# changelog

author: Denys Vlasenko <dvlasenk@redhat.com> [4.18.0-553.83.1.el8_10]
changelog:
  - fs: fix UAF/GPF bug in nilfs_mdt_destroy (Abhi Das) [RHEL-116658] {CVE-2022-50367}
  - redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86_64 (Waiman Long) [RHEL-114285]
  - x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114285] {CVE-2025-40300}
  - x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114285] {CVE-2025-40300}
  - x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114285] {CVE-2025-40300}
  - x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300}
  - x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300}
  - x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114285] {CVE-2025-40300}
  - Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114285] {CVE-2025-40300}
  - i40e: fix Jumbo Frame support after iPXE boot (Mohammad Heib) [RHEL-121781]
  - i40e: Report MFS in decimal base instead of hex (Mohammad Heib) [RHEL-121781]
  - i40e: Fix unexpected MFS warning message (Mohammad Heib) [RHEL-121781]
  - bitfield: Add FIELD_MODIFY() helper (Mohammad Heib) [RHEL-121781]
  - bitops: Add non-atomic bitops for pointers (Mohammad Heib) [RHEL-121781]
  - qed/qede: Fix scheduling while atomic (CKI Backport Bot) [RHEL-9757]
  - fanotify: add watchdog for permission events (Miklos Szeredi) [RHEL-123215]
  - jiffies: Cast to unsigned long in secs_to_jiffies() conversion (Miklos Szeredi) [RHEL-123215]
  - jiffies: Define secs_to_jiffies() (Miklos Szeredi) [RHEL-123215]
  - s390/pci: Fix __pcilg_mio_inuser() inline assembly (Mete Durlu) [RHEL-105611]
  - mm: zswap: fix missing folio cleanup in writeback race path (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178}
  - mm: fix zswap writeback race condition (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178}


author: Alexandra Hájková <ahajkova@redhat.com> [4.18.0-553.84.1.el8_10]
changelog:
  - cgroup: don't put ERR_PTR() into fc->root (CKI Backport Bot) [RHEL-123775]
  - vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114296] {CVE-2025-39718}
  - NFS: remove revoked delegation from server's delegation list (Benjamin Coddington) [RHEL-123005]


author: Alexandra Hájková <ahajkova@redhat.com> [4.18.0-553.85.1.el8_10]
changelog:
  - i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123799]
  - i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123799] {CVE-2025-39968}
  - i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123799] {CVE-2025-39969}
  - i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123799] {CVE-2025-39970}
  - i40e: Fix filter input checks to prevent config with invalid values (Michal Schmidt) [RHEL-123799]
  - i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123799] {CVE-2025-39971}
  - i40e: fix: remove needless retries of NVM update (Michal Schmidt) [RHEL-123799]
  - i40e: remove i40e_status (Michal Schmidt) [RHEL-123799]
  - i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123799] {CVE-2025-39972}
  - i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123799] {CVE-2025-39973}
  - i40e: increase max descriptors for XL710 (Michal Schmidt) [RHEL-123799]
  - drm/nouveau: Don't create connectors that aren't in disp.conn_mask (Lyude Paul) [RHEL-22122]
  - NFS: Fix a race when updating an existing write (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697}
  - nfs: fold nfs_page_group_lock_subrequests into nfs_lock_and_join_requests (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697}
  - The rpminspect.yaml emptyrpm list needs to be expanded (Alexandra Hájková)


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [4.18.0-553.86.1.el8_10]
changelog:
  - smb: client: fix race with concurrent opens in rename(2) (Paulo Alcantara) [RHEL-118237] {CVE-2025-39825}
  - smb: client: fix race with concurrent opens in unlink(2) (Paulo Alcantara) [RHEL-118237]
  - e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123105] {CVE-2025-39898}
  - nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125595] {CVE-2025-38724}
  - nbd: fix incomplete validation of ioctl arg (CKI Backport Bot) [RHEL-122965] {CVE-2023-53513}
  - arch/powerpc: commandline option to enable P11 support (Mamatha Inamdar) [RHEL-107921]
  - perf/pmu-events/powerpc: Update json mapfile with Power11 PVR (Mamatha Inamdar) [RHEL-107921]
  - perf vendor events powerpc: Add PVN for HX-C2000 CPU with Power8 Architecture (Mamatha Inamdar) [RHEL-107921]
  - tools/perf/arch/powerpc: Fix the CPU ID const char* value by adding 0x prefix (Mamatha Inamdar) [RHEL-107921]
  - powerpc/perf: Power11 Performance Monitoring support (Mamatha Inamdar) [RHEL-107921]
  - powerpc/perf: Add __init attribute to eligible functions (Mamatha Inamdar) [RHEL-107921]
  - powerpc: Add Power11 architected and raw mode (Mamatha Inamdar) [RHEL-107921]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [4.18.0-553.87.1.el8_10]
changelog:
  - tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120664]
  - tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120664] {CVE-2025-39955}
  - mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (Audra Mitchell) [RHEL-117059] {CVE-2025-39883}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [4.18.0-553.88.1.el8_10]
changelog:
  - scsi: s390: zfcp: Ensure synchronous unit_add (Mete Durlu) [RHEL-129199]
  - RDMA/rxe: Fix incomplete state save in rxe_requester (Kamal Heib) [RHEL-124700] {CVE-2023-53539}
  - RDMA/rxe: Fix mr->map double free (CKI Backport Bot) [RHEL-123715] {CVE-2022-50543}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [4.18.0-553.89.1.el8_10]
changelog:
  - mm: memcg: use READ_ONCE()/WRITE_ONCE() to access stock->cached (Radostin Stoyanov) [RHEL-122774]
  - mm: kmem: fix a NULL pointer dereference in obj_stock_flush_required() (Radostin Stoyanov) [RHEL-122774] {CVE-2023-53401}
  - mm/memcg: revert ("mm/memcg: optimize user context object stock access") (Radostin Stoyanov) [RHEL-122774] {CVE-2023-53401}
  - gfs2: Add proper lockspace locking (Andreas Gruenbacher) [RHEL-88660]
  - gfs2: do_xmote cleanup (Andreas Gruenbacher) [RHEL-88660]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [4.18.0-553.91.1.el8_10]
changelog:
  - gfs2: Do not cancel internal demote requests (Andreas Gruenbacher) [RHEL-135355]
  - gfs2: run_queue cleanup (Andreas Gruenbacher) [RHEL-135355]
  - gfs2: simplify finish_xmote (Andreas Gruenbacher) [RHEL-135355]
  - gfs2: Get rid of unnecessary test_and_set_bit (Andreas Gruenbacher) [RHEL-135355]
  - gfs2: Retries missing in gfs2_{rename,exchange} (Andreas Gruenbacher) [RHEL-135355]
  - gfs2: glock cancelation flag fix (Andreas Gruenbacher) [RHEL-135355]
  - gfs2: Minor do_xmote cancelation fix (Andreas Gruenbacher) [RHEL-135355]
  - sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-133999] {CVE-2025-40240}
  - redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
  - cifs: fix automount with passwords that contain commas (Paulo Alcantara) [RHEL-125963]
  - perf/x86/intel/ds: Fix the conversion from TSC to perf time (Anubhav Shelat) [RHEL-127171]
  - perf/x86/intel/pebs: Fix PEBS timestamps overwritten (Anubhav Shelat) [RHEL-127171]
  - ceph: fix client race condition where r_parent becomes stale before sending message (Alex Markuze) [RHEL-120226]
  - ceph: fix client race condition validating r_parent before applying state (Alex Markuze) [RHEL-120226]
  - blk-mq: setup queue ->tag_set before initializing hctx (Ming Lei) [RHEL-30744]
  - blk-mq: add helper for checking if one CPU is mapped to specified hctx (Ming Lei) [RHEL-30744]
  - blk-mq: don't schedule block kworker on isolated CPUs (Ming Lei) [RHEL-30744]
  - sched/isolation: add cpu_is_isolated() API (Ming Lei) [RHEL-30744]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [4.18.0-553.92.1.el8_10]
changelog:
  - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137395] {CVE-2025-68285}
  - media: rc: fix races with imon_disconnect() (Kate Hsuan) [RHEL-124396] {CVE-2025-39993}
  - media: imon: fix a race condition in send_packet() (Kate Hsuan) [RHEL-124396]
  - media: imon: reorganize serialization (Kate Hsuan) [RHEL-124396]
  - media: imon: drop references only after device is no longer used (Kate Hsuan) [RHEL-124396]
  - media: rc: Add support for another iMON 0xffdc device (Kate Hsuan) [RHEL-124396]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [4.18.0-553.93.1.el8_10]
changelog:
  - mm: compaction: update the COMPACT[STALL|FAIL] events properly (Lucas Oakley) [RHEL-132449]
  - drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125456] {CVE-2025-40096}
  - drm/i915: mark requests for GuC virtual engines to avoid use-after-free (CKI Backport Bot) [RHEL-124682] {CVE-2023-53552}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [4.18.0-553.94.1.el8_10]
changelog:
  - net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139482] {CVE-2025-68301}
  - smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131387] {CVE-2025-39933}
  - smb: client: Fix use-after-free in cifs_fill_dirent (CKI Backport Bot) [RHEL-134369] {CVE-2025-38051}


