# changelog

author: Clark Williams <williams@redhat.com> - 1.10-1
changelog:
  - utils: Fix bounds check on cpu and end_cpu variables
  - stalld: Support denylisting of tasks in stalld
  - src/utils: use right argument for warning printf


author: Clark Williams <williams@redhat.com> - 1.11-1
changelog:
  - redhat/stalld.spec: pick up gating test version for changelog
  - utils.c: set daemon umask to restrict global write/execute (1934586)
  - hardening fixes from coverity scan (1934590)


author: Fernando Pacheco <fpacheco@redhat.com> - 1.12-1
changelog:
  - stalld.8: fix diff cruft left in manpage source
  - stalld.c: clean up handling of nr_running
  - stalld.c: remove duplicate parameter to fill_waiting_task()
  - stalld: Add error handling in get_cpu_idle_time()
  - stalld.service: Run stalld as sched_fifo via systemd
  - packaging: clean up Makefiles and rpm specfile
  - stalld: Always print current function for info messages
  - stalld: Always print current function for warn messages
  - stalld: Always print current function for die messages
  - utils: change PATHMAX to 4096


author: Fernando Pacheco <fpacheco@redhat.com> - 1.13-1
changelog:
  - stalld: Fix log message on boost_cpu_starving_vector()
  - stalld: Add the overload control to the single-threaded mode
  - stalld: Add the adaptive mode option
  - stalld: Use the last mode set in the cmdline
  - stalld: Fallback to the adaptive mode if force_fifo is selected
  - stalld: Make single-threaded mode the default one
  - stalld.service: Always restart stalld on exit
  - utils.c: Fail if user is not root
  - utils.c: Make the path to sched_debug path dynamic


author: Fernando Pacheco <fpacheco@redhat.com> - 1.14.1-1
changelog:
  - stalld: Coding style cleanup
  - stalld: spaces in place of <TAB>
  - throttling: Use RT_RUNTIME_PATH in rt_throttling_is_off()
  - throttling: Check open() on turn_off_rt_throttling
  - throttling: Adjust variables in restore_rt_throttling()
  - stalld.c: utils.c: Remove complex assignments from variable declarations
  - stalld.h: Define MAX_PATH/DIR_PATH/FILE_NAME and use them
  - stalld: Adjust variables in parse_old_task_format()
  - utils.c: Use MAX_PATH for pidfile
  - stalld.c: Remove variable declaration from the middle of  the function
  - stalld: Respect -l option in single threaded mode
  - utils: s/try_to_open_file/check_file_exists/
  - utils: use check_file_exists in setup_hr_tick()
  - utils: Check for the new sched_features path


author: Fernando Pacheco <fpacheco@redhat.com> - 1.15-1
changelog:
  - stalld: Fix incorrect open() return value checks
  - stalld: Pass errno to strerror() on sig*set() failures
  - throttling: Always null terminate sched_rt_runtime_us output
  - stalld: Remove unreachable statement in detect_task_format()
  - tests: Fix uninitialized value action.sa_mask
  - utils: Bail if malloc() returns null in parse_cpu_list()
  - stalld: Use correct format specifier for long types


author: Fernando Pacheco <fpacheco@redhat.com> - 1.16-1
changelog:
  - stald/utils: Space, lines and voids clenaups
  - stalld: Add an option to easily set stalld as SCHED_DEADLINE
  - stalld: Comments cleanup
  - src/utils: Comments cleanup
  - src/throttling: Comments cleanup
  - src/stalld.h Comments cleanup


author: Clark Williams <williams@redhat.com> - 1.17.1
changelog:
  - stalld: Fix memory leak in print_boosted_info()
  - utils: Check if the system is in lockdown mode
  - stalld: print process comm and cpu when boosting
  - stalld: Detect runnable dying tasks
  - stalld: Fix nr_periods calculation in do_fifo_boost()
  - stalld.conf: Lower threshold to 20
  - utils.c: Exit early if enabling HRTICK fails when using SCHED_DEADLINE
  - Add support for loongarch


