<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="185">
<package pkgid="c52e28aa7b21d5274bb012c3814eed363c74ae0c16a6ba63faa62a858206a355" name="389-ds-base" arch="src">
  <version epoch="0" ver="2.5.2" rel="5.el9_5"/>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 2.4.5-4" date="1710417600">- Bump version to 2.4.5-4
- Resolves: RHEL-5130  - RFE Add PROXY protocol support to 389-ds-base via confiuration item - similar to Postfix</changelog>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 2.4.5-5" date="1710763200">- Bump version to 2.4.5-5
- Rebuild for exception phase</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 2.4.5-6" date="1712232000">- Bump version to 2.4.5-6
- Resolves: RHEL-30588 - [RFE] allows plugins to log multi-factor authentication notification</changelog>
  <changelog author="James Chapman &lt;jachapma@redhat.com&gt; - 2.5.1-1" date="1715083200">- Bump version to 2.5.1-1
- Resolves: RHEL-31777 - Rebase 389-ds-base.2.5.1 in RHEL 9.5
- Resolves: RHEL-33348 - redhat-ds:11/389-ds-base: potential denial of service via specially crafted kerberos AS-REQ requ</changelog>
  <changelog author="James Chapman &lt;jachapma@redhat.com&gt; - 2.5.1-2" date="1720526400">- Bump version to 2.5.1-2
- Resolves: RHEL-44324 - unauthenticated user can trigger a DoS by sending a specific extended search request
- Resolves: RHEL-40946 - Malformed userPassword hash may cause Denial of Service
- Resolves: RHEL-33087 - dsconf schema does not show inChain matching rule
- Resolves: RHEL-28177 - Malformed userPassword may cause crash at do_modify in slapd/modify.c
- Resolves: RHEL-25070 - nsslapd-haproxy-trusted-ip is not in schema</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 2.5.2-1" date="1723464000">- Bump version to 2.5.2-1
- Resolves: RHEL-5108 - ns-slapd crash in referint_get_config
- Resolves: RHEL-5113 - nsslapd-numlisteners limit is not enforced
- Resolves: RHEL-5115 - `dscreate ds-root` accepts relative path
- Resolves: RHEL-5131 - ldif2db can be very slow
- Resolves: RHEL-5138 - Logconv.pl CSV file contains mismatched header and data columns
- Resolves: RHEL-14760 - ns-slapd crash in vlvIndex_delete
- Resolves: RHEL-17511 - nsslapd-idletimeout is ignored
- Resolves: RHEL-49454 - perf search result investigation for many large static groups and members
- Resolves: RHEL-49458 - subsuffix are not returned in one level scoped search</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 2.5.2-2" date="1726488000">- Bump version to 2.5.2-2
- Resolves: RHEL-55744 - ipahealthcheck.ds.backends.BackendsCheck.DSBLE0006: BDB is deprecated and should not be used as a backend</changelog>
  <changelog author="James Chapman &lt;jachapma@redhat.com&gt; - 2.5.2-3" date="1733400000">- Bump version to 2.5.2-3
- Resolves: RHEL-65775 - Wrong set of entries returned for some search filters [rhel-9.5.z]
- Resolves: RHEL-66138 - deadlock during cleanAllRuv [rhel-9.5.z]
- Resolves: RHEL-67163 - cleanallruv consums CPU and is slow [rhel-9.5.z]
- Resolves: RHEL-70257 - Freelist ordering causes high wtime [rhel-9.5.z]</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 2.5.2-4" date="1733745600">- Resolves: RHEL-70257 - Freelist ordering causes high wtime [rhel-9.5.z]</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 2.5.2-5" date="1737720000">- Resolves: RHEL-74350 - Some nsslapd-haproxy-trusted-ip values are discarded upon a restart. [rhel-9.5.z]</changelog>
</package>
<package pkgid="f028c3c73fb2bf5b4b42b5fd4d50449fb720f3c81afc9e2a3952812514ea7415" name="NetworkManager" arch="src">
  <version epoch="1" ver="1.48.10" rel="3.el9_5"/>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1:1.47.91-1" date="1715860800">- Upgrade to 1.47.91 (rc2)</changelog>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1:1.48.0-1" date="1717070400">- Upgrade to 1.48.0 release</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; 1:1.48.2-1" date="1719230400">- Update to 1.48.2 release
- Save connection timestamps when shutting down (RHEL-35539)
- Fix regression with OpenVPN dynamic challenge (RHEL-43720)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; 1:1.48.2-2" date="1719489600">- Add ipcalc as dependency of NetworkManager-dispatcher-routing-rules (RHEL-36648)</changelog>
  <changelog author="Stanislas Faye &lt;sfaye@redhat.com&gt; 1:1.48.4-1" date="1720180800">- Update to 1.48.4 release
- Support matching a OVS system interface by MAC address (RHEL-34617)
- When looking up the system hostname from the reverse DNS lookup of
  addresses configured on interfaces, NetworkManager now takes into
  account the content of /etc/hosts (RHEL-33435)</changelog>
  <changelog author="Fernando Fernandez Mancera &lt;ferferna@redhat.com&gt; - 1:1.48.6-1" date="1721995200">- Wait until link is ready before activating for ovs-interface (RHEL-49796)
- Fix rollback on OVS checkpoint (RHEL-31972)
- Assert that the auto-activate list is empty on dispose (RHEL-44345)</changelog>
  <changelog author="Fernando Fernandez Mancera &lt;ferferna@redha.com&gt; - 1:1.46.8-1" date="1723204800">- Stop writing offensive terms into keyfiles (RHEL-52597)
- Remove offensive words (RHEL-33368)
- Fix cloned-mac-address race condition with DHCP on ovs-interfaces (RHEL-49796)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.48.10-1" date="1724328000">- Unblock the autoconnect for children when parent is available (RHEL-46904)
- Fix crash produced by malformed LLDP package when debug logging (RHEL-46199)
- Support reapplying bridge-port VLANs (RHEL-26750)
- Add small backoff time before resync (RHEL-29902)</changelog>
  <changelog author="Fernando Fernandez Mancera &lt;ferferna@redhat.com&gt; - 1:1.48.10-2" date="1725019200">- cloud-setup: Allow bigger restart bursts (RHEL-56740)
- cloud-setup: Fix Azure swap of primary and secondary IP addresses (RHEL-56387)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.48.10-3" date="1731412800">- Only validate the SR-IOV device capability when SR-IOV is enabled (RHEL-58397)
- Fix bug when deactivating port connections (RHEL-50747)
- Fix validation of ovs-dpdk interface name (RHEL-60022)</changelog>
</package>
<package pkgid="653ce11dd81981967edf58f5052fe6c74fead768d2e912a6a2b4787440f6cb93" name="NetworkManager" arch="src">
  <version epoch="1" ver="1.48.10" rel="5.el9_5"/>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; 1:1.48.2-1" date="1719230400">- Update to 1.48.2 release
- Save connection timestamps when shutting down (RHEL-35539)
- Fix regression with OpenVPN dynamic challenge (RHEL-43720)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; 1:1.48.2-2" date="1719489600">- Add ipcalc as dependency of NetworkManager-dispatcher-routing-rules (RHEL-36648)</changelog>
  <changelog author="Stanislas Faye &lt;sfaye@redhat.com&gt; 1:1.48.4-1" date="1720180800">- Update to 1.48.4 release
- Support matching a OVS system interface by MAC address (RHEL-34617)
- When looking up the system hostname from the reverse DNS lookup of
  addresses configured on interfaces, NetworkManager now takes into
  account the content of /etc/hosts (RHEL-33435)</changelog>
  <changelog author="Fernando Fernandez Mancera &lt;ferferna@redhat.com&gt; - 1:1.48.6-1" date="1721995200">- Wait until link is ready before activating for ovs-interface (RHEL-49796)
- Fix rollback on OVS checkpoint (RHEL-31972)
- Assert that the auto-activate list is empty on dispose (RHEL-44345)</changelog>
  <changelog author="Fernando Fernandez Mancera &lt;ferferna@redha.com&gt; - 1:1.46.8-1" date="1723204800">- Stop writing offensive terms into keyfiles (RHEL-52597)
- Remove offensive words (RHEL-33368)
- Fix cloned-mac-address race condition with DHCP on ovs-interfaces (RHEL-49796)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.48.10-1" date="1724328000">- Unblock the autoconnect for children when parent is available (RHEL-46904)
- Fix crash produced by malformed LLDP package when debug logging (RHEL-46199)
- Support reapplying bridge-port VLANs (RHEL-26750)
- Add small backoff time before resync (RHEL-29902)</changelog>
  <changelog author="Fernando Fernandez Mancera &lt;ferferna@redhat.com&gt; - 1:1.48.10-2" date="1725019200">- cloud-setup: Allow bigger restart bursts (RHEL-56740)
- cloud-setup: Fix Azure swap of primary and secondary IP addresses (RHEL-56387)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.48.10-3" date="1731412800">- Only validate the SR-IOV device capability when SR-IOV is enabled (RHEL-58397)
- Fix bug when deactivating port connections (RHEL-50747)
- Fix validation of ovs-dpdk interface name (RHEL-60022)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.48.10-4" date="1736337600">- Remove routes added by NetworkManager when doing reapply, also those not in main table (RHEL-73013)</changelog>
  <changelog author="Wen Liang &lt;wenliang@redhat.com&gt; - 1:1.48.10-5" date="1736424000">- vpn: Support routing rules in vpn conenctions (RHEL-73167)
- vpn: Place gateway route to table defined in ipvx.route-table (RHEL-73166)</changelog>
</package>
<package pkgid="20bfe58f2b37bcb858c4bd05649ecb64f683aa2f71bf819a2ff5a0ff54f2900d" name="NetworkManager-libreswan" arch="src">
  <version epoch="0" ver="1.2.22" rel="4.el9_5"/>
  <changelog author="Fernando Fernandez Mancera &lt;ferferna@redhat.com&gt; - 1.2.18-1" date="1702641600">- Update to 1.2.18 release</changelog>
  <changelog author="Fernando Fernandez Mancera &lt;ferferna@redhat.com&gt; - 1.2.18-2" date="1705492800">- Support point-to-point IPSec tunnel (RHEL-20690)
- Fix crash in libreswan_nmstate_iface_dpd_rsa (RHEL-21221)
- Support configuring IPSec mode with 'type' (RHEL-21554)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1.2.20-1" date="1713355200">- Support "leftsubnet" property (RHEL-26776)
- Support "rightcert" property (RHEL-30370)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1.2.22-1" date="1716379200">- Add IPv6 support (RHEL-21875)</changelog>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1.2.22-2" date="1727265600">- Fix improper escaping of Libreswan configuration (CVE-2024-9050)</changelog>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1.2.22-4" date="1727956800">- Unbreak validation of unknown keys</changelog>
</package>
<package pkgid="9c45cb94b599aca31f316ce32b4864fca8560733831f5fe97144fa6467ea9cdb" name="aardvark-dns" arch="src">
  <version epoch="2" ver="1.12.2" rel="1.el9_5"/>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.5.0-2" date="1675425600">- build always offline
- Related: #2124478</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.6.0-1" date="1681300800">- update to https://github.com/containers/aardvark-dns/releases/tag/v1.6.0
- Related: #2176063</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.7.0-1" date="1688731200">- update to https://github.com/containers/aardvark-dns/releases/tag/v1.7.0
- Related: #2176063</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.8.0-1" date="1695988800">- update to https://github.com/containers/aardvark-dns/releases/tag/v1.8.0
- Related: Jira:RHEL-2112</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.9.0-1" date="1701864000">- update to https://github.com/containers/aardvark-dns/releases/tag/v1.9.0
- Related: Jira:RHEL-2112</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.10.0-1" date="1706097600">- update to https://github.com/containers/aardvark-dns/releases/tag/v1.10.0
- Related: RHEL-2112</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.10.0-2" date="1712577600">- rebuild for gating tests
- Related: RHEL-31950</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.11.0-1" date="1717416000">- update to https://github.com/containers/aardvark-dns/releases/tag/v1.11.0
- Related: RHEL-27608</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.12.1-1" date="1722859200">- update to https://github.com/containers/aardvark-dns/releases/tag/v1.12.1
- Related: RHEL-27608</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.12.2-1" date="1725451200">- update to https://github.com/containers/aardvark-dns/releases/tag/v1.12.2
- Related: RHEL-27608</changelog>
</package>
<package pkgid="99daafb90c2bb27a2d8b75b20d499ba360a0050660eb8cb60cbb3e3df3f8a6b9" name="alsa-sof-firmware" arch="src">
  <version epoch="0" ver="2024.09" rel="1.el9_5"/>
  <changelog author="Jaroslav Kysela &lt;perex@perex.cz&gt; - 2.2.3-1" date="1670414400">- Update to v2.2.3</changelog>
  <changelog author="Jaroslav Kysela &lt;perex@perex.cz&gt; - 2.2.4-1" date="1673265600">- Update to v2.2.4</changelog>
  <changelog author="Jaroslav Kysela &lt;perex@perex.cz&gt; - 2.2.5-1" date="1684152000">- Update to v2.2.5</changelog>
  <changelog author="Jaroslav Kysela &lt;perex@perex.cz&gt; - 2.2.5-2" date="1686830400">- add sof-rpl-rt711-l0-rt1316-l12-rt714-l3.tplg for Dell SKU 0BDA
- add xz compression support (with CRC32)</changelog>
  <changelog author="Jaroslav Kysela &lt;perex@perex.cz&gt; - 2023.09.2-1" date="1700136000">- Update to v2023.09.2
- SPDX license</changelog>
  <changelog author="Jaroslav Kysela &lt;perex@perex.cz&gt; - 2023.12-1" date="1703073600">- Update to v2023.12</changelog>
  <changelog author="Jaroslav Kysela &lt;jkysela@redhat.com&gt; - 2024.03-5" date="1718625600">- Update to v2024.03
- Add AVS topology files v2024.02</changelog>
  <changelog author="Jaroslav Kysela &lt;perex@perex.cz&gt; - 2024.09-1" date="1728907200">- Update to v2024.09</changelog>
</package>
<package pkgid="5e92cc34942eca4453767232e2d5c2ed7eec2f4f1838c5c32b895d7ed73b2ef0" name="apache-commons-io" arch="src">
  <version epoch="1" ver="2.8.0" rel="10.el9_5"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:2.8.0-8" date="1675080000">- Rebuild to regenerate auto-requires</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 1:2.8.0-9" date="1732104000">- Rebuild with regenerated Requires on Java</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 1:2.8.0-10" date="1732190400">- Fix patch usage</changelog>
</package>
<package pkgid="88ff6add9b2c368a1b6f5985d83d489bb8adb2a3ebb2df7f90b8382b449ab409" name="apache-commons-lang3" arch="src">
  <version epoch="0" ver="3.12.0" rel="8.el9_5"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.12.0-6" date="1675080000">- Rebuild to regenerate auto-requires</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 3.12.0-7" date="1732104000">- Rebuild with regenerated Requires on Java</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 3.12.0-8" date="1732190400">- Fix patch usage</changelog>
</package>
<package pkgid="95ea609b3dd81fa633bd2956669caf7d0ca97b193c5ae2dff27f7f867a7b264d" name="apache-commons-logging" arch="src">
  <version epoch="0" ver="1.2" rel="31.el9_5"/>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 1.2-30" date="1731931200">- Rebuild with regenerated Requires on Java</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 1.2-31" date="1732017600">- Rebuild with regenerated Requires on Java</changelog>
</package>
<package pkgid="8efc5633ce7a56e70b36dd2f6356b8b6ce118d1c2c3f162e50b567c4a5cd130a" name="bcc" arch="src">
  <version epoch="0" ver="0.30.0" rel="7.el9_5"/>
  <changelog author="Jerome Marchand &lt;jmarchan@redhat.com&gt; - 0.28.0-3" date="1700568000">- Rebuild with LLVM 17 (RHEL-10591)</changelog>
  <changelog author="Jerome Marchand &lt;jmarchan@redhat.com&gt; - 0.28.0-4" date="1700568001">- Rebuild with LLVM 17 in the side tag (RHEL-10591)</changelog>
  <changelog author="Jerome Marchand &lt;jmarchan@redhat.com&gt; - 0.28.0-5" date="1702468800">- Fix libbpf bio tools (RHEL-19368)
- Add S390x support to libbpf-tools (RHEL-16325)
- Power enhancements(RHEL-11477)</changelog>
  <changelog author="Jerome Marchand &lt;jmarchan@redhat.com&gt; - 0.30.0-1" date="1712750400">- Rebase bcc to 0.30.0 (RHEL-29031)
- Exclude bpf-numamove on s390x (RHEL-32327)</changelog>
  <changelog author="Jerome Marchand &lt;jmarchan@redhat.com&gt; - 0.30.0-2" date="1714737600">- Rebuild (distrobaker didn't take last build)</changelog>
  <changelog author="Jerome Marchand &lt;jmarchan@redhat.com&gt; - 0.30.0-3" date="1716206400">- Really prevent the loading of compromised headers (RHEL-28769, CVE-2024-2314)
- Add python3-pyelftools dependency (RHEL-36583)</changelog>
  <changelog author="Jerome Marchand &lt;jmarchan@redhat.com&gt; - 0.30.0-4" date="1716292800">- Exclude btrfs and f2fs libbpf tools (RHEL-36579)</changelog>
  <changelog author="Jerome Marchand &lt;jmarchan@redhat.com&gt; - 0.30.0-5" date="1717156800">- Drop python3-pyelftools dependency on s390x until it is available</changelog>
  <changelog author="Jerome Marchand &lt;jmarchan@redhat.com&gt; - 0.30.0-6" date="1720094400">- Rebuild with LLVM 18 (RHEL-28684)</changelog>
  <changelog author="Jerome Marchand &lt;jmarchan@redhat.com&gt; - 0.30.0-7" date="1730980800">- Fic bio* tools (RHEL-65192)</changelog>
</package>
<package pkgid="ce1a55e02abade863512244e6851724d652248c9e220c3c7d5a79f5b69a4a3d8" name="bootc" arch="src">
  <version epoch="0" ver="1.1.0" rel="1.el9_5"/>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; - 0.1.9-2" date="1711540800">- https://github.com/containers/bootc/releases/tag/v0.1.9
  Resolves: #RHEL-30466</changelog>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; - 0.1.9-3" date="1711627200">- Backport rollback
  Related: #RHEL-30466</changelog>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; - 0.1.9-4" date="1712577600">- Correct JIRA link
  Resolves: #RHEL-30878</changelog>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; - 0.1.10-2" date="1714132800">- Release 0.1.10</changelog>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; - 0.1.11-2" date="1715774400">- Update to 0.1.11</changelog>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; - 0.1.12-3" date="1719316800">- Update to 0.1.12</changelog>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; - 0.1.13-2" date="1719576000">- Update to 0.1.13</changelog>
  <changelog author="Joseph Marrero &lt;jmarrero@fedoraproject.org&gt; - 0.1.14-1" date="1721908800">- Update to 0.1.14
  Resolves: #RHEL-50625, #RHEL-45325, #RHEL-36003</changelog>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; - 0.1.15-1" date="1723809600">- Update to 0.1.15
  Resolves: #RHEL-50625</changelog>
  <changelog author="Joseph Marrero &lt;jmarrero@fedoraproject.org&gt; - 1.1.0-1" date="1729166400">- Update to 1.1.0
  Resolves: #RHEL-62891</changelog>
</package>
<package pkgid="17e5136b9ce4478dbc09392eb359c2b1be2cc0dae4e82532604c2ddf6a084ef0" name="bootc" arch="src">
  <version epoch="0" ver="1.1.2" rel="1.el9_5"/>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; - 0.1.9-3" date="1711627200">- Backport rollback
  Related: #RHEL-30466</changelog>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; - 0.1.9-4" date="1712577600">- Correct JIRA link
  Resolves: #RHEL-30878</changelog>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; - 0.1.10-2" date="1714132800">- Release 0.1.10</changelog>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; - 0.1.11-2" date="1715774400">- Update to 0.1.11</changelog>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; - 0.1.12-3" date="1719316800">- Update to 0.1.12</changelog>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; - 0.1.13-2" date="1719576000">- Update to 0.1.13</changelog>
  <changelog author="Joseph Marrero &lt;jmarrero@fedoraproject.org&gt; - 0.1.14-1" date="1721908800">- Update to 0.1.14
  Resolves: #RHEL-50625, #RHEL-45325, #RHEL-36003</changelog>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; - 0.1.15-1" date="1723809600">- Update to 0.1.15
  Resolves: #RHEL-50625</changelog>
  <changelog author="Joseph Marrero &lt;jmarrero@fedoraproject.org&gt; - 1.1.0-1" date="1729166400">- Update to 1.1.0
  Resolves: #RHEL-62891</changelog>
  <changelog author="Joseph Marrero &lt;jmarrero@fedoraproject.org&gt; - 1.1.2-1" date="1731499200">- Update to 1.1.2
  Resolves: #RHEL-66610</changelog>
</package>
<package pkgid="496082205821ec150a00e1397bdee655e84bc105a4f15376c247ce6aa6572bc4" name="brotli" arch="src">
  <version epoch="0" ver="1.0.9" rel="7.el9_5"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1.0.9-7" date="1726056000">- Check BitMask(n) n value for kBrotliBitMask[n] bounds</changelog>
</package>
<package pkgid="7bcec8ce0a28440c0335b5feb3ac213571f15927f65d6b1407daac98665f114e" name="bsf" arch="src">
  <version epoch="0" ver="2.4.0" rel="45.el9_5"/>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 2.4.0-44" date="1732017600">- Rebuild with regenerated Requires on Java</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 2.4.0-45" date="1732190400">- Fix patch usage</changelog>
</package>
<package pkgid="62d7c6b5fd4d27fe6dddd2a83cae7afc18e0d7b39ada34c3e3d446943b93b3fe" name="bubblewrap" arch="src">
  <version epoch="0" ver="0.4.1" rel="8.el9_5"/>
  <changelog author="Daan De Meyer &lt;daan.j.demeyer@gmail.com&gt; - 0.4.1-7" date="1710504000">- Backport https://github.com/containers/bubblewrap/commit/4c35d7a5f92499d6ed646d4a5ffad9acc10cb432</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.4.1-8" date="1725019200">- Backport upstream fix to help address CVE-2024-42472 in flatpak</changelog>
</package>
<package pkgid="a21c2506629d33c7a8d54d84fdab0f68047831cac73d3dc25ea4b5016a456a33" name="buildah" arch="src">
  <version epoch="2" ver="1.37.5" rel="1.el9_5"/>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.35.1-1" date="1710849600">- update to https://github.com/containers/buildah/releases/tag/v1.35.1
- Related: RHEL-27608</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.35.2-1" date="1711540800">- update to https://github.com/containers/buildah/releases/tag/v1.35.2
- Related: RHEL-27608</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.36.0-1" date="1716984000">- update to https://github.com/containers/buildah/releases/tag/v1.36.0
- Related: RHEL-27608</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.37.0-1" date="1722254400">- update to https://github.com/containers/buildah/releases/tag/v1.37.0
- Resolves: RHEL-47164 RHEL-40808</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.37.1-1" date="1723723200">- update to https://github.com/containers/buildah/releases/tag/v1.37.1
- Related: RHEL-27608</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.37.2-1" date="1724241600">- update to https://github.com/containers/buildah/releases/tag/v1.37.2
- Related: RHEL-27608</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.37.2-2" date="1728302400">- rebuild to fix  CVE-2024-34156
- Resolves: RHEL-57912</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.37.4-1" date="1728648000">- update to https://github.com/containers/buildah/releases/tag/v1.37.4
- Resolves: RHEL-61114</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.37.4-2" date="1728907200">- enable CNI
- Resolves: RHEL-62107</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.37.5-1" date="1729512000">- update to https://github.com/containers/buildah/releases/tag/v1.37.5
- Resolves: RHEL-61857</changelog>
</package>
<package pkgid="0fa4dcee2898237d756a83f4b89e9d1e2cecc206d74c4854f0a2144fd9cf8e7c" name="buildah" arch="src">
  <version epoch="2" ver="1.37.6" rel="1.el9_5"/>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.35.2-1" date="1711540800">- update to https://github.com/containers/buildah/releases/tag/v1.35.2
- Related: RHEL-27608</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.36.0-1" date="1716984000">- update to https://github.com/containers/buildah/releases/tag/v1.36.0
- Related: RHEL-27608</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.37.0-1" date="1722254400">- update to https://github.com/containers/buildah/releases/tag/v1.37.0
- Resolves: RHEL-47164 RHEL-40808</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.37.1-1" date="1723723200">- update to https://github.com/containers/buildah/releases/tag/v1.37.1
- Related: RHEL-27608</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.37.2-1" date="1724241600">- update to https://github.com/containers/buildah/releases/tag/v1.37.2
- Related: RHEL-27608</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.37.2-2" date="1728302400">- rebuild to fix  CVE-2024-34156
- Resolves: RHEL-57912</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.37.4-1" date="1728648000">- update to https://github.com/containers/buildah/releases/tag/v1.37.4
- Resolves: RHEL-61114</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.37.4-2" date="1728907200">- enable CNI
- Resolves: RHEL-62107</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.37.5-1" date="1729512000">- update to https://github.com/containers/buildah/releases/tag/v1.37.5
- Resolves: RHEL-61857</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.37.6-1" date="1737633600">- update to the latest content of https://github.com/containers/buildah/tree/release-1.37
  (https://github.com/containers/buildah/commit/fd39521)
- Resolves: RHEL-67617</changelog>
</package>
<package pkgid="1b7cb93a5dbe8f3c39bf5926d3da75b7bcb076ef263e74c73b0cbf374892f956" name="bzip2" arch="src">
  <version epoch="0" ver="1.0.8" rel="10.el9_5"/>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 1.0.8-9" date="1728043200">- Fix out of bounds access in BZ2_decompress
Resolves: RHEL-65198</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 1.0.8-10" date="1734609600">- Revert the previous commit (introduced a regression)
Resolves: CVE-2019-12900</changelog>
</package>
<package pkgid="4e926e695121d50403f64fef1e0a36f479a5ca607c875ba141e811748ae4e4c7" name="conntrack-tools" arch="src">
  <version epoch="0" ver="1.4.7" rel="4.el9_5"/>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.4.5-17" date="1669723200">- conntrackd: set default hashtable buckets and max entries if not specified</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.4.7-1" date="1669896000">- config: Fix -Wimplicit-function-declaration
- network: Fix -Wstrict-prototypes
- build: don't suppress various warnings
- build: conntrack-tools requires libnetfilter_conntrack &gt;= 1.0.9
- New version 1.4.7</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.4.7-2" date="1671019200">- Explicitly depend on libnetfilter_conntrack-1.0.9</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.4.7-3" date="1718884800">- conntrack: Fix potential array out of bounds access</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.4.7-4" date="1731585600">- Bump release for RHEL9.5</changelog>
</package>
<package pkgid="9c8434a09a7c59b6eb8fde9a395e947eaee18aef8f9f34b787959b51eb79785a" name="containernetworking-plugins" arch="src">
  <version epoch="1" ver="1.5.1" rel="3.el9_5"/>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1:1.3.0-2" date="1686657600">- rebuild for following CVEs:
CVE-2022-41724 CVE-2022-41725 CVE-2023-24538 CVE-2023-24534 CVE-2023-24536 CVE-2022-41723 CVE-2023-24539 CVE-2023-24540 CVE-2023-29400
- Resolves: #2179960
- Resolves: #2187333
- Resolves: #2187376
- Resolves: #2203705
- Resolves: #2207519</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1:1.3.0-3" date="1688817600">- remove no_openssl for FIPS compliance
- Related: #2176063</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1:1.3.0-4" date="1691755200">- add Epoch in Provides
- Related: #2176063</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1:1.3.0-5" date="1694692800">- fix path to dhcp service
- Resolves: #RHEL-3140</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1:1.4.0-1" date="1704196800">- update to https://github.com/containernetworking/plugins/releases/tag/v1.4.0
- Related: RHEL-2112</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1:1.4.1-1" date="1710244800">- update to https://github.com/containernetworking/plugins/releases/tag/v1.4.1
- Resolves: RHEL-28855</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1:1.5.0-1" date="1716984000">- update to https://github.com/containernetworking/plugins/releases/tag/v1.5.0
- Related: RHEL-27608</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1:1.5.1-1" date="1719921600">- update to https://github.com/containernetworking/plugins/releases/tag/v1.5.1
- Related: RHEL-27608</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1:1.5.1-2" date="1724155200">- rebuild for CVE-2024-24791
- Resolves: RHEL-47166</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1:1.5.1-3" date="1728302400">- rebuild to fix  CVE-2024-34156
- Resolves: RHEL-57917</changelog>
</package>
<package pkgid="7c174010167eb1d57024976075d10fd02eb5bbd7c7d48e56f09a935073e91cd8" name="containers-common" arch="src">
  <version epoch="2" ver="1" rel="93.el9_5"/>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1-57" date="1694606400">- update GPG keys to the current content of redhat-release
- Resolves: #RHEL-3164</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1-58" date="1694692800">- implement GPG auto updating mechanism from redhat-release
- Resolves: #RHEL-3164</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1-59" date="1697025600">- fix shortnames
- Related: Jira:RHEL-2112</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1-60" date="1704196800">- Update vendored components
- Related: Jira:RHEL-2112</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1-61" date="1707393600">- update vendored components
- Related: Jira:RHEL-2112</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1-62" date="1707912000">- regenerate shortnames from Pyxis and update vendored components
- Related: Jira:RHEL-2112</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1-90" date="1712318400">- Bump release to way higher than rhel 8.10 to preserve upgrade path
- Related: Jira:RHEL-31950</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1-91" date="1723032000">- Update shortnames and vendored components
- Related: RHEL-27608</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1-92" date="1724760000">- update vendored components
- Related: RHEL-27608</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1-93" date="1729166400">- rebuild
- Resolves: RHEL-62937</changelog>
</package>
<package pkgid="b2143eb1c129b5bfa1acd812c834ef2013456776c4660885deb92ea73aca87bb" name="containers-common" arch="src">
  <version epoch="2" ver="1" rel="96.el9_5"/>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1-60" date="1704196800">- Update vendored components
- Related: Jira:RHEL-2112</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1-61" date="1707393600">- update vendored components
- Related: Jira:RHEL-2112</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1-62" date="1707912000">- regenerate shortnames from Pyxis and update vendored components
- Related: Jira:RHEL-2112</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1-90" date="1712318400">- Bump release to way higher than rhel 8.10 to preserve upgrade path
- Related: Jira:RHEL-31950</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1-91" date="1723032000">- Update shortnames and vendored components
- Related: RHEL-27608</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1-92" date="1724760000">- update vendored components
- Related: RHEL-27608</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1-93" date="1729166400">- rebuild
- Resolves: RHEL-62937</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1-94" date="1730116800">- enable_partial_images should be set to false
- Resolves: RHEL-62937</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1-95" date="1730289600">- update vendored components and configuration files
- Resolves: RHEL-62566</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1-96" date="1731585600">- Be sure to enable_partial_images = false in storage.conf
- Resolves: RHEL-65057</changelog>
</package>
<package pkgid="98e3283e96b930da77b7f1b7b7cfc8c88e0545550acf8eca268aaecb84436dc5" name="cronie" arch="src">
  <version epoch="0" ver="1.5.7" rel="12.el9_5"/>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 1.5.7-9" date="1699617600">- Add support for `-n` option in crontab entries
- Resolves: RHEL-5372</changelog>
  <changelog author="Jan Hou&#x161;ka &lt;jhouska@redhat.com&gt; - 1.5.7-10" date="1700136000">- Related: RHEL-5372
- remove obsolete tests.
- Correct gating.yaml for CI.</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 1.5.7-11" date="1701345600">- Add `optimization_to_close_fds.patch`
- Resolves: RHEL-17710</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 1.5.7-12" date="1727352000">- Add `increase_max_crontabs.patch`
- Resolves: RHEL-60278</changelog>
</package>
<package pkgid="c8eac1fd0bc57c6c089585856ecb42e4bafbb94a3784c9a419a19d6d2aaf23ab" name="cups" arch="src">
  <version epoch="1" ver="2.3.3op2" rel="31.el9_5"/>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-22" date="1698926400">- RHEL-14931 cupsd memory leak in cupsdDeleteJob() with "PreserveJobHistory Off"
- RHEL-15308 cupsd fails to open cups-files.conf and the resulting error message is lost</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-23" date="1703073600">- RHEL-19205 Recommend new cups-filters subpackages with weak dep for better upgrade exp
- RHEL-19495 cupsGetJobs fails to connect if poll() gets POLLOUT|POLLHUP in revents</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-24" date="1708948800">- revert RHEL-19205 - new packages are not needed</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-25" date="1712318400">- RHEL-29764 cups doesn't send Content-Type header back to client when Set-Cookie is seen first</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-26" date="1713182400">- RHEL-32727 lpoptions with root writes to ~/.cups/lpoptions</changelog>
  <changelog author="Pavol Zacik &lt;pzacik@redhat.com&gt; - 1:2.3.3op2-27" date="1718020800">- CVE-2024-35235 cups: Cupsd Listen arbitrary chmod 0140777</changelog>
  <changelog author="Pavol Zacik &lt;pzacik@redhat.com&gt; - 1:2.3.3op2-28" date="1718712000">- RHEL-39940 cups: Cupsd Listen arbitrary chmod 0140777
- Delete the domain socket file after stopping the cups.socket service
- Fix cupsd Listener checks</changelog>
  <changelog author="Pavol Zacik &lt;pzacik@redhat.com&gt; - 1:2.3.3op2-29" date="1718798400">- Revert the cups-libs license identifier to the "legacy" format</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-30" date="1723723200">- RHEL-6526 cups source rpm doesn't actually build lspp support
- fix memory leaks from LSPP</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-31" date="1727784000">- RHEL-60343 CVE-2024-47175 cups: remote command injection via attacker controlled data in PPD file</changelog>
</package>
<package pkgid="0ed84f5daed9d76b902e411e3ef2649588f39263598ba40aa109e268cd48dcbf" name="dotnet6.0" arch="src">
  <version epoch="0" ver="6.0.136" rel="1.el9_5"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 6.0.125-2" date="1702296000">- Update to .NET SDK 6.0.125 and Runtime 6.0.25
- Resolves: RHEL-15349</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 6.0.126-2" date="1705320000">- Update to .NET SDK 6.0.126 and Runtime 6.0.26
- Resolves: RHEL-19801</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 6.0.127-2" date="1707912000">- Update to .NET SDK 6.0.127 and Runtime 6.0.27
- Resolves: RHEL-23785</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 6.0.128-2" date="1710849600">- Update to .NET SDK 6.0.128 and Runtime 6.0.28
- Resolves: RHEL-27541</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 6.0.129-2" date="1712664000">- Update to .NET SDK 6.0.129 and Runtime 6.0.29
- Resolves: RHEL-31198</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 6.0.130-2" date="1715774400">- Update to .NET SDK 6.0.130 and Runtime 6.0.30
- Resolves: RHEL-35308</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 6.0.132-2" date="1720526400">- Update to .NET SDK 6.0.132 and Runtime 6.0.32
- Resolves: RHEL-45320</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 6.0.133-2" date="1723636800">- Update to .NET SDK 6.0.133 and Runtime 6.0.33
- Resolves: RHEL-52385</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 6.0.135-2" date="1728993600">- Update to .NET SDK 6.0.135 and Runtime 6.0.35
- Resolves: RHEL-60799</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 6.0.136-1" date="1730376000">- Update to .NET SDK 6.0.136 and Runtime 6.0.36
- Resolves: RHEL-65365</changelog>
</package>
<package pkgid="7d47d3533654b5a6113cb91d83d0bada5f82c8ef46da0024338dab6f293490a2" name="dotnet8.0" arch="src">
  <version epoch="0" ver="8.0.111" rel="1.el9_5"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.103-2" date="1710849600">- Update to .NET SDK 8.0.103 and Runtime 8.0.3
- Resolves: RHEL-27553</changelog>
  <changelog author="Tom Deseyn &lt;tom.deseyn@gmail.com&gt; - 8.0.103-3" date="1711886400">- We disable checking the signature of the last certificate in a chain if the certificate is supposedly self-signed.
  A side effect of not checking the self-signature of such a certificate is that disabled or unsupported message
  digests used for the signature are not treated as fatal errors.
- Resolves: RHEL-28344</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.104-2" date="1712664000">- Update to .NET SDK 8.0.104 and Runtime 8.0.4
- Resolves: RHEL-31208</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.105-2" date="1715774400">- Update to .NET SDK 8.0.105 and Runtime 8.0.5
- Resolves: RHEL-35315</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.107-2" date="1720526400">- Update to .NET SDK 8.0.107 and Runtime 8.0.7
- Resolves: RHEL-45323</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.107-3" date="1720612800">- Fix ownership of some missed directories
- Resolves: RHEL-47079</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.108-2" date="1723636800">- Update to .NET SDK 8.0.108 and Runtime 8.0.8
- Resolves: RHEL-52387</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.110-2" date="1728993600">- Update to .NET SDK 8.0.110 and Runtime 8.0.10
- Resolves: RHEL-60801</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.110-3" date="1729252800">- Disable packages provided by another .NET version
- Related: RHEL-60801</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.111-1" date="1730376000">- Update to .NET SDK 8.0.111 and Runtime 8.0.11
- Resolves: RHEL-65369</changelog>
</package>
<package pkgid="1a508660dfd50dbc8da16e5f45a6c7c88d7069a8049a71f09c8283d872236720" name="dotnet8.0" arch="src">
  <version epoch="0" ver="8.0.112" rel="1.el9_5"/>
  <changelog author="Tom Deseyn &lt;tom.deseyn@gmail.com&gt; - 8.0.103-3" date="1711886400">- We disable checking the signature of the last certificate in a chain if the certificate is supposedly self-signed.
  A side effect of not checking the self-signature of such a certificate is that disabled or unsupported message
  digests used for the signature are not treated as fatal errors.
- Resolves: RHEL-28344</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.104-2" date="1712664000">- Update to .NET SDK 8.0.104 and Runtime 8.0.4
- Resolves: RHEL-31208</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.105-2" date="1715774400">- Update to .NET SDK 8.0.105 and Runtime 8.0.5
- Resolves: RHEL-35315</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.107-2" date="1720526400">- Update to .NET SDK 8.0.107 and Runtime 8.0.7
- Resolves: RHEL-45323</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.107-3" date="1720612800">- Fix ownership of some missed directories
- Resolves: RHEL-47079</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.108-2" date="1723636800">- Update to .NET SDK 8.0.108 and Runtime 8.0.8
- Resolves: RHEL-52387</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.110-2" date="1728993600">- Update to .NET SDK 8.0.110 and Runtime 8.0.10
- Resolves: RHEL-60801</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.110-3" date="1729252800">- Disable packages provided by another .NET version
- Related: RHEL-60801</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.111-1" date="1730376000">- Update to .NET SDK 8.0.111 and Runtime 8.0.11
- Resolves: RHEL-65369</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.112-1" date="1734436800">- Update to .NET SDK 8.0.112 and Runtime 8.0.12
- Resolves: RHEL-71556</changelog>
</package>
<package pkgid="5d394ded1c1f540f2c50d9613c6bdc57967d5b69a1faf1133be625667e83dcf9" name="dpdk" arch="src">
  <version epoch="2" ver="23.11" rel="2.el9_5"/>
  <changelog author="Timothy Redaelli &lt;tredaelli@redhat.com&gt; - 22.11-1" date="1674475200">- Rebase to 22.11 (#2129066)</changelog>
  <changelog author="Maxime Coquelin &lt;maxime.coquelin@redhat.com&gt; - 22.11-2" date="1677844800">- Add ACC100/ACC200 and related test-bbdev application (#2106526, #2138398)</changelog>
  <changelog author="Timothy Redaelli &lt;tredaelli@redhat.com&gt; - 22.11-3" date="1679572800">- Add support to load compressed firmware (#2179024)</changelog>
  <changelog author="David Marchand &lt;david.marchand@redhat.com&gt; - 22.11-4" date="1681214400">- Fix MTU regression for net/i40e (#2182799)</changelog>
  <changelog author="David Marchand &lt;david.marchand@redhat.com&gt; - 23.11-1" date="1702641600">- Rebase to 23.11 (RHEL-19571)</changelog>
  <changelog author="Kevin Traynor &lt;ktraynor@redhat.com&gt; - 23.11-2" date="1734436800">- Backport fixes for CVE-2024-11614 (RHEL-68601)</changelog>
</package>
<package pkgid="f5fc8d019ae1e2b3af4908d0c5ab72e084e77ed11e1a6dba999c729962c029d7" name="edk2" arch="src">
  <version epoch="0" ver="20240524" rel="6.el9_5.3"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20240214-2" date="1712577600">- edk2-OvmfPkg-PlatformPei-log-a-warning-when-memory-is-tig.patch [RHEL-22202]
- edk2-OvmfPkg-PlatformPei-consider-AP-stacks-for-pei-memor.patch [RHEL-22202]
- edk2-OvmfPkg-PlatformPei-rewrite-page-table-calculation.patch [RHEL-22202]
- edk2-OvmfPkg-PlatformPei-log-pei-memory-cap-details.patch [RHEL-22202]
- edk2-UefiCpuPkg-MpInitLib-Add-support-for-multiple-HOBs-t.patch [RHEL-22202]
- edk2-UefiCpuPkg-MpInitLib-Add-support-for-multiple-HOBs-t.p2.patch [RHEL-22202]
- edk2-UefiCpuPkg-MpInitLib-Add-support-for-multiple-HOBs-t.p3.patch [RHEL-22202]
- edk2-UefiCpuPkg-MpInitLib-Add-support-for-multiple-HOBs-t.p4.patch [RHEL-22202]
- edk2-UefiCpuPkg-MpInitLib-Add-support-for-multiple-HOBs-t.p5.patch [RHEL-22202]
- edk2-UefiCpuPkg-MpInitLib-return-early-in-GetBspNumber.patch [RHEL-22202]
- Resolves: RHEL-22202
  ([EDK2] Support booting with 4096 vcpus)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20240524-1" date="1718884800">- Rebase to edk2-stable202405
- Bumo openssl to 8e5beb77088b
- Resolves: RHEL-32486
  (rebase to edk2-stable202405 [rhel-9])
- Resolves: RHEL-36446
  (edk2: enable MOR [rhel-9])
- Resolves: RHEL-21653
  (CVE-2023-6237 edk2: openssl: Excessive time spent checking invalid RSA public keys [rhel-9])
- Resolves: RHEL-21150
  (CVE-2023-6129 edk2: mysql: openssl: POLY1305 MAC implementation corrupts vector registers on PowerPC)
- Resolves: RHEL-22490
  (CVE-2024-0727 edk2: openssl: denial of service via null dereference [rhel-9])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20240524-2" date="1721908800">- edk2-MdeModulePkg-Warn-if-out-of-flash-space-when-writing.patch [RHEL-43442]
- Resolves: RHEL-43442
  (edk2 disconnects abnormally before loading the kernel)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20240524-3" date="1724155200">- edk2-NetworkPkg-DxeNetLib-adjust-PseudoRandom-error-loggi.patch [RHEL-45899]
- edk2-NetworkPkg-DxeNetLib-Reword-PseudoRandom-error-loggi.patch [RHEL-45899]
- Resolves: RHEL-45899
  ([RHEL-9.5.0] edk2 hit Failed to generate random data)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20240524-4" date="1725278400">- edk2-AmdSevDxe-Fix-the-shim-fallback-reboot-workaround-fo.patch [RHEL-56081]
- Resolves: RHEL-56081
  ([EDK2] Shim fallback reboot workaround might not work on SNP)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20240524-5" date="1725883200">- edk2-UefiCpuPkg-PiSmmCpuDxeSmm-skip-PatchInstructionX86-c.patch [RHEL-45847]
- Resolves: RHEL-45847
  ([RHEL9.5] Hotplug vcpu to a guest cause guest kernel panic)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20240524-6" date="1726228800">- edk2-OvmfPkg-CpuHotplugSmm-delay-SMM-exit.patch [RHEL-56974]
- edk2-Bumped-openssl-submodule-version-to-0205b5898872.patch [RHEL-55336]
- Resolves: RHEL-56974
  (qemu-kvm: warning: Blocked re-entrant IO on MemoryRegion: acpi-cpu-hotplug at addr: 0x0 [rhel-9])
- Resolves: RHEL-55336
  (CVE-2024-6119 edk2/openssl: Possible denial of service in X.509 name checks [rhel-9.5])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20240524-6.el9_5.1" date="1729080000">- edk2-MdePkg-Fix-overflow-issue-in-BasePeCoffLib.patch [RHEL-60831]
- Resolves: RHEL-60831
  (CVE-2024-38796 edk2: Integer overflows in PeCoffLoaderRelocateImage [rhel-9.5])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20240524-6.el9_5.2" date="1731326400">- edk2-OvmfPkg-Add-a-Fallback-RNG-RH-only.patch [RHEL-65735]
- edk2-OvmfPkg-ArmVirtPkg-Add-a-Fallback-RNG-RH-only.patch [RHEL-65735]
- Resolves: RHEL-65735
  ([Regression] HTTP Boot not working on old vCPU without virtio-rng device present  [rhel-9.5.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 20240524-6.el9_5.3" date="1732276800">- edk2-OvmfPkg-Rerun-dispatcher-after-initializing-virtio-r.patch [RHEL-63094]
- Resolves: RHEL-63094
  ([Regression] HTTP Boot fails to work with edk2-ovmf-20231122-6.el9_4.2 and greater [rhel-9.5])</changelog>
</package>
<package pkgid="a6ca8105df804944901fbdaead2aa92d85b205afba8da857317842d03bdd8510" name="evolution" arch="src">
  <version epoch="0" ver="3.40.4" rel="10.el9_5.1"/>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.40.4-10.1" date="1728993600">- Resolves: RHEL-62680 (WebKitGTK 2.46.1: Middle mouse button inserts primary clipboard twice)</changelog>
</package>
<package pkgid="cb1121072fd4ba291ef6b7ef99703d44fc8af93c8d6aa4bfda633bf2739f2b18" name="expat" arch="src">
  <version epoch="0" ver="2.5.0" rel="3.el9_5.1"/>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.5.0-1" date="1668081600">- Rebase to version 2.5.0
- Resolves: CVE-2022-43680</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.5.0-2" date="1707825600">- Fix parsing of large tokens
- Reject direct parameter entity recursion
- Resolves: RHEL-29699
- Resolves: RHEL-29696</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.5.0-3" date="1728475200">- Fix CVE-2024-45490, CVE-2024-45491, CVE-2024-45492
- Resolves: RHEL-56761
- Resolves: RHEL-57520
- Resolves: RHEL-57511</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.5.0-3.1" date="1730980800">- Fix CVE-2024-50602
- Resolves: RHEL-65064</changelog>
</package>
<package pkgid="a2f121199a63aefb04e7baa3f7f17a112c00cb34a13edda4a5aa4876aca4c989" name="fence-agents" arch="src">
  <version epoch="0" ver="4.10.0" rel="76.el9_5.1"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-66" date="1710417600">- Add missing licenses to spec-file
  Resolves: RHEL-27929
- ha-cloud-support: fix aliyun-cli
  Resolves: RHEL-28097</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-69" date="1711022400">- ha-cloud-support: upgrade bundled pyroute2 libs to fix issue in
  gcp-vpc-move-route's stop-action
  Resolves: RHEL-29649</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-70" date="1712232000">- fence_aliyun: add credentials file support, filter parameter, and
  optimize log output
  Resolves: RHEL-31488, RHEL-31485, RHEL-31483</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-71" date="1714737600">- fence_eps: add fence_epsr2 for ePowerSwitch R2 and newer
  Resolves: RHEL-35263</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-72" date="1715774400">- bundled jinja2: fix CVE-2024-34064
  Resolves: RHEL-35649</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-73" date="1716465600">- fence_vmware_rest: detect if the API user has sufficient rights to
  manage the fence device
  Resolves: RHEL-25256</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-74" date="1718798400">- fence_aws: add instance name and status to list/list-status actions
  Resolves: RHEL-43235</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-75" date="1718971200">- bundled urllib3: fix CVE-2024-37891
  Resolves: RHEL-43562</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-76" date="1721736000">- bundled setuptools: fix CVE-2024-6345

  Resolves: RHEL-49658</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-76.1" date="1727265600">- fence_scsi: preempt clears all devices on the mpath device, so only
  run it for the first device
  Resolves: RHEL-59882</changelog>
</package>
<package pkgid="f65937f40eb437195faefc126c3ded730cff05fd0f4784918d3ce39a14d0e322" name="fence-agents" arch="src">
  <version epoch="0" ver="4.10.0" rel="76.el9_5.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-69" date="1711022400">- ha-cloud-support: upgrade bundled pyroute2 libs to fix issue in
  gcp-vpc-move-route's stop-action
  Resolves: RHEL-29649</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-70" date="1712232000">- fence_aliyun: add credentials file support, filter parameter, and
  optimize log output
  Resolves: RHEL-31488, RHEL-31485, RHEL-31483</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-71" date="1714737600">- fence_eps: add fence_epsr2 for ePowerSwitch R2 and newer
  Resolves: RHEL-35263</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-72" date="1715774400">- bundled jinja2: fix CVE-2024-34064
  Resolves: RHEL-35649</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-73" date="1716465600">- fence_vmware_rest: detect if the API user has sufficient rights to
  manage the fence device
  Resolves: RHEL-25256</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-74" date="1718798400">- fence_aws: add instance name and status to list/list-status actions
  Resolves: RHEL-43235</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-75" date="1718971200">- bundled urllib3: fix CVE-2024-37891
  Resolves: RHEL-43562</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-76" date="1721736000">- bundled setuptools: fix CVE-2024-6345

  Resolves: RHEL-49658</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-76.1" date="1727265600">- fence_scsi: preempt clears all devices on the mpath device, so only
  run it for the first device
  Resolves: RHEL-59882</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-76.4" date="1736424000">- bundled jinja2: fix CVE-2024-56201 and CVE-2024-56326
  Resolves: RHEL-72070, RHEL-72063</changelog>
</package>
<package pkgid="faec3480f0c8b53f5ac6152f332ac3ea87180daee04dd8feac2a83d954d137f6" name="firefox" arch="src">
  <version epoch="0" ver="128.3.0" rel="1.1.el9_4"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 115.7.0-1" date="1705406400">- Update to 115.7.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 115.8.0-1" date="1707825600">- Update to 115.8.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 115.9.0-1" date="1710244800">- Update to 115.9.0 build1
- Fix expat CVE-2023-52425</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 115.9.0-2" date="1710504000">- Update to 115.9.0 build2</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 115.9.1-1" date="1711108800">- Update to 115.9.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 115.9.1-2" date="1712664000">- Removed expat CVE fix</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 115.10.0-1" date="1712664001">- Update to 115.10.0 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 128.2.0-1" date="1724760000">- Update to 128.2.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 128.3.0-1" date="1727179200">- Update to 128.3.0</changelog>
  <changelog author="Songhee Yeon &lt;dl_le@navercorp.com&gt; - 128.3.0-1.1" date="1728907200">- Add Navix default preferences and debranding patches (Linux Engineering Team)</changelog>
</package>
<package pkgid="39631fdca091cc50160d0ae8b0f541877e811e045b1b3670f25bf8221268ab26" name="firefox" arch="src">
  <version epoch="0" ver="128.4.0" rel="1.el9_4"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 115.9.0-1" date="1710244800">- Update to 115.9.0 build1
- Fix expat CVE-2023-52425</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 115.9.0-2" date="1710504000">- Update to 115.9.0 build2</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 115.9.1-1" date="1711108800">- Update to 115.9.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 115.9.1-2" date="1712664000">- Removed expat CVE fix</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 115.10.0-1" date="1712664001">- Update to 115.10.0 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 128.2.0-1" date="1724760000">- Update to 128.2.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 128.3.0-1" date="1727179200">- Update to 128.3.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 128.3.1-1" date="1728475200">- Update to 128.3.1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 128.4.0-1" date="1729598400">- Update to 128.4.0 build1</changelog>
  <changelog author="Songhee Yeon &lt;song-hee.yeon@navercorp.com&gt; - 128.4.0-1" date="1733918400">- Add Navix default preferences and debranding patches</changelog>
</package>
<package pkgid="7f519b9cafd771299c65efe6b5e7993b9eefcbfffe214bfe3925e99bfaa372cc" name="firefox" arch="src">
  <version epoch="0" ver="128.4.0" rel="1.el9_5"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 115.9.0-1" date="1710244800">- Update to 115.9.0 build1
- Fix expat CVE-2023-52425</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 115.9.0-2" date="1710504000">- Update to 115.9.0 build2</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 115.9.1-1" date="1711108800">- Update to 115.9.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 115.9.1-2" date="1712664000">- Removed expat CVE fix</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 115.10.0-1" date="1712664001">- Update to 115.10.0 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 128.2.0-1" date="1724760000">- Update to 128.2.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 128.3.0-1" date="1727179200">- Update to 128.3.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 128.3.1-1" date="1728475200">- Update to 128.3.1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 128.4.0-1" date="1729598400">- Update to 128.4.0 build1</changelog>
  <changelog author="Songhee Yeon &lt;song-hee.yeon@navercorp.com&gt; - 128.4.0-1" date="1733918400">- Add Navix default preferences and debranding patches</changelog>
</package>
<package pkgid="573c1de47b1f0c80630cc2abfbb2b9214097241edabaf37ce93bc357c24a59eb" name="firefox" arch="src">
  <version epoch="0" ver="128.5.1" rel="1.el9_5"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 115.9.1-1" date="1711108800">- Update to 115.9.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 115.9.1-2" date="1712664000">- Removed expat CVE fix</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 115.10.0-1" date="1712664001">- Update to 115.10.0 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 128.2.0-1" date="1724760000">- Update to 128.2.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 128.3.0-1" date="1727179200">- Update to 128.3.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 128.3.1-1" date="1728475200">- Update to 128.3.1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 128.4.0-1" date="1729598400">- Update to 128.4.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 128.5.0-1" date="1732017600">- Update to 128.5.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 128.5.1-1" date="1733140800">- Update to 128.5.1</changelog>
  <changelog author="Songhee Yeon &lt;song-hee.yeon@navercorp.com&gt; - 128.5.1-1" date="1733918400">- Add Navix default preferences and debranding patches</changelog>
</package>
<package pkgid="8ad4c672daa296302928739b230ab1bf51b0d89edd16692bd11f28b425f34d8e" name="firewalld" arch="src">
  <version epoch="0" ver="1.3.4" rel="9.el9_5"/>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 1.2.5-1" date="1682337600">- package rebase to v1.2.5
- feat(direct): avoid iptables flush if using nftables backend</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 1.3.4-1" date="1698321600">- package rebase to v1.3.4</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 1.3.4-2" date="1719835200">- feat(service): add OpenTelemetry (OTLP) service</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 1.3.4-3" date="1719835201">- feat(icmp): add ICMPv6 Multicast Listener Discovery (MLD) types</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 1.3.4-4" date="1719835202">- fix(rich): validate service name of rich rule</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 1.3.4-5" date="1719835203">- feat(fw): add ReloadPolicy option in firewalld.conf</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 1.3.4-6" date="1719835204">- feat(IPv6_rpfilter): support loose rpfilter
- feat(IPv6_rpfilter): support loose-forward rpfilter
- feat(IPv6_rpfilter): support strict-forward rpfilter</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 1.3.4-7" date="1719835205">- feat(nftables): table ownership</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 1.3.4-8" date="1730894400">- fix(service): update highest port number for ceph</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 1.3.4-9" date="1730894401">- feat(service): (x)rootd file server</changelog>
</package>
<package pkgid="17db024cf94a8197fd77826fc6694a49cd2304774a22d2fd741423eb273c49b7" name="freeradius" arch="src">
  <version epoch="0" ver="3.0.21" rel="43.el9_5"/>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 3.0.21-36" date="1670587200">- Fix multiple CVEs
  Resolves: #2151705
  Resolves: #2151703
  Resolves: #2151707</changelog>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 3.0.21-37" date="1671019200">- Fix defect found by covscan
  Resolves: #2151705</changelog>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 3.0.21-38" date="1684756800">- Fix crash when verifying client certificate
  Resolves: #2183447</changelog>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 3.0.21-39" date="1699272000">- Fix Python3.8+ library name suffix
  Resolves: #15503</changelog>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 3.0.21-40" date="1711972800">- Comment out unneeded options from mods-available/eap
  Resolves: RHEL-30830</changelog>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 3.0.21-41" date="1713960000">- Rebuild for OpenSSL rebase to 3.2.1
  Resolves: RHEL-33857</changelog>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 3.0.21-42" date="1720612800">- Backport fixes for BlastRADIUS CVE
  Resolves: RHEL-46567</changelog>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 3.0.21-43" date="1728561600">- Ignore home server ping packets
  Resolves: RHEL-61557</changelog>
</package>
<package pkgid="beb9a21d7fb1fe11284b59d5dc4330362565cd96e238d1f2a771bb63a61880ad" name="galera" arch="src">
  <version epoch="0" ver="26.4.20" rel="1.el9_5"/>
  <changelog author="Michal Schorm &lt;mschorm@redhat.com&gt; - 26.4.13-1" date="1668513600">- Rebase to 26.4.13</changelog>
  <changelog author="Michal Schorm &lt;mschorm@redhat.com&gt; - 26.4.14-1" date="1682769600">- Rebase to 26.4.14</changelog>
  <changelog author="Michal Schorm &lt;mschorm@redhat.com&gt; - 26.4.16-1" date="1700222400">- Rebase to 26.4.16</changelog>
  <changelog author="Michal Schorm &lt;mschorm@redhat.com&gt; - 26.4.18-1" date="1717761600">- Rebase to 26.4.18</changelog>
  <changelog author="Michal Schorm &lt;mschorm@redhat.com&gt; - 26.4.19-1" date="1729252800">- Rebase to 26.4.19</changelog>
  <changelog author="Michal Schorm &lt;mschorm@redhat.com&gt; - 26.4.20-1" date="1731585600">- Rebase to 26.4.20</changelog>
</package>
<package pkgid="d9776889977e0ac5104fe6d8f2397bf16a0dea43a455268cc2e34a3035157fc9" name="git" arch="src">
  <version epoch="0" ver="2.43.5" rel="2.el9_5"/>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 2.38.1-1" date="1670414400">- Update to 2.38.1
- Resolves: #2139379</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 2.39.0-1" date="1670932800">- Update to 2.39.0
- Related: #2139379</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 2.39.0-2" date="1671019200">- Remove perl(Email::Valid) require from git-email
- Related: #2139379</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 2.39.1-1" date="1674129600">- Update to 2.39.1
- Resolves: #2162070</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 2.39.3-1" date="1682510400">- Update to 2.39.3
- Resolves: #2188363, #2188353, #2189872, #2189873</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 2.43.0-1" date="1701864000">- Update to 2.43.0
- Resolves: RHEL-17100</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 2.43.5-1" date="1719489600">- Update to 2.43.5
- Resolves: RHEL-36353, RHEL-36357, RHEL-36371, RHEL-36383, RHEL-36387</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 2.43.5-2" date="1731585600">- Add fix for extremely slow shallow clones
- Resolves: RHEL-67118</changelog>
</package>
<package pkgid="f7323fcdea4becb4150d03bc380ea6c424ebe02a3a8af159a2ba33d0f77cc576" name="gnome-shell" arch="src">
  <version epoch="0" ver="40.10" rel="22.el9_5"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 40.10-13" date="1684152000">- Don't reset smartcard conversation twice when smartcard is inserted.