author: Rostyslav Tulchii <rtulchii@cloudlinux.com> [4.18.0-553.94.1.lve.1.el8_10]
changelog:
  - CLKRN-2034 netfilter: ipset: add rcu_barrier to mtype_cancel_gc for hash types
  - CLKRN-2034 netfilter: ipset: fix region locking in hash types


author: Andrew Lukoshko <alukoshko@almalinux.org> [4.18.0-544.el8]
changelog:
  - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
  - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
  - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
  - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
  - qla4xxx: bring back deprecated PCI ids
  - lpfc: bring back deprecated PCI ids
  - be2iscsi: bring back deprecated PCI ids
  - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained


author: Denys Vlasenko <dvlasenk@redhat.com> [4.18.0-545.el8]
changelog:
  - tracing/timerlat: Move hrtimer_init to timerlat_fd open() (John Kacur) [RHEL-26667]
  - tracing/perf: Fix double put of trace event when init fails (Michael Petlan) [RHEL-19537]
  - ipvlan: Add handling of NETDEV_UP events (Hangbin Liu) [RHEL-19098]
  - ceph: add ceph_cap_unlink_work to fire check_caps() immediately (Xiubo Li) [RHEL-21760]
  - ceph: always queue a writeback when revoking the Fb caps (Xiubo Li) [RHEL-21760]
  - ceph: always check dir caps asynchronously (Xiubo Li) [RHEL-21760]
  - nfs: fix redundant readdir request after get eof (Benjamin Coddington) [RHEL-7780]
  - NFSv4.1: fixup use EXCHGID4_FLAG_USE_PNFS_DS for DS server (Scott Mayhew) [RHEL-7994]
  - NFSv4.1: fix pnfs MDS=DS session trunking (Scott Mayhew) [RHEL-7994]
  - NFSv4.1: fix zero value filehandle in post open getattr (Scott Mayhew) [RHEL-7994]
  - NFSv4.1: use EXCHGID4_FLAG_USE_PNFS_DS for DS server (Scott Mayhew) [RHEL-7994]


