override: Usage limitations clarification in man page
- Resolves: rhbz#1890177 - Clarify "single_prompt" option in "PROMPTING CONFIGURATION SECTION" section of sssd.conf man page
- Resolves: rhbz#1902280 - fix sss_cache to also reset cached timestamp
- Resolves: rhbz#1935683 - SSSD not detecting subdomain from AD forest (RHEL 8.3)
- Resolves: rhbz#1937919 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7
- Resolves: rhbz#1944665 - No gpo found and ad_gpo_implicit_deny set to True still permits user login
- Resolves: rhbz#1919942 - sss_override does not take precedence over override_homedir directive</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-1" date="1623153600">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1917444 - SSSD Error Msg Improvement: Server resolution failed: [2]: No such file or directory
- Resolves: rhbz#1917511 - SSSD Error Msg Improvement: Failed to resolve server 'server.example.com': Error reading file
- Resolves: rhbz#1917535 - sssd.conf man page: parameter dns_resolver_server_timeout and dns_resolver_op_timeout
- Resolves: rhbz#1940509 - [RFE] Health and Support Analyzer: Link frontend to backend requests
- Resolves: rhbz#1649464 - auto_private_groups not working as expected with posix ipa/ad trust
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1961215 - Invalid sssd-kcm return code if requested operation is not found
- Resolves: rhbz#1837090 - SSSD fails nss_getby_name for IPA user with SID if the user has user private group
- Resolves: rhbz#1879869 - sudo commands incorrectly exports the KRB5CCNAME environment variable
- Resolves: rhbz#1962550 - sss_pac_make_request fails on systems joined to Active Directory.
- Resolves: rhbz#1737489 - [RFE] SSSD should honor default Kerberos settings (keytab name) in /etc/krb5.conf</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-2" date="1624276800">- Resolves: rhbz#1974257 - 'debug_microseconds' config option is broken
- Resolves: rhbz#1936902 - SSSD Error Msg Improvement: Invalid argument
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm (additional patches and rebuild)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-1" date="1626091200">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1693379 - sssd_be and sss_cache too heavy on CPU
- Resolves: rhbz#1909373 - Missing search index for `originalADgidNumber`
- Resolves: rhbz#1954630 - [RFE] Improve debug messages by adding a unique tag for each request the backend is handling
- Resolves: rhbz#1936891 - SSSD Error Msg Improvement: Bad address
- Resolves: rhbz#1364596 - sssd still showing ipa user after removed from last group
- Resolves: rhbz#1979404 - Changes made to /etc/pam.d/sssd-shadowutils are overwritten back to default on sssd-common package upgrade</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2" date="1627905600">- Resolves: rhbz#1975169 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-8]
- Resolves: rhbz#1962042 - [sssd] RHEL 8.5 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.1" date="1634558400">- Resolves: rhbz#2014460 - tps tests fail with cross dependency on sssd debuginfo package: removal of 'sssd-libwbclient-debuginfo' is missing [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.2" date="1638187200">- Resolves: rhbz#2018440 - 2.5.x based SSSD adds more AD domains than it should based on the configuration file (not trusted and from a different forest) [rhel-8.5.0.z]
- Resolves: rhbz#2016923 - autofs lookups for unknown mounts are delayed for 50s [rhel-8.5.0.z]
- Resolves: rhbz#2021499 - Make backtrace less "chatty" (avoid duplicate backtraces) [rhel-8.5.0.z]
- Resolves: rhbz#2013379 - Lookup with fully-qualified name does not work with 'cache_first = True' [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.3" date="1638878400">- Resolves: rhbz#2028828 - pam responder does not call initgroups to refresh the user entry [rhel-8.5.0.z]</changelog>
</package>
<package pkgid="d58506d3cc879295f4d9f582d93ce105b730cb9ae1483c4a31ef38c4b2e4819f" name="sssd-ipa-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="2.el8_5.4"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-8" date="1613131200">- Resolves: rhbz#1926622 - Add support to verify authentication indicators in pam_sss_gss
- Resolves: rhbz#1926454 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0.
- Resolves: rhbz#1893159 - Default debug level should report all errors / failures (additional patch)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.0-1" date="1620648000">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1930535 - [abrt] [faf] sssd: monitor_service_shutdown(): /usr/sbin/sssd killed by 11
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1945888 - Inconsistant debug level for connection logging
- Resolves: rhbz#1948657 - pam_sss_gss.so doesn't work with large kerberos tickets
- Resolves: rhbz#1949149 - [RFE] Poor man's backtrace
- Resolves: rhbz#1920500 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR
- Resolves: rhbz#1923964 - [RFE] SSSD Error Msg Improvement: write_krb5info_file failed, authentication might fail.
- Resolves: rhbz#1928648 - SSSD logs improvements: clarify which config option applies to each timeout in the logs
- Resolves: rhbz#1632159 - sssd-kcm starts successfully for non existent socket_path
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm
- Resolves: rhbz#1925505 - [RFE] improve the sssd refresh timers for SUDO queries
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1925561 - sssd-ldap(5) does not report how to disable the SUDO smart queries
- Resolves: rhbz#1925621 - document impact of indices and of scope on performance of LDAP queries
- Resolves: rhbz#1855320 - [RFE] RHEL8 sssd: inheritance of the case_sensitive parameter for subdomains.
- Resolves: rhbz#1925608 - [RFE] make 'random_offset' addon to 'offline_timeout' option configurable
- Resolves: rhbz#1447945 - man page / docs update required: if two certificate matching rules with the same priority match only one is used
- Resolves: rhbz#1703436 - sssd not thread-safe in innetgr()
- Resolves: rhbz#1713143 - SSSD does not translate the 2FA text labels("first factor" / "second factor") on GDM login and screensaver unlock screen
- Resolves: rhbz#1888977 - sss_override: Usage limitations clarification in man page
- Resolves: rhbz#1890177 - Clarify "single_prompt" option in "PROMPTING CONFIGURATION SECTION" section of sssd.conf man page
- Resolves: rhbz#1902280 - fix sss_cache to also reset cached timestamp
- Resolves: rhbz#1935683 - SSSD not detecting subdomain from AD forest (RHEL 8.3)
- Resolves: rhbz#1937919 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7
- Resolves: rhbz#1944665 - No gpo found and ad_gpo_implicit_deny set to True still permits user login
- Resolves: rhbz#1919942 - sss_override does not take precedence over override_homedir directive</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-1" date="1623153600">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1917444 - SSSD Error Msg Improvement: Server resolution failed: [2]: No such file or directory
- Resolves: rhbz#1917511 - SSSD Error Msg Improvement: Failed to resolve server 'server.example.com': Error reading file
- Resolves: rhbz#1917535 - sssd.conf man page: parameter dns_resolver_server_timeout and dns_resolver_op_timeout
- Resolves: rhbz#1940509 - [RFE] Health and Support Analyzer: Link frontend to backend requests
- Resolves: rhbz#1649464 - auto_private_groups not working as expected with posix ipa/ad trust
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1961215 - Invalid sssd-kcm return code if requested operation is not found
- Resolves: rhbz#1837090 - SSSD fails nss_getby_name for IPA user with SID if the user has user private group
- Resolves: rhbz#1879869 - sudo commands incorrectly exports the KRB5CCNAME environment variable
- Resolves: rhbz#1962550 - sss_pac_make_request fails on systems joined to Active Directory.
- Resolves: rhbz#1737489 - [RFE] SSSD should honor default Kerberos settings (keytab name) in /etc/krb5.conf</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-2" date="1624276800">- Resolves: rhbz#1974257 - 'debug_microseconds' config option is broken
- Resolves: rhbz#1936902 - SSSD Error Msg Improvement: Invalid argument
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm (additional patches and rebuild)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-1" date="1626091200">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1693379 - sssd_be and sss_cache too heavy on CPU
- Resolves: rhbz#1909373 - Missing search index for `originalADgidNumber`
- Resolves: rhbz#1954630 - [RFE] Improve debug messages by adding a unique tag for each request the backend is handling
- Resolves: rhbz#1936891 - SSSD Error Msg Improvement: Bad address
- Resolves: rhbz#1364596 - sssd still showing ipa user after removed from last group
- Resolves: rhbz#1979404 - Changes made to /etc/pam.d/sssd-shadowutils are overwritten back to default on sssd-common package upgrade</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2" date="1627905600">- Resolves: rhbz#1975169 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-8]
- Resolves: rhbz#1962042 - [sssd] RHEL 8.5 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.1" date="1634558400">- Resolves: rhbz#2014460 - tps tests fail with cross dependency on sssd debuginfo package: removal of 'sssd-libwbclient-debuginfo' is missing [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.2" date="1638187200">- Resolves: rhbz#2018440 - 2.5.x based SSSD adds more AD domains than it should based on the configuration file (not trusted and from a different forest) [rhel-8.5.0.z]
- Resolves: rhbz#2016923 - autofs lookups for unknown mounts are delayed for 50s [rhel-8.5.0.z]
- Resolves: rhbz#2021499 - Make backtrace less "chatty" (avoid duplicate backtraces) [rhel-8.5.0.z]
- Resolves: rhbz#2013379 - Lookup with fully-qualified name does not work with 'cache_first = True' [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.3" date="1638878400">- Resolves: rhbz#2028828 - pam responder does not call initgroups to refresh the user entry [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.4" date="1642420800">- Resolves: rhbz#2030651 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries [rhel-8.5.0.z]
- Resolves: rhbz#2035285 - AD Domain in the AD Forest Missing after sssd latest update [rhel-8.5.0.z]</changelog>
</package>
<package pkgid="7c1a46cb831993aa1c8f31f94ddcc11c78c05a2e2c34b466cc1921a7fa2cc627" name="sssd-kcm-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="2.el8_5.1"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-5" date="1609156800">- Resolves: rhbz#1631410 - Can't login with smartcard with multiple certs having same ID value
- Resolves: rhbz#1884213 - [RFE] add offline_timeout_max config option to control offline interval backoff (additional patches)
- Resolves: rhbz#1893159 - Default debug level should report all errors / failures
- Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-6" date="1610971200">- Resolves: rhbz#1113639 - autofs: return a connection failure until maps have been fetched
- Resolves: rhbz#1915395 - Memory leak in the simple access provider
- Resolves: rhbz#1915319 - SSSD: SBUS: failures during servers startup
- Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication (additional patches)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-7" date="1611662400">- Resolves: rhbz#1920001 - Do not add '%' to group names already prefixed with '%' in IPA sudo rules
- Resolves: rhbz#1918433 - sssd unable to lookup certmap rules
- Resolves: rhbz#1917382 - [abrt] [faf] sssd: dp_client_handshake_timeout(): /usr/libexec/sssd/sssd_be killed by 11</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-8" date="1613131200">- Resolves: rhbz#1926622 - Add support to verify authentication indicators in pam_sss_gss
- Resolves: rhbz#1926454 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0.
- Resolves: rhbz#1893159 - Default debug level should report all errors / failures (additional patch)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.0-1" date="1620648000">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1930535 - [abrt] [faf] sssd: monitor_service_shutdown(): /usr/sbin/sssd killed by 11
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1945888 - Inconsistant debug level for connection logging
- Resolves: rhbz#1948657 - pam_sss_gss.so doesn't work with large kerberos tickets
- Resolves: rhbz#1949149 - [RFE] Poor man's backtrace
- Resolves: rhbz#1920500 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR
- Resolves: rhbz#1923964 - [RFE] SSSD Error Msg Improvement: write_krb5info_file failed, authentication might fail.
- Resolves: rhbz#1928648 - SSSD logs improvements: clarify which config option applies to each timeout in the logs
- Resolves: rhbz#1632159 - sssd-kcm starts successfully for non existent socket_path
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm
- Resolves: rhbz#1925505 - [RFE] improve the sssd refresh timers for SUDO queries
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1925561 - sssd-ldap(5) does not report how to disable the SUDO smart queries
- Resolves: rhbz#1925621 - document impact of indices and of scope on performance of LDAP queries
- Resolves: rhbz#1855320 - [RFE] RHEL8 sssd: inheritance of the case_sensitive parameter for subdomains.
- Resolves: rhbz#1925608 - [RFE] make 'random_offset' addon to 'offline_timeout' option configurable
- Resolves: rhbz#1447945 - man page / docs update required: if two certificate matching rules with the same priority match only one is used
- Resolves: rhbz#1703436 - sssd not thread-safe in innetgr()
- Resolves: rhbz#1713143 - SSSD does not translate the 2FA text labels("first factor" / "second factor") on GDM login and screensaver unlock screen
- Resolves: rhbz#1888977 - sss_override: Usage limitations clarification in man page
- Resolves: rhbz#1890177 - Clarify "single_prompt" option in "PROMPTING CONFIGURATION SECTION" section of sssd.conf man page
- Resolves: rhbz#1902280 - fix sss_cache to also reset cached timestamp
- Resolves: rhbz#1935683 - SSSD not detecting subdomain from AD forest (RHEL 8.3)
- Resolves: rhbz#1937919 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7
- Resolves: rhbz#1944665 - No gpo found and ad_gpo_implicit_deny set to True still permits user login
- Resolves: rhbz#1919942 - sss_override does not take precedence over override_homedir directive</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-1" date="1623153600">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1917444 - SSSD Error Msg Improvement: Server resolution failed: [2]: No such file or directory
- Resolves: rhbz#1917511 - SSSD Error Msg Improvement: Failed to resolve server 'server.example.com': Error reading file
- Resolves: rhbz#1917535 - sssd.conf man page: parameter dns_resolver_server_timeout and dns_resolver_op_timeout
- Resolves: rhbz#1940509 - [RFE] Health and Support Analyzer: Link frontend to backend requests
- Resolves: rhbz#1649464 - auto_private_groups not working as expected with posix ipa/ad trust
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1961215 - Invalid sssd-kcm return code if requested operation is not found
- Resolves: rhbz#1837090 - SSSD fails nss_getby_name for IPA user with SID if the user has user private group
- Resolves: rhbz#1879869 - sudo commands incorrectly exports the KRB5CCNAME environment variable
- Resolves: rhbz#1962550 - sss_pac_make_request fails on systems joined to Active Directory.
- Resolves: rhbz#1737489 - [RFE] SSSD should honor default Kerberos settings (keytab name) in /etc/krb5.conf</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-2" date="1624276800">- Resolves: rhbz#1974257 - 'debug_microseconds' config option is broken
- Resolves: rhbz#1936902 - SSSD Error Msg Improvement: Invalid argument
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm (additional patches and rebuild)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-1" date="1626091200">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1693379 - sssd_be and sss_cache too heavy on CPU
- Resolves: rhbz#1909373 - Missing search index for `originalADgidNumber`
- Resolves: rhbz#1954630 - [RFE] Improve debug messages by adding a unique tag for each request the backend is handling
- Resolves: rhbz#1936891 - SSSD Error Msg Improvement: Bad address
- Resolves: rhbz#1364596 - sssd still showing ipa user after removed from last group
- Resolves: rhbz#1979404 - Changes made to /etc/pam.d/sssd-shadowutils are overwritten back to default on sssd-common package upgrade</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2" date="1627905600">- Resolves: rhbz#1975169 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-8]
- Resolves: rhbz#1962042 - [sssd] RHEL 8.5 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.1" date="1634558400">- Resolves: rhbz#2014460 - tps tests fail with cross dependency on sssd debuginfo package: removal of 'sssd-libwbclient-debuginfo' is missing [rhel-8.5.0.z]</changelog>
</package>
<package pkgid="92e0479de3fd234460251891ce7a2eb9e9ffad5e21ef51cb991d908e44139d3f" name="sssd-kcm-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="2.el8_5.3"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-7" date="1611662400">- Resolves: rhbz#1920001 - Do not add '%' to group names already prefixed with '%' in IPA sudo rules
- Resolves: rhbz#1918433 - sssd unable to lookup certmap rules
- Resolves: rhbz#1917382 - [abrt] [faf] sssd: dp_client_handshake_timeout(): /usr/libexec/sssd/sssd_be killed by 11</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-8" date="1613131200">- Resolves: rhbz#1926622 - Add support to verify authentication indicators in pam_sss_gss
- Resolves: rhbz#1926454 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0.
- Resolves: rhbz#1893159 - Default debug level should report all errors / failures (additional patch)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.0-1" date="1620648000">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1930535 - [abrt] [faf] sssd: monitor_service_shutdown(): /usr/sbin/sssd killed by 11
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1945888 - Inconsistant debug level for connection logging
- Resolves: rhbz#1948657 - pam_sss_gss.so doesn't work with large kerberos tickets
- Resolves: rhbz#1949149 - [RFE] Poor man's backtrace
- Resolves: rhbz#1920500 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR
- Resolves: rhbz#1923964 - [RFE] SSSD Error Msg Improvement: write_krb5info_file failed, authentication might fail.
- Resolves: rhbz#1928648 - SSSD logs improvements: clarify which config option applies to each timeout in the logs
- Resolves: rhbz#1632159 - sssd-kcm starts successfully for non existent socket_path
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm
- Resolves: rhbz#1925505 - [RFE] improve the sssd refresh timers for SUDO queries
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1925561 - sssd-ldap(5) does not report how to disable the SUDO smart queries
- Resolves: rhbz#1925621 - document impact of indices and of scope on performance of LDAP queries
- Resolves: rhbz#1855320 - [RFE] RHEL8 sssd: inheritance of the case_sensitive parameter for subdomains.
- Resolves: rhbz#1925608 - [RFE] make 'random_offset' addon to 'offline_timeout' option configurable
- Resolves: rhbz#1447945 - man page / docs update required: if two certificate matching rules with the same priority match only one is used
- Resolves: rhbz#1703436 - sssd not thread-safe in innetgr()
- Resolves: rhbz#1713143 - SSSD does not translate the 2FA text labels("first factor" / "second factor") on GDM login and screensaver unlock screen
- Resolves: rhbz#1888977 - sss_override: Usage limitations clarification in man page
- Resolves: rhbz#1890177 - Clarify "single_prompt" option in "PROMPTING CONFIGURATION SECTION" section of sssd.conf man page
- Resolves: rhbz#1902280 - fix sss_cache to also reset cached timestamp
- Resolves: rhbz#1935683 - SSSD not detecting subdomain from AD forest (RHEL 8.3)
- Resolves: rhbz#1937919 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7
- Resolves: rhbz#1944665 - No gpo found and ad_gpo_implicit_deny set to True still permits user login
- Resolves: rhbz#1919942 - sss_override does not take precedence over override_homedir directive</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-1" date="1623153600">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1917444 - SSSD Error Msg Improvement: Server resolution failed: [2]: No such file or directory
- Resolves: rhbz#1917511 - SSSD Error Msg Improvement: Failed to resolve server 'server.example.com': Error reading file
- Resolves: rhbz#1917535 - sssd.conf man page: parameter dns_resolver_server_timeout and dns_resolver_op_timeout
- Resolves: rhbz#1940509 - [RFE] Health and Support Analyzer: Link frontend to backend requests
- Resolves: rhbz#1649464 - auto_private_groups not working as expected with posix ipa/ad trust
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1961215 - Invalid sssd-kcm return code if requested operation is not found
- Resolves: rhbz#1837090 - SSSD fails nss_getby_name for IPA user with SID if the user has user private group
- Resolves: rhbz#1879869 - sudo commands incorrectly exports the KRB5CCNAME environment variable
- Resolves: rhbz#1962550 - sss_pac_make_request fails on systems joined to Active Directory.
- Resolves: rhbz#1737489 - [RFE] SSSD should honor default Kerberos settings (keytab name) in /etc/krb5.conf</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-2" date="1624276800">- Resolves: rhbz#1974257 - 'debug_microseconds' config option is broken
- Resolves: rhbz#1936902 - SSSD Error Msg Improvement: Invalid argument
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm (additional patches and rebuild)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-1" date="1626091200">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1693379 - sssd_be and sss_cache too heavy on CPU
- Resolves: rhbz#1909373 - Missing search index for `originalADgidNumber`
- Resolves: rhbz#1954630 - [RFE] Improve debug messages by adding a unique tag for each request the backend is handling
- Resolves: rhbz#1936891 - SSSD Error Msg Improvement: Bad address
- Resolves: rhbz#1364596 - sssd still showing ipa user after removed from last group
- Resolves: rhbz#1979404 - Changes made to /etc/pam.d/sssd-shadowutils are overwritten back to default on sssd-common package upgrade</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2" date="1627905600">- Resolves: rhbz#1975169 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-8]
- Resolves: rhbz#1962042 - [sssd] RHEL 8.5 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.1" date="1634558400">- Resolves: rhbz#2014460 - tps tests fail with cross dependency on sssd debuginfo package: removal of 'sssd-libwbclient-debuginfo' is missing [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.2" date="1638187200">- Resolves: rhbz#2018440 - 2.5.x based SSSD adds more AD domains than it should based on the configuration file (not trusted and from a different forest) [rhel-8.5.0.z]
- Resolves: rhbz#2016923 - autofs lookups for unknown mounts are delayed for 50s [rhel-8.5.0.z]
- Resolves: rhbz#2021499 - Make backtrace less "chatty" (avoid duplicate backtraces) [rhel-8.5.0.z]
- Resolves: rhbz#2013379 - Lookup with fully-qualified name does not work with 'cache_first = True' [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.3" date="1638878400">- Resolves: rhbz#2028828 - pam responder does not call initgroups to refresh the user entry [rhel-8.5.0.z]</changelog>
</package>
<package pkgid="82cbe8493d69fe18961ab202285f0747947ede3ea98d20c0189eb98df4d57078" name="sssd-kcm-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="2.el8_5.4"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-8" date="1613131200">- Resolves: rhbz#1926622 - Add support to verify authentication indicators in pam_sss_gss
- Resolves: rhbz#1926454 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0.
- Resolves: rhbz#1893159 - Default debug level should report all errors / failures (additional patch)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.0-1" date="1620648000">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1930535 - [abrt] [faf] sssd: monitor_service_shutdown(): /usr/sbin/sssd killed by 11
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1945888 - Inconsistant debug level for connection logging
- Resolves: rhbz#1948657 - pam_sss_gss.so doesn't work with large kerberos tickets
- Resolves: rhbz#1949149 - [RFE] Poor man's backtrace
- Resolves: rhbz#1920500 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR
- Resolves: rhbz#1923964 - [RFE] SSSD Error Msg Improvement: write_krb5info_file failed, authentication might fail.
- Resolves: rhbz#1928648 - SSSD logs improvements: clarify which config option applies to each timeout in the logs
- Resolves: rhbz#1632159 - sssd-kcm starts successfully for non existent socket_path
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm
- Resolves: rhbz#1925505 - [RFE] improve the sssd refresh timers for SUDO queries
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1925561 - sssd-ldap(5) does not report how to disable the SUDO smart queries
- Resolves: rhbz#1925621 - document impact of indices and of scope on performance of LDAP queries
- Resolves: rhbz#1855320 - [RFE] RHEL8 sssd: inheritance of the case_sensitive parameter for subdomains.
- Resolves: rhbz#1925608 - [RFE] make 'random_offset' addon to 'offline_timeout' option configurable
- Resolves: rhbz#1447945 - man page / docs update required: if two certificate matching rules with the same priority match only one is used
- Resolves: rhbz#1703436 - sssd not thread-safe in innetgr()
- Resolves: rhbz#1713143 - SSSD does not translate the 2FA text labels("first factor" / "second factor") on GDM login and screensaver unlock screen
- Resolves: rhbz#1888977 - sss_override: Usage limitations clarification in man page
- Resolves: rhbz#1890177 - Clarify "single_prompt" option in "PROMPTING CONFIGURATION SECTION" section of sssd.conf man page
- Resolves: rhbz#1902280 - fix sss_cache to also reset cached timestamp
- Resolves: rhbz#1935683 - SSSD not detecting subdomain from AD forest (RHEL 8.3)
- Resolves: rhbz#1937919 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7
- Resolves: rhbz#1944665 - No gpo found and ad_gpo_implicit_deny set to True still permits user login
- Resolves: rhbz#1919942 - sss_override does not take precedence over override_homedir directive</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-1" date="1623153600">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1917444 - SSSD Error Msg Improvement: Server resolution failed: [2]: No such file or directory
- Resolves: rhbz#1917511 - SSSD Error Msg Improvement: Failed to resolve server 'server.example.com': Error reading file
- Resolves: rhbz#1917535 - sssd.conf man page: parameter dns_resolver_server_timeout and dns_resolver_op_timeout
- Resolves: rhbz#1940509 - [RFE] Health and Support Analyzer: Link frontend to backend requests
- Resolves: rhbz#1649464 - auto_private_groups not working as expected with posix ipa/ad trust
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1961215 - Invalid sssd-kcm return code if requested operation is not found
- Resolves: rhbz#1837090 - SSSD fails nss_getby_name for IPA user with SID if the user has user private group
- Resolves: rhbz#1879869 - sudo commands incorrectly exports the KRB5CCNAME environment variable
- Resolves: rhbz#1962550 - sss_pac_make_request fails on systems joined to Active Directory.
- Resolves: rhbz#1737489 - [RFE] SSSD should honor default Kerberos settings (keytab name) in /etc/krb5.conf</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-2" date="1624276800">- Resolves: rhbz#1974257 - 'debug_microseconds' config option is broken
- Resolves: rhbz#1936902 - SSSD Error Msg Improvement: Invalid argument
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm (additional patches and rebuild)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-1" date="1626091200">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1693379 - sssd_be and sss_cache too heavy on CPU
- Resolves: rhbz#1909373 - Missing search index for `originalADgidNumber`
- Resolves: rhbz#1954630 - [RFE] Improve debug messages by adding a unique tag for each request the backend is handling
- Resolves: rhbz#1936891 - SSSD Error Msg Improvement: Bad address
- Resolves: rhbz#1364596 - sssd still showing ipa user after removed from last group
- Resolves: rhbz#1979404 - Changes made to /etc/pam.d/sssd-shadowutils are overwritten back to default on sssd-common package upgrade</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2" date="1627905600">- Resolves: rhbz#1975169 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-8]
- Resolves: rhbz#1962042 - [sssd] RHEL 8.5 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.1" date="1634558400">- Resolves: rhbz#2014460 - tps tests fail with cross dependency on sssd debuginfo package: removal of 'sssd-libwbclient-debuginfo' is missing [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.2" date="1638187200">- Resolves: rhbz#2018440 - 2.5.x based SSSD adds more AD domains than it should based on the configuration file (not trusted and from a different forest) [rhel-8.5.0.z]
- Resolves: rhbz#2016923 - autofs lookups for unknown mounts are delayed for 50s [rhel-8.5.0.z]
- Resolves: rhbz#2021499 - Make backtrace less "chatty" (avoid duplicate backtraces) [rhel-8.5.0.z]
- Resolves: rhbz#2013379 - Lookup with fully-qualified name does not work with 'cache_first = True' [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.3" date="1638878400">- Resolves: rhbz#2028828 - pam responder does not call initgroups to refresh the user entry [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.4" date="1642420800">- Resolves: rhbz#2030651 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries [rhel-8.5.0.z]
- Resolves: rhbz#2035285 - AD Domain in the AD Forest Missing after sssd latest update [rhel-8.5.0.z]</changelog>
</package>
<package pkgid="77604405701c3e025750b1a59ff09d853b423d3978ece470733e335a771e27d9" name="sssd-krb5-common-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="2.el8_5.1"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-5" date="1609156800">- Resolves: rhbz#1631410 - Can't login with smartcard with multiple certs having same ID value
- Resolves: rhbz#1884213 - [RFE] add offline_timeout_max config option to control offline interval backoff (additional patches)
- Resolves: rhbz#1893159 - Default debug level should report all errors / failures
- Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-6" date="1610971200">- Resolves: rhbz#1113639 - autofs: return a connection failure until maps have been fetched
- Resolves: rhbz#1915395 - Memory leak in the simple access provider
- Resolves: rhbz#1915319 - SSSD: SBUS: failures during servers startup
- Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication (additional patches)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-7" date="1611662400">- Resolves: rhbz#1920001 - Do not add '%' to group names already prefixed with '%' in IPA sudo rules
- Resolves: rhbz#1918433 - sssd unable to lookup certmap rules
- Resolves: rhbz#1917382 - [abrt] [faf] sssd: dp_client_handshake_timeout(): /usr/libexec/sssd/sssd_be killed by 11</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-8" date="1613131200">- Resolves: rhbz#1926622 - Add support to verify authentication indicators in pam_sss_gss
- Resolves: rhbz#1926454 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0.
- Resolves: rhbz#1893159 - Default debug level should report all errors / failures (additional patch)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.0-1" date="1620648000">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1930535 - [abrt] [faf] sssd: monitor_service_shutdown(): /usr/sbin/sssd killed by 11
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1945888 - Inconsistant debug level for connection logging
- Resolves: rhbz#1948657 - pam_sss_gss.so doesn't work with large kerberos tickets
- Resolves: rhbz#1949149 - [RFE] Poor man's backtrace
- Resolves: rhbz#1920500 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR
- Resolves: rhbz#1923964 - [RFE] SSSD Error Msg Improvement: write_krb5info_file failed, authentication might fail.
- Resolves: rhbz#1928648 - SSSD logs improvements: clarify which config option applies to each timeout in the logs
- Resolves: rhbz#1632159 - sssd-kcm starts successfully for non existent socket_path
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm
- Resolves: rhbz#1925505 - [RFE] improve the sssd refresh timers for SUDO queries
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1925561 - sssd-ldap(5) does not report how to disable the SUDO smart queries
- Resolves: rhbz#1925621 - document impact of indices and of scope on performance of LDAP queries
- Resolves: rhbz#1855320 - [RFE] RHEL8 sssd: inheritance of the case_sensitive parameter for subdomains.
- Resolves: rhbz#1925608 - [RFE] make 'random_offset' addon to 'offline_timeout' option configurable
- Resolves: rhbz#1447945 - man page / docs update required: if two certificate matching rules with the same priority match only one is used
- Resolves: rhbz#1703436 - sssd not thread-safe in innetgr()
- Resolves: rhbz#1713143 - SSSD does not translate the 2FA text labels("first factor" / "second factor") on GDM login and screensaver unlock screen
- Resolves: rhbz#1888977 - sss_override: Usage limitations clarification in man page
- Resolves: rhbz#1890177 - Clarify "single_prompt" option in "PROMPTING CONFIGURATION SECTION" section of sssd.conf man page
- Resolves: rhbz#1902280 - fix sss_cache to also reset cached timestamp
- Resolves: rhbz#1935683 - SSSD not detecting subdomain from AD forest (RHEL 8.3)
- Resolves: rhbz#1937919 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7
- Resolves: rhbz#1944665 - No gpo found and ad_gpo_implicit_deny set to True still permits user login
- Resolves: rhbz#1919942 - sss_override does not take precedence over override_homedir directive</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-1" date="1623153600">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1917444 - SSSD Error Msg Improvement: Server resolution failed: [2]: No such file or directory
- Resolves: rhbz#1917511 - SSSD Error Msg Improvement: Failed to resolve server 'server.example.com': Error reading file
- Resolves: rhbz#1917535 - sssd.conf man page: parameter dns_resolver_server_timeout and dns_resolver_op_timeout
- Resolves: rhbz#1940509 - [RFE] Health and Support Analyzer: Link frontend to backend requests
- Resolves: rhbz#1649464 - auto_private_groups not working as expected with posix ipa/ad trust
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1961215 - Invalid sssd-kcm return code if requested operation is not found
- Resolves: rhbz#1837090 - SSSD fails nss_getby_name for IPA user with SID if the user has user private group
- Resolves: rhbz#1879869 - sudo commands incorrectly exports the KRB5CCNAME environment variable
- Resolves: rhbz#1962550 - sss_pac_make_request fails on systems joined to Active Directory.
- Resolves: rhbz#1737489 - [RFE] SSSD should honor default Kerberos settings (keytab name) in /etc/krb5.conf</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-2" date="1624276800">- Resolves: rhbz#1974257 - 'debug_microseconds' config option is broken
- Resolves: rhbz#1936902 - SSSD Error Msg Improvement: Invalid argument
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm (additional patches and rebuild)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-1" date="1626091200">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1693379 - sssd_be and sss_cache too heavy on CPU
- Resolves: rhbz#1909373 - Missing search index for `originalADgidNumber`
- Resolves: rhbz#1954630 - [RFE] Improve debug messages by adding a unique tag for each request the backend is handling
- Resolves: rhbz#1936891 - SSSD Error Msg Improvement: Bad address
- Resolves: rhbz#1364596 - sssd still showing ipa user after removed from last group
- Resolves: rhbz#1979404 - Changes made to /etc/pam.d/sssd-shadowutils are overwritten back to default on sssd-common package upgrade</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2" date="1627905600">- Resolves: rhbz#1975169 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-8]
- Resolves: rhbz#1962042 - [sssd] RHEL 8.5 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.1" date="1634558400">- Resolves: rhbz#2014460 - tps tests fail with cross dependency on sssd debuginfo package: removal of 'sssd-libwbclient-debuginfo' is missing [rhel-8.5.0.z]</changelog>
</package>
<package pkgid="0c8ff28dd8b9789b53cd349e8afbd92c8750be288ef37633553385c06dacd547" name="sssd-krb5-common-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="2.el8_5.3"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-7" date="1611662400">- Resolves: rhbz#1920001 - Do not add '%' to group names already prefixed with '%' in IPA sudo rules
- Resolves: rhbz#1918433 - sssd unable to lookup certmap rules
- Resolves: rhbz#1917382 - [abrt] [faf] sssd: dp_client_handshake_timeout(): /usr/libexec/sssd/sssd_be killed by 11</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-8" date="1613131200">- Resolves: rhbz#1926622 - Add support to verify authentication indicators in pam_sss_gss
- Resolves: rhbz#1926454 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0.
- Resolves: rhbz#1893159 - Default debug level should report all errors / failures (additional patch)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.0-1" date="1620648000">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1930535 - [abrt] [faf] sssd: monitor_service_shutdown(): /usr/sbin/sssd killed by 11
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1945888 - Inconsistant debug level for connection logging
- Resolves: rhbz#1948657 - pam_sss_gss.so doesn't work with large kerberos tickets
- Resolves: rhbz#1949149 - [RFE] Poor man's backtrace
- Resolves: rhbz#1920500 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR
- Resolves: rhbz#1923964 - [RFE] SSSD Error Msg Improvement: write_krb5info_file failed, authentication might fail.
- Resolves: rhbz#1928648 - SSSD logs improvements: clarify which config option applies to each timeout in the logs
- Resolves: rhbz#1632159 - sssd-kcm starts successfully for non existent socket_path
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm
- Resolves: rhbz#1925505 - [RFE] improve the sssd refresh timers for SUDO queries
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1925561 - sssd-ldap(5) does not report how to disable the SUDO smart queries
- Resolves: rhbz#1925621 - document impact of indices and of scope on performance of LDAP queries
- Resolves: rhbz#1855320 - [RFE] RHEL8 sssd: inheritance of the case_sensitive parameter for subdomains.
- Resolves: rhbz#1925608 - [RFE] make 'random_offset' addon to 'offline_timeout' option configurable
- Resolves: rhbz#1447945 - man page / docs update required: if two certificate matching rules with the same priority match only one is used
- Resolves: rhbz#1703436 - sssd not thread-safe in innetgr()
- Resolves: rhbz#1713143 - SSSD does not translate the 2FA text labels("first factor" / "second factor") on GDM login and screensaver unlock screen
- Resolves: rhbz#1888977 - sss_override: Usage limitations clarification in man page
- Resolves: rhbz#1890177 - Clarify "single_prompt" option in "PROMPTING CONFIGURATION SECTION" section of sssd.conf man page
- Resolves: rhbz#1902280 - fix sss_cache to also reset cached timestamp
- Resolves: rhbz#1935683 - SSSD not detecting subdomain from AD forest (RHEL 8.3)
- Resolves: rhbz#1937919 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7
- Resolves: rhbz#1944665 - No gpo found and ad_gpo_implicit_deny set to True still permits user login
- Resolves: rhbz#1919942 - sss_override does not take precedence over override_homedir directive</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-1" date="1623153600">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1917444 - SSSD Error Msg Improvement: Server resolution failed: [2]: No such file or directory
- Resolves: rhbz#1917511 - SSSD Error Msg Improvement: Failed to resolve server 'server.example.com': Error reading file
- Resolves: rhbz#1917535 - sssd.conf man page: parameter dns_resolver_server_timeout and dns_resolver_op_timeout
- Resolves: rhbz#1940509 - [RFE] Health and Support Analyzer: Link frontend to backend requests
- Resolves: rhbz#1649464 - auto_private_groups not working as expected with posix ipa/ad trust
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1961215 - Invalid sssd-kcm return code if requested operation is not found
- Resolves: rhbz#1837090 - SSSD fails nss_getby_name for IPA user with SID if the user has user private group
- Resolves: rhbz#1879869 - sudo commands incorrectly exports the KRB5CCNAME environment variable
- Resolves: rhbz#1962550 - sss_pac_make_request fails on systems joined to Active Directory.
- Resolves: rhbz#1737489 - [RFE] SSSD should honor default Kerberos settings (keytab name) in /etc/krb5.conf</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-2" date="1624276800">- Resolves: rhbz#1974257 - 'debug_microseconds' config option is broken
- Resolves: rhbz#1936902 - SSSD Error Msg Improvement: Invalid argument
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm (additional patches and rebuild)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-1" date="1626091200">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1693379 - sssd_be and sss_cache too heavy on CPU
- Resolves: rhbz#1909373 - Missing search index for `originalADgidNumber`
- Resolves: rhbz#1954630 - [RFE] Improve debug messages by adding a unique tag for each request the backend is handling
- Resolves: rhbz#1936891 - SSSD Error Msg Improvement: Bad address
- Resolves: rhbz#1364596 - sssd still showing ipa user after removed from last group
- Resolves: rhbz#1979404 - Changes made to /etc/pam.d/sssd-shadowutils are overwritten back to default on sssd-common package upgrade</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2" date="1627905600">- Resolves: rhbz#1975169 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-8]
- Resolves: rhbz#1962042 - [sssd] RHEL 8.5 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.1" date="1634558400">- Resolves: rhbz#2014460 - tps tests fail with cross dependency on sssd debuginfo package: removal of 'sssd-libwbclient-debuginfo' is missing [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.2" date="1638187200">- Resolves: rhbz#2018440 - 2.5.x based SSSD adds more AD domains than it should based on the configuration file (not trusted and from a different forest) [rhel-8.5.0.z]
- Resolves: rhbz#2016923 - autofs lookups for unknown mounts are delayed for 50s [rhel-8.5.0.z]
- Resolves: rhbz#2021499 - Make backtrace less "chatty" (avoid duplicate backtraces) [rhel-8.5.0.z]
- Resolves: rhbz#2013379 - Lookup with fully-qualified name does not work with 'cache_first = True' [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.3" date="1638878400">- Resolves: rhbz#2028828 - pam responder does not call initgroups to refresh the user entry [rhel-8.5.0.z]</changelog>
</package>
<package pkgid="1ac03f21f28bd23150c129f906363e6340886e74fb0be15c65dda0e81890d7a6" name="sssd-krb5-common-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="2.el8_5.4"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-8" date="1613131200">- Resolves: rhbz#1926622 - Add support to verify authentication indicators in pam_sss_gss
- Resolves: rhbz#1926454 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0.
- Resolves: rhbz#1893159 - Default debug level should report all errors / failures (additional patch)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.0-1" date="1620648000">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1930535 - [abrt] [faf] sssd: monitor_service_shutdown(): /usr/sbin/sssd killed by 11
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1945888 - Inconsistant debug level for connection logging
- Resolves: rhbz#1948657 - pam_sss_gss.so doesn't work with large kerberos tickets
- Resolves: rhbz#1949149 - [RFE] Poor man's backtrace
- Resolves: rhbz#1920500 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR
- Resolves: rhbz#1923964 - [RFE] SSSD Error Msg Improvement: write_krb5info_file failed, authentication might fail.
- Resolves: rhbz#1928648 - SSSD logs improvements: clarify which config option applies to each timeout in the logs
- Resolves: rhbz#1632159 - sssd-kcm starts successfully for non existent socket_path
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm
- Resolves: rhbz#1925505 - [RFE] improve the sssd refresh timers for SUDO queries
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1925561 - sssd-ldap(5) does not report how to disable the SUDO smart queries
- Resolves: rhbz#1925621 - document impact of indices and of scope on performance of LDAP queries
- Resolves: rhbz#1855320 - [RFE] RHEL8 sssd: inheritance of the case_sensitive parameter for subdomains.
- Resolves: rhbz#1925608 - [RFE] make 'random_offset' addon to 'offline_timeout' option configurable
- Resolves: rhbz#1447945 - man page / docs update required: if two certificate matching rules with the same priority match only one is used
- Resolves: rhbz#1703436 - sssd not thread-safe in innetgr()
- Resolves: rhbz#1713143 - SSSD does not translate the 2FA text labels("first factor" / "second factor") on GDM login and screensaver unlock screen
- Resolves: rhbz#1888977 - sss_override: Usage limitations clarification in man page
- Resolves: rhbz#1890177 - Clarify "single_prompt" option in "PROMPTING CONFIGURATION SECTION" section of sssd.conf man page
- Resolves: rhbz#1902280 - fix sss_cache to also reset cached timestamp
- Resolves: rhbz#1935683 - SSSD not detecting subdomain from AD forest (RHEL 8.3)
- Resolves: rhbz#1937919 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7
- Resolves: rhbz#1944665 - No gpo found and ad_gpo_implicit_deny set to True still permits user login
- Resolves: rhbz#1919942 - sss_override does not take precedence over override_homedir directive</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-1" date="1623153600">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1917444 - SSSD Error Msg Improvement: Server resolution failed: [2]: No such file or directory
- Resolves: rhbz#1917511 - SSSD Error Msg Improvement: Failed to resolve server 'server.example.com': Error reading file
- Resolves: rhbz#1917535 - sssd.conf man page: parameter dns_resolver_server_timeout and dns_resolver_op_timeout
- Resolves: rhbz#1940509 - [RFE] Health and Support Analyzer: Link frontend to backend requests
- Resolves: rhbz#1649464 - auto_private_groups not working as expected with posix ipa/ad trust
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1961215 - Invalid sssd-kcm return code if requested operation is not found
- Resolves: rhbz#1837090 - SSSD fails nss_getby_name for IPA user with SID if the user has user private group
- Resolves: rhbz#1879869 - sudo commands incorrectly exports the KRB5CCNAME environment variable
- Resolves: rhbz#1962550 - sss_pac_make_request fails on systems joined to Active Directory.
- Resolves: rhbz#1737489 - [RFE] SSSD should honor default Kerberos settings (keytab name) in /etc/krb5.conf</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-2" date="1624276800">- Resolves: rhbz#1974257 - 'debug_microseconds' config option is broken
- Resolves: rhbz#1936902 - SSSD Error Msg Improvement: Invalid argument
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm (additional patches and rebuild)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-1" date="1626091200">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1693379 - sssd_be and sss_cache too heavy on CPU
- Resolves: rhbz#1909373 - Missing search index for `originalADgidNumber`
- Resolves: rhbz#1954630 - [RFE] Improve debug messages by adding a unique tag for each request the backend is handling
- Resolves: rhbz#1936891 - SSSD Error Msg Improvement: Bad address
- Resolves: rhbz#1364596 - sssd still showing ipa user after removed from last group
- Resolves: rhbz#1979404 - Changes made to /etc/pam.d/sssd-shadowutils are overwritten back to default on sssd-common package upgrade</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2" date="1627905600">- Resolves: rhbz#1975169 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-8]
- Resolves: rhbz#1962042 - [sssd] RHEL 8.5 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.1" date="1634558400">- Resolves: rhbz#2014460 - tps tests fail with cross dependency on sssd debuginfo package: removal of 'sssd-libwbclient-debuginfo' is missing [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.2" date="1638187200">- Resolves: rhbz#2018440 - 2.5.x based SSSD adds more AD domains than it should based on the configuration file (not trusted and from a different forest) [rhel-8.5.0.z]
- Resolves: rhbz#2016923 - autofs lookups for unknown mounts are delayed for 50s [rhel-8.5.0.z]
- Resolves: rhbz#2021499 - Make backtrace less "chatty" (avoid duplicate backtraces) [rhel-8.5.0.z]
- Resolves: rhbz#2013379 - Lookup with fully-qualified name does not work with 'cache_first = True' [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.3" date="1638878400">- Resolves: rhbz#2028828 - pam responder does not call initgroups to refresh the user entry [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.4" date="1642420800">- Resolves: rhbz#2030651 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries [rhel-8.5.0.z]
- Resolves: rhbz#2035285 - AD Domain in the AD Forest Missing after sssd latest update [rhel-8.5.0.z]</changelog>
</package>
<package pkgid="043e6884ce18ec9990c7efe6983e521120d9b388cdfc781310e4188ade10b0ef" name="sssd-krb5-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="2.el8_5.1"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-5" date="1609156800">- Resolves: rhbz#1631410 - Can't login with smartcard with multiple certs having same ID value
- Resolves: rhbz#1884213 - [RFE] add offline_timeout_max config option to control offline interval backoff (additional patches)
- Resolves: rhbz#1893159 - Default debug level should report all errors / failures
- Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-6" date="1610971200">- Resolves: rhbz#1113639 - autofs: return a connection failure until maps have been fetched
- Resolves: rhbz#1915395 - Memory leak in the simple access provider
- Resolves: rhbz#1915319 - SSSD: SBUS: failures during servers startup
- Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication (additional patches)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-7" date="1611662400">- Resolves: rhbz#1920001 - Do not add '%' to group names already prefixed with '%' in IPA sudo rules
- Resolves: rhbz#1918433 - sssd unable to lookup certmap rules
- Resolves: rhbz#1917382 - [abrt] [faf] sssd: dp_client_handshake_timeout(): /usr/libexec/sssd/sssd_be killed by 11</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-8" date="1613131200">- Resolves: rhbz#1926622 - Add support to verify authentication indicators in pam_sss_gss
- Resolves: rhbz#1926454 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0.
- Resolves: rhbz#1893159 - Default debug level should report all errors / failures (additional patch)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.0-1" date="1620648000">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1930535 - [abrt] [faf] sssd: monitor_service_shutdown(): /usr/sbin/sssd killed by 11
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1945888 - Inconsistant debug level for connection logging
- Resolves: rhbz#1948657 - pam_sss_gss.so doesn't work with large kerberos tickets
- Resolves: rhbz#1949149 - [RFE] Poor man's backtrace
- Resolves: rhbz#1920500 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR
- Resolves: rhbz#1923964 - [RFE] SSSD Error Msg Improvement: write_krb5info_file failed, authentication might fail.
- Resolves: rhbz#1928648 - SSSD logs improvements: clarify which config option applies to each timeout in the logs
- Resolves: rhbz#1632159 - sssd-kcm starts successfully for non existent socket_path
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm
- Resolves: rhbz#1925505 - [RFE] improve the sssd refresh timers for SUDO queries
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1925561 - sssd-ldap(5) does not report how to disable the SUDO smart queries
- Resolves: rhbz#1925621 - document impact of indices and of scope on performance of LDAP queries
- Resolves: rhbz#1855320 - [RFE] RHEL8 sssd: inheritance of the case_sensitive parameter for subdomains.
- Resolves: rhbz#1925608 - [RFE] make 'random_offset' addon to 'offline_timeout' option configurable
- Resolves: rhbz#1447945 - man page / docs update required: if two certificate matching rules with the same priority match only one is used
- Resolves: rhbz#1703436 - sssd not thread-safe in innetgr()
- Resolves: rhbz#1713143 - SSSD does not translate the 2FA text labels("first factor" / "second factor") on GDM login and screensaver unlock screen
- Resolves: rhbz#1888977 - sss_override: Usage limitations clarification in man page
- Resolves: rhbz#1890177 - Clarify "single_prompt" option in "PROMPTING CONFIGURATION SECTION" section of sssd.conf man page
- Resolves: rhbz#1902280 - fix sss_cache to also reset cached timestamp
- Resolves: rhbz#1935683 - SSSD not detecting subdomain from AD forest (RHEL 8.3)
- Resolves: rhbz#1937919 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7
- Resolves: rhbz#1944665 - No gpo found and ad_gpo_implicit_deny set to True still permits user login
- Resolves: rhbz#1919942 - sss_override does not take precedence over override_homedir directive</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-1" date="1623153600">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1917444 - SSSD Error Msg Improvement: Server resolution failed: [2]: No such file or directory
- Resolves: rhbz#1917511 - SSSD Error Msg Improvement: Failed to resolve server 'server.example.com': Error reading file
- Resolves: rhbz#1917535 - sssd.conf man page: parameter dns_resolver_server_timeout and dns_resolver_op_timeout
- Resolves: rhbz#1940509 - [RFE] Health and Support Analyzer: Link frontend to backend requests
- Resolves: rhbz#1649464 - auto_private_groups not working as expected with posix ipa/ad trust
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1961215 - Invalid sssd-kcm return code if requested operation is not found
- Resolves: rhbz#1837090 - SSSD fails nss_getby_name for IPA user with SID if the user has user private group
- Resolves: rhbz#1879869 - sudo commands incorrectly exports the KRB5CCNAME environment variable
- Resolves: rhbz#1962550 - sss_pac_make_request fails on systems joined to Active Directory.
- Resolves: rhbz#1737489 - [RFE] SSSD should honor default Kerberos settings (keytab name) in /etc/krb5.conf</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-2" date="1624276800">- Resolves: rhbz#1974257 - 'debug_microseconds' config option is broken
- Resolves: rhbz#1936902 - SSSD Error Msg Improvement: Invalid argument
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm (additional patches and rebuild)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-1" date="1626091200">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1693379 - sssd_be and sss_cache too heavy on CPU
- Resolves: rhbz#1909373 - Missing search index for `originalADgidNumber`
- Resolves: rhbz#1954630 - [RFE] Improve debug messages by adding a unique tag for each request the backend is handling
- Resolves: rhbz#1936891 - SSSD Error Msg Improvement: Bad address
- Resolves: rhbz#1364596 - sssd still showing ipa user after removed from last group
- Resolves: rhbz#1979404 - Changes made to /etc/pam.d/sssd-shadowutils are overwritten back to default on sssd-common package upgrade</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2" date="1627905600">- Resolves: rhbz#1975169 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-8]
- Resolves: rhbz#1962042 - [sssd] RHEL 8.5 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.1" date="1634558400">- Resolves: rhbz#2014460 - tps tests fail with cross dependency on sssd debuginfo package: removal of 'sssd-libwbclient-debuginfo' is missing [rhel-8.5.0.z]</changelog>
</package>
<package pkgid="1469778584ccfdc43e59c80cc4e0c908fc5f17fc4f18c54618f6e905fb828156" name="sssd-krb5-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="2.el8_5.3"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-7" date="1611662400">- Resolves: rhbz#1920001 - Do not add '%' to group names already prefixed with '%' in IPA sudo rules
- Resolves: rhbz#1918433 - sssd unable to lookup certmap rules
- Resolves: rhbz#1917382 - [abrt] [faf] sssd: dp_client_handshake_timeout(): /usr/libexec/sssd/sssd_be killed by 11</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-8" date="1613131200">- Resolves: rhbz#1926622 - Add support to verify authentication indicators in pam_sss_gss
- Resolves: rhbz#1926454 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0.
- Resolves: rhbz#1893159 - Default debug level should report all errors / failures (additional patch)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.0-1" date="1620648000">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1930535 - [abrt] [faf] sssd: monitor_service_shutdown(): /usr/sbin/sssd killed by 11
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1945888 - Inconsistant debug level for connection logging
- Resolves: rhbz#1948657 - pam_sss_gss.so doesn't work with large kerberos tickets
- Resolves: rhbz#1949149 - [RFE] Poor man's backtrace
- Resolves: rhbz#1920500 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR
- Resolves: rhbz#1923964 - [RFE] SSSD Error Msg Improvement: write_krb5info_file failed, authentication might fail.
- Resolves: rhbz#1928648 - SSSD logs improvements: clarify which config option applies to each timeout in the logs
- Resolves: rhbz#1632159 - sssd-kcm starts successfully for non existent socket_path
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm
- Resolves: rhbz#1925505 - [RFE] improve the sssd refresh timers for SUDO queries
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1925561 - sssd-ldap(5) does not report how to disable the SUDO smart queries
- Resolves: rhbz#1925621 - document impact of indices and of scope on performance of LDAP queries
- Resolves: rhbz#1855320 - [RFE] RHEL8 sssd: inheritance of the case_sensitive parameter for subdomains.
- Resolves: rhbz#1925608 - [RFE] make 'random_offset' addon to 'offline_timeout' option configurable
- Resolves: rhbz#1447945 - man page / docs update required: if two certificate matching rules with the same priority match only one is used
- Resolves: rhbz#1703436 - sssd not thread-safe in innetgr()
- Resolves: rhbz#1713143 - SSSD does not translate the 2FA text labels("first factor" / "second factor") on GDM login and screensaver unlock screen
- Resolves: rhbz#1888977 - sss_override: Usage limitations clarification in man page
- Resolves: rhbz#1890177 - Clarify "single_prompt" option in "PROMPTING CONFIGURATION SECTION" section of sssd.conf man page
- Resolves: rhbz#1902280 - fix sss_cache to also reset cached timestamp
- Resolves: rhbz#1935683 - SSSD not detecting subdomain from AD forest (RHEL 8.3)
- Resolves: rhbz#1937919 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7
- Resolves: rhbz#1944665 - No gpo found and ad_gpo_implicit_deny set to True still permits user login
- Resolves: rhbz#1919942 - sss_override does not take precedence over override_homedir directive</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-1" date="1623153600">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1917444 - SSSD Error Msg Improvement: Server resolution failed: [2]: No such file or directory
- Resolves: rhbz#1917511 - SSSD Error Msg Improvement: Failed to resolve server 'server.example.com': Error reading file
- Resolves: rhbz#1917535 - sssd.conf man page: parameter dns_resolver_server_timeout and dns_resolver_op_timeout
- Resolves: rhbz#1940509 - [RFE] Health and Support Analyzer: Link frontend to backend requests
- Resolves: rhbz#1649464 - auto_private_groups not working as expected with posix ipa/ad trust
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1961215 - Invalid sssd-kcm return code if requested operation is not found
- Resolves: rhbz#1837090 - SSSD fails nss_getby_name for IPA user with SID if the user has user private group
- Resolves: rhbz#1879869 - sudo commands incorrectly exports the KRB5CCNAME environment variable
- Resolves: rhbz#1962550 - sss_pac_make_request fails on systems joined to Active Directory.
- Resolves: rhbz#1737489 - [RFE] SSSD should honor default Kerberos settings (keytab name) in /etc/krb5.conf</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-2" date="1624276800">- Resolves: rhbz#1974257 - 'debug_microseconds' config option is broken
- Resolves: rhbz#1936902 - SSSD Error Msg Improvement: Invalid argument
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm (additional patches and rebuild)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-1" date="1626091200">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1693379 - sssd_be and sss_cache too heavy on CPU
- Resolves: rhbz#1909373 - Missing search index for `originalADgidNumber`
- Resolves: rhbz#1954630 - [RFE] Improve debug messages by adding a unique tag for each request the backend is handling
- Resolves: rhbz#1936891 - SSSD Error Msg Improvement: Bad address
- Resolves: rhbz#1364596 - sssd still showing ipa user after removed from last group
- Resolves: rhbz#1979404 - Changes made to /etc/pam.d/sssd-shadowutils are overwritten back to default on sssd-common package upgrade</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2" date="1627905600">- Resolves: rhbz#1975169 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-8]
- Resolves: rhbz#1962042 - [sssd] RHEL 8.5 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.1" date="1634558400">- Resolves: rhbz#2014460 - tps tests fail with cross dependency on sssd debuginfo package: removal of 'sssd-libwbclient-debuginfo' is missing [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.2" date="1638187200">- Resolves: rhbz#2018440 - 2.5.x based SSSD adds more AD domains than it should based on the configuration file (not trusted and from a different forest) [rhel-8.5.0.z]
- Resolves: rhbz#2016923 - autofs lookups for unknown mounts are delayed for 50s [rhel-8.5.0.z]
- Resolves: rhbz#2021499 - Make backtrace less "chatty" (avoid duplicate backtraces) [rhel-8.5.0.z]
- Resolves: rhbz#2013379 - Lookup with fully-qualified name does not work with 'cache_first = True' [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.3" date="1638878400">- Resolves: rhbz#2028828 - pam responder does not call initgroups to refresh the user entry [rhel-8.5.0.z]</changelog>
</package>
<package pkgid="d4b2d5be2bc850f068957a4fc269aaa3921416905e8a5d7f2ac360d8b5f3053c" name="sssd-krb5-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="2.el8_5.4"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-8" date="1613131200">- Resolves: rhbz#1926622 - Add support to verify authentication indicators in pam_sss_gss
- Resolves: rhbz#1926454 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0.
- Resolves: rhbz#1893159 - Default debug level should report all errors / failures (additional patch)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.0-1" date="1620648000">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1930535 - [abrt] [faf] sssd: monitor_service_shutdown(): /usr/sbin/sssd killed by 11
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1945888 - Inconsistant debug level for connection logging
- Resolves: rhbz#1948657 - pam_sss_gss.so doesn't work with large kerberos tickets
- Resolves: rhbz#1949149 - [RFE] Poor man's backtrace
- Resolves: rhbz#1920500 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR
- Resolves: rhbz#1923964 - [RFE] SSSD Error Msg Improvement: write_krb5info_file failed, authentication might fail.
- Resolves: rhbz#1928648 - SSSD logs improvements: clarify which config option applies to each timeout in the logs
- Resolves: rhbz#1632159 - sssd-kcm starts successfully for non existent socket_path
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm
- Resolves: rhbz#1925505 - [RFE] improve the sssd refresh timers for SUDO queries
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1925561 - sssd-ldap(5) does not report how to disable the SUDO smart queries
- Resolves: rhbz#1925621 - document impact of indices and of scope on performance of LDAP queries
- Resolves: rhbz#1855320 - [RFE] RHEL8 sssd: inheritance of the case_sensitive parameter for subdomains.
- Resolves: rhbz#1925608 - [RFE] make 'random_offset' addon to 'offline_timeout' option configurable
- Resolves: rhbz#1447945 - man page / docs update required: if two certificate matching rules with the same priority match only one is used
- Resolves: rhbz#1703436 - sssd not thread-safe in innetgr()
- Resolves: rhbz#1713143 - SSSD does not translate the 2FA text labels("first factor" / "second factor") on GDM login and screensaver unlock screen
- Resolves: rhbz#1888977 - sss_override: Usage limitations clarification in man page
- Resolves: rhbz#1890177 - Clarify "single_prompt" option in "PROMPTING CONFIGURATION SECTION" section of sssd.conf man page
- Resolves: rhbz#1902280 - fix sss_cache to also reset cached timestamp
- Resolves: rhbz#1935683 - SSSD not detecting subdomain from AD forest (RHEL 8.3)
- Resolves: rhbz#1937919 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7
- Resolves: rhbz#1944665 - No gpo found and ad_gpo_implicit_deny set to True still permits user login
- Resolves: rhbz#1919942 - sss_override does not take precedence over override_homedir directive</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-1" date="1623153600">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1917444 - SSSD Error Msg Improvement: Server resolution failed: [2]: No such file or directory
- Resolves: rhbz#1917511 - SSSD Error Msg Improvement: Failed to resolve server 'server.example.com': Error reading file
- Resolves: rhbz#1917535 - sssd.conf man page: parameter dns_resolver_server_timeout and dns_resolver_op_timeout
- Resolves: rhbz#1940509 - [RFE] Health and Support Analyzer: Link frontend to backend requests
- Resolves: rhbz#1649464 - auto_private_groups not working as expected with posix ipa/ad trust
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1961215 - Invalid sssd-kcm return code if requested operation is not found
- Resolves: rhbz#1837090 - SSSD fails nss_getby_name for IPA user with SID if the user has user private group
- Resolves: rhbz#1879869 - sudo commands incorrectly exports the KRB5CCNAME environment variable
- Resolves: rhbz#1962550 - sss_pac_make_request fails on systems joined to Active Directory.
- Resolves: rhbz#1737489 - [RFE] SSSD should honor default Kerberos settings (keytab name) in /etc/krb5.conf</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-2" date="1624276800">- Resolves: rhbz#1974257 - 'debug_microseconds' config option is broken
- Resolves: rhbz#1936902 - SSSD Error Msg Improvement: Invalid argument
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm (additional patches and rebuild)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-1" date="1626091200">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1693379 - sssd_be and sss_cache too heavy on CPU
- Resolves: rhbz#1909373 - Missing search index for `originalADgidNumber`
- Resolves: rhbz#1954630 - [RFE] Improve debug messages by adding a unique tag for each request the backend is handling
- Resolves: rhbz#1936891 - SSSD Error Msg Improvement: Bad address
- Resolves: rhbz#1364596 - sssd still showing ipa user after removed from last group
- Resolves: rhbz#1979404 - Changes made to /etc/pam.d/sssd-shadowutils are overwritten back to default on sssd-common package upgrade</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2" date="1627905600">- Resolves: rhbz#1975169 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-8]
- Resolves: rhbz#1962042 - [sssd] RHEL 8.5 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.1" date="1634558400">- Resolves: rhbz#2014460 - tps tests fail with cross dependency on sssd debuginfo package: removal of 'sssd-libwbclient-debuginfo' is missing [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.2" date="1638187200">- Resolves: rhbz#2018440 - 2.5.x based SSSD adds more AD domains than it should based on the configuration file (not trusted and from a different forest) [rhel-8.5.0.z]
- Resolves: rhbz#2016923 - autofs lookups for unknown mounts are delayed for 50s [rhel-8.5.0.z]
- Resolves: rhbz#2021499 - Make backtrace less "chatty" (avoid duplicate backtraces) [rhel-8.5.0.z]
- Resolves: rhbz#2013379 - Lookup with fully-qualified name does not work with 'cache_first = True' [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.3" date="1638878400">- Resolves: rhbz#2028828 - pam responder does not call initgroups to refresh the user entry [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.4" date="1642420800">- Resolves: rhbz#2030651 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries [rhel-8.5.0.z]
- Resolves: rhbz#2035285 - AD Domain in the AD Forest Missing after sssd latest update [rhel-8.5.0.z]</changelog>
</package>
<package pkgid="84784ab6ebfc32b487654cc560cf20b65f8de645b61103842c95a63d2ffcdc9f" name="sssd-ldap-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="2.el8_5.1"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-5" date="1609156800">- Resolves: rhbz#1631410 - Can't login with smartcard with multiple certs having same ID value
- Resolves: rhbz#1884213 - [RFE] add offline_timeout_max config option to control offline interval backoff (additional patches)
- Resolves: rhbz#1893159 - Default debug level should report all errors / failures
- Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-6" date="1610971200">- Resolves: rhbz#1113639 - autofs: return a connection failure until maps have been fetched
- Resolves: rhbz#1915395 - Memory leak in the simple access provider
- Resolves: rhbz#1915319 - SSSD: SBUS: failures during servers startup
- Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication (additional patches)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-7" date="1611662400">- Resolves: rhbz#1920001 - Do not add '%' to group names already prefixed with '%' in IPA sudo rules
- Resolves: rhbz#1918433 - sssd unable to lookup certmap rules
- Resolves: rhbz#1917382 - [abrt] [faf] sssd: dp_client_handshake_timeout(): /usr/libexec/sssd/sssd_be killed by 11</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-8" date="1613131200">- Resolves: rhbz#1926622 - Add support to verify authentication indicators in pam_sss_gss
- Resolves: rhbz#1926454 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0.
- Resolves: rhbz#1893159 - Default debug level should report all errors / failures (additional patch)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.0-1" date="1620648000">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1930535 - [abrt] [faf] sssd: monitor_service_shutdown(): /usr/sbin/sssd killed by 11
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1945888 - Inconsistant debug level for connection logging
- Resolves: rhbz#1948657 - pam_sss_gss.so doesn't work with large kerberos tickets
- Resolves: rhbz#1949149 - [RFE] Poor man's backtrace
- Resolves: rhbz#1920500 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR
- Resolves: rhbz#1923964 - [RFE] SSSD Error Msg Improvement: write_krb5info_file failed, authentication might fail.
- Resolves: rhbz#1928648 - SSSD logs improvements: clarify which config option applies to each timeout in the logs
- Resolves: rhbz#1632159 - sssd-kcm starts successfully for non existent socket_path
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm
- Resolves: rhbz#1925505 - [RFE] improve the sssd refresh timers for SUDO queries
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1925561 - sssd-ldap(5) does not report how to disable the SUDO smart queries
- Resolves: rhbz#1925621 - document impact of indices and of scope on performance of LDAP queries
- Resolves: rhbz#1855320 - [RFE] RHEL8 sssd: inheritance of the case_sensitive parameter for subdomains.
- Resolves: rhbz#1925608 - [RFE] make 'random_offset' addon to 'offline_timeout' option configurable
- Resolves: rhbz#1447945 - man page / docs update required: if two certificate matching rules with the same priority match only one is used
- Resolves: rhbz#1703436 - sssd not thread-safe in innetgr()
- Resolves: rhbz#1713143 - SSSD does not translate the 2FA text labels("first factor" / "second factor") on GDM login and screensaver unlock screen
- Resolves: rhbz#1888977 - sss_override: Usage limitations clarification in man page
- Resolves: rhbz#1890177 - Clarify "single_prompt" option in "PROMPTING CONFIGURATION SECTION" section of sssd.conf man page
- Resolves: rhbz#1902280 - fix sss_cache to also reset cached timestamp
- Resolves: rhbz#1935683 - SSSD not detecting subdomain from AD forest (RHEL 8.3)
- Resolves: rhbz#1937919 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7
- Resolves: rhbz#1944665 - No gpo found and ad_gpo_implicit_deny set to True still permits user login
- Resolves: rhbz#1919942 - sss_override does not take precedence over override_homedir directive</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-1" date="1623153600">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1917444 - SSSD Error Msg Improvement: Server resolution failed: [2]: No such file or directory
- Resolves: rhbz#1917511 - SSSD Error Msg Improvement: Failed to resolve server 'server.example.com': Error reading file
- Resolves: rhbz#1917535 - sssd.conf man page: parameter dns_resolver_server_timeout and dns_resolver_op_timeout
- Resolves: rhbz#1940509 - [RFE] Health and Support Analyzer: Link frontend to backend requests
- Resolves: rhbz#1649464 - auto_private_groups not working as expected with posix ipa/ad trust
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1961215 - Invalid sssd-kcm return code if requested operation is not found
- Resolves: rhbz#1837090 - SSSD fails nss_getby_name for IPA user with SID if the user has user private group
- Resolves: rhbz#1879869 - sudo commands incorrectly exports the KRB5CCNAME environment variable
- Resolves: rhbz#1962550 - sss_pac_make_request fails on systems joined to Active Directory.
- Resolves: rhbz#1737489 - [RFE] SSSD should honor default Kerberos settings (keytab name) in /etc/krb5.conf</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-2" date="1624276800">- Resolves: rhbz#1974257 - 'debug_microseconds' config option is broken
- Resolves: rhbz#1936902 - SSSD Error Msg Improvement: Invalid argument
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm (additional patches and rebuild)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-1" date="1626091200">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1693379 - sssd_be and sss_cache too heavy on CPU
- Resolves: rhbz#1909373 - Missing search index for `originalADgidNumber`
- Resolves: rhbz#1954630 - [RFE] Improve debug messages by adding a unique tag for each request the backend is handling
- Resolves: rhbz#1936891 - SSSD Error Msg Improvement: Bad address
- Resolves: rhbz#1364596 - sssd still showing ipa user after removed from last group
- Resolves: rhbz#1979404 - Changes made to /etc/pam.d/sssd-shadowutils are overwritten back to default on sssd-common package upgrade</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2" date="1627905600">- Resolves: rhbz#1975169 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-8]
- Resolves: rhbz#1962042 - [sssd] RHEL 8.5 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.1" date="1634558400">- Resolves: rhbz#2014460 - tps tests fail with cross dependency on sssd debuginfo package: removal of 'sssd-libwbclient-debuginfo' is missing [rhel-8.5.0.z]</changelog>
</package>
<package pkgid="77c91dd723e938965bb6c68f66a530cd982b0206f4774bc75ad574b93d16865a" name="sssd-ldap-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="2.el8_5.3"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-7" date="1611662400">- Resolves: rhbz#1920001 - Do not add '%' to group names already prefixed with '%' in IPA sudo rules
- Resolves: rhbz#1918433 - sssd unable to lookup certmap rules
- Resolves: rhbz#1917382 - [abrt] [faf] sssd: dp_client_handshake_timeout(): /usr/libexec/sssd/sssd_be killed by 11</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-8" date="1613131200">- Resolves: rhbz#1926622 - Add support to verify authentication indicators in pam_sss_gss
- Resolves: rhbz#1926454 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0.
- Resolves: rhbz#1893159 - Default debug level should report all errors / failures (additional patch)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.0-1" date="1620648000">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1930535 - [abrt] [faf] sssd: monitor_service_shutdown(): /usr/sbin/sssd killed by 11
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1945888 - Inconsistant debug level for connection logging
- Resolves: rhbz#1948657 - pam_sss_gss.so doesn't work with large kerberos tickets
- Resolves: rhbz#1949149 - [RFE] Poor man's backtrace
- Resolves: rhbz#1920500 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR
- Resolves: rhbz#1923964 - [RFE] SSSD Error Msg Improvement: write_krb5info_file failed, authentication might fail.
- Resolves: rhbz#1928648 - SSSD logs improvements: clarify which config option applies to each timeout in the logs
- Resolves: rhbz#1632159 - sssd-kcm starts successfully for non existent socket_path
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm
- Resolves: rhbz#1925505 - [RFE] improve the sssd refresh timers for SUDO queries
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1925561 - sssd-ldap(5) does not report how to disable the SUDO smart queries
- Resolves: rhbz#1925621 - document impact of indices and of scope on performance of LDAP queries
- Resolves: rhbz#1855320 - [RFE] RHEL8 sssd: inheritance of the case_sensitive parameter for subdomains.