  Resolves: #2140898</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 40.10-14" date="1694001600">- Support OWE networks
  Resolves: #2236665</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 40.10-15" date="1697630400">- Fix window-menu closing immediately on open
  Resolves: RHEL-2663</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 40.10-16" date="1698840000">- Disable captive portal helper if WebKitGTK is not installed
  Resolves: RHEL-10487</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 40.10-17" date="1707566400">- Allow restricting extension installation
  Resolves: RHEL-25017</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 40.10-18" date="1710849600">- Use window icon in overview if available
  Resolves: RHEL-24713</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 40.10-19" date="1715774400">- Use correct bus name for screencast service
  Related: RHEL-35775</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 40.10-20" date="1715774401">- Fix inhibit-shortcut permissions
  Resolves: #RHEL-2031</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 40.10-21" date="1720612800">- Only open portal login in response to user action
  Resolves: RHEL-39098</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 40.10-22" date="1729252800">- Help mutter finding app info for windows
  Resolves: RHEL-63000</changelog>
</package>
<package pkgid="1fd5cbf72032de59a62dc9f7a18654c63291750c8864654a4badfe3fcf4b29c7" name="golang" arch="src">
  <version epoch="0" ver="1.22.9" rel="2.el9_5"/>
  <changelog author="Derek Parker &lt;deparker@redhat.com&gt; - 1.22.3-2" date="1716465600">- Restore HashSign / HashVerify API
- Resolves: RHEL-35883</changelog>
  <changelog author="Derek Parker &lt;deparker@redhat.com&gt; - 1.22.3-3" date="1717070400">- Update openssl backend
- Resolves: RHEL-36101</changelog>
  <changelog author="Archana Ravindar &lt;aravinda@redhat.com&gt; - 1.22.4-1" date="1717675200">- Rebase to Go1.22.4 that includes fixes for CVE-2024-24789 and CVE-2024-24790
- Resolves: RHEL-40156</changelog>
  <changelog author="David Benoit &lt;dbenoit@redhat.com&gt; - 1.22.4-2" date="1719489600">- Fix panic in standard crypto mode without openssl
- Resolves: RHEL-45359</changelog>
  <changelog author="Archana &lt;aravinda@redhat.com&gt; - 1.22.5-1" date="1720699200">- Rebase to Go1.22.5 to address CVE-2024-24791
- Resolves: RHEL-46973</changelog>
  <changelog author="David Benoit &lt;dbenoit@redhat.com&gt; - 1.22.5-2" date="1723636800">- Rebuild race detector archives from LLVM sources
- Add golang-race subpackage
- Resolves: RHEL-33421
- Remove unused crypto/internal/boring/syso package
- Resolves: RHEL-54335</changelog>
  <changelog author="David Benoit &lt;dbenoit@redhat.com&gt; - 1.22.7-1" date="1727179200">- Update to Go 1.22.7
- Remove fix-standard-crypto-panic.patch (upstreamed)
- Resolves: RHEL-57867</changelog>
  <changelog author="Archana &lt;aravinda@redhat.com&gt; - 1.22.7-2" date="1727956800">- Rebuilt to use right build target
- Related: RHEL-57867</changelog>
  <changelog author="David Benoit &lt;dbenoit@redhat.com&gt; - 1.22.9-1" date="1731585600">- Update to Go 1.22.9
- Resolves: RHEL-67672</changelog>
  <changelog author="David Benoit &lt;dbenoit@redhat.com&gt; - 1.22.9-2" date="1731585601">- Fix sources
- Related: RHEL-67672</changelog>
</package>
<package pkgid="0870521b18e59239e6f92cbba5672fcc9457d933d65cb57dd87cea250425ffd1" name="google-guice" arch="src">
  <version epoch="0" ver="4.2.3" rel="10.el9_5"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.2.3-9" date="1675080000">- Rebuild to regenerate auto-requires</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 4.2.3-10" date="1732104000">- Rebuild with regenerated Requires on Java</changelog>
</package>
<package pkgid="9d93de78642843c8e6972201332c3e64b677978fa2b9f6e79fe146c6e9c78f33" name="grafana" arch="src">
  <version epoch="0" ver="10.2.6" rel="7.el9_5"/>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; 9.2.10-13" date="1702555200">- Resolves RHEL-19296
- Fixes coredump issue introduced by selinux
- Patches out call to panic when trying to walk "/" directory</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; 9.2.10-14" date="1702987200">- Fixes postgresql AVC denial
- Related RHEL-7505</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; 9.2.10-15" date="1706702400">- Resolves RHEL-23468
- Allows for gid to be 0
- Allows for postgreSQL datasource in selinux policy</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; 10.2.6-1" date="1712059200">- Rebase to grafana 10.2.6</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; 10.2.6-2" date="1714737600">- Fixes patch 1002 for update to golang-fips
- Remove unused code under apsl-1.1 and apsl-1.2 licenses
- Resolves RHEL-33655</changelog>
  <changelog author="Lauren Chilton &lt;lchilton@redhat.com&gt; 10.2.6-3" date="1720526400">- Resolves RHEL-35937</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; 10.2.6-4" date="1721131200">- Resolves RHEL-44874</changelog>
  <changelog author="Lauren Chilton &lt;lchilton@redhat.com&gt; 10.2.6-5" date="1721390400">- Resolves RHEL-47185</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; 10.2.6-6" date="1727438400">- Resolves: RHEL-57927</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; 10.2.6-7" date="1729080000">- Resolves RHEL-62308: CVE-2024-47875</changelog>
</package>
<package pkgid="c6fa0ed213d912820b356a44555fa48dfca4b2b127b35d196b213a39d01b13f4" name="grafana-pcp" arch="src">
  <version epoch="0" ver="5.1.1" rel="9.el9_5"/>
  <changelog author="Andreas Gerstmayr &lt;agerstmayr@redhat.com&gt; 5.1.1-1" date="1666872000">- update to 5.1.1 tagged upstream community sources, see CHANGELOG
- resolve CVE-2022-27664 golang: net/http: handle server errors after sending GOAWAY</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; 5.1.1-2" date="1714996800">- fix CVE-2024-1394</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; 5.1.1-3" date="1715083200">- bump release number</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; - 5.1.1-8" date="1720440000">- Add a premade uwsgi dashboard for the vector datasource</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; - 5.1.1-9" date="1727438400">- Resolves: RHEL-57932</changelog>
</package>
<package pkgid="32fc1f8d23f9e668f4120fe4dd308f10dbcae71333aae8df24dff9df2b1e5f89" name="greenboot" arch="src">
  <version epoch="0" ver="0.15.7" rel="1.el9_5"/>
  <changelog author="Paul Whalen &lt;pwhalen@fedoraproject.org&gt; - 0.15.3-1" date="1669636800">- The 0.15.3 release
- revert service-monitor</changelog>
  <changelog author="Paul Whalen &lt;pwhalen@fedoraproject.org&gt; - 0.15.4-1" date="1676635200">- The 0.15.4 release
- Fix update_platforms_check script</changelog>
  <changelog author="saypaul &lt;paul.sayan@gmail.com&gt; - 0.15.5-1" date="1723809600">- The 0.15.5 release
- Auto-detect image type and use correct rollback
- Support for read only /boot mount
- Warn users of missing disabled healthchecks
- Add feature to disable healthchecks</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; - 0.15.5-2" date="1724328000">- Reorder files, don't overwrite configs on update</changelog>
  <changelog author="Paul Whalen &lt;pwhalen@fedoraproject.org&gt; - 0.15.5-3" date="1725969600">- Moved greenboot config to /etc/grub.d.
- %post symlink greenboot.cfg to bootupd if present
- %postun remove symlink from bootupd if present</changelog>
  <changelog author="Paul Whalen &lt;pwhalen@fedoraproject.org&gt; - 0.15.6-1" date="1725969601">- Update to 0.15.6</changelog>
  <changelog author="saypaul &lt;paul.sayan@gmail.com&gt; - 0.15.6-2" date="1726574400">- Update to 0.15.6-2</changelog>
  <changelog author="Sayan Paul &lt;paul.sayan@gmail.com&gt; - 0.15.7-1" date="1730376000">- Update to 0.15.7
- Reword warning message for disabled checks
- Fixed the issue that boot_counter cannot be unset and some scripts do not have executable permissions
- Packit: only use IoT relevant branches</changelog>
</package>
<package pkgid="31178ff0c41dbc4407d35f3225392bd4527ee9410c6549de15f5e94483c9f436" name="grub2" arch="src">
  <version epoch="1" ver="2.06" rel="93.el9_5"/>
  <changelog author="Nicolas Frayer &lt;nfrayer@redhat.com&gt; - 2.06-85" date="1721131200">- grub2-mkconfig: Prevent mkconfig from overwriting grub cfg stub
- Resolves: #RHEL-32099</changelog>
  <changelog author="Nicolas Frayer &lt;nfrayer@redhat.com&gt; - 2.06-86" date="1721131201">- chainloader: Remove unexpected "/EndEntire"
- Resolves: #RHEL-4380</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 2.06-87" date="1722427200">- grub2-mkconfig: Simplify os_name detection
- Resolves: #RHEL-32099</changelog>
  <changelog author="Leo Sandoval &lt;lsandova@redhat.com&gt; - 2.06-88" date="1722427201">- grub.cfg: Fix rpm grub.cfg verification issues
- Resolves: #RHEL-45870</changelog>
  <changelog author="Leo Sandoval &lt;lsandova@redhat.com&gt; - 2.06-89" date="1722513600">- Bump release number
- Resolves: #RHEL-45870</changelog>
  <changelog author="Nicolas Frayer &lt;nfrayer@redhat.com&gt; - 2.06-90" date="1722513601">- grub2-mkconfig: Remove mountpoint check
- Related: #RHEL-32099</changelog>
  <changelog author="Leo Sandoval &lt;lsandova@redhat.com&gt; - 2.06-91" date="1722600000">- Set /boot/grub2/grub.cfg to 0600 mode if present
- Resolves: #RHEL-45870</changelog>
  <changelog author="Nicolas Frayer &lt;nfrayer@redhat.com&gt; - 2.06-92" date="1723550400">- arm64/linux: Allocate memory for kernel with EFI_LOADER_CODE type
- Resolves: #RHEL-49868</changelog>
  <changelog author="Nicolas Frayer &lt;nfrayer@redhat.com&gt; 2.06-93" date="1729080000">- cmd/search: Fix a possible NULL ptr dereference
- Resolves: #RHEL-63828</changelog>
  <changelog author="Songhee Yeon &lt;dl_le@navercorp.com&gt; 2.06-93" date="1738756800">- Adding Navix CA, CERT and sbat files</changelog>
</package>
<package pkgid="71ea830fc4cd2aa465e588592cd544f68d30737cdd38c5c4345166562082a93e" name="gstreamer1-plugins-base" arch="src">
  <version epoch="0" ver="1.22.1" rel="3.el9_5"/>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.22.1-2" date="1705492800">- CVE-2023-37328: heap overwrite in subtitle parsing
- Resolves: RHEL-19475</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.22.1-3" date="1734350400">- Fixes for CVE-2024-47538, CVE-2024-47607, CVE-2024-47615
  Resolves: RHEL-70979, RHEL-71015, RHEL-70991</changelog>
</package>
<package pkgid="f25e62042cb8e059acf96cb242185457c1ac3f743a6baf53774420d85e4d5d58" name="gstreamer1-plugins-good" arch="src">
  <version epoch="0" ver="1.22.1" rel="3.el9_5"/>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.22.1-1" date="1681387200">- Update to 1.22.1</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.22.1-2" date="1705492800">- CVE-2023-37327: integer overflow leading to heap overwrite in FLAC
  image tag handling
- Resolves: RHEL-19471</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.22.1-3" date="1734350400">- CVE-2024-47537, CVE-2024-47539, CVE-2024-47540, CVE-2024-47606,
  CVE-2024-47613
  Resolves: RHEL-70954, RHEL-70967, RHEL-70941, RHEL-71027,
  Resolves: RHEL-71003</changelog>
</package>
<package pkgid="cf61925aba6e443bda4311bda00cd72e4eac8fbf115ba5be1276c926ce8b79a6" name="haproxy" arch="src">
  <version epoch="0" ver="2.4.22" rel="3.el9_5.1"/>
  <changelog author="Ryan O'Hara &lt;rohara@redhat.com&gt; - 2.4.17-5" date="1677499200">- Refuse interim responses with end-stream flag set (CVE-2023-0056, #2161140)</changelog>
  <changelog author="Ryan O'Hara &lt;rohara@redhat.com&gt; - 2.4.17-6" date="1677499201">- Reject empty http header field names (CVE-2023-25725, #2169510)</changelog>
  <changelog author="Ryan O'Hara &lt;rohara@redhat.com&gt; - 2.4.17-7" date="1683028800">- Fix uninitizalized resevered bytes (CVE-2023-0836, #2180861)</changelog>
  <changelog author="Ryan O'Hara &lt;rohara@redhat.com&gt; - 2.4.22-1" date="1686052800">- Update to 2.4.22 (#2196530)</changelog>
  <changelog author="Ryan O'Hara &lt;rohara@redhat.com&gt; - 2.4.22-2" date="1705492800">- Reject any empty content-length header value (CVE-2023-40225, RHEL-7736)</changelog>
  <changelog author="Ryan O'Hara &lt;rohara@redhat.com&gt; - 2.4.22-3" date="1706011200">- Reject "#" as part of URI path component (CVE-2023-45539, RHEL-18169)</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 2.4.22-3.1" date="1736251200">- Always clear retry flags in read/write functions to avoid CPU
  usage spikes
- Fix "unable to load certificate chain from file" issue
  Resolves: RHEL-72955, RHEL-72952</changelog>
</package>
<package pkgid="a982e46ba717bd95ae956993fccc9382c341fc494fdc5586a852e4adbed6d2e9" name="httpcomponents-client" arch="src">
  <version epoch="0" ver="4.5.13" rel="5.el9_5"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.5.13-3" date="1675080000">- Rebuild to regenerate auto-requires</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 4.5.13-4" date="1732104000">- Rebuild with regenerated Requires on Java</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 4.5.13-5" date="1732190400">- Fix patch usage</changelog>
</package>
<package pkgid="6f365d9b575139dc7f5fecec6291128197194f6a15b5cb70119e58a1f5a730c5" name="httpd" arch="src">
  <version epoch="0" ver="2.4.62" rel="1.el9_5.2"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.59-2" date="1715169600">- Resolves: RHEL-35870 - httpd mod_cgi/cgid unification</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.59-3" date="1715169601">- Related: RHEL-14668 - RFE: httpd rebase to 2.4.59</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.59-4" date="1716206400">- Resolves: RHEL-6575 - [RFE] httpd use systemd-sysusers</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.59-5" date="1716292800">- mod_ssl: defer ENGINE_finish() calls to a cleanup
  Resolves: RHEL-36755</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.59-6" date="1717070400">- mod_ssl: restore SSL_OP_NO_RENEGOTIATE support
  Related: RHEL-14668</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.59-7" date="1721390400">- Resolves: RHEL-49856: htcacheclean.service missing [Install] section</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.62-1" date="1722686400">- new version 2.4.62
- Resolves: RHEL-52724 - Regression introduced by CVE-2024-38474 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.62-1.1" date="1732795200">- mod_ssl: fix loading keys via ENGINE API
  Resolves: RHEL-69456</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.62-1.2" date="1736510400">- Resolves: RHEL-73580 - RewriteRule proxying to UDS (unix domain socket)
  configured in .htaccess doesn't work on httpd-2.4.62-1</changelog>
  <changelog author="Linux Engineering Team &lt;dl_le@navercorp.com&gt; - 2.4.62-1" date="1738584000">- Add Navix specific changes</changelog>
</package>
<package pkgid="32ed00bfb9f95adf335d621074a3f4e480ac66122bd94128734ca59c7f982ca5" name="ipa" arch="src">
  <version epoch="0" ver="4.12.2" rel="1.el9_5.2"/>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.12.0-1" date="1716984000">- Resolves: RHEL-39140 Rebase ipa to the latest 4.12 version for RHEL 9.5
- Resolves: RHEL-34757 The change for preventing deletion of the admin user caused a regression in disable
- Resolves: RHEL-30553 Depend on nfsv4-client-utils or nfs-utils
- Resolves: RHEL-29762 IPA sidgen fails to create SID for manually set ID for a new range [rhel-9.5.0]
- Resolves: RHEL-26261 Fix replica connection check for use with AD administrator
- Resolves: RHEL-18062 ipa ca-show NAME --certificate-out=file creates empty file when NAME does not exist
- Resolves: RHEL-12149 traceback in ipaserver/dcerpc.py
- Resolves: RHEL-4810 [RFE] FreeIPA-to-FreeIPA migration
- Resolves: RHEL-4807 [RFE] Support in IPA for HSM boxes</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.12.0-2" date="1717502400">- Resolves: RHEL-39950 ipa-client can't be installed because of a missing dependency</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.12.0-3" date="1717588800">- Related: RHEL-34809
temporarily revert a commit that depends on newer version of python-jwcrypto</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 4.12.0-4" date="1718020800">- Resolves: RHEL-29928 CVE-2024-3183 freeipa: user can obtain a hash of the passwords of all domain users and perform offline brute force
- Resolves: RHEL-29691 CVE-2024-2698 freeipa: delegation rules allow a proxy service to impersonate any user to access another target service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.12.0-5" date="1720440000">- Resolves: RHEL-37285 IPA Web UI not showing replication agreement for non-admin users
- Resolves: RHEL-42703 PSKC.xml issues with ipa_otptoken_import.py
- Resolves: RHEL-41194 ipa-client rpm post script creates always ssh_config.orig even if nothing needs to be changed
- Resolves: RHEL-39477 kdc.crt certificate not getting automatically renewed by certmonger in IPA Hidden replica
- Resolves: RHEL-46559 Include latest fixes in python3-ipatests packages
- Resolves: RHEL-22188 [RFE] Allow IPA SIDgen task to continue if it finds an entity that SID can't be assigned to</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.12.0-6" date="1721304000">- Resolves: RHEL-47292 Include latest fixes in python3-ipatests packages
- Resolves: RHEL-47146 Syntax error uninstalling the selinux-luna subpackage
- Resolves: RHEL-46009 ipa-migrate with -Z option fails with ValueError: option error
- Resolves: RHEL-46003 ipa-migrate -V options fails to display version
- Resolves: RHEL-45463 ipa-migrate stage-mode is failing with error: Modifying a mapped attribute in a managed entry is not allowed
- Resolves: RHEL-40890 ipa-server-install: token_password_file read in kra.install_check after calling hsm_validator in ca.install_check
- Resolves: RHEL-40661 Adjust "ipa config-mod --addattr ipaconfigstring=EnforceLDAPOTP" to allow for non OTP users in some cases</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.12.0-7" date="1723118400">- Resolves: RHEL-53500 adtrustinstance only prints issues in check_inst() and does not log them
- Resolves: RHEL-52306 Unconditionally add MS-PAC to global config
- Resolves: RHEL-52300 RFE - Keep the configured value for the "nsslapd-ignore-time-skew" after a "force-sync"
- Resolves: RHEL-52222 ipa-replica/server-install with softhsm needs to check permission/ownership of /var/lib/softhsm/tokens to avoid install failure
- Resolves: RHEL-51944 Include latest fixes in python3-ipatests packages
- Resolves: RHEL-50804 ipa-migrate -Z with invalid cert options fails with 'ValueError: option error'
- Resolves: RHEL-49602 misleading warning for missing ipa-selinux-nfast package on luna hsm h/w
- Resolves: RHEL-27856 'Unable to log in as uid=admin-replica.testrealm.test,ou=people,o=ipaca' during replica install</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.12.2-1" date="1724241600">- Resolves: RHEL-54546 Covscan issues: Resource Leak
- Resolves: RHEL-49602 misleading warning for missing ipa-selinux-nfast package on luna hsm h/w
- Resolves: RHEL-40359 With unreachable AD, ipa trust returns an internal error</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.12.2-1.1" date="1731067200">- Resolves: RHEL-66173 Last expired OTP token would be considered as still assigned to the user</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.12.2-1.2" date="1732708800">- Resolves: RHEL-69294 add a tool to quickly detect and fix issues with IPA ID ranges</changelog>
</package>
<package pkgid="68a9fcaa2d64a5845a1cc1b68576a011d1dd912bbbe08b8aa8554a1c1e3446b8" name="ipa" arch="src">
  <version epoch="0" ver="4.12.2" rel="1.el9_5.3"/>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.12.0-2" date="1717502400">- Resolves: RHEL-39950 ipa-client can't be installed because of a missing dependency</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.12.0-3" date="1717588800">- Related: RHEL-34809
temporarily revert a commit that depends on newer version of python-jwcrypto</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 4.12.0-4" date="1718020800">- Resolves: RHEL-29928 CVE-2024-3183 freeipa: user can obtain a hash of the passwords of all domain users and perform offline brute force
- Resolves: RHEL-29691 CVE-2024-2698 freeipa: delegation rules allow a proxy service to impersonate any user to access another target service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.12.0-5" date="1720440000">- Resolves: RHEL-37285 IPA Web UI not showing replication agreement for non-admin users
- Resolves: RHEL-42703 PSKC.xml issues with ipa_otptoken_import.py
- Resolves: RHEL-41194 ipa-client rpm post script creates always ssh_config.orig even if nothing needs to be changed
- Resolves: RHEL-39477 kdc.crt certificate not getting automatically renewed by certmonger in IPA Hidden replica
- Resolves: RHEL-46559 Include latest fixes in python3-ipatests packages
- Resolves: RHEL-22188 [RFE] Allow IPA SIDgen task to continue if it finds an entity that SID can't be assigned to</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.12.0-6" date="1721304000">- Resolves: RHEL-47292 Include latest fixes in python3-ipatests packages
- Resolves: RHEL-47146 Syntax error uninstalling the selinux-luna subpackage
- Resolves: RHEL-46009 ipa-migrate with -Z option fails with ValueError: option error
- Resolves: RHEL-46003 ipa-migrate -V options fails to display version
- Resolves: RHEL-45463 ipa-migrate stage-mode is failing with error: Modifying a mapped attribute in a managed entry is not allowed
- Resolves: RHEL-40890 ipa-server-install: token_password_file read in kra.install_check after calling hsm_validator in ca.install_check
- Resolves: RHEL-40661 Adjust "ipa config-mod --addattr ipaconfigstring=EnforceLDAPOTP" to allow for non OTP users in some cases</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.12.0-7" date="1723118400">- Resolves: RHEL-53500 adtrustinstance only prints issues in check_inst() and does not log them
- Resolves: RHEL-52306 Unconditionally add MS-PAC to global config
- Resolves: RHEL-52300 RFE - Keep the configured value for the "nsslapd-ignore-time-skew" after a "force-sync"
- Resolves: RHEL-52222 ipa-replica/server-install with softhsm needs to check permission/ownership of /var/lib/softhsm/tokens to avoid install failure
- Resolves: RHEL-51944 Include latest fixes in python3-ipatests packages
- Resolves: RHEL-50804 ipa-migrate -Z with invalid cert options fails with 'ValueError: option error'
- Resolves: RHEL-49602 misleading warning for missing ipa-selinux-nfast package on luna hsm h/w
- Resolves: RHEL-27856 'Unable to log in as uid=admin-replica.testrealm.test,ou=people,o=ipaca' during replica install</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.12.2-1" date="1724241600">- Resolves: RHEL-54546 Covscan issues: Resource Leak
- Resolves: RHEL-49602 misleading warning for missing ipa-selinux-nfast package on luna hsm h/w
- Resolves: RHEL-40359 With unreachable AD, ipa trust returns an internal error</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.12.2-1.1" date="1731067200">- Resolves: RHEL-66173 Last expired OTP token would be considered as still assigned to the user</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.12.2-1.2" date="1732708800">- Resolves: RHEL-69294 add a tool to quickly detect and fix issues with IPA ID ranges</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.12.2-1.3" date="1734436800">- Resolves: RHEL-69928 add support for python cryptography 44.0.0
- Resolves: RHEL-70258 Upgrade to ipa-server-4.12.2-1.el9 OTP-based bind to LDAP without enforceldapotp is broken
- Resolves: RHEL-70482 ipa-server-upgrade fails after established trust with ad
- Resolves: RHEL-67192 CVE-2024-11029 ipa: Administrative user data leaked through systemd journal</changelog>
</package>
<package pkgid="d5ecb0e82911d0256e5d4c4b19b1948e8e2d75d45d177294f5c05656c51e8a9c" name="ipa" arch="src">
  <version epoch="0" ver="4.12.2" rel="1.el9_5.4"/>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.12.0-3" date="1717588800">- Related: RHEL-34809
temporarily revert a commit that depends on newer version of python-jwcrypto</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 4.12.0-4" date="1718020800">- Resolves: RHEL-29928 CVE-2024-3183 freeipa: user can obtain a hash of the passwords of all domain users and perform offline brute force
- Resolves: RHEL-29691 CVE-2024-2698 freeipa: delegation rules allow a proxy service to impersonate any user to access another target service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.12.0-5" date="1720440000">- Resolves: RHEL-37285 IPA Web UI not showing replication agreement for non-admin users
- Resolves: RHEL-42703 PSKC.xml issues with ipa_otptoken_import.py
- Resolves: RHEL-41194 ipa-client rpm post script creates always ssh_config.orig even if nothing needs to be changed
- Resolves: RHEL-39477 kdc.crt certificate not getting automatically renewed by certmonger in IPA Hidden replica
- Resolves: RHEL-46559 Include latest fixes in python3-ipatests packages
- Resolves: RHEL-22188 [RFE] Allow IPA SIDgen task to continue if it finds an entity that SID can't be assigned to</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.12.0-6" date="1721304000">- Resolves: RHEL-47292 Include latest fixes in python3-ipatests packages
- Resolves: RHEL-47146 Syntax error uninstalling the selinux-luna subpackage
- Resolves: RHEL-46009 ipa-migrate with -Z option fails with ValueError: option error
- Resolves: RHEL-46003 ipa-migrate -V options fails to display version
- Resolves: RHEL-45463 ipa-migrate stage-mode is failing with error: Modifying a mapped attribute in a managed entry is not allowed
- Resolves: RHEL-40890 ipa-server-install: token_password_file read in kra.install_check after calling hsm_validator in ca.install_check
- Resolves: RHEL-40661 Adjust "ipa config-mod --addattr ipaconfigstring=EnforceLDAPOTP" to allow for non OTP users in some cases</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.12.0-7" date="1723118400">- Resolves: RHEL-53500 adtrustinstance only prints issues in check_inst() and does not log them
- Resolves: RHEL-52306 Unconditionally add MS-PAC to global config
- Resolves: RHEL-52300 RFE - Keep the configured value for the "nsslapd-ignore-time-skew" after a "force-sync"
- Resolves: RHEL-52222 ipa-replica/server-install with softhsm needs to check permission/ownership of /var/lib/softhsm/tokens to avoid install failure
- Resolves: RHEL-51944 Include latest fixes in python3-ipatests packages
- Resolves: RHEL-50804 ipa-migrate -Z with invalid cert options fails with 'ValueError: option error'
- Resolves: RHEL-49602 misleading warning for missing ipa-selinux-nfast package on luna hsm h/w
- Resolves: RHEL-27856 'Unable to log in as uid=admin-replica.testrealm.test,ou=people,o=ipaca' during replica install</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.12.2-1" date="1724241600">- Resolves: RHEL-54546 Covscan issues: Resource Leak
- Resolves: RHEL-49602 misleading warning for missing ipa-selinux-nfast package on luna hsm h/w
- Resolves: RHEL-40359 With unreachable AD, ipa trust returns an internal error</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.12.2-1.1" date="1731067200">- Resolves: RHEL-66173 Last expired OTP token would be considered as still assigned to the user</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.12.2-1.2" date="1732708800">- Resolves: RHEL-69294 add a tool to quickly detect and fix issues with IPA ID ranges</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.12.2-1.3" date="1734436800">- Resolves: RHEL-69928 add support for python cryptography 44.0.0
- Resolves: RHEL-70258 Upgrade to ipa-server-4.12.2-1.el9 OTP-based bind to LDAP without enforceldapotp is broken
- Resolves: RHEL-70482 ipa-server-upgrade fails after established trust with ad
- Resolves: RHEL-67192 CVE-2024-11029 ipa: Administrative user data leaked through systemd journal</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.12.2-1.4" date="1737633600">- Resolves: RHEL-76011 kinit with external idp user is failing</changelog>
</package>
<package pkgid="f845f0b79e13362b71da5b722e7b5364acecfa060af47cf6ded9617b2e78ac6c" name="iperf3" arch="src">
  <version epoch="0" ver="3.9" rel="13.el9_5.1"/>
  <changelog author="Jonathan Wright &lt;jonathan@almalinux.org&gt; - 3.9-10" date="1690545600">- Fixes CVE-2023-38403
  Resolves: rhbz#2223676</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.9-11" date="1691582400">- Related: #2223676 - bumping version for correct update path</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.9-12" date="1717502400">- Resolves: RHEL-39975 - possible denial of service</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.9-13" date="1718107200">- Resolves: RHEL-29579 - vulnerable to marvin attack if the authentication option is used</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.9-13.1" date="1736251200">- Resolves: RHEL-72929 - Denial of Service in iperf Due to Improper JSON Handling</changelog>
</package>
<package pkgid="7a02504b9d13cdabd040b242f9e6e8d75e8a9fbe8c78f81bb453fd15c11c19a9" name="ipset" arch="src">
  <version epoch="0" ver="7.11" rel="11.el9_5"/>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 7.11-9" date="1718884800">- Fix for wrong comment in ipset-config file</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 7.11-10" date="1731499200">- Fix patch "Parse port before trying by service name"</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 7.11-11" date="1732622400">- Bump release for gated side-tag</changelog>
</package>
<package pkgid="d1822bb89da73c0ae35c8ab7c8f59d56218804a26b1265152d4d3c6dbb324b46" name="iptables" arch="src">
  <version epoch="0" ver="1.8.10" rel="11.el9_5"/>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.10-2.el9]" date="1699358400">- ebtables: Fix corner-case noflush restore bug (Phil Sutter) [RHEL-14147]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.10-3.el9]" date="1718193600">- extensions: libxt_sctp: Add an extra assert() (Phil Sutter) [RHEL-40928]
- spec: Add symlinks for merged extension DSOs (Phil Sutter) [RHEL-32463]
- nft: Fix for broken recover_rule_compat() (Phil Sutter) [RHEL-26619]
- spec: Ship ebtables-translate and man page (Phil Sutter) [RHEL-32922]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.10-4.el9]" date="1720008000">- spec: Simplify legacy package integration (Phil Sutter) [RHEL-5797]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.10-5.el9]" date="1723636800">- xtables-monitor: Ignore ebtables policy rules unless tracing (Phil Sutter) [RHEL-47264]
- xtables-monitor: Fix for ebtables rule events (Phil Sutter) [RHEL-47264]
- tests: shell: New xtables-monitor test (Phil Sutter) [RHEL-47264]
- xtables-monitor: Support arptables chain events (Phil Sutter) [RHEL-47264]
- xtables-monitor: Align builtin chain and table output (Phil Sutter) [RHEL-47264]
- xtables-monitor: Flush stdout after all lines of output (Phil Sutter) [RHEL-47264]
- xtables-monitor: Proper re-init for rule's family (Phil Sutter) [RHEL-47264]
- nft: Fix for zeroing existent builtin chains (Phil Sutter) [RHEL-49497]
- nft: cache: Annotate faked base chains as such (Phil Sutter) [RHEL-49497]
- nft: Fix for zeroing non-existent builtin chains (Phil Sutter) [RHEL-49497]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.10-6.el9]" date="1732708800">- Bump release for RHEL-9.5.z (Phil Sutter) [RHEL-69283 RHEL-69284]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.10-7.el9]" date="1732708801">- Bump release for side-tag (Phil Sutter) [RHEL-69283 RHEL-69284]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.10-8.el9]" date="1733400000">- Revert "xshared: Print protocol numbers if --numeric was given" (Phil Sutter) [RHEL-70173]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.10-9.el9]" date="1734868800">- spec: Explicitly remove unpackaged files (Michel Lind) [RHEL-72005]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.10-10.el9]" date="1734868801">- spec: Fix build on c9s (Phil Sutter) [RHEL-72005]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.10-11.el9]" date="1734955200">- libxtables: Attenuate effects of functions' internal static buffers (Phil Sutter) [RHEL-72027]</changelog>
</package>
<package pkgid="893039bf473d32dd05dd6779ee27aae961c5f5856559e6f459ce9be0a86d5eea" name="iputils" arch="src">
  <version epoch="0" ver="20210202" rel="10.el9_5"/>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 20210202-8" date="1669377600">- Build iputils and ifenslave with correct flags (rhbz#2144509)</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 20210202-9" date="1683115200">- ping: Remove 'unsupported IPv6' warning on disabled IPv6 (rhbz#2152511)</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 20210202-10" date="1729598400">- ping: Fix ping6 binding to VRF and address (RHEL-63060)</changelog>
</package>
<package pkgid="63ea2f074e01cce3717eb4559e5397a8730b256e0528bf4de388c3813612827f" name="jakarta-activation" arch="src">
  <version epoch="0" ver="1.2.2" rel="6.el9_5"/>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 1.2.2-6" date="1732017600">- Rebuild with regenerated Requires on Java</changelog>
</package>
<package pkgid="ba6a9ee8423b5d484542a342a483fd684d307b6879c0533abdeeb1b24da0080d" name="jakarta-mail" arch="src">
  <version epoch="0" ver="1.6.5" rel="6.el9_5"/>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 1.6.5-6" date="1732104000">- Rebuild with regenerated Requires on Java</changelog>
</package>
<package pkgid="0d8b65c1c730ad01d13ec2ff8ac66294b3bd301051cf9e5a39b95f85a7526dab" name="java-1.8.0-openjdk" arch="src">
  <version epoch="1" ver="1.8.0.432.b06" rel="3.el9"/>
  <changelog author="Thomas Fitzsimmons &lt;fitzsim@redhat.com&gt; - 1:1.8.0.412.b01-0.2.ea" date="1711108800">- Invoke xz in multi-threaded mode
- generate_source_tarball.sh: Add WITH_TEMP environment variable
- generate_source_tarball.sh: Multithread xz on all available cores
- generate_source_tarball.sh: Add OPENJDK_LATEST environment variable
- generate_source_tarball.sh: Update comment about tarball naming
- generate_source_tarball.sh: Reformat comment header
- generate_source_tarball.sh: Reformat and update help output
- generate_source_tarball.sh: Do a shallow clone, for speed
- generate_source_tarball.sh: Eliminate some removal prompting
- generate_source_tarball.sh: Make tarball reproducible
- generate_source_tarball.sh: Prefix temporary directory with temp-
- generate_source_tarball.sh: Remove temporary directory exit conditions
- generate_source_tarball.sh: Set compile-command in Emacs
- generate_source_tarball.sh: Remove REPO_NAME from FILE_NAME_ROOT
- generate_source_tarball.sh: Move PROJECT_NAME and REPO_NAME checks
- generate_source_tarball.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
- generate_source_tarball.sh: shellcheck: Double-quote variable references (SC2086)
- generate_source_tarball.sh: shellcheck: Do not use -a (SC2166)
- generate_source_tarball.sh: shellcheck: Do not use $ on arithmetic variables (SC2004)
- Use backward-compatible patch syntax
- generate_source_tarball.sh: Ignore -ga tags with OPENJDK_LATEST
- generate_source_tarball.sh: Remove trailing period in echo
- generate_source_tarball.sh: Use long-style argument to grep
- generate_source_tarball.sh: Add license
- generate_source_tarball.sh: Add indentation instructions for Emacs
- Related: RHEL-30934</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.412.b01-0.2.ea" date="1711108801">- Turn off xz multi-threading on i686 as it fails with an out of memory error
- Move to upstream tag style (shenandoah8ux-by) in preparation for eventually moving back to official sources
- generate_source_tarball.sh: Rename JCONSOLE_JS_PATCH{,_DEFAULT} to JCONSOLE_PATCH{,_DEFAULT} for brevity
- generate_source_tarball.sh: Adapt OPENJDK_LATEST logic to work with 8u Shenandoah fork
- generate_source_tarball.sh: Adapt version logic to work with 8u
- generate_source_tarball.sh: Add quoting for SCRIPT_DIR and JCONSOLE_PATCH (SC2086)
- generate_source_tarball.sh: Update examples in header for clarity
- generate_source_tarball.sh: Create directory in TMPDIR when using WITH_TEMP
- generate_source_tarball.sh: Only add --depth=1 on non-local repositories
- Move maintenance scripts to a scripts subdirectory
- icedtea_sync.sh: Update with a VCS mode that retrieves sources from a Mercurial repository
- discover_trees.sh: Set compile-command and indentation instructions for Emacs
- discover_trees.sh: shellcheck: Do not use -o (SC2166)
- discover_trees.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
- discover_trees.sh: shellcheck: Double-quote variable references (SC2086)
- generate_source_tarball.sh: Add authorship
- icedtea_sync.sh: Set compile-command and indentation instructions for Emacs
- icedtea_sync.sh: shellcheck: Double-quote variable references (SC2086)
- icedtea_sync.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
- openjdk_news.sh: Set compile-command and indentation instructions for Emacs
- openjdk_news.sh: shellcheck: Double-quote variable references (SC2086)
- openjdk_news.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
- openjdk_news.sh: shellcheck: Remove deprecated egrep usage (SC2196)
- Remove obsolete file generate_singlerepo_source_tarball.sh
- Remove obsolete file get_sources.sh
- Remove obsolete file update_main_sources.sh
- generate_source_tarball.sh: Handle an existing checkout
- generate_source_tarball.sh: Sync indentation with java-21-openjdk version
- generate_source_tarball.sh: Support using a subdirectory via TO_COMPRESS
- Sync patch set with portable build
- Related: RHEL-30934</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.412.b07-0.2.ea" date="1712318400">- Update to shenandoah-jdk8u412-b07 (EA)
- Require tzdata 2024a due to upstream inclusion of JDK-8322725
- Only require tzdata 2023d for now as 2024a is unavailable in buildroot
- Sync the copy of the portable specfile with the latest update
- Related: RHEL-30934</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.412.b08-2" date="1712577600">- Update to shenandoah-jdk8u412-b08 (GA)
- Update release notes for shenandoah-8u412-b08.
- Complete release note for Certainly roots
- Switch to GA mode.
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2024-04-16 @ 1pm PT. **
- Resolves: RHEL-32409</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.422.b01-0.1.ea" date="1720526400">- Update to shenandoah-jdk8u422-b01 (EA)
- Update release notes for shenandoah-8u422-b01.
- Switch to EA mode.
- Sync the copy of the portable specfile with the latest update
- Update NEWS file and rename remove-intree-libraries.sh so portable can be rebuilt
- Document policy repacking script and rename to correct spelling and style
- Limit Java only tests to one architecture using jdk_test_arch
- Temporarily include Zero-based architectures in jdk_test_arch until they are portable
- Related: RHEL-46860
- Resolves: RHEL-47069
- Resolves: RHEL-47090</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.422.b05-1" date="1720612800">- Update to shenandoah-jdk8u422-b05 (GA)
- Update release notes for shenandoah-8u422-b05.
- Rebase PR2462 patch following patched hunk being removed by JDK-8322106
- Switch to GA mode.
- Sync the copy of the portable specfile with the latest update
- Actually require tzdata 2024a now it is available in the buildroot
- Add missing build dependencies on zlib-devel and tar
- Update LCMS version to match JDK-8245400
- ** This tarball is embargoed until 2024-07-16 @ 1pm PT. **
- Resolves: RHEL-46860
- Resolves: RHEL-47011</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.432.b06-2" date="1728648000">- Update to shenandoah-jdk8u432-b06 (GA)
- Update release notes for shenandoah-8u432-b06.
- Drop JDK-828109{6,7,8}/PR3836 patch following integration of upstream version
- Regenerate JDK-8199936/PR3533 patch following JDK-828109{6,7,8} integration
- Bump version of bundled zlib to 1.3.1 following JDK-8324632
- Include backport of JDK-8328999 to update giflib to 5.2.2
- Bump version of bundled giflib to 5.2.2 following JDK-8328999
- Add build scripts to repository to ease remembering all CentOS &amp; RHEL targets and options
- Sync the copy of the portable specfile with the latest update
- Resolves: RHEL-58794
- Resolves: RHEL-62280
- Resolves: RHEL-61287
- ** This tarball is embargoed until 2024-10-15 @ 1pm PT. **</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.432.b06-3" date="1729339200">- Rebuild RPM for 9.5 0day release
- Related: RHEL-58794
- Related: RHEL-62280
- Related: RHEL-61287</changelog>
  <changelog author="Linux Engineering Team &lt;dl_le@navercorp.com&gt; - 1.8.0.432.b06-3" date="1732190400">- Add Navix specific changes</changelog>
  <changelog author="Linux Engineering Team &lt;dl_le@navercorp.com&gt; - 1.8.0.432.b06-3" date="1732190401">- Add Navix specific changes</changelog>
</package>
<package pkgid="a967d4a9377f3ebea676913591666873f705c5dbe86952e471067d5f1d536fce" name="java-11-openjdk" arch="src">
  <version epoch="1" ver="11.0.25.0.9" rel="3.el9"/>
  <changelog author="Anton Bobrov &lt;abobrov@redhat.com&gt; - 1:11.0.24.0.8-1" date="1720612800">- Update to jdk-11.0.24+8 (GA)
- Update release notes to 11.0.24+8
- Adjusted DTLS &amp; RPATH NEWS entries to match OpenJDK 17 &amp; 21 release notes
- Switch to GA mode for release
- Fix Provides to reflect up to date component versions
- Add zlib build required or bundled version (1.3.1), depending on system_libs setting
- Resolves: RHEL-45202
- ** This tarball is embargoed until 2024-07-16 @ 1pm PT. **</changelog>
  <changelog author="Antonio Vieiro &lt;avieirov@redhat.com&gt; - 1:11.0.25.0.6-0.2.ea" date="1727265600">- Update to jdk-11.0.25+6 (EA)
- Update release notes to 11.0.25+6
- Switch to EA mode
- Bump giflib version to 5.2.2 following JDK-8328999
- Bump libpng version to 1.6.43 following JDK-8329004
- Related: RHEL-58775</changelog>
  <changelog author="Antonio Vieiro &lt;avieirov@redhat.com&gt; - 1:11.0.25.0.6-0.3.ea" date="1727265601">- Limit Java only tests to one 'jdk_test_arch'
- Related: RHEL-58775
- Resolves: RHEL-59730</changelog>
  <changelog author="Antonio Vieiro &lt;avieirov@redhat.com&gt; - 1:11.0.25.0.7-0.2.ea" date="1727438400">- Update to jdk-11.0.25+7 (EA)
- Update release notes to 11.0.25+7
- Related: RHEL-58775</changelog>
  <changelog author="Antonio Vieiro &lt;avieirov@redhat.com&gt; - 1:11.0.25.0.7-0.3.ea" date="1728043200">- RHJDKBP-875 - Added gating.yaml and/or rpminspect.yaml
- RHJDKBP-874 - Removed 
- Related: RHEL-58775</changelog>
  <changelog author="Antonio Vieiro &lt;avieirov@redhat.com&gt; - 1:11.0.25.0.8-0.1.ea" date="1728388800">- Update to jdk-11.0.25+8 (EA)
- Update release notes to 11.0.25+8
- Related: RHEL-58775</changelog>
  <changelog author="Antonio Vieiro &lt;avieirov@redhat.com&gt; - 1:11.0.25.0.9-2" date="1728561600">- Update to jdk-11.0.25+9 (GA)
- Update release notes to 11.0.25+9
- Switch to GA mode for release
- Related: RHEL-58775
- ** This tarball is embargoed until 2024-10-15 @ 1pm PT. **</changelog>
  <changelog author="Antonio Vieiro &lt;avieirov@redhat.com&gt; - 1:11.0.25.0.9-3" date="1729166400">- Make java-11-openjdk NOT the default JDK in rhel-9.2.0.z, rhel-9.4.z, rhel-9.5.z
- Resolves: RHEL-63042 
- See-Also: RHEL-63043 RHEL-63044</changelog>
  <changelog author="Linux Engineering Team &lt;dl_le@navercorp.com&gt; - 11.0.25.0.9-3" date="1732190400">- Add Navix specific changes</changelog>
  <changelog author="Linux Engineering Team &lt;dl_le@navercorp.com&gt; - 11.0.25.0.9-3" date="1732190401">- Add Navix specific changes</changelog>
</package>
<package pkgid="44b36657efdddd0059c09e82990b8a60a9c9cb2bfb9f1387f811986c1b923bbe" name="java-21-openjdk" arch="src">
  <version epoch="1" ver="21.0.5.0.11" rel="2.el9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.3.0.9-1" date="1713096000">- Update to jdk-21.0.3+9 (GA)
- Update release notes to 21.0.3+9
- Switch to GA mode.
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2024-04-16 @ 1pm PT. **
- Resolves: RHEL-32424</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.4.0.1-0.1.ea" date="1719057600">- Update to jdk-21.0.4+1 (EA)
- Update release notes to 21.0.4+1
- Switch to EA mode
- Bump LCMS 2 version to 2.16.0 following JDK-8321489
- Add zlib build requirement or bundled version (1.3.1), depending on system_libs setting
- Restore NEWS file so portable can be rebuilt
- Sync the copy of the portable specfile with the latest update
- Related: RHEL-45355
- Resolves: RHEL-46029</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.4.0.5-0.1.ea" date="1719403200">- Update to jdk-21.0.4+5 (EA)
- Update release notes to 21.0.4+5
- Limit Java only tests to one architecture using jdk_test_arch
- Actually require tzdata 2024a now it is available in the buildroot
- Resolves: RHEL-45355
- Resolves: RHEL-47395</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.4.0.7-1" date="1720785600">- Update to jdk-21.0.4+7 (GA)
- Update release notes to 21.0.4+7
- Switch to GA mode.
- Sync the copy of the portable specfile with the latest update
- Add missing section headers in NEWS
- ** This tarball is embargoed until 2024-07-16 @ 1pm PT. **
- Resolves: RHEL-47023</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.4.0.7-2" date="1728302400">- Vary portablesuffix depending on whether we are on RHEL ('el8') or CentOS ('el9')
- Handle debugedit being a separate package installed in /usr on RHEL/CentOS 10
- Add build scripts to repository to ease remembering all CentOS &amp; RHEL targets and options
- Related: RHEL-58797</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.5.0.9-0.2.ea" date="1728648000">- Update to jdk-21.0.5+9 (EA)
- Update release notes to 21.0.5+9
- Switch to EA mode
- Bump giflib version to 5.2.2 following JDK-8328999
- Bump libpng version to 1.6.43 following JDK-8329004
- Sync with RHEL 7 portable build:
  - Use ExclusiveArch over ExcludeArch
  - pkgos definition needs to be early enough to be used in portablesuffix
- Make build scripts executable
- Sync the copy of the portable specfile with the latest update
- Resolves: RHEL-58797
- Resolves: RHEL-17191</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.5.0.10-2" date="1728734400">- Update to jdk-21.0.5+10 (GA)
- Update release notes to 21.0.5+10
- Switch to GA mode.
- Revert JDK-8327501 &amp; JDK-8328366 backport until more mature.
- ** This tarball is embargoed until 2024-10-15 @ 1pm PT. **
- Resolves: RHEL-61344</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.5.0.10-3" date="1728820800">- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2024-10-15 @ 1pm PT. **
- Related: RHEL-61344</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.5.0.11-2" date="1729080000">- Update to jdk-21.0.5+11 (GA)
- Update release notes to 21.0.5+11
- Remove local JDK-8327501 &amp; JDK-8328366 backport as this is now upstream.
