# changelog

author: Tao Liu <ltao@redhat.com> - 2.0.29-7
changelog:
  - 99-kdump.conf: Omit clevis related dracut modules
  - kdump-lib.sh: rounded up the total_mem to 128M in get_system_size
  - kdump-lib.sh: Adjust default crashkernel reservation for x86_64 and s390x
  - doc/kdump.conf: correctly align the options


author: Tao Liu <ltao@redhat.com> - 2.0.29-8
changelog:
  - kdumpctl: check and generate /etc/vconsole.conf
  - kdump-lib.sh: Reserve crashkernel by default for systems with 1G-2G memory


author: Tao Liu <ltao@redhat.com> - 2.0.29-12
changelog:
  - Allow "sudo kdumpctl" for LUKS dump target
  - Restore SELinux label of crypttab file
  - Allow kdump.service to access LUKS volume keys
  - Wait for LUKS configfs API to be ready
  - Change LUKS volume key prefix to kdump-cryptsetup:vk-
  - Remove unused LUKS volume keys from keyring
  - Limit LUKS support to x86_64
  - Add kdumpctl setup-crypttab subcommand
  - Return LUKS devices in the form of UUIDs directly
  - Fix SC2181 issues in kdump-udev-throttler
  - LUKS: make /usr writable
  - Address CPU/memory hot plugging for kdump LUKS support
  - shfmt kdump-udev-throttler
  - Use cryptsetup --link-vk-to-keyring to save volume keys
  - Support dumping to a LUKS-encrypted target
  - Add a helper function to get uuid by MAJ:MIN


author: Tao Liu <ltao@redhat.com> - 2.0.29-2
changelog:
  - Re-introduce vmcore creation notification to kdump
  - Revert "Introduce vmcore creation notification to kdump"
  - Add kdump dracut config
  - kdump-lib-initramfs: Improve mount point retrieval logic


author: Tao Liu <ltao@redhat.com> - 2.0.29-3
changelog:
  - fadump: fix passing additional parameters for capture kernel
  - fadump: pass additional parameters for capture kernel


author: Tao Liu <ltao@redhat.com> - 2.0.29-6
changelog:
  - 99-kdump.conf: Omit rdma module
  - Fallback to get NIC driver by /sys/class/net/NIC/device/driver/module
  - Note user-specified crashkernel value will be overwritten by default value


author: Michel Lind <salimma@centosproject.org> - 6.9.0-2
changelog:
  - Mark libbpf support as dependent on missing header file
  - some feature checks not shown unless VF=1 is passed


author: Michel Lind <salimma@centosproject.org> - 6.15.0-1.1
changelog:
  - Update to 6.15.0
  - Temporarily exclude ARM builds and build only for hs+fb since the ARM
    build process from standalone tarballs is broken


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-35
changelog:
  - Relax OpenSSH checks for OpenSSL version
    Resolves: RHEL-4734
  - Limit artificial delays in sshd while login using AD user
    Resolves: RHEL-2469
  - Move users/groups creation logic to sysusers.d fragments
    Resolves: RHEL-5222


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-36
changelog:
  - Fix Terrapin attack
    Resolves: CVE-2023-48795
  - Relax OpenSSH build-time checks for OpenSSL version
    Related: RHEL-4734
  - Forbid shell metasymbols in username/hostname
    Resolves: CVE-2023-51385


author: Raymond Colebaugh <raymondcolebaugh@gmail.com> - 8.7p1-38.8 + 0.10.4-5.7
changelog:
  - Merge "Add LOG_SESSION_ID for everyone" patch into fb87_log_session_id.patch,
    update fb87_pass_principals_to_child.patch to account for this change


author: Zoltan Fridrich <zfridric@redhat.com> - 8.7p1-40
changelog:
  - Correctly audit hostname and IP address
    Resolves: RHEL-22316
  - Make default key sizes configurable in sshd-keygen
    Resolves: RHEL-26454


author: Michel Lind <salimma@centosproject.org> - 8.7p1-43.1 + 0.10.4-5.7
changelog:
  - Merge new changes from upstream
  - Drop old EL8 workarounds
  - Make sure source RPM always contains all sources and patches


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-44
changelog:
  - Add extra help information on ssh early failure
    Resolves: RHEL-33809
  - Provide details on crypto error instead of "error in libcrypto"
    Resolves: RHEL-52293
  - Allow duplicate Subsystem directive
    Resolves: RHEL-47112


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-45
changelog:
  - Fix missing error codes set and invalid error code checks in OpenSSH. It
    prevents memory exhaustion attack and a MITM attack when VerifyHostKeyDNS
    is on (CVE-2025-26465).
    Resolves: RHEL-78700


author: Roberto Campesato <render@metalabs.org> - 9.1.0-1.1
changelog:
  - Merge latest changes from Fedora
  - Added fb-only patch based on experimental AMD changes for SEV/SNP
    to make PCI passthrough work with SNP


author: Roberto Campesato <render@metalabs.org> - 2:9.2.0-2.1
changelog:
  - Merge latest changes from Fedora
  - Remove fb-only patch already included upstream
  - Include fix for multifd migration regression https://gitlab.com/qemu-project/qemu/-/issues/2720


author: Michel Lind <salimma@centosproject.org> - 0.6.7-4
changelog:
  - Update unified SEL logging to only log correctable errors
  - Limit unified SEL logging changes to hs+fb builds for now


author: Michel Lind <salimma@centosproject.org> - 0.8.1-1
changelog:
  - Update to 0.8.1
  - Update SEL logging patch to PR 180
  - Incorporate changes from Fedora's rasdaemon-0.8.0-5.fc41