author: Clark Williams <williams@redhat.com> - 1.18.1
changelog:
  - queue_track: Use LIBBPF_MAJOR/MINOR_VERSION to detect deprecated functions
  - utils: Close file descriptor
  - stalld: Fix function name of daemonize()
  - docs: Fix typo in the manual
  - queue_track: Use bpf_map__resize on older libbpf versions
  - utils: Let tgid to arrive at the fill proccess comm
  - stalld: Fix log message on idle detection
  - stalld: Add -b/--backend option
  - stalld: Add queue track eBPF based backend
  - stalld: Add fill_process_comm helper
  - stalld: Include regex.h on stalld.h
  - stalld: Get nr of cpus only once
  - stalld: Add the backend abstraction
  - sched_debug: Move sched debug functions to an specific file


author: Clark Williams <williams@redhat.com> - 1.19.1
changelog:
  - Conditionalize BPF and queue_track build per architecture
  - clean up Makefile install logic and add .bz2 to .gitignore
  - modify Makefiles so install works with relative paths
  - rename 'redhat' to 'systemd' and remove redhat packaging logic
  - update SPDX tags to non-deprecated values
  - stalld: Add -a/--affinity option
  - Adding SPDX license info to each file
  - man/stalld.8:  change starving threshold to match code
  - utils: Fix freeing of invalid pointer
  - add bpftool as BuildRequires


author: Radovan Sroka <rsroka@redhat.com> - 1.9.12-1.p2
changelog:
  - Rebase to sudo 1.9.12p2
  - sudo-1.9.12p2 is available Resolves: rhbz#2137775
  - sudo: arbitrary file write with privileges of the RunAs user Resolves:
    CVE-2023-22809


author: Radovan Sroka <rsroka@redhat.com> - 1.9.13-1.p2
changelog:
  - Rebase to sudo 1.9.13p2
  - sudo-1.9.13p2 is available Resolves: rhbz#2169840
  - sudo: double free with per-command chroot sudoers rules Resolves:
    CVE-2023-27320


author: Yaakov Selkowitz <yselkowi@redhat.com> - 1.9.14-1.p3
changelog:
  - Rebase to 1.9.14p3
  - sudo-1_9_14p2 is available Resolves: rhbz#2175672
  - sudo fails to build with Python 3.12: FAILED: testcase
    check_example_group_plugin_is_able_to_debug() Resolves: rhbz#2186412


author: Radovan Sroka <rsroka@redhat.com> - 1.9.15-1
changelog:
  - Rabase to 1.9.15p5
  - sudo-1_9_15p5 is available Resolves: rhbz#2248505
  - TRIAGE CVE-2023-42465 sudo: Targeted Corruption of Register and Stack
    Variables Resolves: rhbz#2255569


author: Neal Gompa <ngompa@fedoraproject.org> - 251.4-53
changelog:
  - Set compile-time fallback hostname to "localhost"
    https://fedoraproject.org/wiki/Changes/FallbackHostname


author: Anita Zhang <the.anitazha@gmail.com>
changelog:
  - Update systemd-oomd defaults to friendlier values
  - Remove swap policy. Default amount of swap (8GB?) is a lot lower than
    what we use internally with the swap policy. Which frequently leads to
    GNOME getting killed (e.g.
    https://bugzilla.redhat.com/show_bug.cgi?id=1941170, and other BZs not
    linked here). Internally we use 0.5x-1x size of physical memory for swap
    via swapfiles (this will be documented in systemd upstream). In simple
    cases of using more memory than is available (but without memory
    pressure), the Kernel OOM killer can handle killing the offending
    process.


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 252.4-1
changelog:
  - Version 252.4
  - Fixes a few different issues (systemd-timesyncd connectivity problems,
    broken emoji output on the console, crashes in pid1 unit dependency
    logic)
  - CVE-2022-4415: systemd: coredump not respecting fs.suid_dumpable kernel
    setting


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 253~rc3-1
changelog:
  - Version 253-rc3
  - A bunch of bugfixes for regressions, some documentation and bug fixes
    too.
  - Really fix rhbz#2165692 (previous build carried an unapplied patch).