author: Denys Vlasenko <dvlasenk@redhat.com> [4.18.0-546.el8]
changelog:
  - sched/membarrier: reduce the ability to hammer on sys_membarrier (Wander Lairson Costa) [RHEL-23430] {CVE-2024-26602}
  - NFS: Set the stable writes flag when initialising the super block (Benjamin Coddington) [RHEL-25266]
  - smb: client: fix OOB in receive_encrypted_standard() (Scott Mayhew) [RHEL-21685] {CVE-2024-0565}
  - scsi: core: Move scsi_host_busy() out of host lock if it is for per-command (Ming Lei) [RHEL-23942]
  - scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler (Ming Lei) [RHEL-23942]
  - gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump (Andrew Price) [RHEL-26501] {CVE-2023-52448}
  - smb: client: fix parsing of SMB3.1.1 POSIX create context (Paulo Alcantara) [RHEL-26241] {CVE-2023-52434}
  - smb: client: fix potential OOBs in smb2_parse_contexts() (Paulo Alcantara) [RHEL-26241] {CVE-2023-52434}
  - smb3: Replace smb2pdu 1-element arrays with flex-arrays (Jay Shin) [RHEL-22143]
  - cifs: Replace remaining 1-element arrays (Jay Shin) [RHEL-22143]
  - cifs: Convert struct fealist away from 1-element array (Jay Shin) [RHEL-22143]
  - cifs: remove unneeded 2bytes of padding from smb2 tree connect (Jay Shin) [RHEL-22143]
  - cifs: Replace zero-length arrays with flexible-array members (Jay Shin) [RHEL-22143]
  - cifs: Replace a couple of one-element arrays with flexible-array members (Jay Shin) [RHEL-22143]
  - cifs: fix FILE_BOTH_DIRECTORY_INFO definition (Jay Shin) [RHEL-22143]
  - nfsd: use locks_inode_context helper (Jeffrey Layton) [RHEL-27441]
  - nfs: use locks_inode_context helper (Jeffrey Layton) [RHEL-27441]
  - lockd: use locks_inode_context helper (Jeffrey Layton) [RHEL-27441]
  - cifs: use locks_inode_context helper (Jeffrey Layton) [RHEL-27441]
  - ceph: use locks_inode_context helper (Jeffrey Layton) [RHEL-27441]
  - filelock: add a new locks_inode_context accessor function (Jeffrey Layton) [RHEL-27441]
  - dm-integrity, dm-verity: reduce stack usage for recheck (Benjamin Marzinski) [RHEL-27849]
  - dm-crypt: recheck the integrity tag after a failure (Benjamin Marzinski) [RHEL-27849]
  - dm-crypt: don't modify the data when using authenticated encryption (Benjamin Marzinski) [RHEL-27849]
  - dm-verity: recheck the hash after a failure (Benjamin Marzinski) [RHEL-27849]
  - dm-integrity: recheck the integrity tag after a failure (Benjamin Marzinski) [RHEL-27849]