- Sync the copy of the portable specfile with the latest update
- Related: RHEL-61344</changelog>
  <changelog author="Linux Engineering Team &lt;dl_le@navercorp.com&gt; - 21.0.5.0.11-2" date="1732190400">- Build for Navix 9 using our own portable
- Ensure debugedit is found regardless of major</changelog>
</package>
<package pkgid="8d1d5bf4b90464d6d77f50f9f02dbd77f433f659132cc59ffba83ec2ef30f845" name="javapackages-tools" arch="src">
  <version epoch="0" ver="6.0.0" rel="7.el9_5"/>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 6.0.0-4" date="1674648000">- Add generated Requires on multiple versions of java-headless
- Related: rhbz#2164437</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 6.0.0-5" date="1729512000">- Make OpenJDK 17 the default JRE/JDK
- Related: RHEL-62403</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 6.0.0-5" date="1729512001">- Include java-21-headless in generated auto-requires
- Related: RHEL-62409</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 6.0.0-6" date="1730721600">- Drop generated Requires on various Java versions
- Related: RHEL-62409</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 6.0.0-7" date="1731931200">- Use Java 11 build tool bindings for package builds</changelog>
</package>
<package pkgid="178dec7a7c01afdae16b69f7a7acde439db539b8e563fefeca7c7d1224be9575" name="junit5" arch="src">
  <version epoch="0" ver="5.7.1" rel="6.el9_5"/>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 5.7.1-6" date="1732104000">- Rebuild with regenerated Requires on Java</changelog>
</package>
<package pkgid="480d7b48ff09e5c46aed1c5481ee90e19f287168579ea776c375c73697016b1b" name="keepalived" arch="src">
  <version epoch="0" ver="2.2.8" rel="4.el9_5"/>
  <changelog author="Ryan O'Hara &lt;rohara@redhat.com&gt; - 2.2.4-3" date="1671710400">- Enable JSON support (#2129819)</changelog>
  <changelog author="Ryan O'Hara &lt;rohara@redhat.com&gt; - 2.2.4-4" date="1671710401">- Fix variable substitution in consditional lines (#2101493)</changelog>
  <changelog author="Ryan O'Hara &lt;rohara@redhat.com&gt; - 2.2.4-5" date="1671710402">- Fix memory leak in https checks (#2134749)</changelog>
  <changelog author="Ryan O'Hara &lt;rohara@redhat.com&gt; - 2.2.4-6" date="1671796800">- Fix unterminated endif in previous patch (#2134749)</changelog>
  <changelog author="Ryan O'Hara &lt;rohara@redhat.com&gt; - 2.2.8-1" date="1686830400">- Update to 2.2.8 (#2215308)</changelog>
  <changelog author="Ryan O'Hara &lt;rohara@redhat.com&gt; - 2.2.8-2" date="1688126400">- Fix keepalived.conf installation (#2215308)</changelog>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; - 2.2.8-3" date="1734091200">- Validate vrrp ipset names for CVE-2024-41184
  Resolves: RHEL-49557</changelog>
</package>
<package pkgid="39b935c9867e1e2ef39299ae0bb09a664f7428a03fe36f3ead63870f573f4162" name="kernel" arch="src">
  <version epoch="0" ver="5.14.0" rel="503.14.1.el9_5"/>
  <changelog author="Lucas Zampieri &lt;lzampier@redhat.com&gt; [5.14.0-503.6.1.el9_5]" date="1726747200">- scsi: smartpqi: Bump driver version to 2.1.26-030 (Don Brace) [RHEL-21268]
- scsi: smartpqi: Fix logical volume rescan race condition (Don Brace) [RHEL-21268]
- scsi: smartpqi: Add new controller PCI IDs (Don Brace) [RHEL-21268]
- gfs2: Fix NULL pointer dereference in gfs2_log_flush (Andrew Price) [RHEL-51559] {CVE-2024-42079}
- x86/mm: Fix pti_clone_pgtable() alignment assumption (Rafael Aquini) [RHEL-57170] {CVE-2024-44965}
- bnxt_en: Adjust logging of firmware messages in case of released token in __hwrm_send() (CKI Backport Bot) [RHEL-47822] {CVE-2024-40919}</changelog>
  <changelog author="Lucas Zampieri &lt;lzampier@redhat.com&gt; [5.14.0-503.7.1.el9_5]" date="1726833600">- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he() (Jose Ignacio Tornos Martinez) [RHEL-55579] {CVE-2024-43879}
- wifi: mac80211: fix NULL dereference at band check in starting tx ba session (Jose Ignacio Tornos Martinez) [RHEL-56191] {CVE-2024-43911}
- wifi: rtw89: Fix array index mistake in rtw89_sta_info_get_iter() (Jose Ignacio Tornos Martinez) [RHEL-54805] {CVE-2024-43842}</changelog>
  <changelog author="Lucas Zampieri &lt;lzampier@redhat.com&gt; [5.14.0-503.8.1.el9_5]" date="1727092800">- ionic: fix kernel panic in XDP_TX action (CKI Backport Bot) [RHEL-47730] {CVE-2024-40907}
- r8169: Fix possible ring buffer corruption on fragmented Tx packets. (Izabela Bakollari) [RHEL-44037] {CVE-2024-38586}
- ata: libata-core: Fix double free on error (Tomas Henzl) [RHEL-53777]
- ata: libata: Fix memory leak for error path in ata_host_alloc() (Tomas Henzl) [RHEL-53777]
- ata: ahci: Clean up sysfs file on error (Tomas Henzl) [RHEL-53777]
- ata: libata-core: Fix null pointer dereference on error (Tomas Henzl) [RHEL-53777]
- ata: libata-core: Add ATA_HORKAGE_NOLPM for all Crucial BX SSD1 models (Tomas Henzl) [RHEL-53777]
- ata: ahci: Do not enable LPM if no LPM states are supported by the HBA (Tomas Henzl) [RHEL-53777]
- ata: libata-scsi: Set the RMB bit only for removable media devices (Tomas Henzl) [RHEL-53777]
- ata: libata-core: Do not try to set sleeping devices to standby (Tomas Henzl) [RHEL-53777]
- KVM: s390: fix validity interception issue when gisa is switched off (CKI Backport Bot) [RHEL-57197] {CVE-2024-45005}</changelog>
  <changelog author="Lucas Zampieri &lt;lzampier@redhat.com&gt; [5.14.0-503.9.1.el9_5]" date="1727352000">- tipc: Return non-zero value from tipc_udp_addr2str() on error (Xin Long) [RHEL-55074] {CVE-2024-42284}
- net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (Michal Schmidt) [RHEL-57119] {CVE-2024-44970}
- net/mlx5e: Fix CT entry update leaks of modify header context (Michal Schmidt) [RHEL-55628] {CVE-2024-43864}
- net/mlx5: Always drain health in shutdown callback (Michal Schmidt) [RHEL-55616] {CVE-2024-43866}
- net/mlx5: SF, Stop waiting for FW as teardown was called (Michal Schmidt) [RHEL-55616]
- net/mlx5: Fix missing lock on sync reset reload (Michal Schmidt) [RHEL-55121] {CVE-2024-42268}</changelog>
  <changelog author="Lucas Zampieri &lt;lzampier@redhat.com&gt; [5.14.0-503.10.1.el9_5]" date="1727438400">- intel_th: pci: Add Granite Rapids SOC support (Michael Petlan) [RHEL-15664]
- dma: fix call order in dmam_free_coherent (Eder Zulian) [RHEL-54751] {CVE-2024-43856}
- dmaengine: idxd: Avoid unnecessary destruction of file_ida (Jerry Snitselaar) [RHEL-44508] {CVE-2024-38629}</changelog>
  <changelog author="Lucas Zampieri &lt;lzampier@redhat.com&gt; [5.14.0-503.11.1.el9_5]" date="1727697600">- memcg: protect concurrent access to mem_cgroup_idr (Rafael Aquini) [RHEL-56254] {CVE-2024-43892}
- bnxt_en: Fix double DMA unmapping for XDP_REDIRECT (Michal Schmidt) [RHEL-57259] {CVE-2024-44984}</changelog>
  <changelog author="Lucas Zampieri &lt;lzampier@redhat.com&gt; [5.14.0-503.12.1.el9_5]" date="1729771200">- net: nexthop: Initialize all fields in dumped nexthops (Antoine Tenart) [RHEL-55080] {CVE-2024-42283}
- tracing/osnoise: Fix build when timerlat is not enabled (Tomas Glozar) [RHEL-61870 RHEL-39968]
- tracing/timerlat: Add interface_lock around clearing of kthread in stop_kthread() (Tomas Glozar) [RHEL-61870 RHEL-39968]
- tracing/timerlat: Only clear timer if a kthread exists (Tomas Glozar) [RHEL-61870 RHEL-39968]
- tracing/osnoise: Use a cpumask to know what threads are kthreads (Tomas Glozar) [RHEL-61870 RHEL-39968]
- iommufd: Require drivers to supply the cache_invalidate_user ops (CKI Backport Bot) [RHEL-60681 RHEL-60761] {CVE-2024-46824}
- Revert "fw loader: Remove the now superfluous sentinel element from ctl_table array" (Eric Chanudet) [RHEL-62925 RHEL-50129]
- smb: client: fix hang in wait_for_response() for negproto (Jay Shin) [RHEL-61607 RHEL-57983]</changelog>
  <changelog author="Lucas Zampieri &lt;lzampier@redhat.com&gt; [5.14.0-503.13.1.el9_5]" date="1730462400">- efi: libstub: Move screen_info handling to common code (Maxim Levitsky) [RHEL-65344]
- mpls: Reduce skb re-allocations due to skb_cow() (Guillaume Nault) [RHEL-61697]
- mptcp: pm: Fix uaf in __timer_delete_sync (CKI Backport Bot) [RHEL-64678 RHEL-60737] {CVE-2024-46858}
- ceph: fix cap ref leak via netfs init_request (Patrick Donnelly) [RHEL-62667 RHEL-61459]
- gitlab-ci: provide consistent kcidb_tree_name (Michael Hofmann)</changelog>
  <changelog author="Lucas Zampieri &lt;lzampier@redhat.com&gt; [5.14.0-503.14.1.el9_5]" date="1730980800">- ext4: fix off by one issue in alloc_flex_gd() (Pavel Reichl) [RHEL-65318]
- ping: fix address binding wrt vrf (Antoine Tenart) [RHEL-57564 RHEL-50920]
- smb: client: stop flooding dmesg in smb2_calc_signature() (Paulo Alcantara) [RHEL-36346 RHEL-61193]
- smb: client: print failed session logoffs with FYI (Paulo Alcantara) [RHEL-36346 RHEL-61193]
- smb: client: propagate error from cifs_construct_tcon() (Paulo Alcantara) [RHEL-36346 RHEL-61193]
- smb: client: fix DFS failover in multiuser mounts (Paulo Alcantara) [RHEL-36346 RHEL-61193]
- smb: client: fix DFS interlink failover (Paulo Alcantara) [RHEL-36346 RHEL-61193]
- smb: client: improve purging of cached referrals (Paulo Alcantara) [RHEL-36346 RHEL-61193]
- smb: client: avoid unnecessary reconnects when refreshing referrals (Paulo Alcantara) [RHEL-36346 RHEL-61193]
- smb: client: handle lack of FSCTL_GET_REPARSE_POINT support (Paulo Alcantara) [RHEL-36346 RHEL-57983]
- smb: client: fix deadlock in smb2_find_smb_tcon() (Paulo Alcantara) [RHEL-36346 RHEL-57983]
- cifs: Fix reacquisition of volume cookie on still-live connection (Paulo Alcantara) [RHEL-36346 RHEL-57983]</changelog>
  <changelog author="Songhee Yeon &lt;dl_le@navercorp.com&gt; [5.14.0-503.14.1.el9_5]" date="1732536000">- kernel/rh_shadowman: add navix logo
- add Navix certificates</changelog>
</package>
<package pkgid="44db11425420027e0e67ea93675741fddcaaf04210847de0dd529af425943c08" name="kernel" arch="src">
  <version epoch="0" ver="5.14.0" rel="503.15.1.el9_5"/>
  <changelog author="Lucas Zampieri &lt;lzampier@redhat.com&gt; [5.14.0-503.7.1.el9_5]" date="1726833600">- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he() (Jose Ignacio Tornos Martinez) [RHEL-55579] {CVE-2024-43879}
- wifi: mac80211: fix NULL dereference at band check in starting tx ba session (Jose Ignacio Tornos Martinez) [RHEL-56191] {CVE-2024-43911}
- wifi: rtw89: Fix array index mistake in rtw89_sta_info_get_iter() (Jose Ignacio Tornos Martinez) [RHEL-54805] {CVE-2024-43842}</changelog>
  <changelog author="Lucas Zampieri &lt;lzampier@redhat.com&gt; [5.14.0-503.8.1.el9_5]" date="1727092800">- ionic: fix kernel panic in XDP_TX action (CKI Backport Bot) [RHEL-47730] {CVE-2024-40907}
- r8169: Fix possible ring buffer corruption on fragmented Tx packets. (Izabela Bakollari) [RHEL-44037] {CVE-2024-38586}
- ata: libata-core: Fix double free on error (Tomas Henzl) [RHEL-53777]
- ata: libata: Fix memory leak for error path in ata_host_alloc() (Tomas Henzl) [RHEL-53777]
- ata: ahci: Clean up sysfs file on error (Tomas Henzl) [RHEL-53777]
- ata: libata-core: Fix null pointer dereference on error (Tomas Henzl) [RHEL-53777]
- ata: libata-core: Add ATA_HORKAGE_NOLPM for all Crucial BX SSD1 models (Tomas Henzl) [RHEL-53777]
- ata: ahci: Do not enable LPM if no LPM states are supported by the HBA (Tomas Henzl) [RHEL-53777]
- ata: libata-scsi: Set the RMB bit only for removable media devices (Tomas Henzl) [RHEL-53777]
- ata: libata-core: Do not try to set sleeping devices to standby (Tomas Henzl) [RHEL-53777]
- KVM: s390: fix validity interception issue when gisa is switched off (CKI Backport Bot) [RHEL-57197] {CVE-2024-45005}</changelog>
  <changelog author="Lucas Zampieri &lt;lzampier@redhat.com&gt; [5.14.0-503.9.1.el9_5]" date="1727352000">- tipc: Return non-zero value from tipc_udp_addr2str() on error (Xin Long) [RHEL-55074] {CVE-2024-42284}
- net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (Michal Schmidt) [RHEL-57119] {CVE-2024-44970}
- net/mlx5e: Fix CT entry update leaks of modify header context (Michal Schmidt) [RHEL-55628] {CVE-2024-43864}
- net/mlx5: Always drain health in shutdown callback (Michal Schmidt) [RHEL-55616] {CVE-2024-43866}
- net/mlx5: SF, Stop waiting for FW as teardown was called (Michal Schmidt) [RHEL-55616]
- net/mlx5: Fix missing lock on sync reset reload (Michal Schmidt) [RHEL-55121] {CVE-2024-42268}</changelog>
  <changelog author="Lucas Zampieri &lt;lzampier@redhat.com&gt; [5.14.0-503.10.1.el9_5]" date="1727438400">- intel_th: pci: Add Granite Rapids SOC support (Michael Petlan) [RHEL-15664]
- dma: fix call order in dmam_free_coherent (Eder Zulian) [RHEL-54751] {CVE-2024-43856}
- dmaengine: idxd: Avoid unnecessary destruction of file_ida (Jerry Snitselaar) [RHEL-44508] {CVE-2024-38629}</changelog>
  <changelog author="Lucas Zampieri &lt;lzampier@redhat.com&gt; [5.14.0-503.11.1.el9_5]" date="1727697600">- memcg: protect concurrent access to mem_cgroup_idr (Rafael Aquini) [RHEL-56254] {CVE-2024-43892}
- bnxt_en: Fix double DMA unmapping for XDP_REDIRECT (Michal Schmidt) [RHEL-57259] {CVE-2024-44984}</changelog>
  <changelog author="Lucas Zampieri &lt;lzampier@redhat.com&gt; [5.14.0-503.12.1.el9_5]" date="1729771200">- net: nexthop: Initialize all fields in dumped nexthops (Antoine Tenart) [RHEL-55080] {CVE-2024-42283}
- tracing/osnoise: Fix build when timerlat is not enabled (Tomas Glozar) [RHEL-61870 RHEL-39968]
- tracing/timerlat: Add interface_lock around clearing of kthread in stop_kthread() (Tomas Glozar) [RHEL-61870 RHEL-39968]
- tracing/timerlat: Only clear timer if a kthread exists (Tomas Glozar) [RHEL-61870 RHEL-39968]
- tracing/osnoise: Use a cpumask to know what threads are kthreads (Tomas Glozar) [RHEL-61870 RHEL-39968]
- iommufd: Require drivers to supply the cache_invalidate_user ops (CKI Backport Bot) [RHEL-60681 RHEL-60761] {CVE-2024-46824}
- Revert "fw loader: Remove the now superfluous sentinel element from ctl_table array" (Eric Chanudet) [RHEL-62925 RHEL-50129]
- smb: client: fix hang in wait_for_response() for negproto (Jay Shin) [RHEL-61607 RHEL-57983]</changelog>
  <changelog author="Lucas Zampieri &lt;lzampier@redhat.com&gt; [5.14.0-503.13.1.el9_5]" date="1730462400">- efi: libstub: Move screen_info handling to common code (Maxim Levitsky) [RHEL-65344]
- mpls: Reduce skb re-allocations due to skb_cow() (Guillaume Nault) [RHEL-61697]
- mptcp: pm: Fix uaf in __timer_delete_sync (CKI Backport Bot) [RHEL-64678 RHEL-60737] {CVE-2024-46858}
- ceph: fix cap ref leak via netfs init_request (Patrick Donnelly) [RHEL-62667 RHEL-61459]
- gitlab-ci: provide consistent kcidb_tree_name (Michael Hofmann)</changelog>
  <changelog author="Lucas Zampieri &lt;lzampier@redhat.com&gt; [5.14.0-503.14.1.el9_5]" date="1730980800">- ext4: fix off by one issue in alloc_flex_gd() (Pavel Reichl) [RHEL-65318]
- ping: fix address binding wrt vrf (Antoine Tenart) [RHEL-57564 RHEL-50920]
- smb: client: stop flooding dmesg in smb2_calc_signature() (Paulo Alcantara) [RHEL-36346 RHEL-61193]
- smb: client: print failed session logoffs with FYI (Paulo Alcantara) [RHEL-36346 RHEL-61193]
- smb: client: propagate error from cifs_construct_tcon() (Paulo Alcantara) [RHEL-36346 RHEL-61193]
- smb: client: fix DFS failover in multiuser mounts (Paulo Alcantara) [RHEL-36346 RHEL-61193]
- smb: client: fix DFS interlink failover (Paulo Alcantara) [RHEL-36346 RHEL-61193]
- smb: client: improve purging of cached referrals (Paulo Alcantara) [RHEL-36346 RHEL-61193]
- smb: client: avoid unnecessary reconnects when refreshing referrals (Paulo Alcantara) [RHEL-36346 RHEL-61193]
- smb: client: handle lack of FSCTL_GET_REPARSE_POINT support (Paulo Alcantara) [RHEL-36346 RHEL-57983]
- smb: client: fix deadlock in smb2_find_smb_tcon() (Paulo Alcantara) [RHEL-36346 RHEL-57983]
- cifs: Fix reacquisition of volume cookie on still-live connection (Paulo Alcantara) [RHEL-36346 RHEL-57983]</changelog>
  <changelog author="Lucas Zampieri &lt;lzampier@redhat.com&gt; [5.14.0-503.15.1.el9_5]" date="1731585600">- USB: serial: mos7840: fix crash on resume (Desnes Nunes) [RHEL-65484 RHEL-59050] {CVE-2024-42244}
- attr: block mode changes of symlinks (CKI Backport Bot) [RHEL-61231 RHEL-60822]
- ice: Adjust PTP init for 2x50G E825C devices (Petr Oros) [RHEL-64017 RHEL-29210]
- ice: Add NAC Topology device capability parser (Petr Oros) [RHEL-64017 RHEL-29210]
- ice: Add support for E825-C TS PLL handling (Petr Oros) [RHEL-64017 RHEL-29210]
- ice: Change CGU regs struct to anonymous (Petr Oros) [RHEL-64017 RHEL-29210]
- ice: Introduce ETH56G PHY model for E825C products (Petr Oros) [RHEL-64017 RHEL-29210]
- ice: Introduce ice_get_base_incval() helper (Petr Oros) [RHEL-64017 RHEL-29210]
- ice: Move CGU block (Petr Oros) [RHEL-64017 RHEL-29210]
- ice: Add PHY OFFSET_READY register clearing (Petr Oros) [RHEL-64017 RHEL-29210]
- ice: Implement Tx interrupt enablement functions (Petr Oros) [RHEL-64017 RHEL-29210]
- ice: Introduce helper to get tmr_cmd_reg values (Petr Oros) [RHEL-64017 RHEL-29210]
- ice: Introduce ice_ptp_hw struct (Petr Oros) [RHEL-64017 RHEL-29210]
- wifi: rtw89: limit the PPDU length for VHT rate to 0x40000 (Narpat Mali) [RHEL-61753 RHEL-35542]
- wifi: rtw89: 885xbx: apply common settings to 8851B, 8852B and 8852BT (Narpat Mali) [RHEL-61753 RHEL-35542]
- wifi: rtw89: 8852b: fix definition of KIP register number (Narpat Mali) [RHEL-61753 RHEL-35542]
- wifi: rtw89: 8852b: set AMSDU limit to 5000 (Narpat Mali) [RHEL-61753 RHEL-35542]
- bpf: Fix overrunning reservations in ringbuf (CKI Backport Bot) [RHEL-62940] {CVE-2024-41009}
- net: tcp: accept old ack during closing (Jamie Bainbridge) [RHEL-61424 RHEL-60572]
- cxl/port: Fix use-after-free, permit out-of-order decoder shutdown (CKI Backport Bot) [RHEL-66837] {CVE-2024-50226}
- ethtool: check device is present when getting link settings (Michal Schmidt) [RHEL-60581 RHEL-57750]
- iommu/amd: Fix argument order in amd_iommu_dev_flush_pasid_all() (CKI Backport Bot) [RHEL-59982 RHEL-59981]</changelog>
  <changelog author="Songhee Yeon &lt;dl_le@navercorp.com&gt; [5.14.0-503.15.1.el9_5]" date="1732708800">- kernel/rh_shadowman: add navix logo
- add Navix certificates</changelog>
</package>
<package pkgid="dff72058ba56ff69e203936151976cebca50b82e1a8fac7e1e8fdbc38dcf3466" name="kernel" arch="src">
  <version epoch="0" ver="5.14.0" rel="503.16.1.el9_5"/>
  <changelog author="Lucas Zampieri &lt;lzampier@redhat.com&gt; [5.14.0-503.8.1.el9_5]" date="1727092800">- ionic: fix kernel panic in XDP_TX action (CKI Backport Bot) [RHEL-47730] {CVE-2024-40907}
- r8169: Fix possible ring buffer corruption on fragmented Tx packets. (Izabela Bakollari) [RHEL-44037] {CVE-2024-38586}
- ata: libata-core: Fix double free on error (Tomas Henzl) [RHEL-53777]
- ata: libata: Fix memory leak for error path in ata_host_alloc() (Tomas Henzl) [RHEL-53777]
- ata: ahci: Clean up sysfs file on error (Tomas Henzl) [RHEL-53777]
- ata: libata-core: Fix null pointer dereference on error (Tomas Henzl) [RHEL-53777]
- ata: libata-core: Add ATA_HORKAGE_NOLPM for all Crucial BX SSD1 models (Tomas Henzl) [RHEL-53777]
- ata: ahci: Do not enable LPM if no LPM states are supported by the HBA (Tomas Henzl) [RHEL-53777]
- ata: libata-scsi: Set the RMB bit only for removable media devices (Tomas Henzl) [RHEL-53777]
- ata: libata-core: Do not try to set sleeping devices to standby (Tomas Henzl) [RHEL-53777]
- KVM: s390: fix validity interception issue when gisa is switched off (CKI Backport Bot) [RHEL-57197] {CVE-2024-45005}</changelog>
  <changelog author="Lucas Zampieri &lt;lzampier@redhat.com&gt; [5.14.0-503.9.1.el9_5]" date="1727352000">- tipc: Return non-zero value from tipc_udp_addr2str() on error (Xin Long) [RHEL-55074] {CVE-2024-42284}
- net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (Michal Schmidt) [RHEL-57119] {CVE-2024-44970}
- net/mlx5e: Fix CT entry update leaks of modify header context (Michal Schmidt) [RHEL-55628] {CVE-2024-43864}
- net/mlx5: Always drain health in shutdown callback (Michal Schmidt) [RHEL-55616] {CVE-2024-43866}
- net/mlx5: SF, Stop waiting for FW as teardown was called (Michal Schmidt) [RHEL-55616]
- net/mlx5: Fix missing lock on sync reset reload (Michal Schmidt) [RHEL-55121] {CVE-2024-42268}</changelog>
  <changelog author="Lucas Zampieri &lt;lzampier@redhat.com&gt; [5.14.0-503.10.1.el9_5]" date="1727438400">- intel_th: pci: Add Granite Rapids SOC support (Michael Petlan) [RHEL-15664]
- dma: fix call order in dmam_free_coherent (Eder Zulian) [RHEL-54751] {CVE-2024-43856}
- dmaengine: idxd: Avoid unnecessary destruction of file_ida (Jerry Snitselaar) [RHEL-44508] {CVE-2024-38629}</changelog>
  <changelog author="Lucas Zampieri &lt;lzampier@redhat.com&gt; [5.14.0-503.11.1.el9_5]" date="1727697600">- memcg: protect concurrent access to mem_cgroup_idr (Rafael Aquini) [RHEL-56254] {CVE-2024-43892}
- bnxt_en: Fix double DMA unmapping for XDP_REDIRECT (Michal Schmidt) [RHEL-57259] {CVE-2024-44984}</changelog>
  <changelog author="Lucas Zampieri &lt;lzampier@redhat.com&gt; [5.14.0-503.12.1.el9_5]" date="1729771200">- net: nexthop: Initialize all fields in dumped nexthops (Antoine Tenart) [RHEL-55080] {CVE-2024-42283}
- tracing/osnoise: Fix build when timerlat is not enabled (Tomas Glozar) [RHEL-61870 RHEL-39968]
- tracing/timerlat: Add interface_lock around clearing of kthread in stop_kthread() (Tomas Glozar) [RHEL-61870 RHEL-39968]
- tracing/timerlat: Only clear timer if a kthread exists (Tomas Glozar) [RHEL-61870 RHEL-39968]
- tracing/osnoise: Use a cpumask to know what threads are kthreads (Tomas Glozar) [RHEL-61870 RHEL-39968]
- iommufd: Require drivers to supply the cache_invalidate_user ops (CKI Backport Bot) [RHEL-60681 RHEL-60761] {CVE-2024-46824}
- Revert "fw loader: Remove the now superfluous sentinel element from ctl_table array" (Eric Chanudet) [RHEL-62925 RHEL-50129]
- smb: client: fix hang in wait_for_response() for negproto (Jay Shin) [RHEL-61607 RHEL-57983]</changelog>
  <changelog author="Lucas Zampieri &lt;lzampier@redhat.com&gt; [5.14.0-503.13.1.el9_5]" date="1730462400">- efi: libstub: Move screen_info handling to common code (Maxim Levitsky) [RHEL-65344]
- mpls: Reduce skb re-allocations due to skb_cow() (Guillaume Nault) [RHEL-61697]
- mptcp: pm: Fix uaf in __timer_delete_sync (CKI Backport Bot) [RHEL-64678 RHEL-60737] {CVE-2024-46858}
- ceph: fix cap ref leak via netfs init_request (Patrick Donnelly) [RHEL-62667 RHEL-61459]
- gitlab-ci: provide consistent kcidb_tree_name (Michael Hofmann)</changelog>
  <changelog author="Lucas Zampieri &lt;lzampier@redhat.com&gt; [5.14.0-503.14.1.el9_5]" date="1730980800">- ext4: fix off by one issue in alloc_flex_gd() (Pavel Reichl) [RHEL-65318]
- ping: fix address binding wrt vrf (Antoine Tenart) [RHEL-57564 RHEL-50920]
- smb: client: stop flooding dmesg in smb2_calc_signature() (Paulo Alcantara) [RHEL-36346 RHEL-61193]
- smb: client: print failed session logoffs with FYI (Paulo Alcantara) [RHEL-36346 RHEL-61193]
- smb: client: propagate error from cifs_construct_tcon() (Paulo Alcantara) [RHEL-36346 RHEL-61193]
- smb: client: fix DFS failover in multiuser mounts (Paulo Alcantara) [RHEL-36346 RHEL-61193]
- smb: client: fix DFS interlink failover (Paulo Alcantara) [RHEL-36346 RHEL-61193]
- smb: client: improve purging of cached referrals (Paulo Alcantara) [RHEL-36346 RHEL-61193]
- smb: client: avoid unnecessary reconnects when refreshing referrals (Paulo Alcantara) [RHEL-36346 RHEL-61193]
- smb: client: handle lack of FSCTL_GET_REPARSE_POINT support (Paulo Alcantara) [RHEL-36346 RHEL-57983]
- smb: client: fix deadlock in smb2_find_smb_tcon() (Paulo Alcantara) [RHEL-36346 RHEL-57983]
- cifs: Fix reacquisition of volume cookie on still-live connection (Paulo Alcantara) [RHEL-36346 RHEL-57983]</changelog>
  <changelog author="Lucas Zampieri &lt;lzampier@redhat.com&gt; [5.14.0-503.15.1.el9_5]" date="1731585600">- USB: serial: mos7840: fix crash on resume (Desnes Nunes) [RHEL-65484 RHEL-59050] {CVE-2024-42244}
- attr: block mode changes of symlinks (CKI Backport Bot) [RHEL-61231 RHEL-60822]
- ice: Adjust PTP init for 2x50G E825C devices (Petr Oros) [RHEL-64017 RHEL-29210]
- ice: Add NAC Topology device capability parser (Petr Oros) [RHEL-64017 RHEL-29210]
- ice: Add support for E825-C TS PLL handling (Petr Oros) [RHEL-64017 RHEL-29210]
- ice: Change CGU regs struct to anonymous (Petr Oros) [RHEL-64017 RHEL-29210]
- ice: Introduce ETH56G PHY model for E825C products (Petr Oros) [RHEL-64017 RHEL-29210]
- ice: Introduce ice_get_base_incval() helper (Petr Oros) [RHEL-64017 RHEL-29210]
- ice: Move CGU block (Petr Oros) [RHEL-64017 RHEL-29210]
- ice: Add PHY OFFSET_READY register clearing (Petr Oros) [RHEL-64017 RHEL-29210]
- ice: Implement Tx interrupt enablement functions (Petr Oros) [RHEL-64017 RHEL-29210]
- ice: Introduce helper to get tmr_cmd_reg values (Petr Oros) [RHEL-64017 RHEL-29210]
- ice: Introduce ice_ptp_hw struct (Petr Oros) [RHEL-64017 RHEL-29210]
- wifi: rtw89: limit the PPDU length for VHT rate to 0x40000 (Narpat Mali) [RHEL-61753 RHEL-35542]
- wifi: rtw89: 885xbx: apply common settings to 8851B, 8852B and 8852BT (Narpat Mali) [RHEL-61753 RHEL-35542]
- wifi: rtw89: 8852b: fix definition of KIP register number (Narpat Mali) [RHEL-61753 RHEL-35542]
- wifi: rtw89: 8852b: set AMSDU limit to 5000 (Narpat Mali) [RHEL-61753 RHEL-35542]
- bpf: Fix overrunning reservations in ringbuf (CKI Backport Bot) [RHEL-62940] {CVE-2024-41009}
- net: tcp: accept old ack during closing (Jamie Bainbridge) [RHEL-61424 RHEL-60572]
- cxl/port: Fix use-after-free, permit out-of-order decoder shutdown (CKI Backport Bot) [RHEL-66837] {CVE-2024-50226}
- ethtool: check device is present when getting link settings (Michal Schmidt) [RHEL-60581 RHEL-57750]
- iommu/amd: Fix argument order in amd_iommu_dev_flush_pasid_all() (CKI Backport Bot) [RHEL-59982 RHEL-59981]</changelog>
  <changelog author="Lucas Zampieri &lt;lzampier@redhat.com&gt; [5.14.0-503.16.1.el9_5]" date="1732190400">- s390/dasd: fix error recovery leading to data corruption on ESE devices (Mete Durlu) [RHEL-64902 RHEL-55873]
- net/smc: fix illegal rmb_desc access in SMC-D connection dump (Steve Best) [RHEL-65436 RHEL-27748] {CVE-2024-26615}
- gitlab-ci: use zstream builder container image (Michael Hofmann)
- netfilter: nft_payload: sanitize offset and length before calling skb_checksum() (CKI Backport Bot) [RHEL-66856] {CVE-2024-50251}
- net: avoid potential underflow in qdisc_pkt_len_init() with UFO (CKI Backport Bot) [RHEL-65401] {CVE-2024-49949}
- block: initialize integrity buffer to zero before writing it to media (Ming Lei) [RHEL-58761 RHEL-54768] {CVE-2024-43854}
- proc: fix dentry/inode overinstantiating under /proc/${pid}/net (Joel Savitz) [RHEL-62824 RHEL-57703]
- iommu: Restore lost return in iommu_report_device_fault() (CKI Backport Bot) [RHEL-67364] {CVE-2024-44994}
- net: ena: Extend customer metrics reporting support (Kamal Heib) [RHEL-66933 RHEL-59968]
- net: ena: Add ENA Express metrics support (Kamal Heib) [RHEL-66933 RHEL-59968]
- xsk: fix batch alloc API on non-coherent systems (Felix Maurer) [RHEL-59884 RHEL-58954]
- selinux,smack: don't bypass permissions check in inode_setsecctx hook (Ondrej Mosnacek) [RHEL-66106] {CVE-2024-46695}
- PCI/AER: Disable AER service on suspend (Lenny Szubowicz) [RHEL-67037 RHEL-22265]
- ACPI: PM: s2idle: Evaluate all Low-Power S0 Idle _DSM functions (Mark Langsdorf) [RHEL-67037 RHEL-54149]
- mptcp: fallback when MPTCP opts are dropped after 1st data (CKI Backport Bot) [RHEL-62216 RHEL-62218]
- cpufreq: amd-pstate: add check for cpufreq_cpu_get's return value (David Arcari) [RHEL-61469 RHEL-45016]
- cpufreq/amd-pstate: Add the missing cpufreq_cpu_put() (David Arcari) [RHEL-61469 RHEL-45016]
- cpufreq/amd-pstate: Fix the scaling_max_freq setting on shared memory CPPC systems (David Arcari) [RHEL-61469 RHEL-45016]
- cpufreq/amd-pstate-ut: Convert nominal_freq to khz during comparisons (David Arcari) [RHEL-61469 RHEL-45016]
- cpufreq/amd-pstate: fix setting policy current frequency value (David Arcari) [RHEL-61469 RHEL-45016]
- netfilter: flowtable: initialise extack before use (CKI Backport Bot) [RHEL-58545] {CVE-2024-45018}</changelog>
  <changelog author="Songhee Yeon &lt;dl_le@navercorp.com&gt; [5.14.0-503.16.1.el9_5]" date="1735214400">- kernel/rh_shadowman: add navix logo
- add Navix certificates</changelog>
</package>
<package pkgid="d709c0085992d01fd8bb49364f059c57ee7d2775726c6ac98ea18d040cccf270" name="kernel" arch="src">
  <version epoch="0" ver="5.14.0" rel="503.19.1.el9_5"/>
  <changelog author="Lucas Zampieri &lt;lzampier@redhat.com&gt; [5.14.0-503.11.1.el9_5]" date="1727697600">- memcg: protect concurrent access to mem_cgroup_idr (Rafael Aquini) [RHEL-56254] {CVE-2024-43892}
- bnxt_en: Fix double DMA unmapping for XDP_REDIRECT (Michal Schmidt) [RHEL-57259] {CVE-2024-44984}</changelog>
  <changelog author="Lucas Zampieri &lt;lzampier@redhat.com&gt; [5.14.0-503.12.1.el9_5]" date="1729771200">- net: nexthop: Initialize all fields in dumped nexthops (Antoine Tenart) [RHEL-55080] {CVE-2024-42283}
- tracing/osnoise: Fix build when timerlat is not enabled (Tomas Glozar) [RHEL-61870 RHEL-39968]
- tracing/timerlat: Add interface_lock around clearing of kthread in stop_kthread() (Tomas Glozar) [RHEL-61870 RHEL-39968]
- tracing/timerlat: Only clear timer if a kthread exists (Tomas Glozar) [RHEL-61870 RHEL-39968]
- tracing/osnoise: Use a cpumask to know what threads are kthreads (Tomas Glozar) [RHEL-61870 RHEL-39968]
- iommufd: Require drivers to supply the cache_invalidate_user ops (CKI Backport Bot) [RHEL-60681 RHEL-60761] {CVE-2024-46824}
- Revert "fw loader: Remove the now superfluous sentinel element from ctl_table array" (Eric Chanudet) [RHEL-62925 RHEL-50129]
- smb: client: fix hang in wait_for_response() for negproto (Jay Shin) [RHEL-61607 RHEL-57983]</changelog>
  <changelog author="Lucas Zampieri &lt;lzampier@redhat.com&gt; [5.14.0-503.13.1.el9_5]" date="1730462400">- efi: libstub: Move screen_info handling to common code (Maxim Levitsky) [RHEL-65344]
- mpls: Reduce skb re-allocations due to skb_cow() (Guillaume Nault) [RHEL-61697]
- mptcp: pm: Fix uaf in __timer_delete_sync (CKI Backport Bot) [RHEL-64678 RHEL-60737] {CVE-2024-46858}
- ceph: fix cap ref leak via netfs init_request (Patrick Donnelly) [RHEL-62667 RHEL-61459]
- gitlab-ci: provide consistent kcidb_tree_name (Michael Hofmann)</changelog>
  <changelog author="Lucas Zampieri &lt;lzampier@redhat.com&gt; [5.14.0-503.14.1.el9_5]" date="1730980800">- ext4: fix off by one issue in alloc_flex_gd() (Pavel Reichl) [RHEL-65318]
- ping: fix address binding wrt vrf (Antoine Tenart) [RHEL-57564 RHEL-50920]
- smb: client: stop flooding dmesg in smb2_calc_signature() (Paulo Alcantara) [RHEL-36346 RHEL-61193]
- smb: client: print failed session logoffs with FYI (Paulo Alcantara) [RHEL-36346 RHEL-61193]
- smb: client: propagate error from cifs_construct_tcon() (Paulo Alcantara) [RHEL-36346 RHEL-61193]
- smb: client: fix DFS failover in multiuser mounts (Paulo Alcantara) [RHEL-36346 RHEL-61193]
- smb: client: fix DFS interlink failover (Paulo Alcantara) [RHEL-36346 RHEL-61193]
- smb: client: improve purging of cached referrals (Paulo Alcantara) [RHEL-36346 RHEL-61193]
- smb: client: avoid unnecessary reconnects when refreshing referrals (Paulo Alcantara) [RHEL-36346 RHEL-61193]
- smb: client: handle lack of FSCTL_GET_REPARSE_POINT support (Paulo Alcantara) [RHEL-36346 RHEL-57983]
- smb: client: fix deadlock in smb2_find_smb_tcon() (Paulo Alcantara) [RHEL-36346 RHEL-57983]
- cifs: Fix reacquisition of volume cookie on still-live connection (Paulo Alcantara) [RHEL-36346 RHEL-57983]</changelog>
  <changelog author="Lucas Zampieri &lt;lzampier@redhat.com&gt; [5.14.0-503.15.1.el9_5]" date="1731585600">- USB: serial: mos7840: fix crash on resume (Desnes Nunes) [RHEL-65484 RHEL-59050] {CVE-2024-42244}
- attr: block mode changes of symlinks (CKI Backport Bot) [RHEL-61231 RHEL-60822]
- ice: Adjust PTP init for 2x50G E825C devices (Petr Oros) [RHEL-64017 RHEL-29210]
- ice: Add NAC Topology device capability parser (Petr Oros) [RHEL-64017 RHEL-29210]
- ice: Add support for E825-C TS PLL handling (Petr Oros) [RHEL-64017 RHEL-29210]
- ice: Change CGU regs struct to anonymous (Petr Oros) [RHEL-64017 RHEL-29210]
- ice: Introduce ETH56G PHY model for E825C products (Petr Oros) [RHEL-64017 RHEL-29210]
- ice: Introduce ice_get_base_incval() helper (Petr Oros) [RHEL-64017 RHEL-29210]
- ice: Move CGU block (Petr Oros) [RHEL-64017 RHEL-29210]
- ice: Add PHY OFFSET_READY register clearing (Petr Oros) [RHEL-64017 RHEL-29210]
- ice: Implement Tx interrupt enablement functions (Petr Oros) [RHEL-64017 RHEL-29210]
- ice: Introduce helper to get tmr_cmd_reg values (Petr Oros) [RHEL-64017 RHEL-29210]
- ice: Introduce ice_ptp_hw struct (Petr Oros) [RHEL-64017 RHEL-29210]
- wifi: rtw89: limit the PPDU length for VHT rate to 0x40000 (Narpat Mali) [RHEL-61753 RHEL-35542]
- wifi: rtw89: 885xbx: apply common settings to 8851B, 8852B and 8852BT (Narpat Mali) [RHEL-61753 RHEL-35542]
- wifi: rtw89: 8852b: fix definition of KIP register number (Narpat Mali) [RHEL-61753 RHEL-35542]
- wifi: rtw89: 8852b: set AMSDU limit to 5000 (Narpat Mali) [RHEL-61753 RHEL-35542]
- bpf: Fix overrunning reservations in ringbuf (CKI Backport Bot) [RHEL-62940] {CVE-2024-41009}
- net: tcp: accept old ack during closing (Jamie Bainbridge) [RHEL-61424 RHEL-60572]
- cxl/port: Fix use-after-free, permit out-of-order decoder shutdown (CKI Backport Bot) [RHEL-66837] {CVE-2024-50226}
- ethtool: check device is present when getting link settings (Michal Schmidt) [RHEL-60581 RHEL-57750]
- iommu/amd: Fix argument order in amd_iommu_dev_flush_pasid_all() (CKI Backport Bot) [RHEL-59982 RHEL-59981]</changelog>
  <changelog author="Lucas Zampieri &lt;lzampier@redhat.com&gt; [5.14.0-503.16.1.el9_5]" date="1732190400">- s390/dasd: fix error recovery leading to data corruption on ESE devices (Mete Durlu) [RHEL-64902 RHEL-55873]
- net/smc: fix illegal rmb_desc access in SMC-D connection dump (Steve Best) [RHEL-65436 RHEL-27748] {CVE-2024-26615}
- gitlab-ci: use zstream builder container image (Michael Hofmann)
- netfilter: nft_payload: sanitize offset and length before calling skb_checksum() (CKI Backport Bot) [RHEL-66856] {CVE-2024-50251}
- net: avoid potential underflow in qdisc_pkt_len_init() with UFO (CKI Backport Bot) [RHEL-65401] {CVE-2024-49949}
- block: initialize integrity buffer to zero before writing it to media (Ming Lei) [RHEL-58761 RHEL-54768] {CVE-2024-43854}
- proc: fix dentry/inode overinstantiating under /proc/${pid}/net (Joel Savitz) [RHEL-62824 RHEL-57703]
- iommu: Restore lost return in iommu_report_device_fault() (CKI Backport Bot) [RHEL-67364] {CVE-2024-44994}
- net: ena: Extend customer metrics reporting support (Kamal Heib) [RHEL-66933 RHEL-59968]
- net: ena: Add ENA Express metrics support (Kamal Heib) [RHEL-66933 RHEL-59968]
- xsk: fix batch alloc API on non-coherent systems (Felix Maurer) [RHEL-59884 RHEL-58954]
- selinux,smack: don't bypass permissions check in inode_setsecctx hook (Ondrej Mosnacek) [RHEL-66106] {CVE-2024-46695}
- PCI/AER: Disable AER service on suspend (Lenny Szubowicz) [RHEL-67037 RHEL-22265]
- ACPI: PM: s2idle: Evaluate all Low-Power S0 Idle _DSM functions (Mark Langsdorf) [RHEL-67037 RHEL-54149]
- mptcp: fallback when MPTCP opts are dropped after 1st data (CKI Backport Bot) [RHEL-62216 RHEL-62218]
- cpufreq: amd-pstate: add check for cpufreq_cpu_get's return value (David Arcari) [RHEL-61469 RHEL-45016]
- cpufreq/amd-pstate: Add the missing cpufreq_cpu_put() (David Arcari) [RHEL-61469 RHEL-45016]
- cpufreq/amd-pstate: Fix the scaling_max_freq setting on shared memory CPPC systems (David Arcari) [RHEL-61469 RHEL-45016]
- cpufreq/amd-pstate-ut: Convert nominal_freq to khz during comparisons (David Arcari) [RHEL-61469 RHEL-45016]
- cpufreq/amd-pstate: fix setting policy current frequency value (David Arcari) [RHEL-61469 RHEL-45016]
- netfilter: flowtable: initialise extack before use (CKI Backport Bot) [RHEL-58545] {CVE-2024-45018}</changelog>
  <changelog author="Lucas Zampieri &lt;lzampier@redhat.com&gt; [5.14.0-503.17.1.el9_5]" date="1732795200">- arm64: probes: Remove broken LDR (literal) uprobe support (CKI Backport Bot) [RHEL-66046] {CVE-2024-50099}
- qed: put cond_resched() in qed_dmae_operation_wait() (Michal Schmidt) [RHEL-61705 RHEL-6372]
- qed: allow the callee of qed_mcp_nvm_read() to sleep (Michal Schmidt) [RHEL-61705 RHEL-6372]
- qed: put cond_resched() in qed_grc_dump_ctx_data() (Michal Schmidt) [RHEL-61705 RHEL-6372]
- qed: make 'ethtool -d' 10 times faster (Michal Schmidt) [RHEL-61705 RHEL-6372]
- qed: allow sleep in qed_mcp_trace_dump() (Michal Schmidt) [RHEL-61705 RHEL-6372]
- sched/numa: Fix the potential null pointer dereference in task_numa_work() (CKI Backport Bot) [RHEL-66810] {CVE-2024-50223}
- irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs (Charles Mirabile) [RHEL-66969] {CVE-2024-50192}
- irqchip/gic-v4: Don't allow a VMOVP on a dying VPE (Charles Mirabile) [RHEL-66969] {CVE-2024-50192}
- perf/x86/intel/uncore: Support HBM and CXL PMON counters (Michael Petlan) [RHEL-65856]
- perf/x86/uncore: Cleanup unused unit structure (Michael Petlan) [RHEL-65856]
- perf/x86/uncore: Apply the unit control RB tree to PCI uncore units (Michael Petlan) [RHEL-65856]
- perf/x86/uncore: Apply the unit control RB tree to MSR uncore units (Michael Petlan) [RHEL-65856]
- perf/x86/uncore: Apply the unit control RB tree to MMIO uncore units (Michael Petlan) [RHEL-65856]
- perf/x86/uncore: Retrieve the unit ID from the unit control RB tree (Michael Petlan) [RHEL-65856]
- perf/x86/uncore: Support per PMU cpumask (Michael Petlan) [RHEL-65856]
- perf/x86/uncore: Save the unit control address of all units (Michael Petlan) [RHEL-65856]</changelog>
  <changelog author="Lucas Zampieri &lt;lzampier@redhat.com&gt; [5.14.0-503.18.1.el9_5]" date="1733227200">- bpf: Fix a kernel verifier crash in stacksafe() (CKI Backport Bot) [RHEL-66097 RHEL-66098] {CVE-2024-45020}
- bpf: Fix a sdiv overflow issue (CKI Backport Bot) [RHEL-64598 RHEL-64597] {CVE-2024-49888}
- bpf: Fix out-of-bounds write in trie_get_next_key() (CKI Backport Bot) [RHEL-66877] {CVE-2024-50262}
- bpf: Fix use-after-free in bpf_uprobe_multi_link_attach() (CKI Backport Bot) [RHEL-63331] {CVE-2024-47675}
- nfsd: ensure that nfsd4_fattr_args.context is zeroed out (Jay Shin) [RHEL-58884 RHEL-58883] {CVE-2024-46697}
- KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory (Jon Maloy) [RHEL-65872] {CVE-2024-50115}
- net: tighten bad gso csum offset check in virtio_net_hdr (Guillaume Nault) [RHEL-67683]
- udp: fix receiving fraglist GSO packets (Guillaume Nault) [RHEL-67683]
- Bluetooth: hci: fix null-ptr-deref in hci_read_supported_codecs (CKI Backport Bot) [RHEL-66804] {CVE-2024-50255}
- Bluetooth: ISO: Fix UAF on iso_sock_timeout (Bastien Nocera) [RHEL-66321] {CVE-2024-50124}
- Bluetooth: SCO: Fix UAF on sco_sock_timeout (Bastien Nocera) [RHEL-65928] {CVE-2024-50125}
- Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout (Bastien Nocera) [RHEL-65928] {CVE-2024-27398}
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (CKI Backport Bot) [RHEL-44173] {CVE-2024-38564}
- Bluetooth: bnep: fix wild-memory-access in proto_unregister (CKI Backport Bot) [RHEL-66365] {CVE-2024-50148}
- Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (CKI Backport Bot) [RHEL-57716 RHEL-36374] {CVE-2024-27399}</changelog>
  <changelog author="Lucas Zampieri &lt;lzampier@redhat.com&gt; [5.14.0-503.19.1.el9_5]" date="1733486400">- xfrm: validate new SA's prefixlen using SA family when sel.family is unset (Sabrina Dubroca) [RHEL-66462 RHEL-66461] {CVE-2024-50142}
- xfrm: fix one more kernel-infoleak in algo dumping (CKI Backport Bot) [RHEL-65960] {CVE-2024-50110}
- Revert "Merge: [qed] softlockup triggered by ethtool -d  [rhel-9.5.z]" (Lucas Zampieri) [RHEL-61705]
- tracing/hwlat: Fix a race during cpuhp processing (Tomas Glozar) [RHEL-69468]
- tracing/timerlat: Fix a race during cpuhp processing (Tomas Glozar) [RHEL-69468] {CVE-2024-49866}
- tracing/timerlat: Drop interface_lock in stop_kthread() (Tomas Glozar) [RHEL-69468]
- tracing/timerlat: Fix duplicated kthread creation due to CPU online/offline (Tomas Glozar) [RHEL-69468]
- ceph: remove the incorrect Fw reference check when dirtying pages (Xiubo Li) [RHEL-61416 RHEL-60255]</changelog>
  <changelog author="Songhee Yeon &lt;dl_le@navercorp.com&gt; [5.14.0-503.19.1.el9_5]" date="1735214400">- kernel/rh_shadowman: add navix logo
- add Navix certificates</changelog>
</package>
<package pkgid="7cb92bcfbfb81367b0107555ea791585343e118bd5257e8f964875bd5b840c8d" name="kernel" arch="src">
  <version epoch="0" ver="5.14.0" rel="503.21.1.el9_5"/>
  <changelog author="Lucas Zampieri &lt;lzampier@redhat.com&gt; [5.14.0-503.13.1.el9_5]" date="1730462400">- efi: libstub: Move screen_info handling to common code (Maxim Levitsky) [RHEL-65344]
- mpls: Reduce skb re-allocations due to skb_cow() (Guillaume Nault) [RHEL-61697]
- mptcp: pm: Fix uaf in __timer_delete_sync (CKI Backport Bot) [RHEL-64678 RHEL-60737] {CVE-2024-46858}
- ceph: fix cap ref leak via netfs init_request (Patrick Donnelly) [RHEL-62667 RHEL-61459]
- gitlab-ci: provide consistent kcidb_tree_name (Michael Hofmann)</changelog>
  <changelog author="Lucas Zampieri &lt;lzampier@redhat.com&gt; [5.14.0-503.14.1.el9_5]" date="1730980800">- ext4: fix off by one issue in alloc_flex_gd() (Pavel Reichl) [RHEL-65318]
- ping: fix address binding wrt vrf (Antoine Tenart) [RHEL-57564 RHEL-50920]
- smb: client: stop flooding dmesg in smb2_calc_signature() (Paulo Alcantara) [RHEL-36346 RHEL-61193]
- smb: client: print failed session logoffs with FYI (Paulo Alcantara) [RHEL-36346 RHEL-61193]
- smb: client: propagate error from cifs_construct_tcon() (Paulo Alcantara) [RHEL-36346 RHEL-61193]
- smb: client: fix DFS failover in multiuser mounts (Paulo Alcantara) [RHEL-36346 RHEL-61193]
- smb: client: fix DFS interlink failover (Paulo Alcantara) [RHEL-36346 RHEL-61193]
- smb: client: improve purging of cached referrals (Paulo Alcantara) [RHEL-36346 RHEL-61193]
- smb: client: avoid unnecessary reconnects when refreshing referrals (Paulo Alcantara) [RHEL-36346 RHEL-61193]
- smb: client: handle lack of FSCTL_GET_REPARSE_POINT support (Paulo Alcantara) [RHEL-36346 RHEL-57983]
- smb: client: fix deadlock in smb2_find_smb_tcon() (Paulo Alcantara) [RHEL-36346 RHEL-57983]
- cifs: Fix reacquisition of volume cookie on still-live connection (Paulo Alcantara) [RHEL-36346 RHEL-57983]</changelog>
  <changelog author="Lucas Zampieri &lt;lzampier@redhat.com&gt; [5.14.0-503.15.1.el9_5]" date="1731585600">- USB: serial: mos7840: fix crash on resume (Desnes Nunes) [RHEL-65484 RHEL-59050] {CVE-2024-42244}
- attr: block mode changes of symlinks (CKI Backport Bot) [RHEL-61231 RHEL-60822]
- ice: Adjust PTP init for 2x50G E825C devices (Petr Oros) [RHEL-64017 RHEL-29210]
- ice: Add NAC Topology device capability parser (Petr Oros) [RHEL-64017 RHEL-29210]
- ice: Add support for E825-C TS PLL handling (Petr Oros) [RHEL-64017 RHEL-29210]
- ice: Change CGU regs struct to anonymous (Petr Oros) [RHEL-64017 RHEL-29210]
- ice: Introduce ETH56G PHY model for E825C products (Petr Oros) [RHEL-64017 RHEL-29210]
- ice: Introduce ice_get_base_incval() helper (Petr Oros) [RHEL-64017 RHEL-29210]
- ice: Move CGU block (Petr Oros) [RHEL-64017 RHEL-29210]
- ice: Add PHY OFFSET_READY register clearing (Petr Oros) [RHEL-64017 RHEL-29210]
- ice: Implement Tx interrupt enablement functions (Petr Oros) [RHEL-64017 RHEL-29210]
- ice: Introduce helper to get tmr_cmd_reg values (Petr Oros) [RHEL-64017 RHEL-29210]
- ice: Introduce ice_ptp_hw struct (Petr Oros) [RHEL-64017 RHEL-29210]
- wifi: rtw89: limit the PPDU length for VHT rate to 0x40000 (Narpat Mali) [RHEL-61753 RHEL-35542]
- wifi: rtw89: 885xbx: apply common settings to 8851B, 8852B and 8852BT (Narpat Mali) [RHEL-61753 RHEL-35542]
- wifi: rtw89: 8852b: fix definition of KIP register number (Narpat Mali) [RHEL-61753 RHEL-35542]
- wifi: rtw89: 8852b: set AMSDU limit to 5000 (Narpat Mali) [RHEL-61753 RHEL-35542]
- bpf: Fix overrunning reservations in ringbuf (CKI Backport Bot) [RHEL-62940] {CVE-2024-41009}
- net: tcp: accept old ack during closing (Jamie Bainbridge) [RHEL-61424 RHEL-60572]
- cxl/port: Fix use-after-free, permit out-of-order decoder shutdown (CKI Backport Bot) [RHEL-66837] {CVE-2024-50226}
- ethtool: check device is present when getting link settings (Michal Schmidt) [RHEL-60581 RHEL-57750]
- iommu/amd: Fix argument order in amd_iommu_dev_flush_pasid_all() (CKI Backport Bot) [RHEL-59982 RHEL-59981]</changelog>
  <changelog author="Lucas Zampieri &lt;lzampier@redhat.com&gt; [5.14.0-503.16.1.el9_5]" date="1732190400">- s390/dasd: fix error recovery leading to data corruption on ESE devices (Mete Durlu) [RHEL-64902 RHEL-55873]
- net/smc: fix illegal rmb_desc access in SMC-D connection dump (Steve Best) [RHEL-65436 RHEL-27748] {CVE-2024-26615}
- gitlab-ci: use zstream builder container image (Michael Hofmann)
- netfilter: nft_payload: sanitize offset and length before calling skb_checksum() (CKI Backport Bot) [RHEL-66856] {CVE-2024-50251}
- net: avoid potential underflow in qdisc_pkt_len_init() with UFO (CKI Backport Bot) [RHEL-65401] {CVE-2024-49949}
- block: initialize integrity buffer to zero before writing it to media (Ming Lei) [RHEL-58761 RHEL-54768] {CVE-2024-43854}
- proc: fix dentry/inode overinstantiating under /proc/${pid}/net (Joel Savitz) [RHEL-62824 RHEL-57703]
- iommu: Restore lost return in iommu_report_device_fault() (CKI Backport Bot) [RHEL-67364] {CVE-2024-44994}
- net: ena: Extend customer metrics reporting support (Kamal Heib) [RHEL-66933 RHEL-59968]
- net: ena: Add ENA Express metrics support (Kamal Heib) [RHEL-66933 RHEL-59968]
- xsk: fix batch alloc API on non-coherent systems (Felix Maurer) [RHEL-59884 RHEL-58954]
- selinux,smack: don't bypass permissions check in inode_setsecctx hook (Ondrej Mosnacek) [RHEL-66106] {CVE-2024-46695}
- PCI/AER: Disable AER service on suspend (Lenny Szubowicz) [RHEL-67037 RHEL-22265]
- ACPI: PM: s2idle: Evaluate all Low-Power S0 Idle _DSM functions (Mark Langsdorf) [RHEL-67037 RHEL-54149]
- mptcp: fallback when MPTCP opts are dropped after 1st data (CKI Backport Bot) [RHEL-62216 RHEL-62218]
- cpufreq: amd-pstate: add check for cpufreq_cpu_get's return value (David Arcari) [RHEL-61469 RHEL-45016]
- cpufreq/amd-pstate: Add the missing cpufreq_cpu_put() (David Arcari) [RHEL-61469 RHEL-45016]
- cpufreq/amd-pstate: Fix the scaling_max_freq setting on shared memory CPPC systems (David Arcari) [RHEL-61469 RHEL-45016]
- cpufreq/amd-pstate-ut: Convert nominal_freq to khz during comparisons (David Arcari) [RHEL-61469 RHEL-45016]
- cpufreq/amd-pstate: fix setting policy current frequency value (David Arcari) [RHEL-61469 RHEL-45016]
- netfilter: flowtable: initialise extack before use (CKI Backport Bot) [RHEL-58545] {CVE-2024-45018}</changelog>
  <changelog author="Lucas Zampieri &lt;lzampier@redhat.com&gt; [5.14.0-503.17.1.el9_5]" date="1732795200">- arm64: probes: Remove broken LDR (literal) uprobe support (CKI Backport Bot) [RHEL-66046] {CVE-2024-50099}
- qed: put cond_resched() in qed_dmae_operation_wait() (Michal Schmidt) [RHEL-61705 RHEL-6372]
- qed: allow the callee of qed_mcp_nvm_read() to sleep (Michal Schmidt) [RHEL-61705 RHEL-6372]
- qed: put cond_resched() in qed_grc_dump_ctx_data() (Michal Schmidt) [RHEL-61705 RHEL-6372]
- qed: make 'ethtool -d' 10 times faster (Michal Schmidt) [RHEL-61705 RHEL-6372]
- qed: allow sleep in qed_mcp_trace_dump() (Michal Schmidt) [RHEL-61705 RHEL-6372]
- sched/numa: Fix the potential null pointer dereference in task_numa_work() (CKI Backport Bot) [RHEL-66810] {CVE-2024-50223}
- irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs (Charles Mirabile) [RHEL-66969] {CVE-2024-50192}
- irqchip/gic-v4: Don't allow a VMOVP on a dying VPE (Charles Mirabile) [RHEL-66969] {CVE-2024-50192}
- perf/x86/intel/uncore: Support HBM and CXL PMON counters (Michael Petlan) [RHEL-65856]
- perf/x86/uncore: Cleanup unused unit structure (Michael Petlan) [RHEL-65856]
- perf/x86/uncore: Apply the unit control RB tree to PCI uncore units (Michael Petlan) [RHEL-65856]
- perf/x86/uncore: Apply the unit control RB tree to MSR uncore units (Michael Petlan) [RHEL-65856]
- perf/x86/uncore: Apply the unit control RB tree to MMIO uncore units (Michael Petlan) [RHEL-65856]
- perf/x86/uncore: Retrieve the unit ID from the unit control RB tree (Michael Petlan) [RHEL-65856]
- perf/x86/uncore: Support per PMU cpumask (Michael Petlan) [RHEL-65856]
- perf/x86/uncore: Save the unit control address of all units (Michael Petlan) [RHEL-65856]</changelog>
  <changelog author="Lucas Zampieri &lt;lzampier@redhat.com&gt; [5.14.0-503.18.1.el9_5]" date="1733227200">- bpf: Fix a kernel verifier crash in stacksafe() (CKI Backport Bot) [RHEL-66097 RHEL-66098] {CVE-2024-45020}
- bpf: Fix a sdiv overflow issue (CKI Backport Bot) [RHEL-64598 RHEL-64597] {CVE-2024-49888}
- bpf: Fix out-of-bounds write in trie_get_next_key() (CKI Backport Bot) [RHEL-66877] {CVE-2024-50262}
- bpf: Fix use-after-free in bpf_uprobe_multi_link_attach() (CKI Backport Bot) [RHEL-63331] {CVE-2024-47675}
- nfsd: ensure that nfsd4_fattr_args.context is zeroed out (Jay Shin) [RHEL-58884 RHEL-58883] {CVE-2024-46697}
- KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory (Jon Maloy) [RHEL-65872] {CVE-2024-50115}
- net: tighten bad gso csum offset check in virtio_net_hdr (Guillaume Nault) [RHEL-67683]
- udp: fix receiving fraglist GSO packets (Guillaume Nault) [RHEL-67683]
- Bluetooth: hci: fix null-ptr-deref in hci_read_supported_codecs (CKI Backport Bot) [RHEL-66804] {CVE-2024-50255}
- Bluetooth: ISO: Fix UAF on iso_sock_timeout (Bastien Nocera) [RHEL-66321] {CVE-2024-50124}
- Bluetooth: SCO: Fix UAF on sco_sock_timeout (Bastien Nocera) [RHEL-65928] {CVE-2024-50125}
- Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout (Bastien Nocera) [RHEL-65928] {CVE-2024-27398}
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (CKI Backport Bot) [RHEL-44173] {CVE-2024-38564}
- Bluetooth: bnep: fix wild-memory-access in proto_unregister (CKI Backport Bot) [RHEL-66365] {CVE-2024-50148}
- Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (CKI Backport Bot) [RHEL-57716 RHEL-36374] {CVE-2024-27399}</changelog>
  <changelog author="Lucas Zampieri &lt;lzampier@redhat.com&gt; [5.14.0-503.19.1.el9_5]" date="1733486400">- xfrm: validate new SA's prefixlen using SA family when sel.family is unset (Sabrina Dubroca) [RHEL-66462 RHEL-66461] {CVE-2024-50142}
- xfrm: fix one more kernel-infoleak in algo dumping (CKI Backport Bot) [RHEL-65960] {CVE-2024-50110}
- Revert "Merge: [qed] softlockup triggered by ethtool -d  [rhel-9.5.z]" (Lucas Zampieri) [RHEL-61705]
- tracing/hwlat: Fix a race during cpuhp processing (Tomas Glozar) [RHEL-69468]
- tracing/timerlat: Fix a race during cpuhp processing (Tomas Glozar) [RHEL-69468] {CVE-2024-49866}
- tracing/timerlat: Drop interface_lock in stop_kthread() (Tomas Glozar) [RHEL-69468]
- tracing/timerlat: Fix duplicated kthread creation due to CPU online/offline (Tomas Glozar) [RHEL-69468]
- ceph: remove the incorrect Fw reference check when dirtying pages (Xiubo Li) [RHEL-61416 RHEL-60255]</changelog>
  <changelog author="Lucas Zampieri &lt;lzampier@redhat.com&gt; [5.14.0-503.20.1.el9_5]" date="1734004800">- bnxt_en: Add support for user configured RSS key (Michal Schmidt) [RHEL-68699 RHEL-54645]
- bnxt_en: Add function to calculate Toeplitz hash (Michal Schmidt) [RHEL-68699 RHEL-54645]
- kvm: Note an RCU quiescent state on guest exit (Leonardo Bras) [RHEL-65734 RHEL-20288]
- rcu: Add rcutree.nohz_full_patience_delay to reduce nohz_full OS jitter (Leonardo Bras) [RHEL-65734 RHEL-20288]
- context_tracking: Fix KCSAN noinstr violation (Leonardo Bras) [RHEL-65734 RHEL-20288]
- perf/aux: Fix AUX buffer serialization (Michael Petlan) [RHEL-67495] {CVE-2024-46713}
- RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages (Mohammad Heib) [RHEL-66669 RHEL-52759] {CVE-2024-50208}</changelog>
  <changelog author="Lucas Zampieri &lt;lzampier@redhat.com&gt; [5.14.0-503.21.1.el9_5]" date="1734609600">- mlxsw: spectrum_ipip: Fix memory leak when changing remote IPv6 address (CKI Backport Bot) [RHEL-66899] {CVE-2024-50252}
- CVE-2024-53122 mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (Patrick Talbert) [RHEL-70083 RHEL-69670] {CVE-2024-53122}
- mm: make show_free_areas() static (Aristeu Rozanski) [RHEL-66998 RHEL-27743]
- mm: remove arguments of show_mem() (Aristeu Rozanski) [RHEL-66998 RHEL-27743]
- KVM: s390: Change virtual to physical address access in diag 0x258 handler (Thomas Huth) [RHEL-67922 RHEL-65229]
- KVM: s390: gaccess: Check if guest address is in memslot (Thomas Huth) [RHEL-67922 RHEL-65229]
- KVM: s390: Fix SORTL and DFLTCC instruction format error in __insn32_query (Thomas Huth) [RHEL-67922 RHEL-65229]
- s390/uv: Panic for set and remove shared access UVC errors (Thomas Huth) [RHEL-67922 RHEL-65229]
- KVM: s390: remove useless include (Thomas Huth) [RHEL-67922 RHEL-65229]
- s390/mm: Re-enable the shared zeropage for !PV and !skeys KVM guests (Thomas Huth) [RHEL-67922 RHEL-65229]
- mm/userfaultfd: Do not place zeropages when zeropages are disallowed (Thomas Huth) [RHEL-67922 RHEL-65229]
- s390: allow pte_offset_map_lock() to fail (Thomas Huth) [RHEL-67922 RHEL-54248]
- KVM: s390: vsie: Use virt_to_phys for crypto control block (Thomas Huth) [RHEL-67922 RHEL-65229]
- KVM: s390: vsie: Use virt_to_phys for facility control block (Thomas Huth) [RHEL-67922 RHEL-65229]
- gfs2: Prevent inode creation race (Andreas Gruenbacher) [RHEL-68137 RHEL-68102]
- gfs2: Only defer deletes when we have an iopen glock (Andreas Gruenbacher) [RHEL-68137 RHEL-68102]
- gfs2: Randomize GLF_VERIFY_DELETE work delay (Andreas Gruenbacher) [RHEL-62105 RHEL-60945]
- gfs2: Use mod_delayed_work in gfs2_queue_try_to_evict (Andreas Gruenbacher) [RHEL-62105 RHEL-60945]
- gfs2: Update to the evict / remote delete documentation (Andreas Gruenbacher) [RHEL-62105 RHEL-60945]
- gfs2: Call gfs2_queue_verify_delete from gfs2_evict_inode (Andreas Gruenbacher) [RHEL-62105 RHEL-60945]
- gfs2: Clean up delete work processing (Andreas Gruenbacher) [RHEL-62105 RHEL-60945]
- gfs2: Minor delete_work_func cleanup (Andreas Gruenbacher) [RHEL-62105 RHEL-60945]
- gfs2: Return enum evict_behavior from gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-62105 RHEL-60945]
- gfs2: Rename dinode_demise to evict_behavior (Andreas Gruenbacher) [RHEL-62105 RHEL-60945]
- gfs2: Rename GIF_{DEFERRED -&gt; DEFER}_DELETE (Andreas Gruenbacher) [RHEL-62105 RHEL-60945]
- gfs2: Faster gfs2_upgrade_iopen_glock wakeups (Andreas Gruenbacher) [RHEL-62105 RHEL-60945]
- gfs2: Fix unlinked inode cleanup (Andreas Gruenbacher) [RHEL-62105 RHEL-60945]
- gfs2: Allow immediate GLF_VERIFY_DELETE work (Andreas Gruenbacher) [RHEL-62105 RHEL-60945]
- gfs2: Initialize gl_no_formal_ino earlier (Andreas Gruenbacher) [RHEL-62105 RHEL-60945]
- gfs2: Rename GLF_VERIFY_EVICT to GLF_VERIFY_DELETE (Andreas Gruenbacher) [RHEL-62105 RHEL-60945]
- gfs2: make timeout values more explicit (Wolfram Sang) [RHEL-62105 RHEL-60945]
- gfs2: Simplify function gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-62105 RHEL-60945]
- gfs2: Rename SDF_DEACTIVATING to SDF_KILL (Andreas Gruenbacher) [RHEL-62105 RHEL-60945]
- smb: client: fix use-after-free of signing key (Jay Shin) [RHEL-69306 RHEL-66206]