- Resolves: rhbz#1925608 - [RFE] make 'random_offset' addon to 'offline_timeout' option configurable
- Resolves: rhbz#1447945 - man page / docs update required: if two certificate matching rules with the same priority match only one is used
- Resolves: rhbz#1703436 - sssd not thread-safe in innetgr()
- Resolves: rhbz#1713143 - SSSD does not translate the 2FA text labels("first factor" / "second factor") on GDM login and screensaver unlock screen
- Resolves: rhbz#1888977 - sss_override: Usage limitations clarification in man page
- Resolves: rhbz#1890177 - Clarify "single_prompt" option in "PROMPTING CONFIGURATION SECTION" section of sssd.conf man page
- Resolves: rhbz#1902280 - fix sss_cache to also reset cached timestamp
- Resolves: rhbz#1935683 - SSSD not detecting subdomain from AD forest (RHEL 8.3)
- Resolves: rhbz#1937919 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7
- Resolves: rhbz#1944665 - No gpo found and ad_gpo_implicit_deny set to True still permits user login
- Resolves: rhbz#1919942 - sss_override does not take precedence over override_homedir directive</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-1" date="1623153600">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1917444 - SSSD Error Msg Improvement: Server resolution failed: [2]: No such file or directory
- Resolves: rhbz#1917511 - SSSD Error Msg Improvement: Failed to resolve server 'server.example.com': Error reading file
- Resolves: rhbz#1917535 - sssd.conf man page: parameter dns_resolver_server_timeout and dns_resolver_op_timeout
- Resolves: rhbz#1940509 - [RFE] Health and Support Analyzer: Link frontend to backend requests
- Resolves: rhbz#1649464 - auto_private_groups not working as expected with posix ipa/ad trust
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1961215 - Invalid sssd-kcm return code if requested operation is not found
- Resolves: rhbz#1837090 - SSSD fails nss_getby_name for IPA user with SID if the user has user private group
- Resolves: rhbz#1879869 - sudo commands incorrectly exports the KRB5CCNAME environment variable
- Resolves: rhbz#1962550 - sss_pac_make_request fails on systems joined to Active Directory.
- Resolves: rhbz#1737489 - [RFE] SSSD should honor default Kerberos settings (keytab name) in /etc/krb5.conf</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-2" date="1624276800">- Resolves: rhbz#1974257 - 'debug_microseconds' config option is broken
- Resolves: rhbz#1936902 - SSSD Error Msg Improvement: Invalid argument
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm (additional patches and rebuild)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-1" date="1626091200">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1693379 - sssd_be and sss_cache too heavy on CPU
- Resolves: rhbz#1909373 - Missing search index for `originalADgidNumber`
- Resolves: rhbz#1954630 - [RFE] Improve debug messages by adding a unique tag for each request the backend is handling
- Resolves: rhbz#1936891 - SSSD Error Msg Improvement: Bad address
- Resolves: rhbz#1364596 - sssd still showing ipa user after removed from last group
- Resolves: rhbz#1979404 - Changes made to /etc/pam.d/sssd-shadowutils are overwritten back to default on sssd-common package upgrade</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2" date="1627905600">- Resolves: rhbz#1975169 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-8]
- Resolves: rhbz#1962042 - [sssd] RHEL 8.5 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.1" date="1634558400">- Resolves: rhbz#2014460 - tps tests fail with cross dependency on sssd debuginfo package: removal of 'sssd-libwbclient-debuginfo' is missing [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.2" date="1638187200">- Resolves: rhbz#2018440 - 2.5.x based SSSD adds more AD domains than it should based on the configuration file (not trusted and from a different forest) [rhel-8.5.0.z]
- Resolves: rhbz#2016923 - autofs lookups for unknown mounts are delayed for 50s [rhel-8.5.0.z]
- Resolves: rhbz#2021499 - Make backtrace less "chatty" (avoid duplicate backtraces) [rhel-8.5.0.z]
- Resolves: rhbz#2013379 - Lookup with fully-qualified name does not work with 'cache_first = True' [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.3" date="1638878400">- Resolves: rhbz#2028828 - pam responder does not call initgroups to refresh the user entry [rhel-8.5.0.z]</changelog>
</package>
<package pkgid="c582d78b4d4cb7b50cdd03ddd28dcf94cbc5dcf0a7cfafaeab1b5a0ea0f326f6" name="sssd-ldap-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="2.el8_5.4"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-8" date="1613131200">- Resolves: rhbz#1926622 - Add support to verify authentication indicators in pam_sss_gss
- Resolves: rhbz#1926454 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0.
- Resolves: rhbz#1893159 - Default debug level should report all errors / failures (additional patch)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.0-1" date="1620648000">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1930535 - [abrt] [faf] sssd: monitor_service_shutdown(): /usr/sbin/sssd killed by 11
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1945888 - Inconsistant debug level for connection logging
- Resolves: rhbz#1948657 - pam_sss_gss.so doesn't work with large kerberos tickets
- Resolves: rhbz#1949149 - [RFE] Poor man's backtrace
- Resolves: rhbz#1920500 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR
- Resolves: rhbz#1923964 - [RFE] SSSD Error Msg Improvement: write_krb5info_file failed, authentication might fail.
- Resolves: rhbz#1928648 - SSSD logs improvements: clarify which config option applies to each timeout in the logs
- Resolves: rhbz#1632159 - sssd-kcm starts successfully for non existent socket_path
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm
- Resolves: rhbz#1925505 - [RFE] improve the sssd refresh timers for SUDO queries
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1925561 - sssd-ldap(5) does not report how to disable the SUDO smart queries
- Resolves: rhbz#1925621 - document impact of indices and of scope on performance of LDAP queries
- Resolves: rhbz#1855320 - [RFE] RHEL8 sssd: inheritance of the case_sensitive parameter for subdomains.
- Resolves: rhbz#1925608 - [RFE] make 'random_offset' addon to 'offline_timeout' option configurable
- Resolves: rhbz#1447945 - man page / docs update required: if two certificate matching rules with the same priority match only one is used
- Resolves: rhbz#1703436 - sssd not thread-safe in innetgr()
- Resolves: rhbz#1713143 - SSSD does not translate the 2FA text labels("first factor" / "second factor") on GDM login and screensaver unlock screen
- Resolves: rhbz#1888977 - sss_override: Usage limitations clarification in man page
- Resolves: rhbz#1890177 - Clarify "single_prompt" option in "PROMPTING CONFIGURATION SECTION" section of sssd.conf man page
- Resolves: rhbz#1902280 - fix sss_cache to also reset cached timestamp
- Resolves: rhbz#1935683 - SSSD not detecting subdomain from AD forest (RHEL 8.3)
- Resolves: rhbz#1937919 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7
- Resolves: rhbz#1944665 - No gpo found and ad_gpo_implicit_deny set to True still permits user login
- Resolves: rhbz#1919942 - sss_override does not take precedence over override_homedir directive</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-1" date="1623153600">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1917444 - SSSD Error Msg Improvement: Server resolution failed: [2]: No such file or directory
- Resolves: rhbz#1917511 - SSSD Error Msg Improvement: Failed to resolve server 'server.example.com': Error reading file
- Resolves: rhbz#1917535 - sssd.conf man page: parameter dns_resolver_server_timeout and dns_resolver_op_timeout
- Resolves: rhbz#1940509 - [RFE] Health and Support Analyzer: Link frontend to backend requests
- Resolves: rhbz#1649464 - auto_private_groups not working as expected with posix ipa/ad trust
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1961215 - Invalid sssd-kcm return code if requested operation is not found
- Resolves: rhbz#1837090 - SSSD fails nss_getby_name for IPA user with SID if the user has user private group
- Resolves: rhbz#1879869 - sudo commands incorrectly exports the KRB5CCNAME environment variable
- Resolves: rhbz#1962550 - sss_pac_make_request fails on systems joined to Active Directory.
- Resolves: rhbz#1737489 - [RFE] SSSD should honor default Kerberos settings (keytab name) in /etc/krb5.conf</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-2" date="1624276800">- Resolves: rhbz#1974257 - 'debug_microseconds' config option is broken
- Resolves: rhbz#1936902 - SSSD Error Msg Improvement: Invalid argument
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm (additional patches and rebuild)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-1" date="1626091200">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1693379 - sssd_be and sss_cache too heavy on CPU
- Resolves: rhbz#1909373 - Missing search index for `originalADgidNumber`
- Resolves: rhbz#1954630 - [RFE] Improve debug messages by adding a unique tag for each request the backend is handling
- Resolves: rhbz#1936891 - SSSD Error Msg Improvement: Bad address
- Resolves: rhbz#1364596 - sssd still showing ipa user after removed from last group
- Resolves: rhbz#1979404 - Changes made to /etc/pam.d/sssd-shadowutils are overwritten back to default on sssd-common package upgrade</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2" date="1627905600">- Resolves: rhbz#1975169 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-8]
- Resolves: rhbz#1962042 - [sssd] RHEL 8.5 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.1" date="1634558400">- Resolves: rhbz#2014460 - tps tests fail with cross dependency on sssd debuginfo package: removal of 'sssd-libwbclient-debuginfo' is missing [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.2" date="1638187200">- Resolves: rhbz#2018440 - 2.5.x based SSSD adds more AD domains than it should based on the configuration file (not trusted and from a different forest) [rhel-8.5.0.z]
- Resolves: rhbz#2016923 - autofs lookups for unknown mounts are delayed for 50s [rhel-8.5.0.z]
- Resolves: rhbz#2021499 - Make backtrace less "chatty" (avoid duplicate backtraces) [rhel-8.5.0.z]
- Resolves: rhbz#2013379 - Lookup with fully-qualified name does not work with 'cache_first = True' [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.3" date="1638878400">- Resolves: rhbz#2028828 - pam responder does not call initgroups to refresh the user entry [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.4" date="1642420800">- Resolves: rhbz#2030651 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries [rhel-8.5.0.z]
- Resolves: rhbz#2035285 - AD Domain in the AD Forest Missing after sssd latest update [rhel-8.5.0.z]</changelog>
</package>
<package pkgid="3178cc765c40f6a2962b0e5932390f42c028ac1a21473c6244e2c5abc1e6758a" name="sssd-nfs-idmap-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="2.el8_5.1"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-5" date="1609156800">- Resolves: rhbz#1631410 - Can't login with smartcard with multiple certs having same ID value
- Resolves: rhbz#1884213 - [RFE] add offline_timeout_max config option to control offline interval backoff (additional patches)
- Resolves: rhbz#1893159 - Default debug level should report all errors / failures
- Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-6" date="1610971200">- Resolves: rhbz#1113639 - autofs: return a connection failure until maps have been fetched
- Resolves: rhbz#1915395 - Memory leak in the simple access provider
- Resolves: rhbz#1915319 - SSSD: SBUS: failures during servers startup
- Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication (additional patches)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-7" date="1611662400">- Resolves: rhbz#1920001 - Do not add '%' to group names already prefixed with '%' in IPA sudo rules
- Resolves: rhbz#1918433 - sssd unable to lookup certmap rules
- Resolves: rhbz#1917382 - [abrt] [faf] sssd: dp_client_handshake_timeout(): /usr/libexec/sssd/sssd_be killed by 11</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-8" date="1613131200">- Resolves: rhbz#1926622 - Add support to verify authentication indicators in pam_sss_gss
- Resolves: rhbz#1926454 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0.
- Resolves: rhbz#1893159 - Default debug level should report all errors / failures (additional patch)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.0-1" date="1620648000">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1930535 - [abrt] [faf] sssd: monitor_service_shutdown(): /usr/sbin/sssd killed by 11
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1945888 - Inconsistant debug level for connection logging
- Resolves: rhbz#1948657 - pam_sss_gss.so doesn't work with large kerberos tickets
- Resolves: rhbz#1949149 - [RFE] Poor man's backtrace
- Resolves: rhbz#1920500 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR
- Resolves: rhbz#1923964 - [RFE] SSSD Error Msg Improvement: write_krb5info_file failed, authentication might fail.
- Resolves: rhbz#1928648 - SSSD logs improvements: clarify which config option applies to each timeout in the logs
- Resolves: rhbz#1632159 - sssd-kcm starts successfully for non existent socket_path
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm
- Resolves: rhbz#1925505 - [RFE] improve the sssd refresh timers for SUDO queries
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1925561 - sssd-ldap(5) does not report how to disable the SUDO smart queries
- Resolves: rhbz#1925621 - document impact of indices and of scope on performance of LDAP queries
- Resolves: rhbz#1855320 - [RFE] RHEL8 sssd: inheritance of the case_sensitive parameter for subdomains.
- Resolves: rhbz#1925608 - [RFE] make 'random_offset' addon to 'offline_timeout' option configurable
- Resolves: rhbz#1447945 - man page / docs update required: if two certificate matching rules with the same priority match only one is used
- Resolves: rhbz#1703436 - sssd not thread-safe in innetgr()
- Resolves: rhbz#1713143 - SSSD does not translate the 2FA text labels("first factor" / "second factor") on GDM login and screensaver unlock screen
- Resolves: rhbz#1888977 - sss_override: Usage limitations clarification in man page
- Resolves: rhbz#1890177 - Clarify "single_prompt" option in "PROMPTING CONFIGURATION SECTION" section of sssd.conf man page
- Resolves: rhbz#1902280 - fix sss_cache to also reset cached timestamp
- Resolves: rhbz#1935683 - SSSD not detecting subdomain from AD forest (RHEL 8.3)
- Resolves: rhbz#1937919 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7
- Resolves: rhbz#1944665 - No gpo found and ad_gpo_implicit_deny set to True still permits user login
- Resolves: rhbz#1919942 - sss_override does not take precedence over override_homedir directive</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-1" date="1623153600">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1917444 - SSSD Error Msg Improvement: Server resolution failed: [2]: No such file or directory
- Resolves: rhbz#1917511 - SSSD Error Msg Improvement: Failed to resolve server 'server.example.com': Error reading file
- Resolves: rhbz#1917535 - sssd.conf man page: parameter dns_resolver_server_timeout and dns_resolver_op_timeout
- Resolves: rhbz#1940509 - [RFE] Health and Support Analyzer: Link frontend to backend requests
- Resolves: rhbz#1649464 - auto_private_groups not working as expected with posix ipa/ad trust
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1961215 - Invalid sssd-kcm return code if requested operation is not found
- Resolves: rhbz#1837090 - SSSD fails nss_getby_name for IPA user with SID if the user has user private group
- Resolves: rhbz#1879869 - sudo commands incorrectly exports the KRB5CCNAME environment variable
- Resolves: rhbz#1962550 - sss_pac_make_request fails on systems joined to Active Directory.
- Resolves: rhbz#1737489 - [RFE] SSSD should honor default Kerberos settings (keytab name) in /etc/krb5.conf</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-2" date="1624276800">- Resolves: rhbz#1974257 - 'debug_microseconds' config option is broken
- Resolves: rhbz#1936902 - SSSD Error Msg Improvement: Invalid argument
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm (additional patches and rebuild)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-1" date="1626091200">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1693379 - sssd_be and sss_cache too heavy on CPU
- Resolves: rhbz#1909373 - Missing search index for `originalADgidNumber`
- Resolves: rhbz#1954630 - [RFE] Improve debug messages by adding a unique tag for each request the backend is handling
- Resolves: rhbz#1936891 - SSSD Error Msg Improvement: Bad address
- Resolves: rhbz#1364596 - sssd still showing ipa user after removed from last group
- Resolves: rhbz#1979404 - Changes made to /etc/pam.d/sssd-shadowutils are overwritten back to default on sssd-common package upgrade</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2" date="1627905600">- Resolves: rhbz#1975169 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-8]
- Resolves: rhbz#1962042 - [sssd] RHEL 8.5 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.1" date="1634558400">- Resolves: rhbz#2014460 - tps tests fail with cross dependency on sssd debuginfo package: removal of 'sssd-libwbclient-debuginfo' is missing [rhel-8.5.0.z]</changelog>
</package>
<package pkgid="f03bfc9ae6383da1d9170efaf13d0989f395fae04b35b377fead263a85a9ccca" name="sssd-nfs-idmap-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="2.el8_5.3"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-7" date="1611662400">- Resolves: rhbz#1920001 - Do not add '%' to group names already prefixed with '%' in IPA sudo rules
- Resolves: rhbz#1918433 - sssd unable to lookup certmap rules
- Resolves: rhbz#1917382 - [abrt] [faf] sssd: dp_client_handshake_timeout(): /usr/libexec/sssd/sssd_be killed by 11</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-8" date="1613131200">- Resolves: rhbz#1926622 - Add support to verify authentication indicators in pam_sss_gss
- Resolves: rhbz#1926454 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0.
- Resolves: rhbz#1893159 - Default debug level should report all errors / failures (additional patch)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.0-1" date="1620648000">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1930535 - [abrt] [faf] sssd: monitor_service_shutdown(): /usr/sbin/sssd killed by 11
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1945888 - Inconsistant debug level for connection logging
- Resolves: rhbz#1948657 - pam_sss_gss.so doesn't work with large kerberos tickets
- Resolves: rhbz#1949149 - [RFE] Poor man's backtrace
- Resolves: rhbz#1920500 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR
- Resolves: rhbz#1923964 - [RFE] SSSD Error Msg Improvement: write_krb5info_file failed, authentication might fail.
- Resolves: rhbz#1928648 - SSSD logs improvements: clarify which config option applies to each timeout in the logs
- Resolves: rhbz#1632159 - sssd-kcm starts successfully for non existent socket_path
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm
- Resolves: rhbz#1925505 - [RFE] improve the sssd refresh timers for SUDO queries
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1925561 - sssd-ldap(5) does not report how to disable the SUDO smart queries
- Resolves: rhbz#1925621 - document impact of indices and of scope on performance of LDAP queries
- Resolves: rhbz#1855320 - [RFE] RHEL8 sssd: inheritance of the case_sensitive parameter for subdomains.
- Resolves: rhbz#1925608 - [RFE] make 'random_offset' addon to 'offline_timeout' option configurable
- Resolves: rhbz#1447945 - man page / docs update required: if two certificate matching rules with the same priority match only one is used
- Resolves: rhbz#1703436 - sssd not thread-safe in innetgr()
- Resolves: rhbz#1713143 - SSSD does not translate the 2FA text labels("first factor" / "second factor") on GDM login and screensaver unlock screen
- Resolves: rhbz#1888977 - sss_override: Usage limitations clarification in man page
- Resolves: rhbz#1890177 - Clarify "single_prompt" option in "PROMPTING CONFIGURATION SECTION" section of sssd.conf man page
- Resolves: rhbz#1902280 - fix sss_cache to also reset cached timestamp
- Resolves: rhbz#1935683 - SSSD not detecting subdomain from AD forest (RHEL 8.3)
- Resolves: rhbz#1937919 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7
- Resolves: rhbz#1944665 - No gpo found and ad_gpo_implicit_deny set to True still permits user login
- Resolves: rhbz#1919942 - sss_override does not take precedence over override_homedir directive</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-1" date="1623153600">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1917444 - SSSD Error Msg Improvement: Server resolution failed: [2]: No such file or directory
- Resolves: rhbz#1917511 - SSSD Error Msg Improvement: Failed to resolve server 'server.example.com': Error reading file
- Resolves: rhbz#1917535 - sssd.conf man page: parameter dns_resolver_server_timeout and dns_resolver_op_timeout
- Resolves: rhbz#1940509 - [RFE] Health and Support Analyzer: Link frontend to backend requests
- Resolves: rhbz#1649464 - auto_private_groups not working as expected with posix ipa/ad trust
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1961215 - Invalid sssd-kcm return code if requested operation is not found
- Resolves: rhbz#1837090 - SSSD fails nss_getby_name for IPA user with SID if the user has user private group
- Resolves: rhbz#1879869 - sudo commands incorrectly exports the KRB5CCNAME environment variable
- Resolves: rhbz#1962550 - sss_pac_make_request fails on systems joined to Active Directory.
- Resolves: rhbz#1737489 - [RFE] SSSD should honor default Kerberos settings (keytab name) in /etc/krb5.conf</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-2" date="1624276800">- Resolves: rhbz#1974257 - 'debug_microseconds' config option is broken
- Resolves: rhbz#1936902 - SSSD Error Msg Improvement: Invalid argument
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm (additional patches and rebuild)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-1" date="1626091200">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1693379 - sssd_be and sss_cache too heavy on CPU
- Resolves: rhbz#1909373 - Missing search index for `originalADgidNumber`
- Resolves: rhbz#1954630 - [RFE] Improve debug messages by adding a unique tag for each request the backend is handling
- Resolves: rhbz#1936891 - SSSD Error Msg Improvement: Bad address
- Resolves: rhbz#1364596 - sssd still showing ipa user after removed from last group
- Resolves: rhbz#1979404 - Changes made to /etc/pam.d/sssd-shadowutils are overwritten back to default on sssd-common package upgrade</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2" date="1627905600">- Resolves: rhbz#1975169 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-8]
- Resolves: rhbz#1962042 - [sssd] RHEL 8.5 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.1" date="1634558400">- Resolves: rhbz#2014460 - tps tests fail with cross dependency on sssd debuginfo package: removal of 'sssd-libwbclient-debuginfo' is missing [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.2" date="1638187200">- Resolves: rhbz#2018440 - 2.5.x based SSSD adds more AD domains than it should based on the configuration file (not trusted and from a different forest) [rhel-8.5.0.z]
- Resolves: rhbz#2016923 - autofs lookups for unknown mounts are delayed for 50s [rhel-8.5.0.z]
- Resolves: rhbz#2021499 - Make backtrace less "chatty" (avoid duplicate backtraces) [rhel-8.5.0.z]
- Resolves: rhbz#2013379 - Lookup with fully-qualified name does not work with 'cache_first = True' [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.3" date="1638878400">- Resolves: rhbz#2028828 - pam responder does not call initgroups to refresh the user entry [rhel-8.5.0.z]</changelog>
</package>
<package pkgid="1d068a6abf4338ae2ab2955680d7aeeb6a4342994aa521cc94dea6566a85a566" name="sssd-nfs-idmap-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="2.el8_5.4"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-8" date="1613131200">- Resolves: rhbz#1926622 - Add support to verify authentication indicators in pam_sss_gss
- Resolves: rhbz#1926454 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0.
- Resolves: rhbz#1893159 - Default debug level should report all errors / failures (additional patch)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.0-1" date="1620648000">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1930535 - [abrt] [faf] sssd: monitor_service_shutdown(): /usr/sbin/sssd killed by 11
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1945888 - Inconsistant debug level for connection logging
- Resolves: rhbz#1948657 - pam_sss_gss.so doesn't work with large kerberos tickets
- Resolves: rhbz#1949149 - [RFE] Poor man's backtrace
- Resolves: rhbz#1920500 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR
- Resolves: rhbz#1923964 - [RFE] SSSD Error Msg Improvement: write_krb5info_file failed, authentication might fail.
- Resolves: rhbz#1928648 - SSSD logs improvements: clarify which config option applies to each timeout in the logs
- Resolves: rhbz#1632159 - sssd-kcm starts successfully for non existent socket_path
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm
- Resolves: rhbz#1925505 - [RFE] improve the sssd refresh timers for SUDO queries
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1925561 - sssd-ldap(5) does not report how to disable the SUDO smart queries
- Resolves: rhbz#1925621 - document impact of indices and of scope on performance of LDAP queries
- Resolves: rhbz#1855320 - [RFE] RHEL8 sssd: inheritance of the case_sensitive parameter for subdomains.
- Resolves: rhbz#1925608 - [RFE] make 'random_offset' addon to 'offline_timeout' option configurable
- Resolves: rhbz#1447945 - man page / docs update required: if two certificate matching rules with the same priority match only one is used
- Resolves: rhbz#1703436 - sssd not thread-safe in innetgr()
- Resolves: rhbz#1713143 - SSSD does not translate the 2FA text labels("first factor" / "second factor") on GDM login and screensaver unlock screen
- Resolves: rhbz#1888977 - sss_override: Usage limitations clarification in man page
- Resolves: rhbz#1890177 - Clarify "single_prompt" option in "PROMPTING CONFIGURATION SECTION" section of sssd.conf man page
- Resolves: rhbz#1902280 - fix sss_cache to also reset cached timestamp
- Resolves: rhbz#1935683 - SSSD not detecting subdomain from AD forest (RHEL 8.3)
- Resolves: rhbz#1937919 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7
- Resolves: rhbz#1944665 - No gpo found and ad_gpo_implicit_deny set to True still permits user login
- Resolves: rhbz#1919942 - sss_override does not take precedence over override_homedir directive</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-1" date="1623153600">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1917444 - SSSD Error Msg Improvement: Server resolution failed: [2]: No such file or directory
- Resolves: rhbz#1917511 - SSSD Error Msg Improvement: Failed to resolve server 'server.example.com': Error reading file
- Resolves: rhbz#1917535 - sssd.conf man page: parameter dns_resolver_server_timeout and dns_resolver_op_timeout
- Resolves: rhbz#1940509 - [RFE] Health and Support Analyzer: Link frontend to backend requests
- Resolves: rhbz#1649464 - auto_private_groups not working as expected with posix ipa/ad trust
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1961215 - Invalid sssd-kcm return code if requested operation is not found
- Resolves: rhbz#1837090 - SSSD fails nss_getby_name for IPA user with SID if the user has user private group
- Resolves: rhbz#1879869 - sudo commands incorrectly exports the KRB5CCNAME environment variable
- Resolves: rhbz#1962550 - sss_pac_make_request fails on systems joined to Active Directory.
- Resolves: rhbz#1737489 - [RFE] SSSD should honor default Kerberos settings (keytab name) in /etc/krb5.conf</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-2" date="1624276800">- Resolves: rhbz#1974257 - 'debug_microseconds' config option is broken
- Resolves: rhbz#1936902 - SSSD Error Msg Improvement: Invalid argument
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm (additional patches and rebuild)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-1" date="1626091200">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1693379 - sssd_be and sss_cache too heavy on CPU
- Resolves: rhbz#1909373 - Missing search index for `originalADgidNumber`
- Resolves: rhbz#1954630 - [RFE] Improve debug messages by adding a unique tag for each request the backend is handling
- Resolves: rhbz#1936891 - SSSD Error Msg Improvement: Bad address
- Resolves: rhbz#1364596 - sssd still showing ipa user after removed from last group
- Resolves: rhbz#1979404 - Changes made to /etc/pam.d/sssd-shadowutils are overwritten back to default on sssd-common package upgrade</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2" date="1627905600">- Resolves: rhbz#1975169 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-8]
- Resolves: rhbz#1962042 - [sssd] RHEL 8.5 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.1" date="1634558400">- Resolves: rhbz#2014460 - tps tests fail with cross dependency on sssd debuginfo package: removal of 'sssd-libwbclient-debuginfo' is missing [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.2" date="1638187200">- Resolves: rhbz#2018440 - 2.5.x based SSSD adds more AD domains than it should based on the configuration file (not trusted and from a different forest) [rhel-8.5.0.z]
- Resolves: rhbz#2016923 - autofs lookups for unknown mounts are delayed for 50s [rhel-8.5.0.z]
- Resolves: rhbz#2021499 - Make backtrace less "chatty" (avoid duplicate backtraces) [rhel-8.5.0.z]
- Resolves: rhbz#2013379 - Lookup with fully-qualified name does not work with 'cache_first = True' [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.3" date="1638878400">- Resolves: rhbz#2028828 - pam responder does not call initgroups to refresh the user entry [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.4" date="1642420800">- Resolves: rhbz#2030651 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries [rhel-8.5.0.z]
- Resolves: rhbz#2035285 - AD Domain in the AD Forest Missing after sssd latest update [rhel-8.5.0.z]</changelog>
</package>
<package pkgid="75c8e1fd71db5d7bc6e0b5cc181e75139e37a12e1cb5225a7af0025589607839" name="sssd-proxy-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="2.el8_5.1"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-5" date="1609156800">- Resolves: rhbz#1631410 - Can't login with smartcard with multiple certs having same ID value
- Resolves: rhbz#1884213 - [RFE] add offline_timeout_max config option to control offline interval backoff (additional patches)
- Resolves: rhbz#1893159 - Default debug level should report all errors / failures
- Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-6" date="1610971200">- Resolves: rhbz#1113639 - autofs: return a connection failure until maps have been fetched
- Resolves: rhbz#1915395 - Memory leak in the simple access provider
- Resolves: rhbz#1915319 - SSSD: SBUS: failures during servers startup
- Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication (additional patches)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-7" date="1611662400">- Resolves: rhbz#1920001 - Do not add '%' to group names already prefixed with '%' in IPA sudo rules
- Resolves: rhbz#1918433 - sssd unable to lookup certmap rules
- Resolves: rhbz#1917382 - [abrt] [faf] sssd: dp_client_handshake_timeout(): /usr/libexec/sssd/sssd_be killed by 11</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-8" date="1613131200">- Resolves: rhbz#1926622 - Add support to verify authentication indicators in pam_sss_gss
- Resolves: rhbz#1926454 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0.
- Resolves: rhbz#1893159 - Default debug level should report all errors / failures (additional patch)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.0-1" date="1620648000">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1930535 - [abrt] [faf] sssd: monitor_service_shutdown(): /usr/sbin/sssd killed by 11
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1945888 - Inconsistant debug level for connection logging
- Resolves: rhbz#1948657 - pam_sss_gss.so doesn't work with large kerberos tickets
- Resolves: rhbz#1949149 - [RFE] Poor man's backtrace
- Resolves: rhbz#1920500 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR
- Resolves: rhbz#1923964 - [RFE] SSSD Error Msg Improvement: write_krb5info_file failed, authentication might fail.
- Resolves: rhbz#1928648 - SSSD logs improvements: clarify which config option applies to each timeout in the logs
- Resolves: rhbz#1632159 - sssd-kcm starts successfully for non existent socket_path
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm
- Resolves: rhbz#1925505 - [RFE] improve the sssd refresh timers for SUDO queries
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1925561 - sssd-ldap(5) does not report how to disable the SUDO smart queries
- Resolves: rhbz#1925621 - document impact of indices and of scope on performance of LDAP queries
- Resolves: rhbz#1855320 - [RFE] RHEL8 sssd: inheritance of the case_sensitive parameter for subdomains.
- Resolves: rhbz#1925608 - [RFE] make 'random_offset' addon to 'offline_timeout' option configurable
- Resolves: rhbz#1447945 - man page / docs update required: if two certificate matching rules with the same priority match only one is used
- Resolves: rhbz#1703436 - sssd not thread-safe in innetgr()
- Resolves: rhbz#1713143 - SSSD does not translate the 2FA text labels("first factor" / "second factor") on GDM login and screensaver unlock screen
- Resolves: rhbz#1888977 - sss_override: Usage limitations clarification in man page
- Resolves: rhbz#1890177 - Clarify "single_prompt" option in "PROMPTING CONFIGURATION SECTION" section of sssd.conf man page
- Resolves: rhbz#1902280 - fix sss_cache to also reset cached timestamp
- Resolves: rhbz#1935683 - SSSD not detecting subdomain from AD forest (RHEL 8.3)
- Resolves: rhbz#1937919 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7
- Resolves: rhbz#1944665 - No gpo found and ad_gpo_implicit_deny set to True still permits user login
- Resolves: rhbz#1919942 - sss_override does not take precedence over override_homedir directive</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-1" date="1623153600">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1917444 - SSSD Error Msg Improvement: Server resolution failed: [2]: No such file or directory
- Resolves: rhbz#1917511 - SSSD Error Msg Improvement: Failed to resolve server 'server.example.com': Error reading file
- Resolves: rhbz#1917535 - sssd.conf man page: parameter dns_resolver_server_timeout and dns_resolver_op_timeout
- Resolves: rhbz#1940509 - [RFE] Health and Support Analyzer: Link frontend to backend requests
- Resolves: rhbz#1649464 - auto_private_groups not working as expected with posix ipa/ad trust
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1961215 - Invalid sssd-kcm return code if requested operation is not found
- Resolves: rhbz#1837090 - SSSD fails nss_getby_name for IPA user with SID if the user has user private group
- Resolves: rhbz#1879869 - sudo commands incorrectly exports the KRB5CCNAME environment variable
- Resolves: rhbz#1962550 - sss_pac_make_request fails on systems joined to Active Directory.
- Resolves: rhbz#1737489 - [RFE] SSSD should honor default Kerberos settings (keytab name) in /etc/krb5.conf</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-2" date="1624276800">- Resolves: rhbz#1974257 - 'debug_microseconds' config option is broken
- Resolves: rhbz#1936902 - SSSD Error Msg Improvement: Invalid argument
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm (additional patches and rebuild)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-1" date="1626091200">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1693379 - sssd_be and sss_cache too heavy on CPU
- Resolves: rhbz#1909373 - Missing search index for `originalADgidNumber`
- Resolves: rhbz#1954630 - [RFE] Improve debug messages by adding a unique tag for each request the backend is handling
- Resolves: rhbz#1936891 - SSSD Error Msg Improvement: Bad address
- Resolves: rhbz#1364596 - sssd still showing ipa user after removed from last group
- Resolves: rhbz#1979404 - Changes made to /etc/pam.d/sssd-shadowutils are overwritten back to default on sssd-common package upgrade</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2" date="1627905600">- Resolves: rhbz#1975169 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-8]
- Resolves: rhbz#1962042 - [sssd] RHEL 8.5 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.1" date="1634558400">- Resolves: rhbz#2014460 - tps tests fail with cross dependency on sssd debuginfo package: removal of 'sssd-libwbclient-debuginfo' is missing [rhel-8.5.0.z]</changelog>
</package>
<package pkgid="a5bbe03240bc3d5ed557cbf1316f79ce3427bc5ca33ff6ef1e0ac0c0b19f931d" name="sssd-proxy-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="2.el8_5.3"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-7" date="1611662400">- Resolves: rhbz#1920001 - Do not add '%' to group names already prefixed with '%' in IPA sudo rules
- Resolves: rhbz#1918433 - sssd unable to lookup certmap rules
- Resolves: rhbz#1917382 - [abrt] [faf] sssd: dp_client_handshake_timeout(): /usr/libexec/sssd/sssd_be killed by 11</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-8" date="1613131200">- Resolves: rhbz#1926622 - Add support to verify authentication indicators in pam_sss_gss
- Resolves: rhbz#1926454 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0.
- Resolves: rhbz#1893159 - Default debug level should report all errors / failures (additional patch)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.0-1" date="1620648000">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1930535 - [abrt] [faf] sssd: monitor_service_shutdown(): /usr/sbin/sssd killed by 11
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1945888 - Inconsistant debug level for connection logging
- Resolves: rhbz#1948657 - pam_sss_gss.so doesn't work with large kerberos tickets
- Resolves: rhbz#1949149 - [RFE] Poor man's backtrace
- Resolves: rhbz#1920500 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR
- Resolves: rhbz#1923964 - [RFE] SSSD Error Msg Improvement: write_krb5info_file failed, authentication might fail.
- Resolves: rhbz#1928648 - SSSD logs improvements: clarify which config option applies to each timeout in the logs
- Resolves: rhbz#1632159 - sssd-kcm starts successfully for non existent socket_path
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm
- Resolves: rhbz#1925505 - [RFE] improve the sssd refresh timers for SUDO queries
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1925561 - sssd-ldap(5) does not report how to disable the SUDO smart queries
- Resolves: rhbz#1925621 - document impact of indices and of scope on performance of LDAP queries
- Resolves: rhbz#1855320 - [RFE] RHEL8 sssd: inheritance of the case_sensitive parameter for subdomains.
- Resolves: rhbz#1925608 - [RFE] make 'random_offset' addon to 'offline_timeout' option configurable
- Resolves: rhbz#1447945 - man page / docs update required: if two certificate matching rules with the same priority match only one is used
- Resolves: rhbz#1703436 - sssd not thread-safe in innetgr()
- Resolves: rhbz#1713143 - SSSD does not translate the 2FA text labels("first factor" / "second factor") on GDM login and screensaver unlock screen
- Resolves: rhbz#1888977 - sss_override: Usage limitations clarification in man page
- Resolves: rhbz#1890177 - Clarify "single_prompt" option in "PROMPTING CONFIGURATION SECTION" section of sssd.conf man page
- Resolves: rhbz#1902280 - fix sss_cache to also reset cached timestamp
- Resolves: rhbz#1935683 - SSSD not detecting subdomain from AD forest (RHEL 8.3)
- Resolves: rhbz#1937919 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7
- Resolves: rhbz#1944665 - No gpo found and ad_gpo_implicit_deny set to True still permits user login
- Resolves: rhbz#1919942 - sss_override does not take precedence over override_homedir directive</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-1" date="1623153600">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1917444 - SSSD Error Msg Improvement: Server resolution failed: [2]: No such file or directory
- Resolves: rhbz#1917511 - SSSD Error Msg Improvement: Failed to resolve server 'server.example.com': Error reading file
- Resolves: rhbz#1917535 - sssd.conf man page: parameter dns_resolver_server_timeout and dns_resolver_op_timeout
- Resolves: rhbz#1940509 - [RFE] Health and Support Analyzer: Link frontend to backend requests
- Resolves: rhbz#1649464 - auto_private_groups not working as expected with posix ipa/ad trust
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1961215 - Invalid sssd-kcm return code if requested operation is not found
- Resolves: rhbz#1837090 - SSSD fails nss_getby_name for IPA user with SID if the user has user private group
- Resolves: rhbz#1879869 - sudo commands incorrectly exports the KRB5CCNAME environment variable
- Resolves: rhbz#1962550 - sss_pac_make_request fails on systems joined to Active Directory.
- Resolves: rhbz#1737489 - [RFE] SSSD should honor default Kerberos settings (keytab name) in /etc/krb5.conf</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-2" date="1624276800">- Resolves: rhbz#1974257 - 'debug_microseconds' config option is broken
- Resolves: rhbz#1936902 - SSSD Error Msg Improvement: Invalid argument
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm (additional patches and rebuild)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-1" date="1626091200">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1693379 - sssd_be and sss_cache too heavy on CPU
- Resolves: rhbz#1909373 - Missing search index for `originalADgidNumber`
- Resolves: rhbz#1954630 - [RFE] Improve debug messages by adding a unique tag for each request the backend is handling
- Resolves: rhbz#1936891 - SSSD Error Msg Improvement: Bad address
- Resolves: rhbz#1364596 - sssd still showing ipa user after removed from last group
- Resolves: rhbz#1979404 - Changes made to /etc/pam.d/sssd-shadowutils are overwritten back to default on sssd-common package upgrade</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2" date="1627905600">- Resolves: rhbz#1975169 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-8]
- Resolves: rhbz#1962042 - [sssd] RHEL 8.5 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.1" date="1634558400">- Resolves: rhbz#2014460 - tps tests fail with cross dependency on sssd debuginfo package: removal of 'sssd-libwbclient-debuginfo' is missing [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.2" date="1638187200">- Resolves: rhbz#2018440 - 2.5.x based SSSD adds more AD domains than it should based on the configuration file (not trusted and from a different forest) [rhel-8.5.0.z]
- Resolves: rhbz#2016923 - autofs lookups for unknown mounts are delayed for 50s [rhel-8.5.0.z]
- Resolves: rhbz#2021499 - Make backtrace less "chatty" (avoid duplicate backtraces) [rhel-8.5.0.z]
- Resolves: rhbz#2013379 - Lookup with fully-qualified name does not work with 'cache_first = True' [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.3" date="1638878400">- Resolves: rhbz#2028828 - pam responder does not call initgroups to refresh the user entry [rhel-8.5.0.z]</changelog>
</package>
<package pkgid="e3072dd53a0b2f18b2f58815a021130ba89326bdeaf05a99aff1117760dd893f" name="sssd-proxy-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="2.el8_5.4"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-8" date="1613131200">- Resolves: rhbz#1926622 - Add support to verify authentication indicators in pam_sss_gss
- Resolves: rhbz#1926454 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0.
- Resolves: rhbz#1893159 - Default debug level should report all errors / failures (additional patch)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.0-1" date="1620648000">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1930535 - [abrt] [faf] sssd: monitor_service_shutdown(): /usr/sbin/sssd killed by 11
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1945888 - Inconsistant debug level for connection logging
- Resolves: rhbz#1948657 - pam_sss_gss.so doesn't work with large kerberos tickets
- Resolves: rhbz#1949149 - [RFE] Poor man's backtrace
- Resolves: rhbz#1920500 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR
- Resolves: rhbz#1923964 - [RFE] SSSD Error Msg Improvement: write_krb5info_file failed, authentication might fail.
- Resolves: rhbz#1928648 - SSSD logs improvements: clarify which config option applies to each timeout in the logs
- Resolves: rhbz#1632159 - sssd-kcm starts successfully for non existent socket_path
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm
- Resolves: rhbz#1925505 - [RFE] improve the sssd refresh timers for SUDO queries
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1925561 - sssd-ldap(5) does not report how to disable the SUDO smart queries
- Resolves: rhbz#1925621 - document impact of indices and of scope on performance of LDAP queries
- Resolves: rhbz#1855320 - [RFE] RHEL8 sssd: inheritance of the case_sensitive parameter for subdomains.
- Resolves: rhbz#1925608 - [RFE] make 'random_offset' addon to 'offline_timeout' option configurable
- Resolves: rhbz#1447945 - man page / docs update required: if two certificate matching rules with the same priority match only one is used
- Resolves: rhbz#1703436 - sssd not thread-safe in innetgr()
- Resolves: rhbz#1713143 - SSSD does not translate the 2FA text labels("first factor" / "second factor") on GDM login and screensaver unlock screen
- Resolves: rhbz#1888977 - sss_override: Usage limitations clarification in man page
- Resolves: rhbz#1890177 - Clarify "single_prompt" option in "PROMPTING CONFIGURATION SECTION" section of sssd.conf man page
- Resolves: rhbz#1902280 - fix sss_cache to also reset cached timestamp
- Resolves: rhbz#1935683 - SSSD not detecting subdomain from AD forest (RHEL 8.3)
- Resolves: rhbz#1937919 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7
- Resolves: rhbz#1944665 - No gpo found and ad_gpo_implicit_deny set to True still permits user login
- Resolves: rhbz#1919942 - sss_override does not take precedence over override_homedir directive</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-1" date="1623153600">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1917444 - SSSD Error Msg Improvement: Server resolution failed: [2]: No such file or directory
- Resolves: rhbz#1917511 - SSSD Error Msg Improvement: Failed to resolve server 'server.example.com': Error reading file
- Resolves: rhbz#1917535 - sssd.conf man page: parameter dns_resolver_server_timeout and dns_resolver_op_timeout
- Resolves: rhbz#1940509 - [RFE] Health and Support Analyzer: Link frontend to backend requests
- Resolves: rhbz#1649464 - auto_private_groups not working as expected with posix ipa/ad trust
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1961215 - Invalid sssd-kcm return code if requested operation is not found
- Resolves: rhbz#1837090 - SSSD fails nss_getby_name for IPA user with SID if the user has user private group
- Resolves: rhbz#1879869 - sudo commands incorrectly exports the KRB5CCNAME environment variable
- Resolves: rhbz#1962550 - sss_pac_make_request fails on systems joined to Active Directory.
- Resolves: rhbz#1737489 - [RFE] SSSD should honor default Kerberos settings (keytab name) in /etc/krb5.conf</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-2" date="1624276800">- Resolves: rhbz#1974257 - 'debug_microseconds' config option is broken
- Resolves: rhbz#1936902 - SSSD Error Msg Improvement: Invalid argument
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm (additional patches and rebuild)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-1" date="1626091200">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1693379 - sssd_be and sss_cache too heavy on CPU
- Resolves: rhbz#1909373 - Missing search index for `originalADgidNumber`
- Resolves: rhbz#1954630 - [RFE] Improve debug messages by adding a unique tag for each request the backend is handling
- Resolves: rhbz#1936891 - SSSD Error Msg Improvement: Bad address
- Resolves: rhbz#1364596 - sssd still showing ipa user after removed from last group
- Resolves: rhbz#1979404 - Changes made to /etc/pam.d/sssd-shadowutils are overwritten back to default on sssd-common package upgrade</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2" date="1627905600">- Resolves: rhbz#1975169 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-8]
- Resolves: rhbz#1962042 - [sssd] RHEL 8.5 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.1" date="1634558400">- Resolves: rhbz#2014460 - tps tests fail with cross dependency on sssd debuginfo package: removal of 'sssd-libwbclient-debuginfo' is missing [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.2" date="1638187200">- Resolves: rhbz#2018440 - 2.5.x based SSSD adds more AD domains than it should based on the configuration file (not trusted and from a different forest) [rhel-8.5.0.z]
- Resolves: rhbz#2016923 - autofs lookups for unknown mounts are delayed for 50s [rhel-8.5.0.z]
- Resolves: rhbz#2021499 - Make backtrace less "chatty" (avoid duplicate backtraces) [rhel-8.5.0.z]
- Resolves: rhbz#2013379 - Lookup with fully-qualified name does not work with 'cache_first = True' [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.3" date="1638878400">- Resolves: rhbz#2028828 - pam responder does not call initgroups to refresh the user entry [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.4" date="1642420800">- Resolves: rhbz#2030651 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries [rhel-8.5.0.z]
- Resolves: rhbz#2035285 - AD Domain in the AD Forest Missing after sssd latest update [rhel-8.5.0.z]</changelog>
</package>
<package pkgid="b44b8db096cd67bdc8ce89055a407966b957cbbb0135da25709067ad3fd54653" name="sssd-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="2.el8_5.1"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-5" date="1609156800">- Resolves: rhbz#1631410 - Can't login with smartcard with multiple certs having same ID value
- Resolves: rhbz#1884213 - [RFE] add offline_timeout_max config option to control offline interval backoff (additional patches)
- Resolves: rhbz#1893159 - Default debug level should report all errors / failures
- Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-6" date="1610971200">- Resolves: rhbz#1113639 - autofs: return a connection failure until maps have been fetched
- Resolves: rhbz#1915395 - Memory leak in the simple access provider
- Resolves: rhbz#1915319 - SSSD: SBUS: failures during servers startup
- Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication (additional patches)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-7" date="1611662400">- Resolves: rhbz#1920001 - Do not add '%' to group names already prefixed with '%' in IPA sudo rules
- Resolves: rhbz#1918433 - sssd unable to lookup certmap rules
- Resolves: rhbz#1917382 - [abrt] [faf] sssd: dp_client_handshake_timeout(): /usr/libexec/sssd/sssd_be killed by 11</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-8" date="1613131200">- Resolves: rhbz#1926622 - Add support to verify authentication indicators in pam_sss_gss
- Resolves: rhbz#1926454 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0.
- Resolves: rhbz#1893159 - Default debug level should report all errors / failures (additional patch)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.0-1" date="1620648000">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1930535 - [abrt] [faf] sssd: monitor_service_shutdown(): /usr/sbin/sssd killed by 11
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1945888 - Inconsistant debug level for connection logging
- Resolves: rhbz#1948657 - pam_sss_gss.so doesn't work with large kerberos tickets
- Resolves: rhbz#1949149 - [RFE] Poor man's backtrace
- Resolves: rhbz#1920500 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR
- Resolves: rhbz#1923964 - [RFE] SSSD Error Msg Improvement: write_krb5info_file failed, authentication might fail.
- Resolves: rhbz#1928648 - SSSD logs improvements: clarify which config option applies to each timeout in the logs
- Resolves: rhbz#1632159 - sssd-kcm starts successfully for non existent socket_path
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm
- Resolves: rhbz#1925505 - [RFE] improve the sssd refresh timers for SUDO queries
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1925561 - sssd-ldap(5) does not report how to disable the SUDO smart queries
- Resolves: rhbz#1925621 - document impact of indices and of scope on performance of LDAP queries
- Resolves: rhbz#1855320 - [RFE] RHEL8 sssd: inheritance of the case_sensitive parameter for subdomains.
- Resolves: rhbz#1925608 - [RFE] make 'random_offset' addon to 'offline_timeout' option configurable
- Resolves: rhbz#1447945 - man page / docs update required: if two certificate matching rules with the same priority match only one is used
- Resolves: rhbz#1703436 - sssd not thread-safe in innetgr()
- Resolves: rhbz#1713143 - SSSD does not translate the 2FA text labels("first factor" / "second factor") on GDM login and screensaver unlock screen
- Resolves: rhbz#1888977 - sss_override: Usage limitations clarification in man page
- Resolves: rhbz#1890177 - Clarify "single_prompt" option in "PROMPTING CONFIGURATION SECTION" section of sssd.conf man page
- Resolves: rhbz#1902280 - fix sss_cache to also reset cached timestamp
- Resolves: rhbz#1935683 - SSSD not detecting subdomain from AD forest (RHEL 8.3)
- Resolves: rhbz#1937919 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7
- Resolves: rhbz#1944665 - No gpo found and ad_gpo_implicit_deny set to True still permits user login
- Resolves: rhbz#1919942 - sss_override does not take precedence over override_homedir directive</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-1" date="1623153600">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1917444 - SSSD Error Msg Improvement: Server resolution failed: [2]: No such file or directory
- Resolves: rhbz#1917511 - SSSD Error Msg Improvement: Failed to resolve server 'server.example.com': Error reading file
- Resolves: rhbz#1917535 - sssd.conf man page: parameter dns_resolver_server_timeout and dns_resolver_op_timeout
- Resolves: rhbz#1940509 - [RFE] Health and Support Analyzer: Link frontend to backend requests
- Resolves: rhbz#1649464 - auto_private_groups not working as expected with posix ipa/ad trust
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1961215 - Invalid sssd-kcm return code if requested operation is not found
- Resolves: rhbz#1837090 - SSSD fails nss_getby_name for IPA user with SID if the user has user private group
- Resolves: rhbz#1879869 - sudo commands incorrectly exports the KRB5CCNAME environment variable
- Resolves: rhbz#1962550 - sss_pac_make_request fails on systems joined to Active Directory.
- Resolves: rhbz#1737489 - [RFE] SSSD should honor default Kerberos settings (keytab name) in /etc/krb5.conf</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-2" date="1624276800">- Resolves: rhbz#1974257 - 'debug_microseconds' config option is broken
- Resolves: rhbz#1936902 - SSSD Error Msg Improvement: Invalid argument
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm (additional patches and rebuild)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-1" date="1626091200">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1693379 - sssd_be and sss_cache too heavy on CPU
- Resolves: rhbz#1909373 - Missing search index for `originalADgidNumber`
- Resolves: rhbz#1954630 - [RFE] Improve debug messages by adding a unique tag for each request the backend is handling
- Resolves: rhbz#1936891 - SSSD Error Msg Improvement: Bad address
- Resolves: rhbz#1364596 - sssd still showing ipa user after removed from last group
- Resolves: rhbz#1979404 - Changes made to /etc/pam.d/sssd-shadowutils are overwritten back to default on sssd-common package upgrade</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2" date="1627905600">- Resolves: rhbz#1975169 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-8]
- Resolves: rhbz#1962042 - [sssd] RHEL 8.5 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.1" date="1634558400">- Resolves: rhbz#2014460 - tps tests fail with cross dependency on sssd debuginfo package: removal of 'sssd-libwbclient-debuginfo' is missing [rhel-8.5.0.z]</changelog>
</package>
<package pkgid="2a3a8396e6faa1c3f7c1a98c6b90ec5d2f936b0ec086ce36956611bdf288c104" name="sssd-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="2.el8_5.3"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-7" date="1611662400">- Resolves: rhbz#1920001 - Do not add '%' to group names already prefixed with '%' in IPA sudo rules
- Resolves: rhbz#1918433 - sssd unable to lookup certmap rules
- Resolves: rhbz#1917382 - [abrt] [faf] sssd: dp_client_handshake_timeout(): /usr/libexec/sssd/sssd_be killed by 11</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-8" date="1613131200">- Resolves: rhbz#1926622 - Add support to verify authentication indicators in pam_sss_gss
- Resolves: rhbz#1926454 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0.
- Resolves: rhbz#1893159 - Default debug level should report all errors / failures (additional patch)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.0-1" date="1620648000">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1930535 - [abrt] [faf] sssd: monitor_service_shutdown(): /usr/sbin/sssd killed by 11
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1945888 - Inconsistant debug level for connection logging
- Resolves: rhbz#1948657 - pam_sss_gss.so doesn't work with large kerberos tickets
- Resolves: rhbz#1949149 - [RFE] Poor man's backtrace
- Resolves: rhbz#1920500 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR
- Resolves: rhbz#1923964 - [RFE] SSSD Error Msg Improvement: write_krb5info_file failed, authentication might fail.
- Resolves: rhbz#1928648 - SSSD logs improvements: clarify which config option applies to each timeout in the logs
- Resolves: rhbz#1632159 - sssd-kcm starts successfully for non existent socket_path
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm
- Resolves: rhbz#1925505 - [RFE] improve the sssd refresh timers for SUDO queries
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1925561 - sssd-ldap(5) does not report how to disable the SUDO smart queries
- Resolves: rhbz#1925621 - document impact of indices and of scope on performance of LDAP queries
- Resolves: rhbz#1855320 - [RFE] RHEL8 sssd: inheritance of the case_sensitive parameter for subdomains.
- Resolves: rhbz#1925608 - [RFE] make 'random_offset' addon to 'offline_timeout' option configurable
- Resolves: rhbz#1447945 - man page / docs update required: if two certificate matching rules with the same priority match only one is used
- Resolves: rhbz#1703436 - sssd not thread-safe in innetgr()
- Resolves: rhbz#1713143 - SSSD does not translate the 2FA text labels("first factor" / "second factor") on GDM login and screensaver unlock screen
- Resolves: rhbz#1888977 - sss_override: Usage limitations clarification in man page
- Resolves: rhbz#1890177 - Clarify "single_prompt" option in "PROMPTING CONFIGURATION SECTION" section of sssd.conf man page
- Resolves: rhbz#1902280 - fix sss_cache to also reset cached timestamp
- Resolves: rhbz#1935683 - SSSD not detecting subdomain from AD forest (RHEL 8.3)
- Resolves: rhbz#1937919 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7
- Resolves: rhbz#1944665 - No gpo found and ad_gpo_implicit_deny set to True still permits user login
- Resolves: rhbz#1919942 - sss_override does not take precedence over override_homedir directive</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-1" date="1623153600">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1917444 - SSSD Error Msg Improvement: Server resolution failed: [2]: No such file or directory
- Resolves: rhbz#1917511 - SSSD Error Msg Improvement: Failed to resolve server 'server.example.com': Error reading file
- Resolves: rhbz#1917535 - sssd.conf man page: parameter dns_resolver_server_timeout and dns_resolver_op_timeout
- Resolves: rhbz#1940509 - [RFE] Health and Support Analyzer: Link frontend to backend requests
- Resolves: rhbz#1649464 - auto_private_groups not working as expected with posix ipa/ad trust
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1961215 - Invalid sssd-kcm return code if requested operation is not found
- Resolves: rhbz#1837090 - SSSD fails nss_getby_name for IPA user with SID if the user has user private group
- Resolves: rhbz#1879869 - sudo commands incorrectly exports the KRB5CCNAME environment variable
- Resolves: rhbz#1962550 - sss_pac_make_request fails on systems joined to Active Directory.
- Resolves: rhbz#1737489 - [RFE] SSSD should honor default Kerberos settings (keytab name) in /etc/krb5.conf</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-2" date="1624276800">- Resolves: rhbz#1974257 - 'debug_microseconds' config option is broken
- Resolves: rhbz#1936902 - SSSD Error Msg Improvement: Invalid argument
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm (additional patches and rebuild)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-1" date="1626091200">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1693379 - sssd_be and sss_cache too heavy on CPU
- Resolves: rhbz#1909373 - Missing search index for `originalADgidNumber`
- Resolves: rhbz#1954630 - [RFE] Improve debug messages by adding a unique tag for each request the backend is handling
- Resolves: rhbz#1936891 - SSSD Error Msg Improvement: Bad address
- Resolves: rhbz#1364596 - sssd still showing ipa user after removed from last group
- Resolves: rhbz#1979404 - Changes made to /etc/pam.d/sssd-shadowutils are overwritten back to default on sssd-common package upgrade</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2" date="1627905600">- Resolves: rhbz#1975169 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-8]
- Resolves: rhbz#1962042 - [sssd] RHEL 8.5 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.1" date="1634558400">- Resolves: rhbz#2014460 - tps tests fail with cross dependency on sssd debuginfo package: removal of 'sssd-libwbclient-debuginfo' is missing [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.2" date="1638187200">- Resolves: rhbz#2018440 - 2.5.x based SSSD adds more AD domains than it should based on the configuration file (not trusted and from a different forest) [rhel-8.5.0.z]
- Resolves: rhbz#2016923 - autofs lookups for unknown mounts are delayed for 50s [rhel-8.5.0.z]
- Resolves: rhbz#2021499 - Make backtrace less "chatty" (avoid duplicate backtraces) [rhel-8.5.0.z]
- Resolves: rhbz#2013379 - Lookup with fully-qualified name does not work with 'cache_first = True' [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.3" date="1638878400">- Resolves: rhbz#2028828 - pam responder does not call initgroups to refresh the user entry [rhel-8.5.0.z]</changelog>
</package>
<package pkgid="5681463df375db7ed6796ad1d09528fbb16171fadbf0a287cbed96337e1191dd" name="sssd-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="2.el8_5.4"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-8" date="1613131200">- Resolves: rhbz#1926622 - Add support to verify authentication indicators in pam_sss_gss
- Resolves: rhbz#1926454 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0.
- Resolves: rhbz#1893159 - Default debug level should report all errors / failures (additional patch)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.0-1" date="1620648000">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1930535 - [abrt] [faf] sssd: monitor_service_shutdown(): /usr/sbin/sssd killed by 11
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1945888 - Inconsistant debug level for connection logging
- Resolves: rhbz#1948657 - pam_sss_gss.so doesn't work with large kerberos tickets
- Resolves: rhbz#1949149 - [RFE] Poor man's backtrace
- Resolves: rhbz#1920500 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR
- Resolves: rhbz#1923964 - [RFE] SSSD Error Msg Improvement: write_krb5info_file failed, authentication might fail.
- Resolves: rhbz#1928648 - SSSD logs improvements: clarify which config option applies to each timeout in the logs
- Resolves: rhbz#1632159 - sssd-kcm starts successfully for non existent socket_path
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm
- Resolves: rhbz#1925505 - [RFE] improve the sssd refresh timers for SUDO queries
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1925561 - sssd-ldap(5) does not report how to disable the SUDO smart queries
- Resolves: rhbz#1925621 - document impact of indices and of scope on performance of LDAP queries
- Resolves: rhbz#1855320 - [RFE] RHEL8 sssd: inheritance of the case_sensitive parameter for subdomains.
- Resolves: rhbz#1925608 - [RFE] make 'random_offset' addon to 'offline_timeout' option configurable
- Resolves: rhbz#1447945 - man page / docs update required: if two certificate matching rules with the same priority match only one is used
- Resolves: rhbz#1703436 - sssd not thread-safe in innetgr()
- Resolves: rhbz#1713143 - SSSD does not translate the 2FA text labels("first factor" / "second factor") on GDM login and screensaver unlock screen
- Resolves: rhbz#1888977 - sss_override: Usage limitations clarification in man page
- Resolves: rhbz#1890177 - Clarify "single_prompt" option in "PROMPTING CONFIGURATION SECTION" section of sssd.conf man page
- Resolves: rhbz#1902280 - fix sss_cache to also reset cached timestamp
- Resolves: rhbz#1935683 - SSSD not detecting subdomain from AD forest (RHEL 8.3)
- Resolves: rhbz#1937919 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7
- Resolves: rhbz#1944665 - No gpo found and ad_gpo_implicit_deny set to True still permits user login
- Resolves: rhbz#1919942 - sss_override does not take precedence over override_homedir directive</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-1" date="1623153600">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1917444 - SSSD Error Msg Improvement: Server resolution failed: [2]: No such file or directory
- Resolves: rhbz#1917511 - SSSD Error Msg Improvement: Failed to resolve server 'server.example.com': Error reading file
- Resolves: rhbz#1917535 - sssd.conf man page: parameter dns_resolver_server_timeout and dns_resolver_op_timeout
- Resolves: rhbz#1940509 - [RFE] Health and Support Analyzer: Link frontend to backend requests
- Resolves: rhbz#1649464 - auto_private_groups not working as expected with posix ipa/ad trust
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1961215 - Invalid sssd-kcm return code if requested operation is not found
- Resolves: rhbz#1837090 - SSSD fails nss_getby_name for IPA user with SID if the user has user private group
- Resolves: rhbz#1879869 - sudo commands incorrectly exports the KRB5CCNAME environment variable
- Resolves: rhbz#1962550 - sss_pac_make_request fails on systems joined to Active Directory.
- Resolves: rhbz#1737489 - [RFE] SSSD should honor default Kerberos settings (keytab name) in /etc/krb5.conf</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-2" date="1624276800">- Resolves: rhbz#1974257 - 'debug_microseconds' config option is broken
- Resolves: rhbz#1936902 - SSSD Error Msg Improvement: Invalid argument
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm (additional patches and rebuild)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-1" date="1626091200">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1693379 - sssd_be and sss_cache too heavy on CPU
- Resolves: rhbz#1909373 - Missing search index for `originalADgidNumber`
- Resolves: rhbz#1954630 - [RFE] Improve debug messages by adding a unique tag for each request the backend is handling
- Resolves: rhbz#1936891 - SSSD Error Msg Improvement: Bad address
- Resolves: rhbz#1364596 - sssd still showing ipa user after removed from last group
- Resolves: rhbz#1979404 - Changes made to /etc/pam.d/sssd-shadowutils are overwritten back to default on sssd-common package upgrade</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2" date="1627905600">- Resolves: rhbz#1975169 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-8]
- Resolves: rhbz#1962042 - [sssd] RHEL 8.5 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.1" date="1634558400">- Resolves: rhbz#2014460 - tps tests fail with cross dependency on sssd debuginfo package: removal of 'sssd-libwbclient-debuginfo' is missing [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.2" date="1638187200">- Resolves: rhbz#2018440 - 2.5.x based SSSD adds more AD domains than it should based on the configuration file (not trusted and from a different forest) [rhel-8.5.0.z]
- Resolves: rhbz#2016923 - autofs lookups for unknown mounts are delayed for 50s [rhel-8.5.0.z]
- Resolves: rhbz#2021499 - Make backtrace less "chatty" (avoid duplicate backtraces) [rhel-8.5.0.z]
- Resolves: rhbz#2013379 - Lookup with fully-qualified name does not work with 'cache_first = True' [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.3" date="1638878400">- Resolves: rhbz#2028828 - pam responder does not call initgroups to refresh the user entry [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.4" date="1642420800">- Resolves: rhbz#2030651 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries [rhel-8.5.0.z]
- Resolves: rhbz#2035285 - AD Domain in the AD Forest Missing after sssd latest update [rhel-8.5.0.z]</changelog>
</package>
<package pkgid="7bf379d2132af76ee9b49fb3c739f8d8fd3c494c522d3132c55fc8b4c8a00cf6" name="sssd-winbind-idmap-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="2.el8_5.1"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-5" date="1609156800">- Resolves: rhbz#1631410 - Can't login with smartcard with multiple certs having same ID value
- Resolves: rhbz#1884213 - [RFE] add offline_timeout_max config option to control offline interval backoff (additional patches)
- Resolves: rhbz#1893159 - Default debug level should report all errors / failures
- Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-6" date="1610971200">- Resolves: rhbz#1113639 - autofs: return a connection failure until maps have been fetched
- Resolves: rhbz#1915395 - Memory leak in the simple access provider
- Resolves: rhbz#1915319 - SSSD: SBUS: failures during servers startup
- Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication (additional patches)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-7" date="1611662400">- Resolves: rhbz#1920001 - Do not add '%' to group names already prefixed with '%' in IPA sudo rules
- Resolves: rhbz#1918433 - sssd unable to lookup certmap rules
- Resolves: rhbz#1917382 - [abrt] [faf] sssd: dp_client_handshake_timeout(): /usr/libexec/sssd/sssd_be killed by 11</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-8" date="1613131200">- Resolves: rhbz#1926622 - Add support to verify authentication indicators in pam_sss_gss
- Resolves: rhbz#1926454 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0.
- Resolves: rhbz#1893159 - Default debug level should report all errors / failures (additional patch)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.0-1" date="1620648000">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1930535 - [abrt] [faf] sssd: monitor_service_shutdown(): /usr/sbin/sssd killed by 11
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1945888 - Inconsistant debug level for connection logging
- Resolves: rhbz#1948657 - pam_sss_gss.so doesn't work with large kerberos tickets
- Resolves: rhbz#1949149 - [RFE] Poor man's backtrace
- Resolves: rhbz#1920500 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR
- Resolves: rhbz#1923964 - [RFE] SSSD Error Msg Improvement: write_krb5info_file failed, authentication might fail.
- Resolves: rhbz#1928648 - SSSD logs improvements: clarify which config option applies to each timeout in the logs
- Resolves: rhbz#1632159 - sssd-kcm starts successfully for non existent socket_path
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm
- Resolves: rhbz#1925505 - [RFE] improve the sssd refresh timers for SUDO queries
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1925561 - sssd-ldap(5) does not report how to disable the SUDO smart queries
- Resolves: rhbz#1925621 - document impact of indices and of scope on performance of LDAP queries
- Resolves: rhbz#1855320 - [RFE] RHEL8 sssd: inheritance of the case_sensitive parameter for subdomains.
- Resolves: rhbz#1925608 - [RFE] make 'random_offset' addon to 'offline_timeout' option configurable
- Resolves: rhbz#1447945 - man page / docs update required: if two certificate matching rules with the same priority match only one is used
- Resolves: rhbz#1703436 - sssd not thread-safe in innetgr()
- Resolves: rhbz#1713143 - SSSD does not translate the 2FA text labels("first factor" / "second factor") on GDM login and screensaver unlock screen
- Resolves: rhbz#1888977 - sss_override: Usage limitations clarification in man page
- Resolves: rhbz#1890177 - Clarify "single_prompt" option in "PROMPTING CONFIGURATION SECTION" section of sssd.conf man page
- Resolves: rhbz#1902280 - fix sss_cache to also reset cached timestamp
- Resolves: rhbz#1935683 - SSSD not detecting subdomain from AD forest (RHEL 8.3)
- Resolves: rhbz#1937919 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7
- Resolves: rhbz#1944665 - No gpo found and ad_gpo_implicit_deny set to True still permits user login
- Resolves: rhbz#1919942 - sss_override does not take precedence over override_homedir directive</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-1" date="1623153600">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1917444 - SSSD Error Msg Improvement: Server resolution failed: [2]: No such file or directory
- Resolves: rhbz#1917511 - SSSD Error Msg Improvement: Failed to resolve server 'server.example.com': Error reading file
- Resolves: rhbz#1917535 - sssd.conf man page: parameter dns_resolver_server_timeout and dns_resolver_op_timeout
- Resolves: rhbz#1940509 - [RFE] Health and Support Analyzer: Link frontend to backend requests
- Resolves: rhbz#1649464 - auto_private_groups not working as expected with posix ipa/ad trust
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1961215 - Invalid sssd-kcm return code if requested operation is not found
- Resolves: rhbz#1837090 - SSSD fails nss_getby_name for IPA user with SID if the user has user private group
- Resolves: rhbz#1879869 - sudo commands incorrectly exports the KRB5CCNAME environment variable
- Resolves: rhbz#1962550 - sss_pac_make_request fails on systems joined to Active Directory.
- Resolves: rhbz#1737489 - [RFE] SSSD should honor default Kerberos settings (keytab name) in /etc/krb5.conf</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-2" date="1624276800">- Resolves: rhbz#1974257 - 'debug_microseconds' config option is broken
- Resolves: rhbz#1936902 - SSSD Error Msg Improvement: Invalid argument
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm (additional patches and rebuild)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-1" date="1626091200">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1693379 - sssd_be and sss_cache too heavy on CPU
- Resolves: rhbz#1909373 - Missing search index for `originalADgidNumber`
- Resolves: rhbz#1954630 - [RFE] Improve debug messages by adding a unique tag for each request the backend is handling
- Resolves: rhbz#1936891 - SSSD Error Msg Improvement: Bad address
- Resolves: rhbz#1364596 - sssd still showing ipa user after removed from last group
- Resolves: rhbz#1979404 - Changes made to /etc/pam.d/sssd-shadowutils are overwritten back to default on sssd-common package upgrade</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2" date="1627905600">- Resolves: rhbz#1975169 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-8]
- Resolves: rhbz#1962042 - [sssd] RHEL 8.5 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.1" date="1634558400">- Resolves: rhbz#2014460 - tps tests fail with cross dependency on sssd debuginfo package: removal of 'sssd-libwbclient-debuginfo' is missing [rhel-8.5.0.z]</changelog>
</package>
<package pkgid="e5c9d69e30d977f0744067dcfe7edf542d0acb3a43686f7d90f7f5c8cfcedfc7" name="sssd-winbind-idmap-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="2.el8_5.3"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-7" date="1611662400">- Resolves: rhbz#1920001 - Do not add '%' to group names already prefixed with '%' in IPA sudo rules
- Resolves: rhbz#1918433 - sssd unable to lookup certmap rules
- Resolves: rhbz#1917382 - [abrt] [faf] sssd: dp_client_handshake_timeout(): /usr/libexec/sssd/sssd_be killed by 11</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-8" date="1613131200">- Resolves: rhbz#1926622 - Add support to verify authentication indicators in pam_sss_gss
- Resolves: rhbz#1926454 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0.
- Resolves: rhbz#1893159 - Default debug level should report all errors / failures (additional patch)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.0-1" date="1620648000">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1930535 - [abrt] [faf] sssd: monitor_service_shutdown(): /usr/sbin/sssd killed by 11
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1945888 - Inconsistant debug level for connection logging
- Resolves: rhbz#1948657 - pam_sss_gss.so doesn't work with large kerberos tickets
- Resolves: rhbz#1949149 - [RFE] Poor man's backtrace
- Resolves: rhbz#1920500 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR
- Resolves: rhbz#1923964 - [RFE] SSSD Error Msg Improvement: write_krb5info_file failed, authentication might fail.
- Resolves: rhbz#1928648 - SSSD logs improvements: clarify which config option applies to each timeout in the logs
- Resolves: rhbz#1632159 - sssd-kcm starts successfully for non existent socket_path
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm
- Resolves: rhbz#1925505 - [RFE] improve the sssd refresh timers for SUDO queries
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1925561 - sssd-ldap(5) does not report how to disable the SUDO smart queries
- Resolves: rhbz#1925621 - document impact of indices and of scope on performance of LDAP queries
- Resolves: rhbz#1855320 - [RFE] RHEL8 sssd: inheritance of the case_sensitive parameter for subdomains.