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 253-6
changelog:
  - Set TimeoutStopFailureMode=abort for services (see
    https://fedoraproject.org/wiki/Changes/Shorter_Shutdown_Timer)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 253.12-1
changelog:
  - Version 253.12
  - Just some documentation patches, a hwdb update, and fix for udev on
    systemd with too much hardware devices, and some fixes for networkd.
  - Fixes rhbz#2242759 by virtue of rebuild.


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 254~rc3-1
changelog:
  - Version 254~rc3
  - A bunch of fixes, e.g. rhbz#2223795. Also a bunch of reverts of commits
    which were found to cause problems.


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 254-1
changelog:
  - Version 254 (just a bunch of bugfixes, mostly for unusual architectures,
    since rc3)
  - rhbz#2226908
  - See https://raw.githubusercontent.com/systemd/systemd/v254-rc1/NEWS for
    the full changeset.


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 254.2-1
changelog:
  - Version 254.2
  - A bunch of fixes in various areas: manager, coredump, sysupdate,
    hibernation, journal.
  - Should fix rhbz#2234653.


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 254.7-1
changelog:
  - Version 254.7
  - A bunch of fixes: systemd, systemctl device argument parsing,
    improvements in systemd-analyze, systemd-networkd, systemd-journal-
    upload, systemd-repart, systemd-logind, systemd-nspawn, systemd-
    cryptsetup, systemd-udevd, udevadm, and udev rules, coredumpctl, systemd-
    xdg-autostart-generator, sd-journal code for entry lookup, systemd-sleep,
    portablectl, resolvectl, systemd-boot, bootctl, systemd-stub, kernel-
    install, various systemd units, memory access correctness, D-Bus
    interfaces, documentation, soft-reboot, systemd-firstboot, utmp, systemd-
    homed, systemd-stdio-bridge, systemd-resolved.
  - Includes an update of the hardware database (rhbz#2252022)
  - Includes an updated list of syscalls for kernels 6.6 and 6.7


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 254.8-1
changelog:
  - Version 254.8
  - A bunch of fixes for various components: systemd, systemctl, systemd-
    firstboot, systemd-repart, bootctl, systemd-networkd, systemd-network-
    generator, systemd-analyze, systemd-dissect, ukify, man pages.
  - Also has a patch for CVE-2023-7008 (rhbz#2222260)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 254.9-1
changelog:
  - Version 254.9
  - Fixes kernel-install on /boot on btrfs (rhbz#2251262)
  - Various small fixes for systemd itself, systemd-resolved, bootctl,
    systemd-networkd, udev, systemd-repart, systemd-homed, libsystemd,
    virtualization detection, systemd-analyze, systemd-dissect, systemd-
    journal-remote, documentation.
  - Hardware database update.


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 255-1
changelog:
  - Version 255
  - Just a few bugfixes since 255-rc4: seccomp filters, logging,
    documentation, systemd-repart
  - Includes a hardware database update.


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 255-3
changelog:
  - Move config files to /usr/lib/systemd (e.g. /etc/systemd/system.conf →
    /usr/lib/systemd/systemd.conf). Both config file locations were already
    supported, and the files installed in /etc/ were "empty" (i.e. they had
    only comments and section headers). The move does not change the
    configuration, but just makes /etc more empty by default. See
    https://github.com/systemd/systemd/commit/6495361c7d for more discussion
    and details.


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 255.2-1
changelog:
  - Version 255.2
  - Fixes missing DNSSEC validity check in SOA DNS packets (CVE-2023-7008)
  - systemd-resolved and systemd-networkd are restarted after an upgrade.