- net/iucv: fix use after free in iucv_sock_close() (Mete Durlu) [RHEL-60300 RHEL-53992]
- KVM: arm64: Ensure vgic_ready() is ordered against MMIO registration (CKI Backport Bot) [RHEL-70294]</changelog>
  <changelog author="Songhee Yeon &lt;dl_le@navercorp.com&gt; [5.14.0-503.21.1.el9_5]" date="1736942400">- kernel/rh_shadowman: add navix logo
- add Navix certificates</changelog>
</package>
<package pkgid="54b6fedbb2f24ef04d7da4eec7c4d2d0e95bef8e34faaa0538c74e0cddd4fa6d" name="kernel" arch="src">
  <version epoch="0" ver="5.14.0" rel="503.22.1.el9_5"/>
  <changelog author="Lucas Zampieri &lt;lzampier@redhat.com&gt; [5.14.0-503.14.1.el9_5]" date="1730980800">- ext4: fix off by one issue in alloc_flex_gd() (Pavel Reichl) [RHEL-65318]
- ping: fix address binding wrt vrf (Antoine Tenart) [RHEL-57564 RHEL-50920]
- smb: client: stop flooding dmesg in smb2_calc_signature() (Paulo Alcantara) [RHEL-36346 RHEL-61193]
- smb: client: print failed session logoffs with FYI (Paulo Alcantara) [RHEL-36346 RHEL-61193]
- smb: client: propagate error from cifs_construct_tcon() (Paulo Alcantara) [RHEL-36346 RHEL-61193]
- smb: client: fix DFS failover in multiuser mounts (Paulo Alcantara) [RHEL-36346 RHEL-61193]
- smb: client: fix DFS interlink failover (Paulo Alcantara) [RHEL-36346 RHEL-61193]
- smb: client: improve purging of cached referrals (Paulo Alcantara) [RHEL-36346 RHEL-61193]
- smb: client: avoid unnecessary reconnects when refreshing referrals (Paulo Alcantara) [RHEL-36346 RHEL-61193]
- smb: client: handle lack of FSCTL_GET_REPARSE_POINT support (Paulo Alcantara) [RHEL-36346 RHEL-57983]
- smb: client: fix deadlock in smb2_find_smb_tcon() (Paulo Alcantara) [RHEL-36346 RHEL-57983]
- cifs: Fix reacquisition of volume cookie on still-live connection (Paulo Alcantara) [RHEL-36346 RHEL-57983]</changelog>
  <changelog author="Lucas Zampieri &lt;lzampier@redhat.com&gt; [5.14.0-503.15.1.el9_5]" date="1731585600">- USB: serial: mos7840: fix crash on resume (Desnes Nunes) [RHEL-65484 RHEL-59050] {CVE-2024-42244}
- attr: block mode changes of symlinks (CKI Backport Bot) [RHEL-61231 RHEL-60822]
- ice: Adjust PTP init for 2x50G E825C devices (Petr Oros) [RHEL-64017 RHEL-29210]
- ice: Add NAC Topology device capability parser (Petr Oros) [RHEL-64017 RHEL-29210]
- ice: Add support for E825-C TS PLL handling (Petr Oros) [RHEL-64017 RHEL-29210]
- ice: Change CGU regs struct to anonymous (Petr Oros) [RHEL-64017 RHEL-29210]
- ice: Introduce ETH56G PHY model for E825C products (Petr Oros) [RHEL-64017 RHEL-29210]
- ice: Introduce ice_get_base_incval() helper (Petr Oros) [RHEL-64017 RHEL-29210]
- ice: Move CGU block (Petr Oros) [RHEL-64017 RHEL-29210]
- ice: Add PHY OFFSET_READY register clearing (Petr Oros) [RHEL-64017 RHEL-29210]
- ice: Implement Tx interrupt enablement functions (Petr Oros) [RHEL-64017 RHEL-29210]
- ice: Introduce helper to get tmr_cmd_reg values (Petr Oros) [RHEL-64017 RHEL-29210]
- ice: Introduce ice_ptp_hw struct (Petr Oros) [RHEL-64017 RHEL-29210]
- wifi: rtw89: limit the PPDU length for VHT rate to 0x40000 (Narpat Mali) [RHEL-61753 RHEL-35542]
- wifi: rtw89: 885xbx: apply common settings to 8851B, 8852B and 8852BT (Narpat Mali) [RHEL-61753 RHEL-35542]
- wifi: rtw89: 8852b: fix definition of KIP register number (Narpat Mali) [RHEL-61753 RHEL-35542]
- wifi: rtw89: 8852b: set AMSDU limit to 5000 (Narpat Mali) [RHEL-61753 RHEL-35542]
- bpf: Fix overrunning reservations in ringbuf (CKI Backport Bot) [RHEL-62940] {CVE-2024-41009}
- net: tcp: accept old ack during closing (Jamie Bainbridge) [RHEL-61424 RHEL-60572]
- cxl/port: Fix use-after-free, permit out-of-order decoder shutdown (CKI Backport Bot) [RHEL-66837] {CVE-2024-50226}
- ethtool: check device is present when getting link settings (Michal Schmidt) [RHEL-60581 RHEL-57750]
- iommu/amd: Fix argument order in amd_iommu_dev_flush_pasid_all() (CKI Backport Bot) [RHEL-59982 RHEL-59981]</changelog>
  <changelog author="Lucas Zampieri &lt;lzampier@redhat.com&gt; [5.14.0-503.16.1.el9_5]" date="1732190400">- s390/dasd: fix error recovery leading to data corruption on ESE devices (Mete Durlu) [RHEL-64902 RHEL-55873]
- net/smc: fix illegal rmb_desc access in SMC-D connection dump (Steve Best) [RHEL-65436 RHEL-27748] {CVE-2024-26615}
- gitlab-ci: use zstream builder container image (Michael Hofmann)
- netfilter: nft_payload: sanitize offset and length before calling skb_checksum() (CKI Backport Bot) [RHEL-66856] {CVE-2024-50251}
- net: avoid potential underflow in qdisc_pkt_len_init() with UFO (CKI Backport Bot) [RHEL-65401] {CVE-2024-49949}
- block: initialize integrity buffer to zero before writing it to media (Ming Lei) [RHEL-58761 RHEL-54768] {CVE-2024-43854}
- proc: fix dentry/inode overinstantiating under /proc/${pid}/net (Joel Savitz) [RHEL-62824 RHEL-57703]
- iommu: Restore lost return in iommu_report_device_fault() (CKI Backport Bot) [RHEL-67364] {CVE-2024-44994}
- net: ena: Extend customer metrics reporting support (Kamal Heib) [RHEL-66933 RHEL-59968]
- net: ena: Add ENA Express metrics support (Kamal Heib) [RHEL-66933 RHEL-59968]
- xsk: fix batch alloc API on non-coherent systems (Felix Maurer) [RHEL-59884 RHEL-58954]
- selinux,smack: don't bypass permissions check in inode_setsecctx hook (Ondrej Mosnacek) [RHEL-66106] {CVE-2024-46695}
- PCI/AER: Disable AER service on suspend (Lenny Szubowicz) [RHEL-67037 RHEL-22265]
- ACPI: PM: s2idle: Evaluate all Low-Power S0 Idle _DSM functions (Mark Langsdorf) [RHEL-67037 RHEL-54149]
- mptcp: fallback when MPTCP opts are dropped after 1st data (CKI Backport Bot) [RHEL-62216 RHEL-62218]
- cpufreq: amd-pstate: add check for cpufreq_cpu_get's return value (David Arcari) [RHEL-61469 RHEL-45016]
- cpufreq/amd-pstate: Add the missing cpufreq_cpu_put() (David Arcari) [RHEL-61469 RHEL-45016]
- cpufreq/amd-pstate: Fix the scaling_max_freq setting on shared memory CPPC systems (David Arcari) [RHEL-61469 RHEL-45016]
- cpufreq/amd-pstate-ut: Convert nominal_freq to khz during comparisons (David Arcari) [RHEL-61469 RHEL-45016]
- cpufreq/amd-pstate: fix setting policy current frequency value (David Arcari) [RHEL-61469 RHEL-45016]
- netfilter: flowtable: initialise extack before use (CKI Backport Bot) [RHEL-58545] {CVE-2024-45018}</changelog>
  <changelog author="Lucas Zampieri &lt;lzampier@redhat.com&gt; [5.14.0-503.17.1.el9_5]" date="1732795200">- arm64: probes: Remove broken LDR (literal) uprobe support (CKI Backport Bot) [RHEL-66046] {CVE-2024-50099}
- qed: put cond_resched() in qed_dmae_operation_wait() (Michal Schmidt) [RHEL-61705 RHEL-6372]
- qed: allow the callee of qed_mcp_nvm_read() to sleep (Michal Schmidt) [RHEL-61705 RHEL-6372]
- qed: put cond_resched() in qed_grc_dump_ctx_data() (Michal Schmidt) [RHEL-61705 RHEL-6372]
- qed: make 'ethtool -d' 10 times faster (Michal Schmidt) [RHEL-61705 RHEL-6372]
- qed: allow sleep in qed_mcp_trace_dump() (Michal Schmidt) [RHEL-61705 RHEL-6372]
- sched/numa: Fix the potential null pointer dereference in task_numa_work() (CKI Backport Bot) [RHEL-66810] {CVE-2024-50223}
- irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs (Charles Mirabile) [RHEL-66969] {CVE-2024-50192}
- irqchip/gic-v4: Don't allow a VMOVP on a dying VPE (Charles Mirabile) [RHEL-66969] {CVE-2024-50192}
- perf/x86/intel/uncore: Support HBM and CXL PMON counters (Michael Petlan) [RHEL-65856]
- perf/x86/uncore: Cleanup unused unit structure (Michael Petlan) [RHEL-65856]
- perf/x86/uncore: Apply the unit control RB tree to PCI uncore units (Michael Petlan) [RHEL-65856]
- perf/x86/uncore: Apply the unit control RB tree to MSR uncore units (Michael Petlan) [RHEL-65856]
- perf/x86/uncore: Apply the unit control RB tree to MMIO uncore units (Michael Petlan) [RHEL-65856]
- perf/x86/uncore: Retrieve the unit ID from the unit control RB tree (Michael Petlan) [RHEL-65856]
- perf/x86/uncore: Support per PMU cpumask (Michael Petlan) [RHEL-65856]
- perf/x86/uncore: Save the unit control address of all units (Michael Petlan) [RHEL-65856]</changelog>
  <changelog author="Lucas Zampieri &lt;lzampier@redhat.com&gt; [5.14.0-503.18.1.el9_5]" date="1733227200">- bpf: Fix a kernel verifier crash in stacksafe() (CKI Backport Bot) [RHEL-66097 RHEL-66098] {CVE-2024-45020}
- bpf: Fix a sdiv overflow issue (CKI Backport Bot) [RHEL-64598 RHEL-64597] {CVE-2024-49888}
- bpf: Fix out-of-bounds write in trie_get_next_key() (CKI Backport Bot) [RHEL-66877] {CVE-2024-50262}
- bpf: Fix use-after-free in bpf_uprobe_multi_link_attach() (CKI Backport Bot) [RHEL-63331] {CVE-2024-47675}
- nfsd: ensure that nfsd4_fattr_args.context is zeroed out (Jay Shin) [RHEL-58884 RHEL-58883] {CVE-2024-46697}
- KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory (Jon Maloy) [RHEL-65872] {CVE-2024-50115}
- net: tighten bad gso csum offset check in virtio_net_hdr (Guillaume Nault) [RHEL-67683]
- udp: fix receiving fraglist GSO packets (Guillaume Nault) [RHEL-67683]
- Bluetooth: hci: fix null-ptr-deref in hci_read_supported_codecs (CKI Backport Bot) [RHEL-66804] {CVE-2024-50255}
- Bluetooth: ISO: Fix UAF on iso_sock_timeout (Bastien Nocera) [RHEL-66321] {CVE-2024-50124}
- Bluetooth: SCO: Fix UAF on sco_sock_timeout (Bastien Nocera) [RHEL-65928] {CVE-2024-50125}
- Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout (Bastien Nocera) [RHEL-65928] {CVE-2024-27398}
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (CKI Backport Bot) [RHEL-44173] {CVE-2024-38564}
- Bluetooth: bnep: fix wild-memory-access in proto_unregister (CKI Backport Bot) [RHEL-66365] {CVE-2024-50148}
- Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (CKI Backport Bot) [RHEL-57716 RHEL-36374] {CVE-2024-27399}</changelog>
  <changelog author="Lucas Zampieri &lt;lzampier@redhat.com&gt; [5.14.0-503.19.1.el9_5]" date="1733486400">- xfrm: validate new SA's prefixlen using SA family when sel.family is unset (Sabrina Dubroca) [RHEL-66462 RHEL-66461] {CVE-2024-50142}
- xfrm: fix one more kernel-infoleak in algo dumping (CKI Backport Bot) [RHEL-65960] {CVE-2024-50110}
- Revert "Merge: [qed] softlockup triggered by ethtool -d  [rhel-9.5.z]" (Lucas Zampieri) [RHEL-61705]
- tracing/hwlat: Fix a race during cpuhp processing (Tomas Glozar) [RHEL-69468]
- tracing/timerlat: Fix a race during cpuhp processing (Tomas Glozar) [RHEL-69468] {CVE-2024-49866}
- tracing/timerlat: Drop interface_lock in stop_kthread() (Tomas Glozar) [RHEL-69468]
- tracing/timerlat: Fix duplicated kthread creation due to CPU online/offline (Tomas Glozar) [RHEL-69468]
- ceph: remove the incorrect Fw reference check when dirtying pages (Xiubo Li) [RHEL-61416 RHEL-60255]</changelog>
  <changelog author="Lucas Zampieri &lt;lzampier@redhat.com&gt; [5.14.0-503.20.1.el9_5]" date="1734004800">- bnxt_en: Add support for user configured RSS key (Michal Schmidt) [RHEL-68699 RHEL-54645]
- bnxt_en: Add function to calculate Toeplitz hash (Michal Schmidt) [RHEL-68699 RHEL-54645]
- kvm: Note an RCU quiescent state on guest exit (Leonardo Bras) [RHEL-65734 RHEL-20288]
- rcu: Add rcutree.nohz_full_patience_delay to reduce nohz_full OS jitter (Leonardo Bras) [RHEL-65734 RHEL-20288]
- context_tracking: Fix KCSAN noinstr violation (Leonardo Bras) [RHEL-65734 RHEL-20288]
- perf/aux: Fix AUX buffer serialization (Michael Petlan) [RHEL-67495] {CVE-2024-46713}
- RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages (Mohammad Heib) [RHEL-66669 RHEL-52759] {CVE-2024-50208}</changelog>
  <changelog author="Lucas Zampieri &lt;lzampier@redhat.com&gt; [5.14.0-503.21.1.el9_5]" date="1734609600">- mlxsw: spectrum_ipip: Fix memory leak when changing remote IPv6 address (CKI Backport Bot) [RHEL-66899] {CVE-2024-50252}
- CVE-2024-53122 mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (Patrick Talbert) [RHEL-70083 RHEL-69670] {CVE-2024-53122}
- mm: make show_free_areas() static (Aristeu Rozanski) [RHEL-66998 RHEL-27743]
- mm: remove arguments of show_mem() (Aristeu Rozanski) [RHEL-66998 RHEL-27743]
- KVM: s390: Change virtual to physical address access in diag 0x258 handler (Thomas Huth) [RHEL-67922 RHEL-65229]
- KVM: s390: gaccess: Check if guest address is in memslot (Thomas Huth) [RHEL-67922 RHEL-65229]
- KVM: s390: Fix SORTL and DFLTCC instruction format error in __insn32_query (Thomas Huth) [RHEL-67922 RHEL-65229]
- s390/uv: Panic for set and remove shared access UVC errors (Thomas Huth) [RHEL-67922 RHEL-65229]
- KVM: s390: remove useless include (Thomas Huth) [RHEL-67922 RHEL-65229]
- s390/mm: Re-enable the shared zeropage for !PV and !skeys KVM guests (Thomas Huth) [RHEL-67922 RHEL-65229]
- mm/userfaultfd: Do not place zeropages when zeropages are disallowed (Thomas Huth) [RHEL-67922 RHEL-65229]
- s390: allow pte_offset_map_lock() to fail (Thomas Huth) [RHEL-67922 RHEL-54248]
- KVM: s390: vsie: Use virt_to_phys for crypto control block (Thomas Huth) [RHEL-67922 RHEL-65229]
- KVM: s390: vsie: Use virt_to_phys for facility control block (Thomas Huth) [RHEL-67922 RHEL-65229]
- gfs2: Prevent inode creation race (Andreas Gruenbacher) [RHEL-68137 RHEL-68102]
- gfs2: Only defer deletes when we have an iopen glock (Andreas Gruenbacher) [RHEL-68137 RHEL-68102]
- gfs2: Randomize GLF_VERIFY_DELETE work delay (Andreas Gruenbacher) [RHEL-62105 RHEL-60945]
- gfs2: Use mod_delayed_work in gfs2_queue_try_to_evict (Andreas Gruenbacher) [RHEL-62105 RHEL-60945]
- gfs2: Update to the evict / remote delete documentation (Andreas Gruenbacher) [RHEL-62105 RHEL-60945]
- gfs2: Call gfs2_queue_verify_delete from gfs2_evict_inode (Andreas Gruenbacher) [RHEL-62105 RHEL-60945]
- gfs2: Clean up delete work processing (Andreas Gruenbacher) [RHEL-62105 RHEL-60945]
- gfs2: Minor delete_work_func cleanup (Andreas Gruenbacher) [RHEL-62105 RHEL-60945]
- gfs2: Return enum evict_behavior from gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-62105 RHEL-60945]
- gfs2: Rename dinode_demise to evict_behavior (Andreas Gruenbacher) [RHEL-62105 RHEL-60945]
- gfs2: Rename GIF_{DEFERRED -&gt; DEFER}_DELETE (Andreas Gruenbacher) [RHEL-62105 RHEL-60945]
- gfs2: Faster gfs2_upgrade_iopen_glock wakeups (Andreas Gruenbacher) [RHEL-62105 RHEL-60945]
- gfs2: Fix unlinked inode cleanup (Andreas Gruenbacher) [RHEL-62105 RHEL-60945]
- gfs2: Allow immediate GLF_VERIFY_DELETE work (Andreas Gruenbacher) [RHEL-62105 RHEL-60945]
- gfs2: Initialize gl_no_formal_ino earlier (Andreas Gruenbacher) [RHEL-62105 RHEL-60945]
- gfs2: Rename GLF_VERIFY_EVICT to GLF_VERIFY_DELETE (Andreas Gruenbacher) [RHEL-62105 RHEL-60945]
- gfs2: make timeout values more explicit (Wolfram Sang) [RHEL-62105 RHEL-60945]
- gfs2: Simplify function gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-62105 RHEL-60945]
- gfs2: Rename SDF_DEACTIVATING to SDF_KILL (Andreas Gruenbacher) [RHEL-62105 RHEL-60945]
- smb: client: fix use-after-free of signing key (Jay Shin) [RHEL-69306 RHEL-66206]
- net/iucv: fix use after free in iucv_sock_close() (Mete Durlu) [RHEL-60300 RHEL-53992]
- KVM: arm64: Ensure vgic_ready() is ordered against MMIO registration (CKI Backport Bot) [RHEL-70294]</changelog>
  <changelog author="Chao YE &lt;cye@redhat.com&gt; [5.14.0-503.22.1.el9_5]" date="1736942400">- [s390] zcore: WRITE is "data source", not destination... (CKI Backport Bot) [RHEL-63078]
- arm64/sve: Discard stale CPU state when handling SVE traps (Mark Salter) [RHEL-72218] {CVE-2024-50275}
- bpf: Use raw_spinlock_t in ringbuf (Luis Claudio R. Goncalves) [RHEL-68992 RHEL-20608]
- rh_messages.h: un-unmaintain hfi1 (CKI Backport Bot) [RHEL-71322]
- scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths (Dick Kennedy) [RHEL-66055 RHEL-53595]
- scsi: lpfc: Handle mailbox timeouts in lpfc_get_sfp_info (Dick Kennedy) [RHEL-66055 RHEL-53595]
- ASoC: SOF: ipc4-topology: Preserve the DMA Link ID for ChainDMA on unprepare (Jaroslav Kysela) [RHEL-62030]
- ASoC: SOF: ipc4-topology: Only handle dai_config with HW_PARAMS for ChainDMA (Jaroslav Kysela) [RHEL-62030]
- ASoC: SOF: ipc4-topology: Use single token list for the copiers (Jaroslav Kysela) [RHEL-62030]
- ASoC: SOF: ipc4-topology: Use correct queue_id for requesting input pin format (Jaroslav Kysela) [RHEL-62030]
- ASoC: SOF: ipc4-topology: Adjust the params based on DAI formats (Jaroslav Kysela) [RHEL-62030]
- ASoC: SOF: ipc4-topology: Improve readability of sof_ipc4_prepare_dai_copier() (Jaroslav Kysela) [RHEL-62030]
- ASoC: SOF: ipc4-topology/pcm: Rename sof_ipc4_copier_is_single_format() (Jaroslav Kysela) [RHEL-62030]
- ASoC: SOF: ipc4-topology: Print out the channel count in sof_ipc4_dbg_audio_format (Jaroslav Kysela) [RHEL-62030]
- ASoC: SOF: ipc4-topology: support tdm slot number query (Jaroslav Kysela) [RHEL-62030]
- ASoC: SOF: ipc3-topology: support tdm slot number query (Jaroslav Kysela) [RHEL-62030]
- ASoC: SOF: sof-audio: add sof_dai_get_tdm_slots function (Jaroslav Kysela) [RHEL-62030]
- ASoC: SOF: sof-audio: rename dai clock setting query function (Jaroslav Kysela) [RHEL-62030]
- ASoC: SOF: ipc4-topology: Add support for NHLT with 16-bit only DMIC blob (Jaroslav Kysela) [RHEL-62030]
- ASoC: SOF: ipc4-topology: Correct DAI copier config and NHLT blob request (Jaroslav Kysela) [RHEL-62030]
- ASoC: SOF: ipc4-topology: Allow selective update in sof_ipc4_update_hw_params (Jaroslav Kysela) [RHEL-62030]
- ASoC: SOF: ipc4-topology: remove shadowed variable (Jaroslav Kysela) [RHEL-62030]
- Revert "ixgbe: Manual AN-37 for troublesome link partners for X550 SFI" (Ivan Vecera) [RHEL-65624]
- KVM: SVM: Propagate error from snp_guest_req_init() to userspace (Bandan Das) [RHEL-68361 RHEL-65840]
- KVM: SEV: Provide support for SNP_EXTENDED_GUEST_REQUEST NAE event (Bandan Das) [RHEL-68361 RHEL-65840]
- x86/sev: Move sev_guest.h into common SEV header (Bandan Das) [RHEL-68361 RHEL-65840]
- KVM: SEV: Provide support for SNP_GUEST_REQUEST NAE event (Bandan Das) [RHEL-68361 RHEL-65840]
- i40e: fix race condition by adding filter's intermediate sync state (CKI Backport Bot) [RHEL-69809] {CVE-2024-53088}
- ice: fix truesize operations for PAGE_SIZE &gt;= 8192 (CKI Backport Bot) [RHEL-70660 RHEL-37905]
- ice: fix ICE_LAST_OFFSET formula (CKI Backport Bot) [RHEL-70660 RHEL-37905]
- ice: fix page reuse when PAGE_SIZE is over 8k (CKI Backport Bot) [RHEL-70660 RHEL-37905]
- nvme-fabrics: handle zero MAXCMD without closing the connection (Maurizio Lombardi) [RHEL-72970]
- selftests: netfilter: add test case for recent mismatch bug (Florian Westphal) [RHEL-71357 RHEL-60554]
- netfilter: nf_tables: unconditionally flush pending work before notifier (Florian Westphal) [RHEL-71357 RHEL-60554]
- netfilter: nft_set_pipapo_avx2: disable softinterrupts (Florian Westphal) [RHEL-71357 RHEL-60554]
- netfilter: nf_set_pipapo: fix initial map fill (Florian Westphal) [RHEL-71357 RHEL-60554]
- netfilter: nf_tables: store new sets in dedicated list (Florian Westphal) [RHEL-71357 RHEL-60554]
- netfilter: nft_socket: Fix a NULL vs IS_ERR() bug in nft_socket_cgroup_subtree_level() (Florian Westphal) [RHEL-71357 RHEL-60554]
- netfilter: nft_socket: make cgroupsv2 matching work with namespaces (Florian Westphal) [RHEL-71357 RHEL-60554]
- netfilter: nft_socket: fix sk refcount leaks (Florian Westphal) [RHEL-71357 RHEL-60554]
- tcp: Fix use-after-free of nreq in reqsk_timer_handler(). (Guillaume Nault) [RHEL-70541 RHEL-70449]
- tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink(). (Guillaume Nault) [RHEL-66329 RHEL-66328] {CVE-2024-50154}
- rcu: Use system_unbound_wq to avoid disturbing isolated CPUs (Waiman Long) [RHEL-61329 RHEL-50220]
- scsi: storvsc: Do not flag MAINTENANCE_IN return of SRB_STATUS_DATA_OVERRUN as an error (Cathy Avery) [RHEL-71393 RHEL-9848]
- scsi: storvsc: Handle additional SRB status values (Cathy Avery) [RHEL-71393 RHEL-9848]</changelog>
  <changelog author="Songhee Yeon &lt;dl_le@navercorp.com&gt; [5.14.0-503.22.1.el9_5]" date="1738670400">- kernel/rh_shadowman: add navix logo
- add Navix certificates</changelog>
</package>
<package pkgid="ab4350b5de967c66a89b0d3a45c74669d71aea3afe8a988f3393bb571faddd01" name="kernel" arch="src">
  <version epoch="0" ver="5.14.0" rel="503.23.1.el9_5"/>
  <changelog author="Lucas Zampieri &lt;lzampier@redhat.com&gt; [5.14.0-503.15.1.el9_5]" date="1731585600">- USB: serial: mos7840: fix crash on resume (Desnes Nunes) [RHEL-65484 RHEL-59050] {CVE-2024-42244}
- attr: block mode changes of symlinks (CKI Backport Bot) [RHEL-61231 RHEL-60822]
- ice: Adjust PTP init for 2x50G E825C devices (Petr Oros) [RHEL-64017 RHEL-29210]
- ice: Add NAC Topology device capability parser (Petr Oros) [RHEL-64017 RHEL-29210]
- ice: Add support for E825-C TS PLL handling (Petr Oros) [RHEL-64017 RHEL-29210]
- ice: Change CGU regs struct to anonymous (Petr Oros) [RHEL-64017 RHEL-29210]
- ice: Introduce ETH56G PHY model for E825C products (Petr Oros) [RHEL-64017 RHEL-29210]
- ice: Introduce ice_get_base_incval() helper (Petr Oros) [RHEL-64017 RHEL-29210]
- ice: Move CGU block (Petr Oros) [RHEL-64017 RHEL-29210]
- ice: Add PHY OFFSET_READY register clearing (Petr Oros) [RHEL-64017 RHEL-29210]
- ice: Implement Tx interrupt enablement functions (Petr Oros) [RHEL-64017 RHEL-29210]
- ice: Introduce helper to get tmr_cmd_reg values (Petr Oros) [RHEL-64017 RHEL-29210]
- ice: Introduce ice_ptp_hw struct (Petr Oros) [RHEL-64017 RHEL-29210]
- wifi: rtw89: limit the PPDU length for VHT rate to 0x40000 (Narpat Mali) [RHEL-61753 RHEL-35542]
- wifi: rtw89: 885xbx: apply common settings to 8851B, 8852B and 8852BT (Narpat Mali) [RHEL-61753 RHEL-35542]
- wifi: rtw89: 8852b: fix definition of KIP register number (Narpat Mali) [RHEL-61753 RHEL-35542]
- wifi: rtw89: 8852b: set AMSDU limit to 5000 (Narpat Mali) [RHEL-61753 RHEL-35542]
- bpf: Fix overrunning reservations in ringbuf (CKI Backport Bot) [RHEL-62940] {CVE-2024-41009}
- net: tcp: accept old ack during closing (Jamie Bainbridge) [RHEL-61424 RHEL-60572]
- cxl/port: Fix use-after-free, permit out-of-order decoder shutdown (CKI Backport Bot) [RHEL-66837] {CVE-2024-50226}
- ethtool: check device is present when getting link settings (Michal Schmidt) [RHEL-60581 RHEL-57750]
- iommu/amd: Fix argument order in amd_iommu_dev_flush_pasid_all() (CKI Backport Bot) [RHEL-59982 RHEL-59981]</changelog>
  <changelog author="Lucas Zampieri &lt;lzampier@redhat.com&gt; [5.14.0-503.16.1.el9_5]" date="1732190400">- s390/dasd: fix error recovery leading to data corruption on ESE devices (Mete Durlu) [RHEL-64902 RHEL-55873]
- net/smc: fix illegal rmb_desc access in SMC-D connection dump (Steve Best) [RHEL-65436 RHEL-27748] {CVE-2024-26615}
- gitlab-ci: use zstream builder container image (Michael Hofmann)
- netfilter: nft_payload: sanitize offset and length before calling skb_checksum() (CKI Backport Bot) [RHEL-66856] {CVE-2024-50251}
- net: avoid potential underflow in qdisc_pkt_len_init() with UFO (CKI Backport Bot) [RHEL-65401] {CVE-2024-49949}
- block: initialize integrity buffer to zero before writing it to media (Ming Lei) [RHEL-58761 RHEL-54768] {CVE-2024-43854}
- proc: fix dentry/inode overinstantiating under /proc/${pid}/net (Joel Savitz) [RHEL-62824 RHEL-57703]
- iommu: Restore lost return in iommu_report_device_fault() (CKI Backport Bot) [RHEL-67364] {CVE-2024-44994}
- net: ena: Extend customer metrics reporting support (Kamal Heib) [RHEL-66933 RHEL-59968]
- net: ena: Add ENA Express metrics support (Kamal Heib) [RHEL-66933 RHEL-59968]
- xsk: fix batch alloc API on non-coherent systems (Felix Maurer) [RHEL-59884 RHEL-58954]
- selinux,smack: don't bypass permissions check in inode_setsecctx hook (Ondrej Mosnacek) [RHEL-66106] {CVE-2024-46695}
- PCI/AER: Disable AER service on suspend (Lenny Szubowicz) [RHEL-67037 RHEL-22265]
- ACPI: PM: s2idle: Evaluate all Low-Power S0 Idle _DSM functions (Mark Langsdorf) [RHEL-67037 RHEL-54149]
- mptcp: fallback when MPTCP opts are dropped after 1st data (CKI Backport Bot) [RHEL-62216 RHEL-62218]
- cpufreq: amd-pstate: add check for cpufreq_cpu_get's return value (David Arcari) [RHEL-61469 RHEL-45016]
- cpufreq/amd-pstate: Add the missing cpufreq_cpu_put() (David Arcari) [RHEL-61469 RHEL-45016]
- cpufreq/amd-pstate: Fix the scaling_max_freq setting on shared memory CPPC systems (David Arcari) [RHEL-61469 RHEL-45016]
- cpufreq/amd-pstate-ut: Convert nominal_freq to khz during comparisons (David Arcari) [RHEL-61469 RHEL-45016]
- cpufreq/amd-pstate: fix setting policy current frequency value (David Arcari) [RHEL-61469 RHEL-45016]
- netfilter: flowtable: initialise extack before use (CKI Backport Bot) [RHEL-58545] {CVE-2024-45018}</changelog>
  <changelog author="Lucas Zampieri &lt;lzampier@redhat.com&gt; [5.14.0-503.17.1.el9_5]" date="1732795200">- arm64: probes: Remove broken LDR (literal) uprobe support (CKI Backport Bot) [RHEL-66046] {CVE-2024-50099}
- qed: put cond_resched() in qed_dmae_operation_wait() (Michal Schmidt) [RHEL-61705 RHEL-6372]
- qed: allow the callee of qed_mcp_nvm_read() to sleep (Michal Schmidt) [RHEL-61705 RHEL-6372]
- qed: put cond_resched() in qed_grc_dump_ctx_data() (Michal Schmidt) [RHEL-61705 RHEL-6372]
- qed: make 'ethtool -d' 10 times faster (Michal Schmidt) [RHEL-61705 RHEL-6372]
- qed: allow sleep in qed_mcp_trace_dump() (Michal Schmidt) [RHEL-61705 RHEL-6372]
- sched/numa: Fix the potential null pointer dereference in task_numa_work() (CKI Backport Bot) [RHEL-66810] {CVE-2024-50223}
- irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs (Charles Mirabile) [RHEL-66969] {CVE-2024-50192}
- irqchip/gic-v4: Don't allow a VMOVP on a dying VPE (Charles Mirabile) [RHEL-66969] {CVE-2024-50192}
- perf/x86/intel/uncore: Support HBM and CXL PMON counters (Michael Petlan) [RHEL-65856]
- perf/x86/uncore: Cleanup unused unit structure (Michael Petlan) [RHEL-65856]
- perf/x86/uncore: Apply the unit control RB tree to PCI uncore units (Michael Petlan) [RHEL-65856]
- perf/x86/uncore: Apply the unit control RB tree to MSR uncore units (Michael Petlan) [RHEL-65856]
- perf/x86/uncore: Apply the unit control RB tree to MMIO uncore units (Michael Petlan) [RHEL-65856]
- perf/x86/uncore: Retrieve the unit ID from the unit control RB tree (Michael Petlan) [RHEL-65856]
- perf/x86/uncore: Support per PMU cpumask (Michael Petlan) [RHEL-65856]
- perf/x86/uncore: Save the unit control address of all units (Michael Petlan) [RHEL-65856]</changelog>
  <changelog author="Lucas Zampieri &lt;lzampier@redhat.com&gt; [5.14.0-503.18.1.el9_5]" date="1733227200">- bpf: Fix a kernel verifier crash in stacksafe() (CKI Backport Bot) [RHEL-66097 RHEL-66098] {CVE-2024-45020}
- bpf: Fix a sdiv overflow issue (CKI Backport Bot) [RHEL-64598 RHEL-64597] {CVE-2024-49888}
- bpf: Fix out-of-bounds write in trie_get_next_key() (CKI Backport Bot) [RHEL-66877] {CVE-2024-50262}
- bpf: Fix use-after-free in bpf_uprobe_multi_link_attach() (CKI Backport Bot) [RHEL-63331] {CVE-2024-47675}
- nfsd: ensure that nfsd4_fattr_args.context is zeroed out (Jay Shin) [RHEL-58884 RHEL-58883] {CVE-2024-46697}
- KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory (Jon Maloy) [RHEL-65872] {CVE-2024-50115}
- net: tighten bad gso csum offset check in virtio_net_hdr (Guillaume Nault) [RHEL-67683]
- udp: fix receiving fraglist GSO packets (Guillaume Nault) [RHEL-67683]
- Bluetooth: hci: fix null-ptr-deref in hci_read_supported_codecs (CKI Backport Bot) [RHEL-66804] {CVE-2024-50255}
- Bluetooth: ISO: Fix UAF on iso_sock_timeout (Bastien Nocera) [RHEL-66321] {CVE-2024-50124}
- Bluetooth: SCO: Fix UAF on sco_sock_timeout (Bastien Nocera) [RHEL-65928] {CVE-2024-50125}
- Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout (Bastien Nocera) [RHEL-65928] {CVE-2024-27398}
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (CKI Backport Bot) [RHEL-44173] {CVE-2024-38564}
- Bluetooth: bnep: fix wild-memory-access in proto_unregister (CKI Backport Bot) [RHEL-66365] {CVE-2024-50148}
- Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (CKI Backport Bot) [RHEL-57716 RHEL-36374] {CVE-2024-27399}</changelog>
  <changelog author="Lucas Zampieri &lt;lzampier@redhat.com&gt; [5.14.0-503.19.1.el9_5]" date="1733486400">- xfrm: validate new SA's prefixlen using SA family when sel.family is unset (Sabrina Dubroca) [RHEL-66462 RHEL-66461] {CVE-2024-50142}
- xfrm: fix one more kernel-infoleak in algo dumping (CKI Backport Bot) [RHEL-65960] {CVE-2024-50110}
- Revert "Merge: [qed] softlockup triggered by ethtool -d  [rhel-9.5.z]" (Lucas Zampieri) [RHEL-61705]
- tracing/hwlat: Fix a race during cpuhp processing (Tomas Glozar) [RHEL-69468]
- tracing/timerlat: Fix a race during cpuhp processing (Tomas Glozar) [RHEL-69468] {CVE-2024-49866}
- tracing/timerlat: Drop interface_lock in stop_kthread() (Tomas Glozar) [RHEL-69468]
- tracing/timerlat: Fix duplicated kthread creation due to CPU online/offline (Tomas Glozar) [RHEL-69468]
- ceph: remove the incorrect Fw reference check when dirtying pages (Xiubo Li) [RHEL-61416 RHEL-60255]</changelog>
  <changelog author="Lucas Zampieri &lt;lzampier@redhat.com&gt; [5.14.0-503.20.1.el9_5]" date="1734004800">- bnxt_en: Add support for user configured RSS key (Michal Schmidt) [RHEL-68699 RHEL-54645]
- bnxt_en: Add function to calculate Toeplitz hash (Michal Schmidt) [RHEL-68699 RHEL-54645]
- kvm: Note an RCU quiescent state on guest exit (Leonardo Bras) [RHEL-65734 RHEL-20288]
- rcu: Add rcutree.nohz_full_patience_delay to reduce nohz_full OS jitter (Leonardo Bras) [RHEL-65734 RHEL-20288]
- context_tracking: Fix KCSAN noinstr violation (Leonardo Bras) [RHEL-65734 RHEL-20288]
- perf/aux: Fix AUX buffer serialization (Michael Petlan) [RHEL-67495] {CVE-2024-46713}
- RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages (Mohammad Heib) [RHEL-66669 RHEL-52759] {CVE-2024-50208}</changelog>
  <changelog author="Lucas Zampieri &lt;lzampier@redhat.com&gt; [5.14.0-503.21.1.el9_5]" date="1734609600">- mlxsw: spectrum_ipip: Fix memory leak when changing remote IPv6 address (CKI Backport Bot) [RHEL-66899] {CVE-2024-50252}
- CVE-2024-53122 mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (Patrick Talbert) [RHEL-70083 RHEL-69670] {CVE-2024-53122}
- mm: make show_free_areas() static (Aristeu Rozanski) [RHEL-66998 RHEL-27743]
- mm: remove arguments of show_mem() (Aristeu Rozanski) [RHEL-66998 RHEL-27743]
- KVM: s390: Change virtual to physical address access in diag 0x258 handler (Thomas Huth) [RHEL-67922 RHEL-65229]
- KVM: s390: gaccess: Check if guest address is in memslot (Thomas Huth) [RHEL-67922 RHEL-65229]
- KVM: s390: Fix SORTL and DFLTCC instruction format error in __insn32_query (Thomas Huth) [RHEL-67922 RHEL-65229]
- s390/uv: Panic for set and remove shared access UVC errors (Thomas Huth) [RHEL-67922 RHEL-65229]
- KVM: s390: remove useless include (Thomas Huth) [RHEL-67922 RHEL-65229]
- s390/mm: Re-enable the shared zeropage for !PV and !skeys KVM guests (Thomas Huth) [RHEL-67922 RHEL-65229]
- mm/userfaultfd: Do not place zeropages when zeropages are disallowed (Thomas Huth) [RHEL-67922 RHEL-65229]
- s390: allow pte_offset_map_lock() to fail (Thomas Huth) [RHEL-67922 RHEL-54248]
- KVM: s390: vsie: Use virt_to_phys for crypto control block (Thomas Huth) [RHEL-67922 RHEL-65229]
- KVM: s390: vsie: Use virt_to_phys for facility control block (Thomas Huth) [RHEL-67922 RHEL-65229]
- gfs2: Prevent inode creation race (Andreas Gruenbacher) [RHEL-68137 RHEL-68102]
- gfs2: Only defer deletes when we have an iopen glock (Andreas Gruenbacher) [RHEL-68137 RHEL-68102]
- gfs2: Randomize GLF_VERIFY_DELETE work delay (Andreas Gruenbacher) [RHEL-62105 RHEL-60945]
- gfs2: Use mod_delayed_work in gfs2_queue_try_to_evict (Andreas Gruenbacher) [RHEL-62105 RHEL-60945]
- gfs2: Update to the evict / remote delete documentation (Andreas Gruenbacher) [RHEL-62105 RHEL-60945]
- gfs2: Call gfs2_queue_verify_delete from gfs2_evict_inode (Andreas Gruenbacher) [RHEL-62105 RHEL-60945]
- gfs2: Clean up delete work processing (Andreas Gruenbacher) [RHEL-62105 RHEL-60945]
- gfs2: Minor delete_work_func cleanup (Andreas Gruenbacher) [RHEL-62105 RHEL-60945]
- gfs2: Return enum evict_behavior from gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-62105 RHEL-60945]
- gfs2: Rename dinode_demise to evict_behavior (Andreas Gruenbacher) [RHEL-62105 RHEL-60945]
- gfs2: Rename GIF_{DEFERRED -&gt; DEFER}_DELETE (Andreas Gruenbacher) [RHEL-62105 RHEL-60945]
- gfs2: Faster gfs2_upgrade_iopen_glock wakeups (Andreas Gruenbacher) [RHEL-62105 RHEL-60945]
- gfs2: Fix unlinked inode cleanup (Andreas Gruenbacher) [RHEL-62105 RHEL-60945]
- gfs2: Allow immediate GLF_VERIFY_DELETE work (Andreas Gruenbacher) [RHEL-62105 RHEL-60945]
- gfs2: Initialize gl_no_formal_ino earlier (Andreas Gruenbacher) [RHEL-62105 RHEL-60945]
- gfs2: Rename GLF_VERIFY_EVICT to GLF_VERIFY_DELETE (Andreas Gruenbacher) [RHEL-62105 RHEL-60945]
- gfs2: make timeout values more explicit (Wolfram Sang) [RHEL-62105 RHEL-60945]
- gfs2: Simplify function gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-62105 RHEL-60945]
- gfs2: Rename SDF_DEACTIVATING to SDF_KILL (Andreas Gruenbacher) [RHEL-62105 RHEL-60945]
- smb: client: fix use-after-free of signing key (Jay Shin) [RHEL-69306 RHEL-66206]
- net/iucv: fix use after free in iucv_sock_close() (Mete Durlu) [RHEL-60300 RHEL-53992]
- KVM: arm64: Ensure vgic_ready() is ordered against MMIO registration (CKI Backport Bot) [RHEL-70294]</changelog>
  <changelog author="Chao YE &lt;cye@redhat.com&gt; [5.14.0-503.22.1.el9_5]" date="1736942400">- [s390] zcore: WRITE is "data source", not destination... (CKI Backport Bot) [RHEL-63078]
- arm64/sve: Discard stale CPU state when handling SVE traps (Mark Salter) [RHEL-72218] {CVE-2024-50275}
- bpf: Use raw_spinlock_t in ringbuf (Luis Claudio R. Goncalves) [RHEL-68992 RHEL-20608]
- rh_messages.h: un-unmaintain hfi1 (CKI Backport Bot) [RHEL-71322]
- scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths (Dick Kennedy) [RHEL-66055 RHEL-53595]
- scsi: lpfc: Handle mailbox timeouts in lpfc_get_sfp_info (Dick Kennedy) [RHEL-66055 RHEL-53595]
- ASoC: SOF: ipc4-topology: Preserve the DMA Link ID for ChainDMA on unprepare (Jaroslav Kysela) [RHEL-62030]
- ASoC: SOF: ipc4-topology: Only handle dai_config with HW_PARAMS for ChainDMA (Jaroslav Kysela) [RHEL-62030]
- ASoC: SOF: ipc4-topology: Use single token list for the copiers (Jaroslav Kysela) [RHEL-62030]
- ASoC: SOF: ipc4-topology: Use correct queue_id for requesting input pin format (Jaroslav Kysela) [RHEL-62030]
- ASoC: SOF: ipc4-topology: Adjust the params based on DAI formats (Jaroslav Kysela) [RHEL-62030]
- ASoC: SOF: ipc4-topology: Improve readability of sof_ipc4_prepare_dai_copier() (Jaroslav Kysela) [RHEL-62030]
- ASoC: SOF: ipc4-topology/pcm: Rename sof_ipc4_copier_is_single_format() (Jaroslav Kysela) [RHEL-62030]
- ASoC: SOF: ipc4-topology: Print out the channel count in sof_ipc4_dbg_audio_format (Jaroslav Kysela) [RHEL-62030]
- ASoC: SOF: ipc4-topology: support tdm slot number query (Jaroslav Kysela) [RHEL-62030]
- ASoC: SOF: ipc3-topology: support tdm slot number query (Jaroslav Kysela) [RHEL-62030]
- ASoC: SOF: sof-audio: add sof_dai_get_tdm_slots function (Jaroslav Kysela) [RHEL-62030]
- ASoC: SOF: sof-audio: rename dai clock setting query function (Jaroslav Kysela) [RHEL-62030]
- ASoC: SOF: ipc4-topology: Add support for NHLT with 16-bit only DMIC blob (Jaroslav Kysela) [RHEL-62030]
- ASoC: SOF: ipc4-topology: Correct DAI copier config and NHLT blob request (Jaroslav Kysela) [RHEL-62030]
- ASoC: SOF: ipc4-topology: Allow selective update in sof_ipc4_update_hw_params (Jaroslav Kysela) [RHEL-62030]
- ASoC: SOF: ipc4-topology: remove shadowed variable (Jaroslav Kysela) [RHEL-62030]
- Revert "ixgbe: Manual AN-37 for troublesome link partners for X550 SFI" (Ivan Vecera) [RHEL-65624]
- KVM: SVM: Propagate error from snp_guest_req_init() to userspace (Bandan Das) [RHEL-68361 RHEL-65840]
- KVM: SEV: Provide support for SNP_EXTENDED_GUEST_REQUEST NAE event (Bandan Das) [RHEL-68361 RHEL-65840]
- x86/sev: Move sev_guest.h into common SEV header (Bandan Das) [RHEL-68361 RHEL-65840]
- KVM: SEV: Provide support for SNP_GUEST_REQUEST NAE event (Bandan Das) [RHEL-68361 RHEL-65840]
- i40e: fix race condition by adding filter's intermediate sync state (CKI Backport Bot) [RHEL-69809] {CVE-2024-53088}
- ice: fix truesize operations for PAGE_SIZE &gt;= 8192 (CKI Backport Bot) [RHEL-70660 RHEL-37905]
- ice: fix ICE_LAST_OFFSET formula (CKI Backport Bot) [RHEL-70660 RHEL-37905]
- ice: fix page reuse when PAGE_SIZE is over 8k (CKI Backport Bot) [RHEL-70660 RHEL-37905]
- nvme-fabrics: handle zero MAXCMD without closing the connection (Maurizio Lombardi) [RHEL-72970]
- selftests: netfilter: add test case for recent mismatch bug (Florian Westphal) [RHEL-71357 RHEL-60554]
- netfilter: nf_tables: unconditionally flush pending work before notifier (Florian Westphal) [RHEL-71357 RHEL-60554]
- netfilter: nft_set_pipapo_avx2: disable softinterrupts (Florian Westphal) [RHEL-71357 RHEL-60554]
- netfilter: nf_set_pipapo: fix initial map fill (Florian Westphal) [RHEL-71357 RHEL-60554]
- netfilter: nf_tables: store new sets in dedicated list (Florian Westphal) [RHEL-71357 RHEL-60554]
- netfilter: nft_socket: Fix a NULL vs IS_ERR() bug in nft_socket_cgroup_subtree_level() (Florian Westphal) [RHEL-71357 RHEL-60554]
- netfilter: nft_socket: make cgroupsv2 matching work with namespaces (Florian Westphal) [RHEL-71357 RHEL-60554]
- netfilter: nft_socket: fix sk refcount leaks (Florian Westphal) [RHEL-71357 RHEL-60554]
- tcp: Fix use-after-free of nreq in reqsk_timer_handler(). (Guillaume Nault) [RHEL-70541 RHEL-70449]
- tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink(). (Guillaume Nault) [RHEL-66329 RHEL-66328] {CVE-2024-50154}
- rcu: Use system_unbound_wq to avoid disturbing isolated CPUs (Waiman Long) [RHEL-61329 RHEL-50220]
- scsi: storvsc: Do not flag MAINTENANCE_IN return of SRB_STATUS_DATA_OVERRUN as an error (Cathy Avery) [RHEL-71393 RHEL-9848]
- scsi: storvsc: Handle additional SRB status values (Cathy Avery) [RHEL-71393 RHEL-9848]</changelog>
  <changelog author="Chao YE &lt;cye@redhat.com&gt; [5.14.0-503.23.1.el9_5]" date="1737374400">- printk: nbcon: Fix illegal RCU usage on thread wakeup (Derek Barbosa) [RHEL-73036]</changelog>
  <changelog author="Songhee Yeon &lt;dl_le@navercorp.com&gt; [5.14.0-503.23.1.el9_5]" date="1738756800">- kernel/rh_shadowman: add navix logo
- add Navix certificates</changelog>
</package>
<package pkgid="485d5700f4bffda0fd372db278feb1fbba81f00946eca760ce6ba3a830823edc" name="kernel" arch="src">
  <version epoch="0" ver="5.14.0" rel="503.23.2.el9_5"/>
  <changelog author="Lucas Zampieri &lt;lzampier@redhat.com&gt; [5.14.0-503.16.1.el9_5]" date="1732190400">- s390/dasd: fix error recovery leading to data corruption on ESE devices (Mete Durlu) [RHEL-64902 RHEL-55873]
- net/smc: fix illegal rmb_desc access in SMC-D connection dump (Steve Best) [RHEL-65436 RHEL-27748] {CVE-2024-26615}
- gitlab-ci: use zstream builder container image (Michael Hofmann)
- netfilter: nft_payload: sanitize offset and length before calling skb_checksum() (CKI Backport Bot) [RHEL-66856] {CVE-2024-50251}
- net: avoid potential underflow in qdisc_pkt_len_init() with UFO (CKI Backport Bot) [RHEL-65401] {CVE-2024-49949}
- block: initialize integrity buffer to zero before writing it to media (Ming Lei) [RHEL-58761 RHEL-54768] {CVE-2024-43854}
- proc: fix dentry/inode overinstantiating under /proc/${pid}/net (Joel Savitz) [RHEL-62824 RHEL-57703]
- iommu: Restore lost return in iommu_report_device_fault() (CKI Backport Bot) [RHEL-67364] {CVE-2024-44994}
- net: ena: Extend customer metrics reporting support (Kamal Heib) [RHEL-66933 RHEL-59968]
- net: ena: Add ENA Express metrics support (Kamal Heib) [RHEL-66933 RHEL-59968]
- xsk: fix batch alloc API on non-coherent systems (Felix Maurer) [RHEL-59884 RHEL-58954]
- selinux,smack: don't bypass permissions check in inode_setsecctx hook (Ondrej Mosnacek) [RHEL-66106] {CVE-2024-46695}
- PCI/AER: Disable AER service on suspend (Lenny Szubowicz) [RHEL-67037 RHEL-22265]
- ACPI: PM: s2idle: Evaluate all Low-Power S0 Idle _DSM functions (Mark Langsdorf) [RHEL-67037 RHEL-54149]
- mptcp: fallback when MPTCP opts are dropped after 1st data (CKI Backport Bot) [RHEL-62216 RHEL-62218]
- cpufreq: amd-pstate: add check for cpufreq_cpu_get's return value (David Arcari) [RHEL-61469 RHEL-45016]
- cpufreq/amd-pstate: Add the missing cpufreq_cpu_put() (David Arcari) [RHEL-61469 RHEL-45016]
- cpufreq/amd-pstate: Fix the scaling_max_freq setting on shared memory CPPC systems (David Arcari) [RHEL-61469 RHEL-45016]
- cpufreq/amd-pstate-ut: Convert nominal_freq to khz during comparisons (David Arcari) [RHEL-61469 RHEL-45016]
- cpufreq/amd-pstate: fix setting policy current frequency value (David Arcari) [RHEL-61469 RHEL-45016]
- netfilter: flowtable: initialise extack before use (CKI Backport Bot) [RHEL-58545] {CVE-2024-45018}</changelog>
  <changelog author="Lucas Zampieri &lt;lzampier@redhat.com&gt; [5.14.0-503.17.1.el9_5]" date="1732795200">- arm64: probes: Remove broken LDR (literal) uprobe support (CKI Backport Bot) [RHEL-66046] {CVE-2024-50099}
- qed: put cond_resched() in qed_dmae_operation_wait() (Michal Schmidt) [RHEL-61705 RHEL-6372]
- qed: allow the callee of qed_mcp_nvm_read() to sleep (Michal Schmidt) [RHEL-61705 RHEL-6372]
- qed: put cond_resched() in qed_grc_dump_ctx_data() (Michal Schmidt) [RHEL-61705 RHEL-6372]
- qed: make 'ethtool -d' 10 times faster (Michal Schmidt) [RHEL-61705 RHEL-6372]
- qed: allow sleep in qed_mcp_trace_dump() (Michal Schmidt) [RHEL-61705 RHEL-6372]
- sched/numa: Fix the potential null pointer dereference in task_numa_work() (CKI Backport Bot) [RHEL-66810] {CVE-2024-50223}
- irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs (Charles Mirabile) [RHEL-66969] {CVE-2024-50192}
- irqchip/gic-v4: Don't allow a VMOVP on a dying VPE (Charles Mirabile) [RHEL-66969] {CVE-2024-50192}
- perf/x86/intel/uncore: Support HBM and CXL PMON counters (Michael Petlan) [RHEL-65856]
- perf/x86/uncore: Cleanup unused unit structure (Michael Petlan) [RHEL-65856]
- perf/x86/uncore: Apply the unit control RB tree to PCI uncore units (Michael Petlan) [RHEL-65856]
- perf/x86/uncore: Apply the unit control RB tree to MSR uncore units (Michael Petlan) [RHEL-65856]
- perf/x86/uncore: Apply the unit control RB tree to MMIO uncore units (Michael Petlan) [RHEL-65856]
- perf/x86/uncore: Retrieve the unit ID from the unit control RB tree (Michael Petlan) [RHEL-65856]
- perf/x86/uncore: Support per PMU cpumask (Michael Petlan) [RHEL-65856]
- perf/x86/uncore: Save the unit control address of all units (Michael Petlan) [RHEL-65856]</changelog>
  <changelog author="Lucas Zampieri &lt;lzampier@redhat.com&gt; [5.14.0-503.18.1.el9_5]" date="1733227200">- bpf: Fix a kernel verifier crash in stacksafe() (CKI Backport Bot) [RHEL-66097 RHEL-66098] {CVE-2024-45020}
- bpf: Fix a sdiv overflow issue (CKI Backport Bot) [RHEL-64598 RHEL-64597] {CVE-2024-49888}
- bpf: Fix out-of-bounds write in trie_get_next_key() (CKI Backport Bot) [RHEL-66877] {CVE-2024-50262}
- bpf: Fix use-after-free in bpf_uprobe_multi_link_attach() (CKI Backport Bot) [RHEL-63331] {CVE-2024-47675}
- nfsd: ensure that nfsd4_fattr_args.context is zeroed out (Jay Shin) [RHEL-58884 RHEL-58883] {CVE-2024-46697}
- KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory (Jon Maloy) [RHEL-65872] {CVE-2024-50115}
- net: tighten bad gso csum offset check in virtio_net_hdr (Guillaume Nault) [RHEL-67683]
- udp: fix receiving fraglist GSO packets (Guillaume Nault) [RHEL-67683]
- Bluetooth: hci: fix null-ptr-deref in hci_read_supported_codecs (CKI Backport Bot) [RHEL-66804] {CVE-2024-50255}
- Bluetooth: ISO: Fix UAF on iso_sock_timeout (Bastien Nocera) [RHEL-66321] {CVE-2024-50124}
- Bluetooth: SCO: Fix UAF on sco_sock_timeout (Bastien Nocera) [RHEL-65928] {CVE-2024-50125}
- Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout (Bastien Nocera) [RHEL-65928] {CVE-2024-27398}
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (CKI Backport Bot) [RHEL-44173] {CVE-2024-38564}
- Bluetooth: bnep: fix wild-memory-access in proto_unregister (CKI Backport Bot) [RHEL-66365] {CVE-2024-50148}
- Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (CKI Backport Bot) [RHEL-57716 RHEL-36374] {CVE-2024-27399}</changelog>
  <changelog author="Lucas Zampieri &lt;lzampier@redhat.com&gt; [5.14.0-503.19.1.el9_5]" date="1733486400">- xfrm: validate new SA's prefixlen using SA family when sel.family is unset (Sabrina Dubroca) [RHEL-66462 RHEL-66461] {CVE-2024-50142}
- xfrm: fix one more kernel-infoleak in algo dumping (CKI Backport Bot) [RHEL-65960] {CVE-2024-50110}
- Revert "Merge: [qed] softlockup triggered by ethtool -d  [rhel-9.5.z]" (Lucas Zampieri) [RHEL-61705]
- tracing/hwlat: Fix a race during cpuhp processing (Tomas Glozar) [RHEL-69468]
- tracing/timerlat: Fix a race during cpuhp processing (Tomas Glozar) [RHEL-69468] {CVE-2024-49866}
- tracing/timerlat: Drop interface_lock in stop_kthread() (Tomas Glozar) [RHEL-69468]
- tracing/timerlat: Fix duplicated kthread creation due to CPU online/offline (Tomas Glozar) [RHEL-69468]
- ceph: remove the incorrect Fw reference check when dirtying pages (Xiubo Li) [RHEL-61416 RHEL-60255]</changelog>
  <changelog author="Lucas Zampieri &lt;lzampier@redhat.com&gt; [5.14.0-503.20.1.el9_5]" date="1734004800">- bnxt_en: Add support for user configured RSS key (Michal Schmidt) [RHEL-68699 RHEL-54645]
- bnxt_en: Add function to calculate Toeplitz hash (Michal Schmidt) [RHEL-68699 RHEL-54645]
- kvm: Note an RCU quiescent state on guest exit (Leonardo Bras) [RHEL-65734 RHEL-20288]
- rcu: Add rcutree.nohz_full_patience_delay to reduce nohz_full OS jitter (Leonardo Bras) [RHEL-65734 RHEL-20288]
- context_tracking: Fix KCSAN noinstr violation (Leonardo Bras) [RHEL-65734 RHEL-20288]
- perf/aux: Fix AUX buffer serialization (Michael Petlan) [RHEL-67495] {CVE-2024-46713}
- RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages (Mohammad Heib) [RHEL-66669 RHEL-52759] {CVE-2024-50208}</changelog>
  <changelog author="Lucas Zampieri &lt;lzampier@redhat.com&gt; [5.14.0-503.21.1.el9_5]" date="1734609600">- mlxsw: spectrum_ipip: Fix memory leak when changing remote IPv6 address (CKI Backport Bot) [RHEL-66899] {CVE-2024-50252}
- CVE-2024-53122 mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (Patrick Talbert) [RHEL-70083 RHEL-69670] {CVE-2024-53122}
- mm: make show_free_areas() static (Aristeu Rozanski) [RHEL-66998 RHEL-27743]
- mm: remove arguments of show_mem() (Aristeu Rozanski) [RHEL-66998 RHEL-27743]
- KVM: s390: Change virtual to physical address access in diag 0x258 handler (Thomas Huth) [RHEL-67922 RHEL-65229]
- KVM: s390: gaccess: Check if guest address is in memslot (Thomas Huth) [RHEL-67922 RHEL-65229]
- KVM: s390: Fix SORTL and DFLTCC instruction format error in __insn32_query (Thomas Huth) [RHEL-67922 RHEL-65229]
- s390/uv: Panic for set and remove shared access UVC errors (Thomas Huth) [RHEL-67922 RHEL-65229]
- KVM: s390: remove useless include (Thomas Huth) [RHEL-67922 RHEL-65229]
- s390/mm: Re-enable the shared zeropage for !PV and !skeys KVM guests (Thomas Huth) [RHEL-67922 RHEL-65229]
- mm/userfaultfd: Do not place zeropages when zeropages are disallowed (Thomas Huth) [RHEL-67922 RHEL-65229]
- s390: allow pte_offset_map_lock() to fail (Thomas Huth) [RHEL-67922 RHEL-54248]
- KVM: s390: vsie: Use virt_to_phys for crypto control block (Thomas Huth) [RHEL-67922 RHEL-65229]
- KVM: s390: vsie: Use virt_to_phys for facility control block (Thomas Huth) [RHEL-67922 RHEL-65229]
- gfs2: Prevent inode creation race (Andreas Gruenbacher) [RHEL-68137 RHEL-68102]
- gfs2: Only defer deletes when we have an iopen glock (Andreas Gruenbacher) [RHEL-68137 RHEL-68102]
- gfs2: Randomize GLF_VERIFY_DELETE work delay (Andreas Gruenbacher) [RHEL-62105 RHEL-60945]
- gfs2: Use mod_delayed_work in gfs2_queue_try_to_evict (Andreas Gruenbacher) [RHEL-62105 RHEL-60945]
- gfs2: Update to the evict / remote delete documentation (Andreas Gruenbacher) [RHEL-62105 RHEL-60945]
- gfs2: Call gfs2_queue_verify_delete from gfs2_evict_inode (Andreas Gruenbacher) [RHEL-62105 RHEL-60945]
- gfs2: Clean up delete work processing (Andreas Gruenbacher) [RHEL-62105 RHEL-60945]
- gfs2: Minor delete_work_func cleanup (Andreas Gruenbacher) [RHEL-62105 RHEL-60945]
- gfs2: Return enum evict_behavior from gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-62105 RHEL-60945]
- gfs2: Rename dinode_demise to evict_behavior (Andreas Gruenbacher) [RHEL-62105 RHEL-60945]
- gfs2: Rename GIF_{DEFERRED -&gt; DEFER}_DELETE (Andreas Gruenbacher) [RHEL-62105 RHEL-60945]
- gfs2: Faster gfs2_upgrade_iopen_glock wakeups (Andreas Gruenbacher) [RHEL-62105 RHEL-60945]
- gfs2: Fix unlinked inode cleanup (Andreas Gruenbacher) [RHEL-62105 RHEL-60945]
- gfs2: Allow immediate GLF_VERIFY_DELETE work (Andreas Gruenbacher) [RHEL-62105 RHEL-60945]
- gfs2: Initialize gl_no_formal_ino earlier (Andreas Gruenbacher) [RHEL-62105 RHEL-60945]
- gfs2: Rename GLF_VERIFY_EVICT to GLF_VERIFY_DELETE (Andreas Gruenbacher) [RHEL-62105 RHEL-60945]
- gfs2: make timeout values more explicit (Wolfram Sang) [RHEL-62105 RHEL-60945]
- gfs2: Simplify function gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-62105 RHEL-60945]
- gfs2: Rename SDF_DEACTIVATING to SDF_KILL (Andreas Gruenbacher) [RHEL-62105 RHEL-60945]
- smb: client: fix use-after-free of signing key (Jay Shin) [RHEL-69306 RHEL-66206]
- net/iucv: fix use after free in iucv_sock_close() (Mete Durlu) [RHEL-60300 RHEL-53992]
- KVM: arm64: Ensure vgic_ready() is ordered against MMIO registration (CKI Backport Bot) [RHEL-70294]</changelog>
  <changelog author="Chao YE &lt;cye@redhat.com&gt; [5.14.0-503.22.1.el9_5]" date="1736942400">- [s390] zcore: WRITE is "data source", not destination... (CKI Backport Bot) [RHEL-63078]
- arm64/sve: Discard stale CPU state when handling SVE traps (Mark Salter) [RHEL-72218] {CVE-2024-50275}
- bpf: Use raw_spinlock_t in ringbuf (Luis Claudio R. Goncalves) [RHEL-68992 RHEL-20608]
- rh_messages.h: un-unmaintain hfi1 (CKI Backport Bot) [RHEL-71322]
- scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths (Dick Kennedy) [RHEL-66055 RHEL-53595]
- scsi: lpfc: Handle mailbox timeouts in lpfc_get_sfp_info (Dick Kennedy) [RHEL-66055 RHEL-53595]
- ASoC: SOF: ipc4-topology: Preserve the DMA Link ID for ChainDMA on unprepare (Jaroslav Kysela) [RHEL-62030]
- ASoC: SOF: ipc4-topology: Only handle dai_config with HW_PARAMS for ChainDMA (Jaroslav Kysela) [RHEL-62030]
- ASoC: SOF: ipc4-topology: Use single token list for the copiers (Jaroslav Kysela) [RHEL-62030]
- ASoC: SOF: ipc4-topology: Use correct queue_id for requesting input pin format (Jaroslav Kysela) [RHEL-62030]
- ASoC: SOF: ipc4-topology: Adjust the params based on DAI formats (Jaroslav Kysela) [RHEL-62030]
- ASoC: SOF: ipc4-topology: Improve readability of sof_ipc4_prepare_dai_copier() (Jaroslav Kysela) [RHEL-62030]
- ASoC: SOF: ipc4-topology/pcm: Rename sof_ipc4_copier_is_single_format() (Jaroslav Kysela) [RHEL-62030]
- ASoC: SOF: ipc4-topology: Print out the channel count in sof_ipc4_dbg_audio_format (Jaroslav Kysela) [RHEL-62030]
- ASoC: SOF: ipc4-topology: support tdm slot number query (Jaroslav Kysela) [RHEL-62030]
- ASoC: SOF: ipc3-topology: support tdm slot number query (Jaroslav Kysela) [RHEL-62030]
- ASoC: SOF: sof-audio: add sof_dai_get_tdm_slots function (Jaroslav Kysela) [RHEL-62030]
- ASoC: SOF: sof-audio: rename dai clock setting query function (Jaroslav Kysela) [RHEL-62030]
- ASoC: SOF: ipc4-topology: Add support for NHLT with 16-bit only DMIC blob (Jaroslav Kysela) [RHEL-62030]
- ASoC: SOF: ipc4-topology: Correct DAI copier config and NHLT blob request (Jaroslav Kysela) [RHEL-62030]
- ASoC: SOF: ipc4-topology: Allow selective update in sof_ipc4_update_hw_params (Jaroslav Kysela) [RHEL-62030]
- ASoC: SOF: ipc4-topology: remove shadowed variable (Jaroslav Kysela) [RHEL-62030]
- Revert "ixgbe: Manual AN-37 for troublesome link partners for X550 SFI" (Ivan Vecera) [RHEL-65624]
- KVM: SVM: Propagate error from snp_guest_req_init() to userspace (Bandan Das) [RHEL-68361 RHEL-65840]
- KVM: SEV: Provide support for SNP_EXTENDED_GUEST_REQUEST NAE event (Bandan Das) [RHEL-68361 RHEL-65840]
- x86/sev: Move sev_guest.h into common SEV header (Bandan Das) [RHEL-68361 RHEL-65840]
- KVM: SEV: Provide support for SNP_GUEST_REQUEST NAE event (Bandan Das) [RHEL-68361 RHEL-65840]
- i40e: fix race condition by adding filter's intermediate sync state (CKI Backport Bot) [RHEL-69809] {CVE-2024-53088}
- ice: fix truesize operations for PAGE_SIZE &gt;= 8192 (CKI Backport Bot) [RHEL-70660 RHEL-37905]
- ice: fix ICE_LAST_OFFSET formula (CKI Backport Bot) [RHEL-70660 RHEL-37905]
- ice: fix page reuse when PAGE_SIZE is over 8k (CKI Backport Bot) [RHEL-70660 RHEL-37905]
- nvme-fabrics: handle zero MAXCMD without closing the connection (Maurizio Lombardi) [RHEL-72970]
- selftests: netfilter: add test case for recent mismatch bug (Florian Westphal) [RHEL-71357 RHEL-60554]
- netfilter: nf_tables: unconditionally flush pending work before notifier (Florian Westphal) [RHEL-71357 RHEL-60554]
- netfilter: nft_set_pipapo_avx2: disable softinterrupts (Florian Westphal) [RHEL-71357 RHEL-60554]
- netfilter: nf_set_pipapo: fix initial map fill (Florian Westphal) [RHEL-71357 RHEL-60554]
- netfilter: nf_tables: store new sets in dedicated list (Florian Westphal) [RHEL-71357 RHEL-60554]
- netfilter: nft_socket: Fix a NULL vs IS_ERR() bug in nft_socket_cgroup_subtree_level() (Florian Westphal) [RHEL-71357 RHEL-60554]
- netfilter: nft_socket: make cgroupsv2 matching work with namespaces (Florian Westphal) [RHEL-71357 RHEL-60554]
- netfilter: nft_socket: fix sk refcount leaks (Florian Westphal) [RHEL-71357 RHEL-60554]
- tcp: Fix use-after-free of nreq in reqsk_timer_handler(). (Guillaume Nault) [RHEL-70541 RHEL-70449]
- tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink(). (Guillaume Nault) [RHEL-66329 RHEL-66328] {CVE-2024-50154}
- rcu: Use system_unbound_wq to avoid disturbing isolated CPUs (Waiman Long) [RHEL-61329 RHEL-50220]
- scsi: storvsc: Do not flag MAINTENANCE_IN return of SRB_STATUS_DATA_OVERRUN as an error (Cathy Avery) [RHEL-71393 RHEL-9848]
- scsi: storvsc: Handle additional SRB status values (Cathy Avery) [RHEL-71393 RHEL-9848]</changelog>
  <changelog author="Chao YE &lt;cye@redhat.com&gt; [5.14.0-503.23.1.el9_5]" date="1737374400">- printk: nbcon: Fix illegal RCU usage on thread wakeup (Derek Barbosa) [RHEL-73036]</changelog>
  <changelog author="Scott Weaver &lt;scweaver@redhat.com&gt; [5.14.0-503.23.2.el9_5]" date="1738929600">- media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (CKI Backport Bot) [RHEL-78075 RHEL-69574] {CVE-2024-53104}</changelog>
  <changelog author="Songhee Yeon &lt;dl_le@navercorp.com&gt; [5.14.0-503.23.2.el9_5]" date="1739361600">- kernel/rh_shadowman: add navix logo
- add Navix certificates</changelog>
</package>
<package pkgid="59c08f06df7880e6e37aee8e4a83d836bed7634fc0d32e4bd2260474926fab1a" name="krb5" arch="src">
  <version epoch="0" ver="1.21.1" rel="4.el9_5"/>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.20.1-4" date="1673524800">- Set aes256-cts-hmac-sha384-192 as EXAMLE.COM master key in kdc.conf
- Add AES SHA-2 HMAC family as EXAMPLE.COM supported etypes in kdc.conf
  Resolves: rhbz#2068535</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.20.1-5" date="1674129600">- Bypass FIPS restrictions to use KRB5KDF in case AES SHA-1 HMAC is enabled
- Lazily load MD4/5 from OpenSSL if using RADIUS or RC4 enctype in FIPS mode
  Resolves: rhbz#2162461</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.20.1-6" date="1675166400">- Add support for MS-PAC extended KDC signature (CVE-2022-37967)