- Resolves: rhbz#1925608 - [RFE] make 'random_offset' addon to 'offline_timeout' option configurable
- Resolves: rhbz#1447945 - man page / docs update required: if two certificate matching rules with the same priority match only one is used
- Resolves: rhbz#1703436 - sssd not thread-safe in innetgr()
- Resolves: rhbz#1713143 - SSSD does not translate the 2FA text labels("first factor" / "second factor") on GDM login and screensaver unlock screen
- Resolves: rhbz#1888977 - sss_override: Usage limitations clarification in man page
- Resolves: rhbz#1890177 - Clarify "single_prompt" option in "PROMPTING CONFIGURATION SECTION" section of sssd.conf man page
- Resolves: rhbz#1902280 - fix sss_cache to also reset cached timestamp
- Resolves: rhbz#1935683 - SSSD not detecting subdomain from AD forest (RHEL 8.3)
- Resolves: rhbz#1937919 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7
- Resolves: rhbz#1944665 - No gpo found and ad_gpo_implicit_deny set to True still permits user login
- Resolves: rhbz#1919942 - sss_override does not take precedence over override_homedir directive</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-1" date="1623153600">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1917444 - SSSD Error Msg Improvement: Server resolution failed: [2]: No such file or directory
- Resolves: rhbz#1917511 - SSSD Error Msg Improvement: Failed to resolve server 'server.example.com': Error reading file
- Resolves: rhbz#1917535 - sssd.conf man page: parameter dns_resolver_server_timeout and dns_resolver_op_timeout
- Resolves: rhbz#1940509 - [RFE] Health and Support Analyzer: Link frontend to backend requests
- Resolves: rhbz#1649464 - auto_private_groups not working as expected with posix ipa/ad trust
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1961215 - Invalid sssd-kcm return code if requested operation is not found
- Resolves: rhbz#1837090 - SSSD fails nss_getby_name for IPA user with SID if the user has user private group
- Resolves: rhbz#1879869 - sudo commands incorrectly exports the KRB5CCNAME environment variable
- Resolves: rhbz#1962550 - sss_pac_make_request fails on systems joined to Active Directory.
- Resolves: rhbz#1737489 - [RFE] SSSD should honor default Kerberos settings (keytab name) in /etc/krb5.conf</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-2" date="1624276800">- Resolves: rhbz#1974257 - 'debug_microseconds' config option is broken
- Resolves: rhbz#1936902 - SSSD Error Msg Improvement: Invalid argument
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm (additional patches and rebuild)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-1" date="1626091200">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1693379 - sssd_be and sss_cache too heavy on CPU
- Resolves: rhbz#1909373 - Missing search index for `originalADgidNumber`
- Resolves: rhbz#1954630 - [RFE] Improve debug messages by adding a unique tag for each request the backend is handling
- Resolves: rhbz#1936891 - SSSD Error Msg Improvement: Bad address
- Resolves: rhbz#1364596 - sssd still showing ipa user after removed from last group
- Resolves: rhbz#1979404 - Changes made to /etc/pam.d/sssd-shadowutils are overwritten back to default on sssd-common package upgrade</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2" date="1627905600">- Resolves: rhbz#1975169 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-8]
- Resolves: rhbz#1962042 - [sssd] RHEL 8.5 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.1" date="1634558400">- Resolves: rhbz#2014460 - tps tests fail with cross dependency on sssd debuginfo package: removal of 'sssd-libwbclient-debuginfo' is missing [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.2" date="1638187200">- Resolves: rhbz#2018440 - 2.5.x based SSSD adds more AD domains than it should based on the configuration file (not trusted and from a different forest) [rhel-8.5.0.z]
- Resolves: rhbz#2016923 - autofs lookups for unknown mounts are delayed for 50s [rhel-8.5.0.z]
- Resolves: rhbz#2021499 - Make backtrace less "chatty" (avoid duplicate backtraces) [rhel-8.5.0.z]
- Resolves: rhbz#2013379 - Lookup with fully-qualified name does not work with 'cache_first = True' [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.3" date="1638878400">- Resolves: rhbz#2028828 - pam responder does not call initgroups to refresh the user entry [rhel-8.5.0.z]</changelog>
</package>
<package pkgid="73fe80e8f82262fd068ed84ed256dcbca2d9beb9e39165eaf14aeecb07a7cc23" name="sssd-winbind-idmap-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="2.el8_5.4"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.4.0-8" date="1613131200">- Resolves: rhbz#1926622 - Add support to verify authentication indicators in pam_sss_gss
- Resolves: rhbz#1926454 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0.
- Resolves: rhbz#1893159 - Default debug level should report all errors / failures (additional patch)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.0-1" date="1620648000">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1930535 - [abrt] [faf] sssd: monitor_service_shutdown(): /usr/sbin/sssd killed by 11
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1945888 - Inconsistant debug level for connection logging
- Resolves: rhbz#1948657 - pam_sss_gss.so doesn't work with large kerberos tickets
- Resolves: rhbz#1949149 - [RFE] Poor man's backtrace
- Resolves: rhbz#1920500 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR
- Resolves: rhbz#1923964 - [RFE] SSSD Error Msg Improvement: write_krb5info_file failed, authentication might fail.
- Resolves: rhbz#1928648 - SSSD logs improvements: clarify which config option applies to each timeout in the logs
- Resolves: rhbz#1632159 - sssd-kcm starts successfully for non existent socket_path
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm
- Resolves: rhbz#1925505 - [RFE] improve the sssd refresh timers for SUDO queries
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1925561 - sssd-ldap(5) does not report how to disable the SUDO smart queries
- Resolves: rhbz#1925621 - document impact of indices and of scope on performance of LDAP queries
- Resolves: rhbz#1855320 - [RFE] RHEL8 sssd: inheritance of the case_sensitive parameter for subdomains.
- Resolves: rhbz#1925608 - [RFE] make 'random_offset' addon to 'offline_timeout' option configurable
- Resolves: rhbz#1447945 - man page / docs update required: if two certificate matching rules with the same priority match only one is used
- Resolves: rhbz#1703436 - sssd not thread-safe in innetgr()
- Resolves: rhbz#1713143 - SSSD does not translate the 2FA text labels("first factor" / "second factor") on GDM login and screensaver unlock screen
- Resolves: rhbz#1888977 - sss_override: Usage limitations clarification in man page
- Resolves: rhbz#1890177 - Clarify "single_prompt" option in "PROMPTING CONFIGURATION SECTION" section of sssd.conf man page
- Resolves: rhbz#1902280 - fix sss_cache to also reset cached timestamp
- Resolves: rhbz#1935683 - SSSD not detecting subdomain from AD forest (RHEL 8.3)
- Resolves: rhbz#1937919 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7
- Resolves: rhbz#1944665 - No gpo found and ad_gpo_implicit_deny set to True still permits user login
- Resolves: rhbz#1919942 - sss_override does not take precedence over override_homedir directive</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-1" date="1623153600">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1917444 - SSSD Error Msg Improvement: Server resolution failed: [2]: No such file or directory
- Resolves: rhbz#1917511 - SSSD Error Msg Improvement: Failed to resolve server 'server.example.com': Error reading file
- Resolves: rhbz#1917535 - sssd.conf man page: parameter dns_resolver_server_timeout and dns_resolver_op_timeout
- Resolves: rhbz#1940509 - [RFE] Health and Support Analyzer: Link frontend to backend requests
- Resolves: rhbz#1649464 - auto_private_groups not working as expected with posix ipa/ad trust
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1961215 - Invalid sssd-kcm return code if requested operation is not found
- Resolves: rhbz#1837090 - SSSD fails nss_getby_name for IPA user with SID if the user has user private group
- Resolves: rhbz#1879869 - sudo commands incorrectly exports the KRB5CCNAME environment variable
- Resolves: rhbz#1962550 - sss_pac_make_request fails on systems joined to Active Directory.
- Resolves: rhbz#1737489 - [RFE] SSSD should honor default Kerberos settings (keytab name) in /etc/krb5.conf</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-2" date="1624276800">- Resolves: rhbz#1974257 - 'debug_microseconds' config option is broken
- Resolves: rhbz#1936902 - SSSD Error Msg Improvement: Invalid argument
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm (additional patches and rebuild)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-1" date="1626091200">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1693379 - sssd_be and sss_cache too heavy on CPU
- Resolves: rhbz#1909373 - Missing search index for `originalADgidNumber`
- Resolves: rhbz#1954630 - [RFE] Improve debug messages by adding a unique tag for each request the backend is handling
- Resolves: rhbz#1936891 - SSSD Error Msg Improvement: Bad address
- Resolves: rhbz#1364596 - sssd still showing ipa user after removed from last group
- Resolves: rhbz#1979404 - Changes made to /etc/pam.d/sssd-shadowutils are overwritten back to default on sssd-common package upgrade</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2" date="1627905600">- Resolves: rhbz#1975169 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-8]
- Resolves: rhbz#1962042 - [sssd] RHEL 8.5 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.1" date="1634558400">- Resolves: rhbz#2014460 - tps tests fail with cross dependency on sssd debuginfo package: removal of 'sssd-libwbclient-debuginfo' is missing [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.2" date="1638187200">- Resolves: rhbz#2018440 - 2.5.x based SSSD adds more AD domains than it should based on the configuration file (not trusted and from a different forest) [rhel-8.5.0.z]
- Resolves: rhbz#2016923 - autofs lookups for unknown mounts are delayed for 50s [rhel-8.5.0.z]
- Resolves: rhbz#2021499 - Make backtrace less "chatty" (avoid duplicate backtraces) [rhel-8.5.0.z]
- Resolves: rhbz#2013379 - Lookup with fully-qualified name does not work with 'cache_first = True' [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.3" date="1638878400">- Resolves: rhbz#2028828 - pam responder does not call initgroups to refresh the user entry [rhel-8.5.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2.4" date="1642420800">- Resolves: rhbz#2030651 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries [rhel-8.5.0.z]
- Resolves: rhbz#2035285 - AD Domain in the AD Forest Missing after sssd latest update [rhel-8.5.0.z]</changelog>
</package>
<package pkgid="a4a3f4ae13cd19d2d2e52cc0f19edd124a69cf66bde6a1ed538e53507eb836dd" name="systemd-container-debuginfo" arch="i686">
  <version epoch="0" ver="239" rel="51.el8_5.2"/>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-44" date="1611835200">- ci: PowerTools repo was renamed to powertools in RHEL 8.3 (#1871827)
- ci: use quay.io instead of Docker Hub to avoid rate limits (#1871827)
- ci: move jobs from Travis CI to GH Actions (#1871827)
- unit: make UNIT() cast function deal with NULL pointers (#1871827)
- use link to RHEL-8 docs (#1623116)
- cgroup: Also set blkio.bfq.weight (#1657810)
- units: make sure initrd-cleanup.service terminates before switching to rootfs (#1657810)
- core: reload SELinux label cache on daemon-reload (#1888912)
- selinux: introduce mac_selinux_create_file_prepare_at() (#1888912)
- selinux: add trigger for policy reload to refresh internal selabel cache (#1888912)
- udev/net_id: give RHEL-8.4 naming scheme a name (#1827462)
- basic/stat-util: make mtime check stricter and use entire timestamp (#1642728)
- udev: make algorithm that selects highest priority devlink less susceptible to race conditions (#1642728)
- test: create /dev/null in test-udev.pl (#1642728)
- test: missing "die" (#1642728)
- udev-test: remove a check for whether the test is run in a container (#1642728)
- udev-test: skip the test only if it can't setup its environment (#1642728)
- udev-test: fix test skip condition (#1642728)
- udev-test: fix missing directory test/run (#1642728)
- udev-test: check if permitted to create block device nodes (#1642728)
- test-udev: add a testcase of too long line (#1642728)
- test-udev: use proper semantics for too long line with continuation (#1642728)
- test-udev: add more tests for line continuations and comments (#1642728)
- test-udev: add more tests for line continuation (#1642728)
- test-udev: fix alignment and drop unnecessary white spaces (#1642728)
- test/udev-test.pl: cleanup if skipping test (#1642728)
- test: add test cases for empty string match (#1642728)
- test: add test case for multi matches when use "||" (#1642728)
- udev-test: do not rely on "mail" group being defined (#1642728)
- test/udev-test.pl: allow multiple devices per test (#1642728)
- test/udev-test.pl: create rules only once (#1642728)
- test/udev-test.pl: allow concurrent additions and removals (#1642728)
- test/udev-test.pl: use computed devnode name (#1642728)
- test/udev-test.pl: test correctness of symlink targets (#1642728)
- test/udev-test.pl: allow checking multiple symlinks (#1642728)
- test/udev-test.pl: fix wrong test descriptions (#1642728)
- test/udev-test.pl: last_rule is unsupported (#1642728)
- test/udev-test.pl: Make some tests a little harder (#1642728)
- test/udev-test.pl: remove bogus rules from magic subsys test (#1642728)
- test/udev-test.pl: merge "space and var with space" tests (#1642728)
- test/udev-test.pl: merge import parent tests into one (#1642728)
- test/udev-test.pl: count "good" results (#1642728)
- tests/udev-test.pl: add multiple device test (#1642728)
- test/udev-test.pl: add repeat count (#1642728)
- test/udev-test.pl: generator for large list of block devices (#1642728)
- test/udev-test.pl: suppress umount error message at startup (#1642728)
- test/udev_test.pl: add "expected good" count (#1642728)
- test/udev-test: gracefully exit when imports fail (#1642728)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-45" date="1615464000">- Revert "test: add test cases for empty string match" and "test: add test case for multi matches when use ||" (#1935124)
- test/sys-script.py: add missing DEVNAME entries to uevents (#1935124)
- sd-event: split out helper functions for reshuffling prioqs (#1937315)
- sd-event: split out enable and disable codepaths from sd_event_source_set_enabled() (#1937315)
- sd-event: mention that two debug logged events are ignored (#1937315)
- sd-event: split clock data allocation out of sd_event_add_time() (#1937315)
- sd-event: split out code to add/remove timer event sources to earliest/latest prioq (#1937315)
- sd-event: fix delays assert brain-o (#17790) (#1937315)
- sd-event: let's suffix last_run/last_log with "_usec" (#1937315)
- sd-event: refuse running default event loops in any other thread than the one they are default for (#1937315)
- sd-event: ref event loop while in sd_event_prepare() ot sd_event_run() (#1937315)
- sd-event: follow coding style with naming return parameter (#1937315)
- sd-event: remove earliest_index/latest_index into common part of event source objects (#1937315)
- sd-event: update state at the end in event_source_enable (#1937315)
- sd-event: increase n_enabled_child_sources just once (#1937315)
- sd-event: add ability to ratelimit event sources (#1937315)
- test: add ratelimiting test (#1937315)
- core: prevent excessive /proc/self/mountinfo parsing (#1937315)
- udev: run link_update() with increased retry count in second invocation (#1935124)
- pam-systemd: use secure_getenv() rather than getenv() (#1936866)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-46" date="1621425600">- Revert "udev: run link_update() with increased retry count in second invocation" (#1942299)
- Revert "udev: make algorithm that selects highest priority devlink less susceptible to race conditions" (#1942299)
- test/udev-test.pl: drop test cases that add mutliple devices (#1942299)</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 239-47" date="1622808000">- systemd-binfmt: Add safeguard in triggers (#1787144)
- spec: Requires(post) openssl-libs to fix missing /etc/machine-id (#1947438)
- spec: Go back to using systemctl preset-all in post (#1783263, #1647172, #1118740)
- spec: Disable libiptc support (#1817265)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-48" date="1624536000">- cgroup: Also set io.bfq.weight (#1927290)
- seccomp: allow turning off of seccomp filtering via env var (#1916835)
- meson: remove strange dep that causes meson to enter infinite loop (#1970860)
- copy: handle copy_file_range() weirdness on procfs/sysfs (#1970860)
- core: Hide "Deactivated successfully" message (#1954802)
- util: rework in_initrd() to make use of path_is_temporary_fs() (#1959339)
- initrd: extend SYSTEMD_IN_INITRD to accept non-ramfs rootfs (#1959339)
- initrd: do a debug log if failed to detect rootfs type (#1959339)
- initrd: do a debug log if /etc/initrd-release doesn't take effect (#1959339)
- units: assign user-runtime-dir@.service to user-%i.slice (#1946453)
- units: order user-runtime-dir@.service after systemd-user-sessions.service (#1946453)
- units: make sure user-runtime-dir@.service is Type=oneshot (#1946453)
- user-runtime-dir: downgrade a few log messages to LOG_DEBUG that we ignore (#1946453)
- shared/install: Preserve escape characters for escaped unit names (#1952686)
- basic/virt: Detect PowerVM hypervisor (#1937989)
- man: document differences in clean exit status for Type=oneshot (#1940078)
- busctl: add a timestamp to the output of the busctl monitor command (#1909214)
- basic/cap-list: parse/print numerical capabilities (#1946943)
- shared/mount-util: convert to libmount (#1885143)
- mount-util: bind_remount: avoid calling statvfs (#1885143)
- mount-util: use UMOUNT_NOFOLLOW in recursive umounter (#1885143)
- test-install-root: create referenced targets (#1835351)
- install: warn if WantedBy targets don't exist (#1835351)
- test-install-root: add test for unknown WantedBy= target (#1835351)
- ceph is a network filesystem (#1952013)
- sysctl: set kernel.core_pipe_limit=16 (#1949729)
- core: don't drop timer expired but not yet processed when system date is changed (#1899402)
- core: Detect initial timer state from serialized data (#1899402)
- rc-local: order after network-online.target (#1934028)
- set core ulimit to 0 like on RHEL-7 (#1905582)
- test-mountpointutil-util: do not assert in test_mnt_id() (#1910425)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-49" date="1627041600">- remove a left-over break (#1970860)
- basic/unit-name: do not use strdupa() on a path (#1974700)
- sd-event: change ordering of pending/ratelimited events (#1968528)
- sd-event: drop unnecessary "else" (#1968528)
- sd-event: use CMP() macro (#1968528)
- sd-event: use usec_add() (#1968528)
- sd-event: make event_source_time_prioq_reshuffle() accept all event source type (#1968528)
- sd-event: always reshuffle time prioq on changing online/offline state (#1968528)
- ci: run unit tests on z-stream branches as well (#1970860)
- ci: drop forgotten Travis references (#1934504)
- ci: run unit tests on CentOS 8 Stream as well (#1934504)
- ci: add missing test dependencies (#1934504)
- meson: bump timeout for test-udev to 180s (#1934504)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-50" date="1630065600">- Added option --check-inhibitors for non-tty usage (#1269726)
- logind: Introduce RebootWithFlags and others (#1269726)
- logind: add …WithFlags methods to policy (#1269726)
- logind: simplify flags handling a bit (#1269726)
- Update link to RHEL documentation (#1982584)
- Set default core ulimit to 0, but keep the hard limit ulimited (#1905582)
- shared/seccomp-util: address family filtering is broken on ppc (#1982650)
- logind: rework Seat/Session/User object allocation and freeing a bit (#1642460)
- logind: fix serialization/deserialization of user's "display session" (#1642460)
- logind: turn of stdio locking when writing session files too (#1642460)
- units: set StopWhenUnneeded= for the user slice units too (#1642460)
- units: improve Description= string a bit (#1642460)
- logind: improve logging in manager_connect_console() (#1642460)
- logind: save/restore User object's "stopping" field during restarts (#1642460)
- logind: correct bad clean-up path (#1642460)
- logind: fix bad error propagation (#1642460)
- logind: never elect a session that is stopping as display (#1642460)
- logind: introduce little helper that checks whether a session is ready (#1642460)
- logind: propagate session stop errors (#1642460)
- logind: rework how we manage the slice and user-runtime-dir@.service unit for each user (#1642460)
- logind: optionally, keep the user@.service instance for eached logged in user around for a while (#1642460)
- logind: add a RequiresMountsFor= dependency from the session scope unit to the home directory of the user (#1642460)
- logind: improve error propagation of user_check_linger_file() (#1642460)
- logind: automatically GC lingering users for who now user@.service (nor slice, not runtime dir service) is running anymore (#1642460)
- pam_systemd: simplify code which with we set environment variables (#1642460)
- logind: validate /run/user/1000 before we set it (#1642460)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-51" date="1632398400">- define newly needed constants (#1850986)
- sd-netlink: support IFLA_PROP_LIST and IFLA_ALT_IFNAME attributes (#1850986)
- sd-netlink: introduce sd_netlink_message_read_strv() (#1850986)
- sd-netlink: introduce sd_netlink_message_append_strv() (#1850986)
- test: add a test for sd_netlink_message_{append,read}_strv() (#1850986)
- util: introduce ifname_valid_full() (#1850986)
- rename function (#1850986)
- udev: support AlternativeName= setting in .link file (#1850986)
- network: make Name= in [Match] support alternative names of interfaces (#1850986)
- udev: extend the length of ID_NET_NAME_XXX= to ALTIFNAMSIZ (#1850986)
- udev: do not fail if kernel does not support alternative names (#1850986)
- udev: introduce AlternativeNamesPolicy= setting (#1850986)
- network: set AlternativeNamesPolicy= in 99-default.link (#1850986)
- random-util: call initialize_srand() after fork() (#1850986)
- sd-netlink: introduce rtnl_resolve_link_alternative_names() (#1850986)
- udev: sort alternative names (#1850986)
- netlink: introduce rtnl_get/delete_link_alternative_names() (#1850986)
- netlink: do not fail when new interface name is already used as an alternative name (#1850986)
- udev: do not try to reassign alternative names (#1850986)
- Fix LGTM build (#1850986)
- sd-hwdb: allow empty properties (#1930568)
- Update hwdb (#1930568)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-51.1" date="1638360000">- sd-event: take ref on event loop object before dispatching event sources (#2024903)
- pid1: fix free of uninitialized pointer in unit_fail_if_noncanonical() (#2024903)
- Disable iptables for CI (#2024903)
- test-seccomp: accept ENOSYS from sysctl(2) too (#2024903)
- Disable libpitc to fix CentOS Stream CI (#2024903)
- test: accept that char device 0/0 can now be created witout privileges (#2024903)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-51.2" date="1638532800">- core: return true from cg_is_empty* on ENOENT (#2024903)</changelog>
</package>
<package pkgid="aa9e238a888aafcfc77a5f26b550ebd9707c2b0d68deab9a1e90e56d27e98281" name="systemd-container-debuginfo" arch="x86_64">
  <version epoch="0" ver="239" rel="51.el8_5.2"/>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-44" date="1611835200">- ci: PowerTools repo was renamed to powertools in RHEL 8.3 (#1871827)
- ci: use quay.io instead of Docker Hub to avoid rate limits (#1871827)
- ci: move jobs from Travis CI to GH Actions (#1871827)
- unit: make UNIT() cast function deal with NULL pointers (#1871827)
- use link to RHEL-8 docs (#1623116)
- cgroup: Also set blkio.bfq.weight (#1657810)
- units: make sure initrd-cleanup.service terminates before switching to rootfs (#1657810)
- core: reload SELinux label cache on daemon-reload (#1888912)
- selinux: introduce mac_selinux_create_file_prepare_at() (#1888912)
- selinux: add trigger for policy reload to refresh internal selabel cache (#1888912)
- udev/net_id: give RHEL-8.4 naming scheme a name (#1827462)
- basic/stat-util: make mtime check stricter and use entire timestamp (#1642728)
- udev: make algorithm that selects highest priority devlink less susceptible to race conditions (#1642728)
- test: create /dev/null in test-udev.pl (#1642728)
- test: missing "die" (#1642728)
- udev-test: remove a check for whether the test is run in a container (#1642728)
- udev-test: skip the test only if it can't setup its environment (#1642728)
- udev-test: fix test skip condition (#1642728)
- udev-test: fix missing directory test/run (#1642728)
- udev-test: check if permitted to create block device nodes (#1642728)
- test-udev: add a testcase of too long line (#1642728)
- test-udev: use proper semantics for too long line with continuation (#1642728)
- test-udev: add more tests for line continuations and comments (#1642728)
- test-udev: add more tests for line continuation (#1642728)
- test-udev: fix alignment and drop unnecessary white spaces (#1642728)
- test/udev-test.pl: cleanup if skipping test (#1642728)
- test: add test cases for empty string match (#1642728)
- test: add test case for multi matches when use "||" (#1642728)
- udev-test: do not rely on "mail" group being defined (#1642728)
- test/udev-test.pl: allow multiple devices per test (#1642728)
- test/udev-test.pl: create rules only once (#1642728)
- test/udev-test.pl: allow concurrent additions and removals (#1642728)
- test/udev-test.pl: use computed devnode name (#1642728)
- test/udev-test.pl: test correctness of symlink targets (#1642728)
- test/udev-test.pl: allow checking multiple symlinks (#1642728)
- test/udev-test.pl: fix wrong test descriptions (#1642728)
- test/udev-test.pl: last_rule is unsupported (#1642728)
- test/udev-test.pl: Make some tests a little harder (#1642728)
- test/udev-test.pl: remove bogus rules from magic subsys test (#1642728)
- test/udev-test.pl: merge "space and var with space" tests (#1642728)
- test/udev-test.pl: merge import parent tests into one (#1642728)
- test/udev-test.pl: count "good" results (#1642728)
- tests/udev-test.pl: add multiple device test (#1642728)
- test/udev-test.pl: add repeat count (#1642728)
- test/udev-test.pl: generator for large list of block devices (#1642728)
- test/udev-test.pl: suppress umount error message at startup (#1642728)
- test/udev_test.pl: add "expected good" count (#1642728)
- test/udev-test: gracefully exit when imports fail (#1642728)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-45" date="1615464000">- Revert "test: add test cases for empty string match" and "test: add test case for multi matches when use ||" (#1935124)
- test/sys-script.py: add missing DEVNAME entries to uevents (#1935124)
- sd-event: split out helper functions for reshuffling prioqs (#1937315)
- sd-event: split out enable and disable codepaths from sd_event_source_set_enabled() (#1937315)
- sd-event: mention that two debug logged events are ignored (#1937315)
- sd-event: split clock data allocation out of sd_event_add_time() (#1937315)
- sd-event: split out code to add/remove timer event sources to earliest/latest prioq (#1937315)
- sd-event: fix delays assert brain-o (#17790) (#1937315)
- sd-event: let's suffix last_run/last_log with "_usec" (#1937315)
- sd-event: refuse running default event loops in any other thread than the one they are default for (#1937315)
- sd-event: ref event loop while in sd_event_prepare() ot sd_event_run() (#1937315)
- sd-event: follow coding style with naming return parameter (#1937315)
- sd-event: remove earliest_index/latest_index into common part of event source objects (#1937315)
- sd-event: update state at the end in event_source_enable (#1937315)
- sd-event: increase n_enabled_child_sources just once (#1937315)
- sd-event: add ability to ratelimit event sources (#1937315)
- test: add ratelimiting test (#1937315)
- core: prevent excessive /proc/self/mountinfo parsing (#1937315)
- udev: run link_update() with increased retry count in second invocation (#1935124)
- pam-systemd: use secure_getenv() rather than getenv() (#1936866)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-46" date="1621425600">- Revert "udev: run link_update() with increased retry count in second invocation" (#1942299)
- Revert "udev: make algorithm that selects highest priority devlink less susceptible to race conditions" (#1942299)
- test/udev-test.pl: drop test cases that add mutliple devices (#1942299)</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 239-47" date="1622808000">- systemd-binfmt: Add safeguard in triggers (#1787144)
- spec: Requires(post) openssl-libs to fix missing /etc/machine-id (#1947438)
- spec: Go back to using systemctl preset-all in post (#1783263, #1647172, #1118740)
- spec: Disable libiptc support (#1817265)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-48" date="1624536000">- cgroup: Also set io.bfq.weight (#1927290)
- seccomp: allow turning off of seccomp filtering via env var (#1916835)
- meson: remove strange dep that causes meson to enter infinite loop (#1970860)
- copy: handle copy_file_range() weirdness on procfs/sysfs (#1970860)
- core: Hide "Deactivated successfully" message (#1954802)
- util: rework in_initrd() to make use of path_is_temporary_fs() (#1959339)
- initrd: extend SYSTEMD_IN_INITRD to accept non-ramfs rootfs (#1959339)
- initrd: do a debug log if failed to detect rootfs type (#1959339)
- initrd: do a debug log if /etc/initrd-release doesn't take effect (#1959339)
- units: assign user-runtime-dir@.service to user-%i.slice (#1946453)
- units: order user-runtime-dir@.service after systemd-user-sessions.service (#1946453)
- units: make sure user-runtime-dir@.service is Type=oneshot (#1946453)
- user-runtime-dir: downgrade a few log messages to LOG_DEBUG that we ignore (#1946453)
- shared/install: Preserve escape characters for escaped unit names (#1952686)
- basic/virt: Detect PowerVM hypervisor (#1937989)
- man: document differences in clean exit status for Type=oneshot (#1940078)
- busctl: add a timestamp to the output of the busctl monitor command (#1909214)
- basic/cap-list: parse/print numerical capabilities (#1946943)
- shared/mount-util: convert to libmount (#1885143)
- mount-util: bind_remount: avoid calling statvfs (#1885143)
- mount-util: use UMOUNT_NOFOLLOW in recursive umounter (#1885143)
- test-install-root: create referenced targets (#1835351)
- install: warn if WantedBy targets don't exist (#1835351)
- test-install-root: add test for unknown WantedBy= target (#1835351)
- ceph is a network filesystem (#1952013)
- sysctl: set kernel.core_pipe_limit=16 (#1949729)
- core: don't drop timer expired but not yet processed when system date is changed (#1899402)
- core: Detect initial timer state from serialized data (#1899402)
- rc-local: order after network-online.target (#1934028)
- set core ulimit to 0 like on RHEL-7 (#1905582)
- test-mountpointutil-util: do not assert in test_mnt_id() (#1910425)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-49" date="1627041600">- remove a left-over break (#1970860)
- basic/unit-name: do not use strdupa() on a path (#1974700)
- sd-event: change ordering of pending/ratelimited events (#1968528)
- sd-event: drop unnecessary "else" (#1968528)
- sd-event: use CMP() macro (#1968528)
- sd-event: use usec_add() (#1968528)
- sd-event: make event_source_time_prioq_reshuffle() accept all event source type (#1968528)
- sd-event: always reshuffle time prioq on changing online/offline state (#1968528)
- ci: run unit tests on z-stream branches as well (#1970860)
- ci: drop forgotten Travis references (#1934504)
- ci: run unit tests on CentOS 8 Stream as well (#1934504)
- ci: add missing test dependencies (#1934504)
- meson: bump timeout for test-udev to 180s (#1934504)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-50" date="1630065600">- Added option --check-inhibitors for non-tty usage (#1269726)
- logind: Introduce RebootWithFlags and others (#1269726)
- logind: add …WithFlags methods to policy (#1269726)
- logind: simplify flags handling a bit (#1269726)
- Update link to RHEL documentation (#1982584)
- Set default core ulimit to 0, but keep the hard limit ulimited (#1905582)
- shared/seccomp-util: address family filtering is broken on ppc (#1982650)
- logind: rework Seat/Session/User object allocation and freeing a bit (#1642460)
- logind: fix serialization/deserialization of user's "display session" (#1642460)
- logind: turn of stdio locking when writing session files too (#1642460)
- units: set StopWhenUnneeded= for the user slice units too (#1642460)
- units: improve Description= string a bit (#1642460)
- logind: improve logging in manager_connect_console() (#1642460)
- logind: save/restore User object's "stopping" field during restarts (#1642460)
- logind: correct bad clean-up path (#1642460)
- logind: fix bad error propagation (#1642460)
- logind: never elect a session that is stopping as display (#1642460)
- logind: introduce little helper that checks whether a session is ready (#1642460)
- logind: propagate session stop errors (#1642460)
- logind: rework how we manage the slice and user-runtime-dir@.service unit for each user (#1642460)
- logind: optionally, keep the user@.service instance for eached logged in user around for a while (#1642460)
- logind: add a RequiresMountsFor= dependency from the session scope unit to the home directory of the user (#1642460)
- logind: improve error propagation of user_check_linger_file() (#1642460)
- logind: automatically GC lingering users for who now user@.service (nor slice, not runtime dir service) is running anymore (#1642460)
- pam_systemd: simplify code which with we set environment variables (#1642460)
- logind: validate /run/user/1000 before we set it (#1642460)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-51" date="1632398400">- define newly needed constants (#1850986)
- sd-netlink: support IFLA_PROP_LIST and IFLA_ALT_IFNAME attributes (#1850986)
- sd-netlink: introduce sd_netlink_message_read_strv() (#1850986)
- sd-netlink: introduce sd_netlink_message_append_strv() (#1850986)
- test: add a test for sd_netlink_message_{append,read}_strv() (#1850986)
- util: introduce ifname_valid_full() (#1850986)
- rename function (#1850986)
- udev: support AlternativeName= setting in .link file (#1850986)
- network: make Name= in [Match] support alternative names of interfaces (#1850986)
- udev: extend the length of ID_NET_NAME_XXX= to ALTIFNAMSIZ (#1850986)
- udev: do not fail if kernel does not support alternative names (#1850986)
- udev: introduce AlternativeNamesPolicy= setting (#1850986)
- network: set AlternativeNamesPolicy= in 99-default.link (#1850986)
- random-util: call initialize_srand() after fork() (#1850986)
- sd-netlink: introduce rtnl_resolve_link_alternative_names() (#1850986)
- udev: sort alternative names (#1850986)
- netlink: introduce rtnl_get/delete_link_alternative_names() (#1850986)
- netlink: do not fail when new interface name is already used as an alternative name (#1850986)
- udev: do not try to reassign alternative names (#1850986)
- Fix LGTM build (#1850986)
- sd-hwdb: allow empty properties (#1930568)
- Update hwdb (#1930568)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-51.1" date="1638360000">- sd-event: take ref on event loop object before dispatching event sources (#2024903)
- pid1: fix free of uninitialized pointer in unit_fail_if_noncanonical() (#2024903)
- Disable iptables for CI (#2024903)
- test-seccomp: accept ENOSYS from sysctl(2) too (#2024903)
- Disable libpitc to fix CentOS Stream CI (#2024903)
- test: accept that char device 0/0 can now be created witout privileges (#2024903)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-51.2" date="1638532800">- core: return true from cg_is_empty* on ENOENT (#2024903)</changelog>
</package>
<package pkgid="dd1f4abb34b2b339c18331ebd8c9759557966d23f759e79b16d478e23d17fb38" name="systemd-container-debuginfo" arch="i686">
  <version epoch="0" ver="239" rel="51.el8_5.3"/>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-45" date="1615464000">- Revert "test: add test cases for empty string match" and "test: add test case for multi matches when use ||" (#1935124)
- test/sys-script.py: add missing DEVNAME entries to uevents (#1935124)
- sd-event: split out helper functions for reshuffling prioqs (#1937315)
- sd-event: split out enable and disable codepaths from sd_event_source_set_enabled() (#1937315)
- sd-event: mention that two debug logged events are ignored (#1937315)
- sd-event: split clock data allocation out of sd_event_add_time() (#1937315)
- sd-event: split out code to add/remove timer event sources to earliest/latest prioq (#1937315)
- sd-event: fix delays assert brain-o (#17790) (#1937315)
- sd-event: let's suffix last_run/last_log with "_usec" (#1937315)
- sd-event: refuse running default event loops in any other thread than the one they are default for (#1937315)
- sd-event: ref event loop while in sd_event_prepare() ot sd_event_run() (#1937315)
- sd-event: follow coding style with naming return parameter (#1937315)
- sd-event: remove earliest_index/latest_index into common part of event source objects (#1937315)
- sd-event: update state at the end in event_source_enable (#1937315)
- sd-event: increase n_enabled_child_sources just once (#1937315)
- sd-event: add ability to ratelimit event sources (#1937315)
- test: add ratelimiting test (#1937315)
- core: prevent excessive /proc/self/mountinfo parsing (#1937315)
- udev: run link_update() with increased retry count in second invocation (#1935124)
- pam-systemd: use secure_getenv() rather than getenv() (#1936866)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-46" date="1621425600">- Revert "udev: run link_update() with increased retry count in second invocation" (#1942299)
- Revert "udev: make algorithm that selects highest priority devlink less susceptible to race conditions" (#1942299)
- test/udev-test.pl: drop test cases that add mutliple devices (#1942299)</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 239-47" date="1622808000">- systemd-binfmt: Add safeguard in triggers (#1787144)
- spec: Requires(post) openssl-libs to fix missing /etc/machine-id (#1947438)
- spec: Go back to using systemctl preset-all in post (#1783263, #1647172, #1118740)
- spec: Disable libiptc support (#1817265)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-48" date="1624536000">- cgroup: Also set io.bfq.weight (#1927290)
- seccomp: allow turning off of seccomp filtering via env var (#1916835)
- meson: remove strange dep that causes meson to enter infinite loop (#1970860)
- copy: handle copy_file_range() weirdness on procfs/sysfs (#1970860)
- core: Hide "Deactivated successfully" message (#1954802)
- util: rework in_initrd() to make use of path_is_temporary_fs() (#1959339)
- initrd: extend SYSTEMD_IN_INITRD to accept non-ramfs rootfs (#1959339)
- initrd: do a debug log if failed to detect rootfs type (#1959339)
- initrd: do a debug log if /etc/initrd-release doesn't take effect (#1959339)
- units: assign user-runtime-dir@.service to user-%i.slice (#1946453)
- units: order user-runtime-dir@.service after systemd-user-sessions.service (#1946453)
- units: make sure user-runtime-dir@.service is Type=oneshot (#1946453)
- user-runtime-dir: downgrade a few log messages to LOG_DEBUG that we ignore (#1946453)
- shared/install: Preserve escape characters for escaped unit names (#1952686)
- basic/virt: Detect PowerVM hypervisor (#1937989)
- man: document differences in clean exit status for Type=oneshot (#1940078)
- busctl: add a timestamp to the output of the busctl monitor command (#1909214)
- basic/cap-list: parse/print numerical capabilities (#1946943)
- shared/mount-util: convert to libmount (#1885143)
- mount-util: bind_remount: avoid calling statvfs (#1885143)
- mount-util: use UMOUNT_NOFOLLOW in recursive umounter (#1885143)
- test-install-root: create referenced targets (#1835351)
- install: warn if WantedBy targets don't exist (#1835351)
- test-install-root: add test for unknown WantedBy= target (#1835351)
- ceph is a network filesystem (#1952013)
- sysctl: set kernel.core_pipe_limit=16 (#1949729)
- core: don't drop timer expired but not yet processed when system date is changed (#1899402)
- core: Detect initial timer state from serialized data (#1899402)
- rc-local: order after network-online.target (#1934028)
- set core ulimit to 0 like on RHEL-7 (#1905582)
- test-mountpointutil-util: do not assert in test_mnt_id() (#1910425)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-49" date="1627041600">- remove a left-over break (#1970860)
- basic/unit-name: do not use strdupa() on a path (#1974700)
- sd-event: change ordering of pending/ratelimited events (#1968528)
- sd-event: drop unnecessary "else" (#1968528)
- sd-event: use CMP() macro (#1968528)
- sd-event: use usec_add() (#1968528)
- sd-event: make event_source_time_prioq_reshuffle() accept all event source type (#1968528)
- sd-event: always reshuffle time prioq on changing online/offline state (#1968528)
- ci: run unit tests on z-stream branches as well (#1970860)
- ci: drop forgotten Travis references (#1934504)
- ci: run unit tests on CentOS 8 Stream as well (#1934504)
- ci: add missing test dependencies (#1934504)
- meson: bump timeout for test-udev to 180s (#1934504)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-50" date="1630065600">- Added option --check-inhibitors for non-tty usage (#1269726)
- logind: Introduce RebootWithFlags and others (#1269726)
- logind: add …WithFlags methods to policy (#1269726)
- logind: simplify flags handling a bit (#1269726)
- Update link to RHEL documentation (#1982584)
- Set default core ulimit to 0, but keep the hard limit ulimited (#1905582)
- shared/seccomp-util: address family filtering is broken on ppc (#1982650)
- logind: rework Seat/Session/User object allocation and freeing a bit (#1642460)
- logind: fix serialization/deserialization of user's "display session" (#1642460)
- logind: turn of stdio locking when writing session files too (#1642460)
- units: set StopWhenUnneeded= for the user slice units too (#1642460)
- units: improve Description= string a bit (#1642460)
- logind: improve logging in manager_connect_console() (#1642460)
- logind: save/restore User object's "stopping" field during restarts (#1642460)
- logind: correct bad clean-up path (#1642460)
- logind: fix bad error propagation (#1642460)
- logind: never elect a session that is stopping as display (#1642460)
- logind: introduce little helper that checks whether a session is ready (#1642460)
- logind: propagate session stop errors (#1642460)
- logind: rework how we manage the slice and user-runtime-dir@.service unit for each user (#1642460)
- logind: optionally, keep the user@.service instance for eached logged in user around for a while (#1642460)
- logind: add a RequiresMountsFor= dependency from the session scope unit to the home directory of the user (#1642460)
- logind: improve error propagation of user_check_linger_file() (#1642460)
- logind: automatically GC lingering users for who now user@.service (nor slice, not runtime dir service) is running anymore (#1642460)
- pam_systemd: simplify code which with we set environment variables (#1642460)
- logind: validate /run/user/1000 before we set it (#1642460)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-51" date="1632398400">- define newly needed constants (#1850986)
- sd-netlink: support IFLA_PROP_LIST and IFLA_ALT_IFNAME attributes (#1850986)
- sd-netlink: introduce sd_netlink_message_read_strv() (#1850986)
- sd-netlink: introduce sd_netlink_message_append_strv() (#1850986)
- test: add a test for sd_netlink_message_{append,read}_strv() (#1850986)
- util: introduce ifname_valid_full() (#1850986)
- rename function (#1850986)
- udev: support AlternativeName= setting in .link file (#1850986)
- network: make Name= in [Match] support alternative names of interfaces (#1850986)
- udev: extend the length of ID_NET_NAME_XXX= to ALTIFNAMSIZ (#1850986)
- udev: do not fail if kernel does not support alternative names (#1850986)
- udev: introduce AlternativeNamesPolicy= setting (#1850986)
- network: set AlternativeNamesPolicy= in 99-default.link (#1850986)
- random-util: call initialize_srand() after fork() (#1850986)
- sd-netlink: introduce rtnl_resolve_link_alternative_names() (#1850986)
- udev: sort alternative names (#1850986)
- netlink: introduce rtnl_get/delete_link_alternative_names() (#1850986)
- netlink: do not fail when new interface name is already used as an alternative name (#1850986)
- udev: do not try to reassign alternative names (#1850986)
- Fix LGTM build (#1850986)
- sd-hwdb: allow empty properties (#1930568)
- Update hwdb (#1930568)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-51.1" date="1638360000">- sd-event: take ref on event loop object before dispatching event sources (#2024903)
- pid1: fix free of uninitialized pointer in unit_fail_if_noncanonical() (#2024903)
- Disable iptables for CI (#2024903)
- test-seccomp: accept ENOSYS from sysctl(2) too (#2024903)
- Disable libpitc to fix CentOS Stream CI (#2024903)
- test: accept that char device 0/0 can now be created witout privileges (#2024903)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-51.2" date="1638532800">- core: return true from cg_is_empty* on ENOENT (#2024903)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-51.3" date="1639137600">- Do not fail if the same alt. name is set again (#2030027)
- meson: avoid bogus meson warning (#2030027)
- meson: do not fail if rsync is not installed with meson 0.57.2 (#2030027)</changelog>
</package>
<package pkgid="4056f9ae0f79bd3cd6a9427e154d3078ae0129903a2711e219ec9b07e4ecc9a5" name="systemd-container-debuginfo" arch="x86_64">
  <version epoch="0" ver="239" rel="51.el8_5.3"/>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-45" date="1615464000">- Revert "test: add test cases for empty string match" and "test: add test case for multi matches when use ||" (#1935124)
- test/sys-script.py: add missing DEVNAME entries to uevents (#1935124)
- sd-event: split out helper functions for reshuffling prioqs (#1937315)
- sd-event: split out enable and disable codepaths from sd_event_source_set_enabled() (#1937315)
- sd-event: mention that two debug logged events are ignored (#1937315)
- sd-event: split clock data allocation out of sd_event_add_time() (#1937315)
- sd-event: split out code to add/remove timer event sources to earliest/latest prioq (#1937315)
- sd-event: fix delays assert brain-o (#17790) (#1937315)
- sd-event: let's suffix last_run/last_log with "_usec" (#1937315)
- sd-event: refuse running default event loops in any other thread than the one they are default for (#1937315)
- sd-event: ref event loop while in sd_event_prepare() ot sd_event_run() (#1937315)
- sd-event: follow coding style with naming return parameter (#1937315)
- sd-event: remove earliest_index/latest_index into common part of event source objects (#1937315)
- sd-event: update state at the end in event_source_enable (#1937315)
- sd-event: increase n_enabled_child_sources just once (#1937315)
- sd-event: add ability to ratelimit event sources (#1937315)
- test: add ratelimiting test (#1937315)
- core: prevent excessive /proc/self/mountinfo parsing (#1937315)
- udev: run link_update() with increased retry count in second invocation (#1935124)
- pam-systemd: use secure_getenv() rather than getenv() (#1936866)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-46" date="1621425600">- Revert "udev: run link_update() with increased retry count in second invocation" (#1942299)
- Revert "udev: make algorithm that selects highest priority devlink less susceptible to race conditions" (#1942299)
- test/udev-test.pl: drop test cases that add mutliple devices (#1942299)</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 239-47" date="1622808000">- systemd-binfmt: Add safeguard in triggers (#1787144)
- spec: Requires(post) openssl-libs to fix missing /etc/machine-id (#1947438)
- spec: Go back to using systemctl preset-all in post (#1783263, #1647172, #1118740)
- spec: Disable libiptc support (#1817265)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-48" date="1624536000">- cgroup: Also set io.bfq.weight (#1927290)
- seccomp: allow turning off of seccomp filtering via env var (#1916835)
- meson: remove strange dep that causes meson to enter infinite loop (#1970860)
- copy: handle copy_file_range() weirdness on procfs/sysfs (#1970860)
- core: Hide "Deactivated successfully" message (#1954802)
- util: rework in_initrd() to make use of path_is_temporary_fs() (#1959339)
- initrd: extend SYSTEMD_IN_INITRD to accept non-ramfs rootfs (#1959339)
- initrd: do a debug log if failed to detect rootfs type (#1959339)
- initrd: do a debug log if /etc/initrd-release doesn't take effect (#1959339)
- units: assign user-runtime-dir@.service to user-%i.slice (#1946453)
- units: order user-runtime-dir@.service after systemd-user-sessions.service (#1946453)
- units: make sure user-runtime-dir@.service is Type=oneshot (#1946453)
- user-runtime-dir: downgrade a few log messages to LOG_DEBUG that we ignore (#1946453)
- shared/install: Preserve escape characters for escaped unit names (#1952686)
- basic/virt: Detect PowerVM hypervisor (#1937989)
- man: document differences in clean exit status for Type=oneshot (#1940078)
- busctl: add a timestamp to the output of the busctl monitor command (#1909214)
- basic/cap-list: parse/print numerical capabilities (#1946943)
- shared/mount-util: convert to libmount (#1885143)
- mount-util: bind_remount: avoid calling statvfs (#1885143)
- mount-util: use UMOUNT_NOFOLLOW in recursive umounter (#1885143)
- test-install-root: create referenced targets (#1835351)
- install: warn if WantedBy targets don't exist (#1835351)
- test-install-root: add test for unknown WantedBy= target (#1835351)
- ceph is a network filesystem (#1952013)
- sysctl: set kernel.core_pipe_limit=16 (#1949729)
- core: don't drop timer expired but not yet processed when system date is changed (#1899402)
- core: Detect initial timer state from serialized data (#1899402)
- rc-local: order after network-online.target (#1934028)
- set core ulimit to 0 like on RHEL-7 (#1905582)
- test-mountpointutil-util: do not assert in test_mnt_id() (#1910425)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-49" date="1627041600">- remove a left-over break (#1970860)
- basic/unit-name: do not use strdupa() on a path (#1974700)
- sd-event: change ordering of pending/ratelimited events (#1968528)
- sd-event: drop unnecessary "else" (#1968528)
- sd-event: use CMP() macro (#1968528)
- sd-event: use usec_add() (#1968528)
- sd-event: make event_source_time_prioq_reshuffle() accept all event source type (#1968528)
- sd-event: always reshuffle time prioq on changing online/offline state (#1968528)
- ci: run unit tests on z-stream branches as well (#1970860)
- ci: drop forgotten Travis references (#1934504)
- ci: run unit tests on CentOS 8 Stream as well (#1934504)
- ci: add missing test dependencies (#1934504)
- meson: bump timeout for test-udev to 180s (#1934504)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-50" date="1630065600">- Added option --check-inhibitors for non-tty usage (#1269726)
- logind: Introduce RebootWithFlags and others (#1269726)
- logind: add …WithFlags methods to policy (#1269726)
- logind: simplify flags handling a bit (#1269726)
- Update link to RHEL documentation (#1982584)
- Set default core ulimit to 0, but keep the hard limit ulimited (#1905582)
- shared/seccomp-util: address family filtering is broken on ppc (#1982650)
- logind: rework Seat/Session/User object allocation and freeing a bit (#1642460)
- logind: fix serialization/deserialization of user's "display session" (#1642460)
- logind: turn of stdio locking when writing session files too (#1642460)
- units: set StopWhenUnneeded= for the user slice units too (#1642460)
- units: improve Description= string a bit (#1642460)
- logind: improve logging in manager_connect_console() (#1642460)
- logind: save/restore User object's "stopping" field during restarts (#1642460)
- logind: correct bad clean-up path (#1642460)
- logind: fix bad error propagation (#1642460)
- logind: never elect a session that is stopping as display (#1642460)
- logind: introduce little helper that checks whether a session is ready (#1642460)
- logind: propagate session stop errors (#1642460)
- logind: rework how we manage the slice and user-runtime-dir@.service unit for each user (#1642460)
- logind: optionally, keep the user@.service instance for eached logged in user around for a while (#1642460)
- logind: add a RequiresMountsFor= dependency from the session scope unit to the home directory of the user (#1642460)
- logind: improve error propagation of user_check_linger_file() (#1642460)
- logind: automatically GC lingering users for who now user@.service (nor slice, not runtime dir service) is running anymore (#1642460)
- pam_systemd: simplify code which with we set environment variables (#1642460)
- logind: validate /run/user/1000 before we set it (#1642460)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-51" date="1632398400">- define newly needed constants (#1850986)
- sd-netlink: support IFLA_PROP_LIST and IFLA_ALT_IFNAME attributes (#1850986)
- sd-netlink: introduce sd_netlink_message_read_strv() (#1850986)
- sd-netlink: introduce sd_netlink_message_append_strv() (#1850986)
- test: add a test for sd_netlink_message_{append,read}_strv() (#1850986)
- util: introduce ifname_valid_full() (#1850986)
- rename function (#1850986)
- udev: support AlternativeName= setting in .link file (#1850986)
- network: make Name= in [Match] support alternative names of interfaces (#1850986)
- udev: extend the length of ID_NET_NAME_XXX= to ALTIFNAMSIZ (#1850986)
- udev: do not fail if kernel does not support alternative names (#1850986)
- udev: introduce AlternativeNamesPolicy= setting (#1850986)
- network: set AlternativeNamesPolicy= in 99-default.link (#1850986)
- random-util: call initialize_srand() after fork() (#1850986)
- sd-netlink: introduce rtnl_resolve_link_alternative_names() (#1850986)
- udev: sort alternative names (#1850986)
- netlink: introduce rtnl_get/delete_link_alternative_names() (#1850986)
- netlink: do not fail when new interface name is already used as an alternative name (#1850986)
- udev: do not try to reassign alternative names (#1850986)
- Fix LGTM build (#1850986)
- sd-hwdb: allow empty properties (#1930568)
- Update hwdb (#1930568)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-51.1" date="1638360000">- sd-event: take ref on event loop object before dispatching event sources (#2024903)
- pid1: fix free of uninitialized pointer in unit_fail_if_noncanonical() (#2024903)
- Disable iptables for CI (#2024903)
- test-seccomp: accept ENOSYS from sysctl(2) too (#2024903)
- Disable libpitc to fix CentOS Stream CI (#2024903)
- test: accept that char device 0/0 can now be created witout privileges (#2024903)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-51.2" date="1638532800">- core: return true from cg_is_empty* on ENOENT (#2024903)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-51.3" date="1639137600">- Do not fail if the same alt. name is set again (#2030027)
- meson: avoid bogus meson warning (#2030027)
- meson: do not fail if rsync is not installed with meson 0.57.2 (#2030027)</changelog>
</package>
<package pkgid="76f9342ab43c61ca0e8f87ff9784d76e15464acc8d89eef390942fc123a1d2c3" name="systemd-container-debuginfo" arch="i686">
  <version epoch="0" ver="239" rel="51.el8_5.5"/>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 239-47" date="1622808000">- systemd-binfmt: Add safeguard in triggers (#1787144)
- spec: Requires(post) openssl-libs to fix missing /etc/machine-id (#1947438)
- spec: Go back to using systemctl preset-all in post (#1783263, #1647172, #1118740)
- spec: Disable libiptc support (#1817265)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-48" date="1624536000">- cgroup: Also set io.bfq.weight (#1927290)
- seccomp: allow turning off of seccomp filtering via env var (#1916835)
- meson: remove strange dep that causes meson to enter infinite loop (#1970860)
- copy: handle copy_file_range() weirdness on procfs/sysfs (#1970860)
- core: Hide "Deactivated successfully" message (#1954802)
- util: rework in_initrd() to make use of path_is_temporary_fs() (#1959339)
- initrd: extend SYSTEMD_IN_INITRD to accept non-ramfs rootfs (#1959339)
- initrd: do a debug log if failed to detect rootfs type (#1959339)
- initrd: do a debug log if /etc/initrd-release doesn't take effect (#1959339)
- units: assign user-runtime-dir@.service to user-%i.slice (#1946453)
- units: order user-runtime-dir@.service after systemd-user-sessions.service (#1946453)
- units: make sure user-runtime-dir@.service is Type=oneshot (#1946453)
- user-runtime-dir: downgrade a few log messages to LOG_DEBUG that we ignore (#1946453)
- shared/install: Preserve escape characters for escaped unit names (#1952686)
- basic/virt: Detect PowerVM hypervisor (#1937989)
- man: document differences in clean exit status for Type=oneshot (#1940078)
- busctl: add a timestamp to the output of the busctl monitor command (#1909214)
- basic/cap-list: parse/print numerical capabilities (#1946943)
- shared/mount-util: convert to libmount (#1885143)
- mount-util: bind_remount: avoid calling statvfs (#1885143)
- mount-util: use UMOUNT_NOFOLLOW in recursive umounter (#1885143)
- test-install-root: create referenced targets (#1835351)
- install: warn if WantedBy targets don't exist (#1835351)
- test-install-root: add test for unknown WantedBy= target (#1835351)
- ceph is a network filesystem (#1952013)
- sysctl: set kernel.core_pipe_limit=16 (#1949729)
- core: don't drop timer expired but not yet processed when system date is changed (#1899402)
- core: Detect initial timer state from serialized data (#1899402)
- rc-local: order after network-online.target (#1934028)
- set core ulimit to 0 like on RHEL-7 (#1905582)
- test-mountpointutil-util: do not assert in test_mnt_id() (#1910425)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-49" date="1627041600">- remove a left-over break (#1970860)
- basic/unit-name: do not use strdupa() on a path (#1974700)
- sd-event: change ordering of pending/ratelimited events (#1968528)
- sd-event: drop unnecessary "else" (#1968528)
- sd-event: use CMP() macro (#1968528)
- sd-event: use usec_add() (#1968528)
- sd-event: make event_source_time_prioq_reshuffle() accept all event source type (#1968528)
- sd-event: always reshuffle time prioq on changing online/offline state (#1968528)
- ci: run unit tests on z-stream branches as well (#1970860)
- ci: drop forgotten Travis references (#1934504)
- ci: run unit tests on CentOS 8 Stream as well (#1934504)
- ci: add missing test dependencies (#1934504)
- meson: bump timeout for test-udev to 180s (#1934504)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-50" date="1630065600">- Added option --check-inhibitors for non-tty usage (#1269726)
- logind: Introduce RebootWithFlags and others (#1269726)
- logind: add …WithFlags methods to policy (#1269726)
- logind: simplify flags handling a bit (#1269726)
- Update link to RHEL documentation (#1982584)
- Set default core ulimit to 0, but keep the hard limit ulimited (#1905582)
- shared/seccomp-util: address family filtering is broken on ppc (#1982650)
- logind: rework Seat/Session/User object allocation and freeing a bit (#1642460)
- logind: fix serialization/deserialization of user's "display session" (#1642460)
- logind: turn of stdio locking when writing session files too (#1642460)
- units: set StopWhenUnneeded= for the user slice units too (#1642460)
- units: improve Description= string a bit (#1642460)
- logind: improve logging in manager_connect_console() (#1642460)
- logind: save/restore User object's "stopping" field during restarts (#1642460)
- logind: correct bad clean-up path (#1642460)
- logind: fix bad error propagation (#1642460)
- logind: never elect a session that is stopping as display (#1642460)
- logind: introduce little helper that checks whether a session is ready (#1642460)
- logind: propagate session stop errors (#1642460)
- logind: rework how we manage the slice and user-runtime-dir@.service unit for each user (#1642460)
- logind: optionally, keep the user@.service instance for eached logged in user around for a while (#1642460)
- logind: add a RequiresMountsFor= dependency from the session scope unit to the home directory of the user (#1642460)
- logind: improve error propagation of user_check_linger_file() (#1642460)
- logind: automatically GC lingering users for who now user@.service (nor slice, not runtime dir service) is running anymore (#1642460)
- pam_systemd: simplify code which with we set environment variables (#1642460)
- logind: validate /run/user/1000 before we set it (#1642460)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-51" date="1632398400">- define newly needed constants (#1850986)
- sd-netlink: support IFLA_PROP_LIST and IFLA_ALT_IFNAME attributes (#1850986)
- sd-netlink: introduce sd_netlink_message_read_strv() (#1850986)
- sd-netlink: introduce sd_netlink_message_append_strv() (#1850986)
- test: add a test for sd_netlink_message_{append,read}_strv() (#1850986)
- util: introduce ifname_valid_full() (#1850986)
- rename function (#1850986)
- udev: support AlternativeName= setting in .link file (#1850986)
- network: make Name= in [Match] support alternative names of interfaces (#1850986)
- udev: extend the length of ID_NET_NAME_XXX= to ALTIFNAMSIZ (#1850986)
- udev: do not fail if kernel does not support alternative names (#1850986)
- udev: introduce AlternativeNamesPolicy= setting (#1850986)
- network: set AlternativeNamesPolicy= in 99-default.link (#1850986)
- random-util: call initialize_srand() after fork() (#1850986)
- sd-netlink: introduce rtnl_resolve_link_alternative_names() (#1850986)
- udev: sort alternative names (#1850986)
- netlink: introduce rtnl_get/delete_link_alternative_names() (#1850986)
- netlink: do not fail when new interface name is already used as an alternative name (#1850986)
- udev: do not try to reassign alternative names (#1850986)
- Fix LGTM build (#1850986)
- sd-hwdb: allow empty properties (#1930568)
- Update hwdb (#1930568)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-51.1" date="1638360000">- sd-event: take ref on event loop object before dispatching event sources (#2024903)
- pid1: fix free of uninitialized pointer in unit_fail_if_noncanonical() (#2024903)
- Disable iptables for CI (#2024903)
- test-seccomp: accept ENOSYS from sysctl(2) too (#2024903)
- Disable libpitc to fix CentOS Stream CI (#2024903)
- test: accept that char device 0/0 can now be created witout privileges (#2024903)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-51.2" date="1638532800">- core: return true from cg_is_empty* on ENOENT (#2024903)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-51.3" date="1639137600">- Do not fail if the same alt. name is set again (#2030027)
- meson: avoid bogus meson warning (#2030027)
- meson: do not fail if rsync is not installed with meson 0.57.2 (#2030027)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-51.4" date="1642075200">- mount: don't propagate errors from mount_setup_unit() further up (#2039327)
- test: make TEST-47 less racy (#2039327)
- macro: define HAS_FEATURE_ADDRESS_SANITIZER also on gcc (#2039327)
- tests: add helper function to autodetect CI environments (#2039327)
- strv: rework FOREACH_STRING() macro (#2039327)
- test,systemctl: use "const char*" instead of "char*" (#2039327)
- ci: pass the $GITHUB_ACTIONS variable to the CentOS container (#2039327)
- core: rename unit_{start_limit|condition|assert}_test() to unit_test_xyz() (#2037395)
- core: Check unit start rate limiting earlier (#2037395)
- sd-event: introduce callback invoked when event source ratelimit expires (#2037395)
- core: rename/generalize UNIT(u)-&gt;test_start_limit() hook (#2037395)
- mount: make mount units start jobs not runnable if /p/s/mountinfo ratelimit is in effect (#2037395)
- mount: retrigger run queue after ratelimit expired to run delayed mount start jobs (#2037395)
- pid1: add a manager_trigger_run_queue() helper (#2037395)
- unit: add jobs that were skipped because of ratelimit back to run_queue (#2037395)
- udev/net_id: introduce naming scheme for RHEL-8.5 (#2040244)
- udev/net_id: remove extraneous bracket (#2040244)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-51.5" date="1643112000">- mount: do not update exec deps on mountinfo changes (#2038878)
- core/mount: add implicit unit dependencies even if when mount unit is generated from /proc/self/mountinfo (#2038878)</changelog>
</package>
<package pkgid="14cc10347288e22724043d18bf2a4c685745346abe58eee26f62e0894579890e" name="systemd-container-debuginfo" arch="x86_64">
  <version epoch="0" ver="239" rel="51.el8_5.5"/>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 239-47" date="1622808000">- systemd-binfmt: Add safeguard in triggers (#1787144)
- spec: Requires(post) openssl-libs to fix missing /etc/machine-id (#1947438)
- spec: Go back to using systemctl preset-all in post (#1783263, #1647172, #1118740)
- spec: Disable libiptc support (#1817265)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-48" date="1624536000">- cgroup: Also set io.bfq.weight (#1927290)
- seccomp: allow turning off of seccomp filtering via env var (#1916835)
- meson: remove strange dep that causes meson to enter infinite loop (#1970860)
- copy: handle copy_file_range() weirdness on procfs/sysfs (#1970860)
- core: Hide "Deactivated successfully" message (#1954802)
- util: rework in_initrd() to make use of path_is_temporary_fs() (#1959339)
- initrd: extend SYSTEMD_IN_INITRD to accept non-ramfs rootfs (#1959339)
- initrd: do a debug log if failed to detect rootfs type (#1959339)
- initrd: do a debug log if /etc/initrd-release doesn't take effect (#1959339)
- units: assign user-runtime-dir@.service to user-%i.slice (#1946453)
- units: order user-runtime-dir@.service after systemd-user-sessions.service (#1946453)
- units: make sure user-runtime-dir@.service is Type=oneshot (#1946453)
- user-runtime-dir: downgrade a few log messages to LOG_DEBUG that we ignore (#1946453)
- shared/install: Preserve escape characters for escaped unit names (#1952686)
- basic/virt: Detect PowerVM hypervisor (#1937989)
- man: document differences in clean exit status for Type=oneshot (#1940078)
- busctl: add a timestamp to the output of the busctl monitor command (#1909214)
- basic/cap-list: parse/print numerical capabilities (#1946943)
- shared/mount-util: convert to libmount (#1885143)
- mount-util: bind_remount: avoid calling statvfs (#1885143)
- mount-util: use UMOUNT_NOFOLLOW in recursive umounter (#1885143)
- test-install-root: create referenced targets (#1835351)
- install: warn if WantedBy targets don't exist (#1835351)
- test-install-root: add test for unknown WantedBy= target (#1835351)
- ceph is a network filesystem (#1952013)
- sysctl: set kernel.core_pipe_limit=16 (#1949729)
- core: don't drop timer expired but not yet processed when system date is changed (#1899402)
- core: Detect initial timer state from serialized data (#1899402)
- rc-local: order after network-online.target (#1934028)
- set core ulimit to 0 like on RHEL-7 (#1905582)
- test-mountpointutil-util: do not assert in test_mnt_id() (#1910425)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-49" date="1627041600">- remove a left-over break (#1970860)
- basic/unit-name: do not use strdupa() on a path (#1974700)
- sd-event: change ordering of pending/ratelimited events (#1968528)
- sd-event: drop unnecessary "else" (#1968528)
- sd-event: use CMP() macro (#1968528)
- sd-event: use usec_add() (#1968528)
- sd-event: make event_source_time_prioq_reshuffle() accept all event source type (#1968528)
- sd-event: always reshuffle time prioq on changing online/offline state (#1968528)
- ci: run unit tests on z-stream branches as well (#1970860)
- ci: drop forgotten Travis references (#1934504)
- ci: run unit tests on CentOS 8 Stream as well (#1934504)
- ci: add missing test dependencies (#1934504)
- meson: bump timeout for test-udev to 180s (#1934504)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-50" date="1630065600">- Added option --check-inhibitors for non-tty usage (#1269726)
- logind: Introduce RebootWithFlags and others (#1269726)
- logind: add …WithFlags methods to policy (#1269726)
- logind: simplify flags handling a bit (#1269726)
- Update link to RHEL documentation (#1982584)
- Set default core ulimit to 0, but keep the hard limit ulimited (#1905582)
- shared/seccomp-util: address family filtering is broken on ppc (#1982650)
- logind: rework Seat/Session/User object allocation and freeing a bit (#1642460)
- logind: fix serialization/deserialization of user's "display session" (#1642460)
- logind: turn of stdio locking when writing session files too (#1642460)
- units: set StopWhenUnneeded= for the user slice units too (#1642460)
- units: improve Description= string a bit (#1642460)
- logind: improve logging in manager_connect_console() (#1642460)
- logind: save/restore User object's "stopping" field during restarts (#1642460)
- logind: correct bad clean-up path (#1642460)
- logind: fix bad error propagation (#1642460)
- logind: never elect a session that is stopping as display (#1642460)
- logind: introduce little helper that checks whether a session is ready (#1642460)
- logind: propagate session stop errors (#1642460)
- logind: rework how we manage the slice and user-runtime-dir@.service unit for each user (#1642460)
- logind: optionally, keep the user@.service instance for eached logged in user around for a while (#1642460)
- logind: add a RequiresMountsFor= dependency from the session scope unit to the home directory of the user (#1642460)
- logind: improve error propagation of user_check_linger_file() (#1642460)
- logind: automatically GC lingering users for who now user@.service (nor slice, not runtime dir service) is running anymore (#1642460)
- pam_systemd: simplify code which with we set environment variables (#1642460)
- logind: validate /run/user/1000 before we set it (#1642460)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-51" date="1632398400">- define newly needed constants (#1850986)
- sd-netlink: support IFLA_PROP_LIST and IFLA_ALT_IFNAME attributes (#1850986)
- sd-netlink: introduce sd_netlink_message_read_strv() (#1850986)
- sd-netlink: introduce sd_netlink_message_append_strv() (#1850986)
- test: add a test for sd_netlink_message_{append,read}_strv() (#1850986)
- util: introduce ifname_valid_full() (#1850986)
- rename function (#1850986)
- udev: support AlternativeName= setting in .link file (#1850986)
- network: make Name= in [Match] support alternative names of interfaces (#1850986)
- udev: extend the length of ID_NET_NAME_XXX= to ALTIFNAMSIZ (#1850986)
- udev: do not fail if kernel does not support alternative names (#1850986)
- udev: introduce AlternativeNamesPolicy= setting (#1850986)
- network: set AlternativeNamesPolicy= in 99-default.link (#1850986)
- random-util: call initialize_srand() after fork() (#1850986)
- sd-netlink: introduce rtnl_resolve_link_alternative_names() (#1850986)
- udev: sort alternative names (#1850986)
- netlink: introduce rtnl_get/delete_link_alternative_names() (#1850986)
- netlink: do not fail when new interface name is already used as an alternative name (#1850986)
- udev: do not try to reassign alternative names (#1850986)
- Fix LGTM build (#1850986)
- sd-hwdb: allow empty properties (#1930568)
- Update hwdb (#1930568)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-51.1" date="1638360000">- sd-event: take ref on event loop object before dispatching event sources (#2024903)
- pid1: fix free of uninitialized pointer in unit_fail_if_noncanonical() (#2024903)
- Disable iptables for CI (#2024903)
- test-seccomp: accept ENOSYS from sysctl(2) too (#2024903)
- Disable libpitc to fix CentOS Stream CI (#2024903)
- test: accept that char device 0/0 can now be created witout privileges (#2024903)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-51.2" date="1638532800">- core: return true from cg_is_empty* on ENOENT (#2024903)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-51.3" date="1639137600">- Do not fail if the same alt. name is set again (#2030027)
- meson: avoid bogus meson warning (#2030027)
- meson: do not fail if rsync is not installed with meson 0.57.2 (#2030027)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-51.4" date="1642075200">- mount: don't propagate errors from mount_setup_unit() further up (#2039327)
- test: make TEST-47 less racy (#2039327)
- macro: define HAS_FEATURE_ADDRESS_SANITIZER also on gcc (#2039327)
- tests: add helper function to autodetect CI environments (#2039327)
- strv: rework FOREACH_STRING() macro (#2039327)
- test,systemctl: use "const char*" instead of "char*" (#2039327)
- ci: pass the $GITHUB_ACTIONS variable to the CentOS container (#2039327)
