# changelog

author: Anatoly Stepanov <astepanov@cloudlinux.com> - 25-19.cloudlinux
changelog:
  - KMODLVE-464: depmod: resolve different sub-dir lengths issue
  - CLKRN-819: improved prioritizing with modules sharing the same name
  - bump epoch


author: Herton R. Krzesinski <herton@redhat.com> - 20190516-94.git711d3297
changelog:
  - Update to latest upstream linux-firmware image for assorted updates
  - Update iwlwifi firmware to support the Cyclone Peak Dual Band 2x2 802.11ax (rhbz 1622442)
  - Pull new version of Netronome firmware (rhbz 1663989)
  - Update firmware for Chelsio T4/T5/T6 adapters (rhbz 1664678)
  - Update Netronome firmware that include bug fixes (rhbz 1673890)
  - Include firmware support for Intel Bluetooth 22261 (rhbz 1678095)


author: Bruno Meneguele <bmeneg@redhat.com> - 20191202-95.gite8a0f4c9
changelog:
  - Update to latest upstream linux-firmware image for assorted updates
  - Update qed zipped/unzipped firmware to latest upstream (rhbz 1720394)
  - Update bnx2x firmware to latest upstream (rhbz 1720395)
  - AX200(Cyclone Peak 2 or CcP2) Bluetooth support (rhbz 1722693)
  - Firmware for Chelsio T4/T5/T6 adapters (rhbz 1725821)
  - Include to support Intel AX201 Harrison Peak(CNVi) on CML-U (rhbz 1725873)
  - Icelake Bluetooth firmware update (AX201, Harrison Peak, or HrP2) (rhbz 1726182)
  - DDP Package to support Columbiaville NIC (rhbz 1726454)
  - Add iwlwifi-cc-a0-48.ucode to linux-firmware (rhbz 1753962)
  - Change install section to use usptream installation process


author: Frantisek Hrbata <fhrbata@redhat.com> - 20200512-98.gitb2cad6a2
changelog:
  - Update to latest upstream linux-firmware image for assorted updates
  - Update qed zipped/unzipped firmware to latest upstream (rhbz 1791030)
  - Update bnx2x firmware to latest upstream (rhbz 1791031)
  - Firmware - nvidia: add TU102/TU104/TU106 / TU116/117 signed firmware (rhbz 1801025)
  - Update latest Signed FW for AMD NAVI 10 Graphic (rhbz 1809846)


author: Frantisek Hrbata <fhrbata@redhat.com> - 20200619-100.git3890db36
changelog:
  - ice: Update to the Default OS DDP Package for ice driver (rhbz 1896597)
  - ice: Pull Comms Market Segment Package into RHEL 8.3 (rhbz 1896598)


author: Jan Stancek <jstancek@redhat.com> - 20201022-100.gitdae4b4cd
changelog:
  - Update to latest upstream linux-firmware image for assorted updates
  - ice: Pull Comms Market Segment Package (rhbz 1861491)
  - ice: Update to the Default OS DDP Package for ice driver (rhbz 1879278)


author: Jan Stancek <jstancek@redhat.com> - 20201118-101.git7455a360
changelog:
  - Update to latest upstream linux-firmware image for assorted updates
  - Include to support Intel AX210 Typhoon Peak - Bluetooth firmware support (rhbz 1897069)
  - Include support for the Qualcomm AX500-DBS (QCA6390) 802.11ax Wireless - firmware support (rhbz 1725913)


author: Bruno Meneguele <bmeneg@redhat.com> - 20210702-103.gitd79c2677
changelog:
  - Update to latest upstream linux-firmware image for assorted updates
  - Include support for the Qualcomm AX500-DBS (QCA6390) 802.11ax Wireless (rhbz 1725913)
  - Firmware for Chelsio T4/T5/T6 adapters (rhbz 1961398)
  - Incorrect NVIDIA GPU firmware used for TU102 and TU104 GPUs (rhbz 1965312)
  - Package the new iwl7260 ucode files and also the new binary format PNVM


author: Bruno Meneguele <bmeneg@redhat.com> - 20211007-104.git7a300505
changelog:
  - Update to latest upstream linux-firmware image for assorted updates
  - Certain amdgpu firmware files cause random hangs with AMD Picasso/Raven Ridge APUs (rhbz 2000879)
  - Support Intel CNVi AX211 Garfield Peak2 on ADL - Bluetooth (rhbz 1923179)
  - Support Intel CNVi AX211 Garfield Peak2 on ADL - WIFI (rhbz 1923175)


author: Bruno Meneguele <bmeneg@redhat.com> - 20211119-105.gitf5d51956
changelog:
  - Update to latest upstream linux-firmware image for assorted updates
  - Update to latest AMD GPU firmware (rhbz 1986660)