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 255.3-1
changelog:
  - Version 255.3
  - A bunch of various fixes for memory and behaviour, in many different
    components (bootctl, systemd, udev, systemd-networkd, systemd-homed,
    systemd-logind, systemd-resolve, systemd-repart, systemd-analyze,
    systemd-dissect, systemd-boot, pam modules, systemd-storagetm, systemd-
    journal-remote, kernel-install)
  - Improved detection of virtualization (Google Compute Engine, Apple Virt)
  - Updates for shell completions and docs
  - An update for hardware database


author: Patsy Griffin <patsy@redhat.com> - 2022b-1
changelog:
  - Rebase to tzdata-2022b
    - Chile transitions to DST on 2022-09-11, not 2022-09-04
    - 'make install' now defaults LOCALTIME to Factory rather than GMT
    - More zones that are the same since 1970 have been moved to backzone.
    - Include patch for awk workaround.


author: Patsy Griffin <patsy@redhat.com> - 2022c-1
changelog:
  - Rebase to tzdata-2022c - supersedes tzdata-2022b
    - Add a work-around for an awk bug in FreeBSD, macOS, etc.
    - Improve tzselect with respect to intercontinental Zones.


author: Patsy Griffin <patsy@redhat.com> - 2022d-1
changelog:
  - Rebase to tzdata-2022d
    - Palestine DST transition will be on October 29, 2022, 
      not October 28, 2022.
    - Europe/Uzhgorod and Europe/Zaporozhye are moved to 'backzone'.


author: Patsy Griffin <patsy@redhat.com> - 2022e-1
changelog:
  - Rebase to tzdata-2022e
    - Jordan and Syria cancelled the DST transition planned
      for 2022-10-28, remaining at +03 permanently.


author: Patsy Griffin <patsy@redhat.com> - 2022f-1
changelog:
  - Rebase to tzdata-2022f
    - Mexico will stop observing DST except near the US border.
    - Chihuahua moved to -06 year round starting on 2022-10-30.
    - Fiji no longer observes DST.


author: Patsy Griffin <patsy@redhat.com> - 2022g-1
changelog:
  - Rebase to tzdata-2022g
    - The northern edge of the Mexican state of Chihuahua will
      change time zone to agree with nearby US locations on
      2022-11-30.
    - Added a new Zone America/Ciudad_Juarez that splits from
      America/Ojinaga.


author: Patsy Griffin <patsy@redhat.com> - 2023a-1
changelog:
  - Rebase to tzdata-2023a
   - Egypt reintroduced DST, from April through October.
   - Morocco springs forward April 23, not April 30.
   - Palestine delayed the start of DST this year.


author: Patsy Griffin <patsy@redhat.com> - 2023d-1
changelog:
  - Rebase to tzdata-2023d
    - Include time zone changes for Ittoqqortoormiit, Greenland
      and Vostok, Antarctica.
    - Update the expiration date for the leap-seconds.list file.
      No new leap seconds were added.
  - Use the new syntax for the %patch macro.


author: Patsy Griffin <patsy@redhat.com> - 2023d-1
changelog:
  - Rebase to tzdata-2023d
    - Include time zone changes for Ittoqqortoormiit, Greenland
      and Vostok, Antarctica.
    - Update the expiration date for the leap-seconds.list file.
      No new leap seconds were added.


author: Patsy Griffin <patsy@redhat.com> - 2023d-2
changelog:
  - Migrate License field to SPDX identifiers for
    https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_2


author: Patsy Griffin <patsy@redhat.com> - 2024a-1
changelog:
  - Rebase to tzdata-2024a
    - Kazakhstan will transition from UTC+6 to UTC+5 on 2024-03-01.
    - Palestine will spring forward a week later than previously
      predicted.


