diff --git a/.gitignore b/.gitignore
index 95acd8f..4e90943 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1 +1 @@
-SOURCES/ndctl-65.tar.gz
+SOURCES/ndctl-67.tar.gz
diff --git a/.ndctl.metadata b/.ndctl.metadata
index d4c53b7..3ca7aea 100644
--- a/.ndctl.metadata
+++ b/.ndctl.metadata
@@ -1 +1 @@
-65bfc783a624628e5eb60e936f46e6b543025670 SOURCES/ndctl-65.tar.gz
+6bea3b5d545201ab31c3d90b90204cc90dfa88bd SOURCES/ndctl-67.tar.gz
diff --git a/SOURCES/modprobe-link-user-keyring-before-loadkeys.patch b/SOURCES/modprobe-link-user-keyring-before-loadkeys.patch
new file mode 100644
index 0000000..9cd6fd9
--- /dev/null
+++ b/SOURCES/modprobe-link-user-keyring-before-loadkeys.patch
@@ -0,0 +1,6 @@
+diff -up ndctl-67/contrib/nvdimm-security.conf.orig ndctl-67/contrib/nvdimm-security.conf
+--- ndctl-67/contrib/nvdimm-security.conf.orig 2019-11-01 13:21:04.669374133 -0400
++++ ndctl-67/contrib/nvdimm-security.conf 2019-11-01 13:21:04.669374133 -0400
+@@ -1 +1 @@
+-install libnvdimm /usr/bin/ndctl load-keys ; /sbin/modprobe --ignore-install libnvdimm $CMDLINE_OPTS
++install libnvdimm keyctl link @u @s; /usr/bin/ndctl load-keys; /sbin/modprobe --ignore-install libnvdimm $CMDLINE_OPTS
diff --git a/SPECS/ndctl.spec b/SPECS/ndctl.spec
index 1a90639..8850fa6 100644
--- a/SPECS/ndctl.spec
+++ b/SPECS/ndctl.spec
@@ -1,11 +1,12 @@
Name: ndctl
-Version: 65
-Release: 1%{?dist}
+Version: 67
+Release: 2%{?dist}
Summary: Manage "libnvdimm" subsystem devices (Non-volatile Memory)
License: GPLv2
Group: System Environment/Base
Url: https://github.com/pmem/ndctl
Source0: https://github.com/pmem/%{name}/archive/v%{version}.tar.gz#/%{name}-%{version}.tar.gz
+Patch0: modprobe-link-user-keyring-before-loadkeys.patch
Requires: ndctl-libs%{?_isa} = %{version}-%{release}
Requires: daxctl-libs%{?_isa} = %{version}-%{release}
@@ -88,6 +89,7 @@ control API for these devices.
%prep
%setup -q ndctl-%{version}
+%patch0 -p1
%build
echo %{version} > version
@@ -153,6 +155,18 @@ make check
%changelog
+* Fri Nov 1 2019 Jeff Moyer <jmoyer@redhat.com> - 67-2.el8
+- Fix up botched change to nvdimm-security.conf (Jeff Moyer)
+- Related: bz#1724531
+
+* Mon Oct 28 2019 Jeff Moyer <jmoyer@redhat.com> - 67-1.el8
+- Rebase to v67. This brings in the following features:
+ - support for the 'security frozen' sysfs attribute
+ - support for using pmem as system ram
+ - various cleanup and bug fixes
+- Fix load-keys failure in initramfs (Jeff Moyer)
+- Resolves: bz#1724531 bz#1730673 bz#1741164 bz#1741165 bz#1749888 bz#1749889
+
* Mon Jun 3 2019 Jeff Moyer <jmoyer@redhat.com> - 65-1.el8
- Rebase to v65.
- Resolves: bz#1665407 bz#1634349