author: Augusto Caringi <acaringi@redhat.com> - 20220209-106.git6342082c
changelog:
  - Update to latest upstream linux-firmware image for assorted updates
  - Include AMD GPU firmware fix (rhbz 2031172)
  - Support QCA WCN6856 v2.1 Module: Bluetooth firmware (rhbz 2007904)


author: Jarod Wilson <jarod@redhat.com> - 20220517-107.git251d2900
changelog:
  - Update to latest upstream linux-firmware image for assorted updates
  - Include latest qed firmware update (rhbz 2040269)
  - Include latest bnx2x firmware update (rhbz 2040273)
  - Include latest ice firmware update (rhbz 2059384, rhbz 2081543)
  - Include latest Qualcomm firmware update (rhbz 2062871)


author: Jarod Wilson <jarod@redhat.com> - 20220713-109.gitdfa29317
changelog:
  - Update to latest upstream linux-firmware image for assorted updates
  - Include even newer qed firmware update (rhbz 2040269)


author: Jarod Wilson <jarod@redhat.com> - 20220726-110.git150864a4
changelog:
  - Omit unused password-protected vxge firmware files from package (rhbz 2108051)
  - Pick up latest AMD GPU firmwares


author: Lucas Zampieri <lzampier@redhat.com> - 20221102-111.git8bb75626
changelog:
  - Update to latest upstream linux-firmware image for assorted updates
  - amdgpu firmware update to fix certain "multiple monitor scenarios" (rhbz 2130707)


author: Lucas Zampieri <lzampier@redhat.com> - 20230111-112.gita1ad1d5b
changelog:
  - Update to latest upstream linux-firmware image for assorted updates
  - Navi33 dGPU firmware (rhbz 2047480)
  - Navi31 dGPU firmware (rhbz 2047483)


author: Lucas Zampieri <lzampier@redhat.com> - 20230217-113.git83f1d778
changelog:
  - Update to latest upstream linux-firmware image for assorted updates
  - Qualcomm Wi-Fi - Disconnecting power cable during suspend wakes up the laptop (rhbz 2169012)


author: Patrick Talbert <ptalbert@redhat.com> - 20230404-114.git2e92a49f
changelog:
  - Update to latest upstream linux-firmware image for assorted updates
  - Intel QAT Update - firmware for QAT (rhbz 2030316)


author: Denis Kirjanov <dkirjanov@cloudlinux.com> - 2.0-23
changelog:
  - KMODLVE-370: lvp creating problem on kmodlve 2.0
  - KMODLVE-367: Investigate issue with unavailability to create LVE
  - KMODLVE-363: whitelist the task_sched_stat
  - KMODLVE-363: make task_sched_stat global, add missing removal code
  - CLKRN-640: enable procfs code only for CL8


author: Denis Kirjanov <dkirjanov@cloudlinux.com> - 2.0-24
changelog:
  - KMODLVE-380: enable sleep in hooks and avoid calling the hooked func
  - KMODLVE-385: prevent jump out of the container's root via procfs symlinks
  - KMODLVE-383: do not cpu-starve in __lve_init
  - CLKRN-659: fix procfs access
  - KMODLVE-377: use module_mutex when resolving names
  - KMODLVE-374: remove trace_printk() calls
  - KMODLVE-353: lve_enter_pid_flags() API call
  - KMODLVE-373: do not kill unkillable threads in lve_enter


author: Denis Kirjanov <dkirjanov@cloudlinux.com> - 2.0-25
changelog:
  - KMODLVE-375 simplify an lvp default unlink
  - KMODLVE-389 fix debug output
  - KMODLVE-379 out of bound access
  - KMODLVE-384: reduce memory consumption by lve procfs
  - KMODLVE-382: fix for permissions of /proc/<pid>/task/<pid>/io file


author: Denis Kirjanov <dkirjanov@cloudlinux.com> - 2.0-26
changelog:
  - KMODLVE-392 fix load avg calculation for userland.
  - KMODLVE-394: resolve AB-BA deadlock between __set_page_dirty() and lve_io_account()
  - KMODLVE-392: loadavg for root should be fully accounted


author: Denis Kirjanov <dkirjanov@cloudlinux.com> - 2.0-27
changelog:
  - KMODLVE-393: lve cgroup rmdir fails with -EBUSY
  - KMODLVE-398: don't use ref-style in RCU-lookup
  - KMODLVE-395: fix module searching during lve service restart
  - KMODLVE-392: wrong assignment in get_avenrun handler