author: Denys Vlasenko <dvlasenk@redhat.com> [4.18.0-547.el8]
changelog:
  - x86/efistub: Avoid placing the kernel below LOAD_PHYSICAL_ADDR (Lenny Szubowicz) [RHEL-2505]
  - x86/efistub: Give up if memory attribute protocol returns an error (Lenny Szubowicz) [RHEL-2505]
  - x86/boot: Increase section and file alignment to 4k/512 (Lenny Szubowicz) [RHEL-2505]
  - x86/boot: Split off PE/COFF .data section (Lenny Szubowicz) [RHEL-2505]
  - x86/boot: Drop PE/COFF .reloc section (Lenny Szubowicz) [RHEL-2505]
  - x86/boot: Construct PE/COFF .text section from assembler (Lenny Szubowicz) [RHEL-2505]
  - x86/boot: Derive file size from _edata symbol (Lenny Szubowicz) [RHEL-2505]
  - x86/boot/compressed: Remove, discard, or assert for unwanted sections (Lenny Szubowicz) [RHEL-2505]
  - x86/boot: Check that there are no run-time relocations (Lenny Szubowicz) [RHEL-2505]
  - x86/boot: Discard .discard.unreachable for arch/x86/boot/compressed/vmlinux (Lenny Szubowicz) [RHEL-2505]
  - x86/boot: Define setup size in linker script (Lenny Szubowicz) [RHEL-2505]
  - x86/boot: Set EFI handover offset directly in header asm (Lenny Szubowicz) [RHEL-2505]
  - x86/boot: Drop references to startup_64 (Lenny Szubowicz) [RHEL-2505]
  - x86/boot: Drop redundant code setting the root device (Lenny Szubowicz) [RHEL-2505]
  - x86/build: Declutter the build output (Lenny Szubowicz) [RHEL-2505]
  - x86/boot: Omit compression buffer from PE/COFF image memory footprint (Lenny Szubowicz) [RHEL-2505]
  - x86/boot: Mark global variables as static (Lenny Szubowicz) [RHEL-2505]
  - efi/x86: Remove extra headroom for setup block (Lenny Szubowicz) [RHEL-2505]
  - x86/boot: Remove the 'bugger off' message (Lenny Szubowicz) [RHEL-2505]
  - x86/efi: Drop alignment flags from PE section headers (Lenny Szubowicz) [RHEL-2505]
  - efi: Put Linux specific magic number in the DOS header (Lenny Szubowicz) [RHEL-2505]
  - efi/x86: Fix the missing KASLR_FLAG bit in boot_params->hdr.loadflags (Lenny Szubowicz) [RHEL-2505]
  - efi/x86: Avoid physical KASLR on older Dell systems (Lenny Szubowicz) [RHEL-2505]
  - x86/boot: efistub: Assign global boot_params variable (Lenny Szubowicz) [RHEL-2505]
  - x86/boot: Rename conflicting 'boot_params' pointer to 'boot_params_ptr' (Lenny Szubowicz) [RHEL-2505]
  - x86/efistub: Avoid legacy decompressor when doing EFI boot (Lenny Szubowicz) [RHEL-2505]
  - x86/efistub: Perform SNP feature test while running in the firmware (Lenny Szubowicz) [RHEL-2505]
  - x86/sev: Do not try to parse for the CC blob on non-AMD hardware (Lenny Szubowicz) [RHEL-2505]
  - efi/libstub: Add limit argument to efi_random_alloc() (Lenny Szubowicz) [RHEL-2505]
  - arm64: efi: Limit allocations to 48-bit addressable physical region (Lenny Szubowicz) [RHEL-2505]
  - efi: libstub: use EFI_LOADER_CODE region when moving the kernel in memory (Lenny Szubowicz) [RHEL-2505]
  - arm64: efi: kaslr: Fix occasional random alloc (and boot) failure (Lenny Szubowicz) [RHEL-2505]
  - efi/libstub/random: Increase random alloc granularity (Lenny Szubowicz) [RHEL-2505]
  - x86/decompressor: Factor out kernel decompression and relocation (Lenny Szubowicz) [RHEL-2505]
  - x86/decompressor: Move global symbol references to C code (Lenny Szubowicz) [RHEL-2505]
  - decompress: Use 8 byte alignment (Lenny Szubowicz) [RHEL-2505]
  - x86/efistub: Prefer EFI memory attributes protocol over DXE services (Lenny Szubowicz) [RHEL-2505]
  - x86/efistub: Perform 4/5 level paging switch from the stub (Lenny Szubowicz) [RHEL-2505]
  - x86/decompressor: Merge trampoline cleanup with switching code (Lenny Szubowicz) [RHEL-2505]
  - x86/decompressor: Pass pgtable address to trampoline directly (Lenny Szubowicz) [RHEL-2505]
  - x86/decompressor: Only call the trampoline when changing paging levels (Lenny Szubowicz) [RHEL-2505]
  - x86/decompressor: Call trampoline directly from C code (Lenny Szubowicz) [RHEL-2505]
  - x86/decompressor: Avoid the need for a stack in the 32-bit trampoline (Lenny Szubowicz) [RHEL-2505]
  - x86/decompressor: Use standard calling convention for trampoline (Lenny Szubowicz) [RHEL-2505]
  - x86/decompressor: Call trampoline as a normal function (Lenny Szubowicz) [RHEL-2505]
  - x86/boot/compressed/64: Remove .bss/.pgtable from bzImage (Lenny Szubowicz) [RHEL-2505]
  - x86/boot: Remove run-time relocations from .head.text code (Lenny Szubowicz) [RHEL-2505]
  - x86/decompressor: Assign paging related global variables earlier (Lenny Szubowicz) [RHEL-2505]
  - x86/decompressor: Store boot_params pointer in callee save register (Lenny Szubowicz) [RHEL-2505]
  - x86/efistub: Clear BSS in EFI handover protocol entrypoint (Lenny Szubowicz) [RHEL-2505]
  - x86/head_64: Store boot_params pointer in callee save register (Lenny Szubowicz) [RHEL-2505]
  - x86/decompressor: Don't rely on upper 32 bits of GPRs being preserved (Lenny Szubowicz) [RHEL-2505]
  - x86/head/64: Switch to KERNEL_CS as soon as new GDT is installed (Lenny Szubowicz) [RHEL-2505]
  - efi/libstub: Add memory attribute protocol definitions (Lenny Szubowicz) [RHEL-2505]
  - efi/x86: libstub: remove unused variable (Lenny Szubowicz) [RHEL-2505]
  - x86/boot: Robustify calling startup_{32,64}() from the decompressor code (Lenny Szubowicz) [RHEL-2505]
  - x86/efistub: Simplify and clean up handover entry code (Lenny Szubowicz) [RHEL-2505]
  - x86/efistub: Branch straight to kernel entry point from C code (Lenny Szubowicz) [RHEL-2505]
  - efi/x86: Avoid using code32_start (Lenny Szubowicz) [RHEL-2505]
  - efi/libstub/x86: Use Exit() boot service to exit the stub on errors (Lenny Szubowicz) [RHEL-2505]
  - efi: x86: Wipe setup_data on pure EFI boot (Lenny Szubowicz) [RHEL-2505]
  - efi: x86: Fix config name for setting the NX-compatibility flag in the PE header (Lenny Szubowicz) [RHEL-2505]
  - efi: x86: Set the NX-compatibility flag in the PE header (Lenny Szubowicz) [RHEL-2505]
  - efi/x86: Add kernel preferred address to PE header (Lenny Szubowicz) [RHEL-2505]
  - efi/x86: Use symbolic constants in PE header instead of bare numbers (Lenny Szubowicz) [RHEL-2505]
  - efi/x86: Drop redundant .bss section (Lenny Szubowicz) [RHEL-2505]
  - efi/x86: add headroom to decompressor BSS to account for setup block (Lenny Szubowicz) [RHEL-2505]
  - x86/boot: Remove run-time relocations from head_{32,64}.S (Lenny Szubowicz) [RHEL-2505]
  - x86/boot/compressed: Fix debug_puthex() parameter type (Lenny Szubowicz) [RHEL-2505]
  - x86/boot/compressed/64: Use 32-bit (zero-extended) MOV for z_output_len (Lenny Szubowicz) [RHEL-2505]
  - x86/boot: Use unsigned comparison for addresses (Lenny Szubowicz) [RHEL-2505]
  - x86/boot: Micro-optimize GDT loading instructions (Lenny Szubowicz) [RHEL-2505]
  - x86/boot: GDT limit value should be size - 1 (Lenny Szubowicz) [RHEL-2505]
  - efi/x86: Remove GDT setup from efi_main (Lenny Szubowicz) [RHEL-2505]
  - x86/boot: Clear direction and interrupt flags in startup_64 (Lenny Szubowicz) [RHEL-2505]
  - efi/x86: Don't depend on firmware GDT layout (Lenny Szubowicz) [RHEL-2505]
  - x86/boot: Remove KEEP_SEGMENTS support (Lenny Szubowicz) [RHEL-2505]
  - x86/boot: Handle malformed SRAT tables during early ACPI parsing (Lenny Szubowicz) [RHEL-2505]
  - efi/libstub/x86: Use mandatory 16-byte stack alignment in mixed mode (Lenny Szubowicz) [RHEL-2505]
  - efi/libstub/x86: Avoid globals to store context during mixed mode calls (Lenny Szubowicz) [RHEL-2505]
  - x86/efistub: Disable paging at mixed mode entry (Lenny Szubowicz) [RHEL-2505]
  - x86: efi/random: Invoke EFI_RNG_PROTOCOL to seed the UEFI RNG table (Lenny Szubowicz) [RHEL-2505]
  - x86/asm: Make some functions local (Lenny Szubowicz) [RHEL-2505]
  - x86/boot: Annotate data appropriately (Lenny Szubowicz) [RHEL-2505]
  - x86/boot: Annotate local functions (Lenny Szubowicz) [RHEL-2505]
  - x86/asm: Make more symbols local (Lenny Szubowicz) [RHEL-2505]
  - x86/boot/compressed/64: Fix missing initialization in find_trampoline_placement() (Lenny Szubowicz) [RHEL-2505]
  - x86/boot/compressed/64: Fix boot on machines with broken E820 table (Lenny Szubowicz) [RHEL-2505]
  - x86, boot: Remove multiple copy of static function sanitize_boot_params() (Lenny Szubowicz) [RHEL-2505]
  - x86/boot/compressed/64: Remove unused variable (Lenny Szubowicz) [RHEL-2505]
  - x86/boot/compressed/64: Explain paging_prepare()'s return value (Lenny Szubowicz) [RHEL-2505]
  - x86/boot: Save several bytes in decompressor (Lenny Szubowicz) [RHEL-2505]
  - fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super (Audra Mitchell) [RHEL-20614] {CVE-2024-0841}
  - net/gve: update check for little-endianness in gve kconfig (Joshua Washington) [RHEL-29030]


author: Pingfan Liu <piliu@redhat.com> - 2.0.20-5
changelog:
  - Don't execute final_action if failure_action terminates the system
  - module-setup: re-fix 99kdumpbase network dependency
  - kdumpctl: bail out immediately if host key verification failed
  - kdumpctl: echo msg when waiting for connection
  - kdumpctl: distinguish the failed reason of ssh
  - kdumpctl: wait a while for network ready if dump target is ssh
  - dracut-module-setup: filter out localhost for generic_fence_kdump
  - dracut-module-setup: get localhost alias by manual


author: Pingfan Liu <piliu@redhat.com> - 2.0.20-6
changelog:
  -rhel-8.2.0, origin/rhel-8.2.0) Increase SECTION_MAP_LAST_BIT to 4
  - spec: move binaries from /sbin to /usr/sbin
  - As /etc/kdump.conf timestamp is updated do not compare it when doing rpm --verify
  - kdumpctl: make reload fail proof


author: Pingfan Liu <piliu@redhat.com> - 2.0.20-10
changelog:
  - arm64: kdump: deal with a lot of resource entries in /proc/iomem
  - arm64: kexec: allocate memory space avoiding reserved regions
  - kexec: add variant helper functions for handling memory regions