- core: rename unit_{start_limit|condition|assert}_test() to unit_test_xyz() (#2037395)
- core: Check unit start rate limiting earlier (#2037395)
- sd-event: introduce callback invoked when event source ratelimit expires (#2037395)
- core: rename/generalize UNIT(u)-&gt;test_start_limit() hook (#2037395)
- mount: make mount units start jobs not runnable if /p/s/mountinfo ratelimit is in effect (#2037395)
- mount: retrigger run queue after ratelimit expired to run delayed mount start jobs (#2037395)
- pid1: add a manager_trigger_run_queue() helper (#2037395)
- unit: add jobs that were skipped because of ratelimit back to run_queue (#2037395)
- udev/net_id: introduce naming scheme for RHEL-8.5 (#2040244)
- udev/net_id: remove extraneous bracket (#2040244)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-51.5" date="1643112000">- mount: do not update exec deps on mountinfo changes (#2038878)
- core/mount: add implicit unit dependencies even if when mount unit is generated from /proc/self/mountinfo (#2038878)</changelog>
</package>
<package pkgid="1c5e8102219d6e23ea35f8be6bdaaa845bfc232097a08af8a23527744d083b86" name="systemd-debuginfo" arch="i686">
  <version epoch="0" ver="239" rel="51.el8_5.2"/>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-44" date="1611835200">- ci: PowerTools repo was renamed to powertools in RHEL 8.3 (#1871827)
- ci: use quay.io instead of Docker Hub to avoid rate limits (#1871827)
- ci: move jobs from Travis CI to GH Actions (#1871827)
- unit: make UNIT() cast function deal with NULL pointers (#1871827)
- use link to RHEL-8 docs (#1623116)
- cgroup: Also set blkio.bfq.weight (#1657810)
- units: make sure initrd-cleanup.service terminates before switching to rootfs (#1657810)
- core: reload SELinux label cache on daemon-reload (#1888912)
- selinux: introduce mac_selinux_create_file_prepare_at() (#1888912)
- selinux: add trigger for policy reload to refresh internal selabel cache (#1888912)
- udev/net_id: give RHEL-8.4 naming scheme a name (#1827462)
- basic/stat-util: make mtime check stricter and use entire timestamp (#1642728)
- udev: make algorithm that selects highest priority devlink less susceptible to race conditions (#1642728)
- test: create /dev/null in test-udev.pl (#1642728)
- test: missing "die" (#1642728)
- udev-test: remove a check for whether the test is run in a container (#1642728)
- udev-test: skip the test only if it can't setup its environment (#1642728)
- udev-test: fix test skip condition (#1642728)
- udev-test: fix missing directory test/run (#1642728)
- udev-test: check if permitted to create block device nodes (#1642728)
- test-udev: add a testcase of too long line (#1642728)
- test-udev: use proper semantics for too long line with continuation (#1642728)
- test-udev: add more tests for line continuations and comments (#1642728)
- test-udev: add more tests for line continuation (#1642728)
- test-udev: fix alignment and drop unnecessary white spaces (#1642728)
- test/udev-test.pl: cleanup if skipping test (#1642728)
- test: add test cases for empty string match (#1642728)
- test: add test case for multi matches when use "||" (#1642728)
- udev-test: do not rely on "mail" group being defined (#1642728)
- test/udev-test.pl: allow multiple devices per test (#1642728)
- test/udev-test.pl: create rules only once (#1642728)
- test/udev-test.pl: allow concurrent additions and removals (#1642728)
- test/udev-test.pl: use computed devnode name (#1642728)
- test/udev-test.pl: test correctness of symlink targets (#1642728)
- test/udev-test.pl: allow checking multiple symlinks (#1642728)
- test/udev-test.pl: fix wrong test descriptions (#1642728)
- test/udev-test.pl: last_rule is unsupported (#1642728)
- test/udev-test.pl: Make some tests a little harder (#1642728)
- test/udev-test.pl: remove bogus rules from magic subsys test (#1642728)
- test/udev-test.pl: merge "space and var with space" tests (#1642728)
- test/udev-test.pl: merge import parent tests into one (#1642728)
- test/udev-test.pl: count "good" results (#1642728)
- tests/udev-test.pl: add multiple device test (#1642728)
- test/udev-test.pl: add repeat count (#1642728)
- test/udev-test.pl: generator for large list of block devices (#1642728)
- test/udev-test.pl: suppress umount error message at startup (#1642728)
- test/udev_test.pl: add "expected good" count (#1642728)
- test/udev-test: gracefully exit when imports fail (#1642728)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-45" date="1615464000">- Revert "test: add test cases for empty string match" and "test: add test case for multi matches when use ||" (#1935124)
- test/sys-script.py: add missing DEVNAME entries to uevents (#1935124)
- sd-event: split out helper functions for reshuffling prioqs (#1937315)
- sd-event: split out enable and disable codepaths from sd_event_source_set_enabled() (#1937315)
- sd-event: mention that two debug logged events are ignored (#1937315)
- sd-event: split clock data allocation out of sd_event_add_time() (#1937315)
- sd-event: split out code to add/remove timer event sources to earliest/latest prioq (#1937315)
- sd-event: fix delays assert brain-o (#17790) (#1937315)
- sd-event: let's suffix last_run/last_log with "_usec" (#1937315)
- sd-event: refuse running default event loops in any other thread than the one they are default for (#1937315)
- sd-event: ref event loop while in sd_event_prepare() ot sd_event_run() (#1937315)
- sd-event: follow coding style with naming return parameter (#1937315)
- sd-event: remove earliest_index/latest_index into common part of event source objects (#1937315)
- sd-event: update state at the end in event_source_enable (#1937315)
- sd-event: increase n_enabled_child_sources just once (#1937315)
- sd-event: add ability to ratelimit event sources (#1937315)
- test: add ratelimiting test (#1937315)
- core: prevent excessive /proc/self/mountinfo parsing (#1937315)
- udev: run link_update() with increased retry count in second invocation (#1935124)
- pam-systemd: use secure_getenv() rather than getenv() (#1936866)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-46" date="1621425600">- Revert "udev: run link_update() with increased retry count in second invocation" (#1942299)
- Revert "udev: make algorithm that selects highest priority devlink less susceptible to race conditions" (#1942299)
- test/udev-test.pl: drop test cases that add mutliple devices (#1942299)</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 239-47" date="1622808000">- systemd-binfmt: Add safeguard in triggers (#1787144)
- spec: Requires(post) openssl-libs to fix missing /etc/machine-id (#1947438)
- spec: Go back to using systemctl preset-all in post (#1783263, #1647172, #1118740)
- spec: Disable libiptc support (#1817265)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-48" date="1624536000">- cgroup: Also set io.bfq.weight (#1927290)
- seccomp: allow turning off of seccomp filtering via env var (#1916835)
- meson: remove strange dep that causes meson to enter infinite loop (#1970860)
- copy: handle copy_file_range() weirdness on procfs/sysfs (#1970860)
- core: Hide "Deactivated successfully" message (#1954802)
- util: rework in_initrd() to make use of path_is_temporary_fs() (#1959339)
- initrd: extend SYSTEMD_IN_INITRD to accept non-ramfs rootfs (#1959339)
- initrd: do a debug log if failed to detect rootfs type (#1959339)
- initrd: do a debug log if /etc/initrd-release doesn't take effect (#1959339)
- units: assign user-runtime-dir@.service to user-%i.slice (#1946453)
- units: order user-runtime-dir@.service after systemd-user-sessions.service (#1946453)
- units: make sure user-runtime-dir@.service is Type=oneshot (#1946453)
- user-runtime-dir: downgrade a few log messages to LOG_DEBUG that we ignore (#1946453)
- shared/install: Preserve escape characters for escaped unit names (#1952686)
- basic/virt: Detect PowerVM hypervisor (#1937989)
- man: document differences in clean exit status for Type=oneshot (#1940078)
- busctl: add a timestamp to the output of the busctl monitor command (#1909214)
- basic/cap-list: parse/print numerical capabilities (#1946943)
- shared/mount-util: convert to libmount (#1885143)
- mount-util: bind_remount: avoid calling statvfs (#1885143)
- mount-util: use UMOUNT_NOFOLLOW in recursive umounter (#1885143)
- test-install-root: create referenced targets (#1835351)
- install: warn if WantedBy targets don't exist (#1835351)
- test-install-root: add test for unknown WantedBy= target (#1835351)
- ceph is a network filesystem (#1952013)
- sysctl: set kernel.core_pipe_limit=16 (#1949729)
- core: don't drop timer expired but not yet processed when system date is changed (#1899402)
- core: Detect initial timer state from serialized data (#1899402)
- rc-local: order after network-online.target (#1934028)
- set core ulimit to 0 like on RHEL-7 (#1905582)
- test-mountpointutil-util: do not assert in test_mnt_id() (#1910425)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-49" date="1627041600">- remove a left-over break (#1970860)
- basic/unit-name: do not use strdupa() on a path (#1974700)
- sd-event: change ordering of pending/ratelimited events (#1968528)
- sd-event: drop unnecessary "else" (#1968528)
- sd-event: use CMP() macro (#1968528)
- sd-event: use usec_add() (#1968528)
- sd-event: make event_source_time_prioq_reshuffle() accept all event source type (#1968528)
- sd-event: always reshuffle time prioq on changing online/offline state (#1968528)
- ci: run unit tests on z-stream branches as well (#1970860)
- ci: drop forgotten Travis references (#1934504)
- ci: run unit tests on CentOS 8 Stream as well (#1934504)
- ci: add missing test dependencies (#1934504)
- meson: bump timeout for test-udev to 180s (#1934504)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-50" date="1630065600">- Added option --check-inhibitors for non-tty usage (#1269726)
- logind: Introduce RebootWithFlags and others (#1269726)
- logind: add …WithFlags methods to policy (#1269726)
- logind: simplify flags handling a bit (#1269726)
- Update link to RHEL documentation (#1982584)
- Set default core ulimit to 0, but keep the hard limit ulimited (#1905582)
- shared/seccomp-util: address family filtering is broken on ppc (#1982650)
- logind: rework Seat/Session/User object allocation and freeing a bit (#1642460)
- logind: fix serialization/deserialization of user's "display session" (#1642460)
- logind: turn of stdio locking when writing session files too (#1642460)
- units: set StopWhenUnneeded= for the user slice units too (#1642460)
- units: improve Description= string a bit (#1642460)
- logind: improve logging in manager_connect_console() (#1642460)
- logind: save/restore User object's "stopping" field during restarts (#1642460)
- logind: correct bad clean-up path (#1642460)
- logind: fix bad error propagation (#1642460)
- logind: never elect a session that is stopping as display (#1642460)
- logind: introduce little helper that checks whether a session is ready (#1642460)
- logind: propagate session stop errors (#1642460)
- logind: rework how we manage the slice and user-runtime-dir@.service unit for each user (#1642460)
- logind: optionally, keep the user@.service instance for eached logged in user around for a while (#1642460)
- logind: add a RequiresMountsFor= dependency from the session scope unit to the home directory of the user (#1642460)
- logind: improve error propagation of user_check_linger_file() (#1642460)
- logind: automatically GC lingering users for who now user@.service (nor slice, not runtime dir service) is running anymore (#1642460)
- pam_systemd: simplify code which with we set environment variables (#1642460)
- logind: validate /run/user/1000 before we set it (#1642460)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-51" date="1632398400">- define newly needed constants (#1850986)
- sd-netlink: support IFLA_PROP_LIST and IFLA_ALT_IFNAME attributes (#1850986)
- sd-netlink: introduce sd_netlink_message_read_strv() (#1850986)
- sd-netlink: introduce sd_netlink_message_append_strv() (#1850986)
- test: add a test for sd_netlink_message_{append,read}_strv() (#1850986)
- util: introduce ifname_valid_full() (#1850986)
- rename function (#1850986)
- udev: support AlternativeName= setting in .link file (#1850986)
- network: make Name= in [Match] support alternative names of interfaces (#1850986)
- udev: extend the length of ID_NET_NAME_XXX= to ALTIFNAMSIZ (#1850986)
- udev: do not fail if kernel does not support alternative names (#1850986)
- udev: introduce AlternativeNamesPolicy= setting (#1850986)
- network: set AlternativeNamesPolicy= in 99-default.link (#1850986)
- random-util: call initialize_srand() after fork() (#1850986)
- sd-netlink: introduce rtnl_resolve_link_alternative_names() (#1850986)
- udev: sort alternative names (#1850986)
- netlink: introduce rtnl_get/delete_link_alternative_names() (#1850986)
- netlink: do not fail when new interface name is already used as an alternative name (#1850986)
- udev: do not try to reassign alternative names (#1850986)
- Fix LGTM build (#1850986)
- sd-hwdb: allow empty properties (#1930568)
- Update hwdb (#1930568)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-51.1" date="1638360000">- sd-event: take ref on event loop object before dispatching event sources (#2024903)
- pid1: fix free of uninitialized pointer in unit_fail_if_noncanonical() (#2024903)
- Disable iptables for CI (#2024903)
- test-seccomp: accept ENOSYS from sysctl(2) too (#2024903)
- Disable libpitc to fix CentOS Stream CI (#2024903)
- test: accept that char device 0/0 can now be created witout privileges (#2024903)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-51.2" date="1638532800">- core: return true from cg_is_empty* on ENOENT (#2024903)</changelog>
</package>
<package pkgid="9664a7a139b58b58143f69dc3d5dc7f938b6b6d531bc9bb3c2b9e99d2e6314e5" name="systemd-debuginfo" arch="x86_64">
  <version epoch="0" ver="239" rel="51.el8_5.2"/>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-44" date="1611835200">- ci: PowerTools repo was renamed to powertools in RHEL 8.3 (#1871827)
- ci: use quay.io instead of Docker Hub to avoid rate limits (#1871827)
- ci: move jobs from Travis CI to GH Actions (#1871827)
- unit: make UNIT() cast function deal with NULL pointers (#1871827)
- use link to RHEL-8 docs (#1623116)
- cgroup: Also set blkio.bfq.weight (#1657810)
- units: make sure initrd-cleanup.service terminates before switching to rootfs (#1657810)
- core: reload SELinux label cache on daemon-reload (#1888912)
- selinux: introduce mac_selinux_create_file_prepare_at() (#1888912)
- selinux: add trigger for policy reload to refresh internal selabel cache (#1888912)
- udev/net_id: give RHEL-8.4 naming scheme a name (#1827462)
- basic/stat-util: make mtime check stricter and use entire timestamp (#1642728)
- udev: make algorithm that selects highest priority devlink less susceptible to race conditions (#1642728)
- test: create /dev/null in test-udev.pl (#1642728)
- test: missing "die" (#1642728)
- udev-test: remove a check for whether the test is run in a container (#1642728)
- udev-test: skip the test only if it can't setup its environment (#1642728)
- udev-test: fix test skip condition (#1642728)
- udev-test: fix missing directory test/run (#1642728)
- udev-test: check if permitted to create block device nodes (#1642728)
- test-udev: add a testcase of too long line (#1642728)
- test-udev: use proper semantics for too long line with continuation (#1642728)
- test-udev: add more tests for line continuations and comments (#1642728)
- test-udev: add more tests for line continuation (#1642728)
- test-udev: fix alignment and drop unnecessary white spaces (#1642728)
- test/udev-test.pl: cleanup if skipping test (#1642728)
- test: add test cases for empty string match (#1642728)
- test: add test case for multi matches when use "||" (#1642728)
- udev-test: do not rely on "mail" group being defined (#1642728)
- test/udev-test.pl: allow multiple devices per test (#1642728)
- test/udev-test.pl: create rules only once (#1642728)
- test/udev-test.pl: allow concurrent additions and removals (#1642728)
- test/udev-test.pl: use computed devnode name (#1642728)
- test/udev-test.pl: test correctness of symlink targets (#1642728)
- test/udev-test.pl: allow checking multiple symlinks (#1642728)
- test/udev-test.pl: fix wrong test descriptions (#1642728)
- test/udev-test.pl: last_rule is unsupported (#1642728)
- test/udev-test.pl: Make some tests a little harder (#1642728)
- test/udev-test.pl: remove bogus rules from magic subsys test (#1642728)
- test/udev-test.pl: merge "space and var with space" tests (#1642728)
- test/udev-test.pl: merge import parent tests into one (#1642728)
- test/udev-test.pl: count "good" results (#1642728)
- tests/udev-test.pl: add multiple device test (#1642728)
- test/udev-test.pl: add repeat count (#1642728)
- test/udev-test.pl: generator for large list of block devices (#1642728)
- test/udev-test.pl: suppress umount error message at startup (#1642728)
- test/udev_test.pl: add "expected good" count (#1642728)
- test/udev-test: gracefully exit when imports fail (#1642728)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-45" date="1615464000">- Revert "test: add test cases for empty string match" and "test: add test case for multi matches when use ||" (#1935124)
- test/sys-script.py: add missing DEVNAME entries to uevents (#1935124)
- sd-event: split out helper functions for reshuffling prioqs (#1937315)
- sd-event: split out enable and disable codepaths from sd_event_source_set_enabled() (#1937315)
- sd-event: mention that two debug logged events are ignored (#1937315)
- sd-event: split clock data allocation out of sd_event_add_time() (#1937315)
- sd-event: split out code to add/remove timer event sources to earliest/latest prioq (#1937315)
- sd-event: fix delays assert brain-o (#17790) (#1937315)
- sd-event: let's suffix last_run/last_log with "_usec" (#1937315)
- sd-event: refuse running default event loops in any other thread than the one they are default for (#1937315)
- sd-event: ref event loop while in sd_event_prepare() ot sd_event_run() (#1937315)
- sd-event: follow coding style with naming return parameter (#1937315)
- sd-event: remove earliest_index/latest_index into common part of event source objects (#1937315)
- sd-event: update state at the end in event_source_enable (#1937315)
- sd-event: increase n_enabled_child_sources just once (#1937315)
- sd-event: add ability to ratelimit event sources (#1937315)
- test: add ratelimiting test (#1937315)
- core: prevent excessive /proc/self/mountinfo parsing (#1937315)
- udev: run link_update() with increased retry count in second invocation (#1935124)
- pam-systemd: use secure_getenv() rather than getenv() (#1936866)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-46" date="1621425600">- Revert "udev: run link_update() with increased retry count in second invocation" (#1942299)
- Revert "udev: make algorithm that selects highest priority devlink less susceptible to race conditions" (#1942299)
- test/udev-test.pl: drop test cases that add mutliple devices (#1942299)</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 239-47" date="1622808000">- systemd-binfmt: Add safeguard in triggers (#1787144)
- spec: Requires(post) openssl-libs to fix missing /etc/machine-id (#1947438)
- spec: Go back to using systemctl preset-all in post (#1783263, #1647172, #1118740)
- spec: Disable libiptc support (#1817265)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-48" date="1624536000">- cgroup: Also set io.bfq.weight (#1927290)
- seccomp: allow turning off of seccomp filtering via env var (#1916835)
- meson: remove strange dep that causes meson to enter infinite loop (#1970860)
- copy: handle copy_file_range() weirdness on procfs/sysfs (#1970860)
- core: Hide "Deactivated successfully" message (#1954802)
- util: rework in_initrd() to make use of path_is_temporary_fs() (#1959339)
- initrd: extend SYSTEMD_IN_INITRD to accept non-ramfs rootfs (#1959339)
- initrd: do a debug log if failed to detect rootfs type (#1959339)
- initrd: do a debug log if /etc/initrd-release doesn't take effect (#1959339)
- units: assign user-runtime-dir@.service to user-%i.slice (#1946453)
- units: order user-runtime-dir@.service after systemd-user-sessions.service (#1946453)
- units: make sure user-runtime-dir@.service is Type=oneshot (#1946453)
- user-runtime-dir: downgrade a few log messages to LOG_DEBUG that we ignore (#1946453)
- shared/install: Preserve escape characters for escaped unit names (#1952686)
- basic/virt: Detect PowerVM hypervisor (#1937989)
- man: document differences in clean exit status for Type=oneshot (#1940078)
- busctl: add a timestamp to the output of the busctl monitor command (#1909214)
- basic/cap-list: parse/print numerical capabilities (#1946943)
- shared/mount-util: convert to libmount (#1885143)
- mount-util: bind_remount: avoid calling statvfs (#1885143)
- mount-util: use UMOUNT_NOFOLLOW in recursive umounter (#1885143)
- test-install-root: create referenced targets (#1835351)
- install: warn if WantedBy targets don't exist (#1835351)
- test-install-root: add test for unknown WantedBy= target (#1835351)
- ceph is a network filesystem (#1952013)
- sysctl: set kernel.core_pipe_limit=16 (#1949729)
- core: don't drop timer expired but not yet processed when system date is changed (#1899402)
- core: Detect initial timer state from serialized data (#1899402)
- rc-local: order after network-online.target (#1934028)
- set core ulimit to 0 like on RHEL-7 (#1905582)
- test-mountpointutil-util: do not assert in test_mnt_id() (#1910425)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-49" date="1627041600">- remove a left-over break (#1970860)
- basic/unit-name: do not use strdupa() on a path (#1974700)
- sd-event: change ordering of pending/ratelimited events (#1968528)
- sd-event: drop unnecessary "else" (#1968528)
- sd-event: use CMP() macro (#1968528)
- sd-event: use usec_add() (#1968528)
- sd-event: make event_source_time_prioq_reshuffle() accept all event source type (#1968528)
- sd-event: always reshuffle time prioq on changing online/offline state (#1968528)
- ci: run unit tests on z-stream branches as well (#1970860)
- ci: drop forgotten Travis references (#1934504)
- ci: run unit tests on CentOS 8 Stream as well (#1934504)
- ci: add missing test dependencies (#1934504)
- meson: bump timeout for test-udev to 180s (#1934504)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-50" date="1630065600">- Added option --check-inhibitors for non-tty usage (#1269726)
- logind: Introduce RebootWithFlags and others (#1269726)
- logind: add …WithFlags methods to policy (#1269726)
- logind: simplify flags handling a bit (#1269726)
- Update link to RHEL documentation (#1982584)
- Set default core ulimit to 0, but keep the hard limit ulimited (#1905582)
- shared/seccomp-util: address family filtering is broken on ppc (#1982650)
- logind: rework Seat/Session/User object allocation and freeing a bit (#1642460)
- logind: fix serialization/deserialization of user's "display session" (#1642460)
- logind: turn of stdio locking when writing session files too (#1642460)
- units: set StopWhenUnneeded= for the user slice units too (#1642460)
- units: improve Description= string a bit (#1642460)
- logind: improve logging in manager_connect_console() (#1642460)
- logind: save/restore User object's "stopping" field during restarts (#1642460)
- logind: correct bad clean-up path (#1642460)
- logind: fix bad error propagation (#1642460)
- logind: never elect a session that is stopping as display (#1642460)
- logind: introduce little helper that checks whether a session is ready (#1642460)
- logind: propagate session stop errors (#1642460)
- logind: rework how we manage the slice and user-runtime-dir@.service unit for each user (#1642460)
- logind: optionally, keep the user@.service instance for eached logged in user around for a while (#1642460)
- logind: add a RequiresMountsFor= dependency from the session scope unit to the home directory of the user (#1642460)
- logind: improve error propagation of user_check_linger_file() (#1642460)
- logind: automatically GC lingering users for who now user@.service (nor slice, not runtime dir service) is running anymore (#1642460)
- pam_systemd: simplify code which with we set environment variables (#1642460)
- logind: validate /run/user/1000 before we set it (#1642460)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-51" date="1632398400">- define newly needed constants (#1850986)
- sd-netlink: support IFLA_PROP_LIST and IFLA_ALT_IFNAME attributes (#1850986)
- sd-netlink: introduce sd_netlink_message_read_strv() (#1850986)
- sd-netlink: introduce sd_netlink_message_append_strv() (#1850986)
- test: add a test for sd_netlink_message_{append,read}_strv() (#1850986)
- util: introduce ifname_valid_full() (#1850986)
- rename function (#1850986)
- udev: support AlternativeName= setting in .link file (#1850986)
- network: make Name= in [Match] support alternative names of interfaces (#1850986)
- udev: extend the length of ID_NET_NAME_XXX= to ALTIFNAMSIZ (#1850986)
- udev: do not fail if kernel does not support alternative names (#1850986)
- udev: introduce AlternativeNamesPolicy= setting (#1850986)
- network: set AlternativeNamesPolicy= in 99-default.link (#1850986)
- random-util: call initialize_srand() after fork() (#1850986)
- sd-netlink: introduce rtnl_resolve_link_alternative_names() (#1850986)
- udev: sort alternative names (#1850986)
- netlink: introduce rtnl_get/delete_link_alternative_names() (#1850986)
- netlink: do not fail when new interface name is already used as an alternative name (#1850986)
- udev: do not try to reassign alternative names (#1850986)
- Fix LGTM build (#1850986)
- sd-hwdb: allow empty properties (#1930568)
- Update hwdb (#1930568)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-51.1" date="1638360000">- sd-event: take ref on event loop object before dispatching event sources (#2024903)
- pid1: fix free of uninitialized pointer in unit_fail_if_noncanonical() (#2024903)
- Disable iptables for CI (#2024903)
- test-seccomp: accept ENOSYS from sysctl(2) too (#2024903)
- Disable libpitc to fix CentOS Stream CI (#2024903)
- test: accept that char device 0/0 can now be created witout privileges (#2024903)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-51.2" date="1638532800">- core: return true from cg_is_empty* on ENOENT (#2024903)</changelog>
</package>
<package pkgid="5f1afd7e2593e947b6588d941799cacd7893d388f3cf8e01659d6b2cb9d46792" name="systemd-debuginfo" arch="i686">
  <version epoch="0" ver="239" rel="51.el8_5.3"/>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-45" date="1615464000">- Revert "test: add test cases for empty string match" and "test: add test case for multi matches when use ||" (#1935124)
- test/sys-script.py: add missing DEVNAME entries to uevents (#1935124)
- sd-event: split out helper functions for reshuffling prioqs (#1937315)
- sd-event: split out enable and disable codepaths from sd_event_source_set_enabled() (#1937315)
- sd-event: mention that two debug logged events are ignored (#1937315)
- sd-event: split clock data allocation out of sd_event_add_time() (#1937315)
- sd-event: split out code to add/remove timer event sources to earliest/latest prioq (#1937315)
- sd-event: fix delays assert brain-o (#17790) (#1937315)
- sd-event: let's suffix last_run/last_log with "_usec" (#1937315)
- sd-event: refuse running default event loops in any other thread than the one they are default for (#1937315)
- sd-event: ref event loop while in sd_event_prepare() ot sd_event_run() (#1937315)
- sd-event: follow coding style with naming return parameter (#1937315)
- sd-event: remove earliest_index/latest_index into common part of event source objects (#1937315)
- sd-event: update state at the end in event_source_enable (#1937315)
- sd-event: increase n_enabled_child_sources just once (#1937315)
- sd-event: add ability to ratelimit event sources (#1937315)
- test: add ratelimiting test (#1937315)
- core: prevent excessive /proc/self/mountinfo parsing (#1937315)
- udev: run link_update() with increased retry count in second invocation (#1935124)
- pam-systemd: use secure_getenv() rather than getenv() (#1936866)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-46" date="1621425600">- Revert "udev: run link_update() with increased retry count in second invocation" (#1942299)
- Revert "udev: make algorithm that selects highest priority devlink less susceptible to race conditions" (#1942299)
- test/udev-test.pl: drop test cases that add mutliple devices (#1942299)</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 239-47" date="1622808000">- systemd-binfmt: Add safeguard in triggers (#1787144)
- spec: Requires(post) openssl-libs to fix missing /etc/machine-id (#1947438)
- spec: Go back to using systemctl preset-all in post (#1783263, #1647172, #1118740)
- spec: Disable libiptc support (#1817265)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-48" date="1624536000">- cgroup: Also set io.bfq.weight (#1927290)
- seccomp: allow turning off of seccomp filtering via env var (#1916835)
- meson: remove strange dep that causes meson to enter infinite loop (#1970860)
- copy: handle copy_file_range() weirdness on procfs/sysfs (#1970860)
- core: Hide "Deactivated successfully" message (#1954802)
- util: rework in_initrd() to make use of path_is_temporary_fs() (#1959339)
- initrd: extend SYSTEMD_IN_INITRD to accept non-ramfs rootfs (#1959339)
- initrd: do a debug log if failed to detect rootfs type (#1959339)
- initrd: do a debug log if /etc/initrd-release doesn't take effect (#1959339)
- units: assign user-runtime-dir@.service to user-%i.slice (#1946453)
- units: order user-runtime-dir@.service after systemd-user-sessions.service (#1946453)
- units: make sure user-runtime-dir@.service is Type=oneshot (#1946453)
- user-runtime-dir: downgrade a few log messages to LOG_DEBUG that we ignore (#1946453)
- shared/install: Preserve escape characters for escaped unit names (#1952686)
- basic/virt: Detect PowerVM hypervisor (#1937989)
- man: document differences in clean exit status for Type=oneshot (#1940078)
- busctl: add a timestamp to the output of the busctl monitor command (#1909214)
- basic/cap-list: parse/print numerical capabilities (#1946943)
- shared/mount-util: convert to libmount (#1885143)
- mount-util: bind_remount: avoid calling statvfs (#1885143)
- mount-util: use UMOUNT_NOFOLLOW in recursive umounter (#1885143)
- test-install-root: create referenced targets (#1835351)
- install: warn if WantedBy targets don't exist (#1835351)
- test-install-root: add test for unknown WantedBy= target (#1835351)
- ceph is a network filesystem (#1952013)
- sysctl: set kernel.core_pipe_limit=16 (#1949729)
- core: don't drop timer expired but not yet processed when system date is changed (#1899402)
- core: Detect initial timer state from serialized data (#1899402)
- rc-local: order after network-online.target (#1934028)
- set core ulimit to 0 like on RHEL-7 (#1905582)
- test-mountpointutil-util: do not assert in test_mnt_id() (#1910425)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-49" date="1627041600">- remove a left-over break (#1970860)
- basic/unit-name: do not use strdupa() on a path (#1974700)
- sd-event: change ordering of pending/ratelimited events (#1968528)
- sd-event: drop unnecessary "else" (#1968528)
- sd-event: use CMP() macro (#1968528)
- sd-event: use usec_add() (#1968528)
- sd-event: make event_source_time_prioq_reshuffle() accept all event source type (#1968528)
- sd-event: always reshuffle time prioq on changing online/offline state (#1968528)
- ci: run unit tests on z-stream branches as well (#1970860)
- ci: drop forgotten Travis references (#1934504)
- ci: run unit tests on CentOS 8 Stream as well (#1934504)
- ci: add missing test dependencies (#1934504)
- meson: bump timeout for test-udev to 180s (#1934504)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-50" date="1630065600">- Added option --check-inhibitors for non-tty usage (#1269726)
- logind: Introduce RebootWithFlags and others (#1269726)
- logind: add …WithFlags methods to policy (#1269726)
- logind: simplify flags handling a bit (#1269726)
- Update link to RHEL documentation (#1982584)
- Set default core ulimit to 0, but keep the hard limit ulimited (#1905582)
- shared/seccomp-util: address family filtering is broken on ppc (#1982650)
- logind: rework Seat/Session/User object allocation and freeing a bit (#1642460)
- logind: fix serialization/deserialization of user's "display session" (#1642460)
- logind: turn of stdio locking when writing session files too (#1642460)
- units: set StopWhenUnneeded= for the user slice units too (#1642460)
- units: improve Description= string a bit (#1642460)
- logind: improve logging in manager_connect_console() (#1642460)
- logind: save/restore User object's "stopping" field during restarts (#1642460)
- logind: correct bad clean-up path (#1642460)
- logind: fix bad error propagation (#1642460)
- logind: never elect a session that is stopping as display (#1642460)
- logind: introduce little helper that checks whether a session is ready (#1642460)
- logind: propagate session stop errors (#1642460)
- logind: rework how we manage the slice and user-runtime-dir@.service unit for each user (#1642460)
- logind: optionally, keep the user@.service instance for eached logged in user around for a while (#1642460)
- logind: add a RequiresMountsFor= dependency from the session scope unit to the home directory of the user (#1642460)
- logind: improve error propagation of user_check_linger_file() (#1642460)
- logind: automatically GC lingering users for who now user@.service (nor slice, not runtime dir service) is running anymore (#1642460)
- pam_systemd: simplify code which with we set environment variables (#1642460)
- logind: validate /run/user/1000 before we set it (#1642460)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-51" date="1632398400">- define newly needed constants (#1850986)
- sd-netlink: support IFLA_PROP_LIST and IFLA_ALT_IFNAME attributes (#1850986)
- sd-netlink: introduce sd_netlink_message_read_strv() (#1850986)
- sd-netlink: introduce sd_netlink_message_append_strv() (#1850986)
- test: add a test for sd_netlink_message_{append,read}_strv() (#1850986)
- util: introduce ifname_valid_full() (#1850986)
- rename function (#1850986)
- udev: support AlternativeName= setting in .link file (#1850986)
- network: make Name= in [Match] support alternative names of interfaces (#1850986)
- udev: extend the length of ID_NET_NAME_XXX= to ALTIFNAMSIZ (#1850986)
- udev: do not fail if kernel does not support alternative names (#1850986)
- udev: introduce AlternativeNamesPolicy= setting (#1850986)
- network: set AlternativeNamesPolicy= in 99-default.link (#1850986)
- random-util: call initialize_srand() after fork() (#1850986)
- sd-netlink: introduce rtnl_resolve_link_alternative_names() (#1850986)
- udev: sort alternative names (#1850986)
- netlink: introduce rtnl_get/delete_link_alternative_names() (#1850986)
- netlink: do not fail when new interface name is already used as an alternative name (#1850986)
- udev: do not try to reassign alternative names (#1850986)
- Fix LGTM build (#1850986)
- sd-hwdb: allow empty properties (#1930568)
- Update hwdb (#1930568)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-51.1" date="1638360000">- sd-event: take ref on event loop object before dispatching event sources (#2024903)
- pid1: fix free of uninitialized pointer in unit_fail_if_noncanonical() (#2024903)
- Disable iptables for CI (#2024903)
- test-seccomp: accept ENOSYS from sysctl(2) too (#2024903)
- Disable libpitc to fix CentOS Stream CI (#2024903)
- test: accept that char device 0/0 can now be created witout privileges (#2024903)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-51.2" date="1638532800">- core: return true from cg_is_empty* on ENOENT (#2024903)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-51.3" date="1639137600">- Do not fail if the same alt. name is set again (#2030027)
- meson: avoid bogus meson warning (#2030027)
- meson: do not fail if rsync is not installed with meson 0.57.2 (#2030027)</changelog>
</package>
<package pkgid="e142aefa5e85958632dd750b27a8dcc25144faf89a505952fbcd39c8733f0c9e" name="systemd-debuginfo" arch="x86_64">
  <version epoch="0" ver="239" rel="51.el8_5.3"/>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-45" date="1615464000">- Revert "test: add test cases for empty string match" and "test: add test case for multi matches when use ||" (#1935124)
- test/sys-script.py: add missing DEVNAME entries to uevents (#1935124)
- sd-event: split out helper functions for reshuffling prioqs (#1937315)
- sd-event: split out enable and disable codepaths from sd_event_source_set_enabled() (#1937315)
- sd-event: mention that two debug logged events are ignored (#1937315)
- sd-event: split clock data allocation out of sd_event_add_time() (#1937315)
- sd-event: split out code to add/remove timer event sources to earliest/latest prioq (#1937315)
- sd-event: fix delays assert brain-o (#17790) (#1937315)
- sd-event: let's suffix last_run/last_log with "_usec" (#1937315)
- sd-event: refuse running default event loops in any other thread than the one they are default for (#1937315)
- sd-event: ref event loop while in sd_event_prepare() ot sd_event_run() (#1937315)
- sd-event: follow coding style with naming return parameter (#1937315)
- sd-event: remove earliest_index/latest_index into common part of event source objects (#1937315)
- sd-event: update state at the end in event_source_enable (#1937315)
- sd-event: increase n_enabled_child_sources just once (#1937315)
- sd-event: add ability to ratelimit event sources (#1937315)
- test: add ratelimiting test (#1937315)
- core: prevent excessive /proc/self/mountinfo parsing (#1937315)
- udev: run link_update() with increased retry count in second invocation (#1935124)
- pam-systemd: use secure_getenv() rather than getenv() (#1936866)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-46" date="1621425600">- Revert "udev: run link_update() with increased retry count in second invocation" (#1942299)
- Revert "udev: make algorithm that selects highest priority devlink less susceptible to race conditions" (#1942299)
- test/udev-test.pl: drop test cases that add mutliple devices (#1942299)</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 239-47" date="1622808000">- systemd-binfmt: Add safeguard in triggers (#1787144)
- spec: Requires(post) openssl-libs to fix missing /etc/machine-id (#1947438)
- spec: Go back to using systemctl preset-all in post (#1783263, #1647172, #1118740)
- spec: Disable libiptc support (#1817265)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-48" date="1624536000">- cgroup: Also set io.bfq.weight (#1927290)
- seccomp: allow turning off of seccomp filtering via env var (#1916835)
- meson: remove strange dep that causes meson to enter infinite loop (#1970860)
- copy: handle copy_file_range() weirdness on procfs/sysfs (#1970860)
- core: Hide "Deactivated successfully" message (#1954802)
- util: rework in_initrd() to make use of path_is_temporary_fs() (#1959339)
- initrd: extend SYSTEMD_IN_INITRD to accept non-ramfs rootfs (#1959339)
- initrd: do a debug log if failed to detect rootfs type (#1959339)
- initrd: do a debug log if /etc/initrd-release doesn't take effect (#1959339)
- units: assign user-runtime-dir@.service to user-%i.slice (#1946453)
- units: order user-runtime-dir@.service after systemd-user-sessions.service (#1946453)
- units: make sure user-runtime-dir@.service is Type=oneshot (#1946453)
- user-runtime-dir: downgrade a few log messages to LOG_DEBUG that we ignore (#1946453)
- shared/install: Preserve escape characters for escaped unit names (#1952686)
- basic/virt: Detect PowerVM hypervisor (#1937989)
- man: document differences in clean exit status for Type=oneshot (#1940078)
- busctl: add a timestamp to the output of the busctl monitor command (#1909214)
- basic/cap-list: parse/print numerical capabilities (#1946943)
- shared/mount-util: convert to libmount (#1885143)
- mount-util: bind_remount: avoid calling statvfs (#1885143)
- mount-util: use UMOUNT_NOFOLLOW in recursive umounter (#1885143)
- test-install-root: create referenced targets (#1835351)
- install: warn if WantedBy targets don't exist (#1835351)
- test-install-root: add test for unknown WantedBy= target (#1835351)
- ceph is a network filesystem (#1952013)
- sysctl: set kernel.core_pipe_limit=16 (#1949729)
- core: don't drop timer expired but not yet processed when system date is changed (#1899402)
- core: Detect initial timer state from serialized data (#1899402)
- rc-local: order after network-online.target (#1934028)
- set core ulimit to 0 like on RHEL-7 (#1905582)
- test-mountpointutil-util: do not assert in test_mnt_id() (#1910425)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-49" date="1627041600">- remove a left-over break (#1970860)
- basic/unit-name: do not use strdupa() on a path (#1974700)
- sd-event: change ordering of pending/ratelimited events (#1968528)
- sd-event: drop unnecessary "else" (#1968528)
- sd-event: use CMP() macro (#1968528)
- sd-event: use usec_add() (#1968528)
- sd-event: make event_source_time_prioq_reshuffle() accept all event source type (#1968528)
- sd-event: always reshuffle time prioq on changing online/offline state (#1968528)
- ci: run unit tests on z-stream branches as well (#1970860)
- ci: drop forgotten Travis references (#1934504)
- ci: run unit tests on CentOS 8 Stream as well (#1934504)
- ci: add missing test dependencies (#1934504)
- meson: bump timeout for test-udev to 180s (#1934504)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-50" date="1630065600">- Added option --check-inhibitors for non-tty usage (#1269726)
- logind: Introduce RebootWithFlags and others (#1269726)
- logind: add …WithFlags methods to policy (#1269726)
- logind: simplify flags handling a bit (#1269726)
- Update link to RHEL documentation (#1982584)
- Set default core ulimit to 0, but keep the hard limit ulimited (#1905582)
- shared/seccomp-util: address family filtering is broken on ppc (#1982650)
- logind: rework Seat/Session/User object allocation and freeing a bit (#1642460)
- logind: fix serialization/deserialization of user's "display session" (#1642460)
- logind: turn of stdio locking when writing session files too (#1642460)
- units: set StopWhenUnneeded= for the user slice units too (#1642460)
- units: improve Description= string a bit (#1642460)
- logind: improve logging in manager_connect_console() (#1642460)
- logind: save/restore User object's "stopping" field during restarts (#1642460)
- logind: correct bad clean-up path (#1642460)
- logind: fix bad error propagation (#1642460)
- logind: never elect a session that is stopping as display (#1642460)
- logind: introduce little helper that checks whether a session is ready (#1642460)
- logind: propagate session stop errors (#1642460)
- logind: rework how we manage the slice and user-runtime-dir@.service unit for each user (#1642460)
- logind: optionally, keep the user@.service instance for eached logged in user around for a while (#1642460)
- logind: add a RequiresMountsFor= dependency from the session scope unit to the home directory of the user (#1642460)
- logind: improve error propagation of user_check_linger_file() (#1642460)
- logind: automatically GC lingering users for who now user@.service (nor slice, not runtime dir service) is running anymore (#1642460)
- pam_systemd: simplify code which with we set environment variables (#1642460)
- logind: validate /run/user/1000 before we set it (#1642460)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-51" date="1632398400">- define newly needed constants (#1850986)
- sd-netlink: support IFLA_PROP_LIST and IFLA_ALT_IFNAME attributes (#1850986)
- sd-netlink: introduce sd_netlink_message_read_strv() (#1850986)
- sd-netlink: introduce sd_netlink_message_append_strv() (#1850986)
- test: add a test for sd_netlink_message_{append,read}_strv() (#1850986)
- util: introduce ifname_valid_full() (#1850986)
- rename function (#1850986)
- udev: support AlternativeName= setting in .link file (#1850986)
- network: make Name= in [Match] support alternative names of interfaces (#1850986)
- udev: extend the length of ID_NET_NAME_XXX= to ALTIFNAMSIZ (#1850986)
- udev: do not fail if kernel does not support alternative names (#1850986)
- udev: introduce AlternativeNamesPolicy= setting (#1850986)
- network: set AlternativeNamesPolicy= in 99-default.link (#1850986)
- random-util: call initialize_srand() after fork() (#1850986)
- sd-netlink: introduce rtnl_resolve_link_alternative_names() (#1850986)
- udev: sort alternative names (#1850986)
- netlink: introduce rtnl_get/delete_link_alternative_names() (#1850986)
- netlink: do not fail when new interface name is already used as an alternative name (#1850986)
- udev: do not try to reassign alternative names (#1850986)
- Fix LGTM build (#1850986)
- sd-hwdb: allow empty properties (#1930568)
- Update hwdb (#1930568)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-51.1" date="1638360000">- sd-event: take ref on event loop object before dispatching event sources (#2024903)
- pid1: fix free of uninitialized pointer in unit_fail_if_noncanonical() (#2024903)
- Disable iptables for CI (#2024903)
- test-seccomp: accept ENOSYS from sysctl(2) too (#2024903)
- Disable libpitc to fix CentOS Stream CI (#2024903)
- test: accept that char device 0/0 can now be created witout privileges (#2024903)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-51.2" date="1638532800">- core: return true from cg_is_empty* on ENOENT (#2024903)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-51.3" date="1639137600">- Do not fail if the same alt. name is set again (#2030027)
- meson: avoid bogus meson warning (#2030027)
- meson: do not fail if rsync is not installed with meson 0.57.2 (#2030027)</changelog>
</package>
<package pkgid="e783bdae7d5441a805e0cc71eb95ecdfa1cd19bdecfd6d55a457bb1bd1be5b7a" name="systemd-debuginfo" arch="i686">
  <version epoch="0" ver="239" rel="51.el8_5.5"/>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 239-47" date="1622808000">- systemd-binfmt: Add safeguard in triggers (#1787144)
- spec: Requires(post) openssl-libs to fix missing /etc/machine-id (#1947438)
- spec: Go back to using systemctl preset-all in post (#1783263, #1647172, #1118740)
- spec: Disable libiptc support (#1817265)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-48" date="1624536000">- cgroup: Also set io.bfq.weight (#1927290)
- seccomp: allow turning off of seccomp filtering via env var (#1916835)
- meson: remove strange dep that causes meson to enter infinite loop (#1970860)
- copy: handle copy_file_range() weirdness on procfs/sysfs (#1970860)
- core: Hide "Deactivated successfully" message (#1954802)
- util: rework in_initrd() to make use of path_is_temporary_fs() (#1959339)
- initrd: extend SYSTEMD_IN_INITRD to accept non-ramfs rootfs (#1959339)
- initrd: do a debug log if failed to detect rootfs type (#1959339)
- initrd: do a debug log if /etc/initrd-release doesn't take effect (#1959339)
- units: assign user-runtime-dir@.service to user-%i.slice (#1946453)
- units: order user-runtime-dir@.service after systemd-user-sessions.service (#1946453)
- units: make sure user-runtime-dir@.service is Type=oneshot (#1946453)
- user-runtime-dir: downgrade a few log messages to LOG_DEBUG that we ignore (#1946453)
- shared/install: Preserve escape characters for escaped unit names (#1952686)
- basic/virt: Detect PowerVM hypervisor (#1937989)
- man: document differences in clean exit status for Type=oneshot (#1940078)
- busctl: add a timestamp to the output of the busctl monitor command (#1909214)
- basic/cap-list: parse/print numerical capabilities (#1946943)
- shared/mount-util: convert to libmount (#1885143)
- mount-util: bind_remount: avoid calling statvfs (#1885143)
- mount-util: use UMOUNT_NOFOLLOW in recursive umounter (#1885143)
- test-install-root: create referenced targets (#1835351)
- install: warn if WantedBy targets don't exist (#1835351)
- test-install-root: add test for unknown WantedBy= target (#1835351)
- ceph is a network filesystem (#1952013)
- sysctl: set kernel.core_pipe_limit=16 (#1949729)
- core: don't drop timer expired but not yet processed when system date is changed (#1899402)
- core: Detect initial timer state from serialized data (#1899402)
- rc-local: order after network-online.target (#1934028)
- set core ulimit to 0 like on RHEL-7 (#1905582)
- test-mountpointutil-util: do not assert in test_mnt_id() (#1910425)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-49" date="1627041600">- remove a left-over break (#1970860)
- basic/unit-name: do not use strdupa() on a path (#1974700)
- sd-event: change ordering of pending/ratelimited events (#1968528)
- sd-event: drop unnecessary "else" (#1968528)
- sd-event: use CMP() macro (#1968528)
- sd-event: use usec_add() (#1968528)
- sd-event: make event_source_time_prioq_reshuffle() accept all event source type (#1968528)
- sd-event: always reshuffle time prioq on changing online/offline state (#1968528)
- ci: run unit tests on z-stream branches as well (#1970860)
- ci: drop forgotten Travis references (#1934504)
- ci: run unit tests on CentOS 8 Stream as well (#1934504)
- ci: add missing test dependencies (#1934504)
- meson: bump timeout for test-udev to 180s (#1934504)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-50" date="1630065600">- Added option --check-inhibitors for non-tty usage (#1269726)
- logind: Introduce RebootWithFlags and others (#1269726)
- logind: add …WithFlags methods to policy (#1269726)
- logind: simplify flags handling a bit (#1269726)
- Update link to RHEL documentation (#1982584)
- Set default core ulimit to 0, but keep the hard limit ulimited (#1905582)
- shared/seccomp-util: address family filtering is broken on ppc (#1982650)
- logind: rework Seat/Session/User object allocation and freeing a bit (#1642460)
- logind: fix serialization/deserialization of user's "display session" (#1642460)
- logind: turn of stdio locking when writing session files too (#1642460)
- units: set StopWhenUnneeded= for the user slice units too (#1642460)
- units: improve Description= string a bit (#1642460)
- logind: improve logging in manager_connect_console() (#1642460)
- logind: save/restore User object's "stopping" field during restarts (#1642460)
- logind: correct bad clean-up path (#1642460)
- logind: fix bad error propagation (#1642460)
- logind: never elect a session that is stopping as display (#1642460)
- logind: introduce little helper that checks whether a session is ready (#1642460)
- logind: propagate session stop errors (#1642460)
- logind: rework how we manage the slice and user-runtime-dir@.service unit for each user (#1642460)
- logind: optionally, keep the user@.service instance for eached logged in user around for a while (#1642460)
- logind: add a RequiresMountsFor= dependency from the session scope unit to the home directory of the user (#1642460)
- logind: improve error propagation of user_check_linger_file() (#1642460)
- logind: automatically GC lingering users for who now user@.service (nor slice, not runtime dir service) is running anymore (#1642460)
- pam_systemd: simplify code which with we set environment variables (#1642460)
- logind: validate /run/user/1000 before we set it (#1642460)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-51" date="1632398400">- define newly needed constants (#1850986)
- sd-netlink: support IFLA_PROP_LIST and IFLA_ALT_IFNAME attributes (#1850986)
- sd-netlink: introduce sd_netlink_message_read_strv() (#1850986)
- sd-netlink: introduce sd_netlink_message_append_strv() (#1850986)
- test: add a test for sd_netlink_message_{append,read}_strv() (#1850986)
- util: introduce ifname_valid_full() (#1850986)
- rename function (#1850986)
- udev: support AlternativeName= setting in .link file (#1850986)
- network: make Name= in [Match] support alternative names of interfaces (#1850986)
- udev: extend the length of ID_NET_NAME_XXX= to ALTIFNAMSIZ (#1850986)
- udev: do not fail if kernel does not support alternative names (#1850986)
- udev: introduce AlternativeNamesPolicy= setting (#1850986)
- network: set AlternativeNamesPolicy= in 99-default.link (#1850986)
- random-util: call initialize_srand() after fork() (#1850986)
- sd-netlink: introduce rtnl_resolve_link_alternative_names() (#1850986)
- udev: sort alternative names (#1850986)
- netlink: introduce rtnl_get/delete_link_alternative_names() (#1850986)
- netlink: do not fail when new interface name is already used as an alternative name (#1850986)
- udev: do not try to reassign alternative names (#1850986)
- Fix LGTM build (#1850986)
- sd-hwdb: allow empty properties (#1930568)
- Update hwdb (#1930568)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-51.1" date="1638360000">- sd-event: take ref on event loop object before dispatching event sources (#2024903)
- pid1: fix free of uninitialized pointer in unit_fail_if_noncanonical() (#2024903)
- Disable iptables for CI (#2024903)
- test-seccomp: accept ENOSYS from sysctl(2) too (#2024903)
- Disable libpitc to fix CentOS Stream CI (#2024903)
- test: accept that char device 0/0 can now be created witout privileges (#2024903)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-51.2" date="1638532800">- core: return true from cg_is_empty* on ENOENT (#2024903)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-51.3" date="1639137600">- Do not fail if the same alt. name is set again (#2030027)
- meson: avoid bogus meson warning (#2030027)
- meson: do not fail if rsync is not installed with meson 0.57.2 (#2030027)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-51.4" date="1642075200">- mount: don't propagate errors from mount_setup_unit() further up (#2039327)
- test: make TEST-47 less racy (#2039327)
- macro: define HAS_FEATURE_ADDRESS_SANITIZER also on gcc (#2039327)
- tests: add helper function to autodetect CI environments (#2039327)
- strv: rework FOREACH_STRING() macro (#2039327)
- test,systemctl: use "const char*" instead of "char*" (#2039327)
- ci: pass the $GITHUB_ACTIONS variable to the CentOS container (#2039327)
- core: rename unit_{start_limit|condition|assert}_test() to unit_test_xyz() (#2037395)
- core: Check unit start rate limiting earlier (#2037395)
- sd-event: introduce callback invoked when event source ratelimit expires (#2037395)
- core: rename/generalize UNIT(u)-&gt;test_start_limit() hook (#2037395)
- mount: make mount units start jobs not runnable if /p/s/mountinfo ratelimit is in effect (#2037395)
- mount: retrigger run queue after ratelimit expired to run delayed mount start jobs (#2037395)
- pid1: add a manager_trigger_run_queue() helper (#2037395)
- unit: add jobs that were skipped because of ratelimit back to run_queue (#2037395)
- udev/net_id: introduce naming scheme for RHEL-8.5 (#2040244)
- udev/net_id: remove extraneous bracket (#2040244)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-51.5" date="1643112000">- mount: do not update exec deps on mountinfo changes (#2038878)
- core/mount: add implicit unit dependencies even if when mount unit is generated from /proc/self/mountinfo (#2038878)</changelog>
</package>
<package pkgid="f59200aa3532334cfca02a7d89d556a3842396999e6845ed0463eb603259eda6" name="systemd-debuginfo" arch="x86_64">
  <version epoch="0" ver="239" rel="51.el8_5.5"/>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 239-47" date="1622808000">- systemd-binfmt: Add safeguard in triggers (#1787144)
- spec: Requires(post) openssl-libs to fix missing /etc/machine-id (#1947438)
- spec: Go back to using systemctl preset-all in post (#1783263, #1647172, #1118740)
- spec: Disable libiptc support (#1817265)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-48" date="1624536000">- cgroup: Also set io.bfq.weight (#1927290)
- seccomp: allow turning off of seccomp filtering via env var (#1916835)
- meson: remove strange dep that causes meson to enter infinite loop (#1970860)
- copy: handle copy_file_range() weirdness on procfs/sysfs (#1970860)
- core: Hide "Deactivated successfully" message (#1954802)
- util: rework in_initrd() to make use of path_is_temporary_fs() (#1959339)
- initrd: extend SYSTEMD_IN_INITRD to accept non-ramfs rootfs (#1959339)
- initrd: do a debug log if failed to detect rootfs type (#1959339)
- initrd: do a debug log if /etc/initrd-release doesn't take effect (#1959339)
- units: assign user-runtime-dir@.service to user-%i.slice (#1946453)
- units: order user-runtime-dir@.service after systemd-user-sessions.service (#1946453)
- units: make sure user-runtime-dir@.service is Type=oneshot (#1946453)
- user-runtime-dir: downgrade a few log messages to LOG_DEBUG that we ignore (#1946453)
- shared/install: Preserve escape characters for escaped unit names (#1952686)
- basic/virt: Detect PowerVM hypervisor (#1937989)
- man: document differences in clean exit status for Type=oneshot (#1940078)
- busctl: add a timestamp to the output of the busctl monitor command (#1909214)
- basic/cap-list: parse/print numerical capabilities (#1946943)
- shared/mount-util: convert to libmount (#1885143)
- mount-util: bind_remount: avoid calling statvfs (#1885143)
- mount-util: use UMOUNT_NOFOLLOW in recursive umounter (#1885143)
- test-install-root: create referenced targets (#1835351)
- install: warn if WantedBy targets don't exist (#1835351)
- test-install-root: add test for unknown WantedBy= target (#1835351)
- ceph is a network filesystem (#1952013)
- sysctl: set kernel.core_pipe_limit=16 (#1949729)
- core: don't drop timer expired but not yet processed when system date is changed (#1899402)
- core: Detect initial timer state from serialized data (#1899402)
- rc-local: order after network-online.target (#1934028)
- set core ulimit to 0 like on RHEL-7 (#1905582)
- test-mountpointutil-util: do not assert in test_mnt_id() (#1910425)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-49" date="1627041600">- remove a left-over break (#1970860)
- basic/unit-name: do not use strdupa() on a path (#1974700)
- sd-event: change ordering of pending/ratelimited events (#1968528)
- sd-event: drop unnecessary "else" (#1968528)
- sd-event: use CMP() macro (#1968528)
- sd-event: use usec_add() (#1968528)
- sd-event: make event_source_time_prioq_reshuffle() accept all event source type (#1968528)
- sd-event: always reshuffle time prioq on changing online/offline state (#1968528)
- ci: run unit tests on z-stream branches as well (#1970860)
- ci: drop forgotten Travis references (#1934504)
- ci: run unit tests on CentOS 8 Stream as well (#1934504)
- ci: add missing test dependencies (#1934504)
- meson: bump timeout for test-udev to 180s (#1934504)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-50" date="1630065600">- Added option --check-inhibitors for non-tty usage (#1269726)
- logind: Introduce RebootWithFlags and others (#1269726)
- logind: add …WithFlags methods to policy (#1269726)
- logind: simplify flags handling a bit (#1269726)
- Update link to RHEL documentation (#1982584)
- Set default core ulimit to 0, but keep the hard limit ulimited (#1905582)
- shared/seccomp-util: address family filtering is broken on ppc (#1982650)
- logind: rework Seat/Session/User object allocation and freeing a bit (#1642460)
- logind: fix serialization/deserialization of user's "display session" (#1642460)
- logind: turn of stdio locking when writing session files too (#1642460)
- units: set StopWhenUnneeded= for the user slice units too (#1642460)
- units: improve Description= string a bit (#1642460)
- logind: improve logging in manager_connect_console() (#1642460)
- logind: save/restore User object's "stopping" field during restarts (#1642460)
- logind: correct bad clean-up path (#1642460)
- logind: fix bad error propagation (#1642460)
- logind: never elect a session that is stopping as display (#1642460)
- logind: introduce little helper that checks whether a session is ready (#1642460)
- logind: propagate session stop errors (#1642460)
- logind: rework how we manage the slice and user-runtime-dir@.service unit for each user (#1642460)
- logind: optionally, keep the user@.service instance for eached logged in user around for a while (#1642460)
- logind: add a RequiresMountsFor= dependency from the session scope unit to the home directory of the user (#1642460)
- logind: improve error propagation of user_check_linger_file() (#1642460)
- logind: automatically GC lingering users for who now user@.service (nor slice, not runtime dir service) is running anymore (#1642460)
- pam_systemd: simplify code which with we set environment variables (#1642460)
- logind: validate /run/user/1000 before we set it (#1642460)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-51" date="1632398400">- define newly needed constants (#1850986)
- sd-netlink: support IFLA_PROP_LIST and IFLA_ALT_IFNAME attributes (#1850986)
- sd-netlink: introduce sd_netlink_message_read_strv() (#1850986)
- sd-netlink: introduce sd_netlink_message_append_strv() (#1850986)
- test: add a test for sd_netlink_message_{append,read}_strv() (#1850986)
- util: introduce ifname_valid_full() (#1850986)
- rename function (#1850986)
- udev: support AlternativeName= setting in .link file (#1850986)
- network: make Name= in [Match] support alternative names of interfaces (#1850986)
- udev: extend the length of ID_NET_NAME_XXX= to ALTIFNAMSIZ (#1850986)
- udev: do not fail if kernel does not support alternative names (#1850986)
- udev: introduce AlternativeNamesPolicy= setting (#1850986)
- network: set AlternativeNamesPolicy= in 99-default.link (#1850986)
- random-util: call initialize_srand() after fork() (#1850986)
- sd-netlink: introduce rtnl_resolve_link_alternative_names() (#1850986)
- udev: sort alternative names (#1850986)
- netlink: introduce rtnl_get/delete_link_alternative_names() (#1850986)
- netlink: do not fail when new interface name is already used as an alternative name (#1850986)
- udev: do not try to reassign alternative names (#1850986)
- Fix LGTM build (#1850986)
- sd-hwdb: allow empty properties (#1930568)
- Update hwdb (#1930568)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-51.1" date="1638360000">- sd-event: take ref on event loop object before dispatching event sources (#2024903)
- pid1: fix free of uninitialized pointer in unit_fail_if_noncanonical() (#2024903)
- Disable iptables for CI (#2024903)
- test-seccomp: accept ENOSYS from sysctl(2) too (#2024903)
- Disable libpitc to fix CentOS Stream CI (#2024903)
- test: accept that char device 0/0 can now be created witout privileges (#2024903)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-51.2" date="1638532800">- core: return true from cg_is_empty* on ENOENT (#2024903)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-51.3" date="1639137600">- Do not fail if the same alt. name is set again (#2030027)
- meson: avoid bogus meson warning (#2030027)
- meson: do not fail if rsync is not installed with meson 0.57.2 (#2030027)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-51.4" date="1642075200">- mount: don't propagate errors from mount_setup_unit() further up (#2039327)
- test: make TEST-47 less racy (#2039327)
- macro: define HAS_FEATURE_ADDRESS_SANITIZER also on gcc (#2039327)
- tests: add helper function to autodetect CI environments (#2039327)
- strv: rework FOREACH_STRING() macro (#2039327)
- test,systemctl: use "const char*" instead of "char*" (#2039327)
- ci: pass the $GITHUB_ACTIONS variable to the CentOS container (#2039327)
- core: rename unit_{start_limit|condition|assert}_test() to unit_test_xyz() (#2037395)
- core: Check unit start rate limiting earlier (#2037395)
- sd-event: introduce callback invoked when event source ratelimit expires (#2037395)
- core: rename/generalize UNIT(u)-&gt;test_start_limit() hook (#2037395)
- mount: make mount units start jobs not runnable if /p/s/mountinfo ratelimit is in effect (#2037395)
- mount: retrigger run queue after ratelimit expired to run delayed mount start jobs (#2037395)
- pid1: add a manager_trigger_run_queue() helper (#2037395)
- unit: add jobs that were skipped because of ratelimit back to run_queue (#2037395)
- udev/net_id: introduce naming scheme for RHEL-8.5 (#2040244)
- udev/net_id: remove extraneous bracket (#2040244)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-51.5" date="1643112000">- mount: do not update exec deps on mountinfo changes (#2038878)
- core/mount: add implicit unit dependencies even if when mount unit is generated from /proc/self/mountinfo (#2038878)</changelog>
</package>
<package pkgid="fb76222af4318b10a66b4787bd91f60346dd6d50ea89e942e57aeec44b19ee78" name="systemd-debugsource" arch="i686">
  <version epoch="0" ver="239" rel="51.el8_5.2"/>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-44" date="1611835200">- ci: PowerTools repo was renamed to powertools in RHEL 8.3 (#1871827)
- ci: use quay.io instead of Docker Hub to avoid rate limits (#1871827)
- ci: move jobs from Travis CI to GH Actions (#1871827)
- unit: make UNIT() cast function deal with NULL pointers (#1871827)
- use link to RHEL-8 docs (#1623116)
- cgroup: Also set blkio.bfq.weight (#1657810)
- units: make sure initrd-cleanup.service terminates before switching to rootfs (#1657810)
- core: reload SELinux label cache on daemon-reload (#1888912)
- selinux: introduce mac_selinux_create_file_prepare_at() (#1888912)
- selinux: add trigger for policy reload to refresh internal selabel cache (#1888912)
- udev/net_id: give RHEL-8.4 naming scheme a name (#1827462)
- basic/stat-util: make mtime check stricter and use entire timestamp (#1642728)
- udev: make algorithm that selects highest priority devlink less susceptible to race conditions (#1642728)
- test: create /dev/null in test-udev.pl (#1642728)
- test: missing "die" (#1642728)
- udev-test: remove a check for whether the test is run in a container (#1642728)
- udev-test: skip the test only if it can't setup its environment (#1642728)
- udev-test: fix test skip condition (#1642728)
- udev-test: fix missing directory test/run (#1642728)
- udev-test: check if permitted to create block device nodes (#1642728)
- test-udev: add a testcase of too long line (#1642728)
- test-udev: use proper semantics for too long line with continuation (#1642728)
- test-udev: add more tests for line continuations and comments (#1642728)
- test-udev: add more tests for line continuation (#1642728)
- test-udev: fix alignment and drop unnecessary white spaces (#1642728)
- test/udev-test.pl: cleanup if skipping test (#1642728)
- test: add test cases for empty string match (#1642728)
- test: add test case for multi matches when use "||" (#1642728)
- udev-test: do not rely on "mail" group being defined (#1642728)
- test/udev-test.pl: allow multiple devices per test (#1642728)
- test/udev-test.pl: create rules only once (#1642728)
- test/udev-test.pl: allow concurrent additions and removals (#1642728)
- test/udev-test.pl: use computed devnode name (#1642728)
- test/udev-test.pl: test correctness of symlink targets (#1642728)
- test/udev-test.pl: allow checking multiple symlinks (#1642728)
- test/udev-test.pl: fix wrong test descriptions (#1642728)
- test/udev-test.pl: last_rule is unsupported (#1642728)
- test/udev-test.pl: Make some tests a little harder (#1642728)
- test/udev-test.pl: remove bogus rules from magic subsys test (#1642728)
- test/udev-test.pl: merge "space and var with space" tests (#1642728)
- test/udev-test.pl: merge import parent tests into one (#1642728)
- test/udev-test.pl: count "good" results (#1642728)
- tests/udev-test.pl: add multiple device test (#1642728)
- test/udev-test.pl: add repeat count (#1642728)
- test/udev-test.pl: generator for large list of block devices (#1642728)
- test/udev-test.pl: suppress umount error message at startup (#1642728)
- test/udev_test.pl: add "expected good" count (#1642728)
- test/udev-test: gracefully exit when imports fail (#1642728)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-45" date="1615464000">- Revert "test: add test cases for empty string match" and "test: add test case for multi matches when use ||" (#1935124)
- test/sys-script.py: add missing DEVNAME entries to uevents (#1935124)
- sd-event: split out helper functions for reshuffling prioqs (#1937315)
- sd-event: split out enable and disable codepaths from sd_event_source_set_enabled() (#1937315)
- sd-event: mention that two debug logged events are ignored (#1937315)
- sd-event: split clock data allocation out of sd_event_add_time() (#1937315)
- sd-event: split out code to add/remove timer event sources to earliest/latest prioq (#1937315)
- sd-event: fix delays assert brain-o (#17790) (#1937315)
- sd-event: let's suffix last_run/last_log with "_usec" (#1937315)
- sd-event: refuse running default event loops in any other thread than the one they are default for (#1937315)
- sd-event: ref event loop while in sd_event_prepare() ot sd_event_run() (#1937315)
- sd-event: follow coding style with naming return parameter (#1937315)
- sd-event: remove earliest_index/latest_index into common part of event source objects (#1937315)
- sd-event: update state at the end in event_source_enable (#1937315)
- sd-event: increase n_enabled_child_sources just once (#1937315)
- sd-event: add ability to ratelimit event sources (#1937315)
- test: add ratelimiting test (#1937315)
- core: prevent excessive /proc/self/mountinfo parsing (#1937315)
- udev: run link_update() with increased retry count in second invocation (#1935124)
- pam-systemd: use secure_getenv() rather than getenv() (#1936866)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-46" date="1621425600">- Revert "udev: run link_update() with increased retry count in second invocation" (#1942299)
- Revert "udev: make algorithm that selects highest priority devlink less susceptible to race conditions" (#1942299)
- test/udev-test.pl: drop test cases that add mutliple devices (#1942299)</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 239-47" date="1622808000">- systemd-binfmt: Add safeguard in triggers (#1787144)
- spec: Requires(post) openssl-libs to fix missing /etc/machine-id (#1947438)
- spec: Go back to using systemctl preset-all in post (#1783263, #1647172, #1118740)
- spec: Disable libiptc support (#1817265)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-48" date="1624536000">- cgroup: Also set io.bfq.weight (#1927290)
- seccomp: allow turning off of seccomp filtering via env var (#1916835)
- meson: remove strange dep that causes meson to enter infinite loop (#1970860)
- copy: handle copy_file_range() weirdness on procfs/sysfs (#1970860)
- core: Hide "Deactivated successfully" message (#1954802)
- util: rework in_initrd() to make use of path_is_temporary_fs() (#1959339)
- initrd: extend SYSTEMD_IN_INITRD to accept non-ramfs rootfs (#1959339)
- initrd: do a debug log if failed to detect rootfs type (#1959339)
- initrd: do a debug log if /etc/initrd-release doesn't take effect (#1959339)
- units: assign user-runtime-dir@.service to user-%i.slice (#1946453)
- units: order user-runtime-dir@.service after systemd-user-sessions.service (#1946453)
- units: make sure user-runtime-dir@.service is Type=oneshot (#1946453)
- user-runtime-dir: downgrade a few log messages to LOG_DEBUG that we ignore (#1946453)
- shared/install: Preserve escape characters for escaped unit names (#1952686)
- basic/virt: Detect PowerVM hypervisor (#1937989)
- man: document differences in clean exit status for Type=oneshot (#1940078)
- busctl: add a timestamp to the output of the busctl monitor command (#1909214)
- basic/cap-list: parse/print numerical capabilities (#1946943)
- shared/mount-util: convert to libmount (#1885143)
- mount-util: bind_remount: avoid calling statvfs (#1885143)
- mount-util: use UMOUNT_NOFOLLOW in recursive umounter (#1885143)
- test-install-root: create referenced targets (#1835351)
- install: warn if WantedBy targets don't exist (#1835351)
- test-install-root: add test for unknown WantedBy= target (#1835351)
- ceph is a network filesystem (#1952013)
- sysctl: set kernel.core_pipe_limit=16 (#1949729)
- core: don't drop timer expired but not yet processed when system date is changed (#1899402)
- core: Detect initial timer state from serialized data (#1899402)
- rc-local: order after network-online.target (#1934028)
- set core ulimit to 0 like on RHEL-7 (#1905582)
- test-mountpointutil-util: do not assert in test_mnt_id() (#1910425)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-49" date="1627041600">- remove a left-over break (#1970860)
- basic/unit-name: do not use strdupa() on a path (#1974700)
- sd-event: change ordering of pending/ratelimited events (#1968528)
- sd-event: drop unnecessary "else" (#1968528)
- sd-event: use CMP() macro (#1968528)
- sd-event: use usec_add() (#1968528)
- sd-event: make event_source_time_prioq_reshuffle() accept all event source type (#1968528)
- sd-event: always reshuffle time prioq on changing online/offline state (#1968528)
- ci: run unit tests on z-stream branches as well (#1970860)
- ci: drop forgotten Travis references (#1934504)
- ci: run unit tests on CentOS 8 Stream as well (#1934504)
- ci: add missing test dependencies (#1934504)
- meson: bump timeout for test-udev to 180s (#1934504)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-50" date="1630065600">- Added option --check-inhibitors for non-tty usage (#1269726)
- logind: Introduce RebootWithFlags and others (#1269726)
- logind: add …WithFlags methods to policy (#1269726)