author: Denis Kirjanov <dkirjanov@cloudlinux.com> - 2.0-28
changelog:
  - KMODLVE-402 lvp0 destroy wait
  - KMODLVE-403: allow lve to be cleaned up on error
  - KMODLVE-401: setup buildsys-pre-build to delete liblve sources during kmod-lve building
  - KB-115 fix cl7h install
  - KMODLVE-393: lve_enter fault injection points for testing
  - CLKRN-697: datacycle does not provide polling
  - KMODLVE-400: fix symlink option bug


author: Denis Kirjanov <dkirjanov@cloudlinux.com> - 2.0-30
changelog:
  - KB-115: build 2.0-30
  - KMODLVE-407: release path after symlink lookup for CL7 lsm
  - CLKRN-741: adapt datacycle fsnotify hook on unlink/rmdir events to 8.2
  - KMODLVE-399: move exec handler to the new hook infra
  - CLKRN-736: fix kmod-qa 0102-procfs_protection on CL7h/8
  - KMODLVE-410: properly handle lve_leave_pid() errors


author: Denis Kirjanov <dkirjanov@cloudlinux.com> - 2.0-31
changelog:
  - KMODLVE-429: added depenency to lve package (must be >= 2.0-2)
  - KMODLVE-416: build fixes for 8.4
  - KMODLVE-421: incorrect db_governor/sql start order
  - Revert "CLKRN-736: fix kmod-qa 0102-procfs_protection on CL7h/8"
  - CLKRN-758: allow access to /proc/<pid>/fd/* symlinks
  - KMODLVE-413: do not lock parent dir i_mutex/i_rwsem twice
  - KMODLVE-340 reapply 8.2 install fixes


author: Denis Kirjanov <dkirjanov@cloudlinux.com> - 2.0-33
changelog:
  - KMODLVE-424: fix incorrect IO throttling accounting for CL7
  - KMODLVE-431: whitelist nf_conntrack_max
  - KMODLVE-430: add missing LVE_API_ENTER/EXIT directives
  - KMODLVE-417: fine-grained options for lve_enter


author: Denis Kirjanov <dkirjanov@cloudlinux.com> - 2.0-37
changelog:
  - KMODLVE-448: don't load the module if there's no CONFIG_SECURITY_PATH defined
  - KMODLVE-450: datacycle cannot flush ids > 65535
  - CLKRN-821: datacycle path names should be mangled


author: Denis Kirjanov <dkirjanov@cloudlinux.com> - 2.0-39
changelog:
  - KMODLVE-470: don't restrict root process from traversing symlinks
  - KMODLVE-461: register usage cleanup
  - KMODLVE-460: unused label removal
  - CLKRN-859: added CAP_SYS_ADMIN capability allowing ptrace children
  - KMODLVE-478: add missing LVE_API_* directives into setuid feature


author: Denis Kirjanov <dkirjanov@cloudlinux.com> - 2.0-40
changelog:
  - KMODLVE-463: tc does not work properly with class major 0x0
  - KMODLVE-478: add missing LVE_API_* directives into setuid feature
  - CLKRN-859: added CAP_SYS_ADMIN capability allowing ptrace children


author: Denis Kirjanov <dkirjanov@cloudlinux.com> - 2.0-43
changelog:
  - KMODLVE-508: replace immutable cgroups with rmdir hooks
  - KMODLVE-500: improve lve_get_pid_info logging
  - KMODLVE-506: reimplement iolimits latency for CL8


author: Anatoly Stepanov <astepanov@cloudlinux.com> - 2.0-44
changelog:
  - KMODLVE-523: rmdir hooks are not being called
  - KMODLVE-516: network-manager has no access to mtu
  - KMODLVE-591: user_ptrace checks should account CAP_SYS_PTRACE
  - KMODLVE-515: add missing path_put in lve_namespace_set_root
  - KMODLVE-487: wrong pmem fault counter for CL8
  - KMODLVE-506: reimplement iolimits latency for CL8


author: Rostyslav Tulchii <rtulchii@cloudlinux.com> - 2.0-48
changelog:
  - KB-232: bump a kernel version for kmodlve building
  - KMODLVE-564: fixed a replica of the nameidata structure for symlink protection


author: Rostyslav Tulchii <rtulchii@cloudlinux.com> - 2.0-51
changelog:
  - CLKRN-1093: allow freezable sleep in kmodlve
  - CLKRN-1195: bumped kernel version for module building (cl8) for debug kernel compatibility


author: Rostyslav Tulchii <rtulchii@cloudlinux.com> - 2.0-53
changelog:
  - CLKRN-1210: make new page cache accounting default for new installations
  - CLKRN-1089: do not account page cache memory in lve stats output


author: Rostyslav Tulchii <rtulchii@cloudlinux.com> - 2.0-56
changelog:
  - CLKRN-1406: revert some changes related to prod_net_disable2 - made the behaviour obliged
  - CLKRN-1399: improved fs.protected_symlinks_create option to close the SecureLink creating vulnerability