  Resolves: rhbz#2165827</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.20.1-7" date="1676376000">- Fix double free on kdb5_util key creation failure
  Resolves: rhbz#2166603</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.20.1-8" date="1677067200">- Fix datetime parsing in kadmin on s390x
  Resolves: rhbz#2169985</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.20.1-9" date="1686225600">- Do not disable PKINIT if some of the well-known DH groups are unavailable
  Resolves: rhbz#2187722
- Make PKINIT CMS SHA-1 signature verification available in FIPS mode
  Resolves: rhbz#2155607
- Allow to set PAC ticket signature as optional
  Resolves: rhbz#2178298</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-1" date="1691496000">- New upstream version (1.21.1)
- Fix double-free in KDC TGS processing (CVE-2023-39975)
- Add support for "pac_privsvr_enctype" KDB string attribute
  Resolves: rhbz#2060421</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-2" date="1710936000">- Fix memory leak in GSSAPI interface
  Resolves: RHEL-27251
- Fix memory leak in PMAP RPC interface
  Resolves: RHEL-27245
- Fix memory leak in failing UTF-8 to UTF-16 re-encoding for PAC
  Resolves: RHEL-27253
- Make TCP waiting time configurable
  Resolves: RHEL-17132</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-3" date="1720180800">- CVE-2024-37370 CVE-2024-37371
  Fix vulnerabilities in GSS message token handling
  Resolves: RHEL-45402 RHEL-45392</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-4" date="1729166400">- libkrad: implement support for Message-Authenticator (CVE-2024-3596)
  Resolves: RHEL-55423
- Fix various issues detected by static analysis
  Resolves: RHEL-58216
- Remove RSA protocol for PKINIT
  Resolves: RHEL-15323</changelog>
</package>
<package pkgid="50eaf9903ac0c41a972a54002323be28c3d55e113f4f1611fe13ee9095111e18" name="ksh" arch="src">
  <version epoch="3" ver="1.0.6" rel="4.el9_5"/>
  <changelog author="Vincent Mihalkovic &lt;vmihalko@redhat.com&gt; - 3:1.0.0~beta.1-3" date="1687867200">- fix segfault when PWD is unset
  Resolves: #2123066</changelog>
  <changelog author="Vincent Mihalkovic &lt;vmihalko@redhat.com&gt; - 3:1.0.6-1" date="1695038400">- Rebase to non-beta version, because upstream says it should to be used
  https://github.com/ksh93/ksh/issues/667#issuecomment-1653665697
- fix acl test case regression
  Resolves: #2034188</changelog>
  <changelog author="Vincent Mihalkovic &lt;vmihalko@redhat.com&gt; - 3:1.0.6-2" date="1704283200">- Fix crash on failure to trim ~/.sh_history (#20345)</changelog>
  <changelog author="Vincent Mihalkovic &lt;vmihalko@redhat.com&gt; - 3:1.0.6-3" date="1707566400">- Fix segfault in strdup
  Resolves: RHEL-25019</changelog>
  <changelog author="Vincent Mihalkovic &lt;vmihalko@redhat.com&gt; - 3:1.0.6-4" date="1727784000">- Fix bad default 'return' status in traps
  Resolves: RHEL-62228</changelog>
</package>
<package pkgid="63ba57dd1c181051d569095b7c6ae83fa093efc73a0f8de13d1a7d9a6570c587" name="libisoburn" arch="src">
  <version epoch="0" ver="1.5.4" rel="5.el9_5"/>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.5.4-5" date="1736942400">- Fix upgrades from non-alternativized versions/packages</changelog>
</package>
<package pkgid="26d8924330ff94b1f8377ac425a442a39bd0ff313a06da646fe591d93a615e90" name="libnfnetlink" arch="src">
  <version epoch="0" ver="1.0.1" rel="23.el9_5"/>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.0.1-22" date="1715169600">- libnfnetlink: Check getsockname() return code
- include: Silence gcc warning in linux_list.h</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.0.1-23" date="1732276800">- Bump release for CI</changelog>
</package>
<package pkgid="1f9a0bfc80ff48371572cc5b03156e5a631088233e23abf5037b10e147547764" name="libsemanage" arch="src">
  <version epoch="0" ver="3.6" rel="2.1.el9_5"/>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.5-0.rc1.1" date="1672660800">- SELinux userspace 3.5-rc1 release</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.5-0.rc2.1" date="1673956800">- SELinux userspace 3.5-rc2 release</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.5-0.rc3.1" date="1676376000">- SELinux userspace 3.5-rc3 release</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.5-1" date="1677153600">- SELinux userspace 3.5 release</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.5-2" date="1679486400">- Include more parameters in the module checksum (#2173959)</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.6-0.rc1.1" date="1699876800">- SELinux userspace 3.6-rc1 release</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.6-1" date="1702468800">- SELinux userspace 3.6 release</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.6-2.1" date="1731067200">- open lock_file with O_RDWR (RHEL-60503)</changelog>
</package>
<package pkgid="e20a4013e78eff3b15f50896dfe6303e42661ac71a517f5a7cfcd25678cad7e0" name="libsndfile" arch="src">
  <version epoch="0" ver="1.0.31" rel="8.el9_5.2"/>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1.0.31-8" date="1698840000">- fix integer overflows causing CVE-2022-33065 (#RHEL-3751)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1.0.31-8.1" date="1732017600">- fix crash in ogg vorbis (#RHEL-65096) (CVE-2024-50612)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1.0.31-8.2" date="1732104000">- add missing patch (#RHEL-65095)</changelog>
</package>
<package pkgid="0a854505aabc6afb69c85ebbb0ee22a2b78319711e9839ed480767695ae50fdd" name="libsoup" arch="src">
  <version epoch="0" ver="2.72.0" rel="8.el9_5.2"/>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.72.0-8.el9_5.1" date="1731412800">- Backport upstream patch for CVE-2024-52530 - HTTP request smuggling via stripping null bytes from the ends of header names
- Resolves: RHEL-67080</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.72.0-8.el9_5.2" date="1731412801">- Backport upstream patch for CVE-2024-52532 - infinite loop while reading websocket data
- Resolves: RHEL-67068</changelog>
</package>
<package pkgid="96ef28ea1cbfe92328d3384abb9da7dc3cb2e0ee3bb37d8f20b5a4abced5962a" name="libsoup" arch="src">
  <version epoch="0" ver="2.72.0" rel="8.el9_5.3"/>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.72.0-8.el9_5.1" date="1731412800">- Backport upstream patch for CVE-2024-52530 - HTTP request smuggling via stripping null bytes from the ends of header names
- Resolves: RHEL-67080</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.72.0-8.el9_5.2" date="1731412801">- Backport upstream patch for CVE-2024-52532 - infinite loop while reading websocket data
- Resolves: RHEL-67068</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.72.0-8.3" date="1738065600">- Backport upstream patch for CVE-2024-52531 - buffer overflow via UTF-8 conversion in soup_header_parse_param_list_strict
  Resolves: RHEL-76381</changelog>
</package>
<package pkgid="7b29ea5766caeefacda253c3255a92d1d6972ac25b95629b245509994117e39e" name="libvirt" arch="src">
  <version epoch="0" ver="10.5.0" rel="7.2.el9_5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 10.4.0-1" date="1717502400">- Rebased to libvirt-10.4.0 (RHEL-7489)
- The rebase also fixes the following bugs:
    RHEL-29642, RHEL-30373, RHEL-32182, RHEL-33044, RHEL-33082
    RHEL-34615, RHEL-35948, RHEL-36565, RHEL-36721, RHEL-39271
    RHEL-39400</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 10.5.0-1" date="1719835200">- Rebased to libvirt-10.5.0 (RHEL-21381)
- The rebase also fixes the following bugs:
    RHEL-23833, RHEL-29642, RHEL-37542, RHEL-39969, RHEL-40899
    RHEL-43309</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 10.5.0-2" date="1720785600">- vmx: Do not require all ID data for VMWare Distributed Switch (RHEL-46099)
- tests: vhostuser: add virtiofsd json descriptor (RHEL-7108, RHEL-40135)
- tests: qemuxmlconf: adjust test case to new virtiofsd (RHEL-7108, RHEL-40135)
- qemu: fill capabilities for virtiofsd (RHEL-7108, RHEL-40135)
- qemu: do not use deprecated options for new virtiofsd (RHEL-7108)
- qemu: migration: allow migration for virtiofs (RHEL-40135)
- virt-host-validate: Drop extra "PASS" (RHEL-46868)
- qemu: Don't leave beingDestroyed=true on inactive domain (RHEL-43309)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 10.5.0-3" date="1721649600">- vmx: Be even more lax when trying to comprehend serial ports (RHEL-32182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 10.5.0-4" date="1721736000">- virt-host-validate: Allow longer list of CPU flags (RHEL-39969)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 10.5.0-5" date="1723204800">- qemu: virtiofs: cache: use 'never' instead of 'none' (RHEL-50329)
- qemu_domain: Strip &lt;acpi/&gt; from s390(x) definitions (RHEL-49516)
- qemuxmlconftest: Add tests for the ACPI stripping hack on s390 (RHEL-49516)
- vsh: Allow vshReadlineInit() to be called multiple times (RHEL-53560)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 10.5.0-6" date="1725278400">- udevListInterfaces: Honour array length for zero-length NULL arrays (CVE-2024-8235) (CVE-2024-8235, RHEL-55373)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 10.5.0-7" date="1725624000">- qemu: Refactor default panic model (RHEL-56451)
- qemu: Sometimes the default panic model doesn't exist (RHEL-56451)
- qemu: Use pvpanic by default on aarch64 (RHEL-56451)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 10.5.0-7.1.el9_5" date="1729598400">- qemu: migration: Pre-create QCOW2 images for non-shared storage with 0 allocation (RHEL-61177)
- virTypedParamsFilter: Adjust return type and docs (RHEL-61177)
- virTypedParamsGetStringList: Refactor and adjust docs (RHEL-61177)
- virTypedParamsFilter: Introduce option to filter also by type (RHEL-61177)
- virTypedParamsGetStringList: Ensure that returned array is NULL if there are no matching fields (RHEL-61177)
- virTypedParamsGetStringList: Ensure that returned string list is NULL-terminated (RHEL-61177)
- qemuMigrationSrcBeginPhaseBlockDirtyBitmaps: Use qemuMigrationAnyCopyDisk() (RHEL-61177)
- qemu: migration: Don't log 'nmigrate_disks' (RHEL-61177)
- qemu: migration: Avoid use of 'nmigration_disks' (RHEL-61177)
- qemu: migration: Extract validation of disk target list (RHEL-61177)
- qemu: migration: Remove 'nmigration_disks' variable from all places (RHEL-61177)
- qemu: Introduce and wire in 'VIR_MIGRATE_PARAM_MIGRATE_DISKS_DETECT_ZEROES' (RHEL-61177)
- virsh: Add support for VIR_MIGRATE_PARAM_MIGRATE_DISKS_DETECT_ZEROES migration parameter (RHEL-61177)
- qemu: migration: Fix blockdev config with VIR_MIGRATE_PARAM_MIGRATE_DISKS_DETECT_ZEROES (RHEL-61177)
- docs: Add warning about using a cleared image with VIR_MIGRATE_PARAM_MIGRATE_DISKS_DETECT_ZEROES_ZEROES (RHEL-61177)
- util: Look for newer name of cpu wait time statistic (RHEL-61511)
- vmx: Allow '*' to appear in VMX file keys (RHEL-58677)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 10.5.0-7.2.el9_5" date="1730721600">- qemu: Add support for postcopy-recover-setup migration state (RHEL-63877)
- qemu: Avoid false failure when resuming post-copy migration (RHEL-63877)</changelog>
</package>
<package pkgid="ccdae0ba9d1501a24b6aca2a79becd2bab14307bf997a018427aebf8fc91b7b1" name="libvirt" arch="src">
  <version epoch="0" ver="10.5.0" rel="7.4.el9_5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 10.5.0-2" date="1720785600">- vmx: Do not require all ID data for VMWare Distributed Switch (RHEL-46099)
- tests: vhostuser: add virtiofsd json descriptor (RHEL-7108, RHEL-40135)
- tests: qemuxmlconf: adjust test case to new virtiofsd (RHEL-7108, RHEL-40135)
- qemu: fill capabilities for virtiofsd (RHEL-7108, RHEL-40135)
- qemu: do not use deprecated options for new virtiofsd (RHEL-7108)
- qemu: migration: allow migration for virtiofs (RHEL-40135)
- virt-host-validate: Drop extra "PASS" (RHEL-46868)
- qemu: Don't leave beingDestroyed=true on inactive domain (RHEL-43309)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 10.5.0-3" date="1721649600">- vmx: Be even more lax when trying to comprehend serial ports (RHEL-32182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 10.5.0-4" date="1721736000">- virt-host-validate: Allow longer list of CPU flags (RHEL-39969)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 10.5.0-5" date="1723204800">- qemu: virtiofs: cache: use 'never' instead of 'none' (RHEL-50329)
- qemu_domain: Strip &lt;acpi/&gt; from s390(x) definitions (RHEL-49516)
- qemuxmlconftest: Add tests for the ACPI stripping hack on s390 (RHEL-49516)
- vsh: Allow vshReadlineInit() to be called multiple times (RHEL-53560)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 10.5.0-6" date="1725278400">- udevListInterfaces: Honour array length for zero-length NULL arrays (CVE-2024-8235) (CVE-2024-8235, RHEL-55373)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 10.5.0-7" date="1725624000">- qemu: Refactor default panic model (RHEL-56451)
- qemu: Sometimes the default panic model doesn't exist (RHEL-56451)
- qemu: Use pvpanic by default on aarch64 (RHEL-56451)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 10.5.0-7.1.el9_5" date="1729598400">- qemu: migration: Pre-create QCOW2 images for non-shared storage with 0 allocation (RHEL-61177)
- virTypedParamsFilter: Adjust return type and docs (RHEL-61177)
- virTypedParamsGetStringList: Refactor and adjust docs (RHEL-61177)
- virTypedParamsFilter: Introduce option to filter also by type (RHEL-61177)
- virTypedParamsGetStringList: Ensure that returned array is NULL if there are no matching fields (RHEL-61177)
- virTypedParamsGetStringList: Ensure that returned string list is NULL-terminated (RHEL-61177)
- qemuMigrationSrcBeginPhaseBlockDirtyBitmaps: Use qemuMigrationAnyCopyDisk() (RHEL-61177)
- qemu: migration: Don't log 'nmigrate_disks' (RHEL-61177)
- qemu: migration: Avoid use of 'nmigration_disks' (RHEL-61177)
- qemu: migration: Extract validation of disk target list (RHEL-61177)
- qemu: migration: Remove 'nmigration_disks' variable from all places (RHEL-61177)
- qemu: Introduce and wire in 'VIR_MIGRATE_PARAM_MIGRATE_DISKS_DETECT_ZEROES' (RHEL-61177)
- virsh: Add support for VIR_MIGRATE_PARAM_MIGRATE_DISKS_DETECT_ZEROES migration parameter (RHEL-61177)
- qemu: migration: Fix blockdev config with VIR_MIGRATE_PARAM_MIGRATE_DISKS_DETECT_ZEROES (RHEL-61177)
- docs: Add warning about using a cleared image with VIR_MIGRATE_PARAM_MIGRATE_DISKS_DETECT_ZEROES_ZEROES (RHEL-61177)
- util: Look for newer name of cpu wait time statistic (RHEL-61511)
- vmx: Allow '*' to appear in VMX file keys (RHEL-58677)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 10.5.0-7.2.el9_5" date="1730721600">- qemu: Add support for postcopy-recover-setup migration state (RHEL-63877)
- qemu: Avoid false failure when resuming post-copy migration (RHEL-63877)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 10.5.0-7.3.el9_5" date="1733400000">- libvirt_private.syms: Export virDomainIOMMUDefNew() (RHEL-69725)
- qemu: Turn EIM IOMMU on automagically (RHEL-69725)
- qemu_domain: Automagically add IOMMU if needed (RHEL-69725)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 10.5.0-7.4.el9_5" date="1734696000">- qemu: Enable I/O APIC if needed (RHEL-69725)
- qemu: Enable I/O APIC even more frequently (RHEL-69725)</changelog>
</package>
<package pkgid="a72757da7b815038a34997810939f3fa10e9f18b32fd300cb56403b96dd29b75" name="libvpx" arch="src">
  <version epoch="0" ver="1.9.0" rel="8.el9_5"/>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.9.0-6" date="1696334400">- Add patch for CVE-2023-44488
- Resolves: RHEL-11636</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.9.0-7" date="1696507200">- Add patch for CVE-2023-5217
- Resolves: RHEL-10631</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.9.0-8" date="1720180800">- Add patch to fix integer overflows.
- Disable LTO to fix build
- Resolves: RHEL-58144</changelog>
</package>
<package pkgid="76a448687f4d94681b8662ffe9443cfbd4caf1459f38e2804c8b79045695346e" name="linux-firmware" arch="src">
  <version epoch="0" ver="20241121" rel="146.2.el9_5"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20230814-139" date="1692014400">- CVE-2023-20569 linux-firmware: hw amd: Return Address Predictor velunerability leading to information disclosure (rhbz 2230418)
- [AMDCLIENT 9.3 Bug] Linux FW update to fix multi monitor behind TBT3 dock &amp; random flickers (rhbz 2227845)
- amdgpu: partially revert firmware for GC 11.0.0 and GC 11.0.2
- linux-firmware: Update AMD cpu microcode
- Merge branch 'for-upstream' of http://git.chelsio.net/pub/git/linux-firmware
- rtl_bt: Add firmware v2 file for RTL8852C
- Revert "rtl_bt: Update RTL8852C BT USB firmware to 0x040D_7225"
- amdgpu: DMCUB updates for various AMDGPU asics
- cxgb4: Update firmware to revision 1.27.4.0
- Merge branch 'rb3-update' of https://github.com/lumag/linux-firmware
- Merge https://github.com/pkshih/linux-firmware
- Mellanox: Add new mlxsw_spectrum firmware xx.2012.1012
- linux-firmware: Add URL for latest FW binaries for NXP BT chipsets
- rtw89: 8851b: update firmware to v0.29.41.1
- qcom: sdm845: add RB3 sensors DSP firmware
- amdgpu: Update DMCUB for DCN314 &amp; Yellow Carp
- Merge branch 'dmc-adlp_2.20-mtl_2.13' of git://anongit.freedesktop.org/drm/drm-firmware
- Merge branch 'for-upstream' of https://github.com/CirrusLogic/linux-firmware
- ice: add LAG-supporting DDP package
- i915: Update MTL DMC to v2.13
- i915: Update ADLP DMC to v2.20
- cirrus: Add CS35L41 firmware for Dell Oasis Models</changelog>
  <changelog author="Scott Weaver &lt;scweaver@redhat.com&gt; - 20230926-140" date="1695729600">- [Intel 9.4 FEAT] [SPR][EMR] QAT firmware update available (rhbz 2238636)
- [AMDCLIENT 9.4 Feature] Sub-Feature: AMD PMF Linux FW (rhbz 2227340)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- amd_pmf: Add initial PMF TA for Smart PC Solution Builder
- linux-firmware: Update FW files for MRVL PCIE 8997 chipsets
- rtl_bt: Update RTL8851B BT USB firmware to 0x048A_D230
- iwlwifi: add new FWs from core81-65 release
- iwlwifi: update cc/Qu/QuZ firmwares for core81-65 release
- linux-firmware: amd-ucode: Add note on fam19h warnings
- i915: update MTL HuC to version 8.5.4
- amdgpu: update DMCUB to 0.0.183.0 for various AMDGPU ASICs
- linux-firmware: add link to sc8280xp audioreach firmware
- qcom: sm8250: add RB5 sensors DSP firmware
- qcom: Update vpu-1.0 firmware
- qcom: sm8250: update DSP firmware
- qcom: add firmware for the onboard WiFi on qcm2290 / qrb4210
- qcom: add venus firmware files for v6.0
- qcom: add firmware for QRB4210 platforms
- qcom: add firmware for QCM2290 platforms
- qcom: add GPU firmware for QCM2290 / QRB2210
- ath10k/WCN3990: move wlanmdsp to qcom/sdm845
- WHENCE: Don't compress qcom json files
- WHENCE: amd-ucode: Use new RawFile keyword
- Create symlinks for all firmware that is duplicate using rdfind
- QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00605
- Fix carl9170fw shell scripts for shellcheck errors
- i915: Update MTL DMC to v2.16
- copy-firmware: Introduce 'RawFile' keyword
- copy-firmware: Support additional compressor options
- linux-firmware: Update firmware file for Intel Bluetooth AX203
- linux-firmware: Update firmware file for Intel Bluetooth AX203
- linux-firmware: Update firmware file for Intel Bluetooth AX211
- linux-firmware: Update firmware file for Intel Bluetooth AX211
- linux-firmware: Update firmware file for Intel Bluetooth AX210
- linux-firmware: Update firmware file for Intel Bluetooth AX200
- linux-firmware: Update firmware file for Intel Bluetooth AX201
- linux-firmware: update firmware for qat_4xxx devices
- linux-firmware: Update AMD SEV firmware
- amdgpu: update DMCUB to 0.0.181.0 for various AMDGPU ASICs
- rtw89: 8852b: update fw to v0.29.29.3
- rtw89: 8851b: update fw to v0.29.41.2
- i915: add GSC 102.0.0.1655 for MTL
- amdgpu: DMCUB updates for various AMDGPU asics
- amdgpu: DMCUB updates for various AMDGPU asics
- cirrus: Add CS35L41 firmware for HP G11 models</changelog>
  <changelog author="Scott Weaver &lt;scweaver@redhat.com&gt; - 20231030-141" date="1699358400">- CVE-2022-46329 linux-firmware: hw: intel: Protection mechanism failure for some Intel(R) PROSet/Wireless WiFi (RHEL-14264)
- amd-ucode early loading broken [RHEL-15387]
- Update to upstream 20231030 release.
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- Intel Bluetooth: Update firmware file for Intel Bluetooth AX211
- Intel Bluetooth: Update firmware file for Intel Bluetooth AX210
- Intel Bluetooth: Update firmware file for Intel Bluetooth Magnetor AX101
- Intel Bluetooth: Update firmware file for Intel Bluetooth AX203
- Intel Bluetooth: Update firmware file for Intel Bluetooth Magnetor AX201
- Intel Bluetooth: Update firmware file for Intel Bluetooth Magnetor AX211
- Intel Bluetooth: Update firmware file for Intel Bluetooth BE200
- rtl_nic: update firmware of RTL8156B
- linux-firmware: Update AMD cpu microcode
- amdgpu: update SMU 13.0.0 firmware
- linux-firmware: add Amlogic bluetooth firmware
- i915: Add GuC v70.13.1 for DG2, TGL, ADL-P and MTL
- iwlwifi: add a missing FW from core80-39 release
- WHENCE: add symlink for BananaPi M64
- linux-firmware: Add firmware file for Intel Bluetooth AX211
- linux-firmware: Update firmware file for Intel Bluetooth AX201
- linux-firmware: Update firmware file for Intel Bluetooth AX211
- linux-firmware: Update firmware file for Intel Bluetooth AX210
- linux-firmware: Update firmware file for Intel Bluetooth 9560
- linux-firmware: Update firmware file for Intel Bluetooth 9260
- i915: Update MTL DMC to v2.17
- amdgpu: update raven firmware from 5.7 branch
- amdgpu: update SDMA 5.2.7 firmware from 5.7 branch
- amdgpu: update PSP 13.0.8 firmware from 5.7 branch
- amdgpu: update GC 10.3.7 firmware from 5.7 branch
- amdgpu: update DCN 3.1.6 firmware from 5.7 branch
- amdgpu: update SDMA 5.2.6 firmware from 5.7 branch
- amdgpu: update PSP 13.0.5 firmware from 5.7 branch
- amdgpu: update GC 10.3.6 firmware from 5.7 branch
- amdgpu: update VCN 4.0.0 firmware from 5.7 branch
- amdgpu: update SMU 13.0.0 firmware from 5.7 branch
- amdgpu: update SDMA 6.0.0 firmware from 5.7 branch
- amdgpu: update PSP 13.0.0 firmware from 5.7 branch
- amdgpu: update GC 11.0.0 firmware from 5.7 branch
- amdgpu: update vega20 firmware from 5.7 branch
- amdgpu: update beige goby firmware from 5.7 branch
- amdgpu: update vega12 firmware from 5.7 branch
- amdgpu: update vega10 firmware from 5.7 branch
- amdgpu: update dimgrey cavefish firmware from 5.7 branch
- amdgpu: update picasso firmware from 5.7 branch
- amdgpu: update navy flounder firmware from 5.7 branch
- amdgpu: update vangogh firmware from 5.7 branch
- amdgpu: update green sardine firmware from 5.7 branch
- amdgpu: update sienna cichlid firmware from 5.7 branch
- amdgpu: update PSP 13.0.11 firmware from 5.7 branch
- amdgpu: update GC 11.0.4 firmware from 5.7 branch
- amdgpu: update SDMA 6.0.1 firmware from 5.7 branch
- amdgpu: update PSP 13.0.4 firmware from 5.7 branch
- amdgpu: update GC 11.0.1 firmware from 5.7 branch
- amdgpu: update navi14 firmware from 5.7 branch
- amdgpu: update renoir firmware from 5.7 branch
- amdgpu: update navi12 firmware from 5.7 branch
- amdgpu: update VCN 4.0.4 firmware from 5.7 branch
- amdgpu: update SMU 13.0.7 firmware from 5.7 branch
- amdgpu: update SDMA 6.0.2 firmware from 5.7 branch
- amdgpu: update PSP 13.0.7 firmware from 5.7 branch
- amdgpu: update GC 11.0.2 firmware from 5.7 branch
- amdgpu: update yellow carp firmware from 5.7 branch
- amdgpu: update navi10 firmware from 5.7 branch
- amdgpu: update raven2 firmware from 5.7 branch
- amdgpu: update SMU 13.0.10 firmware from 5.7 branch
- amdgpu: update PSP 13.0.10 firmware from 5.7 branch
- amdgpu: update GC 11.0.3 firmware from 5.7 branch
- amdgpu: update aldebaran firmware from 5.7 branch
- iwlwifi: add FWs for new GL and MA device types with multiple RF modules</changelog>
  <changelog author="Scott Weaver &lt;scweaver@redhat.com&gt; - 20240109-142" date="1704801600">- [DELL 9.3 BUG]System resume failed from suspend and auto reboot with WCN6856 (1/10 fail rate) (RHEL-4431)
- [DELL 9.3 FEAT] - linux-firmware: Include to support QCA WIFI-7 WCN7850 Module: wifi firmware support (RHEL-10212)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- linux-firmware: update firmware for w1u_uart
- amdgpu: DMCUB updates for DCN314
- Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211
- Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101
- Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203
- Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210
- amlogic/bluetooth: add firmware bin of W1 serial soc(w1u_uart)
- linux-firmware: add firmware for mediatek bluetooth chip (MT7925)
- linux-firmware: add firmware for MT7925
- ASoC: tas2563: Add dsp firmware for laptops or other mobile devices
- rtl_bt: Add firmware and config files for RTL8852BT/RTL8852BE-VT
- ASoC: tas2781: Add dsp firmware for different laptops
- ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.36
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: WCN6750 hw1.0: update board-2.bin
- ath11k: IPQ8074 hw2.0: update board-2.bin
- ath10k: WCN3990 hw1.0: update board-2.bin
- ath10k: QCA9888 hw2.0: update board-2.bin
- ath10k: QCA4019 hw1.0: update board-2.bin
- ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00309-
- ath12k: add new driver and firmware for WCN7850
- iwlwifi: update gl FW for core80-165 release
- intel: vsc: Add firmware for Visual Sensing Controller
- cirrus: Add CS35L41 firmware and tunings for ASUS Zenbook 2023 Models
- cirrus: Add CS35L41 firmware and tunings for ASUS Zenbook 2022 Models
- QCA: Add bluetooth firmware nvm files for QCA2066
- QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00629
- amdgpu: DMCUB updates for various AMDGPU ASICs
- qcom: Add Audio firmware for SM8650 QRD
- qcom: Add Audio firmware for SM8550 QRD
- wfx: update to firmware 3.17
- wfx: fix broken firmware
- linux-firmware: Update AMD cpu microcode
- cxgb4: Update firmware to revision 1.27.5.0
- linux-firmware: add firmware for en8811h 2.5G ethernet phy
- s5p-mfc: Add MFC v12 Firmware
- rtl_bt: Update RTL8852A BT USB firmware to 0xDFC8_145F
- ice: update ice DDP wireless_edge package to 1.3.13.0
- linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
- linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7921 WiFi device
- amdgpu: update DMCUB firmware to 0.0.194.0 for DCN321 and DCN32
- qcom: update qrb4210 firmware
- qcom: update qcm2290 firmware
- qcom: update qcm2290/qrb4210 WiFi firmware file
- qcom: update Venus firmware file for v6.0
- powervr: add firmware for Imagination Technologies AXE-1-16M GPU
- ice: update ice DDP comms package to 1.3.45.0
- ice: update ice DDP package to 1.3.35.0
- mediatek: Remove an unused packed library
- mediatek: Sync shared memory structure changes
- Intel Bluetooth: Update firmware file for Intel Bluetooth BE200
- amdgpu: update DMCUB firmware to 0.0.193.0 for DCN31 and DCN314
- i915: Update MTL DMC to v2.19
- iwlwifi: fix for the new FWs from core83-55 release
- iwlwifi: add new FWs from core83-55 release
- iwlwifi: update cc/Qu/QuZ firmwares for core83-55 release
- linux-firmware: Add firmware for Cirrus CS35L41 on HP G11 Laptops
- linux-firmware: Add firmware for Cirrus CS35L41 on 2024 ASUS Zenbook Laptops
- linux-firmware: add firmware for mt7988 internal 2.5G ethernet phy
- Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101
- Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203
- Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101
- Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203
- Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211
- Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211
- amdgpu: DMCUB updates for various AMDGPU ASICs
- nvidia: add GSP-RM version 535.113.01 firmware images
- Intel Bluetooth: Update firmware file for Intel Bluetooth BE200
- amdgpu: DMCUB updates for various AMDGPU ASICs
- qca: add bluetooth firmware for WCN3988
- linux-firmware: ixp4xx: Add the IXP4xx firmware
- rtw89: 8852b: update fw to v0.29.29.5
- rtw89: 8852b: update fw to v0.29.29.4
- rtw89: 8851b: update fw to v0.29.41.3</changelog>
  <changelog author="Scott Weaver &lt;scweaver@redhat.com&gt; - 20240219-143" date="1708344000">- [AMDCLIENT 9.4 Bug] Update PHX 1/2 firmware to fix some PSR related issues (RHEL-25408)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: First GuC release for LNL and Xe
- i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL
- linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7)
- brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet
- ice: update ice DDP package to 1.3.36.0
- Intel IPU3 ImgU: Move firmware file under intel/ipu
- Intel IPU6: Move firmware binaries under ipu/
- linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models
- panthor: Add initial firmware for Gen10 Arm Mali GPUs
- amdgpu: DMCUB Updates for DCN321: 7.0.38.0
- amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0
- qcom: update venus firmware file for v5.4
- Montage: add firmware for Mont-TSSE
- amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32
- linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware
- linux-firmware: Fix filenames for some CS35L41 firmwares for HP
- linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2
- rtl_nic: add firmware for RTL8126A
- linux-firmware: intel: Add IPU6 firmware binaries
- ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37
- qcom: Add Audio firmware for SM8550 HDK
- Revert "amdgpu: DMCUB updates for various AMDGPU ASICs"
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet
- amdgpu: DMCUB updates for various AMDGPU ASICs
- qcom: Add Audio firmware for SM8650 MTP
- linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops
- amdgpu: update raven2 firmware
- amdgpu: update raven firmware
- amdgpu: update SDMA 5.2.7 firmware
- amdgpu: update PSP 13.0.8 firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update SDMA 5.2.6 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: add GC 11.0.1 rlc_1 firmware
- amdgpu: update vega20 firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update beige goby firmware
- amdgpu: update picasso firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update vangogh firmware
- amdgpu: update navy flounder firmware
- amdgpu: update green sardine firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update arcturus firmware
- amdgpu: update navi14 firmware
- amdgpu: add VCN 4.0.3 firmware
- amdgpu: add SDMA 4.4.2 firmware
- amdgpu: add SMU 13.0.6 firmware
- amdgpu: add PSP 13.0.6 firmware
- amdgpu: Add GC 9.4.3 firmware
- amdgpu: update renoir firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SMU 13.0.7 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update navi12 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update navi10 firmware
- amdgpu: update aldebaran firmware
- linux-firmware: Update AMD cpu microcode
- RTL8192E: Remove old realtek WiFi firmware
- Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101
- Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203
- Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203
- Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211
- Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211
- amdgpu: DMCUB updates for DCN314
- qcom: Update the firmware for Adreno a630 family of GPUs
- cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops
- linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops
- linux-firmware: update firmware for qat_4xxx devices
- cirrus: Add firmware file for cs42l43
- amdgpu: DMCUB updates for DCN312
- amdgpu: DMCUB updates for DCN314
- Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211
- Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101
- Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203
- Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20240603-144" date="1717416000">- [AMD 9.3 FEAT]: MI300 GPU firmware (RHEL-10056)
- CVE-2023-31346 linux-firmware: kernel: Reserved fields in guest message responses may not be zero initialized [rhel-9.4.z] (RHEL-35597)
- linux-firmware ships encrypted zip files (named *.ncf) (RHEL-32145)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- amdgpu: add support for PSP 14.0.1
- amdgpu: add support for VPE 6.1.1
- amdgpu: add support for VCN 4.0.6
- amdgpu: add support for SDMA 6.1.1
- amdgpu: add support for GC 11.5.1
- amdgpu: Add support for DCN 3.5.1
- cnm: update chips&amp;media wave521c firmware.
- linux-firmware: Add ordinary firmware for RTL8821AU device
- amdgpu: add new ISP 4.1.1 firmware
- amdgpu: DMCUB updates for various AMDGPU ASICs
- linux-firmware: Amphion: Update vpu firmware
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel Bluetooth Magnetor core
- linux-firmware: Update firmware file for Intel Bluetooth Solar core
- linux-firmware: Update firmware file for Intel Bluetooth Solar core
- i915: Add BMG DMC v2.06
- linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306
- linux-firmware: Update firmware tuning for HP Consumer Laptop
- amdgpu: DMCUB updates for various AMDGPU ASICs
- rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B
- rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B
- cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops
- linux-firmware: Add firmware and tuning for Lenovo Y770S
- amdgpu: DMCUB updates for various AMDGPU ASICs
- linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops
- i915: Update Xe2LPD DMC to v2.20
- linux-firmware: Remove Calibration Firmware and Tuning for CS35L41
- linux-firmware: Add firmware for Lenovo Thinkbook 13X
- ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop
- amdgpu: add DMCUB 3.5 firmware
- amdgpu: add VPE 6.1.0 firmware
- amdgpu: add VCN 4.0.5 firmware
- amdgpu: add UMSCH 4.0.0 firmware
- amdgpu: add SDMA 6.1.0 firmware
- amdgpu: add PSP 14.0.0  firmware
- amdgpu: add GC 11.5.0 firmware
- amdgpu: update license date
- Montage: update firmware for Mont-TSSE
- linux-firmware: Add tuning parameter configs for CS35L41 Firmware
- linux-firmware: Fix firmware names for Laptop SSID 104316a3
- linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7
- linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
- linux-firmware: update firmware for MT7922 WiFi device
- iwlwifi: add gl FW for core87-44 release
- iwlwifi: add ty/So/Ma firmwares for core87-44 release
- iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release
- nvidia: Update Tegra210 XUSB firmware to v50.29
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update renoir firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update sdma 6.0.1 firmware
- amdgpu: update psp 13.0.4 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update vega20 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update green sardine firmware
- amdgpu: update vega12 firmware
- amdgpu: update raven2 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update sdma 6.0.2 firmware
- amdgpu: update ipsp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update vega10 firmware
- amdgpu: update raven firmware
- amdgpu: update navi14 firmware
- amdgpu: update smu 13.0.10 firmware
- amdgpu: update sdma 6.0.3 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update vcn 3.1.2 firmware
- amdgpu: update psp 13.0.5 firmware
- amdgpu: update gc 10.3.6 firmware
- amdgpu: update navi12 firmware
- amdgpu: update arcturus firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: update vcn 4.0.3 firmware
- amdgpu: update smu 13.0.6 firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update smu 13.0.0 firmware
- amdgpu: update sdma 6.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update  firmware
- amdgpu: update aldebaran firmware
- amdgpu: update psp 13.0.8 firmware
- amdgpu: update gc 10.3.7 firmware
- linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9
- Merge https://github.com/pkshih/linux-firmware into rtw
- ath10k: WCN3990: hw1.0: add qcm2290 firmware API file
- ath10k: WCN3990: hw1.0: move firmware back from qcom/ location
- i915: Add DG2 HuC 7.10.15
- amdgpu: DMCUB updates for various AMDGPU ASICs
- linux-firmware: update firmware for en8811h 2.5G ethernet phy
- mekdiatek: Update mt8186 SOF firmware to v2.0.1
- rtw89: 8852c: update fw to v0.27.56.14
- rtw89: 8922a: add firmware v0.35.18.0
- rtw88: Add RTL8703B firmware v11.0.0
- linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops
- Montage: update firmware for Mont-TSSE
- WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B
- Intel Bluetooth: Update firmware file for Intel Bluetooth BE200
- Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101
- Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203
- Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211
- Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101
- Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101
- Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203
- Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203
- Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211
- Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211
- Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210
- Intel Bluetooth: Update firmware file for Intel Bluetooth AX200
- Intel Bluetooth: Update firmware file for Intel Bluetooth AX201
- Intel Bluetooth: Update firmware file for Intel Bluetooth 9560
- Intel Bluetooth: Update firmware file for Intel Bluetooth 9260
- amdgpu: DMCUB updates for various AMDGPU ASICs
- linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8
- imx: sdma: update firmware to v3.6/v4.6
- linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
- iwlwifi: update 9000-family firmwares to core85-89
- rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA
- linux-firmware: update firmware for MT7921 WiFi device
- linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops
- amdgpu: Update VCN firmware binaries
- Intel IPU2: Add firmware files
- brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet
- i915: Add Xe2LPD DMC v2.18
- i915: Update MTL DMC v2.21
- linux-firmware: update firmware for en8811h 2.5G ethernet phy
- linux-firmware: add firmware for MT7996</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20240716-145" date="1721131200">- [Intel 9.5 FEAT] [SRF] QAT_402XX firmware update (RHEL-47355)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- qcom: move signed x1e80100 signed firmware to the SoC subdir
- qcom: add video firmware file for vpu-3.0
- amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics
- qcom: add gpu firmwares for x1e80100 chipset
- linux-firmware: add firmware for qat_402xx devices
- amdgpu: update raven firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update vega20 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update PSP 13.0.8 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update picasso firmware
- amdgpu: update beige goby firmware
- amdgpu: update vangogh firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update navy flounder firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update VPE 6.1.1 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update SDMA 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update navi14 firmware
- amdgpu: update renoir firmware
- amdgpu: update navi12 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SMU 13.0.7 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update navi10 firmware
- amdgpu: update raven2 firmware
- amdgpu: update aldebaran firmware
- linux-firmware: Update AMD cpu microcode
- intel: avs: Add topology file for I2S Analog Devices 4567
- intel: avs: Add topology file for I2S Nuvoton 8825
- intel: avs: Add topology file for I2S Maxim 98927
- intel: avs: Add topology file for I2S Maxim 98373
- intel: avs: Add topology file for I2S Maxim 98357a
- intel: avs: Add topology file for I2S Dialog 7219
- intel: avs: Add topology file for I2S Realtek 5663
- intel: avs: Add topology file for I2S Realtek 5640
- intel: avs: Add topology file for I2S Realtek 5514
- intel: avs: Add topology file for I2S Realtek 298
- intel: avs: Add topology file for I2S Realtek 286
- intel: avs: Add topology file for I2S Realtek 274
- intel: avs: Add topology file for Digital Microphone Array
- intel: avs: Add topology file for HDMI codecs
- intel: avs: Add topology file for HDAudio codecs
- Add a copy of Apache-2.0
- intel: avs: Update AudioDSP base firmware for APL-based platforms
- linux-firmware: Add ISH firmware file for Intel Lunar Lake platform
- amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics
- cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41
- amdgpu: Update ISP FW for isp v4.1.1
- linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0
- qcom: Add AIC100 firmware files
- amlogic: Update bluetooth firmware binary
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel Bluetooth Magnetor core
- linux-firmware: Update firmware file for Intel Bluetooth Solar core
- linux-firmware: Update firmware file for Intel Bluetooth Pulsar core
- rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB
- rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB
- amdgpu: update DMCUB to v0.0.222.0 for DCN314
- iwlwifi: add ty/So/Ma firmwares for core88-87 release
- iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release
- linux-firmware: add new cc33xx firmware for cc33xx chips
- cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop
- cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops
- Merge https://github.com/zijun-hu/qca_btfw into qca
- linux-firmware: Add firmware for Lenovo Thinkbooks
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update navi10 firmware
- amdgpu: update raven2 firmware
- amdgpu: update raven firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update psp 13.0.8 firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update smu 13.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update picasso firmware
- amdgpu: update beige goby firmware
- amdgpu: update vangogh firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update green sardine firmware
- amdgpu: update navy flounder firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update navi14 firmware
- amdgpu: update SMU 13.0.6 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update renoir firmware
- amdgpu: update navi12 firmware
- amdgpu: update aldebaran firmware
Resolves: RHEL-47355</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20240905-146" date="1725537600">- AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54252)
- AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54240)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops
- amdgpu: Revert sienna cichlid dmcub firmware update
- Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903
- iwlwifi: add Bz FW for core89-58 release
- rtl_nic: add firmware rtl8126a-3
- linux-firmware: update firmware for MT7921 WiFi device
- linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
- amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351
- qcom: vpu: restore compatibility with kernels before 6.6
- amdgpu: DMCUB updates forvarious AMDGPU ASICs
- rtw89: 8922a: add fw format-1 v0.35.41.0
- linux-firmware: update firmware for MT7925 WiFi device
- linux-firmware: update firmware for mediatek bluetooth chip (MT7925)
- rtl_bt: Add firmware and config files for RTL8922A
- rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part
- rtl_bt: de-dupe identical config.bin files
- rename rtl8723bs_config-OBDA8723.bin -&gt; rtl_bt/rtl8723bs_config.bin
- linux-firmware: Update AMD SEV firmware
- linux-firmware: update firmware for MT7996
- Revert "i915: Update MTL DMC v2.22"
- Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12
- ath12k: WCN7850 hw2.0: update board-2.bin
- ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3
- ath11k: QCA2066 hw2.1: add board-2.bin
- ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1
- qcom: vpu: add video firmware for sa8775p
- amdgpu: DMCUB updates for various AMDGPU ASICs
- qcom: update path for video firmware for vpu-1/2/3.0
- Merge https://github.com/zijun-hu/qca_btfw into qca_btfw
- Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89
- QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642
- rtw89: 8852c: add fw format-1 v0.27.97.0
- rtw89: 8852bt: add firmware 0.29.91.0
- amdgpu: Update ISP FW for isp v4.1.1
- Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805
- Merge https://github.com/zijun-hu/qca_btfw into list-20240802
- mediatek: Update mt8195 SOF firmware
- Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802
- amdgpu: DMCUB updates for DCN314
- xe: First GuC release v70.29.2 for BMG
- xe: Add GuC v70.29.2 for LNL
- i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL
- i915: Update MTL DMC v2.22
- i915: update MTL GSC to v102.0.10.1878
- xe: Add BMG HuC 8.2.10
- xe: Add GSC 104.0.0.1161 for LNL
- xe: Add LNL HuC 9.4.13
- i915: update DG2 HuC to v7.10.16
- amdgpu: Update ISP FW for isp v4.1.1
- amdgpu: Update ISP FW for isp v4.1.1
- amdgpu: add new ISP 4.1.1 firmware
- QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641
- amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351
- Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07
- Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release"
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7921 WiFi device
- linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
- linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
- iwlwifi: add gl FW for core89-58 release
- iwlwifi: update ty/So/Ma firmwares for core89-58 release
- iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release
- mediatek: Update mt8195 SOF firmware and sof-tplg
- ASoC: tas2781: fix the license issue for tas781 firmware
- rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008
- .gitignore: Ignore intermediate files
- i915: Update Xe2LPD DMC to v2.21
Resolves: RHEL-54252, RHEL-54240</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20241021-146.1" date="1729512000">- Update linux-firmware to latest upstream (RHEL-63646)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- Makefile: error out of 'install' if COPYOPTS is set
- check_whence.py: skip some validation if git ls-files fails
- qcom: Add Audio firmware for X1E80100 CRD/QCPs
- amdgpu: DMCUB updates forvarious AMDGPU ASICs
- brcm: replace NVRAM for Jetson TX1
- rtlwifi: Update firmware for RTL8192FU to v7.3
- make: separate installation and de-duplication targets
- check_whence.py: check the permissions
- Remove execute bit from firmware files
- configure: remove unused file
- rtl_nic: add firmware rtl8125d-1
- iwlwifi: add gl/Bz FW for core91-69 release
- iwlwifi: update ty/So/Ma firmwares for core91-69 release
- iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release
- Merge https://github.com/zijun-hu/qca_btfw into wcn785x
- cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop
- cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops
- linux-firmware: update firmware for en8811h 2.5G ethernet phy
- mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher
- ath12k: WCN7850 hw2.0: update board-2.bin
- ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1
- ath12k: QCN9274 hw2.0: add board-2.bin
- copy-firmware.sh: rename variables in symlink hanlding
- copy-firmware.sh: remove no longer reachable test -L
- copy-firmware.sh: remove no longer reachable test -f
- copy-firmware.sh: call ./check_whence.py before parsing the file
- copy-firmware.sh: warn if the destination folder is not empty
- copy-firmware.sh: add err() helper
- copy-firmware.sh: fix indentation
- copy-firmware.sh: reset and consistently handle destdir
- Revert "copy-firmware: Support additional compressor options"
- copy-firmware.sh: flesh out and fix dedup-firmware.sh
- Style update yaml files
- editorconfig: add initial config file
- check_whence.py: annotate replacement strings as raw
- check_whence.py: LC_ALL=C sort -u the filelist
- check_whence.py: ban link-to-a-link
- check_whence.py: use consistent naming
- Add a link from TAS2XXX1EB3.bin -&gt; ti/tas2781/TAS2XXX1EB30.bin
- tas2781: Upload dsp firmware for ASUS laptop 1EB30 &amp; 1EB31
- rtlwifi: Add firmware v39.0 for RTL8192DU
- Revert "ath12k: WCN7850 hw2.0: update board-2.bin"
- QCA: Add Bluetooth firmwares for WCN785x with UART transport
- amdgpu: DMCUB DCN35 update
- brcm: Add BCM4354 NVRAM for Jetson TX1
- brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram
- linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920)
- linux-firmware: add firmware for MT7920
- amdgpu: update raven firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update PSP 13.0.8 firmware
- amdgpu: update vega12 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update vega10 firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update picasso firmware
- amdgpu: update beige goby firmware
- amdgpu: update vangogh firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update navy flounder firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update navi14 firmware
- amdgpu: update renoir firmware
- amdgpu: update navi12 firmware
- amdgpu: update SMU 13.0.6 firmware
- amdgpu: update SDMA 4.4.2 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update navi10 firmware
- amdgpu: update aldebaran firmware
- qcom: update gpu firmwares for qcm6490 chipset
- mt76: mt7996: add firmware files for mt7992 chipset
- mt76: mt7996: add firmware files for mt7996 chipset variants
- qcom: add gpu firmwares for sa8775p chipset
- amdgpu: update DMCUB to v0.0.233.0 DCN351
- rtw89: 8922a: add fw format-2 v0.35.42.1
- copy-firmware: Handle links to uncompressed files
- WHENCE: Fix battmgr.jsn entry type
- amdgpu: Add VPE 6.1.3 microcode
- amdgpu: add SDMA 6.1.2 microcode
- amdgpu: Add support for PSP 14.0.4
- amdgpu: add GC 11.5.2 microcode
- qcom: qcm6490: add ADSP and CDSP firmware
- linux-firmware: Update firmware file for Intel Bluetooth Magnetor core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel Bluetooth Solar core
- rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301
- realtek: rt1320: Add patch firmware of MCU
- i915: Update MTL DMC v2.23
Resolves: RHEL-63646</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20241121-146.2" date="1732190400">- Update linux-firmware to latest upstream (RHEL-68435)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Update GUC to v70.36.0 for BMG, LNL
- i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL
- iwlwifi: add Bz-gf FW for core91-69 release
- Merge https://github.com/zijun-hu/qca_btfw into qca
- qcom: venus-5.4: add venus firmware file for qcs615
- qcom: update venus firmware file for SC7280
- QCA: Add 22 bluetooth firmware nvm files for QCA2066
- mediatek MT7922: update bluetooth firmware to 20241106163512
- mediatek MT7921: update bluetooth firmware to 20241106151414
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7921 WiFi device
- qcom: Add QDU100 firmware image files.
- qcom: Update aic100 firmware files
- dedup-firmware.sh: fix infinite loop for --verbose
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7
- cnm: update chips&amp;media wave521c firmware.
- mediatek MT7920: update bluetooth firmware to 20241104091246
- linux-firmware: update firmware for MT7920 WiFi device
- copy-firmware.sh: Run check_whence.py only if in a git repo
- cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops
- amdgpu: update DMCUB to v9.0.10.0 for DCN351
- rtw89: 8852a: update fw to v0.13.36.2
- rtw88: Add firmware v52.14.0 for RTL8812AU
- i915: Update Xe2LPD DMC to v2.23
- linux-firmware: update firmware for mediatek bluetooth chip (MT7925)
- linux-firmware: update firmware for MT7925 WiFi device
- WHENCE: Add sof-tolg for mt8195
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: Add link for QCS6490 GPU firmware
- qcom: update gpu firmwares for qcs615 chipset
- cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops
- ath11k: move WCN6750 firmware to the device-specific subdir
- xe: Update LNL GSC to v104.0.0.1263
- i915: Update MTL/ARL GSC to v102.1.15.1926
- amdgpu: DMCUB updates for various AMDGPU ASICs
- mediatek: Add sof-tolg for mt8195
- i915: Add Xe3LPD DMC
- cnm: update chips&amp;media wave521c firmware.
- linux-firmware: Add firmware for Cirrus CS35L41
- linux-firmware: Update firmware file for Intel BlazarU core
Resolves: RHEL-68435</changelog>
</package>
<package pkgid="a39557d3519d6f0a7720c73bfa0770925b8839a32ae533fb78b095c9647f46b3" name="linux-firmware" arch="src">
  <version epoch="0" ver="20250114" rel="146.3.el9_5"/>
  <changelog author="Scott Weaver &lt;scweaver@redhat.com&gt; - 20230926-140" date="1695729600">- [Intel 9.4 FEAT] [SPR][EMR] QAT firmware update available (rhbz 2238636)
- [AMDCLIENT 9.4 Feature] Sub-Feature: AMD PMF Linux FW (rhbz 2227340)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- amd_pmf: Add initial PMF TA for Smart PC Solution Builder
- linux-firmware: Update FW files for MRVL PCIE 8997 chipsets
- rtl_bt: Update RTL8851B BT USB firmware to 0x048A_D230
- iwlwifi: add new FWs from core81-65 release
- iwlwifi: update cc/Qu/QuZ firmwares for core81-65 release
- linux-firmware: amd-ucode: Add note on fam19h warnings
- i915: update MTL HuC to version 8.5.4
- amdgpu: update DMCUB to 0.0.183.0 for various AMDGPU ASICs
- linux-firmware: add link to sc8280xp audioreach firmware
- qcom: sm8250: add RB5 sensors DSP firmware
- qcom: Update vpu-1.0 firmware
- qcom: sm8250: update DSP firmware
- qcom: add firmware for the onboard WiFi on qcm2290 / qrb4210
- qcom: add venus firmware files for v6.0
- qcom: add firmware for QRB4210 platforms
- qcom: add firmware for QCM2290 platforms
- qcom: add GPU firmware for QCM2290 / QRB2210
- ath10k/WCN3990: move wlanmdsp to qcom/sdm845
- WHENCE: Don't compress qcom json files
- WHENCE: amd-ucode: Use new RawFile keyword
- Create symlinks for all firmware that is duplicate using rdfind
- QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00605
- Fix carl9170fw shell scripts for shellcheck errors
- i915: Update MTL DMC to v2.16
- copy-firmware: Introduce 'RawFile' keyword
- copy-firmware: Support additional compressor options
- linux-firmware: Update firmware file for Intel Bluetooth AX203
- linux-firmware: Update firmware file for Intel Bluetooth AX203
- linux-firmware: Update firmware file for Intel Bluetooth AX211
- linux-firmware: Update firmware file for Intel Bluetooth AX211
- linux-firmware: Update firmware file for Intel Bluetooth AX210
- linux-firmware: Update firmware file for Intel Bluetooth AX200
- linux-firmware: Update firmware file for Intel Bluetooth AX201
- linux-firmware: update firmware for qat_4xxx devices
- linux-firmware: Update AMD SEV firmware
- amdgpu: update DMCUB to 0.0.181.0 for various AMDGPU ASICs
- rtw89: 8852b: update fw to v0.29.29.3
- rtw89: 8851b: update fw to v0.29.41.2
- i915: add GSC 102.0.0.1655 for MTL
- amdgpu: DMCUB updates for various AMDGPU asics
- amdgpu: DMCUB updates for various AMDGPU asics
- cirrus: Add CS35L41 firmware for HP G11 models</changelog>
  <changelog author="Scott Weaver &lt;scweaver@redhat.com&gt; - 20231030-141" date="1699358400">- CVE-2022-46329 linux-firmware: hw: intel: Protection mechanism failure for some Intel(R) PROSet/Wireless WiFi (RHEL-14264)
- amd-ucode early loading broken [RHEL-15387]
- Update to upstream 20231030 release.