- logind: simplify flags handling a bit (#1269726)
- Update link to RHEL documentation (#1982584)
- Set default core ulimit to 0, but keep the hard limit ulimited (#1905582)
- shared/seccomp-util: address family filtering is broken on ppc (#1982650)
- logind: rework Seat/Session/User object allocation and freeing a bit (#1642460)
- logind: fix serialization/deserialization of user's "display session" (#1642460)
- logind: turn of stdio locking when writing session files too (#1642460)
- units: set StopWhenUnneeded= for the user slice units too (#1642460)
- units: improve Description= string a bit (#1642460)
- logind: improve logging in manager_connect_console() (#1642460)
- logind: save/restore User object's "stopping" field during restarts (#1642460)
- logind: correct bad clean-up path (#1642460)
- logind: fix bad error propagation (#1642460)
- logind: never elect a session that is stopping as display (#1642460)
- logind: introduce little helper that checks whether a session is ready (#1642460)
- logind: propagate session stop errors (#1642460)
- logind: rework how we manage the slice and user-runtime-dir@.service unit for each user (#1642460)
- logind: optionally, keep the user@.service instance for eached logged in user around for a while (#1642460)
- logind: add a RequiresMountsFor= dependency from the session scope unit to the home directory of the user (#1642460)
- logind: improve error propagation of user_check_linger_file() (#1642460)
- logind: automatically GC lingering users for who now user@.service (nor slice, not runtime dir service) is running anymore (#1642460)
- pam_systemd: simplify code which with we set environment variables (#1642460)
- logind: validate /run/user/1000 before we set it (#1642460)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-51" date="1632398400">- define newly needed constants (#1850986)
- sd-netlink: support IFLA_PROP_LIST and IFLA_ALT_IFNAME attributes (#1850986)
- sd-netlink: introduce sd_netlink_message_read_strv() (#1850986)
- sd-netlink: introduce sd_netlink_message_append_strv() (#1850986)
- test: add a test for sd_netlink_message_{append,read}_strv() (#1850986)
- util: introduce ifname_valid_full() (#1850986)
- rename function (#1850986)
- udev: support AlternativeName= setting in .link file (#1850986)
- network: make Name= in [Match] support alternative names of interfaces (#1850986)
- udev: extend the length of ID_NET_NAME_XXX= to ALTIFNAMSIZ (#1850986)
- udev: do not fail if kernel does not support alternative names (#1850986)
- udev: introduce AlternativeNamesPolicy= setting (#1850986)
- network: set AlternativeNamesPolicy= in 99-default.link (#1850986)
- random-util: call initialize_srand() after fork() (#1850986)
- sd-netlink: introduce rtnl_resolve_link_alternative_names() (#1850986)
- udev: sort alternative names (#1850986)
- netlink: introduce rtnl_get/delete_link_alternative_names() (#1850986)
- netlink: do not fail when new interface name is already used as an alternative name (#1850986)
- udev: do not try to reassign alternative names (#1850986)
- Fix LGTM build (#1850986)
- sd-hwdb: allow empty properties (#1930568)
- Update hwdb (#1930568)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-51.1" date="1638360000">- sd-event: take ref on event loop object before dispatching event sources (#2024903)
- pid1: fix free of uninitialized pointer in unit_fail_if_noncanonical() (#2024903)
- Disable iptables for CI (#2024903)
- test-seccomp: accept ENOSYS from sysctl(2) too (#2024903)
- Disable libpitc to fix CentOS Stream CI (#2024903)
- test: accept that char device 0/0 can now be created witout privileges (#2024903)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-51.2" date="1638532800">- core: return true from cg_is_empty* on ENOENT (#2024903)</changelog>
</package>
<package pkgid="4232c329aa917e12517af2f93d0a85a5d8ed0b0fc0304d42fdedd1f017a25d60" name="systemd-debugsource" arch="x86_64">
  <version epoch="0" ver="239" rel="51.el8_5.2"/>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-44" date="1611835200">- ci: PowerTools repo was renamed to powertools in RHEL 8.3 (#1871827)
- ci: use quay.io instead of Docker Hub to avoid rate limits (#1871827)
- ci: move jobs from Travis CI to GH Actions (#1871827)
- unit: make UNIT() cast function deal with NULL pointers (#1871827)
- use link to RHEL-8 docs (#1623116)
- cgroup: Also set blkio.bfq.weight (#1657810)
- units: make sure initrd-cleanup.service terminates before switching to rootfs (#1657810)
- core: reload SELinux label cache on daemon-reload (#1888912)
- selinux: introduce mac_selinux_create_file_prepare_at() (#1888912)
- selinux: add trigger for policy reload to refresh internal selabel cache (#1888912)
- udev/net_id: give RHEL-8.4 naming scheme a name (#1827462)
- basic/stat-util: make mtime check stricter and use entire timestamp (#1642728)
- udev: make algorithm that selects highest priority devlink less susceptible to race conditions (#1642728)
- test: create /dev/null in test-udev.pl (#1642728)
- test: missing "die" (#1642728)
- udev-test: remove a check for whether the test is run in a container (#1642728)
- udev-test: skip the test only if it can't setup its environment (#1642728)
- udev-test: fix test skip condition (#1642728)
- udev-test: fix missing directory test/run (#1642728)
- udev-test: check if permitted to create block device nodes (#1642728)
- test-udev: add a testcase of too long line (#1642728)
- test-udev: use proper semantics for too long line with continuation (#1642728)
- test-udev: add more tests for line continuations and comments (#1642728)
- test-udev: add more tests for line continuation (#1642728)
- test-udev: fix alignment and drop unnecessary white spaces (#1642728)
- test/udev-test.pl: cleanup if skipping test (#1642728)
- test: add test cases for empty string match (#1642728)
- test: add test case for multi matches when use "||" (#1642728)
- udev-test: do not rely on "mail" group being defined (#1642728)
- test/udev-test.pl: allow multiple devices per test (#1642728)
- test/udev-test.pl: create rules only once (#1642728)
- test/udev-test.pl: allow concurrent additions and removals (#1642728)
- test/udev-test.pl: use computed devnode name (#1642728)
- test/udev-test.pl: test correctness of symlink targets (#1642728)
- test/udev-test.pl: allow checking multiple symlinks (#1642728)
- test/udev-test.pl: fix wrong test descriptions (#1642728)
- test/udev-test.pl: last_rule is unsupported (#1642728)
- test/udev-test.pl: Make some tests a little harder (#1642728)
- test/udev-test.pl: remove bogus rules from magic subsys test (#1642728)
- test/udev-test.pl: merge "space and var with space" tests (#1642728)
- test/udev-test.pl: merge import parent tests into one (#1642728)
- test/udev-test.pl: count "good" results (#1642728)
- tests/udev-test.pl: add multiple device test (#1642728)
- test/udev-test.pl: add repeat count (#1642728)
- test/udev-test.pl: generator for large list of block devices (#1642728)
- test/udev-test.pl: suppress umount error message at startup (#1642728)
- test/udev_test.pl: add "expected good" count (#1642728)
- test/udev-test: gracefully exit when imports fail (#1642728)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-45" date="1615464000">- Revert "test: add test cases for empty string match" and "test: add test case for multi matches when use ||" (#1935124)
- test/sys-script.py: add missing DEVNAME entries to uevents (#1935124)
- sd-event: split out helper functions for reshuffling prioqs (#1937315)
- sd-event: split out enable and disable codepaths from sd_event_source_set_enabled() (#1937315)
- sd-event: mention that two debug logged events are ignored (#1937315)
- sd-event: split clock data allocation out of sd_event_add_time() (#1937315)
- sd-event: split out code to add/remove timer event sources to earliest/latest prioq (#1937315)
- sd-event: fix delays assert brain-o (#17790) (#1937315)
- sd-event: let's suffix last_run/last_log with "_usec" (#1937315)
- sd-event: refuse running default event loops in any other thread than the one they are default for (#1937315)
- sd-event: ref event loop while in sd_event_prepare() ot sd_event_run() (#1937315)
- sd-event: follow coding style with naming return parameter (#1937315)
- sd-event: remove earliest_index/latest_index into common part of event source objects (#1937315)
- sd-event: update state at the end in event_source_enable (#1937315)
- sd-event: increase n_enabled_child_sources just once (#1937315)
- sd-event: add ability to ratelimit event sources (#1937315)
- test: add ratelimiting test (#1937315)
- core: prevent excessive /proc/self/mountinfo parsing (#1937315)
- udev: run link_update() with increased retry count in second invocation (#1935124)
- pam-systemd: use secure_getenv() rather than getenv() (#1936866)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-46" date="1621425600">- Revert "udev: run link_update() with increased retry count in second invocation" (#1942299)
- Revert "udev: make algorithm that selects highest priority devlink less susceptible to race conditions" (#1942299)
- test/udev-test.pl: drop test cases that add mutliple devices (#1942299)</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 239-47" date="1622808000">- systemd-binfmt: Add safeguard in triggers (#1787144)
- spec: Requires(post) openssl-libs to fix missing /etc/machine-id (#1947438)
- spec: Go back to using systemctl preset-all in post (#1783263, #1647172, #1118740)
- spec: Disable libiptc support (#1817265)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-48" date="1624536000">- cgroup: Also set io.bfq.weight (#1927290)
- seccomp: allow turning off of seccomp filtering via env var (#1916835)
- meson: remove strange dep that causes meson to enter infinite loop (#1970860)
- copy: handle copy_file_range() weirdness on procfs/sysfs (#1970860)
- core: Hide "Deactivated successfully" message (#1954802)
- util: rework in_initrd() to make use of path_is_temporary_fs() (#1959339)
- initrd: extend SYSTEMD_IN_INITRD to accept non-ramfs rootfs (#1959339)
- initrd: do a debug log if failed to detect rootfs type (#1959339)
- initrd: do a debug log if /etc/initrd-release doesn't take effect (#1959339)
- units: assign user-runtime-dir@.service to user-%i.slice (#1946453)
- units: order user-runtime-dir@.service after systemd-user-sessions.service (#1946453)
- units: make sure user-runtime-dir@.service is Type=oneshot (#1946453)
- user-runtime-dir: downgrade a few log messages to LOG_DEBUG that we ignore (#1946453)
- shared/install: Preserve escape characters for escaped unit names (#1952686)
- basic/virt: Detect PowerVM hypervisor (#1937989)
- man: document differences in clean exit status for Type=oneshot (#1940078)
- busctl: add a timestamp to the output of the busctl monitor command (#1909214)
- basic/cap-list: parse/print numerical capabilities (#1946943)
- shared/mount-util: convert to libmount (#1885143)
- mount-util: bind_remount: avoid calling statvfs (#1885143)
- mount-util: use UMOUNT_NOFOLLOW in recursive umounter (#1885143)
- test-install-root: create referenced targets (#1835351)
- install: warn if WantedBy targets don't exist (#1835351)
- test-install-root: add test for unknown WantedBy= target (#1835351)
- ceph is a network filesystem (#1952013)
- sysctl: set kernel.core_pipe_limit=16 (#1949729)
- core: don't drop timer expired but not yet processed when system date is changed (#1899402)
- core: Detect initial timer state from serialized data (#1899402)
- rc-local: order after network-online.target (#1934028)
- set core ulimit to 0 like on RHEL-7 (#1905582)
- test-mountpointutil-util: do not assert in test_mnt_id() (#1910425)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-49" date="1627041600">- remove a left-over break (#1970860)
- basic/unit-name: do not use strdupa() on a path (#1974700)
- sd-event: change ordering of pending/ratelimited events (#1968528)
- sd-event: drop unnecessary "else" (#1968528)
- sd-event: use CMP() macro (#1968528)
- sd-event: use usec_add() (#1968528)
- sd-event: make event_source_time_prioq_reshuffle() accept all event source type (#1968528)
- sd-event: always reshuffle time prioq on changing online/offline state (#1968528)
- ci: run unit tests on z-stream branches as well (#1970860)
- ci: drop forgotten Travis references (#1934504)
- ci: run unit tests on CentOS 8 Stream as well (#1934504)
- ci: add missing test dependencies (#1934504)
- meson: bump timeout for test-udev to 180s (#1934504)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-50" date="1630065600">- Added option --check-inhibitors for non-tty usage (#1269726)
- logind: Introduce RebootWithFlags and others (#1269726)
- logind: add …WithFlags methods to policy (#1269726)
- logind: simplify flags handling a bit (#1269726)
- Update link to RHEL documentation (#1982584)
- Set default core ulimit to 0, but keep the hard limit ulimited (#1905582)
- shared/seccomp-util: address family filtering is broken on ppc (#1982650)
- logind: rework Seat/Session/User object allocation and freeing a bit (#1642460)
- logind: fix serialization/deserialization of user's "display session" (#1642460)
- logind: turn of stdio locking when writing session files too (#1642460)
- units: set StopWhenUnneeded= for the user slice units too (#1642460)
- units: improve Description= string a bit (#1642460)
- logind: improve logging in manager_connect_console() (#1642460)
- logind: save/restore User object's "stopping" field during restarts (#1642460)
- logind: correct bad clean-up path (#1642460)
- logind: fix bad error propagation (#1642460)
- logind: never elect a session that is stopping as display (#1642460)
- logind: introduce little helper that checks whether a session is ready (#1642460)
- logind: propagate session stop errors (#1642460)
- logind: rework how we manage the slice and user-runtime-dir@.service unit for each user (#1642460)
- logind: optionally, keep the user@.service instance for eached logged in user around for a while (#1642460)
- logind: add a RequiresMountsFor= dependency from the session scope unit to the home directory of the user (#1642460)
- logind: improve error propagation of user_check_linger_file() (#1642460)
- logind: automatically GC lingering users for who now user@.service (nor slice, not runtime dir service) is running anymore (#1642460)
- pam_systemd: simplify code which with we set environment variables (#1642460)
- logind: validate /run/user/1000 before we set it (#1642460)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-51" date="1632398400">- define newly needed constants (#1850986)
- sd-netlink: support IFLA_PROP_LIST and IFLA_ALT_IFNAME attributes (#1850986)
- sd-netlink: introduce sd_netlink_message_read_strv() (#1850986)
- sd-netlink: introduce sd_netlink_message_append_strv() (#1850986)
- test: add a test for sd_netlink_message_{append,read}_strv() (#1850986)
- util: introduce ifname_valid_full() (#1850986)
- rename function (#1850986)
- udev: support AlternativeName= setting in .link file (#1850986)
- network: make Name= in [Match] support alternative names of interfaces (#1850986)
- udev: extend the length of ID_NET_NAME_XXX= to ALTIFNAMSIZ (#1850986)
- udev: do not fail if kernel does not support alternative names (#1850986)
- udev: introduce AlternativeNamesPolicy= setting (#1850986)
- network: set AlternativeNamesPolicy= in 99-default.link (#1850986)
- random-util: call initialize_srand() after fork() (#1850986)
- sd-netlink: introduce rtnl_resolve_link_alternative_names() (#1850986)
- udev: sort alternative names (#1850986)
- netlink: introduce rtnl_get/delete_link_alternative_names() (#1850986)
- netlink: do not fail when new interface name is already used as an alternative name (#1850986)
- udev: do not try to reassign alternative names (#1850986)
- Fix LGTM build (#1850986)
- sd-hwdb: allow empty properties (#1930568)
- Update hwdb (#1930568)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-51.1" date="1638360000">- sd-event: take ref on event loop object before dispatching event sources (#2024903)
- pid1: fix free of uninitialized pointer in unit_fail_if_noncanonical() (#2024903)
- Disable iptables for CI (#2024903)
- test-seccomp: accept ENOSYS from sysctl(2) too (#2024903)
- Disable libpitc to fix CentOS Stream CI (#2024903)
- test: accept that char device 0/0 can now be created witout privileges (#2024903)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-51.2" date="1638532800">- core: return true from cg_is_empty* on ENOENT (#2024903)</changelog>
</package>
<package pkgid="25fd4cf45d7f5cbd49ab095ea3c9a4c7fc3b74260ab606e0ce7bf6626f5de0f3" name="systemd-debugsource" arch="i686">
  <version epoch="0" ver="239" rel="51.el8_5.3"/>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-45" date="1615464000">- Revert "test: add test cases for empty string match" and "test: add test case for multi matches when use ||" (#1935124)
- test/sys-script.py: add missing DEVNAME entries to uevents (#1935124)
- sd-event: split out helper functions for reshuffling prioqs (#1937315)
- sd-event: split out enable and disable codepaths from sd_event_source_set_enabled() (#1937315)
- sd-event: mention that two debug logged events are ignored (#1937315)
- sd-event: split clock data allocation out of sd_event_add_time() (#1937315)
- sd-event: split out code to add/remove timer event sources to earliest/latest prioq (#1937315)
- sd-event: fix delays assert brain-o (#17790) (#1937315)
- sd-event: let's suffix last_run/last_log with "_usec" (#1937315)
- sd-event: refuse running default event loops in any other thread than the one they are default for (#1937315)
- sd-event: ref event loop while in sd_event_prepare() ot sd_event_run() (#1937315)
- sd-event: follow coding style with naming return parameter (#1937315)
- sd-event: remove earliest_index/latest_index into common part of event source objects (#1937315)
- sd-event: update state at the end in event_source_enable (#1937315)
- sd-event: increase n_enabled_child_sources just once (#1937315)
- sd-event: add ability to ratelimit event sources (#1937315)
- test: add ratelimiting test (#1937315)
- core: prevent excessive /proc/self/mountinfo parsing (#1937315)
- udev: run link_update() with increased retry count in second invocation (#1935124)
- pam-systemd: use secure_getenv() rather than getenv() (#1936866)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-46" date="1621425600">- Revert "udev: run link_update() with increased retry count in second invocation" (#1942299)
- Revert "udev: make algorithm that selects highest priority devlink less susceptible to race conditions" (#1942299)
- test/udev-test.pl: drop test cases that add mutliple devices (#1942299)</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 239-47" date="1622808000">- systemd-binfmt: Add safeguard in triggers (#1787144)
- spec: Requires(post) openssl-libs to fix missing /etc/machine-id (#1947438)
- spec: Go back to using systemctl preset-all in post (#1783263, #1647172, #1118740)
- spec: Disable libiptc support (#1817265)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-48" date="1624536000">- cgroup: Also set io.bfq.weight (#1927290)
- seccomp: allow turning off of seccomp filtering via env var (#1916835)
- meson: remove strange dep that causes meson to enter infinite loop (#1970860)
- copy: handle copy_file_range() weirdness on procfs/sysfs (#1970860)
- core: Hide "Deactivated successfully" message (#1954802)
- util: rework in_initrd() to make use of path_is_temporary_fs() (#1959339)
- initrd: extend SYSTEMD_IN_INITRD to accept non-ramfs rootfs (#1959339)
- initrd: do a debug log if failed to detect rootfs type (#1959339)
- initrd: do a debug log if /etc/initrd-release doesn't take effect (#1959339)
- units: assign user-runtime-dir@.service to user-%i.slice (#1946453)
- units: order user-runtime-dir@.service after systemd-user-sessions.service (#1946453)
- units: make sure user-runtime-dir@.service is Type=oneshot (#1946453)
- user-runtime-dir: downgrade a few log messages to LOG_DEBUG that we ignore (#1946453)
- shared/install: Preserve escape characters for escaped unit names (#1952686)
- basic/virt: Detect PowerVM hypervisor (#1937989)
- man: document differences in clean exit status for Type=oneshot (#1940078)
- busctl: add a timestamp to the output of the busctl monitor command (#1909214)
- basic/cap-list: parse/print numerical capabilities (#1946943)
- shared/mount-util: convert to libmount (#1885143)
- mount-util: bind_remount: avoid calling statvfs (#1885143)
- mount-util: use UMOUNT_NOFOLLOW in recursive umounter (#1885143)
- test-install-root: create referenced targets (#1835351)
- install: warn if WantedBy targets don't exist (#1835351)
- test-install-root: add test for unknown WantedBy= target (#1835351)
- ceph is a network filesystem (#1952013)
- sysctl: set kernel.core_pipe_limit=16 (#1949729)
- core: don't drop timer expired but not yet processed when system date is changed (#1899402)
- core: Detect initial timer state from serialized data (#1899402)
- rc-local: order after network-online.target (#1934028)
- set core ulimit to 0 like on RHEL-7 (#1905582)
- test-mountpointutil-util: do not assert in test_mnt_id() (#1910425)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-49" date="1627041600">- remove a left-over break (#1970860)
- basic/unit-name: do not use strdupa() on a path (#1974700)
- sd-event: change ordering of pending/ratelimited events (#1968528)
- sd-event: drop unnecessary "else" (#1968528)
- sd-event: use CMP() macro (#1968528)
- sd-event: use usec_add() (#1968528)
- sd-event: make event_source_time_prioq_reshuffle() accept all event source type (#1968528)
- sd-event: always reshuffle time prioq on changing online/offline state (#1968528)
- ci: run unit tests on z-stream branches as well (#1970860)
- ci: drop forgotten Travis references (#1934504)
- ci: run unit tests on CentOS 8 Stream as well (#1934504)
- ci: add missing test dependencies (#1934504)
- meson: bump timeout for test-udev to 180s (#1934504)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-50" date="1630065600">- Added option --check-inhibitors for non-tty usage (#1269726)
- logind: Introduce RebootWithFlags and others (#1269726)
- logind: add …WithFlags methods to policy (#1269726)
- logind: simplify flags handling a bit (#1269726)
- Update link to RHEL documentation (#1982584)
- Set default core ulimit to 0, but keep the hard limit ulimited (#1905582)
- shared/seccomp-util: address family filtering is broken on ppc (#1982650)
- logind: rework Seat/Session/User object allocation and freeing a bit (#1642460)
- logind: fix serialization/deserialization of user's "display session" (#1642460)
- logind: turn of stdio locking when writing session files too (#1642460)
- units: set StopWhenUnneeded= for the user slice units too (#1642460)
- units: improve Description= string a bit (#1642460)
- logind: improve logging in manager_connect_console() (#1642460)
- logind: save/restore User object's "stopping" field during restarts (#1642460)
- logind: correct bad clean-up path (#1642460)
- logind: fix bad error propagation (#1642460)
- logind: never elect a session that is stopping as display (#1642460)
- logind: introduce little helper that checks whether a session is ready (#1642460)
- logind: propagate session stop errors (#1642460)
- logind: rework how we manage the slice and user-runtime-dir@.service unit for each user (#1642460)
- logind: optionally, keep the user@.service instance for eached logged in user around for a while (#1642460)
- logind: add a RequiresMountsFor= dependency from the session scope unit to the home directory of the user (#1642460)
- logind: improve error propagation of user_check_linger_file() (#1642460)
- logind: automatically GC lingering users for who now user@.service (nor slice, not runtime dir service) is running anymore (#1642460)
- pam_systemd: simplify code which with we set environment variables (#1642460)
- logind: validate /run/user/1000 before we set it (#1642460)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-51" date="1632398400">- define newly needed constants (#1850986)
- sd-netlink: support IFLA_PROP_LIST and IFLA_ALT_IFNAME attributes (#1850986)
- sd-netlink: introduce sd_netlink_message_read_strv() (#1850986)
- sd-netlink: introduce sd_netlink_message_append_strv() (#1850986)
- test: add a test for sd_netlink_message_{append,read}_strv() (#1850986)
- util: introduce ifname_valid_full() (#1850986)
- rename function (#1850986)
- udev: support AlternativeName= setting in .link file (#1850986)
- network: make Name= in [Match] support alternative names of interfaces (#1850986)
- udev: extend the length of ID_NET_NAME_XXX= to ALTIFNAMSIZ (#1850986)
- udev: do not fail if kernel does not support alternative names (#1850986)
- udev: introduce AlternativeNamesPolicy= setting (#1850986)
- network: set AlternativeNamesPolicy= in 99-default.link (#1850986)
- random-util: call initialize_srand() after fork() (#1850986)
- sd-netlink: introduce rtnl_resolve_link_alternative_names() (#1850986)
- udev: sort alternative names (#1850986)
- netlink: introduce rtnl_get/delete_link_alternative_names() (#1850986)
- netlink: do not fail when new interface name is already used as an alternative name (#1850986)
- udev: do not try to reassign alternative names (#1850986)
- Fix LGTM build (#1850986)
- sd-hwdb: allow empty properties (#1930568)
- Update hwdb (#1930568)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-51.1" date="1638360000">- sd-event: take ref on event loop object before dispatching event sources (#2024903)
- pid1: fix free of uninitialized pointer in unit_fail_if_noncanonical() (#2024903)
- Disable iptables for CI (#2024903)
- test-seccomp: accept ENOSYS from sysctl(2) too (#2024903)
- Disable libpitc to fix CentOS Stream CI (#2024903)
- test: accept that char device 0/0 can now be created witout privileges (#2024903)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-51.2" date="1638532800">- core: return true from cg_is_empty* on ENOENT (#2024903)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-51.3" date="1639137600">- Do not fail if the same alt. name is set again (#2030027)
- meson: avoid bogus meson warning (#2030027)
- meson: do not fail if rsync is not installed with meson 0.57.2 (#2030027)</changelog>
</package>
<package pkgid="2443795d76486eeb948926ff84fda2a225e82755ec04b0f789d1767555fa4444" name="systemd-debugsource" arch="x86_64">
  <version epoch="0" ver="239" rel="51.el8_5.3"/>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-45" date="1615464000">- Revert "test: add test cases for empty string match" and "test: add test case for multi matches when use ||" (#1935124)
- test/sys-script.py: add missing DEVNAME entries to uevents (#1935124)
- sd-event: split out helper functions for reshuffling prioqs (#1937315)
- sd-event: split out enable and disable codepaths from sd_event_source_set_enabled() (#1937315)
- sd-event: mention that two debug logged events are ignored (#1937315)
- sd-event: split clock data allocation out of sd_event_add_time() (#1937315)
- sd-event: split out code to add/remove timer event sources to earliest/latest prioq (#1937315)
- sd-event: fix delays assert brain-o (#17790) (#1937315)
- sd-event: let's suffix last_run/last_log with "_usec" (#1937315)
- sd-event: refuse running default event loops in any other thread than the one they are default for (#1937315)
- sd-event: ref event loop while in sd_event_prepare() ot sd_event_run() (#1937315)
- sd-event: follow coding style with naming return parameter (#1937315)
- sd-event: remove earliest_index/latest_index into common part of event source objects (#1937315)
- sd-event: update state at the end in event_source_enable (#1937315)
- sd-event: increase n_enabled_child_sources just once (#1937315)
- sd-event: add ability to ratelimit event sources (#1937315)
- test: add ratelimiting test (#1937315)
- core: prevent excessive /proc/self/mountinfo parsing (#1937315)
- udev: run link_update() with increased retry count in second invocation (#1935124)
- pam-systemd: use secure_getenv() rather than getenv() (#1936866)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-46" date="1621425600">- Revert "udev: run link_update() with increased retry count in second invocation" (#1942299)
- Revert "udev: make algorithm that selects highest priority devlink less susceptible to race conditions" (#1942299)
- test/udev-test.pl: drop test cases that add mutliple devices (#1942299)</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 239-47" date="1622808000">- systemd-binfmt: Add safeguard in triggers (#1787144)
- spec: Requires(post) openssl-libs to fix missing /etc/machine-id (#1947438)
- spec: Go back to using systemctl preset-all in post (#1783263, #1647172, #1118740)
- spec: Disable libiptc support (#1817265)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-48" date="1624536000">- cgroup: Also set io.bfq.weight (#1927290)
- seccomp: allow turning off of seccomp filtering via env var (#1916835)
- meson: remove strange dep that causes meson to enter infinite loop (#1970860)
- copy: handle copy_file_range() weirdness on procfs/sysfs (#1970860)
- core: Hide "Deactivated successfully" message (#1954802)
- util: rework in_initrd() to make use of path_is_temporary_fs() (#1959339)
- initrd: extend SYSTEMD_IN_INITRD to accept non-ramfs rootfs (#1959339)
- initrd: do a debug log if failed to detect rootfs type (#1959339)
- initrd: do a debug log if /etc/initrd-release doesn't take effect (#1959339)
- units: assign user-runtime-dir@.service to user-%i.slice (#1946453)
- units: order user-runtime-dir@.service after systemd-user-sessions.service (#1946453)
- units: make sure user-runtime-dir@.service is Type=oneshot (#1946453)
- user-runtime-dir: downgrade a few log messages to LOG_DEBUG that we ignore (#1946453)
- shared/install: Preserve escape characters for escaped unit names (#1952686)
- basic/virt: Detect PowerVM hypervisor (#1937989)
- man: document differences in clean exit status for Type=oneshot (#1940078)
- busctl: add a timestamp to the output of the busctl monitor command (#1909214)
- basic/cap-list: parse/print numerical capabilities (#1946943)
- shared/mount-util: convert to libmount (#1885143)
- mount-util: bind_remount: avoid calling statvfs (#1885143)
- mount-util: use UMOUNT_NOFOLLOW in recursive umounter (#1885143)
- test-install-root: create referenced targets (#1835351)
- install: warn if WantedBy targets don't exist (#1835351)
- test-install-root: add test for unknown WantedBy= target (#1835351)
- ceph is a network filesystem (#1952013)
- sysctl: set kernel.core_pipe_limit=16 (#1949729)
- core: don't drop timer expired but not yet processed when system date is changed (#1899402)
- core: Detect initial timer state from serialized data (#1899402)
- rc-local: order after network-online.target (#1934028)
- set core ulimit to 0 like on RHEL-7 (#1905582)
- test-mountpointutil-util: do not assert in test_mnt_id() (#1910425)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-49" date="1627041600">- remove a left-over break (#1970860)
- basic/unit-name: do not use strdupa() on a path (#1974700)
- sd-event: change ordering of pending/ratelimited events (#1968528)
- sd-event: drop unnecessary "else" (#1968528)
- sd-event: use CMP() macro (#1968528)
- sd-event: use usec_add() (#1968528)
- sd-event: make event_source_time_prioq_reshuffle() accept all event source type (#1968528)
- sd-event: always reshuffle time prioq on changing online/offline state (#1968528)
- ci: run unit tests on z-stream branches as well (#1970860)
- ci: drop forgotten Travis references (#1934504)
- ci: run unit tests on CentOS 8 Stream as well (#1934504)
- ci: add missing test dependencies (#1934504)
- meson: bump timeout for test-udev to 180s (#1934504)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-50" date="1630065600">- Added option --check-inhibitors for non-tty usage (#1269726)
- logind: Introduce RebootWithFlags and others (#1269726)
- logind: add …WithFlags methods to policy (#1269726)
- logind: simplify flags handling a bit (#1269726)
- Update link to RHEL documentation (#1982584)
- Set default core ulimit to 0, but keep the hard limit ulimited (#1905582)
- shared/seccomp-util: address family filtering is broken on ppc (#1982650)
- logind: rework Seat/Session/User object allocation and freeing a bit (#1642460)
- logind: fix serialization/deserialization of user's "display session" (#1642460)
- logind: turn of stdio locking when writing session files too (#1642460)
- units: set StopWhenUnneeded= for the user slice units too (#1642460)
- units: improve Description= string a bit (#1642460)
- logind: improve logging in manager_connect_console() (#1642460)
- logind: save/restore User object's "stopping" field during restarts (#1642460)
- logind: correct bad clean-up path (#1642460)
- logind: fix bad error propagation (#1642460)
- logind: never elect a session that is stopping as display (#1642460)
- logind: introduce little helper that checks whether a session is ready (#1642460)
- logind: propagate session stop errors (#1642460)
- logind: rework how we manage the slice and user-runtime-dir@.service unit for each user (#1642460)
- logind: optionally, keep the user@.service instance for eached logged in user around for a while (#1642460)
- logind: add a RequiresMountsFor= dependency from the session scope unit to the home directory of the user (#1642460)
- logind: improve error propagation of user_check_linger_file() (#1642460)
- logind: automatically GC lingering users for who now user@.service (nor slice, not runtime dir service) is running anymore (#1642460)
- pam_systemd: simplify code which with we set environment variables (#1642460)
- logind: validate /run/user/1000 before we set it (#1642460)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-51" date="1632398400">- define newly needed constants (#1850986)
- sd-netlink: support IFLA_PROP_LIST and IFLA_ALT_IFNAME attributes (#1850986)
- sd-netlink: introduce sd_netlink_message_read_strv() (#1850986)
- sd-netlink: introduce sd_netlink_message_append_strv() (#1850986)
- test: add a test for sd_netlink_message_{append,read}_strv() (#1850986)
- util: introduce ifname_valid_full() (#1850986)
- rename function (#1850986)
- udev: support AlternativeName= setting in .link file (#1850986)
- network: make Name= in [Match] support alternative names of interfaces (#1850986)
- udev: extend the length of ID_NET_NAME_XXX= to ALTIFNAMSIZ (#1850986)
- udev: do not fail if kernel does not support alternative names (#1850986)
- udev: introduce AlternativeNamesPolicy= setting (#1850986)
- network: set AlternativeNamesPolicy= in 99-default.link (#1850986)
- random-util: call initialize_srand() after fork() (#1850986)
- sd-netlink: introduce rtnl_resolve_link_alternative_names() (#1850986)
- udev: sort alternative names (#1850986)
- netlink: introduce rtnl_get/delete_link_alternative_names() (#1850986)
- netlink: do not fail when new interface name is already used as an alternative name (#1850986)
- udev: do not try to reassign alternative names (#1850986)
- Fix LGTM build (#1850986)
- sd-hwdb: allow empty properties (#1930568)
- Update hwdb (#1930568)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-51.1" date="1638360000">- sd-event: take ref on event loop object before dispatching event sources (#2024903)
- pid1: fix free of uninitialized pointer in unit_fail_if_noncanonical() (#2024903)
- Disable iptables for CI (#2024903)
- test-seccomp: accept ENOSYS from sysctl(2) too (#2024903)
- Disable libpitc to fix CentOS Stream CI (#2024903)
- test: accept that char device 0/0 can now be created witout privileges (#2024903)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-51.2" date="1638532800">- core: return true from cg_is_empty* on ENOENT (#2024903)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-51.3" date="1639137600">- Do not fail if the same alt. name is set again (#2030027)
- meson: avoid bogus meson warning (#2030027)
- meson: do not fail if rsync is not installed with meson 0.57.2 (#2030027)</changelog>
</package>
<package pkgid="392003772b8c5dbba4c44693364d0095ebe289ceef6088ba82ddb698232b9986" name="systemd-debugsource" arch="i686">
  <version epoch="0" ver="239" rel="51.el8_5.5"/>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 239-47" date="1622808000">- systemd-binfmt: Add safeguard in triggers (#1787144)
- spec: Requires(post) openssl-libs to fix missing /etc/machine-id (#1947438)
- spec: Go back to using systemctl preset-all in post (#1783263, #1647172, #1118740)
- spec: Disable libiptc support (#1817265)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-48" date="1624536000">- cgroup: Also set io.bfq.weight (#1927290)
- seccomp: allow turning off of seccomp filtering via env var (#1916835)
- meson: remove strange dep that causes meson to enter infinite loop (#1970860)
- copy: handle copy_file_range() weirdness on procfs/sysfs (#1970860)
- core: Hide "Deactivated successfully" message (#1954802)
- util: rework in_initrd() to make use of path_is_temporary_fs() (#1959339)
- initrd: extend SYSTEMD_IN_INITRD to accept non-ramfs rootfs (#1959339)
- initrd: do a debug log if failed to detect rootfs type (#1959339)
- initrd: do a debug log if /etc/initrd-release doesn't take effect (#1959339)
- units: assign user-runtime-dir@.service to user-%i.slice (#1946453)
- units: order user-runtime-dir@.service after systemd-user-sessions.service (#1946453)
- units: make sure user-runtime-dir@.service is Type=oneshot (#1946453)
- user-runtime-dir: downgrade a few log messages to LOG_DEBUG that we ignore (#1946453)
- shared/install: Preserve escape characters for escaped unit names (#1952686)
- basic/virt: Detect PowerVM hypervisor (#1937989)
- man: document differences in clean exit status for Type=oneshot (#1940078)
- busctl: add a timestamp to the output of the busctl monitor command (#1909214)
- basic/cap-list: parse/print numerical capabilities (#1946943)
- shared/mount-util: convert to libmount (#1885143)
- mount-util: bind_remount: avoid calling statvfs (#1885143)
- mount-util: use UMOUNT_NOFOLLOW in recursive umounter (#1885143)
- test-install-root: create referenced targets (#1835351)
- install: warn if WantedBy targets don't exist (#1835351)
- test-install-root: add test for unknown WantedBy= target (#1835351)
- ceph is a network filesystem (#1952013)
- sysctl: set kernel.core_pipe_limit=16 (#1949729)
- core: don't drop timer expired but not yet processed when system date is changed (#1899402)
- core: Detect initial timer state from serialized data (#1899402)
- rc-local: order after network-online.target (#1934028)
- set core ulimit to 0 like on RHEL-7 (#1905582)
- test-mountpointutil-util: do not assert in test_mnt_id() (#1910425)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-49" date="1627041600">- remove a left-over break (#1970860)
- basic/unit-name: do not use strdupa() on a path (#1974700)
- sd-event: change ordering of pending/ratelimited events (#1968528)
- sd-event: drop unnecessary "else" (#1968528)
- sd-event: use CMP() macro (#1968528)
- sd-event: use usec_add() (#1968528)
- sd-event: make event_source_time_prioq_reshuffle() accept all event source type (#1968528)
- sd-event: always reshuffle time prioq on changing online/offline state (#1968528)
- ci: run unit tests on z-stream branches as well (#1970860)
- ci: drop forgotten Travis references (#1934504)
- ci: run unit tests on CentOS 8 Stream as well (#1934504)
- ci: add missing test dependencies (#1934504)
- meson: bump timeout for test-udev to 180s (#1934504)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-50" date="1630065600">- Added option --check-inhibitors for non-tty usage (#1269726)
- logind: Introduce RebootWithFlags and others (#1269726)
- logind: add …WithFlags methods to policy (#1269726)
- logind: simplify flags handling a bit (#1269726)
- Update link to RHEL documentation (#1982584)
- Set default core ulimit to 0, but keep the hard limit ulimited (#1905582)
- shared/seccomp-util: address family filtering is broken on ppc (#1982650)
- logind: rework Seat/Session/User object allocation and freeing a bit (#1642460)
- logind: fix serialization/deserialization of user's "display session" (#1642460)
- logind: turn of stdio locking when writing session files too (#1642460)
- units: set StopWhenUnneeded= for the user slice units too (#1642460)
- units: improve Description= string a bit (#1642460)
- logind: improve logging in manager_connect_console() (#1642460)
- logind: save/restore User object's "stopping" field during restarts (#1642460)
- logind: correct bad clean-up path (#1642460)
- logind: fix bad error propagation (#1642460)
- logind: never elect a session that is stopping as display (#1642460)
- logind: introduce little helper that checks whether a session is ready (#1642460)
- logind: propagate session stop errors (#1642460)
- logind: rework how we manage the slice and user-runtime-dir@.service unit for each user (#1642460)
- logind: optionally, keep the user@.service instance for eached logged in user around for a while (#1642460)
- logind: add a RequiresMountsFor= dependency from the session scope unit to the home directory of the user (#1642460)
- logind: improve error propagation of user_check_linger_file() (#1642460)
- logind: automatically GC lingering users for who now user@.service (nor slice, not runtime dir service) is running anymore (#1642460)
- pam_systemd: simplify code which with we set environment variables (#1642460)
- logind: validate /run/user/1000 before we set it (#1642460)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-51" date="1632398400">- define newly needed constants (#1850986)
- sd-netlink: support IFLA_PROP_LIST and IFLA_ALT_IFNAME attributes (#1850986)
- sd-netlink: introduce sd_netlink_message_read_strv() (#1850986)
- sd-netlink: introduce sd_netlink_message_append_strv() (#1850986)
- test: add a test for sd_netlink_message_{append,read}_strv() (#1850986)
- util: introduce ifname_valid_full() (#1850986)
- rename function (#1850986)
- udev: support AlternativeName= setting in .link file (#1850986)
- network: make Name= in [Match] support alternative names of interfaces (#1850986)
- udev: extend the length of ID_NET_NAME_XXX= to ALTIFNAMSIZ (#1850986)
- udev: do not fail if kernel does not support alternative names (#1850986)
- udev: introduce AlternativeNamesPolicy= setting (#1850986)
- network: set AlternativeNamesPolicy= in 99-default.link (#1850986)
- random-util: call initialize_srand() after fork() (#1850986)
- sd-netlink: introduce rtnl_resolve_link_alternative_names() (#1850986)
- udev: sort alternative names (#1850986)
- netlink: introduce rtnl_get/delete_link_alternative_names() (#1850986)
- netlink: do not fail when new interface name is already used as an alternative name (#1850986)
- udev: do not try to reassign alternative names (#1850986)
- Fix LGTM build (#1850986)
- sd-hwdb: allow empty properties (#1930568)
- Update hwdb (#1930568)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-51.1" date="1638360000">- sd-event: take ref on event loop object before dispatching event sources (#2024903)
- pid1: fix free of uninitialized pointer in unit_fail_if_noncanonical() (#2024903)
- Disable iptables for CI (#2024903)
- test-seccomp: accept ENOSYS from sysctl(2) too (#2024903)
- Disable libpitc to fix CentOS Stream CI (#2024903)
- test: accept that char device 0/0 can now be created witout privileges (#2024903)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-51.2" date="1638532800">- core: return true from cg_is_empty* on ENOENT (#2024903)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-51.3" date="1639137600">- Do not fail if the same alt. name is set again (#2030027)
- meson: avoid bogus meson warning (#2030027)
- meson: do not fail if rsync is not installed with meson 0.57.2 (#2030027)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-51.4" date="1642075200">- mount: don't propagate errors from mount_setup_unit() further up (#2039327)
- test: make TEST-47 less racy (#2039327)
- macro: define HAS_FEATURE_ADDRESS_SANITIZER also on gcc (#2039327)
- tests: add helper function to autodetect CI environments (#2039327)
- strv: rework FOREACH_STRING() macro (#2039327)
- test,systemctl: use "const char*" instead of "char*" (#2039327)
- ci: pass the $GITHUB_ACTIONS variable to the CentOS container (#2039327)
- core: rename unit_{start_limit|condition|assert}_test() to unit_test_xyz() (#2037395)
- core: Check unit start rate limiting earlier (#2037395)
- sd-event: introduce callback invoked when event source ratelimit expires (#2037395)
- core: rename/generalize UNIT(u)-&gt;test_start_limit() hook (#2037395)
- mount: make mount units start jobs not runnable if /p/s/mountinfo ratelimit is in effect (#2037395)
- mount: retrigger run queue after ratelimit expired to run delayed mount start jobs (#2037395)
- pid1: add a manager_trigger_run_queue() helper (#2037395)
- unit: add jobs that were skipped because of ratelimit back to run_queue (#2037395)
- udev/net_id: introduce naming scheme for RHEL-8.5 (#2040244)
- udev/net_id: remove extraneous bracket (#2040244)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-51.5" date="1643112000">- mount: do not update exec deps on mountinfo changes (#2038878)
- core/mount: add implicit unit dependencies even if when mount unit is generated from /proc/self/mountinfo (#2038878)</changelog>
</package>
<package pkgid="b6786ca2c08c03a3191278935b58cbb34bd6cc9eeb63a0caf4a0d95b493c0ae0" name="systemd-debugsource" arch="x86_64">
  <version epoch="0" ver="239" rel="51.el8_5.5"/>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 239-47" date="1622808000">- systemd-binfmt: Add safeguard in triggers (#1787144)
- spec: Requires(post) openssl-libs to fix missing /etc/machine-id (#1947438)
- spec: Go back to using systemctl preset-all in post (#1783263, #1647172, #1118740)
- spec: Disable libiptc support (#1817265)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-48" date="1624536000">- cgroup: Also set io.bfq.weight (#1927290)
- seccomp: allow turning off of seccomp filtering via env var (#1916835)
- meson: remove strange dep that causes meson to enter infinite loop (#1970860)
- copy: handle copy_file_range() weirdness on procfs/sysfs (#1970860)
- core: Hide "Deactivated successfully" message (#1954802)
- util: rework in_initrd() to make use of path_is_temporary_fs() (#1959339)
- initrd: extend SYSTEMD_IN_INITRD to accept non-ramfs rootfs (#1959339)
- initrd: do a debug log if failed to detect rootfs type (#1959339)
- initrd: do a debug log if /etc/initrd-release doesn't take effect (#1959339)
- units: assign user-runtime-dir@.service to user-%i.slice (#1946453)
- units: order user-runtime-dir@.service after systemd-user-sessions.service (#1946453)
- units: make sure user-runtime-dir@.service is Type=oneshot (#1946453)
- user-runtime-dir: downgrade a few log messages to LOG_DEBUG that we ignore (#1946453)
- shared/install: Preserve escape characters for escaped unit names (#1952686)
- basic/virt: Detect PowerVM hypervisor (#1937989)
- man: document differences in clean exit status for Type=oneshot (#1940078)
- busctl: add a timestamp to the output of the busctl monitor command (#1909214)
- basic/cap-list: parse/print numerical capabilities (#1946943)
- shared/mount-util: convert to libmount (#1885143)
- mount-util: bind_remount: avoid calling statvfs (#1885143)
- mount-util: use UMOUNT_NOFOLLOW in recursive umounter (#1885143)
- test-install-root: create referenced targets (#1835351)
- install: warn if WantedBy targets don't exist (#1835351)
- test-install-root: add test for unknown WantedBy= target (#1835351)
- ceph is a network filesystem (#1952013)
- sysctl: set kernel.core_pipe_limit=16 (#1949729)
- core: don't drop timer expired but not yet processed when system date is changed (#1899402)
- core: Detect initial timer state from serialized data (#1899402)
- rc-local: order after network-online.target (#1934028)
- set core ulimit to 0 like on RHEL-7 (#1905582)
- test-mountpointutil-util: do not assert in test_mnt_id() (#1910425)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-49" date="1627041600">- remove a left-over break (#1970860)
- basic/unit-name: do not use strdupa() on a path (#1974700)
- sd-event: change ordering of pending/ratelimited events (#1968528)
- sd-event: drop unnecessary "else" (#1968528)
- sd-event: use CMP() macro (#1968528)
- sd-event: use usec_add() (#1968528)
- sd-event: make event_source_time_prioq_reshuffle() accept all event source type (#1968528)
- sd-event: always reshuffle time prioq on changing online/offline state (#1968528)
- ci: run unit tests on z-stream branches as well (#1970860)
- ci: drop forgotten Travis references (#1934504)
- ci: run unit tests on CentOS 8 Stream as well (#1934504)
- ci: add missing test dependencies (#1934504)
- meson: bump timeout for test-udev to 180s (#1934504)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-50" date="1630065600">- Added option --check-inhibitors for non-tty usage (#1269726)
- logind: Introduce RebootWithFlags and others (#1269726)
- logind: add …WithFlags methods to policy (#1269726)
- logind: simplify flags handling a bit (#1269726)
- Update link to RHEL documentation (#1982584)
- Set default core ulimit to 0, but keep the hard limit ulimited (#1905582)
- shared/seccomp-util: address family filtering is broken on ppc (#1982650)
- logind: rework Seat/Session/User object allocation and freeing a bit (#1642460)
- logind: fix serialization/deserialization of user's "display session" (#1642460)
- logind: turn of stdio locking when writing session files too (#1642460)
- units: set StopWhenUnneeded= for the user slice units too (#1642460)
- units: improve Description= string a bit (#1642460)
- logind: improve logging in manager_connect_console() (#1642460)
- logind: save/restore User object's "stopping" field during restarts (#1642460)
- logind: correct bad clean-up path (#1642460)
- logind: fix bad error propagation (#1642460)
- logind: never elect a session that is stopping as display (#1642460)
- logind: introduce little helper that checks whether a session is ready (#1642460)
- logind: propagate session stop errors (#1642460)
- logind: rework how we manage the slice and user-runtime-dir@.service unit for each user (#1642460)
- logind: optionally, keep the user@.service instance for eached logged in user around for a while (#1642460)
- logind: add a RequiresMountsFor= dependency from the session scope unit to the home directory of the user (#1642460)
- logind: improve error propagation of user_check_linger_file() (#1642460)
- logind: automatically GC lingering users for who now user@.service (nor slice, not runtime dir service) is running anymore (#1642460)
- pam_systemd: simplify code which with we set environment variables (#1642460)
- logind: validate /run/user/1000 before we set it (#1642460)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-51" date="1632398400">- define newly needed constants (#1850986)
- sd-netlink: support IFLA_PROP_LIST and IFLA_ALT_IFNAME attributes (#1850986)
- sd-netlink: introduce sd_netlink_message_read_strv() (#1850986)
- sd-netlink: introduce sd_netlink_message_append_strv() (#1850986)
- test: add a test for sd_netlink_message_{append,read}_strv() (#1850986)
- util: introduce ifname_valid_full() (#1850986)
- rename function (#1850986)
- udev: support AlternativeName= setting in .link file (#1850986)
- network: make Name= in [Match] support alternative names of interfaces (#1850986)
- udev: extend the length of ID_NET_NAME_XXX= to ALTIFNAMSIZ (#1850986)
- udev: do not fail if kernel does not support alternative names (#1850986)
- udev: introduce AlternativeNamesPolicy= setting (#1850986)
- network: set AlternativeNamesPolicy= in 99-default.link (#1850986)
- random-util: call initialize_srand() after fork() (#1850986)
- sd-netlink: introduce rtnl_resolve_link_alternative_names() (#1850986)
- udev: sort alternative names (#1850986)
- netlink: introduce rtnl_get/delete_link_alternative_names() (#1850986)
- netlink: do not fail when new interface name is already used as an alternative name (#1850986)
- udev: do not try to reassign alternative names (#1850986)
- Fix LGTM build (#1850986)
- sd-hwdb: allow empty properties (#1930568)
- Update hwdb (#1930568)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-51.1" date="1638360000">- sd-event: take ref on event loop object before dispatching event sources (#2024903)
- pid1: fix free of uninitialized pointer in unit_fail_if_noncanonical() (#2024903)
- Disable iptables for CI (#2024903)
- test-seccomp: accept ENOSYS from sysctl(2) too (#2024903)
- Disable libpitc to fix CentOS Stream CI (#2024903)
- test: accept that char device 0/0 can now be created witout privileges (#2024903)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-51.2" date="1638532800">- core: return true from cg_is_empty* on ENOENT (#2024903)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-51.3" date="1639137600">- Do not fail if the same alt. name is set again (#2030027)
- meson: avoid bogus meson warning (#2030027)
- meson: do not fail if rsync is not installed with meson 0.57.2 (#2030027)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-51.4" date="1642075200">- mount: don't propagate errors from mount_setup_unit() further up (#2039327)
- test: make TEST-47 less racy (#2039327)
- macro: define HAS_FEATURE_ADDRESS_SANITIZER also on gcc (#2039327)
- tests: add helper function to autodetect CI environments (#2039327)
- strv: rework FOREACH_STRING() macro (#2039327)
- test,systemctl: use "const char*" instead of "char*" (#2039327)
- ci: pass the $GITHUB_ACTIONS variable to the CentOS container (#2039327)
- core: rename unit_{start_limit|condition|assert}_test() to unit_test_xyz() (#2037395)
- core: Check unit start rate limiting earlier (#2037395)
- sd-event: introduce callback invoked when event source ratelimit expires (#2037395)
- core: rename/generalize UNIT(u)-&gt;test_start_limit() hook (#2037395)
- mount: make mount units start jobs not runnable if /p/s/mountinfo ratelimit is in effect (#2037395)
- mount: retrigger run queue after ratelimit expired to run delayed mount start jobs (#2037395)
- pid1: add a manager_trigger_run_queue() helper (#2037395)
- unit: add jobs that were skipped because of ratelimit back to run_queue (#2037395)
- udev/net_id: introduce naming scheme for RHEL-8.5 (#2040244)
- udev/net_id: remove extraneous bracket (#2040244)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-51.5" date="1643112000">- mount: do not update exec deps on mountinfo changes (#2038878)
- core/mount: add implicit unit dependencies even if when mount unit is generated from /proc/self/mountinfo (#2038878)</changelog>
</package>
<package pkgid="7912290736d1bcf294f7c6b00d34e1bd5ebdebd2a1942ffd1e0763a4cbec3d52" name="systemd-journal-remote-debuginfo" arch="x86_64">
  <version epoch="0" ver="239" rel="51.el8_5.2"/>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-44" date="1611835200">- ci: PowerTools repo was renamed to powertools in RHEL 8.3 (#1871827)
- ci: use quay.io instead of Docker Hub to avoid rate limits (#1871827)
- ci: move jobs from Travis CI to GH Actions (#1871827)
- unit: make UNIT() cast function deal with NULL pointers (#1871827)
- use link to RHEL-8 docs (#1623116)
- cgroup: Also set blkio.bfq.weight (#1657810)
- units: make sure initrd-cleanup.service terminates before switching to rootfs (#1657810)
- core: reload SELinux label cache on daemon-reload (#1888912)
- selinux: introduce mac_selinux_create_file_prepare_at() (#1888912)
- selinux: add trigger for policy reload to refresh internal selabel cache (#1888912)
- udev/net_id: give RHEL-8.4 naming scheme a name (#1827462)
- basic/stat-util: make mtime check stricter and use entire timestamp (#1642728)
- udev: make algorithm that selects highest priority devlink less susceptible to race conditions (#1642728)
- test: create /dev/null in test-udev.pl (#1642728)
- test: missing "die" (#1642728)
- udev-test: remove a check for whether the test is run in a container (#1642728)
- udev-test: skip the test only if it can't setup its environment (#1642728)
- udev-test: fix test skip condition (#1642728)
- udev-test: fix missing directory test/run (#1642728)
- udev-test: check if permitted to create block device nodes (#1642728)
- test-udev: add a testcase of too long line (#1642728)
- test-udev: use proper semantics for too long line with continuation (#1642728)
- test-udev: add more tests for line continuations and comments (#1642728)
- test-udev: add more tests for line continuation (#1642728)
- test-udev: fix alignment and drop unnecessary white spaces (#1642728)
- test/udev-test.pl: cleanup if skipping test (#1642728)
- test: add test cases for empty string match (#1642728)
- test: add test case for multi matches when use "||" (#1642728)
- udev-test: do not rely on "mail" group being defined (#1642728)
- test/udev-test.pl: allow multiple devices per test (#1642728)
- test/udev-test.pl: create rules only once (#1642728)
- test/udev-test.pl: allow concurrent additions and removals (#1642728)
- test/udev-test.pl: use computed devnode name (#1642728)
- test/udev-test.pl: test correctness of symlink targets (#1642728)
- test/udev-test.pl: allow checking multiple symlinks (#1642728)
- test/udev-test.pl: fix wrong test descriptions (#1642728)
- test/udev-test.pl: last_rule is unsupported (#1642728)
- test/udev-test.pl: Make some tests a little harder (#1642728)
- test/udev-test.pl: remove bogus rules from magic subsys test (#1642728)
- test/udev-test.pl: merge "space and var with space" tests (#1642728)
- test/udev-test.pl: merge import parent tests into one (#1642728)
- test/udev-test.pl: count "good" results (#1642728)
- tests/udev-test.pl: add multiple device test (#1642728)
- test/udev-test.pl: add repeat count (#1642728)
- test/udev-test.pl: generator for large list of block devices (#1642728)
- test/udev-test.pl: suppress umount error message at startup (#1642728)
- test/udev_test.pl: add "expected good" count (#1642728)
- test/udev-test: gracefully exit when imports fail (#1642728)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-45" date="1615464000">- Revert "test: add test cases for empty string match" and "test: add test case for multi matches when use ||" (#1935124)
- test/sys-script.py: add missing DEVNAME entries to uevents (#1935124)
- sd-event: split out helper functions for reshuffling prioqs (#1937315)
- sd-event: split out enable and disable codepaths from sd_event_source_set_enabled() (#1937315)
- sd-event: mention that two debug logged events are ignored (#1937315)
- sd-event: split clock data allocation out of sd_event_add_time() (#1937315)
- sd-event: split out code to add/remove timer event sources to earliest/latest prioq (#1937315)
- sd-event: fix delays assert brain-o (#17790) (#1937315)
- sd-event: let's suffix last_run/last_log with "_usec" (#1937315)
- sd-event: refuse running default event loops in any other thread than the one they are default for (#1937315)
- sd-event: ref event loop while in sd_event_prepare() ot sd_event_run() (#1937315)
- sd-event: follow coding style with naming return parameter (#1937315)
- sd-event: remove earliest_index/latest_index into common part of event source objects (#1937315)
- sd-event: update state at the end in event_source_enable (#1937315)
- sd-event: increase n_enabled_child_sources just once (#1937315)
- sd-event: add ability to ratelimit event sources (#1937315)
- test: add ratelimiting test (#1937315)
- core: prevent excessive /proc/self/mountinfo parsing (#1937315)
- udev: run link_update() with increased retry count in second invocation (#1935124)
- pam-systemd: use secure_getenv() rather than getenv() (#1936866)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-46" date="1621425600">- Revert "udev: run link_update() with increased retry count in second invocation" (#1942299)
- Revert "udev: make algorithm that selects highest priority devlink less susceptible to race conditions" (#1942299)
- test/udev-test.pl: drop test cases that add mutliple devices (#1942299)</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 239-47" date="1622808000">- systemd-binfmt: Add safeguard in triggers (#1787144)
- spec: Requires(post) openssl-libs to fix missing /etc/machine-id (#1947438)
- spec: Go back to using systemctl preset-all in post (#1783263, #1647172, #1118740)
- spec: Disable libiptc support (#1817265)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-48" date="1624536000">- cgroup: Also set io.bfq.weight (#1927290)
- seccomp: allow turning off of seccomp filtering via env var (#1916835)
- meson: remove strange dep that causes meson to enter infinite loop (#1970860)
- copy: handle copy_file_range() weirdness on procfs/sysfs (#1970860)
- core: Hide "Deactivated successfully" message (#1954802)
- util: rework in_initrd() to make use of path_is_temporary_fs() (#1959339)
- initrd: extend SYSTEMD_IN_INITRD to accept non-ramfs rootfs (#1959339)
- initrd: do a debug log if failed to detect rootfs type (#1959339)
- initrd: do a debug log if /etc/initrd-release doesn't take effect (#1959339)
- units: assign user-runtime-dir@.service to user-%i.slice (#1946453)
- units: order user-runtime-dir@.service after systemd-user-sessions.service (#1946453)
- units: make sure user-runtime-dir@.service is Type=oneshot (#1946453)
- user-runtime-dir: downgrade a few log messages to LOG_DEBUG that we ignore (#1946453)
- shared/install: Preserve escape characters for escaped unit names (#1952686)
- basic/virt: Detect PowerVM hypervisor (#1937989)
- man: document differences in clean exit status for Type=oneshot (#1940078)
- busctl: add a timestamp to the output of the busctl monitor command (#1909214)
- basic/cap-list: parse/print numerical capabilities (#1946943)
- shared/mount-util: convert to libmount (#1885143)
- mount-util: bind_remount: avoid calling statvfs (#1885143)
- mount-util: use UMOUNT_NOFOLLOW in recursive umounter (#1885143)
- test-install-root: create referenced targets (#1835351)
- install: warn if WantedBy targets don't exist (#1835351)
- test-install-root: add test for unknown WantedBy= target (#1835351)
- ceph is a network filesystem (#1952013)
- sysctl: set kernel.core_pipe_limit=16 (#1949729)
- core: don't drop timer expired but not yet processed when system date is changed (#1899402)
- core: Detect initial timer state from serialized data (#1899402)
- rc-local: order after network-online.target (#1934028)
- set core ulimit to 0 like on RHEL-7 (#1905582)
- test-mountpointutil-util: do not assert in test_mnt_id() (#1910425)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-49" date="1627041600">- remove a left-over break (#1970860)
- basic/unit-name: do not use strdupa() on a path (#1974700)
- sd-event: change ordering of pending/ratelimited events (#1968528)
- sd-event: drop unnecessary "else" (#1968528)
- sd-event: use CMP() macro (#1968528)
- sd-event: use usec_add() (#1968528)
- sd-event: make event_source_time_prioq_reshuffle() accept all event source type (#1968528)
- sd-event: always reshuffle time prioq on changing online/offline state (#1968528)
- ci: run unit tests on z-stream branches as well (#1970860)
- ci: drop forgotten Travis references (#1934504)
- ci: run unit tests on CentOS 8 Stream as well (#1934504)
- ci: add missing test dependencies (#1934504)
- meson: bump timeout for test-udev to 180s (#1934504)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-50" date="1630065600">- Added option --check-inhibitors for non-tty usage (#1269726)
- logind: Introduce RebootWithFlags and others (#1269726)
- logind: add …WithFlags methods to policy (#1269726)
- logind: simplify flags handling a bit (#1269726)
- Update link to RHEL documentation (#1982584)
- Set default core ulimit to 0, but keep the hard limit ulimited (#1905582)
- shared/seccomp-util: address family filtering is broken on ppc (#1982650)
- logind: rework Seat/Session/User object allocation and freeing a bit (#1642460)
- logind: fix serialization/deserialization of user's "display session" (#1642460)
- logind: turn of stdio locking when writing session files too (#1642460)
- units: set StopWhenUnneeded= for the user slice units too (#1642460)
- units: improve Description= string a bit (#1642460)
- logind: improve logging in manager_connect_console() (#1642460)
- logind: save/restore User object's "stopping" field during restarts (#1642460)
- logind: correct bad clean-up path (#1642460)
- logind: fix bad error propagation (#1642460)
- logind: never elect a session that is stopping as display (#1642460)
- logind: introduce little helper that checks whether a session is ready (#1642460)
- logind: propagate session stop errors (#1642460)
- logind: rework how we manage the slice and user-runtime-dir@.service unit for each user (#1642460)
- logind: optionally, keep the user@.service instance for eached logged in user around for a while (#1642460)
- logind: add a RequiresMountsFor= dependency from the session scope unit to the home directory of the user (#1642460)
- logind: improve error propagation of user_check_linger_file() (#1642460)
- logind: automatically GC lingering users for who now user@.service (nor slice, not runtime dir service) is running anymore (#1642460)
- pam_systemd: simplify code which with we set environment variables (#1642460)
- logind: validate /run/user/1000 before we set it (#1642460)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-51" date="1632398400">- define newly needed constants (#1850986)
- sd-netlink: support IFLA_PROP_LIST and IFLA_ALT_IFNAME attributes (#1850986)
- sd-netlink: introduce sd_netlink_message_read_strv() (#1850986)
- sd-netlink: introduce sd_netlink_message_append_strv() (#1850986)
- test: add a test for sd_netlink_message_{append,read}_strv() (#1850986)
- util: introduce ifname_valid_full() (#1850986)
- rename function (#1850986)
- udev: support AlternativeName= setting in .link file (#1850986)
- network: make Name= in [Match] support alternative names of interfaces (#1850986)
- udev: extend the length of ID_NET_NAME_XXX= to ALTIFNAMSIZ (#1850986)
- udev: do not fail if kernel does not support alternative names (#1850986)
- udev: introduce AlternativeNamesPolicy= setting (#1850986)
- network: set AlternativeNamesPolicy= in 99-default.link (#1850986)
- random-util: call initialize_srand() after fork() (#1850986)
- sd-netlink: introduce rtnl_resolve_link_alternative_names() (#1850986)
- udev: sort alternative names (#1850986)
- netlink: introduce rtnl_get/delete_link_alternative_names() (#1850986)
- netlink: do not fail when new interface name is already used as an alternative name (#1850986)
- udev: do not try to reassign alternative names (#1850986)
- Fix LGTM build (#1850986)
- sd-hwdb: allow empty properties (#1930568)
- Update hwdb (#1930568)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-51.1" date="1638360000">- sd-event: take ref on event loop object before dispatching event sources (#2024903)
- pid1: fix free of uninitialized pointer in unit_fail_if_noncanonical() (#2024903)
- Disable iptables for CI (#2024903)
- test-seccomp: accept ENOSYS from sysctl(2) too (#2024903)
- Disable libpitc to fix CentOS Stream CI (#2024903)
- test: accept that char device 0/0 can now be created witout privileges (#2024903)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-51.2" date="1638532800">- core: return true from cg_is_empty* on ENOENT (#2024903)</changelog>
</package>
<package pkgid="48c5e318a0a5655584031bf575156527deb348ce9dd5e4a6ee7ed336f540347f" name="systemd-journal-remote-debuginfo" arch="x86_64">
  <version epoch="0" ver="239" rel="51.el8_5.3"/>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-45" date="1615464000">- Revert "test: add test cases for empty string match" and "test: add test case for multi matches when use ||" (#1935124)
- test/sys-script.py: add missing DEVNAME entries to uevents (#1935124)
- sd-event: split out helper functions for reshuffling prioqs (#1937315)
- sd-event: split out enable and disable codepaths from sd_event_source_set_enabled() (#1937315)
- sd-event: mention that two debug logged events are ignored (#1937315)
- sd-event: split clock data allocation out of sd_event_add_time() (#1937315)
- sd-event: split out code to add/remove timer event sources to earliest/latest prioq (#1937315)
- sd-event: fix delays assert brain-o (#17790) (#1937315)
- sd-event: let's suffix last_run/last_log with "_usec" (#1937315)
- sd-event: refuse running default event loops in any other thread than the one they are default for (#1937315)
- sd-event: ref event loop while in sd_event_prepare() ot sd_event_run() (#1937315)
- sd-event: follow coding style with naming return parameter (#1937315)
- sd-event: remove earliest_index/latest_index into common part of event source objects (#1937315)
- sd-event: update state at the end in event_source_enable (#1937315)
- sd-event: increase n_enabled_child_sources just once (#1937315)
- sd-event: add ability to ratelimit event sources (#1937315)
- test: add ratelimiting test (#1937315)
- core: prevent excessive /proc/self/mountinfo parsing (#1937315)
- udev: run link_update() with increased retry count in second invocation (#1935124)
- pam-systemd: use secure_getenv() rather than getenv() (#1936866)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-46" date="1621425600">- Revert "udev: run link_update() with increased retry count in second invocation" (#1942299)
- Revert "udev: make algorithm that selects highest priority devlink less susceptible to race conditions" (#1942299)
- test/udev-test.pl: drop test cases that add mutliple devices (#1942299)</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 239-47" date="1622808000">- systemd-binfmt: Add safeguard in triggers (#1787144)
- spec: Requires(post) openssl-libs to fix missing /etc/machine-id (#1947438)
- spec: Go back to using systemctl preset-all in post (#1783263, #1647172, #1118740)
- spec: Disable libiptc support (#1817265)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-48" date="1624536000">- cgroup: Also set io.bfq.weight (#1927290)
- seccomp: allow turning off of seccomp filtering via env var (#1916835)
- meson: remove strange dep that causes meson to enter infinite loop (#1970860)
- copy: handle copy_file_range() weirdness on procfs/sysfs (#1970860)
- core: Hide "Deactivated successfully" message (#1954802)
- util: rework in_initrd() to make use of path_is_temporary_fs() (#1959339)
- initrd: extend SYSTEMD_IN_INITRD to accept non-ramfs rootfs (#1959339)
- initrd: do a debug log if failed to detect rootfs type (#1959339)
- initrd: do a debug log if /etc/initrd-release doesn't take effect (#1959339)
- units: assign user-runtime-dir@.service to user-%i.slice (#1946453)
- units: order user-runtime-dir@.service after systemd-user-sessions.service (#1946453)
- units: make sure user-runtime-dir@.service is Type=oneshot (#1946453)
- user-runtime-dir: downgrade a few log messages to LOG_DEBUG that we ignore (#1946453)
- shared/install: Preserve escape characters for escaped unit names (#1952686)
- basic/virt: Detect PowerVM hypervisor (#1937989)
- man: document differences in clean exit status for Type=oneshot (#1940078)
- busctl: add a timestamp to the output of the busctl monitor command (#1909214)
- basic/cap-list: parse/print numerical capabilities (#1946943)
- shared/mount-util: convert to libmount (#1885143)
- mount-util: bind_remount: avoid calling statvfs (#1885143)
- mount-util: use UMOUNT_NOFOLLOW in recursive umounter (#1885143)
- test-install-root: create referenced targets (#1835351)
- install: warn if WantedBy targets don't exist (#1835351)
- test-install-root: add test for unknown WantedBy= target (#1835351)
- ceph is a network filesystem (#1952013)
- sysctl: set kernel.core_pipe_limit=16 (#1949729)
- core: don't drop timer expired but not yet processed when system date is changed (#1899402)
- core: Detect initial timer state from serialized data (#1899402)
- rc-local: order after network-online.target (#1934028)
- set core ulimit to 0 like on RHEL-7 (#1905582)
- test-mountpointutil-util: do not assert in test_mnt_id() (#1910425)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-49" date="1627041600">- remove a left-over break (#1970860)
- basic/unit-name: do not use strdupa() on a path (#1974700)
- sd-event: change ordering of pending/ratelimited events (#1968528)
- sd-event: drop unnecessary "else" (#1968528)
- sd-event: use CMP() macro (#1968528)
- sd-event: use usec_add() (#1968528)
- sd-event: make event_source_time_prioq_reshuffle() accept all event source type (#1968528)
- sd-event: always reshuffle time prioq on changing online/offline state (#1968528)
- ci: run unit tests on z-stream branches as well (#1970860)
- ci: drop forgotten Travis references (#1934504)
- ci: run unit tests on CentOS 8 Stream as well (#1934504)
- ci: add missing test dependencies (#1934504)
- meson: bump timeout for test-udev to 180s (#1934504)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-50" date="1630065600">- Added option --check-inhibitors for non-tty usage (#1269726)
- logind: Introduce RebootWithFlags and others (#1269726)
- logind: add …WithFlags methods to policy (#1269726)
- logind: simplify flags handling a bit (#1269726)
- Update link to RHEL documentation (#1982584)
- Set default core ulimit to 0, but keep the hard limit ulimited (#1905582)
- shared/seccomp-util: address family filtering is broken on ppc (#1982650)
- logind: rework Seat/Session/User object allocation and freeing a bit (#1642460)
- logind: fix serialization/deserialization of user's "display session" (#1642460)