author: Rostyslav Tulchii <rtulchii@cloudlinux.com> - 2.1-14
changelog:
  - CLKRN-1153: bump cl9 kernel version for module building
  - KMODLVE-587: enable access to ipv4 and ipv6 entries
  - KMODLVE-588: always update ppos in defaults_next


author: Linar Nadeev <lnadeev@cloudlinux.com> - 2.1-15
changelog:
  - CLKRN-1181: New Alma 9 kernel: -5.14.0-284.11.1.el9_2
  - KMODLVE-594: Prepare kmod-lve for kernel 9.2 build
  - KMODLVE-596: fix cgroup stat parsing


author: Anton Mikaiev <amikaiev@cloudlinux.com> - 2.1-16
changelog:
  - CLKRN-1176: added patch to fix ttypushback vulnerability
  - CLKRN-1195: bumped kernel version for building (cl8) for debug kernel compatibility
  - CLKRN-1093: allow freezable sleep in kmodlve


author: Rostyslav Tulchii <rtulchii@cloudlinux.com> - 2.1-18
changelog:
  - CLKRN-1371: fixed kernel.proc_disable_net & introduced kernel.proc_disable_net2
  - CLKRN-1386: adapt kmodlve building with FEAT_LINK_PROT == 0


author: Rostyslav Tulchii <rtulchii@cloudlinux.com> - 2.1-19
changelog:
  - KMODLVE-600: iolimits events support for CL8/9
  - KMODLVE-601: tag get/put events support
  - CLKRN-1406: revert some changes related to prod_net_disable2 - made the behaviour obliged
  - CLKRN-1355: symlink owner protection fixes for CL9
  - CLKRN-1399: improved fs.protected_symlinks_create option to close the SecureLink creating vulnerability


author: Rostyslav Tulchii <rtulchii@cloudlinux.com> - 2.1-22
changelog:
  - CLKRN-1455: change kernel (cl9) building version for 5.14.0-362.13.1.el9_3
  - CLKRN-1203: switch back to using rh_reserved for tag links
  - CLKRN-1439: reduce warnings from external cgroup moves


author: Rostyslav Tulchii <rtulchii@cloudlinux.com> - 2.1-24
changelog:
  - CLKRN-1488: rework security_* hooks
  - CLOS-2484: suppress the warning for nonexistent 90-cloudlinux.conf in the script


author: Rostyslav Tulchii <rtulchii@cloudlinux.com> - 2.1-26
changelog:
  - CLKRN-1546: always block cgroup move in a multithreaded app
  - CLKRN-1547: stringify more lve_enter flags
  - CLKRN-1541: do not kill unkillable tasks from de_thread()
  - CLKRN-1542: do not allow to interrupt lve_unlink()
  - CLKRN-1457: fixed XFS_QMOPT_FORCE_RES for cl9 kernels


author: Rostyslav Tulchii <rtulchii@cloudlinux.com> - 2.1-28
changelog:
  - CLKRN-1559: check if the ptr is invalid in lve_do_renameat2_trace hook
  - CLKRN-1566: improved restrictions on accessing another mnt ns


author: Rostyslav Tulchii <rtulchii@cloudlinux.com> - 2.1-32
changelog:
  - CLKRN-1606: call missing putname within SP
  - CLKRN-1447: adapted minor log for moving tasks outside of LVEs


author: Eugene Zamriy <ezamriy@cloudlinux.com> - 0.1-1
changelog:
  - Initial release: cloudlinux-default tuned profile for CloudLinux 7
  - AL-1741: IO scheduler configuration: set deadline for rotational devices and
             noop for SSD disks
  - AL-1888: disable tcache/tswap OpenVZ subsystems
  - AL-1889: increase nr_requests value to 1024


author: Konstantin Vaskovtsov <derkonstantin@cloudlinux.com> 0.1-10
changelog:
  - CAG-862: Add another profile: cloudlinux-latency-performance with min_perf_pct=100 and force_latency=1


author: Rostyslav Tulchii <rtulchii@cloudlinux.com> 0.1-11
changelog:
  - CLKRN-698: add crashkernel=auto kernel parameter by default
  - CLKRN-709: fix force_latency for cloudlinux-latency-performance


author: Rostyslav Tulchii <rtulchii@cloudlinux.com> 0.1-12
changelog:
  - CLKRN-859: tune systemd-logind capabilities to make GDM GUI work on CL 8.5 (incompatibility with hidepid)


author: Rostyslav Tulchii <rtulchii@cloudlinux.com> 0.2-4
changelog:
  - CLKRN-1038: deleted redundant ovz specific sysctl vm.force_scan_thresh
  - KB-219: fixed spec scriptlet