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 25-5
changelog:
  - weak-modules: handle versions with + and other special regex symbols
  - weak-modules: fix misleading message when cannot find dracut.
    Resolves: rhbz#1609372.


author: Eugene Syromiatnikov <esyr@redhat.com> - 25-6
changelog:
  - weak-modules: check also for /lib/modules/$krel/symvers.gz as a possible
    symvers file path.
    Resolves: rhbz#1614119.


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 25-7
changelog:
  - weak-modules: use is_kernel_installed wrapper in update_modules_for_krel.
  - weak-modules: more abstract symvers search implementation.
  - weak-modules: use additional paths for System.map file.
    Resolves: rhbz#1621306.


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 25-8
changelog:
  - weak-modules: fix initial state creation for dry-run
  - weak-modules: check compatibility in a temporary directory
    Resolves: rhbz#1622990.


author: Linar Nadeev <lnadeev@cloudlinux.com> - 25-11.cloudlinux
changelog:
  - KMODLVE-557: Fix modinfo error during kmod-lve-1:2.0-43.el8.x86_64 removing
  - KRNTSTNG-235 fixup kmodlve loading on CL8.6 kernel


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 25-16
changelog:
  - weak-modules: update_modules_for_krel: always finish sandbox
  - weak-modules: groupping: use dependencies of extra/ provider
    Resolves: rhbz#1778889


author: Anatoly Stepanov <astepanov@cloudlinux.com> - 25-19.cloudlinux
changelog:
  - KMODLVE-464: depmod: resolve different sub-dir lengths issue
  - CLKRN-819: improved prioritizing with modules sharing the same name
  - bump epoch


author: Frantisek Hrbata <fhrbata@redhat.com> - 20200512-98.gitb2cad6a2
changelog:
  - Update to latest upstream linux-firmware image for assorted updates
  - Update qed zipped/unzipped firmware to latest upstream (rhbz 1791030)
  - Update bnx2x firmware to latest upstream (rhbz 1791031)
  - Firmware - nvidia: add TU102/TU104/TU106 / TU116/117 signed firmware (rhbz 1801025)
  - Update latest Signed FW for AMD NAVI 10 Graphic (rhbz 1809846)


author: Jan Stancek <jstancek@redhat.com> - 20201022-100.gitdae4b4cd
changelog:
  - Update to latest upstream linux-firmware image for assorted updates
  - ice: Pull Comms Market Segment Package (rhbz 1861491)
  - ice: Update to the Default OS DDP Package for ice driver (rhbz 1879278)


author: Jan Stancek <jstancek@redhat.com> - 20201118-101.git7455a360
changelog:
  - Update to latest upstream linux-firmware image for assorted updates
  - Include to support Intel AX210 Typhoon Peak - Bluetooth firmware support (rhbz 1897069)
  - Include support for the Qualcomm AX500-DBS (QCA6390) 802.11ax Wireless - firmware support (rhbz 1725913)


author: Bruno Meneguele <bmeneg@redhat.com> - 20210702-103.gitd79c2677
changelog:
  - Update to latest upstream linux-firmware image for assorted updates
  - Include support for the Qualcomm AX500-DBS (QCA6390) 802.11ax Wireless (rhbz 1725913)
  - Firmware for Chelsio T4/T5/T6 adapters (rhbz 1961398)
  - Incorrect NVIDIA GPU firmware used for TU102 and TU104 GPUs (rhbz 1965312)
  - Package the new iwl7260 ucode files and also the new binary format PNVM


author: Bruno Meneguele <bmeneg@redhat.com> - 20211007-104.git7a300505
changelog:
  - Update to latest upstream linux-firmware image for assorted updates
  - Certain amdgpu firmware files cause random hangs with AMD Picasso/Raven Ridge APUs (rhbz 2000879)
  - Support Intel CNVi AX211 Garfield Peak2 on ADL - Bluetooth (rhbz 1923179)
  - Support Intel CNVi AX211 Garfield Peak2 on ADL - WIFI (rhbz 1923175)


author: Bruno Meneguele <bmeneg@redhat.com> - 20211119-105.gitf5d51956
changelog:
  - Update to latest upstream linux-firmware image for assorted updates
  - Update to latest AMD GPU firmware (rhbz 1986660)


author: Augusto Caringi <acaringi@redhat.com> - 20220209-106.git6342082c
changelog:
  - Update to latest upstream linux-firmware image for assorted updates
  - Include AMD GPU firmware fix (rhbz 2031172)
  - Support QCA WCN6856 v2.1 Module: Bluetooth firmware (rhbz 2007904)


author: Jarod Wilson <jarod@redhat.com> - 20220517-107.git251d2900
changelog:
  - Update to latest upstream linux-firmware image for assorted updates
  - Include latest qed firmware update (rhbz 2040269)
  - Include latest bnx2x firmware update (rhbz 2040273)
  - Include latest ice firmware update (rhbz 2059384, rhbz 2081543)
  - Include latest Qualcomm firmware update (rhbz 2062871)


author: Jarod Wilson <jarod@redhat.com> - 20220713-109.gitdfa29317
changelog:
  - Update to latest upstream linux-firmware image for assorted updates
  - Include even newer qed firmware update (rhbz 2040269)


author: Jarod Wilson <jarod@redhat.com> - 20220726-110.git150864a4
changelog:
  - Omit unused password-protected vxge firmware files from package (rhbz 2108051)
  - Pick up latest AMD GPU firmwares