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- Intel Bluetooth: Update firmware file for Intel Bluetooth AX211
- Intel Bluetooth: Update firmware file for Intel Bluetooth AX210
- Intel Bluetooth: Update firmware file for Intel Bluetooth Magnetor AX101
- Intel Bluetooth: Update firmware file for Intel Bluetooth AX203
- Intel Bluetooth: Update firmware file for Intel Bluetooth Magnetor AX201
- Intel Bluetooth: Update firmware file for Intel Bluetooth Magnetor AX211
- Intel Bluetooth: Update firmware file for Intel Bluetooth BE200
- rtl_nic: update firmware of RTL8156B
- linux-firmware: Update AMD cpu microcode
- amdgpu: update SMU 13.0.0 firmware
- linux-firmware: add Amlogic bluetooth firmware
- i915: Add GuC v70.13.1 for DG2, TGL, ADL-P and MTL
- iwlwifi: add a missing FW from core80-39 release
- WHENCE: add symlink for BananaPi M64
- linux-firmware: Add firmware file for Intel Bluetooth AX211
- linux-firmware: Update firmware file for Intel Bluetooth AX201
- linux-firmware: Update firmware file for Intel Bluetooth AX211
- linux-firmware: Update firmware file for Intel Bluetooth AX210
- linux-firmware: Update firmware file for Intel Bluetooth 9560
- linux-firmware: Update firmware file for Intel Bluetooth 9260
- i915: Update MTL DMC to v2.17
- amdgpu: update raven firmware from 5.7 branch
- amdgpu: update SDMA 5.2.7 firmware from 5.7 branch
- amdgpu: update PSP 13.0.8 firmware from 5.7 branch
- amdgpu: update GC 10.3.7 firmware from 5.7 branch
- amdgpu: update DCN 3.1.6 firmware from 5.7 branch
- amdgpu: update SDMA 5.2.6 firmware from 5.7 branch
- amdgpu: update PSP 13.0.5 firmware from 5.7 branch
- amdgpu: update GC 10.3.6 firmware from 5.7 branch
- amdgpu: update VCN 4.0.0 firmware from 5.7 branch
- amdgpu: update SMU 13.0.0 firmware from 5.7 branch
- amdgpu: update SDMA 6.0.0 firmware from 5.7 branch
- amdgpu: update PSP 13.0.0 firmware from 5.7 branch
- amdgpu: update GC 11.0.0 firmware from 5.7 branch
- amdgpu: update vega20 firmware from 5.7 branch
- amdgpu: update beige goby firmware from 5.7 branch
- amdgpu: update vega12 firmware from 5.7 branch
- amdgpu: update vega10 firmware from 5.7 branch
- amdgpu: update dimgrey cavefish firmware from 5.7 branch
- amdgpu: update picasso firmware from 5.7 branch
- amdgpu: update navy flounder firmware from 5.7 branch
- amdgpu: update vangogh firmware from 5.7 branch
- amdgpu: update green sardine firmware from 5.7 branch
- amdgpu: update sienna cichlid firmware from 5.7 branch
- amdgpu: update PSP 13.0.11 firmware from 5.7 branch
- amdgpu: update GC 11.0.4 firmware from 5.7 branch
- amdgpu: update SDMA 6.0.1 firmware from 5.7 branch
- amdgpu: update PSP 13.0.4 firmware from 5.7 branch
- amdgpu: update GC 11.0.1 firmware from 5.7 branch
- amdgpu: update navi14 firmware from 5.7 branch
- amdgpu: update renoir firmware from 5.7 branch
- amdgpu: update navi12 firmware from 5.7 branch
- amdgpu: update VCN 4.0.4 firmware from 5.7 branch
- amdgpu: update SMU 13.0.7 firmware from 5.7 branch
- amdgpu: update SDMA 6.0.2 firmware from 5.7 branch
- amdgpu: update PSP 13.0.7 firmware from 5.7 branch
- amdgpu: update GC 11.0.2 firmware from 5.7 branch
- amdgpu: update yellow carp firmware from 5.7 branch
- amdgpu: update navi10 firmware from 5.7 branch
- amdgpu: update raven2 firmware from 5.7 branch
- amdgpu: update SMU 13.0.10 firmware from 5.7 branch
- amdgpu: update PSP 13.0.10 firmware from 5.7 branch
- amdgpu: update GC 11.0.3 firmware from 5.7 branch
- amdgpu: update aldebaran firmware from 5.7 branch
- iwlwifi: add FWs for new GL and MA device types with multiple RF modules</changelog>
  <changelog author="Scott Weaver &lt;scweaver@redhat.com&gt; - 20240109-142" date="1704801600">- [DELL 9.3 BUG]System resume failed from suspend and auto reboot with WCN6856 (1/10 fail rate) (RHEL-4431)
- [DELL 9.3 FEAT] - linux-firmware: Include to support QCA WIFI-7 WCN7850 Module: wifi firmware support (RHEL-10212)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- linux-firmware: update firmware for w1u_uart
- amdgpu: DMCUB updates for DCN314
- Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211
- Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101
- Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203
- Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210
- amlogic/bluetooth: add firmware bin of W1 serial soc(w1u_uart)
- linux-firmware: add firmware for mediatek bluetooth chip (MT7925)
- linux-firmware: add firmware for MT7925
- ASoC: tas2563: Add dsp firmware for laptops or other mobile devices
- rtl_bt: Add firmware and config files for RTL8852BT/RTL8852BE-VT
- ASoC: tas2781: Add dsp firmware for different laptops
- ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.36
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: WCN6750 hw1.0: update board-2.bin
- ath11k: IPQ8074 hw2.0: update board-2.bin
- ath10k: WCN3990 hw1.0: update board-2.bin
- ath10k: QCA9888 hw2.0: update board-2.bin
- ath10k: QCA4019 hw1.0: update board-2.bin
- ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00309-
- ath12k: add new driver and firmware for WCN7850
- iwlwifi: update gl FW for core80-165 release
- intel: vsc: Add firmware for Visual Sensing Controller
- cirrus: Add CS35L41 firmware and tunings for ASUS Zenbook 2023 Models
- cirrus: Add CS35L41 firmware and tunings for ASUS Zenbook 2022 Models
- QCA: Add bluetooth firmware nvm files for QCA2066
- QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00629
- amdgpu: DMCUB updates for various AMDGPU ASICs
- qcom: Add Audio firmware for SM8650 QRD
- qcom: Add Audio firmware for SM8550 QRD
- wfx: update to firmware 3.17
- wfx: fix broken firmware
- linux-firmware: Update AMD cpu microcode
- cxgb4: Update firmware to revision 1.27.5.0
- linux-firmware: add firmware for en8811h 2.5G ethernet phy
- s5p-mfc: Add MFC v12 Firmware
- rtl_bt: Update RTL8852A BT USB firmware to 0xDFC8_145F
- ice: update ice DDP wireless_edge package to 1.3.13.0
- linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
- linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7921 WiFi device
- amdgpu: update DMCUB firmware to 0.0.194.0 for DCN321 and DCN32
- qcom: update qrb4210 firmware
- qcom: update qcm2290 firmware
- qcom: update qcm2290/qrb4210 WiFi firmware file
- qcom: update Venus firmware file for v6.0
- powervr: add firmware for Imagination Technologies AXE-1-16M GPU
- ice: update ice DDP comms package to 1.3.45.0
- ice: update ice DDP package to 1.3.35.0
- mediatek: Remove an unused packed library
- mediatek: Sync shared memory structure changes
- Intel Bluetooth: Update firmware file for Intel Bluetooth BE200
- amdgpu: update DMCUB firmware to 0.0.193.0 for DCN31 and DCN314
- i915: Update MTL DMC to v2.19
- iwlwifi: fix for the new FWs from core83-55 release
- iwlwifi: add new FWs from core83-55 release
- iwlwifi: update cc/Qu/QuZ firmwares for core83-55 release
- linux-firmware: Add firmware for Cirrus CS35L41 on HP G11 Laptops
- linux-firmware: Add firmware for Cirrus CS35L41 on 2024 ASUS Zenbook Laptops
- linux-firmware: add firmware for mt7988 internal 2.5G ethernet phy
- Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101
- Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203
- Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101
- Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203
- Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211
- Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211
- amdgpu: DMCUB updates for various AMDGPU ASICs
- nvidia: add GSP-RM version 535.113.01 firmware images
- Intel Bluetooth: Update firmware file for Intel Bluetooth BE200
- amdgpu: DMCUB updates for various AMDGPU ASICs
- qca: add bluetooth firmware for WCN3988
- linux-firmware: ixp4xx: Add the IXP4xx firmware
- rtw89: 8852b: update fw to v0.29.29.5
- rtw89: 8852b: update fw to v0.29.29.4
- rtw89: 8851b: update fw to v0.29.41.3</changelog>
  <changelog author="Scott Weaver &lt;scweaver@redhat.com&gt; - 20240219-143" date="1708344000">- [AMDCLIENT 9.4 Bug] Update PHX 1/2 firmware to fix some PSR related issues (RHEL-25408)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: First GuC release for LNL and Xe
- i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL
- linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7)
- brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet
- ice: update ice DDP package to 1.3.36.0
- Intel IPU3 ImgU: Move firmware file under intel/ipu
- Intel IPU6: Move firmware binaries under ipu/
- linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models
- panthor: Add initial firmware for Gen10 Arm Mali GPUs
- amdgpu: DMCUB Updates for DCN321: 7.0.38.0
- amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0
- qcom: update venus firmware file for v5.4
- Montage: add firmware for Mont-TSSE
- amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32
- linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware
- linux-firmware: Fix filenames for some CS35L41 firmwares for HP
- linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2
- rtl_nic: add firmware for RTL8126A
- linux-firmware: intel: Add IPU6 firmware binaries
- ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37
- qcom: Add Audio firmware for SM8550 HDK
- Revert "amdgpu: DMCUB updates for various AMDGPU ASICs"
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet
- amdgpu: DMCUB updates for various AMDGPU ASICs
- qcom: Add Audio firmware for SM8650 MTP
- linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops
- amdgpu: update raven2 firmware
- amdgpu: update raven firmware
- amdgpu: update SDMA 5.2.7 firmware
- amdgpu: update PSP 13.0.8 firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update SDMA 5.2.6 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: add GC 11.0.1 rlc_1 firmware
- amdgpu: update vega20 firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update beige goby firmware
- amdgpu: update picasso firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update vangogh firmware
- amdgpu: update navy flounder firmware
- amdgpu: update green sardine firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update arcturus firmware
- amdgpu: update navi14 firmware
- amdgpu: add VCN 4.0.3 firmware
- amdgpu: add SDMA 4.4.2 firmware
- amdgpu: add SMU 13.0.6 firmware
- amdgpu: add PSP 13.0.6 firmware
- amdgpu: Add GC 9.4.3 firmware
- amdgpu: update renoir firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SMU 13.0.7 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update navi12 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update navi10 firmware
- amdgpu: update aldebaran firmware
- linux-firmware: Update AMD cpu microcode
- RTL8192E: Remove old realtek WiFi firmware
- Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101
- Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203
- Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203
- Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211
- Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211
- amdgpu: DMCUB updates for DCN314
- qcom: Update the firmware for Adreno a630 family of GPUs
- cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops
- linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops
- linux-firmware: update firmware for qat_4xxx devices
- cirrus: Add firmware file for cs42l43
- amdgpu: DMCUB updates for DCN312
- amdgpu: DMCUB updates for DCN314
- Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211
- Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101
- Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203
- Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20240603-144" date="1717416000">- [AMD 9.3 FEAT]: MI300 GPU firmware (RHEL-10056)
- CVE-2023-31346 linux-firmware: kernel: Reserved fields in guest message responses may not be zero initialized [rhel-9.4.z] (RHEL-35597)
- linux-firmware ships encrypted zip files (named *.ncf) (RHEL-32145)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- amdgpu: add support for PSP 14.0.1
- amdgpu: add support for VPE 6.1.1
- amdgpu: add support for VCN 4.0.6
- amdgpu: add support for SDMA 6.1.1
- amdgpu: add support for GC 11.5.1
- amdgpu: Add support for DCN 3.5.1
- cnm: update chips&amp;media wave521c firmware.
- linux-firmware: Add ordinary firmware for RTL8821AU device
- amdgpu: add new ISP 4.1.1 firmware
- amdgpu: DMCUB updates for various AMDGPU ASICs
- linux-firmware: Amphion: Update vpu firmware
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel Bluetooth Magnetor core
- linux-firmware: Update firmware file for Intel Bluetooth Solar core
- linux-firmware: Update firmware file for Intel Bluetooth Solar core
- i915: Add BMG DMC v2.06
- linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306
- linux-firmware: Update firmware tuning for HP Consumer Laptop
- amdgpu: DMCUB updates for various AMDGPU ASICs
- rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B
- rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B
- cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops
- linux-firmware: Add firmware and tuning for Lenovo Y770S
- amdgpu: DMCUB updates for various AMDGPU ASICs
- linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops
- i915: Update Xe2LPD DMC to v2.20
- linux-firmware: Remove Calibration Firmware and Tuning for CS35L41
- linux-firmware: Add firmware for Lenovo Thinkbook 13X
- ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop
- amdgpu: add DMCUB 3.5 firmware
- amdgpu: add VPE 6.1.0 firmware
- amdgpu: add VCN 4.0.5 firmware
- amdgpu: add UMSCH 4.0.0 firmware
- amdgpu: add SDMA 6.1.0 firmware
- amdgpu: add PSP 14.0.0  firmware
- amdgpu: add GC 11.5.0 firmware
- amdgpu: update license date
- Montage: update firmware for Mont-TSSE
- linux-firmware: Add tuning parameter configs for CS35L41 Firmware
- linux-firmware: Fix firmware names for Laptop SSID 104316a3
- linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7
- linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
- linux-firmware: update firmware for MT7922 WiFi device
- iwlwifi: add gl FW for core87-44 release
- iwlwifi: add ty/So/Ma firmwares for core87-44 release
- iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release
- nvidia: Update Tegra210 XUSB firmware to v50.29
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update renoir firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update sdma 6.0.1 firmware
- amdgpu: update psp 13.0.4 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update vega20 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update green sardine firmware
- amdgpu: update vega12 firmware
- amdgpu: update raven2 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update sdma 6.0.2 firmware
- amdgpu: update ipsp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update vega10 firmware
- amdgpu: update raven firmware
- amdgpu: update navi14 firmware
- amdgpu: update smu 13.0.10 firmware
- amdgpu: update sdma 6.0.3 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update vcn 3.1.2 firmware
- amdgpu: update psp 13.0.5 firmware
- amdgpu: update gc 10.3.6 firmware
- amdgpu: update navi12 firmware
- amdgpu: update arcturus firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: update vcn 4.0.3 firmware
- amdgpu: update smu 13.0.6 firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update smu 13.0.0 firmware
- amdgpu: update sdma 6.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update  firmware
- amdgpu: update aldebaran firmware
- amdgpu: update psp 13.0.8 firmware
- amdgpu: update gc 10.3.7 firmware
- linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9
- Merge https://github.com/pkshih/linux-firmware into rtw
- ath10k: WCN3990: hw1.0: add qcm2290 firmware API file
- ath10k: WCN3990: hw1.0: move firmware back from qcom/ location
- i915: Add DG2 HuC 7.10.15
- amdgpu: DMCUB updates for various AMDGPU ASICs
- linux-firmware: update firmware for en8811h 2.5G ethernet phy
- mekdiatek: Update mt8186 SOF firmware to v2.0.1
- rtw89: 8852c: update fw to v0.27.56.14
- rtw89: 8922a: add firmware v0.35.18.0
- rtw88: Add RTL8703B firmware v11.0.0
- linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops
- Montage: update firmware for Mont-TSSE
- WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B
- Intel Bluetooth: Update firmware file for Intel Bluetooth BE200
- Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101
- Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203
- Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211
- Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101
- Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101
- Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203
- Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203
- Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211
- Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211
- Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210
- Intel Bluetooth: Update firmware file for Intel Bluetooth AX200
- Intel Bluetooth: Update firmware file for Intel Bluetooth AX201
- Intel Bluetooth: Update firmware file for Intel Bluetooth 9560
- Intel Bluetooth: Update firmware file for Intel Bluetooth 9260
- amdgpu: DMCUB updates for various AMDGPU ASICs
- linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8
- imx: sdma: update firmware to v3.6/v4.6
- linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
- iwlwifi: update 9000-family firmwares to core85-89
- rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA
- linux-firmware: update firmware for MT7921 WiFi device
- linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops
- amdgpu: Update VCN firmware binaries
- Intel IPU2: Add firmware files
- brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet
- i915: Add Xe2LPD DMC v2.18
- i915: Update MTL DMC v2.21
- linux-firmware: update firmware for en8811h 2.5G ethernet phy
- linux-firmware: add firmware for MT7996</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20240716-145" date="1721131200">- [Intel 9.5 FEAT] [SRF] QAT_402XX firmware update (RHEL-47355)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- qcom: move signed x1e80100 signed firmware to the SoC subdir
- qcom: add video firmware file for vpu-3.0
- amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics
- qcom: add gpu firmwares for x1e80100 chipset
- linux-firmware: add firmware for qat_402xx devices
- amdgpu: update raven firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update vega20 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update PSP 13.0.8 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update picasso firmware
- amdgpu: update beige goby firmware
- amdgpu: update vangogh firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update navy flounder firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update VPE 6.1.1 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update SDMA 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update navi14 firmware
- amdgpu: update renoir firmware
- amdgpu: update navi12 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SMU 13.0.7 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update navi10 firmware
- amdgpu: update raven2 firmware
- amdgpu: update aldebaran firmware
- linux-firmware: Update AMD cpu microcode
- intel: avs: Add topology file for I2S Analog Devices 4567
- intel: avs: Add topology file for I2S Nuvoton 8825
- intel: avs: Add topology file for I2S Maxim 98927
- intel: avs: Add topology file for I2S Maxim 98373
- intel: avs: Add topology file for I2S Maxim 98357a
- intel: avs: Add topology file for I2S Dialog 7219
- intel: avs: Add topology file for I2S Realtek 5663
- intel: avs: Add topology file for I2S Realtek 5640
- intel: avs: Add topology file for I2S Realtek 5514
- intel: avs: Add topology file for I2S Realtek 298
- intel: avs: Add topology file for I2S Realtek 286
- intel: avs: Add topology file for I2S Realtek 274
- intel: avs: Add topology file for Digital Microphone Array
- intel: avs: Add topology file for HDMI codecs
- intel: avs: Add topology file for HDAudio codecs
- Add a copy of Apache-2.0
- intel: avs: Update AudioDSP base firmware for APL-based platforms
- linux-firmware: Add ISH firmware file for Intel Lunar Lake platform
- amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics
- cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41
- amdgpu: Update ISP FW for isp v4.1.1
- linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0
- qcom: Add AIC100 firmware files
- amlogic: Update bluetooth firmware binary
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel Bluetooth Magnetor core
- linux-firmware: Update firmware file for Intel Bluetooth Solar core
- linux-firmware: Update firmware file for Intel Bluetooth Pulsar core
- rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB
- rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB
- amdgpu: update DMCUB to v0.0.222.0 for DCN314
- iwlwifi: add ty/So/Ma firmwares for core88-87 release
- iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release
- linux-firmware: add new cc33xx firmware for cc33xx chips
- cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop
- cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops
- Merge https://github.com/zijun-hu/qca_btfw into qca
- linux-firmware: Add firmware for Lenovo Thinkbooks
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update navi10 firmware
- amdgpu: update raven2 firmware
- amdgpu: update raven firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update psp 13.0.8 firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update smu 13.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update picasso firmware
- amdgpu: update beige goby firmware
- amdgpu: update vangogh firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update green sardine firmware
- amdgpu: update navy flounder firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update navi14 firmware
- amdgpu: update SMU 13.0.6 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update renoir firmware
- amdgpu: update navi12 firmware
- amdgpu: update aldebaran firmware
Resolves: RHEL-47355</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20240905-146" date="1725537600">- AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54252)
- AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54240)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops
- amdgpu: Revert sienna cichlid dmcub firmware update
- Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903
- iwlwifi: add Bz FW for core89-58 release
- rtl_nic: add firmware rtl8126a-3
- linux-firmware: update firmware for MT7921 WiFi device
- linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
- amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351
- qcom: vpu: restore compatibility with kernels before 6.6
- amdgpu: DMCUB updates forvarious AMDGPU ASICs
- rtw89: 8922a: add fw format-1 v0.35.41.0
- linux-firmware: update firmware for MT7925 WiFi device
- linux-firmware: update firmware for mediatek bluetooth chip (MT7925)
- rtl_bt: Add firmware and config files for RTL8922A
- rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part
- rtl_bt: de-dupe identical config.bin files
- rename rtl8723bs_config-OBDA8723.bin -&gt; rtl_bt/rtl8723bs_config.bin
- linux-firmware: Update AMD SEV firmware
- linux-firmware: update firmware for MT7996
- Revert "i915: Update MTL DMC v2.22"
- Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12
- ath12k: WCN7850 hw2.0: update board-2.bin
- ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3
- ath11k: QCA2066 hw2.1: add board-2.bin
- ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1
- qcom: vpu: add video firmware for sa8775p
- amdgpu: DMCUB updates for various AMDGPU ASICs
- qcom: update path for video firmware for vpu-1/2/3.0
- Merge https://github.com/zijun-hu/qca_btfw into qca_btfw
- Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89
- QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642
- rtw89: 8852c: add fw format-1 v0.27.97.0
- rtw89: 8852bt: add firmware 0.29.91.0
- amdgpu: Update ISP FW for isp v4.1.1
- Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805
- Merge https://github.com/zijun-hu/qca_btfw into list-20240802
- mediatek: Update mt8195 SOF firmware
- Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802
- amdgpu: DMCUB updates for DCN314
- xe: First GuC release v70.29.2 for BMG
- xe: Add GuC v70.29.2 for LNL
- i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL
- i915: Update MTL DMC v2.22
- i915: update MTL GSC to v102.0.10.1878
- xe: Add BMG HuC 8.2.10
- xe: Add GSC 104.0.0.1161 for LNL
- xe: Add LNL HuC 9.4.13
- i915: update DG2 HuC to v7.10.16
- amdgpu: Update ISP FW for isp v4.1.1
- amdgpu: Update ISP FW for isp v4.1.1
- amdgpu: add new ISP 4.1.1 firmware
- QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641
- amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351
- Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07
- Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release"
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7921 WiFi device
- linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
- linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
- iwlwifi: add gl FW for core89-58 release
- iwlwifi: update ty/So/Ma firmwares for core89-58 release
- iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release
- mediatek: Update mt8195 SOF firmware and sof-tplg
- ASoC: tas2781: fix the license issue for tas781 firmware
- rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008
- .gitignore: Ignore intermediate files
- i915: Update Xe2LPD DMC to v2.21
Resolves: RHEL-54252, RHEL-54240</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20241021-146.1" date="1729512000">- Update linux-firmware to latest upstream (RHEL-63646)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- Makefile: error out of 'install' if COPYOPTS is set
- check_whence.py: skip some validation if git ls-files fails
- qcom: Add Audio firmware for X1E80100 CRD/QCPs
- amdgpu: DMCUB updates forvarious AMDGPU ASICs
- brcm: replace NVRAM for Jetson TX1
- rtlwifi: Update firmware for RTL8192FU to v7.3
- make: separate installation and de-duplication targets
- check_whence.py: check the permissions
- Remove execute bit from firmware files
- configure: remove unused file
- rtl_nic: add firmware rtl8125d-1
- iwlwifi: add gl/Bz FW for core91-69 release
- iwlwifi: update ty/So/Ma firmwares for core91-69 release
- iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release
- Merge https://github.com/zijun-hu/qca_btfw into wcn785x
- cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop
- cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops
- linux-firmware: update firmware for en8811h 2.5G ethernet phy
- mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher
- ath12k: WCN7850 hw2.0: update board-2.bin
- ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1
- ath12k: QCN9274 hw2.0: add board-2.bin
- copy-firmware.sh: rename variables in symlink hanlding
- copy-firmware.sh: remove no longer reachable test -L
- copy-firmware.sh: remove no longer reachable test -f
- copy-firmware.sh: call ./check_whence.py before parsing the file
- copy-firmware.sh: warn if the destination folder is not empty
- copy-firmware.sh: add err() helper
- copy-firmware.sh: fix indentation
- copy-firmware.sh: reset and consistently handle destdir
- Revert "copy-firmware: Support additional compressor options"
- copy-firmware.sh: flesh out and fix dedup-firmware.sh
- Style update yaml files
- editorconfig: add initial config file
- check_whence.py: annotate replacement strings as raw
- check_whence.py: LC_ALL=C sort -u the filelist
- check_whence.py: ban link-to-a-link
- check_whence.py: use consistent naming
- Add a link from TAS2XXX1EB3.bin -&gt; ti/tas2781/TAS2XXX1EB30.bin
- tas2781: Upload dsp firmware for ASUS laptop 1EB30 &amp; 1EB31
- rtlwifi: Add firmware v39.0 for RTL8192DU
- Revert "ath12k: WCN7850 hw2.0: update board-2.bin"
- QCA: Add Bluetooth firmwares for WCN785x with UART transport
- amdgpu: DMCUB DCN35 update
- brcm: Add BCM4354 NVRAM for Jetson TX1
- brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram
- linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920)
- linux-firmware: add firmware for MT7920
- amdgpu: update raven firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update PSP 13.0.8 firmware
- amdgpu: update vega12 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update vega10 firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update picasso firmware
- amdgpu: update beige goby firmware
- amdgpu: update vangogh firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update navy flounder firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update navi14 firmware
- amdgpu: update renoir firmware
- amdgpu: update navi12 firmware
- amdgpu: update SMU 13.0.6 firmware
- amdgpu: update SDMA 4.4.2 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update navi10 firmware
- amdgpu: update aldebaran firmware
- qcom: update gpu firmwares for qcm6490 chipset
- mt76: mt7996: add firmware files for mt7992 chipset
- mt76: mt7996: add firmware files for mt7996 chipset variants
- qcom: add gpu firmwares for sa8775p chipset
- amdgpu: update DMCUB to v0.0.233.0 DCN351
- rtw89: 8922a: add fw format-2 v0.35.42.1
- copy-firmware: Handle links to uncompressed files
- WHENCE: Fix battmgr.jsn entry type
- amdgpu: Add VPE 6.1.3 microcode
- amdgpu: add SDMA 6.1.2 microcode
- amdgpu: Add support for PSP 14.0.4
- amdgpu: add GC 11.5.2 microcode
- qcom: qcm6490: add ADSP and CDSP firmware
- linux-firmware: Update firmware file for Intel Bluetooth Magnetor core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel Bluetooth Solar core
- rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301
- realtek: rt1320: Add patch firmware of MCU
- i915: Update MTL DMC v2.23
Resolves: RHEL-63646</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20241121-146.2" date="1732190400">- Update linux-firmware to latest upstream (RHEL-68435)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Update GUC to v70.36.0 for BMG, LNL
- i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL
- iwlwifi: add Bz-gf FW for core91-69 release
- Merge https://github.com/zijun-hu/qca_btfw into qca
- qcom: venus-5.4: add venus firmware file for qcs615
- qcom: update venus firmware file for SC7280
- QCA: Add 22 bluetooth firmware nvm files for QCA2066
- mediatek MT7922: update bluetooth firmware to 20241106163512
- mediatek MT7921: update bluetooth firmware to 20241106151414
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7921 WiFi device
- qcom: Add QDU100 firmware image files.
- qcom: Update aic100 firmware files
- dedup-firmware.sh: fix infinite loop for --verbose
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7
- cnm: update chips&amp;media wave521c firmware.
- mediatek MT7920: update bluetooth firmware to 20241104091246
- linux-firmware: update firmware for MT7920 WiFi device
- copy-firmware.sh: Run check_whence.py only if in a git repo
- cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops
- amdgpu: update DMCUB to v9.0.10.0 for DCN351
- rtw89: 8852a: update fw to v0.13.36.2
- rtw88: Add firmware v52.14.0 for RTL8812AU
- i915: Update Xe2LPD DMC to v2.23
- linux-firmware: update firmware for mediatek bluetooth chip (MT7925)
- linux-firmware: update firmware for MT7925 WiFi device
- WHENCE: Add sof-tolg for mt8195
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: Add link for QCS6490 GPU firmware
- qcom: update gpu firmwares for qcs615 chipset
- cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops
- ath11k: move WCN6750 firmware to the device-specific subdir
- xe: Update LNL GSC to v104.0.0.1263
- i915: Update MTL/ARL GSC to v102.1.15.1926
- amdgpu: DMCUB updates for various AMDGPU ASICs
- mediatek: Add sof-tolg for mt8195
- i915: Add Xe3LPD DMC
- cnm: update chips&amp;media wave521c firmware.
- linux-firmware: Add firmware for Cirrus CS35L41
- linux-firmware: Update firmware file for Intel BlazarU core
Resolves: RHEL-68435</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250114-146.3" date="1736856000">- Update linux-firmware to latest upstream (RHEL-73852)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtw89: 8852b: update fw to v0.29.29.8
- rtw89: 8852c: update fw to v0.27.122.0
- rtw89: 8922a: update fw to v0.35.54.0
- rtw89: 8922a: update fw to v0.35.52.1 and stuffs
- rtw89: 8852bt: update fw to v0.29.110.0
- rtw89: 8852b: update fw to v0.29.29.7
- amdgpu: DMCUB updates for various AMDGPU ASICs
- amdgpu: update sdma 6.0.3 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update sdma 4.4.5 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update psp 13.0.5 firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update picasso firmware
- amdgpu: update beige goby firmware
- amdgpu: update vangogh firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update psp 13.0.4 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update vcn 4.0.6 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update gc 11.5.0 firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update navi14 firmware
- amdgpu: update arcturus firmware
- amdgpu: update renoir firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vcn 4.0.3 firmware
- amdgpu: update sdma 4.4.2 firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update navi10 firmware
- amdgpu: update aldebaran firmware
- cirrus: cs35l56: Correct some links to address the correct amp instance
- linux-firmware: Update firmware file for Intel Bluetooth Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel Bluetooth Solar core
- cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105
- Fix has_gnu_parallel function
- rtl_bt: Add separate config for RLT8723CS Bluetooth part
- amdgpu: revert VCN 3.1.2 firmware
- amdgpu: revert yellow carp VCN firmware
- amdgpu: revert sienna cichlid VCN firmware
- amdgpu: revert navy flounder VCN firmware
- amdgpu: revert dimgrey cavefish VCN firmware
- WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B
- copy-firmware.sh: Fix typo in error message.
- Add support to install files/symlinks in parallel.
- Makefile: Remove obsolete/broken reference.
- check_whence.py: Use a more portable shebang.
- rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E
- cnm: update chips&amp;media wave521c firmware.
- WHENCE: Add "Info:" tag to text that's clearly not part of the license
- rtl_nic: add firmware rtl8125bp-2
- qcom: venus-5.4: update firmware binary for sc7180 and qcs615
- cirrus: cs35l56: Correct filenames of SSID 17aa3832
- cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops
- cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43
- rtl_nic: add firmware rtl8125d-2
- Merge https://github.com/zijun-hu/qca_btfw into qca-bt
- linux-firmware: Update firmware file for Intel BlazarU core
- amdgpu: update dmcub 0.0.246.0 firmware
- Add top level license file.
- amdgpu: update raven firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update vcn 3.1.2 firmware
- amdgpu: update vpe 6.1.3 firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update picasso firmware
- amdgpu: update beige goby firmware
- amdgpu: update vangogh firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update navy flounder firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: update green sardine firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update vcn 4.0.6 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update psp 14.0.0 firmware
- amdgpu: add vcn 5.0.0 firmware
- amdgpu: add smu 14.0.3 firmware
- amdgpu: add sdma 7.0.1 firmware
- amdgpu: add psp 14.0.3 firmware
- amdgpu: add gc 12.0.1 firmware
- amdgpu: update navi14 firmware
- amdgpu: update renoir firmware
- amdgpu: add smu 14.0.2 firmware
- amdgpu: add sdma 7.0.0 firmware
- amdgpu: add psp 14.0.2 firmware
- amdgpu: add gc 12.0.0 firmware
- amdgpu: update navi12 firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update navi10 firmware
- amdgpu: update aldebaran firmware
- upstream amdnpu firmware
- QCA: Add Bluetooth nvm files for WCN785x
- i915: Update Xe2LPD DMC to v2.24
- cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops
- iwlwifi: add Bz-gf FW for core89-91 release
- QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2
- amdgpu: update smu 13.0.10 firmware
- amdgpu: update sdma 6.0.3 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: add smu 13.0.14 firmware
- amdgpu: add sdma 4.4.5 firmware
- amdgpu: add psp 13.0.14 firmware
- amdgpu: add gc 9.4.4 firmware
- amdgpu: update vcn 3.1.2 firmware
- amdgpu: update psp 13.0.5 firmware
- amdgpu: update psp 13.0.8 firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update smu 13.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update beige goby firmware
- amdgpu: update vangogh firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update psp 13.0.4 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update vpe 6.1.1 firmware
- amdgpu: update vcn 4.0.6 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update psp 14.0.0 firmware
- amdgpu: update gc 11.5.0 firmware
- amdgpu: update navi14 firmware
- amdgpu: update arcturus firmware
- amdgpu: update renoir firmware
- amdgpu: update navi12 firmware
- amdgpu: update sdma 4.4.2 firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update navi10 firmware
- amdgpu: update aldebaran firmware
- ice: update ice DDP wireless_edge package to 1.3.20.0
- ice: update ice DDP comms package to 1.3.52.0
- ice: update ice DDP package to ice-1.3.41.0
- amdgpu: update DMCUB to v9.0.10.0 for DCN314
- amdgpu: update DMCUB to v9.0.10.0 for DCN351
- linux-firmware: Update AMD cpu microcode
Resolves: RHEL-73852</changelog>
</package>
<package pkgid="6ae6d1a71cb1e12b16525936020a3342cc2b4526338a5b77c10827fe9d554211" name="linuxptp" arch="src">
  <version epoch="0" ver="4.2" rel="3.el9_5.1"/>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 3.1.1-6" date="1672920000">- add support for VLAN over bond (#2120521)
- handle EINTR when waiting for transmit timestamp (#2128786)
- check for unexpected changes in frequency offset (#2150815)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 3.1.1-7" date="1678363200">- don't re-arm fault clearing timer on unrelated netlink events (#2172650)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 3.1.1-8" date="1679313600">- don't switch from system clock to PHC with SW timestamping (#2179041)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 3.1.1-9" date="1683115200">- clear pending errors on sockets (#2192559)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.2-1" date="1706616000">- update to 4.2 (RHEL-2026 RHEL-2342 RHEL-12182 RHEL-15929)
- fix ts2phc to handle large NMEA delay (RHEL-23208)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.2-2" date="1708603200">- fix loading and reloading of leapfile</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.2-3" date="1721908800">- rework NMEA delay patch to fix PPS edge rejection (RHEL-39387)
- fix ts2phc to correctly handle leap seconds (RHEL-40216)
- fix ts2phc to reset NMEA parser after RMC message (RHEL-40947)
- add options to configure multicast IP addresses (RHEL-31178)
- add holdover support to ts2phc (RHEL-50216)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.2-3.el9_5.1" date="1735819200">- add option to ts2phc to specify minimum expected NMEA delay (RHEL-70168)
- don't require -O option without -a and -w in phc2sys (RHEL-70678)</changelog>
</package>
<package pkgid="7228b91365222cee40d57362adf6e9e304f69b7bd05d5df304eb4dcd0f9365f1" name="mariadb" arch="src">
  <version epoch="3" ver="10.5.27" rel="1.el9_5"/>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3:10.5.20-1" date="1685448000">- Rebase to version 10.5.20</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 3:10.5.20-2" date="1685534400">- Use _fortify_level to disable fortification in debug builds</changelog>
  <changelog author="Michal Schorm &lt;mschorm@redhat.com&gt; - 3:10.5.21-1" date="1690372800">- Rebase to version 10.5.21</changelog>
  <changelog author="Michal Schorm &lt;mschorm@redhat.com&gt; - 3:10.5.22-1" date="1693828800">- Rebase to 10.5.22</changelog>
  <changelog author="Michal Schorm &lt;mschorm@redhat.com&gt; - 3:10.5.26-1" date="1729252800">- Rebase to 10.5.26</changelog>
  <changelog author="Michal Schorm &lt;mschorm@redhat.com&gt; - 3:10.5.27-1" date="1733227200">- Rebase to 10.5.27</changelog>
</package>
<package pkgid="69513a7c19f9deeb66adfe3905c79b4dfbe1d79470f084960f98ae0860af2acd" name="maven-resolver" arch="src">
  <version epoch="1" ver="1.6.1" rel="12.el9_5"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:1.6.1-10" date="1675080000">- Rebuild to regenerate auto-requires</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 1:1.6.1-11" date="1732104000">- Rebuild with regenerated Requires on Java</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 1:1.6.1-12" date="1732190400">- Fix patch usage</changelog>
</package>
<package pkgid="1147fefc58a5a4d899438a528c5a08edca645409ce1a6c46596d48b9aadc5d69" name="maven-shared-utils" arch="src">
  <version epoch="0" ver="3.3.4" rel="5.el9_5"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.3.4-3" date="1675080000">- Rebuild to regenerate auto-requires</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 3.3.4-4" date="1732104000">- Rebuild with regenerated Requires on Java</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 3.3.4-5" date="1732190400">- Fix patch usage</changelog>
</package>
<package pkgid="e25ae4e6cc54ab20374237c6179624256dae8aa6c15dc95fc755da1b5ec21d5f" name="maven-wagon" arch="src">
  <version epoch="0" ver="3.4.2" rel="8.el9_5"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.4.2-7" date="1675080000">- Rebuild to regenerate auto-requires</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 3.4.2-8" date="1732104000">- Rebuild with regenerated Requires on Java</changelog>
</package>
<package pkgid="18d90b7df1a662a2b3101838cb11eb2b22a8771a381d87ef159e4949579db94c" name="mpg123" arch="src">
  <version epoch="0" ver="1.32.9" rel="1.el9_5"/>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.32.9-1" date="1733140800">- Rebase to 1.32.9, includes patch for CVE-2024-10573
  Resolves: RHEL-65444</changelog>
</package>
<package pkgid="aa67710b6592fd5b28904d02885b75fa29818fae268331b5b52c9c83b06b0564" name="mutter" arch="src">
  <version epoch="0" ver="40.9" rel="22.el9_5"/>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt;) - 40.9-13" date="1672747200">- Do not apply EDID mapping heuristics to non-integrated tablets
  Resolves: #2047341</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 40.9-14" date="1675252800">- Allow starting headless again
  Resolves: #2116363</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 40.9-15" date="1688990400">- Fix ordering of keyboard modifiers relative to other keyboard events
  Resolves: #2218146</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 40.9-16" date="1707220800">- Disambiguate output mapped to tablet with connector name
  Resolves: RHEL-28535</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 40.9-17" date="1720094400">- Fix Wayland session with Virtio driver
  Resolves: RHEL-45198</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 40.9-18" date="1722254400">- Don't allow applications on other workspaces to steal
  focus, unless their timestamps are pristine
  Resolves: RHEL-29537</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 40.9-19" date="1722859200">- Don't retry using cursor plane if it failed
  Resolves: RHEL-32622</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 40.9-20" date="1722859201">- Fix positioning when using always-on-top windows
  Resolves: RHEL-45998
- Improve handling of always-on-visible-workspace windows
  Resolves: RHEL-45366</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 40.9-21" date="1729252800">- Fix regression causing wl-copy to trigger a crash
  Resolves: RHEL-62993</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 40.9-22" date="1729252801">- Fix crash when moving window while switching workspace
  Resolves: RHEL-62997
- Improve app discovery for workspace logic
  Resolves: RHEL-63000</changelog>
</package>
<package pkgid="23a2109abacf08fa5ce1a331fc79fc8c8e363e3bd792cdf339a7f7fd1fb414bf" name="mysql-selinux" arch="src">
  <version epoch="0" ver="1.0.13" rel="1.el9_5"/>
  <changelog author="Adam Dobes &lt;adobes@redhat.com&gt; - 1.0.6-1" date="1689163200">- Rebase to 1.0.6</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.0.7-1" date="1694692800">- Empty commit to test Fedora PACKIT configuration for packaging automation (Michal Schorm)</changelog>
  <changelog author="Michal Schorm &lt;mschorm@redhat.com&gt; - 1.0.7-2" date="1695729600">- Bump release for rebuild</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.0.9-1" date="1700222400">- Revert "Attempt to fix rhbz#2186996 rhbz#2221433 rhbz#2245705" This reverts commit de84778e555b891fd9ea5f3111c87a4990650d6c. (Michal Schorm)
- Resolves rhbz#2250360</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.0.10-1" date="1700308800">- 2nd attempt to fix rhbz#2186996 rhbz#2221433 rhbz#2245705 (Michal Schorm)
- Resolves rhbz#2250424</changelog>
  <changelog author="Michal Schorm &lt;mschorm@redhat.com&gt; - 1.0.13-1" date="1732017600">- Rebase to 1.0.13</changelog>
</package>
<package pkgid="c48ae574ac72d43052090d4898c282286ea4285c067f2501d6fe5515a09ab210" name="navix-release" arch="src">
  <version epoch="0" ver="9.5" rel="0.2.el9"/>
  <changelog author="Songhee Yeon &lt;song-hee.yeon@navercorp.com&gt; - 9.2-3.2" date="1687780800">- edit navix.repo ($releasever), rename gpg key</changelog>
  <changelog author="Songhee Yeon &lt;song-hee.yeon@navercorp.com&gt; - 9.2-3.3" date="1687780801">- edit repo name ($releasever)</changelog>
  <changelog author="Songhee Yeon &lt;song-hee.yeon@navercorp.com&gt; - 9.3-1.0" date="1700827200">- Navix release 9.3
- edit dir for macros.dist</changelog>
  <changelog author="Songhee Yeon &lt;song-hee.yeon@navercorp.com&gt; - 9.4-0.1" date="1716897600">- bump version
- add x86_64 secure boot certificates</changelog>
  <changelog author="Songhee Yeon &lt;song-hee.yeon@navercorp.com&gt; - 9.4-0.2" date="1716984000">- add new GPL file
- remove license field for the navix-repos subpackage</changelog>
  <changelog author="Songhee Yeon &lt;song-hee.yeon@navercorp.com&gt; - 9.4-0.3" date="1716984001">- update sb certificates
- add certs for kernel</changelog>
  <changelog author="Songhee Yeon &lt;song-hee.yeon@navercorp.com&gt; - 9.4-0.4" date="1726056000">- fix URLs for public release</changelog>
  <changelog author="Songhee Yeon &lt;song-hee.yeon@navercorp.com&gt; - 9.4-0.5" date="1728561600">- edit repo, bugfix URLs</changelog>
  <changelog author="Songhee Yeon &lt;song-hee.yeon@navercorp.com&gt; - 9.5-0.1" date="1730376000">- bump release</changelog>
  <changelog author="Songhee Yeon &lt;song-hee.yeon@navercorp.com&gt; - 9.5-0.2" date="1734004800">- add source repo</changelog>
</package>
<package pkgid="9fa55bb12bf9871f4ff8e569878c820deef30771eba53f705ffcb9dbddaed2b5" name="nmstate" arch="src">
  <version epoch="0" ver="2.2.39" rel="1.el9_5"/>
  <changelog author="Fernando Fernandez Mancera &lt;ferferna@redhat.com&gt; - 2.2.28-1" date="1713787200">- Upgrade to 2.2.28</changelog>
  <changelog author="Fernando Fernandez Mancera &lt;ferferna@redhat.com&gt; - 2.2.29-1" date="1714046400">- Upgrade to 2.2.29</changelog>
  <changelog author="Fernando Fernandez Mancera &lt;ferferna@redhat.com&gt; - 2.2.30-1" date="1714737600">- Upgrade to 2.2.30</changelog>
  <changelog author="Fernando Fernandez Mancera &lt;ferferna@redhat.com&gt; - 2.2.31-1" date="1716206400">- Upgrade to 2.2.31
- Support IPSec leftsubnet property. RHEL-26755</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 2.2.32-1" date="1717070400">- Upgrade to 2.2.32
- Set VLAN reorder-headers to true by default. RHEL-33362</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 2.2.33-1" date="1718280000">- Upgrade to 2.2.33
- Fix validation of controller overbook. RHEL-40683
- Support DNS and route in kernel mode. RHEL-37665</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 2.2.35-1" date="1724328000">- Upgrade to 2.2.35
- Fix gen_diff on VLAN ID change. RHEL-38623
- Fix Nmpolicy on mac-address identifier. RHEL-54292
- Fix reapply. RHEL-50556</changelog>
  <changelog author="Wen Liang &lt;wenliang@redhat.com&gt; - 2.2.37-1" date="1728302400">- Upgrade to 2.2.37
- Fix disabling IPv6 on ovs-interface. RHEL-60242</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 2.2.38-1" date="1729771200">- Upgrade to 2.2.38
- Fix gc mode on blackhole route. RHEL-58666
- Only search desired interface for storing route rule. RHEL-60261</changelog>
  <changelog author="Wen Liang &lt;wenliang@redhat.com&gt; - 2.2.39-1" date="1732104000">- Upgrade to 2.2.39
- Fix VLAN interface being removed unnecessarily due to route mismatches triggering deactivations. RHEL-65031</changelog>
</package>
<package pkgid="b184c80db194cb90e4386ca30a877838a626b6ffb2fb4f4efdc40a0b4f3ea8b4" name="nodejs" arch="src">
  <version epoch="1" ver="20.17.0" rel="1.module+el9.5.0+97+127e1e35"/>
  <changelog author="Zuzana Svetlikova &lt;zsvetlik@redhat.com&gt; - 1:20.5.0-1" date="1690459200">- Update to v20.5.0
- Remove dtrace support
- bcond corepack, so we don't provide it by default
- Decrease debuginfo verbosity for all arches
- Resolves: #2186717
- Resolves RHELPLAN-155639</changelog>
  <changelog author="Zuzana Svetlikova &lt;zsvetlik@redhat.com&gt; - 1:20.5.1-1" date="1691668800">- Rebase to new security release
- Address CVE-2023-32002, CVE-2023-32004, CVE-2023-32558 (high)
- Address CVE-2023-32006, CVE-2023-32559 (medium)
- Address CVE-2023-32005, CVE-2023-32003 (low)
- Resolves: #2186717
- Resolves RHELPLAN-155639</changelog>
  <changelog author="Zuzana Svetlikova &lt;zsvetlik@redhat.com&gt; - 1:20.8.1-1" date="1697630400">- Update node and nghttp
- Add fips patch
- Fixes CVE-2023-44487 (nghttp)
- Fixes CVE-2023-45143, CVE-2023-39331, CVE-2023-39332, CVE-2023-38552, CVE-2023-39333</changelog>
  <changelog author="Zuzana Svetlikova &lt;zsvetlik@redhat.com&gt; - 1:20.9.0-1" date="1699531200">- Rebase to LTS
- Resolves: RHEL-16161</changelog>
  <changelog author="Jan Stan&#x11B;k &lt;jstanek@redhat.com&gt; - 1:20.11.0-1" date="1705060800">- Rebase to version 20.11.0
  Resolves: RHEL-21188</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 1:20.11.1-1" date="1709640000">- Rebase to version 20.11.1
- Fixes: CVE-2024-21892 CVE-2024-21896 CVE-2024-22017 CVE-2024-22019 (high)
- Fixes: CVE-2023-46809 CVE-2024-21890 CVE-2024-21891 (medium)</changelog>
  <changelog author="Jan Stan&#x11B;k &lt;jstanek@redhat.com&gt; - 1:20.12.2-1" date="1713268800">- Rebase to version 20.12.0
  Fixes CVE-2024-27983 CVE-2024-27982 CVE-2024-22025 (node)
  Fixes CVE-2024-25629 (c-ares)</changelog>
  <changelog author="Jan Stan&#x11B;k &lt;jstanek@redhat.com&gt; - 1:20.12.2-2" date="1713268801">- Backport nghttp2 patch for CVE-2024-28182</changelog>
  <changelog author="Jan Stan&#x11B;k &lt;jstanek@redhat.com&gt; - 1:20.14.0-1" date="1718107200">- Update to version 20.14.0</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 1:20.16.0-1" date="1722859200">- Update to 20.16.0
  Fixes: CVE-2024-36137 CVE-2024-22018 CVE-2024-22020</changelog>
</package>
<package pkgid="653ca3da5135282d5677105d89c12f9e444735568395bce65a67253c25f9ef2e" name="nodejs-nodemon" arch="src">
  <version epoch="0" ver="3.0.1" rel="1.module+el9.5.0+97+127e1e35"/>
  <changelog author="Zuzana Svetlikova &lt;zsvetlik@redhat.com&gt; - 2.0.15-1" date="1638273600">- Resolves: RHBZ#2005419
- Resolves CVE-2020-28469
- Rebase to newest version
- Change source to npmjs.com</changelog>
  <changelog author="Jan Stan&#x11B;k &lt;jstanek@redhat.com&gt; - 2.0.20-1" date="1667995200">- Rebase to 2.0.20
  Resolves: CVE-2022-3517</changelog>
  <changelog author="Zuzana Svetlikova &lt;zsvetlik@redhat.com&gt; - 2.0.20-2" date="1679313600">- Patch bundled glob-parent
- Resolves: CVE-2021-35065</changelog>
  <changelog author="Zuzana Svetlikova &lt;zsvetlik@redhat.com&gt; - 3.0.1-1" date="1692792000">- Rebase to 3.0.1
- Resolves: CVE-2022-25883</changelog>
</package>
<package pkgid="7f968cd4843783806f228d1656d0d850725f13b2558f144517359b3e677d9374" name="nodejs-packaging" arch="src">
  <version epoch="0" ver="2021.06" rel="4.module+el9.3.0+33+ef65cd5b"/>
  <changelog author="Stephen Gallagher &lt;sgallagh@redhat.com&gt; - 24-1" date="1598961600">- Check node_modules_prod for bundled dependencies</changelog>
  <changelog author="Stephen Gallagher &lt;sgallagh@redhat.com&gt; - 25-1" date="1599048000">- Fix incorrect bundled library detection for Requires</changelog>
  <changelog author="Stephen Gallagher &lt;sgallagh@redhat.com&gt; - 2020.09-1" date="1600430400">- Move to dist-git as the upstream</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2021.01" date="1609934400">- Add nodejs-packaging-bundler and update README.md</changelog>
  <changelog author="Stephen Gallagher &lt;sgallagh@redhat.com&gt; - 2021.01-2" date="1611144000">- nodejs-packaging-bundler improvements to handle uncommon characters</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2021.01-3" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Stephen Gallagher &lt;sgallagh@redhat.com&gt; - 2021.06-1" date="1622635200">- Update to 2021.06-1
- bundler: Handle archaic license metadata
- bundler: Warn about bundled dependencies with no license metadata</changelog>
  <changelog author="Stephen Gallagher &lt;sgallagh@redhat.com&gt; - 2021.06-2" date="1624363200">- Fix hard-coded output directory in the bundler</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2021.06-3" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Stephen Gallagher &lt;sgallagh@redhat.com&gt; - 2021.06-4" date="1642680000">- NPM bundler: also find namespaced bundled dependencies</changelog>
</package>
<package pkgid="37e18b061b675721e4c98f4826b7e2db5f5e7115c71184653ffb6f5475ed4ab5" name="nss" arch="src">
  <version epoch="0" ver="3.101.0" rel="10.el9_2"/>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.90.0-6" date="1706011200">- Fix ecc DER wrapping.</changelog>
  <changelog author="Frantisek Krenzelok &lt;krenzelok.frantisek@gmail.com&gt; - 3.90.0-7" date="1712750400">- Allow for shorter ecdsa signatures by padding them to full length</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.101.0-1" date="1718107200">- Rebase to NSS 3.101
- restore ppc init support</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.101.0-2" date="1721131200">- Fix MD-5 decode issue in pkcs #12
- turn off policy processing for pkcs12 and smime
- restore the rhel9 pkcs12 defaults for pk12util</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.101.0-3" date="1721822400">- Fix missing and inaccurate key length checks
- Fix chacha timing issue</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.101.0-6" date="1722513600">- fix param encoding in pkcs12 pbamac encoding
- add support for certificate compression in selfserv and tstclient</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.101.0-7" date="1725451200">- fix cms abi breakage
- fix long password issue on pbmac encodings</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.101.0-8" date="1730721600">- fix shlibsign in FIPS mode
- remove dbm from pkgconfig</changelog>
  <changelog author="Frantisek Krenzelok &lt;krenzelok.frantisek@gmail.com&gt; - 3.101.0-9" date="1731326400">- Add SEC_OID_CURVE25519 to FIPS checks.
- This will mark algorithms using it as FIPS unapproved.</changelog>
  <changelog author="Frantisek Krenzelok &lt;krenzelok.frantisek@gmail.com&gt; - 3.101.0-10" date="1731326401">- Allow RSA-OAEP in FIPS mode</changelog>
</package>
<package pkgid="652311b1860a637ac8bec73e9fff0962d39ffaf70cbc17e4fa24dd0fa494c969" name="openexr" arch="src">
  <version epoch="0" ver="3.1.1" rel="2.el9_4.1"/>
  <changelog author="Stepan Broz &lt;sbroz@redhat.com&gt; - 3.1.1-2.1" date="1730203200">- fix CVE-2023-5481 (RHEL-64162)</changelog>
</package>
<package pkgid="f05f8581b980bb473c3a81341570e96d49d7b67eb3749283af3c75b85aac2101" name="openexr" arch="src">
  <version epoch="0" ver="3.1.1" rel="2.el9_5.1"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 3.1.1-2.1" date="1729684800">- fix CVE-2023-5481 (RHEL-64162)</changelog>
</package>
<package pkgid="07ddbc15277bfc1c1193b903f104043169a0ecb561db28a2df4e9444dbcf34b4" name="openssl" arch="src">
  <version epoch="1" ver="3.2.2" rel="6.el9_5.1"/>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:3.0.7-27" date="1708516800">- Use certified FIPS module instead of freshly built one in Red Hat distribution
  Related: RHEL-23474</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:3.2.1-1" date="1712145600">- Rebasing OpenSSL to 3.2.1
  Resolves: RHEL-26271</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:3.2.1-2" date="1716465600">- Update RNG changing for FIPS purpose
  Resolves: RHEL-35380</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:3.2.2-1" date="1717588800">- Rebase to OpenSSL 3.2.2. Fixes CVE-2024-2511, CVE-2024-4603, CVE-2024-4741,
  and Minerva attack.
  Resolves: RHEL-32148
  Resolves: RHEL-36792
  Resolves: RHEL-38514
  Resolves: RHEL-39111</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 1:3.2.2-2" date="1718193600">- Add workaround for EVP_PKEY_CTX_add1_hkdf_info with older providers
  Resolves: RHEL-40823</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 1:3.2.2-3" date="1719057600">- Replace HKDF backward compatibility patch with the official one
  Related: RHEL-40823</changelog>
  <changelog author="Clemens Lang &lt;cllang@redhat.com&gt; - 1:3.2.2-4" date="1724241600">- Fix CVE-2024-5535: SSL_select_next_proto buffer overread
  Resolves: RHEL-45657</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:3.2.2-5" date="1725451200">- Fix CVE-2024-6119: Possible denial of service in X.509 name checks
  Resolves: RHEL-55339</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:3.2.2-6" date="1725537600">- rebuilt
  Related: RHEL-55339</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:3.2.2-6.1" date="1738152000">- RFC7250 handshakes with unauthenticated servers don't abort as expected (CVE-2024-12797)
  Resolves: RHEL-76755</changelog>
</package>
<package pkgid="62c54163027f296941562d4d4f04ddab9cef5184e945cf18bbdbd799e2f4a08d" name="os-prober" arch="src">
  <version epoch="0" ver="1.77" rel="12.el9_5"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.77-10" date="1677499200">- Fix inheritance of environment build flags
- Resolves: #2144572</changelog>
  <changelog author="Leo Sandoval &lt;lsandova@redhat.com&gt; - 1.77-11" date="1724068800">- 90fallback: include possible kernel parameters from grub's default file
- common.sh: do not resolve symbolic link on mapped device filesystems
- Resolves: #RHEL-44705</changelog>
  <changelog author="Leo Sandoval &lt;lsandova@redhat.com&gt; - 1.77.12" date="1725883200">- 50mounted-tests: trap do_unmount function on errors
- Resolves: RHEL-41244</changelog>
</package>
<package pkgid="71b85777096c121e2b3fdec6fde82a9874698081caa621ab75a4fcbe76def261" name="ostree" arch="src">
  <version epoch="0" ver="2024.9" rel="1.el9_5"/>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; - 2024.3-2" date="1707912000">- https://github.com/ostreedev/ostree/releases/tag/v2024.3
  Resolves: #RHEL-19419</changelog>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; - 2024.4-2" date="1708689600">- https://github.com/ostreedev/ostree/releases/tag/v2024.4</changelog>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; - 2024.4-3" date="1709121600">- Backport
  https://github.com/ostreedev/ostree/pull/3205/commits/e47b37096343efa3bea8295f3f44c4dc90cc04e2</changelog>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; - 2024.5-2" date="1710417600">- https://github.com/ostreedev/ostree/releases/tag/v2024.5</changelog>
  <changelog author="Joseph Marrero &lt;jmarrero@fedoraproject.org&gt; - 2024.6-1" date="1715947200">- https://github.com/ostreedev/ostree/releases/tag/v2024.6
  Resolves: #RHEL-35886</changelog>
  <changelog author="Joseph Marrero &lt;jmarrero@fedoraproject.org&gt; - 2024.7-1" date="1721995200">- https://github.com/ostreedev/ostree/releases/tag/v2024.7
  Resolves: #RHEL-50680</changelog>
  <changelog author="Joseph Marrero &lt;jmarrero@fedoraproject.org&gt; - 2024.7-2" date="1723636800">- Backport https://github.com/ostreedev/ostree/pull/3281
  Resolves: #RHEL-50680</changelog>
  <changelog author="Joseph Marrero &lt;jmarrero@fedoraproject.org&gt; - 2024.7-3" date="1726142400">- Rebuild to pickup changes to ostree-readonly-sysroot-migration
  Resolves: #RHEL-58437</changelog>
  <changelog author="Joseph Marrero &lt;jmarrero@fedoraproject.org&gt; - 2024.7-4" date="1729166400">- Backport https://github.com/ostreedev/ostree/pull/3300
  Resolves: #RHEL-62772</changelog>
  <changelog author="Joseph Marrero &lt;jmarrero@fedoraproject.org&gt; - 2024.9-1" date="1732190400">- Rebase to 2024.9
  Resolves: #RHEL-68351</changelog>
</package>
<package pkgid="44a59d7250776c55a758560a972290fb07b37b10a719acdaf4d3c2e8c34f19ab" name="p11-kit" arch="src">
  <version epoch="0" ver="0.25.3" rel="3.el9_5"/>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 0.25.2-1" date="1699444800">- Update to new upstream release 0.25.2
  Resolves: RHEL-14834
- Add IBM specific mechanisms and attributes
  Resolves: RHEL-10570</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 0.25.3-1" date="1700049600">- Update to new upstream release 0.25.3
  Resolves: RHEL-14834</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 0.25.3-2" date="1700740800">- Fix issues found by static analysis
  Related: RHEL-14834</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 0.25.3-3" date="1729857600">- Fix regression in trust where file creation fails for long cert labels
  Resolves: RHEL-64917</changelog>
</package>
<package pkgid="eedf58c9fbe0cae1bf8396f524bad58479831fda85caaecc50ec6ac7304e6459" name="pam" arch="src">
  <version epoch="0" ver="1.5.1" rel="21.el9_5"/>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 1.5.1-14" date="1669723200">- pam_lastlog: check localtime_r() return value. Resolves: #2130124
- pam_faillock: clarify missing user faillock files after reboot. Resolves: #2126632
- pam_faillock: avoid logging an erroneous consecutive login failure message. Resolves: #2126648</changelog>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 1.5.1-15" date="1687780800">- pam_misc: make length of misc_conv() configurable and set to 4096. Resolves: #2215007</changelog>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 1.5.1-16" date="1699617600">- libpam: use close_range() to close file descriptors. Resolves: RHEL-5099
- fix formatting of audit messages. Resolves: RHEL-5100</changelog>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 1.5.1-17" date="1704715200">- pam_faillock: create tallydir before creating tallyfile. Resolves: RHEL-20943</changelog>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 1.5.1-18" date="1706270400">- libpam: use getlogin() from libc and not utmp. Resolves: RHEL-16727
- pam_access: handle hostnames in access.conf. Resolves: RHEL-22300</changelog>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 1.5.1-19" date="1707739200">- pam_namespace: protect_dir(): use O_DIRECTORY to prevent local DoS
  situations. CVE-2024-22365. Resolves: RHEL-21244</changelog>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 1.5.1-20" date="1718712000">- libpam: support long lines in service files. Resolves: RHEL-40705</changelog>
  <changelog author="Diaa Sami &lt;disami@redhat.com&gt; - 1.5.1-21" date="1730894400">- pam_unix: always run the helper to obtain shadow password file entries.