- logind: turn of stdio locking when writing session files too (#1642460)
- units: set StopWhenUnneeded= for the user slice units too (#1642460)
- units: improve Description= string a bit (#1642460)
- logind: improve logging in manager_connect_console() (#1642460)
- logind: save/restore User object's "stopping" field during restarts (#1642460)
- logind: correct bad clean-up path (#1642460)
- logind: fix bad error propagation (#1642460)
- logind: never elect a session that is stopping as display (#1642460)
- logind: introduce little helper that checks whether a session is ready (#1642460)
- logind: propagate session stop errors (#1642460)
- logind: rework how we manage the slice and user-runtime-dir@.service unit for each user (#1642460)
- logind: optionally, keep the user@.service instance for eached logged in user around for a while (#1642460)
- logind: add a RequiresMountsFor= dependency from the session scope unit to the home directory of the user (#1642460)
- logind: improve error propagation of user_check_linger_file() (#1642460)
- logind: automatically GC lingering users for who now user@.service (nor slice, not runtime dir service) is running anymore (#1642460)
- pam_systemd: simplify code which with we set environment variables (#1642460)
- logind: validate /run/user/1000 before we set it (#1642460)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-51" date="1632398400">- define newly needed constants (#1850986)
- sd-netlink: support IFLA_PROP_LIST and IFLA_ALT_IFNAME attributes (#1850986)
- sd-netlink: introduce sd_netlink_message_read_strv() (#1850986)
- sd-netlink: introduce sd_netlink_message_append_strv() (#1850986)
- test: add a test for sd_netlink_message_{append,read}_strv() (#1850986)
- util: introduce ifname_valid_full() (#1850986)
- rename function (#1850986)
- udev: support AlternativeName= setting in .link file (#1850986)
- network: make Name= in [Match] support alternative names of interfaces (#1850986)
- udev: extend the length of ID_NET_NAME_XXX= to ALTIFNAMSIZ (#1850986)
- udev: do not fail if kernel does not support alternative names (#1850986)
- udev: introduce AlternativeNamesPolicy= setting (#1850986)
- network: set AlternativeNamesPolicy= in 99-default.link (#1850986)
- random-util: call initialize_srand() after fork() (#1850986)
- sd-netlink: introduce rtnl_resolve_link_alternative_names() (#1850986)
- udev: sort alternative names (#1850986)
- netlink: introduce rtnl_get/delete_link_alternative_names() (#1850986)
- netlink: do not fail when new interface name is already used as an alternative name (#1850986)
- udev: do not try to reassign alternative names (#1850986)
- Fix LGTM build (#1850986)
- sd-hwdb: allow empty properties (#1930568)
- Update hwdb (#1930568)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-51.1" date="1638360000">- sd-event: take ref on event loop object before dispatching event sources (#2024903)
- pid1: fix free of uninitialized pointer in unit_fail_if_noncanonical() (#2024903)
- Disable iptables for CI (#2024903)
- test-seccomp: accept ENOSYS from sysctl(2) too (#2024903)
- Disable libpitc to fix CentOS Stream CI (#2024903)
- test: accept that char device 0/0 can now be created witout privileges (#2024903)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-51.2" date="1638532800">- core: return true from cg_is_empty* on ENOENT (#2024903)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-51.3" date="1639137600">- Do not fail if the same alt. name is set again (#2030027)
- meson: avoid bogus meson warning (#2030027)
- meson: do not fail if rsync is not installed with meson 0.57.2 (#2030027)</changelog>
</package>
<package pkgid="06de1164cd5ec763d5b479ed9fe84d421731cc9d2cef82e084b35ee270c74875" name="systemd-journal-remote-debuginfo" arch="x86_64">
  <version epoch="0" ver="239" rel="51.el8_5.5"/>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 239-47" date="1622808000">- systemd-binfmt: Add safeguard in triggers (#1787144)
- spec: Requires(post) openssl-libs to fix missing /etc/machine-id (#1947438)
- spec: Go back to using systemctl preset-all in post (#1783263, #1647172, #1118740)
- spec: Disable libiptc support (#1817265)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-48" date="1624536000">- cgroup: Also set io.bfq.weight (#1927290)
- seccomp: allow turning off of seccomp filtering via env var (#1916835)
- meson: remove strange dep that causes meson to enter infinite loop (#1970860)
- copy: handle copy_file_range() weirdness on procfs/sysfs (#1970860)
- core: Hide "Deactivated successfully" message (#1954802)
- util: rework in_initrd() to make use of path_is_temporary_fs() (#1959339)
- initrd: extend SYSTEMD_IN_INITRD to accept non-ramfs rootfs (#1959339)
- initrd: do a debug log if failed to detect rootfs type (#1959339)
- initrd: do a debug log if /etc/initrd-release doesn't take effect (#1959339)
- units: assign user-runtime-dir@.service to user-%i.slice (#1946453)
- units: order user-runtime-dir@.service after systemd-user-sessions.service (#1946453)
- units: make sure user-runtime-dir@.service is Type=oneshot (#1946453)
- user-runtime-dir: downgrade a few log messages to LOG_DEBUG that we ignore (#1946453)
- shared/install: Preserve escape characters for escaped unit names (#1952686)
- basic/virt: Detect PowerVM hypervisor (#1937989)
- man: document differences in clean exit status for Type=oneshot (#1940078)
- busctl: add a timestamp to the output of the busctl monitor command (#1909214)
- basic/cap-list: parse/print numerical capabilities (#1946943)
- shared/mount-util: convert to libmount (#1885143)
- mount-util: bind_remount: avoid calling statvfs (#1885143)
- mount-util: use UMOUNT_NOFOLLOW in recursive umounter (#1885143)
- test-install-root: create referenced targets (#1835351)
- install: warn if WantedBy targets don't exist (#1835351)
- test-install-root: add test for unknown WantedBy= target (#1835351)
- ceph is a network filesystem (#1952013)
- sysctl: set kernel.core_pipe_limit=16 (#1949729)
- core: don't drop timer expired but not yet processed when system date is changed (#1899402)
- core: Detect initial timer state from serialized data (#1899402)
- rc-local: order after network-online.target (#1934028)
- set core ulimit to 0 like on RHEL-7 (#1905582)
- test-mountpointutil-util: do not assert in test_mnt_id() (#1910425)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-49" date="1627041600">- remove a left-over break (#1970860)
- basic/unit-name: do not use strdupa() on a path (#1974700)
- sd-event: change ordering of pending/ratelimited events (#1968528)
- sd-event: drop unnecessary "else" (#1968528)
- sd-event: use CMP() macro (#1968528)
- sd-event: use usec_add() (#1968528)
- sd-event: make event_source_time_prioq_reshuffle() accept all event source type (#1968528)
- sd-event: always reshuffle time prioq on changing online/offline state (#1968528)
- ci: run unit tests on z-stream branches as well (#1970860)
- ci: drop forgotten Travis references (#1934504)
- ci: run unit tests on CentOS 8 Stream as well (#1934504)
- ci: add missing test dependencies (#1934504)
- meson: bump timeout for test-udev to 180s (#1934504)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-50" date="1630065600">- Added option --check-inhibitors for non-tty usage (#1269726)
- logind: Introduce RebootWithFlags and others (#1269726)
- logind: add …WithFlags methods to policy (#1269726)
- logind: simplify flags handling a bit (#1269726)
- Update link to RHEL documentation (#1982584)
- Set default core ulimit to 0, but keep the hard limit ulimited (#1905582)
- shared/seccomp-util: address family filtering is broken on ppc (#1982650)
- logind: rework Seat/Session/User object allocation and freeing a bit (#1642460)
- logind: fix serialization/deserialization of user's "display session" (#1642460)
- logind: turn of stdio locking when writing session files too (#1642460)
- units: set StopWhenUnneeded= for the user slice units too (#1642460)
- units: improve Description= string a bit (#1642460)
- logind: improve logging in manager_connect_console() (#1642460)
- logind: save/restore User object's "stopping" field during restarts (#1642460)
- logind: correct bad clean-up path (#1642460)
- logind: fix bad error propagation (#1642460)
- logind: never elect a session that is stopping as display (#1642460)
- logind: introduce little helper that checks whether a session is ready (#1642460)
- logind: propagate session stop errors (#1642460)
- logind: rework how we manage the slice and user-runtime-dir@.service unit for each user (#1642460)
- logind: optionally, keep the user@.service instance for eached logged in user around for a while (#1642460)
- logind: add a RequiresMountsFor= dependency from the session scope unit to the home directory of the user (#1642460)
- logind: improve error propagation of user_check_linger_file() (#1642460)
- logind: automatically GC lingering users for who now user@.service (nor slice, not runtime dir service) is running anymore (#1642460)
- pam_systemd: simplify code which with we set environment variables (#1642460)
- logind: validate /run/user/1000 before we set it (#1642460)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-51" date="1632398400">- define newly needed constants (#1850986)
- sd-netlink: support IFLA_PROP_LIST and IFLA_ALT_IFNAME attributes (#1850986)
- sd-netlink: introduce sd_netlink_message_read_strv() (#1850986)
- sd-netlink: introduce sd_netlink_message_append_strv() (#1850986)
- test: add a test for sd_netlink_message_{append,read}_strv() (#1850986)
- util: introduce ifname_valid_full() (#1850986)
- rename function (#1850986)
- udev: support AlternativeName= setting in .link file (#1850986)
- network: make Name= in [Match] support alternative names of interfaces (#1850986)
- udev: extend the length of ID_NET_NAME_XXX= to ALTIFNAMSIZ (#1850986)
- udev: do not fail if kernel does not support alternative names (#1850986)
- udev: introduce AlternativeNamesPolicy= setting (#1850986)
- network: set AlternativeNamesPolicy= in 99-default.link (#1850986)
- random-util: call initialize_srand() after fork() (#1850986)
- sd-netlink: introduce rtnl_resolve_link_alternative_names() (#1850986)
- udev: sort alternative names (#1850986)
- netlink: introduce rtnl_get/delete_link_alternative_names() (#1850986)
- netlink: do not fail when new interface name is already used as an alternative name (#1850986)
- udev: do not try to reassign alternative names (#1850986)
- Fix LGTM build (#1850986)
- sd-hwdb: allow empty properties (#1930568)
- Update hwdb (#1930568)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-51.1" date="1638360000">- sd-event: take ref on event loop object before dispatching event sources (#2024903)
- pid1: fix free of uninitialized pointer in unit_fail_if_noncanonical() (#2024903)
- Disable iptables for CI (#2024903)
- test-seccomp: accept ENOSYS from sysctl(2) too (#2024903)
- Disable libpitc to fix CentOS Stream CI (#2024903)
- test: accept that char device 0/0 can now be created witout privileges (#2024903)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-51.2" date="1638532800">- core: return true from cg_is_empty* on ENOENT (#2024903)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-51.3" date="1639137600">- Do not fail if the same alt. name is set again (#2030027)
- meson: avoid bogus meson warning (#2030027)
- meson: do not fail if rsync is not installed with meson 0.57.2 (#2030027)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-51.4" date="1642075200">- mount: don't propagate errors from mount_setup_unit() further up (#2039327)
- test: make TEST-47 less racy (#2039327)
- macro: define HAS_FEATURE_ADDRESS_SANITIZER also on gcc (#2039327)
- tests: add helper function to autodetect CI environments (#2039327)
- strv: rework FOREACH_STRING() macro (#2039327)
- test,systemctl: use "const char*" instead of "char*" (#2039327)
- ci: pass the $GITHUB_ACTIONS variable to the CentOS container (#2039327)
- core: rename unit_{start_limit|condition|assert}_test() to unit_test_xyz() (#2037395)
- core: Check unit start rate limiting earlier (#2037395)
- sd-event: introduce callback invoked when event source ratelimit expires (#2037395)
- core: rename/generalize UNIT(u)-&gt;test_start_limit() hook (#2037395)
- mount: make mount units start jobs not runnable if /p/s/mountinfo ratelimit is in effect (#2037395)
- mount: retrigger run queue after ratelimit expired to run delayed mount start jobs (#2037395)
- pid1: add a manager_trigger_run_queue() helper (#2037395)
- unit: add jobs that were skipped because of ratelimit back to run_queue (#2037395)
- udev/net_id: introduce naming scheme for RHEL-8.5 (#2040244)
- udev/net_id: remove extraneous bracket (#2040244)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-51.5" date="1643112000">- mount: do not update exec deps on mountinfo changes (#2038878)
- core/mount: add implicit unit dependencies even if when mount unit is generated from /proc/self/mountinfo (#2038878)</changelog>
</package>
<package pkgid="617d8b09c72e30774237bf379aeb080d3a7ddf498385d3585182ceac5fc7e8ab" name="systemd-libs-debuginfo" arch="i686">
  <version epoch="0" ver="239" rel="51.el8_5.2"/>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-44" date="1611835200">- ci: PowerTools repo was renamed to powertools in RHEL 8.3 (#1871827)
- ci: use quay.io instead of Docker Hub to avoid rate limits (#1871827)
- ci: move jobs from Travis CI to GH Actions (#1871827)
- unit: make UNIT() cast function deal with NULL pointers (#1871827)
- use link to RHEL-8 docs (#1623116)
- cgroup: Also set blkio.bfq.weight (#1657810)
- units: make sure initrd-cleanup.service terminates before switching to rootfs (#1657810)
- core: reload SELinux label cache on daemon-reload (#1888912)
- selinux: introduce mac_selinux_create_file_prepare_at() (#1888912)
- selinux: add trigger for policy reload to refresh internal selabel cache (#1888912)
- udev/net_id: give RHEL-8.4 naming scheme a name (#1827462)
- basic/stat-util: make mtime check stricter and use entire timestamp (#1642728)
- udev: make algorithm that selects highest priority devlink less susceptible to race conditions (#1642728)
- test: create /dev/null in test-udev.pl (#1642728)
- test: missing "die" (#1642728)
- udev-test: remove a check for whether the test is run in a container (#1642728)
- udev-test: skip the test only if it can't setup its environment (#1642728)
- udev-test: fix test skip condition (#1642728)
- udev-test: fix missing directory test/run (#1642728)
- udev-test: check if permitted to create block device nodes (#1642728)
- test-udev: add a testcase of too long line (#1642728)
- test-udev: use proper semantics for too long line with continuation (#1642728)
- test-udev: add more tests for line continuations and comments (#1642728)
- test-udev: add more tests for line continuation (#1642728)
- test-udev: fix alignment and drop unnecessary white spaces (#1642728)
- test/udev-test.pl: cleanup if skipping test (#1642728)
- test: add test cases for empty string match (#1642728)
- test: add test case for multi matches when use "||" (#1642728)
- udev-test: do not rely on "mail" group being defined (#1642728)
- test/udev-test.pl: allow multiple devices per test (#1642728)
- test/udev-test.pl: create rules only once (#1642728)
- test/udev-test.pl: allow concurrent additions and removals (#1642728)
- test/udev-test.pl: use computed devnode name (#1642728)
- test/udev-test.pl: test correctness of symlink targets (#1642728)
- test/udev-test.pl: allow checking multiple symlinks (#1642728)
- test/udev-test.pl: fix wrong test descriptions (#1642728)
- test/udev-test.pl: last_rule is unsupported (#1642728)
- test/udev-test.pl: Make some tests a little harder (#1642728)
- test/udev-test.pl: remove bogus rules from magic subsys test (#1642728)
- test/udev-test.pl: merge "space and var with space" tests (#1642728)
- test/udev-test.pl: merge import parent tests into one (#1642728)
- test/udev-test.pl: count "good" results (#1642728)
- tests/udev-test.pl: add multiple device test (#1642728)
- test/udev-test.pl: add repeat count (#1642728)
- test/udev-test.pl: generator for large list of block devices (#1642728)
- test/udev-test.pl: suppress umount error message at startup (#1642728)
- test/udev_test.pl: add "expected good" count (#1642728)
- test/udev-test: gracefully exit when imports fail (#1642728)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-45" date="1615464000">- Revert "test: add test cases for empty string match" and "test: add test case for multi matches when use ||" (#1935124)
- test/sys-script.py: add missing DEVNAME entries to uevents (#1935124)
- sd-event: split out helper functions for reshuffling prioqs (#1937315)
- sd-event: split out enable and disable codepaths from sd_event_source_set_enabled() (#1937315)
- sd-event: mention that two debug logged events are ignored (#1937315)
- sd-event: split clock data allocation out of sd_event_add_time() (#1937315)
- sd-event: split out code to add/remove timer event sources to earliest/latest prioq (#1937315)
- sd-event: fix delays assert brain-o (#17790) (#1937315)
- sd-event: let's suffix last_run/last_log with "_usec" (#1937315)
- sd-event: refuse running default event loops in any other thread than the one they are default for (#1937315)
- sd-event: ref event loop while in sd_event_prepare() ot sd_event_run() (#1937315)
- sd-event: follow coding style with naming return parameter (#1937315)
- sd-event: remove earliest_index/latest_index into common part of event source objects (#1937315)
- sd-event: update state at the end in event_source_enable (#1937315)
- sd-event: increase n_enabled_child_sources just once (#1937315)
- sd-event: add ability to ratelimit event sources (#1937315)
- test: add ratelimiting test (#1937315)
- core: prevent excessive /proc/self/mountinfo parsing (#1937315)
- udev: run link_update() with increased retry count in second invocation (#1935124)
- pam-systemd: use secure_getenv() rather than getenv() (#1936866)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-46" date="1621425600">- Revert "udev: run link_update() with increased retry count in second invocation" (#1942299)
- Revert "udev: make algorithm that selects highest priority devlink less susceptible to race conditions" (#1942299)
- test/udev-test.pl: drop test cases that add mutliple devices (#1942299)</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 239-47" date="1622808000">- systemd-binfmt: Add safeguard in triggers (#1787144)
- spec: Requires(post) openssl-libs to fix missing /etc/machine-id (#1947438)
- spec: Go back to using systemctl preset-all in post (#1783263, #1647172, #1118740)
- spec: Disable libiptc support (#1817265)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-48" date="1624536000">- cgroup: Also set io.bfq.weight (#1927290)
- seccomp: allow turning off of seccomp filtering via env var (#1916835)
- meson: remove strange dep that causes meson to enter infinite loop (#1970860)
- copy: handle copy_file_range() weirdness on procfs/sysfs (#1970860)
- core: Hide "Deactivated successfully" message (#1954802)
- util: rework in_initrd() to make use of path_is_temporary_fs() (#1959339)
- initrd: extend SYSTEMD_IN_INITRD to accept non-ramfs rootfs (#1959339)
- initrd: do a debug log if failed to detect rootfs type (#1959339)
- initrd: do a debug log if /etc/initrd-release doesn't take effect (#1959339)
- units: assign user-runtime-dir@.service to user-%i.slice (#1946453)
- units: order user-runtime-dir@.service after systemd-user-sessions.service (#1946453)
- units: make sure user-runtime-dir@.service is Type=oneshot (#1946453)
- user-runtime-dir: downgrade a few log messages to LOG_DEBUG that we ignore (#1946453)
- shared/install: Preserve escape characters for escaped unit names (#1952686)
- basic/virt: Detect PowerVM hypervisor (#1937989)
- man: document differences in clean exit status for Type=oneshot (#1940078)
- busctl: add a timestamp to the output of the busctl monitor command (#1909214)
- basic/cap-list: parse/print numerical capabilities (#1946943)
- shared/mount-util: convert to libmount (#1885143)
- mount-util: bind_remount: avoid calling statvfs (#1885143)
- mount-util: use UMOUNT_NOFOLLOW in recursive umounter (#1885143)
- test-install-root: create referenced targets (#1835351)
- install: warn if WantedBy targets don't exist (#1835351)
- test-install-root: add test for unknown WantedBy= target (#1835351)
- ceph is a network filesystem (#1952013)
- sysctl: set kernel.core_pipe_limit=16 (#1949729)
- core: don't drop timer expired but not yet processed when system date is changed (#1899402)
- core: Detect initial timer state from serialized data (#1899402)
- rc-local: order after network-online.target (#1934028)
- set core ulimit to 0 like on RHEL-7 (#1905582)
- test-mountpointutil-util: do not assert in test_mnt_id() (#1910425)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-49" date="1627041600">- remove a left-over break (#1970860)
- basic/unit-name: do not use strdupa() on a path (#1974700)
- sd-event: change ordering of pending/ratelimited events (#1968528)
- sd-event: drop unnecessary "else" (#1968528)
- sd-event: use CMP() macro (#1968528)
- sd-event: use usec_add() (#1968528)
- sd-event: make event_source_time_prioq_reshuffle() accept all event source type (#1968528)
- sd-event: always reshuffle time prioq on changing online/offline state (#1968528)
- ci: run unit tests on z-stream branches as well (#1970860)
- ci: drop forgotten Travis references (#1934504)
- ci: run unit tests on CentOS 8 Stream as well (#1934504)
- ci: add missing test dependencies (#1934504)
- meson: bump timeout for test-udev to 180s (#1934504)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-50" date="1630065600">- Added option --check-inhibitors for non-tty usage (#1269726)
- logind: Introduce RebootWithFlags and others (#1269726)
- logind: add …WithFlags methods to policy (#1269726)
- logind: simplify flags handling a bit (#1269726)
- Update link to RHEL documentation (#1982584)
- Set default core ulimit to 0, but keep the hard limit ulimited (#1905582)
- shared/seccomp-util: address family filtering is broken on ppc (#1982650)
- logind: rework Seat/Session/User object allocation and freeing a bit (#1642460)
- logind: fix serialization/deserialization of user's "display session" (#1642460)
- logind: turn of stdio locking when writing session files too (#1642460)
- units: set StopWhenUnneeded= for the user slice units too (#1642460)
- units: improve Description= string a bit (#1642460)
- logind: improve logging in manager_connect_console() (#1642460)
- logind: save/restore User object's "stopping" field during restarts (#1642460)
- logind: correct bad clean-up path (#1642460)
- logind: fix bad error propagation (#1642460)
- logind: never elect a session that is stopping as display (#1642460)
- logind: introduce little helper that checks whether a session is ready (#1642460)
- logind: propagate session stop errors (#1642460)
- logind: rework how we manage the slice and user-runtime-dir@.service unit for each user (#1642460)
- logind: optionally, keep the user@.service instance for eached logged in user around for a while (#1642460)
- logind: add a RequiresMountsFor= dependency from the session scope unit to the home directory of the user (#1642460)
- logind: improve error propagation of user_check_linger_file() (#1642460)
- logind: automatically GC lingering users for who now user@.service (nor slice, not runtime dir service) is running anymore (#1642460)
- pam_systemd: simplify code which with we set environment variables (#1642460)
- logind: validate /run/user/1000 before we set it (#1642460)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-51" date="1632398400">- define newly needed constants (#1850986)
- sd-netlink: support IFLA_PROP_LIST and IFLA_ALT_IFNAME attributes (#1850986)
- sd-netlink: introduce sd_netlink_message_read_strv() (#1850986)
- sd-netlink: introduce sd_netlink_message_append_strv() (#1850986)
- test: add a test for sd_netlink_message_{append,read}_strv() (#1850986)
- util: introduce ifname_valid_full() (#1850986)
- rename function (#1850986)
- udev: support AlternativeName= setting in .link file (#1850986)
- network: make Name= in [Match] support alternative names of interfaces (#1850986)
- udev: extend the length of ID_NET_NAME_XXX= to ALTIFNAMSIZ (#1850986)
- udev: do not fail if kernel does not support alternative names (#1850986)
- udev: introduce AlternativeNamesPolicy= setting (#1850986)
- network: set AlternativeNamesPolicy= in 99-default.link (#1850986)
- random-util: call initialize_srand() after fork() (#1850986)
- sd-netlink: introduce rtnl_resolve_link_alternative_names() (#1850986)
- udev: sort alternative names (#1850986)
- netlink: introduce rtnl_get/delete_link_alternative_names() (#1850986)
- netlink: do not fail when new interface name is already used as an alternative name (#1850986)
- udev: do not try to reassign alternative names (#1850986)
- Fix LGTM build (#1850986)
- sd-hwdb: allow empty properties (#1930568)
- Update hwdb (#1930568)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-51.1" date="1638360000">- sd-event: take ref on event loop object before dispatching event sources (#2024903)
- pid1: fix free of uninitialized pointer in unit_fail_if_noncanonical() (#2024903)
- Disable iptables for CI (#2024903)
- test-seccomp: accept ENOSYS from sysctl(2) too (#2024903)
- Disable libpitc to fix CentOS Stream CI (#2024903)
- test: accept that char device 0/0 can now be created witout privileges (#2024903)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-51.2" date="1638532800">- core: return true from cg_is_empty* on ENOENT (#2024903)</changelog>
</package>
<package pkgid="284b0490846e3f9fb2b32854797a3eea2d9762b526ce25849270fda4381dcb7e" name="systemd-libs-debuginfo" arch="x86_64">
  <version epoch="0" ver="239" rel="51.el8_5.2"/>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-44" date="1611835200">- ci: PowerTools repo was renamed to powertools in RHEL 8.3 (#1871827)
- ci: use quay.io instead of Docker Hub to avoid rate limits (#1871827)
- ci: move jobs from Travis CI to GH Actions (#1871827)
- unit: make UNIT() cast function deal with NULL pointers (#1871827)
- use link to RHEL-8 docs (#1623116)
- cgroup: Also set blkio.bfq.weight (#1657810)
- units: make sure initrd-cleanup.service terminates before switching to rootfs (#1657810)
- core: reload SELinux label cache on daemon-reload (#1888912)
- selinux: introduce mac_selinux_create_file_prepare_at() (#1888912)
- selinux: add trigger for policy reload to refresh internal selabel cache (#1888912)
- udev/net_id: give RHEL-8.4 naming scheme a name (#1827462)
- basic/stat-util: make mtime check stricter and use entire timestamp (#1642728)
- udev: make algorithm that selects highest priority devlink less susceptible to race conditions (#1642728)
- test: create /dev/null in test-udev.pl (#1642728)
- test: missing "die" (#1642728)
- udev-test: remove a check for whether the test is run in a container (#1642728)
- udev-test: skip the test only if it can't setup its environment (#1642728)
- udev-test: fix test skip condition (#1642728)
- udev-test: fix missing directory test/run (#1642728)
- udev-test: check if permitted to create block device nodes (#1642728)
- test-udev: add a testcase of too long line (#1642728)
- test-udev: use proper semantics for too long line with continuation (#1642728)
- test-udev: add more tests for line continuations and comments (#1642728)
- test-udev: add more tests for line continuation (#1642728)
- test-udev: fix alignment and drop unnecessary white spaces (#1642728)
- test/udev-test.pl: cleanup if skipping test (#1642728)
- test: add test cases for empty string match (#1642728)
- test: add test case for multi matches when use "||" (#1642728)
- udev-test: do not rely on "mail" group being defined (#1642728)
- test/udev-test.pl: allow multiple devices per test (#1642728)
- test/udev-test.pl: create rules only once (#1642728)
- test/udev-test.pl: allow concurrent additions and removals (#1642728)
- test/udev-test.pl: use computed devnode name (#1642728)
- test/udev-test.pl: test correctness of symlink targets (#1642728)
- test/udev-test.pl: allow checking multiple symlinks (#1642728)
- test/udev-test.pl: fix wrong test descriptions (#1642728)
- test/udev-test.pl: last_rule is unsupported (#1642728)
- test/udev-test.pl: Make some tests a little harder (#1642728)
- test/udev-test.pl: remove bogus rules from magic subsys test (#1642728)
- test/udev-test.pl: merge "space and var with space" tests (#1642728)
- test/udev-test.pl: merge import parent tests into one (#1642728)
- test/udev-test.pl: count "good" results (#1642728)
- tests/udev-test.pl: add multiple device test (#1642728)
- test/udev-test.pl: add repeat count (#1642728)
- test/udev-test.pl: generator for large list of block devices (#1642728)
- test/udev-test.pl: suppress umount error message at startup (#1642728)
- test/udev_test.pl: add "expected good" count (#1642728)
- test/udev-test: gracefully exit when imports fail (#1642728)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-45" date="1615464000">- Revert "test: add test cases for empty string match" and "test: add test case for multi matches when use ||" (#1935124)
- test/sys-script.py: add missing DEVNAME entries to uevents (#1935124)
- sd-event: split out helper functions for reshuffling prioqs (#1937315)
- sd-event: split out enable and disable codepaths from sd_event_source_set_enabled() (#1937315)
- sd-event: mention that two debug logged events are ignored (#1937315)
- sd-event: split clock data allocation out of sd_event_add_time() (#1937315)
- sd-event: split out code to add/remove timer event sources to earliest/latest prioq (#1937315)
- sd-event: fix delays assert brain-o (#17790) (#1937315)
- sd-event: let's suffix last_run/last_log with "_usec" (#1937315)
- sd-event: refuse running default event loops in any other thread than the one they are default for (#1937315)
- sd-event: ref event loop while in sd_event_prepare() ot sd_event_run() (#1937315)
- sd-event: follow coding style with naming return parameter (#1937315)
- sd-event: remove earliest_index/latest_index into common part of event source objects (#1937315)
- sd-event: update state at the end in event_source_enable (#1937315)
- sd-event: increase n_enabled_child_sources just once (#1937315)
- sd-event: add ability to ratelimit event sources (#1937315)
- test: add ratelimiting test (#1937315)
- core: prevent excessive /proc/self/mountinfo parsing (#1937315)
- udev: run link_update() with increased retry count in second invocation (#1935124)
- pam-systemd: use secure_getenv() rather than getenv() (#1936866)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-46" date="1621425600">- Revert "udev: run link_update() with increased retry count in second invocation" (#1942299)
- Revert "udev: make algorithm that selects highest priority devlink less susceptible to race conditions" (#1942299)
- test/udev-test.pl: drop test cases that add mutliple devices (#1942299)</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 239-47" date="1622808000">- systemd-binfmt: Add safeguard in triggers (#1787144)
- spec: Requires(post) openssl-libs to fix missing /etc/machine-id (#1947438)
- spec: Go back to using systemctl preset-all in post (#1783263, #1647172, #1118740)
- spec: Disable libiptc support (#1817265)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-48" date="1624536000">- cgroup: Also set io.bfq.weight (#1927290)
- seccomp: allow turning off of seccomp filtering via env var (#1916835)
- meson: remove strange dep that causes meson to enter infinite loop (#1970860)
- copy: handle copy_file_range() weirdness on procfs/sysfs (#1970860)
- core: Hide "Deactivated successfully" message (#1954802)
- util: rework in_initrd() to make use of path_is_temporary_fs() (#1959339)
- initrd: extend SYSTEMD_IN_INITRD to accept non-ramfs rootfs (#1959339)
- initrd: do a debug log if failed to detect rootfs type (#1959339)
- initrd: do a debug log if /etc/initrd-release doesn't take effect (#1959339)
- units: assign user-runtime-dir@.service to user-%i.slice (#1946453)
- units: order user-runtime-dir@.service after systemd-user-sessions.service (#1946453)
- units: make sure user-runtime-dir@.service is Type=oneshot (#1946453)
- user-runtime-dir: downgrade a few log messages to LOG_DEBUG that we ignore (#1946453)
- shared/install: Preserve escape characters for escaped unit names (#1952686)
- basic/virt: Detect PowerVM hypervisor (#1937989)
- man: document differences in clean exit status for Type=oneshot (#1940078)
- busctl: add a timestamp to the output of the busctl monitor command (#1909214)
- basic/cap-list: parse/print numerical capabilities (#1946943)
- shared/mount-util: convert to libmount (#1885143)
- mount-util: bind_remount: avoid calling statvfs (#1885143)
- mount-util: use UMOUNT_NOFOLLOW in recursive umounter (#1885143)
- test-install-root: create referenced targets (#1835351)
- install: warn if WantedBy targets don't exist (#1835351)
- test-install-root: add test for unknown WantedBy= target (#1835351)
- ceph is a network filesystem (#1952013)
- sysctl: set kernel.core_pipe_limit=16 (#1949729)
- core: don't drop timer expired but not yet processed when system date is changed (#1899402)
- core: Detect initial timer state from serialized data (#1899402)
- rc-local: order after network-online.target (#1934028)
- set core ulimit to 0 like on RHEL-7 (#1905582)
- test-mountpointutil-util: do not assert in test_mnt_id() (#1910425)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-49" date="1627041600">- remove a left-over break (#1970860)
- basic/unit-name: do not use strdupa() on a path (#1974700)
- sd-event: change ordering of pending/ratelimited events (#1968528)
- sd-event: drop unnecessary "else" (#1968528)
- sd-event: use CMP() macro (#1968528)
- sd-event: use usec_add() (#1968528)
- sd-event: make event_source_time_prioq_reshuffle() accept all event source type (#1968528)
- sd-event: always reshuffle time prioq on changing online/offline state (#1968528)
- ci: run unit tests on z-stream branches as well (#1970860)
- ci: drop forgotten Travis references (#1934504)
- ci: run unit tests on CentOS 8 Stream as well (#1934504)
- ci: add missing test dependencies (#1934504)
- meson: bump timeout for test-udev to 180s (#1934504)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-50" date="1630065600">- Added option --check-inhibitors for non-tty usage (#1269726)
- logind: Introduce RebootWithFlags and others (#1269726)
- logind: add …WithFlags methods to policy (#1269726)
- logind: simplify flags handling a bit (#1269726)
- Update link to RHEL documentation (#1982584)
- Set default core ulimit to 0, but keep the hard limit ulimited (#1905582)
- shared/seccomp-util: address family filtering is broken on ppc (#1982650)
- logind: rework Seat/Session/User object allocation and freeing a bit (#1642460)
- logind: fix serialization/deserialization of user's "display session" (#1642460)
- logind: turn of stdio locking when writing session files too (#1642460)
- units: set StopWhenUnneeded= for the user slice units too (#1642460)
- units: improve Description= string a bit (#1642460)
- logind: improve logging in manager_connect_console() (#1642460)
- logind: save/restore User object's "stopping" field during restarts (#1642460)
- logind: correct bad clean-up path (#1642460)
- logind: fix bad error propagation (#1642460)
- logind: never elect a session that is stopping as display (#1642460)
- logind: introduce little helper that checks whether a session is ready (#1642460)
- logind: propagate session stop errors (#1642460)
- logind: rework how we manage the slice and user-runtime-dir@.service unit for each user (#1642460)
- logind: optionally, keep the user@.service instance for eached logged in user around for a while (#1642460)
- logind: add a RequiresMountsFor= dependency from the session scope unit to the home directory of the user (#1642460)
- logind: improve error propagation of user_check_linger_file() (#1642460)
- logind: automatically GC lingering users for who now user@.service (nor slice, not runtime dir service) is running anymore (#1642460)
- pam_systemd: simplify code which with we set environment variables (#1642460)
- logind: validate /run/user/1000 before we set it (#1642460)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-51" date="1632398400">- define newly needed constants (#1850986)
- sd-netlink: support IFLA_PROP_LIST and IFLA_ALT_IFNAME attributes (#1850986)
- sd-netlink: introduce sd_netlink_message_read_strv() (#1850986)
- sd-netlink: introduce sd_netlink_message_append_strv() (#1850986)
- test: add a test for sd_netlink_message_{append,read}_strv() (#1850986)
- util: introduce ifname_valid_full() (#1850986)
- rename function (#1850986)
- udev: support AlternativeName= setting in .link file (#1850986)
- network: make Name= in [Match] support alternative names of interfaces (#1850986)
- udev: extend the length of ID_NET_NAME_XXX= to ALTIFNAMSIZ (#1850986)
- udev: do not fail if kernel does not support alternative names (#1850986)
- udev: introduce AlternativeNamesPolicy= setting (#1850986)
- network: set AlternativeNamesPolicy= in 99-default.link (#1850986)
- random-util: call initialize_srand() after fork() (#1850986)
- sd-netlink: introduce rtnl_resolve_link_alternative_names() (#1850986)
- udev: sort alternative names (#1850986)
- netlink: introduce rtnl_get/delete_link_alternative_names() (#1850986)
- netlink: do not fail when new interface name is already used as an alternative name (#1850986)
- udev: do not try to reassign alternative names (#1850986)
- Fix LGTM build (#1850986)
- sd-hwdb: allow empty properties (#1930568)
- Update hwdb (#1930568)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-51.1" date="1638360000">- sd-event: take ref on event loop object before dispatching event sources (#2024903)
- pid1: fix free of uninitialized pointer in unit_fail_if_noncanonical() (#2024903)
- Disable iptables for CI (#2024903)
- test-seccomp: accept ENOSYS from sysctl(2) too (#2024903)
- Disable libpitc to fix CentOS Stream CI (#2024903)
- test: accept that char device 0/0 can now be created witout privileges (#2024903)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-51.2" date="1638532800">- core: return true from cg_is_empty* on ENOENT (#2024903)</changelog>
</package>
<package pkgid="b101ce14f19c279ade9fa59dcd54e1cbe583aeaa9a27a0675cf6eb1f8cea701a" name="systemd-libs-debuginfo" arch="i686">
  <version epoch="0" ver="239" rel="51.el8_5.3"/>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-45" date="1615464000">- Revert "test: add test cases for empty string match" and "test: add test case for multi matches when use ||" (#1935124)
- test/sys-script.py: add missing DEVNAME entries to uevents (#1935124)
- sd-event: split out helper functions for reshuffling prioqs (#1937315)
- sd-event: split out enable and disable codepaths from sd_event_source_set_enabled() (#1937315)
- sd-event: mention that two debug logged events are ignored (#1937315)
- sd-event: split clock data allocation out of sd_event_add_time() (#1937315)
- sd-event: split out code to add/remove timer event sources to earliest/latest prioq (#1937315)
- sd-event: fix delays assert brain-o (#17790) (#1937315)
- sd-event: let's suffix last_run/last_log with "_usec" (#1937315)
- sd-event: refuse running default event loops in any other thread than the one they are default for (#1937315)
- sd-event: ref event loop while in sd_event_prepare() ot sd_event_run() (#1937315)
- sd-event: follow coding style with naming return parameter (#1937315)
- sd-event: remove earliest_index/latest_index into common part of event source objects (#1937315)
- sd-event: update state at the end in event_source_enable (#1937315)
- sd-event: increase n_enabled_child_sources just once (#1937315)
- sd-event: add ability to ratelimit event sources (#1937315)
- test: add ratelimiting test (#1937315)
- core: prevent excessive /proc/self/mountinfo parsing (#1937315)
- udev: run link_update() with increased retry count in second invocation (#1935124)
- pam-systemd: use secure_getenv() rather than getenv() (#1936866)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-46" date="1621425600">- Revert "udev: run link_update() with increased retry count in second invocation" (#1942299)
- Revert "udev: make algorithm that selects highest priority devlink less susceptible to race conditions" (#1942299)
- test/udev-test.pl: drop test cases that add mutliple devices (#1942299)</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 239-47" date="1622808000">- systemd-binfmt: Add safeguard in triggers (#1787144)
- spec: Requires(post) openssl-libs to fix missing /etc/machine-id (#1947438)
- spec: Go back to using systemctl preset-all in post (#1783263, #1647172, #1118740)
- spec: Disable libiptc support (#1817265)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-48" date="1624536000">- cgroup: Also set io.bfq.weight (#1927290)
- seccomp: allow turning off of seccomp filtering via env var (#1916835)
- meson: remove strange dep that causes meson to enter infinite loop (#1970860)
- copy: handle copy_file_range() weirdness on procfs/sysfs (#1970860)
- core: Hide "Deactivated successfully" message (#1954802)
- util: rework in_initrd() to make use of path_is_temporary_fs() (#1959339)
- initrd: extend SYSTEMD_IN_INITRD to accept non-ramfs rootfs (#1959339)
- initrd: do a debug log if failed to detect rootfs type (#1959339)
- initrd: do a debug log if /etc/initrd-release doesn't take effect (#1959339)
- units: assign user-runtime-dir@.service to user-%i.slice (#1946453)
- units: order user-runtime-dir@.service after systemd-user-sessions.service (#1946453)
- units: make sure user-runtime-dir@.service is Type=oneshot (#1946453)
- user-runtime-dir: downgrade a few log messages to LOG_DEBUG that we ignore (#1946453)
- shared/install: Preserve escape characters for escaped unit names (#1952686)
- basic/virt: Detect PowerVM hypervisor (#1937989)
- man: document differences in clean exit status for Type=oneshot (#1940078)
- busctl: add a timestamp to the output of the busctl monitor command (#1909214)
- basic/cap-list: parse/print numerical capabilities (#1946943)
- shared/mount-util: convert to libmount (#1885143)
- mount-util: bind_remount: avoid calling statvfs (#1885143)
- mount-util: use UMOUNT_NOFOLLOW in recursive umounter (#1885143)
- test-install-root: create referenced targets (#1835351)
- install: warn if WantedBy targets don't exist (#1835351)
- test-install-root: add test for unknown WantedBy= target (#1835351)
- ceph is a network filesystem (#1952013)
- sysctl: set kernel.core_pipe_limit=16 (#1949729)
- core: don't drop timer expired but not yet processed when system date is changed (#1899402)
- core: Detect initial timer state from serialized data (#1899402)
- rc-local: order after network-online.target (#1934028)
- set core ulimit to 0 like on RHEL-7 (#1905582)
- test-mountpointutil-util: do not assert in test_mnt_id() (#1910425)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-49" date="1627041600">- remove a left-over break (#1970860)
- basic/unit-name: do not use strdupa() on a path (#1974700)
- sd-event: change ordering of pending/ratelimited events (#1968528)
- sd-event: drop unnecessary "else" (#1968528)
- sd-event: use CMP() macro (#1968528)
- sd-event: use usec_add() (#1968528)
- sd-event: make event_source_time_prioq_reshuffle() accept all event source type (#1968528)
- sd-event: always reshuffle time prioq on changing online/offline state (#1968528)
- ci: run unit tests on z-stream branches as well (#1970860)
- ci: drop forgotten Travis references (#1934504)
- ci: run unit tests on CentOS 8 Stream as well (#1934504)
- ci: add missing test dependencies (#1934504)
- meson: bump timeout for test-udev to 180s (#1934504)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-50" date="1630065600">- Added option --check-inhibitors for non-tty usage (#1269726)
- logind: Introduce RebootWithFlags and others (#1269726)
- logind: add …WithFlags methods to policy (#1269726)
- logind: simplify flags handling a bit (#1269726)
- Update link to RHEL documentation (#1982584)
- Set default core ulimit to 0, but keep the hard limit ulimited (#1905582)
- shared/seccomp-util: address family filtering is broken on ppc (#1982650)
- logind: rework Seat/Session/User object allocation and freeing a bit (#1642460)
- logind: fix serialization/deserialization of user's "display session" (#1642460)
- logind: turn of stdio locking when writing session files too (#1642460)
- units: set StopWhenUnneeded= for the user slice units too (#1642460)
- units: improve Description= string a bit (#1642460)
- logind: improve logging in manager_connect_console() (#1642460)
- logind: save/restore User object's "stopping" field during restarts (#1642460)
- logind: correct bad clean-up path (#1642460)
- logind: fix bad error propagation (#1642460)
- logind: never elect a session that is stopping as display (#1642460)
- logind: introduce little helper that checks whether a session is ready (#1642460)
- logind: propagate session stop errors (#1642460)
- logind: rework how we manage the slice and user-runtime-dir@.service unit for each user (#1642460)
- logind: optionally, keep the user@.service instance for eached logged in user around for a while (#1642460)
- logind: add a RequiresMountsFor= dependency from the session scope unit to the home directory of the user (#1642460)
- logind: improve error propagation of user_check_linger_file() (#1642460)
- logind: automatically GC lingering users for who now user@.service (nor slice, not runtime dir service) is running anymore (#1642460)
- pam_systemd: simplify code which with we set environment variables (#1642460)
- logind: validate /run/user/1000 before we set it (#1642460)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-51" date="1632398400">- define newly needed constants (#1850986)
- sd-netlink: support IFLA_PROP_LIST and IFLA_ALT_IFNAME attributes (#1850986)
- sd-netlink: introduce sd_netlink_message_read_strv() (#1850986)
- sd-netlink: introduce sd_netlink_message_append_strv() (#1850986)
- test: add a test for sd_netlink_message_{append,read}_strv() (#1850986)
- util: introduce ifname_valid_full() (#1850986)
- rename function (#1850986)
- udev: support AlternativeName= setting in .link file (#1850986)
- network: make Name= in [Match] support alternative names of interfaces (#1850986)
- udev: extend the length of ID_NET_NAME_XXX= to ALTIFNAMSIZ (#1850986)
- udev: do not fail if kernel does not support alternative names (#1850986)
- udev: introduce AlternativeNamesPolicy= setting (#1850986)
- network: set AlternativeNamesPolicy= in 99-default.link (#1850986)
- random-util: call initialize_srand() after fork() (#1850986)
- sd-netlink: introduce rtnl_resolve_link_alternative_names() (#1850986)
- udev: sort alternative names (#1850986)
- netlink: introduce rtnl_get/delete_link_alternative_names() (#1850986)
- netlink: do not fail when new interface name is already used as an alternative name (#1850986)
- udev: do not try to reassign alternative names (#1850986)
- Fix LGTM build (#1850986)
- sd-hwdb: allow empty properties (#1930568)
- Update hwdb (#1930568)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-51.1" date="1638360000">- sd-event: take ref on event loop object before dispatching event sources (#2024903)
- pid1: fix free of uninitialized pointer in unit_fail_if_noncanonical() (#2024903)
- Disable iptables for CI (#2024903)
- test-seccomp: accept ENOSYS from sysctl(2) too (#2024903)
- Disable libpitc to fix CentOS Stream CI (#2024903)
- test: accept that char device 0/0 can now be created witout privileges (#2024903)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-51.2" date="1638532800">- core: return true from cg_is_empty* on ENOENT (#2024903)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-51.3" date="1639137600">- Do not fail if the same alt. name is set again (#2030027)
- meson: avoid bogus meson warning (#2030027)
- meson: do not fail if rsync is not installed with meson 0.57.2 (#2030027)</changelog>
</package>
<package pkgid="fd29fa818b825aa087fdd4808e04dc408882ddbd8fbae373574e25cd48be6a39" name="systemd-libs-debuginfo" arch="x86_64">
  <version epoch="0" ver="239" rel="51.el8_5.3"/>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-45" date="1615464000">- Revert "test: add test cases for empty string match" and "test: add test case for multi matches when use ||" (#1935124)
- test/sys-script.py: add missing DEVNAME entries to uevents (#1935124)
- sd-event: split out helper functions for reshuffling prioqs (#1937315)
- sd-event: split out enable and disable codepaths from sd_event_source_set_enabled() (#1937315)
- sd-event: mention that two debug logged events are ignored (#1937315)
- sd-event: split clock data allocation out of sd_event_add_time() (#1937315)
- sd-event: split out code to add/remove timer event sources to earliest/latest prioq (#1937315)
- sd-event: fix delays assert brain-o (#17790) (#1937315)
- sd-event: let's suffix last_run/last_log with "_usec" (#1937315)
- sd-event: refuse running default event loops in any other thread than the one they are default for (#1937315)
- sd-event: ref event loop while in sd_event_prepare() ot sd_event_run() (#1937315)
- sd-event: follow coding style with naming return parameter (#1937315)
- sd-event: remove earliest_index/latest_index into common part of event source objects (#1937315)
- sd-event: update state at the end in event_source_enable (#1937315)
- sd-event: increase n_enabled_child_sources just once (#1937315)
- sd-event: add ability to ratelimit event sources (#1937315)
- test: add ratelimiting test (#1937315)
- core: prevent excessive /proc/self/mountinfo parsing (#1937315)
- udev: run link_update() with increased retry count in second invocation (#1935124)
- pam-systemd: use secure_getenv() rather than getenv() (#1936866)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-46" date="1621425600">- Revert "udev: run link_update() with increased retry count in second invocation" (#1942299)
- Revert "udev: make algorithm that selects highest priority devlink less susceptible to race conditions" (#1942299)
- test/udev-test.pl: drop test cases that add mutliple devices (#1942299)</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 239-47" date="1622808000">- systemd-binfmt: Add safeguard in triggers (#1787144)
- spec: Requires(post) openssl-libs to fix missing /etc/machine-id (#1947438)
- spec: Go back to using systemctl preset-all in post (#1783263, #1647172, #1118740)
- spec: Disable libiptc support (#1817265)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-48" date="1624536000">- cgroup: Also set io.bfq.weight (#1927290)
- seccomp: allow turning off of seccomp filtering via env var (#1916835)
- meson: remove strange dep that causes meson to enter infinite loop (#1970860)
- copy: handle copy_file_range() weirdness on procfs/sysfs (#1970860)
- core: Hide "Deactivated successfully" message (#1954802)
- util: rework in_initrd() to make use of path_is_temporary_fs() (#1959339)
- initrd: extend SYSTEMD_IN_INITRD to accept non-ramfs rootfs (#1959339)
- initrd: do a debug log if failed to detect rootfs type (#1959339)
- initrd: do a debug log if /etc/initrd-release doesn't take effect (#1959339)
- units: assign user-runtime-dir@.service to user-%i.slice (#1946453)
- units: order user-runtime-dir@.service after systemd-user-sessions.service (#1946453)
- units: make sure user-runtime-dir@.service is Type=oneshot (#1946453)
- user-runtime-dir: downgrade a few log messages to LOG_DEBUG that we ignore (#1946453)
- shared/install: Preserve escape characters for escaped unit names (#1952686)
- basic/virt: Detect PowerVM hypervisor (#1937989)
- man: document differences in clean exit status for Type=oneshot (#1940078)
- busctl: add a timestamp to the output of the busctl monitor command (#1909214)
- basic/cap-list: parse/print numerical capabilities (#1946943)
- shared/mount-util: convert to libmount (#1885143)
- mount-util: bind_remount: avoid calling statvfs (#1885143)
- mount-util: use UMOUNT_NOFOLLOW in recursive umounter (#1885143)
- test-install-root: create referenced targets (#1835351)
- install: warn if WantedBy targets don't exist (#1835351)
- test-install-root: add test for unknown WantedBy= target (#1835351)
- ceph is a network filesystem (#1952013)
- sysctl: set kernel.core_pipe_limit=16 (#1949729)
- core: don't drop timer expired but not yet processed when system date is changed (#1899402)
- core: Detect initial timer state from serialized data (#1899402)
- rc-local: order after network-online.target (#1934028)
- set core ulimit to 0 like on RHEL-7 (#1905582)
- test-mountpointutil-util: do not assert in test_mnt_id() (#1910425)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-49" date="1627041600">- remove a left-over break (#1970860)
- basic/unit-name: do not use strdupa() on a path (#1974700)
- sd-event: change ordering of pending/ratelimited events (#1968528)
- sd-event: drop unnecessary "else" (#1968528)
- sd-event: use CMP() macro (#1968528)
- sd-event: use usec_add() (#1968528)
- sd-event: make event_source_time_prioq_reshuffle() accept all event source type (#1968528)
- sd-event: always reshuffle time prioq on changing online/offline state (#1968528)
- ci: run unit tests on z-stream branches as well (#1970860)
- ci: drop forgotten Travis references (#1934504)
- ci: run unit tests on CentOS 8 Stream as well (#1934504)
- ci: add missing test dependencies (#1934504)
- meson: bump timeout for test-udev to 180s (#1934504)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-50" date="1630065600">- Added option --check-inhibitors for non-tty usage (#1269726)
- logind: Introduce RebootWithFlags and others (#1269726)
- logind: add …WithFlags methods to policy (#1269726)
- logind: simplify flags handling a bit (#1269726)
- Update link to RHEL documentation (#1982584)
- Set default core ulimit to 0, but keep the hard limit ulimited (#1905582)
- shared/seccomp-util: address family filtering is broken on ppc (#1982650)
- logind: rework Seat/Session/User object allocation and freeing a bit (#1642460)
- logind: fix serialization/deserialization of user's "display session" (#1642460)
- logind: turn of stdio locking when writing session files too (#1642460)
- units: set StopWhenUnneeded= for the user slice units too (#1642460)
- units: improve Description= string a bit (#1642460)
- logind: improve logging in manager_connect_console() (#1642460)
- logind: save/restore User object's "stopping" field during restarts (#1642460)
- logind: correct bad clean-up path (#1642460)
- logind: fix bad error propagation (#1642460)
- logind: never elect a session that is stopping as display (#1642460)
- logind: introduce little helper that checks whether a session is ready (#1642460)
- logind: propagate session stop errors (#1642460)
- logind: rework how we manage the slice and user-runtime-dir@.service unit for each user (#1642460)
- logind: optionally, keep the user@.service instance for eached logged in user around for a while (#1642460)
- logind: add a RequiresMountsFor= dependency from the session scope unit to the home directory of the user (#1642460)
- logind: improve error propagation of user_check_linger_file() (#1642460)
- logind: automatically GC lingering users for who now user@.service (nor slice, not runtime dir service) is running anymore (#1642460)
- pam_systemd: simplify code which with we set environment variables (#1642460)
- logind: validate /run/user/1000 before we set it (#1642460)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-51" date="1632398400">- define newly needed constants (#1850986)
- sd-netlink: support IFLA_PROP_LIST and IFLA_ALT_IFNAME attributes (#1850986)
- sd-netlink: introduce sd_netlink_message_read_strv() (#1850986)
- sd-netlink: introduce sd_netlink_message_append_strv() (#1850986)
- test: add a test for sd_netlink_message_{append,read}_strv() (#1850986)
- util: introduce ifname_valid_full() (#1850986)
- rename function (#1850986)
- udev: support AlternativeName= setting in .link file (#1850986)
- network: make Name= in [Match] support alternative names of interfaces (#1850986)
- udev: extend the length of ID_NET_NAME_XXX= to ALTIFNAMSIZ (#1850986)
- udev: do not fail if kernel does not support alternative names (#1850986)
- udev: introduce AlternativeNamesPolicy= setting (#1850986)
- network: set AlternativeNamesPolicy= in 99-default.link (#1850986)
- random-util: call initialize_srand() after fork() (#1850986)
- sd-netlink: introduce rtnl_resolve_link_alternative_names() (#1850986)
- udev: sort alternative names (#1850986)
- netlink: introduce rtnl_get/delete_link_alternative_names() (#1850986)
- netlink: do not fail when new interface name is already used as an alternative name (#1850986)
- udev: do not try to reassign alternative names (#1850986)
- Fix LGTM build (#1850986)
- sd-hwdb: allow empty properties (#1930568)
- Update hwdb (#1930568)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-51.1" date="1638360000">- sd-event: take ref on event loop object before dispatching event sources (#2024903)
- pid1: fix free of uninitialized pointer in unit_fail_if_noncanonical() (#2024903)
- Disable iptables for CI (#2024903)
- test-seccomp: accept ENOSYS from sysctl(2) too (#2024903)
- Disable libpitc to fix CentOS Stream CI (#2024903)
- test: accept that char device 0/0 can now be created witout privileges (#2024903)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-51.2" date="1638532800">- core: return true from cg_is_empty* on ENOENT (#2024903)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-51.3" date="1639137600">- Do not fail if the same alt. name is set again (#2030027)
- meson: avoid bogus meson warning (#2030027)
- meson: do not fail if rsync is not installed with meson 0.57.2 (#2030027)</changelog>
</package>
<package pkgid="0dfa924b779ff6b47274f2eec5913dbe2b7e7a2444cef80aa4b7e0f7e818770d" name="systemd-libs-debuginfo" arch="i686">
  <version epoch="0" ver="239" rel="51.el8_5.5"/>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 239-47" date="1622808000">- systemd-binfmt: Add safeguard in triggers (#1787144)
- spec: Requires(post) openssl-libs to fix missing /etc/machine-id (#1947438)
- spec: Go back to using systemctl preset-all in post (#1783263, #1647172, #1118740)
- spec: Disable libiptc support (#1817265)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-48" date="1624536000">- cgroup: Also set io.bfq.weight (#1927290)
- seccomp: allow turning off of seccomp filtering via env var (#1916835)
- meson: remove strange dep that causes meson to enter infinite loop (#1970860)
- copy: handle copy_file_range() weirdness on procfs/sysfs (#1970860)
- core: Hide "Deactivated successfully" message (#1954802)
- util: rework in_initrd() to make use of path_is_temporary_fs() (#1959339)
- initrd: extend SYSTEMD_IN_INITRD to accept non-ramfs rootfs (#1959339)
- initrd: do a debug log if failed to detect rootfs type (#1959339)
- initrd: do a debug log if /etc/initrd-release doesn't take effect (#1959339)
- units: assign user-runtime-dir@.service to user-%i.slice (#1946453)
- units: order user-runtime-dir@.service after systemd-user-sessions.service (#1946453)
- units: make sure user-runtime-dir@.service is Type=oneshot (#1946453)
- user-runtime-dir: downgrade a few log messages to LOG_DEBUG that we ignore (#1946453)
- shared/install: Preserve escape characters for escaped unit names (#1952686)
- basic/virt: Detect PowerVM hypervisor (#1937989)
- man: document differences in clean exit status for Type=oneshot (#1940078)
- busctl: add a timestamp to the output of the busctl monitor command (#1909214)
- basic/cap-list: parse/print numerical capabilities (#1946943)
- shared/mount-util: convert to libmount (#1885143)
- mount-util: bind_remount: avoid calling statvfs (#1885143)
- mount-util: use UMOUNT_NOFOLLOW in recursive umounter (#1885143)
- test-install-root: create referenced targets (#1835351)
- install: warn if WantedBy targets don't exist (#1835351)
- test-install-root: add test for unknown WantedBy= target (#1835351)
- ceph is a network filesystem (#1952013)
- sysctl: set kernel.core_pipe_limit=16 (#1949729)
- core: don't drop timer expired but not yet processed when system date is changed (#1899402)
- core: Detect initial timer state from serialized data (#1899402)
- rc-local: order after network-online.target (#1934028)
- set core ulimit to 0 like on RHEL-7 (#1905582)
- test-mountpointutil-util: do not assert in test_mnt_id() (#1910425)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-49" date="1627041600">- remove a left-over break (#1970860)
- basic/unit-name: do not use strdupa() on a path (#1974700)
- sd-event: change ordering of pending/ratelimited events (#1968528)
- sd-event: drop unnecessary "else" (#1968528)
- sd-event: use CMP() macro (#1968528)
- sd-event: use usec_add() (#1968528)
- sd-event: make event_source_time_prioq_reshuffle() accept all event source type (#1968528)
- sd-event: always reshuffle time prioq on changing online/offline state (#1968528)
- ci: run unit tests on z-stream branches as well (#1970860)
- ci: drop forgotten Travis references (#1934504)
- ci: run unit tests on CentOS 8 Stream as well (#1934504)
- ci: add missing test dependencies (#1934504)
- meson: bump timeout for test-udev to 180s (#1934504)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-50" date="1630065600">- Added option --check-inhibitors for non-tty usage (#1269726)
- logind: Introduce RebootWithFlags and others (#1269726)
- logind: add …WithFlags methods to policy (#1269726)
- logind: simplify flags handling a bit (#1269726)
- Update link to RHEL documentation (#1982584)
- Set default core ulimit to 0, but keep the hard limit ulimited (#1905582)
- shared/seccomp-util: address family filtering is broken on ppc (#1982650)
- logind: rework Seat/Session/User object allocation and freeing a bit (#1642460)
- logind: fix serialization/deserialization of user's "display session" (#1642460)
- logind: turn of stdio locking when writing session files too (#1642460)
- units: set StopWhenUnneeded= for the user slice units too (#1642460)
- units: improve Description= string a bit (#1642460)
- logind: improve logging in manager_connect_console() (#1642460)
- logind: save/restore User object's "stopping" field during restarts (#1642460)
- logind: correct bad clean-up path (#1642460)
- logind: fix bad error propagation (#1642460)
- logind: never elect a session that is stopping as display (#1642460)
- logind: introduce little helper that checks whether a session is ready (#1642460)
- logind: propagate session stop errors (#1642460)
- logind: rework how we manage the slice and user-runtime-dir@.service unit for each user (#1642460)
- logind: optionally, keep the user@.service instance for eached logged in user around for a while (#1642460)
- logind: add a RequiresMountsFor= dependency from the session scope unit to the home directory of the user (#1642460)
- logind: improve error propagation of user_check_linger_file() (#1642460)
- logind: automatically GC lingering users for who now user@.service (nor slice, not runtime dir service) is running anymore (#1642460)
- pam_systemd: simplify code which with we set environment variables (#1642460)
- logind: validate /run/user/1000 before we set it (#1642460)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-51" date="1632398400">- define newly needed constants (#1850986)
- sd-netlink: support IFLA_PROP_LIST and IFLA_ALT_IFNAME attributes (#1850986)
- sd-netlink: introduce sd_netlink_message_read_strv() (#1850986)
- sd-netlink: introduce sd_netlink_message_append_strv() (#1850986)
- test: add a test for sd_netlink_message_{append,read}_strv() (#1850986)
- util: introduce ifname_valid_full() (#1850986)
- rename function (#1850986)
- udev: support AlternativeName= setting in .link file (#1850986)
- network: make Name= in [Match] support alternative names of interfaces (#1850986)
- udev: extend the length of ID_NET_NAME_XXX= to ALTIFNAMSIZ (#1850986)
- udev: do not fail if kernel does not support alternative names (#1850986)
- udev: introduce AlternativeNamesPolicy= setting (#1850986)
- network: set AlternativeNamesPolicy= in 99-default.link (#1850986)
- random-util: call initialize_srand() after fork() (#1850986)
- sd-netlink: introduce rtnl_resolve_link_alternative_names() (#1850986)
- udev: sort alternative names (#1850986)
- netlink: introduce rtnl_get/delete_link_alternative_names() (#1850986)
- netlink: do not fail when new interface name is already used as an alternative name (#1850986)
- udev: do not try to reassign alternative names (#1850986)
- Fix LGTM build (#1850986)
- sd-hwdb: allow empty properties (#1930568)
- Update hwdb (#1930568)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-51.1" date="1638360000">- sd-event: take ref on event loop object before dispatching event sources (#2024903)
- pid1: fix free of uninitialized pointer in unit_fail_if_noncanonical() (#2024903)
- Disable iptables for CI (#2024903)
- test-seccomp: accept ENOSYS from sysctl(2) too (#2024903)
- Disable libpitc to fix CentOS Stream CI (#2024903)
- test: accept that char device 0/0 can now be created witout privileges (#2024903)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-51.2" date="1638532800">- core: return true from cg_is_empty* on ENOENT (#2024903)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-51.3" date="1639137600">- Do not fail if the same alt. name is set again (#2030027)
- meson: avoid bogus meson warning (#2030027)
- meson: do not fail if rsync is not installed with meson 0.57.2 (#2030027)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-51.4" date="1642075200">- mount: don't propagate errors from mount_setup_unit() further up (#2039327)
- test: make TEST-47 less racy (#2039327)
- macro: define HAS_FEATURE_ADDRESS_SANITIZER also on gcc (#2039327)
- tests: add helper function to autodetect CI environments (#2039327)
- strv: rework FOREACH_STRING() macro (#2039327)
- test,systemctl: use "const char*" instead of "char*" (#2039327)
- ci: pass the $GITHUB_ACTIONS variable to the CentOS container (#2039327)
- core: rename unit_{start_limit|condition|assert}_test() to unit_test_xyz() (#2037395)
- core: Check unit start rate limiting earlier (#2037395)
- sd-event: introduce callback invoked when event source ratelimit expires (#2037395)
- core: rename/generalize UNIT(u)-&gt;test_start_limit() hook (#2037395)
- mount: make mount units start jobs not runnable if /p/s/mountinfo ratelimit is in effect (#2037395)
- mount: retrigger run queue after ratelimit expired to run delayed mount start jobs (#2037395)
- pid1: add a manager_trigger_run_queue() helper (#2037395)
- unit: add jobs that were skipped because of ratelimit back to run_queue (#2037395)
- udev/net_id: introduce naming scheme for RHEL-8.5 (#2040244)
- udev/net_id: remove extraneous bracket (#2040244)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-51.5" date="1643112000">- mount: do not update exec deps on mountinfo changes (#2038878)
- core/mount: add implicit unit dependencies even if when mount unit is generated from /proc/self/mountinfo (#2038878)</changelog>
</package>
<package pkgid="a09d90b62f2950c49c075dacaf7ff9a4cc67af5eef66229105f1ce980010fdfd" name="systemd-libs-debuginfo" arch="x86_64">
  <version epoch="0" ver="239" rel="51.el8_5.5"/>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 239-47" date="1622808000">- systemd-binfmt: Add safeguard in triggers (#1787144)
- spec: Requires(post) openssl-libs to fix missing /etc/machine-id (#1947438)
- spec: Go back to using systemctl preset-all in post (#1783263, #1647172, #1118740)
- spec: Disable libiptc support (#1817265)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-48" date="1624536000">- cgroup: Also set io.bfq.weight (#1927290)
- seccomp: allow turning off of seccomp filtering via env var (#1916835)
- meson: remove strange dep that causes meson to enter infinite loop (#1970860)
- copy: handle copy_file_range() weirdness on procfs/sysfs (#1970860)
- core: Hide "Deactivated successfully" message (#1954802)
- util: rework in_initrd() to make use of path_is_temporary_fs() (#1959339)
- initrd: extend SYSTEMD_IN_INITRD to accept non-ramfs rootfs (#1959339)
- initrd: do a debug log if failed to detect rootfs type (#1959339)
- initrd: do a debug log if /etc/initrd-release doesn't take effect (#1959339)
- units: assign user-runtime-dir@.service to user-%i.slice (#1946453)
- units: order user-runtime-dir@.service after systemd-user-sessions.service (#1946453)
- units: make sure user-runtime-dir@.service is Type=oneshot (#1946453)
- user-runtime-dir: downgrade a few log messages to LOG_DEBUG that we ignore (#1946453)
- shared/install: Preserve escape characters for escaped unit names (#1952686)
- basic/virt: Detect PowerVM hypervisor (#1937989)
- man: document differences in clean exit status for Type=oneshot (#1940078)
- busctl: add a timestamp to the output of the busctl monitor command (#1909214)
- basic/cap-list: parse/print numerical capabilities (#1946943)
- shared/mount-util: convert to libmount (#1885143)
- mount-util: bind_remount: avoid calling statvfs (#1885143)
- mount-util: use UMOUNT_NOFOLLOW in recursive umounter (#1885143)
- test-install-root: create referenced targets (#1835351)
- install: warn if WantedBy targets don't exist (#1835351)
- test-install-root: add test for unknown WantedBy= target (#1835351)
- ceph is a network filesystem (#1952013)
- sysctl: set kernel.core_pipe_limit=16 (#1949729)
- core: don't drop timer expired but not yet processed when system date is changed (#1899402)
- core: Detect initial timer state from serialized data (#1899402)
- rc-local: order after network-online.target (#1934028)
- set core ulimit to 0 like on RHEL-7 (#1905582)
- test-mountpointutil-util: do not assert in test_mnt_id() (#1910425)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-49" date="1627041600">- remove a left-over break (#1970860)
- basic/unit-name: do not use strdupa() on a path (#1974700)
- sd-event: change ordering of pending/ratelimited events (#1968528)
- sd-event: drop unnecessary "else" (#1968528)
- sd-event: use CMP() macro (#1968528)
- sd-event: use usec_add() (#1968528)
- sd-event: make event_source_time_prioq_reshuffle() accept all event source type (#1968528)
- sd-event: always reshuffle time prioq on changing online/offline state (#1968528)
- ci: run unit tests on z-stream branches as well (#1970860)
- ci: drop forgotten Travis references (#1934504)
- ci: run unit tests on CentOS 8 Stream as well (#1934504)
- ci: add missing test dependencies (#1934504)
- meson: bump timeout for test-udev to 180s (#1934504)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-50" date="1630065600">- Added option --check-inhibitors for non-tty usage (#1269726)
- logind: Introduce RebootWithFlags and others (#1269726)
- logind: add …WithFlags methods to policy (#1269726)
- logind: simplify flags handling a bit (#1269726)
- Update link to RHEL documentation (#1982584)
- Set default core ulimit to 0, but keep the hard limit ulimited (#1905582)
- shared/seccomp-util: address family filtering is broken on ppc (#1982650)
- logind: rework Seat/Session/User object allocation and freeing a bit (#1642460)
- logind: fix serialization/deserialization of user's "display session" (#1642460)
- logind: turn of stdio locking when writing session files too (#1642460)
- units: set StopWhenUnneeded= for the user slice units too (#1642460)
- units: improve Description= string a bit (#1642460)
- logind: improve logging in manager_connect_console() (#1642460)
- logind: save/restore User object's "stopping" field during restarts (#1642460)
- logind: correct bad clean-up path (#1642460)
- logind: fix bad error propagation (#1642460)
- logind: never elect a session that is stopping as display (#1642460)
- logind: introduce little helper that checks whether a session is ready (#1642460)
- logind: propagate session stop errors (#1642460)
- logind: rework how we manage the slice and user-runtime-dir@.service unit for each user (#1642460)
- logind: optionally, keep the user@.service instance for eached logged in user around for a while (#1642460)
- logind: add a RequiresMountsFor= dependency from the session scope unit to the home directory of the user (#1642460)
- logind: improve error propagation of user_check_linger_file() (#1642460)
- logind: automatically GC lingering users for who now user@.service (nor slice, not runtime dir service) is running anymore (#1642460)
- pam_systemd: simplify code which with we set environment variables (#1642460)
- logind: validate /run/user/1000 before we set it (#1642460)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-51" date="1632398400">- define newly needed constants (#1850986)
- sd-netlink: support IFLA_PROP_LIST and IFLA_ALT_IFNAME attributes (#1850986)
- sd-netlink: introduce sd_netlink_message_read_strv() (#1850986)
- sd-netlink: introduce sd_netlink_message_append_strv() (#1850986)
- test: add a test for sd_netlink_message_{append,read}_strv() (#1850986)
- util: introduce ifname_valid_full() (#1850986)
- rename function (#1850986)
- udev: support AlternativeName= setting in .link file (#1850986)
- network: make Name= in [Match] support alternative names of interfaces (#1850986)
- udev: extend the length of ID_NET_NAME_XXX= to ALTIFNAMSIZ (#1850986)
- udev: do not fail if kernel does not support alternative names (#1850986)