author: Lucas Zampieri <lzampier@redhat.com> - 20221102-111.git8bb75626
changelog:
  - Update to latest upstream linux-firmware image for assorted updates
  - amdgpu firmware update to fix certain "multiple monitor scenarios" (rhbz 2130707)


author: Lucas Zampieri <lzampier@redhat.com> - 20230111-112.gita1ad1d5b
changelog:
  - Update to latest upstream linux-firmware image for assorted updates
  - Navi33 dGPU firmware (rhbz 2047480)
  - Navi31 dGPU firmware (rhbz 2047483)


author: Lucas Zampieri <lzampier@redhat.com> - 20230217-113.git83f1d778
changelog:
  - Update to latest upstream linux-firmware image for assorted updates
  - Qualcomm Wi-Fi - Disconnecting power cable during suspend wakes up the laptop (rhbz 2169012)


author: Patrick Talbert <ptalbert@redhat.com> - 20230404-114.git2e92a49f
changelog:
  - Update to latest upstream linux-firmware image for assorted updates
  - Intel QAT Update - firmware for QAT (rhbz 2030316)


author: Rostyslav Tulchii <rtulchii@cloudlinux.com> - 2.1-9
changelog:
  - KMODLVE-577: added forgotten lseek handlers to not crash kmodlve on CL9
  - KMODLVE-567: connect the ovz mark out event to the kmodlve callback


author: Rostyslav Tulchii <rtulchii@cloudlinux.com> - 2.1-10
changelog:
  - KMODLVE-579: filemon fixes for CL9
  - KMODLVE-578: added dependency to tuned-profiles-cloudlinux that brings needed kernel params
  - KMODLVE-580: fixed redundant obsoletes for cl9
  - KMODLVE-581: added kmod dependency for cl9
  - KMODLVE-566: do not allow lve creation during lvp_destroy
  - CLKRN-1092: fix build for CL7


author: Rostyslav Tulchii <rtulchii@cloudlinux.com> - 2.1-14
changelog:
  - CLKRN-1153: bump cl9 kernel version for module building
  - KMODLVE-587: enable access to ipv4 and ipv6 entries
  - KMODLVE-588: always update ppos in defaults_next


author: Linar Nadeev <lnadeev@cloudlinux.com> - 2.1-15
changelog:
  - CLKRN-1181: New Alma 9 kernel: -5.14.0-284.11.1.el9_2
  - KMODLVE-594: Prepare kmod-lve for kernel 9.2 build
  - KMODLVE-596: fix cgroup stat parsing


author: Anton Mikaiev <amikaiev@cloudlinux.com> - 2.1-16
changelog:
  - CLKRN-1176: added patch to fix ttypushback vulnerability
  - CLKRN-1195: bumped kernel version for building (cl8) for debug kernel compatibility
  - CLKRN-1093: allow freezable sleep in kmodlve


author: Rostyslav Tulchii <rtulchii@cloudlinux.com> - 2.1-17
changelog:
  - CLKRN-1210: make new page cache accounting default for new installations
  - CLKRN-1089: do not account page cache memory in lve stats output


author: Rostyslav Tulchii <rtulchii@cloudlinux.com> - 2.1-18
changelog:
  - CLKRN-1371: fixed kernel.proc_disable_net & introduced kernel.proc_disable_net2
  - CLKRN-1386: adapt kmodlve building with FEAT_LINK_PROT == 0


author: Rostyslav Tulchii <rtulchii@cloudlinux.com> - 2.1-19
changelog:
  - KMODLVE-600: iolimits events support for CL8/9
  - KMODLVE-601: tag get/put events support
  - CLKRN-1406: revert some changes related to prod_net_disable2 - made the behaviour obliged
  - CLKRN-1355: symlink owner protection fixes for CL9
  - CLKRN-1399: improved fs.protected_symlinks_create option to close the SecureLink creating vulnerability


author: Rostyslav Tulchii <rtulchii@cloudlinux.com> - 2.1-22
changelog:
  - CLKRN-1455: change kernel (cl9) building version for 5.14.0-362.13.1.el9_3
  - CLKRN-1203: switch back to using rh_reserved for tag links
  - CLKRN-1439: reduce warnings from external cgroup moves


author: Rostyslav Tulchii <rtulchii@cloudlinux.com> - 2.1-24
changelog:
  - CLKRN-1488: rework security_* hooks
  - CLOS-2484: suppress the warning for nonexistent 90-cloudlinux.conf in the script


author: Rostyslav Tulchii <rtulchii@cloudlinux.com> - 2.1-26
changelog:
  - CLKRN-1546: always block cgroup move in a multithreaded app
  - CLKRN-1547: stringify more lve_enter flags
  - CLKRN-1541: do not kill unkillable tasks from de_thread()
  - CLKRN-1542: do not allow to interrupt lve_unlink()
  - CLKRN-1457: fixed XFS_QMOPT_FORCE_RES for cl9 kernels


author: Rostyslav Tulchii <rtulchii@cloudlinux.com> - 2.1-28
changelog:
  - CLKRN-1559: check if the ptr is invalid in lve_do_renameat2_trace hook
  - CLKRN-1566: improved restrictions on accessing another mnt ns


author: Rostyslav Tulchii <rtulchii@cloudlinux.com> - 2.1-32
changelog:
  - CLKRN-1606: call missing putname within SP
  - CLKRN-1447: adapted minor log for moving tasks outside of LVEs


author: Rostyslav Tulchii <rtulchii@cloudlinux.com> - 2.1-37
changelog:
  - CLKRN-1698: disable write access to process memory via procfs
  - CLKRN-1688: CL9.5 kernel support
  - CLKRN-1685: implement iolimits for LVP


author: Rostyslav Tulchii <rtulchii@cloudlinux.com> - 2.1-38
changelog:
  - CLKRN-1701: implement namespace check in __ptrace_may_access
  - CLKRN-1696: a switch to disable page cache accounting in lve pmem


author: Rostyslav Tulchii <rtulchii@cloudlinux.com> - 2.1-41
changelog:
  - CLKRN-1717: enable lve_pmem_nocache by default
  - CLKRN-1716: adapted SP hooks variants for Ubuntu 22
  - CLKRN-1715: adapt datacycle hook for Ubuntu 22
  - CLKRN-1715: adapted XFS quota flag for Ubuntu 22 kernel (5.15.0)