  CVE-2024-10041. Resolves: RHEL-62880</changelog>
</package>
<package pkgid="7546172cd983819a079cd86b27d4f7a5975dfc7d8e796e28ede8ee72a9199cf1" name="pam" arch="src">
  <version epoch="0" ver="1.5.1" rel="22.el9_5"/>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 1.5.1-14" date="1669723200">- pam_lastlog: check localtime_r() return value. Resolves: #2130124
- pam_faillock: clarify missing user faillock files after reboot. Resolves: #2126632
- pam_faillock: avoid logging an erroneous consecutive login failure message. Resolves: #2126648</changelog>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 1.5.1-15" date="1687780800">- pam_misc: make length of misc_conv() configurable and set to 4096. Resolves: #2215007</changelog>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 1.5.1-16" date="1699617600">- libpam: use close_range() to close file descriptors. Resolves: RHEL-5099
- fix formatting of audit messages. Resolves: RHEL-5100</changelog>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 1.5.1-17" date="1704715200">- pam_faillock: create tallydir before creating tallyfile. Resolves: RHEL-20943</changelog>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 1.5.1-18" date="1706270400">- libpam: use getlogin() from libc and not utmp. Resolves: RHEL-16727
- pam_access: handle hostnames in access.conf. Resolves: RHEL-22300</changelog>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 1.5.1-19" date="1707739200">- pam_namespace: protect_dir(): use O_DIRECTORY to prevent local DoS
  situations. CVE-2024-22365. Resolves: RHEL-21244</changelog>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 1.5.1-20" date="1718712000">- libpam: support long lines in service files. Resolves: RHEL-40705</changelog>
  <changelog author="Diaa Sami &lt;disami@redhat.com&gt; - 1.5.1-21" date="1730894400">- pam_unix: always run the helper to obtain shadow password file entries.
  CVE-2024-10041. Resolves: RHEL-62880</changelog>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 1.5.1-22" date="1732190400">- pam_access: rework resolving of tokens as hostname.
  Resolves: CVE-2024-10963 and RHEL-66245</changelog>
</package>
<package pkgid="22418bf57391082b81c7d787a02800c2db189af14c14480181951792e3d3c794" name="passt" arch="src">
  <version epoch="0" ver="0^20240806.gee36266" rel="6.el9_5"/>
  <changelog author="Stefano Brivio &lt;sbrivio@redhat.com&gt; - 0^20231204.gb86afe3-1" date="1702641600">- Resolves: RHEL-19590</changelog>
  <changelog author="Stefano Brivio &lt;sbrivio@redhat.com&gt; - 0^20240510.g7288448-1" date="1716379200">- Resolves: RHEL-37647</changelog>
  <changelog author="Stefano Brivio &lt;sbrivio@redhat.com&gt; - 0^20240624.g1ee2eca-1" date="1719230400">- Resolves: RHEL-44837</changelog>
  <changelog author="Stefano Brivio &lt;sbrivio@redhat.com&gt; - 0^20240726.g57a21d2-1" date="1722600000">- Resolves: RHEL-52638</changelog>
  <changelog author="Stefano Brivio &lt;sbrivio@redhat.com&gt; - 0^20240806.gee36266-1" date="1723032000">- Resolves: RHEL-53189</changelog>
  <changelog author="Stefano Brivio &lt;sbrivio@redhat.com&gt; - 0^20240806-gee36266-2" date="1723636800">- Resolves: RHEL-54268</changelog>
  <changelog author="Stefano Brivio &lt;sbrivio@redhat.com&gt; - 0^20240806-gee36266-3" date="1732622400">- Resolves: RHEL-68948</changelog>
  <changelog author="Stefano Brivio &lt;sbrivio@redhat.com&gt; - 0^20240806-gee36266-4" date="1736510400">- Resolves: RHEL-73251</changelog>
  <changelog author="Stefano Brivio &lt;sbrivio@redhat.com&gt; - 0^20240806-gee36266-5" date="1737028800">- Resolves: RHEL-74301</changelog>
  <changelog author="Stefano Brivio &lt;sbrivio@redhat.com&gt; - 0^20240806-gee36266-6" date="1737460800">- Resolves: RHEL-75645</changelog>
</package>
<package pkgid="4cb23cbe02b14baf25b8136c951e2ea646904e917f311b1f24bdc3eb1418a5a1" name="pcp" arch="src">
  <version epoch="0" ver="6.2.2" rel="7.el9_5"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 6.2.0-1" date="1707739200">- Rebase to latest stable version of PCP (RHEL-2317)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 6.2.0-2" date="1710936000">- Fix python sub-package year day range issue (RHEL-25543)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 6.2.1-1" date="1712750400">- Rebase to latest stable version of PCP (RHEL-30198)
- Disable pmproxy(1) RESP proxying by default (RHEL-30720)
- Add pmcheck(1) utility to check installation (RHEL-25497)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 6.2.2-1" date="1715774400">- Rebase to latest stable version of PCP (RHEL-30198)
- Fix pcp2openmetrics on s390x reading from an archive (RHEL-32407)
- Fix pcp2openmetrics -F output file option (RHEL-32674)
- Fix pmlogdump version reporting (RHEL-32381)
- Add timestamps for pcp2openmetrics archive option (RHEL-32369)
- Add new metrics to monitor VMware balloon usage (RHEL-32198)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 6.2.2-2" date="1715860800">- Adjust tmpfiles.d permissions for pmcd logdir (RHEL-30198)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 6.2.2-3" date="1718020800">- Revert time64_t related changes breaking i386 (RHEL-30198)</changelog>
  <changelog author="Lauren Chilton &lt;lchilton@redhat.com&gt; - 6.2.2-4" date="1720353600">- Removed excess headers for pcp2openmetrics tool (RHEL-39159)
- Fix pcp2openmetrics '-s' option (RHEL-39132)
- Fix pcp2openmetrics timestamps in archive mode (RHEL-32983)
- Fix pcp2openmetrics output to adhere to prometheus parser (RHEL-39293)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 6.2.2-5" date="1722513600">- Add rpm dependency on package providing ps(1) tool (RHEL-39491)
- Update Java bytecode in pcp-testasuite package (RHEL-40718)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 6.2.2-6" date="1723032000">- Update hacluster PMDA for pacemaker 2.1.6 crm_mon (RHEL-50693)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 6.2.2-7" date="1726574400">- Fix buffer sizing checks in pmstore PDU handling (RHEL-57809)
- Guard against symlink attacks in pmpost program (RHEL-57814)
- Fix libpcp_web webgroup slow request refcounting (RHEL-58307)
- Updated pmdahacluster for newer crm_mon versions (RHEL-58303)</changelog>
</package>
<package pkgid="08d4c54be70fab8bbbae38caf1454af69b8c307883b233d31818d326b9dede8a" name="pcs" arch="src">
  <version epoch="0" ver="0.11.8" rel="1.el9_5.1"/>
  <changelog author="Michal Pospisil &lt;mpospisi@redhat.com&gt; - 0.11.6-3" date="1689336000">- Refreshing any page in pcs-web-ui no longer causes it to display a blank page
- Resolves: rhbz#2222788</changelog>
  <changelog author="Michal Pospisil &lt;mpospisi@redhat.com&gt; - 0.11.6-4" date="1698408000">- No changes, testing a new quality control process
- Resolves: RHEL-15217</changelog>
  <changelog author="Michal Pospisil &lt;mpospisi@redhat.com&gt; - 0.11.6-5" date="1698926400">- No changes, fixing an error in a new quality control process
- Resolves: RHEL-15217</changelog>
  <changelog author="Michal Pospisil &lt;mpospisi@redhat.com&gt; - 0.11.6-6" date="1699876800">- Rebased to the latest upstream sources (see CHANGELOG.md)
  Resolves: RHEL-7582, RHEL-7583, RHEL-7669, RHEL-7672, RHEL-7697, RHEL-7698, RHEL-7700, RHEL-7703, RHEL-7719, RHEL-7725, RHEL-7730, RHEL-7738, RHEL-7739, RHEL-7740, RHEL-7744, RHEL-7746
- TLS cipher setting in pcsd now follows system-wide crypto policies by default
  Resolves: RHEL-7724
- Tightened permissions of bundled rubygems to be 755 or stricter
  Resolves: RHEL-7716</changelog>
  <changelog author="Michal Pospisil &lt;mpospisi@redhat.com&gt; - 0.11.7-1" date="1704456000">- Rebased to the latest sources (see CHANGELOG.md)
  Resolves: RHEL-7740</changelog>
  <changelog author="Michal Pospisil &lt;mpospisi@redhat.com&gt; - 0.11.7-2" date="1710849600">- Fixed CVE-2024-25126, CVE-2024-26141, CVE-2024-26146 in bundled dependency rack
  Resolves: RHEL-26446, RHEL-26448, RHEL-26450</changelog>
  <changelog author="Michal Pospisil &lt;mpospisi@redhat.com&gt; - 0.11.7-3" date="1716292800">- Rebased to the latest sources (see CHANGELOG.md)
  Resolves: RHEL-2977, RHEL-16231, RHEL-21051, RHEL-25854, RHEL-27492, RHEL-28749, RHEL-34781, RHEL-36514
- Updated pcs-web-ui to 0.1.19
  Resolves: RHEL-7726, RHEL-21895, RHEL-21896, RHEL-21897
- Updated bundled rubygems: backports, childprocess, nio4r, puma, rack, rack-protection, sinatra
- Bundled new rubygems: base64, rack-session, rackup, webrick</changelog>
  <changelog author="Michal Pospisil &lt;mpospisi@redhat.com&gt; - 0.11.7-4" date="1718712000">- Rebased to the latest sources (see CHANGELOG.md)
  Resolves: RHEL-7701, RHEL-7737, RHEL-17962, RHEL-34781
- Fixed grammatical error in pcs-web-ui
  Resolves: RHEL-7726</changelog>
  <changelog author="Michal Pospisil &lt;mpospisi@redhat.com&gt; - 0.11.8-1" date="1720526400">- Updated pcs-web-ui to 0.1.20
- Rebased to the latest sources (see CHANGELOG.md)
  Resolves: RHEL-34781</changelog>
  <changelog author="Miroslav Lisik &lt;mlisik@redhat.com&gt; - 0.11.8-1.el9_5.1" date="1731585600">- Fixed command `pcs dr status`
  Resolves: RHEL-64934</changelog>
</package>
<package pkgid="367f3881519c35aa380239a2a43889d33318a307bc79cb92f7a2f9285137dc7f" name="perl-App-cpanminus" arch="src">
  <version epoch="0" ver="1.7044" rel="14.1.el9_5"/>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 1.7044-14.1" date="1726747200">- Patch the code to use https instead of http (CVE-2024-45321)
- Resolves: RHEL-56519</changelog>
</package>
<package pkgid="5d6288f80c8b82142ff20a6940e4b3042b4644053ba48864f8ac38db9fee2a3e" name="pg_repack" arch="src">
  <version epoch="0" ver="1.4.8" rel="2.module+el9.5.0+99+de5059e6"/>
  <changelog author="Filip Janus &lt;fjanus@redhat.com&gt; - 1.4.8-1" date="1666699200">- Update to version 1.4.8
- Postgresql 15 is supported
- Related: #2128410</changelog>
  <changelog author="Ales Nezbeda &lt;anezbeda@redhat.com&gt; 1.4.8-2" date="1724068800">- Add new build dependencies to fix build with lz4 enabled
- Related: RHEL-47350</changelog>
</package>
<package pkgid="d7eeab26bf4dffb56f97e23fcd9449f3c600dfd6b955ce134ca10dab29e991f5" name="pg_repack" arch="src">
  <version epoch="0" ver="1.5.1" rel="1.module+el9.5.0+98+4a1f7d69"/>
  <changelog author="Filip Janus &lt;fjanus@redhat.com&gt; - 1.4.8-1" date="1697198400">- Resolves: RHEL-3636
- Initial import for PG 16 module</changelog>
  <changelog author="Ales Nezbeda &lt;anezbeda@redhat.com&gt; 1.4.8-2" date="1724068800">- Add new build dependencies to fix build with lz4 enabled
- Related: RHEL-47604</changelog>
  <changelog author="Filip Janus &lt;fjanus@redhat.com&gt; - 1.5.1-1" date="1730721600">- Update to v1.5.1</changelog>
</package>
<package pkgid="ea5592ea8c9dae7a48554a671389ff1e0aa2a8e1c2a974f80f97f9d5aada89ae" name="pgaudit" arch="src">
  <version epoch="0" ver="1.7.0" rel="1.module+el9.5.0+99+de5059e6"/>
  <changelog author="Filip Janus &lt;fjanus@redhat.com&gt; - 1.7.0-1" date="1666180800">- Initial import for postgresql 15 module
- Update to 1.7.0
- Support postgresql 15
- Related: #2128410</changelog>
</package>
<package pkgid="061986ab3e11b2d4122ad8f7a278372246bfcf43ba6ba2df70e3e563463d5841" name="pgaudit" arch="src">
  <version epoch="0" ver="16.0" rel="1.module+el9.5.0+98+4a1f7d69"/>
  <changelog author="Filip Janus &lt;fjanus@redhat.com&gt; - 16.0-1" date="1697198400">- Update to 16.0
- Support postgresql 16
- Initial import for PG 16 module
- Resolves: RHEL-3635</changelog>
</package>
<package pkgid="cd44980dd32d70f70149940c2e1ac05b3697b1eeef1617caae2128126946c82d" name="pgvector" arch="src">
  <version epoch="0" ver="0.6.2" rel="1.module+el9.5.0+98+4a1f7d69"/>
  <changelog author="Filip Janus &lt;fjanus@redhat.com&gt; - 0.6.2-1" date="1711368000">- Initial packaging</changelog>
</package>
<package pkgid="48c881b89a221742307be33a62571bbbc7d3bf5de5033c720e2adad758df759e" name="php" arch="src">
  <version epoch="0" ver="8.1.30" rel="1.module+el9.5.0+102+a019b065"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 8.1.14-1" date="1673611200">- rebase to 8.1.14</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 8.1.27-1" date="1703160000">- rebase to 8.1.27 RHEL-19093</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 8.1.30-1" date="1731412800">- rebase to 8.1.30 RHEL-64144</changelog>
</package>
<package pkgid="55a7c1f9d6c27cd80e2f941494d8b38b3a6de0d104f4dbffecad091ce1fe2611" name="php" arch="src">
  <version epoch="0" ver="8.2.25" rel="1.module+el9.5.0+103+735fb0e2"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 8.1.14-1" date="1673611200">- rebase to 8.1.14</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 8.2.13-1" date="1700827200">- rebase to 8.2.13 RHEL-14699
- add %__phpize and %__phpconfig macros
- move httpd/nginx wants directives to config files in /etc
- php-fpm.conf: move include directive after [global] section
  following upstream example, allowing overriding
- use SPDX license IDs</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 8.2.25-1" date="1731067200">- rebase to 8.2.25 RHEL-65837</changelog>
</package>
<package pkgid="75389777c890867c67af14f2a0d015c1da7f7b0039711fde051daf76812632b9" name="php-pecl-apcu" arch="src">
  <version epoch="0" ver="5.1.21" rel="1.module+el9.5.0+102+a019b065"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.1.18-3" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 5.1.19-1" date="1601899200">- update to 5.1.19</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.1.19-2" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 5.1.20-1" date="1614859200">- update to 5.1.20</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 5.1.20-2" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.1.20-3" date="1618833600">- Rebuilt for PHP 8. Related rhbz#1949319</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 5.1.20-4" date="1624363200">- Rebuilt for RHEL 9 BETA for openssl 3.0
  Related: rhbz#1971065</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 5.1.20-5" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.1.21-1" date="1652702400">- update to 5.1.21 for PHP 8.1 #2070040</changelog>
</package>
<package pkgid="458d2cb9103558705f0c3c6a37f66f36a0b7f5564b8185a7abcf58b0a72f3fb6" name="php-pecl-apcu" arch="src">
  <version epoch="0" ver="5.1.23" rel="1.module+el9.5.0+103+735fb0e2"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.1.21-1" date="1652702400">- update to 5.1.21 for PHP 8.1 #2070040</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.1.23-1" date="1700827200">- update to 5.1.23 for PHP 8.2 RHEL-14699</changelog>
</package>
<package pkgid="d9e374021675f5b5d6643da6ae88ef0f15a47cce804b9260369824cc191f7a0a" name="php-pecl-rrd" arch="src">
  <version epoch="0" ver="2.0.3" rel="4.module+el9.5.0+102+a019b065"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.1-15" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.1-16" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.0.1-17" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 2.0.2-1" date="1618833600">- update to 2.0.2</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 2.0.3-1" date="1619611200">- update to 2.0.3</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.0.3-2" date="1624363200">- Rebuilt for RHEL 9 BETA for openssl 3.0
  Related: rhbz#1971065</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.0.3-3" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 2.0.3-4" date="1652702400">- build for PHP 8.1 #2070040</changelog>
</package>
<package pkgid="6491f2798d1ad84bcd134935ab124a50ac7aa88ca4d8a0a438434add62359fb3" name="php-pecl-rrd" arch="src">
  <version epoch="0" ver="2.0.3" rel="4.module+el9.5.0+103+735fb0e2"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.1-15" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.1-16" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.0.1-17" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 2.0.2-1" date="1618833600">- update to 2.0.2</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 2.0.3-1" date="1619611200">- update to 2.0.3</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.0.3-2" date="1624363200">- Rebuilt for RHEL 9 BETA for openssl 3.0
  Related: rhbz#1971065</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.0.3-3" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 2.0.3-4" date="1652702400">- build for PHP 8.1 #2070040</changelog>
</package>
<package pkgid="5cfbde58ca789af509cbc5d7bc5d179884fafb5257abc0e73676d790aa563b78" name="php-pecl-xdebug3" arch="src">
  <version epoch="0" ver="3.1.4" rel="1.module+el9.5.0+102+a019b065"/>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 3.0.2-1" date="1609848000">- update to 3.0.2</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.2-2" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 3.0.3-1" date="1613995200">- update to 3.0.3</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 3.0.3-2" date="1614859200">- rebuild for https://fedoraproject.org/wiki/Changes/php80</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 3.0.4-1" date="1617883200">- update to 3.0.4</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.0.4-2" date="1624363200">- Rebuilt for RHEL 9 BETA for openssl 3.0
  Related: rhbz#1971065</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 3.0.4-4" date="1625745600">- ignore tests relying on DNS #1979841</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.0.4-5" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 3.1.2-1" date="1639137600">- update to 3.1.2 rhbz#2030322</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 3.1.4-1" date="1652702400">- update to 3.1.4 for PHP 8.1 #2070040</changelog>
</package>
<package pkgid="a66a6848f9c7b83a547feab977e7f256add68e3bcd89a5a762ac6931ba07b400" name="php-pecl-xdebug3" arch="src">
  <version epoch="0" ver="3.2.2" rel="2.module+el9.5.0+103+735fb0e2"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 3.1.2-1" date="1639137600">- update to 3.1.2 rhbz#2030322</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 3.1.4-1" date="1652702400">- update to 3.1.4 for PHP 8.1 #2070040</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 3.2.2-1" date="1700827200">- update to 3.2.2 for PHP 8.2 RHEL-14699</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 3.2.2-2" date="1701259200">- drop inet_ntoa usage using upstream patch</changelog>
</package>
<package pkgid="2be94fb924623f453dab1a43e49f4766f741a4dccfdb0305e7dc3c1bb43833b8" name="php-pecl-zip" arch="src">
  <version epoch="0" ver="1.20.1" rel="1.module+el9.5.0+102+a019b065"/>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 1.19.0-1" date="1591617600">- update to 1.19.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.19.0-2" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 1.19.1-1" date="1601467200">- update to 1.19.1</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 1.19.2-1" date="1606132800">- update to 1.19.2</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.19.2-2" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.19.2-3" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 1.19.2-4" date="1618833600">- Rebuilt for PHP 8. Related rhbz#1949319</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.19.2-5" date="1624363200">- Rebuilt for RHEL 9 BETA for openssl 3.0
  Related: rhbz#1971065</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.19.2-6" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 1.20.1-1" date="1652961600">- update to 1.20.1 for PHP 8.1 #2070040</changelog>
</package>
<package pkgid="007755673f2d846a2762578fd913595398bc04a086b153fd52eb2f5575942f75" name="php-pecl-zip" arch="src">
  <version epoch="0" ver="1.22.3" rel="1.module+el9.5.0+103+735fb0e2"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 1.20.1-1" date="1652961600">- update to 1.20.1 for PHP 8.1 #2070040</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 1.22.3-1" date="1700827200">- update to 1.22.3 for PHP 8.2 RHEL-14699</changelog>
</package>
<package pkgid="d4c646f882b4e9f404a98bbf2d7dd7e46a60cfdac320e54c859bbd10368a6ca0" name="plexus-cipher" arch="src">
  <version epoch="0" ver="1.7" rel="28.el9_5"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.7-27" date="1675080000">- Rebuild to regenerate auto-requires</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 1.7-28" date="1732104000">- Rebuild with regenerated Requires on Java</changelog>
</package>
<package pkgid="2e119c027242d443c3a8d6b8f744d3b558ef348615c6f11f4cfb3042c8146832" name="plexus-sec-dispatcher" arch="src">
  <version epoch="0" ver="1.4" rel="39.el9_5"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.4-37" date="1675080000">- Rebuild to regenerate auto-requires</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 1.4-38" date="1732104000">- Rebuild with regenerated Requires on Java</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 1.4-39" date="1732190400">- Fix patch usage</changelog>
</package>
<package pkgid="43069145b6fa107903e9714a8d07ed60b3e38c2ff6c9cf3d446f3ce3dac635a6" name="plexus-utils" arch="src">
  <version epoch="0" ver="3.3.0" rel="11.el9_5"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.3.0-10" date="1675080000">- Rebuild to regenerate auto-requires</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 3.3.0-11" date="1732104000">- Rebuild with regenerated Requires on Java</changelog>
</package>
<package pkgid="8ead6a886e7f42f671443103f1a990e95c81a8b97f4422452648b09a45341d9e" name="podman" arch="src">
  <version epoch="4" ver="5.2.2" rel="11.el9_5"/>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:5.2.2-2" date="1727179200">- Add cni build tag to podman build
- Resolves: RHEL-59714</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:5.2.2-3" date="1727265600">- update to the latest content of https://github.com/containers/podman/tree/v5.2-rhel
  (https://github.com/containers/podman/commit/5f2c188)
- Resolves: RHEL-59703</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:5.2.2-4" date="1728302400">- update to the latest content of https://github.com/containers/podman/tree/v5.2-rhel
  (https://github.com/containers/podman/commit/8e693ce)
- Resolves: RHEL-60963</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 4:5.2.2-5" date="1728302401">- bump Epoch to 4
- Resolves: RHEL-60963</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 4:5.2.2-6" date="1728302402">- podman gating: test CNI, thanks to Ed Santiago
- Resolves: RHEL-61249</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 4:5.2.2-7" date="1728302403">- attempt to fix the TMT testing pipeline
- Resolves: RHEL-59714</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 4:5.2.2-8" date="1728993600">- update to the latest content of https://github.com/containers/podman/tree/v5.2-rhel
  (https://github.com/containers/podman/commit/c03b5f3)
- Resolves: RHEL-61667</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 4:5.2.2-9" date="1729684800">- update to the latest content of https://github.com/containers/podman/tree/v5.2-rhel
  (https://github.com/containers/podman/commit/6df7dfb)
- Resolves: RHEL-61847</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 4:5.2.2-10" date="1730289600">- update to the latest content of https://github.com/containers/podman/tree/v5.2-rhel
  (https://github.com/containers/podman/commit/39171ac)
- Resolves: RHEL-62566</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 4:5.2.2-11" date="1731672000">- update to the latest content of https://github.com/containers/podman/tree/v5.2-rhel
  (https://github.com/containers/podman/commit/e40738b)
- Resolves: RHEL-61962</changelog>
</package>
<package pkgid="f49ff5477eb85daf4c0abeadd8524c0b14ddca7ea9fbeae00e3efc46780ebe1c" name="podman" arch="src">
  <version epoch="4" ver="5.2.2" rel="13.el9_5"/>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:5.2.2-4" date="1728302400">- update to the latest content of https://github.com/containers/podman/tree/v5.2-rhel
  (https://github.com/containers/podman/commit/8e693ce)
- Resolves: RHEL-60963</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 4:5.2.2-5" date="1728302401">- bump Epoch to 4
- Resolves: RHEL-60963</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 4:5.2.2-6" date="1728302402">- podman gating: test CNI, thanks to Ed Santiago
- Resolves: RHEL-61249</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 4:5.2.2-7" date="1728302403">- attempt to fix the TMT testing pipeline
- Resolves: RHEL-59714</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 4:5.2.2-8" date="1728993600">- update to the latest content of https://github.com/containers/podman/tree/v5.2-rhel
  (https://github.com/containers/podman/commit/c03b5f3)
- Resolves: RHEL-61667</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 4:5.2.2-9" date="1729684800">- update to the latest content of https://github.com/containers/podman/tree/v5.2-rhel
  (https://github.com/containers/podman/commit/6df7dfb)
- Resolves: RHEL-61847</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 4:5.2.2-10" date="1730289600">- update to the latest content of https://github.com/containers/podman/tree/v5.2-rhel
  (https://github.com/containers/podman/commit/39171ac)
- Resolves: RHEL-62566</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 4:5.2.2-11" date="1731672000">- update to the latest content of https://github.com/containers/podman/tree/v5.2-rhel
  (https://github.com/containers/podman/commit/e40738b)
- Resolves: RHEL-61962</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 4:5.2.2-12" date="1737374400">- update to the latest content of https://github.com/containers/podman/tree/v5.2-rhel
  (https://github.com/containers/podman/commit/76d1690)
- Resolves: RHEL-73592</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 4:5.2.2-13" date="1737720000">- update to the latest content of https://github.com/containers/podman/tree/v5.2-rhel
  (https://github.com/containers/podman/commit/173b20b)
- Resolves: RHEL-67606</changelog>
</package>
<package pkgid="163fc40fd17c93ac2830272ef914c09b28693cff8ea147176fcc41ff36f15e1b" name="podman" arch="src">
  <version epoch="4" ver="5.2.2" rel="9.el9_5"/>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:5.2.1-1" date="1723723200">- update to https://github.com/containers/podman/releases/tag/v5.2.1
- Related: RHEL-27608</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:5.2.2-1" date="1724328000">- update to https://github.com/containers/podman/releases/tag/v5.2.2
- Related: RHEL-27608</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:5.2.2-2" date="1727179200">- Add cni build tag to podman build
- Resolves: RHEL-59714</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:5.2.2-3" date="1727265600">- update to the latest content of https://github.com/containers/podman/tree/v5.2-rhel
  (https://github.com/containers/podman/commit/5f2c188)
- Resolves: RHEL-59703</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:5.2.2-4" date="1728302400">- update to the latest content of https://github.com/containers/podman/tree/v5.2-rhel
  (https://github.com/containers/podman/commit/8e693ce)
- Resolves: RHEL-60963</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 4:5.2.2-5" date="1728302401">- bump Epoch to 4
- Resolves: RHEL-60963</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 4:5.2.2-6" date="1728302402">- podman gating: test CNI, thanks to Ed Santiago
- Resolves: RHEL-61249</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 4:5.2.2-7" date="1728302403">- attempt to fix the TMT testing pipeline
- Resolves: RHEL-59714</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 4:5.2.2-8" date="1728993600">- update to the latest content of https://github.com/containers/podman/tree/v5.2-rhel
  (https://github.com/containers/podman/commit/c03b5f3)
- Resolves: RHEL-61667</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 4:5.2.2-9" date="1729684800">- update to the latest content of https://github.com/containers/podman/tree/v5.2-rhel
  (https://github.com/containers/podman/commit/6df7dfb)
- Resolves: RHEL-61847</changelog>
</package>
<package pkgid="819d006dfee3a7e32a24f693a95442f107964508fb6bf02f4073d65b69b43200" name="postgres-decoderbufs" arch="src">
  <version epoch="0" ver="1.9.7" rel="1.Final.module+el9.5.0+99+de5059e6"/>
  <changelog author="Filip Janus &lt;fjanus@redhat.com&gt; - 1.9.7-1.Final" date="1666785600">- Iitial import for postgresql 15 stream
- Related: #2128410</changelog>
</package>
<package pkgid="00a6ea277b1df2b0b91c09421a9161eed2b76047150f81a30ede5682b2183ac2" name="postgres-decoderbufs" arch="src">
  <version epoch="0" ver="2.4.0" rel="1.Final.module+el9.5.0+98+4a1f7d69"/>
  <changelog author="Filip Janus &lt;fjanus@redhat.com&gt; - 2.4.0-1.Final" date="1697198400">- Initial import for postgresql 16 stream
- Related: RHEL-3635</changelog>
</package>
<package pkgid="5edc211961c25e8e19f4403e328f8bea202b0562a02ec3a90d94311048aa2166" name="postgresql" arch="src">
  <version epoch="0" ver="13.18" rel="1.el9_5"/>
  <changelog author="Filip Janus &lt;fjanus@redhat.com&gt; - 13.18-1" date="1732190400">- Update to 13.18</changelog>
</package>
<package pkgid="f194ce4b0534cb2b2cafc207520210bb8191ff9dc622775061a4d0ca3423e556" name="postgresql" arch="src">
  <version epoch="0" ver="15.10" rel="1.module+el9.5.0+99+de5059e6"/>
  <changelog author="Filip Janus &lt;fjanus@redhat.com&gt; - 15.0-2" date="1673956800">- update postgresql-setup to 8.8</changelog>
  <changelog author="Filip Janus &lt;fjanus@redhat.com&gt; - 15.2-1" date="1675944000">- update to 15.2
- Resolves: #2128410</changelog>
  <changelog author="Masahiro Matsuya &lt;mmatsuya@redhat.com&gt; - 15.3-1" date="1686744000">- update to 15.3
- Fixes CVE-2023-2454 and CVE-2023-2455
  Resolves: #2214875</changelog>
  <changelog author="Masahiro Matsuya &lt;mmatsuya@redhat.com&gt; - 15.5-1" date="1699876800">- update to 15.5
- Fixes CVE-2023-5868, CVE-2023-5869, CVE-2023-5870, CVE-2023-39417, and CVE-2023-39418</changelog>
  <changelog author="Filip Janus &lt;fjanus@redhat.com&gt; 15.6-1" date="1707480000">- Update to 15.6 and 13.14
- Fix CVE-2024-0985</changelog>
  <changelog author="Filip Janus &lt;fjanus@redhat.com&gt; - 15.6-2" date="1721044800">- Enable lz4 and zstd support</changelog>
  <changelog author="Filip Janus &lt;fjanus@redhat.com&gt; - 15.6-3" date="1722340800">- Remove /var/run/postgresql
- Related: RHEL-51271</changelog>
  <changelog author="Filip Janus &lt;fjanus@redhat.com&gt; - 15.8-1" date="1722945600">- Update to 15.8</changelog>
  <changelog author="Ales Nezbeda &lt;anezbeda@redhat.com&gt; - 15.8-2" date="1723809600">- Fix build on 15.8</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 15.10-1" date="1732190400">- Update to 15.10
- Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979</changelog>
</package>
<package pkgid="ab8764c184b0d68480f5857a97e850423ebc8977229f09eabaf66d2ab15146f9" name="postgresql" arch="src">
  <version epoch="0" ver="16.6" rel="1.module+el9.5.0+98+4a1f7d69"/>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 15.2-1" date="1675857600">- Update to upstream version 15.2
- Update postgresql-setup to 8.8
- PostgreSQL systemd unit waits for the network to be up
- Resolves: #2128241</changelog>
  <changelog author="Jorge San Emeterio &lt;jsanemet@redhat.com&gt; - 15.3-1" date="1690977600">- Update to upstream version 15.3
- Fixes: CVE-2023-2454 CVE-2023-2455
- Resolves: #2207934</changelog>
  <changelog author="Filip Janus &lt;fjanus@redhat.com&gt; - 16.0-1" date="1696852800">- New postgresql stream - 16
- Remove pdf documentation
- Update postgresql-setup to 8.9
- postmaster binary no more shipped
- Resolves: RHEL-3636</changelog>
  <changelog author="Filip Janus &lt;fjanus@redhat.com&gt; - 16.1-1" date="1704715200">- Update to 16.1
- Update upgrade server to 15.5
- Resolves: RHEL-3636</changelog>
  <changelog author="Filip Janus &lt;fjanus@redhat.com&gt; - 16.1-2" date="1721044800">- Enable lz4 and zstd support</changelog>
  <changelog author="Filip Janus &lt;fjanus@redhat.com&gt; - 16.1-3" date="1722340800">- Remove /var/run/postgresql
- Related: RHEL-51275</changelog>
  <changelog author="Filip Janus &lt;fjanus@redhat.com&gt; - 16.4-1" date="1722945600">- Update to 16.4</changelog>
  <changelog author="Ales Nezbeda &lt;anezbeda@redhat.com&gt; - 16.4-2" date="1723809600">- Fix build on 16.4</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 16.6-1" date="1732276800">- Update to 16.6
- Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979</changelog>
</package>
<package pkgid="b5d42cda1ec4401794c60283d343866cc41a64e934a8922e34715d8f68b9d680" name="python-jinja2" arch="src">
  <version epoch="0" ver="2.11.3" rel="7.el9_5"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.11.3-5" date="1706616000">- Security fix for CVE-2024-22195
Resolves: RHEL-21349</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 2.11.3-6" date="1715083200">- Security fix for CVE-2024-34064
Resolves: RHEL-35653</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 2.11.3-7" date="1737547200">- Security fix for CVE-2024-56326
Resolves: RHEL-74690</changelog>
</package>
<package pkgid="16d79a2e0eb8778606dde3e7acafbb816ba8475c03d89fca3801f628c75b7413" name="python-tornado" arch="src">
  <version epoch="0" ver="6.4.2" rel="1.el9_5"/>
  <changelog author="Sergio Correia &lt;scorreia@redhat.com&gt; - 6.1.0-9" date="1690286400">- Fix an open redirect in StaticFileHandler
  Resolves: CVE-2023-28370</changelog>
  <changelog author="Sergio Correia &lt;scorreia@redhat.com&gt; - 6.4.2-1" date="1732622400">- Update to 6.4.2
  Resolves: RHEL-68663</changelog>
</package>
<package pkgid="0bee47affed4a55431b9ae6bfedcd4b8f9e0436a60e60b143a5de5f7429b0fcd" name="python3.11" arch="src">
  <version epoch="0" ver="3.11.9" rel="7.el9_5.1"/>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 3.11.5-2" date="1704801600">- Security fix for CVE-2023-27043
Resolves: RHEL-21325</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.11.7-1" date="1705924800">- Rebase to 3.11.7
Resolves: RHEL-20233</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.11.9-1" date="1713787200">- Rebase to 3.11.9
- Security fixes for CVE-2023-6597 and CVE-2024-0450
- Fix expat tests for the latest expat security release
Resolves: RHEL-33677, RHEL-33689</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.11.9-2" date="1718107200">- Enable importing of hash-based .pyc files under FIPS mode
Resolves: RHEL-40779</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.11.9-3" date="1721304000">- Security fix for CVE-2024-4032
Resolves: RHEL-44099</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.11.9-4" date="1721304001">- Build Python with -O3
- https://fedoraproject.org/wiki/Changes/Python_built_with_gcc_O3</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.11.9-5" date="1721908800">- Properly propagate the optimization flags to C extensions</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.11.9-6" date="1723723200">- Security fix for CVE-2024-6923
Resolves: RHEL-53038</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.11.9-7" date="1724414400">- Security fix for CVE-2024-8088
Resolves: RHEL-55959</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 3.11.9-7.1" date="1726056000">- Security fix for CVE-2024-6232
Resolves: RHEL-57410</changelog>
</package>
<package pkgid="5e6351be9c728dfe7359f19a4ebd6a6d5e79beb980b0c021cb5195fa660ea48f" name="python3.11" arch="src">
  <version epoch="0" ver="3.11.9" rel="7.el9_5.2"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.11.7-1" date="1705924800">- Rebase to 3.11.7
Resolves: RHEL-20233</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.11.9-1" date="1713787200">- Rebase to 3.11.9
- Security fixes for CVE-2023-6597 and CVE-2024-0450
- Fix expat tests for the latest expat security release
Resolves: RHEL-33677, RHEL-33689</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.11.9-2" date="1718107200">- Enable importing of hash-based .pyc files under FIPS mode
Resolves: RHEL-40779</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.11.9-3" date="1721304000">- Security fix for CVE-2024-4032
Resolves: RHEL-44099</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.11.9-4" date="1721304001">- Build Python with -O3
- https://fedoraproject.org/wiki/Changes/Python_built_with_gcc_O3</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.11.9-5" date="1721908800">- Properly propagate the optimization flags to C extensions</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.11.9-6" date="1723723200">- Security fix for CVE-2024-6923
Resolves: RHEL-53038</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.11.9-7" date="1724414400">- Security fix for CVE-2024-8088
Resolves: RHEL-55959</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 3.11.9-7.1" date="1726056000">- Security fix for CVE-2024-6232
Resolves: RHEL-57410</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.11.9-7.2" date="1733745600">- Security fix for CVE-2024-9287
Resolves: RHEL-64882</changelog>
</package>
<package pkgid="c20f831b4faf48a2bd15b0d8b06038a42f2c255e9c26289ec18ddbf2a32435f0" name="python3.11-urllib3" arch="src">
  <version epoch="0" ver="1.26.12" rel="2.el9_5.1"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 1.26.12-1" date="1669723200">- Initial package
- Fedora contributions by:
      Adam Williamson &lt;awilliam@redhat.com&gt;
      Anna Khaitovich &lt;akhaitov@redhat.com&gt;
      Arun S A G &lt;sagarun@gmail.com&gt;
      Carl George &lt;carl@george.computer&gt;
      Charalampos Stratakis &lt;cstratak@redhat.com&gt;
      Dennis Gilmore &lt;dennis@ausil.us&gt;
      Haikel Guemar &lt;hguemar@fedoraproject.org&gt;
      Iryna Shcherbina &lt;shcherbina.iryna@gmail.com&gt;
      Jeremy Cline &lt;jeremy@jcline.org&gt;
      Karolina Surma &lt;ksurma@redhat.com&gt;
      Kevin Fenzi &lt;kevin@scrye.com&gt;
      Lukas Slebodnik &lt;lslebodn@redhat.com&gt;
      Lumir Balhar &lt;lbalhar@redhat.com&gt;
      Miro Hrončok &lt;miro@hroncok.cz&gt;
      Ralph Bean &lt;rbean@redhat.com&gt;
      Robert Kuska &lt;rkuska@redhat.com&gt;
      Slavek Kabrda &lt;bkabrda@redhat.com&gt;
      Tomas Hoger &lt;thoger@redhat.com&gt;
      Tom Callaway &lt;spot@fedoraproject.org&gt;
      Toshio Kuratomi &lt;toshio@fedoraproject.org&gt;
      yatinkarel &lt;ykarel@redhat.com&gt;</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 1.26.12-2" date="1697198400">- Security fix for CVE-2023-43804
Resolves: RHEL-12003</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 1.26.12-2.1" date="1727265600">- Security fix for CVE-2024-37891
Resolves: RHEL-59990</changelog>
</package>
<package pkgid="9e0ee53fb0830f1703e5749d29490b3451e044d20d4e030ce33402a503022ada" name="python3.11-urllib3" arch="src">
  <version epoch="0" ver="1.26.12" rel="2.el9_5.2"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 1.26.12-1" date="1669723200">- Initial package
- Fedora contributions by:
      Adam Williamson &lt;awilliam@redhat.com&gt;
      Anna Khaitovich &lt;akhaitov@redhat.com&gt;
      Arun S A G &lt;sagarun@gmail.com&gt;
      Carl George &lt;carl@george.computer&gt;
      Charalampos Stratakis &lt;cstratak@redhat.com&gt;
      Dennis Gilmore &lt;dennis@ausil.us&gt;
      Haikel Guemar &lt;hguemar@fedoraproject.org&gt;
      Iryna Shcherbina &lt;shcherbina.iryna@gmail.com&gt;
      Jeremy Cline &lt;jeremy@jcline.org&gt;
      Karolina Surma &lt;ksurma@redhat.com&gt;
      Kevin Fenzi &lt;kevin@scrye.com&gt;
      Lukas Slebodnik &lt;lslebodn@redhat.com&gt;
      Lumir Balhar &lt;lbalhar@redhat.com&gt;
      Miro Hrončok &lt;miro@hroncok.cz&gt;
      Ralph Bean &lt;rbean@redhat.com&gt;
      Robert Kuska &lt;rkuska@redhat.com&gt;
      Slavek Kabrda &lt;bkabrda@redhat.com&gt;
      Tomas Hoger &lt;thoger@redhat.com&gt;
      Tom Callaway &lt;spot@fedoraproject.org&gt;
      Toshio Kuratomi &lt;toshio@fedoraproject.org&gt;
      yatinkarel &lt;ykarel@redhat.com&gt;</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 1.26.12-2" date="1697198400">- Security fix for CVE-2023-43804
Resolves: RHEL-12003</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 1.26.12-2.1" date="1727265600">- Security fix for CVE-2024-37891
Resolves: RHEL-59990</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 1.26.12-2.2" date="1732017600">- Security fix for CVE-2023-45803
Resolves: RHEL-66552</changelog>
</package>
<package pkgid="63238e59332089c23166099be07e6f46711744c7c55eae96410c7d963c081d40" name="python3.12" arch="src">
  <version epoch="0" ver="3.12.5" rel="2.el9_5.1"/>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 3.12.2-2" date="1714737600">- Fix tests for XMLPullParser with Expat with fixed CVE</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 3.12.2-3" date="1714737601">- Move all test modules to the python3-test package, namely:
   - __phello__
   - _xxsubinterpreters
   - xxlimited
   - xxlimited_35
   - xxsubtype</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 3.12.3-1" date="1714737602">- Update to 3.12.3
Related: RHEL-33690</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.12.3-2" date="1718107200">- Enable importing of hash-based .pyc files under FIPS mode
Resolves: RHEL-40772</changelog>
  <changelog author="Tom&#xE1;&#x161; Hrn&#x10D;iar &lt;thrnciar@redhat.com&gt; - 3.12.4-1" date="1719576000">- Update to 3.12.4
Resolves: RHEL-44103</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.12.4-2" date="1721217600">- Build Python with -O3
- https://fedoraproject.org/wiki/Changes/Python_built_with_gcc_O3</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.12.4-3" date="1721908800">- Properly propagate the optimization flags to C extensions</changelog>
  <changelog author="Tom&#xE1;&#x161; Hrn&#x10D;iar &lt;thrnciar@redhat.com&gt; - 3.12.5-1" date="1723032000">- Update to 3.12.5
- Security fix for CVE-2024-6923
Resolves: RHEL-53041</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.12.5-2" date="1724414400">- Security fix for CVE-2024-8088
Resolves: RHEL-55963</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 3.12.5-2.1" date="1726056000">- Security fix for CVE-2024-6232
Resolves: RHEL-57415</changelog>
</package>
<package pkgid="d4ca2b2117122c1bb0abc3b24bbfa30db793b1eb449373c1a15fa3badebe4469" name="python3.12" arch="src">
  <version epoch="0" ver="3.12.5" rel="2.el9_5.2"/>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 3.12.2-3" date="1714737600">- Move all test modules to the python3-test package, namely:
   - __phello__
   - _xxsubinterpreters
   - xxlimited
   - xxlimited_35
   - xxsubtype</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 3.12.3-1" date="1714737601">- Update to 3.12.3
Related: RHEL-33690</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.12.3-2" date="1718107200">- Enable importing of hash-based .pyc files under FIPS mode
Resolves: RHEL-40772</changelog>
  <changelog author="Tom&#xE1;&#x161; Hrn&#x10D;iar &lt;thrnciar@redhat.com&gt; - 3.12.4-1" date="1719576000">- Update to 3.12.4
Resolves: RHEL-44103</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.12.4-2" date="1721217600">- Build Python with -O3
- https://fedoraproject.org/wiki/Changes/Python_built_with_gcc_O3</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.12.4-3" date="1721908800">- Properly propagate the optimization flags to C extensions</changelog>
  <changelog author="Tom&#xE1;&#x161; Hrn&#x10D;iar &lt;thrnciar@redhat.com&gt; - 3.12.5-1" date="1723032000">- Update to 3.12.5
- Security fix for CVE-2024-6923
Resolves: RHEL-53041</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.12.5-2" date="1724414400">- Security fix for CVE-2024-8088
Resolves: RHEL-55963</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 3.12.5-2.1" date="1726056000">- Security fix for CVE-2024-6232
Resolves: RHEL-57415</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.12.5-2.2" date="1733227200">- Security fix for CVE-2024-9287 and CVE-2024-12254
Resolves: RHEL-64885, RHEL-70316</changelog>
</package>
<package pkgid="9127e28f95446c00f85117a7cf4ada9ced1e1ff9fbfca6b4729b0bb2a7c2b282" name="python3.12-urllib3" arch="src">
  <version epoch="0" ver="1.26.18" rel="2.el9_5.1"/>
  <changelog author="Tom&#xE1;&#x161; Hrn&#x10D;iar &lt;thrnciar@redhat.com&gt; - 1.26.18-1" date="1698062400">- Initial package
- Fedora contributions by
      Adam Williamson &lt;awilliam@redhat.com&gt;
      Anna Khaitovich &lt;akhaitov@redhat.com&gt;
      Arun S A G &lt;sagarun@gmail.com&gt;
      Benjamin A. Beasley &lt;code@musicinmybrain.net&gt;
      Carl George &lt;carl@george.computer&gt;
      Charalampos Stratakis &lt;cstratak@redhat.com&gt;
      Dennis Gilmore &lt;dennis@ausil.us&gt;
      Haikel Guemar &lt;hguemar@fedoraproject.org&gt;
      Iryna Shcherbina &lt;shcherbina.iryna@gmail.com&gt;
      Jeremy Cline &lt;jeremy@jcline.org&gt;
      Karolina Surma &lt;ksurma@redhat.com&gt;
      Kevin Fenzi &lt;kevin@scrye.com&gt;
      Lukas Slebodnik &lt;lslebodn@redhat.com&gt;
      Lumir Balhar &lt;lbalhar@redhat.com&gt;
      Maxwell G &lt;maxwell@gtmx.me&gt;
      Miro Hrončok &lt;miro@hroncok.cz&gt;
      Ralph Bean &lt;rbean@redhat.com&gt;
      Robert Kuska &lt;rkuska@redhat.com&gt;
      Slavek Kabrda &lt;bkabrda@redhat.com&gt;
      Tomas Hoger &lt;thoger@redhat.com&gt;
      Tomáš Hrnčiar &lt;thrnciar@redhat.com&gt;
      Tom Callaway &lt;spot@fedoraproject.org&gt;
      Toshio Kuratomi &lt;toshio@fedoraproject.org&gt;
      Yaakov Selkowitz &lt;yselkowi@redhat.com&gt;
      yatinkarel &lt;ykarel@redhat.com&gt;</changelog>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 1.26.18-2" date="1706011200">- Rebuilt for timestamp .pyc invalidation mode</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 1.26.18-2.1" date="1727352000">- Security fix for CVE-2024-37891
Resolves: RHEL-59997</changelog>
</package>
<package pkgid="ff6bcace5040cbce37b9b0f9694a9893f54b8031b6a279e941c435e59fe514ab" name="python3.9" arch="src">
  <version epoch="0" ver="3.9.19" rel="8.el9_5.1"/>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 3.9.18-3" date="1706097600">- Fix tests on s390x with hw acceleration
Resolves: RHEL-13043</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.9.19-1" date="1713787200">- Update to 3.9.19
- Security fixes for CVE-2023-6597 and CVE-2024-0450
- Fix tests for XMLPullParser with Expat with fixed CVE
Resolves: RHEL-33679, RHEL-33691</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.9.19-2" date="1718107200">- Enable importing of hash-based .pyc files under FIPS mode
Resolves: RHEL-40750</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.9.19-3" date="1721304000">- Security fix for CVE-2024-4032
Resolves: RHEL-44107</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.9.19-4" date="1721304001">- Build Python with -O3
- https://fedoraproject.org/wiki/Changes/Python_built_with_gcc_O3</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.9.19-5" date="1721908800">- Properly propagate the optimization flags to C extensions</changelog>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 3.9.19-6" date="1722513600">- Ensure 3rd party extension modules for the debug build use the -O0 flag</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 3.9.19-7" date="1723550400">- Security fix for CVE-2024-6923
Resolves: RHEL-53045</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.9.19-8" date="1724414400">- Security fix for CVE-2024-8088
Resolves: RHEL-55967</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 3.9.19-8.1" date="1726056000">- Security fix for CVE-2024-6232
Resolves: RHEL-57420</changelog>
</package>
<package pkgid="a5d5dae57a8825ee5a774fcf6943d4f8091feecc4ca3c8877fc90033a01e3487" name="python3.9" arch="src">
  <version epoch="0" ver="3.9.21" rel="1.el9_5"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.9.19-1" date="1713787200">- Update to 3.9.19
- Security fixes for CVE-2023-6597 and CVE-2024-0450
- Fix tests for XMLPullParser with Expat with fixed CVE
Resolves: RHEL-33679, RHEL-33691</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.9.19-2" date="1718107200">- Enable importing of hash-based .pyc files under FIPS mode
Resolves: RHEL-40750</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.9.19-3" date="1721304000">- Security fix for CVE-2024-4032
Resolves: RHEL-44107</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.9.19-4" date="1721304001">- Build Python with -O3
- https://fedoraproject.org/wiki/Changes/Python_built_with_gcc_O3</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.9.19-5" date="1721908800">- Properly propagate the optimization flags to C extensions</changelog>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 3.9.19-6" date="1722513600">- Ensure 3rd party extension modules for the debug build use the -O0 flag</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 3.9.19-7" date="1723550400">- Security fix for CVE-2024-6923
Resolves: RHEL-53045</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.9.19-8" date="1724414400">- Security fix for CVE-2024-8088
Resolves: RHEL-55967</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 3.9.19-8.1" date="1726056000">- Security fix for CVE-2024-6232
Resolves: RHEL-57420</changelog>
  <changelog author="Tom&#xE1;&#x161; Hrn&#x10D;iar &lt;thrnciar@redhat.com&gt; - 3.9.21-1" date="1733400000">- Update to 3.9.21
- Security fix for CVE-2024-11168 and CVE-2024-9287
Resolves: RHEL-64888
Resolves: RHEL-67259</changelog>
</package>
<package pkgid="56efe9064c9a82f179a55755714daa9d7d7c902b23913506877628a7f734fcd0" name="qemu-kvm" arch="src">
  <version epoch="17" ver="9.0.0" rel="10.el9_5.2"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 9.0.0-3" date="1716292800">- kvm-nbd-server-do-not-poll-within-a-coroutine-context.patch [RHEL-33440]
- kvm-nbd-server-Mark-negotiation-functions-as-coroutine_f.patch [RHEL-33440]
- Resolves: RHEL-33440
  (Qemu hang when quit dst vm after storage migration(nbd+tls))</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 9.0.0-4" date="1718625600">- kvm-qio-Inherit-follow_coroutine_ctx-across-TLS.patch [RHEL-33440]
- kvm-iotests-test-NBD-TLS-iothread.patch [RHEL-33440]
- kvm-virtio-gpu-fix-v2-migration.patch [RHEL-34621]
- kvm-rhel-9.4.0-machine-type-compat-for-virtio-gpu-migrat.patch [RHEL-34621]
- Resolves: RHEL-33440
  (Qemu hang when quit dst vm after storage migration(nbd+tls))
- Resolves: RHEL-34621
  ([RHEL9.5.0][stable_guest_abi]Failed to migrate VM with (qemu) qemu-kvm: Missing section footer for 0000:00:01.0/virtio-gpu qemu-kvm: load of migration failed: Invalid argument)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 9.0.0-5" date="1719316800">- kvm-linux-aio-add-IO_CMD_FDSYNC-command-support.patch [RHEL-42411]
- kvm-Revert-monitor-use-aio_co_reschedule_self.patch [RHEL-34618 RHEL-38697]
- kvm-aio-warn-about-iohandler_ctx-special-casing.patch [RHEL-34618 RHEL-38697]
- kvm-block-crypto-create-ciphers-on-demand.patch [RHEL-36159]
- kvm-crypto-block-drop-qcrypto_block_open-n_threads-argum.patch [RHEL-36159]
- Resolves: RHEL-42411
  (qemu-kvm: linux-aio: add support for IO_CMD_FDSYNC command)
- Resolves: RHEL-34618
  (aio=io_uring: Assertion failure `luringcb-&gt;co-&gt;ctx == s-&gt;aio_context' with block_resize)
- Resolves: RHEL-38697
  (aio=native: Assertion failure `laiocb-&gt;co-&gt;ctx == laiocb-&gt;ctx-&gt;aio_context' with block_resize)
- Resolves: RHEL-36159
  (qemu crash on Assertion `block-&gt;n_free_ciphers &gt; 0' failed in guest installation with luks and iothread-vq-mapping)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 9.0.0-6" date="1720094400">- kvm-qcow2-Don-t-open-data_file-with-BDRV_O_NO_IO.patch [RHEL-35611]
- kvm-iotests-244-Don-t-store-data-file-with-protocol-in-i.patch [RHEL-35611]
- kvm-iotests-270-Don-t-store-data-file-with-json-prefix-i.patch [RHEL-35611]
- kvm-block-Parse-filenames-only-when-explicitly-requested.patch [RHEL-35611]
- Resolves: RHEL-35611
  (CVE-2024-4467 qemu-kvm: QEMU: 'qemu-img info' leads to host file read/write [rhel-9.5])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 9.0.0-7" date="1721044800">- kvm-hw-virtio-Fix-the-de-initialization-of-vhost-user-de.patch [RHEL-40708]
- kvm-hw-arm-virt-Avoid-unexpected-warning-from-Linux-gues.patch [RHEL-39936]
- Resolves: RHEL-40708
  ([RHEL9.5.0][virtio_fs][s390x] after hot-unplug the vhost-user-fs-ccw device, the device is failed to hot-plug again )
- Resolves: RHEL-39936
  (ARCH_DMA_MINALIGN smaller than CTR_EL0.CWG (128 &lt; 256) on FUJITSU)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 9.0.0-8" date="1723636800">- kvm-introduce-pc_rhel_9_5_compat.patch [RHEL-39544]
- kvm-target-i386-add-guest-phys-bits-cpu-property.patch [RHEL-39544]
- kvm-kvm-add-support-for-guest-physical-bits.patch [RHEL-39544]
- kvm-i386-kvm-Move-architectural-CPUID-leaf-generation-to.patch [RHEL-39544]
- kvm-target-i386-Introduce-Icelake-Server-v7-to-enable-TS.patch [RHEL-39544]
- kvm-target-i386-Add-new-CPU-model-SierraForest.patch [RHEL-39544]
- kvm-target-i386-Export-RFDS-bit-to-guests.patch [RHEL-39544]
- kvm-pci-host-q35-Move-PAM-initialization-above-SMRAM-ini.patch [RHEL-39544]
- kvm-q35-Introduce-smm_ranges-property-for-q35-pci-host.patch [RHEL-39544]
- kvm-hw-i386-acpi-Set-PCAT_COMPAT-bit-only-when-pic-is-no.patch [RHEL-39544]
- kvm-confidential-guest-support-Add-kvm_init-and-kvm_rese.patch [RHEL-39544]
- kvm-i386-sev-Switch-to-use-confidential_guest_kvm_init.patch [RHEL-39544]
- kvm-ppc-pef-switch-to-use-confidential_guest_kvm_init-re.patch [RHEL-39544]
- kvm-s390-Switch-to-use-confidential_guest_kvm_init.patch [RHEL-39544]
- kvm-scripts-update-linux-headers-Add-setup_data.h-to-imp.patch [RHEL-39544]
- kvm-scripts-update-linux-headers-Add-bits.h-to-file-impo.patch [RHEL-39544]
- kvm-linux-headers-update-to-current-kvm-next.patch [RHEL-39544]
- kvm-runstate-skip-initial-CPU-reset-if-reset-is-not-actu.patch [RHEL-39544]
- kvm-KVM-track-whether-guest-state-is-encrypted.patch [RHEL-39544]
- kvm-KVM-remove-kvm_arch_cpu_check_are_resettable.patch [RHEL-39544]
- kvm-target-i386-introduce-x86-confidential-guest.patch [RHEL-39544]
- kvm-target-i386-Implement-mc-kvm_type-to-get-VM-type.patch [RHEL-39544]
- kvm-target-i386-SEV-use-KVM_SEV_INIT2-if-possible.patch [RHEL-39544]
- kvm-i386-sev-Add-legacy-vm-type-parameter-for-SEV-guest-.patch [RHEL-39544]
- kvm-hw-i386-sev-Use-legacy-SEV-VM-types-for-older-machin.patch [RHEL-39544]
- kvm-trace-kvm-Split-address-space-and-slot-id-in-trace_k.patch [RHEL-39544]
- kvm-kvm-Introduce-support-for-memory_attributes.patch [RHEL-39544]
- kvm-RAMBlock-Add-support-of-KVM-private-guest-memfd.patch [RHEL-39544]
- kvm-kvm-Enable-KVM_SET_USER_MEMORY_REGION2-for-memslot.patch [RHEL-39544]
- kvm-kvm-memory-Make-memory-type-private-by-default-if-it.patch [RHEL-39544]
- kvm-HostMem-Add-mechanism-to-opt-in-kvm-guest-memfd-via-.patch [RHEL-39544]
- kvm-RAMBlock-make-guest_memfd-require-uncoordinated-disc.patch [RHEL-39544]
- kvm-physmem-Introduce-ram_block_discard_guest_memfd_rang.patch [RHEL-39544]
- kvm-kvm-handle-KVM_EXIT_MEMORY_FAULT.patch [RHEL-39544]
- kvm-kvm-tdx-Don-t-complain-when-converting-vMMIO-region-.patch [RHEL-39544]
- kvm-kvm-tdx-Ignore-memory-conversion-to-shared-of-unassi.patch [RHEL-39544]
- kvm-hw-i386-x86-Eliminate-two-if-statements-in-x86_bios_.patch [RHEL-39544]
- kvm-hw-i386-Have-x86_bios_rom_init-take-X86MachineState-.patch [RHEL-39544]
- kvm-hw-i386-pc_sysfw-Remove-unused-parameter-from-pc_isa.patch [RHEL-39544]
- kvm-hw-i386-x86-Don-t-leak-isa-bios-memory-regions.patch [RHEL-39544]
- kvm-hw-i386-x86-Don-t-leak-pc.bios-memory-region.patch [RHEL-39544]
- kvm-hw-i386-x86-Extract-x86_isa_bios_init-from-x86_bios_.patch [RHEL-39544]
- kvm-hw-i386-pc_sysfw-Alias-rather-than-copy-isa-bios-reg.patch [RHEL-39544]
- kvm-i386-correctly-select-code-in-hw-i386-that-depends-o.patch [RHEL-39544]
- kvm-i386-pc-remove-unnecessary-MachineClass-overrides.patch [RHEL-39544]
- kvm-hw-i386-split-x86.c-in-multiple-parts.patch [RHEL-39544]
- kvm-scripts-update-linux-header.sh-be-more-src-tree-frie.patch [RHEL-39544]
- kvm-scripts-update-linux-headers.sh-Remove-temporary-dir.patch [RHEL-39544]
- kvm-scripts-update-linux-headers.sh-Fix-the-path-of-setu.patch [RHEL-39544]
- kvm-update-linux-headers-fix-forwarding-to-asm-generic-h.patch [RHEL-39544]
- kvm-update-linux-headers-move-pvpanic.h-to-correct-direc.patch [RHEL-39544]
- kvm-linux-headers-Update-to-current-kvm-next.patch [RHEL-39544]
- kvm-update-linux-headers-import-linux-kvm_para.h-header.patch [RHEL-39544]
- kvm-machine-allow-early-use-of-machine_require_guest_mem.patch [RHEL-39544]
- kvm-i386-sev-Replace-error_report-with-error_setg.patch [RHEL-39544]
- kvm-i386-sev-Introduce-sev-common-type-to-encapsulate-co.patch [RHEL-39544]
- kvm-i386-sev-Move-sev_launch_update-to-separate-class-me.patch [RHEL-39544]
- kvm-i386-sev-Move-sev_launch_finish-to-separate-class-me.patch [RHEL-39544]
- kvm-i386-sev-Introduce-sev-snp-guest-object.patch [RHEL-39544]
- kvm-i386-sev-Add-a-sev_snp_enabled-helper.patch [RHEL-39544]
- kvm-i386-sev-Add-sev_kvm_init-override-for-SEV-class.patch [RHEL-39544]
- kvm-i386-sev-Add-snp_kvm_init-override-for-SNP-class.patch [RHEL-39544]
- kvm-i386-cpu-Set-SEV-SNP-CPUID-bit-when-SNP-enabled.patch [RHEL-39544]
- kvm-i386-sev-Don-t-return-launch-measurements-for-SEV-SN.patch [RHEL-39544]
- kvm-i386-sev-Add-a-class-method-to-determine-KVM-VM-type.patch [RHEL-39544]
- kvm-i386-sev-Update-query-sev-QAPI-format-to-handle-SEV-.patch [RHEL-39544]
- kvm-i386-sev-Add-the-SNP-launch-start-context.patch [RHEL-39544]
- kvm-i386-sev-Add-handling-to-encrypt-finalize-guest-laun.patch [RHEL-39544]
- kvm-i386-sev-Set-CPU-state-to-protected-once-SNP-guest-p.patch [RHEL-39544]
- kvm-hw-i386-sev-Add-function-to-get-SEV-metadata-from-OV.patch [RHEL-39544]
- kvm-i386-sev-Add-support-for-populating-OVMF-metadata-pa.patch [RHEL-39544]
- kvm-i386-sev-Add-support-for-SNP-CPUID-validation.patch [RHEL-39544]
- kvm-hw-i386-sev-Add-support-to-encrypt-BIOS-when-SEV-SNP.patch [RHEL-39544]
- kvm-i386-sev-Invoke-launch_updata_data-for-SEV-class.patch [RHEL-39544]
- kvm-i386-sev-Invoke-launch_updata_data-for-SNP-class.patch [RHEL-39544]
- kvm-i386-kvm-Add-KVM_EXIT_HYPERCALL-handling-for-KVM_HC_.patch [RHEL-39544]
- kvm-i386-sev-Enable-KVM_HC_MAP_GPA_RANGE-hcall-for-SNP-g.patch [RHEL-39544]
- kvm-i386-sev-Extract-build_kernel_loader_hashes.patch [RHEL-39544]
- kvm-i386-sev-Reorder-struct-declarations.patch [RHEL-39544]
- kvm-i386-sev-Allow-measured-direct-kernel-boot-on-SNP.patch [RHEL-39544]
- kvm-memory-Introduce-memory_region_init_ram_guest_memfd.patch [RHEL-39544]
- kvm-hw-i386-sev-Use-guest_memfd-for-legacy-ROMs.patch [RHEL-39544]
- kvm-hw-i386-Add-support-for-loading-BIOS-using-guest_mem.patch [RHEL-39544]
- kvm-i386-sev-fix-unreachable-code-coverity-issue.patch [RHEL-39544]
- kvm-i386-sev-Move-SEV_COMMON-null-check-before-dereferen.patch [RHEL-39544]
- kvm-i386-sev-Return-when-sev_common-is-null.patch [RHEL-39544]
- kvm-target-i386-SEV-fix-formatting-of-CPUID-mismatch-mes.patch [RHEL-39544]
- kvm-i386-sev-Fix-error-message-in-sev_get_capabilities.patch [RHEL-39544]
- kvm-i386-sev-Fallback-to-the-default-SEV-device-if-none-.patch [RHEL-39544]
- kvm-i386-sev-Don-t-allow-automatic-fallback-to-legacy-KV.patch [RHEL-39544]
- kvm-target-i386-SEV-fix-mismatch-in-vcek-disabled-proper.patch [RHEL-39544]
- kvm-virtio-rng-block-max-bytes-0.patch [RHEL-50336]
- kvm-scsi-disk-Use-positive-return-value-for-status-in-dm.patch [RHEL-50000]
- kvm-scsi-block-Don-t-skip-callback-for-sgio-error-status.patch [RHEL-50000]
- kvm-scsi-disk-Add-warning-comments-that-host_status-erro.patch [RHEL-50000]
- kvm-scsi-disk-Always-report-RESERVATION_CONFLICT-to-gues.patch [RHEL-50000]
- kvm-nbd-server-Plumb-in-new-args-to-nbd_client_add.patch [RHEL-52617]
- kvm-nbd-server-CVE-2024-7409-Cap-default-max-connections.patch [RHEL-52617]
- kvm-nbd-server-CVE-2024-7409-Drop-non-negotiating-client.patch [RHEL-52617]
- kvm-nbd-server-CVE-2024-7409-Close-stray-clients-at-serv.patch [RHEL-52617]
- Resolves: RHEL-39544
  ([QEMU] Add support for AMD SEV-SNP to Qemu)
- Resolves: RHEL-50336
  (Fail to boot up the guest including vtpm and virtio-rng (max-bytes=0) devices)
- Resolves: RHEL-50000
  (scsi-block: Cannot setup Windows Failover Cluster, qemu crashes on assert)
- Resolves: RHEL-52617
  (CVE-2024-7409 qemu-kvm: Denial of Service via Improper Synchronization in QEMU NBD Server During Socket Closure [rhel-9.5])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 9.0.0-9" date="1724673600">- kvm-qemu-guest-agent-Update-the-logfile-path-of-qga-fsfr.patch [RHEL-52250]
- Resolves: RHEL-52250
  (fsfreeze hooks break on the systems first restorecon)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 9.0.0-10" date="1725278400">- kvm-nbd-server-CVE-2024-7409-Avoid-use-after-free-when-c.patch [RHEL-52617]
- Resolves: RHEL-52617
  (CVE-2024-7409 qemu-kvm: Denial of Service via Improper Synchronization in QEMU NBD Server During Socket Closure [rhel-9.5])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 9.0.0-10.el9_5.1" date="1730721600">- kvm-migration-multifd-Avoid-the-final-FLUSH-in-complete.patch [RHEL-63874]
- kvm-migration-Rename-thread-debug-names.patch [RHEL-63874]
- kvm-migration-Use-MigrationStatus-instead-of-int.patch [RHEL-63874]
- kvm-migration-Cleanup-incoming-migration-setup-state-cha.patch [RHEL-63874]
- kvm-migration-postcopy-Add-postcopy-recover-setup-phase.patch [RHEL-63874]
- kvm-migration-docs-Update-postcopy-recover-session-for-S.patch [RHEL-63874]
- kvm-tests-migration-tests-Drop-most-WIN32-ifdefs-for-pos.patch [RHEL-63874]
- kvm-tests-migration-tests-Always-enable-migration-events.patch [RHEL-63874]
- kvm-tests-migration-tests-migration_event_wait.patch [RHEL-63874]
- kvm-tests-migration-tests-Verify-postcopy-recover-setup-.patch [RHEL-63874]
- kvm-tests-migration-tests-Cover-postcopy-failure-on-reco.patch [RHEL-63874]
- Resolves: RHEL-63874
  (Failure to resume paused post-copy migration is undetectable [rhel-9.5.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 9.0.0-10.el9_5.2" date="1736942400">- kvm-vhost-fail-device-start-if-iotlb-update-fails.patch [RHEL-73006]
- Resolves: RHEL-73006
  (qemu-kvm: vhost: reports error while updating IOTLB entries [rhel-9.5.z])</changelog>
</package>
<package pkgid="c9bf4d2465c08b2fe05eb4ecff67302747c58e79684658ea7ebbe78bd3a5d464" name="raptor2" arch="src">
  <version epoch="0" ver="2.0.15" rel="32.el9_5"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 2.0.15-31" date="1736769600">- Resolves: CVE-2024-57823 integer underflow when normalizing a URI with the
  turtle parser</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 2.0.15-32" date="1736856000">- Bump NVR</changelog>
</package>
<package pkgid="7d7f02a9f898f8bae483fce0113a30eccb3905bf16ab397e83e4b303122b8aee" name="redis" arch="src">
  <version epoch="0" ver="6.2.17" rel="1.el9_5"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 6.2.17-1" date="1736769600">- rebase to 6.2.17 for CVE-2024-46981</changelog>
</package>
<package pkgid="917cf269f620884ff9746c9368697e30ecd8f12674ea38fa591ab88b7ea1f2a7" name="redis" arch="src">
  <version epoch="0" ver="7.2.6" rel="1.module+el9.5.0+100+800da67e"/>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.0.7-2" date="1671192000">- Upstream 7.0.7 release.