- udev: introduce AlternativeNamesPolicy= setting (#1850986)
- network: set AlternativeNamesPolicy= in 99-default.link (#1850986)
- random-util: call initialize_srand() after fork() (#1850986)
- sd-netlink: introduce rtnl_resolve_link_alternative_names() (#1850986)
- udev: sort alternative names (#1850986)
- netlink: introduce rtnl_get/delete_link_alternative_names() (#1850986)
- netlink: do not fail when new interface name is already used as an alternative name (#1850986)
- udev: do not try to reassign alternative names (#1850986)
- Fix LGTM build (#1850986)
- sd-hwdb: allow empty properties (#1930568)
- Update hwdb (#1930568)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-51.1" date="1638360000">- sd-event: take ref on event loop object before dispatching event sources (#2024903)
- pid1: fix free of uninitialized pointer in unit_fail_if_noncanonical() (#2024903)
- Disable iptables for CI (#2024903)
- test-seccomp: accept ENOSYS from sysctl(2) too (#2024903)
- Disable libpitc to fix CentOS Stream CI (#2024903)
- test: accept that char device 0/0 can now be created witout privileges (#2024903)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-51.2" date="1638532800">- core: return true from cg_is_empty* on ENOENT (#2024903)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-51.3" date="1639137600">- Do not fail if the same alt. name is set again (#2030027)
- meson: avoid bogus meson warning (#2030027)
- meson: do not fail if rsync is not installed with meson 0.57.2 (#2030027)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-51.4" date="1642075200">- mount: don't propagate errors from mount_setup_unit() further up (#2039327)
- test: make TEST-47 less racy (#2039327)
- macro: define HAS_FEATURE_ADDRESS_SANITIZER also on gcc (#2039327)
- tests: add helper function to autodetect CI environments (#2039327)
- strv: rework FOREACH_STRING() macro (#2039327)
- test,systemctl: use "const char*" instead of "char*" (#2039327)
- ci: pass the $GITHUB_ACTIONS variable to the CentOS container (#2039327)
- core: rename unit_{start_limit|condition|assert}_test() to unit_test_xyz() (#2037395)
- core: Check unit start rate limiting earlier (#2037395)
- sd-event: introduce callback invoked when event source ratelimit expires (#2037395)
- core: rename/generalize UNIT(u)-&gt;test_start_limit() hook (#2037395)
- mount: make mount units start jobs not runnable if /p/s/mountinfo ratelimit is in effect (#2037395)
- mount: retrigger run queue after ratelimit expired to run delayed mount start jobs (#2037395)
- pid1: add a manager_trigger_run_queue() helper (#2037395)
- unit: add jobs that were skipped because of ratelimit back to run_queue (#2037395)
- udev/net_id: introduce naming scheme for RHEL-8.5 (#2040244)
- udev/net_id: remove extraneous bracket (#2040244)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-51.5" date="1643112000">- mount: do not update exec deps on mountinfo changes (#2038878)
- core/mount: add implicit unit dependencies even if when mount unit is generated from /proc/self/mountinfo (#2038878)</changelog>
</package>
<package pkgid="35b5a100335c53e3358c4696a54db45e19978911482457428f8f3945850b8167" name="systemd-pam-debuginfo" arch="x86_64">
  <version epoch="0" ver="239" rel="51.el8_5.2"/>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-44" date="1611835200">- ci: PowerTools repo was renamed to powertools in RHEL 8.3 (#1871827)
- ci: use quay.io instead of Docker Hub to avoid rate limits (#1871827)
- ci: move jobs from Travis CI to GH Actions (#1871827)
- unit: make UNIT() cast function deal with NULL pointers (#1871827)
- use link to RHEL-8 docs (#1623116)
- cgroup: Also set blkio.bfq.weight (#1657810)
- units: make sure initrd-cleanup.service terminates before switching to rootfs (#1657810)
- core: reload SELinux label cache on daemon-reload (#1888912)
- selinux: introduce mac_selinux_create_file_prepare_at() (#1888912)
- selinux: add trigger for policy reload to refresh internal selabel cache (#1888912)
- udev/net_id: give RHEL-8.4 naming scheme a name (#1827462)
- basic/stat-util: make mtime check stricter and use entire timestamp (#1642728)
- udev: make algorithm that selects highest priority devlink less susceptible to race conditions (#1642728)
- test: create /dev/null in test-udev.pl (#1642728)
- test: missing "die" (#1642728)
- udev-test: remove a check for whether the test is run in a container (#1642728)
- udev-test: skip the test only if it can't setup its environment (#1642728)
- udev-test: fix test skip condition (#1642728)
- udev-test: fix missing directory test/run (#1642728)
- udev-test: check if permitted to create block device nodes (#1642728)
- test-udev: add a testcase of too long line (#1642728)
- test-udev: use proper semantics for too long line with continuation (#1642728)
- test-udev: add more tests for line continuations and comments (#1642728)
- test-udev: add more tests for line continuation (#1642728)
- test-udev: fix alignment and drop unnecessary white spaces (#1642728)
- test/udev-test.pl: cleanup if skipping test (#1642728)
- test: add test cases for empty string match (#1642728)
- test: add test case for multi matches when use "||" (#1642728)
- udev-test: do not rely on "mail" group being defined (#1642728)
- test/udev-test.pl: allow multiple devices per test (#1642728)
- test/udev-test.pl: create rules only once (#1642728)
- test/udev-test.pl: allow concurrent additions and removals (#1642728)
- test/udev-test.pl: use computed devnode name (#1642728)
- test/udev-test.pl: test correctness of symlink targets (#1642728)
- test/udev-test.pl: allow checking multiple symlinks (#1642728)
- test/udev-test.pl: fix wrong test descriptions (#1642728)
- test/udev-test.pl: last_rule is unsupported (#1642728)
- test/udev-test.pl: Make some tests a little harder (#1642728)
- test/udev-test.pl: remove bogus rules from magic subsys test (#1642728)
- test/udev-test.pl: merge "space and var with space" tests (#1642728)
- test/udev-test.pl: merge import parent tests into one (#1642728)
- test/udev-test.pl: count "good" results (#1642728)
- tests/udev-test.pl: add multiple device test (#1642728)
- test/udev-test.pl: add repeat count (#1642728)
- test/udev-test.pl: generator for large list of block devices (#1642728)
- test/udev-test.pl: suppress umount error message at startup (#1642728)
- test/udev_test.pl: add "expected good" count (#1642728)
- test/udev-test: gracefully exit when imports fail (#1642728)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-45" date="1615464000">- Revert "test: add test cases for empty string match" and "test: add test case for multi matches when use ||" (#1935124)
- test/sys-script.py: add missing DEVNAME entries to uevents (#1935124)
- sd-event: split out helper functions for reshuffling prioqs (#1937315)
- sd-event: split out enable and disable codepaths from sd_event_source_set_enabled() (#1937315)
- sd-event: mention that two debug logged events are ignored (#1937315)
- sd-event: split clock data allocation out of sd_event_add_time() (#1937315)
- sd-event: split out code to add/remove timer event sources to earliest/latest prioq (#1937315)
- sd-event: fix delays assert brain-o (#17790) (#1937315)
- sd-event: let's suffix last_run/last_log with "_usec" (#1937315)
- sd-event: refuse running default event loops in any other thread than the one they are default for (#1937315)
- sd-event: ref event loop while in sd_event_prepare() ot sd_event_run() (#1937315)
- sd-event: follow coding style with naming return parameter (#1937315)
- sd-event: remove earliest_index/latest_index into common part of event source objects (#1937315)
- sd-event: update state at the end in event_source_enable (#1937315)
- sd-event: increase n_enabled_child_sources just once (#1937315)
- sd-event: add ability to ratelimit event sources (#1937315)
- test: add ratelimiting test (#1937315)
- core: prevent excessive /proc/self/mountinfo parsing (#1937315)
- udev: run link_update() with increased retry count in second invocation (#1935124)
- pam-systemd: use secure_getenv() rather than getenv() (#1936866)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-46" date="1621425600">- Revert "udev: run link_update() with increased retry count in second invocation" (#1942299)
- Revert "udev: make algorithm that selects highest priority devlink less susceptible to race conditions" (#1942299)
- test/udev-test.pl: drop test cases that add mutliple devices (#1942299)</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 239-47" date="1622808000">- systemd-binfmt: Add safeguard in triggers (#1787144)
- spec: Requires(post) openssl-libs to fix missing /etc/machine-id (#1947438)
- spec: Go back to using systemctl preset-all in post (#1783263, #1647172, #1118740)
- spec: Disable libiptc support (#1817265)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-48" date="1624536000">- cgroup: Also set io.bfq.weight (#1927290)
- seccomp: allow turning off of seccomp filtering via env var (#1916835)
- meson: remove strange dep that causes meson to enter infinite loop (#1970860)
- copy: handle copy_file_range() weirdness on procfs/sysfs (#1970860)
- core: Hide "Deactivated successfully" message (#1954802)
- util: rework in_initrd() to make use of path_is_temporary_fs() (#1959339)
- initrd: extend SYSTEMD_IN_INITRD to accept non-ramfs rootfs (#1959339)
- initrd: do a debug log if failed to detect rootfs type (#1959339)
- initrd: do a debug log if /etc/initrd-release doesn't take effect (#1959339)
- units: assign user-runtime-dir@.service to user-%i.slice (#1946453)
- units: order user-runtime-dir@.service after systemd-user-sessions.service (#1946453)
- units: make sure user-runtime-dir@.service is Type=oneshot (#1946453)
- user-runtime-dir: downgrade a few log messages to LOG_DEBUG that we ignore (#1946453)
- shared/install: Preserve escape characters for escaped unit names (#1952686)
- basic/virt: Detect PowerVM hypervisor (#1937989)
- man: document differences in clean exit status for Type=oneshot (#1940078)
- busctl: add a timestamp to the output of the busctl monitor command (#1909214)
- basic/cap-list: parse/print numerical capabilities (#1946943)
- shared/mount-util: convert to libmount (#1885143)
- mount-util: bind_remount: avoid calling statvfs (#1885143)
- mount-util: use UMOUNT_NOFOLLOW in recursive umounter (#1885143)
- test-install-root: create referenced targets (#1835351)
- install: warn if WantedBy targets don't exist (#1835351)
- test-install-root: add test for unknown WantedBy= target (#1835351)
- ceph is a network filesystem (#1952013)
- sysctl: set kernel.core_pipe_limit=16 (#1949729)
- core: don't drop timer expired but not yet processed when system date is changed (#1899402)
- core: Detect initial timer state from serialized data (#1899402)
- rc-local: order after network-online.target (#1934028)
- set core ulimit to 0 like on RHEL-7 (#1905582)
- test-mountpointutil-util: do not assert in test_mnt_id() (#1910425)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-49" date="1627041600">- remove a left-over break (#1970860)
- basic/unit-name: do not use strdupa() on a path (#1974700)
- sd-event: change ordering of pending/ratelimited events (#1968528)
- sd-event: drop unnecessary "else" (#1968528)
- sd-event: use CMP() macro (#1968528)
- sd-event: use usec_add() (#1968528)
- sd-event: make event_source_time_prioq_reshuffle() accept all event source type (#1968528)
- sd-event: always reshuffle time prioq on changing online/offline state (#1968528)
- ci: run unit tests on z-stream branches as well (#1970860)
- ci: drop forgotten Travis references (#1934504)
- ci: run unit tests on CentOS 8 Stream as well (#1934504)
- ci: add missing test dependencies (#1934504)
- meson: bump timeout for test-udev to 180s (#1934504)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-50" date="1630065600">- Added option --check-inhibitors for non-tty usage (#1269726)
- logind: Introduce RebootWithFlags and others (#1269726)
- logind: add …WithFlags methods to policy (#1269726)
- logind: simplify flags handling a bit (#1269726)
- Update link to RHEL documentation (#1982584)
- Set default core ulimit to 0, but keep the hard limit ulimited (#1905582)
- shared/seccomp-util: address family filtering is broken on ppc (#1982650)
- logind: rework Seat/Session/User object allocation and freeing a bit (#1642460)
- logind: fix serialization/deserialization of user's "display session" (#1642460)
- logind: turn of stdio locking when writing session files too (#1642460)
- units: set StopWhenUnneeded= for the user slice units too (#1642460)
- units: improve Description= string a bit (#1642460)
- logind: improve logging in manager_connect_console() (#1642460)
- logind: save/restore User object's "stopping" field during restarts (#1642460)
- logind: correct bad clean-up path (#1642460)
- logind: fix bad error propagation (#1642460)
- logind: never elect a session that is stopping as display (#1642460)
- logind: introduce little helper that checks whether a session is ready (#1642460)
- logind: propagate session stop errors (#1642460)
- logind: rework how we manage the slice and user-runtime-dir@.service unit for each user (#1642460)
- logind: optionally, keep the user@.service instance for eached logged in user around for a while (#1642460)
- logind: add a RequiresMountsFor= dependency from the session scope unit to the home directory of the user (#1642460)
- logind: improve error propagation of user_check_linger_file() (#1642460)
- logind: automatically GC lingering users for who now user@.service (nor slice, not runtime dir service) is running anymore (#1642460)
- pam_systemd: simplify code which with we set environment variables (#1642460)
- logind: validate /run/user/1000 before we set it (#1642460)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-51" date="1632398400">- define newly needed constants (#1850986)
- sd-netlink: support IFLA_PROP_LIST and IFLA_ALT_IFNAME attributes (#1850986)
- sd-netlink: introduce sd_netlink_message_read_strv() (#1850986)
- sd-netlink: introduce sd_netlink_message_append_strv() (#1850986)
- test: add a test for sd_netlink_message_{append,read}_strv() (#1850986)
- util: introduce ifname_valid_full() (#1850986)
- rename function (#1850986)
- udev: support AlternativeName= setting in .link file (#1850986)
- network: make Name= in [Match] support alternative names of interfaces (#1850986)
- udev: extend the length of ID_NET_NAME_XXX= to ALTIFNAMSIZ (#1850986)
- udev: do not fail if kernel does not support alternative names (#1850986)
- udev: introduce AlternativeNamesPolicy= setting (#1850986)
- network: set AlternativeNamesPolicy= in 99-default.link (#1850986)
- random-util: call initialize_srand() after fork() (#1850986)
- sd-netlink: introduce rtnl_resolve_link_alternative_names() (#1850986)
- udev: sort alternative names (#1850986)
- netlink: introduce rtnl_get/delete_link_alternative_names() (#1850986)
- netlink: do not fail when new interface name is already used as an alternative name (#1850986)
- udev: do not try to reassign alternative names (#1850986)
- Fix LGTM build (#1850986)
- sd-hwdb: allow empty properties (#1930568)
- Update hwdb (#1930568)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-51.1" date="1638360000">- sd-event: take ref on event loop object before dispatching event sources (#2024903)
- pid1: fix free of uninitialized pointer in unit_fail_if_noncanonical() (#2024903)
- Disable iptables for CI (#2024903)
- test-seccomp: accept ENOSYS from sysctl(2) too (#2024903)
- Disable libpitc to fix CentOS Stream CI (#2024903)
- test: accept that char device 0/0 can now be created witout privileges (#2024903)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-51.2" date="1638532800">- core: return true from cg_is_empty* on ENOENT (#2024903)</changelog>
</package>
<package pkgid="22b07d150eeea5ca9e64f45ccced0aa62a4f2f5ad0ac8eed1cb8a2cf9e788af2" name="systemd-pam-debuginfo" arch="x86_64">
  <version epoch="0" ver="239" rel="51.el8_5.3"/>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-45" date="1615464000">- Revert "test: add test cases for empty string match" and "test: add test case for multi matches when use ||" (#1935124)
- test/sys-script.py: add missing DEVNAME entries to uevents (#1935124)
- sd-event: split out helper functions for reshuffling prioqs (#1937315)
- sd-event: split out enable and disable codepaths from sd_event_source_set_enabled() (#1937315)
- sd-event: mention that two debug logged events are ignored (#1937315)
- sd-event: split clock data allocation out of sd_event_add_time() (#1937315)
- sd-event: split out code to add/remove timer event sources to earliest/latest prioq (#1937315)
- sd-event: fix delays assert brain-o (#17790) (#1937315)
- sd-event: let's suffix last_run/last_log with "_usec" (#1937315)
- sd-event: refuse running default event loops in any other thread than the one they are default for (#1937315)
- sd-event: ref event loop while in sd_event_prepare() ot sd_event_run() (#1937315)
- sd-event: follow coding style with naming return parameter (#1937315)
- sd-event: remove earliest_index/latest_index into common part of event source objects (#1937315)
- sd-event: update state at the end in event_source_enable (#1937315)
- sd-event: increase n_enabled_child_sources just once (#1937315)
- sd-event: add ability to ratelimit event sources (#1937315)
- test: add ratelimiting test (#1937315)
- core: prevent excessive /proc/self/mountinfo parsing (#1937315)
- udev: run link_update() with increased retry count in second invocation (#1935124)
- pam-systemd: use secure_getenv() rather than getenv() (#1936866)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-46" date="1621425600">- Revert "udev: run link_update() with increased retry count in second invocation" (#1942299)
- Revert "udev: make algorithm that selects highest priority devlink less susceptible to race conditions" (#1942299)
- test/udev-test.pl: drop test cases that add mutliple devices (#1942299)</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 239-47" date="1622808000">- systemd-binfmt: Add safeguard in triggers (#1787144)
- spec: Requires(post) openssl-libs to fix missing /etc/machine-id (#1947438)
- spec: Go back to using systemctl preset-all in post (#1783263, #1647172, #1118740)
- spec: Disable libiptc support (#1817265)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-48" date="1624536000">- cgroup: Also set io.bfq.weight (#1927290)
- seccomp: allow turning off of seccomp filtering via env var (#1916835)
- meson: remove strange dep that causes meson to enter infinite loop (#1970860)
- copy: handle copy_file_range() weirdness on procfs/sysfs (#1970860)
- core: Hide "Deactivated successfully" message (#1954802)
- util: rework in_initrd() to make use of path_is_temporary_fs() (#1959339)
- initrd: extend SYSTEMD_IN_INITRD to accept non-ramfs rootfs (#1959339)
- initrd: do a debug log if failed to detect rootfs type (#1959339)
- initrd: do a debug log if /etc/initrd-release doesn't take effect (#1959339)
- units: assign user-runtime-dir@.service to user-%i.slice (#1946453)
- units: order user-runtime-dir@.service after systemd-user-sessions.service (#1946453)
- units: make sure user-runtime-dir@.service is Type=oneshot (#1946453)
- user-runtime-dir: downgrade a few log messages to LOG_DEBUG that we ignore (#1946453)
- shared/install: Preserve escape characters for escaped unit names (#1952686)
- basic/virt: Detect PowerVM hypervisor (#1937989)
- man: document differences in clean exit status for Type=oneshot (#1940078)
- busctl: add a timestamp to the output of the busctl monitor command (#1909214)
- basic/cap-list: parse/print numerical capabilities (#1946943)
- shared/mount-util: convert to libmount (#1885143)
- mount-util: bind_remount: avoid calling statvfs (#1885143)
- mount-util: use UMOUNT_NOFOLLOW in recursive umounter (#1885143)
- test-install-root: create referenced targets (#1835351)
- install: warn if WantedBy targets don't exist (#1835351)
- test-install-root: add test for unknown WantedBy= target (#1835351)
- ceph is a network filesystem (#1952013)
- sysctl: set kernel.core_pipe_limit=16 (#1949729)
- core: don't drop timer expired but not yet processed when system date is changed (#1899402)
- core: Detect initial timer state from serialized data (#1899402)
- rc-local: order after network-online.target (#1934028)
- set core ulimit to 0 like on RHEL-7 (#1905582)
- test-mountpointutil-util: do not assert in test_mnt_id() (#1910425)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-49" date="1627041600">- remove a left-over break (#1970860)
- basic/unit-name: do not use strdupa() on a path (#1974700)
- sd-event: change ordering of pending/ratelimited events (#1968528)
- sd-event: drop unnecessary "else" (#1968528)
- sd-event: use CMP() macro (#1968528)
- sd-event: use usec_add() (#1968528)
- sd-event: make event_source_time_prioq_reshuffle() accept all event source type (#1968528)
- sd-event: always reshuffle time prioq on changing online/offline state (#1968528)
- ci: run unit tests on z-stream branches as well (#1970860)
- ci: drop forgotten Travis references (#1934504)
- ci: run unit tests on CentOS 8 Stream as well (#1934504)
- ci: add missing test dependencies (#1934504)
- meson: bump timeout for test-udev to 180s (#1934504)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-50" date="1630065600">- Added option --check-inhibitors for non-tty usage (#1269726)
- logind: Introduce RebootWithFlags and others (#1269726)
- logind: add …WithFlags methods to policy (#1269726)
- logind: simplify flags handling a bit (#1269726)
- Update link to RHEL documentation (#1982584)
- Set default core ulimit to 0, but keep the hard limit ulimited (#1905582)
- shared/seccomp-util: address family filtering is broken on ppc (#1982650)
- logind: rework Seat/Session/User object allocation and freeing a bit (#1642460)
- logind: fix serialization/deserialization of user's "display session" (#1642460)
- logind: turn of stdio locking when writing session files too (#1642460)
- units: set StopWhenUnneeded= for the user slice units too (#1642460)
- units: improve Description= string a bit (#1642460)
- logind: improve logging in manager_connect_console() (#1642460)
- logind: save/restore User object's "stopping" field during restarts (#1642460)
- logind: correct bad clean-up path (#1642460)
- logind: fix bad error propagation (#1642460)
- logind: never elect a session that is stopping as display (#1642460)
- logind: introduce little helper that checks whether a session is ready (#1642460)
- logind: propagate session stop errors (#1642460)
- logind: rework how we manage the slice and user-runtime-dir@.service unit for each user (#1642460)
- logind: optionally, keep the user@.service instance for eached logged in user around for a while (#1642460)
- logind: add a RequiresMountsFor= dependency from the session scope unit to the home directory of the user (#1642460)
- logind: improve error propagation of user_check_linger_file() (#1642460)
- logind: automatically GC lingering users for who now user@.service (nor slice, not runtime dir service) is running anymore (#1642460)
- pam_systemd: simplify code which with we set environment variables (#1642460)
- logind: validate /run/user/1000 before we set it (#1642460)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-51" date="1632398400">- define newly needed constants (#1850986)
- sd-netlink: support IFLA_PROP_LIST and IFLA_ALT_IFNAME attributes (#1850986)
- sd-netlink: introduce sd_netlink_message_read_strv() (#1850986)
- sd-netlink: introduce sd_netlink_message_append_strv() (#1850986)
- test: add a test for sd_netlink_message_{append,read}_strv() (#1850986)
- util: introduce ifname_valid_full() (#1850986)
- rename function (#1850986)
- udev: support AlternativeName= setting in .link file (#1850986)
- network: make Name= in [Match] support alternative names of interfaces (#1850986)
- udev: extend the length of ID_NET_NAME_XXX= to ALTIFNAMSIZ (#1850986)
- udev: do not fail if kernel does not support alternative names (#1850986)
- udev: introduce AlternativeNamesPolicy= setting (#1850986)
- network: set AlternativeNamesPolicy= in 99-default.link (#1850986)
- random-util: call initialize_srand() after fork() (#1850986)
- sd-netlink: introduce rtnl_resolve_link_alternative_names() (#1850986)
- udev: sort alternative names (#1850986)
- netlink: introduce rtnl_get/delete_link_alternative_names() (#1850986)
- netlink: do not fail when new interface name is already used as an alternative name (#1850986)
- udev: do not try to reassign alternative names (#1850986)
- Fix LGTM build (#1850986)
- sd-hwdb: allow empty properties (#1930568)
- Update hwdb (#1930568)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-51.1" date="1638360000">- sd-event: take ref on event loop object before dispatching event sources (#2024903)
- pid1: fix free of uninitialized pointer in unit_fail_if_noncanonical() (#2024903)
- Disable iptables for CI (#2024903)
- test-seccomp: accept ENOSYS from sysctl(2) too (#2024903)
- Disable libpitc to fix CentOS Stream CI (#2024903)
- test: accept that char device 0/0 can now be created witout privileges (#2024903)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-51.2" date="1638532800">- core: return true from cg_is_empty* on ENOENT (#2024903)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-51.3" date="1639137600">- Do not fail if the same alt. name is set again (#2030027)
- meson: avoid bogus meson warning (#2030027)
- meson: do not fail if rsync is not installed with meson 0.57.2 (#2030027)</changelog>
</package>
<package pkgid="f2060ded3474922bd0ce98fdfa200175cb708f5d6e724beceba1b7e2cea83c55" name="systemd-pam-debuginfo" arch="x86_64">
  <version epoch="0" ver="239" rel="51.el8_5.5"/>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 239-47" date="1622808000">- systemd-binfmt: Add safeguard in triggers (#1787144)
- spec: Requires(post) openssl-libs to fix missing /etc/machine-id (#1947438)
- spec: Go back to using systemctl preset-all in post (#1783263, #1647172, #1118740)
- spec: Disable libiptc support (#1817265)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-48" date="1624536000">- cgroup: Also set io.bfq.weight (#1927290)
- seccomp: allow turning off of seccomp filtering via env var (#1916835)
- meson: remove strange dep that causes meson to enter infinite loop (#1970860)
- copy: handle copy_file_range() weirdness on procfs/sysfs (#1970860)
- core: Hide "Deactivated successfully" message (#1954802)
- util: rework in_initrd() to make use of path_is_temporary_fs() (#1959339)
- initrd: extend SYSTEMD_IN_INITRD to accept non-ramfs rootfs (#1959339)
- initrd: do a debug log if failed to detect rootfs type (#1959339)
- initrd: do a debug log if /etc/initrd-release doesn't take effect (#1959339)
- units: assign user-runtime-dir@.service to user-%i.slice (#1946453)
- units: order user-runtime-dir@.service after systemd-user-sessions.service (#1946453)
- units: make sure user-runtime-dir@.service is Type=oneshot (#1946453)
- user-runtime-dir: downgrade a few log messages to LOG_DEBUG that we ignore (#1946453)
- shared/install: Preserve escape characters for escaped unit names (#1952686)
- basic/virt: Detect PowerVM hypervisor (#1937989)
- man: document differences in clean exit status for Type=oneshot (#1940078)
- busctl: add a timestamp to the output of the busctl monitor command (#1909214)
- basic/cap-list: parse/print numerical capabilities (#1946943)
- shared/mount-util: convert to libmount (#1885143)
- mount-util: bind_remount: avoid calling statvfs (#1885143)
- mount-util: use UMOUNT_NOFOLLOW in recursive umounter (#1885143)
- test-install-root: create referenced targets (#1835351)
- install: warn if WantedBy targets don't exist (#1835351)
- test-install-root: add test for unknown WantedBy= target (#1835351)
- ceph is a network filesystem (#1952013)
- sysctl: set kernel.core_pipe_limit=16 (#1949729)
- core: don't drop timer expired but not yet processed when system date is changed (#1899402)
- core: Detect initial timer state from serialized data (#1899402)
- rc-local: order after network-online.target (#1934028)
- set core ulimit to 0 like on RHEL-7 (#1905582)
- test-mountpointutil-util: do not assert in test_mnt_id() (#1910425)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-49" date="1627041600">- remove a left-over break (#1970860)
- basic/unit-name: do not use strdupa() on a path (#1974700)
- sd-event: change ordering of pending/ratelimited events (#1968528)
- sd-event: drop unnecessary "else" (#1968528)
- sd-event: use CMP() macro (#1968528)
- sd-event: use usec_add() (#1968528)
- sd-event: make event_source_time_prioq_reshuffle() accept all event source type (#1968528)
- sd-event: always reshuffle time prioq on changing online/offline state (#1968528)
- ci: run unit tests on z-stream branches as well (#1970860)
- ci: drop forgotten Travis references (#1934504)
- ci: run unit tests on CentOS 8 Stream as well (#1934504)
- ci: add missing test dependencies (#1934504)
- meson: bump timeout for test-udev to 180s (#1934504)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-50" date="1630065600">- Added option --check-inhibitors for non-tty usage (#1269726)
- logind: Introduce RebootWithFlags and others (#1269726)
- logind: add …WithFlags methods to policy (#1269726)
- logind: simplify flags handling a bit (#1269726)
- Update link to RHEL documentation (#1982584)
- Set default core ulimit to 0, but keep the hard limit ulimited (#1905582)
- shared/seccomp-util: address family filtering is broken on ppc (#1982650)
- logind: rework Seat/Session/User object allocation and freeing a bit (#1642460)
- logind: fix serialization/deserialization of user's "display session" (#1642460)
- logind: turn of stdio locking when writing session files too (#1642460)
- units: set StopWhenUnneeded= for the user slice units too (#1642460)
- units: improve Description= string a bit (#1642460)
- logind: improve logging in manager_connect_console() (#1642460)
- logind: save/restore User object's "stopping" field during restarts (#1642460)
- logind: correct bad clean-up path (#1642460)
- logind: fix bad error propagation (#1642460)
- logind: never elect a session that is stopping as display (#1642460)
- logind: introduce little helper that checks whether a session is ready (#1642460)
- logind: propagate session stop errors (#1642460)
- logind: rework how we manage the slice and user-runtime-dir@.service unit for each user (#1642460)
- logind: optionally, keep the user@.service instance for eached logged in user around for a while (#1642460)
- logind: add a RequiresMountsFor= dependency from the session scope unit to the home directory of the user (#1642460)
- logind: improve error propagation of user_check_linger_file() (#1642460)
- logind: automatically GC lingering users for who now user@.service (nor slice, not runtime dir service) is running anymore (#1642460)
- pam_systemd: simplify code which with we set environment variables (#1642460)
- logind: validate /run/user/1000 before we set it (#1642460)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-51" date="1632398400">- define newly needed constants (#1850986)
- sd-netlink: support IFLA_PROP_LIST and IFLA_ALT_IFNAME attributes (#1850986)
- sd-netlink: introduce sd_netlink_message_read_strv() (#1850986)
- sd-netlink: introduce sd_netlink_message_append_strv() (#1850986)
- test: add a test for sd_netlink_message_{append,read}_strv() (#1850986)
- util: introduce ifname_valid_full() (#1850986)
- rename function (#1850986)
- udev: support AlternativeName= setting in .link file (#1850986)
- network: make Name= in [Match] support alternative names of interfaces (#1850986)
- udev: extend the length of ID_NET_NAME_XXX= to ALTIFNAMSIZ (#1850986)
- udev: do not fail if kernel does not support alternative names (#1850986)
- udev: introduce AlternativeNamesPolicy= setting (#1850986)
- network: set AlternativeNamesPolicy= in 99-default.link (#1850986)
- random-util: call initialize_srand() after fork() (#1850986)
- sd-netlink: introduce rtnl_resolve_link_alternative_names() (#1850986)
- udev: sort alternative names (#1850986)
- netlink: introduce rtnl_get/delete_link_alternative_names() (#1850986)
- netlink: do not fail when new interface name is already used as an alternative name (#1850986)
- udev: do not try to reassign alternative names (#1850986)
- Fix LGTM build (#1850986)
- sd-hwdb: allow empty properties (#1930568)
- Update hwdb (#1930568)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-51.1" date="1638360000">- sd-event: take ref on event loop object before dispatching event sources (#2024903)
- pid1: fix free of uninitialized pointer in unit_fail_if_noncanonical() (#2024903)
- Disable iptables for CI (#2024903)
- test-seccomp: accept ENOSYS from sysctl(2) too (#2024903)
- Disable libpitc to fix CentOS Stream CI (#2024903)
- test: accept that char device 0/0 can now be created witout privileges (#2024903)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-51.2" date="1638532800">- core: return true from cg_is_empty* on ENOENT (#2024903)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-51.3" date="1639137600">- Do not fail if the same alt. name is set again (#2030027)
- meson: avoid bogus meson warning (#2030027)
- meson: do not fail if rsync is not installed with meson 0.57.2 (#2030027)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-51.4" date="1642075200">- mount: don't propagate errors from mount_setup_unit() further up (#2039327)
- test: make TEST-47 less racy (#2039327)
- macro: define HAS_FEATURE_ADDRESS_SANITIZER also on gcc (#2039327)
- tests: add helper function to autodetect CI environments (#2039327)
- strv: rework FOREACH_STRING() macro (#2039327)
- test,systemctl: use "const char*" instead of "char*" (#2039327)
- ci: pass the $GITHUB_ACTIONS variable to the CentOS container (#2039327)
- core: rename unit_{start_limit|condition|assert}_test() to unit_test_xyz() (#2037395)
- core: Check unit start rate limiting earlier (#2037395)
- sd-event: introduce callback invoked when event source ratelimit expires (#2037395)
- core: rename/generalize UNIT(u)-&gt;test_start_limit() hook (#2037395)
- mount: make mount units start jobs not runnable if /p/s/mountinfo ratelimit is in effect (#2037395)
- mount: retrigger run queue after ratelimit expired to run delayed mount start jobs (#2037395)
- pid1: add a manager_trigger_run_queue() helper (#2037395)
- unit: add jobs that were skipped because of ratelimit back to run_queue (#2037395)
- udev/net_id: introduce naming scheme for RHEL-8.5 (#2040244)
- udev/net_id: remove extraneous bracket (#2040244)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-51.5" date="1643112000">- mount: do not update exec deps on mountinfo changes (#2038878)
- core/mount: add implicit unit dependencies even if when mount unit is generated from /proc/self/mountinfo (#2038878)</changelog>
</package>
<package pkgid="11b03012eaef8458ff5cd7883fa0bd0c76bfdd57ff6ca07d243e2aa284ea5d3f" name="systemd-tests-debuginfo" arch="x86_64">
  <version epoch="0" ver="239" rel="51.el8_5.2"/>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-44" date="1611835200">- ci: PowerTools repo was renamed to powertools in RHEL 8.3 (#1871827)
- ci: use quay.io instead of Docker Hub to avoid rate limits (#1871827)
- ci: move jobs from Travis CI to GH Actions (#1871827)
- unit: make UNIT() cast function deal with NULL pointers (#1871827)
- use link to RHEL-8 docs (#1623116)
- cgroup: Also set blkio.bfq.weight (#1657810)
- units: make sure initrd-cleanup.service terminates before switching to rootfs (#1657810)
- core: reload SELinux label cache on daemon-reload (#1888912)
- selinux: introduce mac_selinux_create_file_prepare_at() (#1888912)
- selinux: add trigger for policy reload to refresh internal selabel cache (#1888912)
- udev/net_id: give RHEL-8.4 naming scheme a name (#1827462)
- basic/stat-util: make mtime check stricter and use entire timestamp (#1642728)
- udev: make algorithm that selects highest priority devlink less susceptible to race conditions (#1642728)
- test: create /dev/null in test-udev.pl (#1642728)
- test: missing "die" (#1642728)
- udev-test: remove a check for whether the test is run in a container (#1642728)
- udev-test: skip the test only if it can't setup its environment (#1642728)
- udev-test: fix test skip condition (#1642728)
- udev-test: fix missing directory test/run (#1642728)
- udev-test: check if permitted to create block device nodes (#1642728)
- test-udev: add a testcase of too long line (#1642728)
- test-udev: use proper semantics for too long line with continuation (#1642728)
- test-udev: add more tests for line continuations and comments (#1642728)
- test-udev: add more tests for line continuation (#1642728)
- test-udev: fix alignment and drop unnecessary white spaces (#1642728)
- test/udev-test.pl: cleanup if skipping test (#1642728)
- test: add test cases for empty string match (#1642728)
- test: add test case for multi matches when use "||" (#1642728)
- udev-test: do not rely on "mail" group being defined (#1642728)
- test/udev-test.pl: allow multiple devices per test (#1642728)
- test/udev-test.pl: create rules only once (#1642728)
- test/udev-test.pl: allow concurrent additions and removals (#1642728)
- test/udev-test.pl: use computed devnode name (#1642728)
- test/udev-test.pl: test correctness of symlink targets (#1642728)
- test/udev-test.pl: allow checking multiple symlinks (#1642728)
- test/udev-test.pl: fix wrong test descriptions (#1642728)
- test/udev-test.pl: last_rule is unsupported (#1642728)
- test/udev-test.pl: Make some tests a little harder (#1642728)
- test/udev-test.pl: remove bogus rules from magic subsys test (#1642728)
- test/udev-test.pl: merge "space and var with space" tests (#1642728)
- test/udev-test.pl: merge import parent tests into one (#1642728)
- test/udev-test.pl: count "good" results (#1642728)
- tests/udev-test.pl: add multiple device test (#1642728)
- test/udev-test.pl: add repeat count (#1642728)
- test/udev-test.pl: generator for large list of block devices (#1642728)
- test/udev-test.pl: suppress umount error message at startup (#1642728)
- test/udev_test.pl: add "expected good" count (#1642728)
- test/udev-test: gracefully exit when imports fail (#1642728)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-45" date="1615464000">- Revert "test: add test cases for empty string match" and "test: add test case for multi matches when use ||" (#1935124)
- test/sys-script.py: add missing DEVNAME entries to uevents (#1935124)
- sd-event: split out helper functions for reshuffling prioqs (#1937315)
- sd-event: split out enable and disable codepaths from sd_event_source_set_enabled() (#1937315)
- sd-event: mention that two debug logged events are ignored (#1937315)
- sd-event: split clock data allocation out of sd_event_add_time() (#1937315)
- sd-event: split out code to add/remove timer event sources to earliest/latest prioq (#1937315)
- sd-event: fix delays assert brain-o (#17790) (#1937315)
- sd-event: let's suffix last_run/last_log with "_usec" (#1937315)
- sd-event: refuse running default event loops in any other thread than the one they are default for (#1937315)
- sd-event: ref event loop while in sd_event_prepare() ot sd_event_run() (#1937315)
- sd-event: follow coding style with naming return parameter (#1937315)
- sd-event: remove earliest_index/latest_index into common part of event source objects (#1937315)
- sd-event: update state at the end in event_source_enable (#1937315)
- sd-event: increase n_enabled_child_sources just once (#1937315)
- sd-event: add ability to ratelimit event sources (#1937315)
- test: add ratelimiting test (#1937315)
- core: prevent excessive /proc/self/mountinfo parsing (#1937315)
- udev: run link_update() with increased retry count in second invocation (#1935124)
- pam-systemd: use secure_getenv() rather than getenv() (#1936866)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-46" date="1621425600">- Revert "udev: run link_update() with increased retry count in second invocation" (#1942299)
- Revert "udev: make algorithm that selects highest priority devlink less susceptible to race conditions" (#1942299)
- test/udev-test.pl: drop test cases that add mutliple devices (#1942299)</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 239-47" date="1622808000">- systemd-binfmt: Add safeguard in triggers (#1787144)
- spec: Requires(post) openssl-libs to fix missing /etc/machine-id (#1947438)
- spec: Go back to using systemctl preset-all in post (#1783263, #1647172, #1118740)
- spec: Disable libiptc support (#1817265)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-48" date="1624536000">- cgroup: Also set io.bfq.weight (#1927290)
- seccomp: allow turning off of seccomp filtering via env var (#1916835)
- meson: remove strange dep that causes meson to enter infinite loop (#1970860)
- copy: handle copy_file_range() weirdness on procfs/sysfs (#1970860)
- core: Hide "Deactivated successfully" message (#1954802)
- util: rework in_initrd() to make use of path_is_temporary_fs() (#1959339)
- initrd: extend SYSTEMD_IN_INITRD to accept non-ramfs rootfs (#1959339)
- initrd: do a debug log if failed to detect rootfs type (#1959339)
- initrd: do a debug log if /etc/initrd-release doesn't take effect (#1959339)
- units: assign user-runtime-dir@.service to user-%i.slice (#1946453)
- units: order user-runtime-dir@.service after systemd-user-sessions.service (#1946453)
- units: make sure user-runtime-dir@.service is Type=oneshot (#1946453)
- user-runtime-dir: downgrade a few log messages to LOG_DEBUG that we ignore (#1946453)
- shared/install: Preserve escape characters for escaped unit names (#1952686)
- basic/virt: Detect PowerVM hypervisor (#1937989)
- man: document differences in clean exit status for Type=oneshot (#1940078)
- busctl: add a timestamp to the output of the busctl monitor command (#1909214)
- basic/cap-list: parse/print numerical capabilities (#1946943)
- shared/mount-util: convert to libmount (#1885143)
- mount-util: bind_remount: avoid calling statvfs (#1885143)
- mount-util: use UMOUNT_NOFOLLOW in recursive umounter (#1885143)
- test-install-root: create referenced targets (#1835351)
- install: warn if WantedBy targets don't exist (#1835351)
- test-install-root: add test for unknown WantedBy= target (#1835351)
- ceph is a network filesystem (#1952013)
- sysctl: set kernel.core_pipe_limit=16 (#1949729)
- core: don't drop timer expired but not yet processed when system date is changed (#1899402)
- core: Detect initial timer state from serialized data (#1899402)
- rc-local: order after network-online.target (#1934028)
- set core ulimit to 0 like on RHEL-7 (#1905582)
- test-mountpointutil-util: do not assert in test_mnt_id() (#1910425)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-49" date="1627041600">- remove a left-over break (#1970860)
- basic/unit-name: do not use strdupa() on a path (#1974700)
- sd-event: change ordering of pending/ratelimited events (#1968528)
- sd-event: drop unnecessary "else" (#1968528)
- sd-event: use CMP() macro (#1968528)
- sd-event: use usec_add() (#1968528)
- sd-event: make event_source_time_prioq_reshuffle() accept all event source type (#1968528)
- sd-event: always reshuffle time prioq on changing online/offline state (#1968528)
- ci: run unit tests on z-stream branches as well (#1970860)
- ci: drop forgotten Travis references (#1934504)
- ci: run unit tests on CentOS 8 Stream as well (#1934504)
- ci: add missing test dependencies (#1934504)
- meson: bump timeout for test-udev to 180s (#1934504)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-50" date="1630065600">- Added option --check-inhibitors for non-tty usage (#1269726)
- logind: Introduce RebootWithFlags and others (#1269726)
- logind: add …WithFlags methods to policy (#1269726)
- logind: simplify flags handling a bit (#1269726)
- Update link to RHEL documentation (#1982584)
- Set default core ulimit to 0, but keep the hard limit ulimited (#1905582)
- shared/seccomp-util: address family filtering is broken on ppc (#1982650)
- logind: rework Seat/Session/User object allocation and freeing a bit (#1642460)
- logind: fix serialization/deserialization of user's "display session" (#1642460)
- logind: turn of stdio locking when writing session files too (#1642460)
- units: set StopWhenUnneeded= for the user slice units too (#1642460)
- units: improve Description= string a bit (#1642460)
- logind: improve logging in manager_connect_console() (#1642460)
- logind: save/restore User object's "stopping" field during restarts (#1642460)
- logind: correct bad clean-up path (#1642460)
- logind: fix bad error propagation (#1642460)
- logind: never elect a session that is stopping as display (#1642460)
- logind: introduce little helper that checks whether a session is ready (#1642460)
- logind: propagate session stop errors (#1642460)
- logind: rework how we manage the slice and user-runtime-dir@.service unit for each user (#1642460)
- logind: optionally, keep the user@.service instance for eached logged in user around for a while (#1642460)
- logind: add a RequiresMountsFor= dependency from the session scope unit to the home directory of the user (#1642460)
- logind: improve error propagation of user_check_linger_file() (#1642460)
- logind: automatically GC lingering users for who now user@.service (nor slice, not runtime dir service) is running anymore (#1642460)
- pam_systemd: simplify code which with we set environment variables (#1642460)
- logind: validate /run/user/1000 before we set it (#1642460)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-51" date="1632398400">- define newly needed constants (#1850986)
- sd-netlink: support IFLA_PROP_LIST and IFLA_ALT_IFNAME attributes (#1850986)
- sd-netlink: introduce sd_netlink_message_read_strv() (#1850986)
- sd-netlink: introduce sd_netlink_message_append_strv() (#1850986)
- test: add a test for sd_netlink_message_{append,read}_strv() (#1850986)
- util: introduce ifname_valid_full() (#1850986)
- rename function (#1850986)
- udev: support AlternativeName= setting in .link file (#1850986)
- network: make Name= in [Match] support alternative names of interfaces (#1850986)
- udev: extend the length of ID_NET_NAME_XXX= to ALTIFNAMSIZ (#1850986)
- udev: do not fail if kernel does not support alternative names (#1850986)
- udev: introduce AlternativeNamesPolicy= setting (#1850986)
- network: set AlternativeNamesPolicy= in 99-default.link (#1850986)
- random-util: call initialize_srand() after fork() (#1850986)
- sd-netlink: introduce rtnl_resolve_link_alternative_names() (#1850986)
- udev: sort alternative names (#1850986)
- netlink: introduce rtnl_get/delete_link_alternative_names() (#1850986)
- netlink: do not fail when new interface name is already used as an alternative name (#1850986)
- udev: do not try to reassign alternative names (#1850986)
- Fix LGTM build (#1850986)
- sd-hwdb: allow empty properties (#1930568)
- Update hwdb (#1930568)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-51.1" date="1638360000">- sd-event: take ref on event loop object before dispatching event sources (#2024903)
- pid1: fix free of uninitialized pointer in unit_fail_if_noncanonical() (#2024903)
- Disable iptables for CI (#2024903)
- test-seccomp: accept ENOSYS from sysctl(2) too (#2024903)
- Disable libpitc to fix CentOS Stream CI (#2024903)
- test: accept that char device 0/0 can now be created witout privileges (#2024903)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-51.2" date="1638532800">- core: return true from cg_is_empty* on ENOENT (#2024903)</changelog>
</package>
<package pkgid="22d3760a275e7ecea8419fa86e51e9802facabca204851405a250ad050cd1a48" name="systemd-tests-debuginfo" arch="x86_64">
  <version epoch="0" ver="239" rel="51.el8_5.3"/>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-45" date="1615464000">- Revert "test: add test cases for empty string match" and "test: add test case for multi matches when use ||" (#1935124)
- test/sys-script.py: add missing DEVNAME entries to uevents (#1935124)
- sd-event: split out helper functions for reshuffling prioqs (#1937315)
- sd-event: split out enable and disable codepaths from sd_event_source_set_enabled() (#1937315)
- sd-event: mention that two debug logged events are ignored (#1937315)
- sd-event: split clock data allocation out of sd_event_add_time() (#1937315)
- sd-event: split out code to add/remove timer event sources to earliest/latest prioq (#1937315)
- sd-event: fix delays assert brain-o (#17790) (#1937315)
- sd-event: let's suffix last_run/last_log with "_usec" (#1937315)
- sd-event: refuse running default event loops in any other thread than the one they are default for (#1937315)
- sd-event: ref event loop while in sd_event_prepare() ot sd_event_run() (#1937315)
- sd-event: follow coding style with naming return parameter (#1937315)
- sd-event: remove earliest_index/latest_index into common part of event source objects (#1937315)
- sd-event: update state at the end in event_source_enable (#1937315)
- sd-event: increase n_enabled_child_sources just once (#1937315)
- sd-event: add ability to ratelimit event sources (#1937315)
- test: add ratelimiting test (#1937315)
- core: prevent excessive /proc/self/mountinfo parsing (#1937315)
- udev: run link_update() with increased retry count in second invocation (#1935124)
- pam-systemd: use secure_getenv() rather than getenv() (#1936866)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-46" date="1621425600">- Revert "udev: run link_update() with increased retry count in second invocation" (#1942299)
- Revert "udev: make algorithm that selects highest priority devlink less susceptible to race conditions" (#1942299)
- test/udev-test.pl: drop test cases that add mutliple devices (#1942299)</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 239-47" date="1622808000">- systemd-binfmt: Add safeguard in triggers (#1787144)
- spec: Requires(post) openssl-libs to fix missing /etc/machine-id (#1947438)
- spec: Go back to using systemctl preset-all in post (#1783263, #1647172, #1118740)
- spec: Disable libiptc support (#1817265)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-48" date="1624536000">- cgroup: Also set io.bfq.weight (#1927290)
- seccomp: allow turning off of seccomp filtering via env var (#1916835)
- meson: remove strange dep that causes meson to enter infinite loop (#1970860)
- copy: handle copy_file_range() weirdness on procfs/sysfs (#1970860)
- core: Hide "Deactivated successfully" message (#1954802)
- util: rework in_initrd() to make use of path_is_temporary_fs() (#1959339)
- initrd: extend SYSTEMD_IN_INITRD to accept non-ramfs rootfs (#1959339)
- initrd: do a debug log if failed to detect rootfs type (#1959339)
- initrd: do a debug log if /etc/initrd-release doesn't take effect (#1959339)
- units: assign user-runtime-dir@.service to user-%i.slice (#1946453)
- units: order user-runtime-dir@.service after systemd-user-sessions.service (#1946453)
- units: make sure user-runtime-dir@.service is Type=oneshot (#1946453)
- user-runtime-dir: downgrade a few log messages to LOG_DEBUG that we ignore (#1946453)
- shared/install: Preserve escape characters for escaped unit names (#1952686)
- basic/virt: Detect PowerVM hypervisor (#1937989)
- man: document differences in clean exit status for Type=oneshot (#1940078)
- busctl: add a timestamp to the output of the busctl monitor command (#1909214)
- basic/cap-list: parse/print numerical capabilities (#1946943)
- shared/mount-util: convert to libmount (#1885143)
- mount-util: bind_remount: avoid calling statvfs (#1885143)
- mount-util: use UMOUNT_NOFOLLOW in recursive umounter (#1885143)
- test-install-root: create referenced targets (#1835351)
- install: warn if WantedBy targets don't exist (#1835351)
- test-install-root: add test for unknown WantedBy= target (#1835351)
- ceph is a network filesystem (#1952013)
- sysctl: set kernel.core_pipe_limit=16 (#1949729)
- core: don't drop timer expired but not yet processed when system date is changed (#1899402)
- core: Detect initial timer state from serialized data (#1899402)
- rc-local: order after network-online.target (#1934028)
- set core ulimit to 0 like on RHEL-7 (#1905582)
- test-mountpointutil-util: do not assert in test_mnt_id() (#1910425)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-49" date="1627041600">- remove a left-over break (#1970860)
- basic/unit-name: do not use strdupa() on a path (#1974700)
- sd-event: change ordering of pending/ratelimited events (#1968528)
- sd-event: drop unnecessary "else" (#1968528)
- sd-event: use CMP() macro (#1968528)
- sd-event: use usec_add() (#1968528)
- sd-event: make event_source_time_prioq_reshuffle() accept all event source type (#1968528)
- sd-event: always reshuffle time prioq on changing online/offline state (#1968528)
- ci: run unit tests on z-stream branches as well (#1970860)
- ci: drop forgotten Travis references (#1934504)
- ci: run unit tests on CentOS 8 Stream as well (#1934504)
- ci: add missing test dependencies (#1934504)
- meson: bump timeout for test-udev to 180s (#1934504)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-50" date="1630065600">- Added option --check-inhibitors for non-tty usage (#1269726)
- logind: Introduce RebootWithFlags and others (#1269726)
- logind: add …WithFlags methods to policy (#1269726)
- logind: simplify flags handling a bit (#1269726)
- Update link to RHEL documentation (#1982584)
- Set default core ulimit to 0, but keep the hard limit ulimited (#1905582)
- shared/seccomp-util: address family filtering is broken on ppc (#1982650)
- logind: rework Seat/Session/User object allocation and freeing a bit (#1642460)
- logind: fix serialization/deserialization of user's "display session" (#1642460)
- logind: turn of stdio locking when writing session files too (#1642460)
- units: set StopWhenUnneeded= for the user slice units too (#1642460)
- units: improve Description= string a bit (#1642460)
- logind: improve logging in manager_connect_console() (#1642460)
- logind: save/restore User object's "stopping" field during restarts (#1642460)
- logind: correct bad clean-up path (#1642460)
- logind: fix bad error propagation (#1642460)
- logind: never elect a session that is stopping as display (#1642460)
- logind: introduce little helper that checks whether a session is ready (#1642460)
- logind: propagate session stop errors (#1642460)
- logind: rework how we manage the slice and user-runtime-dir@.service unit for each user (#1642460)
- logind: optionally, keep the user@.service instance for eached logged in user around for a while (#1642460)
- logind: add a RequiresMountsFor= dependency from the session scope unit to the home directory of the user (#1642460)
- logind: improve error propagation of user_check_linger_file() (#1642460)
- logind: automatically GC lingering users for who now user@.service (nor slice, not runtime dir service) is running anymore (#1642460)
- pam_systemd: simplify code which with we set environment variables (#1642460)
- logind: validate /run/user/1000 before we set it (#1642460)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-51" date="1632398400">- define newly needed constants (#1850986)
- sd-netlink: support IFLA_PROP_LIST and IFLA_ALT_IFNAME attributes (#1850986)
- sd-netlink: introduce sd_netlink_message_read_strv() (#1850986)
- sd-netlink: introduce sd_netlink_message_append_strv() (#1850986)
- test: add a test for sd_netlink_message_{append,read}_strv() (#1850986)
- util: introduce ifname_valid_full() (#1850986)
- rename function (#1850986)
- udev: support AlternativeName= setting in .link file (#1850986)
- network: make Name= in [Match] support alternative names of interfaces (#1850986)
- udev: extend the length of ID_NET_NAME_XXX= to ALTIFNAMSIZ (#1850986)
- udev: do not fail if kernel does not support alternative names (#1850986)
- udev: introduce AlternativeNamesPolicy= setting (#1850986)
- network: set AlternativeNamesPolicy= in 99-default.link (#1850986)
- random-util: call initialize_srand() after fork() (#1850986)
- sd-netlink: introduce rtnl_resolve_link_alternative_names() (#1850986)
- udev: sort alternative names (#1850986)
- netlink: introduce rtnl_get/delete_link_alternative_names() (#1850986)
- netlink: do not fail when new interface name is already used as an alternative name (#1850986)
- udev: do not try to reassign alternative names (#1850986)
- Fix LGTM build (#1850986)
- sd-hwdb: allow empty properties (#1930568)
- Update hwdb (#1930568)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-51.1" date="1638360000">- sd-event: take ref on event loop object before dispatching event sources (#2024903)
- pid1: fix free of uninitialized pointer in unit_fail_if_noncanonical() (#2024903)
- Disable iptables for CI (#2024903)
- test-seccomp: accept ENOSYS from sysctl(2) too (#2024903)
- Disable libpitc to fix CentOS Stream CI (#2024903)
- test: accept that char device 0/0 can now be created witout privileges (#2024903)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-51.2" date="1638532800">- core: return true from cg_is_empty* on ENOENT (#2024903)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-51.3" date="1639137600">- Do not fail if the same alt. name is set again (#2030027)
- meson: avoid bogus meson warning (#2030027)
- meson: do not fail if rsync is not installed with meson 0.57.2 (#2030027)</changelog>
</package>
<package pkgid="4d247f5d4ab8b66aeeb817a9288f8712deb2dd6708a9b0eb1e31c02457f7ab55" name="systemd-tests-debuginfo" arch="x86_64">
  <version epoch="0" ver="239" rel="51.el8_5.5"/>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 239-47" date="1622808000">- systemd-binfmt: Add safeguard in triggers (#1787144)
- spec: Requires(post) openssl-libs to fix missing /etc/machine-id (#1947438)
- spec: Go back to using systemctl preset-all in post (#1783263, #1647172, #1118740)
- spec: Disable libiptc support (#1817265)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-48" date="1624536000">- cgroup: Also set io.bfq.weight (#1927290)
- seccomp: allow turning off of seccomp filtering via env var (#1916835)
- meson: remove strange dep that causes meson to enter infinite loop (#1970860)
- copy: handle copy_file_range() weirdness on procfs/sysfs (#1970860)
- core: Hide "Deactivated successfully" message (#1954802)
- util: rework in_initrd() to make use of path_is_temporary_fs() (#1959339)
- initrd: extend SYSTEMD_IN_INITRD to accept non-ramfs rootfs (#1959339)
- initrd: do a debug log if failed to detect rootfs type (#1959339)
- initrd: do a debug log if /etc/initrd-release doesn't take effect (#1959339)
- units: assign user-runtime-dir@.service to user-%i.slice (#1946453)
- units: order user-runtime-dir@.service after systemd-user-sessions.service (#1946453)
- units: make sure user-runtime-dir@.service is Type=oneshot (#1946453)
- user-runtime-dir: downgrade a few log messages to LOG_DEBUG that we ignore (#1946453)
- shared/install: Preserve escape characters for escaped unit names (#1952686)
- basic/virt: Detect PowerVM hypervisor (#1937989)
- man: document differences in clean exit status for Type=oneshot (#1940078)
- busctl: add a timestamp to the output of the busctl monitor command (#1909214)
- basic/cap-list: parse/print numerical capabilities (#1946943)
- shared/mount-util: convert to libmount (#1885143)
- mount-util: bind_remount: avoid calling statvfs (#1885143)
- mount-util: use UMOUNT_NOFOLLOW in recursive umounter (#1885143)
- test-install-root: create referenced targets (#1835351)
- install: warn if WantedBy targets don't exist (#1835351)
- test-install-root: add test for unknown WantedBy= target (#1835351)
- ceph is a network filesystem (#1952013)
- sysctl: set kernel.core_pipe_limit=16 (#1949729)
- core: don't drop timer expired but not yet processed when system date is changed (#1899402)
- core: Detect initial timer state from serialized data (#1899402)
- rc-local: order after network-online.target (#1934028)
- set core ulimit to 0 like on RHEL-7 (#1905582)
- test-mountpointutil-util: do not assert in test_mnt_id() (#1910425)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-49" date="1627041600">- remove a left-over break (#1970860)
- basic/unit-name: do not use strdupa() on a path (#1974700)
- sd-event: change ordering of pending/ratelimited events (#1968528)
- sd-event: drop unnecessary "else" (#1968528)
- sd-event: use CMP() macro (#1968528)
- sd-event: use usec_add() (#1968528)
- sd-event: make event_source_time_prioq_reshuffle() accept all event source type (#1968528)
- sd-event: always reshuffle time prioq on changing online/offline state (#1968528)
- ci: run unit tests on z-stream branches as well (#1970860)
- ci: drop forgotten Travis references (#1934504)
- ci: run unit tests on CentOS 8 Stream as well (#1934504)
- ci: add missing test dependencies (#1934504)
- meson: bump timeout for test-udev to 180s (#1934504)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-50" date="1630065600">- Added option --check-inhibitors for non-tty usage (#1269726)
- logind: Introduce RebootWithFlags and others (#1269726)
- logind: add …WithFlags methods to policy (#1269726)
- logind: simplify flags handling a bit (#1269726)
- Update link to RHEL documentation (#1982584)
- Set default core ulimit to 0, but keep the hard limit ulimited (#1905582)
- shared/seccomp-util: address family filtering is broken on ppc (#1982650)
- logind: rework Seat/Session/User object allocation and freeing a bit (#1642460)
- logind: fix serialization/deserialization of user's "display session" (#1642460)
- logind: turn of stdio locking when writing session files too (#1642460)
- units: set StopWhenUnneeded= for the user slice units too (#1642460)
- units: improve Description= string a bit (#1642460)
- logind: improve logging in manager_connect_console() (#1642460)
- logind: save/restore User object's "stopping" field during restarts (#1642460)
- logind: correct bad clean-up path (#1642460)
- logind: fix bad error propagation (#1642460)
- logind: never elect a session that is stopping as display (#1642460)
- logind: introduce little helper that checks whether a session is ready (#1642460)
- logind: propagate session stop errors (#1642460)
- logind: rework how we manage the slice and user-runtime-dir@.service unit for each user (#1642460)
- logind: optionally, keep the user@.service instance for eached logged in user around for a while (#1642460)
- logind: add a RequiresMountsFor= dependency from the session scope unit to the home directory of the user (#1642460)
- logind: improve error propagation of user_check_linger_file() (#1642460)
- logind: automatically GC lingering users for who now user@.service (nor slice, not runtime dir service) is running anymore (#1642460)
- pam_systemd: simplify code which with we set environment variables (#1642460)
- logind: validate /run/user/1000 before we set it (#1642460)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-51" date="1632398400">- define newly needed constants (#1850986)
- sd-netlink: support IFLA_PROP_LIST and IFLA_ALT_IFNAME attributes (#1850986)
- sd-netlink: introduce sd_netlink_message_read_strv() (#1850986)
- sd-netlink: introduce sd_netlink_message_append_strv() (#1850986)
- test: add a test for sd_netlink_message_{append,read}_strv() (#1850986)
- util: introduce ifname_valid_full() (#1850986)
- rename function (#1850986)
- udev: support AlternativeName= setting in .link file (#1850986)
- network: make Name= in [Match] support alternative names of interfaces (#1850986)
- udev: extend the length of ID_NET_NAME_XXX= to ALTIFNAMSIZ (#1850986)
- udev: do not fail if kernel does not support alternative names (#1850986)
- udev: introduce AlternativeNamesPolicy= setting (#1850986)
- network: set AlternativeNamesPolicy= in 99-default.link (#1850986)
- random-util: call initialize_srand() after fork() (#1850986)
- sd-netlink: introduce rtnl_resolve_link_alternative_names() (#1850986)
- udev: sort alternative names (#1850986)
- netlink: introduce rtnl_get/delete_link_alternative_names() (#1850986)
- netlink: do not fail when new interface name is already used as an alternative name (#1850986)
- udev: do not try to reassign alternative names (#1850986)
- Fix LGTM build (#1850986)
- sd-hwdb: allow empty properties (#1930568)
- Update hwdb (#1930568)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-51.1" date="1638360000">- sd-event: take ref on event loop object before dispatching event sources (#2024903)
- pid1: fix free of uninitialized pointer in unit_fail_if_noncanonical() (#2024903)
- Disable iptables for CI (#2024903)
- test-seccomp: accept ENOSYS from sysctl(2) too (#2024903)
- Disable libpitc to fix CentOS Stream CI (#2024903)
- test: accept that char device 0/0 can now be created witout privileges (#2024903)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-51.2" date="1638532800">- core: return true from cg_is_empty* on ENOENT (#2024903)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-51.3" date="1639137600">- Do not fail if the same alt. name is set again (#2030027)
- meson: avoid bogus meson warning (#2030027)
- meson: do not fail if rsync is not installed with meson 0.57.2 (#2030027)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-51.4" date="1642075200">- mount: don't propagate errors from mount_setup_unit() further up (#2039327)
- test: make TEST-47 less racy (#2039327)
- macro: define HAS_FEATURE_ADDRESS_SANITIZER also on gcc (#2039327)
- tests: add helper function to autodetect CI environments (#2039327)
- strv: rework FOREACH_STRING() macro (#2039327)
- test,systemctl: use "const char*" instead of "char*" (#2039327)
- ci: pass the $GITHUB_ACTIONS variable to the CentOS container (#2039327)
- core: rename unit_{start_limit|condition|assert}_test() to unit_test_xyz() (#2037395)
- core: Check unit start rate limiting earlier (#2037395)
- sd-event: introduce callback invoked when event source ratelimit expires (#2037395)
- core: rename/generalize UNIT(u)-&gt;test_start_limit() hook (#2037395)
- mount: make mount units start jobs not runnable if /p/s/mountinfo ratelimit is in effect (#2037395)
- mount: retrigger run queue after ratelimit expired to run delayed mount start jobs (#2037395)
- pid1: add a manager_trigger_run_queue() helper (#2037395)
- unit: add jobs that were skipped because of ratelimit back to run_queue (#2037395)
- udev/net_id: introduce naming scheme for RHEL-8.5 (#2040244)
- udev/net_id: remove extraneous bracket (#2040244)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-51.5" date="1643112000">- mount: do not update exec deps on mountinfo changes (#2038878)
- core/mount: add implicit unit dependencies even if when mount unit is generated from /proc/self/mountinfo (#2038878)</changelog>
</package>
<package pkgid="5feb7ace73028edb3679dce34593b24491f6375761165e9796626443db68749a" name="systemd-udev-debuginfo" arch="x86_64">
  <version epoch="0" ver="239" rel="51.el8_5.2"/>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-44" date="1611835200">- ci: PowerTools repo was renamed to powertools in RHEL 8.3 (#1871827)
- ci: use quay.io instead of Docker Hub to avoid rate limits (#1871827)
- ci: move jobs from Travis CI to GH Actions (#1871827)
- unit: make UNIT() cast function deal with NULL pointers (#1871827)
- use link to RHEL-8 docs (#1623116)
- cgroup: Also set blkio.bfq.weight (#1657810)
- units: make sure initrd-cleanup.service terminates before switching to rootfs (#1657810)
- core: reload SELinux label cache on daemon-reload (#1888912)
- selinux: introduce mac_selinux_create_file_prepare_at() (#1888912)
- selinux: add trigger for policy reload to refresh internal selabel cache (#1888912)
- udev/net_id: give RHEL-8.4 naming scheme a name (#1827462)
- basic/stat-util: make mtime check stricter and use entire timestamp (#1642728)
- udev: make algorithm that selects highest priority devlink less susceptible to race conditions (#1642728)
- test: create /dev/null in test-udev.pl (#1642728)
- test: missing "die" (#1642728)
- udev-test: remove a check for whether the test is run in a container (#1642728)
- udev-test: skip the test only if it can't setup its environment (#1642728)
- udev-test: fix test skip condition (#1642728)
- udev-test: fix missing directory test/run (#1642728)
- udev-test: check if permitted to create block device nodes (#1642728)
- test-udev: add a testcase of too long line (#1642728)
- test-udev: use proper semantics for too long line with continuation (#1642728)
- test-udev: add more tests for line continuations and comments (#1642728)
- test-udev: add more tests for line continuation (#1642728)
- test-udev: fix alignment and drop unnecessary white spaces (#1642728)
- test/udev-test.pl: cleanup if skipping test (#1642728)
- test: add test cases for empty string match (#1642728)
- test: add test case for multi matches when use "||" (#1642728)
- udev-test: do not rely on "mail" group being defined (#1642728)
- test/udev-test.pl: allow multiple devices per test (#1642728)
- test/udev-test.pl: create rules only once (#1642728)
- test/udev-test.pl: allow concurrent additions and removals (#1642728)
- test/udev-test.pl: use computed devnode name (#1642728)
- test/udev-test.pl: test correctness of symlink targets (#1642728)
- test/udev-test.pl: allow checking multiple symlinks (#1642728)
- test/udev-test.pl: fix wrong test descriptions (#1642728)
- test/udev-test.pl: last_rule is unsupported (#1642728)
- test/udev-test.pl: Make some tests a little harder (#1642728)
- test/udev-test.pl: remove bogus rules from magic subsys test (#1642728)
- test/udev-test.pl: merge "space and var with space" tests (#1642728)
- test/udev-test.pl: merge import parent tests into one (#1642728)
- test/udev-test.pl: count "good" results (#1642728)
- tests/udev-test.pl: add multiple device test (#1642728)
- test/udev-test.pl: add repeat count (#1642728)
- test/udev-test.pl: generator for large list of block devices (#1642728)
- test/udev-test.pl: suppress umount error message at startup (#1642728)
- test/udev_test.pl: add "expected good" count (#1642728)
- test/udev-test: gracefully exit when imports fail (#1642728)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-45" date="1615464000">- Revert "test: add test cases for empty string match" and "test: add test case for multi matches when use ||" (#1935124)
- test/sys-script.py: add missing DEVNAME entries to uevents (#1935124)
- sd-event: split out helper functions for reshuffling prioqs (#1937315)
- sd-event: split out enable and disable codepaths from sd_event_source_set_enabled() (#1937315)
- sd-event: mention that two debug logged events are ignored (#1937315)
- sd-event: split clock data allocation out of sd_event_add_time() (#1937315)
- sd-event: split out code to add/remove timer event sources to earliest/latest prioq (#1937315)
- sd-event: fix delays assert brain-o (#17790) (#1937315)
- sd-event: let's suffix last_run/last_log with "_usec" (#1937315)
- sd-event: refuse running default event loops in any other thread than the one they are default for (#1937315)
- sd-event: ref event loop while in sd_event_prepare() ot sd_event_run() (#1937315)
- sd-event: follow coding style with naming return parameter (#1937315)
- sd-event: remove earliest_index/latest_index into common part of event source objects (#1937315)
- sd-event: update state at the end in event_source_enable (#1937315)
- sd-event: increase n_enabled_child_sources just once (#1937315)
- sd-event: add ability to ratelimit event sources (#1937315)
- test: add ratelimiting test (#1937315)
- core: prevent excessive /proc/self/mountinfo parsing (#1937315)
- udev: run link_update() with increased retry count in second invocation (#1935124)
- pam-systemd: use secure_getenv() rather than getenv() (#1936866)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-46" date="1621425600">- Revert "udev: run link_update() with increased retry count in second invocation" (#1942299)
- Revert "udev: make algorithm that selects highest priority devlink less susceptible to race conditions" (#1942299)
- test/udev-test.pl: drop test cases that add mutliple devices (#1942299)</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 239-47" date="1622808000">- systemd-binfmt: Add safeguard in triggers (#1787144)
- spec: Requires(post) openssl-libs to fix missing /etc/machine-id (#1947438)
- spec: Go back to using systemctl preset-all in post (#1783263, #1647172, #1118740)
- spec: Disable libiptc support (#1817265)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-48" date="1624536000">- cgroup: Also set io.bfq.weight (#1927290)
- seccomp: allow turning off of seccomp filtering via env var (#1916835)
- meson: remove strange dep that causes meson to enter infinite loop (#1970860)
- copy: handle copy_file_range() weirdness on procfs/sysfs (#1970860)
- core: Hide "Deactivated successfully" message (#1954802)
- util: rework in_initrd() to make use of path_is_temporary_fs() (#1959339)
- initrd: extend SYSTEMD_IN_INITRD to accept non-ramfs rootfs (#1959339)
- initrd: do a debug log if failed to detect rootfs type (#1959339)
- initrd: do a debug log if /etc/initrd-release doesn't take effect (#1959339)
- units: assign user-runtime-dir@.service to user-%i.slice (#1946453)
- units: order user-runtime-dir@.service after systemd-user-sessions.service (#1946453)
- units: make sure user-runtime-dir@.service is Type=oneshot (#1946453)
- user-runtime-dir: downgrade a few log messages to LOG_DEBUG that we ignore (#1946453)
- shared/install: Preserve escape characters for escaped unit names (#1952686)
- basic/virt: Detect PowerVM hypervisor (#1937989)