author: Rostyslav Tulchii <rtulchii@cloudlinux.com> - 2.1-53
changelog:
  - CLKRN-1910: disable unused ftrace hooks
  - CLKRN-2000: use fput_async if available and doesn't bug_on on non-kernel threads


author: Rostyslav Tulchii <rtulchii@cloudlinux.com> - 2.1-56
changelog:
  - CLKRN-1818: cgroups v2 support for CL10 (new lve_cgroupv2 parameter)
  - CLKRN-1820: implement enter/leave for cgroups v2
  - CLKRN-1821: cpu limit/weight & usage support for cgroups v2
  - CLKRN-1822: cpu stats reset and throttled_time stat for cgroups v2
  - CLKRN-1823: implement memory limits with cgroups v2
  - CLKRN-1824: implement memory usage for cgroups v2
  - CLKRN-1826: implement nproc limit & usage for cgroups v2
  - CLKRN-1831: implement NOUB enter and account/reset NOUB cgroup cpu usage for cgroups v2
  - CLKRN-1851: allow symlink creation outside of lve namespaces
  - CLKRN-1871: do not OOM when reducing PMEM limit in LVP
  - CLKRN-1876: configure cgroup.subtree_control with cgroups v2
  - CLKRN-1878: optimize code with cgroups v2 support
  - CLKRN-1882: subtree_control should be enabled for LVP, not LVE
  - CLKRN-1884: load average support for cgroups v2
  - CLKRN-1909: do not allow to rmdir lve/lvp dirs with cgroups v2
  - CLKRN-1916: split CPU limit between full and noub lves
  - CLKRN-1924: recalc cpu limits after shares changes
  - CLKRN-1925: a fix for racer
  - CLKRN-1930: noub init should happen after root lvp init
  - CLKRN-1933: wrong lve ns check in symlink create hook
  - CLKRN-1939: not enough permissions to enter LVE fix
  - CLKRN-1941: carefully move process to the thread root
  - CLKRN-1948: set memory.swap.max to 0 to replicate swappiness=0 from v1
  - CLKRN-1964: fixed passing incorrect string size
  - CLKRN-1990: fixed build errors for CL8 platform
  - CLKRN-2017: added a hack for attaching noub threads to cgroup v2 cpu controller
  - CLKRN-2027: initial solution for CPU limit balancer
  - CLKRN-2035: build kmod-lve-lts fixes for CL8/CL9 LTS kernels
  - CLKRN-2044: build fixes for Ubuntu22 and CL8/9-LTS / CL8/7h, disable cgroup v2 for production


author: Rostyslav Tulchii <rtulchii@cloudlinux.com> - 2.1-57
changelog:
  - CLKRN-2060: fixed noub_legacy mode to not underlimit the main cpu group
  - CLKRN-2066: fixed LVE cpu stats for a cgroups v2 hack mode
  - CLKRN-2067: improve load balancing
  - CLKRN-2075: symmetrical lve/noub hierarchy
  - CLKRN-2078: cgv2: clamp each noub quota share to kernel minimum
  - CLKRN-2083: fixed cpu weight setting for cgroups v2 case
  - CLKRN-2088: added +cpu to root cgroup subtree_control on lve init
  - CLKRN-2089: bump kmod_kernel_version to 553.111.1 for CL7h and CL8
  - CLKRN-2091: performance statistics for the cgv2 rebalancer
  - CLKRN-2045: added a couple of counters to catch heavy rebalancing code paths


author: Rostyslav Tulchii <rtulchii@cloudlinux.com> - 2.1-59
changelog:
  - CLKRN-2103: cgv2: leave path to target cgroup root, not /lvub
    (fixes __lve_leave: failed to pop cpu context, rc=-16 EBUSY)


author: Rostyslav Tulchii <rtulchii@cloudlinux.com> - 2.1-60
changelog:
  - CLKRN-2105: dead-code cleanup
  - CLKRN-2101: defer child insertion into parent->lvp_children until init done
  - CLKRN-1954: fix a bug in symlink protection
  - CLKRN-2115: added missing error check
  - CLKRN-2115: add missing pointer check
  - CLKRN-2108: order os_lvp_fini() before list_del_init() in lvp_fini()
  - CLKRN-2108: allow module-internal cgroup rmdir outside lve_init thread
  - CLKRN-2111: propagate NET accounting up the full LVP parent chain
  - CLKRN-2112: simplify defaults_start()
  - CLKRN-2113: drop LVE_DEBUG build option; make LVE_DEBUG_CGROUP_BREAK unconditional
  - CLKRN-2115: cleanup: fix error handling in lve_usage_write


author: Rostyslav Tulchii <rtulchii@cloudlinux.com> - 2.1-62
changelog:
  - bump kmod_kernel_version to 6.12.0-211.7.3.el10_2 for AlmaLinux 10.2
  - bump kmod_kernel_version to 5.14.0-687.5.3.el9_8 for AlmaLinux 9.8


author: Eugene Syromiatnikov <esyr@redhat.com> - 2:2.1-58
changelog:
  - Package the publicy available microcode-20191112 release (#1755025):
    - Addition of 06-4d-08/0x1 (AVN B0/C0) microcode at revision 0x12d;
    - Addition of 06-55-06/0xbf (CSL-SP B0) microcode at revision 0x400002c;
    - Addition of 06-7a-08/0x1 (GLK R0) microcode at revision 0x16;
    - Update of 06-55-03/0x97 (SKL-SP B1) microcode from revision 0x1000150
      up to 0x1000151;
    - Update of 06-55-04/0xb7 (SKL-SP H0/M0/U0, SKL-D M1) microcode from revision
      0x2000064 up to 0x2000065;
    - Update of 06-55-07/0xbf (CSL-SP B1) microcode from revision 0x500002b
      up to 0x500002c;
    - Update of 06-7a-01/0x1 (GLK B0) microcode from revision 0x2e up to 0x32;
  - Include 06-9e-0c (CFL-H/S P0) microcode from the microcode-20190918 release.
  - Correct the releasenote file (0001-releasenote-changes-summary-fixes.patch).
  - Update README.caveats with the link to the new Knowledge Base article.


author: Eugene Syromiatnikov <esyr@redhat.com> - 2:2.1-59
changelog:
  - Update Intel CPU microcode to microcode-20191113 release:
    - Update of 06-9e-0c (CFL-H/S P0) microcode from revision 0xae up to 0xc6.
  - Drop 0001-releasenote-changes-summary-fixes.patch.