- refresh documentation</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.0.8-1" date="1673956800">- Upstream 7.0.8 release.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 7.0.8-2" date="1674216000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.0.9-1" date="1675252800">- Upstream 7.0.9 release.</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.0.10-1" date="1679400000">- Upstream 7.0.10 release.</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.0.10-2" date="1680177600">- fix modules directory ownership and permissions #2176173
- drop redis-shutdown helper and rely on systemd #2181181</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.0.11-1" date="1681819200">- Upstream 7.0.11 release.</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 7.0.11-1" date="1685016000">- rebase to 7.0.11 for new redis:7 stream #2129826</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 7.0.12-1" date="1689076800">- rebase to 7.0.12 #2221899</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 7.2.6-1" date="1730203200">- rebase to 7.2.6  RHEL-26628</changelog>
</package>
<package pkgid="fbaf4d65358553e6f062d493ed11af9d98754f931ea5a9247e6fe4b116932627" name="resource-agents" arch="src">
  <version epoch="0" ver="4.10.0" rel="64.el9_5.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-54" date="1712750400">- galera: fix issue where joiner promotion fails is the node reports
  being in non-primary state

  Resolves: RHEL-31763</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-56" date="1714478400">- AWS agents: retry failed metadata requests to avoid instantly
  failing when there is a hiccup in the network or metadata service

  Resolves: RHEL-16246</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-57" date="1715774400">- Filesystem: fail when incorrect device mounted on mountpoint, and
  dont unmount the mountpoint in this case, or if mountpoint set to "/"

  Resolves: RHEL-34777</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-58" date="1718107200">- Filesystem: dont kill unrelated processes during stop-action
- db2: fix OCF_SUCESS typo

  Resolves: RHEL-40393
  Resolves: RHEL-32829</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-59" date="1719316800">- Filesystem: fail when leading or trailing whitespace is present in
  device or directory parameters

  Resolves: RHEL-24683</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-60" date="1719576000">- galera/mysql/redis: remove Unpromoted monitor-action

  Resolves: RHEL-43579</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-61" date="1723550400">- LVM-activate: fail when both "system_id_source" and "volume_list"
  are set in lvm.conf to avoid false positive activation of the VG

  Resolves: RHEL-22715</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-64" date="1724932800">- IPsrcaddr: add IPv6 support

  Resolves: RHEL-32265</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-64.1" date="1727870400">- podman: force-remove containers in stopping state if necessary

  Resolves: RHEL-61165</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-64.3" date="1736510400">- openstack-cinder-volume: wait for volume to be available

  Resolves: RHEL-72960</changelog>
</package>
<package pkgid="f383faafaa97111a48fef60cd1f06d74e5fd0dbfbd29b9ba0ce6586e19c279bd" name="rpm-ostree" arch="src">
  <version epoch="0" ver="2024.7" rel="3.el9_5"/>
  <changelog author="Joseph Marrero &lt;jmarrero@fedoraproject.org&gt; - 2024.2-1" date="1706097600">- https://github.com/coreos/rpm-ostree/releases/tag/v2024.2
  Resolves: #RHEL-11294</changelog>
  <changelog author="Joseph Marrero &lt;jmarrero@fedoraproject.org&gt; - 2024.3-1" date="1708862400">- https://github.com/coreos/rpm-ostree/releases/tag/v2024.3
  Backport https://github.com/coreos/rpm-ostree/commit/fe586621e5014d14f92b913338171a02ed29e6cc
  Resolves: #RHEL-26186</changelog>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; - 2024.4-2" date="1710504000">- https://github.com/coreos/rpm-ostree/releases/tag/v2024.4
  Resolves: #RHEL-29339</changelog>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; - 2024.4-3" date="1711022400">- Backport patch to fix https://issues.redhat.com/browse/RHEL-29559</changelog>
  <changelog author="Joseph Marrero &lt;jmarrero@fedoraproject.org&gt; - 2024.4-4" date="1712664000">- Backport https://github.com/coreos/rpm-ostree/security/advisories/GHSA-2m76-cwhg-7wv6</changelog>
  <changelog author="Joseph Marrero &lt;jmarrero@fedoraproject.org&gt; - 2024.5-1" date="1713182400">- Rebase to 2024.5
  Adds fix for https://github.com/coreos/rpm-ostree/security/advisories/GHSA-2m76-cwhg-7wv6
  Resolves: #RHEL-30415</changelog>
  <changelog author="Joseph Marrero &lt;jmarrero@fedoraproject.org&gt; - 2024.5-1" date="1716292800">- Rebase to 2024.6
  Resolves: #RHEL-29339</changelog>
  <changelog author="Joseph Marrero &lt;jmarrero@fedoraproject.org&gt; - 2024.7-1" date="1723204800">- Rebase to 2024.7
  Resolves: #RHEL-53871</changelog>
  <changelog author="Joseph Marrero &lt;jmarrero@fedoraproject.org&gt; - 2024.7-2" date="1723723200">- Backport https://github.com/coreos/rpm-ostree/pull/5051
  Resolves: #RHEL-53871</changelog>
  <changelog author="Joseph Marrero &lt;jmarrero@fedoraproject.org&gt; - 2024.7-3" date="1729166400">- Backport https://github.com/coreos/rpm-ostree/pull/5114
  Resolves: #RHEL-62652</changelog>
</package>
<package pkgid="9494eb16432759cb24d5edf2795af91f27fbc40e6acd565f4ce8a6f7a6e303dc" name="rpm-ostree" arch="src">
  <version epoch="0" ver="2024.9" rel="1.el9_5"/>
  <changelog author="Joseph Marrero &lt;jmarrero@fedoraproject.org&gt; - 2024.3-1" date="1708862400">- https://github.com/coreos/rpm-ostree/releases/tag/v2024.3
  Backport https://github.com/coreos/rpm-ostree/commit/fe586621e5014d14f92b913338171a02ed29e6cc
  Resolves: #RHEL-26186</changelog>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; - 2024.4-2" date="1710504000">- https://github.com/coreos/rpm-ostree/releases/tag/v2024.4
  Resolves: #RHEL-29339</changelog>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; - 2024.4-3" date="1711022400">- Backport patch to fix https://issues.redhat.com/browse/RHEL-29559</changelog>
  <changelog author="Joseph Marrero &lt;jmarrero@fedoraproject.org&gt; - 2024.4-4" date="1712664000">- Backport https://github.com/coreos/rpm-ostree/security/advisories/GHSA-2m76-cwhg-7wv6</changelog>
  <changelog author="Joseph Marrero &lt;jmarrero@fedoraproject.org&gt; - 2024.5-1" date="1713182400">- Rebase to 2024.5
  Adds fix for https://github.com/coreos/rpm-ostree/security/advisories/GHSA-2m76-cwhg-7wv6
  Resolves: #RHEL-30415</changelog>
  <changelog author="Joseph Marrero &lt;jmarrero@fedoraproject.org&gt; - 2024.5-1" date="1716292800">- Rebase to 2024.6
  Resolves: #RHEL-29339</changelog>
  <changelog author="Joseph Marrero &lt;jmarrero@fedoraproject.org&gt; - 2024.7-1" date="1723204800">- Rebase to 2024.7
  Resolves: #RHEL-53871</changelog>
  <changelog author="Joseph Marrero &lt;jmarrero@fedoraproject.org&gt; - 2024.7-2" date="1723723200">- Backport https://github.com/coreos/rpm-ostree/pull/5051
  Resolves: #RHEL-53871</changelog>
  <changelog author="Joseph Marrero &lt;jmarrero@fedoraproject.org&gt; - 2024.7-3" date="1729166400">- Backport https://github.com/coreos/rpm-ostree/pull/5114
  Resolves: #RHEL-62652</changelog>
  <changelog author="Joseph Marrero &lt;jmarrero@fedoraproject.org&gt; - 2024.9-1" date="1732190400">- Rebase to 2024.9
  Resolves: #RHEL-68144</changelog>
</package>
<package pkgid="55cda3f46ea4707f11b5e46c86e52722c51f192a836f864f2bc02b051e0f10c3" name="rsync" arch="src">
  <version epoch="0" ver="3.2.3" rel="20.el9_5.1"/>
  <changelog author="Alex Iribarren &lt;Alex.Iribarren@cern.ch&gt; - 3.2.3-20" date="1697716800">- Resolves: RHEL-14228 - rsync regression with --delay-updates</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.2.3-20.1" date="1735905600">- Resolves: RHEL-72495 - Info Leak via Uninitialized Stack Contents</changelog>
</package>
<package pkgid="0d2417692ef7dbb913a5abe3aa26c7090dc2a02eb2e705b11a1b6d47a5e9d52a" name="rust" arch="src">
  <version epoch="0" ver="1.79.0" rel="3.el9_5"/>
  <changelog author="Josh Stone &lt;jistone@redhat.com&gt; - 1.75.0-1" date="1704456000">- Update to 1.75.0.</changelog>
  <changelog author="Josh Stone &lt;jistone@redhat.com&gt; - 1.76.0-1" date="1713268800">- Update to 1.76.0.
- Sync rust-toolset macros to rust-packaging v25.2</changelog>
  <changelog author="Josh Stone &lt;jistone@redhat.com&gt; - 1.77.2-1" date="1713528000">- Update to 1.77.2.</changelog>
  <changelog author="Josh Stone &lt;jistone@redhat.com&gt; - 1.77.2-2" date="1714478400">- Use bundled sqlite3 when the system version is too old.</changelog>
  <changelog author="Josh Stone &lt;jistone@redhat.com&gt; - 1.77.2-3" date="1714651200">- Fix the coverage-dump tool for tests.</changelog>
  <changelog author="Nikita Popov &lt;npopov@redhat.com&gt; - 1.78.0-1" date="1718712000">- Update to 1.78.0</changelog>
  <changelog author="Nikita Popov &lt;npopov@redhat.com&gt; - 1.79.0-1" date="1720008000">- Update to 1.79.0</changelog>
  <changelog author="Josh Stone &lt;jistone@redhat.com&gt; - 1.79.0-2" date="1723550400">- Disable jump threading of float equality</changelog>
  <changelog author="Josh Stone &lt;jistone@redhat.com&gt; - 1.79.0-3" date="1733486400">- Remove the subshell in the cargo_install macro</changelog>
  <changelog author="Linux Engineering Team &lt;dl_le@navercorp.com&gt; - 1.79.0-3" date="1738756800">- Fix macros.rust-toolset file
- constrain to 4 core on s390x
- use less verbose debuginfo for s390x</changelog>
</package>
<package pkgid="0fbde14f09e5cf4ad9970a7140783153ee9e15ed474817411f819af0611bae8f" name="samba" arch="src">
  <version epoch="0" ver="4.20.2" rel="2.el9_5"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.19.4-100" date="1704888000">- related: RHEL-16476 - Update to version 4.19.4
- resolves: RHEL-2109 - Add support for certificate auto enrollment
- resolves: RHEL-20761 - Add missing requirements for samba-gpupdate
- resolves: RHEL-19566 - Fix smbget interactive authentication
- resolves: RHEL-21001 - Fix samba-gpupdate paths for RHEL</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.19.4-102" date="1706616000">- resolves: RHEL-22157 - Don't require NDES for samba-gpupdate
- resolves: RHEL-20897 - Fix site name fetching for samba-gpupdate</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.19.4-104" date="1708344000">- related: RHEL-2109 - Disable support for certificate auto enrollment</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.20.0-101" date="1714132800">- resolves: RHEL-33645 - Update to version 4.20.0</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.20.0-102" date="1714392000">- resolves: RHEL-2109  - Support Certificate Auto Enrollment in Samba
- resolves: RHEL-22157 - Fix root cert import for samba-gpupdate</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.20.0-103" date="1714392001">- resolves: RHEL-20473 - Improve performance of winbind idmap_ad backend</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.20.1-1" date="1716897600">- related: RHEL-33645 - Update to version 4.20.1
- resolves: RHEL-26337 - Fix site lookup for samba-gpupdate
- resolves: RHEL-5846 - Fix warning messages while upgrading libwbclient</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.20.1-1" date="1716984000">- related: RHEL-33645 - Remove autorelease - rpmautospec is not available for rhel-9 yet</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.20.2-1" date="1719921600">- related: RHEL-33645 - Update to version 4.20.2
- resolves: RHEL-45841 - Fix KDC IP address lookup in case of trusted domain
- resolves: RHEL-23814 - Fix smbclient to enumerate the printers</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.20.2-2" date="1722513600">- resolves: RHEL-47757 - Allow to run samba-bgqd as a standalone systemd service</changelog>
</package>
<package pkgid="6292daa83e0c9150165198d21e72cebe910051a11db99b68214aaeac6baf5963" name="seabios" arch="src">
  <version epoch="0" ver="1.16.3" rel="2.el9_5.1"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.16.1-1" date="1670414400">- Rebase to 1.16.1 [bz#2149280]
- Resolves: bz#2149280
  (rebase seabios to 1.16.1)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.16.3-1" date="1702468800">- Rebase to 1.16.3 [RHEL-19239]
- Removed vgabios-qxl.bin [RHEL-383]
- Resolves: RHEL-19239
  (Rebase seabios to 1.16.3)
- Resolves: RHEL-383
  (remove vgabios-qxl.bin from seavgabios in rhel9)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.16.3-2" date="1704888000">- seabios-add-hwerr_printf-function-for-threads.patch [RHEL-7110]
- seabios-display-error-message-for-blocksizes-512.patch [RHEL-7110]
- Resolves: RHEL-7110
  ([seabios] Can't boot from a disk with 4K sector size)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.16.3-2.el9_5.1" date="1732795200">- seabios-pciinit-don-t-misalign-large-BARs.patch [RHEL-68955]
- Resolves: RHEL-68955
  (amdgpu failed to initialize when multiple AMD MI210 GPUs assigned and firmware is seabios [rhel-9.5.z])</changelog>
</package>
<package pkgid="ebed300ac05266cf840a6af708a531aa4e60a6f41e1fd6fe10abd476d2608cda" name="shadow-utils" arch="src">
  <version epoch="2" ver="4.9" rel="10.el9_5"/>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 2:4.9-6" date="1664366400">- Change "badnames" to "badname" as this is the accepted option name. Resolves: #2076819</changelog>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 2:4.9-7" date="1684238400">- useradd: check if subid range exists for user. Resolves: #2179987
- find_new_[gu]id: Skip over IDs that are reserved for legacy reasons. Resolves: #2179988</changelog>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 2:4.9-8" date="1689163200">- gpasswd: fix password leak. Resolves: #2215948</changelog>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 2:4.9-9" date="1720008000">- login.defs: Update SHA_CRYPT_MAX_ROUNDS from 5000 to 100000. Resolves: RHEL-40195</changelog>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 2:4.9-10" date="1726228800">- Disable sssd integration by default. Resolves: RHEL-56352</changelog>
</package>
<package pkgid="674b18fa2a59d98d50e1f6a2e7525cdee37b65a911f91320eea09e533b25f028" name="skopeo" arch="src">
  <version epoch="2" ver="1.16.1" rel="2.el9_5"/>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.14.0-1" date="1701864000">- bump to v1.14.0
- Related: Jira:RHEL-2112</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.14.1-1" date="1705665600">- update to https://github.com/containers/skopeo/releases/tag/v1.14.1
- Related: RHEL-2112</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.14.1-2" date="1706702400">- Switch to the maint branch
- Related: Jira:RHEL-2112</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.14.3-0.1" date="1706875200">- update to the latest content of https://github.com/containers/skopeo/tree/release-1.14
  (https://github.com/containers/skopeo/commit/1c2ab99)
- Related: RHEL-2112</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.15.0-1" date="1710504000">- update to https://github.com/containers/skopeo/releases/tag/v1.15.0
- Resolves: RHEL-29277</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.15.1-1" date="1715947200">- update to https://github.com/containers/skopeo/releases/tag/v1.15.1
- Resolves: RHEL-35443</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.15.2-1" date="1720785600">- update to https://github.com/containers/skopeo/releases/tag/v1.15.2
- Related: RHEL-27608</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.16.0-1" date="1722254400">- update to https://github.com/containers/skopeo/releases/tag/v1.16.0
- Resolves: RHEL-47197 RHEL-44886 RHEL-40812</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.16.1-1" date="1724673600">- update to https://github.com/containers/skopeo/releases/tag/v1.16.1
- Related: RHEL-27608</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.16.1-2" date="1728302400">- rebuild to fix CVE-2024-34156
- Resolves: RHEL-57957</changelog>
</package>
<package pkgid="89368d51481669344cef9c0e94816dc37001554f51f52b7de14321d06bdbefcd" name="slf4j" arch="src">
  <version epoch="0" ver="1.7.30" rel="14.el9_5"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.7.30-13" date="1675080000">- Rebuild to regenerate auto-requires</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 1.7.30-14" date="1732104000">- Rebuild with regenerated Requires on Java</changelog>
</package>
<package pkgid="ae016679d54430b39de52544d36fd24d0657f6eecc6c5c82d1ba197dcd4914b5" name="sos" arch="src">
  <version epoch="0" ver="4.8.2" rel="1.el9_5"/>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 4.7.1-3" date="1715256000">- [archive] Fix get_archive_root after files reordering
  Resolves: RHEL-35945</changelog>
  <changelog author="Pierguido Lambri &lt;plambri@redhat.com&gt; = 4.7.2-1" date="1718971200">- New upstream release
  Resolves: RHEL-49781</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 4.7.2-3" date="1724241600">- reverting RHEL-22732 patch due to regressions
  Resolves: RHEL-49781</changelog>
  <changelog author="Pierguido Lambri &lt;plambri@redhat.com&gt; = 4.8.0-1" date="1725883200">- New upstream release
  Resolves: RHEL-58096</changelog>
  <changelog author="Jan Jansky &lt;jjansky@redhat.com&gt; = 4.8.0-2" date="1726747200">- Update to 4.8.0
  Resolves: RHEL-58096</changelog>
  <changelog author="Jan Jansky &lt;jjansky@redhat.com&gt; = 4.8.0-3" date="1727265600">- Update 4.8.0
  Resolves: RHEL-58096</changelog>
  <changelog author="Jan Jansky &lt;jjansky@redhat.com&gt; = 4.8.0-4" date="1727438400">- Added credentials obfuscation from multiple files
  Resolves: RHEL-58096</changelog>
  <changelog author="Jan Jansky &lt;jjansky@redhat.com&gt; = 4.8.0-5" date="1728993600">- Rebase to 4.8.0 and adding credential obfuscation
  Resolves: RHEL-58096</changelog>
  <changelog author="Jan Jansky &lt;jjansky@redhat.com&gt; = 4.8.1-1" date="1729684800">- Update to 4.8.1 in RHEL 9
  Resolves: RHEL-64159</changelog>
  <changelog author="Jan Jansky &lt;jjansky@redhat.com&gt; = 4.8.2-1" date="1736251200">- Update to 4.8.2 in RHEL 9
  Resolves: RHEL-72942</changelog>
</package>
<package pkgid="9384bc253822c2a4898ee44c4de17d7e632b7cf5b7fd701fa20faaf63155d6ef" name="sos" arch="src">
  <version epoch="0" ver="4.8.2" rel="2.el9_5"/>
  <changelog author="Pierguido Lambri &lt;plambri@redhat.com&gt; = 4.7.2-1" date="1718971200">- New upstream release
  Resolves: RHEL-49781</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 4.7.2-3" date="1724241600">- reverting RHEL-22732 patch due to regressions
  Resolves: RHEL-49781</changelog>
  <changelog author="Pierguido Lambri &lt;plambri@redhat.com&gt; = 4.8.0-1" date="1725883200">- New upstream release
  Resolves: RHEL-58096</changelog>
  <changelog author="Jan Jansky &lt;jjansky@redhat.com&gt; = 4.8.0-2" date="1726747200">- Update to 4.8.0
  Resolves: RHEL-58096</changelog>
  <changelog author="Jan Jansky &lt;jjansky@redhat.com&gt; = 4.8.0-3" date="1727265600">- Update 4.8.0
  Resolves: RHEL-58096</changelog>
  <changelog author="Jan Jansky &lt;jjansky@redhat.com&gt; = 4.8.0-4" date="1727438400">- Added credentials obfuscation from multiple files
  Resolves: RHEL-58096</changelog>
  <changelog author="Jan Jansky &lt;jjansky@redhat.com&gt; = 4.8.0-5" date="1728993600">- Rebase to 4.8.0 and adding credential obfuscation
  Resolves: RHEL-58096</changelog>
  <changelog author="Jan Jansky &lt;jjansky@redhat.com&gt; = 4.8.1-1" date="1729684800">- Update to 4.8.1 in RHEL 9
  Resolves: RHEL-64159</changelog>
  <changelog author="Jan Jansky &lt;jjansky@redhat.com&gt; = 4.8.2-1" date="1736251200">- Update to 4.8.2 in RHEL 9
  Resolves: RHEL-72942</changelog>
  <changelog author="Jan Jansky &lt;jjansky@redhat.com&gt; = 4.8.2-2" date="1737720000">- Add new plugin aap_containerized
  Resolves: RHEL-76057</changelog>
</package>
<package pkgid="6608955253d225cea997edcdacf0ed10a3e6dc3c5cc9b183b0177095ca409973" name="squid" arch="src">
  <version epoch="7" ver="5.5" rel="14.el9_5.3"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 7:5.5-7" date="1699790400">- Resolves: RHEL-14820 - squid: squid: denial of Servicein FTP
- Resolves: RHEL-14809 - squid: squid: Denial of Service in HTTP Digest
  Authentication
- Resolves: RHEL-14781 - squid: squid: Request/Response smuggling in HTTP/1.1
  and ICAP</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 7:5.5-8" date="1701777600">- Resolves: RHEL-14802 - squid: multiple issues in HTTP response caching</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 7:5.5-9" date="1706788800">- Resolves: RHEL-18354 - squid: Buffer over-read in the HTTP Message processing
  feature (CVE-2023-49285)
- Resolves: RHEL-18345 - squid: Incorrect Check of Function Return Value In
  Helper Process management (CVE-2023-49286)
- Resolves: RHEL-18146 - squid crashes in assertion when a parent peer exists
- Resolves: RHEL-18231 - squid: Denial of Service in SSL Certificate validation
  (CVE-2023-46724)
- Resolves: RHEL-15912 - squid: NULL pointer dereference in the gopher protocol
  code (CVE-2023-46728)</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 7:5.5-10" date="1706875200">- Resolves: RHEL-19556 - squid: denial of service in HTTP request
  parsing (CVE-2023-50269)</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 7:5.5-12" date="1710849600">- Resolves: RHEL-28530 - squid: Denial of Service in HTTP Chunked
  Decoding (CVE-2024-25111)
- Resolves: RHEL-26092 - squid: denial of service in HTTP header
  parser (CVE-2024-25617)</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 7:5.5-13" date="1715256000">- Resolves: RHEL-30352 - squid v5 crashes with SIGABRT when ipv6 is disabled
  at kernel level but it is asked to connect to an ipv6 address by a client</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 7:5.5-14" date="1719835200">- Resolves: RHEL-45057 - squid: Out-of-bounds write error may lead to Denial of 
  Service (CVE-2024-37894)
- Resolves: RHEL-22594 - squid: vulnerable to a Denial of Service attack against
  Cache Manager error responses (CVE-2024-23638)</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 7:5.5-14.1" date="1728907200">- Resolves: RHEL-62332 - (Regression) Transfer-encoding:chunked data is not sent
  to the client in its complementary</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 7:5.5-14.2" date="1729684800">- Resolves: RHEL-64425 TCP_MISS_ABORTED/100 erros when uploading</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 7:5.5-14.3" date="1730980800">- Disable ESI support
- Resolves: RHEL-65076 - CVE-2024-45802 squid: Denial of Service processing ESI
  response content</changelog>
</package>
<package pkgid="5d38027fab71a65a45c6fa424759529e219695cbcb1c4b0328d94bf20e5abd3c" name="sssd" arch="src">
  <version epoch="0" ver="2.9.5" rel="4.el9_5.4"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.4-6" date="1713441600">- Resolves: RHEL-27209 - Race condition during authorization leads to GPO policies functioning inconsistently [rhel-9.4.0]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.4-7" date="1714392000">- Relates: RHEL-33645 - Rebase Samba to the latest 4.20.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.5-1" date="1715860800">- Resolves: RHEL-36586 - Rebase SSSD for RHEL 9.5
- Resolves: RHEL-27716 - SSSD fails to process AD groups with 'Global Scope' correctly causing incomplete group-membership on RHEL if cache is empty
- Resolves: RHEL-17659 - [RfE] SSSD Failover Enhancements
- Resolves: RHEL-35781 - Passkey errors when handling multiple altSecurityIdentities values
- Resolves: RHEL-30142 - sssd_pac is crashing
- Resolves: RHEL-22206 - Errors in krb5_child.log every time a user authenticates - Pre-authentication failed: No pkinit_anchors supplied
- Resolves: RHEL-32595 - Excessive "Domain not found' messages logged to sssd_nss &amp; sssd_be in multidomain AD forest
- Resolves: RHEL-28666 - sssctl config-check is reporting false positive error msg
- Resolves: RHEL-29454 - NULL dereference in inotify handling
- Resolves: RHEL-1654 - Improve documentation for allowing e-mail address as username</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.5-2" date="1719230400">- Resolves: RHEL-40742 - passkey_child with wrong owner
- Resolves: RHEL-41047 - sssd is skipping GPO evaluation with auto_private_groups
- Resolves: RHEL-40570 - GPO access the wrong memory location</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.5-3" date="1720440000">- Resolves: RHEL-40742 - passkey_child with wrong owner</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.5-4" date="1721304000">- Resolves: RHEL-49711 - SYSDB: remove index on dataExpireTimestamp
- Resolves: RHEL-49811 - 2FA is being enforced after upgrading 2.9.1-&gt;2.9.4</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.5-4.1" date="1727179200">- Resolves: RHEL-59876 - EL9/CentOS Stream 9 lost offline smart card authentication
- Resolves: RHEL-50912 - possible regression of rhbz#2196521</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.5-4.2" date="1731067200">- Resolves: RHEL-66268 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-9.5.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.5-4.3" date="1731931200">- Resolves: RHEL-67673 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-9.5.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.5-4.4" date="1732276800">- Resolves: RHEL-68508 - sssd backend process segfaults when krb5.conf is invalid [rhel-9.5.z]</changelog>
</package>
<package pkgid="4f62dd2116b2c10a208817b941c547f5703a5c401435d0d26640da17bba5e3b0" name="tbb" arch="src">
  <version epoch="0" ver="2020.3" rel="8.el9_5.1"/>
  <changelog author="Jonathan Wakely &lt;jwakely@redhat.com&gt; - 2020.3-8.1" date="1738670400">- Remove jQuery from Doxygen output (RHEL-77693)</changelog>
</package>
<package pkgid="c3f806c1e8087ffd8383b21f1f477e5b67b0d3eaf4246c4c75be598e4204e444" name="thunderbird" arch="src">
  <version epoch="0" ver="128.4.0" rel="1.el9_5"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 115.12.1-1" date="1718712000">- Update to 115.12.1 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 128.0b4-1" date="1719489600">- Update to 128.0b4</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 128.0-1" date="1720612800">- Update to 128.0 final</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 128.1.1-2" date="1725278400">- Update to 128.1.1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 128.2.0-1" date="1725537600">- Update to 128.2.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 128.3.0-1" date="1727697600">- Update to 127.3.0</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 128.3.1-1" date="1728475200">- Update to 128.3.1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 128.4.0-1" date="1730116800">- Update to 128.4.0 build1</changelog>
  <changelog author="Linux Engineering Team &lt;dl_le@navercorp.com&gt; - 128.4.0-1" date="1732190400">- Add Navix debranding</changelog>
  <changelog author="Linux Engineering Team &lt;dl_le@navercorp.com&gt; - 128.4.0-1" date="1732190401">- Add Navix debranding</changelog>
</package>
<package pkgid="2aeb1aff26bc94553ec41e11a9067f927da18a99b415ea560a94dbe2000a62e3" name="thunderbird" arch="src">
  <version epoch="0" ver="128.5.0" rel="1.el9_5"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 128.0b4-1" date="1719489600">- Update to 128.0b4</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 128.0-1" date="1720612800">- Update to 128.0 final</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 128.1.1-2" date="1725278400">- Update to 128.1.1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 128.2.0-1" date="1725537600">- Update to 128.2.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 128.3.0-1" date="1727697600">- Update to 127.3.0</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 128.3.1-1" date="1728475200">- Update to 128.3.1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 128.4.0-1" date="1730116800">- Update to 128.4.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 128.5.0-1" date="1732622400">- Update to 128.5.0 build1</changelog>
  <changelog author="Linux Engineering Team &lt;dl_le@navercorp.com&gt; - 128.5.0-1" date="1733227200">- Add Navix debranding</changelog>
  <changelog author="Linux Engineering Team &lt;dl_le@navercorp.com&gt; - 128.5.0-1" date="1733227201">- Add Navix debranding</changelog>
</package>
<package pkgid="aabd427e0a548065763eae4f3544b395c7aea985c58375422977071c4fc98def" name="tigervnc" arch="src">
  <version epoch="0" ver="1.14.1" rel="1.el9_5"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.13.1-3" date="1696852800">- Support username alias in PlainUsers
  Resolves: RHEL-8430</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.13.1-4" date="1698840000">- Fix CVE-2023-5380 tigervnc: xorg-x11-server: Use-after-free bug in DestroyWindow
  Resolves: RHEL-15237

- Fix CVE-2023-5367 tigervnc: xorg-x11-server: Out-of-bounds write in XIChangeDeviceProperty/RRChangeOutputProperty
  Resolves: RHEL-15249</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.13.1-5" date="1702900800">- Fix CVE-2023-6377 tigervnc: xorg-x11-server: out-of-bounds memory reads/writes in XKB button actions
  Resolves: RHEL-18414
- Fix CVE-2023-6478 tigervnc: xorg-x11-server: out-of-bounds memory read in RRChangeOutputProperty and RRChangeProviderProperty
  Resolves: RHEL-18426</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.13.1-6" date="1704715200">- Use dup() to get available file descriptor when using -inetd option
  Resolves: RHEL-19858</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.13.1-7" date="1705924800">- Fix CVE-2024-21886 tigervnc: xorg-x11-server: heap buffer overflow in DisableDevice
  Resolves: RHEL-20389
- Fix CVE-2024-21885 tigervnc: xorg-x11-server: heap buffer overflow in XISendDeviceHierarchyEvent
  Resolves: RHEL-20383
- Fix CVE-2024-0229 tigervnc: xorg-x11-server: reattaching to different master device may lead to out-of-bounds memory access
  Resolves: RHEL-20533
- Fix CVE-2023-6816 tigervnc: xorg-x11-server: Heap buffer overflow in DeviceFocusEvent and ProcXIQueryPointer
  Resolves: RHEL-21213</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.13.1-8" date="1707307200">- Fix copy/paste error in the DeviceStateNotify
  Resolves: RHEL-20533</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.13.1-9" date="1713268800">- Fix CVE-2024-31080 tigervnc: xorg-x11-server: Heap buffer overread/data leakage in ProcXIGetSelectedEvents
  Resolves: RHEL-30756
- Fix CVE-2024-31083 tigervnc: xorg-x11-server: User-after-free in ProcRenderAddGlyphs
  Resolves: RHEL-30768
- Fix CVE-2024-31081 tigervnc: xorg-x11-server: Heap buffer overread/data leakage in ProcXIPassiveGrabDevice
  Resolves: RHEL-30762</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.13.1-10" date="1716897600">- vncconfig: add option to force view-only remote client connections
  Resolves: RHEL-12144</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.13.1-11" date="1722859200">- vncsession: use /bin/sh if the user shell is not set
  Resolves: RHEL-50679</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.14.1-1" date="1731067200">- 1.14.1
  Resolves: RHEL-66600
- Fix CVE-2024-9632: xorg-x11-server: heap-based buffer overflow privilege escalation vulnerability
  Resolves: RHEL-62000</changelog>
</package>
<package pkgid="50a30f5631b52847ed594082b1479c31059322df50526f3c487e47349396e30d" name="tuned" arch="src">
  <version epoch="0" ver="2.24.0" rel="2.el9_5"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.20.0-1" date="1676635200">- new release
  - rebased tuned to latest upstream
    related: rhbz#2133815</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.21.0-0.1.rc1" date="1692532800">- new release
  - rebased tuned to latest upstream
    resolves: rhbz#2182117
  - plugin_scheduler: fix perf fd leaks
    resolves: rhbz#2173938
  - allow skipping rollback when restarting TuneD or switching profile
    resolves: rhbz#2203142
  - function_calc_isolated_cores: no errors for offline CPUs
    resolves: rhbz#2217015</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.21.0-1" date="1693310400">- new release
  - api: fixed stop method not to require any parameter
    resolves: rhbz#2235637</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.22.0-0.1.rc1" date="1707480000">- new release
  - rebased tuned to latest upstream
    resolves: RHEL-17121
  - print all arguments of failing commands in error messages
    resolves: RHEL-3689
  - plugin_sysctl: added support for sysctl names with slash
    resolves: RHEL-3707
  - tuned-adm: added support for moving devices between plugin instances
    resolves: RHEL-15141
  - api: added methods for retrieval of plugin instances and devices
    resolves: RHEL-15137
  - plugin_cpu: amd-pstate mentioned instead of just intel_pstate
    resolves: RHEL-16469
  - hotplug: do not report ENOENT errors on device remove
    resolves: RHEL-11342
  - plugin_sysctl: expand variables when reporting overrides
    resolves: RHEL-18972
  - plugin_acpi: new plugin which handles ACPI platform_profile
    resolves: RHEL-16966
  - plugin_bootloader: skip calling rpm-ostree kargs in no-op case
    resolves: RHEL-20767
  - plugin_cpu: support cstate settings of pm_qos_resume_latency_us
    resolves: RHEL-21129
  - scheduler: add option for ignoring IRQs affinity
    resolves: RHEL-21923
  - plugin_intel_uncore: new plugin for uncore setting</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.22.0-1" date="1708084800">- new release
  - rebased tuned to latest upstream
    related: RHEL-17121</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.22.1-1" date="1708603200">- new release
  - rebased tuned to latest upstream
    related: RHEL-17121
  - renamed intel_uncore plugin to uncore
  - network-throughput: increased net.ipv4.tcp_rmem default value
    resolves: RHEL-25847</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.24.0-0.1.rc1" date="1721908800">- new release
  - rebased tuned to latest upstream
    resolves: RHEL-50568
  - spec: create /etc/tuned/profiles directory
  - hotplug: wait for device initialization
  - sap-netweaver: increased vm.max_map_count
    resolves: RHEL-31757
  - daemon: buffer sighup signal
    resolves: RHEL-31180
  - added an option to configure profile directories
    resolves: RHEL-26157
  - api: added commands to dynamically create/destroy instances
  - functions: added 'intel_recommended_pstate'
  - functions: added 'log' which helps with debugging
  - functions: added 'package2cpus' and 'packages2uncores' matchers
  - functions: added 'lscpu' to list CPU details
  - plugins: added plugin_irq
  - plugin_video: added support for amdgpu `panel_power_savings` attribute
  - plugin_cpu: check that writes are necessary if they may cause redundant IPIs
    resolves: RHEL-25613
  - plugin_uncore: allow to configure frequency limits using percent
  - amd-pstate: added support for controlling core performance boost
  - plugin_scheduler: adjusted error logging in _set_affinity
    resolves: RHEL-46560
  - plugin_audio: enabled controller reset to fix suspend with NVIDIA
  - plugin_irq: fixed expansion of variables
  - plugin_irqbalance: switched to IRQBALANCE_BANNED_CPULIST</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.24.0-0.2.rc1" date="1721995200">- fixed functions packaging and added explicit conflict with power-profiles-daemon
  related: RHEL-50568</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.24.0-1" date="1723032000">- new release
  - rebased tuned to latest upstream
    related: RHEL-50568
  - clear plugin repository when stopping tuning
  - man: add description of the balanced-battery profile</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.24.0-2" date="1731931200">- Fixed privileged execution of arbitrary scripts by active local user,
  (CVE-2024-52336)
  Resolves: RHEL-66639
- Added sanity checks for API methods parameters, (CVE-2024-52337)
  Resolves: RHEL-66616</changelog>
</package>
<package pkgid="c8be6d8021127a838f70f446144a8acae5c2b4256d70c5efcf2253af005e4549" name="tzdata" arch="src">
  <version epoch="0" ver="2024b" rel="2.el9"/>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2022g-2" date="1673006400">- Include leap-seconds.list in tzdata install. (#2157982)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2023a-1" date="1679486400">- Rebase to tzdata-2023a
  - Egypt reintroduced DST, from April through October.
  - Morocco springs forward April 23, not April 30.
  - Palestine delayed the start of DST this year.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2023b-1" date="1679659200">- Rebase to tzdata-2023b
  - Lebanon will transition to DST on April 20/21, not March 25/26.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2023c-1" date="1680004800">- Rebase to tzdata-2023c
  - Lebanon reversed the change added in tzdata-2023b.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2023c-2" date="1692273600">- Bump release to test recent process changes. (RHEL-1323)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2023d-1" date="1704110400">- Rebase to tzdata-2023d
  - Include time zone changes for Ittoqqortoormiit, Greenland
    and Vostok, Antarctica.
  - Update the expiration date for the leap-seconds.list file.
    No new leap seconds were added.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2024a-1" date="1706788800">- Rebase to tzdata-2024a
  - Kazakhstan will transition from UTC+6 to UTC+5 on 2024-03-01.
  - Palestine will spring forward a week later than previously
    predicted.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2024a-2" date="1710417600">- Add java patch to fix incorrect calculations for
  Africa/Casablanca starting in 2027. (RHEL-26860)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2024b-1" date="1726056000">- Update to tzdata-2024b
  - Improve historical data for Mexico, Mongolia, and Portugal.
  - System V names are now obsolescent.
  - The main data form now uses %z.
  - The code now conforms to RFC 8536 for early timestamps.
  - Support POSIX.1-2024, which removes asctime_r and ctime_r.
  - Assume POSIX.2-1992 or later for shell scripts.
  - SUPPORT_C89 now defaults to 1.
  - Include two upstream patches for month names as in April vs Apr.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2024b-2" date="1727438400">- Harden against links to removed zones (RHEL-60063)</changelog>
</package>
<package pkgid="4d9fc03b9f9ada565ff28fa67551426ce6fdc9971d27113eea2f45a4c049a6f3" name="tzdata" arch="src">
  <version epoch="0" ver="2025a" rel="1.el9"/>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2023b-1" date="1679659200">- Rebase to tzdata-2023b
  - Lebanon will transition to DST on April 20/21, not March 25/26.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2023c-1" date="1680004800">- Rebase to tzdata-2023c
  - Lebanon reversed the change added in tzdata-2023b.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2023c-2" date="1692273600">- Bump release to test recent process changes. (RHEL-1323)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2023d-1" date="1704110400">- Rebase to tzdata-2023d
  - Include time zone changes for Ittoqqortoormiit, Greenland
    and Vostok, Antarctica.
  - Update the expiration date for the leap-seconds.list file.
    No new leap seconds were added.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2024a-1" date="1706788800">- Rebase to tzdata-2024a
  - Kazakhstan will transition from UTC+6 to UTC+5 on 2024-03-01.
  - Palestine will spring forward a week later than previously
    predicted.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2024a-2" date="1710417600">- Add java patch to fix incorrect calculations for
  Africa/Casablanca starting in 2027. (RHEL-26860)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2024b-1" date="1726056000">- Update to tzdata-2024b
  - Improve historical data for Mexico, Mongolia, and Portugal.
  - System V names are now obsolescent.
  - The main data form now uses %z.
  - The code now conforms to RFC 8536 for early timestamps.
  - Support POSIX.1-2024, which removes asctime_r and ctime_r.
  - Assume POSIX.2-1992 or later for shell scripts.
  - SUPPORT_C89 now defaults to 1.
  - Include two upstream patches for month names as in April vs Apr.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2024b-2" date="1727438400">- Harden against links to removed zones (RHEL-60063)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2024b-3" date="1733486400">- Don't use -source 1.6 and -target 1.6 with javac.  (RHEL-70308)</changelog>
  <changelog author="Patsy Griffin &lt;pats@redhat.com&gt; - 2025a-1" date="1737460800">Update to tzdata-2025a (RHEL-74308)
  - Paraguay is now permanently at -03. This impacts timestamps
    starting on 2025-03-22.
  - Includes improvements to pre-1991 data for the Philippines.
  - Etc/Unknown is now reserved.</changelog>
</package>
<package pkgid="95ca26c88eb8d138aee5db6555fe6269fe46f98165e6b6796a17c5ba57249271" name="unbound" arch="src">
  <version epoch="0" ver="1.16.2" rel="8.el9_5.1"/>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1.16.2-6" date="1708084800">- Fix KeyTrap - Extreme CPU consumption in DNSSEC validator CVE-2023-50387
- Fix Preparing an NSEC3 closest encloser proof can exhaust CPU resources CVE-2023-50868
- Resolves: RHEL-25671
- Resolves: RHEL-25643</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 1.16.2-7" date="1709121600">- Ensure only unbound group can change configuration (CVE-2024-1488)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 1.16.2-8" date="1710158400">- Ensure group access correction reaches also updated configs (CVE-2024-1488)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 1.16.2-8.1" date="1731412800">- Prevent unbounded name compression (CVE-2024-8508)</changelog>
</package>
<package pkgid="8968816b0f71018bba1f407d0b4768f52482df3fc56f78d2e2d1837afca912ee" name="virtio-win" arch="src">
  <version epoch="0" ver="1.9.44" rel="0.el9_5"/>
  <changelog author="Vadim Rozenfeld &lt;vrozenfe@redhat.com&gt;" date="1693137600">- Update installer 1.9.35.0 with the latest agents RHEL-9.3.0
- Related: #420</changelog>
  <changelog author="Vadim Rozenfeld &lt;vrozenfe@redhat.com&gt;" date="1702209600">- Update installer 1.9.36.0 with the latest agents RHEL-9.3.0.Z
- Related: #18403</changelog>
  <changelog author="Vadim Rozenfeld &lt;vrozenfe@redhat.com&gt;" date="1709640000">- Update installer 1.9.37.0 with the latest agents RHEL-9.4.0
- Related: #18190</changelog>
  <changelog author="Vadim Rozenfeld &lt;vrozenfe@redhat.com&gt;" date="1709812800">- Update installer 1.9.38.0 with the latest agents RHEL-9.4.0
- Related: #18190</changelog>
  <changelog author="Vadim Rozenfeld &lt;vrozenfe@redhat.com&gt;" date="1710158400">- Update installer 1.9.39.0 with the latest agents RHEL-8.10.0
- Related: #21536</changelog>
  <changelog author="Vadim Rozenfeld &lt;vrozenfe@redhat.com&gt;" date="1716465600">- Update installer 1.9.40.0 with the latest agents RHEL-9.4.0.Z
- Related: #37139</changelog>
  <changelog author="Vadim Rozenfeld &lt;vrozenfe@redhat.com&gt;" date="1724587200">- Update installer 1.9.41.0 with the latest agents RHEL-9.5.0
- Related: #33580</changelog>
  <changelog author="Vadim Rozenfeld &lt;vrozenfe@redhat.com&gt;" date="1724846400">- Update installer 1.9.42.0 with the latest agents RHEL-9.5.0
- Related: #33580</changelog>
  <changelog author="Vadim Rozenfeld &lt;vrozenfe@redhat.com&gt;" date="1726228800">- Update installer 1.9.43.0 with the latest agents RHEL-9.5.0
- Related: #33580</changelog>
  <changelog author="Vadim Rozenfeld &lt;vrozenfe@redhat.com&gt;" date="1731931200">- Update installer 1.9.44.0 with the latest agents RHEL-9.5.z
- Related: #66540</changelog>
</package>
<package pkgid="7381b509cac33a355bcce25a495ec1489895f11b65f01d4df09e934a09642db7" name="webkit2gtk3" arch="src">
  <version epoch="0" ver="2.46.3" rel="1.el9_5"/>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.42.5-1" date="1707134400">- Update to 2.42.5
  Resolves: RHEL-3960</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.44.1-1" date="1712836800">- Update to 2.44.1
  Resolves: RHEL-32578
  Resolves: RHEL-29637</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.44.2-1" date="1715860800">- Update to 2.44.2
  Resolves: RHEL-32578</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.44.3-1" date="1723550400">- Update to 2.44.3
  Resolves: RHEL-32578</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.44.3-2" date="1723723200">- Add patch to fix WebAssembly
  Resolves: RHEL-32578</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.46.1-1" date="1728388800">- Update to 2.46.1
  Resolves: RHEL-59185</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.46.1-2" date="1728561600">- Add patch to keep GSocketMonitor callback alive
  Resolves: RHEL-59185</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.46.2-1" date="1729512000">- Update to 2.46.2
- Add patch to disable Evolution sandbox warning</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.46.3-1" date="1730289600">- Update to 2.46.3</changelog>
  <changelog author="Linux Engineering Team &lt;dl_le@navercorp.com&gt; - 2.46.3-1" date="1732190400">- Add Navix specific changes</changelog>
</package>
<package pkgid="a6c185845738b96ffd54101a44430e251a94dabcd3b0feec385398b6ba00c124" name="webkit2gtk3" arch="src">
  <version epoch="0" ver="2.46.3" rel="2.el9_5"/>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.44.1-1" date="1712836800">- Update to 2.44.1
  Resolves: RHEL-32578
  Resolves: RHEL-29637</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.44.2-1" date="1715860800">- Update to 2.44.2
  Resolves: RHEL-32578</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.44.3-1" date="1723550400">- Update to 2.44.3
  Resolves: RHEL-32578</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.44.3-2" date="1723723200">- Add patch to fix WebAssembly
  Resolves: RHEL-32578</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.46.1-1" date="1728388800">- Update to 2.46.1
  Resolves: RHEL-59185</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.46.1-2" date="1728561600">- Add patch to keep GSocketMonitor callback alive
  Resolves: RHEL-59185</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.46.2-1" date="1729512000">- Update to 2.46.2
- Add patch to disable Evolution sandbox warning</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.46.3-1" date="1730289600">- Update to 2.46.3</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.46.3-2" date="1732536000">- Add patch for CVE-2024-44309</changelog>
  <changelog author="Linux Engineering Team &lt;dl_le@navercorp.com&gt; - 2.46.3-2" date="1733227200">- Add Navix specific changes</changelog>
</package>
<package pkgid="114138f4d26968a4a773ebb8abcf5fbe64c380ad7581f63a37dfa7cb113bfd8a" name="webkit2gtk3" arch="src">
  <version epoch="0" ver="2.46.5" rel="1.el9_5"/>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.44.2-1" date="1715860800">- Update to 2.44.2
  Resolves: RHEL-32578</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.44.3-1" date="1723550400">- Update to 2.44.3
  Resolves: RHEL-32578</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.44.3-2" date="1723723200">- Add patch to fix WebAssembly
  Resolves: RHEL-32578</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.46.1-1" date="1728388800">- Update to 2.46.1
  Resolves: RHEL-59185</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.46.1-2" date="1728561600">- Add patch to keep GSocketMonitor callback alive
  Resolves: RHEL-59185</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.46.2-1" date="1729512000">- Update to 2.46.2
- Add patch to disable Evolution sandbox warning</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.46.3-1" date="1730289600">- Update to 2.46.3</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.46.3-2" date="1732536000">- Add patch for CVE-2024-44309</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.46.5-1" date="1734523200">- Update to 2.46.5</changelog>
  <changelog author="Linux Engineering Team &lt;dl_le@navercorp.com&gt; - 2.46.5-1" date="1736856000">- Add Navix specific changes</changelog>
</package>
<package pkgid="b458bc5ba7a6458abc311bb69f72bc43da073e54bc4f9675533409cd09e99f06" name="xerces-j2" arch="src">
  <version epoch="0" ver="2.12.1" rel="8.el9_5"/>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 2.12.1-7" date="1732017600">- Rebuild with regenerated Requires on Java</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 2.12.1-8" date="1732190400">- Fix patch usage</changelog>
</package>
<package pkgid="3a761711ff180053e84a0bc7649ae18dcdb9e29f7a08f7aa7badc0eb1a00cbf7" name="xml-commons-apis" arch="src">
  <version epoch="0" ver="1.4.01" rel="37.el9_5"/>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 1.4.01-37" date="1732017600">- Rebuild with regenerated Requires on Java</changelog>
</package>
<package pkgid="d8fe585fef64e8ad4358051b1cae9d4f1887d08d2003ad090c24a992991371c4" name="xml-commons-resolver" arch="src">
  <version epoch="0" ver="1.2" rel="39.el9_5"/>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 1.2-37" date="1731067200">- Rebuild with regenerated Requires on Java</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 1.2-38" date="1732017600">- Rebuild with regenerated Requires on Java</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 1.2-39" date="1732190400">- Fix patch usage</changelog>
</package>
</otherdata>