- man: document differences in clean exit status for Type=oneshot (#1940078)
- busctl: add a timestamp to the output of the busctl monitor command (#1909214)
- basic/cap-list: parse/print numerical capabilities (#1946943)
- shared/mount-util: convert to libmount (#1885143)
- mount-util: bind_remount: avoid calling statvfs (#1885143)
- mount-util: use UMOUNT_NOFOLLOW in recursive umounter (#1885143)
- test-install-root: create referenced targets (#1835351)
- install: warn if WantedBy targets don't exist (#1835351)
- test-install-root: add test for unknown WantedBy= target (#1835351)
- ceph is a network filesystem (#1952013)
- sysctl: set kernel.core_pipe_limit=16 (#1949729)
- core: don't drop timer expired but not yet processed when system date is changed (#1899402)
- core: Detect initial timer state from serialized data (#1899402)
- rc-local: order after network-online.target (#1934028)
- set core ulimit to 0 like on RHEL-7 (#1905582)
- test-mountpointutil-util: do not assert in test_mnt_id() (#1910425)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-49" date="1627041600">- remove a left-over break (#1970860)
- basic/unit-name: do not use strdupa() on a path (#1974700)
- sd-event: change ordering of pending/ratelimited events (#1968528)
- sd-event: drop unnecessary "else" (#1968528)
- sd-event: use CMP() macro (#1968528)
- sd-event: use usec_add() (#1968528)
- sd-event: make event_source_time_prioq_reshuffle() accept all event source type (#1968528)
- sd-event: always reshuffle time prioq on changing online/offline state (#1968528)
- ci: run unit tests on z-stream branches as well (#1970860)
- ci: drop forgotten Travis references (#1934504)
- ci: run unit tests on CentOS 8 Stream as well (#1934504)
- ci: add missing test dependencies (#1934504)
- meson: bump timeout for test-udev to 180s (#1934504)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-50" date="1630065600">- Added option --check-inhibitors for non-tty usage (#1269726)
- logind: Introduce RebootWithFlags and others (#1269726)
- logind: add …WithFlags methods to policy (#1269726)
- logind: simplify flags handling a bit (#1269726)
- Update link to RHEL documentation (#1982584)
- Set default core ulimit to 0, but keep the hard limit ulimited (#1905582)
- shared/seccomp-util: address family filtering is broken on ppc (#1982650)
- logind: rework Seat/Session/User object allocation and freeing a bit (#1642460)
- logind: fix serialization/deserialization of user's "display session" (#1642460)
- logind: turn of stdio locking when writing session files too (#1642460)
- units: set StopWhenUnneeded= for the user slice units too (#1642460)
- units: improve Description= string a bit (#1642460)
- logind: improve logging in manager_connect_console() (#1642460)
- logind: save/restore User object's "stopping" field during restarts (#1642460)
- logind: correct bad clean-up path (#1642460)
- logind: fix bad error propagation (#1642460)
- logind: never elect a session that is stopping as display (#1642460)
- logind: introduce little helper that checks whether a session is ready (#1642460)
- logind: propagate session stop errors (#1642460)
- logind: rework how we manage the slice and user-runtime-dir@.service unit for each user (#1642460)
- logind: optionally, keep the user@.service instance for eached logged in user around for a while (#1642460)
- logind: add a RequiresMountsFor= dependency from the session scope unit to the home directory of the user (#1642460)
- logind: improve error propagation of user_check_linger_file() (#1642460)
- logind: automatically GC lingering users for who now user@.service (nor slice, not runtime dir service) is running anymore (#1642460)
- pam_systemd: simplify code which with we set environment variables (#1642460)
- logind: validate /run/user/1000 before we set it (#1642460)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-51" date="1632398400">- define newly needed constants (#1850986)
- sd-netlink: support IFLA_PROP_LIST and IFLA_ALT_IFNAME attributes (#1850986)
- sd-netlink: introduce sd_netlink_message_read_strv() (#1850986)
- sd-netlink: introduce sd_netlink_message_append_strv() (#1850986)
- test: add a test for sd_netlink_message_{append,read}_strv() (#1850986)
- util: introduce ifname_valid_full() (#1850986)
- rename function (#1850986)
- udev: support AlternativeName= setting in .link file (#1850986)
- network: make Name= in [Match] support alternative names of interfaces (#1850986)
- udev: extend the length of ID_NET_NAME_XXX= to ALTIFNAMSIZ (#1850986)
- udev: do not fail if kernel does not support alternative names (#1850986)
- udev: introduce AlternativeNamesPolicy= setting (#1850986)
- network: set AlternativeNamesPolicy= in 99-default.link (#1850986)
- random-util: call initialize_srand() after fork() (#1850986)
- sd-netlink: introduce rtnl_resolve_link_alternative_names() (#1850986)
- udev: sort alternative names (#1850986)
- netlink: introduce rtnl_get/delete_link_alternative_names() (#1850986)
- netlink: do not fail when new interface name is already used as an alternative name (#1850986)
- udev: do not try to reassign alternative names (#1850986)
- Fix LGTM build (#1850986)
- sd-hwdb: allow empty properties (#1930568)
- Update hwdb (#1930568)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-51.1" date="1638360000">- sd-event: take ref on event loop object before dispatching event sources (#2024903)
- pid1: fix free of uninitialized pointer in unit_fail_if_noncanonical() (#2024903)
- Disable iptables for CI (#2024903)
- test-seccomp: accept ENOSYS from sysctl(2) too (#2024903)
- Disable libpitc to fix CentOS Stream CI (#2024903)
- test: accept that char device 0/0 can now be created witout privileges (#2024903)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-51.2" date="1638532800">- core: return true from cg_is_empty* on ENOENT (#2024903)</changelog>
</package>
<package pkgid="8802bbe1cda753b6351c83e59eaf48bfaf50a7ee987eaae0cb3024229029aebb" name="systemd-udev-debuginfo" arch="x86_64">
  <version epoch="0" ver="239" rel="51.el8_5.3"/>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-45" date="1615464000">- Revert "test: add test cases for empty string match" and "test: add test case for multi matches when use ||" (#1935124)
- test/sys-script.py: add missing DEVNAME entries to uevents (#1935124)
- sd-event: split out helper functions for reshuffling prioqs (#1937315)
- sd-event: split out enable and disable codepaths from sd_event_source_set_enabled() (#1937315)
- sd-event: mention that two debug logged events are ignored (#1937315)
- sd-event: split clock data allocation out of sd_event_add_time() (#1937315)
- sd-event: split out code to add/remove timer event sources to earliest/latest prioq (#1937315)
- sd-event: fix delays assert brain-o (#17790) (#1937315)
- sd-event: let's suffix last_run/last_log with "_usec" (#1937315)
- sd-event: refuse running default event loops in any other thread than the one they are default for (#1937315)
- sd-event: ref event loop while in sd_event_prepare() ot sd_event_run() (#1937315)
- sd-event: follow coding style with naming return parameter (#1937315)
- sd-event: remove earliest_index/latest_index into common part of event source objects (#1937315)
- sd-event: update state at the end in event_source_enable (#1937315)
- sd-event: increase n_enabled_child_sources just once (#1937315)
- sd-event: add ability to ratelimit event sources (#1937315)
- test: add ratelimiting test (#1937315)
- core: prevent excessive /proc/self/mountinfo parsing (#1937315)
- udev: run link_update() with increased retry count in second invocation (#1935124)
- pam-systemd: use secure_getenv() rather than getenv() (#1936866)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-46" date="1621425600">- Revert "udev: run link_update() with increased retry count in second invocation" (#1942299)
- Revert "udev: make algorithm that selects highest priority devlink less susceptible to race conditions" (#1942299)
- test/udev-test.pl: drop test cases that add mutliple devices (#1942299)</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 239-47" date="1622808000">- systemd-binfmt: Add safeguard in triggers (#1787144)
- spec: Requires(post) openssl-libs to fix missing /etc/machine-id (#1947438)
- spec: Go back to using systemctl preset-all in post (#1783263, #1647172, #1118740)
- spec: Disable libiptc support (#1817265)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-48" date="1624536000">- cgroup: Also set io.bfq.weight (#1927290)
- seccomp: allow turning off of seccomp filtering via env var (#1916835)
- meson: remove strange dep that causes meson to enter infinite loop (#1970860)
- copy: handle copy_file_range() weirdness on procfs/sysfs (#1970860)
- core: Hide "Deactivated successfully" message (#1954802)
- util: rework in_initrd() to make use of path_is_temporary_fs() (#1959339)
- initrd: extend SYSTEMD_IN_INITRD to accept non-ramfs rootfs (#1959339)
- initrd: do a debug log if failed to detect rootfs type (#1959339)
- initrd: do a debug log if /etc/initrd-release doesn't take effect (#1959339)
- units: assign user-runtime-dir@.service to user-%i.slice (#1946453)
- units: order user-runtime-dir@.service after systemd-user-sessions.service (#1946453)
- units: make sure user-runtime-dir@.service is Type=oneshot (#1946453)
- user-runtime-dir: downgrade a few log messages to LOG_DEBUG that we ignore (#1946453)
- shared/install: Preserve escape characters for escaped unit names (#1952686)
- basic/virt: Detect PowerVM hypervisor (#1937989)
- man: document differences in clean exit status for Type=oneshot (#1940078)
- busctl: add a timestamp to the output of the busctl monitor command (#1909214)
- basic/cap-list: parse/print numerical capabilities (#1946943)
- shared/mount-util: convert to libmount (#1885143)
- mount-util: bind_remount: avoid calling statvfs (#1885143)
- mount-util: use UMOUNT_NOFOLLOW in recursive umounter (#1885143)
- test-install-root: create referenced targets (#1835351)
- install: warn if WantedBy targets don't exist (#1835351)
- test-install-root: add test for unknown WantedBy= target (#1835351)
- ceph is a network filesystem (#1952013)
- sysctl: set kernel.core_pipe_limit=16 (#1949729)
- core: don't drop timer expired but not yet processed when system date is changed (#1899402)
- core: Detect initial timer state from serialized data (#1899402)
- rc-local: order after network-online.target (#1934028)
- set core ulimit to 0 like on RHEL-7 (#1905582)
- test-mountpointutil-util: do not assert in test_mnt_id() (#1910425)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-49" date="1627041600">- remove a left-over break (#1970860)
- basic/unit-name: do not use strdupa() on a path (#1974700)
- sd-event: change ordering of pending/ratelimited events (#1968528)
- sd-event: drop unnecessary "else" (#1968528)
- sd-event: use CMP() macro (#1968528)
- sd-event: use usec_add() (#1968528)
- sd-event: make event_source_time_prioq_reshuffle() accept all event source type (#1968528)
- sd-event: always reshuffle time prioq on changing online/offline state (#1968528)
- ci: run unit tests on z-stream branches as well (#1970860)
- ci: drop forgotten Travis references (#1934504)
- ci: run unit tests on CentOS 8 Stream as well (#1934504)
- ci: add missing test dependencies (#1934504)
- meson: bump timeout for test-udev to 180s (#1934504)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-50" date="1630065600">- Added option --check-inhibitors for non-tty usage (#1269726)
- logind: Introduce RebootWithFlags and others (#1269726)
- logind: add …WithFlags methods to policy (#1269726)
- logind: simplify flags handling a bit (#1269726)
- Update link to RHEL documentation (#1982584)
- Set default core ulimit to 0, but keep the hard limit ulimited (#1905582)
- shared/seccomp-util: address family filtering is broken on ppc (#1982650)
- logind: rework Seat/Session/User object allocation and freeing a bit (#1642460)
- logind: fix serialization/deserialization of user's "display session" (#1642460)
- logind: turn of stdio locking when writing session files too (#1642460)
- units: set StopWhenUnneeded= for the user slice units too (#1642460)
- units: improve Description= string a bit (#1642460)
- logind: improve logging in manager_connect_console() (#1642460)
- logind: save/restore User object's "stopping" field during restarts (#1642460)
- logind: correct bad clean-up path (#1642460)
- logind: fix bad error propagation (#1642460)
- logind: never elect a session that is stopping as display (#1642460)
- logind: introduce little helper that checks whether a session is ready (#1642460)
- logind: propagate session stop errors (#1642460)
- logind: rework how we manage the slice and user-runtime-dir@.service unit for each user (#1642460)
- logind: optionally, keep the user@.service instance for eached logged in user around for a while (#1642460)
- logind: add a RequiresMountsFor= dependency from the session scope unit to the home directory of the user (#1642460)
- logind: improve error propagation of user_check_linger_file() (#1642460)
- logind: automatically GC lingering users for who now user@.service (nor slice, not runtime dir service) is running anymore (#1642460)
- pam_systemd: simplify code which with we set environment variables (#1642460)
- logind: validate /run/user/1000 before we set it (#1642460)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-51" date="1632398400">- define newly needed constants (#1850986)
- sd-netlink: support IFLA_PROP_LIST and IFLA_ALT_IFNAME attributes (#1850986)
- sd-netlink: introduce sd_netlink_message_read_strv() (#1850986)
- sd-netlink: introduce sd_netlink_message_append_strv() (#1850986)
- test: add a test for sd_netlink_message_{append,read}_strv() (#1850986)
- util: introduce ifname_valid_full() (#1850986)
- rename function (#1850986)
- udev: support AlternativeName= setting in .link file (#1850986)
- network: make Name= in [Match] support alternative names of interfaces (#1850986)
- udev: extend the length of ID_NET_NAME_XXX= to ALTIFNAMSIZ (#1850986)
- udev: do not fail if kernel does not support alternative names (#1850986)
- udev: introduce AlternativeNamesPolicy= setting (#1850986)
- network: set AlternativeNamesPolicy= in 99-default.link (#1850986)
- random-util: call initialize_srand() after fork() (#1850986)
- sd-netlink: introduce rtnl_resolve_link_alternative_names() (#1850986)
- udev: sort alternative names (#1850986)
- netlink: introduce rtnl_get/delete_link_alternative_names() (#1850986)
- netlink: do not fail when new interface name is already used as an alternative name (#1850986)
- udev: do not try to reassign alternative names (#1850986)
- Fix LGTM build (#1850986)
- sd-hwdb: allow empty properties (#1930568)
- Update hwdb (#1930568)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-51.1" date="1638360000">- sd-event: take ref on event loop object before dispatching event sources (#2024903)
- pid1: fix free of uninitialized pointer in unit_fail_if_noncanonical() (#2024903)
- Disable iptables for CI (#2024903)
- test-seccomp: accept ENOSYS from sysctl(2) too (#2024903)
- Disable libpitc to fix CentOS Stream CI (#2024903)
- test: accept that char device 0/0 can now be created witout privileges (#2024903)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-51.2" date="1638532800">- core: return true from cg_is_empty* on ENOENT (#2024903)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-51.3" date="1639137600">- Do not fail if the same alt. name is set again (#2030027)
- meson: avoid bogus meson warning (#2030027)
- meson: do not fail if rsync is not installed with meson 0.57.2 (#2030027)</changelog>
</package>
<package pkgid="974f9902dbcff55bba9ed0b58bfa01feff536c69000ca31f1aa2e8c0bfff2fe9" name="systemd-udev-debuginfo" arch="x86_64">
  <version epoch="0" ver="239" rel="51.el8_5.5"/>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 239-47" date="1622808000">- systemd-binfmt: Add safeguard in triggers (#1787144)
- spec: Requires(post) openssl-libs to fix missing /etc/machine-id (#1947438)
- spec: Go back to using systemctl preset-all in post (#1783263, #1647172, #1118740)
- spec: Disable libiptc support (#1817265)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-48" date="1624536000">- cgroup: Also set io.bfq.weight (#1927290)
- seccomp: allow turning off of seccomp filtering via env var (#1916835)
- meson: remove strange dep that causes meson to enter infinite loop (#1970860)
- copy: handle copy_file_range() weirdness on procfs/sysfs (#1970860)
- core: Hide "Deactivated successfully" message (#1954802)
- util: rework in_initrd() to make use of path_is_temporary_fs() (#1959339)
- initrd: extend SYSTEMD_IN_INITRD to accept non-ramfs rootfs (#1959339)
- initrd: do a debug log if failed to detect rootfs type (#1959339)
- initrd: do a debug log if /etc/initrd-release doesn't take effect (#1959339)
- units: assign user-runtime-dir@.service to user-%i.slice (#1946453)
- units: order user-runtime-dir@.service after systemd-user-sessions.service (#1946453)
- units: make sure user-runtime-dir@.service is Type=oneshot (#1946453)
- user-runtime-dir: downgrade a few log messages to LOG_DEBUG that we ignore (#1946453)
- shared/install: Preserve escape characters for escaped unit names (#1952686)
- basic/virt: Detect PowerVM hypervisor (#1937989)
- man: document differences in clean exit status for Type=oneshot (#1940078)
- busctl: add a timestamp to the output of the busctl monitor command (#1909214)
- basic/cap-list: parse/print numerical capabilities (#1946943)
- shared/mount-util: convert to libmount (#1885143)
- mount-util: bind_remount: avoid calling statvfs (#1885143)
- mount-util: use UMOUNT_NOFOLLOW in recursive umounter (#1885143)
- test-install-root: create referenced targets (#1835351)
- install: warn if WantedBy targets don't exist (#1835351)
- test-install-root: add test for unknown WantedBy= target (#1835351)
- ceph is a network filesystem (#1952013)
- sysctl: set kernel.core_pipe_limit=16 (#1949729)
- core: don't drop timer expired but not yet processed when system date is changed (#1899402)
- core: Detect initial timer state from serialized data (#1899402)
- rc-local: order after network-online.target (#1934028)
- set core ulimit to 0 like on RHEL-7 (#1905582)
- test-mountpointutil-util: do not assert in test_mnt_id() (#1910425)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-49" date="1627041600">- remove a left-over break (#1970860)
- basic/unit-name: do not use strdupa() on a path (#1974700)
- sd-event: change ordering of pending/ratelimited events (#1968528)
- sd-event: drop unnecessary "else" (#1968528)
- sd-event: use CMP() macro (#1968528)
- sd-event: use usec_add() (#1968528)
- sd-event: make event_source_time_prioq_reshuffle() accept all event source type (#1968528)
- sd-event: always reshuffle time prioq on changing online/offline state (#1968528)
- ci: run unit tests on z-stream branches as well (#1970860)
- ci: drop forgotten Travis references (#1934504)
- ci: run unit tests on CentOS 8 Stream as well (#1934504)
- ci: add missing test dependencies (#1934504)
- meson: bump timeout for test-udev to 180s (#1934504)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-50" date="1630065600">- Added option --check-inhibitors for non-tty usage (#1269726)
- logind: Introduce RebootWithFlags and others (#1269726)
- logind: add …WithFlags methods to policy (#1269726)
- logind: simplify flags handling a bit (#1269726)
- Update link to RHEL documentation (#1982584)
- Set default core ulimit to 0, but keep the hard limit ulimited (#1905582)
- shared/seccomp-util: address family filtering is broken on ppc (#1982650)
- logind: rework Seat/Session/User object allocation and freeing a bit (#1642460)
- logind: fix serialization/deserialization of user's "display session" (#1642460)
- logind: turn of stdio locking when writing session files too (#1642460)
- units: set StopWhenUnneeded= for the user slice units too (#1642460)
- units: improve Description= string a bit (#1642460)
- logind: improve logging in manager_connect_console() (#1642460)
- logind: save/restore User object's "stopping" field during restarts (#1642460)
- logind: correct bad clean-up path (#1642460)
- logind: fix bad error propagation (#1642460)
- logind: never elect a session that is stopping as display (#1642460)
- logind: introduce little helper that checks whether a session is ready (#1642460)
- logind: propagate session stop errors (#1642460)
- logind: rework how we manage the slice and user-runtime-dir@.service unit for each user (#1642460)
- logind: optionally, keep the user@.service instance for eached logged in user around for a while (#1642460)
- logind: add a RequiresMountsFor= dependency from the session scope unit to the home directory of the user (#1642460)
- logind: improve error propagation of user_check_linger_file() (#1642460)
- logind: automatically GC lingering users for who now user@.service (nor slice, not runtime dir service) is running anymore (#1642460)
- pam_systemd: simplify code which with we set environment variables (#1642460)
- logind: validate /run/user/1000 before we set it (#1642460)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-51" date="1632398400">- define newly needed constants (#1850986)
- sd-netlink: support IFLA_PROP_LIST and IFLA_ALT_IFNAME attributes (#1850986)
- sd-netlink: introduce sd_netlink_message_read_strv() (#1850986)
- sd-netlink: introduce sd_netlink_message_append_strv() (#1850986)
- test: add a test for sd_netlink_message_{append,read}_strv() (#1850986)
- util: introduce ifname_valid_full() (#1850986)
- rename function (#1850986)
- udev: support AlternativeName= setting in .link file (#1850986)
- network: make Name= in [Match] support alternative names of interfaces (#1850986)
- udev: extend the length of ID_NET_NAME_XXX= to ALTIFNAMSIZ (#1850986)
- udev: do not fail if kernel does not support alternative names (#1850986)
- udev: introduce AlternativeNamesPolicy= setting (#1850986)
- network: set AlternativeNamesPolicy= in 99-default.link (#1850986)
- random-util: call initialize_srand() after fork() (#1850986)
- sd-netlink: introduce rtnl_resolve_link_alternative_names() (#1850986)
- udev: sort alternative names (#1850986)
- netlink: introduce rtnl_get/delete_link_alternative_names() (#1850986)
- netlink: do not fail when new interface name is already used as an alternative name (#1850986)
- udev: do not try to reassign alternative names (#1850986)
- Fix LGTM build (#1850986)
- sd-hwdb: allow empty properties (#1930568)
- Update hwdb (#1930568)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-51.1" date="1638360000">- sd-event: take ref on event loop object before dispatching event sources (#2024903)
- pid1: fix free of uninitialized pointer in unit_fail_if_noncanonical() (#2024903)
- Disable iptables for CI (#2024903)
- test-seccomp: accept ENOSYS from sysctl(2) too (#2024903)
- Disable libpitc to fix CentOS Stream CI (#2024903)
- test: accept that char device 0/0 can now be created witout privileges (#2024903)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-51.2" date="1638532800">- core: return true from cg_is_empty* on ENOENT (#2024903)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-51.3" date="1639137600">- Do not fail if the same alt. name is set again (#2030027)
- meson: avoid bogus meson warning (#2030027)
- meson: do not fail if rsync is not installed with meson 0.57.2 (#2030027)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-51.4" date="1642075200">- mount: don't propagate errors from mount_setup_unit() further up (#2039327)
- test: make TEST-47 less racy (#2039327)
- macro: define HAS_FEATURE_ADDRESS_SANITIZER also on gcc (#2039327)
- tests: add helper function to autodetect CI environments (#2039327)
- strv: rework FOREACH_STRING() macro (#2039327)
- test,systemctl: use "const char*" instead of "char*" (#2039327)
- ci: pass the $GITHUB_ACTIONS variable to the CentOS container (#2039327)
- core: rename unit_{start_limit|condition|assert}_test() to unit_test_xyz() (#2037395)
- core: Check unit start rate limiting earlier (#2037395)
- sd-event: introduce callback invoked when event source ratelimit expires (#2037395)
- core: rename/generalize UNIT(u)-&gt;test_start_limit() hook (#2037395)
- mount: make mount units start jobs not runnable if /p/s/mountinfo ratelimit is in effect (#2037395)
- mount: retrigger run queue after ratelimit expired to run delayed mount start jobs (#2037395)
- pid1: add a manager_trigger_run_queue() helper (#2037395)
- unit: add jobs that were skipped because of ratelimit back to run_queue (#2037395)
- udev/net_id: introduce naming scheme for RHEL-8.5 (#2040244)
- udev/net_id: remove extraneous bracket (#2040244)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-51.5" date="1643112000">- mount: do not update exec deps on mountinfo changes (#2038878)
- core/mount: add implicit unit dependencies even if when mount unit is generated from /proc/self/mountinfo (#2038878)</changelog>
</package>
<package pkgid="97cc2879828e64e68a9bce7802a4625dadf171b2af3dd77e3e718c72fc0e982a" name="veritysetup-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.3.3" rel="4.el8_5.1"/>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 2.2.0-0.2" date="1560513600">- Updates to reencryption feature.
- Resolves: #1676622</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 2.2.0-1" date="1565870400">- Update to cryptsetup 2.2.0 (final)
- Resolves: #1738263 #1740342 #1733391 #1729600 #1733390</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 2.2.0-2" date="1567166400">- patch: Fix mapped segments overflow on 32bit architectures.
- patch: Take optimal io size in account with LUKS2 reencryption.
- Resolves: #1742815 #1746532</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 2.2.2-1" date="1574078400">- Update to cryptsetup 2.2.2
- LUKS2 reencryption honors activation flags (one time and persistent).
- LUKS2 reencryption works also without volume keys put in kernel
  keyring service.
- Resolves: #1757783 #1750680 #1753597 #1743399</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 2.3.1-1" date="1585915200">- Update to cryptsetup 2.3.1
- Resolves: #1796826 #1743891 #1785748</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 2.3.3-1" date="1590667200">- Update to cryptsetup 2.3.3
- Resolves: #1796826 #1743891 #1785748</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 2.3.3-2" date="1598529600">- patch: Fix possible memory corruption in LUKS2 validation
	 code in 32bit library.
- Resolves: #1872294</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 2.3.3-3" date="1612353600">- patch: Fix crypto backend to properly handle ECB mode.
- Resolves: #1859091</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 2.3.3-4" date="1613563200">- patch: Fix reencryption for custom devices with data segments
  set to use cipher_null.
- Resolves: #1927409</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 2.3.3-4.1" date="1642161600">- patch: fix CVE-2021-4122.
- Resolves: #2036906</changelog>
</package>
<package pkgid="8dbbfc29a70d5c0f108114510761ab2daf6b86b8b2603824eef694e80f6c39fb" name="vim-debuginfo" arch="x86_64">
  <version epoch="2" ver="8.0.1763" rel="16.el8_5.12"/>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.0.1763-16.3" date="1638532800">- 2028341 - CVE-2021-3984 vim: illegal memory access when C-indenting could lead to Heap Buffer Overflow [rhel-8.6.0]
- 2028430 - CVE-2021-4019 vim: heap-based buffer overflow in find_help_tags() in src/help.c [rhel-8.6.0]</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.0.1763-16.4" date="1641988800">- CVE-2021-4193 vim: vulnerable to Out-of-bounds Read
- CVE-2021-4192 vim: vulnerable to Use After Free</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.0.1763-16.5" date="1643198400">- CVE-2022-0261 vim: Heap-based Buffer Overflow in block_insert() in src/ops.c
- CVE-2022-0318 vim: heap-based buffer overflow in utf_head_off() in mbyte.c</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.0.1763-16.6" date="1643284800">- fix test suite after fix for CVE-2022-0318</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.0.1763-16.7" date="1643284801">- CVE-2022-0359 vim: heap-based buffer overflow in init_ccline() in ex_getln.c</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2:8.0.1763-16.8" date="1643803200">- CVE-2022-0392 vim: heap-based buffer overflow in getexmodeline() in ex_getln.c
- Resolves: rhbz#2049403</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2:8.0.1763-16.9" date="1643803201">- CVE-2022-0392 vim: heap-based buffer overflow in getexmodeline() in ex_getln.c
- Improve fix
- Resolves: rhbz#2049403</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2:8.0.1763-16.10" date="1643889600">- CVE-2022-0413 vim: use after free in src/ex_cmds.c
- Resolves: rhbz#2048525</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2:8.0.1763-16.11" date="1643976000">- CVE-2022-0413 vim: use after free in src/ex_cmds.c
- Fix specfile problems
- Resolves: rhbz#2048525</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.0.1763-16.12" date="1644321600">- CVE-2022-0361 vim: Heap-based Buffer Overflow in GitHub repository</changelog>
</package>
<package pkgid="56d6acda48b62aab878a59bca38b4d4a490f2b3e6c92cf20f9f06428578d2906" name="vim-debuginfo" arch="x86_64">
  <version epoch="2" ver="8.0.1763" rel="16.el8_5.13"/>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.0.1763-16.4" date="1641988800">- CVE-2021-4193 vim: vulnerable to Out-of-bounds Read
- CVE-2021-4192 vim: vulnerable to Use After Free</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.0.1763-16.5" date="1643198400">- CVE-2022-0261 vim: Heap-based Buffer Overflow in block_insert() in src/ops.c
- CVE-2022-0318 vim: heap-based buffer overflow in utf_head_off() in mbyte.c</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.0.1763-16.6" date="1643284800">- fix test suite after fix for CVE-2022-0318</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.0.1763-16.7" date="1643284801">- CVE-2022-0359 vim: heap-based buffer overflow in init_ccline() in ex_getln.c</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2:8.0.1763-16.8" date="1643803200">- CVE-2022-0392 vim: heap-based buffer overflow in getexmodeline() in ex_getln.c
- Resolves: rhbz#2049403</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2:8.0.1763-16.9" date="1643803201">- CVE-2022-0392 vim: heap-based buffer overflow in getexmodeline() in ex_getln.c
- Improve fix
- Resolves: rhbz#2049403</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2:8.0.1763-16.10" date="1643889600">- CVE-2022-0413 vim: use after free in src/ex_cmds.c
- Resolves: rhbz#2048525</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2:8.0.1763-16.11" date="1643976000">- CVE-2022-0413 vim: use after free in src/ex_cmds.c
- Fix specfile problems
- Resolves: rhbz#2048525</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.0.1763-16.12" date="1644321600">- CVE-2022-0361 vim: Heap-based Buffer Overflow in GitHub repository</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.0.1763-16.13" date="1649505600">- CVE-2022-1154 vim: use after free in utf_ptr2char</changelog>
</package>
<package pkgid="819a79c2447e90d321106a5ba4ddd711bfcde8f4725fcd6cc9d215245f10d365" name="vim-debuginfo" arch="x86_64">
  <version epoch="2" ver="8.0.1763" rel="16.el8_5.4"/>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.0.1763-11" date="1560513600">- 1719812 - CVE-2019-12735 vim: vim/neovim: arbitrary command execution in getchar.c [rhel-8.1.0]</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.0.1763-12" date="1563883200">- 1605095 - vim: should not re-implement crypto</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.0.1763-13" date="1563883201">- fixing covscan issues raised by previous commit</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.0.1763-14" date="1581336000">- 1745476 - manpage of vim is garbled in Japanese locale</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.0.1763-15" date="1591099200">- 1842755 - CVE-2019-20807</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.0.1763-16" date="1632139200">- 2004974 - CVE-2021-3796 vim: use-after-free in nv_replace() in normal.c [rhel-8.5.0]
- 2004891 - CVE-2021-3778 vim: heap-based buffer overflow in utf_ptr2char() in mbyte.c [rhel-8.5.0]</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.0.1763-16.1" date="1635249600">- CVE-2021-3872 vim: heap-based buffer overflow in win_redr_status() drawscreen.c [rhel-8.6.0]</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.0.1763-16.2" date="1635249601">- remove the upstream test - uses a feature which is not presented in RHEL 8</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.0.1763-16.3" date="1638532800">- 2028341 - CVE-2021-3984 vim: illegal memory access when C-indenting could lead to Heap Buffer Overflow [rhel-8.6.0]
- 2028430 - CVE-2021-4019 vim: heap-based buffer overflow in find_help_tags() in src/help.c [rhel-8.6.0]</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.0.1763-16.4" date="1641988800">- CVE-2021-4193 vim: vulnerable to Out-of-bounds Read
- CVE-2021-4192 vim: vulnerable to Use After Free</changelog>
</package>
<package pkgid="7b03a9156389ee80536dafb8e9a4b437d59c77c1e407e7ae8a8a64cac6b48664" name="vim-debugsource" arch="x86_64">
  <version epoch="2" ver="8.0.1763" rel="16.el8_5.12"/>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.0.1763-16.3" date="1638532800">- 2028341 - CVE-2021-3984 vim: illegal memory access when C-indenting could lead to Heap Buffer Overflow [rhel-8.6.0]
- 2028430 - CVE-2021-4019 vim: heap-based buffer overflow in find_help_tags() in src/help.c [rhel-8.6.0]</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.0.1763-16.4" date="1641988800">- CVE-2021-4193 vim: vulnerable to Out-of-bounds Read
- CVE-2021-4192 vim: vulnerable to Use After Free</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.0.1763-16.5" date="1643198400">- CVE-2022-0261 vim: Heap-based Buffer Overflow in block_insert() in src/ops.c
- CVE-2022-0318 vim: heap-based buffer overflow in utf_head_off() in mbyte.c</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.0.1763-16.6" date="1643284800">- fix test suite after fix for CVE-2022-0318</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.0.1763-16.7" date="1643284801">- CVE-2022-0359 vim: heap-based buffer overflow in init_ccline() in ex_getln.c</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2:8.0.1763-16.8" date="1643803200">- CVE-2022-0392 vim: heap-based buffer overflow in getexmodeline() in ex_getln.c
- Resolves: rhbz#2049403</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2:8.0.1763-16.9" date="1643803201">- CVE-2022-0392 vim: heap-based buffer overflow in getexmodeline() in ex_getln.c
- Improve fix
- Resolves: rhbz#2049403</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2:8.0.1763-16.10" date="1643889600">- CVE-2022-0413 vim: use after free in src/ex_cmds.c
- Resolves: rhbz#2048525</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2:8.0.1763-16.11" date="1643976000">- CVE-2022-0413 vim: use after free in src/ex_cmds.c
- Fix specfile problems
- Resolves: rhbz#2048525</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.0.1763-16.12" date="1644321600">- CVE-2022-0361 vim: Heap-based Buffer Overflow in GitHub repository</changelog>
</package>
<package pkgid="9a9e6aa58a4ca17431c0e0c9d3617f754a28fc68b396351ec5236d383d3d4fb8" name="vim-debugsource" arch="x86_64">
  <version epoch="2" ver="8.0.1763" rel="16.el8_5.13"/>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.0.1763-16.4" date="1641988800">- CVE-2021-4193 vim: vulnerable to Out-of-bounds Read
- CVE-2021-4192 vim: vulnerable to Use After Free</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.0.1763-16.5" date="1643198400">- CVE-2022-0261 vim: Heap-based Buffer Overflow in block_insert() in src/ops.c
- CVE-2022-0318 vim: heap-based buffer overflow in utf_head_off() in mbyte.c</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.0.1763-16.6" date="1643284800">- fix test suite after fix for CVE-2022-0318</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.0.1763-16.7" date="1643284801">- CVE-2022-0359 vim: heap-based buffer overflow in init_ccline() in ex_getln.c</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2:8.0.1763-16.8" date="1643803200">- CVE-2022-0392 vim: heap-based buffer overflow in getexmodeline() in ex_getln.c
- Resolves: rhbz#2049403</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2:8.0.1763-16.9" date="1643803201">- CVE-2022-0392 vim: heap-based buffer overflow in getexmodeline() in ex_getln.c
- Improve fix
- Resolves: rhbz#2049403</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2:8.0.1763-16.10" date="1643889600">- CVE-2022-0413 vim: use after free in src/ex_cmds.c
- Resolves: rhbz#2048525</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2:8.0.1763-16.11" date="1643976000">- CVE-2022-0413 vim: use after free in src/ex_cmds.c
- Fix specfile problems
- Resolves: rhbz#2048525</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.0.1763-16.12" date="1644321600">- CVE-2022-0361 vim: Heap-based Buffer Overflow in GitHub repository</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.0.1763-16.13" date="1649505600">- CVE-2022-1154 vim: use after free in utf_ptr2char</changelog>
</package>
<package pkgid="58c3e9789c7fbce4e631fea2f52042cde20a385d9ef0ba33f7538aeef599312a" name="vim-debugsource" arch="x86_64">
  <version epoch="2" ver="8.0.1763" rel="16.el8_5.4"/>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.0.1763-11" date="1560513600">- 1719812 - CVE-2019-12735 vim: vim/neovim: arbitrary command execution in getchar.c [rhel-8.1.0]</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.0.1763-12" date="1563883200">- 1605095 - vim: should not re-implement crypto</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.0.1763-13" date="1563883201">- fixing covscan issues raised by previous commit</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.0.1763-14" date="1581336000">- 1745476 - manpage of vim is garbled in Japanese locale</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.0.1763-15" date="1591099200">- 1842755 - CVE-2019-20807</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.0.1763-16" date="1632139200">- 2004974 - CVE-2021-3796 vim: use-after-free in nv_replace() in normal.c [rhel-8.5.0]
- 2004891 - CVE-2021-3778 vim: heap-based buffer overflow in utf_ptr2char() in mbyte.c [rhel-8.5.0]</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.0.1763-16.1" date="1635249600">- CVE-2021-3872 vim: heap-based buffer overflow in win_redr_status() drawscreen.c [rhel-8.6.0]</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.0.1763-16.2" date="1635249601">- remove the upstream test - uses a feature which is not presented in RHEL 8</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.0.1763-16.3" date="1638532800">- 2028341 - CVE-2021-3984 vim: illegal memory access when C-indenting could lead to Heap Buffer Overflow [rhel-8.6.0]
- 2028430 - CVE-2021-4019 vim: heap-based buffer overflow in find_help_tags() in src/help.c [rhel-8.6.0]</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.0.1763-16.4" date="1641988800">- CVE-2021-4193 vim: vulnerable to Out-of-bounds Read
- CVE-2021-4192 vim: vulnerable to Use After Free</changelog>
</package>
<package pkgid="562fb1e8760687422df34cdad3b54b2be6e2218b247174d04ac909ed393ae398" name="vim-minimal-debuginfo" arch="x86_64">
  <version epoch="2" ver="8.0.1763" rel="16.el8_5.12"/>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.0.1763-16.3" date="1638532800">- 2028341 - CVE-2021-3984 vim: illegal memory access when C-indenting could lead to Heap Buffer Overflow [rhel-8.6.0]
- 2028430 - CVE-2021-4019 vim: heap-based buffer overflow in find_help_tags() in src/help.c [rhel-8.6.0]</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.0.1763-16.4" date="1641988800">- CVE-2021-4193 vim: vulnerable to Out-of-bounds Read
- CVE-2021-4192 vim: vulnerable to Use After Free</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.0.1763-16.5" date="1643198400">- CVE-2022-0261 vim: Heap-based Buffer Overflow in block_insert() in src/ops.c
- CVE-2022-0318 vim: heap-based buffer overflow in utf_head_off() in mbyte.c</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.0.1763-16.6" date="1643284800">- fix test suite after fix for CVE-2022-0318</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.0.1763-16.7" date="1643284801">- CVE-2022-0359 vim: heap-based buffer overflow in init_ccline() in ex_getln.c</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2:8.0.1763-16.8" date="1643803200">- CVE-2022-0392 vim: heap-based buffer overflow in getexmodeline() in ex_getln.c
- Resolves: rhbz#2049403</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2:8.0.1763-16.9" date="1643803201">- CVE-2022-0392 vim: heap-based buffer overflow in getexmodeline() in ex_getln.c
- Improve fix
- Resolves: rhbz#2049403</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2:8.0.1763-16.10" date="1643889600">- CVE-2022-0413 vim: use after free in src/ex_cmds.c
- Resolves: rhbz#2048525</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2:8.0.1763-16.11" date="1643976000">- CVE-2022-0413 vim: use after free in src/ex_cmds.c
- Fix specfile problems
- Resolves: rhbz#2048525</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.0.1763-16.12" date="1644321600">- CVE-2022-0361 vim: Heap-based Buffer Overflow in GitHub repository</changelog>
</package>
<package pkgid="9793ee602d017d79336f07556d95a4fb97337f2d79c4d2618788f860b71f03e5" name="vim-minimal-debuginfo" arch="x86_64">
  <version epoch="2" ver="8.0.1763" rel="16.el8_5.13"/>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.0.1763-16.4" date="1641988800">- CVE-2021-4193 vim: vulnerable to Out-of-bounds Read
- CVE-2021-4192 vim: vulnerable to Use After Free</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.0.1763-16.5" date="1643198400">- CVE-2022-0261 vim: Heap-based Buffer Overflow in block_insert() in src/ops.c
- CVE-2022-0318 vim: heap-based buffer overflow in utf_head_off() in mbyte.c</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.0.1763-16.6" date="1643284800">- fix test suite after fix for CVE-2022-0318</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.0.1763-16.7" date="1643284801">- CVE-2022-0359 vim: heap-based buffer overflow in init_ccline() in ex_getln.c</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2:8.0.1763-16.8" date="1643803200">- CVE-2022-0392 vim: heap-based buffer overflow in getexmodeline() in ex_getln.c
- Resolves: rhbz#2049403</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2:8.0.1763-16.9" date="1643803201">- CVE-2022-0392 vim: heap-based buffer overflow in getexmodeline() in ex_getln.c
- Improve fix
- Resolves: rhbz#2049403</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2:8.0.1763-16.10" date="1643889600">- CVE-2022-0413 vim: use after free in src/ex_cmds.c
- Resolves: rhbz#2048525</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2:8.0.1763-16.11" date="1643976000">- CVE-2022-0413 vim: use after free in src/ex_cmds.c
- Fix specfile problems
- Resolves: rhbz#2048525</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.0.1763-16.12" date="1644321600">- CVE-2022-0361 vim: Heap-based Buffer Overflow in GitHub repository</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.0.1763-16.13" date="1649505600">- CVE-2022-1154 vim: use after free in utf_ptr2char</changelog>
</package>
<package pkgid="dddfb211064ff5eb451a4f7420b15756eb228d346cb8ec79f65a259c71524169" name="vim-minimal-debuginfo" arch="x86_64">
  <version epoch="2" ver="8.0.1763" rel="16.el8_5.4"/>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.0.1763-11" date="1560513600">- 1719812 - CVE-2019-12735 vim: vim/neovim: arbitrary command execution in getchar.c [rhel-8.1.0]</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.0.1763-12" date="1563883200">- 1605095 - vim: should not re-implement crypto</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.0.1763-13" date="1563883201">- fixing covscan issues raised by previous commit</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.0.1763-14" date="1581336000">- 1745476 - manpage of vim is garbled in Japanese locale</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.0.1763-15" date="1591099200">- 1842755 - CVE-2019-20807</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.0.1763-16" date="1632139200">- 2004974 - CVE-2021-3796 vim: use-after-free in nv_replace() in normal.c [rhel-8.5.0]
- 2004891 - CVE-2021-3778 vim: heap-based buffer overflow in utf_ptr2char() in mbyte.c [rhel-8.5.0]</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.0.1763-16.1" date="1635249600">- CVE-2021-3872 vim: heap-based buffer overflow in win_redr_status() drawscreen.c [rhel-8.6.0]</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.0.1763-16.2" date="1635249601">- remove the upstream test - uses a feature which is not presented in RHEL 8</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.0.1763-16.3" date="1638532800">- 2028341 - CVE-2021-3984 vim: illegal memory access when C-indenting could lead to Heap Buffer Overflow [rhel-8.6.0]
- 2028430 - CVE-2021-4019 vim: heap-based buffer overflow in find_help_tags() in src/help.c [rhel-8.6.0]</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.0.1763-16.4" date="1641988800">- CVE-2021-4193 vim: vulnerable to Out-of-bounds Read
- CVE-2021-4192 vim: vulnerable to Use After Free</changelog>
</package>
<package pkgid="6090580a800cba01e5d36d957c2815261296fe4226dbab47f5a8ee51c6ab833f" name="xmlrpc-c-apps-debuginfo" arch="i686">
  <version epoch="0" ver="1.51.0" rel="5.el8_5.1"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.48.0-7" date="1501761600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild</changelog>
  <changelog author="Igor Gnatenko &lt;ignatenkobrain@fedoraproject.org&gt; - 1.48.0-8" date="1506686400">- Add xmlrpc_client++.pc</changelog>
  <changelog author="Igor Gnatenko &lt;ignatenkobrain@fedoraproject.org&gt; - 1.49.02-1" date="1506686401">- Update to 1.49.02</changelog>
  <changelog author="Igor Gnatenko &lt;ignatenkobrain@fedoraproject.org&gt; - 1.49.02-2" date="1506859200">- Fix Requires.private in xmlrpc_server++.pc</changelog>
  <changelog author="Igor Gnatenko &lt;ignatenkobrain@fedoraproject.org&gt; - 1.51.0-1" date="1514808000">- Update to 1.51.0</changelog>
  <changelog author="Igor Gnatenko &lt;ignatenkobrain@fedoraproject.org&gt; - 1.51.0-2" date="1516190400">- BuildRequire openssl by pkgconfig()</changelog>
  <changelog author="Igor Gnatenko &lt;ignatenkobrain@fedoraproject.org&gt; - 1.51.0-3" date="1517400000">- Switch to %ldconfig_scriptlets</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.51.0-4" date="1518177600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild</changelog>
  <changelog author="Adam Williamson &lt;awilliam@redhat.com&gt; - 1.51.0-5" date="1524139200">- Backport upstream fix for console spam with debug messages (#1541868)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 1.51.0-5.1" date="1646308800">- Add missing validation of encoding (CVE-2022-25235) (#2058114)</changelog>
</package>
<package pkgid="b4538210cc811a4b1f09ea302e4b6a45b2b00a60854e09240465467bea029910" name="xmlrpc-c-apps-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.51.0" rel="5.el8_5.1"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.48.0-7" date="1501761600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild</changelog>
  <changelog author="Igor Gnatenko &lt;ignatenkobrain@fedoraproject.org&gt; - 1.48.0-8" date="1506686400">- Add xmlrpc_client++.pc</changelog>
  <changelog author="Igor Gnatenko &lt;ignatenkobrain@fedoraproject.org&gt; - 1.49.02-1" date="1506686401">- Update to 1.49.02</changelog>
  <changelog author="Igor Gnatenko &lt;ignatenkobrain@fedoraproject.org&gt; - 1.49.02-2" date="1506859200">- Fix Requires.private in xmlrpc_server++.pc</changelog>
  <changelog author="Igor Gnatenko &lt;ignatenkobrain@fedoraproject.org&gt; - 1.51.0-1" date="1514808000">- Update to 1.51.0</changelog>
  <changelog author="Igor Gnatenko &lt;ignatenkobrain@fedoraproject.org&gt; - 1.51.0-2" date="1516190400">- BuildRequire openssl by pkgconfig()</changelog>
  <changelog author="Igor Gnatenko &lt;ignatenkobrain@fedoraproject.org&gt; - 1.51.0-3" date="1517400000">- Switch to %ldconfig_scriptlets</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.51.0-4" date="1518177600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild</changelog>
  <changelog author="Adam Williamson &lt;awilliam@redhat.com&gt; - 1.51.0-5" date="1524139200">- Backport upstream fix for console spam with debug messages (#1541868)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 1.51.0-5.1" date="1646308800">- Add missing validation of encoding (CVE-2022-25235) (#2058114)</changelog>
</package>
<package pkgid="539fed095278ea23fc2f99c2cd714a1fc8a201eba54cf17bd18bd794dfe07b79" name="xmlrpc-c-c++-debuginfo" arch="i686">
  <version epoch="0" ver="1.51.0" rel="5.el8_5.1"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.48.0-7" date="1501761600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild</changelog>
  <changelog author="Igor Gnatenko &lt;ignatenkobrain@fedoraproject.org&gt; - 1.48.0-8" date="1506686400">- Add xmlrpc_client++.pc</changelog>
  <changelog author="Igor Gnatenko &lt;ignatenkobrain@fedoraproject.org&gt; - 1.49.02-1" date="1506686401">- Update to 1.49.02</changelog>
  <changelog author="Igor Gnatenko &lt;ignatenkobrain@fedoraproject.org&gt; - 1.49.02-2" date="1506859200">- Fix Requires.private in xmlrpc_server++.pc</changelog>
  <changelog author="Igor Gnatenko &lt;ignatenkobrain@fedoraproject.org&gt; - 1.51.0-1" date="1514808000">- Update to 1.51.0</changelog>
  <changelog author="Igor Gnatenko &lt;ignatenkobrain@fedoraproject.org&gt; - 1.51.0-2" date="1516190400">- BuildRequire openssl by pkgconfig()</changelog>
  <changelog author="Igor Gnatenko &lt;ignatenkobrain@fedoraproject.org&gt; - 1.51.0-3" date="1517400000">- Switch to %ldconfig_scriptlets</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.51.0-4" date="1518177600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild</changelog>
  <changelog author="Adam Williamson &lt;awilliam@redhat.com&gt; - 1.51.0-5" date="1524139200">- Backport upstream fix for console spam with debug messages (#1541868)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 1.51.0-5.1" date="1646308800">- Add missing validation of encoding (CVE-2022-25235) (#2058114)</changelog>
</package>
<package pkgid="73358668b775210dd904f1fadc2ed1b1807fe236fceb74ff94790641019395d2" name="xmlrpc-c-c++-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.51.0" rel="5.el8_5.1"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.48.0-7" date="1501761600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild</changelog>
  <changelog author="Igor Gnatenko &lt;ignatenkobrain@fedoraproject.org&gt; - 1.48.0-8" date="1506686400">- Add xmlrpc_client++.pc</changelog>
  <changelog author="Igor Gnatenko &lt;ignatenkobrain@fedoraproject.org&gt; - 1.49.02-1" date="1506686401">- Update to 1.49.02</changelog>
  <changelog author="Igor Gnatenko &lt;ignatenkobrain@fedoraproject.org&gt; - 1.49.02-2" date="1506859200">- Fix Requires.private in xmlrpc_server++.pc</changelog>
  <changelog author="Igor Gnatenko &lt;ignatenkobrain@fedoraproject.org&gt; - 1.51.0-1" date="1514808000">- Update to 1.51.0</changelog>
  <changelog author="Igor Gnatenko &lt;ignatenkobrain@fedoraproject.org&gt; - 1.51.0-2" date="1516190400">- BuildRequire openssl by pkgconfig()</changelog>
  <changelog author="Igor Gnatenko &lt;ignatenkobrain@fedoraproject.org&gt; - 1.51.0-3" date="1517400000">- Switch to %ldconfig_scriptlets</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.51.0-4" date="1518177600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild</changelog>
  <changelog author="Adam Williamson &lt;awilliam@redhat.com&gt; - 1.51.0-5" date="1524139200">- Backport upstream fix for console spam with debug messages (#1541868)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 1.51.0-5.1" date="1646308800">- Add missing validation of encoding (CVE-2022-25235) (#2058114)</changelog>
</package>
<package pkgid="454385f1e3255dea7b9019467dce4a2994ba3565f895575c4e1a3d7620decf06" name="xmlrpc-c-client++-debuginfo" arch="i686">
  <version epoch="0" ver="1.51.0" rel="5.el8_5.1"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.48.0-7" date="1501761600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild</changelog>
  <changelog author="Igor Gnatenko &lt;ignatenkobrain@fedoraproject.org&gt; - 1.48.0-8" date="1506686400">- Add xmlrpc_client++.pc</changelog>
  <changelog author="Igor Gnatenko &lt;ignatenkobrain@fedoraproject.org&gt; - 1.49.02-1" date="1506686401">- Update to 1.49.02</changelog>
  <changelog author="Igor Gnatenko &lt;ignatenkobrain@fedoraproject.org&gt; - 1.49.02-2" date="1506859200">- Fix Requires.private in xmlrpc_server++.pc</changelog>
  <changelog author="Igor Gnatenko &lt;ignatenkobrain@fedoraproject.org&gt; - 1.51.0-1" date="1514808000">- Update to 1.51.0</changelog>
  <changelog author="Igor Gnatenko &lt;ignatenkobrain@fedoraproject.org&gt; - 1.51.0-2" date="1516190400">- BuildRequire openssl by pkgconfig()</changelog>
  <changelog author="Igor Gnatenko &lt;ignatenkobrain@fedoraproject.org&gt; - 1.51.0-3" date="1517400000">- Switch to %ldconfig_scriptlets</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.51.0-4" date="1518177600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild</changelog>
  <changelog author="Adam Williamson &lt;awilliam@redhat.com&gt; - 1.51.0-5" date="1524139200">- Backport upstream fix for console spam with debug messages (#1541868)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 1.51.0-5.1" date="1646308800">- Add missing validation of encoding (CVE-2022-25235) (#2058114)</changelog>
</package>
<package pkgid="8928d1426ab8944024ec7d0585d600318061bb2e7dff89b27e9ff2bcbf0d8bb2" name="xmlrpc-c-client++-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.51.0" rel="5.el8_5.1"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.48.0-7" date="1501761600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild</changelog>
  <changelog author="Igor Gnatenko &lt;ignatenkobrain@fedoraproject.org&gt; - 1.48.0-8" date="1506686400">- Add xmlrpc_client++.pc</changelog>
  <changelog author="Igor Gnatenko &lt;ignatenkobrain@fedoraproject.org&gt; - 1.49.02-1" date="1506686401">- Update to 1.49.02</changelog>
  <changelog author="Igor Gnatenko &lt;ignatenkobrain@fedoraproject.org&gt; - 1.49.02-2" date="1506859200">- Fix Requires.private in xmlrpc_server++.pc</changelog>
  <changelog author="Igor Gnatenko &lt;ignatenkobrain@fedoraproject.org&gt; - 1.51.0-1" date="1514808000">- Update to 1.51.0</changelog>
  <changelog author="Igor Gnatenko &lt;ignatenkobrain@fedoraproject.org&gt; - 1.51.0-2" date="1516190400">- BuildRequire openssl by pkgconfig()</changelog>
  <changelog author="Igor Gnatenko &lt;ignatenkobrain@fedoraproject.org&gt; - 1.51.0-3" date="1517400000">- Switch to %ldconfig_scriptlets</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.51.0-4" date="1518177600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild</changelog>
  <changelog author="Adam Williamson &lt;awilliam@redhat.com&gt; - 1.51.0-5" date="1524139200">- Backport upstream fix for console spam with debug messages (#1541868)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 1.51.0-5.1" date="1646308800">- Add missing validation of encoding (CVE-2022-25235) (#2058114)</changelog>
</package>
<package pkgid="35b1f6293f104582e1644ac682573c02bcb908f0065f51edb3b870c44fb072d8" name="xmlrpc-c-client-debuginfo" arch="i686">
  <version epoch="0" ver="1.51.0" rel="5.el8_5.1"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.48.0-7" date="1501761600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild</changelog>
  <changelog author="Igor Gnatenko &lt;ignatenkobrain@fedoraproject.org&gt; - 1.48.0-8" date="1506686400">- Add xmlrpc_client++.pc</changelog>
  <changelog author="Igor Gnatenko &lt;ignatenkobrain@fedoraproject.org&gt; - 1.49.02-1" date="1506686401">- Update to 1.49.02</changelog>
  <changelog author="Igor Gnatenko &lt;ignatenkobrain@fedoraproject.org&gt; - 1.49.02-2" date="1506859200">- Fix Requires.private in xmlrpc_server++.pc</changelog>
  <changelog author="Igor Gnatenko &lt;ignatenkobrain@fedoraproject.org&gt; - 1.51.0-1" date="1514808000">- Update to 1.51.0</changelog>
  <changelog author="Igor Gnatenko &lt;ignatenkobrain@fedoraproject.org&gt; - 1.51.0-2" date="1516190400">- BuildRequire openssl by pkgconfig()</changelog>
  <changelog author="Igor Gnatenko &lt;ignatenkobrain@fedoraproject.org&gt; - 1.51.0-3" date="1517400000">- Switch to %ldconfig_scriptlets</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.51.0-4" date="1518177600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild</changelog>
  <changelog author="Adam Williamson &lt;awilliam@redhat.com&gt; - 1.51.0-5" date="1524139200">- Backport upstream fix for console spam with debug messages (#1541868)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 1.51.0-5.1" date="1646308800">- Add missing validation of encoding (CVE-2022-25235) (#2058114)</changelog>
</package>
<package pkgid="4ca00ccb765097121eace79841c7ca26df10f8505f68d2417ed54fe3c13760f2" name="xmlrpc-c-client-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.51.0" rel="5.el8_5.1"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.48.0-7" date="1501761600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild</changelog>
  <changelog author="Igor Gnatenko &lt;ignatenkobrain@fedoraproject.org&gt; - 1.48.0-8" date="1506686400">- Add xmlrpc_client++.pc</changelog>
  <changelog author="Igor Gnatenko &lt;ignatenkobrain@fedoraproject.org&gt; - 1.49.02-1" date="1506686401">- Update to 1.49.02</changelog>
  <changelog author="Igor Gnatenko &lt;ignatenkobrain@fedoraproject.org&gt; - 1.49.02-2" date="1506859200">- Fix Requires.private in xmlrpc_server++.pc</changelog>
  <changelog author="Igor Gnatenko &lt;ignatenkobrain@fedoraproject.org&gt; - 1.51.0-1" date="1514808000">- Update to 1.51.0</changelog>
  <changelog author="Igor Gnatenko &lt;ignatenkobrain@fedoraproject.org&gt; - 1.51.0-2" date="1516190400">- BuildRequire openssl by pkgconfig()</changelog>
  <changelog author="Igor Gnatenko &lt;ignatenkobrain@fedoraproject.org&gt; - 1.51.0-3" date="1517400000">- Switch to %ldconfig_scriptlets</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.51.0-4" date="1518177600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild</changelog>
  <changelog author="Adam Williamson &lt;awilliam@redhat.com&gt; - 1.51.0-5" date="1524139200">- Backport upstream fix for console spam with debug messages (#1541868)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 1.51.0-5.1" date="1646308800">- Add missing validation of encoding (CVE-2022-25235) (#2058114)</changelog>
</package>
<package pkgid="3f99ae3aa69cf1be186a08328cd03cdabda1f8792b25456accb13257b7ba27bb" name="xmlrpc-c-debuginfo" arch="i686">
  <version epoch="0" ver="1.51.0" rel="5.el8_5.1"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.48.0-7" date="1501761600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild</changelog>
  <changelog author="Igor Gnatenko &lt;ignatenkobrain@fedoraproject.org&gt; - 1.48.0-8" date="1506686400">- Add xmlrpc_client++.pc</changelog>
  <changelog author="Igor Gnatenko &lt;ignatenkobrain@fedoraproject.org&gt; - 1.49.02-1" date="1506686401">- Update to 1.49.02</changelog>
  <changelog author="Igor Gnatenko &lt;ignatenkobrain@fedoraproject.org&gt; - 1.49.02-2" date="1506859200">- Fix Requires.private in xmlrpc_server++.pc</changelog>
  <changelog author="Igor Gnatenko &lt;ignatenkobrain@fedoraproject.org&gt; - 1.51.0-1" date="1514808000">- Update to 1.51.0</changelog>
  <changelog author="Igor Gnatenko &lt;ignatenkobrain@fedoraproject.org&gt; - 1.51.0-2" date="1516190400">- BuildRequire openssl by pkgconfig()</changelog>
  <changelog author="Igor Gnatenko &lt;ignatenkobrain@fedoraproject.org&gt; - 1.51.0-3" date="1517400000">- Switch to %ldconfig_scriptlets</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.51.0-4" date="1518177600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild</changelog>
  <changelog author="Adam Williamson &lt;awilliam@redhat.com&gt; - 1.51.0-5" date="1524139200">- Backport upstream fix for console spam with debug messages (#1541868)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 1.51.0-5.1" date="1646308800">- Add missing validation of encoding (CVE-2022-25235) (#2058114)</changelog>
</package>
<package pkgid="9947129969973ba8165314e28bfbb928118fc5e792127c548058f5c1042163ef" name="xmlrpc-c-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.51.0" rel="5.el8_5.1"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.48.0-7" date="1501761600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild</changelog>
  <changelog author="Igor Gnatenko &lt;ignatenkobrain@fedoraproject.org&gt; - 1.48.0-8" date="1506686400">- Add xmlrpc_client++.pc</changelog>
  <changelog author="Igor Gnatenko &lt;ignatenkobrain@fedoraproject.org&gt; - 1.49.02-1" date="1506686401">- Update to 1.49.02</changelog>
  <changelog author="Igor Gnatenko &lt;ignatenkobrain@fedoraproject.org&gt; - 1.49.02-2" date="1506859200">- Fix Requires.private in xmlrpc_server++.pc</changelog>
  <changelog author="Igor Gnatenko &lt;ignatenkobrain@fedoraproject.org&gt; - 1.51.0-1" date="1514808000">- Update to 1.51.0</changelog>
  <changelog author="Igor Gnatenko &lt;ignatenkobrain@fedoraproject.org&gt; - 1.51.0-2" date="1516190400">- BuildRequire openssl by pkgconfig()</changelog>
  <changelog author="Igor Gnatenko &lt;ignatenkobrain@fedoraproject.org&gt; - 1.51.0-3" date="1517400000">- Switch to %ldconfig_scriptlets</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.51.0-4" date="1518177600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild</changelog>
  <changelog author="Adam Williamson &lt;awilliam@redhat.com&gt; - 1.51.0-5" date="1524139200">- Backport upstream fix for console spam with debug messages (#1541868)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 1.51.0-5.1" date="1646308800">- Add missing validation of encoding (CVE-2022-25235) (#2058114)</changelog>
</package>
<package pkgid="8eb8147df920ac80bc37aa49c8a462c201a4e581ccec9056aa1c43ab0711d290" name="xmlrpc-c-debugsource" arch="i686">
  <version epoch="0" ver="1.51.0" rel="5.el8_5.1"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.48.0-7" date="1501761600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild</changelog>
  <changelog author="Igor Gnatenko &lt;ignatenkobrain@fedoraproject.org&gt; - 1.48.0-8" date="1506686400">- Add xmlrpc_client++.pc</changelog>
  <changelog author="Igor Gnatenko &lt;ignatenkobrain@fedoraproject.org&gt; - 1.49.02-1" date="1506686401">- Update to 1.49.02</changelog>
  <changelog author="Igor Gnatenko &lt;ignatenkobrain@fedoraproject.org&gt; - 1.49.02-2" date="1506859200">- Fix Requires.private in xmlrpc_server++.pc</changelog>
  <changelog author="Igor Gnatenko &lt;ignatenkobrain@fedoraproject.org&gt; - 1.51.0-1" date="1514808000">- Update to 1.51.0</changelog>
  <changelog author="Igor Gnatenko &lt;ignatenkobrain@fedoraproject.org&gt; - 1.51.0-2" date="1516190400">- BuildRequire openssl by pkgconfig()</changelog>
  <changelog author="Igor Gnatenko &lt;ignatenkobrain@fedoraproject.org&gt; - 1.51.0-3" date="1517400000">- Switch to %ldconfig_scriptlets</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.51.0-4" date="1518177600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild</changelog>
  <changelog author="Adam Williamson &lt;awilliam@redhat.com&gt; - 1.51.0-5" date="1524139200">- Backport upstream fix for console spam with debug messages (#1541868)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 1.51.0-5.1" date="1646308800">- Add missing validation of encoding (CVE-2022-25235) (#2058114)</changelog>
</package>
<package pkgid="5e5b70983e99677ad18c447ab5da22500cd6b94ad2da7d350510458aec3978b8" name="xmlrpc-c-debugsource" arch="x86_64">
  <version epoch="0" ver="1.51.0" rel="5.el8_5.1"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.48.0-7" date="1501761600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild</changelog>
  <changelog author="Igor Gnatenko &lt;ignatenkobrain@fedoraproject.org&gt; - 1.48.0-8" date="1506686400">- Add xmlrpc_client++.pc</changelog>
  <changelog author="Igor Gnatenko &lt;ignatenkobrain@fedoraproject.org&gt; - 1.49.02-1" date="1506686401">- Update to 1.49.02</changelog>
  <changelog author="Igor Gnatenko &lt;ignatenkobrain@fedoraproject.org&gt; - 1.49.02-2" date="1506859200">- Fix Requires.private in xmlrpc_server++.pc</changelog>
  <changelog author="Igor Gnatenko &lt;ignatenkobrain@fedoraproject.org&gt; - 1.51.0-1" date="1514808000">- Update to 1.51.0</changelog>
  <changelog author="Igor Gnatenko &lt;ignatenkobrain@fedoraproject.org&gt; - 1.51.0-2" date="1516190400">- BuildRequire openssl by pkgconfig()</changelog>
  <changelog author="Igor Gnatenko &lt;ignatenkobrain@fedoraproject.org&gt; - 1.51.0-3" date="1517400000">- Switch to %ldconfig_scriptlets</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.51.0-4" date="1518177600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild</changelog>
  <changelog author="Adam Williamson &lt;awilliam@redhat.com&gt; - 1.51.0-5" date="1524139200">- Backport upstream fix for console spam with debug messages (#1541868)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 1.51.0-5.1" date="1646308800">- Add missing validation of encoding (CVE-2022-25235) (#2058114)</changelog>
</package>
<package pkgid="877a806fe59783e6e9b0115472d30dfb1a87625ee1cb436faa12542d6ce0bfe2" name="zlib-debuginfo" arch="i686">
  <version epoch="0" ver="1.2.11" rel="18.el8_5"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 1.2.11-9" date="1527249600">- revert previous aarch64 changes (rhbz#1582444, rhbz#1578798)</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 1.2.11-10" date="1533297600">- sync with fedora rawhide</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 1.2.11-11" date="1571054400">- IBM Z hardware-accelerated deflate for s390x architectures
- IBM CRC32 optimalization for POWER 8+ architectures
- fixed firefox crash due to zlib (#1741266)
- added test for crc32</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 1.2.11-12" date="1571140800">- fixed covscan issues</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 1.2.11-13" date="1572350400">- Added -DDFLTCC parameter to configure to enable 
- Z hardware-accelerated deflate for s390x architectures (#1659433)</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 1.2.11-14" date="1590408000">- Fix for Z hardware-accelerated deflate for s390x architectures</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 1.2.11-15" date="1592222400">- Another fix for Z hardware-accelerated deflate for s390x architectures</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 1.2.11-16" date="1592222401">- Permit a deflateParams() parameter change
- Another fix for Z hardware-accelerated deflate for s390x architectures
- according to previous change by upstream</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 1.2.11-17" date="1592222402">- Fixed DFLTCC compression level switching issues (#1875492)
- Enabled HW compression for compression levels 1 through 6 (#1847438)
- Fixed inflateSyncPoint() bad return value on z15 (#1888930)</changelog>
  <changelog author="Matej Mu&#x17E;ila &lt;mmuzila@redhat.com&gt; - 1.2.11-18" date="1648555200">- Resolves: CVE-2018-25032</changelog>
</package>
<package pkgid="3a67060a9db9383c0823724cf21c808564c4cbde99d696df4e3dd3a72b0d9be5" name="zlib-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.2.11" rel="18.el8_5"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 1.2.11-9" date="1527249600">- revert previous aarch64 changes (rhbz#1582444, rhbz#1578798)</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 1.2.11-10" date="1533297600">- sync with fedora rawhide</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 1.2.11-11" date="1571054400">- IBM Z hardware-accelerated deflate for s390x architectures
- IBM CRC32 optimalization for POWER 8+ architectures
- fixed firefox crash due to zlib (#1741266)
- added test for crc32</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 1.2.11-12" date="1571140800">- fixed covscan issues</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 1.2.11-13" date="1572350400">- Added -DDFLTCC parameter to configure to enable 
- Z hardware-accelerated deflate for s390x architectures (#1659433)</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 1.2.11-14" date="1590408000">- Fix for Z hardware-accelerated deflate for s390x architectures</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 1.2.11-15" date="1592222400">- Another fix for Z hardware-accelerated deflate for s390x architectures</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 1.2.11-16" date="1592222401">- Permit a deflateParams() parameter change
- Another fix for Z hardware-accelerated deflate for s390x architectures
- according to previous change by upstream</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 1.2.11-17" date="1592222402">- Fixed DFLTCC compression level switching issues (#1875492)
- Enabled HW compression for compression levels 1 through 6 (#1847438)
- Fixed inflateSyncPoint() bad return value on z15 (#1888930)</changelog>
  <changelog author="Matej Mu&#x17E;ila &lt;mmuzila@redhat.com&gt; - 1.2.11-18" date="1648555200">- Resolves: CVE-2018-25032</changelog>
</package>
<package pkgid="4e39dbadaa0dfa76147292e787ba4226d67dedff94b1d0e174928caa0e76ba32" name="zlib-debugsource" arch="i686">
  <version epoch="0" ver="1.2.11" rel="18.el8_5"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 1.2.11-9" date="1527249600">- revert previous aarch64 changes (rhbz#1582444, rhbz#1578798)</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 1.2.11-10" date="1533297600">- sync with fedora rawhide</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 1.2.11-11" date="1571054400">- IBM Z hardware-accelerated deflate for s390x architectures
- IBM CRC32 optimalization for POWER 8+ architectures
- fixed firefox crash due to zlib (#1741266)
- added test for crc32</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 1.2.11-12" date="1571140800">- fixed covscan issues</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 1.2.11-13" date="1572350400">- Added -DDFLTCC parameter to configure to enable 
- Z hardware-accelerated deflate for s390x architectures (#1659433)</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 1.2.11-14" date="1590408000">- Fix for Z hardware-accelerated deflate for s390x architectures</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 1.2.11-15" date="1592222400">- Another fix for Z hardware-accelerated deflate for s390x architectures</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 1.2.11-16" date="1592222401">- Permit a deflateParams() parameter change
- Another fix for Z hardware-accelerated deflate for s390x architectures
- according to previous change by upstream</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 1.2.11-17" date="1592222402">- Fixed DFLTCC compression level switching issues (#1875492)
- Enabled HW compression for compression levels 1 through 6 (#1847438)
- Fixed inflateSyncPoint() bad return value on z15 (#1888930)</changelog>
  <changelog author="Matej Mu&#x17E;ila &lt;mmuzila@redhat.com&gt; - 1.2.11-18" date="1648555200">- Resolves: CVE-2018-25032</changelog>
</package>
<package pkgid="b0f054907e78416ba483076d197316847053f451c50a6222fbb6355e556974f2" name="zlib-debugsource" arch="x86_64">
  <version epoch="0" ver="1.2.11" rel="18.el8_5"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 1.2.11-9" date="1527249600">- revert previous aarch64 changes (rhbz#1582444, rhbz#1578798)</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 1.2.11-10" date="1533297600">- sync with fedora rawhide</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 1.2.11-11" date="1571054400">- IBM Z hardware-accelerated deflate for s390x architectures
- IBM CRC32 optimalization for POWER 8+ architectures
- fixed firefox crash due to zlib (#1741266)
- added test for crc32</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 1.2.11-12" date="1571140800">- fixed covscan issues</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 1.2.11-13" date="1572350400">- Added -DDFLTCC parameter to configure to enable 
- Z hardware-accelerated deflate for s390x architectures (#1659433)</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 1.2.11-14" date="1590408000">- Fix for Z hardware-accelerated deflate for s390x architectures</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 1.2.11-15" date="1592222400">- Another fix for Z hardware-accelerated deflate for s390x architectures</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 1.2.11-16" date="1592222401">- Permit a deflateParams() parameter change
- Another fix for Z hardware-accelerated deflate for s390x architectures
- according to previous change by upstream</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 1.2.11-17" date="1592222402">- Fixed DFLTCC compression level switching issues (#1875492)
- Enabled HW compression for compression levels 1 through 6 (#1847438)
- Fixed inflateSyncPoint() bad return value on z15 (#1888930)</changelog>
  <changelog author="Matej Mu&#x17E;ila &lt;mmuzila@redhat.com&gt; - 1.2.11-18" date="1648555200">- Resolves: CVE-2018-25032</changelog>
</package>
</otherdata>