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:9.1.076-2
changelog:
  - enable building without GPM support - build with GPM in Fedora
  - 2262371 - gvim: symbol lookup error: gvim: undefined symbol: g_once_init_enter_pointer


author: Joe Doss <joe@solidadmin.com> - 1.0.20210223-1
changelog:
  - wg-quick: android: do not free iterated pointer
  - wg-quick: openbsd: no use for userspace support
  - embeddable-wg-library: sync latest from netlink.h
  - wincompat: recent mingw has inet_ntop/inet_pton
  - wincompat: add resource and manifest and enable lto
  - wincompat: do not elevate by default
  - completion: add help and syncconf completions
  - sticky-sockets: do not use SO_REUSEADDR
  - man: LOG_LEVEL variables changed name
  - ipc: do not use fscanf with trailing \n
  - ipc: read trailing responses after set operation


author: Joe Doss <joe@solidadmin.com> - 1.0.20210315-1
changelog:
  - Makefile: fix version indicator
  - wireguard-tools: const correctness
  - wireguard-tools: drag in headers for prototypes
  - ipc: uniformly ignore preshared keys that are zero
  - wg-quick: freebsd: add kernel support
  - ipc: freebsd: add initial FreeBSD support
  - wg-quick: freebsd: avoid writing private keys to /tmp


author: Joe Doss <joe@solidadmin.com> - 1.0.20210424-1
changelog:
  - wg-quick: freebsd: check for socket using -S, not -f
  - wg-quick: freebsd: do not assume point-to-point interface flag
  - wg-quick: freebsd: use ifconfig for determining if interface is up
  - wg-quick: kill route monitor when loop terminates


author: Joe Doss <joe@solidadmin.com> - 1.0.20210914-1
changelog:
  - contrib/launchd: fix xml syntax error
  - wg-quick: darwin: account for "link#XX" gateways
  - ipc: add wireguard-nt support
  - ipc: cache windows lookups to avoid O(n^2) with nested lookups
  - ipc: remove windows elevation
  - ipc: windows: don't display disabled adapters
  - ipc: windows: use devpkey instead of nci for name
  - wg-quick: android: adjust for android 12
  - wg-quick: openbsd: set DNS with resolvd(8)


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 0.8.1-1
changelog:
  - Update to version 0.8.1
  - Drop patch xxhash-pkgconfig-version.patch (accepted upstream)
  - Fix compilation on RHEL 7 ppc64le (gcc 4.8)
  - The x86 dispatch code now enables sse2 and avx2 separately, it can now use
    sse2 on EPEL 7 without trying to use avx2 which is not supported by gcc 4.8
  - Add documentation package - doxygen mark-up was added


author: Todd Zullinger <tmz@pobox.com> - 5.2.5-9
changelog:
  - verify upstream GPG signature
  - xzgrep: arbitrary-file-write vulnerability (#2073310, CVE-2022-1271)


author: Daniel P. Berrangé <berrange@redhat.com> - 2.1.0-21
changelog:
  - Switch to using git for managing patches
  - Fix potential buffer overread (CVE-2017-16516)
  - Fix integer overflow leading to heap corruption (CVE-2022-24795)
  - Fix multiple memory leaks (CVE-2023-33460)


author: Jonathan Dieter <jdieter@gmail.com> - 1.2.0-1
changelog:
  - Add `--uncompressed` option to zck, allowing for embedding of uncompressed
    digests in the header
  - Various small bug fixes


author: Jonathan Dieter <jdieter@gmail.com> - 1.2.1-1
changelog:
  - Fixed bug that limited size of file that could be compressed using zchunk to 2GB
  - Fixed memory leak


author: Jonathan Dieter <jdieter@gmail.com> - 1.3.0-1
changelog:
  - Add option to generate a zchunk header from an uncompressed file without
    actually creating a zchunk file


author: Jonathan Dieter <jdieter@gmail.com> - 1.3.1-1
changelog:
  - Fix a few low severity security bugs including
    - An off-by-one overflow when reading compressed integers from a
      malicious zchunk file
    - Error handling being skipped when the number of bytes read doesn't
      match what's expected
    - Not freeing memory when attempting to reallocate to size 0


author: Jonathan Dieter <jdieter@gmail.com> - 1.4.0-1
changelog:
  - Add native OpenSSL 3 compatibility
  - Add new function for getting zchunk context from chunk
  - Fix bug when assembling from multiple sources