author: Eugene Syromiatnikov <esyr@redhat.com> - 2:2.1-60
changelog:
  - Update Intel CPU microcode to microcode-20191115 release:
    - Update of 06-4e-03/0xc0 (SKL-U/Y D0) from revision 0xd4 up to 0xd6;
    - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 R0/N0) from revision 0xd4
      up to 0xd6;
    - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) from revision 0xc6 up to 0xca;
    - Update of 06-8e-09/0xc0 (KBL-U/Y H0) from revision 0xc6 up to 0xca;
    - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0) from revision 0xc6 up to 0xca;
    - Update of 06-8e-0b/0xd0 (WHL-U W0) from revision 0xc6 up to 0xca;
    - Update of 06-8e-0c/0x94 (AML-Y V0, CML-U 4+2 V0, WHL-U V0) from revision
      0xc6 up to 0xca;
    - Update of 06-9e-09/0x2a (KBL-G/X H0, KBL-H/S/Xeon E3 B0) from revision 0xc6
      up to 0xca;
    - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) from revision 0xc6 up to 0xca;
    - Update of 06-9e-0b/0x02 (CFL-S B0) from revision 0xc6 up to 0xca;
    - Update of 06-9e-0c/0x22 (CFL-S/Xeon E P0) from revision 0xc6 up to 0xca;
    - Update of 06-9e-0d/0x22 (CFL-H/S R0) from revision 0xc6 up to 0xca;
    - Update of 06-a6-00/0x80 (CML-U 6+2 A0) from revision 0xc6 up to 0xca.


author: Eugene Syromiatnikov <esyr@redhat.com> - 2:2.1-61.1
changelog:
  - Update stale posttrans dependency, add triggers for proper handling
    of the debug kernel flavour along with kernel-rt.


author: Eugene Syromiatnikov <esyr@redhat.com> - 2:2.1-61.3
changelog:
  - Re-generate initramfs not only for the currently running kernel,
    but for several recently installed kernels as well.


author: Eugene Syromiatnikov <esyr@redhat.com> - 2:2.1-61.5
changelog:
  - Update Intel CPU microcode to microcode-20200602 release, addresses
    CVE-2020-0543, CVE-2020-0548, CVE-2020-0549 (#1827189):
    - Update of 06-2d-06/0x6d (SNB-E/EN/EP C1/M0) microcode from revision 0x61f
      up to 0x621;
    - Update of 06-2d-07/0x6d (SNB-E/EN/EP C2/M1) microcode from revision 0x718
      up to 0x71a;
    - Update of 06-3c-03/0x32 (HSW C0) microcode from revision 0x27 up to 0x28;
    - Update of 06-3d-04/0xc0 (BDW-U/Y E0/F0) microcode from revision 0x2e
      up to 0x2f;
    - Update of 06-45-01/0x72 (HSW-U C0/D0) microcode from revision 0x25
      up to 0x26;
    - Update of 06-46-01/0x32 (HSW-H C0) microcode from revision 0x1b up to 0x1c;
    - Update of 06-47-01/0x22 (BDW-H/Xeon E3 E0/G0) microcode from revision 0x21
      up to 0x22;
    - Update of 06-4e-03/0xc0 (SKL-U/Y D0) microcode from revision 0xd6
      up to 0xdc;
    - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000151
      up to 0x1000157;
    - Update of 06-55-04/0xb7 (SKX-SP H0/M0/U0, SKX-D M1) microcode
      (in intel-06-55-04/intel-ucode/06-55-04) from revision 0x2000065
      up to 0x2006906;
    - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x400002c
      up to 0x4002f01;
    - Update of 06-55-07/0xbf (CLX-SP B1) microcode from revision 0x500002c
      up to 0x5002f01;
    - Update of 06-5e-03/0x36 (SKL-H/S R0/N0) microcode from revision 0xd6
      up to 0xdc;
    - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0x46
      up to 0x78;
    - Update of 06-8e-09/0x10 (AML-Y22 H0) microcode from revision 0xca
      up to 0xd6;
    - Update of 06-8e-09/0xc0 (KBL-U/Y H0) microcode from revision 0xca
      up to 0xd6;
    - Update of 06-8e-0a/0xc0 (CFL-U43e D0) microcode from revision 0xca
      up to 0xd6;
    - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode from revision 0xca
      up to 0xd6;
    - Update of 06-8e-0c/0x94 (AML-Y42 V0, CML-Y42 V0, WHL-U V0) microcode
      from revision 0xca up to 0xd6;
    - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode from revision
      0xca up to 0xd6;
    - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E3 U0) microcode from revision 0xca
      up to 0xd6;
    - Update of 06-9e-0b/0x02 (CFL-S B0) microcode from revision 0xca up to 0xd6;
    - Update of 06-9e-0c/0x22 (CFL-H/S P0) microcode from revision 0xca
      up to 0xd6;
    - Update of 06-9e-0d/0x22 (CFL-H R0) microcode from revision 0xca up to 0xd6.
  - Change the URL in the intel-microcode2ucode.8 to point to the GitHub
    repository since the microcode download section at Intel Download Center
    does not exist anymore.


author: Eugene Zamriy <ezamriy@cloudlinux.com> - 0.1-1
changelog:
  - Initial release: cloudlinux-default tuned profile for CloudLinux 7
  - AL-1741: IO scheduler configuration: set deadline for rotational devices and
             noop for SSD disks
  - AL-1888: disable tcache/tswap OpenVZ subsystems
  - AL-1889: increase nr_requests value to 1024


author: Konstantin Vaskovtsov <derkonstantin@cloudlinux.com> 0.1-10
changelog:
  - CAG-862: Add another profile: cloudlinux-latency-performance with min_perf_pct=100 and force_latency=1


author: Rostyslav Tulchii <rtulchii@cloudlinux.com> 0.1-11
changelog:
  - CLKRN-698: add crashkernel=auto kernel parameter by default
  - CLKRN-709: fix force_latency for cloudlinux-latency-performance


author: Rostyslav Tulchii <rtulchii@cloudlinux.com> 0.1-12
changelog:
  - CLKRN-859: tune systemd-logind capabilities to make GDM GUI work on CL 8.5 (incompatibility with hidepid)


author: Rostyslav Tulchii <rtulchii@cloudlinux.com> 0.2-4
changelog:
  - CLKRN-1038: deleted redundant ovz specific sysctl vm.force_scan_thresh
  - KB-219: fixed spec scriptlet


